Edit tour

Windows Analysis Report
https://www.virustotal.com/gui/domain/ghabovethec.info/detection#:~:text=API-,ghabovethec.info,-Registrar

Overview

General Information

Sample URL:	https://www.virustotal.com/gui/domain/ghabovethec.info/detection#:~:text=API-,ghabovethec.info,-Registrar
Analysis ID:	1559894
Infos:

Detection

AveMaria

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected AveMaria stealer

Yara detected Costura Assembly Loader

HTML body contains password input but no form action

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5180 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5500 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1912,i,7117171991923956869,650583693760184098,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4488 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4052 --field-trial-handle=1912,i,7117171991923956869,650583693760184098,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3808 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4788 --field-trial-handle=1912,i,7117171991923956869,650583693760184098,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6348 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.virustotal.com/gui/domain/ghabovethec.info/detection#:~:text=API-,ghabovethec.info,-Registrar" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Ave Maria, AveMariaRAT, avemaria	Information stealer which uses AutoIT for wrapping.	Anunak	http://blog.morphisec.com/threat-alert-ave-maria-infostealer-on-the-rise-with-new-stealthier-delivery https://asec.ahnlab.com/en/36629/ https://blog.cyber5w.com/analyzing-macro-enabled-office-documents https://blog.morphisec.com/syk-crypter-discord https://blog.talosintelligence.com/2020/09/salfram-robbing-place-without-removing.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.ave_maria

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_402	JoeSecurity_CosturaAssemblyLoader	Yara detected Costura Assembly Loader	Joe Security
dropped/chromecache_270	JoeSecurity_AveMaria	Yara detected AveMaria stealer	Joe Security

HTTP traffic detected: POST /ui/signin?relationships=groups%2Cparent_group HTTP/1.1Host: www.virustotal.comConnection: keep-aliveContent-Length: 4sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-app-version: v1x319x0X-Tool: vt-ui-mainsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonaccept: application/jsonAccept-Ianguage: en-US,en;q=0.9,es;q=0.8X-VT-Anti-Abuse-Header: MTg1MjY0MTYzNTktWkc5dWRDQmlaU0JsZG1scy0xNzMyMTU2OTMwLjEwNw==sec-ch-ua-platform: "Windows"Origin: https://www.virustotal.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/jsonVary: Accept-EncodingX-Cloud-Trace-Context: 75f91a7fc23e907b3c68a62298b0c781Date: Thu, 21 Nov 2024 02:42:30 GMTServer: Google FrontendContent-Length: 52Connection: close

Source: chromecache_412.2.dr	String found in binary or memory: http://meyerweb.com/eric/tools/css/reset/
Source: chromecache_304.2.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_304.2.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_304.2.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_304.2.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_196.2.dr, chromecache_360.2.dr, chromecache_379.2.dr, chromecache_230.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_277.2.dr	String found in binary or memory: http://twitter.com/intent/tweet?url=$
Source: chromecache_434.2.dr, chromecache_378.2.dr	String found in binary or memory: http://www.google.com
Source: chromecache_434.2.dr, chromecache_378.2.dr	String found in binary or memory: http://www.google.com/
Source: chromecache_434.2.dr, chromecache_378.2.dr	String found in binary or memory: http://www.google.com/support/websearch/bin/answer.py?hl=
Source: chromecache_360.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_243.2.dr, chromecache_320.2.dr	String found in binary or memory: https://accounts.google.com/gsi/client
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_420.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_212.2.dr, chromecache_312.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_269.2.dr, chromecache_219.2.dr, chromecache_292.2.dr, chromecache_424.2.dr, chromecache_398.2.dr, chromecache_285.2.dr, chromecache_420.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_452.2.dr, chromecache_373.2.dr, chromecache_306.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_243.2.dr, chromecache_320.2.dr	String found in binary or memory: https://cloud.google.com/dialogflow/cx/docs/concept/integration/dialogflow-messenger/fulfillment.
Source: chromecache_452.2.dr, chromecache_373.2.dr, chromecache_306.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_243.2.dr, chromecache_320.2.dr	String found in binary or memory: https://cloud.google.com/terms/service-terms
Source: chromecache_434.2.dr, chromecache_378.2.dr	String found in binary or memory: https://cse.google.com/?ref=b&hl=en
Source: chromecache_434.2.dr, chromecache_378.2.dr	String found in binary or memory: https://cse.google.com/cse
Source: chromecache_260.2.dr	String found in binary or memory: https://cse.google.com/cse.js?cx=003414466004237966221:dgg7iftvryo
Source: chromecache_434.2.dr, chromecache_378.2.dr	String found in binary or memory: https://cse.google.com/cse/element/v1
Source: chromecache_434.2.dr, chromecache_378.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_434.2.dr, chromecache_378.2.dr	String found in binary or memory: https://csqr-autopush.corp.google.com/cse/element/v1
Source: chromecache_320.2.dr	String found in binary or memory: https://d30y9cdsu7xlg0.cloudfront.net/png/29715-200.png
Source: chromecache_434.2.dr, chromecache_378.2.dr	String found in binary or memory: https://developers.google.com/custom-search/docs/element.
Source: chromecache_452.2.dr, chromecache_373.2.dr, chromecache_306.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_452.2.dr, chromecache_373.2.dr, chromecache_306.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_452.2.dr, chromecache_373.2.dr, chromecache_306.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_243.2.dr, chromecache_320.2.dr	String found in binary or memory: https://dialogflow.cloud.google.com/v1/cx/integrations/messenger/webhook
Source: chromecache_243.2.dr, chromecache_320.2.dr	String found in binary or memory: https://dialogflow.cloud.google.com/v1/cx/locations/
Source: chromecache_243.2.dr, chromecache_320.2.dr	String found in binary or memory: https://dialogflow.googleapis.com/v3
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_277.2.dr	String found in binary or memory: https://docs.virustotal.com/docs/graph-commonalities
Source: chromecache_277.2.dr	String found in binary or memory: https://docs.virustotal.com/docs/graph-management
Source: chromecache_277.2.dr	String found in binary or memory: https://docs.virustotal.com/docs/higher-quota
Source: chromecache_277.2.dr	String found in binary or memory: https://docs.virustotal.com/docs/virustotal-intelligence-introduction
Source: chromecache_277.2.dr	String found in binary or memory: https://docs.virustotal.com/reference/files
Source: chromecache_268.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_291.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=
Source: chromecache_243.2.dr, chromecache_320.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_320.2.dr	String found in binary or memory: https://fonts.googleapis.com/icon?family=Material
Source: chromecache_268.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v62/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RF
Source: chromecache_243.2.dr, chromecache_320.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/short-term/release/googlesymbols/cloud_download/default/24px.svg
Source: chromecache_288.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2)
Source: chromecache_243.2.dr, chromecache_320.2.dr	String found in binary or memory: https://github.com/chjj/)
Source: chromecache_196.2.dr, chromecache_360.2.dr, chromecache_379.2.dr, chromecache_230.2.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_243.2.dr, chromecache_320.2.dr	String found in binary or memory: https://github.com/markedjs/marked.
Source: chromecache_434.2.dr, chromecache_378.2.dr	String found in binary or memory: https://goo.gl/Gs1KIc.
Source: chromecache_420.2.dr	String found in binary or memory: https://google.com
Source: chromecache_420.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: https://music.youtube.com
Source: chromecache_420.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_269.2.dr, chromecache_219.2.dr, chromecache_292.2.dr, chromecache_424.2.dr, chromecache_398.2.dr, chromecache_285.2.dr, chromecache_420.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_378.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_289.2.dr, chromecache_332.2.dr	String found in binary or memory: https://recaptcha.net/recaptcha/api2/
Source: chromecache_360.2.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_243.2.dr, chromecache_320.2.dr	String found in binary or memory: https://speech.googleapis.com/v1p1beta1/speech:recognize?key=
Source: chromecache_269.2.dr, chromecache_219.2.dr, chromecache_292.2.dr, chromecache_424.2.dr, chromecache_420.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_312.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_243.2.dr, chromecache_320.2.dr	String found in binary or memory: https://storage.googleapis.com/
Source: chromecache_243.2.dr, chromecache_320.2.dr	String found in binary or memory: https://storage.googleapis.com/upload/storage/v1/b/
Source: chromecache_277.2.dr	String found in binary or memory: https://storage.googleapis.com/vticons/$
Source: chromecache_243.2.dr, chromecache_320.2.dr	String found in binary or memory: https://storage.mtls.cloud.google.com/
Source: chromecache_243.2.dr, chromecache_320.2.dr	String found in binary or memory: https://sts.googleapis.com/v1/token
Source: chromecache_434.2.dr, chromecache_378.2.dr	String found in binary or memory: https://support.google.com/programmable-search/answer/6001359#captcha
Source: chromecache_306.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_452.2.dr, chromecache_373.2.dr, chromecache_306.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_452.2.dr, chromecache_373.2.dr, chromecache_306.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_452.2.dr, chromecache_373.2.dr, chromecache_306.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_360.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/3037019#check_ad_blockers&zippy=%2Ccheck-your-extensions-i
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_212.2.dr, chromecache_312.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_269.2.dr, chromecache_219.2.dr, chromecache_292.2.dr, chromecache_424.2.dr, chromecache_398.2.dr, chromecache_285.2.dr, chromecache_420.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_212.2.dr, chromecache_312.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_212.2.dr, chromecache_312.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_212.2.dr, chromecache_312.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_420.2.dr, chromecache_378.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_212.2.dr, chromecache_312.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_434.2.dr, chromecache_378.2.dr	String found in binary or memory: https://www.google.com/cse/static
Source: chromecache_434.2.dr, chromecache_378.2.dr	String found in binary or memory: https://www.google.com/cse/static/element/
Source: chromecache_457.2.dr	String found in binary or memory: https://www.google.com/cse/static/element/%
Source: chromecache_378.2.dr	String found in binary or memory: https://www.google.com/cse/static/images/1x/
Source: chromecache_378.2.dr	String found in binary or memory: https://www.google.com/cse/static/images/2x/
Source: chromecache_200.2.dr, chromecache_457.2.dr	String found in binary or memory: https://www.google.com/cse/static/style/look/%
Source: chromecache_291.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5
Source: chromecache_277.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js
Source: chromecache_434.2.dr, chromecache_378.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?render=explicit
Source: chromecache_452.2.dr, chromecache_373.2.dr, chromecache_306.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_420.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_291.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk
Source: chromecache_291.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/16521530460/?gad_source=1&adview_type=3
Source: chromecache_320.2.dr	String found in binary or memory: https://www.googleapis.com/auth/cloud-platform
Source: chromecache_320.2.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_420.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_269.2.dr, chromecache_219.2.dr, chromecache_424.2.dr, chromecache_420.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_212.2.dr, chromecache_312.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_269.2.dr, chromecache_219.2.dr, chromecache_424.2.dr, chromecache_420.2.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_452.2.dr, chromecache_373.2.dr, chromecache_306.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__.
Source: chromecache_228.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: chromecache_243.2.dr, chromecache_320.2.dr	String found in binary or memory: https://www.gstatic.com/dialogflow-console/common/assets/dialogflow-messenger/sound-wave-silent.gif
Source: chromecache_243.2.dr, chromecache_320.2.dr	String found in binary or memory: https://www.gstatic.com/dialogflow-console/common/assets/dialogflow-messenger/sound-wave.gif
Source: chromecache_243.2.dr, chromecache_320.2.dr	String found in binary or memory: https://www.gstatic.com/dialogflow-console/common/assets/integrations/dialogflow-messenger/progress_
Source: chromecache_243.2.dr, chromecache_320.2.dr	String found in binary or memory: https://www.gstatic.com/external_hosted/highlightjs/highlight.pack.js
Source: chromecache_243.2.dr, chromecache_320.2.dr	String found in binary or memory: https://www.gstatic.com/external_hosted/highlightjs/styles/googlecode.css
Source: chromecache_243.2.dr, chromecache_320.2.dr	String found in binary or memory: https://www.gstatic.com/external_hosted/highlightjs/styles/googlecode.css);
Source: chromecache_289.2.dr, chromecache_224.2.dr, chromecache_385.2.dr, chromecache_332.2.dr, chromecache_232.2.dr, chromecache_336.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_277.2.dr	String found in binary or memory: https://www.linkedin.com/sharing/share-offsite/?url=$
Source: chromecache_269.2.dr, chromecache_219.2.dr, chromecache_292.2.dr, chromecache_424.2.dr, chromecache_420.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_224.2.dr, chromecache_336.2.dr	String found in binary or memory: https://www.recaptcha.net/recaptcha/enterprise/
Source: chromecache_352.2.dr	String found in binary or memory: https://www.virustotal.com/graph
Source: chromecache_352.2.dr	String found in binary or memory: https://www.virustotal.com/graph/
Source: chromecache_352.2.dr, chromecache_396.2.dr, chromecache_284.2.dr	String found in binary or memory: https://www.virustotal.com/graph/embed/g8a8c71844d5444f98fd3ef10e3ccc94f894c32f05f86417cb4c7605cdc8a
Source: chromecache_294.2.dr	String found in binary or memory: https://www.virustotal.com/gui/graphs
Source: chromecache_390.2.dr	String found in binary or memory: https://www.virustotal.com/ui/collections/ae52459f771c9ef1d8e3b9adbd82bdccfefd44dc852fe67b3d7c57aa1d
Source: chromecache_390.2.dr	String found in binary or memory: https://www.virustotal.com/ui/collections/bcea914a7d8fe870116aefd5a990638dde0aef36250a3f4e83d0e77808
Source: chromecache_390.2.dr	String found in binary or memory: https://www.virustotal.com/ui/collections/e5050423d843fbf40e673cc54ff359e8cecaa7ee6f571244bf212d2572
Source: chromecache_390.2.dr	String found in binary or memory: https://www.virustotal.com/ui/domains/ghabovethec.info/associations?limit=10
Source: chromecache_395.2.dr	String found in binary or memory: https://www.virustotal.com/ui/domains/ghabovethec.info/comments?limit=10&relationships=author%2Citem
Source: chromecache_271.2.dr	String found in binary or memory: https://www.virustotal.com/ui/domains/ghabovethec.info/graphs?limit=10&relationships=owner&attribute
Source: chromecache_233.2.dr	String found in binary or memory: https://www.virustotal.com/ui/domains/ghabovethec.info/parent
Source: chromecache_418.2.dr	String found in binary or memory: https://www.virustotal.com/ui/domains/ghabovethec.info/siblings?limit=10&relationships=resolutions
Source: chromecache_429.2.dr	String found in binary or memory: https://www.virustotal.com/ui/domains/ghabovethec.info/votes?limit=10&relationships=item%2Cvoter
Source: chromecache_271.2.dr	String found in binary or memory: https://www.virustotal.com/ui/graphs/g5c3c1d715fc648808cbaae5bc2c5892ce92b19775d5f49c7927cec86ff363a
Source: chromecache_271.2.dr	String found in binary or memory: https://www.virustotal.com/ui/graphs/g6f300bb54447430dac897e7ff7eb7f157974a79908984fd79c342d942e1ff8
Source: chromecache_271.2.dr	String found in binary or memory: https://www.virustotal.com/ui/graphs/g8a4490b8e50646c3bb14846b5364b3b6238658e16c9c4844bf058dbcd8990f
Source: chromecache_352.2.dr	String found in binary or memory: https://www.virustotal.com/ui/graphs/g8a8c71844d5444f98fd3ef10e3ccc94f894c32f05f86417cb4c7605cdc8a23
Source: chromecache_271.2.dr	String found in binary or memory: https://www.virustotal.com/ui/graphs/gdeee240bf0b74014b5558e8de353b9d9cd190ae0c60a416c83aba433b0c001
Source: chromecache_429.2.dr	String found in binary or memory: https://www.virustotal.com/ui/votes/d-ghabovethec.info-0da73a1c
Source: chromecache_429.2.dr	String found in binary or memory: https://www.virustotal.com/ui/votes/d-ghabovethec.info-0da73a1c/item
Source: chromecache_429.2.dr	String found in binary or memory: https://www.virustotal.com/ui/votes/d-ghabovethec.info-0da73a1c/relationships/item
Source: chromecache_429.2.dr	String found in binary or memory: https://www.virustotal.com/ui/votes/d-ghabovethec.info-0da73a1c/relationships/voter
Source: chromecache_429.2.dr	String found in binary or memory: https://www.virustotal.com/ui/votes/d-ghabovethec.info-0da73a1c/voter
Source: chromecache_429.2.dr	String found in binary or memory: https://www.virustotal.com/ui/votes/d-ghabovethec.info-46abcc96
Source: chromecache_429.2.dr	String found in binary or memory: https://www.virustotal.com/ui/votes/d-ghabovethec.info-46abcc96/item
Source: chromecache_429.2.dr	String found in binary or memory: https://www.virustotal.com/ui/votes/d-ghabovethec.info-46abcc96/relationships/item
Source: chromecache_429.2.dr	String found in binary or memory: https://www.virustotal.com/ui/votes/d-ghabovethec.info-46abcc96/relationships/voter
Source: chromecache_429.2.dr	String found in binary or memory: https://www.virustotal.com/ui/votes/d-ghabovethec.info-46abcc96/voter
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_243.2.dr, chromecache_320.2.dr	String found in binary or memory: https://www.youtube.com/embed
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_360.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_243.2.dr, chromecache_320.2.dr	String found in binary or memory: https://ytimg.googleusercontent.com/vi/
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: https://yurt.corp.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50216
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50218
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50217
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50211
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50214
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50204
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50209
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50200
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50187
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50189
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50191
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50195
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50194
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50196
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50199
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49963 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.4:49969 version: TLS 1.2

E-Banking Fraud

Yara detected AveMaria stealer

Source: Yara match

File source: dropped/chromecache_270, type: DROPPED

Source: classification engine

Classification label: mal52.troj.evad.win@25/409@62/28

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1912,i,7117171991923956869,650583693760184098,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.virustotal.com/gui/domain/ghabovethec.info/detection#:~:text=API-,ghabovethec.info,-Registrar"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4052 --field-trial-handle=1912,i,7117171991923956869,650583693760184098,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4788 --field-trial-handle=1912,i,7117171991923956869,650583693760184098,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1912,i,7117171991923956869,650583693760184098,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4052 --field-trial-handle=1912,i,7117171991923956869,650583693760184098,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4788 --field-trial-handle=1912,i,7117171991923956869,650583693760184098,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Data Obfuscation

Yara detected Costura Assembly Loader

Source: Yara match

File source: dropped/chromecache_402, type: DROPPED

Stealing of Sensitive Information

Yara detected AveMaria stealer

Source: Yara match

File source: dropped/chromecache_270, type: DROPPED

Remote Access Functionality

Yara detected AveMaria stealer

Source: Yara match

File source: dropped/chromecache_270, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Extra Window Memory Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.virustotal.com/gui/domain/ghabovethec.info/detection#:~:text=API-,ghabovethec.info,-Registrar	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://docs.virustotal.com/docs/graph-management	0%	Avira URL Cloud	safe
https://docs.virustotal.com/docs/graph-management	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
syndicatedsearch.goog	142.250.185.78	true	false	high
i.ytimg.com	216.58.206.54	true	false	high
www.recaptcha.net	142.250.186.163	true	false	high
recaptcha.net	142.250.185.67	true	false	high
static.doubleclick.net	172.217.18.6	true	false	high
www.virustotal.com	74.125.34.46	true	false	high
stats.g.doubleclick.net	64.233.184.157	true	false	high
youtube-ui.l.google.com	142.250.185.206	true	false	high
analytics-alv.google.com	216.239.34.181	true	false	high
www3.l.google.com	142.250.186.46	true	false	high
googleads.g.doubleclick.net	142.250.185.66	true	false	high
play.google.com	142.250.186.174	true	false	high
photos-ugc.l.googleusercontent.com	172.217.18.1	true	false	high
cse.google.com	142.250.186.142	true	false	high
www.google.com	142.250.185.68	true	false	high
td.doubleclick.net	142.250.185.194	true	false	high
yt3.ggpht.com	unknown	unknown	false	high
www.adsensecustomsearchads.com	unknown	unknown	false	high
analytics.google.com	unknown	unknown	false	high
www.youtube.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://www.virustotal.com/gui/70520.2084d2d63c64ac00d8ff.js	false	high
https://www.virustotal.com/graph/assets/images/relationships/dark-default-subdomains.png	false	high
https://www.virustotal.com/gui/c48548105569470b2222.woff2	false	high
https://www.virustotal.com/ui/domains/ghabovethec.info/comments?relationships=author%2Citem	false	high
https://www.virustotal.com/ui/domains/ghabovethec.info/resolutions?limit=10&cursor=ClsKEQoEZGF0ZRIJCMyu1OT0vYkDEkJqEXN-dmlydXN0b3RhbGNsb3Vkci0LEgpSZXNvbHV0aW9uIh0xOC4xNTQuMTMyLjM4Z2hhYm92ZXRoZWMuaW5mbwwYACAB	false	high
https://www.youtube.com/s/player/a8476471/player_ias.vflset/en_US/remote.js	false	high
https://www.virustotal.com/gui/1402accbefdec6a25762.woff2	false	high
https://www.virustotal.com/gui/38304.8a071d9cca91b836aa99.js	false	high
https://www.virustotal.com/ui/domains/ghabovethec.info	false	high
https://www.virustotal.com/gui/images/overviews/ico_graph_4.svg	false	high
https://www.virustotal.com/gui/main.e221fa750206b85dcfc6.js	false	high
https://www.virustotal.com/gui/88687.cca6b938f5ec6b221b34.js	false	high
https://www.virustotal.com/gui/13420.2099364bebdd02277cf9.js	false	high
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	false	high
https://www.virustotal.com/gui/domain/ghabovethec.info/detection	false	high
https://www.virustotal.com/gui/domain/ghabovethec.info/detection#:~:text=API-,ghabovethec.info,-Registrar	false	high
https://www.virustotal.com/gui/77620.f0b3ffab8645bbd5af5c.js	false	high
https://www.virustotal.com/ui/user_notifications	false	high
https://www.virustotal.com/ui/domains/ghabovethec.info/siblings?relationships=resolutions	false	high
https://www.virustotal.com/graph/assets/7.main.bundle.d5baa643dc30350353ab.js	false	high
https://www.virustotal.com/graph/assets/images/relationships/dark-default-resolutions.png	false	high
https://www.youtube.com/s/player/a8476471/www-player.css	false	high
https://www.virustotal.com/gui/74278.df011db4b71607f93e04.js	false	high
https://www.virustotal.com/ui/cookie_disclaimer	false	high
https://www.virustotal.com/graph/embed/g8a8c71844d5444f98fd3ef10e3ccc94f894c32f05f86417cb4c7605cdc8a2308	false	high
https://www.virustotal.com/ui/domains/ghabovethec.info/communicating_files	false	high
https://www.virustotal.com/graph/assets/73f5acaa7eed2d3fa37c.worker.js	false	high
https://recaptcha.net/recaptcha/api2/anchor?ar=1&k=6Ldjgd0kAAAAAITm7ipWF7o7kPL_81SaSfdINiOc&co=aHR0cHM6Ly93d3cudmlydXN0b3RhbC5jb206NDQz&hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=elj6dz3t4a0l	false	high
https://www.virustotal.com/ui/domains/ghabovethec.info/parent	false	high
https://www.virustotal.com/gui/47768.412d352cd77efb5fdad5.js	false	high
https://www.virustotal.com/ui/ip_addresses/3.167.163.46	false	high
https://www.virustotal.com/ui/domains/ghabovethec.info/communicating_files?limit=10&cursor=eyJsaW1pdCI6IDEwLCAib2Zmc2V0IjogMTB9	false	high
https://www.virustotal.com/gui/images/overviews/virustotal_graph_screenshot.png	false	high
https://www.virustotal.com/gui/30192.c1eb6d619c8f6b7d4a0f.js	false	high
https://www.virustotal.com/gui/d5e8889ca86857475abb.png	false	high
https://www.google.com/cse/static/style/look/v4/default.css	false	high
https://www.virustotal.com/gui/images/overviews/ico_graph_3.svg	false	high
https://www.virustotal.com/gui/11405.d1a6906c4ce5fc5f953f.js	false	high
https://www.virustotal.com/gui/2121f4aabac6fbe523ec.woff2	false	high
https://www.virustotal.com/ui/signin?relationships=groups%2Cparent_group	false	high
https://www.virustotal.com/ui/domains/ghabovethec.info/referrer_files?limit=10&cursor=MTB8fHYzfHwxNzMyMTU2OTQ4fHw1Y2NkYjc2MmU2YzExMmNhYzI1YWI5NzdhMzliZjNmMzU4NTVmOTVjZGFlZjg3NDY4NzRjN2M1MGNlMDcyYTY3	false	high
https://www.virustotal.com/gui/vt-ui-sw-installer.3166763520a2b299ee12.js	false	high
https://www.virustotal.com/gui/49272.372a1ed11135b11cd4f7.js	false	high
https://www.virustotal.com/gui/55504.c1c369c03ada295f0dfb.js	false	high
https://www.virustotal.com/gui/53324.c6875e5a7a3a4939514b.js	false	high
https://www.virustotal.com/gui/71254.89ea96287cbc8b900860.js	false	high
https://www.virustotal.com/gui/static/qrcode.min.js	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_269.2.dr, chromecache_219.2.dr, chromecache_292.2.dr, chromecache_424.2.dr, chromecache_420.2.dr	false		high
https://storage.mtls.cloud.google.com/	chromecache_243.2.dr, chromecache_320.2.dr	false		high
https://www.virustotal.com/ui/domains/ghabovethec.info/associations?limit=10	chromecache_390.2.dr	false		high
https://www.virustotal.com/ui/votes/d-ghabovethec.info-46abcc96/relationships/item	chromecache_429.2.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_196.2.dr, chromecache_360.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_452.2.dr, chromecache_373.2.dr, chromecache_306.2.dr	false		high
https://www.virustotal.com/graph/embed/g8a8c71844d5444f98fd3ef10e3ccc94f894c32f05f86417cb4c7605cdc8a	chromecache_352.2.dr, chromecache_396.2.dr, chromecache_284.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_212.2.dr, chromecache_312.2.dr	false		high
https://dialogflow.cloud.google.com/v1/cx/integrations/messenger/webhook	chromecache_243.2.dr, chromecache_320.2.dr	false		high
https://www.virustotal.com/ui/graphs/gdeee240bf0b74014b5558e8de353b9d9cd190ae0c60a416c83aba433b0c001	chromecache_271.2.dr	false		high
https://d30y9cdsu7xlg0.cloudfront.net/png/29715-200.png	chromecache_320.2.dr	false		high
https://www.virustotal.com/ui/votes/d-ghabovethec.info-46abcc96	chromecache_429.2.dr	false		high
http://polymer.github.io/AUTHORS.txt	chromecache_304.2.dr	false		high
https://www.virustotal.com/ui/votes/d-ghabovethec.info-0da73a1c/relationships/voter	chromecache_429.2.dr	false		high
https://www.virustotal.com/ui/collections/e5050423d843fbf40e673cc54ff359e8cecaa7ee6f571244bf212d2572	chromecache_390.2.dr	false		high
https://www.virustotal.com/ui/graphs/g6f300bb54447430dac897e7ff7eb7f157974a79908984fd79c342d942e1ff8	chromecache_271.2.dr	false		high
https://admin.youtube.com	chromecache_196.2.dr, chromecache_360.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_452.2.dr, chromecache_373.2.dr, chromecache_306.2.dr	false		high
https://www.linkedin.com/sharing/share-offsite/?url=$	chromecache_277.2.dr	false		high
https://www.virustotal.com/ui/votes/d-ghabovethec.info-0da73a1c	chromecache_429.2.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_196.2.dr, chromecache_360.2.dr	false		high
https://www.virustotal.com/ui/domains/ghabovethec.info/comments?limit=10&relationships=author%2Citem	chromecache_395.2.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_312.2.dr	false		high
https://support.google.com/recaptcha	chromecache_306.2.dr	false		high
https://yurt.corp.google.com	chromecache_196.2.dr, chromecache_360.2.dr	false		high
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5	chromecache_291.2.dr	false		high
https://www.youtube.com/generate_204?cpn=	chromecache_196.2.dr, chromecache_360.2.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__.	chromecache_452.2.dr, chromecache_373.2.dr, chromecache_306.2.dr	false		high
https://docs.virustotal.com/docs/graph-management	chromecache_277.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://polymer.github.io/PATENTS.txt	chromecache_304.2.dr	false		high
https://developers.google.com/custom-search/docs/element.	chromecache_434.2.dr, chromecache_378.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_452.2.dr, chromecache_373.2.dr, chromecache_306.2.dr	false		high
https://www.google.com/cse/static	chromecache_434.2.dr, chromecache_378.2.dr	false		high
https://cse.google.com/?ref=b&hl=en	chromecache_434.2.dr, chromecache_378.2.dr	false		high
http://tools.ietf.org/html/rfc1950	chromecache_196.2.dr, chromecache_360.2.dr, chromecache_379.2.dr, chromecache_230.2.dr	false		high
https://csqr-autopush.corp.google.com/cse/element/v1	chromecache_434.2.dr, chromecache_378.2.dr	false		high
https://cloud.google.com/dialogflow/cx/docs/concept/integration/dialogflow-messenger/fulfillment.	chromecache_243.2.dr, chromecache_320.2.dr	false		high
https://www.virustotal.com/ui/graphs/g8a4490b8e50646c3bb14846b5364b3b6238658e16c9c4844bf058dbcd8990f	chromecache_271.2.dr	false		high
https://www.virustotal.com/ui/collections/bcea914a7d8fe870116aefd5a990638dde0aef36250a3f4e83d0e77808	chromecache_390.2.dr	false		high
https://support.google.com/programmable-search/answer/6001359#captcha	chromecache_434.2.dr, chromecache_378.2.dr	false		high
https://www.google.com/cse/static/element/	chromecache_434.2.dr, chromecache_378.2.dr	false		high
https://github.com/markedjs/marked.	chromecache_243.2.dr, chromecache_320.2.dr	false		high
https://support.google.com/youtube/?p=report_playback	chromecache_196.2.dr, chromecache_360.2.dr	false		high
https://cloud.google.com/terms/service-terms	chromecache_243.2.dr, chromecache_320.2.dr	false		high
https://angular.dev/license	chromecache_196.2.dr, chromecache_360.2.dr	false		high
http://youtube.com/streaming/metadata/segment/102015	chromecache_196.2.dr, chromecache_360.2.dr	false		high
https://cloud.google.com/contact	chromecache_452.2.dr, chromecache_373.2.dr, chromecache_306.2.dr	false		high
https://www.youtube.com/embed	chromecache_243.2.dr, chromecache_320.2.dr	false		high
https://youtu.be/	chromecache_196.2.dr, chromecache_360.2.dr	false		high
https://www.google.com/recaptcha/api.js	chromecache_277.2.dr	false		high
https://www.virustotal.com/ui/votes/d-ghabovethec.info-0da73a1c/voter	chromecache_429.2.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_452.2.dr, chromecache_373.2.dr, chromecache_306.2.dr	false		high
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_304.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.228	unknown	United States	15169	GOOGLEUS	false
216.239.34.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
216.58.206.54	i.ytimg.com	United States	15169	GOOGLEUS	false
142.250.185.65	unknown	United States	15169	GOOGLEUS	false
142.250.185.66	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.67	recaptcha.net	United States	15169	GOOGLEUS	false
142.250.186.78	unknown	United States	15169	GOOGLEUS	false
142.250.185.68	www.google.com	United States	15169	GOOGLEUS	false
172.217.18.6	static.doubleclick.net	United States	15169	GOOGLEUS	false
216.58.206.46	unknown	United States	15169	GOOGLEUS	false
172.217.18.1	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.150	unknown	United States	15169	GOOGLEUS	false
142.250.185.194	td.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.142	cse.google.com	United States	15169	GOOGLEUS	false
142.250.185.206	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
142.250.186.174	play.google.com	United States	15169	GOOGLEUS	false
64.233.184.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
74.125.34.46	www.virustotal.com	United States	15169	GOOGLEUS	false
142.250.186.131	unknown	United States	15169	GOOGLEUS	false
216.58.212.174	unknown	United States	15169	GOOGLEUS	false
142.250.186.163	www.recaptcha.net	United States	15169	GOOGLEUS	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
142.250.185.131	unknown	United States	15169	GOOGLEUS	false
142.250.181.228	unknown	United States	15169	GOOGLEUS	false
172.217.16.130	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1559894
Start date and time:	2024-11-21 03:41:04 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.virustotal.com/gui/domain/ghabovethec.info/detection#:~:text=API-,ghabovethec.info,-Registrar
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.troj.evad.win@25/409@62/28
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.99, 108.177.15.84, 142.250.185.78, 34.104.35.123, 142.250.186.168, 142.250.184.227, 142.250.185.104, 142.250.185.174, 142.250.185.202, 172.217.18.10, 142.250.181.234, 142.250.184.202, 142.250.186.74, 142.250.186.106, 142.250.186.42, 142.250.185.106, 142.250.185.170, 142.250.186.170, 142.250.185.138, 172.217.16.138, 216.58.206.42, 142.250.185.234, 216.58.206.74, 142.250.74.202, 142.250.181.227, 199.232.210.172, 142.250.184.206, 172.217.18.3, 192.229.221.95, 142.250.186.138, 172.217.23.99, 142.250.184.238, 142.250.186.35, 172.217.16.202, 142.250.185.74, 142.250.184.234, 172.217.23.106, 216.58.212.170, 142.250.186.110, 142.250.185.136, 142.250.186.46, 216.58.212.138, 172.217.18.106, 142.250.186.40
Excluded domains from analysis (whitelisted): clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, jnn-pa.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, www.googletagmanager.com, update.googleapis.com, clouderrorreporting.googleapis.com, clients.l.google.com, www.gstatic.com, www.google-analytics.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Input	Output
URL: https://www.virustotal.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://www.virustotal.com
URL: https://www.virustotal.com/gui/domain/ghabovethec.info/detection Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://www.virustotal.com/gui/domain/ghabovethec.info/detection Model: Joe Sandbox AI	{ "brands": [ "Apple" ] }
	{ "brands": [ "Apple" ] }
URL: https://www.virustotal.com/gui/join-us Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://www.virustotal.com/gui/join-us Model: Joe Sandbox AI	{ "brands": [ "Apple" ] }
	{ "brands": [ "Apple" ] }
URL: https://www.virustotal.com/gui/join-us Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Did you know... Accounts give you access to Graph", "prominent_button_name": "Discover Graph", "text_input_field_labels": [ "First name", "Last name", "Email", "Username", "Password", "Repeat password" ], "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://www.virustotal.com/gui/join-us Model: Joe Sandbox AI	{ "brands": [ "Graph" ] }
	{ "brands": [ "Graph" ] }
URL: https://www.virustotal.com/gui/graph-overview Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Try Threat Graph now", "prominent_button_name": "Try Threat Graph now", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://www.virustotal.com/gui/graph-overview Model: Joe Sandbox AI	{ "brands": [ "Virustotal" ] }
	{ "brands": [ "Virustotal" ] }
URL: https://www.virustotal.com/gui/join-us Model: Joe Sandbox AI	```json{ "legit_domain": "virustotal.com", "classification": "known", "reasons": [ "The URL 'www.virustotal.com' matches the legitimate domain for VirusTotal, a well-known online service for analyzing files and URLs for viruses and other malware.", "The brand 'Graph' is not directly associated with VirusTotal, which raises some suspicion.", "The input fields (First name, Last name, Email, Username, Password, Repeat password) are typical for user registration or login forms, which could be legitimate if VirusTotal offers such services.", "There are no suspicious elements in the URL itself, such as misspellings or unusual domain extensions." ], "riskscore": 3}
URL: www.virustotal.com Brands: Graph Input Fields: First name, Last name, Email, Username, Password, Repeat password
URL: https://www.virustotal.com/gui/contact-us/premium-services Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Next", "text_input_field_labels": [ "Company name", "Company Website", "Company Industry", "Company Headquarters Country", "Company Size" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false }

URL: https://www.virustotal.com/gui/contact-us/premium-services Model: Joe Sandbox AI	{ "brands": [ "Google" ] }
	{ "brands": [ "Google" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (568)
Category:	downloaded
Size (bytes):	2493035
Entropy (8bit):	5.60259822862234
Encrypted:	false
SSDEEP:	24576:E1Ql2p5JtTkcm9L8snfQMxA6Vli/uoE3rXB1D1Br0Z2kNhZZAhhyt:T2p5JtwusnIMxli/E3rXB1D1Bvyt
MD5:	5992866DC9180EB01B6E9BC9260C1826
SHA1:	0CD2F5CBBE17D4B44C8CD73FD46DAF9F96926CC0
SHA-256:	761A90333001CF2854B432B78C71E30EB1AA012DC98D4C8FCAC44974C5073E86
SHA-512:	01F6F7DC6A45EBD17116D43E391E7AAD5739267E7CFCCEC8343E5C7976E867616586B7A4FAFA0DFC35A6D7B3A67E045D0CE48F483969DFEB170F8F3DFE5D61A9
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/a8476471/player_ias.vflset/en_US/base.js
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.dev/license././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3391)
Category:	downloaded
Size (bytes):	68556
Entropy (8bit):	5.606816108651543
Encrypted:	false
SSDEEP:	768:iYQq+1Z620EUgsrUP5PpsQ1T0HVD2bsh49jPT68/XYj357d6SctU5NH:uS+pRWb49a8/XgmUl
MD5:	5191251D99AF440C1C3BA79A3BCE2213
SHA1:	8AE2C24B575F4BA499BB0198C37A3F4794214299
SHA-256:	BAEBE6F138A7626D9F290BBD812BDE72B17D720F260990CF0759739D3A966A91
SHA-512:	C17D876C26A431424450B97A1F2CA3FB95F7DFCF215097F9149562DCE889A6F66328258F8CD15FA43BBF49223F2FC15B85F64037F8D426DB256120A55BDE331C
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/a8476471/player_ias.vflset/en_US/embed.js
Preview:	(function(g){var window=this;/.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause././. SPDX-License-Identifier: Apache-2.0./.'use strict';var kjb=function(a){a.mutedAutoplay=!1;a.endSeconds=NaN;a.limitedPlaybackDurationInSeconds=NaN;g.bR(a)},ljb=function(a){g.Zo(a);.for(var b=0;b<a.pg.length;b++){var c=a.pg[b],d=a.Zy[b];if(d!==c.version)return!0;if(!g.Xo(c)\|\|c.Um)if(c.Um\|\|c.F_!==g.bp)(c.W1(c)\|\|ljb(c))&&c.X1(c),c.Um=!1,c.F_=g.bp;if(d!==c.version)return!0}return!1},y4=function(a){var b=g.Vo(a);.a={};return a[Symbol.dispose]=function(){g.Vo(b)},a},mjb=function(){var a=Object.assign({},g.wcb);.Object.getOwnPropertyNames(g.wcb).forEach(function(b){g.ep[b]!==void 0&&(a[b]=g.ep[b])});.return a},njb=function(){return{J:"svg",.Y:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},X:[{J:"path",Gc:!0,S:"ytp-svg-fill",Y:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 314
Category:	dropped
Size (bytes):	250
Entropy (8bit):	6.978954722591275
Encrypted:	false
SSDEEP:	6:XtsGKGrj27rf0tWele0HnUG5zUiD6Yi4kIYQtQWNwlSr:XM2jCAI0HUiLD6SOcQWNz
MD5:	B6A9D8D081CC891B1E5AE6E9FFC5F4DA
SHA1:	F88CDF1A4E0BA2C7D2D3B544FE2C96AE1B5A28AD
SHA-256:	0385D1AA058BE36022BDDA4EE04046EFD0043C5487EB23773B04B6C4CE85F51F
SHA-512:	A8732DC9E04594740746BB9DC2CDDB292C0A2506E2C0990682C2361689E2D5A89EE17DA1BAAD9F95D865836FE785854017F42428DEE7F598B807C9B1E21E0EBD
Malicious:	false
Reputation:	low
Preview:	..........\|.AO.@.........f[*QZ...^4z!.y]^.-..vQC.."=....\|.L..v...L..Q...QWO;o...Y.....\|...j.;..8.%I!.Q..$I..c....U.$....g..^.........^.-6....$J"!.....E....`@_.l..Si.....C!..B.k....B.7..m.'.hz..6v.........o.....b.8..cT{VG..........F.I:...

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2755
Entropy (8bit):	7.910651208684404
Encrypted:	false
SSDEEP:	48:D/6aSdVUDDVpyop30UaN+pZSJfZUA9tGIfAPpPUhGs1QFUHFCLReo+AQu0p3dWh+:DSaSngRpyxUaEKJfZUMvmPIGMi8oL0pF
MD5:	10FDB75E82C9AF0514A275E91E8FB20C
SHA1:	71B54523558F08D85C369634155CF3FA31D267D8
SHA-256:	89172D231B687EB4B00E6E842B87022B4DF87BB75F195294AC056B68718E03FD
SHA-512:	2FD1F9A980D2CB1617F768E7CC50E845E192862AF156DC9404F62246E9055BB8354E7CFEAEED5FFBE4802491DA9CC564FDB5E3B202EFED9275B25F7976B2AA32
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....pHYs................uIDATx..[ipT..^\q~.Q@..2.......aq..1. ......p......." ...FH.@......@ .T.M...s...Sq.X..G.I...iR.H.2;..j...Z.U]Z.cf.w....^.'....O...(.....T/$D.D.^I.V].ze.5..TK'D..w=.Fj....=....R..R...Z.A........8S.f....g..}.@..L.~.sDG'>.y\.e.f...tx.7.JB.EQQ..FR.&..c...Z..O.e/.....\.rs?`..~.].\|.UU.`...Yuu5..k..g.,....w.VA.6...<.....Q..X-.E.$..S......w.].u.6.. .;v...Z..g.h.."<...J....k..\..UVV..t.z.;v...c7{.ml.?q.g\...J.w1fV..Y...p+6V..N. D_i6y.6.. w...Y.....{.isX.N............3..2a...w..v.2.L.M")).u........Y...l...U......8.7....>s......3.....<..j..I.y.=.u..........:t4;u..g.M.....~7..Rm...=.........g..../.y.D6s.<~r.:w......9.92.bb...e_.}.....!.[./.NS....G.T...aSx..u..=_.\PN.f......'#N.!.XOy.u......E..'P..P5......eK...../[..P.+.f..Y........6.8.o...g..-.........z......>..Z.l..7...'D..Db.../!..TPp<.6..O8~..X.Q.T..EE..A....P#<...s..#.C..n.F..LN..qD.dh.Z...t.\|.*)-.[A8...~..Y..G\|.../\.{.?..Fn....

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3344)
Category:	downloaded
Size (bytes):	8940
Entropy (8bit):	5.447322252620095
Encrypted:	false
SSDEEP:	192:5miE6gVWv3BhTi2Ypi6oENm/L1Nx3lPO1E1wvbvwenvjvI2fv3vkiUvJv2o2tiSt:5m91VO3XTi2YpiTENJLwevzI2nfkiw9u
MD5:	00F57CBE622BBB9220D1983147C9302B
SHA1:	EBA0D99527B39206B876BE5FA5A149711EBF0CD8
SHA-256:	1F048E18F2EEE75891C9E0534751630680EBC8ADB862629BC8F8AB4408BC0F6E
SHA-512:	687D81C1CB200EBC7C48A085A3CBA67ABA76B2B827234A1862E009AE5D58472A4052945F0DFB587DB1D1B1DF6B22ACA23613B46701259DDDBA262A57904DBDFF
Malicious:	false
Reputation:	low
URL:	https://cse.google.com/cse.js?cx=003414466004237966221:dgg7iftvryo
Preview:	(function(opts_){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f=this\|\|self;function g(a){return a};var h;function k(a,b){this.h=a===l&&b\|\|"";this.g=m}function n(a){return a instanceof k&&a.constructor===k&&a.g===m?a.h:"type_error:Const"}var m={},l={};function p(a,b){this.h=b===q?a:""}p.prototype.toString=function(){return this.h+""};function r(a){return a instanceof p&&a.constructor===p?a.h:"type_error:TrustedResourceUrl"}.function u(a,b){var c=n(a);if(!v.test(c))throw Error("Invalid TrustedResourceUrl format: "+c);a=c.replace(w,function(d,e){if(!Object.prototype.hasOwnProperty.call(b,e))throw Error('Found marker, "'+e+'", in format string, "'+c+'", but no valid label mapping found in args: '+JSON.stringify(b));d=b[e];return d instanceof k?n(d):encodeURIComponent(String(d))});return x(a)}var w=/%{(\w+)}/g,v=RegExp("^((https:)?//[0-9a-z.:[\\]-]+/\|/[^/\\\\]\|[^:/\\\\%]+/\|[^:/\\\\%][?#]\|about:blank#)","i"),y=/^([^?#])(\?[^#]*)?(#[\s

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22180, version 1.0
Category:	downloaded
Size (bytes):	22180
Entropy (8bit):	7.99033920580306
Encrypted:	true
SSDEEP:	384:FeyVzTXvrVeKtDRfxqfeS3KDVAQBJpjMqeEDOne7vg++t98+:FtxTz0IR8f5IV1JujEjZQ1
MD5:	E905A9BE581B8C837C48020AF6C606A0
SHA1:	E00C1833F1C65B812094C149B314800350F54685
SHA-256:	58180E3CBA5A736E1875C690B3A756DABC7EE19960F4C66A692D42E5679C13D0
SHA-512:	BCAF31FAB00B69FC58AEF04EFC77C1E3786CD46E294B67AE862EB6E9D29FA4515E884BA6E105907D1E50593AD8220DDCDA428125CAE5118383A9BB6CEAE2549B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v62/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RFD48TE63OOYKtrwEIJllpyk.woff2
Preview:	wOF2......V...........VA..........................j...H....`?STATx..B.....H..!.....6.$..V. ..6..:...=....N.U.(..v..m...f..._~d.Qa...-....?#A...g.3.Y..@.....fv.....;..G[.N..9%1..Y.. ..{.EL..2`.>..>hS%..P.....W..../b.~.yy.Y.(l..3..jg...y....+..'=#n..(...h.r.....w.u"nfUs.....O._.;....?.....1.!.G@..!..CD...Zb...ql........M-m......@)...c.....\|...}.w..D...$.(...,.<...N}.$..6{..H.i.m..#...O<.........%.K(m..&..%..]......$u.)V...0c.S\6/...vb...........e..va.....o.e..].....?.c..Q....Z.......ar)W&.I.R.$...........,!.._O)..!u...;.U..4..>.3....3.....S`IPM.r.y..n....&.u..XMg.....D....j.\|P.n......HJ.......~..O\|..?(.......]R....ex.\|....Av.[.....\.$.=.Nm.")...1...H0O...P.d:....R...z.......Krz...9.&.4.+.Gn...h.($}R=.E......[...[.?...'."$..?....h...vW...~CH..!...^f#))..Da._x.../$..0....4.K5+Ya.hrm...?.;...F&.iO&....B.0vm..m._3.O..-..AF.d. \|.z..x.A.7.-.;..{......%.B#.;U(UU]Z../.....n^3..;.,.U-<._..[0.9)..E4..w.._x6.o.n.....B.!.lk../.7-.O..g.Z..""F...1FT...a.).<.

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2918
Entropy (8bit):	7.909167585296393
Encrypted:	false
SSDEEP:	48:D/60+ZB25B9VSDc88li2UmxoRej2OqRlNo3zRHNar3beqdiKKxZcpu8Ht:DS0As5Lcc84iExl3KlqNYbaK4lo
MD5:	7CCB2C71447FDA20C8A242398FDD7119
SHA1:	F1B0CDB35F473E4CB14328FEDB18D8A78DB3A2A4
SHA-256:	56536874F5522BD4728F979CF4895B08E328D7B03A1661F99246C964B9BDAAF7
SHA-512:	7EC25D6A9B0B19F035F45676BCA9220A66CDA3B45015C3F54C5FDD3DCB8C5FBA0E5C7DDD30B5FA30C9A3C96FF9F9A2B6349C384CE99DE4529C225C8AFE7D33CF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....pHYs.................IDATx..[wt...?....G.iW.`0.NrD."l......H ........x....1 DoQ....M1..$ T.D.SEG..........;.O5.............2..W......'D]A.v.....Z&.jV.j..m.[N.:............m2!Z..Z6..s...A.....\[).P...kB.......8_$D;.w........X1..!.......M0..-..R...!ZgB..E(..F......Ey.H%'$P.TK-...QM!D.,..).(.....n...._.P...E.6....h...n.!!!...._@k..-S...LxJ...-....T..P.Ru...y...,.}........:u..q.=...#.O.<..vq..bL...r..xi..E.o.].=..../^.`.6la..]....7...Px....k..>}.M.7o.[...)4.@....m..6t.+\| ..C./.].1.}.a.O.>c.V.c11=Y.F-.s.d.;w9.@.h@..w..X=.\|....d. KU..q..t..=x.PN6##.}..$V.j(.`...{.>V.Z].{.....7o...[.1..al..,3...;bbz81.......u..<>~:.......%K..T.w.?,...KO.4.`.....)Sf........~M.g..2.c...........F.g..~..:.:\|n.R.....&L...B.HK;....;v..=\|.H.........\|l_.c.!.S...WY...h..$i.N........k.lt.W/.].rM..;.)..3..6R...I.LO.i..........\|../.a..r.\|.+MhhCv.Z:..ag.@.iZO D.l.I....{....=zl....7.C.U...I....fA.4...'r7.3...A... .....3...).v

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 10567
Category:	dropped
Size (bytes):	3260
Entropy (8bit):	7.936920580670757
Encrypted:	false
SSDEEP:	48:X7C8msj11mZWraxc9TVNZKvRDaBz0CrZQpA2rbZiWQ8ga5qr6y0TQs25q:rAU4Z+PcR6drKppZiW0/WNTp25q
MD5:	49D5164C8090B52EBA13419C061BBE66
SHA1:	4D998D6AD960BD519C949333F3B2AC1A18800E9F
SHA-256:	22EAF11049DFAD23B971C50C8E17B6B120F9DFD790B2EF836D1B58786BCA029F
SHA-512:	7D2F50A20ADC33EDCE6E0D4A521B57B3F5A78374747166ED5C9EE3EF4C1332B582BC0B5EF36B465B6BD54C86A50442A659B0CEAF0FC3CA879CBB70776B556CEA
Malicious:	false
Reputation:	low
Preview:	...........Zks.6......v4.%..C..n..4I;ylg..q ...P....je..=.I.z..6..K?xL.x\.{q.....Z..,R...i:...(#...I....m.n....o...7n.........}........to...I..p.POy...."...-.....Kw8#..pz..Cw...+.....R...~......... n~^...,...$..T....p6.3....<7...0Nx.Hj....qD..i.......\|.1.4!.Dpj>].qZP...\|.MD....R(!.Us\|..D)..-.%.QZv~Y.....T.?k.. ...,.R...E.J.....+.TI3..........9...(..r..=.w.-.].^..-.^....m........z..8.uO......{.zL......z..V........x.;=;p.)UV..^...7.ixN...p\pc...<.....3...S.U...'j...'..j..4..P^....4RAB./w.W)2....I...p+....[..v..yF..zE.).v:v-..7.U$.k.j.z..wHS.1&..!...{..<..S.w.......t..:z..a. ?............J...-\|.tX.S.2.c.i....F...C8\.[..Ey.[y.g).J\.M....u.y.M9A....zj.j2.ih../....h\|..B......Y/H......bh.........VMm.4..v0...+.:*4.6]...`..}..}.].cG8.......$2..._.>f..Z..1T.U<#...t..,.B..j..@....=U..m.T.\.".}.i..&R..;l...2...P2....Z........K.2.....R....(]..zy0Q..u..{....'1.Y..B{..@....,...>....Z3.W...$.,.<......<&rn....Hc...Ew.d...[......t.R..B...u+....

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5610
Entropy (8bit):	5.074081260937269
Encrypted:	false
SSDEEP:	48:Y0bs9f/A0N7L5ACLgsSgA0N7L5ACLLstnA0N7L5ACL7sdwK/A0N7L5ACYqA0N7nV:KNrN4NtmNVWQjifcFmeVeIAO3
MD5:	9B3BA921C654AAA2ABD0180997420114
SHA1:	C4EFE450356CBC834B4819D17E654E0032156829
SHA-256:	9E3B54AB2205E1854E491D971ED3A6142A66DB10E67E3E8A0F2113F3B2BB4CE8
SHA-512:	0C88046846AD8AF7BC6F4893CC280D6CA5DB94C23EF21E02C1113AA84E5479731D259097367B1539AFFC238F7E8F236C2468C35307CA89890BBD3EF6AC55254A
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/domains/ghabovethec.info/resolutions
Preview:	{"data": [{"id": "3.167.99.37ghabovethec.info", "type": "resolution", "links": {"self": "https://www.virustotal.com/ui/resolutions/3.167.99.37ghabovethec.info"}, "attributes": {"ip_address": "3.167.99.37", "host_name_last_analysis_stats": {"malicious": 0, "suspicious": 0, "undetected": 31, "harmless": 63, "timeout": 0}, "host_name": "ghabovethec.info", "date": 1731082043, "ip_address_last_analysis_stats": {"malicious": 0, "suspicious": 0, "undetected": 94, "harmless": 0, "timeout": 0}, "resolver": "CAPE Sandbox"}}, {"id": "3.167.99.50ghabovethec.info", "type": "resolution", "links": {"self": "https://www.virustotal.com/ui/resolutions/3.167.99.50ghabovethec.info"}, "attributes": {"ip_address": "3.167.99.50", "host_name_last_analysis_stats": {"malicious": 0, "suspicious": 0, "undetected": 31, "harmless": 63, "timeout": 0}, "host_name": "ghabovethec.info", "date": 1731082043, "ip_address_last_analysis_stats": {"malicious": 0, "suspicious": 0, "undetected": 94, "harmless": 0, "timeout": 0}

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	266372
Entropy (8bit):	4.366573656793244
Encrypted:	false
SSDEEP:	1536:xJrsBtNngHsWtNng/utuY2ADySQ+oqnhQ43IP3/YGqPG2CpMFIh7eY:f+
MD5:	086138756331E3DDAABD2A82CFE0A31C
SHA1:	1C5BB65B035B4442BC7388EF5611B1F651937AB3
SHA-256:	28C186DECA6FC6F75702D4B4F1156BD7999AC9A7087AE8416BDAE4939455414C
SHA-512:	F0D152E0FDBA4EA421433F89544BA683132428F3CBCD41CA42553B1B01C4E5CE026AF8AEE0F171ACA64ABF60EB02BC363E9A79DAB54765960F7F0A5BD6F35F0B
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/36253.6f4dc6a9d8dab2123ae5.js
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[36253],{36253:(C,e,r)=>{"use strict";var t=r(48704),n=r(16645),s=r(95688),o=r(15323),a=r(49995);let i,b,l=C=>C;var d=function(C,e,r,t){var n,s=arguments.length,o=s<3?e:null===t?t=Object.getOwnPropertyDescriptor(e,r):t;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)o=Reflect.decorate(C,e,r,t);else for(var a=C.length-1;a>=0;a--)(n=C[a])&&(o=(s<3?n(o):s>3?n(e,r,o):n(e,r))\|\|o);return s>3&&o&&Object.defineProperty(e,r,o),o};let c=(i=class extends t.LitElement{constructor(){super(...arguments),this.delay=5e3,this.selectedIndex=0,this.handleKeyPressed=C=>{document.activeElement===document.body&&("ArrowLeft"===C.key?this.previousSlide():"ArrowRight"===C.key&&this.nextSlide())}}get isLast(){var C;return this.slides&&this.selectedIndex===(null===(C=this.slides)\|\|void 0===C?void 0:C.length)-1}get isFirst(){return 0===this.selectedIndex}get nextIndex(){return this.isLast?0:this.selectedIndex+1}get previousIndex(

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 9182
Category:	dropped
Size (bytes):	4104
Entropy (8bit):	7.948910842499831
Encrypted:	false
SSDEEP:	96:5/0w4xzd8si6nn1QdZ5cR2INKfTWEiLLotVKekJZkTiybkuD25iP0:lsZnWmHEfTWEJtszJgRbfCic
MD5:	BDC5A45E28B2FD2F352FD82A5619892C
SHA1:	846356F067ADBF0FE2B5D640E57DC4E7F9063AEB
SHA-256:	BBB7F07353D10EBA66A6EEFAC5AB6CB7D8E3AA40555516C8E358CC35758C7004
SHA-512:	E675AEF317F892E6D761E80D3D5817C0D049A27D539913A21E2EEECDAF4BAF5F76656417D7C0633F32875621F1B2C2C7478861914A18E649084C14EAF6DFEF82
Malicious:	false
Reputation:	low
Preview:	...........ZYs.8.~....t.....K6..N.ru.;.N..n_7DA.b.......~....%.'....8.g........0.0.x9I.\|.`...R...R...._\|{x......E.....7..h...,2.Lx..nx.#.'<.G2...\|....Y.V.\g..\|..C..y..0....t....'q"0<\|...E<4.~C.\.k..F.k..r...t...^.6...3.,R.f;Y...%.E.....R.@.u.Q...x..k".o.e..O^Ul.......t..9L....y......t............yt.o..E.F.d. .PL.P..p.. 7...&.yx80...X...\_..G.L....\...7Cl_)1...y.........l9.cZ.GF.$...Z[1}...V:....C./+.x.X..Y.V.\.4....%..n.o.&.........0l.T9.M@........i......FY..N.\.f.......a..B......A.Z.C!...E:]ka..A..j...DH.3Ypm.....;~.':....,.....l5.T......t...5......vA'...21...j./..H..2...<5^>1.%...#.D.d..Z.{.$..JSC..)......w.Bi.-W#-..1;....D.s.U...Y.....PlL.y......4'7.99..Q.r.vFQ.:.;.i>.9..}......~.!.?Gd......Zx.\|..rS[..1..}.r:\|..b.....a....z&53..D&....5q".... .k4..9l,k.\|C.d.....o../>]..a......\| k.m....l.zl._wn.o....U.F"j.:D..9..m.D...P.....H@q*%......OK+..C..U;\.u..\rC....t:..Y.pA. ..7.t.._E2..-..Z....&z......0g..T.(>..R>{.O...+..6W+.~..

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3391)
Category:	dropped
Size (bytes):	68556
Entropy (8bit):	5.606816108651543
Encrypted:	false
SSDEEP:	768:iYQq+1Z620EUgsrUP5PpsQ1T0HVD2bsh49jPT68/XYj357d6SctU5NH:uS+pRWb49a8/XgmUl
MD5:	5191251D99AF440C1C3BA79A3BCE2213
SHA1:	8AE2C24B575F4BA499BB0198C37A3F4794214299
SHA-256:	BAEBE6F138A7626D9F290BBD812BDE72B17D720F260990CF0759739D3A966A91
SHA-512:	C17D876C26A431424450B97A1F2CA3FB95F7DFCF215097F9149562DCE889A6F66328258F8CD15FA43BBF49223F2FC15B85F64037F8D426DB256120A55BDE331C
Malicious:	false
Reputation:	low
Preview:	(function(g){var window=this;/.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause././. SPDX-License-Identifier: Apache-2.0./.'use strict';var kjb=function(a){a.mutedAutoplay=!1;a.endSeconds=NaN;a.limitedPlaybackDurationInSeconds=NaN;g.bR(a)},ljb=function(a){g.Zo(a);.for(var b=0;b<a.pg.length;b++){var c=a.pg[b],d=a.Zy[b];if(d!==c.version)return!0;if(!g.Xo(c)\|\|c.Um)if(c.Um\|\|c.F_!==g.bp)(c.W1(c)\|\|ljb(c))&&c.X1(c),c.Um=!1,c.F_=g.bp;if(d!==c.version)return!0}return!1},y4=function(a){var b=g.Vo(a);.a={};return a[Symbol.dispose]=function(){g.Vo(b)},a},mjb=function(){var a=Object.assign({},g.wcb);.Object.getOwnPropertyNames(g.wcb).forEach(function(b){g.ep[b]!==void 0&&(a[b]=g.ep[b])});.return a},njb=function(){return{J:"svg",.Y:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},X:[{J:"path",Gc:!0,S:"ytp-svg-fill",Y:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22434)
Category:	downloaded
Size (bytes):	22489
Entropy (8bit):	5.344987209132273
Encrypted:	false
SSDEEP:	384:O+oprOpEW1QoaUOZahx66t2rVlPingnHGALMt2rVlPinglI:O+7eW1Qy66t2rVlPingLLMt2rVlPingq
MD5:	09FC1A91BABD700AF6166E1FD40A7CD8
SHA1:	ECBABA2437438866537F13486C016A1A2C4845A3
SHA-256:	71B9D7D00B0FCFD58BD69985D4F51D2693232FEC2250F62EE514CE9BB3CA3343
SHA-512:	C210677EC9B8E4D1AF90424C31F34E317C98065F211963C0CBE3E177622F9038DFF055F19134190996D113018B737B324D7CC71D727EC5DCD8A3385BF32EC688
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/22232.15ef530edb01268cfe7b.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[22232],{27270:(e,r,t)=>{t.d(r,{v:()=>u});var s=t(49272),o=t(48704),a=t(16645),b=t(62832),i=t(66813),n=t(15323),d=t(83170);let c,l,g,p,m,y=e=>e;var f=function(e,r,t,s){var o,a=arguments.length,b=a<3?r:null===s?s=Object.getOwnPropertyDescriptor(r,t):s;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)b=Reflect.decorate(e,r,t,s);else for(var i=e.length-1;i>=0;i--)(o=e[i])&&(b=(a<3?o(b):a>3?o(r,t,b):o(r,t))\|\|b);return a>3&&b&&Object.defineProperty(r,t,b),b};function u(e){return e===s.Verdict.VERDICT_MALICIOUS?n.shieldSlashIcon:e===s.Verdict.VERDICT_SUSPICIOUS?n.shieldExclamationMarkIcon:e===s.Verdict.VERDICT_BENIGN?n.shieldCheckIcon:n.questionMarkCircleIcon}let h=(c=class extends o.LitElement{constructor(){super(...arguments),this.loading=!1}get threatScore(){var e;return null===(e=this.gtiAssessment)\|\|void 0===e\|\|null===(e=e.threat_score)\|\|void 0===e?void 0:e.value}get verdict(){var e;const r=

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 266372
Category:	dropped
Size (bytes):	80388
Entropy (8bit):	7.983153023051787
Encrypted:	false
SSDEEP:	1536:QziMvjJFuT9CBZxYYgCF16pMSKy8YuCmDV8vuHCuaA:eHJFuTaHFAMKUDGvtA
MD5:	35A46116980C974751122A331D47FD84
SHA1:	CD6E9014E38596C681641A27706124B5B69F86FC
SHA-256:	CCAB92B9BFA43457F743CD83E454BCC63A768DEB352FBAD2D06D718EB2815A66
SHA-512:	AA4F484D3CA65525D5613243797D7E025E552DBD4E68BD9887D88D32FC6928C13DD7A47E8F97C77436924478D451445FA121D1BC1958A0BA94A2A05159345048
Malicious:	false
Reputation:	low
Preview:	............w..q..U.9.C$.t..4..E2C....;.;.<>..K...`...i~.y~.]..@j..#....Vo........\|.>{..f}tyx....../_.......:<=...o.......{y{.....0..g.?n...{.....W[..z...z=...:=.y......f...t..N....G..t..}.......ag..dk.P...j...l}38.>.>.?....t.........U.}..N5.S....W..........z....{.gg...7.......^...X.....^]\..n............z.w.....G.F..\|o/.....[??#./~..p........z.b.....d}.{.S..~....3zr............8.../~..b..zq..bk..W.h.6.......'W...........E........{..m_.7...?>.?>;......Y..\.nv......ZL\|w\|q.....+[.o......`......k.wv.v....$....'.9?Y..?l...'g..s...W.............!..z.e.....0..WW.o.....o.................o.5...x.........N...=.?8.~vx}C.4...@#.Vy.=.f....waz\|._......'..Z......n.z......K...5.U.....S.ek...{...c...P.._?.EYs././]..(.>..[/._.. ..u..g.=.?..$...K/.....'..H........z.....\..Z..@&^#..N..N.....o...........<a..PTk........b.>{.....gJ..k....ON.]u].o..?P....{..+....f.Z/O....}\|.o.W....FK[.d.7.z..\..?.7&...k..VtH........_o...<........&......~.K[.om\.^...\.

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	255
Entropy (8bit):	5.098325314868938
Encrypted:	false
SSDEEP:	6:xBB0HCc4slsk9ZRcmT/LmTCXVPxbjt8Uy:xBBBk9ZRcklVxCUy
MD5:	7AAE6383F0725382DFE4F0756BCCE354
SHA1:	3DB9482367D2B93391854542C931815F2274A191
SHA-256:	CDBD1372AC9D5E45B066C7170CD34B8557021E3825A89BB71568F5B10426170D
SHA-512:	FDDC4B11A171C4642B7A7292B7B9804F857D56C0C082AD8114F3F4827F14DC28CB5A765E8193E18F5B702D55EA56EFC2981D5EF0E5F27429AB3984C2368BD194
Malicious:	false
Reputation:	low
Preview:	module.exports = "<svg xmlns=\"http://www.w3.org/2000/svg\" width=\"1920\" height=\"651.1\" viewBox=\"0 0 1920 651.1\"><path fill=\"#3a4eff\" d=\"M1920.1.8L975.7 649.4-1.1 538.1v114l1922 1z\"/><path fill=\"none\" d=\"M-1.1 5.1h1920V652H-1.1z\"/></svg>\n";

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 15741
Category:	downloaded
Size (bytes):	2669
Entropy (8bit):	7.927783256887867
Encrypted:	false
SSDEEP:	48:XMLzAUSihBv8vdFSjrh/7TWibtwZn9TgUVD9NONzW6fthdxtftZFTVFp:cPAUR38vHShTTIZnBoNzPf5fz/L
MD5:	A3ED5EB324D744B15106C39E3173D6F6
SHA1:	1F7CBC353A77196BFA4BDF4FEB5D54199B7C8EAF
SHA-256:	7BE50D7BBF65F245516021F93A1077307FAD8816E22393D0A8FA0BD823DBFBD0
SHA-512:	D18CD6EFBB0159CD87006ED6C4CB674FF5EAEA4EE379CD9F3A2313C6F343667ED5E7A2407A8DBF9B907C3E7CEE830737F389CE70AF5A55D7186EB663803E7225
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/8405.5eb49c1a7107f741455b.js
Preview:	...........[io.8....B.b.i+h.LNg.L.k..d.......,....@RN...}.R.%;v.4......E..-3.....@...'...!...>.....Hts.}.x.<.....n....>..=.8...q.m..8..^L...3.m...S.t.3.z.:.;n..N....}.Iqy.....q...........D.<9<9>..P^.....N .......<..M.#....y.....M..~&cn....,}gH.7..K3...j....o..k.6..3.z...H.fY....eD.,1......L.L..$...{....0EO..hl1..S....'.}M^}.E....SH..HB.g3Ud0w<1.H:0.....B.y. .+..Fc.t$.F)...;..J.17.H.r{k....#a..9....S....H...`.a.t0...v...\.....J0.....5K.X...dhz.G..u.<.{......+..b;.+...M.rF..iN.5.&.8.<.>4!.h(z..8...c.]'H........Br..S.-.I.c........ I.[..t.'.&8.]D.A<..!...nD..._..=......9..hO..M#q.}..J.....K..R1xH3I.&..~.. ......N]..`....N..f.i.N...~%y..T@...\.#."..;..Y.vvvm....F....m.aC...h._..J...C....].i.@.......) Q..Z.iq.....@.P..&.#.s..a....$Y....n;"...TD.3.?I....g...SK.........6\|.-...!R#H...Q..q..F...Q..#Q..9....Jf..I..VH.2T.T.RL4.~.3<.....I.....Eb.R..L.P.........s...1.W..C..I..U..Ul.#.H;....*.:.\|.O.u.n_y;.H...K..n.......F#y..!I,.aWFgX...&.

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 274
Category:	dropped
Size (bytes):	225
Entropy (8bit):	6.9681014979955345
Encrypted:	false
SSDEEP:	6:Xtyasw34KbL4bcvKJHFFkfrjhYHMln8Mco+HLGhaE9/n:Xyw31bLGe4+8a8w+HLGv/n
MD5:	F98F18DBE10C65ADAB892608BA174E81
SHA1:	BE93D26D63E46430C1B253A4F68FF7DF3483106A
SHA-256:	1674E01148A466B835AB7DC8B67BBDC8DD2823021C25B3C1FF4E540F99640ADF
SHA-512:	068B5BB25565CB8D531F51CCB37683214811797332B1050A12DF3A12ECC1D66D843A44E6281CAF58D46C1102E33A22A39C378E687E7304A8618D707DEDD7EDF8
Malicious:	false
Reputation:	low
Preview:	..........T..n.0.._.PgQ?.%'M2t......l.P,#V#.O_.-.t"y.......=.}M.....i{L...{.r^.B.R.4...RJAH..C.....4.?O!.Y;.Hx...........^s.q...%-....w.Pqg....:.Z.....KO...q...h.X4Q5...b.F..v`.F...[l9.....wd.d............1.......

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	459437
Entropy (8bit):	5.5510344167487435
Encrypted:	false
SSDEEP:	6144:vsHVfZ0e18xBpM2xEkCDaiAtrqDLWPX++PGL6GkGzPJntGDA5dLdn3rr6cKRRgGy:zHmou+P2FzPVtjzZvERRg3
MD5:	C85053053E8DA68B53AF543A9453AA5F
SHA1:	00AC2CDF3D3DDF7E35ED1CE71211B2A8A672F1C1
SHA-256:	CCB119FFA497C8975381EE78A0304F9D90008C3C08519852EC4D1DF30972A2C0
SHA-512:	4F55A69F89C08D95F6168802052552CA811CF1A6081973920625C24042554A8088DEE7B635E310EC27B8EF698809ED3FD231FEB503A4656F8AE09869ECCE1F23
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/graph/assets/8.main.bundle.b31bf10d14fd1bba0f63.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],[,,,,,function(t,n,e){(function(n){var e=/\.\|\[(?:[^[\]]\|(["'])(?:(?!\1)[^\\]\|\\.)?\1)\]/,r=/^\w$/,i=/^\./,o=/[^.[\]]+\|\[(?:(-?\d+(?:\.\d+)?)\|(["'])((?:(?!\2)[^\\]\|\\.)?)\2)\]\|(?=(?:\.\|\[\])(?:\.\|\[\]\|$))/g,u=/\$\$?/g,a=/^\[object .+?Constructor\]$/,s="object"==typeof n&&n&&n.Object===Object&&n,c="object"==typeof self&&self&&self.Object===Object&&self,l=s\|\|c\|\|Function("return this")();var f,h=Array.prototype,_=Function.prototype,p=Object.prototype,E=l["__core-js_shared__"],d=(f=/[^.]+$/.exec(E&&E.keys&&E.keys.IE_PROTO\|\|""))?"Symbol(src)_1."+f:"",g=_.toString,v=p.hasOwnProperty,O=p.toString,T=RegExp("^"+g.call(v).replace(/[\\^$.+?()[\]{}\|]/g,"\\$&").replace(/hasOwnProperty\|(function).?(?=\\\()\| for .+?(?=\\\])/g,"$1.*?")+"$"),S=l.Symbol,A=h.splice,I=x(l,"Map"),y=x(Object,"create"),N=S?S.prototype:void 0,m=N?N.toString:void 0;function L(t){var n=-1,e=t?t.length:0;for(this.clear();++n<e;){var r=t[n];this.set(r[0],r[1])}}funct

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1043 x 698, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	12414
Entropy (8bit):	7.162803239499544
Encrypted:	false
SSDEEP:	384:NkugCVjOuGo2MUtq//RSaxV1p/Tt3RJRicFoGulM1kOmRFBVyDubkX:NxgbGEQ1FFoMkOmRFHHAX
MD5:	2C9A0FBDE0906AE9486FA6DDDE5875A9
SHA1:	4DBAD549EA29E5DDD4F0EB5FC2D537D13EA6F6D0
SHA-256:	1A8DACDF71F627F7D72F355F441DA02494E50B19A2B7B812ED3759CB0F812FE6
SHA-512:	865DEC7A348CE085AFF73EFE68C11737679B5C39CDCC9C4A917EECF5416D3D704AA0542BF72CD40D313EFCB3727EBEC091E830B212BAD3FD76C86F107F9036B8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k..A..0EIDATx...{ld.}..{..pI..-U..]I.bI......D.r..A.:..A..M...P I..(P.)..M.k...#H.IP.......Mm.l.qc9.e.,{-)^-./>....3Z.G......q>.`..rw.93...}.9...................................................................................................................................................................................................................................................................................................................................D....g?....s..80yf..aeuu..'N...N<.~z....7......V6.Vk.{G...Z..,.w..0..mM@DUU..>[...rqqq.~..:x....87w...1..9>>.8==..ccc....n.Q>......n..'...?......}cll...O.F....{M...z......{.I......?...O.?}.UU.....r.].6........?..t...:].h...'''.O....q..>=??.....C....lN.MOO......'....h4n6..W.cc...o..._z..$X@.@./....w.sziy.........o...;..zlue.3KA......jg..]~.\...,...[......zezz....G&&&.....5......?...o..o.[^^..W.^......,,,t.6.dr\|\|.l4........V.U..Z.JG.ccc.C.n.?~..G...H.......}UK!L`CO>..D{.x

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	724
Entropy (8bit):	4.875954072356056
Encrypted:	false
SSDEEP:	12:t4TtAhJnBnMs4E32V+KbwXI7Yze2ox/jB9HJZ8bvxZKY:t4TtA7Zg+KbwXI7sevx/jTHJQl
MD5:	D389389752A288227E0EADAA6C545738
SHA1:	89CDC9EA0BBA1143EA1D0C7F6BA5C13FF92C3875
SHA-256:	8E887158E61E4578F4838FFDF0BDF046D6555F37FEC818EBD5484EAF40C7DC2C
SHA-512:	73FA3FF982842B52CE0CB038C1FF41C8707B6F53166D3F4655C38C2913558DD3A73C0218E6A6C13B44EADBCF3C409C2F2D9112BDFEBD3D295E5DFE23B0CC25D5
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/images/overviews/ico_graph_6.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="150" height="150" viewBox="0 0 150 150"><circle fill="#3B61FF" cx="75" cy="75" r="74.5"/><circle fill="#FFF" cx="38.1" cy="74.3" r="12.2"/><circle fill="#FFF" cx="76.3" cy="47.3" r="7.8"/><circle fill="#FFF" cx="66.3" cy="78.4" r="7.8"/><circle fill="#FFF" cx="95.8" cy="65.8" r="7.8"/><circle fill="#FFF" cx="105.5" cy="43.1" r="7.8"/><circle fill="#FFF" cx="111" cy="86.5" r="7.8"/><circle fill="#FFF" cx="97.4" cy="102.9" r="7.8"/><circle fill="#FFF" cx="61.4" cy="107.1" r="7.8"/><path fill="none" stroke="#FFF" stroke-miterlimit="10" d="M38.1 71.9l41.4-26.6m-15.1 65.3L39.1 81.1m32-2.7l-38.8-4.8m46-26.3l19.4 19.4M78.3 47.3l29.1-2.3m4.5 42.8L96.8 66.4m-1 35l1-35"/></svg>.

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16769)
Category:	dropped
Size (bytes):	378172
Entropy (8bit):	5.661443819853832
Encrypted:	false
SSDEEP:	6144:JxGlxMX/iOG90oPmPx976DmoMfgQJTAOLx0/awb:TUU6OoPm77by
MD5:	4BFE0A1DAAE2DD57F886064AF079ADCA
SHA1:	9FE99BE31F44BD94975A38CD056638FCA39B2324
SHA-256:	DAC781EB44F06CCD04BAC1FBFFE129C80A0A63B73C6502D6533A3F5ABC0B520B
SHA-512:	4612058602F53F5E4729228358E01DD43EFA0A4CA07640EE147FD9192F8E472E9DB6143B08459D636CC3CD4569D510803AFCFF35F6E94F955FB76A365527E748
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":10,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":8},{"function":"__ogt_1p_data_v2","priority":10,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_l

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Reputation:	low
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 391
Category:	dropped
Size (bytes):	272
Entropy (8bit):	7.092623351227048
Encrypted:	false
SSDEEP:	6:XtT/0triX7slAjTlp6c/As974mgJMFIaOh2xEdGe3uzUbael:Xd2y7WWTliU8m8hWEdGIl
MD5:	F04520F4EF75A6FFA27E1BF1427A7D70
SHA1:	AC365AD1953FA26833D1AC7AE335FD31BDFF1B03
SHA-256:	FA3F824F6B713CEF8894D43424111D6DB30394F0457B9DB3BAD5F1281A296A1A
SHA-512:	D757CB08122BEE6C08783D0414944CC94DB565314D1D9109FFD5295919FCABFB8B699FA1B01155B6B20C9D173F262AC9B8FA3F4220B9746E6568036C0F77DC07
Malicious:	false
Reputation:	low
Preview:	.............J.@...>E..]X.I.6m...VA,.B....i...i..6..A.4?..1.....y..)#....VV..a.f....B...;..K.......o...s.@.@..w(.#.PV.D.lW..Z.;....F....H~....ct....<.+...Y..I.;..).To.Q....`b,.F.9...~i.....?[..r.......W..u@..ixR.y{}YdC.r.`..N.V.....Nr..7........D....

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4495
Entropy (8bit):	4.948267052980108
Encrypted:	false
SSDEEP:	48:jeePUJMC95SxaO5Sx5QGascw6sU99YENvWoGmuwY6kcPhsMPoBAijzln0TqfTlhL:7LyC7C5CsKNuof3PhsMPBijZnHfRUXM
MD5:	C14E45E189F801818B14F1315605A632
SHA1:	DD7E7FB9D156B343BEEF0155B41DA1C847D69E41
SHA-256:	DCEC22BBCB68119D6C7D6D5E088FB82183A9826D0C9E3403F1386FD837F06A89
SHA-512:	7312D1E49927990CD81CD62C953AC7566C85007350250403ABE3A2A9635AFA516B3511E85477DD5189741FCCB7D0200C8DD24074AAD9938E5D4484BBDEEE59AC
Malicious:	false
Reputation:	low
URL:	https://www.google.com/cse/static/style/look/v4/default.css
Preview:	/*. Default Theme, v4.. . /../* Selector for entire element. /..gsc-control-cse {. background-color: #fff;. border: 1px solid #fff;.}...gsc-control-cse .gsc-table-result {. width: auto;.}...gsc-resultsHeader {. border: block;.}../ Search input /..gsc-input {. font-size: 16px;.}../ Hide clear input X added by MSIE. /..gsc-input::-ms-clear {. display: none;. height: 0;. width: 0;.}...gsc-input-box {. border: 1px solid #dfe1e5;. background: #fff;.}...gsc-search-box .gsc-input>input:focus,..gsc-input-box-focus {. border: 1px solid #4d90fe;. box-shadow: inset 0 1px 2px rgba(0, 0, 0, .3);. outline: none;.}../ Search button */..gsc-search-button-v2 {. font-size: 0;. padding: 6px 27px;. width: auto;. vertical-align: middle;.. border: 1px solid #666;. border-radius: 2px;.. border-color: #3079ed;. background-color: #4d90fe;. background-image: linear-gradient(top, #4d90fe, #4787ed);.}...gsc-search-button-v2:hover {. border-color: #2f5bb7;. background-color: #357

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18273)
Category:	dropped
Size (bytes):	18891
Entropy (8bit):	5.656628184450963
Encrypted:	false
SSDEEP:	384:AQNMEDyIzRuH/uT3ZFS2jPxtKlAU1YnaejXfiz:A+M8yeQfuDZFS2jPa1iaer6
MD5:	27AF06F31164353B7F0E188967982AEA
SHA1:	431ED9C56175E1CE213FDC12563D76838F3DF7B1
SHA-256:	E296E95BFAC0A9C39E4BA84451A1D0CF83B167CF5E284CA6752F0AA61AAF215F
SHA-512:	68A3E3AECA4C52400BA6B883DD74F01774FF047940C4342DB4928AD02696473EEEF0696ED78927510DDAF9CA1DA0EC1B71E6173031C3EBB46CB963304D78E5B9
Malicious:	false
Reputation:	low
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var U=function(r){return r},S=function(r,L){if(L=(r=null,g).trustedTypes,!L\|\|!L.createPolicy)return r;try{r=L.createPolicy("bg",{createHTML:U,createScript:U,createScriptURL:U})}catch(l){g.console&&g.console.error(l.message)}return r},g=this\|\|self;(0,eval)(function(r,L){return(L=S())&&r.eval(L.createScript("1"))===1?function(l){return L.createScript(l)}:function(l){return""+l}}(g)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var l6=function(r,L,l,g,F,v){function S(){if(r.A==r){if(r.F){var Q=[O,l,L,void 0,F,v,arguments];if(g==2)var M=I(r,(x(r,Q),false),false);else if(g==1){var U=!r.K.length;x(r,Q),U&&I(r,false,false)}else M=rj(r,Q);return M}F&&v&&F.removeEventListener(v,S,h)}}return S},Uc=function(r,L,l){if(r.length==3){for(l=0;l<3;l++)L[l]+=r[l];for(l=[13,8,(r=0,13),12,16,5,3,10,15];r<9;r++)L[3](L,r

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1838), with no line terminators
Category:	downloaded
Size (bytes):	1838
Entropy (8bit):	5.854832783067556
Encrypted:	false
SSDEEP:	48:iEAhSKo75XI2ovtUjPKtXsDXx/gZO1/2LrwUnG:pAxMI5czgk/msuG
MD5:	A3B2F935CEDF98CF2849A74EB50477AF
SHA1:	699479DF6435336BE4AA1D41378148A922CFD8F2
SHA-256:	3609B3C4EC2F9E0E1B6A33987818B09BAB19817A0B978068E10A909F74AA24F2
SHA-512:	301380C10598EE09D07B6C3259A21F73D72DEA17007FD3849FEE77DAE1FA09B8FD02A9FD95E949FFF4FC5329C9F2BB77ED7FD6DFCA1B5BB37474B6ED4DBB7250
Malicious:	false
Reputation:	low
URL:	https://www.recaptcha.net/recaptcha/enterprise.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.recaptcha.net/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().t

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	dropped
Size (bytes):	70187
Entropy (8bit):	5.39738836068354
Encrypted:	false
SSDEEP:	1536:u6af+OBUciGUS/PYs264yqYLZOpztNngxtNngFgRtNngU/1l:DAUSnO6Wk
MD5:	7992F6AAE4FC0C3AE1E4097C1C8ED4BA
SHA1:	5EDF6A01735737C6076D57311C9BBF831A47A8EF
SHA-256:	4758E6C28602BB3794DEAAD613EF426B37CD05093C3648427B258A53CA403829
SHA-512:	D1AA65B76C5D9A285D5BC469771C74039AEA11B9E6ACA190BFA181E9F3BFD5B52A928B57419791E250EB3DFC7CFC5A1CC9E7A7A84749135EC1B7F2A9D0334569
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[38304,87960],{73355:(e,t,r)=>{"use strict";var o=r(48704),s=r(16645),i=r(62832),a=r(15323),n=r(45241),b=r(44052),l=r(66813),d=r(1715);let c,p,g=e=>e;var h=function(e,t,r,o){var s,i=arguments.length,a=i<3?t:null===o?o=Object.getOwnPropertyDescriptor(t,r):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(e,t,r,o);else for(var n=e.length-1;n>=0;n--)(s=e[n])&&(a=(i<3?s(a):i>3?s(t,r,a):s(t,r))\|\|a);return i>3&&a&&Object.defineProperty(t,r,a),a};const u=2Math.PI45;let m=(c=class extends o.LitElement{constructor(){super(...arguments),this.enginesDetections=0,this.totalEngines=0,this.isAnalyzing=!1,this.isTrusted=!1}get stroke(){let e;return e=this.isAnalyzing&&0===this.totalEngines?"var(--bs-tertiary-color)":this.isTrusted?"var(--bs-primary)":this.enginesDetections>0?"var(--bs-danger)":"var(--bs-success)",e}get progress(){let e;return e=this.isAnalyzing\|\|0!==this.enginesDetections?this.is

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54022)
Category:	downloaded
Size (bytes):	55321
Entropy (8bit):	5.711701599413161
Encrypted:	false
SSDEEP:	768:j20g5tZKEK6AYmeOh2uovuZ0E98JBpyhaanyRx8V76aeeKbjmBbu2raPC9:j2gESLes2uovB/p5ayTmDKPmBqEa69
MD5:	8794C1A49D37B13EA7FF58FF0FFD0343
SHA1:	2ECBDF9C56AC695C66685D92B11F12B0F564B75F
SHA-256:	A25D8FC21839D93BD040D20B58D846944EA8A1F7BA33AB1AB337F8492D02477A
SHA-512:	096195FA58C198CF3A71FBBAB9F64F9234827E82054BCE6328DEF5B56A018D5DF34DB34368628D1140390772AA51F296FFA7D8711DE1D71074346096632ADA6F
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/th/ol2Pwhg52TvQQNILWNhGlE6oofe6M6saszf4SS0CR3o.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function d(E){return E}var g=function(E,U,A,B,M,P,t,m,l,W,f,a){for(a=84,W=U;;)try{if(a==B)break;else if(a==84)l=I.trustedTypes,m=t,a=A;else if(a==96)W=U,a=2;else if(a==64)W=95,m=l.createPolicy(P,{createHTML:x,createScript:x,createScriptURL:x}),a=33;else if(a==A)a=l&&l.createPolicy?64:31;else{if(a==33)return W=U,m;if(a==2)a=I.console?E:33;else{if(a==31)return m;a==E&&(I.console[M](f.message),a=33)}}}catch(G){if(W==U)throw G;W==95&&(f=G,a=96)}},x=function(E){return d.call(this,E)},I=this\|\|self;(0,eval)(function(E,U){return(U=g(24,79,12,0,"error","ad",null))&&E.eval(U.createScript("1"))===1?function(A){return U.createScript(A)}:function(A){return""+A}}(I)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/jso

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3385
Entropy (8bit):	7.920781869920929
Encrypted:	false
SSDEEP:	96:DSuXLu3GsStZJaNARDQ+esOMMMT3ml7tkfGGkKNZmR:DSuZpVQ+9T3OY7xA
MD5:	EEEE25A5D2E4D0233808B9947AE71264
SHA1:	2D766E161B5BFB4BFE4DC1F812E170682B38D086
SHA-256:	098A90062722E7FD4FF7835AC60BC165D6E08679EE45540A7004D4AEBB815486
SHA-512:	F7266AC4304EA355A5FBCF091A069179E12BF89F4F932C81312263D49F37B8869D8A0E228DF918CC6A12598620799D755BEDA9DEBD44E7DBE665552E181B0CA2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....pHYs.................IDATx..w.........b6..Y.Deg..DibTT<D.J.DDD......(.I/....P....... ])........+.....o.ov.y[..s.y3wn._...HT2...q.r.;.;P)w..x.r7;...q.....).....q.(.^E....W.k..7N)o..xE...2.".P..[.Z...2.x..{....r.c.).R.Z.V....c.j..?Q)op1JW..C....AYY....{...w.R..T.=.............-.....w..,.Q....g..F.....1.-p..W".8.g.R...x...V.f...[......~.....\|._{.-.k.3f.a..(...,.w....x{..r......?.............../.'.xVO.4.....[A....9n......:..99.5......M~.i..F...`...?..{.e}.m}u.z...../4}......60.....zV.Y..p.....m.\|.=!.m..I.\.d....^.v.3.....{..z...Isl.......Q.bz"......s...\|..3.<Wj.m.\Wi.]..z..IsN.:.%.$^..C..8..a(.f.."..^...sr.m.R.W....>#9.>.d.>.&a.0.\.Bh..s..[.\|.O..K2..*\.LS../....o.....y.Cp.&M.b8..c.=.k.H-...y;=\|.8=o.z..z....<o.;z...Y....CO.2e...].v...k..S...u.o_..a<@QQ..6lLl..<>.l....~.^.q..o.9F......ma..^..........i>..6m.W.^...G......E.....>.x..U.ARx......u..ns{.>.z.......~..4....}WSv..........4b0.69<..R

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (543)
Category:	dropped
Size (bytes):	120944
Entropy (8bit):	5.467596130563416
Encrypted:	false
SSDEEP:	3072:nwbHVyDmdK1WbN2bt9Hz1YnCPqGidGuxCx70qrhQ:nw7VEmdK1ON2bt9Hz1YnCPqGidGuxCxU
MD5:	A82C9937FA68C35E22406CE132322C6C
SHA1:	312808FC6FB26BA0E1BDBE4CBA376739FD582023
SHA-256:	7D5E0BA67C9EB12C26F51A17AE28861E85E06719951C0F75F52AA5D3432A5905
SHA-512:	8A1C02DCF5B17E76034779B6634E3C3E616F6415B4FB35F90BDDDD931EEA1830BB881762B04F1C6517DE492B0FEE5CFB32DA6891EFFD8217B9D15528C34EE671
Malicious:	false
Reputation:	low
Preview:	(function(g){var window=this;'use strict';var y7=function(a){g.Fk(a,"zx",Math.floor(Math.random()2147483648).toString(36)+Math.abs(Math.floor(Math.random()2147483648)^g.Za()).toString(36));return a},z7=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);.g.sha(a.D,b,c)},qtb=function(a){if(a instanceof g.qn)return a;.if(typeof a.Lm=="function")return a.Lm(!1);if(g.Sa(a)){var b=0,c=new g.qn;c.next=function(){for(;;){if(b>=a.length)return g.M1;if(b in a)return g.rn(a[b++]);b++}};.return c}throw Error("Not implemented");},rtb=function(a,b,c){if(g.Sa(a))g.oc(a,b,c);.else for(a=qtb(a);;){var d=a.next();if(d.done)break;b.call(c,d.value,void 0,a)}},stb=function(a,b){var c=[];.rtb(b,function(d){try{var e=g.Vp.prototype.B.call(this,d,!0)}catch(f){if(f=="Storage: Invalid value was encountered")return;throw f;}e===void 0?c.push(d):g.Bma(e)&&c.push(d)},a);.return c},ttb=function(a,b){stb(a,b).forEach(function(c){g.Vp.prototype.remove.call(this,c)},a)},utb=function(a){if(a.qa){if(a.qa.locationOverri

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Reputation:	low
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1159)
Category:	dropped
Size (bytes):	339439
Entropy (8bit):	5.619282625649945
Encrypted:	false
SSDEEP:	3072:f0h4Bnb1KNeqIdUPtUmcGPPe0FgfesjeotB0ilgcSaStKb2tg+:fgMnU/WUPtUEPm0WfVNtB0iWcQtD
MD5:	045C78F7995C807D4FC0C00E56FC75CE
SHA1:	30ECF132074FA139559C4A9EE4113FB31412F0DC
SHA-256:	F40296D2D9F2E67194CBE9CE3C7EF6BC20A2259B484914A596671E8EA4D0F4BC
SHA-512:	7C00094462204CD875A4E662FEC8A1663EA58AD376BADF6655DCDE263258B57AF49FEB2D4D21CD194BA51C83C5BF950A5DA2385419A2A628C49145097780B564
Malicious:	false
Reputation:	low
Preview:	(function(){'use strict';var r;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ca=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var ea=da(this);function u(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ca(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ca(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	11479
Entropy (8bit):	4.666974720074739
Encrypted:	false
SSDEEP:	192:Qsb99+gLY6AJb3N/zJuT6QRxGIOqQtiekVDdRIr9/R2h/RNmpzpxGpAoDPnt0tji:E9bavqcPlwNpkaEox8mwd
MD5:	E10D934D556FD7B28FB6AA26E394B1C3
SHA1:	76197CD1424F9B5A295E207240356D1169A2AAC8
SHA-256:	BF6AF85F14E5F1BDC30CD8A30406CEDDD1FED87F4C7BAD5E86FBFCC1B0660D19
SHA-512:	DCA473952DB670656401C4A29D64AB9318BDBB97134891EF0EA19E9DAE0A4A5B550D06D4CA68E015F839E285F115CAD7A00EC91420C0BFDBA2BA7F98D09D48C0
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/ip_addresses/3.167.163.46
Preview:	{"data": {"id": "3.167.163.46", "type": "ip_address", "links": {"self": "https://www.virustotal.com/ui/ip_addresses/3.167.163.46"}, "attributes": {"asn": 16509, "last_analysis_results": {"Acronis": {"method": "blacklist", "engine_name": "Acronis", "category": "harmless", "result": "clean"}, "0xSI_f33d": {"method": "blacklist", "engine_name": "0xSI_f33d", "category": "undetected", "result": "unrated"}, "Abusix": {"method": "blacklist", "engine_name": "Abusix", "category": "harmless", "result": "clean"}, "ADMINUSLabs": {"method": "blacklist", "engine_name": "ADMINUSLabs", "category": "harmless", "result": "clean"}, "Axur": {"method": "blacklist", "engine_name": "Axur", "category": "undetected", "result": "unrated"}, "Criminal IP": {"method": "blacklist", "engine_name": "Criminal IP", "category": "undetected", "result": "unrated"}, "AILabs (MONITORAPP)": {"method": "blacklist", "engine_name": "AILabs (MONITORAPP)", "category": "harmless", "result": "clean"}, "AlienVault": {"method": "blac

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.997660514702103
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKT/hlkMYatGECWaee:PLKdXNQKzLQL
MD5:	9AFB0D35BB088B3036561313BF7CE1F4
SHA1:	C7F3FDE34C537242969FBBD736B5B129611F1694
SHA-256:	6E4501CE6F65A1B8671A9D31A8F5AB56DFA4E30AA7A4A971DAA1544AB2EB53C1
SHA-512:	C08FAB7DD122743F8F942AC5F0F1A05A2A44BEFD7DA677074CC3D2D464A106CE88047C1396F4C99DABBF99541230CA37B05158F448E7014B36E1E9FE38C572AF
Malicious:	false
Reputation:	low
URL:	https://recaptcha.net/recaptcha/api2/webworker.js?hl=en&v=-ZG7BC9TxCVEbzIO2m429usb
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js');

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	120
Entropy (8bit):	4.635109609269849
Encrypted:	false
SSDEEP:	3:YJMLOAs2sDVDRySLAXGLBIvNFT0jLMLfLREFoARWHyzBjkHY:YIZhsdLA21IvNpbRARkyzn
MD5:	B11BF08F7BBCCCEFFD64C38DB4692E83
SHA1:	0FD7D2A807DF4A738205127FCB4C66BDA1986C9A
SHA-256:	07E0FCCC8FB46465382BA963D2164B2BDBE1129E65284FBF7DB8C87DF2639551
SHA-512:	E6EBFE5AEE3AC3A300942A71C4269B44B4A053EFB996D6401E0F4A35143E1E2934A0ED6F1759C89E1E47726A06E04C3C13E73DC5983BB3D5EF2BD724482F7465
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/domains/ghabovethec.info/parent
Preview:	{"links": {"self": "https://www.virustotal.com/ui/domains/ghabovethec.info/parent"}, "meta": {"count": 0}, "data": null}

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8764
Entropy (8bit):	7.944825415489751
Encrypted:	false
SSDEEP:	192:8MWksO8NCl+7A2ZIWbvlXw/e0e/iq0ERi/pKFVG+tfGBZzLdnmmv:PWksTNtA2hbdkw8/pKFU+t+BR5nmmv
MD5:	D834C97492CF87524B1FFA201AE05BBB
SHA1:	0915C22AC8353C9423DCFCC61E7071D49F4C0C08
SHA-256:	1614E807C8DF7665D0BDF4BF47099C45A94FC27EC69B9DE53C081B7A92929D65
SHA-512:	95CE816D69CCEC15AC381B23D8DDB0891A2DC9F6943DC66CA75038733A26932706DD8206A00CEBCA8CB8B2956124B146A2F8DF44918A5DF584E1B623B85075BA
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/images/manifest/icon-192x192.png
Preview:	.PNG........IHDR.............R.l...".IDATx..]...u.......w....H..c.........U.I.M.r.....!+!..)....!.lH.....m.`c...`./iW....}........>..w.j{..n..s...<~..mmmmA[\|...6.1i.A.........%;..n3....=G...4.W..G=.......&...@..2..3..f.o...@....].V..L...@.....M.4.... .....(.4M.ZY.........6K~.x'.F.U.K....NWylm..c...6S........U.Kmp...W.&t.f;..f&...........j..".....r..32.8e!.b.BFR..mE....0......o.3.T.1&.D..._..c...`..f.....e...i;..Q........!ds.w.:u.i......?Fvl.......~.9&.....9.;.D.`..f.h..?..fM.......0[.?T....^......~......c. ..LU...i....k..........Z.c.}.7.)....X./Cv...nm..&.6.#]a{..3I9.........fvCF...... ....+@~....@0............L.%.N...w...5Q.$.j:b.C.4E.gO.w.0st#hO<..].y.;.dD.).f.t=*7K...iC.....a...XJ......}..da...c..&.D.(r..CgW....oY.<.[....;Xh..23.v.)..C. ...5..v.....h.....8......V.ovW/...g...Q w..$....._..cl.S...Fr..M....@.....I.m.T.\|....fa.b..T.Gg$.tf....=..)..<@....U.$.3.oT...\|...}.L.@e..P'..qc...I.7.....U....l...C./....\|....7.GB

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 221
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	6.841014064623295
Encrypted:	false
SSDEEP:	6:XtqDe7vzqnoDf20BZm/6EIlKTOUgo+F8Rl:XSA2gs/6EIlCLo8Rl
MD5:	751911295BFFBFE07B94E21C19D23E50
SHA1:	CB4BBFB5C73B6A38FDC2DE7E55D32AD984D0106A
SHA-256:	413AC989E713AF6DF5BF755FF4063A782E139E0C8B666836508DCD4C03370EA1
SHA-512:	92F3AF4802BB5F6F208A7F8B68E3BE742231C68CC5DF207D3B6BC0CFC335DF202CEE4C04AE11C74B10ECBCF5B7AAB43C7251DC5E0713F85C30D986DCEACB5CC6
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/images/favicon.svg
Preview:	..........L.;..0..w~..u..TPj(.....VJR..J...b..N...G..[...Vafz.k.....{7<.Z...!...l\|.\...Q..3.8....dDPJ...j.z...9....Z_....B3.a..A+<...R@..".....5....,.E..n[0Y..(.$.H.+.}.`].u.N..[.\|.........k?....

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 58004
Category:	downloaded
Size (bytes):	15134
Entropy (8bit):	7.984256581631135
Encrypted:	false
SSDEEP:	384:keSWlIFfScW7e7dKyzJVgmTElihTRgrb08A/Xane+gsP:NlIpbWM/TEUTRgf0Z/qneUP
MD5:	6F76AEEC5FAD589B2B81E8BCD340B6E5
SHA1:	165D110FE92768CDCEDB7E217F0F3B49D8C1CC11
SHA-256:	3594950139E65AA66876788E9B47185275D5A7FCCBF295BD32E50A8552B6D081
SHA-512:	8FCF8A43CF237C269C47935E563FA1FA85F73701FF09561812F99066649DF7A7F452E14241C721007D33BA7F373903184755511588C917A15CEEA82F51A2D462
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/30592.64f38a11064ff2dd4b23.js
Preview:	...........}kw.F.....0.8...$u'M+..9.y.I....he..%....@]B..S.n4@R...{f.(....TwWWW...y.yY....g.d.\F.Y8...l>.\|.....0..o...9:n..yvV?:.j..t....n..?..o.{..c....V.....6....a.%.......n.1~l..n.4..?.:.;..$.....~......?.O.y.L...4.V.~az:?..y.L..i~.c.....t>.....0..<.-...i..\|9.%MfQ._...a...$....I/..k.7.....,J..h<A..kf.+u.(.&i.G.i_..";.^4........#.n.....[...l..~t..7.?.O.uZE\.6..s..s.....h..L..4....C.....u..h.O#.J..O...Q.8.....h:.$x..'.ap..a..=...r=..zc!c..[~..Y8.^...g....2..(....,..4..r...\|.Oon...'.Y.qe......=..M......O.....-.F...F.0.>h.X.{.:M/.f.....6...D>=]6........5._.H..j....>.gyr..h.k.ys.7g.E...Fc......=..h....h^..h.f.L.u.z.l..s.3..w.:[. ..<L.wYF..vg{oo#.....<...^.E..?$W..G...;.nmo...a.....4....z.....K...<{.z...7'[.3....v[N.^...4z..y\|..my...5.8./.4....EYC.<Z.......H.r.C..[..qt.F.G....>.$...#.)....G...&:.}....vL\..<..>..f\|p...1...?.?j....f...i?...dBs..8Y~.\|..C...z.x..<YI.@.K..z..~=.g.$..Q2.....b.."....*......si...0....0-..~...1..N....+.d..`@..?.._g9.YN..-

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 43621
Category:	dropped
Size (bytes):	6355
Entropy (8bit):	7.965170500412852
Encrypted:	false
SSDEEP:	192:vUezV2A2Xeh/nByYbzxJkKGsPo2T3hWXQ:MycApdTbzxSKtPos38XQ
MD5:	4786EF0606AC9D378C08C2AACB0EB960
SHA1:	22EFC6EA50EB2D979E6BEB9C5E9104EA71704805
SHA-256:	6496B01E95685327E4C6FA1F62768D064CC6FE274A42D6DB97370AD4A2FACEA6
SHA-512:	07E35F5C0E9CC1527A5F396D3C82D0228BF707959CAC8596D9744F8961FE001F220A7D7E25D1C030CC2DF11E0DA602A3C96E0C852E7106EF2254286719E13626
Malicious:	false
Reputation:	low
Preview:	...........=k..F...W...+.H.............p>W......T..'.....bw....le..<.......h..;T..2..._.l..h...............\|u.....w..?T.....?..s...d....).b.^....V.?........`:.Ol.._...hh;!.:..}.vr.....I...d:..N..C.p4..h`>..m{........r.].W.C..i..!8.M.PCwa.9.H^W^F.M..n./G_.A~..j.}........!._.....=).oH.....>.*....+(jo.....X[?.u.u.?.!.....E....W.]....I.....pB....u....._.k..U.6.g?...W}.E...z.........?\|..eI.C.[...<\|...2!.4'b.....(a.V.l.gaUY.}M.".uZ...$."R..#..Y.M+/.w.0..6.m..yU[.J.zi.Uo..I..5..V...W...{R..+..J.....@.....Tf}..+.k.s.>\|.K.p....Z\d.x.7...A8....y.z.....~......=..P....2:.u...z.....gQB.zQQ..\....u.4...0...,.@...YfE..>,.4..!.3b.......J....u..E....E.U....g}.+`..w..%/,.X_...P..}...b.L...9..Um.....0.......\|$rZ..m.g......(....-.Z....w..YQ....4.}a.OJ.-.D0......].!a.oq.YE.%..]...zk._.....kXE.7....F8.%/...W.r.n.....wr.O..?..3P.A..0.K....v...U.e$...'.......[7..%.I.=.dps..1..h...m.NN.U.CF..e.C^.k......z/m'....[....A.....I....CX]`...+.s.4.@R.D....

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 23809
Category:	downloaded
Size (bytes):	8748
Entropy (8bit):	7.976606400962137
Encrypted:	false
SSDEEP:	192:mrlgVV7htvREUilcucwVoNdx7h1KTTuEmoag+R2:mruD7hRRVycLwVA/7umzNM
MD5:	4CDF96852CD5A72C52211ED323F2FABA
SHA1:	B4628B3ED5710F1CE399BBA9C3C9774DFB26FC6F
SHA-256:	DFF79CBA648CABBCF4590244801E1E5DDA9D9C933B37836B066C7E70E7435CBF
SHA-512:	4B5ECB240AE8DCA7952C6A9034ABC6F1BDDF4D9BB725423A52BABD213F9F360D6FC3DBEA0B1DF36D98CAEC499D2E7574A7178F4839E5BE6A4680049993E0ED98
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/33274.3b5af0d06c20ca4c42c4.js
Preview:	...........\k..F.......W...H .X..v..v...9~..Z..........[..B3B....qTTWWWW...[.B+.".+..W.tnm.t...g.Mv~Q..I~[EI69.......zS.{..:....1...g.]/...p.....1.......`l.];.%...9......o8.....m.....C.@.00..=.........o.. .9(........1.......k...(...mc4F...8~...0....6<.......?..c.aC..{c.u}......(q8.......o`......pV......zH7.N...........H......P.J.\..\!...Z..{(.......;&u....k;..u\....r..k@4..x.:..Tz.CK........:.t......-BJ..l..{..E5Gc.Z....#.......t#.............Q\......h.!..5<4..v.z^.\|0......(..<....-...p<..}#...`.7.>j......=..........x..o....s~.4..63..scm,..$.<.O...d....3Y......%E.b..YUZ.....%V...(.l....$.G6.q...+k!....OE..Eu.X.q.....Q...4....I...Z.\|.....y...k..Y3..ET.~9Q.....T...s.F.J&...tN....41.~/..&......I.j...~X= .2..`.............{..{.T-gb.d....g.7...$N....e%.Y.e..z....u.g.[61...]n...eY......(.M.KQN~. 1Q.)i...l.G.V..)TSN.on...XC3`..JE.Rd.z..Y.......~/...o6..r.z.ll(.[...J...j...?.K.P..).sTv...7.....S/.j2...6gQ"."Of.....B5'.].pO..#{.6.O.$/tW...M.D....`n.

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	13128
Entropy (8bit):	7.982478168024834
Encrypted:	false
SSDEEP:	384:oQt36rKd2LEb9nrfKS3uBSi9tPfHe+68N8:oQ7dG6vivnHp68N8
MD5:	3602D92336C9891C71C5581B0C548782
SHA1:	2019E15EC70C6946EE851E27DF09C966832A5B51
SHA-256:	6B73AEEE89FBE2BE1A5D3297428063D8A386B9A49A6513172881703417558120
SHA-512:	EBBE9AFD42FE3F2DC09091894F5A7D76B06FBE4E3BA834D3CB85F9D97BC310F43FE006CA1FE9D7B0FF49FB4F257DC7925767196B0D14CC04CCF219C1FC5558F6
Malicious:	false
Reputation:	low
Preview:	RIFF@3..WEBPVP8 43...........>m4.I$".."w....in.u2BcT....q!..]-..'...yoI....:\..d..s.......xW...D..d/..I.i..........#...........W..... .=...b.W...7........o...}.?..c...'...>(.g.C.A.....o....?L?....M...7.........:..........p....=.?b....$M.. H...@.7.."o.A.D......]...\|...&.t.$M.. H...@.7.."o.@3;.CMN.O5h..".j..j..j..j..j....0.m. ,..F..1..3".=]..a....N.....s...z.....g.V.7....5A#T.5A#T.5A#T./...b.\.s.../.<.g.q1h.mc....o.[.Hr..O...]....1...8t..&.t.$M.. ,......K.zV^xK..N...VuY.TCg#..).A..46C..l..t..@oa.oL...}...7...\|o.../..,y..(.O.=..T..6d)..93J..u.k........:..#..D.ft.D....m..5.M"..&.k,..<..wK...i..'.h0z...4}.........eZ....NYF....{...#.,....I..(V.+.C.M..X...3\|..#.3...2=v.....Y/VwG...7...%.H.\...hWP~..........`+...s..yoI...%..<.C....S. Z..fZ. v;....>O..V..].....F.<?..#(.{"pC......4o{.......1....5WD>d.X.z.~.5p...D......o.."P}R.o.......J.}m..N....$.....M9.ec....]..3Q^.XG...Z.TZ.}.....\|AA..U.V.....&.W...L...B{..P`...\|...&....Ne..=O..$..{.

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 110028
Category:	downloaded
Size (bytes):	39000
Entropy (8bit):	7.9945024974181775
Encrypted:	true
SSDEEP:	768:011Ars2N2EkNMoQqXiDyQY2Xaj8w/9l29mIuzuc46W:gAFNANlX+K2XaZAmIuSiW
MD5:	DC89EBB4FFF3FA8F9ED5421952C08B25
SHA1:	80B361647C5C4F6C9E86BC3CE1CBD4F23E595EC9
SHA-256:	E9CD2F45AFA2323AA9B573434F8A81F60C34851B87CFA181C56B98B6E66F02E9
SHA-512:	20AE6C789EA9697BD275A94910E95EE920C1E47138B46202F70B20A66ACC173358D9D776C2DDC3EB12E41F6A01AECD985BBFB817EB9D5ECD02FA10B380AC932F
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/graph/assets/js/webcomponent-polyfill.js
Preview:	...........k[..6......Rhd..<.#.7.c.Il ..L<}.!.@$aL...{...ja.I....l.....Uk.Z.z.}....\|3...d...?z......k8H..,..5.....`.?.\.L...<........_p.....f.O....<..;W..d:k.;.a .g.4...Oy.\|p...t...(..&..M....,..q.f.h...`6..p.0.....y../[..].N......4..G/.v..O....st.....0...,...n..aI......>{qtr...t2.O.........G.g'.O_...w..@_..0$7.......2.....=..R........U"..O.x..Y6..&.x........x~.9......9.........8.\7..\|2...\|<.5n..W.=....... ............E.._.$.M.EhB..W.%..&T!...b.c.N...a.S<...<.qSw..<..E...;Q!.....E......ZU.{.I.....W..Z.....?..8..\..5..l......2....l....e...a....x-.N.&6.\|.&..Q.?...q'9...xx.7.m.P....i...<-.....(...\|...Q.7..WV..8.jO...t..V....6#..8..?.6../.Zc#..X,....Q....P5k.n...4..k..Q.-..z.T.5.m.n..%hu....$....8....zWS....Vx=...o..[.3........pZ,.hX)n.r...\?..f.$n..qo...&c..q...jnl./Z.x......: 0.qt;.?.[..w..v..._..]....z.Q8b...\|.l'.4..1..Lv..o.Nw2.K3a.u..k.$...i..hr..F.....FY.xHx..A.......)....G..El.D.E;..rY.a.[.k..=...p......q...Q....(n...E..v2.

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 22489
Category:	dropped
Size (bytes):	5646
Entropy (8bit):	7.97458463888794
Encrypted:	false
SSDEEP:	96:UQ/Vx7mG8Z5q7cNo37GKhelQcPufy8mXWlNdy8ruYvopE8kAdqf:UQ/rf8fqQNREel7F8mXcG8ru3E
MD5:	FB927E8CA4122016C9BF2DDB2EFC2AAE
SHA1:	7557B5DB3CD7A2317AB5D157B112A23F65E94BAE
SHA-256:	F8E6EB31A067F1AFA666BE7E147B6BCC61234750045814C2C519E543CFAB4BA8
SHA-512:	B75D3E5AD5FDCBF3215F7B303B7F1B923D80F2C3943EF6E587D8CEACF556CD2F4E6C31850EFD505A6BFE3DF9812E4DED445EA70E59298540D69E78F6E7D4196B
Malicious:	false
Reputation:	low
Preview:	...........\{s.F...>..l.D...P\|.......q.";[.>W..D..\.........0.IY.&w[W....gzf.{.M.heU$a..z%Ic..k?..\n...M...O..=.....0...\..w]w.~...;......._.+......O..1.....W..)....~;...F...ht>4.......&$........N..\\|........,%..........9._..K<.7YX%y../...=.N~..HV.VJ.E........6i:...g......V.T..f.+.5)..KR.E........%qO..T}>..k....$N....]...fE$..."F0.....3..Q16..O.D..tf...%.i..9y.\|0.<.....E........}...1....cV.jSd..O..O..[F$N2"o)....L^@.....%..#)"H....^..\|..w.}}...wW.2.\&$..R.\....;......:K^....)...{..x...7o...$..3..RJ..I.....SQY.{..[..F..E..[.&..P..a...&..6v..\.Y.U......&..$[.p....Z....Q.U.YD.ZHT....E.</KR.t7p.&O"..=...Tbq.?..ek.3..#..n....s..]B+.....@w..v.QIx...\|..7..w.u..f.w\|.`...d...wo^.z.....aD*<-....~.).I.....Ff......wo~xu..7o^......]d.....3.0>]m.8....3.y...H......y..c.............q.P..n~..y...Bj......../...hkV.._lu......M.B.1.e..:C.....t`/.......W.o..0.vr.}......_#:.N~...X...P\......._....X....~5?-,...a.%@.Y...tDx....5.{.Y...G.E......Ru\|.

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 19296
Category:	downloaded
Size (bytes):	5980
Entropy (8bit):	7.971059673572338
Encrypted:	false
SSDEEP:	96:E4NAQ9o/Lig0GYTUpv7ty9HJNxpZjfS7mcXo1Xv2kc99XJfpDVGQVBJO/HlliPzm:EZL4fAJ7w9Hv3lfS7mcYleka9LVGQjJ2
MD5:	42FC46104768142F2F90D85B5AC358B9
SHA1:	EEC3F8C8419F0C75E542D1F1BC889A4190375B99
SHA-256:	047067160565CF0C427F8852ED3CF994313DB7C67DA22A42C975B97FE3595950
SHA-512:	9FD9C4FD78ABD63D42E8B3164BC4CFE1F0998F737FA2D567EE4B31443C5F3DB115F6E6ACECD0D70D5EF1B17B3488048476FB4308AEADCEBA9CEDF38C74A854CD
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/71288.1829e1a8db7a3e06e295.js
Preview:	...........\[..6.~._.h6=b.dSTK-Q......d.k{...3.HHb."yH./....+\H....e.)Vb.Q.B.P.....Kf.U...h5.Y.u..&....czs[.............?.N~,....'.b..:y..r...Y..~y....rb.n......jq.^.V.....jfZ.\|.{..gZ%.........&....k:.^..a..[..Z..[;k.../.N.v.=.a.g........`.....,.J'a..c....O.I.^../.....YX9;V.x..g....feX.y..c......x.q..z]=.,..o.6A...b..s".fEP1.\K....w..,........U.r.R.6...x.~0/...zL....o^...h....4?~,.U..c..._\...r....)S.......\|X.IP....X..F.\|.W.$.$x...zs.I$.<BLc.qj.c..q.A.......l"ZX.W....C.5.q.}.Dq...........K...x.Y...0.G...6d.e.Tqh`U..`...B$c..cZ.[...[s.:..s..o...,>Q.X...x},....-.0....\.iFq..U....<...+^giUdI3...I.4..........Cb.....z..m.U.0.Z.G....Uf...=.^./6..s5H..#..H.n,x..I........!(...kjKU.N...-0.uw.&K...U....z..2..P.Z4.4^.i.......Y..<O...t.B./.2-.i.pq.....4..W.;..:g..{...B..Ab..4.r.E..,G.).Yi..e.&.z.?~..I@k..k...q..x.NK[#..DP... (...S++W..1^D..`.%./..@...Kc@.$...n.e..c.@.C".S,a.?..a...;$.;.....g....o.ll1X......Z......v'.aC..L..H...."...i.../..D.y..H.6..=

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1212)
Category:	downloaded
Size (bytes):	359366
Entropy (8bit):	5.549209156154755
Encrypted:	false
SSDEEP:	6144:vUI+ZDozC5CzD4bU2bUZT8zu1NOu3VKDInZRRu/tGghyXV8AXvPh+zaohh:hZzJ2tGcyXV8OvCf7
MD5:	6986FB735FDCE62D18DAF8BA05E17B6D
SHA1:	6EB769D93846C4FA0FEEF2F3D7726C5D63797398
SHA-256:	89237639FFFDFBB3F05FE2FEF2F70F484F583CD97279882A18DCA1C95A6A501A
SHA-512:	A42E682FCFB34AB54229B81BCD1611B467A588EC5349938B1EF881D1DC6307DD98F755E99A1EE1E264BC0D556578E156FAC1697C87946CF0736E813B0D6D0DFD
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/dialogflow-console/fast/df-messenger/prod/v1/df-messenger.js
Preview:	/*.Copyright 2024 Google LLC.This Software is made available under Section 3 of the General Service Terms of the Google Cloud Platform Service Specific Terms at https://cloud.google.com/terms/service-terms, except that Customer may additionally embed and/or distribute this Software to Customer End Users in connection with Customer Applications integrating with the Dialogflow Service../'use strict';var DF_M;function DF_Maa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var DF_Mba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function DF_Mca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var DF_Ma=DF_Mca(this);.function DF_Mb(a,b){if(b)a:{var c

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 22257
Category:	downloaded
Size (bytes):	7442
Entropy (8bit):	7.977233413704481
Encrypted:	false
SSDEEP:	192:wegUV1VwoKSANTzAt4vck15BYL4PnjVQ8RPugiuJx:wegAXAxwbWMLOVBR2HuJx
MD5:	264C425F19498C59901C5442DE489EA5
SHA1:	0E6EE42A35234DCD14BC8F4E1857AB76D23BDE4F
SHA-256:	17482FEBCF6FFB31F494F96EC8B77206AAA18C957F8067DB8DC098C4FECAFAB3
SHA-512:	37C64E1F9850859E30B2B1E366925DF67C4315ABE6C238B5B5226ABA4E75C6E70A7FD99586510E523FFD21280FCAA6D1582BF784D9462C6F2EF1C615B43C33A3
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/71254.89ea96287cbc8b900860.js
Preview:	...........\.v.F..?O.3..H...q.)G..(...N..a@.H"........wk.. e...........j...i..^V;..,.:.l.t.......`.p.h......7......5[......[.~.g.C.cu..v..6...{k=.tZ.a=...........(...{...J..#.:...c...v..eFj.V8.FG.!..F.U.eA......k%..&..EY.,.es+.E...0Z..h4...._..93.....$.%....zI...N....`Z..\|hm4.n.,..gl.b..^M.......7cf:.....C...SlF.rG...n..G..k.f=.e.....^=....I=5...}.....`...R.0a......{{.>...S...t....MS..d,.S#v^......i.f.g.M....us-..7.......>....<N........Q.=7...&..,.g..<H.q..YE.^.:oX.o.#..<[.f.....6..K7:2._....x./..bZb15.Y.,.,.n.5.a.......cd.m.4....h... ..Md..N......Gif..6W.........kp~"..fs...ah.,%..5q......6.{..,.V....YWq...........$.Y.]e.*..........&o..v1.....k/.W...:.c.?.a.u.%.Zm.\.HR..v.....~S.......gA.E...V.........u.l..^o9.#.z.}\|=>.8I...`6..7V....DB...A....[>7.)...p....U.y...5..Zwn.J.',.F.Z.?.,.'.E.]..p.-..f...H.IG.{D.zP...M.X.T../W..).V..2.L.z..j`.G.Z..5...........\|A.3.iM.q...`...93....9.Mk....uEc...Z...3.[..i......... .7.4......n0....0

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7256), with no line terminators
Category:	downloaded
Size (bytes):	7256
Entropy (8bit):	5.36289199490694
Encrypted:	false
SSDEEP:	192:FtsAzpT1cxgyv5AvnHeuAprvC7wtVAanvnvdUhW5QUPnyun7ne9GQ7aTT+T1Uu2:FzpOgyv50nHeuApLC7wtVAavvdKAZ9bP
MD5:	EC838DF0AC106DEF8379DCE25B06FB77
SHA1:	01F648C55D4CB1E94E5AB9CCAE4348F024C16F48
SHA-256:	21EDF3106C39CEEB363AB9C8E8D184D95B71FF2BFC4841665B97E58D8259313A
SHA-512:	5DD834ABEEA64F3D79967C97757AAE6705F0A94AD69F05D828DB45EA2890B21A639464138B5DC13B0CB38E3F55FDC0521CE2D3D710B55C5D77A958B882242FEF
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/graph-overview
Preview:	<!doctype html><html lang="en"><head><script>!function(e,t,a,n,g){e[n]=e[n]\|\|[],e[n].push({"gtm.start":(new Date).getTime(),event:"gtm.js"});var m=t.getElementsByTagName(a)[0],r=t.createElement(a);r.async=!0,r.src="https://www.googletagmanager.com/gtm.js?id=GTM-KFBGZNL",m.parentNode.insertBefore(r,m)}(window,document,"script","dataLayer")</script><script>"virustotal.com"==document.location.host&&(document.location.href=document.location.href.replace("virustotal.com","www.virustotal.com"))</script><meta charset="utf-8"><meta name="generator" content="VirusTotal"><meta name="viewport" content="width=device-width,minimum-scale=1,initial-scale=1,user-scalable=yes"><title>VirusTotal</title><meta name="description" content="VirusTotal"><base href="/gui/"><script>window.VTConfig=JSON.parse('{"apiUrl":"/api-proxy","apiRoute":"ui","firebaseApiKey":"AIzaSyBC8n5UX1E6olWNYbCk4_49jBW_CXiYtj8","firebaseAuthDomain":"virustotalcloud.firebaseapp.com","captchaSiteKey":"6Le-FTYqAAAAAKhTKMsdty7T9sOWkICH4U

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 21787
Category:	dropped
Size (bytes):	6663
Entropy (8bit):	7.965664628538683
Encrypted:	false
SSDEEP:	192:wdVoS9HVTjpw6SPKMDCUo3gKsKGG8vENNVNsDM:S91T+9KHxsKD8vE7PsDM
MD5:	B524AE9B11D8075A4BC58D81A47FC8FD
SHA1:	BF651FDAEFCA3EAF8B02EC236AFAB3F0BEE60E52
SHA-256:	641AA7CF2F8D8D41615A96F250A64D9715ECA57B7760E0B6BC685E014D72D601
SHA-512:	A32FC05FF2C86DDD5287DAAABFE707B4931527CC14C31288E328ADE22E5160FD63F56F13E84A3A1FBA616BF8D5D2347555B1D8D26C3A37353374A395267D65A0
Malicious:	false
Reputation:	low
Preview:	...........\{w....~.E.,...y.l.@CX...H...........Jr.u...o..]BJ.......h.{....-{R..(._.].......q..x0.../.....(...O......xR....G...3o......q.Wz...M/......}..r....;;[...qgcws...j....t....;[[n7..Ux........"....$.q.Z.Z........N..,..k?.._........M.. .. .$I..}..cO.H..TD.ZP^.E6...G.,.._..'?.E..Y~vs#N.O.o....h.. ...^.e^...yE....`m.[...m.8y...0I.V?.W..........o._:...`>...&Y....8.r.........$.$Q....}'.....a2........b..i.nw.....p...8#1.....T..V..v.K.05NM.p\OA....Fx5.....0...t6S...p.8...<F.(4=...<.........3....F._$q_8.^k....l.!&.r....RL?.....<.k..p.d.?.c.psc.....%q..l.0;...\|2.iY.......o^.i.......8...p4..+g.../EA./w....j/"..K...8.s...2.bDX.b4..2."LH[...J...$.K..c.a...........o......!].+c.+..(.ax!..Z.z.F..f.o.3..Ke..L....nn.=.......%..].]y.m/..m.U.O.n......g.._...xF.G.^K../...w,..i.5.Z.'..eG.. ..I...(__.o.l,....(.y<.58.:1]b[b.'...H..\...m...;?....A.I..WM........%..n....a..:......,...E.$n'......?..A.&s......R..\|L.R......\|...Ea..4*....... ...w.q....r\|...z.0..

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	459437
Entropy (8bit):	5.5510344167487435
Encrypted:	false
SSDEEP:	6144:vsHVfZ0e18xBpM2xEkCDaiAtrqDLWPX++PGL6GkGzPJntGDA5dLdn3rr6cKRRgGy:zHmou+P2FzPVtjzZvERRg3
MD5:	C85053053E8DA68B53AF543A9453AA5F
SHA1:	00AC2CDF3D3DDF7E35ED1CE71211B2A8A672F1C1
SHA-256:	CCB119FFA497C8975381EE78A0304F9D90008C3C08519852EC4D1DF30972A2C0
SHA-512:	4F55A69F89C08D95F6168802052552CA811CF1A6081973920625C24042554A8088DEE7B635E310EC27B8EF698809ED3FD231FEB503A4656F8AE09869ECCE1F23
Malicious:	false
Reputation:	low
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],[,,,,,function(t,n,e){(function(n){var e=/\.\|\[(?:[^[\]]\|(["'])(?:(?!\1)[^\\]\|\\.)?\1)\]/,r=/^\w$/,i=/^\./,o=/[^.[\]]+\|\[(?:(-?\d+(?:\.\d+)?)\|(["'])((?:(?!\2)[^\\]\|\\.)?)\2)\]\|(?=(?:\.\|\[\])(?:\.\|\[\]\|$))/g,u=/\$\$?/g,a=/^\[object .+?Constructor\]$/,s="object"==typeof n&&n&&n.Object===Object&&n,c="object"==typeof self&&self&&self.Object===Object&&self,l=s\|\|c\|\|Function("return this")();var f,h=Array.prototype,_=Function.prototype,p=Object.prototype,E=l["__core-js_shared__"],d=(f=/[^.]+$/.exec(E&&E.keys&&E.keys.IE_PROTO\|\|""))?"Symbol(src)_1."+f:"",g=_.toString,v=p.hasOwnProperty,O=p.toString,T=RegExp("^"+g.call(v).replace(/[\\^$.+?()[\]{}\|]/g,"\\$&").replace(/hasOwnProperty\|(function).?(?=\\\()\| for .+?(?=\\\])/g,"$1.*?")+"$"),S=l.Symbol,A=h.splice,I=x(l,"Map"),y=x(Object,"create"),N=S?S.prototype:void 0,m=N?N.toString:void 0;function L(t){var n=-1,e=t?t.length:0;for(this.clear();++n<e;){var r=t[n];this.set(r[0],r[1])}}funct

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16076
Entropy (8bit):	5.047862381752446
Encrypted:	false
SSDEEP:	192:7PFsb99+cLY6AJb3N/zJuT6QRxGIOqQtiekVDdRIr9/R2h/RNmpzpxGpAoDP/t0/:V9bavqcPNwNpkaEox8+nWUahssny
MD5:	CCCA24CF101DE27CBE38944365F25CDB
SHA1:	0431EC30892743DCC324211836EE1F15C214B4C8
SHA-256:	3C3FD0D7F7E6D3EC33C08E3FF6BB04080606B127ABEBAA9AFA5E193495B59E8D
SHA-512:	D9C118ABAC7F28C433098885598B7DD7A6630E37688A89BED637EA2A4F4A56F51DE99A33E24476FC58B93A8DF71976FCA61A0E4891A2083021FD0E081716D0FA
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/domains/ghabovethec.info
Preview:	{"data": {"id": "ghabovethec.info", "type": "domain", "links": {"self": "https://www.virustotal.com/ui/domains/ghabovethec.info"}, "attributes": {"last_analysis_stats": {"malicious": 0, "suspicious": 0, "undetected": 31, "harmless": 63, "timeout": 0}, "jarm": "29d29d00029d29d21c41d41d00041d38d8d683f08c154e73a9de64943d64e4", "whois_date": 1730586387, "last_dns_records_date": 1732116307, "last_analysis_results": {"Acronis": {"method": "blacklist", "engine_name": "Acronis", "category": "harmless", "result": "clean"}, "0xSI_f33d": {"method": "blacklist", "engine_name": "0xSI_f33d", "category": "undetected", "result": "unrated"}, "Abusix": {"method": "blacklist", "engine_name": "Abusix", "category": "harmless", "result": "clean"}, "ADMINUSLabs": {"method": "blacklist", "engine_name": "ADMINUSLabs", "category": "harmless", "result": "clean"}, "Axur": {"method": "blacklist", "engine_name": "Axur", "category": "undetected", "result": "unrated"}, "Criminal IP": {"method": "blacklist", "engine_n

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Reputation:	low
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 39779
Category:	downloaded
Size (bytes):	12236
Entropy (8bit):	7.983231499597867
Encrypted:	false
SSDEEP:	192:QgFASyPP9Si4hwGKC2pxNQ0LkZOBn9FXLSC67b5TInvLGC5gGUpEj4M58qlIsk1U:Qg7sPkphwEaXQCkQBDXLP6H5cvLGC5gu
MD5:	BFCBD2F4AA94FF776327FF0F4B77322E
SHA1:	682966539AB75199E2546B38A916B9ACD75A9EE6
SHA-256:	887BA2EBFB3576B47FDC59A4336A51E91C4EF13FA5E91F5E590E39774D5C39EA
SHA-512:	DE2745793B27DCFA0378326499D91A082CF78A541EB66BD727746D7D9D7440CACC021CA11FA378BC45EACDDFB167C2C33EE6C992A4AA62639B5816BB66F9AD90
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/58686.06780f63e6b75f4709dc.js
Preview:	...........}.z.....s.c8Q.g0...4..Z,.Z..v.E.<...X......!.......$%.gy.c&..kuUum].h.S.Y....i3U.ip.F.p...l.\|.>...."...k.>~\|..............=....G.C..=.t}....7...^...\|.G...M.$M..`.T.f.-Wq....e....u..i.-.Q.{...k..x.fQ..>ZR........4Ua2.....L......._).w.sx.{.h...$.1H....>L......qwo.hY...\|..u..z...Hf.^..d...@....Q..f.<9>....}..Z~B.<<.?h.!>....z-.......z..W..Jq....Ct.P..a..-.-Z...N....t..........wB .......j........i.W..s.................>.pI.X.q..24....x..?.................N....g.3........?......G...........................W.........5.._f~..i.'..f.<... ...N...8.d......OZ.,...}.A.&}.L..a.>....l<.5..&Q.:Yz..h.E(..$^...9o..O.E.. Qi<.OEA6S.&.hm..+.l.2......,J.h..^/.2KO..Ku...M.F.. ...j~.....e&4...:.?..K.!k.....F.,./.U...vZ.Vk.%.....jp(@..9..\-/..x8.z../...`0X._.^.~V.,..~u..V...t.D.,.......h.l..1.dW+.O..j:G.;w...J]0Q.8.3.J...-..9....i.kp.....s...f.N....i&.&.".W..{..0.i......1i.J.........FKeV....y}....0M=.D-'.7....h....Z.t..4. .<..K....W.4......

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 37517
Category:	dropped
Size (bytes):	8977
Entropy (8bit):	7.978872544983837
Encrypted:	false
SSDEEP:	192:l51TrHcNWkAj4pUsB22a3czi82FDdHZXjUDYU8m2r/s9CfmSVHZ37Nt:l5ZYhAUpUAaOi82FDhZl9vk9C5Z37P
MD5:	78400C3DBAECEB1BBB91EE82EE6400D9
SHA1:	7E76EA0F9A31C98D6FEFB8181FDE72B7F8EDA20D
SHA-256:	22D5D88895681BF26564FF6A33CCCB8E76C17F7108C6F7D4C68821A9C603FAA0
SHA-512:	5310548EEA6DE1F8A77437B8075CA66ED9F5B6B4AE8D186B07CD606B4F1D98261B24154424C859E80A71422B978A9ADE40771E164E5DD280F6725B862A29168D
Malicious:	false
Reputation:	low
Preview:	...........]ms...~..f...0.7K..Z.....}.....B.H......Kd..{.g.3.....W.+m%.9......t.5...i8.[..LDg.8......,...Of....../_..;.t...GG.V...........wWz..k...........-...;...~.........q3\|.ol..w\..7.Wz........f.....Z............_.{...;..~....#.;cw.^.3w...{.^.....p..=.......C1\|-.i8o.g.x..I,.....f.!...l".<."...c...~u'..(....N<\|........_...d..f_d.4..I.......J.hk8.o."9s>...u_.h.!..y..%...N2T..b.."...3.P4.j...v.z....N;......E;..i.Y;......ct.?t:_.$..T.4v...E..e ..X.Y.znr...?.E~.9.:.q.9.....~...P..w.....M.{n....?.{.........(R....k.0.q.y...;\m.O.N{..K{:<...G...>./......K..^s.._D.ay......./QLe..4.#..lrR4.;.T..[T..Z..Q..\|...4.......ax.. .pv..$...D..q.z...{.G3..%.8Oo0.7Y6......~.0...v_.Kr.G.F.....\..'..^..@.E.>.1..[$U9..i.V...q..g.@.....v...N......j....{[...Y.=.E.r..../.4.t..Bf...r=.k..n.Z.1.K..'X.:..i........8..).....}\|..tf..HF:...~..`. .A......X...,..^...Nd...HdK.V.....P{X.<.V?l)....b..rq....:.B...Llc......{.......~........T...5...........o.$..g.,

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	21574
Entropy (8bit):	5.398396102685911
Encrypted:	false
SSDEEP:	384:vws31MbwEDGEo2DGieA231qe0hHU31reoDGNhY3CrUTDDN1zADD8zA:vt31MbjDGE1DGhz315T31rVDGN+3Cri4
MD5:	FCED3420B5E35AC1774CE96F923B155C
SHA1:	7A77C74D6528B08036B8E2A5CCF4AC5DC1C31941
SHA-256:	B7DDB3E49C81200475DB5767E14A2DAB2DAC988846BCE49D10B55CB0CFC9C86A
SHA-512:	A6CCE9D4F7717E9F9770C11DCF3D792D60CCFA96F27EB43A4D4DD21FB81BCC64D13220468B967C4FA4FED190A8664AA091825CD46C6ECDFD7ADCA906040FDC55
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/domains/ghabovethec.info/historical_whois
Preview:	{"data": [{"id": "73d6ca0c1376e8a643ba9f0ea82803456d74ff03ea1734f2265f5086fe85a769", "type": "whois", "links": {"self": "https://www.virustotal.com/ui/whois/73d6ca0c1376e8a643ba9f0ea82803456d74ff03ea1734f2265f5086fe85a769"}, "attributes": {"last_updated": 1704706609, "registrant_name": "1f8f4166599d23ee", "first_seen_date": 1705113752, "registrant_country": "US", "registrar_name": "DYNADOT LLC \| Dynadot Inc", "whois_map": {"Registrant Postal Code": "1f8f4166599d23ee \| ae51fcfbe03bd2c4", "DNSSEC": "unsigned", "Registrant Organization": "037fe422b392eb3f \| 473daf17453d83cd", "Registrant Name": "1f8f4166599d23ee", "Admin Organization": "REDACTED FOR PRIVACY \| Super Privacy Service LTD c/o Dynadot", "Registrar Registration Expiration Date": "2025-03-01T09:25:21.0Z", "Registry Domain ID": "517618409c2e46239090b0b44cb7153f-DONUTS", "Tech Organization": "REDACTED FOR PRIVACY \| Super Privacy Service LTD c/o Dynadot", "Registrar IANA ID": "472", "Admin Country": "REDACTED FOR PRIVACY \| US", "Cr

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Reputation:	low
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HCNCkY:QY
MD5:	FC10C2818B864FCC38006936127A647C
SHA1:	8DFA775095871ACE8C1DFCF13355D2065357C2F6
SHA-256:	B561DE696009B98E613484A1A0BA09326B1C90DA362766D0B954CECCC899F16F
SHA-512:	2D03E67202EB4E789E04133B8FBAEB3A851005003CEFB67EF41614E6E5982DB0EA37AAF37F8A0A0ACA3CFC9F2AD8CED95FDF78CF7F41D664D22B2A870B1F42A2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnGvmB09M7rPxIFDWdns_4=?alt=proto
Preview:	CgkKBw1nZ7P+GgA=

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 544373
Category:	downloaded
Size (bytes):	155611
Entropy (8bit):	7.9979868774718605
Encrypted:	true
SSDEEP:	3072:p1s8T5TV+/tfI5O6eC1yfW5Ss7oPaq+uJ51Ctp8gFgnjKw3UTe:rT1k/tfIY6eC82SSq+Kzw3Fg2te
MD5:	B030F78E7FE24DA75A22FA3D0D054521
SHA1:	9E838CDEDABDBA6B9CA50923E95C273A2A526D99
SHA-256:	987C33C428C12953D99DEEC6D0984D4F0824810C72EE6CE428A5C18C5ECDB0D0
SHA-512:	941E90B23260CF40088F6E6B69B24AA454FC2EB106AC8F7885A853FA0F190FF4E2A7F27C5FAC16FC8F50F9B0D1C88C902D6C02A8D0B1FC5CF4F53B64AC86C064
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/graph/assets/73f5acaa7eed2d3fa37c.worker.js
Preview:	.............[.9.6.W..<.{0.&....C.I8K..ffw...&x.....L....]RU....y..k6.U..J.R.T.^........%w....<.{X...1H...tp.L..v:...V...d...d.RQz7.....B.......:.eDt>...3.m...0..(]X.e...u.5...4......5.&..5........f.y.".......&.....]6..../...._..3xH..oj.%w...../....lrY;.~.e2Z\..[..8..._{.....j,.6!..m...\...C.G\........onn..>......F..1vI..b.#....F...I..J...E...j.D4....w>..y...F......s.>h.!...(.7.......U...a.r.\N...F..%...........g../..kWs.$._.....hs....6p%...?t*.....Y..!.fN.MLu4$.J...t.OH.ZW.............&.?.:..\=..fY>{^o.!.Y...<4N.A........6L..n..>mlvN.;.\|v..}................?.n%?m...... }...o?={.....4}~.[..<.....%0....d3...w5.\|^....f.(..k.k........m....9...j>..Yk-mnO.P...\|2.\|...%.>..-/.4eUEQsT.e.....o..`.....~t..^.`]...pVO..3q..tk:.\|o.6.R.1..2..^?=?..>.L........4....g......l..s...._\.~...ok..?<:......I.Y...1..'.v....S.7{...qzQ..5..~5/..k..F...R...q.f7..y.x~...o.Z?-m6................^53i...E...N.k..4..........z.T.VO...y....5.f7..y.<H.o.7..7@....f

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Reputation:	low
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1586)
Category:	dropped
Size (bytes):	1641
Entropy (8bit):	5.377781108665325
Encrypted:	false
SSDEEP:	24:iJHJHmcYzcD3xAwzfy+qFZX/AYe7lW4jIRpZu0QxX5oiJBTJ20n4XNuQFV6CLJBk:it1JWwzflq3A7lJIRaFJVJt4Ddk
MD5:	3E2EE88BE7A5CE2C3B7413340017C380
SHA1:	403F1C69098A3255B8A587AE8B4EEE3BF40C28B3
SHA-256:	E7C0DFE2D2A19655C56CFA2C639697DE7F6DF71F37179CD220D49A272F8FFC3F
SHA-512:	31D1610CE2328291F05FF41805374ECACE7A8E7F0AD8489EDB7CA9F0BA09EB6EDAE8EFDA3CD59EA114E7A0290A4A5CFA8620EA5C37F030CD7D386F1F370E5C4F
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[25076],{2695:(e,t,n)=>{n.r(t);n(9891);var r=n(48704),o=n(16645),i=n(15323),s=n(56717),a=n(95688),c=n(44052);let l,u,f=e=>e;function d(e,t,n,r,o,i,s){try{var a=e[i](s),c=a.value}catch(e){return void n(e)}a.done?t(c):Promise.resolve(c).then(r,o)}var p=function(e,t,n,r){var o,i=arguments.length,s=i<3?t:null===r?r=Object.getOwnPropertyDescriptor(t,n):r;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)s=Reflect.decorate(e,t,n,r);else for(var a=e.length-1;a>=0;a--)(o=e[a])&&(s=(i<3?o(s):i>3?o(t,n,s):o(t,n))\|\|s);return i>3&&s&&Object.defineProperty(t,n,s),s};let v=class extends s.C{connectedCallback(){var e,t=()=>super.connectedCallback,n=this;return(e=function*(){t().call(n),c.NU.isLoggedIn?n.dispatchEvent(new CustomEvent("sign-out-requested",{bubbles:!0})):a.Z8.redirect("signIn")},function(){var t=this,n=arguments;return new Promise((function(r,o){var i=e.apply(t,n);function s(e){d(i,r,o,s,a,"n

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 1641
Category:	downloaded
Size (bytes):	1044
Entropy (8bit):	7.824719522652342
Encrypted:	false
SSDEEP:	24:Xi4J0/EGfYW2T/ZYr2FUWdYRX1Ntmg1lcXbGLM:Xi4JqhfYW2tYrOdkX9mg/cbSM
MD5:	7949B4CEE3174871953F6A166E700BC1
SHA1:	5A256FFE0B3D59E8A4B92C4057D340B75A90D248
SHA-256:	94E23705D039ABC185876BFC0E7B3D4132EF3F9C169ABC1FAF93FB66ED60776D
SHA-512:	A60D02716335433649070441D0C08F9C9D1E6065BF4DB7E1E82DDA682FF45858F2168AE3F58269BAB712B87444F7B44BAD41AB66D1A2C55608276EFF8971FC65
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/25076.f1d5707846ec1ba9ed7f.js
Preview:	..........\|..n.6........d!+..H.S m...n...40v)i$sC.I)..z..d;m..W.IC..o.4...V.>H..UF.."...6......i'.....x\|..n.>>N..r......<...P3.>..R.RMoV7......5.......b1..P...zz.B..\|..,Y(0../V+....f.\|.R.....K.\|.i...K.Iq....2t.........~...B5....[..`.7V...h...0..<.Y.5;. ...j.?E~..b...[..R.R..%Q...jv......o.3y{}...(.9.w...@....g..j.~.3.....4.}LlK..!5...k0%.....Qp..._T@n....?..~z..B.J,v..,w<I.....5h...:N.....u..Ft;...G.....4r....J....y]..D[.+......p.E...h.-Bq/...Ozr.....r......5.[..(.....S....C...H.w...x.w:..{2~i..gr.8ov....J.M....j... <dM.)p.q.X".?W.K!-..........?hD...\\....uU.......V.....w=.......a... D./...&.o.y....f f.E.(..^....b.......8D.cT..T..s.5..z...'.2.SZ.'..LD...xH....O.........x4...c..xI&.4.......87.....q..)..bi-.B..D..]... ..h..j.......J..I..OO./.....).I.......'`.X.M..^..T..>...y....~..m....'..lO&..b...\|II%.LP`J...A.;........i?v.+$......C.[.Q_..W....u.,6O...>sMn.P.\|..4.[.`.5......l%myM...L...V._O...T=...m....R4...6,....;.p..~C...

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (543)
Category:	downloaded
Size (bytes):	120944
Entropy (8bit):	5.467596130563416
Encrypted:	false
SSDEEP:	3072:nwbHVyDmdK1WbN2bt9Hz1YnCPqGidGuxCx70qrhQ:nw7VEmdK1ON2bt9Hz1YnCPqGidGuxCxU
MD5:	A82C9937FA68C35E22406CE132322C6C
SHA1:	312808FC6FB26BA0E1BDBE4CBA376739FD582023
SHA-256:	7D5E0BA67C9EB12C26F51A17AE28861E85E06719951C0F75F52AA5D3432A5905
SHA-512:	8A1C02DCF5B17E76034779B6634E3C3E616F6415B4FB35F90BDDDD931EEA1830BB881762B04F1C6517DE492B0FEE5CFB32DA6891EFFD8217B9D15528C34EE671
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/a8476471/player_ias.vflset/en_US/remote.js
Preview:	(function(g){var window=this;'use strict';var y7=function(a){g.Fk(a,"zx",Math.floor(Math.random()2147483648).toString(36)+Math.abs(Math.floor(Math.random()2147483648)^g.Za()).toString(36));return a},z7=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);.g.sha(a.D,b,c)},qtb=function(a){if(a instanceof g.qn)return a;.if(typeof a.Lm=="function")return a.Lm(!1);if(g.Sa(a)){var b=0,c=new g.qn;c.next=function(){for(;;){if(b>=a.length)return g.M1;if(b in a)return g.rn(a[b++]);b++}};.return c}throw Error("Not implemented");},rtb=function(a,b,c){if(g.Sa(a))g.oc(a,b,c);.else for(a=qtb(a);;){var d=a.next();if(d.done)break;b.call(c,d.value,void 0,a)}},stb=function(a,b){var c=[];.rtb(b,function(d){try{var e=g.Vp.prototype.B.call(this,d,!0)}catch(f){if(f=="Storage: Invalid value was encountered")return;throw f;}e===void 0?c.push(d):g.Bma(e)&&c.push(d)},a);.return c},ttb=function(a,b){stb(a,b).forEach(function(c){g.Vp.prototype.remove.call(this,c)},a)},utb=function(a){if(a.qa){if(a.qa.locationOverri

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	3993
Entropy (8bit):	4.5950647559422855
Encrypted:	false
SSDEEP:	96:pGVuCjpNIWIEvosPA4KE7fvbvYeeCFlt+fvzvAm2L224JXyaw:GuKpNIWIEvosPA4KE7fvbvYeeCFv+fvO
MD5:	AFB56EB31C3A87D44774FA6A3EDA92B6
SHA1:	6659685F52E9F015B977DDB60ABC82D44A7E489B
SHA-256:	D5B1F3D4BBE845C6662ED61D707C0C3B0BBEB80E703FB642CD9B42D3CFB3D674
SHA-512:	D139BF5F325807E3CD164293C0239AD217CB8FE130D5C76A119C8EC9A9616D646E498B7A51DB074F438A9E55FBC6E0DF83DF6EC0D56E9822F979FA4BBF997A37
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/static/gcs.html?q=%22ghabovethec.info%22
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8" />. <title>Test</title>.. <script. async. src="https://cse.google.com/cse.js?cx=003414466004237966221:dgg7iftvryo". ></script>.. <style>. body {. margin: 0;. }. /* overwrites /. .gsc-control-cse {. background-color: var(--bs-body-bg) !important;. border: 1px solid var(--bs-border-color) !important;. }. .gsc-control-cse {. font-size: 13px !important;. text-decoration: none !important;. -webkit-font-smoothing: antialiased !important;. -moz-osx-font-smoothing: grayscale;. font-smoothing: antialiased !important;. }. .gsc-control-cse .gs-spelling,. .gsc-control-cse .gs-result .gs-title,. .gsc-control-cse .gs-result .gs-title * {. font-size: 14px !important;. }. .cse .gsc-control-cse,. .gsc-control-cse {. padding: 0 !important;. }. .gs-no-results-result .gs-

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2801
Entropy (8bit):	7.905980421212048
Encrypted:	false
SSDEEP:	48:D/6xp1ZfEI4R67L0ayUB8tEBBAaHGLGhti86rR17SJ2xOX95kE54A4ir1pu+UyZc:DSdZf74TOZ4aHGLEi8WRhA2xOX95V54x
MD5:	A360216DB349D1B8CB141AD8E39060E9
SHA1:	348F4B030C558C50D62045CE658E878780313EC6
SHA-256:	5D58E0A25E1121EF26F17D61D37AF460BB6DE90C493B73B604E4B8011FB97315
SHA-512:	C4EF472711A7BDFA263824A80164BA776E1382F0ACFB731FDCD74E4D21B8E32F7232EA77A9ABC120F2AD2D34B77F1B709ED8F55DBBEEE4EA2BFE205166E03E45
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....pHYs.................IDATx..[yP.......+..\|....3....GT.h.n.J..&..g..W...FC4"...gT<..hVS....x#.ALjKDE. .}...@O....\|....z.GO.t.7.^............5.Ru!!.nJ..B.bJ.JJ..:...pm..j.!j.U.#.7.. D[I.v.R..R..H.x.!jvtt\|w.UF.f.......;..m....cDG...h.2..!.o.;..P%!...VM_&.M..F....M..7.A....KYn.'............~.....h.5.A_.{.W.ZA.:CQ....sB.TJ.\|...h..>.`2;t(.=x..........F...?.Z..QB..a.R-.R..l".....Z.GVYYe..;...3l..l..l..?..h...J.{..+.v.zZ..~L..37y...m...m.t..y..........L..t..c.OL..~....E_."0FN.z.....";.........@,...>.<u....?..j.)l..gL...v..Y.1JKo..#'Y..;.....c.R..<.[oud...c\|...Y..C..3.>cn.S...J.....P.n3[../^2&...1..,&....7.g3g.F.98./b.;'.......\|.?bW.\5.?v.TP..).K...~....l...Bd^}O~XR.@.sl..g..k.W.I..6o.5.S^~...=....`...T.+K......e..+^..2-]....k.f..^.:.....:o..;..aEE.....}....oHB8w."k....G.[@.).....Z{,{......n..c}..v,.Q..l...N.6.A`...7.....?i..555z..'.../T...`...Lul.0>..?..p;*..wlt_[,{x...Vgg.9..V......Y..'.....?0.

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	13128
Entropy (8bit):	7.982478168024834
Encrypted:	false
SSDEEP:	384:oQt36rKd2LEb9nrfKS3uBSi9tPfHe+68N8:oQ7dG6vivnHp68N8
MD5:	3602D92336C9891C71C5581B0C548782
SHA1:	2019E15EC70C6946EE851E27DF09C966832A5B51
SHA-256:	6B73AEEE89FBE2BE1A5D3297428063D8A386B9A49A6513172881703417558120
SHA-512:	EBBE9AFD42FE3F2DC09091894F5A7D76B06FBE4E3BA834D3CB85F9D97BC310F43FE006CA1FE9D7B0FF49FB4F257DC7925767196B0D14CC04CCF219C1FC5558F6
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi_webp/QEqHXU04IkI/sddefault.webp
Preview:	RIFF@3..WEBPVP8 43...........>m4.I$".."w....in.u2BcT....q!..]-..'...yoI....:\..d..s.......xW...D..d/..I.i..........#...........W..... .=...b.W...7........o...}.?..c...'...>(.g.C.A.....o....?L?....M...7.........:..........p....=.?b....$M.. H...@.7.."o.A.D......]...\|...&.t.$M.. H...@.7.."o.@3;.CMN.O5h..".j..j..j..j..j....0.m. ,..F..1..3".=]..a....N.....s...z.....g.V.7....5A#T.5A#T.5A#T./...b.\.s.../.<.g.q1h.mc....o.[.Hr..O...]....1...8t..&.t.$M.. ,......K.zV^xK..N...VuY.TCg#..).A..46C..l..t..@oa.oL...}...7...\|o.../..,y..(.O.=..T..6d)..93J..u.k........:..#..D.ft.D....m..5.M"..&.k,..<..wK...i..'.h0z...4}.........eZ....NYF....{...#.,....I..(V.+.C.M..X...3\|..#.3...2=v.....Y/VwG...7...%.H.\...hWP~..........`+...s..yoI...%..<.C....S. Z..fZ. v;....>O..V..].....F.<?..#(.{"pC......4o{.......1....5WD>d.X.z.~.5p...D......o.."P}R.o.......J.}m..N....$.....M9.ec....]..3Q^.XG...Z.TZ.}.....\|AA..U.V.....&.W...L...B{..P`...\|...&....Ne..=O..$..{.

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5725
Entropy (8bit):	5.1194395993531
Encrypted:	false
SSDEEP:	96:TsyaMVsyjMjA9MjJMpJMk3MVr5cMcOM0OMCOM61ijZm:4yH6ywFOsxVrLcky4itm
MD5:	7ABBBD60D737C948F077908DBDBD4778
SHA1:	1650DF4F6740730556619F564C8699565BA7EF17
SHA-256:	C4BDD4672EA5C4D9C4E0EE08021B7302C6F38121212E9BE6BA91D51F97925A84
SHA-512:	7C6A80232A843FFCE196C13EF9C52C49AEA78EEE5D6352A5EC70DB853C65BB1A56C323395D97465B49E513D1B3CEE66B834573B6A928CEC7CD2AB24E60C656F0
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/domains/ghabovethec.info/resolutions?limit=10&cursor=ClsKEQoEZGF0ZRIJCMyu1OT0vYkDEkJqEXN-dmlydXN0b3RhbGNsb3Vkci0LEgpSZXNvbHV0aW9uIh0xOC4xNTQuMTMyLjM4Z2hhYm92ZXRoZWMuaW5mbwwYACAB
Preview:	{"data": [{"id": "18.154.132.79ghabovethec.info", "type": "resolution", "links": {"self": "https://www.virustotal.com/ui/resolutions/18.154.132.79ghabovethec.info"}, "attributes": {"host_name": "ghabovethec.info", "host_name_last_analysis_stats": {"malicious": 0, "suspicious": 0, "undetected": 31, "harmless": 63, "timeout": 0}, "resolver": "VirusTotal", "date": 1730542063, "ip_address_last_analysis_stats": {"malicious": 0, "suspicious": 0, "undetected": 94, "harmless": 0, "timeout": 0}, "ip_address": "18.154.132.79"}}, {"id": "18.154.132.120ghabovethec.info", "type": "resolution", "links": {"self": "https://www.virustotal.com/ui/resolutions/18.154.132.120ghabovethec.info"}, "attributes": {"host_name": "ghabovethec.info", "host_name_last_analysis_stats": {"malicious": 0, "suspicious": 0, "undetected": 31, "harmless": 63, "timeout": 0}, "resolver": "VirusTotal", "date": 1730523755, "ip_address_last_analysis_stats": {"malicious": 0, "suspicious": 0, "undetected": 32, "harmless": 62, "time

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1043 x 698, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	12414
Entropy (8bit):	7.162803239499544
Encrypted:	false
SSDEEP:	384:NkugCVjOuGo2MUtq//RSaxV1p/Tt3RJRicFoGulM1kOmRFBVyDubkX:NxgbGEQ1FFoMkOmRFHHAX
MD5:	2C9A0FBDE0906AE9486FA6DDDE5875A9
SHA1:	4DBAD549EA29E5DDD4F0EB5FC2D537D13EA6F6D0
SHA-256:	1A8DACDF71F627F7D72F355F441DA02494E50B19A2B7B812ED3759CB0F812FE6
SHA-512:	865DEC7A348CE085AFF73EFE68C11737679B5C39CDCC9C4A917EECF5416D3D704AA0542BF72CD40D313EFCB3727EBEC091E830B212BAD3FD76C86F107F9036B8
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/d5e8889ca86857475abb.png
Preview:	.PNG........IHDR.............k..A..0EIDATx...{ld.}..{..pI..-U..]I.bI......D.r..A.:..A..M...P I..(P.)..M.k...#H.IP.......Mm.l.qc9.e.,{-)^-./>....3Z.G......q>.`..rw.93...}.9...................................................................................................................................................................................................................................................................................................................................D....g?....s..80yf..aeuu..'N...N<.~z....7......V6.Vk.{G...Z..,.w..0..mM@DUU..>[...rqqq.~..:x....87w...1..9>>.8==..ccc....n.Q>......n..'...?......}cll...O.F....{M...z......{.I......?...O.?}.UU.....r.].6........?..t...:].h...'''.O....q..>=??.....C....lN.MOO......'....h4n6..W.cc...o..._z..$X@.@./....w.sziy.........o...;..zlue.3KA......jg..]~.\...,...[......zezz....G&&&.....5......?...o..o.[^^..W.^......,,,t.6.dr\|\|.l4........V.U..Z.JG.ccc.C.n.?~..G...H.......}UK!L`CO>..D{.x

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1599
Entropy (8bit):	5.267838660635414
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xZS8f:3qD+2+pUAew85zssA
MD5:	5EDBA73F30F0D3A342CECCB3A34BFE45
SHA1:	3F39E4C8EF00408D327260F5328162AB3E5D3CAF
SHA-256:	F768529B209DB7EDF38AA0DA2A69C1C1DBE5A760D457FE74080D3AD76F14A0C2
SHA-512:	C302E3CCC2D9F2E12133ED07082A78260613F1B8C756D9EB2CF0A7AF63C425D4A8956B01EAE3FC3DFAB506DACF6416B0B53929D535CFA2AD81951183A6526FE7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 106022
Category:	dropped
Size (bytes):	26999
Entropy (8bit):	7.992520735588126
Encrypted:	true
SSDEEP:	768:mgVL48xUpMCv4fTtzaASYum9fjUD4abOJYW:7L48xrTxW50a4abOZ
MD5:	998056B46F653A93824BC63D9578A305
SHA1:	54834FA321E9C8CC08369C833E702B8DAE364549
SHA-256:	E309D55C8940419188091822F3C39D45CF07995DC244B5C4AA86B7E138151E01
SHA-512:	87ED45CA22ADE4A28DB53AA90F4447F02D8454B76EFB836B2248D49BA9E14C24A766D98472CBE6CCCD5BDB41ECB6F2A0D750CFE38A3533C47894EAE47125FFA6
Malicious:	false
Reputation:	low
Preview:	...........i{........4...rLQ.W..Z.-&."R..h.."!.1.(.h[......4..@yr._&.<..kuuuuuuu..Y8J.(.........\|E..'oZ..a..$......6..C..h.t......._........O.a.;..h._...%..i.D..........4...}k.M&...6VV...bee...7u.@g.&..o..q-.kQc.&.f.&..y\|..O.[..1...1n.7.URo...S?.M..!hyww....9....p...\....3~3.\|._......ngz.\4..u.oc.....yT.p.u.s.b{.I...G.A..7.......n...z....h4.NX.[1j.9......u.....>oNiN4.!.epU..LCV..-..]4M.m..v(.......d.)3...B.O.x.\U..6..!0..hu.<l....Q..............6..m.X..\.Wc..>..;.......b.^..%....N.....Fc.h..7xlS`...f.~..FS.K\|w..W.G...q..^kt.Mc?.8..j....ZIp.G.......[.he.k.D7I...,..N..#......Qf...a...<..:.[/.[..p<.[.....]z/^o^mn..x......g/..F.\|v.........W.W.6..[Ns.....m..^.^l..6F.W..B.+....g.[/..o.?.\..v....o.../....=....M.}<o;.^n......+.......y.v../=....hk}.9.......q.\|k}tu...j........c..y..9....x}..9.\|.].(.#y.._..\|.ob..W.o..9.............^m..1.........W.+.........^{.}...uy..j..j...-g.b.z..;s..O{.d.N..t{.N....B..;.k.y.N8.L....M.b..C.J.Ni%....N.U

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	41700
Entropy (8bit):	4.965249112595398
Encrypted:	false
SSDEEP:	768:oiIcKPgZ4WFOemQFc/3GBLQ06eMYdaO4Mawgm0s+Rb4FhFQ7qfr3lyFcSZJpfXRf:vgWwemQI32LQ06eMYdaO4Madm0s+J4Hu
MD5:	BACCB7180FE061B63ED061EC10C3B0C8
SHA1:	BFB31590BA6E758EB8F25735B564D7E4A0919025
SHA-256:	A5402DE70228D4BF5379B518225B702918F6AE277E9293F9D16334C2B1FA31E3
SHA-512:	8C572740FC0AECBCF2495797E9125025063F512D7A06F196ABEEBC9B542C2C93311D84DAF7878AC1F8CFDD48B898FC85852286FA2CF2CEFB2957142033D8990B
Malicious:	false
Reputation:	low
URL:	https://www.google.com/cse/static/element/8fa85d58e016b414/default+en.css
Preview:	/** Copyright 2005 Google Inc. All rights reserved. /../ the GSearchControl CSS Classes. * .gsc-control: the primary class of the control. /..gsc-control {. width: 300px;.}...gsc-control div {. position: static;.}../ Slight reset to make the preview have ample padding. /..gsc-control-cse {. padding: 1em;.}...gsc-control-cse,..gsc-control-cse .gsc-table-result {. width: auto;. font-family: Arial, sans-serif;. font-size: 13px;.}...gsc-control-wrapper-cse {. width: 100%;.}../ control inputs. * .gsc-search-box: the container that hosts the text input area. * .gsc-input: the text input area. * .gsc-keeper: the save link below savable results. /.form.gsc-search-box {. font-size: 13px;. margin-top: 0;. margin-right: 0;. margin-bottom: 4px;. margin-left: 0;. width: 100%;.}../. * This table contains the input element as well as the search button. * Note that the search button column is fixed width, designed to hold the. * button div's background image. */.table.gsc-search-b

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	10717
Entropy (8bit):	5.628149335409592
Encrypted:	false
SSDEEP:	192:oJZtyeXwX/kPXW+YAD775Nr3bqGIwVjEGKYqH+dMJ:Ob1qYlg
MD5:	FB1809FEB9DB1EAB65CE754ED28AD243
SHA1:	30E58AB89311BBF9056D06916161231087195E5B
SHA-256:	10D91823E45B6940F49D2AC0ED5B44BF28F12B4580EF20595424E392978AA1C4
SHA-512:	74BB7274DE06AEA7BE94FB4BE77B4D8A4ACC3C1EE48397E1C285FC3E10CE7CA6A9D20D2C485D9F9B2B7DC8971C9B90C9BD65BAAB1A963FCE40F8FCE10EEFE210
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Google+Sans
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v62/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RFD48TE63OOYKtrwEIJl1pynSEg.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v62/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RFD48TE63OOYKtrwEIJl3pynSEg.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ canadian-aboriginal */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16769)
Category:	dropped
Size (bytes):	373974
Entropy (8bit):	5.660399868552982
Encrypted:	false
SSDEEP:	6144:JxGlxMX/iOG909PmPx976DmoMfgQJhAOLx0/awb:TUU6O9Pm77hy
MD5:	146A314996406E4892D9D2DDDE6628B9
SHA1:	B2824C58B2BA1A622ABF7F1828E770733ED141F3
SHA-256:	A3DA63DA9837D9C33F16A0A4B71EC1B9F2486D455DC94FBB2C059043A2997E4D
SHA-512:	CB765C02F71332D574A63A2C00DC3F1894EC2BA3CE93709DEBB018F5660E6A1250EB0728B8467CB0714DB2C750BC834B7976E17ED3B82E7600F60EED6AB9D5EB
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":10,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":8},{"function":"__ogt_1p_data_v2","priority":10,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_l

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	288717
Entropy (8bit):	5.2485734608890855
Encrypted:	false
SSDEEP:	1536:AoR5rocP0lhtXXKKTuG+c9pE/aVXqhFPDsaI0QYSySBpReoBxVervnLjN630LFfv:A66myv9uS0QCoBxoszD75Q84T
MD5:	B105EA9789317B46BAE7860E4E20F081
SHA1:	CF4BB732CC60A38E36D156AFA0CC7983728C3D68
SHA-256:	D77F31B8AD395B61F042C5348163D703EC81A2B3ACEA2C40A3BBF7E991B9B999
SHA-512:	24DDF38252EC6501E5014C5E9C97353494056E789A3D76F8567170E2971CCCA0CB2F6E83B40AFCEFB510554E548EE9C4D01ED194E1E5842637E0152475400B4E
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/domains/ghabovethec.info/communicating_files
Preview:	{"data": [{"id": "000dd50b2f3df84aa499e38e8a88994b92c14556c517cd26237eacede1130c3b", "type": "file", "links": {"self": "https://www.virustotal.com/ui/files/000dd50b2f3df84aa499e38e8a88994b92c14556c517cd26237eacede1130c3b"}, "attributes": {"md5": "3426dbb2593839db1c884ae8aa747111", "type_tag": "peexe", "last_submission_date": 1702978603, "creation_date": 1702350926, "first_seen_itw_date": 1702375285, "magic": "PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows", "crowdsourced_yara_results": [{"description": "Identifies RDP Wrapper, sometimes used by attackers to maintain persistence.", "author": "@bartblaze", "ruleset_name": "RDPWrap", "rule_name": "RDPWrap", "ruleset_id": "00222cb2a2", "match_in_subfile": true, "source": "https://github.com/bartblaze/Yara-rules"}, {"description": "Detects win.ave_maria.", "author": "Felix Bilstein - yara-signator at cocacoding dot com", "ruleset_name": "win.ave_maria_auto", "rule_name": "win_ave_maria_auto", "ruleset_id": "008187ba77"

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3326
Entropy (8bit):	5.1456170903576846
Encrypted:	false
SSDEEP:	96:WBLIyczRhqJcXFJrpImi3cB6zpImJcrwER:ELPcFhqJcXJFAc0dFJcrwER
MD5:	BF30A4F16B6967F95EC35B07E8BF43A6
SHA1:	6128DD97D1D63164D5CAAAE76C352B17468E861C
SHA-256:	6C90606B14467C4FDDAA54FBBD89652D077EE27F10E91EFACCF32FA8EED90ADE
SHA-512:	0C740AAF3CF6EBBFBDBDF7F36824CA52B0C793389ECD10081FEEF988AA57EE224F777F2851E44C18D2EC8F62C6CB89F973DB0854BFB9AF3B0701787ACAA00AFC
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/domains/ghabovethec.info/graphs?attributes=private%2Cgraph_data%2Ccreation_date&relationships=owner
Preview:	{"data": [{"id": "gdeee240bf0b74014b5558e8de353b9d9cd190ae0c60a416c83aba433b0c00143", "type": "graph", "links": {"self": "https://www.virustotal.com/ui/graphs/gdeee240bf0b74014b5558e8de353b9d9cd190ae0c60a416c83aba433b0c00143"}, "attributes": {"private": false, "graph_data": {"description": "InnerSpace", "version": "5.0.0"}, "creation_date": 1719992374}, "relationships": {"owner": {"links": {"self": "https://www.virustotal.com/ui/graphs/gdeee240bf0b74014b5558e8de353b9d9cd190ae0c60a416c83aba433b0c00143/relationships/owner", "related": "https://www.virustotal.com/ui/graphs/gdeee240bf0b74014b5558e8de353b9d9cd190ae0c60a416c83aba433b0c00143/owner"}, "meta": {"count": 1}, "data": {"type": "user", "id": "ronon_dex"}}}, "context_attributes": {"shared_with_me": false, "role": "viewer"}}, {"id": "g6f300bb54447430dac897e7ff7eb7f157974a79908984fd79c342d942e1ff848", "type": "graph", "links": {"self": "https://www.virustotal.com/ui/graphs/g6f300bb54447430dac897e7ff7eb7f157974a79908984fd79c342d942e1ff

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 39535
Category:	downloaded
Size (bytes):	12218
Entropy (8bit):	7.978613747850689
Encrypted:	false
SSDEEP:	192:CNtagQpzZ/JC7tlwhPncJ9dcxiSXFNpq8dbJ8FqjUvnAFZCQ/iAgGWVW+GFq7K:ca71/JC3wh0JnoiSVNw2fwnAYAviW+nK
MD5:	8EBD6E2CDE3A1BF92D95F856FDF4BDBF
SHA1:	F167050FF1908D57FE20C3464344608A1E91C0FA
SHA-256:	9623B6B441872B5C39C86EEB577FEFA5CA36971814613FE62E4E6C5DDD5D0A79
SHA-512:	7CFFD1D101FF4E4C355A6D7D6B303FFF5BC06628605B298C15599E5DCB9D4BADEDA1FBB25DCB2462C304ECCC0AF2632BD38BA411E860AEC3AA30BEA7C9CA9C30
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/21928.84211e4ee5e5aa330648.js
Preview:	...........}k{.F.....0.....&..L+......Z..=..#.@..E....%....VU7...N.dw.(..F_......n..r.<...vZ..l..h..7..e\|s._/......<....U.[,.i..N...r.z''.A]...6...n..I.i..?n..n....a.(...k7\..O........q...4...v.{.......p..\|....)....q.GI,-.I.[.P..N.s..7S.$....Y.,....l8.&g.....ro.....i.Pi~...4Z.IZ.N...h\.%..6.......7j<C.Ok...g^..$.s...:{.T.{.f..1....C..m.O....i.l6..P....O...a.z.... zN.@../......o.._....O..O..^.j....R.s..i..Y.L..Z9......q8S..8.....#...).tF..N.K....O..H[.....-GaBsH...E.=r...%~h........Eu..Te.2..Ue....8..<.'.q...\Q...[.o.hH.X..J.../.u..2PSvF.G$..5."D../.3.)3...X.$...%D\|...,...j...(..KnU:..-.h....+..?.(My...1....M-.4...4b3....b..,.#.k....h...^........B.s..X..u..k.....rWc.N....;.KL..'Yb.+X.!...5V...v.p..L.s.....}.,...cD.\|?.......x.f^v;..`!w._p.sd.yqGY2.}K.........;..1..H...7.(.S........Dh0.......... .....I..R..j.%..>Q.Rc.(.....E>Q...3cF...o8'*B.4L.+.M..)5..Dv..LwT+.......2.%.uV.b[(..\|....G\|..\|..M./U<...1/..O.MF....'.52a^O......o.e...h

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7256), with no line terminators
Category:	downloaded
Size (bytes):	7256
Entropy (8bit):	5.36289199490694
Encrypted:	false
SSDEEP:	192:FtsAzpT1cxgyv5AvnHeuAprvC7wtVAanvnvdUhW5QUPnyun7ne9GQ7aTT+T1Uu2:FzpOgyv50nHeuApLC7wtVAavvdKAZ9bP
MD5:	EC838DF0AC106DEF8379DCE25B06FB77
SHA1:	01F648C55D4CB1E94E5AB9CCAE4348F024C16F48
SHA-256:	21EDF3106C39CEEB363AB9C8E8D184D95B71FF2BFC4841665B97E58D8259313A
SHA-512:	5DD834ABEEA64F3D79967C97757AAE6705F0A94AD69F05D828DB45EA2890B21A639464138B5DC13B0CB38E3F55FDC0521CE2D3D710B55C5D77A958B882242FEF
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/domain/ghabovethec.info/detection
Preview:	<!doctype html><html lang="en"><head><script>!function(e,t,a,n,g){e[n]=e[n]\|\|[],e[n].push({"gtm.start":(new Date).getTime(),event:"gtm.js"});var m=t.getElementsByTagName(a)[0],r=t.createElement(a);r.async=!0,r.src="https://www.googletagmanager.com/gtm.js?id=GTM-KFBGZNL",m.parentNode.insertBefore(r,m)}(window,document,"script","dataLayer")</script><script>"virustotal.com"==document.location.host&&(document.location.href=document.location.href.replace("virustotal.com","www.virustotal.com"))</script><meta charset="utf-8"><meta name="generator" content="VirusTotal"><meta name="viewport" content="width=device-width,minimum-scale=1,initial-scale=1,user-scalable=yes"><title>VirusTotal</title><meta name="description" content="VirusTotal"><base href="/gui/"><script>window.VTConfig=JSON.parse('{"apiUrl":"/api-proxy","apiRoute":"ui","firebaseApiKey":"AIzaSyBC8n5UX1E6olWNYbCk4_49jBW_CXiYtj8","firebaseAuthDomain":"virustotalcloud.firebaseapp.com","captchaSiteKey":"6Le-FTYqAAAAAKhTKMsdty7T9sOWkICH4U

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2785
Entropy (8bit):	7.899073667723634
Encrypted:	false
SSDEEP:	48:D/6hAGifxPHzR+bEYNI6Vi/elmADjF9BjhdFEop6/XOp9xaXLb1GaK6xIk7Urz63:DShjCtT6k/FKFX1EopzaXL5GaK6qkuzu
MD5:	A6AEF6F1315794A655FD79F5427F3B0B
SHA1:	FC87FBDC6B656622CB606D6D8E2CAC0EEAEC9E2E
SHA-256:	D6C60F52B894CDC32BB8B74A871933867DBB4776CEC55EC75AD4818AD7CAB34F
SHA-512:	24E203657CB94F850B82CAA6013B3DFF9225158B7FD90864A51FB63906917670B5D94C5D9A10F98DC53F6E0BD6EB764C3730104285CC44879AD789369EDFE332
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/graph/assets/images/relationships/dark-default-referrer_files.png
Preview:	.PNG........IHDR...@...@......iq.....pHYs.................IDATx..[{TT.._s...;.D.Q.].V...-..4.&..6..G[.'.m..hj.QD.Zk5..5j.V=..I!>...m.A.&V..=.........ww...............^.r9LQQm)!J...lB.-..E.(.)U+(U.jY..{.wy...(...#5o..B.......j....5...%;22..Wc.f.o..N#D.[..[2!j....}..X.e.f.....ig.7..B.9....6..M.Q.....j..>...R..={>.....?~.].r.UV.fUU.YUU..7....`,>..Z....Re...z.^%'$F.T-4.X..ql..l........{...{...>N.......%.^..TM.T.4.H....%+YEE..@.n...'.-[v.....-..........s...v..p7J}.I."D]b.x.6.4A.<......n...0a:..g.:.....3...N.HXc..U...;..Ev.U"......8.ee.6y.T..5j"k.C...s..=..>}.k.....a......W..a..Re...s.}.m..G...Y.....3.^k._....@%....&........7...8..,...7.e.'....../a.;.0R......\|...._\....SA.w.._..&.k..X...F'!...@y..=~.YrN.Wo`...w...?a...}?7o.b/...h..`...T.-#......a..-j0.e.?.....eF..Y........u.1.o..s.Y..U.c..WzJ=..'..=.}C.k.:.[....ux...rS..\ZN..'}t.O..VR..M-...>....!.b.N.,...:t.........}.7....\uF.^T.+z...{.......C.......1...<.BZ...p..-X]]....

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 29075
Category:	dropped
Size (bytes):	8779
Entropy (8bit):	7.974310392674005
Encrypted:	false
SSDEEP:	192:wHMklToU95BlAqddPKCpRbUkt01xkVpKarKDZWGv9WZPt8Dv8xNyv5GfOg:wnJ5Bltdx5Hrt04Vwi/Glqgf5Jg
MD5:	9649362A779A0DE830138C8A4369DB54
SHA1:	E5CC775B024B7B3DA7B2C839F5621EACC41D2F9B
SHA-256:	6338280D2BFAD77F05F1771D052FE7C3A2F9DF4D1033ABA16D9C8777504679FA
SHA-512:	E62819F7BC36968F51F3BA5B5AF09357B7EAA295EAA26C119BE4F8FA0A0A943DA57257A9183BD2722CA56DB49FFCF367A96417CCAE3C1564D95392B3109427D2
Malicious:	false
Reputation:	low
Preview:	...........]y.....?.L....@$g8.)J.e9..J.:6.U...l.......0...>.8.(.7/o5.....@.M....Y..ws./..1]...g.Mru]\|.D.Wa.L.......n..............u3Ox.;y...3......E...r\|....z..N.i.....zi....w...OOO..........".xr..1>....3....I..f.t2.............p.z.\|<......mO...........]........;u.(.k...[.....{.d.'.x.IfE.&.syV..r/........${.~.N..$......b..f.6..&K..4.;).vI0O..Tt#w.*KWQ..L.i\|MMA..I.[.;..O.:.....bR,..K'av.Y....j.D.8j.n...yb8.p...D..S..y7.SN...$..x.\/.$.1.2Kox..'.;...'.N.D.?...XB..".,......S1J6q<.L....w.?.Y.\..w7.N..Yq...gY.......h..<..ywk....b.c..QG.....b.fa!..D.7M...!C.lF.....~..<......\.\|p....I.N..#F......aF..u..y.j2...hzt.N9..(...j.7.1.~...0...D$.....mgi.......6..;. ..;..1H..8.xb.<.w.M.D...&..H....{...y#.D.+.v.f.../.(.st~.rGkE3...Z..E..%.u{^.l.<\.go........Fn.q.._.?F...."..K..8.. ..6....;:..d...n...l.e..w..s36;:.e....(...........Y.$Qr...>..Lc.D..D..K.......g3 ....j.G..D@...Q............Y.,.l..(...e......?w.'...x.C.yX.~!.b...i./..8....H..."....s.

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (35505)
Category:	dropped
Size (bytes):	1554371
Entropy (8bit):	5.438214609189813
Encrypted:	false
SSDEEP:	12288:AkfrOtUVONWLuxjoVgrf8Q3cDFLycLc6BwXZe3c74s5BzRrwjMLnom:bPc7Vx2js9
MD5:	5C0B08F33B351134E1BB42C52607CB13
SHA1:	45EDE3E015014824A1030D8F0072AA11BB602A0F
SHA-256:	7A5ADC2F2D292B86343FCFFACAAF361744FC3052658474E2B9EFCB270203CDDC
SHA-512:	DFE039B85DD0FC9FEB2C5BEA7E7290DA61871D27998ADA0C42C2E9FB4B96F85425D47574AAED1031C8A02C6E8D579C7522E074B1F162610E40A5271924DF33F5
Malicious:	false
Reputation:	low
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[9],Array(165).concat([function(n,e,t){"use strict";t.d(e,"a",(function(){return a}));var o=t(24),r=t(167);const a=Object(r.c)(class extends r.a{constructor(n){var e;if(super(n),n.type!==r.b.ATTRIBUTE\|\|"class"!==n.name\|\|(null===(e=n.strings)\|\|void 0===e?void 0:e.length)>2)throw Error("`classMap()` can only be used in the `class` attribute and must be the only part in the attribute.")}render(n){return" "+Object.keys(n).filter(e=>n[e]).join(" ")+" "}update(n,[e]){var t,r;if(void 0===this.it){this.it=new Set,void 0!==n.strings&&(this.nt=new Set(n.strings.join(" ").split(/\s/).filter(n=>""!==n)));for(const n in e)e[n]&&!(null===(t=this.nt)\|\|void 0===t?void 0:t.has(n))&&this.it.add(n);return this.render(e)}const a=n.element.classList;this.it.forEach(n=>{n in e\|\|(a.remove(n),this.it.delete(n))});for(const n in e){const t=!!e[n];t===this.it.has(n)\|\|(null===(r=this.nt)\|\|void 0===r?void 0:r.has(n))\|\|(t?(a.add(n),this.it.add(n)):(a.remove(n),th

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5604)
Category:	downloaded
Size (bytes):	409481
Entropy (8bit):	5.224877085556589
Encrypted:	false
SSDEEP:	6144:ZYB5dZaGmXx5+lw+ohqQwDEPmmDKZYI6N:ZidZaGmXx5+lw+Rc
MD5:	7E5D91BAD54CC0A6EC20A9DD492F546F
SHA1:	F356730EF399C83BA73E7B80E247269995C79E1F
SHA-256:	BEE3552AECFC76833DD04C2E4F7CCB4A46E4FC541C78AE3FE12CFEFD3C4571BB
SHA-512:	3F75AF9B30A2F0D546FD0701A5E8DA979B48D28A2506A1757BAD4B08566D19BA6D7FAB08D20EA3E2EE56EB74382E9DD0B2729DFD6184143FEDEB19AA6E8A2D86
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/graph/assets/7.main.bundle.d5baa643dc30350353ab.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[7],{1028:function(e,o,t){(e.exports=t(96)(!1)).push([e.i,':host {\n display: block;\n --vt-font-main: "Roboto", "RobotoDraft", Helvetica, Arial, sans-serif;\n --vt-main-color: var(--bs-body-color);\n --vt-blue-50: #ecefff;\n --vt-blue-100: #d6dcfe;\n --vt-blue-200: #b0b8fe;\n --vt-blue-300: #8895fe;\n --vt-blue-400: #6071ff;\n --vt-blue-500: #3a4eff;\n --vt-blue-600: #2b3bbf;\n --vt-blue-700: #1d2780;\n --vt-blue-800: #17206a;\n --vt-blue-900: #11174c;\n --vt-blue-A100: rgba(59, 107, 249, 0.5);\n --vt-blue-A200: rgba(59, 107, 249, 0.75);\n --vt-blue-A400: rgba(59, 107, 249, 0.9);\n --vt-blue-A700: #3b6bf9;\n --vt-grey-25: #fdfdfd;\n --vt-grey-50: #f9f9f9;\n --vt-grey-100: #f2f2f2;\n --vt-grey-200: #e6e6e6;\n --vt-grey-300: #cccccc;\n --vt-grey-400: #b3b3b3;\n --vt-grey-500: #9b9b9b;\n --vt-grey-600: #666666;\n --vt-grey-700: #4d4d4d;\n --vt-grey-800: #333333;\n --vt-grey-900: #1a1a1a;\n --vt-grey-A100: #a

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 30780
Category:	downloaded
Size (bytes):	9887
Entropy (8bit):	7.974749784794349
Encrypted:	false
SSDEEP:	192:zyicorQj+x+wlOnJIi5oYE9ZbtDob7C3W/x//DotI64wWK2MSx8UnH:8orotwe4YEjtDob7eW/t/iD4wMx5H
MD5:	0BBFD9A5690ED408A669533AD4B2925E
SHA1:	4339B3450313557639E5D6EF76DC4BA6839F3FA2
SHA-256:	83CB6854E93B67A4390ABDCB125AB07CAB3919DCE515D8B96C151E6703C9E090
SHA-512:	A40AA03A2522A087D7DC509ED0FBC0B581A556BC0E68E21FA52D607FC2C9AA5F11174E5FCFDD2399B89455991E4D8D57A229FFB204A547ADE63529D100FAE58F
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/76194.9a49eca4de4d4a1bd1bf.js
Preview:	...........}kw.F.....03Q.Y...;i..0....qN............@]B....Tu7. ){&..{..M....u.j.......M4..,...].a..XGq2.H.....m...yu.......t..kg..p2...v.m.....Y...^..l..........MT.i....+.n1I.B$....=..2+...v..m'...mwl'.7.f....1^s...{...h... ..._.;..)....G+QX3g..g3..W..X...dF.H......9......0..J$7..sD/[..a.]...q.:....]...F.....t#......xS.X3p1LG..H.ic<..7"]X?...}......:o.fi....yYT.;.+ z....d,..n0J^..Q.v3.....>;k..&."o..0zE_.....b.OO.=.D.....gg..Z.\,.D.U.~N.g.n.U..x.>.s+.....E...&.]..v........K...7..J4dA...m.w.}^.Nf.0.bz\..#I..z.$..bryi7...vK..E.n..E...1bX.l.6.)..t......../....m...6v.X.....4.[>6\<=U...a.".)M.Z...P..7]'.4..%...7[. ..D\|.,..^.\_.X.....9.o~.......'[..(o...m5.a.QC........z). .6Q2'..x{..p....t..b.RTg.V.n....q...q.....+I.".rW./..p..E.....^..;+_....I&4^Y4....Uhp~..+..h..,0..........d........L.w...M\|...4Y.7..........UB.........%.V...7`.a."rc`.Ac...Y.ZE..7....A@.[.}...oy..,..b..}......2...n.R.?B<..s.oN....0...\|1.1..b.G..}zQ..l.!}W,E.c.#l..An3

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	544373
Entropy (8bit):	5.545819658288968
Encrypted:	false
SSDEEP:	12288:4yXYCPXyLghRksWBeHeL1RPq4rCYj+A4UYCI3rfjFL:4yIMysWeHeDy4rCYj94PDfjFL
MD5:	D1ACC9BE4D3CF896CEE687E337E5869B
SHA1:	0A39A1BCA9A86E126398E2B7A11DD2FBF908DA2C
SHA-256:	5B69AC7F3E6B0C580DD2F0732CB748FFEEFE03C494735362563DDD1D43822438
SHA-512:	6CFA8D8353C686973F0ACC8755A38569F0E9F8434FF6E55E70EA8275624AFFF8CB3D3BACD89C06DB34D8D12859CC4CD7F3540AB32398022739F872FA148961AA
Malicious:	false
Reputation:	low
Preview:	!function(e){var t={};function i(a){if(t[a])return t[a].exports;var s=t[a]={i:a,l:!1,exports:{}};return e[a].call(s.exports,s,s.exports,i),s.l=!0,s.exports}i.m=e,i.c=t,i.d=function(e,t,a){i.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:a})},i.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},i.t=function(e,t){if(1&t&&(e=i(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var a=Object.create(null);if(i.r(a),Object.defineProperty(a,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var s in e)i.d(a,s,function(t){return e[t]}.bind(null,s));return a},i.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return i.d(t,"a",t),t},i.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},i.p="/graph/assets/",i(i.s=44)}([function(e,t,i){(function(t){var i=/\.\|\[(?:[^[\]]*\|(["'])(?:(?!\1)[^\\]\|

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 9182
Category:	downloaded
Size (bytes):	4104
Entropy (8bit):	7.948910842499831
Encrypted:	false
SSDEEP:	96:5/0w4xzd8si6nn1QdZ5cR2INKfTWEiLLotVKekJZkTiybkuD25iP0:lsZnWmHEfTWEJtszJgRbfCic
MD5:	BDC5A45E28B2FD2F352FD82A5619892C
SHA1:	846356F067ADBF0FE2B5D640E57DC4E7F9063AEB
SHA-256:	BBB7F07353D10EBA66A6EEFAC5AB6CB7D8E3AA40555516C8E358CC35758C7004
SHA-512:	E675AEF317F892E6D761E80D3D5817C0D049A27D539913A21E2EEECDAF4BAF5F76656417D7C0633F32875621F1B2C2C7478861914A18E649084C14EAF6DFEF82
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/vt-ui-sw-installer.3166763520a2b299ee12.js
Preview:	...........ZYs.8.~....t.....K6..N.ru.;.N..n_7DA.b.......~....%.'....8.g........0.0.x9I.\|.`...R...R...._\|{x......E.....7..h...,2.Lx..nx.#.'<.G2...\|....Y.V.\g..\|..C..y..0....t....'q"0<\|...E<4.~C.\.k..F.k..r...t...^.6...3.,R.f;Y...%.E.....R.@.u.Q...x..k".o.e..O^Ul.......t..9L....y......t............yt.o..E.F.d. .PL.P..p.. 7...&.yx80...X...\_..G.L....\...7Cl_)1...y.........l9.cZ.GF.$...Z[1}...V:....C./+.x.X..Y.V.\.4....%..n.o.&.........0l.T9.M@........i......FY..N.\.f.......a..B......A.Z.C!...E:]ka..A..j...DH.3Ypm.....;~.':....,.....l5.T......t...5......vA'...21...j./..H..2...<5^>1.%...#.D.d..Z.{.$..JSC..)......w.Bi.-W#-..1;....D.s.U...Y.....PlL.y......4'7.99..Q.r.vFQ.:.;.i>.9..}......~.!.?Gd......Zx.\|..rS[..1..}.r:\|..b.....a....z&53..D&....5q".... .k4..9l,k.\|C.d.....o../>]..a......\| k.m....l.zl._wn.o....U.F"j.:D..9..m.D...P.....H@q*%......OK+..C..U;\.u..\rC....t:..Y.pA. ..7.t.._E2..-..Z....&z......0g..T.(>..R>{.O...+..6W+.~..

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 18981
Category:	dropped
Size (bytes):	6658
Entropy (8bit):	7.970684268514322
Encrypted:	false
SSDEEP:	192:bXV5D9/IRR20FYq/jLMdb32ewh8QmJC1rmUAS6SvH:55D9m20Wq3MAyRIrl56Sv
MD5:	2E54D383A81C50EB46E0C5FEF3E1F031
SHA1:	CDD442B25A5FCC769B0AE1C4974529FFC4475BEB
SHA-256:	E2FB54E1E177EC74BD10FD32A0D67F9EAFABFF76DDA71C9A90D8D395693A2C79
SHA-512:	EE7181D46B0E3D898F9BB3C16550B6E60E6ADB124C3FDC1B76B2F190EB60866315383F3566D0BA11AD8FE75D6B913293ADA7268F3C3570C169470257531C217F
Malicious:	false
Reputation:	low
Preview:	...........\}w.F.......z.G......:..........B.@..XI.q..}.........<.[...;........Y...Q-.......\.N...Mq...f~..?.......7_...w..~...Y..A.p......?..aTk.z.v......6.N>.E.~..;Q...v..$.7..v.....m..Zu'..^.....F.Z-jFc..E#.t.Z..?B...a....?..q...^..;S\|l7.}\|\P.N...}..{.u...V.X.1..C.1..k4.36.l....:t;.&.}..:.n.(..u.\;.8W.s.<wN.7.s.9O.........y.<s^:.;......_.......qqD$..p.H."J.IJ'.3)3...&..H..E2). Z....$.8.....t.z....o"...,....{. ..E..;..(.....aq7...:...c..l.....E.f~!..Pu/.J\|.D.!.c1.?,..n..?.6.\|..a..._..%...".%.A~L...._$..O...Q&.E.X...%{{j...G..T.d..e..~.[.C!.0..^.,.4../."E}./@...y%e.N1.r/.F.\|...-..].i\D.K.6.O.`=.c.a..,Q.V.G.Q.g.-.MQqw....h^i\|...v".....(..2h.],r`&....pro...X.^\.k.h....L...w..~...`JX+......y.X.Dfc_3....l.(....w4w.l.D..&.<PN....n.(......lA..)..Xe...N..4M...9Q..#.`.....(.f~\..>b.Y...Z.m4._.v..w~T.(f{{.d....Lo.8.C\|.G .U....".....f.$.@.d.p.L.E.....,V+.X.....YR.m....U.r#..0...,..n?}................N...L^A.........8\...n.w...z.&.!.i.f.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 86417
Category:	downloaded
Size (bytes):	15014
Entropy (8bit):	7.9863875317742306
Encrypted:	false
SSDEEP:	384:pg9gKZWx2oDVhw/Th6UomFiZcHtxq6jxVNXIhbvvufbcXd:+do2oDVQThNXHPhNV9fbcN
MD5:	DEB2A20540089992B969A131BD0E9FD1
SHA1:	3C082C930E68B8C55D50A9464D94B2BFE84B1BE9
SHA-256:	0C2807847A9C72AEA91AEBADADD9AD3B203CFC5690ECC131518497A8DA79250B
SHA-512:	3EBA7CE6C3F58718700C89CC28B70B29F278F0B91259E213D0334F781A9BB35B39A021D9DABBF92A2010B0476DBD4908751FED3A7AEDCFA9B5EF8529FC9B9CF4
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/51452.78c2117408c1bf8fcbcf.js
Preview:	...........}.c.....W.L.#S.&..e.ul'u..9+I...\.\..H..@=B...~ff.X<(...E.....;;;.i,c..I..I3V.I.Z......t.\^%.......;..?;ou..x.<;.........A....MZ.'..y\|t.k.\y.......aw.....wp...r.A3i.......ytt\|...;....{;;...L%.........<Q..h0Y........[+.,F.^t... .;3.\$S..x.w.F.`9.....i8x3...%..............E."..&......f#.. .].p.U...>\|.0S(.u.j.F^.Z.@WO?..=Q3...............'.v....lx.z..............st....j...N".,..A....z.c5..eV....7w1..8v.M..q.o...L...Fa.xY.hKZ.x.mjv:.t.qdS?.x3l_\|.xI<Xa......W.?v..,..w....9~...S.........H.q..^.h....`.v.b.(.iv...bo......^.Yk.\......Nxv...T...7..e.a1_..DE.l..NSh........f4...w\|...{..a.....Ur]>.Oq.a:.. .N.B.Yg....l..vbu..E...r_.V...h./nOu.2..nk.%.q:..JC...4..ZM..{..........f..co8SN'..4>]u..g.o....l<.i..7s...4..K.Rcg..sg....8\F#\|.Qc6./T0R.@....O..1~r.Y....M.4.u._.o...O;Z.....L.......e'w.f....n..^p......r.?......J2.B.l'.8.o......]k...\|...K..nT.;P.X%.?.\y..Z.\..P..Z.....2.T~...[0.Z`1.X.-..8.,........g....mf...0..4&..!.....N.aDW$@C..m.W6.

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 24531
Category:	dropped
Size (bytes):	9059
Entropy (8bit):	7.975920602662275
Encrypted:	false
SSDEEP:	192:MCtRjBGkBVbr7/GPch1MuaEaDKnH4lNltw+Juwfd:MMXGWVb/Cckuazf/uad
MD5:	D4C7AF8CB71D4708222A387EF16DBC7D
SHA1:	AB8707BCA294E9F06913523F0E6A3ABDA6F73983
SHA-256:	0996D686960A75C9AB831217EA9C73840A88EA30814B5D0EC0CBAB52AC647754
SHA-512:	9D7B2D3B14DA175C994B1B3DEB3B658D511D07B2026C7A69B82602AF471064A00727286ABDCDBFFB8D685C2FC25FFEF8FFBFAD6A328DC9E16151D7F87FF89F1C
Malicious:	false
Reputation:	low
Preview:	...........\.s.F..}...N.". .&!."....dkV....I"........}.... .....V.iI`...w}...`FQ..4.Z.Kf.-.W....b.~.)....2.....}.tye..u.h]^.........N..[....<.dn.b.._....[.(a...M..(.x..........7s......'.r.>..0.!.[&i11.e....ooo.......y.(a..8I&.t..,-O.$.....F.MLv....IXQ..d..rA.}d.2.Y...31.i.......].o...1Y.7L..B.{.......s.g{n.?xr{.7.C.3Dn...O.......................M...5.S]....=..Pmx.n..1~.0&.lA..]....F..&.._>X............W.1._c..=w....if.R..'........n.y.w.dm..L9.`.d.v.R..VM...."ZQT.Jr.i...8iw.e@....r.@Z2...k6..F.Kv.,........L......A.o..d.N.e...o...P......,U..K.....g...O.`..$..O...i..Y..6.9.V,/._.b..2......G.ef..9...+..wl......H..s#6..dV1.....#.@......NJI..>J.O...q.V<)/.+..ULZ4..UX~..@../...>}.....<5..pP...QFl..L.R..-.l...5M..0.]..0..<.O.F..).......<..\|k#da6....o.w....O........H..O2.X..\.....r.h....9?.[.Lw.;[.6.ea..R./n.82<?G.U.D.*..v....=.,5..9...F..T...-......f...,..U..Z.......I..\..y.`l..8...m...\....a.F...n..D.\.;].y9.Q.../..}?.~...l.6...'

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (17825)
Category:	downloaded
Size (bytes):	24221
Entropy (8bit):	5.386874835616361
Encrypted:	false
SSDEEP:	384:VDWRv+XamKIJoX7pw1XnODJBa0dETJBnwnUuJfjg56:VqRv+XamwXuBOLa5wn+o
MD5:	7D42EE6EC7E5892832B6414789840CF5
SHA1:	03A3899E7A2402A014BE9F64C2493700A99D61AC
SHA-256:	81F5E8D412C63797E959C173456BDDF1EF5AE50FAD72C2DE4A135DB989758D37
SHA-512:	6A019D99B216F2EB00971F02FE85425D2309DD5CDE544CCBD4E9425DD18436DBC19DF11EC2441CF1A2B676F4640876A4569C763EAB9121F149F61590017B8545
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/33748.87af4c1fd5f31e57a521.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[33748,25072],{14284:(e,n,t)=>{t.d(n,{p:()=>s});var a=t(16645),i=t(56717),r=t(44052),o=function(e,n,t,a){var i,r=arguments.length,o=r<3?n:null===a?a=Object.getOwnPropertyDescriptor(n,t):a;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)o=Reflect.decorate(e,n,t,a);else for(var s=e.length-1;s>=0;s--)(i=e[s])&&(o=(r<3?i(o):r>3?i(n,t,o):i(n,t))\|\|o);return r>3&&o&&Object.defineProperty(n,t,o),o};let s=class extends i.C{constructor(){var e;super(),this.intelligenceAccess=null===(e=r.NU.currentUser)\|\|void 0===e?void 0:e.vtiAccess,this.user=r.NU.currentUser}updated(e){e.has("_large")&&(this.small=!this._large)}};o([(0,a.property)({type:Boolean})],s.prototype,"intelligenceAccess",void 0),o([(0,a.property)({type:Boolean})],s.prototype,"small",void 0),o([(0,a.property)({type:Object})],s.prototype,"user",void 0),s=o([(0,a.customElement)("generic-overview")],s)},67119:(e,n,t)=>{t.r(n),t.d(n,{pdfIcon:()

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24102)
Category:	dropped
Size (bytes):	262652
Entropy (8bit):	5.553200803732883
Encrypted:	false
SSDEEP:	3072:KgYpTAXMD+OR3G0X/gDwPAjIJ8UUlPLKOZ0DmoMfgQJyNz0w6D:KMXMiOR5PmPLoDmoMfgQJyet
MD5:	EAE9FA13B046768C46238CB12C947782
SHA1:	75CF380C333903F21704FBAE1EDCE5DC80C21A43
SHA-256:	E572BD090E1C9D793DAE07D8DD389646D4AD0D8D39B0B778F5F1A0B2F9422FCC
SHA-512:	75E411263626C0BBD90B2006DAC1763DAAD2DD451313315CF8E40AA021E37D6D07077F426996AA580E07E4AADA51D8D6DD2E3DAAD22490377B64CAF77C8A2CA9
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"54",. . "macros":[{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__remm","vtp_setDefaultValue":false,"vtp_input":["macro",0],"vtp_fullMatch":true,"vtp_replaceAfterMatch":true,"vtp_ignoreCase":true,"vtp_map":["list",["map","key","\/gui\/search\/([^\\\/])\/files","value","\/gui\/search\/:search_query\/files"],["map","key","\/gui\/group\/([^\\\/])\/users","value","\/gui\/group\/:id\/users"]]},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"user_id"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"custom_event.elementId"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreE

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 22078
Category:	dropped
Size (bytes):	7215
Entropy (8bit):	7.967880879123394
Encrypted:	false
SSDEEP:	96:xdaCiGgHMpAjTll1sPXfRNUYi7nWq44ivSlwqZGg9SZeed+niaY5CZpxNIGSEzrK:vaPHvdjsPvXUEq44bdZG3MgKR7xNlfLm
MD5:	788A4A0EFF74DE193709B26510B7DC3D
SHA1:	504E02656228CE1F176B696FCE6927264C0404C1
SHA-256:	0042AD95432F50DDD13304849653FF58EE2687C8801AAD5C0BDE3136D77AC991
SHA-512:	F6D4F3A512E8A2C3947AF1A33818C583A335C9A7D62C783CE5581F67A9BFE39327C558673C6CCB758A26E3413F86E0680F48C398943C2B86A7FF3D1B35780231
Malicious:	false
Reputation:	low
Preview:	...........\.z.F..?O...7...I..E.v.3..;...h,.(.h...(JfS\|.9.6.7-=v..j.u.Z.Uh,.T.Lc.......-.....".t.?...(..{......`.....e...;..W.N..t.2....>_.D.S..{.?k.z~..v.w......n.......~......vN......4...V...q..s.A..=;..n...c....n..9..a.3......S..OB.>gC".&./.E....O......,f,.U..\|. .......,..xQ......<.0........./_...9/J.....t.6....\|9g..y....>{..$......2..B....z.,.#...T.L..l...akX5......=s..U.n.......}.".<....%.2wP..Y..Ze..i..U??Z....;..,..}.,O..~N........!l..P.V..H.A...=.O.H....,..Q{]b.V~..,./.g...J6..9<T.pY(.G..=Z.C..."M..X.^.......c$.#.lN...8.......aa.........[.y4c.HY....'.x...C.-3.!g.9..q4g..Z.4./.i.Y.~.b.k....`.g......E8.v~...;...Z.#....(.0.,..'i..,sF..mT.i>iV......S.f.iT.U.I".5yQd<.7.....Y..P.,9.s.&u$......8z~.......k!.........8..&.\.#.;.8<.;.s......~.../A5-n?HB\|...&..Z.5w.{......sh...%.%...8.Z..`..]..s........,aj.h.Y.Y1/....Y.,...k8.....NC..j.....e..)...Nv.$.h[..u.0......:...Xi...... .t2...8fU.)./.....D.T.6z.BC.wx..2...8.fi....k.yPei..p..l.`g

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13134
Entropy (8bit):	5.234327603132497
Encrypted:	false
SSDEEP:	192:dz73rUn9LuDjcrgs+5KrlGZQGbpjrV3QSrXXRXr7LVE3VuvPETdr1lSfDoAr6R8R:Z7CAjNsgHN3Q6XLVIznldbR8PoEcYV
MD5:	D371F9786FF9A96F99C6AC36C1ED5338
SHA1:	896F1C19B23C6ACE80F425EA7F436CC96E0E2787
SHA-256:	8E3F1C57B86E232BBF429B5E3DEE62F35731D694238FEE2643B4A3C4E553E19E
SHA-512:	71C540CFA4DCA21CB2BEF1FAF7BC77C2F04FE4778C9E41AF177EF225BE89A2575C3E13C2C8080EDC14AEA866E0CFBD2A6D23AA9DDBAD10DA2A67F12C1AC37571
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/user_notifications
Preview:	{"data": [{"id": "20240110093621-everyone", "type": "user_notification", "links": {"self": "https://www.virustotal.com/ui/user_notifications/20240110093621-everyone"}, "attributes": {"link_url": "https://www.brighttalk.com/webcast/18282/604369?utm_source=VirusTotal&utm_medium=brighttalk&utm_campaign=604369", "title": "Threat Hunting Open Session - Episode 5", "body": "<p><a href=\"https://www.brighttalk.com/webcast/18282/604369?utm_source=VirusTotal&utm_medium=brighttalk&utm_campaign=604369\">Join us</a> next <b>January 11th</b> for a new <b>Threat Hunting live session</b> where we will cover how to hunt through <b>Sigma rules</b> with the latest features we have added on macOS and Linux, and explore how <b>Crowdsourced AI</b> analysis compares to and complements the identified Sigma rule matches.</p>", "target_tags": ["everyone"], "date": 1704879381}, "context_attributes": {"user_read_notification": false}}, {"id": "20230818090454-everyone", "type": "user_notification", "links": {"sel

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	569
Entropy (8bit):	4.896633254731508
Encrypted:	false
SSDEEP:	12:Uc11FP/sO6ZRoT6pHAciJkSAx/s6ZmOHc9n+5cMK00k14enEPCedG:3F8OYsKuJXYmOOk4TfenEPCD
MD5:	71D6A57D21337114032CA39B294F3591
SHA1:	ADA1D867672276F16EF4D3B8A46A519FBA8E3D4E
SHA-256:	36B2057EB5EEF261A2CBB8C149DCF3A11EDAA15CCD8E3D462EB34999F5FF8F2A
SHA-512:	BC5F5B55C2741FED993D5D25A36030028C388C8888EA2D1D1F24970AEC4F856CDA366940B99D54FF2D4D9AF16DF8DE39AB847A7BA2BE0B649DE1CE2C9E70A330
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/icon?family=Material+Icons
Preview:	/* fallback */.@font-face {. font-family: 'Material Icons';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2) format('woff2');.}...material-icons {. font-family: 'Material Icons';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. -webkit-font-feature-settings: 'liga';. -webkit-font-smoothing: antialiased;.}.

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1746), with no line terminators
Category:	downloaded
Size (bytes):	1746
Entropy (8bit):	5.877974442451391
Encrypted:	false
SSDEEP:	48:VKEzixKo75XI2ovtUjPKtXsDXx/gZO1/2LrwUnG:f2gMI5czgk/msuG
MD5:	701CA9A170177F52147D6FC08CA104E5
SHA1:	2DA8BEBDEB658E20A1C433E9138D1D5320BF61DA
SHA-256:	8A559B8056902E22005BF7BEF1C9E80D98CA65C63975E399ADF711BAE96FC808
SHA-512:	084BB15119C8026A784759E25324D44827009A3426D2E060C2A07AFD607C26E1FBA15CAA7952592BAA890BE9B94255D71431A7CB0DE43A5274281052508B00B4
Malicious:	false
Reputation:	low
URL:	https://recaptcha.net/recaptcha/api.js?render=explicit
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://recaptcha.net/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepe

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 11604
Category:	dropped
Size (bytes):	3330
Entropy (8bit):	7.935392702198804
Encrypted:	false
SSDEEP:	96:715ARrHfYXT6BWR2Q+HWsUZsuvT7cL8ZtiG9//:hWR7YD6BIfPb7K8ZQS//
MD5:	A34C9F17EE2EFD4CD0D41A1E9AF9F474
SHA1:	BC08273FA97EDE12E5787303B6D27C463479CA10
SHA-256:	78C72B1547C07AA3D10F94B978ABF5FE20ECE2E4A1A6C75CA6D6BECCAABE740B
SHA-512:	319A3444C93972E12A322DDB8C8C7546308DEE0F4652304BE1FF373E6DB706469709642BEF16478EAFF6282BEDD567804BA7FE9E68CA5CDC3429150DDBFC9708
Malicious:	false
Reputation:	low
Preview:	...........Zks.6......v=.......n..i.4..Ifv=..%........U...s..aK~$u....C.. p.......T".(w.<;..x.........DEU...4.oyvyyr..e%G........)..n.om.<.8.~..L.......#...T.p..1{......=(.?..S..o..]=H...$.N..occgw.g9...;.}&1....\.YF.[.;;>+hvsmk..;..J...>..q...tOpU..Q......b7.r.3.~...?."...b......S.....E0.K.S...i.K..s.?...c/...C...X.F.E..x.R5..\6....b.S.....s....7.V..T...Vc.....C5.~muuR.......O.N......k.-...T..C:..H...v.,..<.q..."6..p..S.....J...^r.wH.TD0Q...K....#.'\..s.p...z.2-.....c...........}+....==...u}]........7..-...6..#+.C.o...R..7S...)c,w.[Q.a...H..2..;...E........a0q\..)...]....1..P..^\|X.q.....+.l^.........W....6\|...T......b..R..@...sp.y1..;9E.l.T...a.^.FZO......W<..".....+kb.X...A.......T..b9B.6i.V..u....m.:...E.(...D.:...T...8.Z.....Q........VK."..:.......M..f..&).!...].*6...G.R\.Nt.<.......(...~..8...J...."..R..6....(....?.3.A....:.w....G....:l.o........t.......G>..E<^.........`...G...\|6....j..J.nlln.lB...up.dF8D...j~...v.2\|s...E...O.

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1932)
Category:	downloaded
Size (bytes):	88776
Entropy (8bit):	5.5367282406978315
Encrypted:	false
SSDEEP:	1536:OyRsFAZVUSQRnuprtK0au1l32Mim6W+KZOBBPyJB7gHBu:xJ1l3h6W+KCPaBqu
MD5:	92AA8344CBD2C407BB4A06893D4DE0E1
SHA1:	7457146252736F500A1A00B87E6E70172767EC86
SHA-256:	444AD10E9C59B177548FF331A01EDA012EE37A9F2D37CAF0245A513B1743AC21
SHA-512:	77335A0090F84132AE6FA91150E16B4BD40CD154BDE44E08AFB54A156DF9A454A5AE371B0F0D9BA89D15B79FA772B02469494D3421AB798BF4B42DD333F9DE76
Malicious:	false
Reputation:	low
URL:	https://cse.google.com/adsense/search/async-ads.js
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=4;var sffeData_={service_host:"cse.google.com",hash:"2482146371227649053",packages:"search",module:"ads",version:"3",m:{cei:"17301431,17301434,17301435,17301542,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":500,"afs_chatbot_aa":500,"afs_gpp_api":0,"disable_usp_api":0,"heterodyne_test":372}}};var

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7726)
Category:	downloaded
Size (bytes):	298986
Entropy (8bit):	5.5937064554725975
Encrypted:	false
SSDEEP:	6144:4K7MX/iOG93uPmP5IXDmoMfgQJ7COXx0/aJ6:L+65uPma48
MD5:	43C486E0F4913B13982AF27AF27E19AD
SHA1:	8D58C1A16EBC13F77DB36A78B74CE04744B7DADF
SHA-256:	2ACE82F9AAC80813A53B6F0354A3832C3239E67A93514CBE7FECE4FB803B5CFE
SHA-512:	37AAA262F4208B90B69D076ACEC8F492FF0A155A3ED575A7319CACB6F690F2770972FAC8F6CE17810B88A4B4FA4993FAFDE7EF5BD8B99FDED52E02E31ED1E128
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-E8LNX6HSCN&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":false},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":8,"vtp_value":true,"tag_id":11},{"function":"__ogt_ip_mark","priority":8,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",1],"tag_id":13},{"function":"__ogt_referral_exclusion","priority":8,"vtp_includeConditions":["list","virustotal\\.com"],"tag_id":14},{"function":"__ogt_session_timeout","priority":8,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":15},{"function":"__ogt_1p_data_v2","priority":8,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue"

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14892, version 1.0
Category:	downloaded
Size (bytes):	14892
Entropy (8bit):	7.98489201092774
Encrypted:	false
SSDEEP:	384:LKrbeS3uuEGg7o6yDdWa/TQcNc+rAsmnsTJ39cUZi:LKneSe4/6yDFU6rAGJZE
MD5:	9EC6DEAF6BADA919E20B98F9F7B718B1
SHA1:	501D36403AD8205E4644532600019ECB10F5CB0A
SHA-256:	7B348B30EA1FE43857E68FC462C29E5C6E63C97666AF75135C4396A272E54762
SHA-512:	03849431CEF204A1584FFE6F23DBE86730AFD076146AB3D1855B9C3402168A97FAA8A529E69FAE45EA24CFF7110C2930CB4744162BA0ED95D95600F6E777B322
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/1402accbefdec6a25762.woff2
Preview:	wOF2......:,.......\|..9..........................n..B....`..b...L.4..d..6.$..D. ..f..4..v%..........D..dd.do......:d..M....E.&..J..G....3.Mxp....i....V..u$.[O.;MU.:j.?..{+/<....s....^[..d.d.....t A....`..z....IN^.......2......mY.kF...\...UYU..........$.O=5..2q..L.2.1.c.....`x~n=.'Ur.66V.f]./..L1..P..<.0.<.8.....Z/.+.H....y..F....h5....V.j.....l..O#.:-Q....9g....:..?..8v];u,O..'....c.\r......].&w.....%@..Z.^....$.,dJ....W.{.....h8}4..S/.sZ...f."$..`a.$Mb.....;.W.."..y.H.<.g.......oNS..MO....X.%.8..y.\...ly..w..?-.~.o.ZZ~G.....B.....@...._....g.fF_...d-...aA_..#k.I.....x...P.}z..JQ&E........).P\|."g.#.)Q.T...}.PD.T+<}c+.\|\|0...2.F..hD.X.J.O.eJ:.%ZW.m.K.Jd..c.7.....T.cr.2....DD.........2..y..?/g...... ={..c /.....X.0.F.F.PX.P..!..K..K.....i.%....B.."...A....F.........4..........S........z$`.T..h...E..........._%=..).)......x)...A.J..K...?.V.......w.Y}..N.....}..>.......%.f.O..o.{..=wz.e_&.O\..*..Q..c.'...X&.1wS.R..AY...G.....Q.f...z..E..u8&V

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17021)
Category:	downloaded
Size (bytes):	23692
Entropy (8bit):	5.064976344376841
Encrypted:	false
SSDEEP:	384:DFpYjxSWEPRTMWp5HiLhCtZQ9PldiKYDXD6FzMuqM:S0TzpxiLhGKcKYDIMup
MD5:	DC134F49E026D0C178A169E7F7C18B89
SHA1:	F64A474F32C8D988901B81944C0CD631A5F9A5EB
SHA-256:	8F8E6357D5D96573A8C073398582E5329B5C20A5A0E9667E9DB3EF3C1A39F97A
SHA-512:	433776F18EC264D9C8C32A22A25968B076654703A9CBEE084C3C3F4A079B70E2AEF9D145E55DDE3B40366375B86FEA4B9208D1C96B3CBDB2BD92B68CB60F5A46
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/graph/assets/14.main.bundle.c9a5eee43bf28c183973.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[14],{1105:function(r,e,o){(r.exports=o(96)(!1)).push([r.i,",::before,*::after{box-sizing:border-box}@media(prefers-reduced-motion: no-preference){:root{scroll-behavior:smooth}}address{margin-bottom:1rem;font-style:normal;line-height:inherit}strong{font-weight:bolder}a{color:rgba(var(--bs-link-color-rgb), var(--bs-link-opacity, 1));text-decoration:none}a:hover{--bs-link-color-rgb: var(--bs-link-hover-color-rgb)}a:not([href]):not([class]),a:not([href]):not([class]):hover{color:inherit;text-decoration:none}label{display:inline-block}button{border-radius:0}button:focus:not(:focus-visible){outline:0}input,button{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button{text-transform:none}[role=button]{cursor:pointer}button,[type=button],[type=submit]{-webkit-appearance:button}button:not(:disabled),[type=button]:not(:disabled),[type=submit]:not(:disabled){cursor:pointer}::-moz-focus-inner{padding:0;border-style:none}::-w

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Reputation:	low
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (54022)
Category:	dropped
Size (bytes):	55321
Entropy (8bit):	5.711701599413161
Encrypted:	false
SSDEEP:	768:j20g5tZKEK6AYmeOh2uovuZ0E98JBpyhaanyRx8V76aeeKbjmBbu2raPC9:j2gESLes2uovB/p5ayTmDKPmBqEa69
MD5:	8794C1A49D37B13EA7FF58FF0FFD0343
SHA1:	2ECBDF9C56AC695C66685D92B11F12B0F564B75F
SHA-256:	A25D8FC21839D93BD040D20B58D846944EA8A1F7BA33AB1AB337F8492D02477A
SHA-512:	096195FA58C198CF3A71FBBAB9F64F9234827E82054BCE6328DEF5B56A018D5DF34DB34368628D1140390772AA51F296FFA7D8711DE1D71074346096632ADA6F
Malicious:	false
Reputation:	low
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function d(E){return E}var g=function(E,U,A,B,M,P,t,m,l,W,f,a){for(a=84,W=U;;)try{if(a==B)break;else if(a==84)l=I.trustedTypes,m=t,a=A;else if(a==96)W=U,a=2;else if(a==64)W=95,m=l.createPolicy(P,{createHTML:x,createScript:x,createScriptURL:x}),a=33;else if(a==A)a=l&&l.createPolicy?64:31;else{if(a==33)return W=U,m;if(a==2)a=I.console?E:33;else{if(a==31)return m;a==E&&(I.console[M](f.message),a=33)}}}catch(G){if(W==U)throw G;W==95&&(f=G,a=96)}},x=function(E){return d.call(this,E)},I=this\|\|self;(0,eval)(function(E,U){return(U=g(24,79,12,0,"error","ad",null))&&E.eval(U.createScript("1"))===1?function(A){return U.createScript(A)}:function(A){return""+A}}(I)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/jso

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 11604
Category:	downloaded
Size (bytes):	3330
Entropy (8bit):	7.935392702198804
Encrypted:	false
SSDEEP:	96:715ARrHfYXT6BWR2Q+HWsUZsuvT7cL8ZtiG9//:hWR7YD6BIfPb7K8ZQS//
MD5:	A34C9F17EE2EFD4CD0D41A1E9AF9F474
SHA1:	BC08273FA97EDE12E5787303B6D27C463479CA10
SHA-256:	78C72B1547C07AA3D10F94B978ABF5FE20ECE2E4A1A6C75CA6D6BECCAABE740B
SHA-512:	319A3444C93972E12A322DDB8C8C7546308DEE0F4652304BE1FF373E6DB706469709642BEF16478EAFF6282BEDD567804BA7FE9E68CA5CDC3429150DDBFC9708
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/40946.52e58c8b2a8b55ad5067.js
Preview:	...........Zks.6......v=.......n..i.4..Ifv=..%........U...s..aK~$u....C.. p.......T".(w.<;..x.........DEU...4.oyvyyr..e%G........)..n.om.<.8.~..L.......#...T.p..1{......=(.?..S..o..]=H...$.N..occgw.g9...;.}&1....\.YF.[.;;>+hvsmk..;..J...>..q...tOpU..Q......b7.r.3.~...?."...b......S.....E0.K.S...i.K..s.?...c/...C...X.F.E..x.R5..\6....b.S.....s....7.V..T...Vc.....C5.~muuR.......O.N......k.-...T..C:..H...v.,..<.q..."6..p..S.....J...^r.wH.TD0Q...K....#.'\..s.p...z.2-.....c...........}+....==...u}]........7..-...6..#+.C.o...R..7S...)c,w.[Q.a...H..2..;...E........a0q\..)...]....1..P..^\|X.q.....+.l^.........W....6\|...T......b..R..@...sp.y1..;9E.l.T...a.^.FZO......W<..".....+kb.X...A.......T..b9B.6i.V..u....m.:...E.(...D.:...T...8.Z.....Q........VK."..:.......M..f..&).!...].*6...G.R\.Nt.<.......(...~..8...J...."..R..6....(....?.3.A....:.w....G....:l.o........t.......G>..E<^.........`...G...\|6....j..J.nlln.lB...up.dF8D...j~...v.2\|s...E...O.

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 37517
Category:	downloaded
Size (bytes):	8977
Entropy (8bit):	7.978872544983837
Encrypted:	false
SSDEEP:	192:l51TrHcNWkAj4pUsB22a3czi82FDdHZXjUDYU8m2r/s9CfmSVHZ37Nt:l5ZYhAUpUAaOi82FDhZl9vk9C5Z37P
MD5:	78400C3DBAECEB1BBB91EE82EE6400D9
SHA1:	7E76EA0F9A31C98D6FEFB8181FDE72B7F8EDA20D
SHA-256:	22D5D88895681BF26564FF6A33CCCB8E76C17F7108C6F7D4C68821A9C603FAA0
SHA-512:	5310548EEA6DE1F8A77437B8075CA66ED9F5B6B4AE8D186B07CD606B4F1D98261B24154424C859E80A71422B978A9ADE40771E164E5DD280F6725B862A29168D
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/58735.9012aa1d7929d719c24f.js
Preview:	...........]ms...~..f...0.7K..Z.....}.....B.H......Kd..{.g.3.....W.+m%.9......t.5...i8.[..LDg.8......,...Of....../_..;.t...GG.V...........wWz..k...........-...;...~.........q3\|.ol..w\..7.Wz........f.....Z............_.{...;..~....#.;cw.^.3w...{.^.....p..=.......C1\|-.i8o.g.x..I,.....f.!...l".<."...c...~u'..(....N<\|........_...d..f_d.4..I.......J.hk8.o."9s>...u_.h.!..y..%...N2T..b.."...3.P4.j...v.z....N;......E;..i.Y;......ct.?t:_.$..T.4v...E..e ..X.Y.znr...?.E~.9.:.q.9.....~...P..w.....M.{n....?.{.........(R....k.0.q.y...;\m.O.N{..K{:<...G...>./......K..^s.._D.ay......./QLe..4.#..lrR4.;.T..[T..Z..Q..\|...4.......ax.. .pv..$...D..q.z...{.G3..%.8Oo0.7Y6......~.0...v_.Kr.G.F.....\..'..^..@.E.>.1..[$U9..i.V...q..g.@.....v...N......j....{[...Y.=.E.r..../.4.t..Bf...r=.k..n.Z.1.K..'X.:..i........8..).....}\|..tf..HF:...~..`. .A......X...,..^...Nd...HdK.V.....P{X.<.V?l)....b..rq....:.B...Llc......{.......~........T...5...........o.$..g.,

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19461)
Category:	downloaded
Size (bytes):	19516
Entropy (8bit):	5.336088199581193
Encrypted:	false
SSDEEP:	384:bjDXOw1unXUo9qiyMPYBAxmlh7OJ/CBht2rVlPinggWEQRTMNqP8L9:bjD+w1akSyGaAyt2rVlPingpVTW5L9
MD5:	0552A5B55168DCAE7DB9068818A00DBF
SHA1:	946D70FF74DD2F59614D29AD315E5B8D9C1C281D
SHA-256:	D5CC1D21703D911FC4266125ACE0334C473D31230F110D94FC6C392F4C8D0B66
SHA-512:	0E7B3983DB04FE9185DEEC37FBF22E70B109D6910A5B175E150949F651EB8DFDB35363DC5C4D563AA8BC5D8321C8F8DF5A229F8D56636E7F5B2AFEA11D2D9B51
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/88116.be3428c199d3d7ca9393.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[88116,86243],{10212:(e,r,t)=>{var o=t(48704),s=t(16645),i=t(62832),a=t(15323),n=t(30132),b=t(95688),d=t(49608);let c,l,u=e=>e;var p=function(e,r,t,o){var s,i=arguments.length,a=i<3?r:null===o?o=Object.getOwnPropertyDescriptor(r,t):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(e,r,t,o);else for(var n=e.length-1;n>=0;n--)(s=e[n])&&(a=(i<3?s(a):i>3?s(r,t,a):s(r,t))\|\|a);return i>3&&a&&Object.defineProperty(r,t,a),a};const f={google:a.google1Icon,twitter:a.xTwitterIcon,github:n.githubIcon,microsoft:a.microsoft1Icon};let g=class extends o.LitElement{constructor(){super(...arguments),this.disabled=!1,this.referrerRedirectTo=""}static get styles(){return(0,o.unsafeCSS)(d.A)}render(){return(0,o.html)(c\|\|(c=u` <div class="vstack gap-3"> ${0} </div>`),Object.keys(f).map((e=>(0,o.html)(l\|\|(l=u` <a class="btn btn-outline-primary rounded-5 hstack gap-2 align-self-center ${0}" .hr

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 274
Category:	downloaded
Size (bytes):	225
Entropy (8bit):	6.9681014979955345
Encrypted:	false
SSDEEP:	6:Xtyasw34KbL4bcvKJHFFkfrjhYHMln8Mco+HLGhaE9/n:Xyw31bLGe4+8a8w+HLGv/n
MD5:	F98F18DBE10C65ADAB892608BA174E81
SHA1:	BE93D26D63E46430C1B253A4F68FF7DF3483106A
SHA-256:	1674E01148A466B835AB7DC8B67BBDC8DD2823021C25B3C1FF4E540F99640ADF
SHA-512:	068B5BB25565CB8D531F51CCB37683214811797332B1050A12DF3A12ECC1D66D843A44E6281CAF58D46C1102E33A22A39C378E687E7304A8618D707DEDD7EDF8
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/b30e3941fb7b9339531c.svg
Preview:	..........T..n.0.._.PgQ?.%'M2t......l.P,#V#.O_.-.t"y.......=.}M.....i{L...{.r^.B.R.4...RJAH..C.....4.?O!.Y;.Hx...........^s.q...%-....w.Pqg....:.Z.....KO...q...h.X4Q5...b.F..v`.F...[l9.....wd.d............1.......

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	342
Entropy (8bit):	4.904604251236045
Encrypted:	false
SSDEEP:	6:tI9mc4slz5ttqUgJpZzKJABnMs4Ep0Ti8nKj9jI6Pw6Hp6b/wYq6WwYqiBKmT:t4TtAhJnBnMs4EGT5nKjB9Pw6H+/tNW5
MD5:	4D314E35E26914C9F7B367B5222D324A
SHA1:	90BE2854F769AA9E61FC4446DC6F04849D42AFEE
SHA-256:	B8F5638755920D9F04695268F7828E66745C272DB87839E003D1E15B771890A6
SHA-512:	A0B90B5077DD16B54987ED1A1B29D4D8767472B78E62EABC213508E9C5BCBA7A54F88E0C0CA7A700B2EA76E88789942BB0790D9381AE349914964CA515A515FE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="150" height="150" viewBox="0 0 150 150"><circle fill="#3B61FF" cx="75" cy="75" r="74.5"/><g clip-rule="evenodd" fill="none" stroke="#FFF" stroke-width="4" stroke-miterlimit="10"><circle cx="94.3" cy="58.5" r="25"/><circle cx="55.7" cy="58.5" r="25"/><circle cx="75" cy="91.5" r="25"/></g></svg>.

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 251
Category:	dropped
Size (bytes):	206
Entropy (8bit):	6.744498738417922
Encrypted:	false
SSDEEP:	3:FttyKkiuKl+qBD8z0WgcOhJ1GNgpqq7QjfH7aFCwLVNNA8GNl9XFZXtfn:XtyDMjB6ZOh7GNj+LVdGNnXbhn
MD5:	6E44C0860050E758CA541270ED5E061B
SHA1:	F1AA4F891248FE997FA8AC2955F6088628812C79
SHA-256:	E5A435514DF71B88008D326F1A244C0417E5ED3C7ABCB94D8A94F9D1B1F47F26
SHA-512:	79FCB4AEC8B78ED7BBC9513D01FC150BC46B123BAB1C6ABA4C0642439F6C831DD2EAF98237CBE4A0F2DD7C77FC12DE723FD7F5EFA96FA3D35AAAF93B6C8E2A58
Malicious:	false
Reputation:	low
Preview:	..........T.;..0......:.......V..HM.JiS.@~=....w.......Q..... v........~.H.B.....2#".H% t.7..#.Fw..3R.f...pt3;....ot.7o...tp.f....B....uYf..*!.;..V..."....gU......\].~......... .o........tZ.....

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	dropped
Size (bytes):	110028
Entropy (8bit):	5.419227901941645
Encrypted:	false
SSDEEP:	1536:8azf8VJLsbuYsWi1w/C4OGPcF2eTXiUnLVt0ex4Dvi0Is:7OCuY+rPLVt0H
MD5:	E870F82ECEC64B2CBFC39DC02C9816C7
SHA1:	F60E0697EEC1186CF5ABE6EAD7A837927183EC61
SHA-256:	078441B8767FE10F5817E9D15F7D72A0B5960E8F243FB4B87713275E8F30A530
SHA-512:	DBF37767EE845991CB487E605782F4E7E50FA7A8C828FDA286FE59E4CA04C1ACC82F4461A5E80F5E5E4D39004D2A8622D78ADB80DBC2E1AD361BADEF8BFBCCE3
Malicious:	false
Reputation:	low
Preview:	/* eslint-disable /./.@license @nocompile.Copyright (c) 2018 The Polymer Project Authors. All rights reserved..This code may only be used under the BSD style license found at http://polymer.github.io/LICENSE.txt.The complete set of authors may be found at http://polymer.github.io/AUTHORS.txt.The complete set of contributors may be found at http://polymer.github.io/CONTRIBUTORS.txt.Code distributed by Google as part of the polymer project is also.subject to an additional IP rights grant found at http://polymer.github.io/PATENTS.txt./..if(!window.customElements){.(function(){/*.. Copyright (c) 2016 The Polymer Project Authors. All rights reserved.. This code may only be used under the BSD style license found at http://polymer.github.io/LICENSE.txt. The complete set of authors may be found at http://polymer.github.io/AUTHORS.txt. The complete set of contributors may be found at http://polymer.github.io/CONTRIBUTORS.txt. Code distributed by Google as part of the polymer project is

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Reputation:	low
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (701)
Category:	dropped
Size (bytes):	558800
Entropy (8bit):	5.6661858145390775
Encrypted:	false
SSDEEP:	12288:HHe/N32Dr0RnSXaKyEtG76ZKj1wa89jzQoDjU3+VLs/k5lS64cflFT3O01d:eMapiBMKZxRflF3d
MD5:	88A5FED5C87B1D3704AB225CFBE7A130
SHA1:	D64243C18FBAA356E4ABAE8414CCC4772D64060B
SHA-256:	F8E5F5CE9FF44073CFF24BCD3D2B8AA4E67B67891B14FF929FE4743880FDF82E
SHA-512:	8B8D1C9F4C36FD2383C96D0D484A6692F70422934BCCD3DB1F0787E1B753F7D5A8F0C91934805C4D865AED3D4673FF478F0AE23746D0C0E005E60848543B3D33
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=function(){return[function(n,S,D,d,Z,l,h,R,O){return(((n^53)&19)==((n&((((R=[34,2,46],n\|72)==n&&(O=St(function(G,A,L){return L=(A=(G=function(f,H){return(f[(H=["replace","indexOf","trim"],H)[1]](d)!=-1&&(f=f.slice(f[H[1]](d))),f)[H[0]](/\s+/g,S)[H[0]](/\n/g,Z)[H[2]]()},G(Z+l)),G(Z+h)),A==L},D)),n)\|56)==n&&(h=["https","",0],D==""?O="":(d=g[R[2]](24,!0,h[1],new OI(D)),l=N[30](58,d,h[1]),Z=N[36](25,h[1],g[40](40,l,h[1]),v[21](R[1],1,S,D)),Z.D!=S\|\|(Z.A==h[0]?E[30](90,h[R[1]],443,Z):Z.A=="http"&&.E[30](96,h[R[1]],80,Z)),O=Z.toString())),11))==n&&b.call(this,S),1)&&(O=x[42](16,C[42](44,v[R[0]](23,12),S),[u[20](3

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 68x68, components 3
Category:	dropped
Size (bytes):	2046
Entropy (8bit):	7.713679819420531
Encrypted:	false
SSDEEP:	48:UDqElvCAE463I/edzP1WQpdICi+kBXZ/e18Lu8vl8jX:6XKK63vpYQLDcBCmugmL
MD5:	EC4792744302D867C351ECFAB0E4364C
SHA1:	0DE8E2F2B216EB40DCF313F249351EC0DA0DB852
SHA-256:	3CC7F730CB5EBFE5C103E410EB1DD3130334C440732E030F979E6BE04CF1A09C
SHA-512:	2853DF1A652A923AF954DBC52EB0629766D12D217EF8965AD82E1A9149A36FD05E97F7BB6A1235BDEFF50833E8FAAF7EB337B22451E9025A43EF5E1CFD982B40
Malicious:	false
Reputation:	low
Preview:	......JFIF.............Exif..II.......1...............Picasa..............................................................................................................................................D.D...........................................C........................!....1...3ASVr..."24BCt......a...#QRb.....................................=........................1Q..!Aa..2STq......."3Br........Rb.............?..N..D.%.(.DJ"Q...E;g/K...'..Y. L\|f..YV.o...n.Wf(....U.e.a.....(t.GU...~GR..Z.!......F!qE..1......oq1......\|Y.'.c.....q1.Y.rn.>,...c..=....c......\|Y.....D${.)...)gU........CXDU....%.<....o0M<...X6.0..n.}.f....Q....P8P.J...".D\.<9.f...oU....(...]....Q\.p.....mG.c..M[s.........nQ.,.u...TO..d.vm.....".......T....%n.(/...ELo).m.)!5f.9.....7.<.@pwu..N21\|\v..j...w.o...C..g' ...G.u...LK.QT..~.U..~.......T..S.B...5. ./...Da.R?..N.w}..O....>..F..#..n..)..w.<...:.......f.{)..qg)..6...1r.6.z.........j4.9..#.C.L.]J....>.cXX.....Ut...=.A..T.\...V.+..(...

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 30282
Category:	downloaded
Size (bytes):	6114
Entropy (8bit):	7.967188667746753
Encrypted:	false
SSDEEP:	96:KGJooKQOk+zE1RSU1vhkdcjCJDRWfuHtcwuY1J1v+9BITBqKb8MpH:SoK+FvhIEufuYT2yB9pH
MD5:	A3F7841D3E0477EDDC2FAEE619F04545
SHA1:	281A69C5D0011B2C5F37466AF2154F90C7F234FA
SHA-256:	F33B7AA283FA389CDA9C90F85DEF174FAD44B65C29334EB91EA8F8FAC9C5F249
SHA-512:	A2F9322C83E9658447ADD48296915538F6AB4A21E8D7D2C6F4F1C0A7F306F1DF72CAAFCC058F276D5269D6F2401583D600730939AA538427F07081228ABB0D30
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/49272.372a1ed11135b11cd4f7.js
Preview:	...........]ms.F..~...]..2..%.%d`..V...T$'w..@...Q....$......t.@L..%.ba...gfz03.p0\7..i.b..g.&_....u..\|}../o.t].WYQ&=.......z.\.>~<.z....]...l]..G.8.......$....A....2?+.\|9\|....yu68...W.....+.....t._\|.....z.iV....q..U]g.q.t.....~.&.t.....E...a.].Q......r&..m.:.."[.@;nV.".=..e.........1.k@:^T%._/....ppJ.2....]v.)...Or..R.....t..>__.e.(.W.;z9.P..Ee..=..<........:_F...\|..y............B.d@rggX...y.. ^..y{..A-FE.F]+......mT..i9.m7Gw....Pei.......T.5..d.u>->.....l...}.^...A...M..F^....)D.a]W.hxT...O...u;h....\|PV._...\|P@/d."...<.U..!...$"..2..2.7....fp.n..Ev......Q4...j......f\%.v.u.hb[...T'iu.l.....q...t$.*h9.bch..a...I.........\.V.}...{..(.....#..d.6..O.Q..7.62....."...tf4;...#cw.&r.e..&....G...SR..T[.....(.....8M...n..g.z...k.bd....,..7..z.., x$\|Zl639.by.......e.U....".."/.g..8YTu.t..^.y....&...V....%....uU....[.W\|....@i...q7......?F...`VE..x....S.....[V.u.V....p....D..Yw..4I9jG{O...F.D...z..)\u...f...K....]\.......S.........>M?.....O

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Reputation:	low
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3385
Entropy (8bit):	7.920781869920929
Encrypted:	false
SSDEEP:	96:DSuXLu3GsStZJaNARDQ+esOMMMT3ml7tkfGGkKNZmR:DSuZpVQ+9T3OY7xA
MD5:	EEEE25A5D2E4D0233808B9947AE71264
SHA1:	2D766E161B5BFB4BFE4DC1F812E170682B38D086
SHA-256:	098A90062722E7FD4FF7835AC60BC165D6E08679EE45540A7004D4AEBB815486
SHA-512:	F7266AC4304EA355A5FBCF091A069179E12BF89F4F932C81312263D49F37B8869D8A0E228DF918CC6A12598620799D755BEDA9DEBD44E7DBE665552E181B0CA2
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/graph/assets/images/relationships/dark-default-subdomains.png
Preview:	.PNG........IHDR...@...@......iq.....pHYs.................IDATx..w.........b6..Y.Deg..DibTT<D.J.DDD......(.I/....P....... ])........+.....o.ov.y[..s.y3wn._...HT2...q.r.;.;P)w..x.r7;...q.....).....q.(.^E....W.k..7N)o..xE...2.".P..[.Z...2.x..{....r.c.).R.Z.V....c.j..?Q)op1JW..C....AYY....{...w.R..T.=.............-.....w..,.Q....g..F.....1.-p..W".8.g.R...x...V.f...[......~.....\|._{.-.k.3f.a..(...,.w....x{..r......?.............../.'.xVO.4.....[A....9n......:..99.5......M~.i..F...`...?..{.e}.m}u.z...../4}......60.....zV.Y..p.....m.\|.=!.m..I.\.d....^.v.3.....{..z...Isl.......Q.bz"......s...\|..3.<Wj.m.\Wi.]..z..IsN.:.%.$^..C..8..a(.f.."..^...sr.m.R.W....>#9.>.d.>.&a.0.\.Bh..s..[.\|.O..K2..*\.LS../....o.....y.Cp.&M.b8..c.=.k.H-...y;=\|.8=o.z..z....<o.;z...Y....CO.2e...].v...k..S...u.o_..a<@QQ..6lLl..<>.l....~.^.q..o.9F......ma..^..........i>..6m.W.^...G......E.....>.x..U.ARx......u..ns{.>.z.......~..4....}WSv..........4b0.69<..R

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 29075
Category:	downloaded
Size (bytes):	8779
Entropy (8bit):	7.974310392674005
Encrypted:	false
SSDEEP:	192:wHMklToU95BlAqddPKCpRbUkt01xkVpKarKDZWGv9WZPt8Dv8xNyv5GfOg:wnJ5Bltdx5Hrt04Vwi/Glqgf5Jg
MD5:	9649362A779A0DE830138C8A4369DB54
SHA1:	E5CC775B024B7B3DA7B2C839F5621EACC41D2F9B
SHA-256:	6338280D2BFAD77F05F1771D052FE7C3A2F9DF4D1033ABA16D9C8777504679FA
SHA-512:	E62819F7BC36968F51F3BA5B5AF09357B7EAA295EAA26C119BE4F8FA0A0A943DA57257A9183BD2722CA56DB49FFCF367A96417CCAE3C1564D95392B3109427D2
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/5978.4206cee10d7d4c2afd11.js
Preview:	...........]y.....?.L....@$g8.)J.e9..J.:6.U...l.......0...>.8.(.7/o5.....@.M....Y..ws./..1]...g.Mru]\|.D.Wa.L.......n..............u3Ox.;y...3......E...r\|....z..N.i.....zi....w...OOO..........".xr..1>....3....I..f.t2.............p.z.\|<......mO...........]........;u.(.k...[.....{.d.'.x.IfE.&.syV..r/........${.~.N..$......b..f.6..&K..4.;).vI0O..Tt#w.*KWQ..L.i\|MMA..I.[.;..O.:.....bR,..K'av.Y....j.D.8j.n...yb8.p...D..S..y7.SN...$..x.\/.$.1.2Kox..'.;...'.N.D.?...XB..".,......S1J6q<.L....w.?.Y.\..w7.N..Yq...gY.......h..<..ywk....b.c..QG.....b.fa!..D.7M...!C.lF.....~..<......\.\|p....I.N..#F......aF..u..y.j2...hzt.N9..(...j.7.1.~...0...D$.....mgi.......6..;. ..;..1H..8.xb.<.w.M.D...&..H....{...y#.D.+.v.f.../.(.st~.rGkE3...Z..E..%.u{^.l.<\.go........Fn.q.._.?F...."..K..8.. ..6....;:..d...n...l.e..w..s36;:.e....(...........Y.$Qr...>..Lc.D..D..K.......g3 ....j.G..D@...Q............Y.,.l..(...e......?w.'...x.C.yX.~!.b...i./..8....H..."....s.

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 48913
Category:	downloaded
Size (bytes):	14144
Entropy (8bit):	7.985797598409672
Encrypted:	false
SSDEEP:	384:T31VdvUByVLAjwdgWfqxVCKtHna03pcExaqpIn:T3Z/VLAcgt603pcEQqpIn
MD5:	C8997C40D1DB5C6FBE530774A6DA0042
SHA1:	D68E2285F1954358C6CCB5908161622AF02F382D
SHA-256:	187BFF9A6DE8D601CD85C8A7DE2D5CA7AD05B2FE863289DDEF8BB83BC6382422
SHA-512:	89880F8C5587AD91B55B56D291C51CDADDE0B0B0EA45F4A541C996927761A4DA47D7F0FFE33AADC92207D0F17A9999637A12C0A4499567AC4A8E005C61F626D6
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/11358.785da0b97a9021932562.js
Preview:	...........}.{......W.L.....;e.qd......\|.....I.DE.,.JVh........../..su.........."/..x.7..Y4..W.p...Nf...e.n..[..rpK..o.[.j..o.v.;{...N...............5x.I.....$.7s.s.&W.,Y..h.$~.e.y.l...u....s..q.s..u\|..^:H.....n......:...,.2/..G.q.lv.48m5.#k.wa.......f+}.v.8........v...j.....H............^._...N...C...;...s.x.;.C.1~.=:<l.#.......!~<...=j.+..w....t....f.&..9.....;...A../.m...m......h.(b.M...r...R..O[.Z@.h.t.^D.<...r...u.p.q._....`.>N.....Fy0..WW...J..Q6J.U.`....8.4..7m....J&..h2G......J]0.FI..Qk9P.M...8...'.........=...:.a..j..mx.....4i.qs..g............q.:N.\|..=....._.r.M.e.W....-..z ....({.,..2z.....#x.......$7Be..G...&[.}. ...[~>...2...A.!.-.1~.J.<R%.y8.f.\|....,.Gg.&L.pp....0.G.v...z.e.P......e.N..S............)..@....~....f.b.j^~...L.{.......<I..0mx..A.{..=J.......6N...m<..^..u....I$....y.....:...0.....x.Jy0o..1..B5.mkla..+..bk6...a4.G.j.G...........4...+.L.\?.....\.KxS..(.......xX...1l..T8...<Yz1h.....3.<..zA.....`.f....cL...q4....N.. ..K5

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	140
Entropy (8bit):	5.314025470905073
Encrypted:	false
SSDEEP:	3:jm2V3VAnaWLgzKEnkcOy9iEE9xmHgzGmVscltAaU4Y18sYn:jm2VCnaD7hryxmHgCJhaE8sYn
MD5:	DD85D9B261B35DCCCCC8E00111806772
SHA1:	A517914B17518DECC36FC4EAF10D6E2C2C60C9DA
SHA-256:	CAEAEFF54DF43F4A1DD3525B12A9F33665009707769A140B8ECF5C3D0642AFA1
SHA-512:	26A38B7803F56A7E87A328208F9FF9A2B92E8E3DA483EABBF5CAFE145F1BA149936E8D01D27E0265056D7828CD011697380EA85380B2C20DF93FFCD727571649
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISMwn7EhllyoebnhIFDWtomm4SBQ1Pnif4EgUNg6hbPRIFDWp1l1cSBQ3OQUx6EgUNa-0Dig==?alt=proto
Preview:	CmUKCw1raJpuGgQIAxgBCgsNT54n+BoECAUYAQoLDYOoWz0aBAgJGAEKCw1qdZdXGgQIVhgCCiINzkFMehoECEwYAioVCApSEQoHQCEuIyQqXxABGP////8PCgsNa+0DihoECF8YAg==

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 128352, version 1.0
Category:	downloaded
Size (bytes):	128352
Entropy (8bit):	7.998349465466699
Encrypted:	true
SSDEEP:	3072:b4XkN5u3RbAR2r4lJ8FBnP7fNblbKBRvqy:fGdA8FBP7fNb5y
MD5:	53436ACA8627A49F4DEAAA44DC9E3C05
SHA1:	0BC0C675480D94EC7E8609DDA6227F88C5D08D2C
SHA-256:	8265F64786397D6B832D1CA0AAFDF149AD84E72759FFFA9F7272E91A0FB015D1
SHA-512:	6655E0426EB0C78A7CB4D4216A3AF7A6EDD50ABA8C92316608B1F79B8FC15F895CBA9314BEB7A35400228786E2A78A33E8C03322DA04E0DA94C2F109241547E8
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
Preview:	wOF2.......`......~....................................D.`..........,..t..X..6.$..p. ..z. [.\.M.B.....-..VT .&"..Qc.=.U..XwD...7Q.v.a..; (...I........+.I..%...._.v.:..N.Y....;J.V...+..S..9Z...X.J........_0)c`[vb?.".P.E..Q......."p.v..........3.Zm`k":8..Kk........UR%U2...<....'a.L.4.&....P.X...,z5.j<++....ff..X1I.......%.Z<.UT.G.)L........;.A....O~ev...-z....^.\|.....pE..@.t.7...4..>...}.U[y...O8....\|m.L04....t...g...../...&.E...."...q.1.(..g.&?;...Vx..\|.-p=......;...a..Q\|L8..}..$.I.2.tI8...O..Q...k+;..N.hf.M...t..(..\...O.......:n.... v..}H...\|B<..'..r...1..B, .....6.&...6.x.i.=...r......Os.._...g.{W$VD..A1........B[.<un...t......k..n0........ ..O&.....%.@..c..Tv...pT.Np...U...%j+ZP....@.....b..........~...f..D..... ...O$....\|......$W842...S.....2.pIL.....Z.[.xo.r.{.d)I.P.-)0..K.`.~,.8..[...m..3d....A..v.s.d..KW..j.4.Ic.m..,.P........../W.j...>B..BJ.........[?.....$."...-...K.P.R..K.....Dz(..7_...=.....b.C...2..4F.+....P...f.#.q.G.G8.

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 58004
Category:	dropped
Size (bytes):	15134
Entropy (8bit):	7.984256581631135
Encrypted:	false
SSDEEP:	384:keSWlIFfScW7e7dKyzJVgmTElihTRgrb08A/Xane+gsP:NlIpbWM/TEUTRgf0Z/qneUP
MD5:	6F76AEEC5FAD589B2B81E8BCD340B6E5
SHA1:	165D110FE92768CDCEDB7E217F0F3B49D8C1CC11
SHA-256:	3594950139E65AA66876788E9B47185275D5A7FCCBF295BD32E50A8552B6D081
SHA-512:	8FCF8A43CF237C269C47935E563FA1FA85F73701FF09561812F99066649DF7A7F452E14241C721007D33BA7F373903184755511588C917A15CEEA82F51A2D462
Malicious:	false
Reputation:	low
Preview:	...........}kw.F.....0.8...$u'M+..9.y.I....he..%....@]B..S.n4@R...{f.(....TwWWW...y.yY....g.d.\F.Y8...l>.\|.....0..o...9:n..yvV?:.j..t....n..?..o.{..c....V.....6....a.%.......n.1~l..n.4..?.:.;..$.....~......?.O.y.L...4.V.~az:?..y.L..i~.c.....t>.....0..<.-...i..\|9.%MfQ._...a...$....I/..k.7.....,J..h<A..kf.+u.(.&i.G.i_..";.^4........#.n.....[...l..~t..7.?.O.uZE\.6..s..s.....h..L..4....C.....u..h.O#.J..O...Q.8.....h:.$x..'.ap..a..=...r=..zc!c..[~..Y8.^...g....2..(....,..4..r...\|.Oon...'.Y.qe......=..M......O.....-.F...F.0.>h.X.{.:M/.f.....6...D>=]6........5._.H..j....>.gyr..h.k.ys.7g.E...Fc......=..h....h^..h.f.L.u.z.l..s.3..w.:[. ..<L.wYF..vg{oo#.....<...^.E..?$W..G...;.nmo...a.....4....z.....K...<{.z...7'[.3....v[N.^...4z..y\|..my...5.8./.4....EYC.<Z.......H.r.C..[..qt.F.G....>.$...#.)....G...&:.}....vL\..<..>..f\|p...1...?.?j....f...i?...dBs..8Y~.\|..C...z.x..<YI.@.K..z..~=.g.$..Q2.....b.."....*......si...0....0-..~...1..N....+.d..`@..?.._g9.YN..-

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1212)
Category:	dropped
Size (bytes):	359366
Entropy (8bit):	5.549209156154755
Encrypted:	false
SSDEEP:	6144:vUI+ZDozC5CzD4bU2bUZT8zu1NOu3VKDInZRRu/tGghyXV8AXvPh+zaohh:hZzJ2tGcyXV8OvCf7
MD5:	6986FB735FDCE62D18DAF8BA05E17B6D
SHA1:	6EB769D93846C4FA0FEEF2F3D7726C5D63797398
SHA-256:	89237639FFFDFBB3F05FE2FEF2F70F484F583CD97279882A18DCA1C95A6A501A
SHA-512:	A42E682FCFB34AB54229B81BCD1611B467A588EC5349938B1EF881D1DC6307DD98F755E99A1EE1E264BC0D556578E156FAC1697C87946CF0736E813B0D6D0DFD
Malicious:	false
Reputation:	low
Preview:	/*.Copyright 2024 Google LLC.This Software is made available under Section 3 of the General Service Terms of the Google Cloud Platform Service Specific Terms at https://cloud.google.com/terms/service-terms, except that Customer may additionally embed and/or distribute this Software to Customer End Users in connection with Customer Applications integrating with the Dialogflow Service../'use strict';var DF_M;function DF_Maa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var DF_Mba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function DF_Mca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var DF_Ma=DF_Mca(this);.function DF_Mb(a,b){if(b)a:{var c

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 6469677
Category:	dropped
Size (bytes):	1687730
Entropy (8bit):	7.999488772619453
Encrypted:	true
SSDEEP:	49152:eENfFTzESLLF11hR0j7L47JqMhACGh/Z07:eSRzTXxhRk7LsEMhACGNG7
MD5:	5BA994075CAC287CB8DC9EB6C95A3552
SHA1:	3369BE2A797C410B9631B78E0D64806CE7CAF774
SHA-256:	4E379F53AC0011B92F2ECEF5F063C779F327A9D5D22C3592AC16FA0FEC586694
SHA-512:	950B97351009FADE974824AF834691534BD688A7265ED480ACE4CAD8273865E7091DD14A7A97D4D23BC51B0B5E555B3D5FABC2C947880B4C5DAC0FCC311B5538
Malicious:	false
Reputation:	low
Preview:	...........m[...6.}...;....c.w.....0........2..O.....,.?w..$....s....]..K.[%u....?}m.3..........=.F....\..nTrQ..}b...Qf..;WIv.z.J:q/.#..S?J..^F.(.......c.3..-z...~...O...v... ........M2.bi-.!.o.Qf......oX.a...3.m..!..#!A.S..P..b&G.Y...7I.c<...3.8.Pq... s.A2..Ut.d:..U\|w..zWQ.['..tDJ.d..2.....".?f.k.1.J$..m..W...}.Vhqv.q.f.k.3X....6...D9....~......L..Y.j]"...L..n........I:.. 3...o.>Wg.C.u9L..jLJ.A.}..Y......f6.Uk.5..........q..d...4.3......!.v3...3..............T.d.Cu.....U.m..5..}p.]u.;W(Z.f..27...C.2.Q..3.6. .m.R.s.IZ.........]W..I......n.FU.[.R.\wzQ;.&L..#4a...2...Eg..I.~+......Y...G....$.M.7.{A.t.V0...n.....7...HC....a.p..vi .z.C...0D....3.Jr......0...K.E?EU.6..a..v..>...^.........m.W.....\|0(t..Mr.aI..../W....&.U..0zA..'....\JT09...2m^r.@r.\.t4[1(F;...ct..............2..[..._..Q..^...1....C.]...+...b"........No..H-....C.c..g..B....#.H.eb..A.n8H2......XC..(...l.%....fL....r.....dQ..D..:\.M..^.I.dVm..F.n=X(.7M=eM.BX.

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.176569032865066
Encrypted:	false
SSDEEP:	6:tI9mc4slz5ttqUgJpZzKJABnMs4Epij9jI6Pw6Hpz7I2p8XVLIo/O:t4TtAhJnBnMs4EEjB9Pw6HJjiXVnO
MD5:	62B6F11C1D78DDFEF1EC723C74917CEF
SHA1:	442B185982B91FC27A9EB3BB74A267123AD09E82
SHA-256:	DF7EA0D93878226A698D9329F09006E477C21C585E2BF31BA41766FEA3CBF64C
SHA-512:	F42EEA39CBFF80E8C5EA440F68752667830E959612F17508CF0FA641DE101C38A322AD214EB4063FD33FD344A82026A5776F075F522FC7CB1DDBF489E8FD762C
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="150" height="150" viewBox="0 0 150 150"><circle fill="#3B61FF" cx="75" cy="75" r="74.5"/><path fill="none" stroke="#FFF" stroke-width="4" stroke-miterlimit="10" d="M42.7 49.1h16.9v58.6H42.7zM72 68.5h16.9v39.2H72zm25.3 14.9h16.9v24.4H97.3z"/></svg>.

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	257
Entropy (8bit):	5.119437048917037
Encrypted:	false
SSDEEP:	6:xBB0HCc4slsk9ZedmvW04x3TBmj93xwRSIpW6y:xBBBk9ZedGWNG93xwRSIphy
MD5:	9ADFCEDB814D9BE447D56414122CB4FC
SHA1:	CD8EB9E270368FB3C791F62AD7498406AB98A06B
SHA-256:	67AFF99A6C924652D37AA0F1150931D138CF6D135BF31DC4D3307EF0F46066F3
SHA-512:	58AE3A2825861BBACFF887C3F70168515791C8B7B6E2E99526CF2CC6DAA8FC7BE710BCBEDA327AE3BE62659AC0CA71D1A09E3C3C7B13DAE4EC8689479F8B3466
Malicious:	false
Reputation:	low
Preview:	module.exports = "<svg xmlns=\"http://www.w3.org/2000/svg\" width=\"1920\" height=\"79.1\" viewBox=\"0 0 1920 79.1\"><path fill=\"none\" d=\"M-1.1-566.9h1920V80H-1.1z\"/><path fill=\"#fdfdfd\" d=\"M2118.3 1142l-2278.1 150L-197.6-2l2309.9 88.7z\"/></svg>\n";

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 21631
Category:	dropped
Size (bytes):	8178
Entropy (8bit):	7.9746321228938095
Encrypted:	false
SSDEEP:	192:HrZJTzO4NfGoUHGVM9KK4xqIYsECiJzQ7WCFvw99rSQ:H1JvOKTUmVMKTAIQCKrp
MD5:	58EDF1EEA65EDDD82F56C4614FD58AF8
SHA1:	519B80D7811346B105E06CA093AAFCE17B4C7A9E
SHA-256:	BE4B6CB44E9C0E9986F6AD849691939A57EE98DECBDB9148491E9C52782FADD0
SHA-512:	ABE6F169ECCE62AF804FC245F6AEFC1771F8239F17F5C62295D7299ADAE2B10DB752A60BB1F2AD0C8B1120CF674DD728136D916DB2D0D7A81D1448BBA1156DD7
Malicious:	false
Reputation:	low
Preview:	...........\is.F......&... ..e.Qfv\.$.v&[.......$X..#4..>o.@...d+V".}......V...6.....nsw.~....y..~....w.Mg.kV.w....C+.".}o...d.Z.....h.0.i.b...q.f.yu..F>..a...i5...q..V..i.i...W5.rZ;.qaZ3.ea....m3.ZP..{.i....?0.[\|....B[..gibZ;\|.#?.LkE.Q.......s=...z...f@......,.M.d..............'...W...[.k....`....-G...r...E....rsO.7@4.owk.i..d..v.....+6...r:......_.unY...._u.eu...k.u.m.zLD..W.r<....t.>mY.4.e....#..I..`..[f.S9.k..b%8..f.x9m%..wU...W.m..f.+....b:&,.pkR........`..?..U..].1..qQ\\H,.lYl..R...'...y.7...[.Y4...f?.6...(a...3v..#.i...q.6o....h..].m...{Q..n..y.g..E..j8.bn....'.b....rg.i.%.~....;_..\|....,.w.V..]q..z*.9f..\|W....... .}U,...f....s.]....^q.V...}-Di$zF`.....E.<...u...ur....O..+....\|.z.6.D>!.S,.Zg[.{P....we;..0.%..:G.3.;..&.4@...r..f...{..-.89g...rt0.s..>....+..zz4\gz..c.....\|..b.Is.y.F`..j~..c......<.:l.c..Sl...^. A....G84~.r~J..a.....w].G.fy{..k.....Q...R`..s.aV......:...B.n.{..l.W.Y.y......x..3...+N8..[....x..b.)...S...n.@....RV.(..t:

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Reputation:	low
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 98170
Category:	downloaded
Size (bytes):	34325
Entropy (8bit):	7.993229831721479
Encrypted:	true
SSDEEP:	768:PdDmcvAB8wtB3JkPCaqKHm9+nOJS9jwloCRSGiST:PdKcKPkPCsn190FRSJ+
MD5:	F20D8515FEED73A8B92424C2B9C67A6C
SHA1:	01642C9B975538B3B219D95ADDE840C09A40E7D9
SHA-256:	FC6BFC6DE25F96E31C0FA01B6C746EF9035900E6A0A1BBDE6477617310D41A19
SHA-512:	5334172621BB287B692617365A83D5135C6FB258DBA24581DCE0DFBAD7A237830635981B5AA8409DDAC4D1284A09E8C22C022D371A7F7BC0572C7F6F04B92FA5
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/87347.c002f57d03220f54c084.js
Preview:	............z.F..{+4..4A...2%.....8.....h4..I.)@.AK.....{...}).J.[..4$.Q.f.^.<.E......U.U....,i..".....,...........y..}.7O.N.i.....;....\|v....x...h7...a...(i....lR.y.(.Y..H.y.5..t.....".}=.zXne..`Xng#..g....W......Ji#..i#...m.}9M...F..o{L.y....h~.d.7M...x{....yz.....;.#_..a?......+a..ai.o...t+o_.+..Z.`.-....r.g3...N...=.LZ.N.K...(...`.....q:M..+[9u...7jeq.%q........=...A7i.)X.q\\|. ?...WR.lG`......HK..../.vr.1w...o.....<......A{...N.<.$v..`.....\.x4,.."=:.....N%.o..U5..-?e.WI.....qr6l1...G.G.z....^..%.W....~.W.E?>[.Y4>~.W..S..F..^.i...{......z.\|...b..a..~..>}..}.D.......$.NV...it..^...oOM.....4..E.?1..y...Z..y.}...gy..Q...<:N..r..O......'.'..h..D.....R/?...9..l~.D<..V...d.M.....x.....1a.....9..~\4..i....l..I.g..a.%..{qyq..W.'.....r.\.R...]..N.?...7w...K..=)..E/../...V.W..S.0L..M.).Q..b>Y:.u..).I\|y.+.WZ.7.O.....$imD..l~..6A@.m..eO.@1......P{...'p....V...*1uG...E~...'...K.o....^.........+.m..N.'..A.p..W&....G.7C#...h..d...

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 17630
Category:	downloaded
Size (bytes):	5811
Entropy (8bit):	7.967036072983005
Encrypted:	false
SSDEEP:	96:Ppu3Bgb7OjYnEJ+IKIqgag/6VclnnS/Iw3WjKcUAgc07cHt1wWFG3UhHEEUeFkBV:huxsiuEJ3zdD6VUS/v3WeAgOCsFEViUV
MD5:	618E767D6D994BB6BB005B72DAA09FCA
SHA1:	5576FDF89C0EFE5EB07697681D14F60D9A2CA06E
SHA-256:	FA76BFAB54228ED6EA9F09664B58954193A217D5AC8BF5F796901CE339D4753F
SHA-512:	36EF9241EC95D315653E4F1AC8DBF1169083329DB3610A145FC2DDCABEFFD278D51CED1C84D82D46F55D381CA7FD8B6B9D02152E931C91108FF43D6904D32250
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/27197.598dbd3bfe6cc1efe979.js
Preview:	...........\..6...OA+...!..R.(.I.I..L23'.......J.S..I..Q...w.n.d.. )u;.=g..F...B.n.2:......j\.<..,..7.C....!......._.}.....z;~.nz7Y.wN.g0...a.........z.+.Y......k;5.N....D......SP.\|6..N.......v;..Nl'...?.j...y:.........g..;{g.l...[...%...I....,.sNc........cES{9+6...D.f_VAq...z.\|.......a._...r....V.U.o.jL...U..G%G.......Ks.}.r.X.....e.6....]7i~W,.......d....k....=.......X.i......5}...~._l.._.{U..P.../_./_.Y&,...f).9.y.B.`\...).l.....#..~`)~....<~......t..r\.yX...."..............S}.P......f..^..a..d.b". ."+6.d..%]?....y.=Hkt,mF.U....y.Q\.(.<...D..F...X^ ..Y.4E..XU.).E.......Vt#......8..E.)...<..T.{.1g5d!.e......y.........@O..hl..k..9....{....../.UA..CUAR?C....k......b....Ay..)z..9b.+...y........F..Vt.-f.2.Dq.l/..x;.c7sv.y...3....\Z..U........Q[.....7.jJ.Sm...!..uS6a...n.c.5$.y.....3..U...LF.}.R......4y...Wc......vFo...$.....U..[t.bc.....r$9..O...A.gPMX%...H+c......8....X..}XX\|;.G[.O...{wj%0LIy,.a..UaV.Qth....U.g..._O.yd.

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1746), with no line terminators
Category:	dropped
Size (bytes):	1746
Entropy (8bit):	5.877974442451391
Encrypted:	false
SSDEEP:	48:VKEzixKo75XI2ovtUjPKtXsDXx/gZO1/2LrwUnG:f2gMI5czgk/msuG
MD5:	701CA9A170177F52147D6FC08CA104E5
SHA1:	2DA8BEBDEB658E20A1C433E9138D1D5320BF61DA
SHA-256:	8A559B8056902E22005BF7BEF1C9E80D98CA65C63975E399ADF711BAE96FC808
SHA-512:	084BB15119C8026A784759E25324D44827009A3426D2E060C2A07AFD607C26E1FBA15CAA7952592BAA890BE9B94255D71431A7CB0DE43A5274281052508B00B4
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://recaptcha.net/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepe

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	342
Entropy (8bit):	4.904604251236045
Encrypted:	false
SSDEEP:	6:tI9mc4slz5ttqUgJpZzKJABnMs4Ep0Ti8nKj9jI6Pw6Hp6b/wYq6WwYqiBKmT:t4TtAhJnBnMs4EGT5nKjB9Pw6H+/tNW5
MD5:	4D314E35E26914C9F7B367B5222D324A
SHA1:	90BE2854F769AA9E61FC4446DC6F04849D42AFEE
SHA-256:	B8F5638755920D9F04695268F7828E66745C272DB87839E003D1E15B771890A6
SHA-512:	A0B90B5077DD16B54987ED1A1B29D4D8767472B78E62EABC213508E9C5BCBA7A54F88E0C0CA7A700B2EA76E88789942BB0790D9381AE349914964CA515A515FE
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/images/overviews/ico_graph_4.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="150" height="150" viewBox="0 0 150 150"><circle fill="#3B61FF" cx="75" cy="75" r="74.5"/><g clip-rule="evenodd" fill="none" stroke="#FFF" stroke-width="4" stroke-miterlimit="10"><circle cx="94.3" cy="58.5" r="25"/><circle cx="55.7" cy="58.5" r="25"/><circle cx="75" cy="91.5" r="25"/></g></svg>.

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1609
Entropy (8bit):	5.268171846580519
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehk2:3q3+pUAew85zvc/hk2
MD5:	20D444971B8254AC39C8145D99D6CA4C
SHA1:	72E41F2A340F4A6E3A748CB57D293631390B733A
SHA-256:	A04F41837D317573EA61EA29ABBA7C4FF4E38C9177DA68F4706B9C13921A8D82
SHA-512:	BEA16497D014481EE10EB80A129846B7B184AB1ECA242FA38B84255C6461C748A62F1BD6C15D1807F8B5E926E550C30AB47F8A40AE43BE229E6AB857C4EA6F6F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8764
Entropy (8bit):	7.944825415489751
Encrypted:	false
SSDEEP:	192:8MWksO8NCl+7A2ZIWbvlXw/e0e/iq0ERi/pKFVG+tfGBZzLdnmmv:PWksTNtA2hbdkw8/pKFU+t+BR5nmmv
MD5:	D834C97492CF87524B1FFA201AE05BBB
SHA1:	0915C22AC8353C9423DCFCC61E7071D49F4C0C08
SHA-256:	1614E807C8DF7665D0BDF4BF47099C45A94FC27EC69B9DE53C081B7A92929D65
SHA-512:	95CE816D69CCEC15AC381B23D8DDB0891A2DC9F6943DC66CA75038733A26932706DD8206A00CEBCA8CB8B2956124B146A2F8DF44918A5DF584E1B623B85075BA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............R.l...".IDATx..]...u.......w....H..c.........U.I.M.r.....!+!..)....!.lH.....m.`c...`./iW....}........>..w.j{..n..s...<~..mmmmA[\|...6.1i.A.........%;..n3....=G...4.W..G=.......&...@..2..3..f.o...@....].V..L...@.....M.4.... .....(.4M.ZY.........6K~.x'.F.U.K....NWylm..c...6S........U.Kmp...W.&t.f;..f&...........j..".....r..32.8e!.b.BFR..mE....0......o.3.T.1&.D..._..c...`..f.....e...i;..Q........!ds.w.:u.i......?Fvl.......~.9&.....9.;.D.`..f.h..?..fM.......0[.?T....^......~......c. ..LU...i....k..........Z.c.}.7.)....X./Cv...nm..&.6.#]a{..3I9.........fvCF...... ....+@~....@0............L.%.N...w...5Q.$.j:b.C.4E.gO.w.0st#hO<..].y.;.dD.).f.t=*7K...iC.....a...XJ......}..da...c..&.D.(r..CgW....oY.<.[....;Xh..23.v.)..C. ...5..v.....h.....8......V.ovW/...g...Q w..$....._..cl.S...Fr..M....@.....I.m.T.\|....fa.b..T.Gg$.tf....=..)..<@....U.$.3.oT...\|...}.L.@e..P'..qc...I.7.....U....l...C./....\|....7.GB

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1838), with no line terminators
Category:	dropped
Size (bytes):	1838
Entropy (8bit):	5.854832783067556
Encrypted:	false
SSDEEP:	48:iEAhSKo75XI2ovtUjPKtXsDXx/gZO1/2LrwUnG:pAxMI5czgk/msuG
MD5:	A3B2F935CEDF98CF2849A74EB50477AF
SHA1:	699479DF6435336BE4AA1D41378148A922CFD8F2
SHA-256:	3609B3C4EC2F9E0E1B6A33987818B09BAB19817A0B978068E10A909F74AA24F2
SHA-512:	301380C10598EE09D07B6C3259A21F73D72DEA17007FD3849FEE77DAE1FA09B8FD02A9FD95E949FFF4FC5329C9F2BB77ED7FD6DFCA1B5BB37474B6ED4DBB7250
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.recaptcha.net/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().t

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	3.8544747011787726
Encrypted:	false
SSDEEP:	3:YAf8b+gHe2CY:YAf8Cl3Y
MD5:	85C3A1A45348AB4D6DC698986DCC48CC
SHA1:	F8FC8C8EE0DD4DFF3C34336F2556EB4C7430CFE6
SHA-256:	BFA05BB71F7CE2DCBC20EC67EE7279996CDE1B5F48DB691A502CFB395E2FFF52
SHA-512:	BA2B466665C7AC7359DE902936618091047DAB82B32894220BE72DA01A2724CF432E0E97B5299EE2E526B9914E1F69EDF5425AFD89CF0504EDD579BEABADF8E6
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/domains/ghabovethec.info/reports
Preview:	{"error": {"code": "ForbiddenError", "message": ""}}

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlxnlqomOC7AxIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Reputation:	low
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2694 x 2670, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	756034
Entropy (8bit):	7.9570581423803475
Encrypted:	false
SSDEEP:	12288:x/+up5Zgyonra011vGZemcVgxMuPEaAbH3tr9zlgbJc7nXDhE/72FAuTAnJNv:v5yyO9GZgqyYEaAjzqbmh6u4
MD5:	38CDD5BDB99F3EC4F74843567F5FB92C
SHA1:	D44F128BF71BBE269777031961025820FBE40EBB
SHA-256:	BD585FFB426BAB53D1408838843D8CEBFA19A566BE2AF34EC3F3680684CAEF0A
SHA-512:	E72BFDFEE93D31DB5BC441B07E9B2D6C4D25BEE4E078D2BE251ABA0386564E4EDE64148A6DEEDD11E90090EE750C471F9E10323DD90C9201F3F699A802AA1DA9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......n.....+.......IDATx....x..?..E.Z.z.m.w...)6.i1..'\ ....!..\...F..BK....i666`.eKV......;3..v..P..%...<<f4..;.3....f.aEQd...............`..P..................!y..................<................@H...............`B $...............0!....................................L..................&.B..................!y..................<................@H...............`B $...............0!....................................L..................&.B..................!y..................<................@H...............`B $...............0!... ~.......*..............`..................&.B..................!y..................<................@H...............`B $...............0!....................................L..................&.B..................!y..................<................@H...............`B $...............0!...................rT..(B.PMMMEEE{{..fcY6333'''777//O.R...............`$.._.ZZZ.N.j6.....\|.+#%..B4......a......GI..+.\|.._......4.P(...z.

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 104044
Category:	dropped
Size (bytes):	25908
Entropy (8bit):	7.991342298985362
Encrypted:	true
SSDEEP:	768:vE3jOS2orPtscvhr8WD+gq9HUxuwHOW0lOS1:cCorPtZR88+HoxOW/U
MD5:	37B325F195230223A60EA1855AC727F9
SHA1:	3F88F93408C37BDD2DB726B3A5D798C63739F2FD
SHA-256:	83BB7B9276AE38D2B92B5A3C23480763E9ECEFC78F2526BD6C7DFE7D3CB2EBED
SHA-512:	F74059AA39E6E8B2B8F751FA78D462645BEF7ED42DD897DD98C3A0D9722EFC92E428B696E1A71C8550B29FA96B0AAF24683D4C1587F12353DB1940AB2B20743B
Malicious:	false
Reputation:	low
Preview:	............c../...+.%.HIKH..G.. .s!.`.o..iIm./..e......Yj.E..d..:$.....Sg..2..4[$.vXO..I.".....g......2y7..i.....m........n.}..lw..........^{k.W..8L...WIkT..g.:~{.j..G.`.O.....F8.O..{..F.......N#..cw...k.S..........q....m.#.x.{...C.qgw....:.....j...m4..q...p.....<<./..C.>.....f<.'.q.d9.f.l....+........I<...8..fg.`...Q....~..8Z....#.f..8..b..b6....8...y6[..I..8LN..W.....<.../.1.._3S(}k...l.eq#.ku[d.{....'..&>.g:.f.p...>.6........m._..uZ..5z.C..s.....h\|..5..q.\L.\|..?.._W9.O.ilV...hux...5..Vv...,...Z....\|...i.f....O>~.?._.t......p..i.....(.....2N.i.../.....i=O......Z.j....4q.....Q?..g......%..w.yE..p6..Y0.4...,M....x.e.....`.M..h..t6.."`.....8......-.f.it..&.K...t..'i.F__.W.w..c........P..}\|..4Z'.8..@e...l..f=.ggI.:O.d0....l.`e...rp.......d.............$....@'.....n.x.l&Yl.5_.)@...@"..8...2.ns..,.'...Z0...9H....T.Z..2.'.......D.$j.Pa........Y6.:XF..q......-....Q....1... .p.....c..?..^..-.. .+..@.#j.. \|.....B....w..z =.HO.RZ"f.-...}.7.o.7...

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56848)
Category:	dropped
Size (bytes):	56905
Entropy (8bit):	5.448984999759692
Encrypted:	false
SSDEEP:	768:W2jZ/ObueXiCu626c602DcLluDpO3LH+2ZeTWaC0F+xyvrnCYjo/wAht2rVlPinr:WS2De89O3Le2Z8x+anAptNngPtNngU7y
MD5:	B12C80C10A4A0B1EDB50281FCB2162C6
SHA1:	F5EABCCDE16760E15B49881E17556B7C1299B662
SHA-256:	C7AE1BD912819B25E841D3CB44E9050D4EC009649C9D8EC066A775474C7A534D
SHA-512:	8F1C0311330DD16E5C2CB04F5F861C56291A6C6EF2EB8670111AFCDE09F2B2F615E6BAAD4D65A19CBA6D605440B84FEAD89945CEFCFE1CB3A1B42BFF69E7FBE6
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[18625,37221,85043,67173],{54293:(t,e,i)=>{"use strict";i.d(e,{r:()=>St});i(9891);var o=i(48704),l=i(16645),s=(i(16264),i(71012)),r=i(31088),a=i(62832),n=i(21903),d=i(51560),c=i.n(d),b=i(15323),u=i(45241),h=i(95688),p=i(20354),v=i(22894),g=i(56870),m=i(36468),y=i(85200),f=i(70051),w=i(92619),x=i(96855),k=i(96987),$=(i(37221),i(57560),i(21668),i(71775),i(74156),i(77554),i(69763));let C,_,A,R,T,S,F,I,P,L,O,B,D,M,j,E,N,z,K,V,U,Z,H,W,G,q,Y,Q,J,X,tt,et,it,ot=t=>t;var lt=function(t,e,i,o){var l,s=arguments.length,r=s<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,i):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)r=Reflect.decorate(t,e,i,o);else for(var a=t.length-1;a>=0;a--)(l=t[a])&&(r=(s<3?l(r):s>3?l(e,i,r):l(e,i))\|\|r);return s>3&&r&&Object.defineProperty(e,i,r),r};let st=(C=class extends o.LitElement{get collectionTypeToString(){var t,e;return null!==(t=u.KK.formatHyphenatedString(null===(e=this.coll

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 14954
Category:	downloaded
Size (bytes):	5834
Entropy (8bit):	7.962611733811477
Encrypted:	false
SSDEEP:	96:KAyEsUlhvqg4PgEJA34tgTsGzbUMvvlDq270AKyC1dvDcJJ5MVv5GgWJOpetCyC3:KLElhyPg0b9GfUEtDqQ0AKFdvDce5GgR
MD5:	D9706908D141B51812236CD6B7397A5B
SHA1:	96F09F52A0C264900B0BAC0A530DA81C6078000A
SHA-256:	DF03D0A57A85240934B017789F774734A6D45C9DAF450B6A0E249D56E79AD92F
SHA-512:	FD26BDDB45C568FA2DCA5D71A06328221D0A79B06BE689F73074B50B1BF07DD173C8A4E682DEAC4DC563D81EE55A52F9F9E95C2C28B4EBBBA3FA8A24CB405A4F
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/34894.ada184a092746870eefc.js
Preview:	...........[[w.Hr~....-..@......xdMV.....l"+4H4IX ........W...HJ.w3.C...Fw....U.g..Y..i.8.....O....x._...,.M.4...........j.\^n....x...._{[.;[..^wg.....\y.....#=..nt8.....O.._..=.dqUY.%...:.U....\..E.Tg.Y..t..lJ...".K1-J...>.......!.4..8...P......D...x.b2-..y....o{.....X.......,.....).P.....&..2......P.?.3)n......#.O.;.t4......c....=iA....^.$w_..^.9..........v\...W.vv]...[....xCg...=lo.z.@8..z.5.d8..z.<...{.z.=.K8<..;..-...u....6.~...z7xd.q.2!..7.F....[...c...dt(......:'ar..2..2.G:t.e\|.....5Wo...xxhv....<.gY.E....Y..a.C.^D.~..u~?.....TOAE.C&........}u....(W.K..R/.W/..2...E.@...-.E...8... ..x.(...^...A...}......@...A.....N.9e. 9.$E....R.Z.7q6.dWA&.......{...r0&.....D.@<..k._.pMQ.0.h.....2&,c.......r\..V.X........`..F.,T>.q/.....o\|.5/..@...01..t .=....s........5...h... .'`..!....\H~<R.5,......h6.......t......K<.=t_=lo.x<...T$...r3..Y..#EMxS...Yg.;W...u.F..%..>.q.8.K)&Si..J.....V^.>.$l....8...K~.[E.......[<>...X.K\eM`..q\|#

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 122973
Category:	downloaded
Size (bytes):	37480
Entropy (8bit):	7.99275792911385
Encrypted:	true
SSDEEP:	768:9O3Hf8fYNaYnV9/anj1IdPhlXaxYc/B5GNiNxh4lFIPHNymufDyP8qzdoEEguex:9O3fRaYvokA1sNiNn8I4m0idoEEgl
MD5:	AA8241291AD8DF3C8875C8B168367748
SHA1:	F73F4DBE233DFC59917B06CFDF3CBA0E7934C3CB
SHA-256:	3752BFFB64F453BEAA69CC452D2DAEFDC3CCCCD5A2F9AA796B1121755246E0EF
SHA-512:	9F4775B5B12259BBC4614869290C0F28265BFB00C9B17D92D650DA1AA3E5013E9C2F7AEAA7BD31AE675BCBFB2224755D882F1BD186099039B470C91E13D50FB4
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/service-worker.js
Preview:	............{....U.\|...q..}.M..<.%y$y...j.8.$.b....i6..."...G3....?...".. ....?..9...~x}.^...j......9.N....q...^.Y...M......e}n.jf..fy...$.\|.?....^M.n.rU.O........o./.sa...]h.^v.r........ra.....{.O....Y>\|m...^.W.}n.<8].O.2g.{.}3].^.<o..Zf.`>Y.].z.....o.w..u.5......haV.......~.Z...7O...NX.......t.n..t~...fb.e>a.......).G".03...y.....i~Z....f.Zz33?[.O..s.......?.^....h............e..\|...e..8..p....>..~u......_\.......u..3r....y=+...F.ve......_\./...Q.x.....,&...u......t.~n..f....{..9.P^.O_.a.},o?......;_.....-...D...9...../.........p.....'lI........\......,.f._.....5~n...rU.P..S....[.b.7f!..~.._....Q.lW..?....eaN.?.y=[7f9..z4L....>X...3....\-'...X..e.a&......3....NO..._}...H..s3..A71SVz....nZ.].....m_v.N.i}..^.....aO....7K.....jR...q._tK../..k.G.....=...`...l.y.....V......t..[.}.L...2...%...f..W..=..w...^.O....f:N.dwd<s#8..Ex...L6W..W*.Oyy9...h..X..nR.i_N...x8e&...w..:_.o..&;.9...`.K..a........nn&......z.#%v..-.Su.`..kVb.

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 257
Category:	downloaded
Size (bytes):	216
Entropy (8bit):	6.863667625015232
Encrypted:	false
SSDEEP:	6:Xtymj3D3/gggg+0j0b58u4m3V5jZcFhSb2Ai34:XV3DIMAd/4m3zjch934
MD5:	4ED30C69AC3767822DE5B13E39F4CD14
SHA1:	E6CA470FE9461456DB011854012B4A6F89B76A3F
SHA-256:	5A58F56B3EABB6602F886AC9DB5FA620673182584B4FB94D99833B7C7AEC9003
SHA-512:	F33FE1FF2199163ED4EFF76275CF4D2463D973A0A2D79E78AFF8C704D3B879B80C8D8861113C0904BEABD07D80A8436C92973315EF807DF048AEE3F586E58C4F
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/ca87c5776539e7809d73.svg
Preview:	..........T..n.0.D..PgQ...R.d..];y)`.2.XF.FF.........;....'z..ny.#..z.a..y=."...`i0.Fe...^@...."g4..1d.Cb}.\|9........tX.s...#.s.=.......m...Y.^.G/....e...3D.. z5Q..Y$.....:l......X...X}....................

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 314
Category:	downloaded
Size (bytes):	250
Entropy (8bit):	6.978954722591275
Encrypted:	false
SSDEEP:	6:XtsGKGrj27rf0tWele0HnUG5zUiD6Yi4kIYQtQWNwlSr:XM2jCAI0HUiLD6SOcQWNz
MD5:	B6A9D8D081CC891B1E5AE6E9FFC5F4DA
SHA1:	F88CDF1A4E0BA2C7D2D3B544FE2C96AE1B5A28AD
SHA-256:	0385D1AA058BE36022BDDA4EE04046EFD0043C5487EB23773B04B6C4CE85F51F
SHA-512:	A8732DC9E04594740746BB9DC2CDDB292C0A2506E2C0990682C2361689E2D5A89EE17DA1BAAD9F95D865836FE785854017F42428DEE7F598B807C9B1E21E0EBD
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/44288.d69fcc0ea934ea412b4a.js
Preview:	..........\|.AO.@.........f[*QZ...^4z!.y]^.-..vQC.."=....\|.L..v...L..Q...QWO;o...Y.....\|...j.;..8.%I!.Q..$I..c....U.$....g..^.........^.-6....$J"!.....E....`@_.l..Si.....C!..B.k....B.7..m.'.hz..6v.........o.....b.8..cT{VG..........F.I:...

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (17354)
Category:	downloaded
Size (bytes):	17409
Entropy (8bit):	5.52130738970273
Encrypted:	false
SSDEEP:	384:AmomGIXtE5bvEe4C0Aft2rVlPingd1rtqBczCCXyX:NomH9mEit2rVlPingd1c0vyX
MD5:	67F15F87BA6447906C398818EC639E91
SHA1:	6455E71270FE5AED09E67A4BE730318A6ADB1203
SHA-256:	4C99DB9664929B482A075A64FCB8F8AD97C83EF98193608FE4D4CBB075CECAFE
SHA-512:	A6EC2E1F6B19BFC4321BFD1295925F297D647E9F6A7C94ECE16C5CD3BA6B4A1544323259EE2804CF25E743A121AB80F076D99E689CC6FFA43525F7D97825A56B
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/88687.cca6b938f5ec6b221b34.js
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[88687],{88687:(e,t,r)=>{"use strict";var o=r(9891),n=r(48704),s=r(16645),i=r(58927),a=r.n(i),b=(r(84034),r(85200)),l=r(78566),d=r(15323),p=r(71012),c=(r(81844),r(3933));let m,h,u,f,g,y,v=e=>e;var w=function(e,t,r,o){var n,s=arguments.length,i=s<3?t:null===o?o=Object.getOwnPropertyDescriptor(t,r):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)i=Reflect.decorate(e,t,r,o);else for(var a=e.length-1;a>=0;a--)(n=e[a])&&(i=(s<3?n(i):s>3?n(t,r,i):n(t,r))\|\|i);return s>3&&i&&Object.defineProperty(t,r,i),i};let x=class extends p.D{constructor(){super(...arguments),this.showUser=!1,this.deletable=!1,this.hideItemLink=!1}static get styles(){return(0,n.unsafeCSS)(c.A)}render(){return(0,n.html)(m\|\|(m=v` <div id="comment-wrapper" ?small="${0}"> <header> ${0} ${0} ${0} </header> <collapsable-paragraph .scrollOnCollapse="${0}"><p>${0}</p></collapsable-paragraph> </div> `),this._small,this._renderAuthor(),this._rende

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	923
Entropy (8bit):	4.981694052533877
Encrypted:	false
SSDEEP:	24:t4TtA7CR6TF6HJadB7czVY2jTF6HJiwdlE/1J1BgZ1V1oGjTHJ/lhc:k+6LJWB7cQJZWgLJNhc
MD5:	155868C2C8DB18F85611D2BFD7A7617E
SHA1:	C80E1BDB19573EEA60FCB1BCA49E153D2E75750C
SHA-256:	7845C3AA1A87F99FC02D7D228ACF3D7145711D3DD7E0FEF4DC79DD8E7B38BA63
SHA-512:	6DD4CB896E013B7465215379688847C23C26331B14CF0C90D02026EE88FABAE6D9D1BEB37D4EC36A0B47E62597E3EE013859E85E9416AD26C7EFC59DA9EEF0B7
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="150" height="150" viewBox="0 0 150 150"><circle fill="#3B61FF" cx="75" cy="75" r="74.5"/><path fill="#3B61FF" stroke="#FFF" stroke-width="5" stroke-miterlimit="10" d="M106.9 118.5H43.1c-.9 0-1.7-.8-1.7-1.7V64.6c0-.9.8-1.7 1.7-1.7h63.8c.9 0 1.7.8 1.7 1.7v52.2c0 .9-.8 1.7-1.7 1.7z"/><path fill="none" stroke="#FFF" stroke-width="5" stroke-miterlimit="10" d="M54.2 62.4v-10c0-11.5 9.4-20.8 20.8-20.8h0c11.5 0 20.8 9.4 20.8 20.8v10.5"/><circle fill="#FFF" cx="62.9" cy="88.5" r="7.8"/><circle fill="#FFF" cx="94.8" cy="79.2" r="5"/><circle fill="#FFF" cx="87.8" cy="91.6" r="5"/><circle fill="#FFF" cx="83.9" cy="102.1" r="5"/><circle fill="#FFF" cx="58.1" cy="107.5" r="5"/><circle fill="#FFF" cx="70.8" cy="104" r="5"/><path fill="none" stroke="#FFF" stroke-miterlimit="10" d="M62.9 88.5l31.9-9.3m-36.7 28.3l4.8-19m21 13.6l-21-13.6M71 104l-8.1-15.5m24.9 3.1l-24.9-3.1"/></svg>.

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 409481
Category:	dropped
Size (bytes):	77982
Entropy (8bit):	7.990249326570966
Encrypted:	true
SSDEEP:	1536:1QBSAQr4plsAUtYqKtIz5IL84+q67hq9cS9+MqvZ:1YQr4plsVYjIz5ILH367hq9cSQHvZ
MD5:	1272A61A303115C5A015AF8FBE01E4C3
SHA1:	563ABF332A6DFCF1C269C1D0BB64A4C5BED37475
SHA-256:	A35A168BCFC556D26C9DE72CDA6451D92FB8DCCAB73B9F4943F368276A201542
SHA-512:	4A33E9638FB67EF914444C50A2A4515ADEDACCA69C36D9B1AC89B41C83B591BE19F08B72B6C2B3107D1078DE226F9D006DD45BFF2C7C279520D0E3FA806347C7
Malicious:	false
Reputation:	low
Preview:	............V.I./..<EV..#uI..+ .1P6..\.]....))...J).)Zk.....;Or~{.f...=...s."2.c....Uo...Wik..?..g.a3P.....Pm.'.y.....j7+.O..A{.........J.H?...8o.+O.U+?.Tu......y......DQ......z..g.O.TT._...l0._$..z..e.l..5.kg.t...U.L.vR..F.._..d...t.....z;.g...2.U..V^oe.k)....$.?\^.....n...,..N.......r.I....z............X...Z...(...?...Z....i.....r.....xu.QR..T>..<~..\|..5..ZI...Z......>.......m.&..>.W..+?-u,.Zk=ju.........C.I.C.W....}J.W."..]..+\|.sL....>.9....Or.8.._....._..#._.,.A....I.q..W...1Y...>.9.%YN........>y..8...G.'.v.X..J........<...?.1....i.X.h.,....s..{9...e.O..A.].m/G.x..J.$.].g......j.3..I.........q......n7}.:x.>(..vV;.4..9.n7y.....6u...>u.....u.......t.+].d..lJ...x..4."..d....N."............q....=+.;..>.6t..i..lD.8]i;...d+.'....>.&.. m?x.`U.&...z..4.l.@..C.J..l.....s..l.2.....mY~..Yq..u..gW.8..v....J.MS.....Gm...G.%..j........v.8G.>Xi.O.9..>p.$].....=.......>.y...%.Q6h...a.l.......5w..7.A.r.Y...6..n..T....[..:..>..j'..V.....9.H}...>

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	179814
Entropy (8bit):	5.009229433155186
Encrypted:	false
SSDEEP:	1536:pQq2hVSBG7HWCyk2MScx633/Qk5lJFWRiitFuNKegejngN07OOFRPzb:uqywBi2CX/QIkBoRHT0DgerA0iSR7b
MD5:	D1ED380917FD3494C15144C8296FDA0A
SHA1:	975EF7DFB66F88C37A85802E2ECF90A6F18479C5
SHA-256:	91027B720A065D4E172FCD9490B18E48AC06F46AA397531442F98627A602684E
SHA-512:	5E60A49DEF2EFD28D973C0D5AB06393C53AC6DD70D3ED9068305CB46BA70657043805018352E2304891E7097D68E58CF495F183BA27C25561EACEFB3A1308B90
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/domains/ghabovethec.info/referrer_files
Preview:	{"data": [{"id": "3d2c321e729acc21012c54114d35ae57102f8f5159f5cca46ade25668f9f4b8e", "type": "file", "links": {"self": "https://www.virustotal.com/ui/files/3d2c321e729acc21012c54114d35ae57102f8f5159f5cca46ade25668f9f4b8e"}, "attributes": {"last_analysis_date": 1730732859, "last_analysis_stats": {"malicious": 1, "suspicious": 0, "undetected": 62, "harmless": 0, "timeout": 0, "confirmed-timeout": 0, "failure": 0, "type-unsupported": 13}, "reputation": 0, "names": ["CapCut MOD APK v13.1.0 [November 2024] Free Pro Editing!"], "first_submission_date": 1730732859, "trid": [{"file_type": "file seems to be plain text/ASCII", "probability": 0.0}], "total_votes": {"harmless": 0, "malicious": 0}, "size": 2318954, "sha1": "924673808a83c2c739c261899119205f2cca1d3a", "meaningful_name": "CapCut MOD APK v13.1.0 [November 2024] Free Pro Editing!", "sigma_analysis_results": [{"rule_level": "medium", "rule_id": "ad1841979098a6b76c24ea780263b9da230373dc9a0d48d841538ec02cecb447", "rule_source": "Sigma Inte

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1181)
Category:	downloaded
Size (bytes):	4823
Entropy (8bit):	4.99018506568659
Encrypted:	false
SSDEEP:	96:TmQfjOO4yhuBrpM1ZZ7udRUhEGvmb6AykU31:6QfjONyhuBrpM1ZhugBvmb6AykUF
MD5:	638EC429BA0EE788B7CE5800AC55007B
SHA1:	BCFA0AE9172D840D308B7CFF8E130A86852B30CF
SHA-256:	6926EC5B93FCB1774A4A5A1BD4F9D1296050B12A6E19CDEABDFBF70004F301A4
SHA-512:	006979657102DCFAA7E1257927D4FBCEE9A92DB20A42B25F6583F0A4235801F7A7E6E8DF08E24E37F1DA8924ECF9940E71DB37F232C5450178A8572E28DF98D8
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/graph/embed/g8a8c71844d5444f98fd3ef10e3ccc94f894c32f05f86417cb4c7605cdc8a2308
Preview:	<!DOCTYPE html><html lang="en"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta http-equiv="X-UA-Compatible" content="ie=edge"><title>VirusTotal Graph</title><script src="/graph/assets/js/webcomponent-polyfill.js"></script><style>body {. background: var(--bs-body-bg);. }. /* General header /. #main-header {. display: flex;. }.. .logo {. display: inline-flex;. align-items: center;. position: relative;. padding: 6px;. }.. .logo img {. height: 36px;. }.. / Skeletor */. @keyframes skeletor {. 0% {. background-color: var(--bs-tertiary-bg);. }.. 50% {. background-color: var(--bs-secondary-bg);. }.. 100% {. background-color: var(--bs-secondary-bg);. }. }.. .skeletor {. display: flex;. width: 100%;. justify-content: space-between;. }.. .skeletor .item {. width: 100%;. min-height: 300px;.

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13594)
Category:	dropped
Size (bytes):	28553
Entropy (8bit):	5.515433907779168
Encrypted:	false
SSDEEP:	768:SUsDqqCDUOsv0gDgSzVvBmCxWh2u8QGTMwhheQ2Re6lDG3Rp24:Ts4ULu+6Jg24
MD5:	BE9910D91170F66B8A4CB58FD05CD68C
SHA1:	15AEE4E29B7D3805022AD39668477949CF73F131
SHA-256:	8DBF5C87676AE4777685B373C412B544FD16EC9B52729E1CDC3E6BD52A89776E
SHA-512:	1455890FA7E406102074AD9E0BBD7410DD0E87A917CA30E211257977910BB16F7645548A6DF02B21280D99B164B20CF6995F9E4B64979347C8B84A79C69A5815
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[74278],{41940:(t,e,i)=>{"use strict";var s=i(48704),r=i(16645),n=i(93861);let o,a,l,c,h=t=>t;var d=function(t,e,i,s){var r,n=arguments.length,o=n<3?e:null===s?s=Object.getOwnPropertyDescriptor(e,i):s;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)o=Reflect.decorate(t,e,i,s);else for(var a=t.length-1;a>=0;a--)(r=t[a])&&(o=(n<3?r(o):n>3?r(e,i,o):r(e,i))\|\|o);return n>3&&o&&Object.defineProperty(e,i,o),o};let u=class extends s.LitElement{constructor(){super(...arguments),this.options=[]}set value(t){this._value=t}get value(){return this._value}static get styles(){return(0,s.unsafeCSS)(n.A)}onSelectChange(){var t;this.value=null===(t=this.select)\|\|void 0===t?void 0:t.value,this.dispatchEvent(new CustomEvent("change",{detail:{value:this.value}}))}render(){return(0,s.html)(o\|\|(o=h`${0} <select ?disabled="${0}" @change="${0}"> ${0} </select>`),this.placeholder?(0,s.html)(a\|\|(a=h`<label class="${0}">${0}</lab

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2918
Entropy (8bit):	7.909167585296393
Encrypted:	false
SSDEEP:	48:D/60+ZB25B9VSDc88li2UmxoRej2OqRlNo3zRHNar3beqdiKKxZcpu8Ht:DS0As5Lcc84iExl3KlqNYbaK4lo
MD5:	7CCB2C71447FDA20C8A242398FDD7119
SHA1:	F1B0CDB35F473E4CB14328FEDB18D8A78DB3A2A4
SHA-256:	56536874F5522BD4728F979CF4895B08E328D7B03A1661F99246C964B9BDAAF7
SHA-512:	7EC25D6A9B0B19F035F45676BCA9220A66CDA3B45015C3F54C5FDD3DCB8C5FBA0E5C7DDD30B5FA30C9A3C96FF9F9A2B6349C384CE99DE4529C225C8AFE7D33CF
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/graph/assets/images/entities/dark-default-domain.png
Preview:	.PNG........IHDR...@...@......iq.....pHYs.................IDATx..[wt...?....G.iW.`0.NrD."l......H ........x....1 DoQ....M1..$ T.D.SEG..........;.O5.............2..W......'D]A.v.....Z&.jV.j..m.[N.:............m2!Z..Z6..s...A.....\[).P...kB.......8_$D;.w........X1..!.......M0..-..R...!ZgB..E(..F......Ey.H%'$P.TK-...QM!D.,..).(.....n...._.P...E.6....h...n.!!!...._@k..-S...LxJ...-....T..P.Ru...y...,.}........:u..q.=...#.O.<..vq..bL...r..xi..E.o.].=..../^.`.6la..]....7...Px....k..>}.M.7o.[...)4.@....m..6t.+\| ..C./.].1.}.a.O.>c.V.c11=Y.F-.s.d.;w9.@.h@..w..X=.\|....d. KU..q..t..=x.PN6##.}..$V.j(.`...{.>V.Z].{.....7o...[.1..al..,3...;bbz81.......u..<>~:.......%K..T.w.?,...KO.4.`.....)Sf........~M.g..2.c...........F.g..~..:.:\|n.R.....&L...B.HK;....;v..=\|.H.........\|l_.c.!.S...WY...h..$i.N........k.lt.W/.].rM..;.)..3..6R...I.LO.i..........\|../.a..r.\|.+MhhCv.Z:..ag.@.iZO D.l.I....{....=zl....7.C.U...I....fA.4...'r7.3...A... .....3...).v

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Reputation:	low
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18273)
Category:	downloaded
Size (bytes):	18891
Entropy (8bit):	5.656628184450963
Encrypted:	false
SSDEEP:	384:AQNMEDyIzRuH/uT3ZFS2jPxtKlAU1YnaejXfiz:A+M8yeQfuDZFS2jPa1iaer6
MD5:	27AF06F31164353B7F0E188967982AEA
SHA1:	431ED9C56175E1CE213FDC12563D76838F3DF7B1
SHA-256:	E296E95BFAC0A9C39E4BA84451A1D0CF83B167CF5E284CA6752F0AA61AAF215F
SHA-512:	68A3E3AECA4C52400BA6B883DD74F01774FF047940C4342DB4928AD02696473EEEF0696ED78927510DDAF9CA1DA0EC1B71E6173031C3EBB46CB963304D78E5B9
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/4pbpW_rAqcOeS6hEUaHQz4OxZ89eKEymdS8KphqvIV8.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var U=function(r){return r},S=function(r,L){if(L=(r=null,g).trustedTypes,!L\|\|!L.createPolicy)return r;try{r=L.createPolicy("bg",{createHTML:U,createScript:U,createScriptURL:U})}catch(l){g.console&&g.console.error(l.message)}return r},g=this\|\|self;(0,eval)(function(r,L){return(L=S())&&r.eval(L.createScript("1"))===1?function(l){return L.createScript(l)}:function(l){return""+l}}(g)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var l6=function(r,L,l,g,F,v){function S(){if(r.A==r){if(r.F){var Q=[O,l,L,void 0,F,v,arguments];if(g==2)var M=I(r,(x(r,Q),false),false);else if(g==1){var U=!r.K.length;x(r,Q),U&&I(r,false,false)}else M=rj(r,Q);return M}F&&v&&F.removeEventListener(v,S,h)}}return S},Uc=function(r,L,l){if(r.length==3){for(l=0;l<3;l++)L[l]+=r[l];for(l=[13,8,(r=0,13),12,16,5,3,10,15];r<9;r++)L[3](L,r

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30994)
Category:	dropped
Size (bytes):	35260
Entropy (8bit):	5.359243198781703
Encrypted:	false
SSDEEP:	768:UQ7llrLyfO1amRx+7YCxAGbUMqAC99baIr5gPCfL+6Cvl95wqil:ph3LRxi7AGwhjHr5gPCfL+Zo
MD5:	80A45FCA1EB0AAD8FE06E17D14732826
SHA1:	7391FBC4BDA7349A586848BFF55AA9632BFA535B
SHA-256:	25BE481CCCE7E6FC19181699C9B22B801634B728A83CA05BD779F6D26A83982A
SHA-512:	1820E97EC6D4E94CDDCBFD79CA51B644275C8FD4CCFE43186593BB395ADC97421CD506AF1186682ADBF703E82626B2F39846EB4768F48042926533C78FF09ACB
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[13420],{13420:(t,e,i)=>{var s=i(13570),r=(i(9891),i(87347)),o=i(48704),n=i(16645),a=i(62832),l=i(52463),h=i.n(l),c=i(42246),d=i(92619),u=i(15323),p=i(68122),m=i(96855),g=i(96987),y=(i(41940),i(67668),i(77554),i(42320),i(25076),i(33554),i(51196),i(84034),i(8746),i(28238)),v=i(44052),f=(i(63787),i(72856),i(50071),i(52059),i(69335),i(31856),i(77698)),b=i(22685);let S,w,$,L,O,k=t=>t;var A=function(t,e,i,s){var r,o=arguments.length,n=o<3?e:null===s?s=Object.getOwnPropertyDescriptor(e,i):s;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(t,e,i,s);else for(var a=t.length-1;a>=0;a--)(r=t[a])&&(n=(o<3?r(n):o>3?r(e,i,n):r(e,i))\|\|n);return o>3&&n&&Object.defineProperty(e,i,n),n};const C="ALL",T="num_lookups-",M="num_submissions-",x=f.DT.map((t=>({title:t.replace(/"/g,""),value:t})));let D=class extends o.LitElement{constructor(){super(...arguments),this.regionIndexMap=new Map,this.

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	downloaded
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 68x68, components 3
Category:	downloaded
Size (bytes):	2046
Entropy (8bit):	7.713679819420531
Encrypted:	false
SSDEEP:	48:UDqElvCAE463I/edzP1WQpdICi+kBXZ/e18Lu8vl8jX:6XKK63vpYQLDcBCmugmL
MD5:	EC4792744302D867C351ECFAB0E4364C
SHA1:	0DE8E2F2B216EB40DCF313F249351EC0DA0DB852
SHA-256:	3CC7F730CB5EBFE5C103E410EB1DD3130334C440732E030F979E6BE04CF1A09C
SHA-512:	2853DF1A652A923AF954DBC52EB0629766D12D217EF8965AD82E1A9149A36FD05E97F7BB6A1235BDEFF50833E8FAAF7EB337B22451E9025A43EF5E1CFD982B40
Malicious:	false
Reputation:	low
URL:	https://yt3.ggpht.com/ytc/AIdro_ksRbLA0pMtenDHiICTjuVUOFbQkt95K-xJMa0GRwjrsw=s68-c-k-c0x00ffffff-no-rj
Preview:	......JFIF.............Exif..II.......1...............Picasa..............................................................................................................................................D.D...........................................C........................!....1...3ASVr..."24BCt......a...#QRb.....................................=........................1Q..!Aa..2STq......."3Br........Rb.............?..N..D.%.(.DJ"Q...E;g/K...'..Y. L\|f..YV.o...n.Wf(....U.e.a.....(t.GU...~GR..Z.!......F!qE..1......oq1......\|Y.'.c.....q1.Y.rn.>,...c..=....c......\|Y.....D${.)...)gU........CXDU....%.<....o0M<...X6.0..n.}.f....Q....P8P.J...".D\.<9.f...oU....(...]....Q\.p.....mG.c..M[s.........nQ.,.u...TO..d.vm.....".......T....%n.(/...ELo).m.)!5f.9.....7.<.@pwu..N21\|\v..j...w.o...C..g' ...G.u...LK.QT..~.U..~.......T..S.B...5. ./...Da.R?..N.w}..O....>..F..#..n..)..w.<...:.......f.{)..qg)..6...1r.6.z.........j4.9..#.C.L.]J....>.cXX.....Ut...=.A..T.\...V.+..(...

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (568)
Category:	dropped
Size (bytes):	2493035
Entropy (8bit):	5.60259822862234
Encrypted:	false
SSDEEP:	24576:E1Ql2p5JtTkcm9L8snfQMxA6Vli/uoE3rXB1D1Br0Z2kNhZZAhhyt:T2p5JtwusnIMxli/E3rXB1D1Bvyt
MD5:	5992866DC9180EB01B6E9BC9260C1826
SHA1:	0CD2F5CBBE17D4B44C8CD73FD46DAF9F96926CC0
SHA-256:	761A90333001CF2854B432B78C71E30EB1AA012DC98D4C8FCAC44974C5073E86
SHA-512:	01F6F7DC6A45EBD17116D43E391E7AAD5739267E7CFCCEC8343E5C7976E867616586B7A4FAFA0DFC35A6D7B3A67E045D0CE48F483969DFEB170F8F3DFE5D61A9
Malicious:	false
Reputation:	low
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.dev/license././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 39779
Category:	dropped
Size (bytes):	12236
Entropy (8bit):	7.983231499597867
Encrypted:	false
SSDEEP:	192:QgFASyPP9Si4hwGKC2pxNQ0LkZOBn9FXLSC67b5TInvLGC5gGUpEj4M58qlIsk1U:Qg7sPkphwEaXQCkQBDXLP6H5cvLGC5gu
MD5:	BFCBD2F4AA94FF776327FF0F4B77322E
SHA1:	682966539AB75199E2546B38A916B9ACD75A9EE6
SHA-256:	887BA2EBFB3576B47FDC59A4336A51E91C4EF13FA5E91F5E590E39774D5C39EA
SHA-512:	DE2745793B27DCFA0378326499D91A082CF78A541EB66BD727746D7D9D7440CACC021CA11FA378BC45EACDDFB167C2C33EE6C992A4AA62639B5816BB66F9AD90
Malicious:	false
Reputation:	low
Preview:	...........}.z.....s.c8Q.g0...4..Z,.Z..v.E.<...X......!.......$%.gy.c&..kuUum].h.S.Y....i3U.ip.F.p...l.\|.>...."...k.>~\|..............=....G.C..=.t}....7...^...\|.G...M.$M..`.T.f.-Wq....e....u..i.-.Q.{...k..x.fQ..>ZR........4Ua2.....L......._).w.sx.{.h...$.1H....>L......qwo.hY...\|..u..z...Hf.^..d...@....Q..f.<9>....}..Z~B.<<.?h.!>....z-.......z..W..Jq....Ct.P..a..-.-Z...N....t..........wB .......j........i.W..s.................>.pI.X.q..24....x..?.................N....g.3........?......G...........................W.........5.._f~..i.'..f.<... ...N...8.d......OZ.,...}.A.&}.L..a.>....l<.5..&Q.:Yz..h.E(..$^...9o..O.E.. Qi<.OEA6S.&.hm..+.l.2......,J.h..^/.2KO..Ku...M.F.. ...j~.....e&4...:.?..K.!k.....F.,./.U...vZ.Vk.%.....jp(@..9..\-/..x8.z../...`0X._.^.~V.,..~u..V...t.D.,.......h.l..1.dW+.O..j:G.;w...J]0Q.8.3.J...-..9....i.kp.....s...f.N....i&.&.".W..{..0.i......1i.J.........FKeV....y}....0M=.D-'.7....h....Z.t..4. .<..K....W.4......

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2785
Entropy (8bit):	7.899073667723634
Encrypted:	false
SSDEEP:	48:D/6hAGifxPHzR+bEYNI6Vi/elmADjF9BjhdFEop6/XOp9xaXLb1GaK6xIk7Urz63:DShjCtT6k/FKFX1EopzaXL5GaK6qkuzu
MD5:	A6AEF6F1315794A655FD79F5427F3B0B
SHA1:	FC87FBDC6B656622CB606D6D8E2CAC0EEAEC9E2E
SHA-256:	D6C60F52B894CDC32BB8B74A871933867DBB4776CEC55EC75AD4818AD7CAB34F
SHA-512:	24E203657CB94F850B82CAA6013B3DFF9225158B7FD90864A51FB63906917670B5D94C5D9A10F98DC53F6E0BD6EB764C3730104285CC44879AD789369EDFE332
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....pHYs.................IDATx..[{TT.._s...;.D.Q.].V...-..4.&..6..G[.'.m..hj.QD.Zk5..5j.V=..I!>...m.A.&V..=.........ww...............^.r9LQQm)!J...lB.-..E.(.)U+(U.jY..{.wy...(...#5o..B.......j....5...%;22..Wc.f.o..N#D.[..[2!j....}..X.e.f.....ig.7..B.9....6..M.Q.....j..>...R..={>.....?~.].r.UV.fUU.YUU..7....`,>..Z....Re...z.^%'$F.T-4.X..ql..l........{...{...>N.......%.^..TM.T.4.H....%+YEE..@.n...'.-[v.....-..........s...v..p7J}.I."D]b.x.6.4A.<......n...0a:..g.:.....3...N.HXc..U...;..Ev.U"......8.ee.6y.T..5j"k.C...s..=..>}.k.....a......W..a..Re...s.}.m..G...Y.....3.^k._....@%....&........7...8..,...7.e.'....../a.;.0R......\|...._\....SA.w.._..&.k..X...F'!...@y..=~.YrN.Wo`...w...?a...}?7o.b/...h..`...T.-#......a..-j0.e.?.....eF..Y........u.1.o..s.Y..U.c..WzJ=..'..=.}C.k.:.[....ux...rS..\ZN..'}t.O..VR..M-...>....!.b.N.,...:t.........}.7....\uF.^T.+z...{.......C.......1...<.BZ...p..-X]]....

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43566)
Category:	downloaded
Size (bytes):	43621
Entropy (8bit):	5.029401868339729
Encrypted:	false
SSDEEP:	768:mnRRSjyt2rVlPingVVGSjt2rVlPingVVGS4Dt2rVlPingVVGSv:+rGytNngVJjtNngVJ0tNngVJv
MD5:	57F33356C0A2D69EA3E4727D7BE6BC10
SHA1:	916BB61A73963A3AC9CC430022C94BF72532FE49
SHA-256:	7B3D515643BE590E5E228ECC69672C1D5CAAD3EC3A0AF6AD0650DDA85E41F9D7
SHA-512:	51F639D82D0FBB81870AC2B5F626EECA744ACAA7BED9E4EB46DA64D4114F846ACB8AB34D159EAB407B4845A03E21868B20ED8487DFAFBB759B076B0D6088583A
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/59084.21fce51b78aa667002e8.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[59084],{74570:(r,o,e)=>{var b=e(48704),t=e(16645),s=e(62832),a=e(85200),n=e(45241),d=e(95688),i=(e(42320),e(18124));let l,c,g=r=>r;var p=function(r,o,e,b){var t,s=arguments.length,a=s<3?o:null===b?b=Object.getOwnPropertyDescriptor(o,e):b;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(r,o,e,b);else for(var n=r.length-1;n>=0;n--)(t=r[n])&&(a=(s<3?t(a):s>3?t(o,e,a):t(o,e))\|\|a);return s>3&&a&&Object.defineProperty(o,e,a),a};let v=(l=class extends b.LitElement{render(){if(!this.campaign)return;const r=this.campaign.id?"mandiant"===this.campaign.source.toLowerCase()?d.Z8.getRedirectUrl("mandiantCampaigns",this.campaign.id\|\|this.campaign.name):d.Z8.getRedirectUrl("collection",this.campaign.id):null;return(0,b.html)(c\|\|(c=g`<vt-ui-menu> <button slot="trigger" class="border-0 btn btn-link badge rounded-pill bg-warning-subtle text-warning-emphasis" data-tooltip-text="${0}" @mous

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	5498
Entropy (8bit):	5.119711170337567
Encrypted:	false
SSDEEP:	96:fqhpr0N6JrAHAk6CxKGvUVQhDCt4UGJMOiK77iN0P3Vk483:m3J0r9xKaUVQhDCSTJMOi0mN8i3
MD5:	894F2645F6D5EA2023DA579982ECB436
SHA1:	C1D97FE492DA5CDB63500372049987ACABF69D93
SHA-256:	72BF4494B007A5F4F5C900625E124FD13BB134379BD7728FFBF81A7DC3A3EFC8
SHA-512:	17AC7F6ED895553C12F698926C520C9778C2C5A738E0C9FD86B66B6EF8DCC337FC578C0E0FED3F361716DC5A591CFBA5B7134491EBA2146685FB5AC949F032DA
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/domains/ghabovethec.info/historical_ssl_certificates
Preview:	{"data": [{"id": "7f169e9bc98dfdfd13a4b485b9077af1eada8cf564e6a8fabee8003ba147e9e2", "type": "ssl_cert", "links": {"self": "https://www.virustotal.com/ui/ssl_certs/7f169e9bc98dfdfd13a4b485b9077af1eada8cf564e6a8fabee8003ba147e9e2"}, "attributes": {"issuer": {"C": "US", "O": "Amazon", "CN": "Amazon RSA 2048 M02"}, "extensions": {"authority_key_identifier": {"keyid": "c03152cd5a50c3827c7471cecbe99cf97aeb82e2"}, "subject_key_identifier": "4641575be967d4503a2ef599d662d8bee4e2d157", "subject_alternative_name": ["ghabovethec.info", "*.ghabovethec.info"], "certificate_policies": ["2.23.140.1.2.1"], "key_usage": ["digitalSignature", "keyEncipherment"], "extended_key_usage": ["serverAuth", "clientAuth"], "crl_distribution_points": ["http://crl.r2m02.amazontrust.com/r2m02.crl"], "ca_information_access": {"OCSP": "http://ocsp.r2m02.amazontrust.com", "CA Issuers": "http://crt.r2m02.amazontrust.com/r2m02.cer"}, "CA": false, "1.3.6.1.4.1.11129.2.4.2": "0482016a01680076004e75a3275c9a10c3385b6cd4df3f52

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2755
Entropy (8bit):	7.910651208684404
Encrypted:	false
SSDEEP:	48:D/6aSdVUDDVpyop30UaN+pZSJfZUA9tGIfAPpPUhGs1QFUHFCLReo+AQu0p3dWh+:DSaSngRpyxUaEKJfZUMvmPIGMi8oL0pF
MD5:	10FDB75E82C9AF0514A275E91E8FB20C
SHA1:	71B54523558F08D85C369634155CF3FA31D267D8
SHA-256:	89172D231B687EB4B00E6E842B87022B4DF87BB75F195294AC056B68718E03FD
SHA-512:	2FD1F9A980D2CB1617F768E7CC50E845E192862AF156DC9404F62246E9055BB8354E7CFEAEED5FFBE4802491DA9CC564FDB5E3B202EFED9275B25F7976B2AA32
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/graph/assets/images/relationships/dark-default-resolutions.png
Preview:	.PNG........IHDR...@...@......iq.....pHYs................uIDATx..[ipT..^\q~.Q@..2.......aq..1. ......p......." ...FH.@......@ .T.M...s...Sq.X..G.I...iR.H.2;..j...Z.U]Z.cf.w....^.'....O...(.....T/$D.D.^I.V].ze.5..TK'D..w=.Fj....=....R..R...Z.A........8S.f....g..}.@..L.~.sDG'>.y\.e.f...tx.7.JB.EQQ..FR.&..c...Z..O.e/.....\.rs?`..~.].\|.UU.`...Yuu5..k..g.,....w.VA.6...<.....Q..X-.E.$..S......w.].u.6.. .;v...Z..g.h.."<...J....k..\..UVV..t.z.;v...c7{.ml.?q.g\...J.w1fV..Y...p+6V..N. D_i6y.6.. w...Y.....{.isX.N............3..2a...w..v.2.L.M")).u........Y...l...U......8.7....>s......3.....<..j..I.y.=.u..........:t4;u..g.M.....~7..Rm...=.........g..../.y.D6s.<~r.:w......9.92.bb...e_.}.....!.[./.NS....G.T...aSx..u..=_.\PN.f......'#N.!.XOy.u......E..'P..P5......eK...../[..P.+.f..Y........6.8.o...g..-.........z......>..Z.l..7...'D..Db.../!..TPp<.6..O8~..X.Q.T..EE..A....P#<...s..#.C..n.F..LN..qD.dh.Z...t.\|.*)-.[A8...~..Y..G\|.../\.{.?..Fn....

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 61923
Category:	dropped
Size (bytes):	16791
Entropy (8bit):	7.989240114604167
Encrypted:	false
SSDEEP:	384:NRdCvUaOCkqbXV+0+araCH1RFd2LHZ+OjbAyQlVWDlIhDfVxPyA+V81P:YFOCkqbFvFmCVR7UjEDWh6JxKRa
MD5:	B2C312BB06008B34E6693118BA686138
SHA1:	136422DEEC99DE945611CD57CAA73007D9E8FABF
SHA-256:	70EEC90014A9096DBEB943ED78C0A67A61751453FA68A36F6175E1B2B117D68B
SHA-512:	BCB588490BC541D82B4FCB6FFC9D77DF240D07C79C7A46F22F0D97914B26E4CB91CE8062E6B997BA34BF5C5074420A553AD45ABD91E96EFE153D4BB9A89AD999
Malicious:	false
Reputation:	low
Preview:	...........}.v.F.....0&.M.4I..P..Gvf<....d..o/.$A.1.p.P."s........./(\.Kb...;q.K.{uuu..]g...i8..V.D..e0Y..w'.u.."?[.gK?..7.}...m..Zg..7;........{.a.w...............{...../....ak..;8h{>~.=....?...v.m/..{.{...........`8......w.;mo......h.........~...v.moE_.{4.b..[......[....ak......a.?..v.y.\|...17.CE.(......so.]z.y.w....{.}.y........{.}.=.~..^z.{?{........}.....8.?........4..X.....$......2.....y..`..w..Q....x..g.o'?..{...^...H.A6M.U..-..(;..-7..x._..d.....>\|.)...`..~....n?......j..hA.8.......Q..[.8...m?\|.J.-Z..J..1..9z...h.?\|H.Gi....A....z..`..Y.n..i.g....wz.e..g.]O..S..,O.8.....08.oy_.6nM....2'x...,s..0......<H...X.....nu.].Km/_.Y7..(....m.gO........6.5..x..o....X..4.A.f.D.;..5..ur.....r......!..../._...>,...W.E..:u;.2....wZ!.i..>.}..3....eq..s.9Y.AV.t...n1.3.6.W.a>...u7a.....,.DA}....q.~t.Ag./.....%..I...s.m7...z.d.b...j.jcE....@.<.........i........}.@]........~I.U.....Up.t..0.k-.e...>..{,...y.dY2..2<!..y!v{.........O..qy.LO.u.

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Reputation:	low
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 251
Category:	downloaded
Size (bytes):	206
Entropy (8bit):	6.744498738417922
Encrypted:	false
SSDEEP:	3:FttyKkiuKl+qBD8z0WgcOhJ1GNgpqq7QjfH7aFCwLVNNA8GNl9XFZXtfn:XtyDMjB6ZOh7GNj+LVdGNnXbhn
MD5:	6E44C0860050E758CA541270ED5E061B
SHA1:	F1AA4F891248FE997FA8AC2955F6088628812C79
SHA-256:	E5A435514DF71B88008D326F1A244C0417E5ED3C7ABCB94D8A94F9D1B1F47F26
SHA-512:	79FCB4AEC8B78ED7BBC9513D01FC150BC46B123BAB1C6ABA4C0642439F6C831DD2EAF98237CBE4A0F2DD7C77FC12DE723FD7F5EFA96FA3D35AAAF93B6C8E2A58
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/e7c1b54f5b702950d209.svg
Preview:	..........T.;..0......:.......V..HM.JiS.@~=....w.......Q..... v........~.H.B.....2#".H% t.7..#.Fw..3R.f...pt3;....ot.7o...tp.f....B....uYf..*!.;..V..."....gU......\].~......... .o........tZ.....

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	403112
Entropy (8bit):	5.17652378219134
Encrypted:	false
SSDEEP:	1536:hIzHaFUgMnTthFgV9MMg7UzBDxILvPptpm8p7M6oya+MOn4yoOx5juDEnXrDJc7p:iHaFU5FgfMMg7UzBD0poyHufNlc4zo3m
MD5:	493B8A7ACF43DC34BB5A2CAEDC6D3257
SHA1:	EDFA793BDD5CD4B5D5D75BA24BE6BDC1E18D10E5
SHA-256:	9E69A6C34CEB5CF1DE740F4D5D8344F4BAA0D756323263E06D5806BDA563BFCC
SHA-512:	27F55C5E4965FC1CC7CA03A733877BE6A59700AD2E5A77CE5B1BE3576B824F37013A66034855253E775F959A6558563376DF2920C90520C51E4F443BE1D97935
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/a8476471/www-player.css
Preview:	@charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);touch-action:manipulation}.html5-video-player,.ytp-contextmenu{-ms-high-contrast-adjust:none;forced-color-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode{background-color:#000}.ytd-video-masthead-ad-primary-video-renderer .html5-video-player:not(.ytp-transparent),.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-mode{font-size:17px}.ytp-autohide{cu

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 6469677
Category:	downloaded
Size (bytes):	1687730
Entropy (8bit):	7.999488772619453
Encrypted:	true
SSDEEP:	49152:eENfFTzESLLF11hR0j7L47JqMhACGh/Z07:eSRzTXxhRk7LsEMhACGNG7
MD5:	5BA994075CAC287CB8DC9EB6C95A3552
SHA1:	3369BE2A797C410B9631B78E0D64806CE7CAF774
SHA-256:	4E379F53AC0011B92F2ECEF5F063C779F327A9D5D22C3592AC16FA0FEC586694
SHA-512:	950B97351009FADE974824AF834691534BD688A7265ED480ACE4CAD8273865E7091DD14A7A97D4D23BC51B0B5E555B3D5FABC2C947880B4C5DAC0FCC311B5538
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/main.e221fa750206b85dcfc6.js
Preview:	...........m[...6.}...;....c.w.....0........2..O.....,.?w..$....s....]..K.[%u....?}m.3..........=.F....\..nTrQ..}b...Qf..;WIv.z.J:q/.#..S?J..^F.(.......c.3..-z...~...O...v... ........M2.bi-.!.o.Qf......oX.a...3.m..!..#!A.S..P..b&G.Y...7I.c<...3.8.Pq... s.A2..Ut.d:..U\|w..zWQ.['..tDJ.d..2.....".?f.k.1.J$..m..W...}.Vhqv.q.f.k.3X....6...D9....~......L..Y.j]"...L..n........I:.. 3...o.>Wg.C.u9L..jLJ.A.}..Y......f6.Uk.5..........q..d...4.3......!.v3...3..............T.d.Cu.....U.m..5..}p.]u.;W(Z.f..27...C.2.Q..3.6. .m.R.s.IZ.........]W..I......n.FU.[.R.\wzQ;.&L..#4a...2...Eg..I.~+......Y...G....$.M.7.{A.t.V0...n.....7...HC....a.p..vi .z.C...0D....3.Jr......0...K.E?EU.6..a..v..>...^.........m.W.....\|0(t..Mr.aI..../W....&.U..0zA..'....\JT09...2m^r.@r.\.t4[1(F;...ct..............2..[..._..Q..^...1....C.]...+...b"........No..H-....C.c..g..B....#.H.eb..A.n8H2......XC..(...l.%....fL....r.....dQ..D..:\.M..^.I.dVm..F.n=X(.7M=eM.BX.

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	747
Entropy (8bit):	5.060991401521376
Encrypted:	false
SSDEEP:	12:t4TtAhJnBnMs4EEBnMQ6B9Pw6HJWsN5IS0kH135NG1wbGjB9HJD+jOFtQfjB9PwQ:t4TtA7CR6TPFHJf5v0u13C1wbGjTHJ6h
MD5:	651BD8B292D3C3157E6CB6750A4708C1
SHA1:	89D1DF90DE2B51563FEFA4A3D243312B514D11B5
SHA-256:	104B0F3C653DCC362AD350F8F18B9B2F37A54A9765E8245A87BB43C774490F43
SHA-512:	4447958CF9AD86009057BF5FF4E1AA77939A8576D893BBA3FA6E5CD48B2C6DE27FABDE41FF5C0E4C02EAA4A42EE3F664D5FC869886CC8FC2D538DF8300D88955
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="150" height="150" viewBox="0 0 150 150"><circle fill="#3B61FF" cx="75" cy="75" r="74.5"/><path fill="#3B61FF" stroke="#FFF" stroke-width="4" stroke-miterlimit="10" d="M92.1 107.6H42.6V48.2h40.2l9.3 8.4z"/><circle fill="#FFF" cx="58.8" cy="78.2" r="7.8"/><circle fill="#FFF" cx="72.2" cy="66.1" r="5"/><circle fill="#FFF" cx="81.2" cy="81" r="5"/><circle fill="#FFF" cx="74" cy="96" r="5"/><path fill="none" stroke="#FFF" stroke-miterlimit="10" d="M58.8 78.2l12.4-12.1m12.5 15.2l-24.9-3.1m17 17.8L57.4 77.9"/><path fill="none" stroke="#FFF" stroke-width="4" stroke-miterlimit="10" d="M92.1 86.6s4.7-20.9 28.1-21.2"/><path fill="#FFF" d="M108.7 83.7l-3-2.6 13-14.9L103 54.3l2.4-3.2 19.1 14.5z"/></svg>.

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (701)
Category:	downloaded
Size (bytes):	558800
Entropy (8bit):	5.6661858145390775
Encrypted:	false
SSDEEP:	12288:HHe/N32Dr0RnSXaKyEtG76ZKj1wa89jzQoDjU3+VLs/k5lS64cflFT3O01d:eMapiBMKZxRflF3d
MD5:	88A5FED5C87B1D3704AB225CFBE7A130
SHA1:	D64243C18FBAA356E4ABAE8414CCC4772D64060B
SHA-256:	F8E5F5CE9FF44073CFF24BCD3D2B8AA4E67B67891B14FF929FE4743880FDF82E
SHA-512:	8B8D1C9F4C36FD2383C96D0D484A6692F70422934BCCD3DB1F0787E1B753F7D5A8F0C91934805C4D865AED3D4673FF478F0AE23746D0C0E005E60848543B3D33
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=function(){return[function(n,S,D,d,Z,l,h,R,O){return(((n^53)&19)==((n&((((R=[34,2,46],n\|72)==n&&(O=St(function(G,A,L){return L=(A=(G=function(f,H){return(f[(H=["replace","indexOf","trim"],H)[1]](d)!=-1&&(f=f.slice(f[H[1]](d))),f)[H[0]](/\s+/g,S)[H[0]](/\n/g,Z)[H[2]]()},G(Z+l)),G(Z+h)),A==L},D)),n)\|56)==n&&(h=["https","",0],D==""?O="":(d=g[R[2]](24,!0,h[1],new OI(D)),l=N[30](58,d,h[1]),Z=N[36](25,h[1],g[40](40,l,h[1]),v[21](R[1],1,S,D)),Z.D!=S\|\|(Z.A==h[0]?E[30](90,h[R[1]],443,Z):Z.A=="http"&&.E[30](96,h[R[1]],80,Z)),O=Z.toString())),11))==n&&b.call(this,S),1)&&(O=x[42](16,C[42](44,v[R[0]](23,12),S),[u[20](3

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 30533
Category:	downloaded
Size (bytes):	10419
Entropy (8bit):	7.979179836928558
Encrypted:	false
SSDEEP:	192:IBEi4MXaW0e6WaXfknjtIOMJ5m0TPCvifk4J6nIZrvwPR3gu5:IvXD0e0sm5m0OeJIkkJJ
MD5:	2A587EE083FDCCA95175E181631D765C
SHA1:	F42880A80DBF4E4D1DF44840EF79BE1E0E995445
SHA-256:	7399E4981B3AFB22BC79B09E4F663C7CC790EBD2888AC619566C6FF7119D429E
SHA-512:	FD5B546DE7454F1F51AF6C563C5E4885F51697D917BE056293EDC6E513C19DE527A24F167809895469A68F62883BFEEBA09112C5FF77517DC56867BBFE529DBD
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/vt-ui-shell-extra-deps.2f0832bf9cf1fc541ba6.js
Preview:	...........}iw.F......I\|.....N.V..h.m.$.(ze.l..H..@.....S..@..e.9... .Kuu.U....."...}..b:....<..?.,...t...8.o..........9>.......;.........w......;.+...._'..)...}...K..".,L.......x...lm.^.owvw..(...i(......."..q.......r..b&."..".../..{..E?YL.a.f.Y...w1(..(^^&..t......Y</..@&n?;.G..rS;....HG.k1......a.[0..4...j^..=.Sl.....Q(..~. ..v.".w.<...{......"wR........?..O.{..b.%......V9..8.z.........C..Q.[.C!.ane...x2....A..L...{./.)'....WL.<...^lG.-6...4...NW....0N.....4.X@>(.jr.,!w:^.,.<..Go.N.<p.. ....Q4...B5.A..9Y4.>......K...,....".e.s!.o.(/~...l..0.[...eb...vH.......k@V[...M]'.....{.^>M...6./.....!.j...Z..(.y2.m..C..<.E..:.;wI.0.....Y..i....."...+..&...E<....l.S.eo...M.Y.N.".H....a..Z-...b.."\|?...g...[.e.F.(~...d....p.Lr...0.C9....P.jr.._.~A$.."...8.......vH....]68.u...j>ImmS..^.<.....O.=.%\|...`.^:=o...]....s.....j.sM...b1;...=....H.gk..=.{o.....{........+.P.0.5..E^.3%...BlZ...6{.;......R4.tFB......?.s^...n....D.GcA.....fok.x.q...E4}.%.

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 19516
Category:	dropped
Size (bytes):	7082
Entropy (8bit):	7.970534013791315
Encrypted:	false
SSDEEP:	192:mOMgyS6VwrlcwfFZUQbz0Z6YnEe78ql6VhpUED683:mOoSCFwfFZU8Qx+TUG3
MD5:	EFC93C41A0F83151168CD3884906C34E
SHA1:	E13E12F99CCE04BE44DC318C11BC575CF4FA33D2
SHA-256:	864C0E7F5CD89B0D0C373995B2875B2BADAC6588EA5DC4D423CF14CBBE8BA35B
SHA-512:	5DB898F19137887CB5233828D448EF39652432DB947BD0C43F82F49E0ACAC74E46439B415F9199D146F0886097ABBB7BBA135CE236A9F53501BFD57F0F0725FC
Malicious:	false
Reputation:	low
Preview:	...........\kw.8.......x.^...$.L:=.9..>vr..fs...J.S.....Y.}o....#I...Oku;4..B....P.u!....lM.H".Q.V~p.f.N............^^>~...X.?~...v.......t;.no..N...j...V6-.....v.<v...C..x...l..a......N.Jgx.....l'..`t..'.(..I..TL....:..8K.Nf......z)......../...8]'.t:...........1.%.V"/...E..2..4.q6..v+..\|^.,.nE....IK..W.".r...?U....H.......S..u...j...k.....~.ON...M.(.=....<:...l...'.(.yj....?9Q..E..B.R.s..$.....f.e.D.}O>toP.qY...O..#...r...SO>p.2......g....O../.K<."..+.~....e.0..: ..b..h{.W-......g...... ...s..0.".i..-J....+...ND..R,.y..#....n..k{.....h.(....^^..t..u.....?m=.\|po....o]Y..t...).\.j;J...hG...W.64..4..L...).....n........?[y..g.;....=.O.y....'r.ey..c."........uE.._.X...,-.t-,..B.i.J..........3w.<..0w....1..c.....F/..t[..X..h.......j.m'.(>9...v.qnK........2b.Z.(.......4.....N. Ri4.1M.....vY.........?....VP.vK.[K..(9_i.YO..:.w:k..g6....t:o.^.%...~Sn.5...7...q..NV.z.....C...e.....Se.Q...K.r..8.:.s..db....=..O..2.....V.

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 21631
Category:	downloaded
Size (bytes):	8178
Entropy (8bit):	7.9746321228938095
Encrypted:	false
SSDEEP:	192:HrZJTzO4NfGoUHGVM9KK4xqIYsECiJzQ7WCFvw99rSQ:H1JvOKTUmVMKTAIQCKrp
MD5:	58EDF1EEA65EDDD82F56C4614FD58AF8
SHA1:	519B80D7811346B105E06CA093AAFCE17B4C7A9E
SHA-256:	BE4B6CB44E9C0E9986F6AD849691939A57EE98DECBDB9148491E9C52782FADD0
SHA-512:	ABE6F169ECCE62AF804FC245F6AEFC1771F8239F17F5C62295D7299ADAE2B10DB752A60BB1F2AD0C8B1120CF674DD728136D916DB2D0D7A81D1448BBA1156DD7
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/26044.e227fd5c65cff1753dd6.js
Preview:	...........\is.F......&... ..e.Qfv\.$.v&[.......$X..#4..>o.@...d+V".}......V...6.....nsw.~....y..~....w.Mg.kV.w....C+.".}o...d.Z.....h.0.i.b...q.f.yu..F>..a...i5...q..V..i.i...W5.rZ;.qaZ3.ea....m3.ZP..{.i....?0.[\|....B[..gibZ;\|.#?.LkE.Q.......s=...z...f@......,.M.d..............'...W...[.k....`....-G...r...E....rsO.7@4.owk.i..d..v.....+6...r:......_.unY...._u.eu...k.u.m.zLD..W.r<....t.>mY.4.e....#..I..`..[f.S9.k..b%8..f.x9m%..wU...W.m..f.+....b:&,.pkR........`..?..U..].1..qQ\\H,.lYl..R...'...y.7...[.Y4...f?.6...(a...3v..#.i...q.6o....h..].m...{Q..n..y.g..E..j8.bn....'.b....rg.i.%.~....;_..\|....,.w.V..]q..z*.9f..\|W....... .}U,...f....s.]....^q.V...}-Di$zF`.....E.<...u...ur....O..+....\|.z.6.D>!.S,.Zg[.{P....we;..0.%..:G.3.;..&.4@...r..f...{..-.89g...rt0.s..>....+..zz4\gz..c.....\|..b.Is.y.F`..j~..c......<.:l.c..Sl...^. A....G84~.r~J..a.....w].G.fy{..k.....Q...R`..s.aV......:...B.n.{..l.W.Y.y......x..3...+N8..[....x..b.)...S...n.@....RV.(..t:

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1964)
Category:	downloaded
Size (bytes):	292561
Entropy (8bit):	5.5556679647167355
Encrypted:	false
SSDEEP:	6144:YCC5xmH2F24rn2DiH2F24rn2VOmzN77Jsv4gmUCKf5wNMEnVJXC:zqmH824rn2DiH824rn2VVzN7SgXC
MD5:	804A64CC031A1CF1ACE8B17737247B55
SHA1:	6B557BB5D287668A71D0C6FD3A5BF84D42F0D20B
SHA-256:	D480DE66B420EA6AFB356FE87DE6FE62F5CBBD08662F077FF2EDAE95A2B900DF
SHA-512:	9E8352CF757C641216F9F47EA2B8FBCF8A9B4B0967591255D5F19F6AC3FD2C2F8DFF4352371887D368DD313911018565401F44AD76B682011969B914E0E04AD4
Malicious:	false
Reputation:	low
URL:	https://www.google.com/cse/static/element/8fa85d58e016b414/cse_element__en.js?usqp=CAI%3D
Preview:	(function(){var g,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ja=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},la=ja(this),ma=function(a,b){if(b)a:{var c=la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.ma("Symbol",function(a){if(a)return a;var b=function(f,h){this.Yq=f;ca(this,"description",{configurable:!0,writable:!0,value:h})};b.prototype.toString=function(){return this.Yq};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=functi

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1159)
Category:	downloaded
Size (bytes):	339439
Entropy (8bit):	5.619282625649945
Encrypted:	false
SSDEEP:	3072:f0h4Bnb1KNeqIdUPtUmcGPPe0FgfesjeotB0ilgcSaStKb2tg+:fgMnU/WUPtUEPm0WfVNtB0iWcQtD
MD5:	045C78F7995C807D4FC0C00E56FC75CE
SHA1:	30ECF132074FA139559C4A9EE4113FB31412F0DC
SHA-256:	F40296D2D9F2E67194CBE9CE3C7EF6BC20A2259B484914A596671E8EA4D0F4BC
SHA-512:	7C00094462204CD875A4E662FEC8A1663EA58AD376BADF6655DCDE263258B57AF49FEB2D4D21CD194BA51C83C5BF950A5DA2385419A2A628C49145097780B564
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/a8476471/www-embed-player.vflset/www-embed-player.js
Preview:	(function(){'use strict';var r;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ca=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var ea=da(this);function u(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ca(c,a,{configurable:!0,writable:!0,value:b})}}.u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ca(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22202)
Category:	dropped
Size (bytes):	22257
Entropy (8bit):	5.439024538839142
Encrypted:	false
SSDEEP:	384:FUtJhdgvrrQGd1PshGjyu8tEbhAEC4v2Wmt2rVlPingYiLhssM:F+JhdgfQishGeu8ihBst2rVlPingYiLs
MD5:	4BA6D5E85D731F3249779A08FDEABD68
SHA1:	238C0436F2C8FB9E04EB44C02F04516BD1D4A00D
SHA-256:	379D3BED3FE8FD8457D3809AC31EC31EF478643BCA973BDE7236FCF9E84D4628
SHA-512:	F31415501FC095756A4FBED0B2A90ACFCECC80B8160DA07859BBC1BBEB2628D6B8A32CB9DC5B5E77B54C9F6B22F26FFD5478AF1D40586FC6441768389C4001E2
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[71254,44138,6837,13805,60132,61663],{95528:(t,e,i)=>{var o=i(48704),r=i(16645),n=i(65865);let s,a,l=t=>t;var c=function(t,e,i,o){var r,n=arguments.length,s=n<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,i):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)s=Reflect.decorate(t,e,i,o);else for(var a=t.length-1;a>=0;a--)(r=t[a])&&(s=(n<3?r(s):n>3?r(e,i,s):r(e,i))\|\|s);return n>3&&s&&Object.defineProperty(e,i,s),s};let d=class extends o.LitElement{static get styles(){return(0,o.css)(s\|\|(s=l`:host{display:inline}`))}render(){return this._isPunycode(this.punycode)?(0,o.html)(a\|\|(a=l` <span> (${0}) </span> `),this._punycodeFormatter(this.punycode)):""}_punycodeFormatter(t){return t?(0,n.Pk)(t):""}_isPunycode(t){if(t&&/xn--/.test(t)){const e=(0,n.Pk)(t);return!!e&&e!==t}return!1}};c([(0,r.property)({type:String})],d.prototype,"punycode",void 0),d=c([(0,r.customElement)("vt-ui-punycode")],d)},3

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14824, version 1.0
Category:	downloaded
Size (bytes):	14824
Entropy (8bit):	7.984080702126934
Encrypted:	false
SSDEEP:	384:9FhwoaJnaNM4+g4PQPq2ORxaT108SURx1qA3VyI6UvrkBxLA0THRTe:ZKaNMQ4oPG4T1FLXzFyZU92Hs
MD5:	48598BAD30F08E1C3EB3D0E69B420BD5
SHA1:	28C2CF160273C2062F909A875C4B4C0541EE2F84
SHA-256:	CA57B79A870BBF54700730858603A70D79743779C1B059922EC401BFDDC5ADC9
SHA-512:	0033327198BD448927A53EADA9AED51ED4F8DA3C8619EDA3B10948F437213F20270C233F7FD403C8C192A05CAEED6905A02D8C62EC22B3885A6A7D6C018F737C
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/ee990a93df71bfdfb3b5.woff2
Preview:	wOF2......9...........9..........................n..6....`..b...P.x..d..6.$..D. ..\|..4.gv%.m....B....y......sB.<....t..:S...@..\..w..x...8AMW.S......Z?.$.......mut....X..@.._.._$..Af'g...'.d.x.q&..T1Q_....n..z.._}...#v"......s.s......PiVBEW.2R.....8g....i...J.+Z.&..6trL.15.L.cn.D..!~N..WZ.DcJBB....$.<..T...ue.}...+..j..;:U..S...}.6a.iS.i.LId....K..`u.%.$...H..8<B.......a.`c.11..m=......l.B9;..?...w.Je^i.8p.5......#........v.Y:.b...,....L.....(........;_.IvQ.K.X"J...(.,...O....[D.\...\.........I.k.;+.....b........Z...)......P.u.(@P....pQ..]...e...6F..v.'.....;..hW.=.B,W..G....d... @...........(..9....R..\T.W)tvSz.4NU..rQu...\|....<B!....H.k.)..!.8..@...............qS...9.k.lE.....I..[.S.}....0...}?.U.......@....a$X......'N....!I. 5.e..(....V...].... ....AVUN..:.s.......5.W.H.I......>....d...b.G.h.##.......q.zu.f^...O..s.]H?....(`..O.,.N;oo...G.4.~.N...C.......'.T.,..0W....z+?w.../\..B{.ebz.....OI.."._...~.211S1...... ........s...N..pC.(.

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30725)
Category:	dropped
Size (bytes):	30780
Entropy (8bit):	5.452580255155406
Encrypted:	false
SSDEEP:	768:Cw6i7JmCLgxIvGrHUis4TB1Vkt2rVlPingMbt2rVlPingJUBZI:rwPhX+tNngutNngGBO
MD5:	C68C1C9871B70F204C39A3274D1240A6
SHA1:	1C6B05094CF13ED5C2865856303E1269A30B6E7E
SHA-256:	89FC2F8140D172E6AC7B6CFA40B0704374C273F3AE0FE283D2589CB6BECA60F5
SHA-512:	40C5201D78B7E99DAEADBC831C36385BDF628330FF86684CC8582CDE45AC66D36F605089195802CD0A1311C071FFACAEE07DA441F92CC94FF9DBC13E816F5129
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[76194,55685],{55685:(e,r,t)=>{"use strict";t.r(r),t.d(r,{AggregationsTableOfContent:()=>u});var o=t(48704),s=t(16645),a=(t(38398),t(96987)),i=t(71012),n=t(2169),b=t(70520);let c,d,l,g,p=e=>e;var m=function(e,r,t,o){var s,a=arguments.length,i=a<3?r:null===o?o=Object.getOwnPropertyDescriptor(r,t):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)i=Reflect.decorate(e,r,t,o);else for(var n=e.length-1;n>=0;n--)(s=e[n])&&(i=(a<3?s(i):a>3?s(r,t,i):s(r,t))\|\|i);return a>3&&i&&Object.defineProperty(r,t,i),i};let u=class extends i.D{constructor(){super(...arguments),this.name="file",this.sections={}}static get styles(){return(0,o.unsafeCSS)(n.A)}get headerOffset(){var e;const r=null===(e=document.querySelector("vt-ui-shell"))\|\|void 0===e\|\|null===(e=e.renderRoot)\|\|void 0===e?void 0:e.querySelector("vt-ui-omnibar");return r?r.clientHeight:0}render(){return(0,o.html)(c\|\|(c=p`${0}`),this.renderTableOfContents(this.n

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
URL:	https://static.doubleclick.net/instream/ad_status.js
Preview:	window.google_ad_status = 1;.

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 35260
Category:	downloaded
Size (bytes):	11435
Entropy (8bit):	7.984585819292661
Encrypted:	false
SSDEEP:	192:Wj6Zc/874e9TU9drmW3AlTKJu7Yo0iQV+RwcIbwRi8dlABpfyzGXnQY7RsxVZC:c6ZcZoU9JmrK8kVi5mbwldlKpfmGXDSE
MD5:	FB830B5846B72EF50E3001D0D706401B
SHA1:	F325E2A043414C549B2ABA7725CC9EEADD2AB265
SHA-256:	4A79796C6905B3022B97CF5EE0C8AD95FE4762798060153BEB8C69F63E02CB21
SHA-512:	7FB1CF1525F62D394DF0BE51DF985DDBE2EC9F9BE3003C5D33BCD3B090EABAFF1705AEC812E258534176089DCB159338EFC08B409E2F8279937E6E6CD8A64307
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/13420.2099364bebdd02277cf9.js
Preview:	...........]yw.F...>...z.1.S.L.V.....Xr...........H.....n..B...y;.f.Xlt7.....l..\9y.....r5>.?..i4..?.%.......$.......O.p:.G......j.$...{^.. ..O./.................G+~.{.[k.[...x....]....nn.o.A.?7W..V.`.?7V.7..`...................#?.....U......U..P.....z..>...9....h.p.....6......Hh..U~.....kbomM?.XYy.-...5.E.......6.t....w7..3z.......nop.nw........../....>[[..h.S.....;cU8...... x.\|...'..ay..6K.E.&.. ......e.J.<........].Kf.q...w...._...U..c.&K.+.OU>..i.f.mh/..<7.n._.=s..1........C5H..P~.......5.]..e..._hp;+;.~w'.t\|/.........=ZE.%~/}B....?.X...w2U............,N.Y...$..A...w......&...q.~.M.....\|v:......O....Q8...........^.fj:...{.><.\.T..gx..}....8.sG}T2.4<..gcE{u.d..!..g../..r/....9^r.8^$C..e4.'...Y....0N...VL.......^'..<..T....Y..Y.l........Nd.BM..w.hf{.p..e.i}..U.?...c.R.\..n4......x..!..c.....^7H.Y.Ggj....N.=...0.[...YQ......e^L...u......>......ZGY..._]..'.6....<.1....!.....1.#j/4.>.$...jo#....."..N.f.-zM.5.?<...../.....O....,/.

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	102
Entropy (8bit):	4.997660514702103
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKT/hlkMYatGECWaee:PLKdXNQKzLQL
MD5:	9AFB0D35BB088B3036561313BF7CE1F4
SHA1:	C7F3FDE34C537242969FBBD736B5B129611F1694
SHA-256:	6E4501CE6F65A1B8671A9D31A8F5AB56DFA4E30AA7A4A971DAA1544AB2EB53C1
SHA-512:	C08FAB7DD122743F8F942AC5F0F1A05A2A44BEFD7DA677074CC3D2D464A106CE88047C1396F4C99DABBF99541230CA37B05158F448E7014B36E1E9FE38C572AF
Malicious:	false
Reputation:	low
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js');

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2801
Entropy (8bit):	7.905980421212048
Encrypted:	false
SSDEEP:	48:D/6xp1ZfEI4R67L0ayUB8tEBBAaHGLGhti86rR17SJ2xOX95kE54A4ir1pu+UyZc:DSdZf74TOZ4aHGLEi8WRhA2xOX95V54x
MD5:	A360216DB349D1B8CB141AD8E39060E9
SHA1:	348F4B030C558C50D62045CE658E878780313EC6
SHA-256:	5D58E0A25E1121EF26F17D61D37AF460BB6DE90C493B73B604E4B8011FB97315
SHA-512:	C4EF472711A7BDFA263824A80164BA776E1382F0ACFB731FDCD74E4D21B8E32F7232EA77A9ABC120F2AD2D34B77F1B709ED8F55DBBEEE4EA2BFE205166E03E45
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/graph/assets/images/relationships/dark-default-communicating_files.png
Preview:	.PNG........IHDR...@...@......iq.....pHYs.................IDATx..[yP.......+..\|....3....GT.h.n.J..&..g..W...FC4"...gT<..hVS....x#.ALjKDE. .}...@O....\|....z.GO.t.7.^............5.Ru!!.nJ..B.bJ.JJ..:...pm..j.!j.U.#.7.. D[I.v.R..R..H.x.!jvtt\|w.UF.f.......;..m....cDG...h.2..!.o.;..P%!...VM_&.M..F....M..7.A....KYn.'............~.....h.5.A_.{.W.ZA.:CQ....sB.TJ.\|...h..>.`2;t(.=x..........F...?.Z..QB..a.R-.R..l".....Z.GVYYe..;...3l..l..l..?..h...J.{..+.v.zZ..~L..37y...m...m.t..y..........L..t..c.OL..~....E_."0FN.z.....";.........@,...>.<u....?..j.)l..gL...v..Y.1JKo..#'Y..;.....c.R..<.[oud...c\|...Y..C..3.>cn.S...J.....P.n3[../^2&...1..,&....7.g3g.F.98./b.;'.......\|.?bW.\5.?v.TP..).K...~....l...Bd^}O~XR.@.sl..g..k.W.I..6o.5.S^~...=....`...T.+K......e..+^..2-]....k.f..^.:.....:o..;..aEE.....}....oHB8w."k....G.[@.).....Z{,{......n..c}..v,.Q..l...N.6.A`...7.....?i..555z..'.../T...`...Lul.0>..?..p;*..wlt_[,{x...Vgg.9..V......Y..'.....?0.

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	25
Entropy (8bit):	3.733660689688185
Encrypted:	false
SSDEEP:	3:YBECZDZYn:YfDm
MD5:	D46578B2285409040C0A187E99463AB5
SHA1:	F9F98D780E51C6A123AF57D7E7ECCFBC05E14B53
SHA-256:	658D3226AC092BD10F4EFC2D30750B4A2434040CD3EB403CB87847E91772A500
SHA-512:	D996CD9A6258C1C1A0C72C6EEB19FCC5C214B53806F6CEC5C4500F7ED42C2963919C36DAB7556FE1073619BC067ED2D875F2DE050772AA81131F53C42A9EF8C2
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/cookie_disclaimer
Preview:	{"data": {"show": false}}

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 221
Category:	dropped
Size (bytes):	200
Entropy (8bit):	6.841014064623295
Encrypted:	false
SSDEEP:	6:XtqDe7vzqnoDf20BZm/6EIlKTOUgo+F8Rl:XSA2gs/6EIlCLo8Rl
MD5:	751911295BFFBFE07B94E21C19D23E50
SHA1:	CB4BBFB5C73B6A38FDC2DE7E55D32AD984D0106A
SHA-256:	413AC989E713AF6DF5BF755FF4063A782E139E0C8B666836508DCD4C03370EA1
SHA-512:	92F3AF4802BB5F6F208A7F8B68E3BE742231C68CC5DF207D3B6BC0CFC335DF202CEE4C04AE11C74B10ECBCF5B7AAB43C7251DC5E0713F85C30D986DCEACB5CC6
Malicious:	false
Reputation:	low
Preview:	..........L.;..0..w~..u..TPj(.....VJR..J...b..N...G..[...Vafz.k.....{7<.Z...!...l\|.\...Q..3.8....dDPJ...j.z...9....Z_....B3.a..A+<...R@..".....5....,.E..n[0Y..(.$.H.+.}.`].u.N..[.\|.........k?....

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14712, version 1.0
Category:	downloaded
Size (bytes):	14712
Entropy (8bit):	7.984524638079703
Encrypted:	false
SSDEEP:	384:J1xXvtvezpO6syafJ+CnNcxHGoY/7NazJq:dXvFysJfcqNqmFDNaM
MD5:	3AFEAE0D768769F5E5F30AC9805C5B70
SHA1:	3ADA17C2B462DB3E7A1FD85C3F4670DFE7704F4D
SHA-256:	0D0A6262C545E8BBC895116E5AFB22579C468D7ABB77E378F377D6FED57C1DCE
SHA-512:	71C361AC0D7B72B222D4F087B46D1BEA318ED6652C4D37EC3403F0B0616482B5040232E06F2FCF13109CDF6151DC209E882C0DB40B2C6ACE4E2E0292FCDCDAB5
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/2121f4aabac6fbe523ec.woff2
Preview:	wOF2......9x.......8..9..........................n..<....`..b...\|.@..d..6.$..D. ..\|..4..v%.m.... FO.#F"l.d..#......?t..'$.2..n..Ye.1$..]...$s..W.s9.<%.L.1}Yy.6...-. b..[......7!..<K.W\|.ij.f..?.\;.....N.$..T(.}.9."0n..........g)@.WE..@.....ZV..=U...;....}.:.t.H.B..H((2.E%$.@1...s.]..R]T..2..vQ.m.7....bm....T.....To.w..v)...H..).B!@..,.zB.ev.....3..L....[..z...\f[...BUV...^...0..8.....D.......\.$_e;.._../K.0.D..0.@..`...mn.....b......h..#.n?.A..}v.l..]yq.......].#=N..9p..9b.8i.!Hl......(.p.>.....{..`.^}W..Fc.O.~.....f..a.%..k.I..e9@Ov.dH.M......i.T.....K.x\|L1C..j..r.l..#.l/...=.Z...e...,k.<...A.A.I..]..@._...z.o.f2.....8,..?..qDUQ.S....a..L$V........K.d.F=~Ga..`.T.H......e{\...^..4cap...o!`9.-.d......._.k.Na..@.......`>.d..E...N....!.DE....`e.)P.R......Q.H....FA0..[U......I....d.......y{...J^...........]#...kH....0..}..C.\|b}.n.....7$c. ...........y....-.0...}..D..#...>}.Q.....*...=R...?.4....n...5.!93"/<9Ao.v.e..Jw.S..0..RK...L..k..)....-...M.

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3608
Entropy (8bit):	5.087989595267184
Encrypted:	false
SSDEEP:	48:Y1GSrjGS6US2CZrYrCat6lsvBwzQO6/irp/SBKkMyFN+yo9zcAArEypYLR29nB3:vS2S6US2CZ+Caftv/ir4BQvzaX4ypuRQ
MD5:	D4A17D4CF0D1AB5C3596E10C40D6366C
SHA1:	122CCF07E9BF14B36FD0B03CE438CA2CFF0D8CF9
SHA-256:	58E8D452909E661292EF32406954C2683063ED954B17E71F862E4D796A1FF868
SHA-512:	4FFC616297568D6A2F1A933119466E2632BAC61EC5B03724088C1FC2CE465E82007317BA7DEA353C76B9EE78272745C24D452A72BE44A800BF9947113CA981BF
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/domains/ghabovethec.info/associations
Preview:	{"data": [{"id": "ae52459f771c9ef1d8e3b9adbd82bdccfefd44dc852fe67b3d7c57aa1d86d016", "type": "collection", "links": {"self": "https://www.virustotal.com/ui/collections/ae52459f771c9ef1d8e3b9adbd82bdccfefd44dc852fe67b3d7c57aa1d86d016"}, "attributes": {"recent_activity_relative_change": 0.11077923218835095, "collection_type": "collection", "alt_names": [], "ip_addresses_count": 0, "counters": {"files": 0, "domains": 663, "ip_addresses": 0, "urls": 0, "iocs": 663}, "recent_activity_summary": [943, 861, 875, 1496, 689, 425, 1007, 1005, 986, 920, 904, 674, 716, 1143], "tags_details": [], "private": false, "files_count": 0, "autogenerated_tags": [], "status": "COMPUTED", "creation_date": 1720423093, "origin": "Crowdsourced", "alt_names_details": [], "last_modification_date": 1720423093, "domains_count": 663, "urls_count": 0, "description": "yhgygnygiyufgiygi", "name": "ygiygyghghg", "tags": [], "top_icon_md5": ["7f7637575263cb7859dfbcd447d5382e", "008b0d98aabf69c4bded122ab4318173", "329529fe

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 28553
Category:	downloaded
Size (bytes):	9663
Entropy (8bit):	7.977102958993865
Encrypted:	false
SSDEEP:	192:4ngAjet7FCy2rYJ58EAn/a8xM9To5Za9XdyVkHmcu:4ngb7FCRYzazA+aF0Vqmcu
MD5:	258BF10A6F5A9E040108C7204576E9B7
SHA1:	D4A5F8FA4782C776093622266A0D2C73E5AEC25B
SHA-256:	14B554703713D9BB31E4B36867C25FFB6E0CE0FD216DBE8CF73B0277AD4728FF
SHA-512:	7F2EF8EE2F2F252FD89AC7E89AD66065A7ADD8EA28CCFE028DFF91817DCC265C9980F1958DB73062210ED28132EA50174D67F473EA4D8F3CBB43B5A204662FB1
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/74278.df011db4b71607f93e04.js
Preview:	...........]{w....?....[....d.M.t.N...u.)%.........w.....z8vr..s..&"^..`0....+..{%.p..p.L>^....y.%.'...N.lw..g..i....g.m....C.p.....[s..#/.hR...03. ...^.m;.>.n......V...X.F.N.L.YP...n7.....D.wr...eh.f..H..ErQ.4H.[.b.,.8... ...........,]...y).I.-.4...a>..-3.f..7......y.......2w&i...N.U.......8Gg.x....7....Q.h.V.........".R{.<.... !....R{..b.%..=K.=S....(.z........`..yn..B$.....x.....$M0[..... ..nIa.)fQ....<8=[..0^...o...'.b.b.".V!Z.....&....X..QV..N...<<....../.U......Y.\..%.#.({T.m..g.wQ.t.L....#...sX..B.f....^]..V"...e^.s.6'...NE.F...b.....W.h.Z..`V.c.J..0.._.t.\...).....XL...M...J>7d.=Y.....8..Y....&.."D.!......_.....qA..Gp`.C3..W.$C..=4U.FSM...8.5.b.....5...i..!.#}..'..6O*........y..0..oI$.,...D.-....k.L......(H.n..)..1....d.[.....=.W....f.B...%.1<.tK.V.....".\...t$...}0^dYx..B.....i,.d....m.....m.rr.M.U...d.mmV.+..e..N.J....]..e...d.f.F.{{.x.w....S......}..yy....9..;.......?...>.+.......{..A.A...=....lG...{.v....M..

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 22141
Category:	downloaded
Size (bytes):	7439
Entropy (8bit):	7.971452391374528
Encrypted:	false
SSDEEP:	192:SY/hdysLAoKPCGJNR2DRqgPvCUI/jmAxMd8dUmf+piUWVLTEYIve4s:L/hoQw6uMRvCUmmGUA+pirpIYIO
MD5:	AA9305413744D4F3D69A99FBC532D23C
SHA1:	E8E652214B31631AD480CF5D6AF257577479FD2C
SHA-256:	7990E6EE2A4E81EC36DB5C9D786971C0BD502161ED33D2EED406582033FF661A
SHA-512:	12E2621F0542FC3728219EB3264C5B9016D0579D69EDC98196A423D5F1FDC63ACF2483F946A67292A53448B29C4AC548F85CA5E02D02C336615AE1315DEF8596
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/75884.d7767dd34ca82b896517.js
Preview:	...........\{w.F...~..dg!G........3.x3....s..>DH.(.....a...W..%.3y...~V..K.-2aey..y..h.....o....6........#}.?~.n..E6...p..v...%...s[.acp...R+...v..;h..>v..G....a....vX?@.A.a..o...t.......~.aG......v.M.h<l....t:..}hu...X(...~...F...=j.s\|<....Z..f-h.n...5;....2.N...(..x..?.6.#.[.....C......+............~i.........W.s.g................ ...........$.(....,.z.t...8..H.\|..O...~....`.<K..F?.?w'".w...&s.../D..<O.:Q.....z-.. ...dl].q..O..4..}n .$.r..jx.T.{,"0.....A..uZ...y.9N......u..z<..).z..'..0..........q.E.[...$~.D.2..0...j....(.....e...E.d.........O.h,...Sw]..l..a...p..>\.o...I.<._a.A.......V.X~..G...59....+.tP[.Q..}.....c..0..r}>.\....."...M....9..z9.u..EV.c............hv7'.X.$.M..jbB.,..j.,.....,..D.0%.>.W.GW.......8.....Q.0sO.[...q.Z..0JP....u...S/...Ik....A.s..:....y>.."...b8.^ .....`.....g.....7....... .....B........8..s...u._..3...'.9..R......n.f..U&...J.I..8.."...y2'^.& ...x.....{!.."......S..]R..".S.4-Q...l..._$.Q...$..Oh....G......

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	747
Entropy (8bit):	5.060991401521376
Encrypted:	false
SSDEEP:	12:t4TtAhJnBnMs4EEBnMQ6B9Pw6HJWsN5IS0kH135NG1wbGjB9HJD+jOFtQfjB9PwQ:t4TtA7CR6TPFHJf5v0u13C1wbGjTHJ6h
MD5:	651BD8B292D3C3157E6CB6750A4708C1
SHA1:	89D1DF90DE2B51563FEFA4A3D243312B514D11B5
SHA-256:	104B0F3C653DCC362AD350F8F18B9B2F37A54A9765E8245A87BB43C774490F43
SHA-512:	4447958CF9AD86009057BF5FF4E1AA77939A8576D893BBA3FA6E5CD48B2C6DE27FABDE41FF5C0E4C02EAA4A42EE3F664D5FC869886CC8FC2D538DF8300D88955
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/images/overviews/ico_graph_2.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="150" height="150" viewBox="0 0 150 150"><circle fill="#3B61FF" cx="75" cy="75" r="74.5"/><path fill="#3B61FF" stroke="#FFF" stroke-width="4" stroke-miterlimit="10" d="M92.1 107.6H42.6V48.2h40.2l9.3 8.4z"/><circle fill="#FFF" cx="58.8" cy="78.2" r="7.8"/><circle fill="#FFF" cx="72.2" cy="66.1" r="5"/><circle fill="#FFF" cx="81.2" cy="81" r="5"/><circle fill="#FFF" cx="74" cy="96" r="5"/><path fill="none" stroke="#FFF" stroke-miterlimit="10" d="M58.8 78.2l12.4-12.1m12.5 15.2l-24.9-3.1m17 17.8L57.4 77.9"/><path fill="none" stroke="#FFF" stroke-width="4" stroke-miterlimit="10" d="M92.1 86.6s4.7-20.9 28.1-21.2"/><path fill="#FFF" d="M108.7 83.7l-3-2.6 13-14.9L103 54.3l2.4-3.2 19.1 14.5z"/></svg>.

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
Preview:	window.google_ad_status = 1;.

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	157
Entropy (8bit):	4.85289228301759
Encrypted:	false
SSDEEP:	3:YBECHJ0HyzJVAs2sDVDRySLAXGLBIvNFT0jLMLMvJJM+UDxicYlMmIV:Y5JiyzzAhsdLA21IvNpkvLMfEblVIV
MD5:	4CA8B5C5BF814911DBAF32CFD8C63560
SHA1:	3E5344A655F81FC354FB951792261CF3D09534BB
SHA-256:	AADF9E38448AFE1DFB6945041EB648914C07363080FBAE7667B3F770EDB61B8F
SHA-512:	A06B63FFCD561AECA4D7E5DF699FAF1B74F9367D5347A41B07842884485866FEBE422E10DCA60456D2063B2E321AAC0B20BC4F6814EB8D03A46BBB7D72AC8211
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/domains/ghabovethec.info/comments?relationships=author%2Citem
Preview:	{"data": [], "meta": {"count": 0}, "links": {"self": "https://www.virustotal.com/ui/domains/ghabovethec.info/comments?limit=10&relationships=author%2Citem"}}

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (17825)
Category:	dropped
Size (bytes):	24221
Entropy (8bit):	5.386874835616361
Encrypted:	false
SSDEEP:	384:VDWRv+XamKIJoX7pw1XnODJBa0dETJBnwnUuJfjg56:VqRv+XamwXuBOLa5wn+o
MD5:	7D42EE6EC7E5892832B6414789840CF5
SHA1:	03A3899E7A2402A014BE9F64C2493700A99D61AC
SHA-256:	81F5E8D412C63797E959C173456BDDF1EF5AE50FAD72C2DE4A135DB989758D37
SHA-512:	6A019D99B216F2EB00971F02FE85425D2309DD5CDE544CCBD4E9425DD18436DBC19DF11EC2441CF1A2B676F4640876A4569C763EAB9121F149F61590017B8545
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[33748,25072],{14284:(e,n,t)=>{t.d(n,{p:()=>s});var a=t(16645),i=t(56717),r=t(44052),o=function(e,n,t,a){var i,r=arguments.length,o=r<3?n:null===a?a=Object.getOwnPropertyDescriptor(n,t):a;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)o=Reflect.decorate(e,n,t,a);else for(var s=e.length-1;s>=0;s--)(i=e[s])&&(o=(r<3?i(o):r>3?i(n,t,o):i(n,t))\|\|o);return r>3&&o&&Object.defineProperty(n,t,o),o};let s=class extends i.C{constructor(){var e;super(),this.intelligenceAccess=null===(e=r.NU.currentUser)\|\|void 0===e?void 0:e.vtiAccess,this.user=r.NU.currentUser}updated(e){e.has("_large")&&(this.small=!this._large)}};o([(0,a.property)({type:Boolean})],s.prototype,"intelligenceAccess",void 0),o([(0,a.property)({type:Boolean})],s.prototype,"small",void 0),o([(0,a.property)({type:Object})],s.prototype,"user",void 0),s=o([(0,a.customElement)("generic-overview")],s)},67119:(e,n,t)=>{t.r(n),t.d(n,{pdfIcon:()

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14428, version 1.0
Category:	downloaded
Size (bytes):	14428
Entropy (8bit):	7.986645021520641
Encrypted:	false
SSDEEP:	192:FNWNJvsaeIxppXB3wmSqUvvdnLc/f6bcoVP8p/ZJujoIzkVU6wvl+TBRPs4d07uR:wJvsajpdB3rjyg33oipRzl+YBZVdiU
MD5:	48C84C2B8B2B76AD4EA1C5E60FA757A4
SHA1:	51847D11681245526605DBC719A0AC65FB2277F1
SHA-256:	EC190E2F6CA2B272958E593E24827F3E51D2352733B509CBE1E30868B875BB7F
SHA-512:	25B3BE06B12118731A3BB54B2B2D3D1DF11D7FCE5A05223F25F48E6C3113BC2CB834A8C43840FB4A89FD8A60BDFFC7F706F8085FF1786737481EAF6C950F9601
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/c48548105569470b2222.woff2
Preview:	wOF2......8\..........8..........................n.......`..b...\.?..d..6.$..D. .....4..u...q;.....0.a.5.....q .1.:..crC.`......."w..6f.Ei8$X05,D.`JA..Jz..\|..}gK.e....H....a..R.?..u..z..].8.....m&.\u.=..l....$/=..........2.#...O.`............7!.$$$..1...H.R.Y...}......\|..c.1...{..\..s.?.U...6.]......X..b#..0P..0......\|f}..........."......E....TH,.. 0Bs.\|..7@...^q.....6.Sa.d........9...N.f....%s.y?.R.{...s..n...d'.s...^V.K..h_.4....W.kx....a.H.3.LH\|!(..r^..e..<....h...........K.B......r......p0;....._gU......w<..u.x..Kqi.....I_.....H...Vs.P-XV..S...z.1B... .$.(. .pc.?]Z;.....]R%E....../..^.I&.....v........Y!^.:......T...+:...#.&.u....P.7.\|?A....J.56\|......1.j~.....K.s...................+...C.l.?...}.3.u.v../..C..`D,rC)eC..A0.V...@J..Zj.y...v..:...7d...aF..D.1..l.Q...>]....."..dv.>.....*.0...+.}....o.....Kh..7f..V..A........M.B.....K...].!..E.c.V.?7.k...Q....]H..N!.`=.n.....\.m.a./.\|q..,..S.%]......E.UD.G..;A.@......F......[...0Ka...T....:....f#%".(.

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24102)
Category:	downloaded
Size (bytes):	262652
Entropy (8bit):	5.553085934527067
Encrypted:	false
SSDEEP:	3072:KgYpTAXMD+ORpG0X/gDwPAjIJ8UUlPLKOZ0DmoMfgQJyNz0w6D:KMXMiORTPmPLoDmoMfgQJyet
MD5:	D0578166423A15998EDD1ACF01461015
SHA1:	A28F6C35B796FE8055652DF7F263C7C2DC26F440
SHA-256:	C19A96883FDE4F9575BEC976BB6256033EC306C3A054A8240A3CBDD5D741FACC
SHA-512:	3C66F4B7990B43909F32673E3C6431AEA06369FA9A14B25B1DE8109F99F46CB778D20DC2AF7FF5B06522AA573171DD04E122FC43A92B239D83F8F303A93675B6
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-KFBGZNL
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"54",. . "macros":[{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__remm","vtp_setDefaultValue":false,"vtp_input":["macro",0],"vtp_fullMatch":true,"vtp_replaceAfterMatch":true,"vtp_ignoreCase":true,"vtp_map":["list",["map","key","\/gui\/search\/([^\\\/])\/files","value","\/gui\/search\/:search_query\/files"],["map","key","\/gui\/group\/([^\\\/])\/users","value","\/gui\/group\/:id\/users"]]},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"user_id"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"custom_event.elementId"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreE

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 70187
Category:	downloaded
Size (bytes):	19478
Entropy (8bit):	7.988664771602118
Encrypted:	false
SSDEEP:	384:1t2jKVmTz9wTSZSLo+rrTDQuONwwVYTh5PJhwrroAcPDCiM7HMHK/ZE7mtw8:Fqz9wDo+3O/CjifcPDi7HD4Sw8
MD5:	16C8F8DC9A7F16C0DC5B8AA6638569E4
SHA1:	084B9672F32D4D2275C19239A04AF38C53B0C101
SHA-256:	2DE5099A0450D90F7B4651B74C9D8EEB0457F86414760B18634690228FACBE9E
SHA-512:	3BE0E784E84A3906E97027E01B86A39A499087C8591CFF223C19B9F68BCE7BB88EA291F943FE3BD27C1475339A9A5E184C9F2B683B3E519F997CB807489E006A
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/38304.8a071d9cca91b836aa99.js
Preview:	...........}.v.G...}.....O.....d5..kZ.<".9;l.]..DY....b.........YYU.I...sfiw...gdddd......:.-....z..9_..s?\.........-..\|z..5k-...wjg..l..r.&.2\|.).....U8NJ.W....r...n...N...!~v..f.....n6..wAe.V...g..F......(0...z.r8..g....a0\|.pO...z1N.h!.q..F..7.u....$.f..2....y.e2X.g..p.....G.........W.2X%...x...I.....axQ.E\.4.&.. .p>..3.}....P..&.8Z.IP..I2.=.f...:../...n.~.x1.....J9......ge.X.Y.e.2._........T>}.+.. Y....=.=S.....".T.\.{8..q..o.......oZm..\|X...3?...&.....wa.f..d7\q.....x..=.3....4.=........Z..d$Q...H.N..W..v.[...>.K.0>Y..$. e.."l.>..p".......g5.4..}.,...ju.W..x.n..h....jBuh.\..9..".I..Y.'..2.....x..q...<...\!..Y\|.T{.fQ..e~./...P....A.cYa].n..`M..F.4....O.......$.r....U.F.Iu.....]VG.............Mm[z..z]..j......;f1......mZ..@.`.\.....+."...C.".J..7..K.(...*.Kz..q...0......I.0C.T.....+p..t.U...t...._%.+.<ZTW..Qd..L..r..K.K..'.T....N.x.]\....`.....o.......Km.6F..].K.6uK;&..QZ..A.K.._.K.H...0..L..04~..@......f.O&...}ySr.)../....r..c...

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 435
Category:	downloaded
Size (bytes):	230
Entropy (8bit):	6.943328259971729
Encrypted:	false
SSDEEP:	6:XtPowUfLxjEWnwdxMc9UYJU+XQ2jwQx1OGZuVp245klaamXl:XhZUfLVtcTJU1iw82p24qls
MD5:	392106477FD3D6AD6F0481D54A09B718
SHA1:	DCC2358434C1E606756D9F1996F2DB06A9B6AE43
SHA-256:	4E3AF5CFE576087E518693D2AB2F088A59DA8964ACB39E4E573C3AB5264CEE7C
SHA-512:	958F5501518A5B4863FC7DB93539E6A9CA3590777889380B47847347E85A7E021B753C8E3A06AD8AFEA4B648CC6FBF145A850E0D69B15F4F284DA755CC82B21F
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/manifest.json
Preview:	...............0...<.2.....a..c.L\..Y.....:H<.=..~.....1.54...?I...8P\|Ms......U$..IRIl..4B...e.....F\K..%.....'V@....t.. K....>.cC..tK6P.L...&.%..I...W..:....\|...g.%.o....D.d.O......L.;z.K..SX.F......[............EK....

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	193546
Entropy (8bit):	5.066438096706413
Encrypted:	false
SSDEEP:	1536:+mGdIlrd7IZjPiiDj5PGS2IJquLBUdIYCKEqFk:8qS0jrm
MD5:	91B74D5A84877D2D1799AF61E669C046
SHA1:	51A6896DF21F8117F81D9F2752593154A15A5821
SHA-256:	9DC3FD9847F00022D0D8EE1AD698CB2EFE644DF754475E9BA7D8453B3462DD68
SHA-512:	C92960C5733BEE7CF049D2EECECB4032F3B7EAE2713BC7C713210AD4C901BEA4B07BDD97DCC08B9411CFC789F52CFFE1EBDDC8B222F6455D7AC86BE67EC990DD
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/domains/ghabovethec.info/communicating_files?limit=10&cursor=eyJsaW1pdCI6IDEwLCAib2Zmc2V0IjogMTB9
Preview:	{"data": [{"id": "0339f4bebd4ad2be40a5811b6f1eaae5c25d60f2fff9c8a81e3f44f555c691f9", "type": "file", "links": {"self": "https://www.virustotal.com/ui/files/0339f4bebd4ad2be40a5811b6f1eaae5c25d60f2fff9c8a81e3f44f555c691f9"}, "attributes": {"creation_date": 2355737760, "sigma_analysis_summary": {"Sigma Integrated Rule Set (GitHub)": {"critical": 0, "high": 0, "medium": 1, "low": 0}}, "reputation": 0, "names": ["MaloValo.exe"], "unique_sources": 22, "pe_info": {"timestamp": 2355737760, "imphash": "f34d5f2d4577ed6d9ceec516c1f5a744", "machine_type": 332, "entry_point": 5382126, "resource_details": [{"lang": "NEUTRAL", "chi2": 82599.36, "filetype": "unknown", "entropy": 2.815477132797241, "sha256": "56f5bea4e94abdfd59ac0e0c987a8c43f8a007a757f2d91e3f76ad037451f24c", "type": "RT_ICON"}, {"lang": "NEUTRAL", "chi2": 214184.64, "filetype": "unknown", "entropy": 2.605686902999878, "sha256": "d083f27713fcbeb0bbe6aed50a58f52cc6973a92302c670e2b4463723322b4f9", "type": "RT_ICON"}, {"lang": "NEUTRAL",

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 23809
Category:	dropped
Size (bytes):	8748
Entropy (8bit):	7.976606400962137
Encrypted:	false
SSDEEP:	192:mrlgVV7htvREUilcucwVoNdx7h1KTTuEmoag+R2:mruD7hRRVycLwVA/7umzNM
MD5:	4CDF96852CD5A72C52211ED323F2FABA
SHA1:	B4628B3ED5710F1CE399BBA9C3C9774DFB26FC6F
SHA-256:	DFF79CBA648CABBCF4590244801E1E5DDA9D9C933B37836B066C7E70E7435CBF
SHA-512:	4B5ECB240AE8DCA7952C6A9034ABC6F1BDDF4D9BB725423A52BABD213F9F360D6FC3DBEA0B1DF36D98CAEC499D2E7574A7178F4839E5BE6A4680049993E0ED98
Malicious:	false
Reputation:	low
Preview:	...........\k..F.......W...H .X..v..v...9~..Z..........[..B3B....qTTWWWW...[.B+.".+..W.tnm.t...g.Mv~Q..I~[EI69.......zS.{..:....1...g.]/...p.....1.......`l.];.%...9......o8.....m.....C.@.00..=.........o.. .9(........1.......k...(...mc4F...8~...0....6<.......?..c.aC..{c.u}......(q8.......o`......pV......zH7.N...........H......P.J.\..\!...Z..{(.......;&u....k;..u\....r..k@4..x.:..Tz.CK........:.t......-BJ..l..{..E5Gc.Z....#.......t#.............Q\......h.!..5<4..v.z^.\|0......(..<....-...p<..}#...`.7.>j......=..........x..o....s~.4..63..scm,..$.<.O...d....3Y......%E.b..YUZ.....%V...(.l....$.G6.q...+k!....OE..Eu.X.q.....Q...4....I...Z.\|.....y...k..Y3..ET.~9Q.....T...s.F.J&...tN....41.~/..&......I.j...~X= .2..`.............{..{.T-gb.d....g.7...$N....e%.Y.e..z....u.g.[61...]n...eY......(.M.KQN~. 1Q.)i...l.G.V..)TSN.on...XC3`..JE.Rd.z..Y.......~/...o6..r.z.ll(.[...J...j...?.K.P..).sTv...7.....S/.j2...6gQ"."Of.....B5'.].pO..#{.6.O.$/tW...M.D....`n.

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Reputation:	low
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 1554371
Category:	downloaded
Size (bytes):	472615
Entropy (8bit):	7.998478957490496
Encrypted:	true
SSDEEP:	12288:KxPzmDt8gBETPHdcCPPtjT94dsGlwk0QKp:KpTvTFjPlT94SGlzJKp
MD5:	00F310C2CA2A8F95031E0CC28B51D2E3
SHA1:	5B6A614B22A6C4DACAACD1007B84D3F50B1F13F1
SHA-256:	77F03BA2AFAC0C14A645C4349510B68C11B9346B58558AB41291AF1BBA2C2B83
SHA-512:	09B65810110D200B70B3E9AEA71E680CC32305C5EC0AB65FDB168BAD57FA3DBB6068F08905A456A94EACF0FCEB602D9516D61FABA90F1F538BABDEEB48B50175
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/graph/assets/9.main.bundle.1b530cff308d27516909.js
Preview:	............z...7...Fp.....G.MKL.\|>d-;.0\|..0 .....%14..E.......<3......J.8....>U..N......tx..^.~......~......]].../...2..w.....b>J....v>..y}..q....h.-...v....4.%..n....4.].d.h..I..b..{.x.......p..(.\|=.k:....Q...J.e.\|........l......)=.N...R.y+..I.....u......o.~...j....u.....l6...).....U....,....S..Y:......j.x..-.......2..7~.F.<Z.gw.0.@.q4.G.U....Q....m.F.\|.]...$..u.,3]..j...}.).....Q.uz.B.[..,.H:x6?O......:..O....f.d)XEyL.,^..LO...5....`...^.Y,.L3E....4.4P.....Z..Y.._VOM..g5&...0....s.t.H.....?2<.....#..H.J...U.[.x...%f..(.6.Z..t.^....b..N4.4.,.]...{i.D$i-....P..k.1p.=..uAGDB.l.....$.$..hG. .D.y..r.{..D..S.E.h.".6.[ZI".co....ulF...<.OV.l./..~.....1..lp.;..............h...t.....)I../...Ti.yk:.k......_.Q4.B`..>da6....l1z}B9o.e6.%.f2.^....t<...Z.e.-...A1\.k.... .G....M$1...qv..{7..U:....d>.NH...........-..d:.fA..7.R)......fs.j.,.gy..G..r4K....s..3....Zi%......%.Q..~=..2.. ...h..hP...%U..O.z... .m.....z.u.U..;.....y.LQ

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 19296
Category:	dropped
Size (bytes):	5980
Entropy (8bit):	7.971059673572338
Encrypted:	false
SSDEEP:	96:E4NAQ9o/Lig0GYTUpv7ty9HJNxpZjfS7mcXo1Xv2kc99XJfpDVGQVBJO/HlliPzm:EZL4fAJ7w9Hv3lfS7mcYleka9LVGQjJ2
MD5:	42FC46104768142F2F90D85B5AC358B9
SHA1:	EEC3F8C8419F0C75E542D1F1BC889A4190375B99
SHA-256:	047067160565CF0C427F8852ED3CF994313DB7C67DA22A42C975B97FE3595950
SHA-512:	9FD9C4FD78ABD63D42E8B3164BC4CFE1F0998F737FA2D567EE4B31443C5F3DB115F6E6ACECD0D70D5EF1B17B3488048476FB4308AEADCEBA9CEDF38C74A854CD
Malicious:	false
Reputation:	low
Preview:	...........\[..6.~._.h6=b.dSTK-Q......d.k{...3.HHb."yH./....+\H....e.)Vb.Q.B.P.....Kf.U...h5.Y.u..&....czs[.............?.N~,....'.b..:y..r...Y..~y....rb.n......jq.^.V.....jfZ.\|.{..gZ%.........&....k:.^..a..[..Z..[;k.../.N.v.=.a.g........`.....,.J'a..c....O.I.^../.....YX9;V.x..g....feX.y..c......x.q..z]=.,..o.6A...b..s".fEP1.\K....w..,........U.r.R.6...x.~0/...zL....o^...h....4?~,.U..c..._\...r....)S.......\|X.IP....X..F.\|.W.$.$x...zs.I$.<BLc.qj.c..q.A.......l"ZX.W....C.5.q.}.Dq...........K...x.Y...0.G...6d.e.Tqh`U..`...B$c..cZ.[...[s.:..s..o...,>Q.X...x},....-.0....\.iFq..U....<...+^giUdI3...I.4..........Cb.....z..m.U.0.Z.G....Uf...=.^./6..s5H..#..H.n,x..I........!(...kjKU.N...-0.uw.&K...U....z..2..P.Z4.4^.i.......Y..<O...t.B./.2-.i.pq.....4..W.;..:g..{...B..Ab..4.r.E..,G.).Yi..e.&.z.?~..I@k..k...q..x.NK[#..DP... (...S++W..1^D..`.%./..@...Kc@.$...n.e..c.@.C".S,a.?..a...;$.;.....g....o.ll1X......Z......v'.aC..L..H...."...i.../..D.y..H.6..=

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	923
Entropy (8bit):	4.981694052533877
Encrypted:	false
SSDEEP:	24:t4TtA7CR6TF6HJadB7czVY2jTF6HJiwdlE/1J1BgZ1V1oGjTHJ/lhc:k+6LJWB7cQJZWgLJNhc
MD5:	155868C2C8DB18F85611D2BFD7A7617E
SHA1:	C80E1BDB19573EEA60FCB1BCA49E153D2E75750C
SHA-256:	7845C3AA1A87F99FC02D7D228ACF3D7145711D3DD7E0FEF4DC79DD8E7B38BA63
SHA-512:	6DD4CB896E013B7465215379688847C23C26331B14CF0C90D02026EE88FABAE6D9D1BEB37D4EC36A0B47E62597E3EE013859E85E9416AD26C7EFC59DA9EEF0B7
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/images/overviews/ico_graph_1.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="150" height="150" viewBox="0 0 150 150"><circle fill="#3B61FF" cx="75" cy="75" r="74.5"/><path fill="#3B61FF" stroke="#FFF" stroke-width="5" stroke-miterlimit="10" d="M106.9 118.5H43.1c-.9 0-1.7-.8-1.7-1.7V64.6c0-.9.8-1.7 1.7-1.7h63.8c.9 0 1.7.8 1.7 1.7v52.2c0 .9-.8 1.7-1.7 1.7z"/><path fill="none" stroke="#FFF" stroke-width="5" stroke-miterlimit="10" d="M54.2 62.4v-10c0-11.5 9.4-20.8 20.8-20.8h0c11.5 0 20.8 9.4 20.8 20.8v10.5"/><circle fill="#FFF" cx="62.9" cy="88.5" r="7.8"/><circle fill="#FFF" cx="94.8" cy="79.2" r="5"/><circle fill="#FFF" cx="87.8" cy="91.6" r="5"/><circle fill="#FFF" cx="83.9" cy="102.1" r="5"/><circle fill="#FFF" cx="58.1" cy="107.5" r="5"/><circle fill="#FFF" cx="70.8" cy="104" r="5"/><path fill="none" stroke="#FFF" stroke-miterlimit="10" d="M62.9 88.5l31.9-9.3m-36.7 28.3l4.8-19m21 13.6l-21-13.6M71 104l-8.1-15.5m24.9 3.1l-24.9-3.1"/></svg>.

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 48913
Category:	dropped
Size (bytes):	14144
Entropy (8bit):	7.985797598409672
Encrypted:	false
SSDEEP:	384:T31VdvUByVLAjwdgWfqxVCKtHna03pcExaqpIn:T3Z/VLAcgt603pcEQqpIn
MD5:	C8997C40D1DB5C6FBE530774A6DA0042
SHA1:	D68E2285F1954358C6CCB5908161622AF02F382D
SHA-256:	187BFF9A6DE8D601CD85C8A7DE2D5CA7AD05B2FE863289DDEF8BB83BC6382422
SHA-512:	89880F8C5587AD91B55B56D291C51CDADDE0B0B0EA45F4A541C996927761A4DA47D7F0FFE33AADC92207D0F17A9999637A12C0A4499567AC4A8E005C61F626D6
Malicious:	false
Reputation:	low
Preview:	...........}.{......W.L.....;e.qd......\|.....I.DE.,.JVh........../..su.........."/..x.7..Y4..W.p...Nf...e.n..[..rpK..o.[.j..o.v.;{...N...............5x.I.....$.7s.s.&W.,Y..h.$~.e.y.l...u....s..q.s..u\|..^:H.....n......:...,.2/..G.q.lv.48m5.#k.wa.......f+}.v.8........v...j.....H............^._...N...C...;...s.x.;.C.1~.=:<l.#.......!~<...=j.+..w....t....f.&..9.....;...A../.m...m......h.(b.M...r...R..O[.Z@.h.t.^D.<...r...u.p.q._....`.>N.....Fy0..WW...J..Q6J.U.`....8.4..7m....J&..h2G......J]0.FI..Qk9P.M...8...'.........=...:.a..j..mx.....4i.qs..g............q.:N.\|..=....._.r.M.e.W....-..z ....({.,..2z.....#x.......$7Be..G...&[.}. ...[~>...2...A.!.-.1~.J.<R%.y8.f.\|....,.Gg.&L.pp....0.G.v...z.e.P......e.N..S............)..@....~....f.b.j^~...L.{.......<I..0mx..A.{..=J.......6N...m<..^..u....I$....y.....:...0.....x.Jy0o..1..B5.mkla..+..bk6...a4.G.j.G...........4...+.L.\?.....\.KxS..(.......xX...1l..T8...<Yz1h.....3.<..zA.....`.f....cL...q4....N.. ..K5

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 98170
Category:	dropped
Size (bytes):	34325
Entropy (8bit):	7.993229831721479
Encrypted:	true
SSDEEP:	768:PdDmcvAB8wtB3JkPCaqKHm9+nOJS9jwloCRSGiST:PdKcKPkPCsn190FRSJ+
MD5:	F20D8515FEED73A8B92424C2B9C67A6C
SHA1:	01642C9B975538B3B219D95ADDE840C09A40E7D9
SHA-256:	FC6BFC6DE25F96E31C0FA01B6C746EF9035900E6A0A1BBDE6477617310D41A19
SHA-512:	5334172621BB287B692617365A83D5135C6FB258DBA24581DCE0DFBAD7A237830635981B5AA8409DDAC4D1284A09E8C22C022D371A7F7BC0572C7F6F04B92FA5
Malicious:	false
Reputation:	low
Preview:	............z.F..{+4..4A...2%.....8.....h4..I.)@.AK.....{...}).J.[..4$.Q.f.^.<.E......U.U....,i..".....,...........y..}.7O.N.i.....;....\|v....x...h7...a...(i....lR.y.(.Y..H.y.5..t.....".}=.zXne..`Xng#..g....W......Ji#..i#...m.}9M...F..o{L.y....h~.d.7M...x{....yz.....;.#_..a?......+a..ai.o...t+o_.+..Z.`.-....r.g3...N...=.LZ.N.K...(...`.....q:M..+[9u...7jeq.%q........=...A7i.)X.q\\|. ?...WR.lG`......HK..../.vr.1w...o.....<......A{...N.<.$v..`.....\.x4,.."=:.....N%.o..U5..-?e.WI.....qr6l1...G.G.z....^..%.W....~.W.E?>[.Y4>~.W..S..F..^.i...{......z.\|...b..a..~..>}..}.D.......$.NV...it..^...oOM.....4..E.?1..y...Z..y.}...gy..Q...<:N..r..O......'.'..h..D.....R/?...9..l~.D<..V...d.M.....x.....1a.....9..~\4..i....l..I.g..a.%..{qyq..W.'.....r.\.R...]..N.?...7w...K..=)..E/../...V.W..S.0L..M.).Q..b>Y:.u..).I\|y.+.WZ.7.O.....$imD..l~..6A@.m..eO.@1......P{...'p....V...*1uG...E~...'...K.o....^.........+.m..N.'..A.p..W&....G.7C#...h..d...

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 10567
Category:	downloaded
Size (bytes):	3260
Entropy (8bit):	7.936920580670757
Encrypted:	false
SSDEEP:	48:X7C8msj11mZWraxc9TVNZKvRDaBz0CrZQpA2rbZiWQ8ga5qr6y0TQs25q:rAU4Z+PcR6drKppZiW0/WNTp25q
MD5:	49D5164C8090B52EBA13419C061BBE66
SHA1:	4D998D6AD960BD519C949333F3B2AC1A18800E9F
SHA-256:	22EAF11049DFAD23B971C50C8E17B6B120F9DFD790B2EF836D1B58786BCA029F
SHA-512:	7D2F50A20ADC33EDCE6E0D4A521B57B3F5A78374747166ED5C9EE3EF4C1332B582BC0B5EF36B465B6BD54C86A50442A659B0CEAF0FC3CA879CBB70776B556CEA
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/11405.d1a6906c4ce5fc5f953f.js
Preview:	...........Zks.6......v4.%..C..n..4I;ylg..q ...P....je..=.I.z..6..K?xL.x\.{q.....Z..,R...i:...(#...I....m.n....o...7n.........}........to...I..p.POy...."...-.....Kw8#..pz..Cw...+.....R...~......... n~^...,...$..T....p6.3....<7...0Nx.Hj....qD..i.......\|.1.4!.Dpj>].qZP...\|.MD....R(!.Us\|..D)..-.%.QZv~Y.....T.?k.. ...,.R...E.J.....+.TI3..........9...(..r..=.w.-.].^..-.^....m........z..8.uO......{.zL......z..V........x.;=;p.)UV..^...7.ixN...p\pc...<.....3...S.U...'j...'..j..4..P^....4RAB./w.W)2....I...p+....[..v..yF..zE.).v:v-..7.U$.k.j.z..wHS.1&..!...{..<..S.w.......t..:z..a. ?............J...-\|.tX.S.2.c.i....F...C8\.[..Ey.[y.g).J\.M....u.y.M9A....zj.j2.ih../....h\|..B......Y/H......bh.........VMm.4..v0...+.:*4.6]...`..}..}.].cG8.......$2..._.>f..Z..1T.U<#...t..,.B..j..@....=U..m.T.\.".}.i..&R..;l...2...P2....Z........K.2.....R....(]..zy0Q..u..{....'1.Y..B{..@....,...>....Z3.W...$.,.<......<&rn....Hc...Ew.d...[......t.R..B...u+....

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 106022
Category:	downloaded
Size (bytes):	26999
Entropy (8bit):	7.992520735588126
Encrypted:	true
SSDEEP:	768:mgVL48xUpMCv4fTtzaASYum9fjUD4abOJYW:7L48xrTxW50a4abOZ
MD5:	998056B46F653A93824BC63D9578A305
SHA1:	54834FA321E9C8CC08369C833E702B8DAE364549
SHA-256:	E309D55C8940419188091822F3C39D45CF07995DC244B5C4AA86B7E138151E01
SHA-512:	87ED45CA22ADE4A28DB53AA90F4447F02D8454B76EFB836B2248D49BA9E14C24A766D98472CBE6CCCD5BDB41ECB6F2A0D750CFE38A3533C47894EAE47125FFA6
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/graph/assets/main.bundle.dab2e61744d653a6223a.js
Preview:	...........i{........4...rLQ.W..Z.-&."R..h.."!.1.(.h[......4..@yr._&.<..kuuuuuuu..Y8J.(.........\|E..'oZ..a..$......6..C..h.t......._........O.a.;..h._...%..i.D..........4...}k.M&...6VV...bee...7u.@g.&..o..q-.kQc.&.f.&..y\|..O.[..1...1n.7.URo...S?.M..!hyww....9....p...\....3~3.\|._......ngz.\4..u.oc.....yT.p.u.s.b{.I...G.A..7.......n...z....h4.NX.[1j.9......u.....>oNiN4.!.epU..LCV..-..]4M.m..v(.......d.)3...B.O.x.\U..6..!0..hu.<l....Q..............6..m.X..\.Wc..>..;.......b.^..%....N.....Fc.h..7xlS`...f.~..FS.K\|w..W.G...q..^kt.Mc?.8..j....ZIp.G.......[.he.k.D7I...,..N..#......Qf...a...<..:.[/.[..p<.[.....]z/^o^mn..x......g/..F.\|v.........W.W.6..[Ns.....m..^.^l..6F.W..B.+....g.[/..o.?.\..v....o.../....=....M.}<o;.^n......+.......y.v../=....hk}.9.......q.\|k}tu...j........c..y..9....x}..9.\|.].(.#y.._..\|.ob..W.o..9.............^m..1.........W.+.........^{.}...uy..j..j...-g.b.z..;s..O{.d.N..t{.N....B..;.k.y.N8.L....M.b..C.J.Ni%....N.U

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1301
Entropy (8bit):	4.875025663481482
Encrypted:	false
SSDEEP:	24:s9O6MSSsYoxW8+XFc0a1zd2UhARjk+770VA7jqQnFvg9qpqvAQbCFrYM2MC:/SSsPQezhCjk+7LjqcREM/Frq
MD5:	F7EA1DFFEFCF79A9CA0E79741BF73778
SHA1:	BD6AF5A4E0ED9E69A002DC55287D78D433163FEF
SHA-256:	027DA186913D4D43DDDE6125D4D455C99A6A6BA2C97EA80112A42FBF43862983
SHA-512:	B73E7F584C938962A26413A19B3AB24B4C18FC74C1968F3156A12A5ED79B0F0A67E18CE7D4F83B4FABF359FE52F170DB3519ECE926D3933FEC16FA084BE67123
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/graph/assets/reset.css
Preview:	html {. height: 100%;.}..body {. height: 100%;. padding: 0;. margin: 0;. font-family: var(--bs-body-font-family);. font-size: 14px;. color: var(--bs-body-color);. font-weight: 400;.}..input {..color: var(--bs-body-color) !important;.}..#app{..position: relative;..min-height: 100%;.}..vtg-app{. height: 100%;.}../* http://meyerweb.com/eric/tools/css/reset/. v2.0 \| 20110126. License: none (public domain).*/..html, body, div, span, applet, object, iframe,.h1, h2, h3, h4, h5, h6, p, blockquote, pre,.a, abbr, acronym, address, big, cite, code,.del, dfn, em, img, ins, kbd, q, s, samp,.small, strike, strong, sub, sup, tt, var,.b, u, i, center,.dl, dt, dd, ol, ul, li,.fieldset, form, label, legend,.table, caption, tbody, tfoot, thead, tr, th, td,.article, aside, canvas, details, embed,.figure, figcaption, footer, header, hgroup,.menu, nav, output, ruby, section, summary,.time, mark, audio, video {..margin: 0;..padding: 0;..border: 0;..vertical-align: baseline;.}.article, aside, det

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	295
Entropy (8bit):	5.176569032865066
Encrypted:	false
SSDEEP:	6:tI9mc4slz5ttqUgJpZzKJABnMs4Epij9jI6Pw6Hpz7I2p8XVLIo/O:t4TtAhJnBnMs4EEjB9Pw6HJjiXVnO
MD5:	62B6F11C1D78DDFEF1EC723C74917CEF
SHA1:	442B185982B91FC27A9EB3BB74A267123AD09E82
SHA-256:	DF7EA0D93878226A698D9329F09006E477C21C585E2BF31BA41766FEA3CBF64C
SHA-512:	F42EEA39CBFF80E8C5EA440F68752667830E959612F17508CF0FA641DE101C38A322AD214EB4063FD33FD344A82026A5776F075F522FC7CB1DDBF489E8FD762C
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/images/overviews/ico_graph_5.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="150" height="150" viewBox="0 0 150 150"><circle fill="#3B61FF" cx="75" cy="75" r="74.5"/><path fill="none" stroke="#FFF" stroke-width="4" stroke-miterlimit="10" d="M42.7 49.1h16.9v58.6H42.7zM72 68.5h16.9v39.2H72zm25.3 14.9h16.9v24.4H97.3z"/></svg>.

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 391
Category:	downloaded
Size (bytes):	272
Entropy (8bit):	7.092623351227048
Encrypted:	false
SSDEEP:	6:XtT/0triX7slAjTlp6c/As974mgJMFIaOh2xEdGe3uzUbael:Xd2y7WWTliU8m8hWEdGIl
MD5:	F04520F4EF75A6FFA27E1BF1427A7D70
SHA1:	AC365AD1953FA26833D1AC7AE335FD31BDFF1B03
SHA-256:	FA3F824F6B713CEF8894D43424111D6DB30394F0457B9DB3BAD5F1281A296A1A
SHA-512:	D757CB08122BEE6C08783D0414944CC94DB565314D1D9109FFD5295919FCABFB8B699FA1B01155B6B20C9D173F262AC9B8FA3F4220B9746E6568036C0F77DC07
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/26814.2ae50cdf7519cad9f0f3.js
Preview:	.............J.@...>E..]X.I.6m...VA,.B....i...i..6..A.4?..1.....y..)#....VV..a.f....B...;..K.......o...s.@.@..w(.#.PV.D.lW..Z.;....F....H~....ct....<.+...Y..I.;..).To.Q....`b,.F.9...~i.....?[..r.......W..u@..ixR.y{}YdC.r.`..N.V.....Nr..7........D....

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78685
Entropy (8bit):	6.020288496082252
Encrypted:	false
SSDEEP:	1536:OfGNbFoZJSUYOOaLnAW8+IcTOIobkhXwW5vxM:mGRFauOxLA/+IcTOuXK
MD5:	47BEA70318B724B1A99A1D571FF58807
SHA1:	B66FFE704AD2FE84DA8211D6351727568FD68B78
SHA-256:	11A188A204934185AB5649A1F838FE771C3D84C928BC8286EF999FB5B8DEDA69
SHA-512:	7995460AB00A68E3433EA72F19FCB1BCD8485BF4CAF978FF5C47193F110899AA824AC4A697285E908A5F66C693604A0227E60B3D3D948115C4C3490022B82E3D
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAAIGNIUk0AAHomAACAhAAA+gAAAIDoAAB1MAAA6mAAADqYAAAXcJy6UTwAAAAGYktHRAD/AP8A/6C9p5MAAHq9SURBVHja7Z15fFTl9f/fd9ZM9n1PgCyEXSSRNYKCgAuiIipuVSuudavV1tq6W/WrtnWrrZbWDZUqUqUoCoIEQhBI2JesELKvM9mTWe7c3x83d5xAlkky8fv92ft5vfKC19znOWfuZ571POc5B1SoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKHifwGCRqsTNFrdj6VPq9XqtNofT9+wvutQyEyad8t9IaPPntFUd

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 15741
Category:	dropped
Size (bytes):	2669
Entropy (8bit):	7.927783256887867
Encrypted:	false
SSDEEP:	48:XMLzAUSihBv8vdFSjrh/7TWibtwZn9TgUVD9NONzW6fthdxtftZFTVFp:cPAUR38vHShTTIZnBoNzPf5fz/L
MD5:	A3ED5EB324D744B15106C39E3173D6F6
SHA1:	1F7CBC353A77196BFA4BDF4FEB5D54199B7C8EAF
SHA-256:	7BE50D7BBF65F245516021F93A1077307FAD8816E22393D0A8FA0BD823DBFBD0
SHA-512:	D18CD6EFBB0159CD87006ED6C4CB674FF5EAEA4EE379CD9F3A2313C6F343667ED5E7A2407A8DBF9B907C3E7CEE830737F389CE70AF5A55D7186EB663803E7225
Malicious:	false
Reputation:	low
Preview:	...........[io.8....B.b.i+h.LNg.L.k..d.......,....@RN...}.R.%;v.4......E..-3.....@...'...!...>.....Hts.}.x.<.....n....>..=.8...q.m..8..^L...3.m...S.t.3.z.:.;n..N....}.Iqy.....q...........D.<9<9>..P^.....N .......<..M.#....y.....M..~&cn....,}gH.7..K3...j....o..k.6..3.z...H.fY....eD.,1......L.L..$...{....0EO..hl1..S....'.}M^}.E....SH..HB.g3Ud0w<1.H:0.....B.y. .+..Fc.t$.F)...;..J.17.H.r{k....#a..9....S....H...`.a.t0...v...\.....J0.....5K.X...dhz.G..u.<.{......+..b;.+...M.rF..iN.5.&.8.<.>4!.h(z..8...c.]'H........Br..S.-.I.c........ I.[..t.'.&8.]D.A<..!...nD..._..=......9..hO..M#q.}..J.....K..R1xH3I.&..~.. ......N]..`....N..f.i.N...~%y..T@...\.#."..;..Y.vvvm....F....m.aC...h._..J...C....].i.@.......) Q..Z.iq.....@.P..&.#.s..a....$Y....n;"...TD.3.?I....g...SK.........6\|.-...!R#H...Q..q..F...Q..#Q..9....Jf..I..VH.2T.T.RL4.~.3<.....I.....Eb.R..L.P.........s...1.W..C..I..U..Ul.#.H;....*.:.\|.O.u.n_y;.H...K..n.......F#y..!I,.aWFgX...&.

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	155
Entropy (8bit):	4.783604995700794
Encrypted:	false
SSDEEP:	3:YBECHJ0HyzJVAs2sDVDRySLAXGLBIvNFT0jLML9rUDxiBWSQRL+:Y5JiyzzAhsdLA21IvNp1YEBWSES
MD5:	C3E6CEBC508128FCE1A7B0208EAAD10A
SHA1:	378AB5BFDFC3F6EFA5E995AF1791CCC39BD42C20
SHA-256:	D1905BD8EDC6D58CB0884540E84872F426E7D81EC4DD8E626A7588E57B74EC55
SHA-512:	605D7916A705C00AF79948C48ADFC454D51DEAD12457FC132C2661F01F53D4888CFD32E639EB6E0F3F490E833C15F26ED3B8A41BCD47706DBA5BABBE787D8850
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/domains/ghabovethec.info/siblings?relationships=resolutions
Preview:	{"data": [], "meta": {"count": 0}, "links": {"self": "https://www.virustotal.com/ui/domains/ghabovethec.info/siblings?limit=10&relationships=resolutions"}}

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 19738
Category:	downloaded
Size (bytes):	7828
Entropy (8bit):	7.970978417312552
Encrypted:	false
SSDEEP:	192:Ub4UQAdpaF6VhIqc9dcag0e5foUK3Hyr2mGHrGiQRn7U9LwMn:UkHAdp46VhHc7cagVw3HOXGHFQRnKwM
MD5:	61D37AE2BBF5334EAEDD2CE7ADB81074
SHA1:	1B9C1EC66AA1705D921082B786ECB7FBF02BBA71
SHA-256:	4A0541EE665423AD7E24D7792B58D1B205D81F1C79FBA108386AD739AE692EA6
SHA-512:	CDEAA26DC75DD13E492119970EE62D75519B534BA334425BE5B363DC1CED59354AC661B37DC8517DBFDE5CBE9B0CB6CCA82470AF4958A057489B877A55DF7479
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/static/qrcode.min.js
Preview:	...........\.r.8.~.[[..$..]4.....;.M.{v.q..%q#..........@.....q.vc...}Gw...0;....t...Mr..ib....(.r.>_...-....w/^^../>]....K...a...\|^..:.....?K3.+..."...iP.h..d./.t..Y.n.S...~..3..,.2..n..{fE..$.:....].....x<v.".t'....,.;p:.......q...Ck[...h..c.c4\|..`..N.Q....^..@k ._.p..p..:......{lc..ll..M.[....".xl.L...X.]7.z..r...36...........bDV."....U.vs{.eZ..,K!.,.n....h.DrVh.f...d.\.-..M.C?..x..,".....x.C.J$2.D<..^..J..\|..wGItw..0..z.U.Gv..PI?;._ON....&......ds....,...p...%.........G_...L.wj2/..$_........V. .7....{.W)..){...)...+...k<..4kn.Qv6....\|.%.0.fi<m..<Z........y.5..c......a~...#..i.'.i.....<....L.........m..U".J.h.....V0.;.sD.......h2Q..2........acv..ur.m[sQ.k...(RJQ...,.Y{..[@.1......%. .c.BHv}...P..p..-..Ga0..'.C.u.._\|.....\|.C..v>....-.8...-AB..%.k..t..)M..i2?".)..ys..yJf...#X 9.Q.Z.^*..k..j.2m.]..Q....B..-X9-.{..l....~s...Q.t.M...nEdb.Ny.(...I.....4Cm...^`98.(."^.../%0vQ.3........N.4:...h..y.&.u..S..2........c.%.U~.(l.m..`.^j.xq.ZZ0`....a.o....a.

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16769)
Category:	downloaded
Size (bytes):	378178
Entropy (8bit):	5.661452818554557
Encrypted:	false
SSDEEP:	6144:JxGlxMX/iOG9m9PmPx976DmoMfgQJTAOLx0/awb:TUU649Pm77by
MD5:	58C4ADE8788B8933FDD7A9ADBCA518BD
SHA1:	CBC57D586BFE71A09D414DA9714B87744289B1C0
SHA-256:	4EF22F5343698B25BECB6D047467AE09146284C9D8DF23DB4FBFA3A650C7B2D2
SHA-512:	49E7F46F5E3971FDC06B1D1E2371854836AADC43BCC59BF7D900CF52DEAB5ECA40D0B4F2DEEEC6FAA2D0F197E2706C1DA873AFA0B310BC97465C5A41D0D0F08E
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-BLNDV9X2JR&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":10,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":8},{"function":"__ogt_1p_data_v2","priority":10,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_l

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 6161
Category:	downloaded
Size (bytes):	2630
Entropy (8bit):	7.92576531664957
Encrypted:	false
SSDEEP:	48:XUwPNibkQyRMyWgyW4SpcCFDAkw6D82HWveEVfH2S1X5Sx043SgN1s34mMb:EwP8wQCKgyWDpnDlcNveEV/ZgpSgI4mk
MD5:	52A2EB002AFA78217681264EBABE86E2
SHA1:	BE3B3EE47E2E5607DDBC211F65924470594B6106
SHA-256:	8C585D6A965492DCC55437C487C646646420D7B95D7FCB6160F78BC5F4C2779B
SHA-512:	2B1062A0350F3040A5AECEDCF708ACAEA59513EF1D9CE4E015FEF77F8616CFFB34E5E3681D3719EE6F7F8181E30A518C3D6DCB8433E447CC679B8EE5AA24219E
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/56053.034ac17cffd09668a5bf.js
Preview:	...........Xks.6..._As..".(R.e.4..N...t.i.Iw...I.bC.Z.L.J..{...lw:;.;..?X$..........S)Yd.M.....3.^...e.?~R?..O....7..v.9..u..f..qx6..g.o.g...S>.9..-.r.....c...$...r$.F....../.h..t.........f...y_..p..~.<.....h>..k....\..s....k.p....\.L.E..&+G.g-E...].T.:.....e.n..;.N.."t<tqR.tr2.3g-0.....J."......N.6~J.M.2.mB&o.e~.,.X]-Sy...E.3U..T."[...3l..\|......Bz.L.I..i_.......e.<..K..iG.n......D''..\|..{..+<F...v..s6ogR.4..v$..O...9e...I$S...o<O....e.1....%....8..N..n...ncq...ekw...a.4...<.I.&..W=...I....,.=.2m.....'{..#5.TotAH....t.dt6..........t....:.....V....W...c..e..f4$.Hm0.a./....D.Y{.O...D.vrRy.x.Wl...{;.f.p...8L..<.l.h._.....$)......f....<.^........;.u....4.^..8...n{...1....!.....<.I6...V.I.y._.....(.P.h...q...%..Q\Nh.u.X...I......,..v.P._$.3........p.P.f/Jj...~.o.....W`.D...v...._..np8:.......\|J..w.=.fD.k... ..p....6Jt.z..G.m{.(V)..4...f.S.(.R\|f...G....n...0:..tj.i.l.mD.{.g..#.L..h.Ep.n...#..:.....Y.".....&(.6.vS.W.G..r.9O...b..J.7..Y*g.F....)

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 39535
Category:	dropped
Size (bytes):	12218
Entropy (8bit):	7.978613747850689
Encrypted:	false
SSDEEP:	192:CNtagQpzZ/JC7tlwhPncJ9dcxiSXFNpq8dbJ8FqjUvnAFZCQ/iAgGWVW+GFq7K:ca71/JC3wh0JnoiSVNw2fwnAYAviW+nK
MD5:	8EBD6E2CDE3A1BF92D95F856FDF4BDBF
SHA1:	F167050FF1908D57FE20C3464344608A1E91C0FA
SHA-256:	9623B6B441872B5C39C86EEB577FEFA5CA36971814613FE62E4E6C5DDD5D0A79
SHA-512:	7CFFD1D101FF4E4C355A6D7D6B303FFF5BC06628605B298C15599E5DCB9D4BADEDA1FBB25DCB2462C304ECCC0AF2632BD38BA411E860AEC3AA30BEA7C9CA9C30
Malicious:	false
Reputation:	low
Preview:	...........}k{.F.....0.....&..L+......Z..=..#.@..E....%....VU7...N.dw.(..F_......n..r.<...vZ..l..h..7..e\|s._/......<....U.[,.i..N...r.z''.A]...6...n..I.i..?n..n....a.(...k7\..O........q...4...v.{.......p..\|....)....q.GI,-.I.[.P..N.s..7S.$....Y.,....l8.&g.....ro.....i.Pi~...4Z.IZ.N...h\.%..6.......7j<C.Ok...g^..$.s...:{.T.{.f..1....C..m.O....i.l6..P....O...a.z.... zN.@../......o.._....O..O..^.j....R.s..i..Y.L..Z9......q8S..8.....#...).tF..N.K....O..H[.....-GaBsH...E.=r...%~h........Eu..Te.2..Ue....8..<.'.q...\Q...[.o.hH.X..J.../.u..2PSvF.G$..5."D../.3.)3...X.$...%D\|...,...j...(..KnU:..-.h....+..?.(My...1....M-.4...4b3....b..,.#.k....h...^........B.s..X..u..k.....rWc.N....;.KL..'Yb.+X.!...5V...v.p..L.s.....}.,...cD.\|?.......x.f^v;..`!w._p.sd.yqGY2.}K.........;..1..H...7.(.S........Dh0.......... .....I..R..j.%..>Q.Rc.(.....E>Q...3cF...o8'*B.4L.+.M..)5..Dv..LwT+.......2.%.uV.b[(..\|....G\|..\|..M./U<...1/..O.MF....'.52a^O......o.e...h

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 17409
Category:	dropped
Size (bytes):	6653
Entropy (8bit):	7.968945719012011
Encrypted:	false
SSDEEP:	192:9gJ+Q+huGM6V5h85ZH2JnTKFpjq5R52Yvl1c:4/+r5/85UM1wR3Tc
MD5:	128B8577BE73F0DBD4104D6ED2843754
SHA1:	DF92B70F21403D3EE8E8209068C9BB104F988CC2
SHA-256:	C9EC52006C7A96F4CCED86E30560848825ADC46E148F9C74DB1401E6D2AB26FD
SHA-512:	C4CC7510D539443F392E4572BEDE0F14ED7C8AB7B9C62A117E7BB8DEC0C0DDD53B6AA35886CC3BB63B6F79728554F532D5DF57FA9FEBEE26AA65DA5977A89E18
Malicious:	false
Reputation:	low
Preview:	...........\Y..F.~._Q.fd...q..dO....y..c..Q.@..i...`.C..u. .my...e.YGV...z.....u..^.6..]w.).WYYM........{.i....$J...V\|O.......6-gm.y7:...VO.q...aVx........EAh.%..$.b...].K.M..8...C..z.c...#.$.".,h~.{.a...u\.0s1.M.1.O}.0..c+san.yc>.wS>}..i.......$.fml....e..f............_w.j.\N...u=...<..............6o.uW7c..>/..Q-.....q..9.......H.p.g.<....F9U.....s....X...\.k....s.Y.1...}..x.r\N....y....h......ci.7..4.C........k..<....?L.e..?t.Z...l..lr...m7....^...-..n....-o._....PY6[.eQ....weu..].e].3......-.K..Y.......qn.g.......,.....>~...w.`.Ey..b:...i.o.5.......G..:..+v.....b....8...y.\f.8..Y......t.....\..X."\.g.W.gO..g........IJ.Zr..[.....@....9h%)R...q-.kc,..X.K.1vGx.\|..^.qKQ. .E/Ja..Q&.".eL5U.5...p....k).....Vv.u0d.Q..}.g.>.F6..........B1#W...l......*..h....$m.A7Bip.`......}=..-..v4.]S..)_..a.9l..PHE@..l....Vh%........#y...............G.H..^..tl7..z....W.E........U$.T...a../x....q..+..e...7..l.:...h2.....t..#-Ye.K...%,........1X..

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16769)
Category:	downloaded
Size (bytes):	373974
Entropy (8bit):	5.660399868552982
Encrypted:	false
SSDEEP:	6144:JxGlxMX/iOG909PmPx976DmoMfgQJhAOLx0/awb:TUU6O9Pm77hy
MD5:	146A314996406E4892D9D2DDDE6628B9
SHA1:	B2824C58B2BA1A622ABF7F1828E770733ED141F3
SHA-256:	A3DA63DA9837D9C33F16A0A4B71EC1B9F2486D455DC94FBB2C059043A2997E4D
SHA-512:	CB765C02F71332D574A63A2C00DC3F1894EC2BA3CE93709DEBB018F5660E6A1250EB0728B8467CB0714DB2C750BC834B7976E17ED3B82E7600F60EED6AB9D5EB
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-BLNDV9X2JR&l=dataLayer&cx=c&gtm=45He4bk0v9133079464za200
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":10,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":8},{"function":"__ogt_1p_data_v2","priority":10,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_l

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 6161
Category:	dropped
Size (bytes):	2630
Entropy (8bit):	7.92576531664957
Encrypted:	false
SSDEEP:	48:XUwPNibkQyRMyWgyW4SpcCFDAkw6D82HWveEVfH2S1X5Sx043SgN1s34mMb:EwP8wQCKgyWDpnDlcNveEV/ZgpSgI4mk
MD5:	52A2EB002AFA78217681264EBABE86E2
SHA1:	BE3B3EE47E2E5607DDBC211F65924470594B6106
SHA-256:	8C585D6A965492DCC55437C487C646646420D7B95D7FCB6160F78BC5F4C2779B
SHA-512:	2B1062A0350F3040A5AECEDCF708ACAEA59513EF1D9CE4E015FEF77F8616CFFB34E5E3681D3719EE6F7F8181E30A518C3D6DCB8433E447CC679B8EE5AA24219E
Malicious:	false
Reputation:	low
Preview:	...........Xks.6..._As..".(R.e.4..N...t.i.Iw...I.bC.Z.L.J..{...lw:;.;..?X$..........S)Yd.M.....3.^...e.?~R?..O....7..v.9..u..f..qx6..g.o.g...S>.9..-.r.....c...$...r$.F....../.h..t.........f...y_..p..~.<.....h>..k....\..s....k.p....\.L.E..&+G.g-E...].T.:.....e.n..;.N.."t<tqR.tr2.3g-0.....J."......N.6~J.M.2.mB&o.e~.,.X]-Sy...E.3U..T."[...3l..\|......Bz.L.I..i_.......e.<..K..iG.n......D''..\|..{..+<F...v..s6ogR.4..v$..O...9e...I$S...o<O....e.1....%....8..N..n...ncq...ekw...a.4...<.I.&..W=...I....,.=.2m.....'{..#5.TotAH....t.dt6..........t....:.....V....W...c..e..f4$.Hm0.a./....D.Y{.O...D.vrRy.x.Wl...{;.f.p...8L..<.l.h._.....$)......f....<.^........;.u....4.^..8...n{...1....!.....<.I6...V.I.y._.....(.P.h...q...%..Q\Nh.u.X...I......,..v.P._$.3........p.P.f/Jj...~.o.....W`.D...v...._..np8:.......\|J..w.=.fD.k... ..p....6Jt.z..G.m{.(V)..4...f.S.(.R\|f...G....n...0:..tj.i.l.mD.{.g..#.L..h.Ep.n...#..:.....Y.".....&(.6.vS.W.G..r.9O...b..J.7..Y*g.F....)

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Reputation:	low
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 14954
Category:	dropped
Size (bytes):	5834
Entropy (8bit):	7.962611733811477
Encrypted:	false
SSDEEP:	96:KAyEsUlhvqg4PgEJA34tgTsGzbUMvvlDq270AKyC1dvDcJJ5MVv5GgWJOpetCyC3:KLElhyPg0b9GfUEtDqQ0AKFdvDce5GgR
MD5:	D9706908D141B51812236CD6B7397A5B
SHA1:	96F09F52A0C264900B0BAC0A530DA81C6078000A
SHA-256:	DF03D0A57A85240934B017789F774734A6D45C9DAF450B6A0E249D56E79AD92F
SHA-512:	FD26BDDB45C568FA2DCA5D71A06328221D0A79B06BE689F73074B50B1BF07DD173C8A4E682DEAC4DC563D81EE55A52F9F9E95C2C28B4EBBBA3FA8A24CB405A4F
Malicious:	false
Reputation:	low
Preview:	...........[[w.Hr~....-..@......xdMV.....l"+4H4IX ........W...HJ.w3.C...Fw....U.g..Y..i.8.....O....x._...,.M.4...........j.\^n....x...._{[.;[..^wg.....\y.....#=..nt8.....O.._..=.dqUY.%...:.U....\..E.Tg.Y..t..lJ...".K1-J...>.......!.4..8...P......D...x.b2-..y....o{.....X.......,.....).P.....&..2......P.?.3)n......#.O.;.t4......c....=iA....^.$w_..^.9..........v\...W.vv]...[....xCg...=lo.z.@8..z.5.d8..z.<...{.z.=.K8<..;..-...u....6.~...z7xd.q.2!..7.F....[...c...dt(......:'ar..2..2.G:t.e\|.....5Wo...xxhv....<.gY.E....Y..a.C.^D.~..u~?.....TOAE.C&........}u....(W.K..R/.W/..2...E.@...-.E...8... ..x.(...^...A...}......@...A.....N.9e. 9.$E....R.Z.7q6.dWA&.......{...r0&.....D.@<..k._.pMQ.0.h.....2&,c.......r\..V.X........`..F.,T>.q/.....o\|.5/..@...01..t .=....s........5...h... .'`..!....\H~<R.5,......h6.......t......K<.=t_=lo.x<...T$...r3..Y..#EMxS...Yg.;W...u.F..%..>.q.8.K)&Si..J.....V^.>.$l....8...K~.[E.......[<>...X.K\eM`..q\|#

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	456
Entropy (8bit):	5.1759373642048105
Encrypted:	false
SSDEEP:	12:t4TtAhJkBnMvEG3B9Pw6H7tRYsGl3qzU923DrQEKFLhll0M:t4TtA4WTPFHh+NJ9MrpKVhllT
MD5:	8E946272C765209B9CBB9D0D8BBB1208
SHA1:	909E056092B766C55A91B9BEB0781725B9BF6930
SHA-256:	56864C389EB49B33E56EA82724A74399F321891E44FE16EC93F8911092270E54
SHA-512:	B633AA5CB870D3FF7C0E9FB0D71D9C43BCBF84BA5F7F0683D78ABDC144862E1A4123ABE6CF97B393BE7BF895255C94BD7BBAADCC4973424B663320ACFF1C6386
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="150" height="150" viewBox="0 0 150 150"><g fill="#3B61FF"><circle cx="75" cy="75" r="74.5"/><g stroke="#FFF" stroke-width="4" stroke-miterlimit="10"><circle cx="63.7" cy="76.9" r="26.2"/><path d="M54.3 76.9h18.8m-9.4-9.4v18.9"/><path d="M100.6 89.7l8.9-30-9.4-2.8-8.9 30 2 10.4zm1.79-40.302l.74-2.492 9.395 2.784-.738 2.493zM100.1 87.5l-7.3-2.1" stroke-linecap="round" stroke-linejoin="round"/></g></g></svg>.

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1696
Entropy (8bit):	4.901273171237656
Encrypted:	false
SSDEEP:	48:Yx0kia0llFdT0lkFw/05a0dlFF50dkF4AaEL:yiXlLikucflbYkeTEL
MD5:	DB4E6CBCC4C945720AEA94E3965E8051
SHA1:	09F31FABA57FF7A279120326ECB76B1137C297A3
SHA-256:	3B37EFBE7E52FE01C695818099BDEBD240460692366626186CFB787D64F7B539
SHA-512:	C6D7B42549B5AA24C92092C9C9307884B5149763205E6C8F1C86E9A29FA058465ED7594FE6A4A305CC5A8E4AD3BF2D6B4E9CD6665D9AE3E93B93B1C4B9A72B3C
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/domains/ghabovethec.info/votes?relationships=item%2Cvoter
Preview:	{"data": [{"id": "d-ghabovethec.info-0da73a1c", "type": "vote", "links": {"self": "https://www.virustotal.com/ui/votes/d-ghabovethec.info-0da73a1c"}, "attributes": {"value": -1, "date": 1729160241, "verdict": "malicious"}, "relationships": {"voter": {"links": {"self": "https://www.virustotal.com/ui/votes/d-ghabovethec.info-0da73a1c/relationships/voter", "related": "https://www.virustotal.com/ui/votes/d-ghabovethec.info-0da73a1c/voter"}, "meta": {"count": 1}, "data": {"type": "user", "id": "ajc_CP_UST"}}, "item": {"links": {"self": "https://www.virustotal.com/ui/votes/d-ghabovethec.info-0da73a1c/relationships/item", "related": "https://www.virustotal.com/ui/votes/d-ghabovethec.info-0da73a1c/item"}, "meta": {"count": 1}, "data": {"type": "domain", "id": "ghabovethec.info"}}}}, {"id": "d-ghabovethec.info-46abcc96", "type": "vote", "links": {"self": "https://www.virustotal.com/ui/votes/d-ghabovethec.info-46abcc96"}, "attributes": {"value": -1, "date": 1693493417, "verdict": "malicious"}, "

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 104044
Category:	downloaded
Size (bytes):	25908
Entropy (8bit):	7.991342298985362
Encrypted:	true
SSDEEP:	768:vE3jOS2orPtscvhr8WD+gq9HUxuwHOW0lOS1:cCorPtZR88+HoxOW/U
MD5:	37B325F195230223A60EA1855AC727F9
SHA1:	3F88F93408C37BDD2DB726B3A5D798C63739F2FD
SHA-256:	83BB7B9276AE38D2B92B5A3C23480763E9ECEFC78F2526BD6C7DFE7D3CB2EBED
SHA-512:	F74059AA39E6E8B2B8F751FA78D462645BEF7ED42DD897DD98C3A0D9722EFC92E428B696E1A71C8550B29FA96B0AAF24683D4C1587F12353DB1940AB2B20743B
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/6209.c71bf99427508f94bc7c.js
Preview:	............c../...+.%.HIKH..G.. .s!.`.o..iIm./..e......Yj.E..d..:$.....Sg..2..4[$.vXO..I.".....g......2y7..i.....m........n.}..lw..........^{k.W..8L...WIkT..g.:~{.j..G.`.O.....F8.O..{..F.......N#..cw...k.S..........q....m.#.x.{...C.qgw....:.....j...m4..q...p.....<<./..C.>.....f<.'.q.d9.f.l....+........I<...8..fg.`...Q....~..8Z....#.f..8..b..b6....8...y6[..I..8LN..W.....<.../.1.._3S(}k...l.eq#.ku[d.{....'..&>.g:.f.p...>.6........m._..uZ..5z.C..s.....h\|..5..q.\L.\|..?.._W9.O.ilV...hux...5..Vv...,...Z....\|...i.f....O>~.?._.t......p..i.....(.....2N.i.../.....i=O......Z.j....4q.....Q?..g......%..w.yE..p6..Y0.4...,M....x.e.....`.M..h..t6.."`.....8......-.f.it..&.K...t..'i.F__.W.w..c........P..}\|..4Z'.8..@e...l..f=.ggI.:O.d0....l.`e...rp.......d.............$....@'.....n.x.l&Yl.5_.)@...@"..8...2.ns..,.'...Z0...9H....T.Z..2.'.......D.$j.Pa........Y6.:XF..q......-....Q....1... .p.....c..?..^..-.. .+..@.#j.. \|.....B....w..z =.HO.RZ"f.-...}.7.o.7...

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 417 x 418, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4035
Entropy (8bit):	6.906818198263423
Encrypted:	false
SSDEEP:	96:J2op0unSWtApGg0cZ2aYHw58hSxgmXTIpcCwIq7:3tKXF8hSxF8rw
MD5:	65C7D924F159C86AA6223F957CDC3416
SHA1:	230EA9B01F3B5E3D1A40BAF3513ED0F274221689
SHA-256:	6B0D602ED2EC4E1C8A077BB04F56772C2DD68A41591AA84B3166DC3133B52213
SHA-512:	4D704E76B4434ADF9FDF8B8E989F351CA691A0E003A65E6C2002223A7E20A4E08543F948CACB96DABE486562ED1ABBAD3528341CF9414D54B813C7FE7D5D2FC0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............N<yl....tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmpMM:InstanceID="xmp.iid:51CE50E5CB1A11E98B24F96E23D45BC8" xmpMM:DocumentID="xmp.did:51CE50E6CB1A11E98B24F96E23D45BC8"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:51CE50E3CB1A11E98B24F96E23D45BC8" stRef:documentID="xmp.did:51CE50E4CB1A11E98B24F96E23D45BC8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>5......1IDATx....Q.H..a.F.P.;8....\...n....:....n..!~=_...T....#C ..Z^...h.GZ....c.......!..+....n..s..W..

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 29659
Category:	downloaded
Size (bytes):	7398
Entropy (8bit):	7.974938633609326
Encrypted:	false
SSDEEP:	192:x7Fug9wmm8/uQrKniV9/DBeta+9qo86uc:xFHm8/FroiVNEfZV
MD5:	43255E0723CD9FD4001571FE2CC0FCB0
SHA1:	2C75B74B0AA84550D800C02D8160808F6E97CEAB
SHA-256:	AC20FA90E7AC719489FA00B8D1864DD06D93A88DDD124384462FE3E103723F59
SHA-512:	C2C4F3330A9A1F373AC62AA055F7E54F08FF8DC771060CB186A38C4F5B70DE9DE5F113F7BA5414A26710EC42D6DBBA59563E06788B2E6BB09945CEA43357EC0F
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/70520.2084d2d63c64ac00d8ff.js
Preview:	...........]ms.7..~...]....mr9..W.);..d...n...8....JVy....n4...P..\|.E.t7.F...m..U.M...2].....:..6.oV..U.M6^&..hK.?......zS..>~....\|.k.3... .g......Aq...... ..>?>;..N........h.??...%...........h\|q....U.\|<\|}..&?......~....$_..I.>.E.=.s>.....iu.N.".T.....U...a...:.I5.........H.[n.Eg.2M...g..p.on...j.O...._.}..Hn...(.@p....Y...W....>).1.9.n.d.-..d........U/l....r.........c...7...W."M..$...<n._...bSVy.,.y..=K..<-_}....\|......h.<..<.e.....wi1..b:d..f.5[Q=.'E~?-.M1I..H.X....ki...D]..v..kK[.g.r;&4..*.u...G.V(...U....}.X.............4-'E..B.^6..E..L.....o&.H.}j....E.....Z.j.......[l1^.mW..&......1..#?....gk.4[?..P...;Hvu..\|..=.u....$.e..0.c.6..i..G..a.\.....H..")n.......M.)..w5X....q..V........\|...F.M.H.b....k..f.V.y.[...S.r.....L.qza.E...4o0o....8O.H...z0E..h)M.wr....Ra.:.V.......2.))..6.......f.Avf+Hc...%e.ty.N..ZKwW.9l.A.W3........f5].s.]....b.\|.DK>J.h.~7M'...Kd....P.K..UU`.....M....8.g..4.....M.pb"<.p.-.Iv..gS........7......y......

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1964)
Category:	dropped
Size (bytes):	292561
Entropy (8bit):	5.5556679647167355
Encrypted:	false
SSDEEP:	6144:YCC5xmH2F24rn2DiH2F24rn2VOmzN77Jsv4gmUCKf5wNMEnVJXC:zqmH824rn2DiH824rn2VVzN7SgXC
MD5:	804A64CC031A1CF1ACE8B17737247B55
SHA1:	6B557BB5D287668A71D0C6FD3A5BF84D42F0D20B
SHA-256:	D480DE66B420EA6AFB356FE87DE6FE62F5CBBD08662F077FF2EDAE95A2B900DF
SHA-512:	9E8352CF757C641216F9F47EA2B8FBCF8A9B4B0967591255D5F19F6AC3FD2C2F8DFF4352371887D368DD313911018565401F44AD76B682011969B914E0E04AD4
Malicious:	false
Reputation:	low
Preview:	(function(){var g,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ja=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},la=ja(this),ma=function(a,b){if(b)a:{var c=la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.ma("Symbol",function(a){if(a)return a;var b=function(f,h){this.Yq=f;ca(this,"description",{configurable:!0,writable:!0,value:h})};b.prototype.toString=function(){return this.Yq};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=functi

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 29659
Category:	dropped
Size (bytes):	7398
Entropy (8bit):	7.974938633609326
Encrypted:	false
SSDEEP:	192:x7Fug9wmm8/uQrKniV9/DBeta+9qo86uc:xFHm8/FroiVNEfZV
MD5:	43255E0723CD9FD4001571FE2CC0FCB0
SHA1:	2C75B74B0AA84550D800C02D8160808F6E97CEAB
SHA-256:	AC20FA90E7AC719489FA00B8D1864DD06D93A88DDD124384462FE3E103723F59
SHA-512:	C2C4F3330A9A1F373AC62AA055F7E54F08FF8DC771060CB186A38C4F5B70DE9DE5F113F7BA5414A26710EC42D6DBBA59563E06788B2E6BB09945CEA43357EC0F
Malicious:	false
Reputation:	low
Preview:	...........]ms.7..~...]....mr9..W.);..d...n...8....JVy....n4...P..\|.E.t7.F...m..U.M...2].....:..6.oV..U.M6^&..hK.?......zS..>~....\|.k.3... .g......Aq...... ..>?>;..N........h.??...%...........h\|q....U.\|<\|}..&?......~....$_..I.>.E.=.s>.....iu.N.".T.....U...a...:.I5.........H.[n.Eg.2M...g..p.on...j.O...._.}..Hn...(.@p....Y...W....>).1.9.n.d.-..d........U/l....r.........c...7...W."M..$...<n._...bSVy.,.y..=K..<-_}....\|......h.<..<.e.....wi1..b:d..f.5[Q=.'E~?-.M1I..H.X....ki...D]..v..kK[.g.r;&4..*.u...G.V(...U....}.X.............4-'E..B.^6..E..L.....o&.H.}j....E.....Z.j.......[l1^.mW..&......1..#?....gk.4[?..P...;Hvu..\|..=.u....$.e..0.c.6..i..G..a.\.....H..")n.......M.)..w5X....q..V........\|...F.M.H.b....k..f.V.y.[...S.r.....L.qza.E...4o0o....8O.H...z0E..h)M.wr....Ra.:.V.......2.))..6.......f.Avf+Hc...%e.ty.N..ZKwW.9l.A.W3........f5].s.]....b.\|.DK>J.h.~7M'...Kd....P.K..UU`.....M....8.g..4.....M.pb"<.p.-.Iv..gS........7......y......

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 40453
Category:	dropped
Size (bytes):	14520
Entropy (8bit):	7.986606215078307
Encrypted:	false
SSDEEP:	384:ry5GEs/taTFMj/kbL6M/+MgFWC5JGOKSEtjmCWKH:Qs/tay/kbN+NJCOKhjCi
MD5:	37893C0B811FD4E1C7216CFC6B9E19EA
SHA1:	99352023FBDF00CB2722918E51EB036BB38CF438
SHA-256:	98CB13A5D98C26E525BAE541EBD744EA823A9BD763CE9637373D99A742C7C9E1
SHA-512:	02DB2726F559A7A2FE07D91844AE38B7C6FD3AC139AFDECCDC991F2E42E96379669F92E594963E754F3B863C403BE5243D73818754AEA349F35AE4F00ADD9349
Malicious:	false
Reputation:	low
Preview:	...........}k{......4...&D.....q...9.....\(Y.Q....0.h.#q...oUw....Irv....F./.u...Jg.....<....r...>Yd'WI.._yws39...Eu.L&.....p.].{.?x4<_..:+. ....?%e...(..r..(.....Tu.M..'upo..{.q....:.q..Y..u..2O..mY.j.y..\|..1<:....z{Q..}<..$u..'0.7GA....(.....U..S2.1..G.}..g.q8..7.zQ...RoR.uv...o.q.j@...izs..O..<-..U....b.=...N}.U}i.-.`.#.h...1.....^.u.....-_.h..^....ar...k.e...;/.(...$..#..\.(......I. .2J...).V.0..`..~.....=.....$=.q...8...a.e......^?.5.b.e:..~..$......Z2....q.O..[...=..x....$.....@;...W.YV......Y..A.c.V.u+u._...D.....f.@.n.tw....q.L..%.....zv3...K ..#f}'.......>.W.......M.i.(............^.i.u.s.w..'`E\.k.^9.?f..ZV...SW. (.%.dX.Q..;;.[.*..4..A.....bQ=..;`.h...+....,.`f.\..y.\..,.B..XE.,O.,.N....%..lq.......0_.v..r4..O@.....e.?@...t.vt.7.H....6@......)!O...U....<".>.......jaC....P.J.Y.A.N...N>..\......p..;....:1@.@.....W.j.}..8..Y..-x...........5d...6..R.U.\x<..A..y.3.Y._.O.fZ.E.W8..0..f..`..+...Qh.W.....9..........T.2...,Z.w(..{.^

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Reputation:	low
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	18136
Entropy (8bit):	5.114250082797836
Encrypted:	false
SSDEEP:	192:DZPfJsb99+cLY6AJb3N/zJuT6QRxGIOqQtiekVDdRIr9/R2h/RNmpzpxGpAoDP/C:tt9bavqcPNwNpkaEoxAHnWUahspSAA
MD5:	A0DFAF6E7D7E9E284DF01F69161D9E0D
SHA1:	34C3EEB8BB2AFE8808F9EF2216E87AA9AD78CEE8
SHA-256:	693EF223C2BF1DDF750FBFC69E2B3FA85D520213DF4753ABCE991FADF80A7B38
SHA-512:	032173D61FDB871B0F30F5A09B14808DA9F7FEDB50A52D12372673F184E2E868DC0E5CD1935888ADFDD3367DC112B3D457C3D8F5215207C77240DA7CF15927E4
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/domains/ghabovethec.info/subdomains?relationships=resolutions
Preview:	{"data": [{"id": "ghabovethec.info", "type": "domain", "links": {"self": "https://www.virustotal.com/ui/domains/ghabovethec.info"}, "attributes": {"last_analysis_stats": {"malicious": 0, "suspicious": 0, "undetected": 31, "harmless": 63, "timeout": 0}, "last_dns_records_date": 1732116307, "last_analysis_date": 1732115963, "registrar": "Dynadot Inc", "tags": [], "popularity_ranks": {"Cisco Umbrella": {"rank": 32084, "timestamp": 1732112351}, "Cloudflare Radar": {"rank": 1000000, "timestamp": 1732112348}}, "creation_date": 1677662721, "last_analysis_results": {"Acronis": {"method": "blacklist", "engine_name": "Acronis", "category": "harmless", "result": "clean"}, "0xSI_f33d": {"method": "blacklist", "engine_name": "0xSI_f33d", "category": "undetected", "result": "unrated"}, "Abusix": {"method": "blacklist", "engine_name": "Abusix", "category": "harmless", "result": "clean"}, "ADMINUSLabs": {"method": "blacklist", "engine_name": "ADMINUSLabs", "category": "harmless", "result": "clean"}, "

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	255
Entropy (8bit):	5.098325314868938
Encrypted:	false
SSDEEP:	6:xBB0HCc4slsk9ZRcmT/LmTCXVPxbjt8Uy:xBBBk9ZRcklVxCUy
MD5:	7AAE6383F0725382DFE4F0756BCCE354
SHA1:	3DB9482367D2B93391854542C931815F2274A191
SHA-256:	CDBD1372AC9D5E45B066C7170CD34B8557021E3825A89BB71568F5B10426170D
SHA-512:	FDDC4B11A171C4642B7A7292B7B9804F857D56C0C082AD8114F3F4827F14DC28CB5A765E8193E18F5B702D55EA56EFC2981D5EF0E5F27429AB3984C2368BD194
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/3dcfab6d217ae0509cb1.svg
Preview:	module.exports = "<svg xmlns=\"http://www.w3.org/2000/svg\" width=\"1920\" height=\"651.1\" viewBox=\"0 0 1920 651.1\"><path fill=\"#3a4eff\" d=\"M1920.1.8L975.7 649.4-1.1 538.1v114l1922 1z\"/><path fill=\"none\" d=\"M-1.1 5.1h1920V652H-1.1z\"/></svg>\n";

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 86417
Category:	dropped
Size (bytes):	15014
Entropy (8bit):	7.9863875317742306
Encrypted:	false
SSDEEP:	384:pg9gKZWx2oDVhw/Th6UomFiZcHtxq6jxVNXIhbvvufbcXd:+do2oDVQThNXHPhNV9fbcN
MD5:	DEB2A20540089992B969A131BD0E9FD1
SHA1:	3C082C930E68B8C55D50A9464D94B2BFE84B1BE9
SHA-256:	0C2807847A9C72AEA91AEBADADD9AD3B203CFC5690ECC131518497A8DA79250B
SHA-512:	3EBA7CE6C3F58718700C89CC28B70B29F278F0B91259E213D0334F781A9BB35B39A021D9DABBF92A2010B0476DBD4908751FED3A7AEDCFA9B5EF8529FC9B9CF4
Malicious:	false
Reputation:	low
Preview:	...........}.c.....W.L.#S.&..e.ul'u..9+I...\.\..H..@=B...~ff.X<(...E.....;;;.i,c..I..I3V.I.Z......t.\^%.......;..?;ou..x.<;.........A....MZ.'..y\|t.k.\y.......aw.....wp...r.A3i.......ytt\|...;....{;;...L%.........<Q..h0Y........[+.,F.^t... .;3.\$S..x.w.F.`9.....i8x3...%..............E."..&......f#.. .].p.U...>\|.0S(.u.j.F^.Z.@WO?..=Q3...............'.v....lx.z..............st....j...N".,..A....z.c5..eV....7w1..8v.M..q.o...L...Fa.xY.hKZ.x.mjv:.t.qdS?.x3l_\|.xI<Xa......W.?v..,..w....9~...S.........H.q..^.h....`.v.b.(.iv...bo......^.Yk.\......Nxv...T...7..e.a1_..DE.l..NSh........f4...w\|...{..a.....Ur]>.Oq.a:.. .N.B.Yg....l..vbu..E...r_.V...h./nOu.2..nk.%.q:..JC...4..ZM..{..........f..co8SN'..4>]u..g.o....l<.i..7s...4..K.Rcg..sg....8\F#\|.Qc6./T0R.@....O..1~r.Y....M.4.u._.o...O;Z.....L.......e'w.f....n..^p......r.?......J2.B.l'.8.o......]k...\|...K..nT.;P.X%.?.\y..Z.\..P..Z.....2.T~...[0.Z`1.X.-..8.,........g....mf...0..4&..!.....N.aDW$@C..m.W6.

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 21787
Category:	downloaded
Size (bytes):	6663
Entropy (8bit):	7.965664628538683
Encrypted:	false
SSDEEP:	192:wdVoS9HVTjpw6SPKMDCUo3gKsKGG8vENNVNsDM:S91T+9KHxsKD8vE7PsDM
MD5:	B524AE9B11D8075A4BC58D81A47FC8FD
SHA1:	BF651FDAEFCA3EAF8B02EC236AFAB3F0BEE60E52
SHA-256:	641AA7CF2F8D8D41615A96F250A64D9715ECA57B7760E0B6BC685E014D72D601
SHA-512:	A32FC05FF2C86DDD5287DAAABFE707B4931527CC14C31288E328ADE22E5160FD63F56F13E84A3A1FBA616BF8D5D2347555B1D8D26C3A37353374A395267D65A0
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/47031.025a838d403cdd2d104e.js
Preview:	...........\{w....~.E.,...y.l.@CX...H...........Jr.u...o..]BJ.......h.{....-{R..(._.].......q..x0.../.....(...O......xR....G...3o......q.Wz...M/......}..r....;;[...qgcws...j....t....;[[n7..Ux........"....$.q.Z.Z........N..,..k?.._........M.. .. .$I..}..cO.H..TD.ZP^.E6...G.,.._..'?.E..Y~vs#N.O.o....h.. ...^.e^...yE....`m.[...m.8y...0I.V?.W..........o._:...`>...&Y....8.r.........$.$Q....}'.....a2........b..i.nw.....p...8#1.....T..V..v.K.05NM.p\OA....Fx5.....0...t6S...p.8...<F.(4=...<.........3....F._$q_8.^k....l.!&.r....RL?.....<.k..p.d.?.c.psc.....%q..l.0;...\|2.iY.......o^.i.......8...p4..+g.../EA./w....j/"..K...8.s...2.bDX.b4..2."LH[...J...$.K..c.a...........o......!].+c.+..(.ax!..Z.z.F..f.o.3..Ke..L....nn.=.......%..].]y.m/..m.U.O.n......g.._...xF.G.^K../...w,..i.5.Z.'..eG.. ..I...(__.o.l,....(.y<.58.:1]b[b.'...H..\...m...;?....A.I..WM........%..n....a..:......,...E.$n'......?..A.&s......R..\|L.R......\|...Ea..4*....... ...w.q....r\|...z.0..

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30227)
Category:	dropped
Size (bytes):	30282
Entropy (8bit):	5.1211352730022925
Encrypted:	false
SSDEEP:	768:l0CwBIIJcjqUsBRt7lKCBfWsBye0X5BqFf1GBJnmrKO:EeIKjbsPbKCUsMeq50F9G7nuh
MD5:	CB1F3ED49CFC10BE4A87A54C9518EC36
SHA1:	C7DB43E4DB631F529A343B8DC4E36D2CBFE788A4
SHA-256:	868884A27AAE99613EF94BD29FB3F009589F125175C794B677A3A0B7ABADA84E
SHA-512:	A40CA93BDA20A2407125F50AF138FCC2F92545A07A928E9CCAA914674B5C611A89AE23DFA1DC79D474710CAE657D9BBC234E7CE4AB62486D439ED78E92543BCD
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[49272],{49272:function(i,a,t){function _(i,a){var t="undefined"!=typeof Symbol&&i[Symbol.iterator]\|\|i["@@iterator"];if(!t){if(Array.isArray(i)\|\|(t=function(i,a){if(i){if("string"==typeof i)return e(i,a);var t={}.toString.call(i).slice(8,-1);return"Object"===t&&i.constructor&&(t=i.constructor.name),"Map"===t\|\|"Set"===t?Array.from(i):"Arguments"===t\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(t)?e(i,a):void 0}}(i))\|\|a&&i&&"number"==typeof i.length){t&&(i=t);var _=0,n=function(){};return{s:n,n:function(){return _>=i.length?{done:!0}:{done:!1,value:i[_++]}},e:function(i){throw i},f:n}}throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}var s,o=!0,r=!1;return{s:function(){t=t.call(i)},n:function(){var i=t.next();return o=i.done,i},e:function(i){r=!0,s=i},f:function(){try{o\|\|null==t.return\|\|t.return()}f

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 417 x 418, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4035
Entropy (8bit):	6.906818198263423
Encrypted:	false
SSDEEP:	96:J2op0unSWtApGg0cZ2aYHw58hSxgmXTIpcCwIq7:3tKXF8hSxF8rw
MD5:	65C7D924F159C86AA6223F957CDC3416
SHA1:	230EA9B01F3B5E3D1A40BAF3513ED0F274221689
SHA-256:	6B0D602ED2EC4E1C8A077BB04F56772C2DD68A41591AA84B3166DC3133B52213
SHA-512:	4D704E76B4434ADF9FDF8B8E989F351CA691A0E003A65E6C2002223A7E20A4E08543F948CACB96DABE486562ED1ABBAD3528341CF9414D54B813C7FE7D5D2FC0
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/graph/assets//images/logo.png
Preview:	.PNG........IHDR.............N<yl....tEXtSoftware.Adobe ImageReadyq.e<...(iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c140 79.160451, 2017/05/06-01:08:21 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2018 (Macintosh)" xmpMM:InstanceID="xmp.iid:51CE50E5CB1A11E98B24F96E23D45BC8" xmpMM:DocumentID="xmp.did:51CE50E6CB1A11E98B24F96E23D45BC8"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:51CE50E3CB1A11E98B24F96E23D45BC8" stRef:documentID="xmp.did:51CE50E4CB1A11E98B24F96E23D45BC8"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>5......1IDATx....Q.H..a.F.P.;8....\...n....:....n..!~=_...T....#C ..Z^...h.GZ....c.......!..+....n..s..W..

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 24531
Category:	downloaded
Size (bytes):	9059
Entropy (8bit):	7.975920602662275
Encrypted:	false
SSDEEP:	192:MCtRjBGkBVbr7/GPch1MuaEaDKnH4lNltw+Juwfd:MMXGWVb/Cckuazf/uad
MD5:	D4C7AF8CB71D4708222A387EF16DBC7D
SHA1:	AB8707BCA294E9F06913523F0E6A3ABDA6F73983
SHA-256:	0996D686960A75C9AB831217EA9C73840A88EA30814B5D0EC0CBAB52AC647754
SHA-512:	9D7B2D3B14DA175C994B1B3DEB3B658D511D07B2026C7A69B82602AF471064A00727286ABDCDBFFB8D685C2FC25FFEF8FFBFAD6A328DC9E16151D7F87FF89F1C
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/45428.d50e11e1e27c0917ea14.js
Preview:	...........\.s.F..}...N.". .&!."....dkV....I"........}.... .....V.iI`...w}...`FQ..4.Z.Kf.-.W....b.~.)....2.....}.tye..u.h]^.........N..[....<.dn.b.._....[.(a...M..(.x..........7s......'.r.>..0.!.[&i11.e....ooo.......y.(a..8I&.t..,-O.$.....F.MLv....IXQ..d..rA.}d.2.Y...31.i.......].o...1Y.7L..B.{.......s.g{n.?xr{.7.C.3Dn...O.......................M...5.S]....=..Pmx.n..1~.0&.lA..]....F..&.._>X............W.1._c..=w....if.R..'........n.y.w.dm..L9.`.d.v.R..VM...."ZQT.Jr.i...8iw.e@....r.@Z2...k6..F.Kv.,........L......A.o..d.N.e...o...P......,U..K.....g...O.`..$..O...i..Y..6.9.V,/._.b..2......G.ef..9...+..wl......H..s#6..dV1.....#.@......NJI..>J.O...q.V<)/.+..ULZ4..UX~..@../...>}.....<5..pP...QFl..L.R..-.l...5M..0.]..0..<.O.F..).......<..\|k#da6....o.w....O........H..O2.X..\.....r.h....9?.[.Lw.;[.6.ea..R./n.82<?G.U.D.*..v....=.,5..9...F..T...-......f...,..U..Z.......I..\..y.`l..8...m...\....a.F...n..D.\.;].y9.Q.../..}?.~...l.6...'

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 50100
Category:	downloaded
Size (bytes):	12636
Entropy (8bit):	7.981298958893935
Encrypted:	false
SSDEEP:	192:t5ZSijpbSqp0nyu0t0tNLceERCc4aKXX3sUerjqK9/sCqJZLuGlf53nwzLDD:t5RpBpC0t0thcQc438Prjv/GZxlBCD
MD5:	6E187640AC1F62B1536787CFFA48DDE0
SHA1:	9BE1D8DB4F55F82F0B55E2E8B5CD5A1F9D19C899
SHA-256:	3EBDB32D38F8AF5579D407BA2BAD471DC78535B9BFD04CB7F41AA05E06F77439
SHA-512:	AC6B6B13661DDE9C2CF676EB90579D2FAC854FD38FA7224A1013F8B8435E51B60D562C6C3AE346B9DC428D65601A0F6015DEC4E27A5C3D9070D86C4A32AF273C
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/90396.306e7eb0c5c689cee651.js
Preview:	...........}{......)`:VH_..c8..)EQ..v..G.s..VG.I.D....8...}.U........<.9c.........Fk.G^^d.h]..(Y...t..>.\.6.......:.7.;.~....N.....w....i..tp2\|...{..`..Q7.L....+&i....w....?==.u.9~....N7...p0.t..9...t.......Nw..'.....e..^.u.l.,.$...b...q..q.E...1F.-w.hS.A.m...c....G...I&.I..y..hV.......,.FYq..(.e.H.6Me\\.v+.-...F..{.-..}.Q....h.fa.u.jn....Q.uY`0..t.)t.....w9..N;.d..;O...I.f....8.F?.c......O?..,v..C..'.'j..h.o"=K....g.&/..d.L.e...@~._..[\.E.e(.y+?.x....t<......Y...@c..x.V.Y......f.{E.]\\|.D.L{."...}..Z.. 0.....8..q.N.h>../.Y...,.^G.8..M'..!/.".yXY..m..)di..E...."z..M.=.^t....xN.U.N:....d....<....I...g..e....g......S4x.c....1....N....68....3..1.PC.......H.J.6..av.e.........xa./7>mT...E......1i.B..FYu_......._.\|.n..L7E..E.Vx%e.......m\`.E.3w..).....<L.s......m...5v.......,...V.Y.Nw..{..:..Pk.u.e.t....9mb.Z+......]..y.n.l..D.F..&......w..l.,.0.....p...v.&i.4..4..R......>..Y#.6..L.....,......?.j...k.._....p....a.U..T'.5.m.&Q.9t.wWTY.T.

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7256), with no line terminators
Category:	downloaded
Size (bytes):	7256
Entropy (8bit):	5.36289199490694
Encrypted:	false
SSDEEP:	192:FtsAzpT1cxgyv5AvnHeuAprvC7wtVAanvnvdUhW5QUPnyun7ne9GQ7aTT+T1Uu2:FzpOgyv50nHeuApLC7wtVAavvdKAZ9bP
MD5:	EC838DF0AC106DEF8379DCE25B06FB77
SHA1:	01F648C55D4CB1E94E5AB9CCAE4348F024C16F48
SHA-256:	21EDF3106C39CEEB363AB9C8E8D184D95B71FF2BFC4841665B97E58D8259313A
SHA-512:	5DD834ABEEA64F3D79967C97757AAE6705F0A94AD69F05D828DB45EA2890B21A639464138B5DC13B0CB38E3F55FDC0521CE2D3D710B55C5D77A958B882242FEF
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/contact-us/premium-services
Preview:	<!doctype html><html lang="en"><head><script>!function(e,t,a,n,g){e[n]=e[n]\|\|[],e[n].push({"gtm.start":(new Date).getTime(),event:"gtm.js"});var m=t.getElementsByTagName(a)[0],r=t.createElement(a);r.async=!0,r.src="https://www.googletagmanager.com/gtm.js?id=GTM-KFBGZNL",m.parentNode.insertBefore(r,m)}(window,document,"script","dataLayer")</script><script>"virustotal.com"==document.location.host&&(document.location.href=document.location.href.replace("virustotal.com","www.virustotal.com"))</script><meta charset="utf-8"><meta name="generator" content="VirusTotal"><meta name="viewport" content="width=device-width,minimum-scale=1,initial-scale=1,user-scalable=yes"><title>VirusTotal</title><meta name="description" content="VirusTotal"><base href="/gui/"><script>window.VTConfig=JSON.parse('{"apiUrl":"/api-proxy","apiRoute":"ui","firebaseApiKey":"AIzaSyBC8n5UX1E6olWNYbCk4_49jBW_CXiYtj8","firebaseAuthDomain":"virustotalcloud.firebaseapp.com","captchaSiteKey":"6Le-FTYqAAAAAKhTKMsdty7T9sOWkICH4U

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 30533
Category:	dropped
Size (bytes):	10419
Entropy (8bit):	7.979179836928558
Encrypted:	false
SSDEEP:	192:IBEi4MXaW0e6WaXfknjtIOMJ5m0TPCvifk4J6nIZrvwPR3gu5:IvXD0e0sm5m0OeJIkkJJ
MD5:	2A587EE083FDCCA95175E181631D765C
SHA1:	F42880A80DBF4E4D1DF44840EF79BE1E0E995445
SHA-256:	7399E4981B3AFB22BC79B09E4F663C7CC790EBD2888AC619566C6FF7119D429E
SHA-512:	FD5B546DE7454F1F51AF6C563C5E4885F51697D917BE056293EDC6E513C19DE527A24F167809895469A68F62883BFEEBA09112C5FF77517DC56867BBFE529DBD
Malicious:	false
Reputation:	low
Preview:	...........}iw.F......I\|.....N.V..h.m.$.(ze.l..H..@.....S..@..e.9... .Kuu.U....."...}..b:....<..?.,...t...8.o..........9>.......;.........w......;.+...._'..)...}...K..".,L.......x...lm.^.owvw..(...i(......."..q.......r..b&."..".../..{..E?YL.a.f.Y...w1(..(^^&..t......Y</..@&n?;.G..rS;....HG.k1......a.[0..4...j^..=.Sl.....Q(..~. ..v.".w.<...{......"wR........?..O.{..b.%......V9..8.z.........C..Q.[.C!.ane...x2....A..L...{./.)'....WL.<...^lG.-6...4...NW....0N.....4.X@>(.jr.,!w:^.,.<..Go.N.<p.. ....Q4...B5.A..9Y4.>......K...,....".e.s!.o.(/~...l..0.[...eb...vH.......k@V[...M]'.....{.^>M...6./.....!.j...Z..(.y2.m..C..<.E..:.;wI.0.....Y..i....."...+..&...E<....l.S.eo...M.Y.N.".H....a..Z-...b.."\|?...g...[.e.F.(~...d....p.Lr...0.C9....P.jr.._.~A$.."...8.......vH....]68.u...j>ImmS..^.<.....O.=.%\|...`.^:=o...]....s.....j.sM...b1;...=....H.gk..=.{o.....{........+.P.0.5..E^.3%...BlZ...6{.;......R4.tFB......?.s^...n....D.GcA.....fok.x.q...E4}.%.

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23254)
Category:	downloaded
Size (bytes):	23309
Entropy (8bit):	5.34324162794828
Encrypted:	false
SSDEEP:	384:pwUCMDTym/1PCurDdTimS9OSRvottv8X4vIvVykRLt2rVlPingYYQVxeVx766p:prCMPym/1PCDTvotyIvIdlRLt2rVlPi8
MD5:	6AF8C22C7FF0D9DF514BB09C6894CE03
SHA1:	ADB8D4D98475246A00D8BCCC0DD0DA19DDB4E005
SHA-256:	58A9B0F88288D71702C557FF55AD6B4398922F9E63E89BBF2AC52679C94F7499
SHA-512:	67AF2C9C79333CD7B8AF2F5119163727BB8EE75AE16E235FC040C42AC42B7B4450B772204736B1398CFF0E8DE5D5F03BA9A586E85289B0E2E0BD087A9A1A2493
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/47768.412d352cd77efb5fdad5.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[47768,2737,25118,47499],{47768:(e,o,r)=>{r.r(o);r(9891);var t=r(48704),a=r(16645),i=r(92619),n=r(96855),s=r(2737),l=r(18046);let c,b,d,m,p,u,g,f=e=>e;function v(e,o){return function(e){if(Array.isArray(e))return e}(e)\|\|function(e,o){var r=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(null!=r){var t,a,i,n,s=[],l=!0,c=!1;try{if(i=(r=r.call(e)).next,0===o){if(Object(r)!==r)return;l=!1}else for(;!(l=(t=i.call(r)).done)&&(s.push(t.value),s.length!==o);l=!0);}catch(e){c=!0,a=e}finally{try{if(!l&&null!=r.return&&(n=r.return(),Object(n)!==n))return}finally{if(c)throw a}}return s}}(e,o)\|\|function(e,o){if(e){if("string"==typeof e)return y(e,o);var r={}.toString.call(e).slice(8,-1);return"Object"===r&&e.constructor&&(r=e.constructor.name),"Map"===r\|\|"Set"===r?Array.from(e):"Arguments"===r\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(r)?y(e,o):void 0}}(e,o)\|\|function(){throw new

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Reputation:	low
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Reputation:	low
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (50045)
Category:	dropped
Size (bytes):	50100
Entropy (8bit):	5.210419283452919
Encrypted:	false
SSDEEP:	768:ZRbpLODz5gobkPht2rVlPingpVTWMt2rVlPingrVTz9SaWiLhDV6sJ:HpSD5bk5tNngp4MtNngrd9SalVF
MD5:	BBD73F72752CD15AB5905ECDFBE1ECC7
SHA1:	A051B05442B745C78CC89216C7A8312ECEB4878F
SHA-256:	581C7EBE8AFC9E472835B8674BC20815E3B5B268FD8AF8CEF01C274324B8BFEC
SHA-512:	66ED9E462DEBA7B59EF01DBF20F1B9A8BE12AB379D0D7F7E6925F21DBFE5F9DAE798681D243B90E158944DBF16C671244AD299CCD6657BA91BA29362EC7103FF
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[90396,86243],{10212:(r,e,o)=>{var t=o(48704),a=o(16645),s=o(62832),i=o(15323),b=o(30132),n=o(95688),d=o(49608);let l,c,m=r=>r;var p=function(r,e,o,t){var a,s=arguments.length,i=s<3?e:null===t?t=Object.getOwnPropertyDescriptor(e,o):t;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)i=Reflect.decorate(r,e,o,t);else for(var b=r.length-1;b>=0;b--)(a=r[b])&&(i=(s<3?a(i):s>3?a(e,o,i):a(e,o))\|\|i);return s>3&&i&&Object.defineProperty(e,o,i),i};const g={google:i.google1Icon,twitter:i.xTwitterIcon,github:b.githubIcon,microsoft:i.microsoft1Icon};let h=class extends t.LitElement{constructor(){super(...arguments),this.disabled=!1,this.referrerRedirectTo=""}static get styles(){return(0,t.unsafeCSS)(d.A)}render(){return(0,t.html)(l\|\|(l=m` <div class="vstack gap-3"> ${0} </div>`),Object.keys(g).map((r=>(0,t.html)(c\|\|(c=m` <a class="btn btn-outline-primary rounded-5 hstack gap-2 align-self-center ${0}" .hr

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (701)
Category:	downloaded
Size (bytes):	558800
Entropy (8bit):	5.6661858145390775
Encrypted:	false
SSDEEP:	12288:HHe/N32Dr0RnSXaKyEtG76ZKj1wa89jzQoDjU3+VLs/k5lS64cflFT3O01d:eMapiBMKZxRflF3d
MD5:	88A5FED5C87B1D3704AB225CFBE7A130
SHA1:	D64243C18FBAA356E4ABAE8414CCC4772D64060B
SHA-256:	F8E5F5CE9FF44073CFF24BCD3D2B8AA4E67B67891B14FF929FE4743880FDF82E
SHA-512:	8B8D1C9F4C36FD2383C96D0D484A6692F70422934BCCD3DB1F0787E1B753F7D5A8F0C91934805C4D865AED3D4673FF478F0AE23746D0C0E005E60848543B3D33
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=function(){return[function(n,S,D,d,Z,l,h,R,O){return(((n^53)&19)==((n&((((R=[34,2,46],n\|72)==n&&(O=St(function(G,A,L){return L=(A=(G=function(f,H){return(f[(H=["replace","indexOf","trim"],H)[1]](d)!=-1&&(f=f.slice(f[H[1]](d))),f)[H[0]](/\s+/g,S)[H[0]](/\n/g,Z)[H[2]]()},G(Z+l)),G(Z+h)),A==L},D)),n)\|56)==n&&(h=["https","",0],D==""?O="":(d=g[R[2]](24,!0,h[1],new OI(D)),l=N[30](58,d,h[1]),Z=N[36](25,h[1],g[40](40,l,h[1]),v[21](R[1],1,S,D)),Z.D!=S\|\|(Z.A==h[0]?E[30](90,h[R[1]],443,Z):Z.A=="http"&&.E[30](96,h[R[1]],80,Z)),O=Z.toString())),11))==n&&b.call(this,S),1)&&(O=x[42](16,C[42](44,v[R[0]](23,12),S),[u[20](3

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Reputation:	low
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 40453
Category:	downloaded
Size (bytes):	14520
Entropy (8bit):	7.986606215078307
Encrypted:	false
SSDEEP:	384:ry5GEs/taTFMj/kbL6M/+MgFWC5JGOKSEtjmCWKH:Qs/tay/kbN+NJCOKhjCi
MD5:	37893C0B811FD4E1C7216CFC6B9E19EA
SHA1:	99352023FBDF00CB2722918E51EB036BB38CF438
SHA-256:	98CB13A5D98C26E525BAE541EBD744EA823A9BD763CE9637373D99A742C7C9E1
SHA-512:	02DB2726F559A7A2FE07D91844AE38B7C6FD3AC139AFDECCDC991F2E42E96379669F92E594963E754F3B863C403BE5243D73818754AEA349F35AE4F00ADD9349
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/stackdriver-errors.3069a6025a2308368f46.js
Preview:	...........}k{......4...&D.....q...9.....\(Y.Q....0.h.#q...oUw....Irv....F./.u...Jg.....<....r...>Yd'WI.._yws39...Eu.L&.....p.].{.?x4<_..:+. ....?%e...(..r..(.....Tu.M..'upo..{.q....:.q..Y..u..2O..mY.j.y..\|..1<:....z{Q..}<..$u..'0.7GA....(.....U..S2.1..G.}..g.q8..7.zQ...RoR.uv...o.q.j@...izs..O..<-..U....b.=...N}.U}i.-.`.#.h...1.....^.u.....-_.h..^....ar...k.e...;/.(...$..#..\.(......I. .2J...).V.0..`..~.....=.....$=.q...8...a.e......^?.5.b.e:..~..$......Z2....q.O..[...=..x....$.....@;...W.YV......Y..A.c.V.u+u._...D.....f.@.n.tw....q.L..%.....zv3...K ..#f}'.......>.W.......M.i.(............^.i.u.s.w..'`E\.k.^9.?f..ZV...SW. (.%.dX.Q..;;.[.*..4..A.....bQ=..;`.h...+....,.`f.\..y.\..,.B..XE.,O.,.N....%..lq.......0_.v..r4..O@.....e.?@...t.vt.7.H....6@......)!O...U....<".>.......jaC....P.J.Y.A.N...N>..\......p..;....:1@.@.....W.j.}..8..Y..-x...........5d...6..R.U.\x<..A..y.3.Y._.O.fZ.E.W8..0..f..`..+...Qh.W.....9..........T.2...,Z.w(..{.^

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	171656
Entropy (8bit):	4.973490331542716
Encrypted:	false
SSDEEP:	1536:Oil+flao0nR6/Nf9xTdurFvB0rxCqQp6+EvADbEOkIUWWjQS9bF8z11:HlO4fRCNrT8hvWAb/EvcoOVTWEgSP
MD5:	E5D4F5C6407A92BF25B33BA9870902D5
SHA1:	6171A47A47CA21D248D936234832ABE8A4F4928B
SHA-256:	CCE6211AEE82BD841340B632D09DE6755EB060BFB63DF2EBB589BD6E72194224
SHA-512:	93EB5C48B3D613AAB489F3DBA0DDD3B8314B928A312E6BBED96FA25344C63EBDE5997BCC397ACD570485F46E2598B56968291D92430415BD70E473E9C52C3BB9
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/ui/domains/ghabovethec.info/referrer_files?limit=10&cursor=MTB8fHYzfHwxNzMyMTU2OTQ4fHw1Y2NkYjc2MmU2YzExMmNhYzI1YWI5NzdhMzliZjNmMzU4NTVmOTVjZGFlZjg3NDY4NzRjN2M1MGNlMDcyYTY3
Preview:	{"data": [{"id": "010c448f37f5cd8014f2178007a7b78dedfefb4113477cfcebd427ddafe2686d", "type": "file", "links": {"self": "https://www.virustotal.com/ui/files/010c448f37f5cd8014f2178007a7b78dedfefb4113477cfcebd427ddafe2686d"}, "attributes": {"size": 788573, "last_analysis_results": {"Bkav": {"method": "blacklist", "engine_name": "Bkav", "engine_version": "2.0.0.1", "engine_update": "20240914", "category": "undetected", "result": null}, "Lionic": {"method": "blacklist", "engine_name": "Lionic", "engine_version": "8.16", "engine_update": "20240914", "category": "undetected", "result": null}, "tehtris": {"method": "blacklist", "engine_name": "tehtris", "engine_version": null, "engine_update": "20240915", "category": "undetected", "result": null}, "ClamAV": {"method": "blacklist", "engine_name": "ClamAV", "engine_version": "1.4.1.0", "engine_update": "20240914", "category": "undetected", "result": null}, "CTX": {"method": "blacklist", "engine_name": "CTX", "engine_version": "2024.8.29.1", "en

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	25
Entropy (8bit):	3.733660689688185
Encrypted:	false
SSDEEP:	3:YBECZDZYn:YfDm
MD5:	D46578B2285409040C0A187E99463AB5
SHA1:	F9F98D780E51C6A123AF57D7E7ECCFBC05E14B53
SHA-256:	658D3226AC092BD10F4EFC2D30750B4A2434040CD3EB403CB87847E91772A500
SHA-512:	D996CD9A6258C1C1A0C72C6EEB19FCC5C214B53806F6CEC5C4500F7ED42C2963919C36DAB7556FE1073619BC067ED2D875F2DE050772AA81131F53C42A9EF8C2
Malicious:	false
Reputation:	low
Preview:	{"data": {"show": false}}

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3344)
Category:	dropped
Size (bytes):	8972
Entropy (8bit):	5.450747283346083
Encrypted:	false
SSDEEP:	192:5miE6gVWv3BhTi2Ypi6oENm/L1Nx3lPO1E1wvbvwenvjvI2fv3vkiUvJv2o2tiSL:5m91VO3XTi2YpiTENJLwevzI2nfkiw98
MD5:	42E279A6A38A67D4F021A55C1BCC1278
SHA1:	4F55A9E67B7A972B8528BB33E6EAA9769A75A46A
SHA-256:	6D5571A68DE7C78FE0FC74A3B23281A1E83BE9FEEC17D19BD01556153D4C7BB9
SHA-512:	A35DE9E7F9426E76F06FB23549FB3B3C96E7BFD844AFC41A3CC91AF3546021E707125AD03318B6003BC3F37B4E5BBC76D63D944621BBE0756F2763A386039C6C
Malicious:	false
Reputation:	low
Preview:	(function(opts_){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f=this\|\|self;function g(a){return a};var h;function k(a,b){this.h=a===l&&b\|\|"";this.g=m}function n(a){return a instanceof k&&a.constructor===k&&a.g===m?a.h:"type_error:Const"}var m={},l={};function p(a,b){this.h=b===q?a:""}p.prototype.toString=function(){return this.h+""};function r(a){return a instanceof p&&a.constructor===p?a.h:"type_error:TrustedResourceUrl"}.function u(a,b){var c=n(a);if(!v.test(c))throw Error("Invalid TrustedResourceUrl format: "+c);a=c.replace(w,function(d,e){if(!Object.prototype.hasOwnProperty.call(b,e))throw Error('Found marker, "'+e+'", in format string, "'+c+'", but no valid label mapping found in args: '+JSON.stringify(b));d=b[e];return d instanceof k?n(d):encodeURIComponent(String(d))});return x(a)}var w=/%{(\w+)}/g,v=RegExp("^((https:)?//[0-9a-z.:[\\]-]+/\|/[^/\\\\]\|[^:/\\\\%]+/\|[^:/\\\\%][?#]\|about:blank#)","i"),y=/^([^?#])(\?[^#]*)?(#[\s

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 22141
Category:	dropped
Size (bytes):	7439
Entropy (8bit):	7.971452391374528
Encrypted:	false
SSDEEP:	192:SY/hdysLAoKPCGJNR2DRqgPvCUI/jmAxMd8dUmf+piUWVLTEYIve4s:L/hoQw6uMRvCUmmGUA+pirpIYIO
MD5:	AA9305413744D4F3D69A99FBC532D23C
SHA1:	E8E652214B31631AD480CF5D6AF257577479FD2C
SHA-256:	7990E6EE2A4E81EC36DB5C9D786971C0BD502161ED33D2EED406582033FF661A
SHA-512:	12E2621F0542FC3728219EB3264C5B9016D0579D69EDC98196A423D5F1FDC63ACF2483F946A67292A53448B29C4AC548F85CA5E02D02C336615AE1315DEF8596
Malicious:	false
Reputation:	low
Preview:	...........\{w.F...~..dg!G........3.x3....s..>DH.(.....a...W..%.3y...~V..K.-2aey..y..h.....o....6........#}.?~.n..E6...p..v...%...s[.acp...R+...v..;h..>v..G....a....vX?@.A.a..o...t.......~.aG......v.M.h<l....t:..}hu...X(...~...F...=j.s\|<....Z..f-h.n...5;....2.N...(..x..?.6.#.[.....C......+............~i.........W.s.g................ ...........$.(....,.z.t...8..H.\|..O...~....`.<K..F?.?w'".w...&s.../D..<O.:Q.....z-.. ...dl].q..O..4..}n .$.r..jx.T.{,"0.....A..uZ...y.9N......u..z<..).z..'..0..........q.E.[...$~.D.2..0...j....(.....e...E.d.........O.h,...Sw]..l..a...p..>\.o...I.<._a.A.......V.X~..G...59....+.tP[.Q..}.....c..0..r}>.\....."...M....9..z9.u..EV.c............hv7'.X.$.M..jbB.,..j.,.....,..D.0%.>.W.GW.......8.....Q.0sO.[...q.Z..0JP....u...S/...Ik....A.s..:....y>.."...b8.^ .....`.....g.....7....... .....B........8..s...u._..3...'.9..R......n.f..U&...J.I..8.."...y2'^.& ...x.....{!.."......S..]R..".S.4-Q...l..._$.Q...$..Oh....G......

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 19738
Category:	dropped
Size (bytes):	7828
Entropy (8bit):	7.970978417312552
Encrypted:	false
SSDEEP:	192:Ub4UQAdpaF6VhIqc9dcag0e5foUK3Hyr2mGHrGiQRn7U9LwMn:UkHAdp46VhHc7cagVw3HOXGHFQRnKwM
MD5:	61D37AE2BBF5334EAEDD2CE7ADB81074
SHA1:	1B9C1EC66AA1705D921082B786ECB7FBF02BBA71
SHA-256:	4A0541EE665423AD7E24D7792B58D1B205D81F1C79FBA108386AD739AE692EA6
SHA-512:	CDEAA26DC75DD13E492119970EE62D75519B534BA334425BE5B363DC1CED59354AC661B37DC8517DBFDE5CBE9B0CB6CCA82470AF4958A057489B877A55DF7479
Malicious:	false
Reputation:	low
Preview:	...........\.r.8.~.[[..$..]4.....;.M.{v.q..%q#..........@.....q.vc...}Gw...0;....t...Mr..ib....(.r.>_...-....w/^^../>]....K...a...\|^..:.....?K3.+..."...iP.h..d./.t..Y.n.S...~..3..,.2..n..{fE..$.:....].....x<v.".t'....,.;p:.......q...Ck[...h..c.c4\|..`..N.Q....^..@k ._.p..p..:......{lc..ll..M.[....".xl.L...X.]7.z..r...36...........bDV."....U.vs{.eZ..,K!.,.n....h.DrVh.f...d.\.-..M.C?..x..,".....x.C.J$2.D<..^..J..\|..wGItw..0..z.U.Gv..PI?;._ON....&......ds....,...p...%.........G_...L.wj2/..$_........V. .7....{.W)..){...)...+...k<..4kn.Qv6....\|.%.0.fi<m..<Z........y.5..c......a~...#..i.'.i.....<....L.........m..U".J.h.....V0.;.sD.......h2Q..2........acv..ur.m[sQ.k...(RJQ...,.Y{..[@.1......%. .c.BHv}...P..p..-..Ga0..'.C.u.._\|.....\|.C..v>....-.8...-AB..%.k..t..)M..i2?".)..ys..yJf...#X 9.Q.Z.^*..k..j.2m.]..Q....B..-X9-.{..l....~s...Q.t.M...nEdb.Ny.(...I.....4Cm...^`98.(."^.../%0vQ.3........N.4:...h..y.&.u..S..2........c.%.U~.(l.m..`.^j.xq.ZZ0`....a.o....a.

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (56848)
Category:	downloaded
Size (bytes):	56905
Entropy (8bit):	5.448984999759692
Encrypted:	false
SSDEEP:	768:W2jZ/ObueXiCu626c602DcLluDpO3LH+2ZeTWaC0F+xyvrnCYjo/wAht2rVlPinr:WS2De89O3Le2Z8x+anAptNngPtNngU7y
MD5:	B12C80C10A4A0B1EDB50281FCB2162C6
SHA1:	F5EABCCDE16760E15B49881E17556B7C1299B662
SHA-256:	C7AE1BD912819B25E841D3CB44E9050D4EC009649C9D8EC066A775474C7A534D
SHA-512:	8F1C0311330DD16E5C2CB04F5F861C56291A6C6EF2EB8670111AFCDE09F2B2F615E6BAAD4D65A19CBA6D605440B84FEAD89945CEFCFE1CB3A1B42BFF69E7FBE6
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/18625.f201464ef45c9d80f24f.js
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[18625,37221,85043,67173],{54293:(t,e,i)=>{"use strict";i.d(e,{r:()=>St});i(9891);var o=i(48704),l=i(16645),s=(i(16264),i(71012)),r=i(31088),a=i(62832),n=i(21903),d=i(51560),c=i.n(d),b=i(15323),u=i(45241),h=i(95688),p=i(20354),v=i(22894),g=i(56870),m=i(36468),y=i(85200),f=i(70051),w=i(92619),x=i(96855),k=i(96987),$=(i(37221),i(57560),i(21668),i(71775),i(74156),i(77554),i(69763));let C,_,A,R,T,S,F,I,P,L,O,B,D,M,j,E,N,z,K,V,U,Z,H,W,G,q,Y,Q,J,X,tt,et,it,ot=t=>t;var lt=function(t,e,i,o){var l,s=arguments.length,r=s<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,i):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)r=Reflect.decorate(t,e,i,o);else for(var a=t.length-1;a>=0;a--)(l=t[a])&&(r=(s<3?l(r):s>3?l(e,i,r):l(e,i))\|\|r);return s>3&&r&&Object.defineProperty(e,i,r),r};let st=(C=class extends o.LitElement{get collectionTypeToString(){var t,e;return null!==(t=u.KK.formatHyphenatedString(null===(e=this.coll

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 61923
Category:	downloaded
Size (bytes):	16791
Entropy (8bit):	7.989240114604167
Encrypted:	false
SSDEEP:	384:NRdCvUaOCkqbXV+0+araCH1RFd2LHZ+OjbAyQlVWDlIhDfVxPyA+V81P:YFOCkqbFvFmCVR7UjEDWh6JxKRa
MD5:	B2C312BB06008B34E6693118BA686138
SHA1:	136422DEEC99DE945611CD57CAA73007D9E8FABF
SHA-256:	70EEC90014A9096DBEB943ED78C0A67A61751453FA68A36F6175E1B2B117D68B
SHA-512:	BCB588490BC541D82B4FCB6FFC9D77DF240D07C79C7A46F22F0D97914B26E4CB91CE8062E6B997BA34BF5C5074420A553AD45ABD91E96EFE153D4BB9A89AD999
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/30192.c1eb6d619c8f6b7d4a0f.js
Preview:	...........}.v.F.....0&.M.4I..P..Gvf<....d..o/.$A.1.p.P."s........./(\.Kb...;q.K.{uuu..]g...i8..V.D..e0Y..w'.u.."?[.gK?..7.}...m..Zg..7;........{.a.w...............{...../....ak..;8h{>~.=....?...v.m/..{.{...........`8......w.;mo......h.........~...v.moE_.{4.b..[......[....ak......a.?..v.y.\|...17.CE.(......so.]z.y.w....{.}.y........{.}.=.~..^z.{?{........}.....8.?........4..X.....$......2.....y..`..w..Q....x..g.o'?..{...^...H.A6M.U..-..(;..-7..x._..d.....>\|.)...`..~....n?......j..hA.8.......Q..[.8...m?\|.J.-Z..J..1..9z...h.?\|H.Gi....A....z..`..Y.n..i.g....wz.e..g.]O..S..,O.8.....08.oy_.6nM....2'x...,s..0......<H...X.....nu.].Km/_.Y7..(....m.gO........6.5..x..o....X..4.A.f.D.;..5..ur.....r......!..../._...>,...W.E..:u;.2....wZ!.i..>.}..3....eq..s.9Y.AV.t...n1.3.6.W.a>...u7a.....,.DA}....q.~t.Ag./.....%..I...s.m7...z.d.b...j.jcE....@.<.........i........}.@]........~I.U.....Up.t..0.k-.e...>..{,...y.dY2..2<!..y!v{.........O..qy.LO.u.

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 22078
Category:	downloaded
Size (bytes):	7215
Entropy (8bit):	7.967880879123394
Encrypted:	false
SSDEEP:	96:xdaCiGgHMpAjTll1sPXfRNUYi7nWq44ivSlwqZGg9SZeed+niaY5CZpxNIGSEzrK:vaPHvdjsPvXUEq44bdZG3MgKR7xNlfLm
MD5:	788A4A0EFF74DE193709B26510B7DC3D
SHA1:	504E02656228CE1F176B696FCE6927264C0404C1
SHA-256:	0042AD95432F50DDD13304849653FF58EE2687C8801AAD5C0BDE3136D77AC991
SHA-512:	F6D4F3A512E8A2C3947AF1A33818C583A335C9A7D62C783CE5581F67A9BFE39327C558673C6CCB758A26E3413F86E0680F48C398943C2B86A7FF3D1B35780231
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/84569.030dc629fa8cc22ed550.js
Preview:	...........\.z.F..?O...7...I..E.v.3..;...h,.(.h...(JfS\|.9.6.7-=v..j.u.Z.Uh,.T.Lc.......-.....".t.?...(..{......`.....e...;..W.N..t.2....>_.D.S..{.?k.z~..v.w......n.......~......vN......4...V...q..s.A..=;..n...c....n..9..a.3......S..OB.>gC".&./.E....O......,f,.U..\|. .......,..xQ......<.0........./_...9/J.....t.6....\|9g..y....>{..$......2..B....z.,.#...T.L..l...akX5......=s..U.n.......}.".<....%.2wP..Y..Ze..i..U??Z....;..,..}.,O..~N........!l..P.V..H.A...=.O.H....,..Q{]b.V~..,./.g...J6..9<T.pY(.G..=Z.C..."M..X.^.......c$.#.lN...8.......aa.........[.y4c.HY....'.x...C.-3.!g.9..q4g..Z.4./.i.Y.~.b.k....`.g......E8.v~...;...Z.#....(.0.,..'i..,sF..mT.i>iV......S.f.iT.U.I".5yQd<.7.....Y..P.,9.s.&u$......8z~.......k!.........8..&.\.#.;.8<.;.s......~.../A5-n?HB\|...&..Z.5w.{......sh...%.%...8.Z..`..]..s........,aj.h.Y.Y1/....Y.,...k8.....NC..j.....e..)...Nv.$.h[..u.0......:...Xi...... .t2...8fU.)./.....D.T.6z.BC.wx..2...8.fi....k.yPei..p..l.`g

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 18981
Category:	downloaded
Size (bytes):	6658
Entropy (8bit):	7.970684268514322
Encrypted:	false
SSDEEP:	192:bXV5D9/IRR20FYq/jLMdb32ewh8QmJC1rmUAS6SvH:55D9m20Wq3MAyRIrl56Sv
MD5:	2E54D383A81C50EB46E0C5FEF3E1F031
SHA1:	CDD442B25A5FCC769B0AE1C4974529FFC4475BEB
SHA-256:	E2FB54E1E177EC74BD10FD32A0D67F9EAFABFF76DDA71C9A90D8D395693A2C79
SHA-512:	EE7181D46B0E3D898F9BB3C16550B6E60E6ADB124C3FDC1B76B2F190EB60866315383F3566D0BA11AD8FE75D6B913293ADA7268F3C3570C169470257531C217F
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/67920.83f748ec82f4e379de06.js
Preview:	...........\}w.F.......z.G......:..........B.@..XI.q..}.........<.[...;........Y...Q-.......\.N...Mq...f~..?.......7_...w..~...Y..A.p......?..aTk.z.v......6.N>.E.~..;Q...v..$.7..v.....m..Zu'..^.....F.Z-jFc..E#.t.Z..?B...a....?..q...^..;S\|l7.}\|\P.N...}..{.u...V.X.1..C.1..k4.36.l....:t;.&.}..:.n.(..u.\;.8W.s.<wN.7.s.9O.........y.<s^:.;......_.......qqD$..p.H."J.IJ'.3)3...&..H..E2). Z....$.8.....t.z....o"...,....{. ..E..;..(.....aq7...:...c..l.....E.f~!..Pu/.J\|.D.!.c1.?,..n..?.6.\|..a..._..%...".%.A~L...._$..O...Q&.E.X...%{{j...G..T.d..e..~.[.C!.0..^.,.4../."E}./@...y%e.N1.r/.F.\|...-..].i\D.K.6.O.`=.c.a..,Q.V.G.Q.g.-.MQqw....h^i\|...v".....(..2h.],r`&....pro...X.^\.k.h....L...w..~...`JX+......y.X.Dfc_3....l.(....w4w.l.D..&.<PN....n.(......lA..)..Xe...N..4M...9Q..#.`.....(.f~\..>b.Y...Z.m4._.v..w~T.(f{{.d....Lo.8.C\|.G .U....".....f.$.@.d.p.L.E.....,V+.X.....YR.m....U.r#..0...,..n?}................N...L^A.........8\...n.w...z.&.!.i.f.

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	724
Entropy (8bit):	4.875954072356056
Encrypted:	false
SSDEEP:	12:t4TtAhJnBnMs4E32V+KbwXI7Yze2ox/jB9HJZ8bvxZKY:t4TtA7Zg+KbwXI7sevx/jTHJQl
MD5:	D389389752A288227E0EADAA6C545738
SHA1:	89CDC9EA0BBA1143EA1D0C7F6BA5C13FF92C3875
SHA-256:	8E887158E61E4578F4838FFDF0BDF046D6555F37FEC818EBD5484EAF40C7DC2C
SHA-512:	73FA3FF982842B52CE0CB038C1FF41C8707B6F53166D3F4655C38C2913558DD3A73C0218E6A6C13B44EADBCF3C409C2F2D9112BDFEBD3D295E5DFE23B0CC25D5
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="150" height="150" viewBox="0 0 150 150"><circle fill="#3B61FF" cx="75" cy="75" r="74.5"/><circle fill="#FFF" cx="38.1" cy="74.3" r="12.2"/><circle fill="#FFF" cx="76.3" cy="47.3" r="7.8"/><circle fill="#FFF" cx="66.3" cy="78.4" r="7.8"/><circle fill="#FFF" cx="95.8" cy="65.8" r="7.8"/><circle fill="#FFF" cx="105.5" cy="43.1" r="7.8"/><circle fill="#FFF" cx="111" cy="86.5" r="7.8"/><circle fill="#FFF" cx="97.4" cy="102.9" r="7.8"/><circle fill="#FFF" cx="61.4" cy="107.1" r="7.8"/><path fill="none" stroke="#FFF" stroke-miterlimit="10" d="M38.1 71.9l41.4-26.6m-15.1 65.3L39.1 81.1m32-2.7l-38.8-4.8m46-26.3l19.4 19.4M78.3 47.3l29.1-2.3m4.5 42.8L96.8 66.4m-1 35l1-35"/></svg>.

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	456
Entropy (8bit):	5.1759373642048105
Encrypted:	false
SSDEEP:	12:t4TtAhJkBnMvEG3B9Pw6H7tRYsGl3qzU923DrQEKFLhll0M:t4TtA4WTPFHh+NJ9MrpKVhllT
MD5:	8E946272C765209B9CBB9D0D8BBB1208
SHA1:	909E056092B766C55A91B9BEB0781725B9BF6930
SHA-256:	56864C389EB49B33E56EA82724A74399F321891E44FE16EC93F8911092270E54
SHA-512:	B633AA5CB870D3FF7C0E9FB0D71D9C43BCBF84BA5F7F0683D78ABDC144862E1A4123ABE6CF97B393BE7BF895255C94BD7BBAADCC4973424B663320ACFF1C6386
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/images/overviews/ico_graph_3.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="150" height="150" viewBox="0 0 150 150"><g fill="#3B61FF"><circle cx="75" cy="75" r="74.5"/><g stroke="#FFF" stroke-width="4" stroke-miterlimit="10"><circle cx="63.7" cy="76.9" r="26.2"/><path d="M54.3 76.9h18.8m-9.4-9.4v18.9"/><path d="M100.6 89.7l8.9-30-9.4-2.8-8.9 30 2 10.4zm1.79-40.302l.74-2.492 9.395 2.784-.738 2.493zM100.1 87.5l-7.3-2.1" stroke-linecap="round" stroke-linejoin="round"/></g></g></svg>.

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2694 x 2670, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	756034
Entropy (8bit):	7.9570581423803475
Encrypted:	false
SSDEEP:	12288:x/+up5Zgyonra011vGZemcVgxMuPEaAbH3tr9zlgbJc7nXDhE/72FAuTAnJNv:v5yyO9GZgqyYEaAjzqbmh6u4
MD5:	38CDD5BDB99F3EC4F74843567F5FB92C
SHA1:	D44F128BF71BBE269777031961025820FBE40EBB
SHA-256:	BD585FFB426BAB53D1408838843D8CEBFA19A566BE2AF34EC3F3680684CAEF0A
SHA-512:	E72BFDFEE93D31DB5BC441B07E9B2D6C4D25BEE4E078D2BE251ABA0386564E4EDE64148A6DEEDD11E90090EE750C471F9E10323DD90C9201F3F699A802AA1DA9
Malicious:	false
Reputation:	low
URL:	https://www.virustotal.com/gui/images/overviews/virustotal_graph_screenshot.png
Preview:	.PNG........IHDR.......n.....+.......IDATx....x..?..E.Z.z.m.w...)6.i1..'\ ....!..\...F..BK....i666`.eKV......;3..v..P..%...<<f4..;.3....f.aEQd...............`..P..................!y..................<................@H...............`B $...............0!....................................L..................&.B..................!y..................<................@H...............`B $...............0!....................................L..................&.B..................!y..................<................@H...............`B $...............0!... ~.......*..............`..................&.B..................!y..................<................@H...............`B $...............0!....................................L..................&.B..................!y..................<................@H...............`B $...............0!...................rT..(B.PMMMEEE{{..fcY6333'''777//O.R...............`$.._.ZZZ.N.j6.....\|.+#%..B4......a......GI..+.\|.._......4.P(...z.

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (17573)
Category:	dropped
Size (bytes):	17630
Entropy (8bit):	5.136889810703249
Encrypted:	false
SSDEEP:	384:hkWFuZCKN+36Kozut2rVlPingBWEQRGck+T0tr+tJHWbP:hk6uZCKN+36Kozut2rVlPing8VGShtJY
MD5:	FA9F2BF633033B04EBFE7856120C4D50
SHA1:	728597185A82761AA8BF7170B2CDD2D733B9F6F0
SHA-256:	C175CA022417B991EC667C272496AAA78F025CDE46E4EBA16A79C1FDA211E969
SHA-512:	B78EA731AFDBB50940E1FD95E466E7E226EEFB78E8203C92D90B935F40119A94919E67CFC743F31B409451B66010F5BA1D17435320469D71243B65F015318635
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[27197],{27197:(o,r,e)=>{e(9891);var t=e(48704),s=e(16645),b=e(62832),n=e(15323),i=e(9417),a=e(45241),d=e(71012),c=(e(42320),e(92103));let l,p,g,h,u,m=o=>o;var v,f=function(o,r,e,t){var s,b=arguments.length,n=b<3?r:null===t?t=Object.getOwnPropertyDescriptor(r,e):t;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(o,r,e,t);else for(var i=o.length-1;i>=0;i--)(s=o[i])&&(n=(b<3?s(n):b>3?s(r,e,n):s(r,e))\|\|n);return b>3&&n&&Object.defineProperty(r,e,n),n};!function(o){o.Right="right",o.Left="left"}(v\|\|(v={}));let w=class extends d.D{constructor(){super(...arguments),this.disabled=!1,this.openingDirection=v.Left,this.smallIcon=!1,this.entityDenomination="collection",this.highlight=!1,this.subscriptionChoice=!1,this.subscribersCount=0,this.showSubscribers=!1,this.isSaving=!1,this.noChoice=!1}static get styles(){return(0,t.unsafeCSS)(c.A)}get isSubscribed(){return this.subscription

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 21, 2024 03:42:05.061465979 CET	192.168.2.4	1.1.1.1	0xbabf	Standard query (0)	www.virustotal.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:05.061655045 CET	192.168.2.4	1.1.1.1	0x91d2	Standard query (0)	www.virustotal.com	65	IN (0x0001)	false
Nov 21, 2024 03:42:07.128406048 CET	192.168.2.4	1.1.1.1	0x6a95	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:07.128552914 CET	192.168.2.4	1.1.1.1	0x6e29	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 21, 2024 03:42:07.182234049 CET	192.168.2.4	1.1.1.1	0xae80	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:07.182379007 CET	192.168.2.4	1.1.1.1	0x5877	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Nov 21, 2024 03:42:09.395541906 CET	192.168.2.4	1.1.1.1	0xe8b7	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:09.395711899 CET	192.168.2.4	1.1.1.1	0xd4b8	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Nov 21, 2024 03:42:10.587815046 CET	192.168.2.4	1.1.1.1	0xc6e6	Standard query (0)	www.virustotal.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:10.588020086 CET	192.168.2.4	1.1.1.1	0x6669	Standard query (0)	www.virustotal.com	65	IN (0x0001)	false
Nov 21, 2024 03:42:10.932724953 CET	192.168.2.4	1.1.1.1	0xcce2	Standard query (0)	recaptcha.net	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:10.932883978 CET	192.168.2.4	1.1.1.1	0x6a30	Standard query (0)	recaptcha.net	65	IN (0x0001)	false
Nov 21, 2024 03:42:13.395562887 CET	192.168.2.4	1.1.1.1	0x6656	Standard query (0)	recaptcha.net	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:13.395735979 CET	192.168.2.4	1.1.1.1	0x83f7	Standard query (0)	recaptcha.net	65	IN (0x0001)	false
Nov 21, 2024 03:42:13.572747946 CET	192.168.2.4	1.1.1.1	0xef4b	Standard query (0)	recaptcha.net	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:13.572870970 CET	192.168.2.4	1.1.1.1	0x5c9c	Standard query (0)	recaptcha.net	65	IN (0x0001)	false
Nov 21, 2024 03:42:19.457520008 CET	192.168.2.4	1.1.1.1	0xaf09	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:19.457644939 CET	192.168.2.4	1.1.1.1	0x8df4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 21, 2024 03:42:21.855011940 CET	192.168.2.4	1.1.1.1	0xf46e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:21.855149031 CET	192.168.2.4	1.1.1.1	0xca06	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 21, 2024 03:42:29.007553101 CET	192.168.2.4	1.1.1.1	0x3f4b	Standard query (0)	cse.google.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:29.007939100 CET	192.168.2.4	1.1.1.1	0x9700	Standard query (0)	cse.google.com	65	IN (0x0001)	false
Nov 21, 2024 03:42:31.232304096 CET	192.168.2.4	1.1.1.1	0xe939	Standard query (0)	cse.google.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:31.232762098 CET	192.168.2.4	1.1.1.1	0xe585	Standard query (0)	cse.google.com	65	IN (0x0001)	false
Nov 21, 2024 03:42:31.233541965 CET	192.168.2.4	1.1.1.1	0xb2e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:31.233757019 CET	192.168.2.4	1.1.1.1	0xd83c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 21, 2024 03:42:33.438847065 CET	192.168.2.4	1.1.1.1	0xc118	Standard query (0)	www.adsensecustomsearchads.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:33.439007044 CET	192.168.2.4	1.1.1.1	0x84a3	Standard query (0)	www.adsensecustomsearchads.com	65	IN (0x0001)	false
Nov 21, 2024 03:42:34.815463066 CET	192.168.2.4	1.1.1.1	0xe21e	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:34.815623045 CET	192.168.2.4	1.1.1.1	0x6dc9	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Nov 21, 2024 03:43:04.853497028 CET	192.168.2.4	1.1.1.1	0x1e9d	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:04.853626966 CET	192.168.2.4	1.1.1.1	0x1f6f	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Nov 21, 2024 03:43:07.550000906 CET	192.168.2.4	1.1.1.1	0x63cb	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:07.550360918 CET	192.168.2.4	1.1.1.1	0x8de7	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Nov 21, 2024 03:43:10.031565905 CET	192.168.2.4	1.1.1.1	0xbc6b	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:10.031817913 CET	192.168.2.4	1.1.1.1	0xb370	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Nov 21, 2024 03:43:14.131066084 CET	192.168.2.4	1.1.1.1	0x4aff	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:14.131350994 CET	192.168.2.4	1.1.1.1	0xcd6c	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Nov 21, 2024 03:43:14.138662100 CET	192.168.2.4	1.1.1.1	0x7b18	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:14.138869047 CET	192.168.2.4	1.1.1.1	0x7816	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Nov 21, 2024 03:43:14.456420898 CET	192.168.2.4	1.1.1.1	0x6ce0	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:14.456772089 CET	192.168.2.4	1.1.1.1	0xb27e	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Nov 21, 2024 03:43:14.884747028 CET	192.168.2.4	1.1.1.1	0x67e6	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:14.884974003 CET	192.168.2.4	1.1.1.1	0x62f1	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Nov 21, 2024 03:43:16.303008080 CET	192.168.2.4	1.1.1.1	0x669f	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:16.303292990 CET	192.168.2.4	1.1.1.1	0xbce0	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Nov 21, 2024 03:43:16.908509016 CET	192.168.2.4	1.1.1.1	0x1baa	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:16.908699036 CET	192.168.2.4	1.1.1.1	0x6d21	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Nov 21, 2024 03:43:18.414520025 CET	192.168.2.4	1.1.1.1	0xe33d	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:18.414658070 CET	192.168.2.4	1.1.1.1	0xb323	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Nov 21, 2024 03:43:18.842647076 CET	192.168.2.4	1.1.1.1	0xf69	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:18.842858076 CET	192.168.2.4	1.1.1.1	0x3b33	Standard query (0)	play.google.com	65	IN (0x0001)	false
Nov 21, 2024 03:43:21.196938992 CET	192.168.2.4	1.1.1.1	0xf58a	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:21.197165966 CET	192.168.2.4	1.1.1.1	0x5610	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Nov 21, 2024 03:43:21.197717905 CET	192.168.2.4	1.1.1.1	0x9e27	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:21.197849035 CET	192.168.2.4	1.1.1.1	0xa38e	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Nov 21, 2024 03:43:21.208396912 CET	192.168.2.4	1.1.1.1	0x25fd	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:21.208725929 CET	192.168.2.4	1.1.1.1	0xc911	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Nov 21, 2024 03:43:21.752157927 CET	192.168.2.4	1.1.1.1	0xd14f	Standard query (0)	recaptcha.net	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:21.752409935 CET	192.168.2.4	1.1.1.1	0x7df2	Standard query (0)	recaptcha.net	65	IN (0x0001)	false
Nov 21, 2024 03:43:22.997221947 CET	192.168.2.4	1.1.1.1	0xb827	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:22.997545958 CET	192.168.2.4	1.1.1.1	0x9e97	Standard query (0)	play.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 21, 2024 03:42:05.290838957 CET	1.1.1.1	192.168.2.4	0xbabf	No error (0)	www.virustotal.com		74.125.34.46	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:07.356151104 CET	1.1.1.1	192.168.2.4	0x6a95	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:07.356165886 CET	1.1.1.1	192.168.2.4	0x6e29	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 21, 2024 03:42:07.410235882 CET	1.1.1.1	192.168.2.4	0xae80	No error (0)	www.recaptcha.net		142.250.186.163	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:09.623019934 CET	1.1.1.1	192.168.2.4	0xe8b7	No error (0)	www.recaptcha.net		172.217.18.3	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:10.815532923 CET	1.1.1.1	192.168.2.4	0xc6e6	No error (0)	www.virustotal.com		74.125.34.46	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:11.160237074 CET	1.1.1.1	192.168.2.4	0xcce2	No error (0)	recaptcha.net		142.250.185.67	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:13.622920036 CET	1.1.1.1	192.168.2.4	0x6656	No error (0)	recaptcha.net		142.250.185.131	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:13.800440073 CET	1.1.1.1	192.168.2.4	0xef4b	No error (0)	recaptcha.net		142.250.186.35	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:19.685230017 CET	1.1.1.1	192.168.2.4	0xaf09	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:19.685359955 CET	1.1.1.1	192.168.2.4	0x8df4	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 21, 2024 03:42:22.082515001 CET	1.1.1.1	192.168.2.4	0xf46e	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:22.082603931 CET	1.1.1.1	192.168.2.4	0xca06	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 21, 2024 03:42:29.235773087 CET	1.1.1.1	192.168.2.4	0x3f4b	No error (0)	cse.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:31.459913969 CET	1.1.1.1	192.168.2.4	0xe939	No error (0)	cse.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:31.461174011 CET	1.1.1.1	192.168.2.4	0xd83c	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 21, 2024 03:42:31.461189985 CET	1.1.1.1	192.168.2.4	0xb2e	No error (0)	www.google.com		142.250.185.228	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:33.666354895 CET	1.1.1.1	192.168.2.4	0xc118	No error (0)	www.adsensecustomsearchads.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 03:42:33.666354895 CET	1.1.1.1	192.168.2.4	0xc118	No error (0)	www3.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:42:33.666901112 CET	1.1.1.1	192.168.2.4	0x84a3	No error (0)	www.adsensecustomsearchads.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 03:42:35.043452024 CET	1.1.1.1	192.168.2.4	0xe21e	No error (0)	syndicatedsearch.goog		142.250.185.78	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:05.082017899 CET	1.1.1.1	192.168.2.4	0x1e9d	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 03:43:05.082017899 CET	1.1.1.1	192.168.2.4	0x1e9d	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:05.082017899 CET	1.1.1.1	192.168.2.4	0x1e9d	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:05.082017899 CET	1.1.1.1	192.168.2.4	0x1e9d	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:05.082017899 CET	1.1.1.1	192.168.2.4	0x1e9d	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:05.082017899 CET	1.1.1.1	192.168.2.4	0x1e9d	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:05.082017899 CET	1.1.1.1	192.168.2.4	0x1e9d	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:05.082017899 CET	1.1.1.1	192.168.2.4	0x1e9d	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:05.082017899 CET	1.1.1.1	192.168.2.4	0x1e9d	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:05.082017899 CET	1.1.1.1	192.168.2.4	0x1e9d	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:05.082017899 CET	1.1.1.1	192.168.2.4	0x1e9d	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:05.082017899 CET	1.1.1.1	192.168.2.4	0x1e9d	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:05.082017899 CET	1.1.1.1	192.168.2.4	0x1e9d	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:05.082017899 CET	1.1.1.1	192.168.2.4	0x1e9d	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:05.082017899 CET	1.1.1.1	192.168.2.4	0x1e9d	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:05.082017899 CET	1.1.1.1	192.168.2.4	0x1e9d	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:05.082017899 CET	1.1.1.1	192.168.2.4	0x1e9d	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:05.082086086 CET	1.1.1.1	192.168.2.4	0x1f6f	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 03:43:05.082086086 CET	1.1.1.1	192.168.2.4	0x1f6f	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Nov 21, 2024 03:43:07.778053999 CET	1.1.1.1	192.168.2.4	0x63cb	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:07.778053999 CET	1.1.1.1	192.168.2.4	0x63cb	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:07.778053999 CET	1.1.1.1	192.168.2.4	0x63cb	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:07.778053999 CET	1.1.1.1	192.168.2.4	0x63cb	No error (0)	i.ytimg.com		172.217.18.22	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:07.778053999 CET	1.1.1.1	192.168.2.4	0x63cb	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:07.778053999 CET	1.1.1.1	192.168.2.4	0x63cb	No error (0)	i.ytimg.com		216.58.206.86	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:07.778053999 CET	1.1.1.1	192.168.2.4	0x63cb	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:07.778053999 CET	1.1.1.1	192.168.2.4	0x63cb	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:07.778053999 CET	1.1.1.1	192.168.2.4	0x63cb	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:07.778053999 CET	1.1.1.1	192.168.2.4	0x63cb	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:07.778053999 CET	1.1.1.1	192.168.2.4	0x63cb	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:07.778053999 CET	1.1.1.1	192.168.2.4	0x63cb	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:07.778053999 CET	1.1.1.1	192.168.2.4	0x63cb	No error (0)	i.ytimg.com		142.250.74.214	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:07.778053999 CET	1.1.1.1	192.168.2.4	0x63cb	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:07.778053999 CET	1.1.1.1	192.168.2.4	0x63cb	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:07.778053999 CET	1.1.1.1	192.168.2.4	0x63cb	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:10.259176016 CET	1.1.1.1	192.168.2.4	0xbc6b	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 03:43:10.259176016 CET	1.1.1.1	192.168.2.4	0xbc6b	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:10.259176016 CET	1.1.1.1	192.168.2.4	0xbc6b	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:10.259176016 CET	1.1.1.1	192.168.2.4	0xbc6b	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:10.259176016 CET	1.1.1.1	192.168.2.4	0xbc6b	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:10.259176016 CET	1.1.1.1	192.168.2.4	0xbc6b	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:10.259176016 CET	1.1.1.1	192.168.2.4	0xbc6b	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:10.259176016 CET	1.1.1.1	192.168.2.4	0xbc6b	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:10.259176016 CET	1.1.1.1	192.168.2.4	0xbc6b	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:10.259176016 CET	1.1.1.1	192.168.2.4	0xbc6b	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:10.259176016 CET	1.1.1.1	192.168.2.4	0xbc6b	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:10.259176016 CET	1.1.1.1	192.168.2.4	0xbc6b	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:10.259176016 CET	1.1.1.1	192.168.2.4	0xbc6b	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:10.259176016 CET	1.1.1.1	192.168.2.4	0xbc6b	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:10.259176016 CET	1.1.1.1	192.168.2.4	0xbc6b	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:10.259176016 CET	1.1.1.1	192.168.2.4	0xbc6b	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:10.259176016 CET	1.1.1.1	192.168.2.4	0xbc6b	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:10.259876966 CET	1.1.1.1	192.168.2.4	0xb370	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 03:43:10.259876966 CET	1.1.1.1	192.168.2.4	0xb370	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Nov 21, 2024 03:43:14.358546972 CET	1.1.1.1	192.168.2.4	0x4aff	No error (0)	googleads.g.doubleclick.net		142.250.185.66	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:14.358963966 CET	1.1.1.1	192.168.2.4	0xcd6c	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Nov 21, 2024 03:43:14.366270065 CET	1.1.1.1	192.168.2.4	0x7b18	No error (0)	static.doubleclick.net		172.217.18.6	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:14.683964968 CET	1.1.1.1	192.168.2.4	0x6ce0	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 03:43:14.683964968 CET	1.1.1.1	192.168.2.4	0x6ce0	No error (0)	photos-ugc.l.googleusercontent.com		172.217.18.1	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:14.684267044 CET	1.1.1.1	192.168.2.4	0xb27e	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 03:43:15.112344980 CET	1.1.1.1	192.168.2.4	0x67e6	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:15.112344980 CET	1.1.1.1	192.168.2.4	0x67e6	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:15.112344980 CET	1.1.1.1	192.168.2.4	0x67e6	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:15.112344980 CET	1.1.1.1	192.168.2.4	0x67e6	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:15.112344980 CET	1.1.1.1	192.168.2.4	0x67e6	No error (0)	i.ytimg.com		142.250.74.214	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:15.112344980 CET	1.1.1.1	192.168.2.4	0x67e6	No error (0)	i.ytimg.com		216.58.206.86	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:15.112344980 CET	1.1.1.1	192.168.2.4	0x67e6	No error (0)	i.ytimg.com		172.217.18.22	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:15.112344980 CET	1.1.1.1	192.168.2.4	0x67e6	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:15.112344980 CET	1.1.1.1	192.168.2.4	0x67e6	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:15.112344980 CET	1.1.1.1	192.168.2.4	0x67e6	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:15.112344980 CET	1.1.1.1	192.168.2.4	0x67e6	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:15.112344980 CET	1.1.1.1	192.168.2.4	0x67e6	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:15.112344980 CET	1.1.1.1	192.168.2.4	0x67e6	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:15.112344980 CET	1.1.1.1	192.168.2.4	0x67e6	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:15.112344980 CET	1.1.1.1	192.168.2.4	0x67e6	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:15.112344980 CET	1.1.1.1	192.168.2.4	0x67e6	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:16.531944036 CET	1.1.1.1	192.168.2.4	0x669f	No error (0)	static.doubleclick.net		172.217.18.6	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:17.136060953 CET	1.1.1.1	192.168.2.4	0x1baa	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 03:43:17.136060953 CET	1.1.1.1	192.168.2.4	0x1baa	No error (0)	photos-ugc.l.googleusercontent.com		142.250.185.65	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:17.136464119 CET	1.1.1.1	192.168.2.4	0x6d21	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 03:43:18.641910076 CET	1.1.1.1	192.168.2.4	0xe33d	No error (0)	googleads.g.doubleclick.net		172.217.16.130	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:18.642038107 CET	1.1.1.1	192.168.2.4	0xb323	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Nov 21, 2024 03:43:19.070230961 CET	1.1.1.1	192.168.2.4	0xf69	No error (0)	play.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:21.424947977 CET	1.1.1.1	192.168.2.4	0xf58a	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 21, 2024 03:43:21.424947977 CET	1.1.1.1	192.168.2.4	0xf58a	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:21.424947977 CET	1.1.1.1	192.168.2.4	0xf58a	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:21.424947977 CET	1.1.1.1	192.168.2.4	0xf58a	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:21.424947977 CET	1.1.1.1	192.168.2.4	0xf58a	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:21.425534010 CET	1.1.1.1	192.168.2.4	0x9e27	No error (0)	stats.g.doubleclick.net		64.233.184.157	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:21.425534010 CET	1.1.1.1	192.168.2.4	0x9e27	No error (0)	stats.g.doubleclick.net		64.233.184.155	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:21.425534010 CET	1.1.1.1	192.168.2.4	0x9e27	No error (0)	stats.g.doubleclick.net		64.233.184.156	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:21.425534010 CET	1.1.1.1	192.168.2.4	0x9e27	No error (0)	stats.g.doubleclick.net		64.233.184.154	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:21.436218977 CET	1.1.1.1	192.168.2.4	0x25fd	No error (0)	td.doubleclick.net		142.250.185.194	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:21.979701996 CET	1.1.1.1	192.168.2.4	0xd14f	No error (0)	recaptcha.net		142.250.186.131	A (IP address)	IN (0x0001)	false
Nov 21, 2024 03:43:23.224659920 CET	1.1.1.1	192.168.2.4	0xb827	No error (0)	play.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:06 UTC	698	OUT	GET /gui/domain/ghabovethec.info/detection HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:07 UTC	301	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 02:42:06 GMT Expires: Thu, 21 Nov 2024 02:43:06 GMT Cache-Control: public, max-age=60 ETag: "V0s7xg" X-Cloud-Trace-Context: 8a241f5b36545a4e37fe9220e8d950b6 Content-Type: text/html Server: Google Frontend Transfer-Encoding: chunked Connection: close
2024-11-21 02:42:07 UTC	1107	IN	Data Raw: 63 39 32 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 2c 6e 2c 67 29 7b 65 5b 6e 5d 3d 65 5b 6e 5d 7c 7c 5b 5d 2c 65 5b 6e 5d 2e 70 75 73 68 28 7b 22 67 74 6d 2e 73 74 61 72 74 22 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 22 67 74 6d 2e 6a 73 22 7d 29 3b 76 61 72 20 6d 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 61 29 5b 30 5d 2c 72 3d 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 29 3b 72 2e 61 73 79 6e 63 3d 21 30 2c 72 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 Data Ascii: c92<!doctype html><html lang="en"><head><script>!function(e,t,a,n,g){e[n]=e[n]\|\|[],e[n].push({"gtm.start":(new Date).getTime(),event:"gtm.js"});var m=t.getElementsByTagName(a)[0],r=t.createElement(a);r.async=!0,r.src="https://www.googletagmanager.com/gt
2024-11-21 02:42:07 UTC	1408	IN	Data Raw: 67 65 6e 74 49 64 22 3a 22 32 31 36 36 65 35 37 30 2d 38 31 37 33 2d 34 63 39 34 2d 38 32 37 30 2d 36 64 35 35 39 66 65 64 36 33 62 30 22 2c 22 62 61 73 65 22 3a 22 2f 67 75 69 2f 22 2c 22 65 72 72 6f 72 53 65 72 76 69 63 65 22 3a 22 76 69 72 75 73 74 6f 74 61 6c 2d 75 69 2d 6d 61 69 6e 22 2c 22 63 6f 6e 73 6f 6c 65 50 72 6f 6d 70 74 22 3a 66 61 6c 73 65 2c 22 67 61 4b 65 79 22 3a 22 55 41 2d 32 37 34 33 33 35 34 37 2d 32 22 2c 22 72 65 63 61 70 74 63 68 61 56 33 53 69 74 65 4b 65 79 22 3a 22 36 4c 64 6a 67 64 30 6b 41 41 41 41 41 49 54 6d 37 69 70 57 46 37 6f 37 6b 50 4c 5f 38 31 53 61 53 66 64 49 4e 69 4f 63 22 2c 22 62 75 69 6c 64 49 6e 66 6f 22 3a 7b 22 62 72 61 6e 63 68 22 3a 22 68 65 61 64 73 2f 6d 61 73 74 65 72 2d 30 2d 67 36 38 66 31 36 65 30 22 Data Ascii: gentId":"2166e570-8173-4c94-8270-6d559fed63b0","base":"/gui/","errorService":"virustotal-ui-main","consolePrompt":false,"gaKey":"UA-27433547-2","recaptchaV3SiteKey":"6Ldjgd0kAAAAAITm7ipWF7o7kPL_81SaSfdINiOc","buildInfo":{"branch":"heads/master-0-g68f16e0"
2024-11-21 02:42:07 UTC	710	IN	Data Raw: 6e 2d 54 69 6c 65 43 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 33 66 35 31 62 35 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 61 70 70 6c 69 63 61 74 69 6f 6e 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 3e 3c 73 74 79 6c 65 20 63 75 73 74 6f 6d 2d 73 74 79 6c 65 3d 22 22 20 63 73 73 2d 70 6f 6e 79 66 69 6c 6c 3d 22 22 3e 3a 72 6f 6f 74 7b 2d 2d 76 74 2d 75 69 2d 64 65 74 65 63 74 69 6f 6e 73 2d 6c 69 73 74 2d 62 6f 64 79 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 63 6f 6c 6f 72 29 3b 2d 2d 76 74 2d 75 69 2d 6b 65 79 2d 76 61 6c 2d 74 61 62 6c 65 2d 70 72 6f 70 65 72 74 79 Data Ascii: n-TileColor" content="#3f51b5"><meta name="msapplication-tap-highlight" content="no"><meta name="referrer" content="origin"><style custom-style="" css-ponyfill="">:root{--vt-ui-detections-list-body-color:var(--bs-body-color);--vt-ui-key-val-table-property
2024-11-21 02:42:07 UTC	1408	IN	Data Raw: 66 63 36 0d 0a 6e 64 61 62 6c 65 2d 64 65 74 61 69 6c 2d 6c 69 73 74 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 63 6f 6c 6f 72 29 3b 2d 2d 76 74 2d 75 69 2d 65 78 70 61 6e 64 61 62 6c 65 2d 64 65 74 61 69 6c 2d 6c 69 73 74 2d 6c 69 6e 6b 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 70 72 69 6d 61 72 79 29 3b 2d 2d 76 74 2d 75 69 2d 73 69 6d 70 6c 65 2d 65 78 70 61 6e 64 61 62 6c 65 2d 6c 69 73 74 2d 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 66 6f 6e 74 2d 73 69 7a 65 29 3b 2d 2d 76 74 2d 75 69 2d 6b 65 79 2d 76 61 6c 2d 74 61 62 6c 65 2d 70 72 6f 70 65 72 74 79 2d 6c 69 73 74 2d 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 66 6f 6e 74 2d 73 69 7a 65 29 3b 2d Data Ascii: fc6ndable-detail-list-color:var(--bs-body-color);--vt-ui-expandable-detail-list-link-hover-color:var(--bs-primary);--vt-ui-simple-expandable-list-font-size:var(--bs-body-font-size);--vt-ui-key-val-table-property-list-font-size:var(--bs-body-font-size);-
2024-11-21 02:42:07 UTC	1408	IN	Data Raw: 64 72 6f 70 64 6f 77 6e 2d 62 61 63 6b 64 72 6f 70 2c 69 72 6f 6e 2d 6f 76 65 72 6c 61 79 2d 62 61 63 6b 64 72 6f 70 7b 7a 2d 69 6e 64 65 78 3a 31 30 31 21 69 6d 70 6f 72 74 61 6e 74 7d 2a 7b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 3c 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 3e 2e 63 61 70 74 63 68 61 43 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 37 29 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 74 6f 70 3a 30 7d 2e 63 61 70 74 63 68 61 43 6f 6e 74 Data Ascii: dropdown-backdrop,iron-overlay-backdrop{z-index:101!important}*{-webkit-tap-highlight-color:transparent}</style><style>.captchaContainer{display:none;position:absolute;background:rgba(255,255,255,.7);z-index:10000;width:100%;height:100%;top:0}.captchaCont
2024-11-21 02:42:07 UTC	1229	IN	Data Raw: 67 65 3d 21 31 3c 2f 73 63 72 69 70 74 3e 3c 6e 6f 73 63 72 69 70 74 3e 50 6c 65 61 73 65 20 65 6e 61 62 6c 65 20 4a 61 76 61 53 63 72 69 70 74 20 74 6f 20 76 69 65 77 20 74 68 69 73 20 77 65 62 73 69 74 65 2e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 61 70 74 63 68 61 2e 6e 65 74 2f 72 65 63 61 70 74 63 68 61 2f 65 6e 74 65 72 70 72 69 73 65 2e 6a 73 22 20 61 73 79 6e 63 3d 22 22 20 64 65 66 65 72 3d 22 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 61 73 79 6e 63 3d 22 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 64 69 61 6c 6f 67 66 6c 6f 77 2d 63 6f 6e 73 6f 6c 65 2f 66 61 73 74 2f 64 66 2d 6d 65 73 73 65 6e 67 65 72 2f Data Ascii: ge=!1</script><noscript>Please enable JavaScript to view this website.</noscript><script src="https://www.recaptcha.net/recaptcha/enterprise.js" async="" defer=""></script><script async="" src="https://www.gstatic.com/dialogflow-console/fast/df-messenger/
2024-11-21 02:42:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:07 UTC	553	OUT	GET /gui/main.e221fa750206b85dcfc6.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:07 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: a683355e0bb64bd8a254380c59b666d3 Content-Encoding: gzip Server: Google Frontend Date: Wed, 20 Nov 2024 16:18:21 GMT Expires: Thu, 20 Nov 2025 16:18:21 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 37426 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:07 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 31 0d 0a 00 0d 0a 30 66 66 38 0d 0a 02 ff ec bd 6d 5b 1b b9 b2 36 fa 7d ff 0a c7 3b 87 cb 1e 1a 63 9b 77 93 8e b7 01 93 30 03 98 c1 90 cc 0c 8b cd 32 b8 01 4f 8c 9b b1 db 09 2c e0 bf 3f 77 95 aa 24 b5 df c8 ac f3 ac 73 be e4 ba 12 d3 5d 2a 95 de 4b a5 5b 25 75 2e 97 0f df 3f 7d 6d f5 33 17 17 df a2 cb fb d6 d5 97 8b bb b8 3d ec 46 83 8b 8b f0 a9 5c 2e ad 6e 54 72 51 90 04 7d 62 cc 0e 07 51 66 90 f4 3b 57 49 76 f3 7a d8 bb 4a 3a 71 2f d3 23 86 fc 53 3f 4a 86 fd 5e 46 c9 b9 28 ff Data Ascii: 0000000100000001000000010000000100000001000000010000000100010ff8m[6};cw02O,?w$s]*K[%u.?}m3=F\.nTrQ}bQf;WIvzJ:q/#S?J^F(
2024-11-21 02:42:07 UTC	1408	IN	Data Raw: c7 a6 f3 44 aa de 3a 5c d2 4d d3 e7 9e 5e 0a 49 dc 64 56 6d fd c2 80 46 7f 6e 3d 58 28 e5 37 4d 3d 65 4d d5 42 58 d8 47 f7 2b 5c a1 77 73 91 63 bc a2 e7 a4 28 85 5e eb 0e ad 9c 3d 68 dd 73 84 e7 e7 6c 33 4a f8 b1 6a 54 ee 75 3f be 43 36 2b d9 5a ff 66 78 17 f5 92 81 30 2e fe 6f ae 5a 39 ed 3c ef e5 7b 09 9e d6 9f 4b ab cf 4b e5 3c 1e b7 bb ad bb fb a8 9d 37 12 de 2e 16 12 54 3a 3a 64 d5 94 a6 f2 35 46 9b 14 5f 5c 7d 18 fa 13 0f 02 d4 c1 f3 73 f2 3e 92 7e 47 7d 32 41 9e 4d 2f cc 6f 52 f7 35 b5 51 0c 7a a1 99 0d d0 31 fb ef 92 cd fe fc 7c be 77 d6 3f 0f 23 fc 48 65 64 7a 2f fd 42 3b 97 04 4f b5 bb 0a 4d 52 bb c1 6e 8d 1f b6 82 3d 4c 49 a0 ec 05 7b 26 e8 4b f0 cb 90 29 c7 c1 89 09 ba 0f 4e fe 64 ca 65 70 6a 1e da c1 6f 26 fa 5d f0 c7 af 1c 74 1d 5c ee f0 c3 Data Ascii: D:\M^IdVmFn=X(7M=eMBXG+\wsc(^=hsl3JjTu?C6+Zfx0.oZ9<{KK<7.T::d5F_\}s>~G}2AM/oR5Qz1\|w?#Hedz/B;OMRn=LI{&K)Ndepjo&]t\
2024-11-21 02:42:07 UTC	1408	IN	Data Raw: bd 47 b8 00 4c b9 fc d3 60 08 b0 28 57 28 14 5a ba e6 95 c1 4d ab e5 30 bb c3 c6 cb 56 6b 10 ad 2e 1b bb 81 85 64 5f 5e cc 52 ac 9d 5a 9e 09 7a 31 c9 68 21 73 48 17 aa 83 c2 a8 b1 94 04 00 5b 00 79 e4 81 9a dc 77 5b 58 e6 2f fe a3 b0 78 13 b0 6d 76 95 4a 83 60 17 45 49 52 33 29 cc 36 12 62 01 1b ca 60 dc 8d 0a 91 01 48 2e b9 0c a6 3c 99 eb 16 d0 cb 76 25 93 0d 30 0c 45 1a cd 29 af 0f c8 72 f9 07 c4 fa 03 62 fd 37 21 d6 ff 32 83 06 eb 18 80 31 af a9 fe 1f 3d ed 07 98 ff 6f 83 f9 ff 65 75 30 03 0a 93 50 fb 41 d4 bd 56 ec 95 9e c9 f4 9d c4 f7 ad d3 6b c7 df 94 d3 bc 4d e3 bd e9 c6 97 ad ae f2 9a b7 4d 87 57 0b 7e 71 da e3 3d 19 40 d4 dd 18 ea 1a 3b 17 1c 4d 90 66 83 20 17 2e 2e 76 f7 8e eb 04 05 5d 00 06 aa 9d ee 9f 34 2f 2e b0 e2 e7 ed 37 6f 12 18 e6 b0 6d Data Ascii: GL`(W(ZM0Vk.d_^RZz1h!sH[yw[X/xmvJ`EIR3)6b`H.<v%0E)rb7!21=oeu0PAVkMMW~q=@;Mf ..v]4/.7om
2024-11-21 02:42:07 UTC	321	IN	Data Raw: df 7a d0 3a d8 40 4a 1e c5 4b 13 3d 58 70 2d 38 f1 9a 65 e2 9b a2 9b 6a de 1a df 1a 88 8b 30 51 26 ca aa d3 4a 3f 94 54 be 44 8f 03 68 05 0c 63 9f 00 e7 47 ca 19 a9 eb 38 2c 62 8c f5 e1 cb d7 d1 9d ec 98 3c fe 4c ae fb 61 e7 2c 66 c7 97 37 3d 4c 34 57 dd 21 7c 61 b1 12 d5 f4 4a 32 8d b1 83 c7 39 b9 23 d1 38 47 ae 2e 72 2d 58 34 17 b9 41 de f8 61 bd cd c1 33 d9 45 b3 3e 2d 2d 98 0a 03 2b ed 45 73 d5 42 ae 06 61 6f b3 f5 4e 7d 89 37 5b 2e 57 51 38 38 6b 99 5c f5 5d ae ac 7f 3f 26 a6 f1 0a bb 70 cb ed 0c e1 65 64 a2 c0 e2 18 b5 46 5e 3f 1a f0 63 37 e1 07 fe f4 ef e3 4f 3f d6 c4 3f d6 c4 ff a9 73 27 6e 4d bc eb 1b 82 e2 6c aa 0e f0 b1 ce 04 58 05 f5 3b d0 e6 e4 4e f0 2e 56 e5 4f 0e f1 a2 fc 81 71 e6 62 e8 f3 a0 9c c7 14 11 9d 15 cf d9 91 af 74 be 99 f6 aa 6d Data Ascii: z:@JK=Xp-8ej0Q&J?TDhcG8,b<La,f7=L4W!\|aJ29#8G.r-X4Aa3E>--+EsBaoN}7[.WQ88k\]?&pedF^?c7O??s'nMlX;N.VOqbtm
2024-11-21 02:42:07 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a ea 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 38 0d 0a 30 30 30 30 30 30 30 31 0d 0a 97 0d 0a 30 30 30 30 30 30 30 31 0d 0a 85 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3d 0d 0a 30 30 30 30 30 30 30 31 0d 0a e9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2d 0d 0a 30 30 30 30 30 30 30 31 0d 0a e2 0d 0a 30 30 30 30 30 30 30 31 0d 0a f7 0d 0a 30 30 30 30 30 30 30 31 0d 0a fc 0d 0a 30 30 30 30 30 30 30 31 0d 0a ea 0d 0a 30 30 30 30 66 66 34 0d 0a 79 7a 51 eb d1 19 b0 8b ff fb 8f ea 22 f9 4c 14 06 38 3f 94 e4 20 2c 9f 2e 21 4d bc 5a 4f d8 80 c9 45 ca 19 66 f3 54 5f e4 f3 87 fa c2 cc 0a 13 1b 8e 96 c6 53 31 55 15 71 fe 3c 9c 40 ee f0 c2 27 f0 d6 ba 0d 97 14 9d 6a b0 2b dc 2a 3c 92 91 8f 37 3a fb 67 b3 32 1b d3 79 Data Ascii: 0000000100000001/000000018000000010000000100000001=0000000100000001-000000010000000100000001000000010000ff4yzQ"L8? ,.!MZOEfT_S1Uq<@'j+*<7:g2y
2024-11-21 02:42:07 UTC	1408	IN	Data Raw: ed 71 b7 bb 1f 5d 27 74 32 9d 5f 4e e2 fb 4a 11 26 65 f8 f4 00 da 23 9e 45 7c 0e 1e 30 6f ee e1 29 d3 a7 cb 3a 72 d9 cb b8 fd 88 7b 70 48 ea c0 24 81 59 b6 18 5c d1 f3 4d 9e 78 6e 43 1c 4d 4f e8 ea 17 d0 3b 44 af 11 59 eb af 96 af fa 19 c8 5d 86 35 a0 77 36 47 5e 7e 2e 85 8c bc bd 54 10 3f 36 b2 f2 81 95 95 e0 86 89 dc 57 5b 42 3e 53 95 2f 3c cc 87 e4 40 41 b5 4e 65 0c be 16 1e 1d 05 c2 f2 95 1b e4 e7 6b e1 81 22 76 25 e3 f9 00 25 bf 86 01 7b 9d cc df 7a f9 59 00 1f ea e3 1a 97 b3 dc db 00 08 01 fd 31 e0 06 44 18 ff 0d 4c 4b e1 d5 3c bc bc 50 5f be 44 7f 2b af af 97 d0 21 ef e9 71 63 75 79 8d 7a 10 3a 30 7a f8 06 b5 16 a8 25 74 71 af 4b 32 66 49 b1 13 f6 5e c5 55 13 e8 38 84 c0 e0 fa 16 f4 0e 02 8a f5 5e 2d 5a d7 3e f5 0b ad 76 1b d0 26 f9 4b e4 83 b3 73 Data Ascii: q]'t2_NJ&e#E\|0o):r{pH$Y\MxnCMO;DY]5w6G^~.T?6W[B>S/<@ANek"v%%{zY1DLK<P_D+!qcuyz:0z%tqK2fI^U8^-Z>v&Ks
2024-11-21 02:42:07 UTC	1408	IN	Data Raw: 32 a3 b1 ed ba d4 94 99 dc 06 78 19 39 ba 2a a5 bb 70 d7 3c 4b 1e d6 b3 d9 84 b3 f6 16 e1 f4 a4 63 3c 8c 3e bd de a4 7d 90 69 cb c7 2e 70 e5 76 88 cb 42 a5 82 68 41 ca 37 7b 76 49 fd bb 55 e4 fb 22 33 c4 bc d0 1c 4c 5d 68 b6 6d 2c b3 aa 1c 89 66 d6 31 13 96 9e a6 3a 70 61 19 b7 92 33 6a 78 b5 07 a3 c6 9c a1 c8 17 be 76 06 c3 56 f7 53 27 fa 76 1f f7 13 d8 65 6f 10 a1 45 fa 16 2b c2 3e 1d 6d 26 50 1a 2b ae dc 10 c8 6e f5 4a 8a 60 56 a6 f9 fc 62 17 07 6a c1 42 4b af 34 07 16 60 15 5c 77 b5 d8 c6 a2 4a 8a 07 e6 3b 3c 9b 3c 2f b6 c5 ec 79 32 4b b4 7b 5d 9c dd 05 10 56 b9 0c f8 fe e0 4a 6d fe 3e 30 2b 88 ca e5 fc 5d 40 59 a9 d4 82 07 fc 7f ac 5c 92 7e 5a 5d db d8 58 fb ae 3e e2 8f 0b 83 52 b8 d1 6e d6 68 7c f3 31 57 18 5b 7e d4 c6 db d8 c5 a5 7b 77 9b 64 c5 d2 Data Ascii: 2x9*p<Kc<>}i.pvBhA7{vIU"3L]hm,f1:pa3jxvVS'veoE+>m&P+nJ`VbjBK4`\wJ;<</y2K{]VJm>0+]@Y\~Z]X>Rnh\|1W[~{wd
2024-11-21 02:42:07 UTC	27	IN	Data Raw: 83 0f 07 fc 50 0f f6 77 f9 e1 36 d8 ff c0 0f db c1 81 b9 a1 7f 27 38 e8 31 0d 0a Data Ascii: Pw6'81
2024-11-21 02:42:07 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a a5 0d 0a 30 30 30 30 30 30 30 31 0d 0a 17 0d 0a 30 30 30 30 30 30 30 31 0d 0a 34 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 73 0d 0a 30 30 30 30 30 30 30 31 0d 0a 37 0d 0a 30 30 30 30 30 30 30 31 0d 0a 68 0d 0a 30 30 30 30 30 30 30 31 0d 0a 74 0d 0a 30 30 30 30 30 30 30 31 0d 0a 99 0d 0a 30 30 30 30 30 30 30 31 0d 0a 72 0d 0a 30 30 30 30 30 30 30 31 0d 0a 17 0d 0a 30 30 30 30 30 30 31 0d 0a 1c 0d 0a 30 66 66 34 0d 0a 1b 9e 5a 80 9b d3 e9 2e ac ad e0 b3 b9 a1 7f 18 5c 1c 32 e5 2a b8 ea f0 c3 75 d0 31 97 ec 7f 0b 3a e6 1e fe fb e0 8b d1 75 ad a0 67 78 b0 92 34 03 f5 21 b8 37 d9 e8 04 7f 99 fb fc 07 c1 c0 7c 0d 20 0e be 62 de 47 5a 5f 83 87 6b 7e b8 b4 7d 33 8b 75 25 9d f4 b6 3b 52 9d 30 cb 8b cc Data Ascii: 00000001000000010000000140000000100000001s00000001700000001h00000001t0000000100000001r0000000100000010ff4Z.\2*u1:ugx4!7\| bGZ_k~}3u%;R0
2024-11-21 02:42:07 UTC	1408	IN	Data Raw: fe a0 7a 7d 86 f3 95 49 d0 dc d8 b2 0f 3c c7 21 e0 28 9a 4f 34 3c fc 7c 50 00 46 45 f5 84 d6 1b fd 7a 10 24 d2 ca 8b fd 0c 23 e4 be 71 00 b5 93 ab 01 9f 69 93 93 25 69 3c 76 04 e4 d5 d8 65 3e 80 35 f9 48 30 e0 4d 75 58 c0 2a 82 cb 0c 93 d2 d2 60 d2 53 15 04 8f a8 53 ce 16 7e 65 62 3e bb 3e 9f 1f 27 de 9c 2f dc 9f e1 47 43 8c fe 00 6f f0 10 a6 02 9c 9c 9b 73 98 a7 c8 34 ef 78 21 4f 5b e1 4e 55 73 b0 23 1e 8a 66 6b e3 f9 b9 58 51 ca 67 e3 06 5a 84 1f 66 3d 7c 5c 2c 2f 3c 2c 96 83 2f e1 ed d9 f6 79 f0 36 dc 5a f8 8a 34 17 6e cf be 9d 07 17 e1 16 82 e9 7d b1 3c 5f 0f 76 cd ea 6f 98 cf 7d 09 2e 82 b7 f9 60 2f bc d9 1c e9 31 67 9d 73 ec da 25 e4 46 76 b6 77 1e ee 42 c9 e1 9c 3f 6c 70 d3 87 c2 dd 85 0b 2c 4e 31 c0 be 43 9b db be aa fd 34 ed 7b 96 3d 23 5f 86 05 Data Ascii: z}I<!(O4<\|PFEz$#qi%i<ve>5H0MuX*`SS~eb>>'/GCos4x!O[NUs#fkXQgZf=\|\,/<,/y6Z4n}<_vo}.`/1gs%FvwB?lp,N1C4{=#_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49746	142.250.186.163	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:08 UTC	542	OUT	GET /recaptcha/enterprise.js HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:09 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 21 Nov 2024 02:42:09 GMT Date: Thu, 21 Nov 2024 02:42:09 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:09 UTC	641	IN	Data Raw: 37 32 65 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 45 3d 27 65 6e 74 65 72 70 72 69 73 65 27 2c 61 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 2c 67 72 3d 61 5b 45 5d 3d 61 5b 45 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f Data Ascii: 72e/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['_
2024-11-21 02:42:09 UTC	1204	IN	Data Raw: 65 6e 74 3d 27 41 37 75 78 74 6a 33 2b 68 4a 6d 4f 63 5a 46 6f 6f 46 54 30 50 73 32 37 36 50 75 4f 71 47 6e 4d 31 6a 66 6f 50 62 46 76 78 57 70 37 33 56 43 36 30 4c 6e 59 47 7a 61 79 48 56 76 63 46 65 45 69 46 30 71 72 77 79 37 66 51 41 4c 2b 67 47 56 58 55 2b 66 39 49 51 63 41 41 41 43 54 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 4a 6c 59 32 46 77 64 47 4e 6f 59 53 35 75 5a 58 51 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 Data Ascii: ent='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYW
2024-11-21 02:42:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49748	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:09 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-21 02:42:10 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=223402 Date: Thu, 21 Nov 2024 02:42:09 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49751	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:11 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-11-21 02:42:12 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=223359 Date: Thu, 21 Nov 2024 02:42:11 GMT Content-Length: 55 Connection: close X-CID: 2
2024-11-21 02:42:12 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49755	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:12 UTC	374	OUT	GET /gui/main.e221fa750206b85dcfc6.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:12 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: adf27d7d4d652adb868d55f6dedec96a Content-Encoding: gzip Server: Google Frontend Date: Wed, 20 Nov 2024 16:18:37 GMT Expires: Thu, 20 Nov 2025 16:18:37 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 37415 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:12 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 66 66 66 0d 0a 8b 08 00 00 00 00 00 02 ff ec bd 6d 5b 1b b9 b2 36 fa 7d ff 0a c7 3b 87 cb 1e 1a 63 9b 77 93 8e b7 01 93 30 03 98 c1 90 cc 0c 8b cd 32 b8 01 4f 8c 9b b1 db 09 2c e0 bf 3f 77 95 aa 24 b5 df c8 ac f3 ac 73 be e4 ba 12 d3 5d 2a 95 de 4b a5 5b 25 75 2e 97 0f df 3f 7d 6d f5 33 17 17 df a2 cb fb d6 d5 97 8b bb b8 3d ec 46 83 8b 8b f0 a9 5c 2e ad 6e 54 72 51 90 04 7d 62 cc 0e 07 51 66 90 f4 3b 57 49 76 f3 7a d8 bb 4a 3a 71 2f d3 23 86 fc 53 3f 4a 86 fd 5e 46 c9 b9 28 ff d4 b9 ce d5 fa fd d6 63 a1 33 e0 bf a0 e5 85 2d 7a f9 af c5 9f 7e fa af cc 4f 99 ff e9 76 ae a2 de 20 a2 e7 ed f8 fe b1 df b9 b9 4d 32 e5 62 69 2d f3 21 8e 6f ba 51 66 7f 7f 1b 81 14 be 6f 58 db 99 61 af 1d f5 33 c9 6d 94 a9 21 d3 f8 23 21 Data Ascii: 000000010fffm[6};cw02O,?w$s]*K[%u.?}m3=F\.nTrQ}bQf;WIvzJ:q/#S?J^F(c3-z~Ov M2bi-!oQfoXa3m!#!
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: d9 5a ff 66 78 17 f5 92 81 30 2e fe 6f ae 5a 39 ed 3c ef e5 7b 09 9e d6 9f 4b ab cf 4b e5 3c 1e b7 bb ad bb fb a8 9d 37 12 de 2e 16 12 54 3a 3a 64 d5 94 a6 f2 35 46 9b 14 5f 5c 7d 18 fa 13 0f 02 d4 c1 f3 73 f2 3e 92 7e 47 7d 32 41 9e 4d 2f cc 6f 52 f7 35 b5 51 0c 7a a1 99 0d d0 31 fb ef 92 cd fe fc 7c be 77 d6 3f 0f 23 fc 48 65 64 7a 2f fd 42 3b 97 04 4f b5 bb 0a 4d 52 bb c1 6e 8d 1f b6 82 3d 4c 49 a0 ec 05 7b 26 e8 4b f0 cb 90 29 c7 c1 89 09 ba 0f 4e fe 64 ca 65 70 6a 1e da c1 6f 26 fa 5d f0 c7 af 1c 74 1d 5c ee f0 c3 db e0 ea 77 7e b8 09 a2 df f8 e1 21 b8 e1 bf 3b c1 ed 3d 3f 34 82 3f ff e0 87 db a0 7b c2 0f df 82 ee 27 7e d8 0e 06 7d 7e f8 1a 24 46 5e 33 30 b9 b9 0a fe f5 99 43 1e 5f f2 9b dc 98 99 56 a8 5d 89 3a 90 a1 25 d0 15 9b dd 28 81 6e 2a 72 2d Data Ascii: Zfx0.oZ9<{KK<7.T::d5F_\}s>~G}2AM/oR5Qz1\|w?#Hedz/B;OMRn=LI{&K)Ndepjo&]t\w~!;=?4?{'~}~$F^30C_V]:%(n*r-
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: b0 6d 76 95 4a 83 60 17 45 49 52 33 29 cc 36 12 62 01 1b ca 60 dc 8d 0a 91 01 48 2e b9 0c a6 3c 99 eb 16 d0 cb 76 25 93 0d 30 0c 45 1a cd 29 af 0f c8 72 f9 07 c4 fa 03 62 fd 37 21 d6 ff 32 83 06 eb 18 80 31 af a9 fe 1f 3d ed 07 98 ff 6f 83 f9 ff 65 75 30 03 0a 93 50 fb 41 d4 bd 56 ec 95 9e c9 f4 9d c4 f7 ad d3 6b c7 df 94 d3 bc 4d e3 bd e9 c6 97 ad ae f2 9a b7 4d 87 57 0b 7e 71 da e3 3d 19 40 d4 dd 18 ea 1a 3b 17 1c 4d 90 66 83 20 17 2e 2e 76 f7 8e eb 04 05 5d 00 06 aa 9d ee 9f 34 2f 2e b0 e2 e7 ed 37 6f 12 18 e6 b0 6d 91 63 6a ba 00 16 6a b9 ef c7 57 d8 58 79 7e 36 60 2c c0 62 a1 60 1a fa 2a 79 95 45 43 e4 07 4d ce 82 4e 62 51 f5 e7 66 e3 b0 00 9c 65 10 61 e2 52 a4 37 ff 6a 76 da f1 15 83 cb 9a 32 c1 29 11 6f 78 44 a1 86 01 c9 8e bf 74 a2 c2 1d ef 3e 2c Data Ascii: mvJ`EIR3)6b`H.<v%0E)rb7!21=oeu0PAVkMMW~q=@;Mf ..v]4/.7omcjjWXy~6`,b`*yECMNbQfeaR7jv2)oxDt>,
2024-11-21 02:42:12 UTC	241	IN	Data Raw: 3d 4c 34 57 dd 21 7c 61 b1 12 d5 f4 4a 32 8d b1 83 c7 39 b9 23 d1 38 47 ae 2e 72 2d 58 34 17 b9 41 de f8 61 bd cd c1 33 d9 45 b3 3e 2d 2d 98 0a 03 2b ed 45 73 d5 42 ae 06 61 6f b3 f5 4e 7d 89 37 5b 2e 57 51 38 38 6b 99 5c f5 5d ae ac 7f 3f 26 a6 f1 0a bb 70 cb ed 0c e1 65 64 a2 c0 e2 18 b5 46 5e 3f 1a f0 63 37 e1 07 fe f4 ef e3 4f 3f d6 c4 3f d6 c4 ff a9 73 27 6e 4d bc eb 1b 82 e2 6c aa 0e f0 b1 ce 04 58 05 f5 3b d0 e6 e4 4e f0 2e 56 e5 4f 0e f1 a2 fc 81 71 e6 62 e8 f3 a0 9c c7 14 11 9d 15 cf d9 91 af 74 be 99 f6 aa 6d e5 ab ad 02 34 77 1d 87 a1 60 f8 11 0c 6a 7c 46 8d 73 c2 e9 f1 de 36 ce 34 61 99 0b 9f ff 4e 7e 3e 1b 66 e7 27 84 40 7d c3 fa c3 4e 05 9f 25 99 c0 30 3d 2a ce 82 a8 ef 41 22 e5 a8 66 e7 b2 f3 0d 0a Data Ascii: =L4W!\|aJ29#8G.r-X4Aa3E>--+EsBaoN}7[.WQ88k\]?&pedF^?c7O??s'nMlX;N.VOqbtm4w`j\|Fs64aN~>f'@}N%0=*A"f
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a ea 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 38 0d 0a 30 30 30 30 30 30 30 31 0d 0a 97 0d 0a 30 30 30 30 30 30 30 31 0d 0a 85 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3d 0d 0a 30 30 30 30 30 30 30 31 0d 0a e9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2d 0d 0a 30 30 31 0d 0a e2 0d 0a 30 66 66 37 0d 0a f7 fc ea 79 7a 51 eb d1 19 b0 8b ff fb 8f ea 22 f9 4c 14 06 38 3f 94 e4 20 2c 9f 2e 21 4d bc 5a 4f d8 80 c9 45 ca 19 66 f3 54 5f e4 f3 87 fa c2 cc 0a 13 1b 8e 96 c6 53 31 55 15 71 fe 3c 9c 40 ee f0 c2 27 f0 d6 ba 0d 97 14 9d 6a b0 2b dc 2a 3c 92 91 8f 37 3a fb 67 b3 32 1b d3 79 0d cb f5 df 59 98 12 ae 88 83 e1 e5 80 4f 83 10 08 fc be 58 ed cb 7e 5b fe 55 30 f8 c7 c6 cb 8f 89 ef df 9e f8 ac 59 dc 34 86 ab 9a Data Ascii: 0000000100000001/000000018000000010000000100000001=0000000100000001-0010ff7yzQ"L8? ,.!MZOEfT_S1Uq<@'j+*<7:g2yYOX~[U0Y4
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: 70 48 ea c0 24 81 59 b6 18 5c d1 f3 4d 9e 78 6e 43 1c 4d 4f e8 ea 17 d0 3b 44 af 11 59 eb af 96 af fa 19 c8 5d 86 35 a0 77 36 47 5e 7e 2e 85 8c bc bd 54 10 3f 36 b2 f2 81 95 95 e0 86 89 dc 57 5b 42 3e 53 95 2f 3c cc 87 e4 40 41 b5 4e 65 0c be 16 1e 1d 05 c2 f2 95 1b e4 e7 6b e1 81 22 76 25 e3 f9 00 25 bf 86 01 7b 9d cc df 7a f9 59 00 1f ea e3 1a 97 b3 dc db 00 08 01 fd 31 e0 06 44 18 ff 0d 4c 4b e1 d5 3c bc bc 50 5f be 44 7f 2b af af 97 d0 21 ef e9 71 63 75 79 8d 7a 10 3a 30 7a f8 06 b5 16 a8 25 74 71 af 4b 32 66 49 b1 13 f6 5e c5 55 13 e8 38 84 c0 e0 fa 16 f4 0e 02 8a f5 5e 2d 5a d7 3e f5 0b ad 76 1b d0 26 f9 4b e4 83 b3 73 72 f2 86 71 0c 8a 5c 0e 85 65 12 20 17 f7 ba 77 5d 7f c0 b5 4f 4c f6 00 53 95 4a 32 c9 b8 ec 17 b0 e5 89 17 b9 b8 08 d5 8a 7e 8d f7 Data Ascii: pH$Y\MxnCMO;DY]5w6G^~.T?6W[B>S/<@ANek"v%%{zY1DLK<P_D+!qcuyz:0z%tqK2fI^U8^-Z>v&Ksrq\e w]OLSJ2~
2024-11-21 02:42:12 UTC	1391	IN	Data Raw: 2e 70 e5 76 88 cb 42 a5 82 68 41 ca 37 7b 76 49 fd bb 55 e4 fb 22 33 c4 bc d0 1c 4c 5d 68 b6 6d 2c b3 aa 1c 89 66 d6 31 13 96 9e a6 3a 70 61 19 b7 92 33 6a 78 b5 07 a3 c6 9c a1 c8 17 be 76 06 c3 56 f7 53 27 fa 76 1f f7 13 d8 65 6f 10 a1 45 fa 16 2b c2 3e 1d 6d 26 50 1a 2b ae dc 10 c8 6e f5 4a 8a 60 56 a6 f9 fc 62 17 07 6a c1 42 4b af 34 07 16 60 15 5c 77 b5 d8 c6 a2 4a 8a 07 e6 3b 3c 9b 3c 2f b6 c5 ec 79 32 4b b4 7b 5d 9c dd 05 10 56 b9 0c f8 fe e0 4a 6d fe 3e 30 2b 88 ca e5 fc 5d 40 59 a9 d4 82 07 fc 7f ac 5c 92 7e 5a 5d db d8 58 fb ae 3e e2 8f 0b 83 52 b8 d1 6e d6 68 7c f3 31 57 18 5b 7e d4 c6 db d8 c5 a5 7b 77 9b 64 c5 d2 c0 a4 5e 09 c4 e2 6f a7 38 61 24 aa 1e c5 66 37 0d 25 69 24 f4 92 6f bd a8 bf 23 27 b2 61 7e ea 01 6c 28 6a 39 fa 62 29 36 4c 6c 53 Data Ascii: .pvBhA7{vIU"3L]hm,f1:pa3jxvVS'veoE+>m&P+nJ`VbjBK4`\wJ;<</y2K{]VJm>0+]@Y\~Z]X>Rnh\|1W[~{wd^o8a$f7%i$o#'a~l(j9b)6LlS
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a a5 0d 0a 30 30 30 30 30 30 30 31 0d 0a 17 0d 0a 30 30 30 30 30 30 30 31 0d 0a 34 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 73 0d 0a 30 30 30 30 30 30 30 31 0d 0a 37 0d 0a 30 30 30 30 30 30 30 31 0d 0a 68 0d 0a 30 30 30 30 30 30 30 31 0d 0a 74 0d 0a 30 30 30 30 30 30 30 31 0d 0a 99 0d 0a 30 30 30 30 30 30 30 31 0d 0a 72 0d 0a 30 30 30 30 30 30 30 31 0d 0a 17 0d 0a 30 66 66 35 0d 0a 1c 1b 9e 5a 80 9b d3 e9 2e ac ad e0 b3 b9 a1 7f 18 5c 1c 32 e5 2a b8 ea f0 c3 75 d0 31 97 ec 7f 0b 3a e6 1e fe fb e0 8b d1 75 ad a0 67 78 b0 92 34 03 f5 21 b8 37 d9 e8 04 7f 99 fb fc 07 c1 c0 7c 0d 20 0e be 62 de 47 5a 5f 83 87 6b 7e b8 b4 7d 33 8b 75 25 9d f4 b6 3b 52 9d 30 cb 8b cc 2c 5a 31 4b 2b cb 2c fc 25 b3 34 Data Ascii: 00000001000000010000000140000000100000001s00000001700000001h00000001t0000000100000001r000000010ff5Z.\2*u1:ugx4!7\| bGZ_k~}3u%;R0,Z1K+,%4
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: b2 0f 3c c7 21 e0 28 9a 4f 34 3c fc 7c 50 00 46 45 f5 84 d6 1b fd 7a 10 24 d2 ca 8b fd 0c 23 e4 be 71 00 b5 93 ab 01 9f 69 93 93 25 69 3c 76 04 e4 d5 d8 65 3e 80 35 f9 48 30 e0 4d 75 58 c0 2a 82 cb 0c 93 d2 d2 60 d2 53 15 04 8f a8 53 ce 16 7e 65 62 3e bb 3e 9f 1f 27 de 9c 2f dc 9f e1 47 43 8c fe 00 6f f0 10 a6 02 9c 9c 9b 73 98 a7 c8 34 ef 78 21 4f 5b e1 4e 55 73 b0 23 1e 8a 66 6b e3 f9 b9 58 51 ca 67 e3 06 5a 84 1f 66 3d 7c 5c 2c 2f 3c 2c 96 83 2f e1 ed d9 f6 79 f0 36 dc 5a f8 8a 34 17 6e cf be 9d 07 17 e1 16 82 e9 7d b1 3c 5f 0f 76 cd ea 6f 98 cf 7d 09 2e 82 b7 f9 60 2f bc d9 1c e9 31 67 9d 73 ec da 25 e4 46 76 b6 77 1e ee 42 c9 e1 9c 3f 6c 70 d3 87 c2 dd 85 0b 2c 4e 31 c0 be 43 9b db be aa fd 34 ed 7b 96 3d 23 5f 86 05 53 4f 0b ac 13 cf b3 f0 a8 a2 d5 Data Ascii: <!(O4<\|PFEz$#qi%i<ve>5H0MuX*`SS~eb>>'/GCos4x!O[NUs#fkXQgZf=\|\,/<,/y6Z4n}<_vo}.`/1gs%FvwB?lp,N1C4{=#_SO
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: 72 04 e8 ab d9 89 21 94 5a 76 67 3c 6b da db 53 f4 93 67 d8 f6 19 51 a6 24 09 b7 6f 9b 24 9b fb 06 09 1d 31 f7 05 5b 20 b0 10 33 88 41 2a 09 08 9f 34 c0 a6 83 0b 53 e6 3c 03 33 90 69 86 23 4b 29 ed 0b c7 f0 c2 c5 e0 4b 07 6b 7d 75 b0 c2 42 05 07 1e 3a bd 1a 4e 8a 61 9c d8 41 c5 e3 0d 00 6f a1 d5 4d 38 ec d2 85 d5 9e 9f 81 83 23 ec 5a be 9d 70 a4 0b 8a 01 41 be 76 b5 8e 43 6f d8 b2 c4 aa a0 d5 7f c4 12 81 a6 d2 d8 1c 98 24 c2 2d 08 10 ce 07 28 e9 fd 2b de a9 0e 3e e9 84 39 48 ad 19 f0 1d 15 2c 19 28 0a 76 a9 a3 76 0d 5b 2b 5e b2 8f 58 4f 2a c6 68 b5 23 d6 12 6a 7b 3d e6 b1 48 c7 21 c7 dc 03 6c c0 47 1c 76 dc ae 9e c5 b9 47 7c df d3 99 83 ec 05 a3 11 a2 3c 18 af 0a 7f fd 21 5e 43 38 8d 47 ad 95 f0 15 33 02 3b 9e f1 f6 6d 12 90 67 f3 f9 0b a4 d1 5a e3 ec d1 Data Ascii: r!Zvg<kSgQ$o$1[ 3A4S<3i#K)Kk}uB:NaAoM8#ZpAvCo$-(+>9H,(vv[+^XOh#j{=H!lGvG\|<!^C8G3;mgZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49757	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:12 UTC	619	OUT	GET /gui/2121f4aabac6fbe523ec.woff2 HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.virustotal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.virustotal.com/gui/domain/ghabovethec.info/detection Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:12 UTC	316	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 04729fb011852c70130e8b144f42e39e Server: Google Frontend Date: Tue, 19 Nov 2024 19:35:34 GMT Expires: Wed, 19 Nov 2025 19:35:34 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: font/woff2 Content-Length: 14712 Age: 111998 Connection: close
2024-11-21 02:42:12 UTC	1092	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 39 78 00 0d 00 00 00 00 88 38 00 00 39 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 6e 1b cf 3c 1c 90 1c 06 60 00 84 62 0a 81 87 7c eb 40 0b 84 64 00 01 36 02 24 03 89 44 04 20 05 84 7c 07 8c 34 1b b5 76 25 ca 6d 17 05 9c 07 20 46 4f f2 23 46 22 6c c5 64 b5 a8 23 03 c1 c6 01 82 84 3f 74 f0 ff 27 24 1d 32 06 f3 6e 83 93 59 65 10 31 24 a0 b0 5d dd bd d9 c3 24 73 a7 ae 57 b7 73 39 a8 3c 25 d3 4c b5 31 7d 59 79 06 36 91 82 88 2d a4 20 62 e1 be 10 5b f9 9d b4 d0 eb 0c 37 21 09 19 3c 4b dd 57 7c be 69 6a f3 87 66 9c cd 3f cd a4 5c 3b b1 ee d0 1a 1b 4e f0 24 f5 08 54 28 14 7d f4 39 eb 22 30 6e e1 a3 e6 d4 cb f3 ff 8d 85 de f7 67 29 40 ac 57 45 11 95 40 03 a3 8c 2e b9 5a 56 b1 95 3d 55 c0 e8 ca 3b c3 Data Ascii: wOF29x89n<`b\|@d6$D \|4v%m FO#F"ld#?t'$2nYe1$]$sWs9<%L1}Yy6- b[7!<KW\|ijf?\;N$T(}9"0ng)@WE@.ZV=U;
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: 95 e9 04 c1 10 8b 45 12 09 a6 a2 a2 24 95 12 aa 24 ac a6 26 91 cb 55 14 0a 48 ab 36 52 bb 76 58 87 0e 52 a7 4e 58 97 2e 52 b7 6e a9 1e 3d 14 7d fa 10 fd fa 51 03 06 84 06 0d 32 0d 19 52 33 6c ac d8 38 e3 94 2d b4 84 66 a9 a5 98 15 d6 11 d6 db 0c db 62 ab 8a 5d 76 93 f6 38 04 3b e1 24 d3 99 d9 e3 25 ae 0b e4 ba 5e 3c 63 20 33 a1 cc 1d 54 75 57 fb 26 77 bb 87 ed 5e e2 ee 23 cb fd c4 3d d0 de f2 a0 87 64 5e bf a2 0e e4 76 01 0c 48 00 92 28 42 0f bb 06 20 4e 15 84 e4 1c a0 fd 81 ff 19 73 c7 c6 a9 ea 06 d2 4b 64 c0 b6 06 d1 a8 68 ce 3f c7 7b 35 60 f7 38 3f da 73 0d a4 7c 0e 0b 27 1e d3 d1 7c 39 32 91 83 a1 0b 9d d6 3e bd 92 cd 14 d3 da b1 86 3f b7 13 b5 2c cd 7c c8 2b 23 f9 d3 98 71 6a 22 0d 05 ad c7 47 48 1e 39 bf d1 56 31 7a f9 f2 e7 c3 e8 fe 49 fe a6 2f ce Data Ascii: E$$&UH6RvXRNX.Rn=}Q2R3l8-fb]v8;$%^<c 3TuW&w^#=d^vH(B NsKdh?{5`8?s\|'\|92>?,\|+#qj"GH9V1zI/
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: cf 83 c6 c7 d1 91 93 c7 7b 4f f5 bd f7 07 24 27 fb 5b 2f 1f a0 56 2e 80 67 52 d8 1c 54 2a 65 aa ca 31 0d 05 d7 b0 99 7c 0b 2c d0 b0 c2 4e 85 43 0e 1b 71 c6 59 a3 bd ef 7d 63 21 d8 7b 3a 00 d5 00 a0 03 6d 20 6e 5f af 58 3b 87 e0 f2 a4 7c 75 21 a0 eb 68 1e 69 00 7a b4 01 58 a9 6e e1 66 97 d9 9a c5 92 75 3c d0 aa c3 07 2a 73 28 8b 05 bd 21 c8 07 1d a3 15 05 34 8c 16 e8 ec 58 6c 01 74 43 06 d0 da 27 ba cb 70 00 01 c8 f9 eb da 01 69 80 51 61 4a e0 2c 9f 32 20 c8 b7 6a 20 93 43 1b 03 34 43 05 f0 5b 48 da bc 07 96 c3 30 44 e1 15 d5 03 41 9d 0c 94 38 83 2c a6 38 cd f7 2c 55 48 d1 34 a0 91 3b 2c 52 64 68 8b bb 75 22 42 7d 54 35 c1 e4 4a 4f b1 f6 dc 54 33 38 66 92 65 01 e9 d6 11 b1 7e 40 b1 61 03 45 e6 d9 0e 41 c4 61 32 9d 21 d7 59 a2 de af b1 77 17 32 a8 1d df 8d Data Ascii: {O$'[/V.gRTe1\|,NCqY}c!{:m n_X;\|u!hizXnfu<s(!4XltC'piQaJ,2 j C4C[H0DA8,8,UH4;,Rdhu"B}T5JOT38fe~@aEAa2!Yw2
2024-11-21 02:42:12 UTC	188	IN	Data Raw: ba c2 d4 f2 ff 8f ea ad 0d 13 1e e4 3f d5 fb 02 8a b6 6d 5c 5f 20 b7 03 e3 41 fc ab ed fa 80 64 fd fb 73 8c 21 0e bb 0a 08 34 06 61 20 0e 81 d0 c9 4d 90 10 28 0f c1 ee f0 e6 a5 e1 fb d6 c0 0c 10 ca a1 4d 9a f3 d3 3f 68 f4 6f 9e 5b a9 53 79 af 5d b6 98 0f 03 54 e1 5b 11 81 65 68 7a 3a ed 8c b3 ce 39 ef 82 8b 2e b9 ec 8a ab ae b9 ee 06 04 04 08 04 78 c7 33 10 c7 b7 22 19 8a 5f 57 68 e4 20 1f 16 0e 51 34 0a 7a 10 14 16 76 50 c8 46 9e 48 51 08 48 c8 68 73 5e 58 b4 0d 09 2b 6c 62 37 84 78 23 6f 1b dd 28 48 b3 24 08 94 81 0a fd 40 21 92 46 c7 fa 09 d0 15 05 9a 02 Data Ascii: ?m\_ Ads!4a M(M?ho[Sy]T[ehz:9.x3"_Wh Q4zvPFHQHhs^X+lb7x#o(H$@!F
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: 62 68 48 08 31 b0 20 72 c0 d1 22 88 b6 d3 ae 00 9f 1e 94 9e 90 20 64 90 88 4c d6 26 40 ab b9 b9 ce 1b 80 5f 7d 11 d6 91 00 90 0b 15 c2 a3 80 38 52 82 6a 77 1b 74 92 16 61 d6 5a b6 b2 bd 65 05 c0 30 79 ed 6e b9 ed 8e bb ee b9 ef 81 87 1e 79 ea 99 c7 9e 40 40 ea 6e ff a8 01 21 b6 d9 1e 10 01 08 07 61 78 30 a9 96 b0 d5 cd 02 01 45 2a 04 52 17 41 94 6e 56 f0 02 c1 2d e4 7c e0 76 88 a8 d6 50 7b 9a 42 b4 de 10 88 84 4a d1 e8 44 c6 fc b4 28 38 62 c5 90 cb d6 fe 71 0e 04 b2 17 f4 63 c7 45 21 22 2b 83 48 10 04 a6 8b 68 c4 26 b0 15 4c f4 41 50 09 59 46 05 38 96 26 c1 0a 4b 6b 88 44 62 43 0e 33 91 8b 45 36 6a 26 0b 15 8d 19 c0 c8 70 30 42 d2 51 fb 09 41 91 f0 f2 a1 9d 18 40 05 0f c1 32 24 0b 10 5c 80 64 c0 4e 1c 10 0b a1 49 52 10 68 8c 5c 76 f9 0a 1d 88 30 82 87 f9 Data Ascii: bhH1 r" dL&@_}8RjwtaZe0yny@@n!ax0E*RAnV-\|vP{BJD(8bqcE!"+Hh&LAPYF8&KkDbC3E6j&p0BQA@2$\dNIRh\v0
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: 0a 69 24 6a 07 66 a6 96 3f 32 5f 3e 75 f1 ab a1 0c 68 f8 eb 73 64 38 67 7b 4a 0f 60 f4 46 fc a1 fb 25 90 99 d4 56 ab b6 41 9d 5d 07 da a2 b4 09 81 4e 60 ca 02 db 5b 0e 3d 76 76 ea 51 f8 32 e8 40 7e 92 25 f1 a0 9e 17 f9 ce c1 c0 f4 45 71 71 4c 8b f1 5d 10 a9 f3 b1 80 02 e4 78 ec 1a d9 a1 62 88 6f cb 07 84 27 c7 ce 8f b2 28 ee d5 e3 4b 07 94 1b a9 51 16 06 87 a0 38 38 53 1d 93 90 bf 66 23 b6 9e 37 94 9e 5b 8f 81 6a 90 32 fa e6 22 48 e0 25 29 65 59 1a 82 7c 40 3e 4b 8e bd b0 a1 12 e5 fe 12 c1 7b 7d 40 52 a4 75 10 d5 82 3e 5a 62 5f 49 0d dd 4f 54 97 57 48 d0 90 db 53 bb ff 13 fa 52 06 0d 4c 7e f4 ae d3 a4 64 f2 db cc 6f af 58 a3 48 1a 08 16 8a a9 fa 3b 8b 47 e8 5c 96 a9 54 44 4f 28 d3 eb 9e ae d7 9e a4 96 b2 78 c6 80 a8 c5 6e 3b 46 4a 66 48 88 00 a2 4e 7a 55 Data Ascii: i$jf?2_>uhsd8g{J`F%VA]N`[=vvQ2@~%EqqL]xbo'(KQ88Sf#7[j2"H%)eY\|@>K{}@Ru>Zb_IOTWHSRL~doXH;G\TDO(xn;FJfHNzU
2024-11-21 02:42:12 UTC	1280	IN	Data Raw: db 17 45 79 c1 51 0b 5b 8f 2e a2 27 24 5f 86 85 fc b0 26 f9 dd f2 b2 63 23 80 04 59 9c c2 da 3a 66 8e e5 bd d6 26 8f c7 f5 a9 6a 61 ed 19 f9 cc 7b c2 29 8b f3 3a c1 86 96 17 aa a7 e5 b5 d1 cb 19 66 e7 5c 51 48 7f 96 43 2c f8 d5 32 ec 9b 55 ff 3c 61 45 cc cd 6f c2 37 1b 36 ab 7a 5f cc 4f b5 bd fe 6b eb a8 4a aa a8 f2 f5 0b 4b ca 4f 0b 83 ca b3 f5 19 a6 1c 6e 79 d4 c7 bc 8f cd cc 4d 4f 0d f9 c0 e6 3b 3b 9a ba 77 5c a6 19 99 7d 82 ee b5 8b 8a 59 25 54 9c 77 8b ff 72 f7 8b ef 59 52 62 74 3e af 4b f0 80 72 8f 75 26 ab 6f 8f 0e 77 c8 7b 6f 23 d8 78 de 13 6c 64 94 65 66 be 38 84 02 c7 f4 d3 3e 2b 42 50 85 75 dd 99 b8 43 6c 20 99 56 ee 33 31 99 fc 19 56 88 15 b9 6e 62 09 5d 19 73 46 2f f5 bc ef c9 5a f7 3c f9 ed 0c 59 09 f4 0a 2e 26 8f 12 bf c6 a1 3e e4 9f ac 81 Data Ascii: EyQ[.'$_&c#Y:f&ja{):f\QHC,2U<aEo76z_OkJKOnyMO;;w\}Y%TwrYRbt>Kru&ow{o#xldef8>+BPuCl V31Vnb]sF/Z<Y.&>
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: 8a fa 66 72 e7 1c f8 83 89 31 64 38 d1 c4 c8 b1 06 ef a7 10 5e 03 03 8a ae a3 5d 81 07 5b 0e f5 6d 46 66 9e d3 93 19 aa 9c 61 a2 26 4b 76 4a a7 2f 35 a7 83 93 68 b4 4c f2 08 7a 2f 48 46 01 02 ca d8 a0 d2 b4 3a 5d 69 2d 6d 2a 83 c8 44 d9 63 f0 09 68 89 a9 99 5a 4d aa 45 4c b8 29 4a 2e b2 67 93 c0 37 05 0d 53 47 38 94 ad be 61 09 bc 91 93 03 32 37 f4 1d ea 9c 05 2f 30 32 a0 0e 42 19 e1 02 7d 0b 96 99 a8 4b 4b 17 19 40 0c 2a 6d f8 30 6d 8b d3 a1 6b a9 4d 4d 49 2b 48 15 d5 18 22 13 08 bc 01 a3 54 92 98 25 ce cd 2b a4 2c 48 de c5 2b 17 30 7c 20 7f 94 ae 5e 0b 47 27 32 b3 ed 32 3d 35 e5 37 52 ed c9 7e 74 f4 55 4e 4c 5e 4b de 28 f0 6d 65 21 b1 43 a0 32 c5 c2 82 75 d4 e8 6f 63 e0 d9 5c 7d 9c 2a d9 56 18 9b 28 40 ed ae b5 d7 8c c3 26 cb d2 73 98 0a ca bb 18 5c 64 Data Ascii: fr1d8^][mFfa&KvJ/5hLz/HF:]i-mDchZMEL)J.g7SG8a27/02B}KK@m0mkMMI+H"T%+,H+0\| ^G'22=57R~tUNL^K(me!C2uoc\}*V(@&s\d
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: d4 60 72 ff c7 c0 1a a8 f1 7c 8b 5d 24 cf c8 b6 1b f8 b1 ba 9b b8 23 3a 55 f2 4c b6 f5 d0 24 52 42 bd f3 4b cf 04 46 7b 87 9b 3e 6f 46 05 63 da 71 76 61 1c ef 27 9b 41 7f 82 36 11 0c 61 3b ba 37 ac 5c d9 bd ba b2 82 85 d5 8b 6d a8 18 4e 6c c5 15 e6 e4 e0 bc 61 90 30 1c ef 0d ff 9e c5 17 b6 02 53 c7 d4 c6 0e 6f 72 5a 74 64 1d dc d1 01 d8 ee 2c 4b 77 b7 d1 2f 8c 07 3c 46 e5 08 bb ed 59 89 d4 a0 2e 94 24 e4 0f 4b 54 36 78 1b 12 9b 07 71 63 bb c1 77 d6 3a 49 ac be e0 82 91 c9 8d 6f 67 91 f7 a6 47 19 fd 9e ff 38 f4 56 0e a3 fe 5e 7a de ee 12 be b2 b4 33 df 25 91 1b d9 70 a3 c9 92 9a a2 71 d6 f0 c1 b2 21 93 aa a8 70 56 28 fc fa c0 7d c9 ec f9 91 15 6f 46 0d b6 a4 37 a5 cf 07 3f d8 6a 65 6e 6d c1 39 3d 8b 2b 99 2d 11 0f 17 90 ad c7 b4 bc 70 8d bf fb 5d 48 7b 18 Data Ascii: `r\|]$#:UL$RBKF{>oFcqva'A6a;7\mNla0SorZtd,Kw/<FY.$KT6xqcw:IogG8V^z3%pq!pV(}oF7?jenm9=+-p]H{
2024-11-21 02:42:12 UTC	1280	IN	Data Raw: d5 fe 30 56 9c 82 ae 77 fb 8a 70 fb b3 7d a9 2a ea a5 13 aa ee c5 fd e0 00 ca e4 ad 2f 2d f5 d6 9a d2 d2 98 5d ac de e4 20 c6 9a 4c 6c 22 91 cd 7f ba c6 82 35 c4 3c dd c4 1b 63 3d 93 80 50 99 31 ac c8 c7 a6 3c 89 8e e4 06 9c 49 b1 e7 69 6d 06 75 7c aa 67 7a 7b 3e d8 87 92 39 b8 03 1a 69 bc 18 1f 84 93 15 a6 b2 d6 12 b1 03 f8 c8 57 57 4f 7d d7 52 45 ac 7b 59 0c ea fd 6d 0f 66 30 59 03 86 18 30 71 71 16 2f a0 15 8e b5 b0 3f e5 ec 92 f7 fe 31 e9 9d d2 a4 cc 01 fb 51 35 89 36 8d 94 5b 49 24 7e 27 50 04 04 ea da 27 98 63 1f bd f3 b2 8f 8f 0f 4a c8 d0 a7 28 dd 56 70 74 5b cc 81 74 59 54 e4 5e 72 22 ef 80 dd d3 58 58 e8 6b c9 e1 8f 08 e3 e9 ee ff 87 8d 9b a7 91 c4 27 69 75 49 b1 a9 2f 40 9b 0a 5f 2c c8 8f d8 9a cf 51 fe 2c aa 08 af 45 6a c1 01 94 ce a5 11 31 4e Data Ascii: 0Vwp}*/-] Ll"5<c=P1<Iimu\|gz{>9iWWO}RE{Ymf0Y0qq/?1Q56[I$~'P'cJ(Vpt[tYT^r"XXk'iuI/@_,Q,Ej1N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49758	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:12 UTC	619	OUT	GET /gui/1402accbefdec6a25762.woff2 HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.virustotal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.virustotal.com/gui/domain/ghabovethec.info/detection Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:12 UTC	316	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: ef71876a9c9b1eff1180b997f2490de9 Server: Google Frontend Date: Fri, 15 Nov 2024 19:26:23 GMT Expires: Sat, 15 Nov 2025 19:26:23 GMT Cache-Control: public, max-age=31536000 ETag: "fs6b4A" Content-Type: font/woff2 Content-Length: 14892 Age: 458149 Connection: close
2024-11-21 02:42:12 UTC	1092	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 3a 2c 00 0d 00 00 00 00 88 7c 00 00 39 d3 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 6e 1b cf 42 1c 90 1c 06 60 00 84 62 0a 81 88 4c eb 34 0b 84 64 00 01 36 02 24 03 89 44 04 20 05 84 66 07 8c 34 1b 99 76 25 8c db 8f 02 ba 03 bc 98 bc 94 cc 8c 44 d8 ab c5 aa 64 64 a0 64 6f 9e 9c fd ff d7 04 3a 64 08 dd 4d 01 a7 ea 03 45 10 26 88 ea 4a 83 0b 47 11 2e 1c c3 9c 33 1d 4d 78 70 aa b3 ca 14 69 b6 c5 19 f6 56 17 92 75 24 0b 5b 4f e7 3b 4d 55 c7 93 3a 6a 0b 3f 8a 85 7b 2b 2f 3c da ad 98 f7 a8 73 c5 c5 97 09 a3 5e 5b fe 11 64 ae 64 c3 af 1e d1 99 cc 87 d5 8d 74 20 41 90 80 d4 9d ec 60 b1 8f 7a 06 b6 8d fc 49 4e 5e 9e 87 9f eb f3 dc f7 32 c9 fc cc 12 b0 da 6d 59 01 6b 46 85 0a 00 5c ed fa 96 55 59 55 02 Data Ascii: wOF2:,\|9nB`bL4d6$D f4v%Ddddo:dME&JG.3MxpiVu$[O;MU:j?{+/<s^[ddt A`zIN^2mYkF\UYU
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: 7a 34 03 03 0d 23 23 96 19 07 b3 b2 d2 b3 b1 31 70 72 42 3c bc 38 3e 3e 98 9f 1f 27 20 00 0b 0a e2 84 84 18 85 85 11 62 c5 a2 44 44 08 c4 89 a3 12 2f 9e 48 82 04 56 89 d2 e8 a4 4b a7 95 2f 8a a7 81 06 68 8d b5 c4 6a a5 00 d6 4e 7b 06 85 ba e0 74 55 0c eb a7 3f 91 41 fd c6 d3 2b 6b 72 e2 32 33 95 5c 0c 30 99 e0 26 8b b8 d9 92 70 8b a5 96 91 58 ce 19 2b b8 d8 4a ce 58 15 2e b6 da 1a 26 07 66 2b 85 2c a4 84 81 11 30 26 40 e1 eb 67 06 54 a4 42 b0 5b 9f 3b bc ea 7d ff 35 86 48 a7 33 0b 01 cd 1a c0 86 01 50 f2 49 bb bd 24 75 a6 83 4c b7 14 76 39 cc d2 e2 88 41 3b b6 a6 f2 3b 8b a4 a4 98 e6 4b 57 07 ad 2d 10 56 1e 1e f5 3c 3c 14 41 fb 47 d2 84 bf 8f 65 f6 1b d1 e1 30 5e 6e 1b f5 68 e3 3f 7a d3 09 3e 38 f9 d2 33 08 61 7f bc d5 33 dd b9 bf 6d 15 5f 7d 0f c8 58 51 Data Ascii: z4##1prB<8>>' bDD/HVK/hjN{tU?A+kr23\0&pX+JX.&f+,0&@gTB[;}5H3PI$uLv9A;;KW-V<<AGe0^nh?z>83a3m_}XQ
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: a8 56 0d 9a 10 73 3e 8c ec 56 0d fc 89 0d b6 c8 83 64 2b ee 7f a4 d1 fb 18 e3 8b f5 71 cb 1d 91 40 4b 84 20 21 25 98 5d 40 34 13 1b 9a 83 93 4c a2 1a 14 f2 e4 09 6f ac f3 8d 15 eb 25 c9 20 83 a5 0c df 7b fe 20 d8 71 15 58 08 30 4b d6 81 c7 d6 31 bb f5 a4 f4 64 e4 cc 14 38 2a 60 e3 56 d0 70 81 51 2a 01 b0 4d bb 55 9a 25 19 c1 d2 18 77 b2 f0 51 2b 3b 9a ad ed cb af 98 9e 2b 80 71 5e b3 1b 5c cc 03 01 a3 7b 5d b0 18 2c 00 a1 cd 34 db 0e 03 a0 03 6a 97 7c 7e a0 ef 19 29 8c 38 d0 91 16 10 42 a1 2d c4 03 5d d3 11 4e 03 ab 81 b9 60 76 6b d8 01 36 c1 6c 30 0c 21 b8 14 49 40 51 3e 17 12 70 86 90 8b 89 94 b4 e0 9e 98 19 9c 60 59 c2 c3 cd ad 54 40 69 2a 51 b2 49 93 22 ca cf 93 32 e5 14 99 cb e1 8c 2a aa 93 aa c1 c5 f2 38 5f 4b 4e 69 b5 84 d0 7a ea a4 b4 27 51 0c 4e Data Ascii: Vs>Vd+q@K !%]@4Lo% { qX0K1d8`VpQMU%wQ+;+q^\{],4j\|~)8B-]N`vk6l0!I@Q>p`YT@iQI"28_KNiz'QN
2024-11-21 02:42:12 UTC	188	IN	Data Raw: fb 1e c5 08 39 b7 e3 cf 9e 45 3d 90 b6 f4 3f 51 7d bd 91 78 3b ff d6 a5 73 01 e2 6e 58 d4 be 3b 62 18 28 db f1 f7 be 3d 4a 10 5e fe 98 0e 33 c2 e0 99 02 c1 50 01 a5 28 1f c4 c3 2b 01 11 5a 81 50 8f 56 2e 49 c6 5f ef b2 07 4c 14 1f f9 2e 6e ce 18 f4 dd cf 56 19 a0 ba ff 5c b5 44 6b 36 08 08 01 cc 41 9a 70 67 9d 73 de 05 17 5d 72 d9 15 57 5d 73 dd 0d 37 dd 82 61 08 02 de f1 17 14 f6 a1 18 d1 0a 0d 6a 0a 92 22 05 15 0d 1d 03 13 6b e8 6d 91 06 d1 48 82 e4 94 d4 83 fd c4 8c b8 ae ae 1c a6 95 a0 22 19 3c 04 16 36 38 b6 5a 0d 45 a8 70 1c b0 c6 bc 7f 53 50 44 30 64 Data Ascii: 9E=?Q}x;snX;b(=J^3P(+ZPV.I_L.nV\Dk6Apgs]rW]s7aj"kmH"<68ZEpSPD0d
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: 84 89 40 0b 54 2d c5 60 10 30 33 15 24 11 08 30 13 86 9c 75 0d 08 94 70 04 c4 08 51 38 31 1f 05 f9 99 63 2f 78 0b f8 d5 3b 12 23 0b 48 23 6f 78 e2 4b 88 a7 42 d5 7b 44 39 c6 ba 24 72 0a 29 51 d2 12 2f b0 7d b8 b7 dd 71 d7 3d f7 3d f0 d0 23 8f 3d 51 e6 2f 4f 3d 83 11 b9 86 3f 66 2e 91 6d b6 fb 22 03 76 b1 c8 7e 0b 2c bd 23 c4 81 02 8a 08 11 22 17 8e a4 ea 0c dc 7d 10 96 0d 7d c0 63 50 54 2a a2 d5 41 c1 20 97 27 ae 67 e1 06 56 6e 64 ff aa 4c 5c dc cc 12 35 52 f2 82 0b 66 54 8a 79 9b e3 ae 70 b8 da c3 51 86 90 72 ef 15 7e 5b c5 0e 08 6a 0d e9 2b 47 09 70 e1 e8 a9 48 e2 09 47 cd bd f5 b0 67 2e e3 e0 12 e4 e2 62 e4 9c 9c 06 92 91 86 8c 28 fe 3a ad 17 f0 54 5e 1f f0 71 1a 50 46 8e 95 89 1a 15 24 99 41 6a c3 7a b6 4b 15 ac 58 b2 56 a8 75 b4 33 a4 39 17 42 54 81 Data Ascii: @T-`03$0upQ81c/x;#H#oxKB{D9$r)Q/}q==#=Q/O=?f.m"v~,#"}}cPT*A 'gVndL\5RfTypQr~[j+GpHGg.b(:T^qPF$AjzKXVu39BT
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: 00 68 aa a3 22 26 4a 9b 83 fd c0 64 31 18 66 36 71 63 f9 d9 ac d7 44 cd 89 27 c5 15 fc dc a9 5b 5c 3d 67 20 2a 3a 88 d7 36 7a fd b1 b5 26 fe b8 ab ca c7 06 f5 1b b6 56 51 3b 44 c2 10 f3 43 bd 6c 07 62 91 cf 21 c0 6d 06 3e 98 d8 6f c4 d9 b6 41 e3 29 4c de c0 dd b8 8b f6 ba dc c4 a7 b6 27 70 35 ae a6 b5 25 af f7 d7 04 38 47 49 00 96 40 45 82 73 1d 94 07 d4 52 5c 5c 2d 27 2e 91 04 75 b0 51 06 0b 6a 25 82 e3 ae b0 1d d9 16 41 63 86 7c a7 c5 6d b6 cd 66 52 43 6b 40 33 8d a7 a0 a1 a9 e7 10 c8 db 66 41 8d ee 07 e5 45 61 7e 3b c5 04 9f e3 5a 80 53 1e 32 51 6a d9 d2 3a 9c cd ff 10 db 38 75 76 7b 6d 87 d1 1e 48 5d bc 6c da ac 72 37 af 46 37 5c 9c 5b e4 17 67 a2 49 e9 76 18 73 5f 60 dd 11 72 ba 07 e2 8e 3d 10 79 34 81 d3 a1 19 86 b7 0b bb d6 b1 9a 21 18 ca 6c e4 87 Data Ascii: h"&Jd1f6qcD'[\=g *:6z&VQ;DClb!m>oA)L'p5%8GI@EsR\\-'.uQj%Ac\|mfRCk@3fAEa~;ZS2Qj:8uv{mH]lr7F7\[gIvs_`r=y4!l
2024-11-21 02:42:12 UTC	1280	IN	Data Raw: 04 09 f4 71 e0 5c 1a 15 21 fd 0e bf 76 aa a0 a5 09 94 c4 be 3f b9 0e 35 7d 4d 27 5c f7 6a 01 2b d7 2f 6c 9b d7 39 97 06 f1 ac ba d7 f9 3c 3a 83 e3 a0 9e 1f c4 6c 9b 6a e4 9b c2 21 aa 37 c5 0e b8 7d 09 5c aa 12 8d f4 7a 03 a9 6c 84 f4 b0 e1 3d c3 74 57 31 74 c5 27 53 d0 46 52 b7 c9 ce b9 ed ba 9f d2 63 56 89 fe 16 14 ee 4b cd a9 f1 e1 e7 48 64 47 65 e8 15 2e e9 b1 f0 8b e2 68 88 11 74 26 51 06 ce d9 41 07 aa 72 c3 63 3c 1d ac 80 9e d4 75 ac 87 f3 bd 1c 04 74 c3 a4 c6 db e2 b7 3f 33 c8 67 aa c7 50 37 fd e0 ec a5 65 66 fc 7d 0c 05 8b d4 1e c5 c8 cd ed a9 b8 b4 3b 3f 88 0d da 10 a8 ce d4 9a e4 ba 12 27 a0 37 69 a9 d9 cb ef 72 23 c1 4e d6 c6 bd af 81 e2 d2 f1 af ef 5c 41 4c be 88 53 41 30 e4 9f e6 6e 31 40 89 83 0d cd b6 9f 0f fe 28 45 80 3d 0f a7 bc 26 26 96 Data Ascii: q\!v?5}M'\j+/l9<:lj!7}\zl=tW1t'SFRcVKHdGe.ht&QArc<ut?3gP7ef};?'7ir#N\ALSA0n1@(E=&&
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: da 3b b4 a2 ba 72 f1 82 44 6b 3b 54 93 b2 fc bb b5 7c 31 48 3a ea 3f a8 2e 8e 8c 5f 98 76 0f ba e9 38 92 3f 1e 39 a4 7f df 5d 5c 76 e0 d2 e8 4b e8 c9 ca 63 a5 07 c0 f9 8a f3 33 0b 82 c7 ff cb 36 3d 84 48 ab e9 97 c0 f1 f0 f9 37 5f 81 60 24 92 a1 34 8f 0a 0a 32 4a 2c e0 0c ad f1 5a 0d de e5 c1 0d c9 c4 d8 51 06 cb 46 3c f7 24 bd 92 a1 2c f0 34 15 b1 90 06 54 96 97 99 6e a0 7e c2 1d ea 4a 2c 57 f1 98 68 c0 a0 29 56 d2 0b a2 c0 38 e1 3f 1b 15 9e e2 a6 31 ca 2a 16 34 07 94 ed a5 1a 13 a2 76 d7 16 7a 95 95 26 e2 3f e1 d7 cf 01 52 68 7d 9d 4a d5 ec f5 eb 9b 1b 55 5a 3e 42 5e b8 da f8 1b 81 83 70 69 41 79 c0 5f 0b 53 36 05 a4 53 3c 24 f0 98 6e 31 7d b0 db a3 6c 29 d7 c8 58 b7 9e a2 a2 a7 02 13 48 3d ea 94 83 91 89 e8 55 c6 57 77 c7 65 d3 1f e4 fa e5 61 53 25 c0 Data Ascii: ;rDk;T\|1H:?._v8?9]\vKc36=H7_`$42J,ZQF<$,4Tn~J,Wh)V8?1*4vz&?Rh}JUZ>B^piAy_S6S<$n1}l)XH=UWweaS%
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: ce 31 f0 b5 57 59 b7 72 34 be b9 43 f1 43 c8 1b 83 f0 60 62 5e 72 48 ab 8c d1 7e 18 f6 8d c9 5d 71 e1 ff 98 fb 0e ad f7 33 f5 4c 03 8f fc 69 96 33 00 2a a0 6b 11 b4 30 79 ea ff 7b 57 1d 45 33 37 e9 27 8d 20 79 0c c2 bf b4 14 60 0e 06 9c 46 59 f1 b7 ae 1b f5 6c c2 15 72 ee 11 96 54 55 c8 15 f8 24 9c 1c 78 35 46 8e 71 e6 70 72 4d 08 23 4f 03 5b 94 6c 36 6c 94 d9 ff 09 97 7e f9 35 b7 fc 37 17 4f de 51 85 f9 61 3c 1d c6 3a 73 7a 0d 25 8c 83 27 65 76 83 94 72 f7 f8 d3 48 55 4e d6 0b f8 4e b7 6d da b3 75 5b d3 78 79 59 d3 f8 b6 ad 4d 7b 4a 0d 72 78 60 e9 52 b8 47 2e 47 7a 96 2e 45 06 80 07 59 f9 65 9b e4 98 1e b3 45 a7 1c 44 00 23 b6 ac 6c c1 b0 a9 4d 24 53 99 34 0c 98 f3 c1 83 de 42 b1 b6 a0 a6 36 a4 36 f6 b4 2d 74 b8 df 6c c5 9e b0 80 bb b4 b3 46 fa ef dc eb Data Ascii: 1WYr4CC`b^rH~]q3Li3*k0y{WE37' y`FYlrTU$x5FqprM#O[l6l~57OQa<:sz%'evrHUNNmu[xyYM{Jrx`RG.Gz.EYeED#lM$S4B66-tlF
2024-11-21 02:42:12 UTC	1280	IN	Data Raw: 52 71 19 6b 90 49 4b 1f 91 45 88 15 61 e0 7c 02 d8 cc e4 e0 16 4e 4c 1a 97 d1 2e 11 da 82 a4 0f 19 c5 06 9f b6 bf c7 52 04 f7 49 aa aa 15 cb 22 15 ae 37 16 5a 42 5c 1f 36 d5 bb b3 34 d3 34 39 fd bb e5 f8 cd 5f 7e 8a a6 2f c8 76 d1 f8 dd a0 30 f3 aa 57 11 4e 79 2b a4 2c c6 1c 95 a0 7b 41 46 36 d1 eb 53 86 bb 15 c5 07 e6 8f ee ab 83 39 49 84 06 eb 91 83 e0 18 0d fb a6 55 57 aa 84 2d 50 59 9d 33 0a 69 3c f7 7d 29 cf 49 a3 53 84 fe 3e 77 83 3d f1 21 56 f4 21 ad 78 21 10 3b 0b 7d 25 b5 1c 5a 2f 15 3b 1c eb af 30 32 19 2a b3 4e 9b 9b 8b e8 2d 1b b6 cb c0 61 9a 67 67 95 6f c5 65 13 49 9f 51 28 ff a6 30 85 9d d9 f8 0a 12 a6 07 55 b1 e9 53 86 d0 26 15 52 ca 6e c5 92 e8 52 9f 16 34 ad 9e 69 46 35 41 02 af e0 71 e1 21 f2 d8 0b eb df 4a ae b2 1e 1c a5 c5 56 56 f9 56 Data Ascii: RqkIKEa\|NL.RI"7ZB\6449_~/v0WNy+,{AF6S9IUW-PY3i<})IS>w=!V!x!;}%Z/;02*N-aggoeIQ(0US&RnR4iF5Aq!JVVV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49760	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:12 UTC	619	OUT	GET /gui/ee990a93df71bfdfb3b5.woff2 HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.virustotal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.virustotal.com/gui/domain/ghabovethec.info/detection Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:12 UTC	315	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 237b75ec0179c253d9b436fa498d3465 Server: Google Frontend Date: Tue, 19 Nov 2024 23:26:18 GMT Expires: Wed, 19 Nov 2025 23:26:18 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: font/woff2 Content-Length: 14824 Age: 98154 Connection: close
2024-11-21 02:42:12 UTC	1093	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 39 e8 00 0d 00 00 00 00 88 08 00 00 39 92 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 6e 1b cf 36 1c 90 1c 06 60 00 84 62 0a 81 87 50 ea 78 0b 84 64 00 01 36 02 24 03 89 44 04 20 05 84 7c 07 8c 34 1b 67 76 25 ca 6d 17 c5 dd aa 92 42 f0 a4 97 91 81 c0 79 04 d0 8a fc a6 91 08 73 42 e6 3c f8 ff 8f 07 74 0c 11 3a 53 90 e9 fe 40 82 83 5c ed b4 bb 1a 77 13 d5 78 c6 ef 99 e9 38 41 4d 57 ea 53 95 8b 98 1d 2e e7 5a 3f 12 24 f3 e4 dd 12 10 17 b5 6d 75 74 ad f3 b7 f9 f2 58 82 9c 40 cd fa 5f fe e7 9f 5f 24 81 02 41 66 27 67 af a9 f3 27 10 64 08 78 86 71 26 90 dc ae 54 31 51 5f 94 98 9d 9d 6e 85 e3 a6 8a 7a 85 d7 5f 7d 06 b8 93 23 76 22 f2 f0 ff fe fd bf 73 ed 73 2e 9e fd ad f6 07 50 69 56 42 45 57 e9 32 52 Data Ascii: wOF299n6`bPxd6$D \|4gv%mBysB<t:S@\wx8AMWS.Z?$mutX@__$Af'g'dxq&T1Q_nz_}#v"ss.PiVBEW2R
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: 46 3a 26 26 2c 33 33 3d 0b 0b 81 8d 08 b3 b3 33 71 70 30 73 73 43 bc 02 88 02 05 c2 82 04 11 05 0b 86 85 08 21 0a 15 ca c2 c7 87 08 17 8e 16 21 02 23 52 24 ad 28 51 e4 a2 45 b3 8b 91 c8 28 49 12 83 86 b2 49 e4 c8 c1 ca 57 40 d0 5c 6b 58 1b 6d 99 15 ea 44 54 a4 07 ac 9f fe e4 06 cd 9e d0 64 a2 13 95 29 a6 56 06 d6 3c 62 35 57 6c e6 e7 fa 5b 60 21 85 45 c2 59 2c 7e 96 08 67 69 ae 9f 65 96 b3 da f3 5a 95 90 39 34 30 d0 00 da 18 34 a9 db 2c a0 42 19 42 c7 1c 48 75 de fe df d8 d3 cb 26 65 13 0a 82 29 79 06 d6 6b 93 54 dd e9 6e 5c a3 75 e5 9b 68 ff d1 1a 14 a6 92 e3 7a 1c c0 8d 69 a5 59 0c 6d de dc 60 68 bb 52 63 a7 1d 66 8b 55 6a ae 57 c5 db 43 a5 b8 e0 c3 91 5c 1d 3b 5d 1e 23 0d b9 d7 7b 70 84 ec 85 91 72 a7 be f5 f6 b9 97 dd d3 1f 27 ad ff 8f d6 bf de 9f 8a Data Ascii: F:&&,33=3qp0ssC!!#R$(QE(IIW@\kXmDTd)V<b5Wl[`!EY,~gieZ9404,BBHu&e)ykTn\uhziYm`hRcfUjWC\;]#{pr'
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: 53 72 da 1a ea fa 66 81 7d db e6 e0 11 3a b4 c7 e3 c1 9f 15 33 5a 40 e8 f4 51 00 16 f7 4b 16 e8 42 07 06 9a f0 97 95 7f 01 45 bc 2c cb 57 26 05 34 c9 11 0a 4a 0c 0b 0b 39 1b 07 96 8b 9b 4a 8c ba 78 99 32 b9 e4 eb c8 ad 87 9e 62 0d 32 58 bc 23 8e 48 84 60 87 e9 80 31 80 9f b3 10 84 71 1f b7 88 92 49 db 56 73 e3 f9 d3 02 4b 6f 5c df 9f da b2 3e 53 56 89 56 cd 55 09 14 eb 58 b1 8c 89 36 01 74 64 2e 0c 67 08 99 89 c0 54 e7 81 0f 97 ab 25 0f de 14 ec d5 da 60 e2 53 82 0d d0 6b 05 fd e1 c3 01 b4 40 8f 95 0a 1a 35 ad a9 60 c4 b9 a4 88 21 83 21 ea 25 01 e5 1e 64 59 60 1e 86 20 9a cf e1 87 cb 60 cb c5 30 84 20 46 11 68 4a 45 86 11 8e 4c fc c8 4d d9 7c f3 13 16 12 fe 32 5e 42 dc 61 c9 90 a5 c2 54 5b 27 11 a5 55 4a 8a ea 99 d6 d0 5c 4e 4d 75 28 d5 15 3f 99 22 55 20 Data Ascii: Srf}:3Z@QKBE,W&4J9Jx2b2X#H`1qIVsKo\>SVVUX6td.gT%`Sk@5`!!%dY` `0 FhJELM\|2^BaT['UJ\NMu(?"U
2024-11-21 02:42:12 UTC	187	IN	Data Raw: 46 f5 9e ff 78 87 80 f8 b7 a7 21 0c 25 3d 3b af fd 31 06 2d 0a 3a a2 6a 56 ec 8c e3 e5 ce 9a bd 81 7c af b7 0b ab ed fa 9f a8 ee 67 56 32 d0 67 5f 7b 96 b7 de 6d 3c b3 cc 9d 50 07 f2 7e 2e 4f 74 43 78 fd 7d ae 30 42 62 33 81 c0 91 21 4d 29 fc b4 aa 23 39 d6 42 16 34 4e 2e a5 c6 4f bb ea 21 93 f4 78 8a dd dd f4 71 e8 97 27 96 1a a0 a5 17 2e 9a af 05 07 04 04 06 e6 a2 0c 5f 27 9d 72 da 19 67 9d 73 de 05 17 5d 72 d9 15 57 5d 83 61 08 02 5e f5 18 e2 58 15 2d 58 85 06 95 8b 94 88 57 0a 09 03 87 80 12 c2 72 71 87 40 0a a4 56 a2 0c 1a 16 1e 79 ce 9b cb cf 12 5a Data Ascii: Fx!%=;1-:jV\|gV2g_{m<P~.OtCx}0Bb3!M)#9B4N.O!xq'._'rgs]rW]a^X-XWrq@VyZ
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: 8a fa 62 98 cf e0 91 b5 1b 82 e4 53 41 50 19 65 46 34 79 4d d5 e1 c6 03 79 ad a0 52 20 0c 87 c0 6c b4 90 18 60 a4 0f ce 9e 74 09 84 28 7c dd 7b 42 2c 10 de 3a 69 06 52 e5 a4 6b b5 ef 7c a4 c8 d9 a9 00 14 a0 4c 3c 88 55 27 09 d0 ec 3b 14 ba da 06 14 da 16 75 75 fa 76 c9 80 e3 83 5e 77 c3 4d b7 dc 76 c7 5d f7 dc f7 40 b9 c7 1e 7a 04 23 b2 73 af 35 83 dc 26 9b 63 55 00 97 b0 e2 f1 28 16 3c 17 e2 42 03 45 04 39 22 4b 90 84 20 56 f0 3c 64 2d 74 e9 f0 ee 84 6f d4 d0 d6 69 0a b3 ce 38 31 f1 17 33 bb 58 38 bf 93 95 47 35 36 31 f2 b4 bf e6 81 59 c8 b8 f7 39 5e 08 87 58 5b 38 34 21 94 1a 81 93 31 86 23 5b 90 16 48 7a 75 b4 60 1e 22 13 2d 45 78 c3 a1 53 61 87 a0 05 51 29 17 05 f2 88 1f 72 37 67 81 62 a1 a7 22 8f a0 3c 32 e1 64 19 2b 1d 81 c2 02 1a ab 86 d6 8c 16 83 Data Ascii: bSAPeF4yMyR l`t(\|{B,:iRk\|L<U';uuv^wMv]@z#s5&cU(<BE9"K V<d-toi813X8G561Y9^X[84!1#[Hzu`"-ExSaQ)r7gb"<2d+
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: e5 2d 7f 72 41 5b 7e 9a 8d b9 ca 39 a9 f4 95 8d f8 7a ef 2b b2 64 29 08 41 8c ce 53 a6 96 87 ef 27 0e 66 d9 ab c1 38 f3 9d 6b 90 20 df 03 a9 87 43 a5 cd 61 ad 29 84 11 50 6d 2d fc 0f f0 af d3 7b 2b 40 cc ba 85 b3 27 f9 40 2e c8 c1 4e 6b 62 0a e7 46 c6 96 6a a2 dc 31 51 4b 07 50 9d d1 5c 8e e5 60 ae 3f ef 17 aa 54 cb 64 c9 1e ca 0f a0 9d 6c 3f a3 a1 62 d0 a3 bc 86 8f 65 5d 7e e0 d8 96 c2 08 36 47 20 de ce 86 7a 2c 24 0f 33 2c 71 37 2f d4 39 88 aa 60 93 ee 68 44 80 be 96 f7 2b 54 4f 23 0a e6 b2 ce 0c e6 f5 2c c1 c5 76 c2 9d 58 9a 4b 8d 54 41 bc 4c 2b ed 91 76 86 db d1 20 b2 8a e0 2f 44 17 25 69 92 34 ec 66 8a 8f 10 ca 71 2a 26 e5 90 50 31 d6 d5 2e f5 36 57 aa 57 30 46 84 fc 8a 9b 78 2e 1d 12 de 70 44 63 41 b6 9a 15 ba ee 30 ad 67 f5 e5 61 7b 76 40 8d 2d 57 Data Ascii: -rA[~9z+d)AS'f8k Ca)Pm-{+@'@.NkbFj1QKP\`?Tdl?be]~6G z,$3,q7/9`hD+TO#,vXKTAL+v /D%i4fq*&P1.6WW0Fx.pDcA0ga{v@-W
2024-11-21 02:42:12 UTC	1280	IN	Data Raw: d0 a1 ab 46 f5 cf ef a9 fe 17 3e 2d 2b 8b c3 c8 5f d4 27 cd e7 e4 70 44 ae 16 1c 88 c1 d9 c0 2b e5 f1 aa 01 13 c1 9a 8c 9c da 99 f6 40 c1 5c 59 c5 2a a3 4f 75 d3 f1 59 df 19 b6 78 af 19 3d 1d fc 44 2d 0b a0 5e 7d 65 43 6c f1 ca 17 01 49 2c 94 55 af c3 53 b5 68 f5 4b 95 62 8f 64 a7 4f 6c 9d 25 e3 2a de 80 7f 20 58 26 87 e4 73 57 1d 95 7a 08 55 b1 d6 90 49 bb 9c bd 32 9a 25 ab 35 28 f9 86 71 af 99 fd df f9 90 44 24 24 be 1c 74 68 4e b3 ca a4 fe 6a 8b 80 b2 a7 80 69 e3 86 43 79 8c 0b 55 d1 2f 8f 3f 6d be ea 72 c3 c5 1c c8 8e 40 b5 7b 53 6e 63 98 1e 23 72 04 ef 1d 0c ab dc 6f 65 42 7b 80 76 f7 c3 43 eb 04 7f 76 92 c0 f1 78 03 a7 89 0a 1f 3a 03 33 38 b6 01 e9 64 94 72 d8 9f 15 ba 69 c1 54 88 70 10 7e 4d 77 44 8c 02 81 e6 6f 2b 96 70 f9 be 75 8c d7 fb 0a ae 3f Data Ascii: F>-+_'pD+@\YOuYx=D-^}eClI,UShKbdOl% X&sWzUI2%5(qD$$thNjiCyU/?mr@{Snc#roeB{vCvx:38driTp~MwDo+pu?
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: cd 2d 86 0f bd 85 33 ff 0a 7d 27 98 df 82 0f 8d dc de f6 15 bc b0 fa 0b 52 e2 04 5c f5 85 2e 01 ae b1 7a 9f 57 ef 1d 8f 6c 2a c8 2e 14 95 9b 71 59 ac 06 e3 6d 74 55 ac b6 a7 9d d6 38 04 21 d2 e9 d9 35 c4 dc 0b 7d cd b9 6e 11 9d b2 08 c8 10 f0 7f 64 7d dd cd d4 b9 4c ff b4 9d 42 8f b5 ae 1c 0c a9 e7 36 68 3d 0d 42 43 38 e8 10 fa 15 92 b9 5f 6c 74 00 1d c2 d4 55 a5 4d fa 03 a6 e4 40 95 81 6f 21 1d 92 3b c8 49 94 da 51 e3 b0 db 6a 54 04 a6 9e e7 24 04 09 e0 1b 17 f4 ae 1c f1 a9 52 8d 1a 69 e5 d1 0b 59 9e d3 a9 9b 8d 69 e8 7f 56 3a a2 41 fe db 17 63 d4 18 be 31 e4 f6 2a 83 00 8b 30 f7 56 e9 92 7e 9f 3e d5 ae 51 9a 6a 54 dc 0e 4b b9 49 31 5b ef b6 aa c9 89 3d 0c 2b 23 4c 38 c5 ff 40 29 d4 8b d8 46 2d 68 3e 69 8c 18 20 71 86 33 11 c5 fe f9 5b 16 9e c2 69 83 d2 Data Ascii: -3}'R\.zWl.qYmtU8!5}nd}LB6h=BC8_ltUM@o!;IQjT$RiYiV:Ac10V~>QjTKI1[=+#L8@)F-h>i q3[i
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: c5 d3 11 b8 c6 9f 46 c4 b0 25 e1 9d de 5f 36 0f 46 43 a3 b0 b8 7e b5 d8 4e ed 4c d1 55 92 0a 02 ff b8 25 9d 9b 55 92 b9 40 84 0c 14 17 7c 91 1f 7e 16 85 8d 15 44 a1 9a 3b e5 e8 85 6f e5 00 bd ba 1c 5c fc 5d ff e0 e2 f8 21 06 36 45 20 f5 12 58 86 7a 81 30 20 e1 52 4d a3 b3 a4 3a 2b 95 cb b4 db d9 22 93 cb a5 65 33 8d 7a 99 e2 5d 97 7b f7 fe ca c8 cd 2e bc 3c 19 f8 e9 f2 74 7c bd cd 47 1d ef 8f d3 77 3d c3 fb 5d 88 33 2f 3b e0 0d fe 7d d6 0e aa b8 39 3d b5 77 6f fa 60 73 14 0e ce 79 2a 51 43 9a c1 76 d6 d6 62 db ff 22 11 ff c2 b5 db 37 0a ae 73 06 a4 37 4c ec 1b b2 3d b4 a0 5f 8f 10 17 35 00 86 a9 3a bc 74 cc d2 27 10 d5 89 e9 77 76 54 1d ac 17 19 62 3d 9d 35 0a 6d ba 63 44 6b 5c b6 01 b5 23 01 be 47 b8 3b 24 a5 32 fb 4b 76 a6 40 a2 17 71 29 a0 11 c6 1e 6a Data Ascii: F%_6FC~NLU%U@\|~D;o\]!6E Xz0 RM:+"e3z]{.<t\|Gw=]3/;}9=wo`sy*QCvb"7s7L=_5:t'wvTb=5mcDk\#G;$2Kv@q)j
2024-11-21 02:42:12 UTC	1280	IN	Data Raw: dd e2 24 ed a2 87 ab 5c aa 85 f3 1c 8d c6 f9 92 78 b3 f2 89 48 c2 fb f8 e3 46 7f a5 1f 99 71 22 2a 1c a2 16 b7 d7 61 d6 05 28 d4 22 ac 95 ca 9c 05 aa 51 37 dd ae 70 c1 52 bf ab ae ec 98 a5 f4 d8 10 f2 98 b9 f4 98 cf 55 53 b0 34 ec 6a 40 de 84 91 37 87 50 37 49 f9 73 0b 96 ce 05 17 59 4b a4 a7 39 11 e9 b6 58 22 dd 89 e6 48 8f d9 48 66 9a ec 0e a6 9e 4c 62 e9 1d 76 96 09 3c ed 89 c8 2c b7 1a 2d 63 40 20 08 c0 0d cd 4c 0a 9d 84 8c 65 13 a6 5b 99 95 5a 87 51 2b b1 c6 64 6b ec e0 1c 2b cc 64 a5 6a 24 72 7c 2f 9e d0 27 11 b3 0b f0 86 bf 71 a5 d6 4f 71 af fe 18 24 75 29 44 94 dc 57 fe bc e4 2e 4f 1b 08 60 e0 d6 46 39 34 00 71 32 d9 3f 35 6e e3 6c fe ab f0 9d 4a ad 6a 04 17 58 49 03 d6 68 0d eb 12 81 d0 41 a2 0e 11 4b bf 7b d4 55 f4 cc 27 8e 1d b3 ed ef a3 a5 76 Data Ascii: $\xHFq"*a("Q7pRUS4j@7P7IsYK9X"HHfLbv<,-c@ Le[ZQ+dk+dj$r\|/'qOq$u)DW.O`F94q2?5nlJjXIhAK{U'v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49759	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:12 UTC	836	OUT	POST /ui/signin?relationships=groups%2Cparent_group HTTP/1.1 Host: www.virustotal.com Connection: keep-alive Content-Length: 4 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x319x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTg1MjY0MTYzNTktWkc5dWRDQmlaU0JsZG1scy0xNzMyMTU2OTMwLjEwNw== sec-ch-ua-platform: "Windows" Origin: https://www.virustotal.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:12 UTC	4	OUT	Data Raw: 6e 75 6c 6c Data Ascii: null
2024-11-21 02:42:12 UTC	802	IN	HTTP/1.1 401 Unauthorized Content-Type: application/json Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: 945108dbfd98b31726b67c0c9f5023f5 Date: Thu, 21 Nov 2024 02:42:12 GMT Server: Google Frontend Content-Length: 85 Connection: close
2024-11-21 02:42:12 UTC	85	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 4e 6f 20 75 73 65 72 20 69 73 20 73 69 67 6e 65 64 20 69 6e 22 7d 7d Data Ascii: {"error": {"code": "AuthenticationRequiredError", "message": "No user is signed in"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49762	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:12 UTC	756	OUT	GET /ui/user_notifications HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x319x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTYzMDkzOTE3NjYtWkc5dWRDQmlaU0JsZG1scy0xNzMyMTU2OTMwLjEwOA== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:12 UTC	882	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: 7837aecaa45831037efcf0305d0b7362 Date: Thu, 21 Nov 2024 02:42:12 GMT Server: Google Frontend Content-Length: 13134 Expires: Thu, 21 Nov 2024 02:42:12 GMT Cache-Control: private Connection: close
2024-11-21 02:42:12 UTC	526	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 5b 7b 22 69 64 22 3a 20 22 32 30 32 34 30 31 31 30 30 39 33 36 32 31 2d 65 76 65 72 79 6f 6e 65 22 2c 20 22 74 79 70 65 22 3a 20 22 75 73 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 75 73 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 2f 32 30 32 34 30 31 31 30 30 39 33 36 32 31 2d 65 76 65 72 79 6f 6e 65 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 6c 69 6e 6b 5f 75 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 72 69 67 68 74 74 61 6c 6b 2e 63 6f 6d 2f 77 65 62 63 61 73 74 2f 31 38 32 38 32 2f 36 30 34 33 36 39 3f 75 74 6d 5f 73 6f 75 72 63 65 3d Data Ascii: {"data": [{"id": "20240110093621-everyone", "type": "user_notification", "links": {"self": "https://www.virustotal.com/ui/user_notifications/20240110093621-everyone"}, "attributes": {"link_url": "https://www.brighttalk.com/webcast/18282/604369?utm_source=
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: 68 72 65 61 74 20 48 75 6e 74 69 6e 67 20 6c 69 76 65 20 73 65 73 73 69 6f 6e 3c 2f 62 3e 20 77 68 65 72 65 20 77 65 20 77 69 6c 6c 20 63 6f 76 65 72 20 68 6f 77 20 74 6f 20 68 75 6e 74 20 74 68 72 6f 75 67 68 20 3c 62 3e 53 69 67 6d 61 20 72 75 6c 65 73 3c 2f 62 3e 20 77 69 74 68 20 74 68 65 20 6c 61 74 65 73 74 20 66 65 61 74 75 72 65 73 20 77 65 20 68 61 76 65 20 61 64 64 65 64 20 6f 6e 20 6d 61 63 4f 53 20 61 6e 64 20 4c 69 6e 75 78 2c 20 61 6e 64 20 65 78 70 6c 6f 72 65 20 68 6f 77 20 3c 62 3e 43 72 6f 77 64 73 6f 75 72 63 65 64 20 41 49 3c 2f 62 3e 20 61 6e 61 6c 79 73 69 73 20 63 6f 6d 70 61 72 65 73 20 74 6f 20 61 6e 64 20 63 6f 6d 70 6c 65 6d 65 6e 74 73 20 74 68 65 20 69 64 65 6e 74 69 66 69 65 64 20 53 69 67 6d 61 20 72 75 6c 65 20 6d 61 74 63 Data Ascii: hreat Hunting live session</b> where we will cover how to hunt through <b>Sigma rules</b> with the latest features we have added on macOS and Linux, and explore how <b>Crowdsourced AI</b> analysis compares to and complements the identified Sigma rule matc
2024-11-21 02:42:12 UTC	482	IN	Data Raw: 64 69 76 3e 22 2c 20 22 64 61 74 65 22 3a 20 31 36 39 32 33 34 39 34 39 34 2c 20 22 74 69 74 6c 65 22 3a 20 22 54 68 72 65 61 74 20 48 75 6e 74 69 6e 67 20 77 69 74 68 20 56 69 72 75 73 54 6f 74 61 6c 20 2d 20 65 70 69 73 6f 64 65 20 34 22 7d 2c 20 22 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 75 73 65 72 5f 72 65 61 64 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 22 3a 20 66 61 6c 73 65 7d 7d 2c 20 7b 22 69 64 22 3a 20 22 32 30 32 33 30 33 32 33 31 36 35 31 30 30 2d 65 76 65 72 79 6f 6e 65 22 2c 20 22 74 79 70 65 22 3a 20 22 75 73 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 75 73 Data Ascii: div>", "date": 1692349494, "title": "Threat Hunting with VirusTotal - episode 4"}, "context_attributes": {"user_read_notification": false}}, {"id": "20230323165100-everyone", "type": "user_notification", "links": {"self": "https://www.virustotal.com/ui/us
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: 63 33 35 30 62 64 65 64 36 35 36 34 33 38 63 38 30 63 31 38 37 39 38 62 31 36 35 33 65 31 31 33 32 34 32 34 61 36 62 38 38 37 63 32 38 61 32 65 32 36 36 31 34 39 63 62 31 61 32 65 34 34 36 34 37 61 38 65 65 38 32 64 35 63 39 65 33 65 64 62 66 35 32 62 36 38 36 65 62 64 62 36 66 33 36 64 64 62 62 33 39 39 33 66 38 36 34 36 34 39 61 35 37 33 62 30 33 65 64 66 36 39 30 31 31 66 34 65 63 37 31 66 39 61 30 30 30 65 35 33 37 33 39 31 61 31 65 61 36 32 61 63 38 30 38 39 39 36 64 64 32 34 33 62 65 34 61 30 32 65 39 64 30 31 36 32 33 61 66 66 65 62 65 37 37 37 66 30 66 63 36 39 31 37 62 36 63 61 34 37 66 30 31 31 34 66 31 33 63 33 61 66 64 64 33 30 64 64 30 30 36 32 33 62 61 64 32 30 33 66 62 62 32 34 36 66 33 35 61 34 38 37 35 34 30 38 36 65 32 32 31 32 34 31 63 Data Ascii: c350bded656438c80c18798b1653e1132424a6b887c28a2e266149cb1a2e44647a8ee82d5c9e3edbf52b686ebdb6f36ddbb3993f864649a573b03edf69011f4ec71f9a000e537391a1ea62ac808996dd243be4a02e9d01623affebe777f0fc6917b6ca47f0114f13c3afdd30dd00623bad203fbb246f35a48754086e221241c
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: 76 65 6c 20 75 70 20 79 6f 75 72 20 73 6b 69 6c 6c 73 20 77 69 74 68 20 56 69 72 75 73 54 6f 74 61 6c 27 73 20 41 50 49 3f 20 4a 6f 69 6e 20 6f 75 72 20 73 65 73 73 69 6f 6e 20 61 6e 64 20 6c 65 61 72 6e 20 68 6f 77 20 74 6f 20 75 73 65 20 69 74 20 6c 69 6b 65 20 61 20 70 72 6f 21 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 67 6f 2f 75 74 6d 2f 39 31 62 30 34 61 35 36 65 33 31 36 65 65 39 39 66 63 35 39 36 39 36 31 62 30 32 34 61 38 66 35 65 35 32 32 33 35 62 38 66 31 30 65 36 31 62 39 65 36 61 32 32 39 65 32 39 35 35 62 31 35 39 37 61 30 65 64 64 65 33 61 62 32 63 35 64 31 37 61 61 62 30 64 66 33 62 64 31 32 32 64 31 36 37 63 30 38 66 37 35 36 31 36 37 34 38 30 38 35 66 62 30 36 61 63 Data Ascii: vel up your skills with VirusTotal's API? Join our session and learn how to use it like a pro! <a href=\"https://www.virustotal.com/go/utm/91b04a56e316ee99fc596961b024a8f5e52235b8f10e61b9e6a229e2955b1597a0edde3ab2c5d17aab0df3bd122d167c08f75616748085fb06ac
2024-11-21 02:42:12 UTC	1280	IN	Data Raw: 31 37 61 30 33 61 39 34 66 65 62 36 35 65 38 66 63 38 31 66 30 34 34 33 63 32 63 37 35 34 34 62 32 30 62 36 65 35 34 35 39 33 32 38 34 39 34 37 62 32 31 65 32 32 62 61 39 62 37 65 64 37 39 31 30 62 37 36 34 32 33 65 66 32 37 35 31 37 38 61 64 38 66 64 34 66 30 64 37 32 30 61 61 62 31 36 37 39 33 62 36 36 32 33 39 30 36 37 64 61 30 37 39 66 35 38 62 63 39 31 34 64 32 31 62 37 32 33 37 37 66 38 35 33 63 66 38 64 62 39 32 33 37 34 36 65 38 66 35 62 63 35 38 37 66 63 65 33 33 33 31 38 64 34 34 62 61 38 34 31 38 36 61 64 62 31 62 61 63 66 38 65 37 39 61 34 65 32 63 35 33 62 34 37 31 39 38 37 61 38 63 36 35 31 31 35 34 61 65 37 65 63 36 64 61 32 31 35 31 37 61 33 34 35 66 30 63 32 64 39 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 3e 68 65 72 65 Data Ascii: 17a03a94feb65e8fc81f0443c2c7544b20b6e54593284947b21e22ba9b7ed7910b76423ef275178ad8fd4f0d720aab16793b66239067da079f58bc914d21b72377f853cf8db923746e8f5bc587fce33318d44ba84186adb1bacf8e79a4e2c53b471987a8c651154ae7ec6da21517a345f0c2d9\" target=\"_blank\">here
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: 36 65 38 30 31 62 61 32 63 63 36 30 33 35 65 64 65 30 30 30 38 31 36 35 37 35 39 38 32 35 33 39 35 31 61 64 39 39 31 30 65 39 32 31 30 33 65 63 62 30 37 37 34 37 38 39 61 32 65 38 65 39 64 66 34 34 34 66 39 35 31 64 34 31 30 65 61 65 35 35 39 62 31 39 65 61 31 38 65 38 27 20 74 61 72 67 65 74 3d 5f 62 6c 61 6e 6b 3e 68 65 72 65 3c 2f 61 3e 22 2c 20 22 64 61 74 65 22 3a 20 31 36 37 37 35 31 37 39 31 30 2c 20 22 74 69 74 6c 65 22 3a 20 22 53 6d 6f 6f 74 68 6c 79 20 6d 69 67 72 61 74 65 20 66 72 6f 6d 20 56 69 72 75 73 54 6f 74 61 6c 27 73 20 41 50 49 20 76 32 20 74 6f 20 76 33 22 7d 2c 20 22 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 75 73 65 72 5f 72 65 61 64 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 22 3a 20 66 61 6c 73 65 7d 7d 2c Data Ascii: 6e801ba2cc6035ede00081657598253951ad9910e92103ecb0774789a2e8e9df444f951d410eae559b19ea18e8' target=_blank>here</a>", "date": 1677517910, "title": "Smoothly migrate from VirusTotal's API v2 to v3"}, "context_attributes": {"user_read_notification": false}},
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: 31 65 34 34 33 66 33 5c 22 20 74 61 72 67 65 74 3d 5f 62 6c 61 6e 6b 3e 54 68 72 65 61 74 20 48 75 6e 74 69 6e 67 20 77 69 74 68 20 56 69 72 75 73 54 6f 74 61 6c 3c 2f 61 3e 5c 22 20 74 6f 64 61 79 2c 20 46 65 62 72 75 61 72 79 20 32 32 6e 64 2c 20 61 74 20 31 37 2e 30 30 20 43 45 54 2e 20 4a 6f 69 6e 20 75 73 20 74 6f 20 6c 65 61 72 6e 20 61 62 6f 75 74 20 68 6f 77 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 67 6f 2f 75 74 6d 2f 62 65 39 31 61 65 31 36 33 62 30 62 37 30 32 30 34 65 39 61 37 33 63 63 35 64 30 35 39 30 66 65 38 37 64 34 63 38 66 36 61 35 62 31 30 37 33 62 36 65 34 31 34 31 39 31 36 64 33 37 33 64 38 38 35 39 39 30 35 64 65 66 34 63 63 61 65 38 38 36 30 65 39 61 61 63 32 Data Ascii: 1e443f3\" target=_blank>Threat Hunting with VirusTotal</a>\" today, February 22nd, at 17.00 CET. Join us to learn about how <a href=\"https://www.virustotal.com/go/utm/be91ae163b0b70204e9a73cc5d0590fe87d4c8f6a5b1073b6e4141916d373d8859905def4ccae8860e9aac2
2024-11-21 02:42:12 UTC	1280	IN	Data Raw: 74 69 6e 67 20 6f 75 72 20 73 65 63 6f 6e 64 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 67 6f 2f 75 74 6d 2f 62 65 39 31 61 65 31 36 33 62 30 62 37 30 32 30 34 65 39 61 37 33 63 63 35 64 30 35 39 30 66 65 38 37 64 34 63 38 66 36 61 35 62 31 30 37 33 62 36 65 34 31 34 31 39 31 36 64 33 37 33 64 38 38 35 39 39 30 35 64 65 66 34 63 63 61 65 38 38 36 30 65 39 61 61 63 32 34 30 63 31 31 30 61 33 35 62 62 65 34 34 38 38 32 32 37 38 64 33 37 30 66 62 31 65 35 65 33 31 63 66 34 63 35 64 37 37 35 38 64 31 35 37 31 38 33 39 38 63 35 33 63 32 39 35 66 36 36 65 62 66 64 64 63 31 39 35 38 39 65 34 38 31 34 35 62 36 39 66 30 37 62 64 66 37 38 64 65 62 31 36 64 36 37 62 62 33 39 38 62 35 38 36 35 33 Data Ascii: ting our second <a href=\"https://www.virustotal.com/go/utm/be91ae163b0b70204e9a73cc5d0590fe87d4c8f6a5b1073b6e4141916d373d8859905def4ccae8860e9aac240c110a35bbe44882278d370fb1e5e31cf4c5d7758d15718398c53c295f66ebfddc19589e48145b69f07bdf78deb16d67bb398b58653
2024-11-21 02:42:12 UTC	1408	IN	Data Raw: 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 67 6f 2f 75 74 6d 2f 63 64 37 37 63 38 64 66 36 62 63 36 65 62 38 36 37 37 63 35 61 34 32 63 38 39 37 31 65 62 66 62 61 39 31 65 62 39 33 30 36 39 62 63 38 61 63 33 38 61 63 37 36 34 66 36 63 32 66 33 61 32 37 66 34 38 35 38 34 33 38 65 31 63 37 34 39 35 39 30 61 39 65 33 63 31 38 34 36 37 35 36 61 64 62 32 63 64 38 36 31 62 31 32 61 63 64 63 35 31 35 66 35 33 31 34 63 34 65 32 39 31 34 31 62 38 63 32 63 37 31 63 30 38 36 63 64 32 30 62 33 63 66 30 35 37 62 36 62 65 31 62 35 30 62 37 37 32 64 31 39 62 34 30 33 36 39 37 31 38 36 35 30 63 30 65 64 61 34 32 37 30 32 65 38 33 32 31 34 35 30 37 62 63 30 33 39 31 66 38 38 34 65 62 34 66 32 36 66 35 63 34 35 33 35 34 36 30 63 33 32 65 30 33 30 36 38 32 32 38 33 61 Data Ascii: .virustotal.com/go/utm/cd77c8df6bc6eb8677c5a42c8971ebfba91eb93069bc8ac38ac764f6c2f3a27f4858438e1c749590a9e3c1846756adb2cd861b12acdc515f5314c4e29141b8c2c71c086cd20b3cf057b6be1b50b772d19b40369718650c0eda42702e83214507bc0391f884eb4f26f5c4535460c32e030682283a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49761	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:12 UTC	755	OUT	GET /ui/cookie_disclaimer HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x319x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTk4ODYxOTc0ODAtWkc5dWRDQmlaU0JsZG1scy0xNzMyMTU2OTMwLjExNA== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:12 UTC	879	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: babf69221ed1a09b26f98461118d3f8b Date: Thu, 21 Nov 2024 02:42:12 GMT Server: Google Frontend Content-Length: 25 Expires: Thu, 21 Nov 2024 02:42:12 GMT Cache-Control: private Connection: close
2024-11-21 02:42:12 UTC	25	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 7b 22 73 68 6f 77 22 3a 20 66 61 6c 73 65 7d 7d Data Ascii: {"data": {"show": false}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49763	142.250.185.67	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:12 UTC	547	OUT	GET /recaptcha/api.js?render=explicit HTTP/1.1 Host: recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:13 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 21 Nov 2024 02:42:12 GMT Date: Thu, 21 Nov 2024 02:42:12 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:13 UTC	641	IN	Data Raw: 36 64 32 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 72 65 63 61 70 Data Ascii: 6d2/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://recap
2024-11-21 02:42:13 UTC	1112	IN	Data Raw: 41 41 41 43 54 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 4a 6c 59 32 46 77 64 47 4e 6f 59 53 35 75 5a 58 51 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c Data Ascii: AAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationL
2024-11-21 02:42:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49756	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:13 UTC	456	OUT	GET /ui/cookie_disclaimer HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.260360209.1732156933; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0
2024-11-21 02:42:13 UTC	879	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: 1a5012254227398a6541c0b435a885f9 Date: Thu, 21 Nov 2024 02:42:13 GMT Server: Google Frontend Content-Length: 25 Expires: Thu, 21 Nov 2024 02:42:13 GMT Cache-Control: private Connection: close
2024-11-21 02:42:13 UTC	25	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 7b 22 73 68 6f 77 22 3a 20 66 61 6c 73 65 7d 7d Data Ascii: {"data": {"show": false}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49765	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:14 UTC	567	OUT	GET /gui/stackdriver-errors.3069a6025a2308368f46.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:14 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 345ba9f706834ce0992f83a70e7777cb Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 17:49:56 GMT Expires: Wed, 19 Nov 2025 17:49:56 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 118338 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:14 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 31 0d 0a 00 0d 0a 30 66 66 62 0d 0a 00 00 00 02 ff d4 7d 6b 7b db c8 b1 e6 f7 fd 15 34 e3 d5 00 26 44 89 be 9b 14 cc 71 1c db f1 39 13 db c7 f2 e4 5c 28 59 0b 51 90 84 0c 05 30 00 68 8f 23 71 7f fb be 6f 55 77 a3 c1 8b ed 49 72 76 9f cd 93 b1 c0 46 a3 2f d5 75 af ea ee a0 4a 67 e7 fd cf e9 e9 3c 99 fe f2 fc 72 91 ff f2 a9 3e 59 64 27 57 49 96 c7 5f 79 77 73 33 39 0e fb f3 45 75 19 4c 26 f7 1f df df 7f 70 1c 5d df 7b b4 3f 78 34 3c 5f e4 d3 3a 2b f2 20 8d f2 a8 0e af 3f 25 65 a7 8c 8a 28 1b dd 72 af aa 28 09 af bb 8b 2a ed 54 75 99 4d eb ee a8 88 27 75 70 6f ff e1 a3 7b e1 71 f4 a9 c8 ce 3a Data Ascii: 00000001000000010000000100000001000010ffb}k{4&Dq9\(YQ0h#qoUwIrvF/uJg<r>Yd'WI_yws39EuL&p]{?x4<_:+ ?%e(r(*TuM'upo{q:
2024-11-21 02:42:14 UTC	1408	IN	Data Raw: d2 0e 7b e1 5e a6 ab 67 e6 e9 cd 05 0b 39 39 c6 ba dd 8d aa b8 ec eb c0 47 d9 41 35 ca 7a f1 5d 15 aa 09 b8 86 70 e8 72 92 1d 87 a3 64 67 a7 50 89 4f 31 42 62 b5 d4 99 70 35 bc f5 4a b8 5e 86 1c f9 ed 32 0c 97 86 1d 17 fe b4 06 fb 7f ef bc 28 46 3a af f3 8e e5 17 20 21 cc 96 62 5b 27 dc 08 65 7f 7d ec 9c f7 ff 81 39 1b e5 46 b8 52 e2 49 a2 06 7b ff 6e 68 0c 1a 68 40 6d 32 00 ab ff 4e f9 95 83 1d 38 61 b6 f7 51 a4 7e 67 5a a6 49 9d 9e 75 92 7a ef 2b ec 4b 70 4b f0 c6 e0 0b 78 0b 40 b7 91 c2 cb fe bc 98 07 e0 47 10 06 fd ea 32 3b af 83 f0 e6 a6 db 05 84 33 27 58 f6 1a 79 e0 56 2c 18 62 cd 3e 73 cd 9e 42 aa dd be eb cb ae a3 60 f2 11 22 f1 c8 08 43 2b 61 46 99 15 62 47 81 d6 08 51 05 f3 0c 6a bf b3 8f 10 a8 c7 3d af ca 6d 76 40 a6 29 cc 2e 89 95 67 41 79 81 Data Ascii: {^g99GA5z]prdgPO1Bbp5J^2(F: !b['e}9FRI{nhh@m2N8aQ~gZIuz+KpKx@G2;3'XyV,b>sB`"C+aFbGQj=mv@).gAy
2024-11-21 02:42:14 UTC	1408	IN	Data Raw: a2 58 03 b9 b3 c9 3b f0 4c a9 75 1a a7 51 35 ae e0 f1 6c 54 4d 59 42 55 36 49 b5 ff f1 a7 9f fe d8 10 91 5d f0 ba 0f 57 2b e0 f0 ee ed e1 07 8c 0e 7c 05 2c 11 14 5b 1b 62 fb 63 9a 00 39 e1 f1 a4 ec ca eb dd 0f d0 5c b0 18 54 ac 33 25 aa bd bf 80 4b 8d 3a d3 4b ba 7a eb f8 e7 0f 2f 77 1f c3 e4 61 97 86 bd 78 c8 92 46 25 68 09 1c 1c cc ed ec 0b 80 57 a7 f8 30 bf 48 1b 86 25 dc ea 3e ed 07 72 c0 b3 2f 87 ac a4 fc 16 66 14 b5 a6 7a 01 43 fb 3c 28 9e c6 77 f7 f7 a1 cf 1e dc db df 0f 61 52 1b 50 0c a1 2d 2b 50 e0 a1 49 67 70 93 a3 f2 fd bb 4f d0 64 11 96 4d b5 ee 5f 17 45 9d 50 0b 2a d1 03 fc 46 57 d0 98 b0 a4 ca d4 8a 5c d7 f6 ac 84 7b 17 55 44 c0 62 81 e9 5b eb 12 90 68 f1 65 f2 4b 2a 18 d1 35 3d 5d 97 1e 83 0c 8a 71 d1 eb 76 48 e7 f8 bc 9a 43 1c a7 c0 d6 3c Data Ascii: X;LuQ5lTMYBU6I]W+\|,[bc9\T3%K:Kz/waxF%hW0H%>r/fzC<(waRP-+PIgpOdM_EPFW\{UDb[heK5=]qvHC<
2024-11-21 02:42:14 UTC	287	IN	Data Raw: 7e 08 47 4a 3f cd 99 9c b0 0e 62 88 30 c4 88 3c cf 72 43 fa e9 c1 fe 78 d0 0b 76 d3 83 83 41 38 dc ef 05 f2 00 2b 32 1c 9d 15 d7 79 7c 6f b0 53 44 b0 9c 9e 3e 8d 1f 84 4f 01 9e 20 bf 89 ef dd 85 54 ec 01 17 b4 43 32 89 cf 97 d0 15 50 6f df a7 97 bc 7f 96 ae 8c a8 49 52 32 8a 28 a4 16 c4 ab 44 7a a3 29 c8 91 82 04 3d 03 07 f2 a7 f1 c2 e3 a5 46 8d 83 7b 1f 6e 25 00 f6 aa 28 d3 ce 19 14 5c c4 92 b0 cc a7 50 e2 3b 0f ef 77 fe fc d3 bf 75 a0 36 2c 52 e3 87 96 20 3d 12 9b 4a 33 16 84 74 68 00 3c 07 a0 60 04 e4 a0 76 fc 6f 6d 21 5f e7 68 03 59 51 6c 15 8d 4a 37 30 d7 61 23 18 eb 21 df 1d c0 77 55 c0 65 19 dc bb bb 93 85 d1 b4 87 f4 a9 1d c0 2b 3c 38 98 45 b3 5e fc c0 c2 04 2a 66 5f 46 14 07 49 1c 54 f1 34 7c fa 74 10 0d 76 fe 77 35 4e 86 bb 09 cd 67 58 7b c8 3e Data Ascii: ~GJ?b0<rCxvA8+2y\|oSD>O TC2PoIR2(Dz)=F{n%(\P;wu6,R =J3th<`vom!_hYQlJ70a#!wUe+<8E^*f_FIT4\|tvw5NgX{>
2024-11-21 02:42:14 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a f7 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6f 0d 0a 30 30 30 30 30 30 30 31 0d 0a ef 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3f 0d 0a 30 30 30 30 30 30 30 31 0d 0a fc 0d 0a 30 30 30 30 30 30 30 31 0d 0a fc 0d 0a 30 30 30 30 30 30 30 31 0d 0a e7 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7f 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8f 0d 0a 31 0d 0a ff 0d 0a 30 66 66 33 0d 0a fc af e4 74 7a 96 9e 5f 5c 66 7f f9 65 76 95 17 f3 bf 96 55 bd f8 f4 f9 d7 2f 7f db 1f dc bd 77 ff c1 c3 47 8f 9f f4 f6 ba 56 0b 81 c0 d9 88 24 00 f6 fe 41 8c 30 11 70 df ac 85 c3 f8 36 9e 37 02 ad fb 27 a3 4a c3 d3 f4 39 45 3e d3 3e 94 ea b3 ce c3 7b 02 26 41 Data Ascii: 00000001}0000000100000001o000000010000000100000001?00000001000000010000000100000001000000010000000110ff3tz_\fevU/wGV$A0p67'J9E>>{&A
2024-11-21 02:42:14 UTC	1408	IN	Data Raw: 45 44 8d 4e f4 56 46 3d 6c 0a 44 49 82 37 72 4d 4b 2a 7a 03 b8 4a a1 30 20 61 af 14 fe ba 80 68 36 ac 09 f3 07 a1 c0 59 89 bc b9 70 b9 50 87 aa ec be f8 53 32 f7 04 8e 53 f9 8d cf d5 56 a1 0b 3a 5a 78 fe 94 13 c3 6f e2 7b ed e2 13 47 51 68 58 d8 9c 92 8b 71 b4 c0 fc 01 bc ad d3 28 f0 5a 8c ba eb 9f 76 09 88 da 77 78 1b 18 29 3a ad 7f 60 7d 27 22 98 ec 00 8c 32 84 f9 cb 78 94 a0 1b fe 62 59 d7 7a 6b 80 d5 ca e4 2c 1b b0 4d 7f ff dc 56 bf fc d6 d4 56 eb ff 43 33 5b 6d 6c 6d 62 b4 92 5f 57 66 56 87 29 c0 c7 64 0b 0f 2f e8 8d 23 49 49 fa 93 06 e4 9c ab ad 3b 92 6c 50 c4 0e 22 79 58 41 94 d6 5a ac 34 b9 26 d1 0e 17 a7 53 28 b6 55 6a a8 c6 51 75 e7 a4 d5 0e 77 e0 2c fa af 5e bc 79 f1 1e b6 d6 1f 4e de be ff c3 8b f7 54 bc fa 6f df bf 7e f5 fa cd b3 9f 4c d1 5d Data Ascii: EDNVF=lDI7rMK*zJ0 ah6YpPS2SV:Zxo{GQhXq(Zvwx):`}'"2xbYzk,MVVC3[mlmb_WfV)d/#II;lP"yXAZ4&S(UjQuw,^yNTo~L]
2024-11-21 02:42:14 UTC	1408	IN	Data Raw: 9e fb ad bc 5d 55 c5 dc c7 16 06 8e 67 3f 5f e1 32 9e 56 d8 22 4e c4 71 4a 46 10 35 4d 12 c1 01 38 e7 3d bc f2 82 a2 9c a1 cb f3 b9 40 3a 32 2c 22 64 20 20 dd 10 be 26 ec 46 40 ea 1e 36 3f 0c a2 ce 05 76 3f 22 9c 8c b6 04 cf 98 6b 82 60 5a 63 62 79 6d ea 02 7d bb d5 fd a6 d5 12 ad 1a e6 55 98 78 a0 38 fd 39 87 f6 9c a9 c1 c2 2d ab 7d 1c ce 13 ec 00 b2 0e 74 f8 39 2d 4f 4a c9 2c 4c 5e 84 e3 01 16 8c 96 70 7b 48 73 10 59 67 63 5d 6b 35 19 4b 06 07 48 7b 83 6f b4 a5 ed 98 a4 c2 75 31 3c 41 0b d2 d2 4a 08 0d c4 ea 91 18 d7 82 a7 47 6c d0 4b fd 6a 3a 75 04 72 a0 3b 21 9d 7b 91 2e 97 9b bf 19 ec 21 6e d8 e2 e7 16 a1 2c be be dc 68 7d ad b8 da 9c ca 0c 17 1a b9 05 ac 2d 07 28 1d 4b a3 55 a3 ca d4 70 23 e4 6b 6e b0 5d 10 c3 12 1b c2 b5 60 17 65 4d c9 6f 94 7e ed Data Ascii: ]Ug?_2V"NqJF5M8=@:2,"d &F@6?v?"k`Zcbym}Ux89-}t9-OJ,L^p{HsYgc]k5KH{ou1<AJGlKj:ur;!{.!n,h}-(KUp#kn]`eMo~
2024-11-21 02:42:14 UTC	29	IN	Data Raw: f5 e1 fb 2c 5f 6d f5 bf 20 72 6a 5b b0 73 b0 94 e3 37 f0 76 cd e9 09 b2 c5 66 92 0d 0a Data Ascii: ,_m rj[s7vf
2024-11-21 02:42:14 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 07 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9a 0d 0a 31 0d 0a 32 0d 0a 30 66 66 62 0d 0a 19 bb a0 a2 c0 ec c6 5b 4b ea 95 cc fc b0 ff ae c9 e4 e5 c9 b9 d7 38 ec 24 48 11 69 b0 46 b0 e4 46 72 bd 24 2f 16 bc 91 05 d6 a7 e1 a3 35 69 04 88 dc 54 6c 28 63 a5 3a 8e 43 f9 33 b7 de 48 1e 49 fb 93 d6 ab 6e 74 0b bc d1 ef 03 79 6e b2 a9 4f cb 04 fb 5b 25 57 2e 7f 0c d5 aa f6 a7 56 92 6b 8a 65 d2 e8 d7 7e e8 29 f9 4a 96 1b 69 8b 3b 87 9b 79 31 86 8a 8e 12 3d b9 11 2a 07 61 63 ce 69 24 38 78 74 aa 55 b1 70 b0 42 93 19 d4 56 0d d8 70 e9 ed 69 18 aa 81 e8 a9 79 82 f1 53 8d de 7b c5 8a ea cb a5 e1 5b 76 68 70 dc 58 b5 da 0d d7 a6 55 fb ef 8a c6 84 cd 81 69 3a 2f f0 b0 Data Ascii: 000000010000000100000001N00000001120ffb[K8$HiFFr$/5iTl(c:C3HIntynO[%W.Vke~)Ji;y1=*aci$8xtUpBVpiyS{[vhpXUi:/
2024-11-21 02:42:14 UTC	1408	IN	Data Raw: 04 89 05 bd fa 7e 45 d6 58 30 49 17 46 fe 98 32 c3 3d 36 e3 8c db 56 51 39 e9 c4 ee 80 7f 38 12 cd e7 67 f6 c8 30 1f c6 06 3b 57 38 a6 8c 54 17 04 47 76 b7 32 9c 9d d2 16 27 38 b5 e1 c9 93 fb 0f 36 ec 3b 16 df 45 d8 a4 45 bb 8f 64 2b b2 73 5b ec 05 47 e5 f8 28 c7 b5 19 55 dc bd 7d fb 76 56 29 35 bc c1 f1 1e f8 d9 6d f9 2f 84 cd e2 54 03 7b ba 21 8e 2c 39 2b d3 dc 39 27 15 62 16 88 4c a8 94 59 50 f2 88 6a cb d3 26 b8 9a 90 01 f2 62 2a 36 b7 79 95 eb 2b 13 de d1 a6 cc ab da 6c f5 d0 af 88 4a e6 45 a1 2f 0a 79 01 2f 24 0f 32 50 74 a1 e5 4a 76 4f 1f 21 ac 55 e3 79 90 e3 1c ff 1d 7a ac 4e 12 32 a5 59 08 e8 42 9e 3e 4d c7 03 40 02 e4 81 aa 2b b9 30 8b a6 aa e3 0a 48 df d0 3b 04 7a 81 7b e4 89 6d 58 af 29 e4 10 8e 62 61 b6 33 d9 80 59 64 9c 1e b2 cd 4f 01 76 a2 Data Ascii: ~EX0IF2=6VQ98g0;W8TGv2'86;EEd+s[G(U}vV)5m/T{!,9+9'bLYPj&b*6y+lJE/y/$2PtJvO!UyzN2YB>M@+0H;z{mX)ba3YdOv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49766	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:14 UTC	554	OUT	GET /gui/87347.c002f57d03220f54c084.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:14 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 766fd8dce7e3e9112866de71d40d44c9 Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 21:42:52 GMT Expires: Wed, 19 Nov 2025 21:42:52 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 104362 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:14 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 31 0d 0a bd 0d 0a 30 66 66 34 0d 0a eb 7a db 46 b2 b0 7b 2b 34 97 e3 87 34 41 8a d4 c9 32 25 88 cb b1 93 b1 93 38 c9 c4 ce c1 a3 68 34 14 05 49 b0 29 40 01 41 4b 8a ac ef f7 f7 7b df cb be 81 7d 29 fb 4a f6 5b d5 07 34 24 ca 51 b2 66 d6 5e df 3c c9 8c 45 1c ba 1b d5 d5 d5 55 d5 55 d5 d5 cd f9 2c 69 cc ca 22 9d 94 cd Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000010ff4zF{+44A2%8h4I)@AK{})J[4$Qf^<EUU,i"
2024-11-21 02:42:14 UTC	1408	IN	Data Raw: c0 50 7b d2 cb c6 27 70 ad e6 cb f1 a9 56 f8 f0 a1 f9 2a 31 75 47 a6 07 87 45 7e c2 87 86 cd 27 8e b9 db 82 4b 7f 6f 8d 86 df a7 1f 5e b4 b3 92 ab 8d 0f 83 f5 0f 2b cb 6d 2e 9f 4e c7 27 a7 c9 41 db b4 70 7f a9 57 26 b3 b2 95 b4 47 a6 37 43 23 12 ae ae 68 16 b4 64 00 f9 e0 41 33 9b 9f ec 27 45 80 02 cb a5 da 97 f4 a2 55 c6 49 5b b1 50 c4 fd 28 ad f0 d8 be bc b2 3c e9 72 36 4c a3 ac 62 38 9e 14 0a a4 99 6d 6b 74 79 90 67 c9 f0 5e ff 6a 68 af 06 d1 fb f1 74 9e 0c e1 64 9d ce ee d5 55 94 54 2d 30 36 e5 71 91 9f 35 ca ab e8 70 98 5e 5d 99 bb 2c 39 6b bc 66 98 3e 2b 8a bc 68 35 5f 64 b4 80 88 1b 97 65 72 72 5a 36 ca bc 61 e8 21 69 64 79 d6 d5 eb fd 69 d2 48 91 3e e3 6c 92 f4 7e ce 5e 64 8d bc 38 48 0a 29 bb cf 1b 21 27 8a 44 5a 61 2c 74 d3 c8 75 0c 67 8d 93 39 Data Ascii: P{'pV*1uGE~'Ko^+m.N'ApW&G7C#hdA3'EUI[P(<r6Lb8mktyg^jhtdUT-06q5p^],9kf>+h5_derrZ6a!idyiH>l~^d8H)!'DZa,tug9
2024-11-21 02:42:14 UTC	1408	IN	Data Raw: 7f ba cf fe 74 9f 05 ee 33 43 23 ff 22 7d c5 cd bf c6 7d e2 1b 9c 48 d7 a5 95 f7 c5 65 37 74 15 a2 5d a4 88 73 cf 21 ee fb 9b 05 2e 3a 1c ae ed 64 a7 d8 ad 2a 70 e3 db 49 f1 f3 e6 71 b2 49 50 8f 5d 68 6e a6 54 50 ad 43 d6 bf cf 5a f9 4e ba 5b 29 1e b7 b9 bd 0c 94 99 77 7c 95 3d 91 21 b0 d8 6a ad fa 31 c7 15 be 5f df e9 b7 01 a7 2c d5 df fa 26 1e 44 2f e2 e5 e8 f3 78 25 7a 1e af 46 df c4 83 a4 bb 5e 85 16 7c 55 d5 68 96 c5 38 9b 4d c7 68 11 cd 4e d9 69 46 fd 76 b3 6a fa db 85 05 fb 91 16 0d 0b fe 5a 15 24 94 69 bb 23 51 46 55 33 bf 18 c6 68 75 a2 2c 7e 39 2e 8f 7b 27 e3 73 95 6a fb e3 ec e0 2c 3d 28 8f 5b ed ee f2 c3 ac bd b4 8c a8 2b 72 02 1e 5a b2 be b7 a5 cd 83 0c 19 91 68 f3 49 bb 13 08 8b 9f 7c 5c cb 3d 55 d7 f6 f6 c6 e7 e9 ac 02 e0 87 50 18 60 a2 28 Data Ascii: t3C#"}}He7t]s!.:d*pIqIP]hnTPCZN[)w\|=!j1_,&D/x%zF^\|Uh8MhNiFvjZ$i#QFU3hu,~9.{'sj,=([+rZhI\|\=UP`(
2024-11-21 02:42:14 UTC	373	IN	Data Raw: ee 59 d1 19 b4 51 6a 8a 64 fc ce 77 98 b9 7a cf 84 e6 ea 26 90 4b 01 72 98 d9 40 d4 04 13 6b 79 f5 45 ef b4 c8 cb 5c b0 16 7f 19 5c 87 a6 c4 e1 17 51 1e c4 bb aa 9d c8 da 64 c5 f3 a6 fc 92 25 14 de bc 34 42 fe 32 6e 48 f7 f4 04 55 6d 76 3a 45 7d 5b fa fb 87 9f 67 9d a5 36 0b 84 d3 80 d5 82 7b 23 53 9b 4d 08 a4 ec a1 91 27 e7 18 7d 9a 04 99 8a 39 39 d9 8e fb ba 5c 70 5d 4c e8 62 0d 0b 78 0d 23 4c 48 f7 0a 31 9b 7d 73 96 59 5b 33 21 97 0b 08 84 6d 33 59 7e 96 d5 08 44 f7 ba 5c 2a c9 d0 2b c5 0e 96 67 5a 9d 13 98 c3 ea a1 5a 11 12 6d 7d 63 5b c3 d6 72 5b 7d b7 c2 13 ef c5 08 fe a6 23 a1 2a a4 3b 5b 40 a9 19 96 6f e2 78 25 b0 7a 9f 1d 3d 42 ad 98 00 85 dc 20 ab f9 d6 78 53 28 8b 1d 1f 65 9c ef cc a1 2d 81 af 9d 6a 8c 69 d9 92 5f 96 53 02 2c ba f2 a6 c4 69 36 Data Ascii: YQjdwz&Kr@kyE\\Qd%4B2nHUmv:E}[g6{#SM'}99\p]Lbx#LH1}sY[3!m3Y~D\+gZZm}c[r[}#;[@ox%z=B xS(e-ji_S,i6
2024-11-21 02:42:14 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 52 0d 0a 30 30 66 66 66 0d 0a 90 60 2f 57 06 27 81 b5 da 61 98 4e db 19 12 dc b7 0b be 6d 8c 9a 7e ad 46 20 56 a4 6b be 5a 4f 85 3f d0 57 bb e6 fd 2f 00 25 08 09 20 62 9e 8a 95 a3 70 80 61 ec 80 d6 52 22 97 d3 eb 80 25 58 2c d4 8e 99 95 f1 97 15 53 c7 b6 4b 08 bc 23 f0 06 ab a4 4a 17 71 7a 47 12 6c c3 f1 ca 91 62 e5 97 79 52 5c bc d2 85 23 18 13 bb bd 6f 49 d6 77 d6 f6 0e af f6 8f f3 45 1f 48 ef f6 01 59 7d d6 be 31 0f 1b 73 9f f0 9f b5 9b dd 34 e2 db 2c c3 05 e6 c8 53 1b 1a bc d7 a8 5c 84 06 db 8f b2 50 0f 62 2a 2a 33 0b 3a 26 cc d9 f5 ac 71 f3 a3 8a 17 96 f2 93 63 71 8d 85 18 99 2e ac 88 94 74 e6 16 18 69 55 4d 3e 3b 29 ad 2e e9 99 39 4a 76 76 50 8d 1e bb 22 7c 75 fd f0 61 5a cc ca cf a6 89 6c a2 7b ca 4e b4 03 95 e9 87 8b Data Ascii: 00000001R00fff`/W'aNm~F VkZO?W/% bpaR"%X,SK#JqzGlbyR\#oIwEHY}1s4,S\Pb**3:&qcq.tiUM>;).9JvvP"\|uaZl{N
2024-11-21 02:42:14 UTC	1408	IN	Data Raw: 89 52 31 a3 74 5a 10 43 93 cf 67 b7 b6 12 6a a1 76 bc af 7d 47 8d 52 aa ee 06 5f c8 c4 87 be 80 5a 6d ff a5 89 9a cc 11 5f 82 3c f4 2a 19 f6 a1 4d a7 41 61 0d 38 c7 63 20 11 36 46 12 59 13 58 ad b4 16 22 c2 66 82 33 a5 4c 6c 09 80 20 30 a7 f6 08 51 89 ea 12 72 ec e4 16 58 ed e7 15 ae 1a b0 37 1a fc 88 46 54 68 e3 a6 db aa 34 da 5e 31 b5 54 7b 1a 25 d9 30 cb 24 9c b8 a2 47 a2 34 3c ee 84 06 aa 37 73 79 23 8d a1 32 d6 87 61 13 04 11 af a5 32 56 07 e3 fa 98 8f af 55 9d 4c f1 dc 4b 34 44 eb 1e 0e 1a 6b f8 af 62 24 1c f2 33 50 5a a7 01 6b c8 ab 48 af 16 ef 3b bd fd 33 fd 7f e2 67 26 b7 8c 59 40 5f 7b 7b 79 26 1e a9 90 7d 5b a7 20 cc 9b d4 16 8e 79 93 b0 02 bb 57 d1 c6 15 0f cb 45 ad 15 d7 cd 83 07 89 fe a2 b1 9b 07 92 a6 44 a8 53 1f c8 c5 28 db c1 18 8f 48 33 Data Ascii: R1tZCgjv}GR_Zm_<*MAa8c 6FYX"f3Ll 0QrX7FTh4^1T{%0$G4<7sy#2a2VULK4Dkb$3PZkH;3g&Y@_{{y&}[ yWEDS(H3
2024-11-21 02:42:14 UTC	1301	IN	Data Raw: 96 bd 9d e2 62 28 d0 1a 0d e7 91 3d 00 b8 e6 e5 81 b1 10 98 e0 3f bb 71 9b 78 38 93 98 4a 6b a5 68 fd 61 2d 2d 24 16 f2 dc 07 c3 0f 93 96 e4 fc 23 7e 7e 54 d8 1d 0e a9 df 0c 22 b1 c1 ba 99 22 e8 5d 65 4c 53 47 48 e2 b6 a5 b0 86 76 d7 6c 4b 29 9d 41 60 cf ca 21 b1 de ba eb 14 85 d5 52 76 15 1d 45 f4 9f d9 cf 84 62 46 16 14 32 90 04 e4 9a ca 5c ea 6f 4e b7 64 b6 4c fd ca 46 82 30 92 9d e9 2e 11 18 85 fc 1c 13 e0 60 1b 3e 85 e2 a7 21 c5 b3 6f e2 82 26 2e b6 24 48 82 fd bf 93 78 b6 73 41 8a d7 43 fe 0a 86 4f f9 8d 27 86 ea f9 90 04 9b 4e db da 86 7c e1 9a 1c 1b df 22 b7 19 9c 0a 55 9e 4e 85 08 ae 22 dd 60 13 be 75 92 d7 da 02 1c 76 32 b1 4d 4a 68 a6 e9 09 70 48 c0 ae ef b3 ae 15 25 b3 75 ee 97 74 94 9f c3 3a f2 dd cd 6e 97 bc 8e fd cd b6 44 85 72 2f fd 9a 3f Data Ascii: b(=?qx8Jkha--$#~~T""]eLSGHvlK)A`!RvEbF2\oNdLF0.`>!o&.$HxsACO'N\|"UN"`uv2MJhpH%ut:nDr/?
2024-11-21 02:42:14 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a eb 0d 0a 30 30 30 30 30 30 30 31 0d 0a 61 0d 0a 30 30 30 30 30 30 30 31 0d 0a 89 0d 0a 30 30 30 30 30 30 30 31 0d 0a 18 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8e 0d 0a 30 30 30 30 31 0d 0a 6f 0d 0a 30 66 66 61 0d 0a 37 2a e3 ed 35 6a f6 0e c2 d1 58 98 91 56 9c 91 70 96 c5 97 93 f1 a9 a4 6f e4 7c 87 e8 94 c4 6a e9 7b 2e 07 41 4c df 9e 82 26 1e 85 44 1c 2a cf 4c 9c 13 eb 6e 89 e1 c9 4f 5f 9c 9c 24 07 29 be 65 89 c9 19 1f 49 c2 09 d4 cc ca fc bd 4f 75 25 34 fc 6b 4c 53 bb 3d 2f 34 69 8b 27 50 c1 31 f9 db c2 dd 8b e7 5a d9 29 6a 26 c9 a5 f5 ee 60 b8 f1 cd 55 8b 1c 4e 20 e0 bc 27 93 21 45 dc 96 8e 25 06 09 a0 5f 8a 3d 5e 77 88 3c c9 e2 de a3 e8 55 16 0f 96 9e 64 d1 eb 2c 6e fe fc f3 ec 61 6b a7 d3 dd 1d fd fc f3 41 a7 2d b7 cd e8 5d Data Ascii: 0000000100000001a00000001000000010000000100001o0ffa75jXVpo\|j{.AL&DLnO_$)eIOu%4kLS=/4i'P1Z)j&`UN '!E%_=^w<Ud,nakA-]
2024-11-21 02:42:14 UTC	1408	IN	Data Raw: 00 45 98 e7 15 a3 58 85 36 57 20 4e f3 dc 30 0b 43 d3 fd d5 47 83 47 7c 37 3d c8 2a c2 02 01 4c 2d 1e 66 a5 c4 fc 9d 80 92 c1 f2 60 63 8d 06 08 2c ba 28 72 78 8f 10 7c 7f 59 aa e6 93 c9 78 86 e7 c5 3c 59 7e 1c 65 e3 f7 e3 b7 b9 9b c7 4c c5 75 e8 96 87 10 0d 42 88 f9 8c d8 93 06 60 c5 6b 6b f2 40 54 48 99 93 2b 50 bd de 1d 70 52 d7 f0 51 7f 95 f3 3a 1f 63 b0 77 2c 19 d6 c6 84 37 f7 0a 3e 3c e1 f1 0a 82 d4 e1 76 75 85 99 cc d0 9f 92 ab c6 53 3a 53 6f 7d ed d1 80 f1 d5 c7 ca f2 61 b2 cb 4c 27 f3 a8 c2 d3 60 00 4b 65 2c b4 64 80 a6 d5 95 0d 58 cd 0a 8f 4f c7 17 63 7a 76 aa bd 5d e9 3f 7a 14 9d ca 9a f5 74 7e 78 28 8f e4 7f 14 4b 8a b9 f0 8b f5 0d d8 7e e4 e6 c6 fa a0 0f 0d 9d 4e 59 a7 22 a3 97 57 d7 57 a8 9c 9f c1 1c 1c dd 22 23 98 89 96 24 84 ca 1e 31 93 61 Data Ascii: EX6W N0CGG\|7=*L-f`c,(rx\|Yx<Y~eLuB`kk@TH+PpRQ:cw,7><vuS:So}aL'`Ke,dXOczv]?zt~x(K~NY"WW"#$1a
2024-11-21 02:42:14 UTC	1357	IN	Data Raw: a3 55 6e ad f7 47 59 07 9c 65 ed 87 e5 92 7c 65 6b b0 d1 1f 11 bc bf 85 ec f4 af 5a dc 74 cb b6 14 c0 f1 e2 39 74 66 1b 95 ec 31 c6 fe 4a 64 df c3 52 5c 10 0f 4b 3b 36 ad d6 a0 bb f2 90 2e 3c cc bb f3 f6 43 3e b6 da 5d 7f 98 73 cf 5d d2 69 0d b8 32 6f f5 49 d1 99 3f 64 64 d7 af 30 09 bf cc a2 6f 38 dd 5b 93 f1 fa a9 d6 b0 06 5e b1 42 13 80 26 94 a8 ac 2b 30 0e 2b db 53 d7 b2 b8 06 a6 68 ef 84 ec 2f d4 ac 6a ef 71 65 26 e7 c3 cf 33 31 65 9c a8 be 55 bb d9 f0 ae 80 85 4d f9 4a 1b 12 de 60 ef 66 81 67 d4 f1 8a 86 4c 51 98 ad d7 eb 66 d3 aa c6 77 47 fb c3 e7 70 70 cb 37 b8 26 69 1d a8 f8 25 8b 7e cd 22 2c dd e0 e4 12 73 0c 6b 6d f6 c8 54 48 31 69 7f 84 db be ca 0c f7 63 95 d1 7a 45 4b 95 a4 53 06 cf e8 28 ba 8e dc c5 be bb 70 4c 40 fc 6a c5 bb 5b 5a 7f 12 b4 Data Ascii: UnGYe\|ekZt9tf1JdR\K;6.<C>]s]i2oI?dd0o8[^B&+0+Sh/jqe&31eUMJ`fgLQfwGpp7&i%~",skmTH1iczEKS(pL@j[Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49767	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:14 UTC	554	OUT	GET /gui/49272.372a1ed11135b11cd4f7.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:14 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 6c2da26489bb74f029760901c49b05f1 Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 17:49:34 GMT Expires: Wed, 19 Nov 2025 17:49:34 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 118360 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:14 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a cc 0d 0a 30 30 30 30 30 31 0d 0a 5d 0d 0a 30 66 66 34 0d 0a 6d 73 db 46 92 fe 7e bf 82 e6 5d a9 88 32 17 11 25 f9 25 64 60 af d7 56 bc da 8d e5 54 24 27 77 e7 f3 a1 40 12 92 10 51 80 0a 00 e5 a8 24 fe f7 ed c1 bc f5 74 cf 40 4c ce c9 25 1f 62 61 fa e9 ee 67 66 7a 30 33 0d 70 30 5c 37 f9 a0 69 eb 62 d1 0e 67 a3 26 5f 9d c5 9f f3 f9 75 b6 b8 7c Data Ascii: 0000000100000001000000010000000100000001000000010000000100000001000000010000000100000001000001]0ff4msF~]2%%d`VT$'w@Q$t@L%bagfz03p0\7ibg&_u\|
2024-11-21 02:42:14 UTC	1408	IN	Data Raw: c0 ea 1a a9 5b 56 d7 75 d5 56 f3 f5 d9 f7 70 ab ce ce f3 44 8e ee 59 77 db 19 34 49 39 6a 47 7b 4f f6 9f ef 46 11 44 a7 b8 fa 7a 7f ff 29 5c 75 c3 b9 1e af 66 ba c9 07 4b d1 e8 cd e7 a2 5d 5c 88 bf 16 19 cc 08 bb 53 f1 cf f0 c7 c3 1f de 1c bd 3e 4d 3f 1c ff f3 f8 fd 4f c7 c3 a9 ea 9b 3a 26 92 59 a7 75 e0 6a fd ed f0 f8 e8 ad 4f 49 0a a4 ce 73 57 e7 c3 f1 9b c3 d3 c3 d7 a7 87 6f bc ce b4 50 ea 4e f6 5c e5 93 0f 27 df 1f bd 3e 7a ff e1 c4 a3 6c 85 4a f9 a9 ab fc ee d5 77 41 5d 23 9b e9 10 34 0d f1 e1 f8 87 c3 d7 ef df 1e 1f fd f7 e1 1b 34 9e 16 9e 46 65 ad a6 9a 93 35 b3 24 68 e1 b2 bd 28 5a 35 2f 05 db 16 a4 0a 56 32 a4 4a b6 71 a8 92 95 30 25 d3 2a 54 c7 08 86 a4 bd 86 3a 90 50 4b 89 69 8e 86 9f ad ba 52 50 1e 06 bb 94 b8 d3 34 83 03 2a b6 55 d6 16 9e 53 Data Ascii: [VuVpDYw4I9jG{OFDz)\ufK]\S>M?O:&YujOIsWoPN\'>zlJwA]#44Fe5$h(Z5/V2Jq0%T:PKiRP4US
2024-11-21 02:42:14 UTC	1408	IN	Data Raw: 44 d5 72 09 ab 7e 0d 7d a0 55 29 2e 1a 0f e1 f1 10 cc 13 be c5 15 32 b2 b7 0b 46 f4 fc e7 05 9b 56 f1 2d c7 1c 4b b6 a5 7d 50 af 9d 6e f9 86 8d 88 35 80 e7 fe de e1 bc 16 f0 5a 0f 1b da 73 a2 dc 34 0f 86 63 7b ee 7a cb 59 1f 62 ab f0 f4 08 d1 eb 51 c2 b6 7b 57 96 d8 ba 3b 7b f7 aa 61 fb e1 55 a9 63 dc e9 9e b0 8e b1 ec 8b 69 b3 9c c5 96 d1 6c df ab 63 2c e3 f0 30 eb 60 6c 31 30 cb 1b ac b1 b4 d5 c2 19 5b 46 53 fc 56 ba 90 75 d8 8c 97 b9 5c 5d 8b 87 b0 72 21 09 cf 28 cd e3 32 78 fe 6a d7 cd 3f e4 19 3c 36 83 07 30 e2 19 1c 2d 86 05 e5 4c ac cf 53 f5 04 02 16 72 d9 cb 56 2c d1 a7 6d 7c 5d 35 8f 33 b5 07 cf 13 f5 c8 26 6b 1a d8 3c 8c ee 36 e3 73 f9 30 29 77 17 be c9 c7 4f e3 1c 2d 45 e1 7a d6 99 fa 26 75 16 bd 6a b1 1b cd f4 b3 8b 17 2f 5e ec ab e7 17 93 29 Data Ascii: Dr~}U).2FV-K}Pn5Zs4c{zYbQ{W;{aUcilc,0`l10[FSVu\]r!(2xj?<60-LSrV,m\|]53&k<6s0)wO-Ez&uj/^)
2024-11-21 02:42:14 UTC	372	IN	Data Raw: db 38 32 91 ed c6 ef 2e 8a 4e 31 af 6c 83 21 7b 41 ac 58 01 49 98 43 a0 c1 62 58 25 2c a1 85 d0 35 d8 43 57 4e ab e0 f0 94 39 48 a9 6a 06 70 f7 c0 b6 d3 77 8a 82 46 70 b2 48 27 13 89 49 0e 91 04 8d 03 0e 08 ba 63 89 b6 ae 4f 71 ad 18 82 38 63 f2 a0 2f 4c 0b d6 9a f2 29 31 f3 e7 45 11 9f 5e 4c d0 2f 4d 61 31 97 14 40 bc 51 71 d0 11 cb 37 31 4f 0c 41 5c 31 79 d0 17 4b 0f 31 5f 0c 41 7c 31 79 8f 2f 9e c1 f1 b8 e3 20 e6 91 43 82 4e 79 ca 85 b9 e4 10 e2 90 03 82 ee 54 2e 85 f9 d0 39 16 77 08 eb 84 0c be 41 ca 5b 84 cd bb 98 7b 88 2e 92 e4 50 1a 85 92 f1 27 51 8c 1d 9e e7 d0 f7 25 26 f1 58 b6 29 0a 5d 47 70 67 0b 0d 39 5b e4 31 a2 b6 88 fa 77 17 c8 12 91 18 73 a4 dc b1 89 d6 17 c0 c5 dd d3 43 ad c3 62 b0 1e 16 86 5c 98 db 63 9f 23 2f c8 75 e7 85 3c e8 54 b5 43 Data Ascii: 82.N1l!{AXICbX%,5CWN9HjpwFpH'IcOq8c/L)1E^L/Ma1@Qq71OA\1yK1_A\|1y/ CNyT.9wA[{.P'Q%&X)]Gpg9[1wsCb\c#/u<TC
2024-11-21 02:42:14 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a ea 0d 0a 30 30 30 30 30 30 30 31 0d 0a 34 0d 0a 30 30 30 30 30 30 30 31 0d 0a bc 0d 0a 30 30 30 30 30 30 30 31 0d 0a 01 0d 0a 30 30 30 30 30 30 30 31 0d 0a d2 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1e 0d 0a 30 30 30 30 30 30 30 31 0d 0a c3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a e9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 77 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7c 0d 0a 30 30 30 30 30 30 30 31 0d 0a f9 0d 0a 30 30 30 30 30 30 30 31 0d 0a c6 0d 0a 30 30 30 30 30 30 30 31 0d 0a 15 0d 0a 31 0d 0a da 0d 0a 37 64 31 0d 0a 40 b9 b7 14 d3 ad 06 01 be 7a 2d 38 be 70 04 9a 7d 8b ae 8f b1 6d 24 aa d9 d8 86 c5 b1 b9 d5 ea bf f3 b1 15 Data Ascii: 000000010000000140000000100000001000000010000000100000001000000010000000100000001.00000001,00000001w00000001\|00000001000000010000000117d1@z-8p}m$
2024-11-21 02:42:14 UTC	814	IN	Data Raw: ae 95 c1 13 b5 98 b0 16 35 c0 9a 14 27 9c f6 99 14 1b 0b fd c5 10 38 f4 b9 fb 64 88 30 ff 1a 95 ab 2f 89 58 37 3e 25 eb f2 00 0e 69 eb 73 89 43 48 d5 e4 d4 de a1 ad 17 8c b3 d6 9f 40 bf 31 eb 2d da 0c c0 c7 95 e4 06 28 fd 3f 1d 12 a6 3f 53 22 3e 92 f4 32 ed 0e 09 4b bb 43 c2 5a b5 bf 2a f9 81 27 87 ea 76 d9 01 bf c9 d1 11 60 a9 0e bb c0 11 60 70 32 ad 1c 3c 49 aa a3 d2 3d 66 67 5a 7a 82 2d b9 1c a5 2a 16 dd d3 bc f6 01 ae 82 0f be ed 82 62 4f 1d a5 96 8e 2d 21 c7 cf 01 28 ea 20 92 9a 26 c8 1e 52 7d 02 aa be c0 00 33 be 60 7a c8 dc 53 30 87 23 40 b2 c1 81 d2 63 41 9f 60 03 8d e9 3d c1 a6 f4 9d 60 d3 7a 3b 94 cf 36 aa a7 d0 24 a3 4a e0 2c 39 dd 8b e6 77 75 aa 20 82 13 e6 b4 cc cd c5 f2 5b 08 32 cc 85 e2 bc 3a 76 6f b5 33 18 97 09 cf bc d4 4d 4b 03 33 79 9f Data Ascii: 5'8d0/X7>%isCH@1-(??S">2KCZ'v``p2<I=fgZz-bO-!( &R}3`zS0#@cA`=`z;6$J,9wu [2:vo3MK3y
2024-11-21 02:42:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49768	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:14 UTC	554	OUT	GET /gui/56053.034ac17cffd09668a5bf.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:15 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 6db6c1dd58a780d463a291820ae64e9d Content-Encoding: gzip Server: Google Frontend Date: Wed, 20 Nov 2024 22:03:59 GMT Expires: Thu, 20 Nov 2025 22:03:59 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 16695 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:15 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 31 0d 0a 00 0d 0a 61 33 66 0d 0a 00 02 ff ec 58 6b 73 db 36 16 fd de 5f 41 73 bd 1e 22 a2 28 52 b2 65 87 34 a4 a4 4e b3 93 9d 74 93 69 d2 49 77 15 b5 a1 49 c8 62 43 01 5a 10 4c a2 4a fc ef 7b 00 90 b2 6c 77 3a 3b b3 3b 9d d9 87 3f 58 24 88 c7 c5 c5 b9 f7 9c 0b b7 ae 98 53 29 59 64 ca 4d bc 8a 95 8b e0 33 bb 5e a7 d9 c7 ab 65 cd 3f 7e 52 3f d5 c5 4f ab b4 e0 f4 37 be ed 76 b3 39 09 d6 75 b5 f4 66 b3 b3 71 78 36 f2 87 fa 67 ee 6f c7 67 17 e3 b3 d8 53 3e f3 39 a1 93 2d 0f 72 8f f9 db d7 1f 63 0f af cb 86 24 99 e0 95 72 24 Data Ascii: 000000010000000100000001000000010000000100000001001a3fXks6_As"(Re4NtiIwIbCZLJ{lw:;;?X$S)YdM3^e?~R?O7v9ufqx6gogS>9-rc$r$
2024-11-21 02:42:15 UTC	1408	IN	Data Raw: 1e 39 4f b4 b1 bc 62 fa f9 4a ac 37 b2 b8 59 2a 67 18 46 e7 ce 9f 84 b8 29 99 f3 f2 e5 95 fe f8 e6 f5 b3 1f fa 2f 6d e7 fe 8b 9c 71 55 2c 0a 26 63 e7 eb 37 cf fa a3 fe 55 99 82 86 d0 11 a1 4a 76 bb 5b 3b 74 a6 d3 3b e2 94 d7 65 49 a9 9a ea df d8 ad 11 89 8b 82 b3 dc 3d a2 6a b3 66 62 e1 bc d9 ac ae 05 ce 54 cd ec 53 50 28 26 53 25 e4 7c b7 53 33 f7 c9 93 ee dd 9d 6b 70 e9 79 8e 28 32 8d 71 98 2f fc c2 2f 11 ed c8 05 29 3d 0a fd 8a 1e 45 89 92 1b ed 87 82 7a 58 3f c8 d2 12 ee 42 5a e3 ec 8b d2 60 a2 30 0e 9f 5f 5d ff cc 32 1d e3 47 14 f3 59 1f 25 98 24 6a 58 09 6e 35 a9 f3 c8 4b 29 f2 70 61 27 e1 98 24 17 5c 47 86 57 db 14 20 03 10 49 cd 88 5f b7 c8 c5 64 48 6f da 16 92 34 59 aa b2 a5 3e 15 98 15 e2 4c 55 83 cd c3 9c cd b6 35 f1 28 3d 39 69 77 84 2c ac 93 Data Ascii: 9ObJ7Y*gF)/mqU,&c7UJv[;t;eI=jfbTSP(&S%\|S3kpy(2q//)=EzX?BZ`0_]2GY%$jXn5K)pa'$\GW I_dHo4Y>LU5(=9iw,
2024-11-21 02:42:15 UTC	249	IN	Data Raw: f4 ae 0d a3 ae d6 c4 fb be ea 3c ac 2f d3 36 59 14 0d fe ac c2 06 8c 4d 8d ad 4b e4 2c a8 60 c9 91 57 d3 2c e0 b8 f0 30 96 ec 2f bc 14 ad 6d 81 9c b4 8b 41 dd 6b 9c 68 d1 b9 80 d5 88 17 ad f3 81 f7 7b 11 2c 60 cb 0a 77 4f af a5 40 ed a0 36 e8 13 0b 0c 36 f7 09 d0 85 fb ca 3a 0b f4 f8 bd c1 59 b0 d0 35 93 36 cc 5c 4f 9b 24 b4 57 e5 0c d7 a8 ea e0 1a 01 e5 45 67 4a 9a e3 16 a7 bb 6d e3 f4 41 89 0c fc b3 40 57 38 ef 0a b5 44 d1 9d dc b3 18 ee 9b 0a ad de 6f 2d f6 f9 14 77 51 e6 5e 28 44 c1 1c 91 18 39 6d 9a c6 48 27 76 2f 6c 5f b2 cb 20 43 81 8a 7d e1 72 f6 ab c1 e0 0f 4e 25 6a 99 31 e4 e3 35 0a f5 ef bf 7b 49 cd ed 7c 10 8e 4e d3 2c 3a cf 16 8b 3c 7c 0c 61 9c 9e 5d 2f 82 9f ab 60 95 ae ff 01 00 00 ff ff 03 00 7b 23 b7 c2 11 18 00 00 0d 0a Data Ascii: </6YMK,`W,0/mAkh{,`wO@66:Y56\O$WEgJmA@W8Do-wQ^(D9mH'v/l_ C}rN%j15{I\|N,:<\|a]/`{#
2024-11-21 02:42:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49770	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:14 UTC	554	OUT	GET /gui/22232.15ef530edb01268cfe7b.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:15 UTC	320	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 271699e03c78db943a01ebc316d99a1a Server: Google Frontend Date: Wed, 20 Nov 2024 21:45:33 GMT Expires: Thu, 20 Nov 2025 21:45:33 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Content-Length: 22489 Age: 17801 Connection: close
2024-11-21 02:42:15 UTC	1088	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 32 32 33 32 5d 2c 7b 32 37 32 37 30 3a 28 65 2c 72 2c 74 29 3d 3e 7b 74 2e 64 28 72 2c 7b 76 3a 28 29 3d 3e 75 7d 29 3b 76 61 72 20 73 3d 74 28 34 39 32 37 32 29 2c 6f 3d 74 28 34 38 37 30 34 29 2c 61 3d 74 28 31 36 36 34 35 29 2c 62 3d 74 28 36 32 38 33 32 29 2c 69 3d 74 28 36 36 38 31 33 29 2c 6e 3d 74 28 31 35 33 32 33 29 2c 64 3d 74 28 38 33 31 37 30 29 3b 6c 65 74 20 63 2c 6c 2c 67 2c 70 2c 6d 2c 79 3d 65 3d 3e 65 3b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 2c 73 29 7b 76 61 72 20 6f 2c Data Ascii: "use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[22232],{27270:(e,r,t)=>{t.d(r,{v:()=>u});var s=t(49272),o=t(48704),a=t(16645),b=t(62832),i=t(66813),n=t(15323),d=t(83170);let c,l,g,p,m,y=e=>e;var f=function(e,r,t,s){var o,
2024-11-21 02:42:15 UTC	1408	IN	Data Raw: 75 65 3b 72 65 74 75 72 6e 20 72 3d 3d 3d 73 2e 56 65 72 64 69 63 74 2e 56 45 52 44 49 43 54 5f 55 4e 4b 4e 4f 57 4e 3f 22 55 6e 6b 6e 6f 77 6e 22 3a 72 3d 3d 3d 73 2e 56 65 72 64 69 63 74 2e 56 45 52 44 49 43 54 5f 42 45 4e 49 47 4e 3f 22 42 65 6e 69 67 6e 22 3a 72 3d 3d 3d 73 2e 56 65 72 64 69 63 74 2e 56 45 52 44 49 43 54 5f 55 4e 44 45 54 45 43 54 45 44 3f 22 55 6e 64 65 74 65 63 74 65 64 22 3a 72 3d 3d 3d 73 2e 56 65 72 64 69 63 74 2e 56 45 52 44 49 43 54 5f 53 55 53 50 49 43 49 4f 55 53 3f 22 53 75 73 70 69 63 69 6f 75 73 22 3a 72 3d 3d 3d 73 2e 56 65 72 64 69 63 74 2e 56 45 52 44 49 43 54 5f 4d 41 4c 49 43 49 4f 55 53 3f 22 4d 61 6c 69 63 69 6f 75 73 22 3a 72 3d 3d 3d 73 2e 56 65 72 64 69 63 74 2e 55 4e 52 45 43 4f 47 4e 49 5a 45 44 3f 22 55 6e 72 Data Ascii: ue;return r===s.Verdict.VERDICT_UNKNOWN?"Unknown":r===s.Verdict.VERDICT_BENIGN?"Benign":r===s.Verdict.VERDICT_UNDETECTED?"Undetected":r===s.Verdict.VERDICT_SUSPICIOUS?"Suspicious":r===s.Verdict.VERDICT_MALICIOUS?"Malicious":r===s.Verdict.UNRECOGNIZED?"Unr
2024-11-21 02:42:15 UTC	1408	IN	Data Raw: 72 3d 3d 3d 73 2e 56 65 72 64 69 63 74 2e 56 45 52 44 49 43 54 5f 42 45 4e 49 47 4e 26 26 28 74 5b 22 62 67 2d 73 75 63 63 65 73 73 22 5d 3d 21 30 2c 74 5b 22 62 67 2d 62 6f 64 79 2d 74 65 72 74 69 61 72 79 22 5d 3d 21 31 2c 74 5b 22 74 65 78 74 2d 62 6f 64 79 2d 74 65 72 74 69 61 72 79 22 5d 3d 21 31 29 2c 74 7d 67 65 74 20 73 63 6f 72 65 42 61 72 43 69 72 63 6c 65 43 6f 6c 6f 72 28 29 7b 76 61 72 20 65 3b 6c 65 74 20 72 3b 73 77 69 74 63 68 28 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 67 74 69 41 73 73 65 73 73 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 65 3d 65 2e 76 65 72 64 69 63 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 76 61 6c 75 65 29 7b 63 61 73 65 20 73 2e 56 65 72 64 69 63 Data Ascii: r===s.Verdict.VERDICT_BENIGN&&(t["bg-success"]=!0,t["bg-body-tertiary"]=!1,t["text-body-tertiary"]=!1),t}get scoreBarCircleColor(){var e;let r;switch(null===(e=this.gtiAssessment)\|\|void 0===e\|\|null===(e=e.verdict)\|\|void 0===e?void 0:e.value){case s.Verdic
2024-11-21 02:42:15 UTC	192	IN	Data Raw: 70 61 6e 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 66 77 2d 62 6f 6c 64 20 24 7b 30 7d 22 3e 24 7b 30 7d 3c 2f 73 70 61 6e 3e 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 60 29 2c 74 68 69 73 2e 6c 6f 61 64 69 6e 67 3f 28 30 2c 6f 2e 68 74 6d 6c 29 28 67 7c 7c 28 67 3d 79 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 70 69 6e 6e 65 72 2d 62 6f 72 64 65 72 20 66 73 2d 36 20 6d 79 2d 32 20 74 65 78 74 2d 62 6f 64 79 2d 74 65 72 74 69 61 72 79 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 34 2e 35 72 65 6d 3b 20 68 65 69 67 68 74 3a 20 Data Ascii: pan> <span class="fw-bold ${0}">${0}</span>${0} </div> </div> </div> `),this.loading?(0,o.html)(g\|\|(g=y` <div class="spinner-border fs-6 my-2 text-body-tertiary" style="width: 4.5rem; height:
2024-11-21 02:42:15 UTC	1408	IN	Data Raw: 34 2e 35 72 65 6d 3b 22 20 72 6f 6c 65 3d 22 73 74 61 74 75 73 22 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 76 69 73 75 61 6c 6c 79 2d 68 69 64 64 65 6e 22 3e 4c 6f 61 64 69 6e 67 2e 2e 2e 3c 2f 73 70 61 6e 3e 20 3c 2f 64 69 76 3e 20 60 29 29 3a 28 30 2c 6f 2e 68 74 6d 6c 29 28 70 7c 7c 28 70 3d 79 60 3c 69 20 63 6c 61 73 73 3d 22 68 73 74 61 63 6b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 63 65 6e 74 65 72 20 24 7b 30 7d 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 2e 37 35 72 65 6d 3b 22 3e 24 7b 30 7d 3c 2f 69 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 6d 61 6c 6c 20 74 65 78 74 2d 62 6f 64 79 2d 74 65 72 74 69 61 72 79 22 3e 47 6f 6f 67 6c 65 20 54 49 20 56 65 72 64 69 63 74 3c 2f 73 70 61 6e 3e 20 3c 64 69 76 20 63 Data Ascii: 4.5rem;" role="status"> <span class="visually-hidden">Loading...</span> </div> `)):(0,o.html)(p\|\|(p=y`<i class="hstack justify-content-center ${0}" style="font-size: 3.75rem;">${0}</i> <span class="small text-body-tertiary">Google TI Verdict</span> <div c
2024-11-21 02:42:15 UTC	1408	IN	Data Raw: 38 33 32 29 2c 69 3d 74 28 38 35 32 30 30 29 2c 6e 3d 74 28 39 35 36 38 38 29 2c 64 3d 74 28 32 37 32 37 30 29 2c 63 3d 74 28 38 32 30 37 39 29 3b 6c 65 74 20 6c 2c 67 2c 70 3d 65 3d 3e 65 3b 76 61 72 20 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 2c 73 29 7b 76 61 72 20 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 62 3d 61 3c 33 3f 72 3a 6e 75 6c 6c 3d 3d 3d 73 3f 73 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 72 2c 74 29 3a 73 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 29 62 3d 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 28 Data Ascii: 832),i=t(85200),n=t(95688),d=t(27270),c=t(82079);let l,g,p=e=>e;var m=function(e,r,t,s){var o,a=arguments.length,b=a<3?r:null===s?s=Object.getOwnPropertyDescriptor(r,t):s;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)b=Reflect.decorate(
2024-11-21 02:42:15 UTC	1280	IN	Data Raw: 74 2e 74 68 72 65 61 74 5f 73 63 6f 72 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 76 61 6c 75 65 29 7d 7d 2c 6c 2e 73 74 79 6c 65 73 3d 28 30 2c 6f 2e 75 6e 73 61 66 65 43 53 53 29 28 63 2e 41 29 2c 6c 29 3b 6d 28 5b 28 30 2c 61 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 4f 62 6a 65 63 74 7d 29 5d 2c 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 61 73 73 65 73 73 6d 65 6e 74 22 2c 76 6f 69 64 20 30 29 2c 79 3d 6d 28 5b 28 30 2c 61 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 29 28 22 67 74 69 2d 73 63 6f 72 65 22 29 5d 2c 79 29 7d 2c 38 33 31 37 30 3a 28 65 2c 72 2c 74 29 3d 3e 7b 76 61 72 20 73 3d 74 28 38 39 35 34 37 29 2c 6f 3d 74 2e 6e 28 73 29 2c 61 3d 74 28 33 38 35 33 32 29 2c 62 3d 74 2e 6e 28 61 29 28 29 28 6f 28 29 29 Data Ascii: t.threat_score)\|\|void 0===t?void 0:t.value)}},l.styles=(0,o.unsafeCSS)(c.A),l);m([(0,a.property)({type:Object})],y.prototype,"assessment",void 0),y=m([(0,a.customElement)("gti-score")],y)},83170:(e,r,t)=>{var s=t(89547),o=t.n(s),a=t(38532),b=t.n(a)()(o())
2024-11-21 02:42:15 UTC	1408	IN	Data Raw: 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 32 30 36 30 32 61 3b 2d 2d 62 73 2d 69 6e 66 6f 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 30 30 34 34 38 30 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 38 30 34 30 30 30 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 36 64 31 34 31 32 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 34 64 34 64 34 64 3b 2d 2d 62 73 2d 64 61 72 6b 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 34 64 34 64 34 64 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 63 66 64 64 66 63 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 65 30 65 30 Data Ascii: xt-emphasis: #20602a;--bs-info-text-emphasis: #004480;--bs-warning-text-emphasis: #804000;--bs-danger-text-emphasis: #6d1412;--bs-light-text-emphasis: #4d4d4d;--bs-dark-text-emphasis: #4d4d4d;--bs-primary-bg-subtle: #cfddfc;--bs-secondary-bg-subtle: #e0e0
2024-11-21 02:42:15 UTC	1408	IN	Data Raw: 72 79 2d 62 67 2d 72 67 62 3a 20 32 34 39 2c 20 32 35 30 2c 20 32 35 31 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 63 6f 6c 6f 72 3a 20 23 36 32 36 63 38 34 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 63 6f 6c 6f 72 2d 72 67 62 3a 20 39 38 2c 20 31 30 38 2c 20 31 33 32 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 62 67 3a 20 23 65 63 65 65 66 34 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 62 67 2d 72 67 62 3a 20 32 33 36 2c 20 32 33 38 2c 20 32 34 34 3b 2d 2d 62 73 2d 68 65 61 64 69 6e 67 2d 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 3a 20 23 32 30 32 34 32 63 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 2d 72 67 62 3a 20 33 32 2c 20 33 36 2c 20 34 34 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 64 65 63 6f 72 61 Data Ascii: ry-bg-rgb: 249, 250, 251;--bs-tertiary-color: #626c84;--bs-tertiary-color-rgb: 98, 108, 132;--bs-tertiary-bg: #eceef4;--bs-tertiary-bg-rgb: 236, 238, 244;--bs-heading-color: inherit;--bs-link-color: #20242c;--bs-link-color-rgb: 32, 36, 44;--bs-link-decora
2024-11-21 02:42:15 UTC	1280	IN	Data Raw: 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 3a 3a 2d 77 65 62 6b 69 74 2d 64 61 74 65 74 69 6d 65 2d 65 64 69 74 2d 66 69 65 6c 64 73 2d 77 72 61 70 70 65 72 2c 3a 3a 2d 77 65 62 6b 69 74 2d 64 61 74 65 74 69 6d 65 2d 65 64 69 74 2d 74 65 78 74 2c 3a 3a 2d 77 65 62 6b 69 74 2d 64 61 74 65 74 69 6d 65 2d 65 64 69 74 2d 6d 69 6e 75 74 65 2c 3a 3a 2d 77 65 62 6b 69 74 2d 64 61 74 65 74 69 6d 65 2d 65 64 69 74 2d 68 6f 75 72 2d 66 69 65 6c 64 2c 3a 3a 2d 77 65 62 6b 69 74 2d 64 61 74 65 74 69 6d 65 2d 65 64 69 74 2d 64 61 79 2d 66 69 65 6c 64 2c 3a 3a 2d 77 65 62 6b 69 74 2d 64 61 74 65 74 69 6d 65 2d 65 64 69 74 2d Data Ascii: al-align:middle}::-moz-focus-inner{padding:0;border-style:none}::-webkit-datetime-edit-fields-wrapper,::-webkit-datetime-edit-text,::-webkit-datetime-edit-minute,::-webkit-datetime-edit-hour-field,::-webkit-datetime-edit-day-field,::-webkit-datetime-edit-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49769	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:14 UTC	554	OUT	GET /gui/34894.ada184a092746870eefc.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:15 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 9546b4f4add8040a25dbdb1569d8f39e Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 21:26:39 GMT Expires: Wed, 19 Nov 2025 21:26:39 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 105335 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:15 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 31 0d 0a 00 0d 0a 30 66 66 39 0d 0a 00 02 ff dc 5b 5b 77 db 48 72 7e cf af 80 11 1f 2d b0 03 40 a4 2e b6 04 19 d2 78 64 4d 56 bb f6 c8 c7 92 f7 6c 22 2b 34 48 34 49 58 20 c0 05 9a ba 84 e2 7f cf 57 d5 dd 00 48 4a 96 77 33 c9 43 ce 9c b1 c1 46 77 a1 aa ba ee 55 b6 67 95 b0 2a 59 a6 03 69 1f 38 95 c8 86 c1 ad e8 4f e3 c1 f5 f1 78 96 5f df c8 de 2c ed 4d e2 34 8f be f3 ee e1 e1 f2 ca 0d a6 b3 6a ec 5c 5e 6e ef ec ed ef 78 af f6 b7 f7 5f 7b 5b bb 3b 5b db de 5e 77 67 cb db db dd ef 5c 79 f3 9d d7 dd fd d7 a1 23 3d e1 e5 6e Data Ascii: 0000000100000001000000010000000100000001000000010010ff9[[wHr~-@.xdMVl"+4H4IX WHJw3CFwUg*Yi8Ox_,M4j\^nx_{[;[^wg\y#=n
2024-11-21 02:42:15 UTC	1408	IN	Data Raw: 99 88 92 f6 f7 f1 86 a4 18 5b 3c 3e 10 93 e2 58 05 4b 5c 65 4d 60 84 ad 71 7c 23 ac d8 5a 93 7a c7 b5 26 42 8e 8b 24 b0 dd 85 e3 2e 8c 52 59 8a 9a 39 6b 00 84 ec e1 41 1c 4a 2d 74 24 90 02 9c 56 22 e8 1e 90 ec 2a f5 eb 78 65 a4 b4 15 52 99 bf 11 07 f9 4f 3f b9 e5 65 7e 15 49 fc a1 af d0 2a 17 b4 fb 2c 32 df 52 0e c5 2b 95 96 41 c7 a2 d8 dc 86 fe 06 6c 5a fa 66 fb 48 84 4a bf a3 f2 a8 8c 94 20 04 23 21 cf 6e f3 8f 25 1c 49 29 ef df 89 6a 50 a6 53 f2 31 e4 a3 c2 92 94 d8 56 9c c0 cd 6a 01 fc 24 86 e4 10 36 36 6c 83 c2 da bb 20 11 83 02 86 41 b8 71 a4 b7 d7 4b 35 be 07 b5 ea 12 41 55 cd 12 bf 7b 50 1d 46 9d 83 ca f7 5d 07 7a 78 59 5d 11 cf e2 c8 21 2a 0a 27 76 c3 f4 90 1e 80 a3 87 1f fc e0 42 83 62 23 e6 16 de 6f 6c c4 1b 1b 9a 4a 65 c7 0c 95 fa 9c 17 2f 0e Data Ascii: [<>XK\eM`q\|#Zz&B$.RY9kAJ-t$V"xeRO?e~I,2R+AlZfHJ #!n%I)jPS1Vj$66l AqK5AU{PF]zxY]!*'vBb#olJe/
2024-11-21 02:42:15 UTC	1408	IN	Data Raw: b1 ad d4 c9 41 fb 86 ef 40 ec dd 2a b1 d3 7b bf 63 4d ef fc 5d 6b 42 7f b4 30 b4 8a 1b 51 0e b3 e2 d6 1f a7 49 22 f2 e6 fe f5 77 7d fa ae b1 a1 93 ca 8f 67 b2 80 15 55 fe ba 16 0a 59 c8 38 fb a4 30 fd 15 07 ea 17 1a 0a ad bd 4f 2b c4 8f c4 64 bb 16 98 f6 47 8c d0 80 89 54 34 60 49 e6 e8 d0 33 66 ad 78 9c 77 2d 1b 57 18 1b 57 40 7b 10 af d6 47 e3 67 8f c6 e6 68 bc cc 72 32 ea 4a ab 44 3e 43 c2 4d 21 10 f2 e4 99 e6 fd 61 a7 cd fd 5b 70 ff 76 95 fb 14 e2 0b 3f 29 64 e5 d3 41 cd e2 95 55 8b 81 2e f1 67 65 87 e1 0f 29 55 8d 85 1b b6 c2 af 97 f8 fa 4b 7c fd 2b 82 39 a0 bd 60 16 40 c0 2f 54 64 43 41 a7 2e 59 e8 a4 0a ba 54 a6 88 b2 df ba d0 c8 a9 03 ab 73 38 a7 e2 55 1e 9d 23 c3 42 7d 0b e5 c0 cb 8e 49 5b bf be 9c e7 97 dd ab 45 88 58 46 5e 96 57 8b af 88 1a 83 Data Ascii: A@*{cM]kB0QI"w}gUY80O+dGT4`I3fxw-WW@{Gghr2JD>CM!a[pv?)dAU.ge)UK\|+9`@/TdCA.YTs8U#B}I[EXF^W
2024-11-21 02:42:15 UTC	309	IN	Data Raw: 98 d4 1d a2 cb ad ab a3 f6 8f f0 58 f3 d0 a9 57 cd f9 ee a3 e7 bb ed f3 dd ab f0 d2 26 72 6d cf 06 51 f8 93 70 b7 31 5d c3 e9 65 1e 1d 3a 73 f8 4c 2a ed 87 d2 2b d8 83 86 b9 97 c5 7d 0c 7b 08 24 74 10 7d 4e b3 6a 82 2e 88 20 c5 49 4e 65 a8 ec 8f 1b 47 52 a3 72 5a 4a 80 a0 c4 28 69 62 13 14 19 56 10 33 29 08 2e 21 8e dc 09 27 ef fc 6f 65 31 9b 56 de 04 2b e8 99 50 44 9f 78 c3 28 53 48 d1 38 46 fd a4 79 27 03 8d 25 7f 4a e1 49 e3 04 28 8c 02 53 fe 9e 01 64 d8 85 c6 6f a0 9a 20 03 78 ae 41 74 57 37 41 30 a7 e3 a3 87 cd d9 c4 72 5f c3 42 55 35 f6 15 f8 3a eb 30 80 cd 82 ee a2 a8 5d 48 6c 38 75 6e ca e6 42 65 5f e9 10 7d 2d 1a f4 70 d1 88 f7 5e bc 88 bd 82 1c 28 0f 83 b4 62 7e 59 7c 9e a2 4d 7c 8c d6 9b 43 1d 1f fc ef 7a a3 e8 6b 5f e6 fe cb f9 07 c4 2c 41 19 Data Ascii: XW&rmQp1]e:sL*+}{$t}Nj. INeGRrZJ(ibV3).!'oe1V+PDx(SH8Fy'%JI(Sdo xAtW7A0r_BU5:0]Hl8unBe_}-p^(b~Y\|M\|Czk_,A
2024-11-21 02:42:15 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 6b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 10 0d 0a 30 30 30 30 30 30 30 31 0d 0a fe 0d 0a 30 30 30 30 30 30 30 31 0d 0a 53 0d 0a 30 30 30 30 30 30 30 31 0d 0a ba 0d 0a 30 30 30 30 30 30 30 31 0d 0a c0 0d 0a 30 30 30 30 30 30 30 31 0d 0a c5 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0a 0d 0a 30 30 30 30 30 30 30 31 0d 0a ad 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a b3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 52 0d 0a 30 30 30 30 30 30 30 31 0d 0a 57 0d 0a 36 62 61 0d 0a f4 89 13 94 e9 51 0e 58 65 05 8a 4b c0 71 34 12 ad 22 26 aa a6 b2 50 30 78 b7 49 5b 12 24 23 3e 8a 9e f7 b6 6a 34 e2 28 25 32 Data Ascii: 00000001k0000000100000001O000000010000000100000001S00000001000000010000000100000001\|000000010000000100000001}0000000100000001R00000001W6baQXeKq4"&P0xI[$#>j4(%2
2024-11-21 02:42:15 UTC	529	IN	Data Raw: 15 31 4a 03 b5 2e f9 5b 4a 31 bf 0f 76 4e d2 aa cf 2d 2b 9b 65 ad 31 bf be df 36 4c 6e 02 e9 c1 bb a7 ae 71 55 7a 20 a7 b3 89 ba be 96 b0 91 a7 70 48 0a 2d df a2 eb c4 5f 64 4b 8c 3d d2 72 1c 2c 7d 10 8d 4a 9a f8 53 1f be 1d 43 10 7d 16 91 10 4d bc db 32 9e b2 88 b0 ce 98 b9 86 d0 12 59 86 1e 60 5a f1 bb 66 59 cd 3b f0 22 6b a5 1a f3 c1 d5 06 db 68 58 61 fd 49 aa 03 1a 86 5a a1 dd e8 b4 85 0c 2c 97 da 02 70 bf 71 4d 1b 96 09 62 58 3c 4e c7 60 2b 4b 8e 15 e8 76 42 8a 06 82 46 c8 34 53 e7 4b ce a1 56 ef a7 ef 10 88 ad e8 74 eb 56 6a d1 ec f0 15 30 53 78 3b 5c cb 2d 58 c2 0b 18 be 59 d1 71 88 52 9a 1b db d1 b8 00 cc 5d 20 2b 50 54 68 59 53 33 93 c6 79 10 67 4d 63 93 54 3c 5f b7 d5 f1 10 30 14 08 ed 42 42 eb 0f 0f 7f 60 44 96 9d 88 f1 47 66 55 8b 75 a3 0d ad Data Ascii: 1J.[J1vN-+e16LnqUz pH-_dK=r,}JSC}M2Y`ZfY;"khXaIZ,pqMbX<N`+KvBF4SKVtVj0Sx;\-XYqR] +PThYS3ygMcT<_0BB`DGfUu
2024-11-21 02:42:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49771	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:14 UTC	457	OUT	GET /ui/user_notifications HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.260360209.1732156933; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0
2024-11-21 02:42:15 UTC	225	IN	HTTP/1.1 429 Too Many Requests Content-Type: application/json X-Cloud-Trace-Context: 961cf427904acfde86f4dc322adf81e9 Date: Thu, 21 Nov 2024 02:42:15 GMT Server: Google Frontend Content-Length: 153 Connection: close
2024-11-21 02:42:15 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49775	142.250.185.131	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:15 UTC	855	OUT	GET /recaptcha/api2/anchor?ar=1&k=6Ldjgd0kAAAAAITm7ipWF7o7kPL_81SaSfdINiOc&co=aHR0cHM6Ly93d3cudmlydXN0b3RhbC5jb206NDQz&hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=j3rr2j2nks8n HTTP/1.1 Host: recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:15 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 21 Nov 2024 02:42:15 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-dWscXsGSz5zNi7jOMPrCPw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:15 UTC	229	IN	Data Raw: 35 37 37 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 Data Ascii: 577b<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cy
2024-11-21 02:42:15 UTC	1390	IN	Data Raw: 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 41 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 Data Ascii: rillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A64
2024-11-21 02:42:15 UTC	1390	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 42 41 2c 20 55 2b 30 32 42 44 2d 30 32 43 35 2c 20 55 2b 30 32 43 37 2d 30 32 43 43 2c 20 55 2b 30 32 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02
2024-11-21 02:42:15 UTC	1390	IN	Data Raw: 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 Data Ascii: font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-11-21 02:42:15 UTC	1390	IN	Data Raw: 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 Data Ascii: ormat('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}/* cyrillic-ext */@font-face { font-family: '
2024-11-21 02:42:15 UTC	1390	IN	Data Raw: 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 33 30 39 2c 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a Data Ascii: /s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */
2024-11-21 02:42:15 UTC	1390	IN	Data Raw: 78 43 56 45 62 7a 49 4f 32 6d 34 32 39 75 73 62 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 64 57 73 63 58 73 47 53 7a 35 7a 4e 69 37 6a 4f 4d 50 72 43 50 77 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 20 63 6c 61 73 73 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 3e 3c 2f 64 69 76 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 2d 74 6f 6b 65 6e 22 20 76 61 6c 75 65 3d 22 30 33 41 46 63 57 65 41 35 66 42 41 34 6b 55 63 34 77 42 45 4f 4d 4d 74 58 6d 74 6c 68 6a 62 67 4a 4d 6f 41 2d 77 39 43 59 4e 30 63 42 65 35 70 Data Ascii: xCVEbzIO2m429usb/recaptcha__en.js" nonce="dWscXsGSz5zNi7jOMPrCPw"> </script></head><body><div id="rc-anchor-alert" class="rc-anchor-alert"></div><input type="hidden" id="recaptcha-token" value="03AFcWeA5fBA4kUc4wBEOMMtXmtlhjbgJMoA-w9CYN0cBe5p
2024-11-21 02:42:15 UTC	1390	IN	Data Raw: 4c 62 4b 6e 41 58 4e 34 30 68 4c 53 70 72 35 46 41 4e 56 6f 33 4f 63 41 39 51 6b 6b 4a 5f 48 47 62 39 50 74 6a 52 6c 52 79 57 36 47 4c 50 58 47 49 73 7a 65 55 79 76 48 72 58 69 67 35 44 30 63 64 56 46 42 57 41 59 42 6c 4c 35 73 41 5f 42 57 70 49 34 30 45 79 42 4f 64 72 5f 5f 70 64 41 4c 53 35 6e 75 6a 55 68 69 47 5f 62 39 48 31 47 76 57 62 7a 49 53 49 32 72 4e 78 53 6c 37 35 63 64 35 4a 5f 42 6e 4c 30 49 69 57 6a 70 30 6a 51 4c 31 32 51 67 53 57 36 7a 67 77 5a 54 45 41 49 4b 58 52 63 53 49 6e 70 79 75 6b 73 53 62 63 66 35 4e 64 35 6d 6a 76 64 4c 56 50 46 51 5f 53 4f 68 51 32 39 36 2d 70 4f 6a 6f 55 6f 31 39 66 78 77 36 62 50 32 31 67 54 4e 4f 50 35 45 42 70 50 63 42 57 74 57 58 5f 4d 63 39 50 66 33 65 36 66 44 69 78 4b 58 31 44 74 48 36 41 42 42 4d 69 62 Data Ascii: LbKnAXN40hLSpr5FANVo3OcA9QkkJ_HGb9PtjRlRyW6GLPXGIszeUyvHrXig5D0cdVFBWAYBlL5sA_BWpI40EyBOdr__pdALS5nujUhiG_b9H1GvWbzISI2rNxSl75cd5J_BnL0IiWjp0jQL12QgSW6zgwZTEAIKXRcSInpyuksSbcf5Nd5mjvdLVPFQ_SOhQ296-pOjoUo19fxw6bP21gTNOP5EBpPcBWtWX_Mc9Pf3e6fDixKX1DtH6ABBMib
2024-11-21 02:42:15 UTC	1390	IN	Data Raw: 58 63 76 55 44 68 44 4d 6d 31 59 59 6d 6c 33 5a 69 39 74 51 54 5a 46 52 31 46 42 64 46 45 33 63 6a 64 50 54 31 49 72 59 56 46 32 4d 54 64 69 54 47 67 78 4d 32 4a 46 4d 58 64 50 4d 45 46 33 55 7a 51 79 56 48 68 4d 53 6e 41 30 61 58 56 6d 56 6d 56 32 64 31 64 4c 65 55 5a 68 61 55 5a 34 55 54 5a 77 4d 45 35 76 55 56 68 51 59 56 68 43 4d 6d 4e 4c 53 33 70 68 64 6d 52 6e 64 57 78 36 4b 30 67 77 4d 44 5a 6a 59 56 6c 59 54 6c 70 48 64 47 39 7a 65 46 6c 6b 4d 43 38 77 63 46 46 72 59 6b 35 46 4e 6b 68 75 63 6b 70 78 63 6d 5a 32 61 54 4e 4c 5a 55 39 69 4e 45 4a 51 53 6d 39 4a 56 56 46 6f 65 6b 5a 59 55 7a 56 61 57 6e 52 36 4e 6e 59 72 51 7a 52 34 51 7a 4e 6e 54 6b 56 5a 61 6a 64 33 4e 31 64 44 59 58 6f 34 55 45 52 7a 56 6d 46 4c 64 44 6b 76 56 6b 31 54 62 7a 55 79 Data Ascii: XcvUDhDMm1YYml3Zi9tQTZFR1FBdFE3cjdPT1IrYVF2MTdiTGgxM2JFMXdPMEF3UzQyVHhMSnA0aXVmVmV2d1dLeUZhaUZ4UTZwME5vUVhQYVhCMmNLS3phdmRndWx6K0gwMDZjYVlYTlpHdG9zeFlkMC8wcFFrYk5FNkhuckpxcmZ2aTNLZU9iNEJQSm9JVVFoekZYUzVaWnR6NnYrQzR4QzNnTkVZajd3N1dDYXo4UERzVmFLdDkvVk1TbzUy
2024-11-21 02:42:15 UTC	1390	IN	Data Raw: 45 65 58 6c 30 5a 44 68 56 63 33 68 4a 54 44 46 4a 64 56 70 30 61 46 52 7a 54 57 35 4b 52 32 56 44 62 48 64 58 4d 30 46 57 62 79 74 6e 56 56 5a 50 59 6c 56 55 64 56 6c 36 62 54 56 4e 61 54 6c 51 62 6a 42 71 59 6e 63 76 64 44 68 53 61 31 42 76 63 57 35 59 55 45 4e 42 4d 30 31 5a 4e 57 6c 72 57 6e 5a 6f 4d 32 30 79 55 7a 59 77 54 32 39 6d 4d 6c 56 44 55 47 5a 31 4f 57 4a 4f 54 47 45 7a 54 6c 52 76 61 58 68 51 53 56 4e 47 62 53 74 33 52 30 78 59 4f 44 46 54 5a 44 64 56 4d 7a 63 35 4f 46 52 61 61 57 31 77 57 6e 52 55 4f 55 70 48 62 47 64 34 54 55 55 78 55 6e 42 6e 4e 44 6c 49 56 46 52 79 4e 6c 46 56 55 56 55 32 64 7a 6b 76 54 48 64 73 62 47 6b 77 4d 6a 41 77 62 6d 5a 72 4f 54 46 61 4e 45 68 44 4e 32 4e 48 51 30 70 74 54 6e 5a 46 64 48 55 78 57 55 6c 57 65 45 Data Ascii: EeXl0ZDhVc3hJTDFJdVp0aFRzTW5KR2VDbHdXM0FWbytnVVZPYlVUdVl6bTVNaTlQbjBqYncvdDhSa1BvcW5YUENBM01ZNWlrWnZoM20yUzYwT29mMlVDUGZ1OWJOTGEzTlRvaXhQSVNGbSt3R0xYODFTZDdVMzc5OFRaaW1wWnRUOUpHbGd4TUUxUnBnNDlIVFRyNlFVUVU2dzkvTHdsbGkwMjAwbmZrOTFaNEhDN2NHQ0ptTnZFdHUxWUlWeE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49779	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:16 UTC	482	OUT	GET /gui/stackdriver-errors.3069a6025a2308368f46.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.260360209.1732156933; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0
2024-11-21 02:42:16 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 550dea006ff7fab1b2f381ef000514ec Content-Encoding: gzip Server: Google Frontend Date: Wed, 20 Nov 2024 09:38:16 GMT Expires: Thu, 20 Nov 2025 09:38:16 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 61440 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:16 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 31 0d 0a 00 0d 0a 30 66 66 61 0d 0a 00 00 02 ff d4 7d 6b 7b db c8 b1 e6 f7 fd 15 34 e3 d5 00 26 44 89 be 9b 14 cc 71 1c db f1 39 13 db c7 f2 e4 5c 28 59 0b 51 90 84 0c 05 30 00 68 8f 23 71 7f fb be 6f 55 77 a3 c1 8b ed 49 72 76 9f cd 93 b1 c0 46 a3 2f d5 75 af ea ee a0 4a 67 e7 fd cf e9 e9 3c 99 fe f2 fc 72 91 ff f2 a9 3e 59 64 27 57 49 96 c7 5f 79 77 73 33 39 0e fb f3 45 75 19 4c 26 f7 1f df df 7f 70 1c 5d df 7b b4 3f 78 34 3c 5f e4 d3 3a 2b f2 20 8d f2 a8 0e af 3f 25 65 a7 8c 8a 28 1b dd 72 af aa 28 09 af bb 8b 2a ed 54 75 99 4d eb ee a8 88 27 75 70 6f ff e1 Data Ascii: 0000000100000001000000010000000100000001010ffa}k{4&Dq9\(YQ0h#qoUwIrvF/uJg<r>Yd'WI_yws39EuL&p]{?x4<_:+ ?%e(r(*TuM'upo
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 9b d7 1d 2c 5a 96 77 28 d2 0e 7b e1 5e a6 ab 67 e6 e9 cd 05 0b 39 39 c6 ba dd 8d aa b8 ec eb c0 47 d9 41 35 ca 7a f1 5d 15 aa 09 b8 86 70 e8 72 92 1d 87 a3 64 67 a7 50 89 4f 31 42 62 b5 d4 99 70 35 bc f5 4a b8 5e 86 1c f9 ed 32 0c 97 86 1d 17 fe b4 06 fb 7f ef bc 28 46 3a af f3 8e e5 17 20 21 cc 96 62 5b 27 dc 08 65 7f 7d ec 9c f7 ff 81 39 1b e5 46 b8 52 e2 49 a2 06 7b ff 6e 68 0c 1a 68 40 6d 32 00 ab ff 4e f9 95 83 1d 38 61 b6 f7 51 a4 7e 67 5a a6 49 9d 9e 75 92 7a ef 2b ec 4b 70 4b f0 c6 e0 0b 78 0b 40 b7 91 c2 cb fe bc 98 07 e0 47 10 06 fd ea 32 3b af 83 f0 e6 a6 db 05 84 33 27 58 f6 1a 79 e0 56 2c 18 62 cd 3e 73 cd 9e 42 aa dd be eb cb ae a3 60 f2 11 22 f1 c8 08 43 2b 61 46 99 15 62 47 81 d6 08 51 05 f3 0c 6a bf b3 8f 10 a8 c7 3d af ca 6d 76 40 a6 29 Data Ascii: ,Zw({^g99GA5z]prdgPO1Bbp5J^2(F: !b['e}9FRI{nhh@m2N8aQ~gZIuz+KpKx@G2;3'XyV,b>sB`"C+aFbGQj=mv@)
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 7a 64 da 23 a3 e5 07 c5 a2 58 03 b9 b3 c9 3b f0 4c a9 75 1a a7 51 35 ae e0 f1 6c 54 4d 59 42 55 36 49 b5 ff f1 a7 9f fe d8 10 91 5d f0 ba 0f 57 2b e0 f0 ee ed e1 07 8c 0e 7c 05 2c 11 14 5b 1b 62 fb 63 9a 00 39 e1 f1 a4 ec ca eb dd 0f d0 5c b0 18 54 ac 33 25 aa bd bf 80 4b 8d 3a d3 4b ba 7a eb f8 e7 0f 2f 77 1f c3 e4 61 97 86 bd 78 c8 92 46 25 68 09 1c 1c cc ed ec 0b 80 57 a7 f8 30 bf 48 1b 86 25 dc ea 3e ed 07 72 c0 b3 2f 87 ac a4 fc 16 66 14 b5 a6 7a 01 43 fb 3c 28 9e c6 77 f7 f7 a1 cf 1e dc db df 0f 61 52 1b 50 0c a1 2d 2b 50 e0 a1 49 67 70 93 a3 f2 fd bb 4f d0 64 11 96 4d b5 ee 5f 17 45 9d 50 0b 2a d1 03 fc 46 57 d0 98 b0 a4 ca d4 8a 5c d7 f6 ac 84 7b 17 55 44 c0 62 81 e9 5b eb 12 90 68 f1 65 f2 4b 2a 18 d1 35 3d 5d 97 1e 83 0c 8a 71 d1 eb 76 48 e7 f8 Data Ascii: zd#X;LuQ5lTMYBU6I]W+\|,[bc9\T3%K:Kz/waxF%hW0H%>r/fzC<(waRP-+PIgpOdM_EPFW\{UDb[heK5=]qvH
2024-11-21 02:42:16 UTC	295	IN	Data Raw: 79 bc 81 a4 1e 0f 1e 3c 7e 08 47 4a 3f cd 99 9c b0 0e 62 88 30 c4 88 3c cf 72 43 fa e9 c1 fe 78 d0 0b 76 d3 83 83 41 38 dc ef 05 f2 00 2b 32 1c 9d 15 d7 79 7c 6f b0 53 44 b0 9c 9e 3e 8d 1f 84 4f 01 9e 20 bf 89 ef dd 85 54 ec 01 17 b4 43 32 89 cf 97 d0 15 50 6f df a7 97 bc 7f 96 ae 8c a8 49 52 32 8a 28 a4 16 c4 ab 44 7a a3 29 c8 91 82 04 3d 03 07 f2 a7 f1 c2 e3 a5 46 8d 83 7b 1f 6e 25 00 f6 aa 28 d3 ce 19 14 5c c4 92 b0 cc a7 50 e2 3b 0f ef 77 fe fc d3 bf 75 a0 36 2c 52 e3 87 96 20 3d 12 9b 4a 33 16 84 74 68 00 3c 07 a0 60 04 e4 a0 76 fc 6f 6d 21 5f e7 68 03 59 51 6c 15 8d 4a 37 30 d7 61 23 18 eb 21 df 1d c0 77 55 c0 65 19 dc bb bb 93 85 d1 b4 87 f4 a9 1d c0 2b 3c 38 98 45 b3 5e fc c0 c2 04 2a 66 5f 46 14 07 49 1c 54 f1 34 7c fa 74 10 0d 76 fe 77 35 4e 86 Data Ascii: y<~GJ?b0<rCxvA8+2y\|oSD>O TC2PoIR2(Dz)=F{n%(\P;wu6,R =J3th<`vom!_hYQlJ70a#!wUe+<8E^*f_FIT4\|tvw5N
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a f7 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6f 0d 0a 30 30 30 30 30 30 30 31 0d 0a ef 0d 0a 30 30 31 0d 0a 0f 0d 0a 30 66 66 62 0d 0a 3f fc fc e7 7f ff 8f ff fc af e4 74 7a 96 9e 5f 5c 66 7f f9 65 76 95 17 f3 bf 96 55 bd f8 f4 f9 d7 2f 7f db 1f dc bd 77 ff c1 c3 47 8f 9f f4 f6 ba 56 0b 81 c0 d9 88 24 00 f6 fe 41 8c 30 11 70 df ac 85 c3 f8 36 9e 37 02 ad fb 27 a3 4a c3 d3 f4 39 45 3e d3 3e 94 ea b3 ce c3 7b 02 26 41 da b5 c5 77 58 fe f0 81 e9 2e 7e b2 3f 4e 77 1f 3e 18 3e 79 64 4b 06 77 ef a2 e8 c9 a3 de dd 87 c3 fb 8f 6d e9 83 47 28 bc ff b8 f7 e0 ee f0 fe 3d 24 42 8d 1f e2 e1 91 3c dc 1b ee 0e 00 ba 87 8f 1e 3d 72 90 b3 42 ae 03 e3 8d f6 a8 31 7a 24 d8 b2 88 ff 94 d4 97 fd f3 59 81 c8 7e 50 Data Ascii: 00000001}0000000100000001o000000010010ffb?tz_\fevU/wGV$A0p67'J9E>>{&AwX.~?Nw>>ydKwmG(=$B<=rB1z$Y~P
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: f0 5a 8c ba eb 9f 76 09 88 da 77 78 1b 18 29 3a ad 7f 60 7d 27 22 98 ec 00 8c 32 84 f9 cb 78 94 a0 1b fe 62 59 d7 7a 6b 80 d5 ca e4 2c 1b b0 4d 7f ff dc 56 bf fc d6 d4 56 eb ff 43 33 5b 6d 6c 6d 62 b4 92 5f 57 66 56 87 29 c0 c7 64 0b 0f 2f e8 8d 23 49 49 fa 93 06 e4 9c ab ad 3b 92 6c 50 c4 0e 22 79 58 41 94 d6 5a ac 34 b9 26 d1 0e 17 a7 53 28 b6 55 6a a8 c6 51 75 e7 a4 d5 0e 77 e0 2c fa af 5e bc 79 f1 1e b6 d6 1f 4e de be ff c3 8b f7 54 bc fa 6f df bf 7e f5 fa cd b3 9f 4c d1 5d 56 db 6c 90 2d 36 1a 64 1e 4a f6 53 18 0f 06 28 ad 81 43 11 17 68 40 c5 64 36 0c d9 fe a8 fa 9c c9 96 a4 9b 9b b5 71 85 d7 53 7a 3b d6 ca 87 26 6d 78 1d f3 46 92 cc 38 32 9f b5 a7 e4 be 5a 5d 55 f3 11 48 2c 59 cc 6a a4 cd b7 7d 6d dd 9f f3 5f f2 e2 73 8e 98 13 d8 10 98 53 07 71 57 Data Ascii: Zvwx):`}'"2xbYzk,MVVC3[mlmb_WfV)d/#II;lP"yXAZ4&S(UjQuw,^yNTo~L]Vl-6dJS(Ch@d6qSz;&mxF82Z]UH,Yj}m_sSqW
2024-11-21 02:42:16 UTC	1343	IN	Data Raw: 1a e6 55 98 78 a0 38 fd 39 87 f6 9c a9 c1 c2 2d ab 7d 1c ce 13 ec 00 b2 0e 74 f8 39 2d 4f 4a c9 2c 4c 5e 84 e3 01 16 8c 96 70 7b 48 73 10 59 67 63 5d 6b 35 19 4b 06 07 48 7b 83 6f b4 a5 ed 98 a4 c2 75 31 3c 41 0b d2 d2 4a 08 0d c4 ea 91 18 d7 82 a7 47 6c d0 4b fd 6a 3a 75 04 72 a0 3b 21 9d 7b 91 2e 97 9b bf 19 ec 21 6e d8 e2 e7 16 a1 2c be be dc 68 7d ad b8 da 9c ca 0c 17 1a b9 05 ac 2d 07 28 1d 4b a3 55 a3 ca d4 70 23 e4 6b 6e b0 5d 10 c3 12 1b c2 b5 60 17 65 4d c9 6f 94 7e ed a4 65 be bc b2 7c dd ce a4 b2 94 07 ca 6a 3c 7e a7 59 02 a9 ba d9 ff 81 6c 08 2c 6d ed ac 9b ad ae 08 a0 3c 6b 16 2b c2 84 51 74 37 0b 5d 3a fa 87 98 b8 61 06 50 58 c9 6e 43 1a 2a 97 63 24 39 41 a8 28 1c ac 50 87 ab 20 b3 d1 a2 15 09 2d b5 b7 08 ef 0c 01 ba 11 bb f5 a2 37 e8 96 2c Data Ascii: Ux89-}t9-OJ,L^p{HsYgc]k5KH{ou1<AJGlKj:ur;!{.!n,h}-(KUp#kn]`eMo~e\|j<~Yl,m<k+Qt7]:aPXnC*c$9A(P -7,
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 07 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 32 0d 0a 30 30 30 30 30 30 30 31 0d 0a 19 0d 0a 30 30 30 30 30 30 30 31 0d 0a bb 0d 0a 30 30 30 30 30 30 30 31 0d 0a a0 0d 0a 30 30 30 30 30 30 30 31 0d 0a a2 0d 0a 30 30 30 30 30 30 30 31 0d 0a c0 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a c6 0d 0a 30 30 30 31 0d 0a 5b 0d 0a 30 66 66 33 0d 0a 4b ea 95 cc fc b0 ff ae c9 e4 e5 c9 b9 d7 38 ec 24 48 11 69 b0 46 b0 e4 46 72 bd 24 2f 16 bc 91 05 d6 a7 e1 a3 35 69 04 88 dc 54 6c 28 63 a5 3a 8e 43 f9 33 b7 de 48 1e 49 fb 93 d6 ab 6e 74 0b bc d1 ef 03 79 6e b2 a9 4f cb 04 fb 5b 25 57 2e 7f 0c d5 aa Data Ascii: 000000010000000100000001N00000001000000012000000010000000100000001000000010000000100000001000000010001[0ff3K8$HiFFr$/5iTl(c:C3HIntynO[%W.
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 88 d1 27 1a c9 0c 8f a9 77 28 4a eb 84 8f b6 a2 01 c5 40 4f ee b7 8e 18 ab 81 c0 1f 29 aa a1 65 b5 6d 88 d4 05 c9 b6 01 80 0a 3d d8 ab 76 2b a3 4e d7 fc 32 a6 58 d5 56 a1 9a 5c 50 a1 69 fb 56 17 ad 21 39 4b 85 f6 e3 55 32 87 9f d6 da 76 2a 88 b4 6b 2a 09 04 a5 26 a5 36 65 96 6f fb eb 61 34 4f 6b 04 89 05 bd fa 7e 45 d6 58 30 49 17 46 fe 98 32 c3 3d 36 e3 8c db 56 51 39 e9 c4 ee 80 7f 38 12 cd e7 67 f6 c8 30 1f c6 06 3b 57 38 a6 8c 54 17 04 47 76 b7 32 9c 9d d2 16 27 38 b5 e1 c9 93 fb 0f 36 ec 3b 16 df 45 d8 a4 45 bb 8f 64 2b b2 73 5b ec 05 47 e5 f8 28 c7 b5 19 55 dc bd 7d fb 76 56 29 35 bc c1 f1 1e f8 d9 6d f9 2f 84 cd e2 54 03 7b ba 21 8e 2c 39 2b d3 dc 39 27 15 62 16 88 4c a8 94 59 50 f2 88 6a cb d3 26 b8 9a 90 01 f2 62 2a 36 b7 79 95 eb 2b 13 de d1 a6 Data Ascii: 'w(J@O)em=v+N2XV\PiV!9KU2vk&6eoa4Ok~EX0IF2=6VQ98g0;W8TGv2'86;EEd+s[G(U}vV)5m/T{!,9+9'bLYPj&b*6y+
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: fc e4 ed 23 09 98 01 9c 9b e3 3f 13 eb fa c7 5e 2f d3 00 13 80 85 4f f1 be 5a dc 37 c5 cb a6 7a 47 bb 7d dc 37 35 0c c7 cc 9a 66 21 ca 86 bc 2b 8d 17 d5 a2 42 1f 37 34 f2 02 3c 7b a5 ea d1 e1 9d 10 77 9c f1 3e 5b 04 a9 93 21 ae f7 8c fa 3d dc 60 6b 3d 7b 9d 02 d4 2e 21 25 ea 49 f6 62 59 cb 80 f2 f1 b5 e6 61 0f e5 ae d5 64 51 5f e2 09 9b b6 2e 8b 0a 31 61 ee c1 e2 01 4c 78 c2 fe 2a e6 52 e3 e9 c1 f1 52 dd 1e ae 0b de 32 6b ba 68 78 1b f4 63 93 e1 8d 73 2d a9 5f cb 2f 1e 9a 0d 41 0d b7 db de 1e af 93 60 8f d4 ed 59 83 cf bd 2e 2f 9c 4b fb ec df 96 f3 99 65 1c 89 96 f1 fc 6d fd 2d e5 18 97 ad 2b f9 de 51 be 74 63 ab ec d8 78 cc 1d 02 1e f8 49 1b 4a 7d c5 b7 10 aa c1 c7 76 09 53 5e 8a 2a 25 62 8d 91 5b e3 0e 1e f8 d2 bc 13 a3 30 92 05 ed 3f b1 64 b1 46 bd 3d Data Ascii: #?^/OZ7zG}75f!+B74<{w>[!=`k={.!%IbYadQ_.1aLxRR2khxcs-_/A`Y./Kem-+QtcxIJ}vS^%b[0?dF=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49780	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:16 UTC	469	OUT	GET /gui/49272.372a1ed11135b11cd4f7.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.260360209.1732156933; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0
2024-11-21 02:42:16 UTC	321	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 04159e9255aa5d9c38153af253434ada Server: Google Frontend Date: Tue, 19 Nov 2024 21:27:28 GMT Expires: Wed, 19 Nov 2025 21:27:28 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Content-Length: 30282 Age: 105288 Connection: close
2024-11-21 02:42:16 UTC	1087	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 39 32 37 32 5d 2c 7b 34 39 32 37 32 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 61 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 28 69 2c 61 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 69 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 69 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 21 74 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 69 29 7c 7c 28 74 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 61 29 7b 69 66 28 69 29 7b 69 66 28 22 73 74 Data Ascii: "use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[49272],{49272:function(i,a,t){function _(i,a){var t="undefined"!=typeof Symbol&&i[Symbol.iterator]\|\|i["@@iterator"];if(!t){if(Array.isArray(i)\|\|(t=function(i,a){if(i){if("st
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 5f 3d 41 72 72 61 79 28 61 29 3b 74 3c 61 3b 74 2b 2b 29 5f 5b 74 5d 3d 69 5b 74 5d 3b 72 65 74 75 72 6e 20 5f 7d 76 61 72 20 6e 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 69 6d 70 6f 72 74 44 65 66 61 75 6c 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 69 26 26 69 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 69 3a 7b 64 65 66 61 75 6c 74 3a 69 7d 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 61 2e 47 74 69 53 63 6f 72 65 3d 61 2e 47 74 69 54 68 72 65 61 74 53 63 6f 72 65 3d 61 2e 47 74 69 53 65 76 65 72 69 74 79 3d 61 2e 47 74 69 56 65 72 64 69 63 74 3d 61 2e 43 6f 6e 74 72 69 62 75 74 69 6e 67 46 61 63 74 6f 72 73 3d 61 2e 73 65 76 65 72 Data Ascii: _=Array(a);t<a;t++)_[t]=i[t];return _}var n=this&&this.__importDefault\|\|function(i){return i&&i.__esModule?i:{default:i}};Object.defineProperty(a,"__esModule",{value:!0}),a.GtiScore=a.GtiThreatScore=a.GtiSeverity=a.GtiVerdict=a.ContributingFactors=a.sever
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 2e 53 45 56 45 52 49 54 59 5f 4e 4f 4e 45 3b 63 61 73 65 20 38 3a 63 61 73 65 22 53 45 56 45 52 49 54 59 5f 4c 4f 57 22 3a 72 65 74 75 72 6e 20 6c 2e 53 45 56 45 52 49 54 59 5f 4c 4f 57 3b 63 61 73 65 20 31 32 3a 63 61 73 65 22 53 45 56 45 52 49 54 59 5f 4d 45 44 49 55 4d 22 3a 72 65 74 75 72 6e 20 6c 2e 53 45 56 45 52 49 54 59 5f 4d 45 44 49 55 4d 3b 63 61 73 65 20 31 36 3a 63 61 73 65 22 53 45 56 45 52 49 54 59 5f 48 49 47 48 22 3a 72 65 74 75 72 6e 20 6c 2e 53 45 56 45 52 49 54 59 5f 48 49 47 48 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 6c 2e 55 4e 52 45 43 4f 47 4e 49 5a 45 44 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 69 29 7b 73 77 69 74 63 68 28 69 29 7b 63 61 73 65 20 6c 2e 53 45 56 45 52 49 54 59 5f 55 4e 4b 4e 4f 57 4e 3a 72 65 74 75 72 6e 22 Data Ascii: .SEVERITY_NONE;case 8:case"SEVERITY_LOW":return l.SEVERITY_LOW;case 12:case"SEVERITY_MEDIUM":return l.SEVERITY_MEDIUM;case 16:case"SEVERITY_HIGH":return l.SEVERITY_HIGH;default:return l.UNRECOGNIZED}}function v(i){switch(i){case l.SEVERITY_UNKNOWN:return"
2024-11-21 02:42:16 UTC	193	IN	Data Raw: 31 2c 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 6f 6d 69 74 3a 21 31 2c 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 62 61 63 6b 73 63 61 74 74 65 72 5f 66 61 6d 69 6c 79 3a 21 31 2c 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 61 6e 61 6c 79 73 74 5f 6d 61 6c 69 63 69 6f 75 73 3a 21 31 2c 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 62 61 63 6b 73 63 61 74 74 65 72 5f 6d 61 6c 69 63 69 6f 75 73 3a 21 31 2c 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 63 75 63 6b 6f 6f 5f 6d 61 6c 69 63 69 6f 75 73 3a 21 31 2c 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 62 6f 74 66 61 72 6d 5f 6d 61 6c 69 63 69 6f 75 73 3a 21 31 2c 69 73 Data Ascii: 1,is_mandiant_omit:!1,is_mandiant_backscatter_family:!1,is_mandiant_analyst_malicious:!1,is_mandiant_backscatter_malicious:!1,is_mandiant_cuckoo_malicious:!1,is_mandiant_botfarm_malicious:!1,is
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 5f 6d 61 6e 64 69 61 6e 74 5f 6d 6f 62 66 61 72 6d 5f 6d 61 6c 69 63 69 6f 75 73 3a 21 31 2c 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 6d 6f 72 70 68 6f 6c 6f 67 79 5f 6d 61 6c 69 63 69 6f 75 73 3a 21 31 2c 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 61 75 74 6f 70 61 74 74 5f 6d 61 6c 69 63 69 6f 75 73 3a 21 31 2c 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 72 65 70 6f 72 74 73 3a 21 31 2c 69 73 5f 76 74 5f 62 61 64 5f 79 61 72 61 3a 21 31 2c 69 73 5f 76 74 5f 73 61 6e 64 62 6f 78 5f 6d 61 6c 69 63 69 6f 75 73 3a 21 31 2c 69 73 5f 76 74 5f 72 65 66 65 72 65 6e 63 65 73 3a 21 31 2c 69 73 5f 76 74 5f 6d 61 6c 77 61 72 65 5f 63 6f 6e 66 69 67 73 3a 21 31 2c 62 65 6c 6f 6e 67 73 5f 74 6f 5f 76 74 5f 74 68 72 65 61 74 5f 61 63 74 6f 72 3a 21 31 2c 62 65 6c 6f 6e 67 73 5f 74 6f 5f Data Ascii: _mandiant_mobfarm_malicious:!1,is_mandiant_morphology_malicious:!1,is_mandiant_autopatt_malicious:!1,is_mandiant_reports:!1,is_vt_bad_yara:!1,is_vt_sandbox_malicious:!1,is_vt_references:!1,is_vt_malware_configs:!1,belongs_to_vt_threat_actor:!1,belongs_to_
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 74 33 32 28 36 34 29 2e 62 6f 6f 6c 28 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 61 6e 61 6c 79 73 74 5f 6d 61 6c 69 63 69 6f 75 73 29 2c 21 30 3d 3d 3d 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 62 61 63 6b 73 63 61 74 74 65 72 5f 6d 61 6c 69 63 69 6f 75 73 26 26 61 2e 75 69 6e 74 33 32 28 37 32 29 2e 62 6f 6f 6c 28 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 62 61 63 6b 73 63 61 74 74 65 72 5f 6d 61 6c 69 63 69 6f 75 73 29 2c 21 30 3d 3d 3d 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 63 75 63 6b 6f 6f 5f 6d 61 6c 69 63 69 6f 75 73 26 26 61 2e 75 69 6e 74 33 32 28 38 30 29 2e 62 6f 6f 6c 28 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 63 75 63 6b 6f 6f 5f 6d 61 6c 69 63 69 6f 75 73 29 2c 21 30 3d 3d 3d 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 62 6f 74 66 61 72 Data Ascii: t32(64).bool(i.is_mandiant_analyst_malicious),!0===i.is_mandiant_backscatter_malicious&&a.uint32(72).bool(i.is_mandiant_backscatter_malicious),!0===i.is_mandiant_cuckoo_malicious&&a.uint32(80).bool(i.is_mandiant_cuckoo_malicious),!0===i.is_mandiant_botfar
2024-11-21 02:42:16 UTC	1280	IN	Data Raw: 73 5f 6d 61 6e 64 69 61 6e 74 5f 68 69 6a 61 63 6b 65 64 26 26 61 2e 75 69 6e 74 33 32 28 32 30 38 29 2e 62 6f 6f 6c 28 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 68 69 6a 61 63 6b 65 64 29 2c 21 30 3d 3d 3d 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 6f 73 69 6e 74 26 26 61 2e 75 69 6e 74 33 32 28 32 31 36 29 2e 62 6f 6f 6c 28 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 6f 73 69 6e 74 29 2c 21 30 3d 3d 3d 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 62 61 6e 65 5f 61 6e 61 6c 79 73 74 26 26 61 2e 75 69 6e 74 33 32 28 32 32 34 29 2e 62 6f 6f 6c 28 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 62 61 6e 65 5f 61 6e 61 6c 79 73 74 29 2c 21 30 3d 3d 3d 69 2e 69 73 5f 68 69 67 68 5f 73 65 76 65 72 69 74 79 5f 72 65 6c 61 74 65 64 5f 66 69 6c 65 73 26 26 61 2e 75 69 6e 74 Data Ascii: s_mandiant_hijacked&&a.uint32(208).bool(i.is_mandiant_hijacked),!0===i.is_mandiant_osint&&a.uint32(216).bool(i.is_mandiant_osint),!0===i.is_mandiant_bane_analyst&&a.uint32(224).bool(i.is_mandiant_bane_analyst),!0===i.is_high_severity_related_files&&a.uint
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 3b 62 72 65 61 6b 3b 63 61 73 65 20 38 3a 65 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 61 6e 61 6c 79 73 74 5f 6d 61 6c 69 63 69 6f 75 73 3d 74 2e 62 6f 6f 6c 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 39 3a 65 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 62 61 63 6b 73 63 61 74 74 65 72 5f 6d 61 6c 69 63 69 6f 75 73 3d 74 2e 62 6f 6f 6c 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 30 3a 65 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 63 75 63 6b 6f 6f 5f 6d 61 6c 69 63 69 6f 75 73 3d 74 2e 62 6f 6f 6c 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 31 3a 65 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 62 6f 74 66 61 72 6d 5f 6d 61 6c 69 63 69 6f 75 73 3d 74 2e 62 6f 6f 6c 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 32 3a 65 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 6d 6f 62 66 61 Data Ascii: ;break;case 8:e.is_mandiant_analyst_malicious=t.bool();break;case 9:e.is_mandiant_backscatter_malicious=t.bool();break;case 10:e.is_mandiant_cuckoo_malicious=t.bool();break;case 11:e.is_mandiant_botfarm_malicious=t.bool();break;case 12:e.is_mandiant_mobfa
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 7d 7d 72 65 74 75 72 6e 20 65 7d 2c 66 72 6f 6d 4a 53 4f 4e 28 69 29 7b 63 6f 6e 73 74 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 67 29 3b 69 66 28 61 2e 67 61 76 73 5f 6b 65 79 77 6f 72 64 73 3d 5b 5d 2c 61 2e 63 61 74 65 67 6f 72 69 65 73 3d 5b 5d 2c 76 6f 69 64 20 30 21 3d 3d 69 2e 6e 75 6d 5f 61 76 5f 64 65 74 65 63 74 69 6f 6e 73 26 26 6e 75 6c 6c 21 3d 3d 69 2e 6e 75 6d 5f 61 76 5f 64 65 74 65 63 74 69 6f 6e 73 3f 61 2e 6e 75 6d 5f 61 76 5f 64 65 74 65 63 74 69 6f 6e 73 3d 4e 75 6d 62 65 72 28 69 2e 6e 75 6d 5f 61 76 5f 64 65 74 65 63 74 69 6f 6e 73 29 3a 61 2e 6e 75 6d 5f 61 76 5f 64 65 74 65 63 74 69 6f 6e 73 3d 30 2c 76 6f 69 64 20 30 21 3d 3d 69 2e 6e 75 6d 5f 67 61 76 73 5f 64 65 74 65 63 74 69 6f 6e 73 26 26 6e 75 6c 6c 21 3d Data Ascii: }}return e},fromJSON(i){const a=Object.assign({},g);if(a.gavs_keywords=[],a.categories=[],void 0!==i.num_av_detections&&null!==i.num_av_detections?a.num_av_detections=Number(i.num_av_detections):a.num_av_detections=0,void 0!==i.num_gavs_detections&&null!=
2024-11-21 02:42:16 UTC	1280	IN	Data Raw: 63 61 74 74 65 72 5f 6d 61 6c 69 63 69 6f 75 73 3f 61 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 62 61 63 6b 73 63 61 74 74 65 72 5f 6d 61 6c 69 63 69 6f 75 73 3d 42 6f 6f 6c 65 61 6e 28 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 62 61 63 6b 73 63 61 74 74 65 72 5f 6d 61 6c 69 63 69 6f 75 73 29 3a 61 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 62 61 63 6b 73 63 61 74 74 65 72 5f 6d 61 6c 69 63 69 6f 75 73 3d 21 31 2c 76 6f 69 64 20 30 21 3d 3d 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 63 75 63 6b 6f 6f 5f 6d 61 6c 69 63 69 6f 75 73 26 26 6e 75 6c 6c 21 3d 3d 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 63 75 63 6b 6f 6f 5f 6d 61 6c 69 63 69 6f 75 73 3f 61 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 63 75 63 6b 6f 6f 5f 6d 61 6c 69 63 69 6f 75 73 3d 42 6f 6f 6c 65 61 6e 28 Data Ascii: catter_malicious?a.is_mandiant_backscatter_malicious=Boolean(i.is_mandiant_backscatter_malicious):a.is_mandiant_backscatter_malicious=!1,void 0!==i.is_mandiant_cuckoo_malicious&&null!==i.is_mandiant_cuckoo_malicious?a.is_mandiant_cuckoo_malicious=Boolean(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49781	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:16 UTC	648	OUT	GET /gui/47031.025a838d403cdd2d104e.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.260360209.1732156933; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0
2024-11-21 02:42:16 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 1a3c34e7bda7d5602474f3a851bf04b9 Content-Encoding: gzip Server: Google Frontend Date: Wed, 20 Nov 2024 23:18:45 GMT Expires: Thu, 20 Nov 2025 23:18:45 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 12211 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:16 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 66 66 64 0d 0a 00 00 00 00 00 02 ff ec 5c 7b 77 d3 c6 b6 ff ff 7e 0a 45 a5 2c a9 c8 c2 79 12 6c 94 40 43 58 8b 96 16 48 c2 e9 ea ca c9 05 d9 1a c7 2a b2 e4 4a 72 1e 75 fc dd cf 6f ef 99 91 c6 b2 5d 42 4a b9 f7 ac d5 d2 05 f2 68 1e 7b f6 ec d9 ef 2d 7b 52 08 ab 28 f3 b8 5f da 5d a7 10 c9 c0 bf 14 bd 71 d8 ff 78 30 9c a4 1f 2f ca f7 93 f8 fd 28 8c d3 e0 4f de dd dc 9c 9e b9 fe 78 52 0c 9d d3 d3 ad 47 ed cd f5 33 6f ba b5 b3 be bd d3 71 84 57 7a b9 1b ec 4d 2f c2 dc 8a 83 dc d9 da 7d d4 de 72 bd 14 8f eb 3b 3b 5b db ae 97 e1 71 67 63 77 73 c3 f5 12 6a dd de dc d8 74 bd 10 8f db 3b 5b 5b 6e 37 11 a5 55 78 91 d7 f7 c6 de c4 1b 06 22 Data Ascii: 0000000100000001000000010000ffd\{w~E,yl@CXH*Jruo]BJh{-{R(_]qx0/(OxRG3oqWzM/}r;;[qgcwsjt;[[n7Ux"
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 91 eb 37 93 31 46 d7 ef 8a 52 8c 83 75 39 28 8a 0b 22 41 e2 89 b2 a1 18 66 97 ff 22 7e 45 6c 4e f5 11 03 91 bf 1b 47 40 2c f3 3e 9c 9e d5 1f 86 e9 39 18 c4 2b 5a 07 00 12 2e 85 a6 15 86 ec fd 5c 17 1c a3 02 77 5f 3f 68 ba 70 84 7c 37 3f 00 88 95 97 12 4c 43 ec cb c7 8e 00 b7 79 11 5f 89 c8 e1 49 70 dc f1 28 4c 8a 83 6c 92 96 ee cc 84 eb 1d 6d f9 cf e1 e2 2e 1a ae f0 4a c1 15 5e ad 84 8b 07 dc 11 ae 39 50 01 17 1f af a5 76 4e 07 52 f1 51 c7 f5 8b 71 12 97 8e 8d db ad 31 ba 41 58 50 f7 6a 5f 9c ae 9f a9 e7 4e 7b 86 99 52 dc 0b 11 1d 40 6a f4 a0 46 68 72 21 36 db 7c 23 0f 74 1e d3 12 fb 4c 30 8d d7 12 43 8c ea 09 e1 13 32 25 2f 4a 49 09 11 09 0a 26 4b bf d1 2a 27 21 26 7d 0c 1e 29 72 29 fe 8c 55 8c ad ca be 10 21 0b 3d 79 c1 85 9e 83 38 49 64 5f 49 01 f5 2a Data Ascii: 71FRu9("Af"~ElNG@,>9+Z.\w_?hp\|7?LCy_Ip(Llm.J^9PvNRQq1AXPj_N{R@jFhr!6\|#tL0C2%/JI&K'!&})r)U!=y8Id_I
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: d1 5a 8a 35 c7 ea f6 6a e4 45 a0 2f 49 5f 1a 8a d2 6a c6 ee a3 49 98 b4 a4 c1 28 6d 52 9a cb 9d 79 bb bb 1b 5b 9b 46 38 22 f7 e1 b6 f1 a6 47 1d 07 c1 89 de cc 65 a3 78 75 7c e2 f1 ce e3 dd 47 32 3e f1 68 bd bd 0e e5 9c e2 13 8f 36 d6 37 60 92 37 02 14 de 40 86 28 c8 0b d5 f3 fe 71 52 7e 09 27 e5 9a 76 b3 92 ef 44 f8 47 cf 9e bf 7c 4d da 66 14 67 b6 27 fc 57 2f 8f 4f 02 3b 89 8b d2 9e 39 3d 08 9a 5e 30 85 e9 a5 7c 9b 2c 10 2b c7 66 e2 3f bf ad 3f 53 33 19 8a b1 f4 73 81 db 7c c4 76 c6 51 96 95 95 c6 0e 65 33 2e 94 1a ff 8a ec 05 02 51 45 36 84 a9 24 14 80 ab 08 06 0d 25 81 94 a2 16 ab 0d da 9e 30 a4 3d e2 0a 95 70 57 4b bc 1e 93 ae 7f 94 5d 72 e4 63 95 7d 33 f8 30 a7 d5 f3 22 fd a1 80 cd 30 6a b5 b5 62 7c 1e 8e 5b 1b d2 88 a8 8d 1d a5 bb d4 23 24 70 e6 98 Data Ascii: Z5jE/I_jI(mRy[F8"Gexu\|G2>h67`7@(qR~'vDG\|Mfg'W/O;9=^0\|,+f??S3s\|vQe3.QE6$%0=pWK]rc}30"0jb\|[#$p
2024-11-21 02:42:16 UTC	268	IN	Data Raw: 10 0a 46 fe 3e 30 63 2c 40 59 fc c9 cd 8d d4 f3 75 d2 fe cd 8d 7e a2 ec 6d 95 ef 0f aa 0f 55 a2 7e 36 c3 7f 7a 12 4b d2 c8 df 94 d5 5d ad f2 b3 79 e9 55 06 f3 47 71 5d c0 b7 4e 86 a5 6a 41 ee a2 91 b9 2d cb 31 0a 55 69 b1 3c bb 5b f5 a1 69 40 d7 a8 94 88 95 5b ca 71 f4 da 48 6d d2 ee fb a5 cb 18 09 e2 94 51 05 cb 02 69 ff 9c 3a 8f 88 03 b4 6e ae b3 f0 c3 f1 38 b9 e6 94 4a d8 e6 5c 9a 82 84 55 5d b3 f2 3d 85 08 e0 61 e7 9c f7 32 40 01 c8 93 2a 95 5a e5 d2 76 4b e4 bd b3 2d 2d 4b 52 d6 ea 8c f6 d3 f2 6c bf ea 8e 1f 1d dc b1 f2 db 8d fd 9f eb 0a 11 0f d5 1c 3e 16 38 0c 51 ce 31 b7 b3 df 09 b1 5e 8e 61 b0 c0 dc ce 27 76 58 ec ab 0e 73 d9 e3 b1 c0 39 a8 42 8f 95 d9 f3 05 0a 1a dc 8e 01 d3 0a 80 96 2d 70 cd 40 7e 02 36 20 b7 84 17 11 ff eb 60 4b 8d 60 b5 4b 7d Data Ascii: F>0c,@Yu~mU~6zK]yUGq]NjA-1Ui<[i@[qHmQi:n8J\U]=a2@*ZvK--KRl>8Q1^a'vXs9B-p@~6 `K`K}
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 30 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0f 0d 0a 30 30 30 30 31 0d 0a 73 0d 0a 61 30 34 0d 0a f9 8c cb 1d ea 4a 1f 71 73 b3 56 55 9a 08 c5 e4 ab b2 9f 32 7b 93 c7 c8 e9 45 c2 15 17 fa 54 1e 5e 5d eb 53 5d 66 0f b5 0f 36 30 18 4e 92 12 59 d4 24 50 9a 4b c5 ba a0 05 89 a0 b2 3a 66 be c6 e3 e9 53 63 39 59 8f a1 76 1d 5a 63 0d 86 4c bb a2 32 0c f9 ce 90 5b 41 b9 7f cc 32 4c 65 20 b8 c0 03 15 dd 68 c9 a6 59 8a 5d 70 75 53 ed 82 2f 51 32 51 3e b0 11 56 03 b2 e3 d4 12 4b 29 42 1e 18 10 8b 54 fd 4e ee d5 57 02 bc dc 83 0b 66 10 9f 4f f8 8a d0 ef cb 3c 2e c9 13 c1 b9 b9 e0 ec e5 59 80 21 f5 e1 fd 4b 92 a8 a7 8a a5 c0 e5 c1 b5 e8 cc 50 1e 71 9a 9d a1 f6 01 a5 53 a1 74 4b d4 15 4b 0a 1d 7c 0a 39 ed 2e 64 d6 b8 5f c2 65 da 81 3f 62 14 17 Data Ascii: 0000000100000000100001sa04JqsVU2{ET^]S]f60NY$PK:fSc9YvZcL2[A2Le hY]puS/Q2Q>VK)BTNWfO<.Y!KPqStKK\|9.d_e?b
2024-11-21 02:42:16 UTC	1199	IN	Data Raw: 20 ac 8b ed 69 90 16 a7 59 ec af e6 82 89 20 c3 da fc cf 19 dd cd 0c 1a bb 2c b0 ad 54 50 13 27 4a 67 45 81 ec 5b 5f 12 02 2a 69 8d 44 41 25 21 0c 57 0a c5 dc 33 b5 d0 59 70 0a a5 b1 c9 e9 a5 58 98 3d f8 e0 2d 7b 89 9b 39 6b 7d 60 d8 34 13 6b e4 9f fc 02 73 1c a2 8c 75 36 a4 aa e9 0c 8f ae be ae aa 6c 9c 29 c6 2c 93 c7 d7 50 c8 de a6 11 92 3f 1a 3b d6 9e 29 82 5e de ff 65 3b 27 15 5e 65 48 ca 8d 07 ca e6 05 c7 91 35 79 84 27 ba 88 a0 1c 0d 0e 95 54 6b ad cd 00 87 3e 3f 51 7b c4 54 a6 82 9a 9c 2c 16 a2 2e 9c cf 0a 1c fc e0 ce 16 39 36 59 36 2b 0c 8a 7a ab 4c 36 25 12 e3 98 06 b8 f2 99 68 62 5f 74 e0 4f d1 cc 50 e3 54 2a 0b 0b 06 c1 01 c4 eb 81 16 af 5a 8c f6 c3 9c f2 16 9f 10 de 65 a1 9c 14 26 2f f0 bb b2 11 a8 13 a7 3f 5a 46 2a e0 66 b3 02 d0 7a 2a 59 83 Data Ascii: iY ,TP'JgE[_iDA%!W3YpX=-{9k}`4ksu6l),P?;)^e;'^eH5y'Tk>?Q{T,.96Y6+zL6%hb_tOPTZe&/?ZFfzY
2024-11-21 02:42:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49782	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:16 UTC	648	OUT	GET /gui/59084.21fce51b78aa667002e8.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.260360209.1732156933; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0
2024-11-21 02:42:16 UTC	320	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: f4c3c664ade2825fc84aa7ab750f2ad5 Server: Google Frontend Date: Wed, 20 Nov 2024 12:52:51 GMT Expires: Thu, 20 Nov 2025 12:52:51 GMT Cache-Control: public, max-age=31536000 ETag: "tA1SvQ" Content-Type: text/javascript Content-Length: 43621 Age: 49765 Connection: close
2024-11-21 02:42:16 UTC	1088	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 39 30 38 34 5d 2c 7b 37 34 35 37 30 3a 28 72 2c 6f 2c 65 29 3d 3e 7b 76 61 72 20 62 3d 65 28 34 38 37 30 34 29 2c 74 3d 65 28 31 36 36 34 35 29 2c 73 3d 65 28 36 32 38 33 32 29 2c 61 3d 65 28 38 35 32 30 30 29 2c 6e 3d 65 28 34 35 32 34 31 29 2c 64 3d 65 28 39 35 36 38 38 29 2c 69 3d 28 65 28 34 32 33 32 30 29 2c 65 28 31 38 31 32 34 29 29 3b 6c 65 74 20 6c 2c 63 2c 67 3d 72 3d 3e 72 3b 76 61 72 20 70 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 6f 2c 65 2c 62 29 7b 76 61 72 20 74 2c 73 3d 61 72 67 75 6d 65 6e 74 73 2e Data Ascii: "use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[59084],{74570:(r,o,e)=>{var b=e(48704),t=e(16645),s=e(62832),a=e(85200),n=e(45241),d=e(95688),i=(e(42320),e(18124));let l,c,g=r=>r;var p=function(r,o,e,b){var t,s=arguments.
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 20 24 7b 30 7d 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 68 72 65 66 3d 22 24 7b 30 7d 22 20 64 61 74 61 2d 73 75 62 6d 65 6e 75 2d 63 6c 6f 73 65 2d 6f 6e 2d 63 6c 69 63 6b 3e 20 56 69 65 77 20 63 61 6d 70 61 69 67 6e 20 3c 2f 61 3e 20 3c 61 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 68 72 65 66 3d 22 24 7b 30 7d 22 20 64 61 74 61 2d 73 75 62 6d 65 6e 75 2d 63 6c 6f 73 65 2d 6f 6e 2d 63 6c 69 63 6b 3e 20 53 65 61 72 63 68 20 66 6f 72 20 6f 74 68 65 72 20 49 6f 43 73 20 77 69 74 68 20 74 68 65 20 73 61 6d 65 20 61 74 74 72 69 62 75 74 69 6f 6e 20 3c 2f 61 3e 20 3c 2f Data Ascii: class="dropdown-item ${0}" target="_blank" href="${0}" data-submenu-close-on-click> View campaign </a> <a role="button" class="dropdown-item" target="_blank" href="${0}" data-submenu-close-on-click> Search for other IoCs with the same attribution </a> </
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 52 65 64 69 72 65 63 74 55 72 6c 28 22 6d 61 6e 64 69 61 6e 74 4d 61 6c 77 61 72 65 22 2c 74 68 69 73 2e 64 65 74 61 69 6c 65 64 46 61 6d 69 6c 79 2e 69 64 29 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 28 30 2c 62 2e 68 74 6d 6c 29 28 67 7c 7c 28 67 3d 70 60 3c 76 74 2d 75 69 2d 6d 65 6e 75 3e 20 3c 62 75 74 74 6f 6e 20 73 6c 6f 74 3d 22 74 72 69 67 67 65 72 22 20 63 6c 61 73 73 3d 22 62 6f 72 64 65 72 2d 30 20 62 74 6e 20 62 74 6e 2d 6c 69 6e 6b 20 62 61 64 67 65 20 72 6f 75 6e 64 65 64 2d 70 69 6c 6c 20 24 7b 30 7d 22 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 74 65 78 74 3d 22 24 7b 30 7d 22 20 40 6d 6f 75 73 65 6f 76 65 72 3d 22 24 7b 30 7d 22 3e 20 24 7b 30 7d 20 3c 2f 62 75 74 74 6f 6e 3e 20 3c 76 74 2d 75 69 2d 73 75 62 6d 65 6e 75 20 63 6c 61 73 73 3d 22 Data Ascii: RedirectUrl("mandiantMalware",this.detailedFamily.id):null;return(0,b.html)(g\|\|(g=p`<vt-ui-menu> <button slot="trigger" class="border-0 btn btn-link badge rounded-pill ${0}" data-tooltip-text="${0}" @mouseover="${0}"> ${0} </button> <vt-ui-submenu class="
2024-11-21 02:42:16 UTC	192	IN	Data Raw: 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 29 61 3d 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 28 72 2c 6f 2c 65 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 6e 3d 72 2e 6c 65 6e 67 74 68 2d 31 3b 6e 3e 3d 30 3b 6e 2d 2d 29 28 74 3d 72 5b 6e 5d 29 26 26 28 61 3d 28 73 3c 33 3f 74 28 61 29 3a 73 3e 33 3f 74 28 6f 2c 65 2c 61 29 3a 74 28 6f 2c 65 29 29 7c 7c 61 29 3b 72 65 74 75 72 6e 20 73 3e 33 26 26 61 26 26 4f 62 6a 65 Data Ascii: "object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(r,o,e,b);else for(var n=r.length-1;n>=0;n--)(t=r[n])&&(a=(s<3?t(a):s>3?t(o,e,a):t(o,e))\|\|a);return s>3&&a&&Obje
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6f 2c 65 2c 61 29 2c 61 7d 3b 6c 65 74 20 75 3d 28 63 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 62 2e 4c 69 74 45 6c 65 6d 65 6e 74 7b 72 65 6e 64 65 72 28 29 7b 76 61 72 20 72 3b 69 66 28 21 74 68 69 73 2e 64 65 74 61 69 6c 65 64 54 68 72 65 61 74 41 63 74 6f 72 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 6f 3d 74 68 69 73 2e 64 65 74 61 69 6c 65 64 54 68 72 65 61 74 41 63 74 6f 72 2e 69 64 3f 6e 75 6c 6c 21 3d 3d 28 72 3d 69 2e 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 72 26 26 72 2e 67 74 69 41 63 63 65 73 73 3f 64 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 63 6f 6c 6c 65 63 74 69 6f 6e 22 2c 74 68 69 73 2e 64 65 74 61 69 6c 65 64 54 68 72 65 61 Data Ascii: ct.defineProperty(o,e,a),a};let u=(c=class extends b.LitElement{render(){var r;if(!this.detailedThreatActor)return;const o=this.detailedThreatActor.id?null!==(r=i.NU.currentUser)&&void 0!==r&&r.gtiAccess?d.Z8.getRedirectUrl("collection",this.detailedThrea
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 74 69 6f 6e 2d 74 61 67 2d 74 68 72 65 61 74 2d 61 63 74 6f 72 22 29 5d 2c 75 29 7d 2c 31 38 31 32 34 3a 28 72 2c 6f 2c 65 29 3d 3e 7b 76 61 72 20 62 3d 65 28 38 39 35 34 37 29 2c 74 3d 65 2e 6e 28 62 29 2c 73 3d 65 28 33 38 35 33 32 29 2c 61 3d 65 2e 6e 28 73 29 28 29 28 74 28 29 29 3b 61 2e 70 75 73 68 28 5b 72 2e 69 64 2c 27 2f 2a 21 5c 6e 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 20 76 35 2e 33 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 5c 6e 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 33 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 5c 6e 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 Data Ascii: tion-tag-threat-actor")],u)},18124:(r,o,e)=>{var b=e(89547),t=e.n(b),s=e(38532),a=e.n(s)()(t());a.push([r.id,'/!\n Bootstrap v5.3.2 (https://getbootstrap.com/)\n * Copyright 2011-2023 The Bootstrap Authors\n * Licensed under MIT (https://github.com/tw
2024-11-21 02:42:16 UTC	1280	IN	Data Raw: 65 3b 2d 2d 62 73 2d 69 6e 66 6f 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 65 35 66 33 66 66 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 66 66 66 32 65 35 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 66 61 65 31 65 30 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 66 63 66 63 66 63 3b 2d 2d 62 73 2d 64 61 72 6b 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 63 63 63 63 63 63 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 39 64 62 38 66 30 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 63 32 63 32 63 32 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 Data Ascii: e;--bs-info-bg-subtle: #e5f3ff;--bs-warning-bg-subtle: #fff2e5;--bs-danger-bg-subtle: #fae1e0;--bs-light-bg-subtle: #fcfcfc;--bs-dark-bg-subtle: #cccccc;--bs-primary-border-subtle: #9db8f0;--bs-secondary-border-subtle: #c2c2c2;--bs-success-border-subtle:
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 65 61 64 69 6e 67 2d 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 3a 20 23 32 30 32 34 32 63 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 2d 72 67 62 3a 20 33 32 2c 20 33 36 2c 20 34 34 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 20 23 30 62 34 64 64 61 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 2d 72 67 62 3a 20 31 31 2c 20 37 37 2c 20 32 31 38 3b 2d 2d 62 73 2d 63 6f 64 65 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 2d 2d 62 73 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 23 32 30 32 34 32 63 3b 2d 2d 62 73 2d 68 69 67 68 6c 69 67 68 74 2d 62 67 3a 20 23 66 65 66 62 Data Ascii: eading-color: inherit;--bs-link-color: #20242c;--bs-link-color-rgb: 32, 36, 44;--bs-link-decoration: none;--bs-link-hover-color: #0b4dda;--bs-link-hover-color-rgb: 11, 77, 218;--bs-code-color: #000000;--bs-highlight-color: #20242c;--bs-highlight-bg: #fefb
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 73 76 67 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 3a 6e 6f 74 28 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 29 7b 6f 75 74 6c 69 6e 65 3a 30 7d 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d 7b 63 75 72 73 6f 72 Data Ascii: :hover{color:inherit;text-decoration:none}svg{vertical-align:middle}button{border-radius:0}button:focus:not(:focus-visible){outline:0}button{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button{text-transform:none}[role=button]{cursor
2024-11-21 02:42:16 UTC	1280	IN	Data Raw: 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 29 3b 2d 2d 62 73 2d 62 74 6e 2d 68 6f 76 65 72 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 2d 2d 62 73 2d 62 74 6e 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 2e 35 72 65 6d 20 31 72 65 6d 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 35 29 3b 2d 2d 62 73 2d 62 74 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 3a 20 30 2e 35 3b 2d 2d 62 73 2d 62 74 6e 2d 66 6f 63 75 73 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 30 2e 32 35 72 65 6d 20 72 67 62 61 28 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 66 6f 63 75 73 2d 73 68 61 64 6f 77 2d 72 67 62 29 2c 20 2e 35 29 3b 64 69 73 70 6c 61 79 Data Ascii: border-radius: var(--bs-border-radius);--bs-btn-hover-border-color: transparent;--bs-btn-box-shadow: 0 0.5rem 1rem rgba(0, 0, 0, 0.15);--bs-btn-disabled-opacity: 0.5;--bs-btn-focus-box-shadow: 0 0 0 0.25rem rgba(var(--bs-btn-focus-shadow-rgb), .5);display

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49785	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:16 UTC	469	OUT	GET /gui/56053.034ac17cffd09668a5bf.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.260360209.1732156933; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0
2024-11-21 02:42:16 UTC	348	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 6d03d2834f41ba17d4dccaf2584c33d6 Content-Encoding: gzip Server: Google Frontend Date: Thu, 21 Nov 2024 01:39:28 GMT Expires: Fri, 21 Nov 2025 01:39:28 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 3768 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:16 UTC	1060	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 58 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 73 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 61 33 37 0d 0a 36 16 fd de 5f 41 73 bd 1e 22 a2 28 52 b2 65 87 34 a4 a4 4e b3 93 9d 74 93 69 d2 49 77 15 b5 a1 49 c8 62 43 01 5a 10 4c a2 4a fc ef 7b 00 90 b2 6c 77 3a 3b b3 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001X00000001k00000001s0000000100a376_As"(Re4NtiIwIbCZLJ{lw:;
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 7b 11 28 56 29 84 ff 34 f7 10 cd 66 c9 53 12 28 f1 52 7c 66 f2 2a ad 98 47 80 fb 06 00 6e fc e1 f9 30 3a ff 95 74 6a b2 69 85 6c aa 6d 44 c0 7b e7 67 a3 c7 23 82 4c ca bd d3 68 1c 45 70 bb 6e 0d 87 17 23 e0 ab cb 3a a5 0d fc d6 92 ae 59 a7 22 f8 ff a9 94 e9 26 28 2a f3 8b 36 d2 76 53 cd 57 83 47 8f be 72 1e 39 4f b4 b1 bc 62 fa f9 4a ac 37 b2 b8 59 2a 67 18 46 e7 ce 9f 84 b8 29 99 f3 f2 e5 95 fe f8 e6 f5 b3 1f fa 2f 6d e7 fe 8b 9c 71 55 2c 0a 26 63 e7 eb 37 cf fa a3 fe 55 99 82 86 d0 11 a1 4a 76 bb 5b 3b 74 a6 d3 3b e2 94 d7 65 49 a9 9a ea df d8 ad 11 89 8b 82 b3 dc 3d a2 6a b3 66 62 e1 bc d9 ac ae 05 ce 54 cd ec 53 50 28 26 53 25 e4 7c b7 53 33 f7 c9 93 ee dd 9d 6b 70 e9 79 8e 28 32 8d 71 98 2f fc c2 2f 11 ed c8 05 29 3d 0a fd 8a 1e 45 89 92 1b ed 87 82 Data Ascii: {(V)4fS(R\|fGn0:tjilmD{g#LhEpn#:Y"&(6vSWGr9ObJ7Y*gF)/mqU,&c7UJv[;t;eI=jfbTSP(&S%\|S3kpy(2q//)=E
2024-11-21 02:42:16 UTC	351	IN	Data Raw: cb c9 5e bf 4e b7 ba c8 8a 8f c2 26 6e 9f 22 df 54 59 31 6e af 7a bd 39 ca 69 76 3b 03 84 a3 2d 80 54 e3 2f 62 54 41 b7 97 71 bf 2d ea 6d 5d f9 3b 0b 7a 7d 64 05 94 29 ca 41 5d 6a de 7a e5 c0 23 07 45 6b 73 d7 57 7a 34 7c 6c 2a 59 08 c8 ae de 83 e7 b4 c7 7c 78 e0 ae 63 4c 49 5c a0 ec 84 67 0e 16 d0 c5 27 f4 ae 0d a3 ae d6 c4 fb be ea 3c ac 2f d3 36 59 14 0d fe ac c2 06 8c 4d 8d ad 4b e4 2c a8 60 c9 91 57 d3 2c e0 b8 f0 30 96 ec 2f bc 14 ad 6d 81 9c b4 8b 41 dd 6b 9c 68 d1 b9 80 d5 88 17 ad f3 81 f7 7b 11 2c 60 cb 0a 77 4f af a5 40 ed a0 36 e8 13 0b 0c 36 f7 09 d0 85 fb ca 3a 0b f4 f8 bd c1 59 b0 d0 35 93 36 cc 5c 4f 9b 24 b4 57 e5 0c d7 a8 ea e0 1a 01 e5 45 67 4a 9a e3 16 a7 bb 6d e3 f4 41 89 0c fc b3 40 57 38 ef 0a b5 44 d1 9d dc b3 18 ee 9b 0a ad de 6f Data Ascii: ^N&n"TY1nz9iv;-T/bTAq-m];z}d)A]jz#EksWz4\|l*Y\|xcLI\g'</6YMK,`W,0/mAkh{,`wO@66:Y56\O$WEgJmA@W8Do
2024-11-21 02:42:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49784	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:16 UTC	648	OUT	GET /gui/30592.64f38a11064ff2dd4b23.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.260360209.1732156933; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0
2024-11-21 02:42:16 UTC	348	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: cd970213eb109d5fd64b422a8151ac09 Content-Encoding: gzip Server: Google Frontend Date: Thu, 21 Nov 2024 01:39:21 GMT Expires: Fri, 21 Nov 2025 01:39:21 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 3775 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:16 UTC	1060	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 66 66 65 0d 0a 08 00 00 00 00 00 02 ff ec 7d 6b 77 db 46 d2 e6 f7 fd 15 30 93 38 a4 03 c2 24 75 27 4d 2b 8e ed 39 f1 79 9d 49 d6 97 9c 9d d5 68 65 90 04 25 c4 14 c1 01 40 5d 42 f1 bf ef 53 97 6e 34 40 52 92 93 cc 7b 66 f7 28 9e b1 a5 be 54 77 57 57 57 d7 ad 0b b5 79 16 79 59 9e c6 c3 bc d6 ab 67 d1 64 1c 5c 46 83 59 38 fc fc f2 6c 3e fd 7c 91 9f cc e3 93 f3 30 9e f6 6f a9 bb b9 39 3a 6e 04 b3 79 76 56 3f 3a da 6a ed 1c 74 fc dd dd ce 6e c7 df 3f d8 df 6f f9 7b ed ad ed bd 63 7f b1 8f b2 56 b7 1e f9 b9 9f 36 fa cf 17 17 61 ea 25 fd b4 be bd bf d7 da 6e f8 31 7e 6c ef ee 6e ef 34 fc 0c 3f ee b6 3a bb 3b 8d de 24 ca bd a9 1f fa 93 7e d4 7f 1e f5 a8 cf a0 3f 9e 4f 87 79 9c 4c 05 96 Data Ascii: 0000000100000010ffe}kwF08$u'M+9yIhe%@]BSn4@R{f(TwWWWyyYgd\FY8l>\|0o9:nyvV?:jtn?o{cV6a%n1~ln4?:;$~?OyL
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: c1 2d 23 b3 91 21 77 64 c6 9e f6 17 cb 20 4f e4 a4 1a 24 06 d9 24 1e 46 f5 7d bf d9 36 3c ae 26 33 04 b0 7e 8a 5d 0c f8 64 a5 f3 21 76 10 6b 49 c1 4d 9d 92 60 1a 9e 03 59 b5 9f c2 19 77 b8 b9 a9 bd 8f 72 fe f1 50 88 6b 0c 6a c6 34 bb b5 17 e6 f2 d0 86 4f ff 4f fd b0 fb 31 be 79 d3 98 e6 f8 69 ff a6 bd 7b b3 d5 69 e0 c7 97 93 f0 7c 16 8d 1a 02 e1 eb a7 41 1e 65 39 f6 f5 50 56 d3 15 7e b2 8a 94 c6 42 30 37 8d 2e bd 0f e0 3f af 71 ac d2 7a ed cd 14 5b 0a 0e 14 e6 79 74 3e cb bd 3c f1 46 00 48 4b 9a a7 91 37 4d a6 4d 26 c9 c1 24 f2 62 70 91 70 3a 8c 82 7f 4e df 4c bd 24 05 cb a5 f6 03 d4 10 15 a3 89 cf 1d 70 62 c3 6b 2f e1 0b 2c f3 ce c1 ce bc b3 f0 22 f2 42 6f 85 ea eb 0d ef 3c ca cf 92 51 50 6b 2c eb 8d a5 39 54 9e ac 66 c1 27 00 44 76 73 93 3f 37 37 15 11 Data Ascii: -#!wd O$$F}6<&3~]d!vkIM`YwrPkj4OO1yi{i\|Ae9PV~B07.?qz[yt><FHK7MM&$bpp:NL$pbk/,"Bo<QPk,9Tf'Dvs?77
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 45 3d 22 2a 55 ed fa 75 15 28 dd 2d 84 36 2f 7a 2c cd fd 50 7e ec 1a 34 5a 54 13 6d c8 f9 93 2d 5f b9 35 a5 52 ee 68 17 bc 61 7c 74 ed 9c 0c c9 a2 f5 4b 49 06 c7 29 26 fe 1a b1 6a d9 d3 f9 55 4e 63 90 9d c5 63 9c f7 1e 4e 3c 9b d7 a0 92 ca e5 ed 62 b5 97 c3 a6 0a bc dd c2 a5 85 6c dc e9 81 a2 1c 1a 3e 8a 54 c3 a9 a0 b9 b1 e4 2d 55 64 7f 64 49 1f c6 c2 92 bc a6 ab fb 60 b4 1e 32 a4 ca 6c 75 51 2b da ca 33 19 d9 5d 83 f0 72 ab 39 f9 b9 34 31 5d df e2 54 bd c1 4e e8 75 e8 50 87 ca 32 66 70 b6 fb a6 aa 85 d7 41 6c 6c 5a c2 b1 3a 54 aa eb 2a c1 c2 90 b9 2c 8e 06 ae 3d b9 ec ac fe 67 d8 49 fb f1 63 21 0d 50 93 ad 3c 6a 1f 3f 7e ec fe 46 7c 8c 31 05 d3 eb 30 ca 32 e8 35 c6 fe 25 a8 80 d9 4e 1a 28 82 7f 48 60 b8 0b d3 18 66 67 08 00 9d 06 8c 0a e9 51 eb 98 bc 04 Data Ascii: E="Uu(-6/z,P~4ZTm-_5Rha\|tKI)&jUNccN<bl>T-UddI`2luQ+3]r941]TNuP2fpAllZ:T,=gIc!P<j?~F\|1025%N(H`fgQ
2024-11-21 02:42:16 UTC	251	IN	Data Raw: 9c 9e e2 0a 91 1f e0 e8 0e de cf 07 d0 07 11 c5 07 2f 68 d6 af 65 ee af f0 7a ff 08 d6 fc a3 78 bd c1 2c 10 10 f1 53 7f a1 bd 4f d2 39 22 dc a2 bc 1b 06 d7 61 1a 12 ef c5 99 07 4f cb 4f 42 ba 34 51 ce ff 72 05 98 21 5d a5 18 04 c5 c5 2f 6e 27 8a fe ea 0e 02 13 04 06 4f 4d 9e 26 34 d6 c9 6f c9 00 bd ec ef d4 69 d9 93 30 bc 7f d9 40 bc f9 fd 05 0c 98 6d e1 fd a1 20 a2 d2 2d 66 7f e7 90 35 91 35 54 91 1c 25 f9 1b 38 bb 21 dd 27 a9 6d 46 2c e2 25 5d b5 b8 77 6d 21 9c f4 97 a6 50 c4 87 17 f0 ec 9b 91 c0 0f 80 b3 77 c9 a5 b5 89 13 bf 70 7f 8f c7 7f 4f f2 9f 74 82 88 df d4 db 12 3e 93 47 ac d2 ea dc 7d 84 ec f8 f9 61 ea c6 f8 8d b1 57 e3 fe 0f 9f 10 d4 c7 12 32 02 1e 97 a5 05 2a 0f a4 73 b6 88 02 61 e8 12 19 45 46 54 b2 3e 28 b3 35 c2 8a fe 0a 0d 0a Data Ascii: /hezx,SO9"aOOB4Qr!]/n'OM&4oi0@m -f55T%8!'mF,%]wm!PwpOt>G}aW2*saEFT>(5
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 3b 0d 0a 30 30 30 30 30 30 30 31 0d 0a ba 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 66 66 64 0d 0a 58 60 de e1 08 d1 ae b7 7b 51 b5 11 f9 3c 71 35 b0 d7 33 63 c3 07 cc 7d 12 26 55 6b 91 4d 97 e7 86 28 83 10 e4 26 9e 7f 6e 4c 1b f0 63 14 22 9c a7 08 b4 14 2c 9d 4c c8 65 79 8b 9c b8 12 8f 79 74 1a bc f0 cf 83 17 c7 1c 95 c9 76 e0 77 d1 2c 49 f3 9f 21 59 e0 d0 58 87 9b 30 f5 e0 64 4c d6 36 20 0a a6 f5 3c 99 fd 82 d0 c9 f0 94 3d 8a 70 f8 47 b8 c0 e0 a2 9d e6 af a2 71 38 9f 50 08 c3 8c 1c 4f 44 1c 6f a6 af d2 10 e6 6d b6 68 09 2a 0d 48 0e af 14 c3 05 df 1c 41 3c 02 5e a8 d3 bb 68 c2 b0 6d 67 18 17 ef 37 b0 15 70 a3 40 d4 46 50 4e 1e 18 5c 4a ac d3 9b 11 4c 85 d5 42 8a b5 ea 6d 98 75 02 c3 11 ed c0 4b 12 9f ae f2 17 Data Ascii: 00000001;00000001000000010000ffdX`{Q<q53c}&UkM(&nLc",Leyytvw,I!YX0dL6 <=pGq8PODomh*HA<^hmg7p@FPN\JLBmuK
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: e3 a2 8c bd 05 6a c0 32 81 de 29 a2 f8 a0 5d d1 2b a5 86 44 41 0c 93 d9 b5 a3 7f 38 2a 97 96 fa 13 e1 19 53 e8 2d b3 6b 35 3d 40 9e 39 c9 10 44 43 6b fc 90 bc 9c c4 b3 41 12 a6 23 bd cb a4 90 01 db 2a c3 b2 65 5e b0 9f c8 49 2e 17 7f c0 a2 c0 b5 fd da a8 89 a7 28 11 1e 89 20 e8 90 5e c2 91 59 81 a4 4e 91 73 59 2a 0f ac bd e1 30 32 cf 60 4e 48 f4 f8 25 99 d1 0e 59 21 f5 0e 01 00 41 e4 d4 bc 74 fb 17 d7 75 e9 16 17 75 be bb d0 2e 50 a6 44 39 b4 8a a1 56 f8 52 6c eb 7d e1 bd 72 4b c9 cf be 21 3a db a8 0a c4 04 d9 73 68 f3 09 d4 46 46 04 6f 25 c5 61 18 54 9c 05 ff 7b 9f 02 d6 df b3 f1 f4 63 3a a9 2f 56 47 23 ad d4 47 64 51 37 5f 22 10 04 ad 3f 00 a5 93 d7 a2 5f 88 ca 09 42 85 4a 92 b2 a8 73 73 b3 a0 c7 6c a2 a4 75 21 8b cc b3 59 3c 8c 41 fb f8 05 4f f8 ce 21 Data Ascii: j2)]+DA8S-k5=@9DCkA#e^I.( ^YNsY*02`NH%Y!Atuu.PD9VRl}rK!:shFFo%aT{c:/VG#GdQ7_"?_BJsslu!Y<AO!
2024-11-21 02:42:16 UTC	1327	IN	Data Raw: ce e9 7a d8 22 7b ec ff cb 8d c4 51 d7 73 11 0b b3 09 56 11 89 53 ea 2f a7 ee ee ee 26 be f7 96 a9 a8 75 f5 2f 81 65 b5 ef 7b 43 a3 18 a3 d2 ca 5c a9 eb 8f 43 71 5d 18 b7 41 a9 8e be d6 4b b1 0a 80 23 1a 91 96 e7 ab b2 ed 9f 62 92 4a 8b a9 54 9b 44 3f 4b 7f ef e0 60 67 4d d4 d2 ff e2 58 a5 cb 7b c6 2a 21 2a 69 bb 75 70 b0 4b c1 48 12 80 24 61 4b 1a 60 54 8a d4 a5 b6 94 26 87 da ee ee b4 10 c1 e4 04 ed fa 33 ff 0c 41 48 9c e2 ca a4 72 f0 e0 a6 27 89 93 5c 89 a9 49 5a f5 39 ba a6 07 31 c4 41 85 30 e9 ec 38 69 ac 24 a1 4d 26 bd 36 a4 ba d2 36 04 06 6c 1b b9 66 92 40 a4 c1 7a dd 8c 8d 3c 46 e6 16 5e 3b 8c 93 2d 8b e6 18 44 53 3c 6c e6 e4 23 10 5c b1 42 36 a4 06 30 fa 4d ae eb 29 bd 9b d3 2b 3d 2d 72 8b 20 e5 8a 18 b1 a5 0a be 1c 3b 38 18 12 fb 4f 9d 12 42 04 Data Ascii: z"{QsVS/&u/e{C\Cq]AK#bJTD?K`gMX{!iupKH$aK`T&3AHr'\IZ91A08i$M&66lf@z<F^;-DS<l#\B60M)+=-r ;8OB
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a f7 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 16 0d 0a 30 30 30 30 30 30 30 31 0d 0a d0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 21 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9e 0d 0a 30 30 30 30 30 30 30 31 0d 0a c2 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 87 0d 0a 30 30 30 30 30 30 30 31 0d 0a b0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 01 0d 0a 30 66 66 35 0d 0a 7d 60 62 08 07 f9 3e 6e 9b 2f 3c fb 3c 5f d8 75 4b f3 35 f7 5a 24 f3 ee d9 30 48 58 6c cd 22 9c 25 e4 e5 25 e4 7f 68 09 94 87 a8 44 8d 66 95 ba 95 1b 89 55 d0 64 5a 17 38 59 ac 85 26 63 38 bb 67 8d 18 64 45 31 8b 23 2f 35 5d a0 24 23 01 97 0c e9 0e c6 44 cd f1 cc 2d c5 23 37 49 a1 03 be 04 30 38 8c 66 4a 3c 45 e8 d3 Data Ascii: 0000000100000001z000000010000000100000001!000000010000000100000001j0000000100000001000000010ff5}`b>n/<<_uK5Z$0HXl"%%hDfUdZ8Y&c8gdE1#/5]$#D-#7I08fJ<E
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 21 58 48 18 02 4f 7f 5a 6f 36 07 19 bf 0a a6 38 ad 04 ee 58 aa 27 71 aa a9 5f 09 a3 1c 22 e4 f3 8c b8 06 71 f0 19 75 9d 25 31 04 a4 14 65 d0 8d c3 ee 19 45 72 ad 87 4d 81 05 88 2d ff 43 80 e1 51 a8 1d c3 3c 10 bc c0 43 31 9f 73 de fc 95 d8 78 72 24 72 ee b1 cc 9c ac 2e b8 ce 65 b5 de a3 18 af 70 53 7c c8 26 97 45 aa da 47 79 85 d6 2f 94 9e 56 bb 48 9c 21 77 02 2e d3 ae b7 33 bb f2 5a 8c 3d 3b 02 82 be ae b8 44 5f 69 cb 53 ec ae d7 46 d3 2c a1 0f ed 38 7b 43 1f d0 71 01 e3 f1 cc e9 54 94 9e ae 27 17 ff ca 14 75 47 c8 e2 14 49 92 24 8a 84 95 89 4b 28 4d d7 cb 42 7c bb 87 c2 d9 90 e2 8f f7 d1 59 a2 e9 4f 52 ba 3e 7e ab 20 29 9e e2 e1 5c 24 c9 b1 6e e9 3e 69 6a ac 5f 35 8c 77 41 84 86 2c 1e 43 e8 d2 58 f8 0a 08 6f ed dc f1 74 bb 99 c5 bf 33 5e 55 ce 05 f5 12 Data Ascii: !XHOZo68X'q_"qu%1eErM-CQ<C1sxr$r.epS\|&EGy/VH!w.3Z=;D_iSF,8{CqT'uGI$K(MB\|YOR>~ )\$n>ij_5wA,CXot3^U
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 6c 19 85 74 6a d6 07 83 9f 55 8b 9b 56 38 5d 23 c9 5f 9e c1 2b df 64 03 04 a9 6b 64 e5 c0 ea d7 2f 57 27 e9 66 10 93 49 3a ac 65 db ae b2 6c d8 eb 6c 6d 1d b8 df 95 c7 36 f0 57 e8 ff b0 99 f3 7b 3c 42 1b d3 97 26 33 ef 34 8d ae 9b f8 da 6b 16 c9 74 5a df c8 bf 6a d8 e1 2f 10 e0 1e d6 3f e9 e9 20 ac b7 db bb 3e d4 19 f3 57 2b d8 97 4d c7 c2 3d 6f ef 36 00 64 40 f2 d6 c2 70 20 20 a7 fe 97 cf c1 f6 c7 24 9c d5 65 9f e1 8a 41 62 aa 66 89 ff 3a f0 37 df 18 96 71 19 0a e0 e5 41 59 b2 f8 d9 dc 57 13 49 da 49 79 20 b7 7b 75 5c 37 68 65 45 30 7e 46 af 90 b5 b5 ba 5d cc 19 10 ff 74 de 15 49 81 12 e6 fd a3 de dc 6b 01 e7 1b 26 b2 be 8b db be 3c f6 18 79 62 df ac 0c 5c e1 50 8c 26 77 b9 45 7d b0 c7 cc 01 2d d6 c1 7d ff 85 2b eb 80 45 ca c2 1c 3b a9 c8 76 2b 73 b8 63 Data Ascii: ltjUV8]#_+dkd/W'fI:ellm6W{<B&34ktZj/? >W+M=o6d@p $eAbf:7qAYWIIy {u\7heE0~F]tIk&<yb\P&wE}-}+E;v+sc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49783	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:16 UTC	469	OUT	GET /gui/87347.c002f57d03220f54c084.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.260360209.1732156933; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0
2024-11-21 02:42:16 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: b8e69d2121f91ba6ae631ab2e2f956ae Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 20:03:29 GMT Expires: Wed, 19 Nov 2025 20:03:29 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 110327 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:16 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a bd 0d 0a 30 30 30 30 30 30 30 31 0d 0a eb 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7a 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a 46 0d 0a 30 30 30 30 30 30 30 31 0d 0a b2 0d 0a 30 30 30 30 30 30 30 31 0d 0a b0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7b 0d 0a 30 30 30 30 31 0d 0a 2b Data Ascii: 0000000100000001000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001z0000000100000001F000000010000000100000001{00001+
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 37 77 85 0d dd 4b 94 0b 3d 29 8a f1 45 2f 9d e9 2f cc f3 c3 87 56 12 57 90 0a 53 a7 30 4c 95 bf 4d 91 29 d9 51 13 fe 62 3e 59 3a ce 75 aa c0 29 d0 49 7c 79 d5 2b f3 57 5a b4 37 19 4f a7 d4 ee cd a6 e9 24 69 6d 44 d5 e4 6c 7e b3 ff 36 41 40 c1 6d 98 a4 65 4f f9 40 31 9f 00 f0 83 07 c0 50 7b d2 cb c6 27 70 ad e6 cb f1 a9 56 f8 f0 a1 f9 2a 31 75 47 a6 07 87 45 7e c2 87 86 cd 27 8e b9 db 82 4b 7f 6f 8d 86 df a7 1f 5e b4 b3 92 ab 8d 0f 83 f5 0f 2b cb 6d 2e 9f 4e c7 27 a7 c9 41 db b4 70 7f a9 57 26 b3 b2 95 b4 47 a6 37 43 23 12 ae ae 68 16 b4 64 00 f9 e0 41 33 9b 9f ec 27 45 80 02 cb a5 da 97 f4 a2 55 c6 49 5b b1 50 c4 fd 28 ad f0 d8 be bc b2 3c e9 72 36 4c a3 ac 62 38 9e 14 0a a4 99 6d 6b 74 79 90 67 c9 f0 5e ff 6a 68 af 06 d1 fb f1 74 9e 0c e1 64 9d ce ee d5 Data Ascii: 7wK=)E//VWS0LM)Qb>Y:u)I\|y+WZ7O$imDl~6A@meO@1P{'pV*1uGE~'Ko^+m.N'ApW&G7C#hdA3'EUI[P(<r6Lb8mktyg^jhtd
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 44 36 e0 fc 13 1a 64 5a 08 d1 15 34 25 f4 e6 c1 85 b4 fe 70 eb 68 56 19 9a 95 4c 0a 9c 67 78 21 0d 11 e3 16 8f 02 f8 bf 0f a8 da cc 6d b1 54 37 8d 03 22 70 c7 8c 4a 33 71 bf c1 10 3d 44 af 73 2a cb 33 03 e1 7f 8b ca e2 3e 6a 3e 79 07 19 f5 99 96 fc 77 91 51 a6 37 5e 46 31 70 a8 bc 7f ba cf fe 74 9f 05 ee 33 43 23 ff 22 7d c5 cd bf c6 7d e2 1b 9c 48 d7 a5 95 f7 c5 65 37 74 15 a2 5d a4 88 73 cf 21 ee fb 9b 05 2e 3a 1c ae ed 64 a7 d8 ad 2a 70 e3 db 49 f1 f3 e6 71 b2 49 50 8f 5d 68 6e a6 54 50 ad 43 d6 bf cf 5a f9 4e ba 5b 29 1e b7 b9 bd 0c 94 99 77 7c 95 3d 91 21 b0 d8 6a ad fa 31 c7 15 be 5f df e9 b7 01 a7 2c d5 df fa 26 1e 44 2f e2 e5 e8 f3 78 25 7a 1e af 46 df c4 83 a4 bb 5e 85 16 7c 55 d5 68 96 c5 38 9b 4d c7 68 11 cd 4e d9 69 46 fd 76 b3 6a fa db 85 05 Data Ascii: D6dZ4%phVLgx!mT7"pJ3q=Ds3>j>ywQ7^F1pt3C#"}}He7t]s!.:dpIqIP]hnTPCZN[)w\|=!j1_,&D/x%zF^\|Uh8MhNiFvj
2024-11-21 02:42:16 UTC	467	IN	Data Raw: ee 2b 37 81 65 6d f0 05 06 8a 0a 23 5f 48 cf cc 7c 17 07 92 33 34 fc d5 e8 96 ae 0b 44 94 69 28 a8 0b 07 64 4d 91 02 75 d1 c6 2c 20 f1 1e 2c 26 f0 80 11 dd aa fe 2f ab 12 5b 5b 55 d5 68 a9 e6 3f 02 f7 3d 6a 6e 6f 55 9a ac 5a bc 94 db f8 2f f0 b3 d2 ce 31 82 10 89 32 ce 33 62 f8 5a ee 59 d1 19 b4 51 6a 8a 64 fc ce 77 98 b9 7a cf 84 e6 ea 26 90 4b 01 72 98 d9 40 d4 04 13 6b 79 f5 45 ef b4 c8 cb 5c b0 16 7f 19 5c 87 a6 c4 e1 17 51 1e c4 bb aa 9d c8 da 64 c5 f3 a6 fc 92 25 14 de bc 34 42 fe 32 6e 48 f7 f4 04 55 6d 76 3a 45 7d 5b fa fb 87 9f 67 9d a5 36 0b 84 d3 80 d5 82 7b 23 53 9b 4d 08 a4 ec a1 91 27 e7 18 7d 9a 04 99 8a 39 39 d9 8e fb ba 5c 70 5d 4c e8 62 0d 0b 78 0d 23 4c 48 f7 0a 31 9b 7d 73 96 59 5b 33 21 97 0b 08 84 6d 33 59 7e 96 d5 08 44 f7 ba 5c 2a Data Ascii: +7em#_H\|34Di(dMu, ,&/[[Uh?=jnoUZ/123bZYQjdwz&Kr@kyE\\Qd%4B2nHUmv:E}[g6{#SM'}99\p]Lbx#LH1}sY[3!m3Y~D\*
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 52 0d 0a 30 30 30 30 30 30 30 31 0d 0a 90 0d 0a 30 30 30 30 30 30 30 31 0d 0a 60 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 57 0d 0a 30 30 30 30 30 30 30 31 0d 0a 06 0d 0a 30 30 30 30 30 30 30 31 0d 0a 27 0d 0a 30 30 30 30 30 66 66 39 0d 0a 81 b5 da 61 98 4e db 19 12 dc b7 0b be 6d 8c 9a 7e ad 46 20 56 a4 6b be 5a 4f 85 3f d0 57 bb e6 fd 2f 00 25 08 09 20 62 9e 8a 95 a3 70 80 61 ec 80 d6 52 22 97 d3 eb 80 25 58 2c d4 8e 99 95 f1 97 15 53 c7 b6 4b 08 bc 23 f0 06 ab a4 4a 17 71 7a 47 12 6c c3 f1 ca 91 62 e5 97 79 52 5c bc d2 85 23 18 13 bb bd 6f 49 d6 77 d6 f6 0e af f6 8f f3 45 1f 48 ef f6 01 59 7d d6 be 31 0f 1b 73 9f f0 9f b5 9b dd 34 e2 db 2c c3 05 e6 c8 53 1b 1a bc d7 a8 5c 84 06 db 8f b2 50 Data Ascii: 00000001R0000000100000001`00000001/00000001W0000000100000001'00000ff9aNm~F VkZO?W/% bpaR"%X,SK#JqzGlbyR\#oIwEHY}1s4,S\P
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 79 ba 10 ca cd 1b 4d 5a 7b eb a8 d9 c4 c9 57 81 f4 17 0f 74 2a 1e a8 e7 af 5f 7e 55 03 f9 cb 5b be ae ed 57 55 42 80 bf b8 a5 ca 1d 00 ae 1a bc 05 dc bf 7a 70 c5 56 f2 2a dd 47 db 39 82 39 33 b0 a1 93 3b d0 43 75 a0 02 92 2c 89 52 31 a3 74 5a 10 43 93 cf 67 b7 b6 12 6a a1 76 bc af 7d 47 8d 52 aa ee 06 5f c8 c4 87 be 80 5a 6d ff a5 89 9a cc 11 5f 82 3c f4 2a 19 f6 a1 4d a7 41 61 0d 38 c7 63 20 11 36 46 12 59 13 58 ad b4 16 22 c2 66 82 33 a5 4c 6c 09 80 20 30 a7 f6 08 51 89 ea 12 72 ec e4 16 58 ed e7 15 ae 1a b0 37 1a fc 88 46 54 68 e3 a6 db aa 34 da 5e 31 b5 54 7b 1a 25 d9 30 cb 24 9c b8 a2 47 a2 34 3c ee 84 06 aa 37 73 79 23 8d a1 32 d6 87 61 13 04 11 af a5 32 56 07 e3 fa 98 8f af 55 9d 4c f1 dc 4b 34 44 eb 1e 0e 1a 6b f8 af 62 24 1c f2 33 50 5a a7 01 6b Data Ascii: yMZ{Wt_~U[WUBzpVG993;Cu,R1tZCgjv}GR_Zm_<*MAa8c 6FYX"f3Ll 0QrX7FTh4^1T{%0$G4<7sy#2a2VULK4Dkb$3PZk
2024-11-21 02:42:16 UTC	1376	IN	Data Raw: 84 10 c3 4f c8 4d 28 0f 2b 72 f0 83 20 20 8b 90 53 16 aa 85 b0 6f ea 8d 61 7e 1a fa 76 ea 35 83 8a c9 4a d3 bf d9 1e 65 ee d8 9c 28 13 55 73 56 d3 37 6a a2 82 a3 a0 11 77 6e 94 7c 47 79 66 93 85 65 90 d5 6c f6 8a 63 89 8f 3e 96 bd 9d e2 62 28 d0 1a 0d e7 91 3d 00 b8 e6 e5 81 b1 10 98 e0 3f bb 71 9b 78 38 93 98 4a 6b a5 68 fd 61 2d 2d 24 16 f2 dc 07 c3 0f 93 96 e4 fc 23 7e 7e 54 d8 1d 0e a9 df 0c 22 b1 c1 ba 99 22 e8 5d 65 4c 53 47 48 e2 b6 a5 b0 86 76 d7 6c 4b 29 9d 41 60 cf ca 21 b1 de ba eb 14 85 d5 52 76 15 1d 45 f4 9f d9 cf 84 62 46 16 14 32 90 04 e4 9a ca 5c ea 6f 4e b7 64 b6 4c fd ca 46 82 30 92 9d e9 2e 11 18 85 fc 1c 13 e0 60 1b 3e 85 e2 a7 21 c5 b3 6f e2 82 26 2e b6 24 48 82 fd bf 93 78 b6 73 41 8a d7 43 fe 0a 86 4f f9 8d 27 86 ea f9 90 04 9b 4e Data Ascii: OM(+r Soa~v5Je(UsV7jwn\|Gyfelc>b(=?qx8Jkha--$#~~T""]eLSGHvlK)A`!RvEbF2\oNdLF0.`>!o&.$HxsACO'N
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a eb 0d 0a 30 30 30 30 30 30 30 31 0d 0a 61 0d 0a 30 30 30 30 30 66 66 65 0d 0a 89 18 8e 6f 37 2a e3 ed 35 6a f6 0e c2 d1 58 98 91 56 9c 91 70 96 c5 97 93 f1 a9 a4 6f e4 7c 87 e8 94 c4 6a e9 7b 2e 07 41 4c df 9e 82 26 1e 85 44 1c 2a cf 4c 9c 13 eb 6e 89 e1 c9 4f 5f 9c 9c 24 07 29 be 65 89 c9 19 1f 49 c2 09 d4 cc ca fc bd 4f 75 25 34 fc 6b 4c 53 bb 3d 2f 34 69 8b 27 50 c1 31 f9 db c2 dd 8b e7 5a d9 29 6a 26 c9 a5 f5 ee 60 b8 f1 cd 55 8b 1c 4e 20 e0 bc 27 93 21 45 dc 96 8e 25 06 09 a0 5f 8a 3d 5e 77 88 3c c9 e2 de a3 e8 55 16 0f 96 9e 64 d1 eb 2c 6e fe fc f3 ec 61 6b a7 d3 dd 1d fd fc f3 41 a7 2d b7 cd e8 5d ed 05 27 75 f0 ee e1 cf 3f f7 da 5a 88 fb 9d e4 b3 dd aa d2 c8 56 7b fa 7b ab 7d 62 3e f7 75 16 2f fd fd 3f 5a 3b fd ee e3 Data Ascii: 0000000100000001a00000ffeo75jXVpo\|j{.AL&DLnO_$)eIOu%4kLS=/4i'P1Z)j&`UN '!E%_=^w<Ud,nakA-]'u?ZV{{}b>u/?Z;
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: c1 f2 60 63 8d 06 08 2c ba 28 72 78 8f 10 7c 7f 59 aa e6 93 c9 78 86 e7 c5 3c 59 7e 1c 65 e3 f7 e3 b7 b9 9b c7 4c c5 75 e8 96 87 10 0d 42 88 f9 8c d8 93 06 60 c5 6b 6b f2 40 54 48 99 93 2b 50 bd de 1d 70 52 d7 f0 51 7f 95 f3 3a 1f 63 b0 77 2c 19 d6 c6 84 37 f7 0a 3e 3c e1 f1 0a 82 d4 e1 76 75 85 99 cc d0 9f 92 ab c6 53 3a 53 6f 7d ed d1 80 f1 d5 c7 ca f2 61 b2 cb 4c 27 f3 a8 c2 d3 60 00 4b 65 2c b4 64 80 a6 d5 95 0d 58 cd 0a 8f 4f c7 17 63 7a 76 aa bd 5d e9 3f 7a 14 9d ca 9a f5 74 7e 78 28 8f e4 7f 14 4b 8a b9 f0 8b f5 0d d8 7e e4 e6 c6 fa a0 0f 0d 9d 4e 59 a7 22 a3 97 57 d7 57 a8 9c 9f c1 1c 1c dd 22 23 98 89 96 24 84 ca 1e 31 93 61 b9 09 18 b6 4f d7 d7 21 09 c4 af ed 3e a4 44 27 18 90 0b ab 0f 2c 23 53 d7 10 35 45 7e 31 36 f3 81 79 86 04 58 8b 66 84 f5 Data Ascii: `c,(rx\|Yx<Y~eLuB`kk@TH+PpRQ:cw,7><vuS:So}aL'`Ke,dXOczv]?zt~x(K~NY"WW"#$1aO!>D',#S5E~16yXf
2024-11-21 02:42:16 UTC	1316	IN	Data Raw: ec 31 c6 fe 4a 64 df c3 52 5c 10 0f 4b 3b 36 ad d6 a0 bb f2 90 2e 3c cc bb f3 f6 43 3e b6 da 5d 7f 98 73 cf 5d d2 69 0d b8 32 6f f5 49 d1 99 3f 64 64 d7 af 30 09 bf cc a2 6f 38 dd 5b 93 f1 fa a9 d6 b0 06 5e b1 42 13 80 26 94 a8 ac 2b 30 0e 2b db 53 d7 b2 b8 06 a6 68 ef 84 ec 2f d4 ac 6a ef 71 65 26 e7 c3 cf 33 31 65 9c a8 be 55 bb d9 f0 ae 80 85 4d f9 4a 1b 12 de 60 ef 66 81 67 d4 f1 8a 86 4c 51 98 ad d7 eb 66 d3 aa c6 77 47 fb c3 e7 70 70 cb 37 b8 26 69 1d a8 f8 25 8b 7e cd 22 2c dd e0 e4 12 73 0c 6b 6d f6 c8 54 48 31 69 7f 84 db be ca 0c f7 63 95 d1 7a 45 4b 95 a4 53 06 cf e8 28 ba 8e dc c5 be bb 70 4c 40 fc 6a c5 bb 5b 5a 7f 12 b4 8e 39 fc 8f b4 ae dc c0 c9 65 81 45 1d f1 27 a7 15 56 ad 20 14 86 6a 84 52 e4 2e 09 a7 74 97 fb ed e8 ba e0 11 97 e0 82 01 Data Ascii: 1JdR\K;6.<C>]s]i2oI?dd0o8[^B&+0+Sh/jqe&31eUMJ`fgLQfwGpp7&i%~",skmTH1iczEKS(pL@j[Z9eE'V jR.t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49786	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:16 UTC	648	OUT	GET /gui/71254.89ea96287cbc8b900860.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.260360209.1732156933; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0
2024-11-21 02:42:16 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: a313c28fa622aab5e7391a4c0d1b12c1 Content-Encoding: gzip Server: Google Frontend Date: Wed, 20 Nov 2024 21:17:27 GMT Expires: Thu, 20 Nov 2025 21:17:27 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 19489 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:16 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5c 0d 0a 30 30 30 30 30 30 30 31 0d 0a e9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 76 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a 46 0d 0a 30 30 30 30 30 30 30 31 0d 0a 96 0d 0a 30 30 30 30 30 30 30 31 0d 0a fe 0d 0a 30 66 65 65 0d 0a 3f 4f 01 33 89 9a 48 03 10 17 71 95 29 47 96 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001\0000000100000001v0000000100000001F00000001000000010fee?O3Hq)G
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 46 d0 5a 1f 3f c7 2c 8c 27 ec 45 10 5d 0a d4 70 cd aa 2d ab 94 66 ab d5 1f 48 a5 49 47 04 7b 44 a3 7a 50 1f f4 07 4d 90 58 ea 54 13 ea 2f 57 aa 2e 29 d5 56 bf dd 32 a1 4c 83 7a bf d3 6a 60 96 47 b3 5a ad 16 35 a3 b1 db ea a2 11 eb 90 ae a6 0f 82 e4 c4 7c 41 9d 33 94 69 4d f0 71 d0 ee 1f 60 c6 12 1f 39 33 98 d6 1c 1f 39 1d 4d 6b 85 8f 1c ef a6 75 45 63 81 18 d3 5a d0 a7 ee a0 df 33 ad 5b 1a da 69 1d 00 d2 19 ef ef f6 b1 d7 94 20 e9 37 9a 34 18 f3 9b 07 fd 03 d3 b4 6e 30 a0 d3 eb f7 30 76 8c 8f ed f6 a0 79 20 ac c2 a5 75 6d 7d 69 5d 58 27 d6 a9 75 66 bd b1 9e 58 c7 d6 b9 f5 d6 7a 61 7d 6f bd b6 9e 5a 8f ad 5f ad df ad 67 d6 73 eb a5 f5 ca fa d9 fa d6 fa c9 fa ce fa cd fa c1 fa 47 61 4b fe f9 ff b6 e4 4f b2 25 3f 56 6c c9 d4 c9 3c a1 23 93 15 c9 17 6c 40 ba Data Ascii: FZ?,'E]p-fHIG{DzPMXT/W.)V2Lzj`GZ5\|A3iMq`939MkuEcZ3[i 74n00vy um}i]X'ufXza}oZ_gsGaKO%?Vl<#l@
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 7b 2c a1 e4 d1 fd 43 57 49 28 77 86 5b ca 8f 91 a3 63 b5 88 ea 20 4e cd 8b 43 5b 1e 8a 7b 9a 69 8d 68 ad a4 fa 09 b8 ea 49 2e d5 5c b4 8b 5f 60 8b dd 9e f0 36 92 b6 bc e2 7b 10 a5 fb c8 c7 80 e1 58 e3 6c dd c1 94 46 9f ab 16 30 f1 6e 77 b3 e4 4f 7e ba a3 b9 ad ce 2b 4e 23 ce ef 6f 27 ce 08 7d a1 13 4c 9f f0 14 ac 8f e4 22 b1 0f 42 3a c9 80 c7 39 e7 68 b1 af ae 10 10 ee 55 98 a7 06 73 bb 65 05 94 93 45 81 48 d9 c9 fa 38 fa 29 49 59 f0 e9 9d bc a7 53 e0 1c 14 38 ff 0f a5 c0 dc d1 13 85 7f 02 f2 77 60 e4 5e fc 07 f7 e8 08 9d fd 83 bd 3d e4 62 95 9e d8 29 cc 3a ee df 02 f7 6f ff 43 71 bf 74 f4 a4 ef 9f 80 fb 0a 36 ee c5 7b fc 19 78 8f f7 f6 e2 02 ef 85 66 d4 91 fd 02 c8 7e f1 1f 8a ec 2b 07 30 97 b2 c9 7f 02 c2 09 0d 77 61 d9 84 22 b2 23 24 e1 61 25 e6 70 0f Data Ascii: {,CWI(w[c NC[{ihI.\_`6{XlF0nwO~+N#o'}L"B:9hUseEH8)IYS8w`^=b):oCqt6{xf~+0wa"#$a%p
2024-11-21 02:42:16 UTC	445	IN	Data Raw: 5c 2b 29 94 4b 0e 95 6c b7 b2 cf 1c 93 db 99 69 9e 9f cf d3 da 5b 81 d0 7a 53 3a 1d 37 9c ff ee 78 67 97 77 f8 e1 43 ed 15 8a 58 ee 95 1b 84 74 a8 3c 8c 3f 5b 21 3b 8d 5b 2c 28 66 79 88 d4 f9 2d 5d 79 c5 45 53 66 3f 01 ef 3f 71 bc 93 86 91 7a 83 8b 2c a2 bd 88 92 fa 24 4b 1a 87 95 0b b0 47 a5 aa 1c 9f 37 89 fd 5b 1b 21 7c 16 40 f1 08 e9 d7 97 e2 72 2b f7 99 a6 76 a7 26 05 50 48 b7 e4 68 25 ea da be 80 62 4b 1a be d1 ef 40 60 80 76 84 39 1c 56 a1 39 f5 0d 2b 07 13 a2 2f 37 73 d5 e9 01 55 d7 58 a4 76 b3 66 24 31 55 ab 44 5e ba 52 7a c6 76 fa ca db 47 79 b8 0f 5d ab 30 27 62 54 5e ce 94 0e 0d 92 da 45 b9 92 00 21 3c f3 15 95 9a e7 b5 7b 6a e5 ba 9f ae ec 8e 6a d7 81 9f cd 87 70 5b 96 37 e8 b9 80 75 36 4e e3 13 03 17 65 a1 72 52 e3 a7 e3 b3 63 23 01 e1 81 2c Data Ascii: \+)Kli[zS:7xgwCXt<?[!;[,(fy-]yESf??qz,$KG7[!\|@r+v&PHh%bK@`v9V9+/7sUXvf$1UD^RzvGy]0'bT^E!<{jjp[7u6NerRc#,
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 6d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 62 0d 0a 30 30 30 30 30 30 30 31 0d 0a 76 0d 0a 30 30 30 30 30 30 30 31 0d 0a 05 0d 0a 30 30 30 30 30 30 30 31 0d 0a 15 0d 0a 30 30 30 30 30 30 30 31 0d 0a 80 0d 0a 30 30 30 30 30 30 30 31 0d 0a fa 0d 0a 30 30 30 30 30 30 30 31 0d 0a 03 0d 0a 30 30 30 30 64 30 61 0d 0a f9 46 c8 a6 65 b8 dc 16 2f e9 32 b8 3b e3 21 37 b5 91 c7 16 47 42 ec 9f 30 10 3e 54 48 a9 e1 69 00 5e 89 92 34 af e1 62 3c c7 48 7e 05 96 5f 7f 7d 96 c4 8b f3 df 56 b8 f4 c4 b1 54 93 59 24 54 fa 99 4a 11 8a d5 53 99 7a 21 e5 b2 e3 ba d8 77 50 2d df 69 2a 5d e6 a7 fe 32 21 a0 7a 3e af e5 2f 57 93 30 48 11 50 50 2d 3f 9b 83 df 73 d9 c6 45 f6 4b 83 7e d9 cb 04 57 b6 e0 19 95 fc a6 0c 37 19 19 7c ac f1 24 74 23 f8 5d 42 41 40 Data Ascii: 00000001m00000001b00000001v00000001000000010000000100000001000000010000d0aFe/2;!7GB0>THi^4b<H~_}VTY$TJSz!wP-i*]2!z>/W0HPP-?sEK~W7\|$t#]BA@
2024-11-21 02:42:16 UTC	1408	IN	Data Raw: c1 c1 19 aa 03 1a 8d 83 83 7e e5 24 d5 31 fd 06 38 a5 7c 9e ea 90 ae df 3c 68 ca 53 41 79 cf b3 ad 8d 74 0e 21 ae fe e8 00 45 aa c9 cc c6 95 6f 3c 5a 44 a4 9c fa fe 54 8a 5d 81 14 7d 04 6b d0 4f 19 21 a5 7e 6f 3a 60 4c f4 73 82 96 3a 3b d3 b6 92 46 45 52 bd 1f a2 da 62 52 9e 25 51 4b dd 2e 6b aa bd 05 02 4a bd de 14 3f 62 67 7e 78 bd 53 17 c0 fc e0 a2 c2 90 1f 7e e0 4f fa 53 75 b4 9c 23 64 1d 22 1f e5 b5 e8 a7 82 80 ca 4a 93 86 cf 26 52 55 09 24 54 06 0c 06 9e 3b 95 07 cd 11 51 19 33 ed 78 bd 81 64 3d 85 8c ca 10 d6 77 7b ae 94 1e 89 90 ca 08 5d 4d 09 a4 54 06 e8 2a 88 6b 4c 29 63 1d 88 57 4b fe 12 87 e5 0a 36 97 4f 88 a8 44 95 f0 d3 dd 28 b5 53 96 04 d3 a1 51 13 f1 a0 71 8e 36 03 29 99 9a 65 9c c5 48 9d c4 ea 2f 1e ed 99 66 96 f1 2d 0b af 18 39 23 96 71 Data Ascii: ~$18\|<hSAyt!Eo<ZDT]}kO!~o:`Ls:;FERbR%QK.kJ?bg~xS~OSu#d"J&RU$T;Q3xd=w{]MT*kL)cWK6OD(SQq6)eH/f-9#q
2024-11-21 02:42:16 UTC	637	IN	Data Raw: a7 47 99 4c e1 9d 14 3d 0b e4 cb 7a dd fe 8e 1e 32 b1 83 01 25 73 ab 73 b8 d3 c1 6f 3f 6c 77 f1 3e c4 14 4b 58 87 4b 76 3b 4d f0 d8 78 6a e0 0d 5c c8 ae a5 a9 3d 01 c1 e9 1d 79 4b 96 ae 1b 5f ad 27 c8 9b cd 12 7a 6d 48 fe bc 84 7d 23 f4 ba 3e 9d 58 00 f2 82 0b 79 a4 70 d6 59 bc 2e 24 1d ef f6 82 7c d4 db 5d 0a b1 50 99 d2 76 55 d3 b0 c3 35 ed 56 4c 4a 91 85 66 f5 86 b9 e9 a0 59 d9 ee e6 61 31 80 73 8b be 16 5e c1 e6 b1 39 b7 23 36 ee 3b 5e af f5 99 4e 03 af 22 d3 36 d6 07 5f bb 57 6c 8d 74 de 57 39 53 2e dc 14 85 6f f9 de 8d 21 32 af 8d af 8c c6 57 b0 6d bb 9a 37 1b 87 9b 20 99 38 90 36 ea ec f9 e3 63 7a c9 9d a8 60 a9 a4 02 d9 8c 8f 19 28 8d 7b 0e 15 db 56 0c 83 f4 3d 3e 7d 7d 9e 0f e6 7a 59 37 85 fa 4e 7f f9 0e 65 0c 09 f3 67 95 b0 26 ec 90 8e 3b 04 6e Data Ascii: GL=z2%sso?lw>KXKv;Mxj\=yK_'zmH}#>XypY.$\|]PvU5VLJfYa1s^9#6;^N"6_WltW9S.o!2Wm7 86cz`({V=>}}zY7Neg&;n
2024-11-21 02:42:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49787	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:16 UTC	469	OUT	GET /gui/34894.ada184a092746870eefc.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.260360209.1732156933; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0
2024-11-21 02:42:17 UTC	348	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 1ffb46010dd3e0509091d86f268ac1c0 Content-Encoding: gzip Server: Google Frontend Date: Thu, 21 Nov 2024 01:00:21 GMT Expires: Fri, 21 Nov 2025 01:00:21 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 6115 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:17 UTC	1060	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 66 66 65 0d 0a 08 00 00 00 00 00 02 ff dc 5b 5b 77 db 48 72 7e cf af 80 11 1f 2d b0 03 40 a4 2e b6 04 19 d2 78 64 4d 56 bb f6 c8 c7 92 f7 6c 22 2b 34 48 34 49 58 20 c0 05 9a ba 84 e2 7f cf 57 d5 dd 00 48 4a 96 77 33 c9 43 ce 9c b1 c1 46 77 a1 aa ba ee 55 b6 67 95 b0 2a 59 a6 03 69 1f 38 95 c8 86 c1 ad e8 4f e3 c1 f5 f1 78 96 5f df c8 de 2c ed 4d e2 34 8f be f3 ee e1 e1 f2 ca 0d a6 b3 6a ec 5c 5e 6e ef ec ed ef 78 af f6 b7 f7 5f 7b 5b bb 3b 5b db de 5e 77 67 cb db db dd ef 5c 79 f3 9d d7 dd fd d7 a1 23 3d e1 e5 6e 74 38 cf 83 c4 11 de fc 4f a1 83 5f e5 c2 3d 18 64 71 55 59 a5 25 ee a4 c8 93 ca 3a 9e 55 b2 98 9c dc 88 5c ce 07 45 0e 54 67 03 59 94 8e 74 e7 d5 6c 2a 4a c7 2e Data Ascii: 000000010000000100ffe[[wHr~-@.xdMVl"+4H4IX WHJw3CFwUgYi8Ox_,M4j\^nx_{[;[^wg\y#=nt8O_=dqUY%:U\ETgYtlJ.
2024-11-21 02:42:17 UTC	1408	IN	Data Raw: 1c 4a 2d 74 24 90 02 9c 56 22 e8 1e 90 ec 2a f5 eb 78 65 a4 b4 15 52 99 bf 11 07 f9 4f 3f b9 e5 65 7e 15 49 fc a1 af d0 2a 17 b4 fb 2c 32 df 52 0e c5 2b 95 96 41 c7 a2 d8 dc 86 fe 06 6c 5a fa 66 fb 48 84 4a bf a3 f2 a8 8c 94 20 04 23 21 cf 6e f3 8f 25 1c 49 29 ef df 89 6a 50 a6 53 f2 31 e4 a3 c2 92 94 d8 56 9c c0 cd 6a 01 fc 24 86 e4 10 36 36 6c 83 c2 da bb 20 11 83 02 86 41 b8 71 a4 b7 d7 4b 35 be 07 b5 ea 12 41 55 cd 12 bf 7b 50 1d 46 9d 83 ca f7 5d 07 7a 78 59 5d 11 cf e2 c8 21 2a 0a 27 76 c3 f4 90 1e 80 a3 87 1f fc e0 42 83 62 23 e6 16 de 6f 6c c4 1b 1b 9a 4a 65 c7 0c 95 fa 9c 17 2f 0e 58 fe ad b7 d1 3c 29 c8 d1 57 bd 41 31 cb 65 68 bf 53 3f 6d 6f 98 c2 69 9a d5 5f e9 87 ed a5 d3 5e 9c 24 a5 a8 aa e6 d5 e9 47 bc 98 95 59 bd f7 f3 a7 f7 58 29 c5 50 94 Data Ascii: J-t$V"xeRO?e~I,2R+AlZfHJ #!n%I)jPS1Vj$66l AqK5AU{PF]zxY]!*'vBb#olJe/X<)WA1ehS?moi_^$GYX)P
2024-11-21 02:42:17 UTC	1408	IN	Data Raw: fe ba 16 0a 59 c8 38 fb a4 30 fd 15 07 ea 17 1a 0a ad bd 4f 2b c4 8f c4 64 bb 16 98 f6 47 8c d0 80 89 54 34 60 49 e6 e8 d0 33 66 ad 78 9c 77 2d 1b 57 18 1b 57 40 7b 10 af d6 47 e3 67 8f c6 e6 68 bc cc 72 32 ea 4a ab 44 3e 43 c2 4d 21 10 f2 e4 99 e6 fd 61 a7 cd fd 5b 70 ff 76 95 fb 14 e2 0b 3f 29 64 e5 d3 41 cd e2 95 55 8b 81 2e f1 67 65 87 e1 0f 29 55 8d 85 1b b6 c2 af 97 f8 fa 4b 7c fd 2b 82 39 a0 bd 60 16 40 c0 2f 54 64 43 41 a7 2e 59 e8 a4 0a ba 54 a6 88 b2 df ba d0 c8 a9 03 ab 73 38 a7 e2 55 1e 9d 23 c3 42 7d 0b e5 c0 cb 8e 49 5b bf be 9c e7 97 dd ab 45 88 58 46 5e 96 57 8b af 88 1a 83 6f b0 9e 8e fd 25 47 f8 ae 4c 37 27 0a 55 f3 b1 16 82 3d 20 d8 23 f6 70 28 00 3a d6 f1 40 7e 81 4c 7e 15 95 ae db a0 61 51 26 4d f5 ab fc ea 10 d5 cf ef a3 4e b5 42 e0 Data Ascii: Y80O+dGT4`I3fxw-WW@{Gghr2JD>CM!a[pv?)dAU.ge)UK\|+9`@/TdCA.YTs8U#B}I[EXF^Wo%GL7'U= #p(:@~L~aQ&MNB
2024-11-21 02:42:17 UTC	253	IN	Data Raw: 86 b9 97 c5 7d 0c 7b 08 24 74 10 7d 4e b3 6a 82 2e 88 20 c5 49 4e 65 a8 ec 8f 1b 47 52 a3 72 5a 4a 80 a0 c4 28 69 62 13 14 19 56 10 33 29 08 2e 21 8e dc 09 27 ef fc 6f 65 31 9b 56 de 04 2b e8 99 50 44 9f 78 c3 28 53 48 d1 38 46 fd a4 79 27 03 8d 25 7f 4a e1 49 e3 04 28 8c 02 53 fe 9e 01 64 d8 85 c6 6f a0 9a 20 03 78 ae 41 74 57 37 41 30 a7 e3 a3 87 cd d9 c4 72 5f c3 42 55 35 f6 15 f8 3a eb 30 80 cd 82 ee a2 a8 5d 48 6c 38 75 6e ca e6 42 65 5f e9 10 7d 2d 1a f4 70 d1 88 f7 5e bc 88 bd 82 1c 28 0f 83 b4 62 7e 59 7c 9e a2 4d 7c 8c d6 9b 43 1d 1f fc ef 7a a3 e8 6b 5f e6 fe cb f9 07 c4 2c 41 19 e7 e8 a4 3a 50 c6 42 05 74 78 a4 82 11 cf 25 38 5b ee e2 ab d1 32 2e b2 19 aa 13 7c 2e 61 aa 55 29 50 5f 83 a5 ff ae 2b 3e e6 37 aa 18 5c bb 30 e7 67 38 3f 0d 0a Data Ascii: }{$t}Nj. INeGRrZJ(ibV3).!'oe1V+PDx(SH8Fy'%JI(Sdo xAtW7A0r_BU5:0]Hl8unBe_}-p^(b~Y\|M\|Czk_,A:PBtx%8[2.\|.aU)P_+>7\0g8?
2024-11-21 02:42:17 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 6b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 10 0d 0a 30 30 30 30 30 30 30 31 0d 0a fe 0d 0a 30 30 31 0d 0a 53 0d 0a 36 63 34 0d 0a ba c0 c5 7c 0a ad 7d b3 52 57 f4 89 13 94 e9 51 0e 58 65 05 8a 4b c0 71 34 12 ad 22 26 aa a6 b2 50 30 78 b7 49 5b 12 24 23 3e 8a 9e f7 b6 6a 34 e2 28 25 32 98 43 18 e5 a1 05 28 63 79 60 51 7f 2d 8b ef 43 ab 9f 15 03 f4 a4 48 c4 ac a0 2f 90 12 0b 92 3b 0a f3 4c 56 aa 6f 45 d1 ae be 5a d7 6b 5a 08 e2 04 f7 c2 0c 1e dc e5 4c ac 9a b4 e5 eb 35 65 55 f3 1a 10 d5 07 b4 f0 af 37 88 54 f3 4a 31 66 09 25 7d e2 90 8a 47 48 af 50 1e a3 41 35 8c 85 20 bd 32 12 17 a2 7d 87 d6 2d 04 02 e9 a4 f0 86 4a 2b 38 a0 82 e2 36 02 3e c5 55 4d 8d 80 Data Ascii: 00000001k0000000100000001O0000000100000001001S6c4\|}RWQXeKq4"&P0xI[$#>j4(%2C(cy`Q-CH/;LVoEZkZL5eU7TJ1f%}GHPA5 2}-J+86>UM
2024-11-21 02:42:17 UTC	404	IN	Data Raw: 5a a1 dd e8 b4 85 0c 2c 97 da 02 70 bf 71 4d 1b 96 09 62 58 3c 4e c7 60 2b 4b 8e 15 e8 76 42 8a 06 82 46 c8 34 53 e7 4b ce a1 56 ef a7 ef 10 88 ad e8 74 eb 56 6a d1 ec f0 15 30 53 78 3b 5c cb 2d 58 c2 0b 18 be 59 d1 71 88 52 9a 1b db d1 b8 00 cc 5d 20 2b 50 54 68 59 53 33 93 c6 79 10 67 4d 63 93 54 3c 5f b7 d5 f1 10 30 14 08 ed 42 42 eb 0f 0f 7f 60 44 96 9d 88 f1 47 66 55 8b 75 a3 0d ad de 26 9b 59 8c ce 29 c0 4f c9 cf a3 32 f2 3d a1 5a 91 9f dd 46 7e 68 4e cf 30 a2 b6 b2 db 1d e3 19 34 77 90 49 c2 26 2f f9 55 df 70 4c 2d 13 c7 da 53 3b 4f 5c ff 77 ae f8 7b 92 f1 94 55 37 2c fd 61 6f dd 46 b1 85 af 9a 9b 52 7c 60 f5 b8 e5 91 3a 14 56 8a cc 08 36 5a ba f5 10 9a da b9 ee 1e 9e c2 f3 7b b4 19 8b 5f c3 e7 a1 40 b1 16 12 41 dc 64 4a 11 51 db d3 a3 20 bd 34 ba Data Ascii: Z,pqMbX<N`+KvBF4SKVtVj0Sx;\-XYqR] +PThYS3ygMcT<_0BB`DGfUu&Y)O2=ZF~hN04wI&/UpL-S;O\w{U7,aoFR\|`:V6Z{_@AdJQ 4
2024-11-21 02:42:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49788	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:16 UTC	469	OUT	GET /gui/22232.15ef530edb01268cfe7b.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.260360209.1732156933; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0
2024-11-21 02:42:17 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: d38dc5be40dc0879c27dfd253fedf7e7 Content-Encoding: gzip Server: Google Frontend Date: Wed, 20 Nov 2024 22:24:44 GMT Expires: Thu, 20 Nov 2025 22:24:44 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 15453 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:17 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 66 66 64 0d 0a 00 00 00 00 00 02 ff ec 5c 7b 73 db 46 92 ff ff 3e 05 82 6c bc 44 96 80 00 50 7c 81 a6 bc b6 ec ca b9 2e 71 b6 22 3b 5b b5 3e 57 82 c7 80 44 04 02 5c 00 94 c4 d0 fc ee f7 9b 17 30 00 49 59 f1 26 77 5b 57 b2 fc 90 a6 67 7a 66 ba 7b fa 4d eb 9b 92 68 65 55 24 61 a5 cf 7a 25 49 63 eb 96 04 6b 3f bc be 5c 6e b2 eb 9b ea a7 4d f2 d3 ca 4f b2 f9 3d b0 8f 1f df 7f 30 ac f5 a6 5c f6 de bf 77 5d 77 e0 7e e8 ef dc b1 3b b6 bd 1e e9 17 fd ca 98 5f ec 2a 2b ea 15 fd dd 8d d7 c3 4f 9b bd 31 bb f1 0b ad 9c 57 bd f3 29 a6 1a fd 9c 7e 3b 19 db e7 46 df c7 b7 ce 68 74 3e 34 fa 01 be 1d b9 93 01 26 24 f4 db d1 c4 19 18 fd 8c 4e 18 0e 5c Data Ascii: 00000001000000010000000100ffd\{sF>lDP\|.q";[>WD\0IY&w[Wgzf{MheU$az%Ick?\nMO=0\w]w~;_*+O1W)~;Fht>4&$N\
2024-11-21 02:42:17 UTC	1408	IN	Data Raw: fc fb 54 8d 6a 7b e1 17 dc 90 32 31 a9 d5 00 b5 a8 c5 ac bc 4d aa 70 f9 47 4a eb 2e f4 a9 c7 7a da e5 80 81 d1 61 76 7b a6 19 94 42 06 0c 7d 16 c0 2a 5f cf 4e ac 6d f8 d2 5a cc 78 63 06 8b be 56 e3 e3 43 8c ed 64 b5 5e fa 65 52 1a 9f c2 ce 99 d1 c2 2c 18 52 af 84 cf e5 6f d2 aa 35 67 5d 24 2b e8 4b 43 df 0b 35 5f 34 3c f8 91 da fb 93 cf 54 bc a4 46 fe 4f 68 57 29 16 8d be 15 7b 72 85 fb 6f c1 4b f1 c6 14 4d f9 70 56 8a b5 cd 13 bb 7f a9 e4 93 58 26 a9 43 1f 8d 58 58 b3 49 4c 91 e4 a2 53 1a 2e 15 70 25 e1 2a 4a db df b3 fb b9 b5 ac 56 a9 d1 4b 3f 7e ec a5 f3 ed cf da d3 28 b9 d1 98 eb 39 d7 8b 7c 83 f9 91 b6 36 07 da d2 84 bd d7 6e ca 0a f1 97 b6 f0 d7 a6 ab fd b2 81 ff 1a 6f 4d e8 60 f8 a8 95 19 e2 2f 52 68 f0 50 16 99 99 54 64 55 ca 21 e8 2d a6 a5 4a 38 Data Ascii: Tj{21MpGJ.zav{B}_NmZxcVCd^eR,Ro5g]$+KC5_4<TFOhW){roKMpVX&CXXILS.p%JVK?~(9\|6noM`/RhPTdU!-J8
2024-11-21 02:42:17 UTC	1408	IN	Data Raw: 0a a6 e7 9b 6a 99 17 25 9b fd 6d 02 87 bf 44 d0 4b 3d ee 42 fb ee f5 5b 65 83 a4 5a 6e e0 59 03 75 75 1b 94 67 f5 6e 67 41 9a 07 67 b4 16 79 86 ea d2 ab 37 57 af d8 d6 67 5e 81 f3 ec 58 ba 27 80 14 78 da 97 76 70 1e 45 fe 8c 0d 25 59 94 2c 72 0c 8e 46 8e 1d bb 7c 70 bd 29 d6 29 9d 39 8a cf dd d0 11 83 49 76 4d 17 b3 5f 7c a8 20 11 46 c2 a1 7b ee da 7c 04 85 3a a4 a4 31 48 86 e3 81 2d 06 b7 24 4d f3 5b 0c c6 21 99 8e c6 7c e6 a2 20 24 c3 d8 60 ea 87 e7 21 1f ab 88 9f 62 c8 b5 c3 e9 54 4c 0b b7 3e 9d e5 4e c6 41 30 e4 b3 82 14 e1 3f c6 70 10 3e 70 bb 44 a0 8f 81 38 8e 25 6e 7f 8b 9f 47 ec 57 33 84 74 57 41 17 0e d8 2f 65 1c ea 83 2e 9f d2 2f 65 18 1e 07 1d 76 e9 97 32 8c 7b 61 98 8c e8 97 32 7c ce 86 43 f6 4b 19 1e b2 e1 60 40 bf 94 e1 11 1b 3e 38 e1 98 0d Data Ascii: j%mDK=B[eZnYuugngAgy7Wg^X'xvpE%Y,rF\|p))9IvM_\| F{\|:1H-$M[!\| $`!bTL>NA0?p>pD8%nGW3tWA/e./ev2{a2\|CK`@>8
2024-11-21 02:42:17 UTC	266	IN	Data Raw: 6d 83 fd 53 d3 a8 5f 7c 12 b8 4a b2 4d 45 4e 82 97 70 4d f8 3e 27 a7 44 3e ec 3c 3d c9 c9 19 f0 39 aa e5 27 e6 6c a9 f3 c1 d0 34 a4 50 2e ce 4b 91 b4 24 69 06 9b aa ca b3 9d 30 f8 b4 f4 ac cc 2b 59 7e ca 6c f4 fe 4e 92 8e d2 c8 87 22 84 5f d4 21 2a 37 ad e5 ad 8f a6 12 49 cc a3 87 40 65 82 98 9b 35 cd e7 cb 53 50 a6 7b b5 c1 12 5c 52 b6 e2 87 c5 01 d9 5a 74 37 a3 97 30 47 4d 95 df e1 81 ab 51 92 40 9c 5f 96 5d 69 0a d0 a4 02 63 05 01 51 92 13 b4 05 65 9d 27 a8 6a de 51 25 2e 4c 48 33 4a 55 f7 70 3c aa 8d 4b 03 59 21 0d 31 1e d1 6a 3d 57 da 0d 84 6a ae e9 14 c5 97 03 08 d3 e5 88 f0 8f 81 18 0c 51 da fa 6e 6f b1 e2 e7 8e e3 a5 75 50 53 c8 bb 79 47 d5 cf 08 cf 45 a0 6e 01 99 6e 1a 74 80 cd 3b b3 51 b0 6d 2f 64 b0 43 2f 91 21 15 0a 4d b1 1f 70 10 69 2d 4e 39 Data Ascii: mS_\|JMENpM>'D><=9'l4P.K$i0+Y~lN"_!*7I@e5SP{\RZt70GMQ@_]icQe'jQ%.LH3JUp<KY!1j=WjQnouPSyGEnnt;Qm/dC/!Mpi-N9
2024-11-21 02:42:17 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 64 0d 0a 30 30 30 30 31 0d 0a cc 0d 0a 36 30 63 0d 0a a2 a4 5c a7 48 8e 24 19 25 bf 89 94 51 78 3d 93 2f b8 59 d4 be 8b a1 98 ae 16 e4 0e 85 a9 ba 0a dd 59 5d 03 c4 1c 71 b7 63 b3 38 08 b5 1b c5 1d 76 66 fc d6 9d f9 6c d0 98 b1 80 99 2b 26 5e 1a 9f f1 88 86 47 0f 3c cb 3c eb 68 30 29 73 52 4d 09 52 75 36 68 d1 d1 10 ec f7 e0 0c 57 db 9d 24 1e 7b 85 7f bd 26 db b8 f0 57 a4 d4 a4 94 9b 01 34 01 f2 82 c9 9a 94 3b fb ab 5d 80 3c d5 82 95 cd cd 75 5e 26 54 4d 43 6a a8 03 b1 df d3 34 27 7f 1a 8c 89 f2 a7 26 1a a8 cd 7e 0d aa 29 ea 51 f1 39 84 53 af ac be 8d ea 3f 0b 41 a9 11 b5 ee a8 ac 69 8d 1f 2e 92 96 bd b5 42 0e c2 18 c0 dc 1f 2c 02 41 ee 97 de e6 50 98 da ba 81 08 de 8f a1 64 6e 21 a3 a7 a7 31 9f 93 be 44 b4 a9 43 ab d4 12 4e Data Ascii: 00000001d0000160c\H$%Qx=/YY]qc8vfl+&^G<<h0)sRMRu6hW${&W4;]<u^&TMCj4'&~)Q9S?Ai.B,APdn!1DCN
2024-11-21 02:42:17 UTC	170	IN	Data Raw: ff 97 4a 31 2b 45 f2 96 a6 1d fb 9e 76 4d 42 cd b1 4f d5 36 c5 c0 7f a5 3c 79 6f 31 8f 7e ee 56 29 d8 a1 1b 20 ec 39 96 cb 3a 90 b4 bf 68 d6 e0 e6 b6 9d 80 66 5a 54 1c f8 de ba ef 63 81 8d 45 c7 b2 84 70 a4 c0 76 58 1a c1 7f fc 81 b6 44 d4 46 3a 6c 41 a7 44 a7 d2 2a a8 fb b9 75 84 df ad 3e f0 07 26 ea f7 1f 8c d9 7f 9c 9d 7d 89 fe 17 fa 39 24 fc 47 33 68 9e 59 bc fb e1 db 39 fb 2f 27 f0 59 1f 12 0f 07 36 89 02 db 71 47 93 30 26 e3 c0 fa a5 b4 56 fe fa 7f 00 00 00 ff ff 03 00 a5 5d 1d f8 d9 57 00 00 0d 0a Data Ascii: J1+EvMBO6<yo1~V) 9:hfZTcEpvXDF:lAD*u>&}9$G3hY9/'Y6qG0&V]W
2024-11-21 02:42:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49789	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:16 UTC	648	OUT	GET /gui/58686.06780f63e6b75f4709dc.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.260360209.1732156933; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0
2024-11-21 02:42:17 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 3855363ea8f8512dfb2524ec53c8c85e Content-Encoding: gzip Server: Google Frontend Date: Wed, 20 Nov 2024 12:52:46 GMT Expires: Thu, 20 Nov 2025 12:52:46 GMT Cache-Control: public, max-age=31536000 ETag: "tA1SvQ" Content-Type: text/javascript Age: 49771 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:17 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 31 0d 0a 7d 0d 0a 30 66 66 34 0d 0a e9 7a 1b c7 d1 ee ff 73 15 63 38 51 00 67 30 02 c0 1d 34 a4 c8 5a 2c c5 5a 1c 91 76 16 45 0f 3c 00 1a c4 58 00 06 99 19 88 a2 21 dc d8 f7 f3 bb b2 ef ad aa ee 9e 9e 05 24 25 db 67 79 9e 63 26 14 d8 6b 75 55 75 6d 5d dd 68 ac 53 e5 a5 59 12 8d b3 c6 69 33 55 f3 69 70 a9 46 ab 70 fc ee e1 6c bd Data Ascii: 0000000100000001000000010000000100000001000000010000000100000001000000010000000100000001001}0ff4zsc8Qg04Z,ZvE<X!$%gyc&kuUum]hSYi3UipFpl
2024-11-21 02:42:17 UTC	1408	IN	Data Raw: 30 82 69 fa fc a1 d5 fa f8 31 69 19 4a a1 fe ce 9d e4 ce 1d bd ca 89 9a 46 4b 65 56 a9 fb f9 c9 96 79 7d 96 0d c6 f3 30 4d 3d d0 44 2d 27 a9 37 0c b2 f1 86 e5 68 b2 1e 13 2e 5a 9b 74 0d fc 34 83 20 b0 3c d1 f2 89 4b 82 08 ed 06 57 c1 34 9a b3 14 d4 85 e9 eb f8 f2 91 c2 46 52 0f c0 e9 ef d5 e0 8b ae d4 8c e3 d5 d5 79 1c cf b3 68 75 8e e9 06 8d 87 28 f0 ce 9e 3e e8 1d 1c 7a 59 ec 8d e7 d1 6a 14 87 c9 04 64 a7 e1 c1 7d 51 76 75 0e bc 0f 1a 34 47 a1 f8 87 64 5e 28 8d d2 47 f1 e5 72 1e 87 93 68 79 f1 04 ad 31 ed 36 cd 20 fd c7 1e e8 0c d5 75 35 57 29 56 23 ec fc a6 d9 f1 d3 60 bd 4c c3 a9 7a 78 76 d6 6a be a1 85 07 d2 ca 7f 17 3c f0 ff 10 3c 78 db 7a bb 5d af 26 a0 e4 84 18 34 0b 66 61 da 6c 08 58 0d a2 0a 83 39 4c 97 d1 6a a5 b2 f4 e1 2c 5c 5e 50 d3 1c f8 60 Data Ascii: 0i1iJFKeVy}0M=D-'7h.Zt4 <KW4FRyhu(>zYjd}Qvu4Gd^(Grhy16 u5W)V#`Lzxvj<<xz]&4falX9Lj,\^P`
2024-11-21 02:42:17 UTC	1408	IN	Data Raw: a8 d8 55 bc 12 65 69 dc 1e ad 5b 75 f9 4d aa 37 d7 cc 59 bc aa 55 cb e7 d8 fc 62 c4 4f 62 95 12 a9 d9 9a 24 33 83 00 4d c4 bf 30 16 e6 1a ce c9 95 67 8c 64 78 91 08 78 78 da d8 67 ff a2 61 ac 05 bd d1 aa ea be 20 f6 0a 76 06 a1 a1 d6 dc 2f a1 42 b7 f9 ad 31 c1 be 4e 0a 1c 24 eb a5 07 9b 83 f6 a6 87 68 cf 9f 32 6f 95 c4 ef a3 89 b2 5e 81 83 99 4f 5d b0 b1 3a 98 f0 3b 76 24 d3 4a 9b 6e 82 c7 42 c3 1b ec a9 22 82 f5 7c c6 30 d1 ea a5 ec 28 7f fc e8 48 9a aa a7 fc f1 23 85 73 be 18 0c 9a da ad d4 c3 54 b7 0f fc 74 89 1f a1 31 1c 49 a7 5b a0 cd fb 21 21 af d4 2c 0b 34 7b df 6f 34 fa 0d 78 0b a4 61 8a 81 89 8a 6f 7f 6b 90 b5 8f 79 2b 90 61 cd 18 90 d5 40 ed 04 19 cd 94 05 99 31 37 4c 61 6c 7d 2f 9b b5 5f d1 1a 0b 38 d3 a5 58 b7 6f e6 d1 ee a4 80 e7 e2 05 2e 63 Data Ascii: Uei[uM7YUbOb$3M0gdxxxga v/B1N$h2o^O]:;v$JnB"\|0(H#sTt1I[!!,4{o4xaoky+a@17Lal}/_8Xo.c
2024-11-21 02:42:17 UTC	368	IN	Data Raw: ba a6 f5 56 0c d8 28 1a 47 38 8c d2 a2 c1 f1 df 0d 19 f5 e9 05 88 50 c3 58 67 d1 2f 25 99 90 72 89 b3 59 5e a2 e7 4b 21 9f 23 c6 0b b6 b2 95 e9 4e 03 2b 06 2a 52 58 cb 85 21 cd e4 5a 71 17 c1 e5 09 62 15 0b 58 ed bf 20 82 3f 57 04 5c 01 bd d4 c3 8a c1 22 7b 3e 89 12 64 f1 a5 b0 26 c0 9e f4 0f eb ca a9 14 38 ab f9 01 ab f9 41 56 b3 9e 83 b6 f3 08 bf 98 f5 1d 09 56 57 72 97 5b de 45 27 c8 37 06 95 18 21 5a a8 57 c9 23 9c b5 17 e0 9c 12 30 43 b6 6a d2 14 27 8a 43 d8 e9 0a bb 06 bf e1 a3 7c 5e e7 0c 53 35 68 f1 38 57 e4 63 72 27 da 8b 60 2c 1b 5a da 2b 42 92 49 c3 0d 3e f3 f4 a5 36 35 62 ed e3 c7 06 4d 02 ce 5c ac 6e 6e 0d cb b9 86 9f 9e 83 c9 2b 54 40 d2 12 91 c5 a1 c2 37 a0 c2 37 bf 37 15 78 17 7d 26 11 ea fb 1a 1a fc 8e 44 10 4f 44 78 fb 05 e7 94 4e 5e 99 Data Ascii: V(G8PXg/%rY^K!#N+*RX!ZqbX ?W\"{>d&8AVVWr[E'7!ZW#0Cj'C\|^S5h8Wcr'`,Z+BI>65bM\nn+T@777x}&DODxN^
2024-11-21 02:42:17 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a f9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 81 0d 0a 30 30 30 30 30 30 30 31 0d 0a 49 0d 0a 30 30 30 30 30 30 30 31 0d 0a c0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 41 0d 0a 30 30 30 30 30 30 30 31 0d 0a 68 0d 0a 30 30 30 30 30 30 30 31 0d 0a 98 0d 0a 30 30 30 30 66 66 38 0d 0a 08 67 31 92 4b a9 10 43 1a cd 8d 75 72 64 36 09 2f 87 8b c9 81 1b b7 f8 17 86 fc 97 ac 1c 32 cb d8 f0 0c 4b 0a 55 30 67 00 d9 bd 6f d3 b8 fc 27 05 2f 1c b9 5c 12 dc 5f 47 8b 0b 2f 4d c6 83 c6 2c cb 56 69 ff ee 5d 64 b4 24 b0 5d 82 8b 38 be 98 ab 70 85 60 0b b2 54 a0 1d 79 f1 77 45 3d 87 73 58 11 34 72 c9 3f b0 56 04 a3 7f a7 e8 a7 a1 5c d1 ef 12 cb 22 24 d0 08 28 b8 c3 3f 03 03 3f df 0e 03 94 fa 76 1b 0c 70 c0 4c 18 88 3f Data Ascii: 0000000100000001-0000000100000001I0000000100000001A00000001h000000010000ff8g1KCurd6/2KU0go'/\_G/M,Vi]d$]8p`TywE=sX4r?V\"$(??vpL?
2024-11-21 02:42:17 UTC	1408	IN	Data Raw: 8b 71 3e ba 74 4f 74 6f c4 46 2e a6 e5 84 75 d7 3c 80 65 b9 5e 8c 10 46 b2 97 ad 6b 69 54 1e 0f 02 c2 39 a7 75 36 20 24 c8 57 d8 9d 35 a7 b5 4e 23 18 28 f1 93 e8 03 ae ed f6 48 73 69 de 9d 21 2d 4e 67 2a 50 5b e3 2e 46 17 17 2a d1 fc 0d 4b 04 79 1d cd 9f 70 38 dc c7 41 27 2c 20 4e 1f 08 48 a4 6c 1b 3f e5 83 b9 69 0f 37 0d c6 03 15 ed 84 08 b7 70 13 ba 10 25 83 e2 56 40 15 08 03 e2 0d 96 8b 5e 1d dd f1 00 e8 05 fb c5 bd bc e8 dc 69 94 35 91 01 d1 da f2 7d 00 24 e1 51 ee 01 2b 73 35 71 50 c4 37 49 8c f4 77 13 44 4d 22 05 75 c3 a6 c0 f5 04 83 a9 05 10 66 d8 fd d9 04 74 38 c3 e2 38 eb 30 57 06 44 dc 07 49 12 5e e5 24 7b 93 bd dd de 3a 81 51 e7 45 42 be e2 30 eb c6 bb bd 24 df 25 e6 85 fb b1 30 9f 8d 2a b0 66 85 42 f0 35 9a 4f 60 88 bf e9 bc f5 97 48 c8 b6 7f Data Ascii: q>tOtoF.u<e^FkiT9u6 $W5N#(Hsi!-NgP[.FKyp8A', NHl?i7p%V@^i5}$Q+s5qP7IwDM"uft880WDI^${:QEB0$%0*fB5O`H
2024-11-21 02:42:17 UTC	1387	IN	Data Raw: 75 8b bf ac d1 2e 09 11 2c c9 b5 0b 84 85 23 3a 2a 0f 32 54 e4 f4 ef ac 48 1c 7d 67 95 45 ee b3 70 9a ab c9 22 70 33 01 cc 59 f9 cd 32 08 7b 1a a1 56 ed 27 88 84 a2 f0 e3 53 9d b4 0b 7f 1b 61 5e 7a 16 86 65 9a f8 a7 ee 3e d3 f7 24 f0 dc 21 5a e1 97 a6 04 ff b5 bc 3f 21 07 4d 9e 0f 7b 19 4f f4 63 9a 72 61 0b 81 74 37 33 b2 b4 bb 22 10 ab 4f 29 4a fa 25 24 0a 06 b9 7e 56 48 64 0b ff 4f ef b3 1a 4d 95 83 bc 7b 0b 40 8b 89 21 61 f2 22 b4 88 20 f7 cd ee 01 8d 4a e7 65 0d c3 d9 36 14 98 33 77 0d 63 cf 09 43 c8 e9 33 66 53 89 b1 b5 47 3a 69 e3 1d c3 0f d7 5b 0d bf b3 c1 04 16 ff 14 d8 0a 06 cd 75 a6 92 91 2f 74 e1 d0 98 00 da 7e 20 4b 80 6f 03 b2 a0 81 2b ce f7 98 9b 8d 28 1e 23 f8 a4 c2 45 c3 ff 09 ce b9 4a ef 4b 8c 6c 20 1b 03 be 6d 1f de 2a 76 0c 6b 69 c4 2c Data Ascii: u.,#:2TH}gEp"p3Y2{V'Sa^ze>$!Z?!M{Ocrat73"O)J%$~VHdOM{@!a" Je63wcC3fSG:i[u/t~ Ko+(#EJKl mvki,
2024-11-21 02:42:17 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a d2 0d 0a 30 30 30 30 66 63 62 0d 0a 76 5f 56 a0 f6 02 4e 70 90 41 af 17 10 5a f1 68 c6 ce 11 56 84 8e 4f e2 ad 67 23 60 6a 09 52 33 39 e4 13 dd 15 f3 72 51 e5 97 f1 8a a3 35 dd 68 63 95 5f 05 06 47 a6 98 07 68 8b b7 55 64 81 1a c5 42 46 77 05 7c 49 ae 20 d1 35 1d 5d 49 4c de 8f 48 62 2b ee ad 88 af 95 cd 56 fe b6 73 01 ad ad 2a 8a e7 f1 7a ca fc 62 2d 11 ad ec ad 15 46 ef 56 83 2b a0 5f c4 a2 b6 d6 7a d5 9a be 35 30 84 59 78 90 6d 9d 8c ee 22 a9 ef ed 63 2a 28 69 f3 7f 2d 80 d0 1c 96 3e 79 d6 da d6 75 cd 5f 19 c0 7a 03 46 04 57 fa 88 df 64 8c 38 c6 83 f6 d4 da 1c e5 4f fb 1e 12 24 30 a3 67 bc 01 ac 5c 00 f8 ef ff f2 f4 5d 78 07 86 e2 78 b0 27 e9 d8 8e 87 bd 06 16 c9 57 a1 63 9f e2 4b 3c dc 4f 18 b7 e3 75 e1 17 e7 8c 92 2f 64 Data Ascii: 000000010000fcbv_VNpAZhVOg#`jR39rQ5hc_GhUdBFw\|I 5]ILHb+Vszb-FV+_z50Yxm"c(i->yu_zFWd8O$0g\]xx'WcK<Ou/d
2024-11-21 02:42:17 UTC	1408	IN	Data Raw: 37 a0 5d b8 1c ff 88 c9 8f e1 4f 26 a3 e3 a9 59 9a 09 2c 6b b7 41 3b 06 84 a2 1e fd 94 10 50 1a 69 d4 99 a8 91 16 55 82 84 52 83 93 93 71 38 d5 0b b5 88 28 b5 99 1e 8c 8f 4e 34 eb 19 64 94 9a a8 e3 f0 28 d4 bb 47 23 a4 d4 c2 15 53 cc 11 3a 96 62 17 ed 8a 20 31 93 78 1b f5 0e b0 bd cc 2f 59 2c 0b 58 bb 3f b1 45 35 aa c4 f6 c4 e9 26 82 bf 49 84 e8 6f 43 b2 75 bc 33 94 d1 37 a8 36 7c ef 75 8c 18 5a 6c fe 7d 94 84 d3 cc f7 9e 2a 7c 65 2b 99 cc be f7 20 81 e9 ef e3 ad 65 33 8a 4c c9 43 db 63 da 7c e4 87 c8 b0 d2 23 db 5a e9 71 91 e0 fb 30 e1 43 c3 e8 c4 19 53 98 b4 4d 41 13 51 8e 89 ba f0 3d 2c 2f c4 57 f1 3a cb c3 4a 82 2e be f0 b7 be 0a 59 11 a2 25 29 8f 9a 01 aa 3f 4d ce 61 af 74 e0 60 5e 97 ec f2 d2 48 e6 88 0b 5b df a9 2a 24 24 74 03 a3 df 68 7e ed 84 42 Data Ascii: 7]O&Y,kA;PiURq8(N4d(G#S:b 1x/Y,X?E5&IoCu376\|uZl}\|e+ e3LCc\|#Zq0CSMAQ=,/W:J.Y%)?Mat`^H[$$th~B
2024-11-21 02:42:17 UTC	1251	IN	Data Raw: b1 52 1e d6 e7 3f 8d 4a 95 53 12 1e ba 0c ea 87 d6 57 01 8c 10 d3 32 87 61 47 43 67 f5 e5 16 57 ad ed 5f de a9 ab 69 42 0f 5d d0 d7 66 22 a4 9a a6 ed 11 36 2f 82 d3 d1 4a a5 9b ce 1f 37 79 02 85 fd fe 52 50 82 95 f9 16 0f 93 c4 78 6d 6c 25 64 32 df 30 8e 94 d9 09 e5 ec c3 51 d2 ac 64 6a f2 e5 7a 0e fd 4d ad 59 13 ba ba 26 74 b9 9a 08 ee 1a e0 a6 5e 56 da f7 84 df 4c 69 ae 96 3a 64 39 58 ee 31 f5 a2 78 73 3b 41 3b bc da a2 36 ad c8 61 b1 e8 cb dd e8 72 ab 82 86 75 3b 38 9a b7 d4 c7 31 45 b5 e7 6b e6 e4 cb 98 b9 25 7b 5c 01 5d 1a 98 83 9f 4e b0 4f 2d 7e 81 0e 22 ec 5b 68 cd 70 42 95 d6 a9 d9 2a 72 e2 a2 91 56 69 2d e5 ad 82 a6 b7 8d 04 a7 36 02 a3 5b 19 25 87 6f a1 9d 4b 3f 6d cf 51 cc c2 b5 05 28 50 c1 06 80 1c 7f f2 51 98 f3 37 ae c3 24 59 ad 75 26 85 da Data Ascii: R?JSW2aGCgW_iB]f"6/J7yRPxml%d20QdjzMY&t^VLi:d9X1xs;A;6aru;81Ek%{\]NO-~"[hpB*rVi-6[%oK?mQ(PQ7$Yu&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49790	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:16 UTC	648	OUT	GET /gui/70520.2084d2d63c64ac00d8ff.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.260360209.1732156933; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0
2024-11-21 02:42:17 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 51eeca0ff5a1210c59e6a94a4ed4aaf5 Content-Encoding: gzip Server: Google Frontend Date: Wed, 20 Nov 2024 23:11:46 GMT Expires: Thu, 20 Nov 2025 23:11:46 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 12631 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:17 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a b4 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 73 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 37 0d 0a 30 30 30 30 30 30 30 31 0d 0a 92 0d 0a 30 30 30 30 30 30 30 31 0d 0a fe 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7e 0d 0a 30 30 30 30 30 30 30 31 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001]00000001m00000001s00000001000000017000000010000000100000001~00000001
2024-11-21 02:42:17 UTC	1408	IN	Data Raw: 80 68 29 4d 95 77 72 08 a4 19 06 52 61 e5 3a e7 56 96 94 e4 de f6 96 1d 32 e9 29 29 e0 c0 36 98 ae c6 d8 c2 a6 e0 b9 e5 66 95 41 76 66 2b 48 63 1a be 0a 25 65 f0 74 79 93 4e a7 18 5a 4b 77 57 d7 39 6c d7 a2 41 97 57 33 b6 a7 8f 8f 9c f6 cb cd 66 35 5d 00 73 1b 5d 1e 07 9c c9 99 62 86 7c a6 44 4b 3e 4a e9 68 9a 7e 37 4d 27 c5 c3 1a 4b 64 ec f9 02 01 50 d1 a8 4b ec f9 55 55 60 df e3 07 af f0 4d 0a 01 91 e5 38 96 67 fc fb 34 1f 96 96 0b a6 4d 2e 70 62 22 3c b7 70 1e 2d d7 49 76 bb 1a 67 53 9d d2 e6 d1 d6 d5 e7 b6 c8 37 eb dd bb bd a4 c5 d9 ab 79 99 16 e3 e4 16 1b 6f 9f 5e eb a4 2c b1 c9 f6 18 0f 08 03 26 ff fc 7c 72 0e a6 f9 fd 6a 91 27 cc 6f 3b 13 57 77 da 7f 60 41 df e7 91 ba f7 c4 2c b3 72 b2 d7 9a 49 87 fd 07 e7 fa ed 35 30 ee b5 f7 a0 b0 c5 f2 87 bd 46 Data Ascii: h)MwrRa:V2))6fAvf+Hc%etyNZKwW9lAW3f5]s]b\|DK>Jh~7M'KdPKUU`M8g4M.pb"<p-IvgS7yo^,&\|rj'o;Ww`A,rI50F
2024-11-21 02:42:17 UTC	1408	IN	Data Raw: 98 cc b3 05 82 a1 8e 3d 54 f7 d3 88 44 5c ef 70 51 74 a6 b3 d2 0b 8b 74 b5 11 27 ba 92 56 1f 81 64 67 07 6e 26 2d 00 7b 66 f0 14 38 47 b1 52 02 a9 1e c2 d2 8a 35 82 b5 d9 64 5c 6e 20 51 9d bb 43 2b ab c5 74 0c fe 2c 9d 84 d0 0a e0 80 f2 d7 94 a5 19 34 ac 69 06 f1 68 83 34 4d ca 25 e8 d1 2c 2f 52 c4 e6 0a 18 7d b4 0d dc 09 a5 13 4d 2b b6 e0 20 93 57 45 f1 80 32 03 f9 f0 d8 37 01 ba 11 b7 d4 4d 12 8a 6b 4e e0 b7 6e ab a4 89 ed ae 5e 7e ea ae 83 73 ad 13 6c 99 6f c1 19 f8 30 e8 07 d6 11 4e 1e 9a 45 10 03 dd 92 77 94 0e 52 57 81 5a 30 b1 50 da 68 3d 36 3c ed d2 21 6e eb a4 9f 56 70 fc af 16 72 f0 f1 21 dc 53 9f ca da 2c 19 d0 34 db 50 da 78 91 53 5c 08 c1 54 1b a6 96 5a 98 90 9c 87 40 10 5a 0e 1b ad 2e c7 55 5e 77 44 43 b2 e0 ec aa b7 74 4b 4a 87 a6 87 bf 41 Data Ascii: =TD\pQtt'Vdgn&-{f8GR5d\n QC+t,4ih4M%,/R}M+ WE27MkNn^~slo0NEwRWZ0Ph=6<!nVpr!S,4PxS\TZ@Z.U^wDCtKJA
2024-11-21 02:42:17 UTC	471	IN	Data Raw: 37 14 5c e0 ad 0c 92 80 bd a6 88 6d 66 47 cc 5e 88 09 e4 15 c6 02 c4 5e 90 22 c0 4b ce 7a 41 fb 15 30 32 30 8b d0 e6 79 44 6c 76 26 19 22 46 b2 3f 76 9f 44 db 0f 03 71 81 10 95 2b 36 ac 12 8d 4a 42 2e 38 05 51 0e 33 9e b2 5c 68 29 67 45 be 34 1a 68 30 9b 92 bc 34 34 f0 13 04 7a af 11 e8 dd 63 7a b5 8b 13 91 ec 2c f2 29 24 21 9d ac e0 6c 0c 68 23 91 8f 52 ab 9b fd be a4 59 5c 3e 51 bc 2b 7c 82 42 ea 98 5b bd ea df 7b f2 18 df 28 90 56 1a 9c e2 48 6b 34 79 c7 5c 68 e7 0e fb 11 53 dc ea a6 a4 51 52 3a 9d c8 c5 f7 1c 07 36 d2 19 93 a1 18 1a e1 2f 6f e0 af 7a c7 75 f5 73 11 7a 10 48 02 d4 a8 5b c2 69 01 ee 21 05 ff 49 b3 d4 20 f2 1e 8c 69 47 eb 40 8c 6c 1c da 61 a7 6d 6a 03 74 01 52 de be 1c 8c fe 02 b4 22 03 28 fc e7 f0 e1 06 a5 17 ed 0b 50 9e 5d 19 4b 2e b7 Data Ascii: 7\mfG^^"KzA020yDlv&"F?vDq+6JB.8Q3\h)gE4h044zcz,)$!lh#RY\>Q+\|B[{(VHk4y\hSQR:6/ozuszH[i!I iG@lamjtR"(P]K.
2024-11-21 02:42:17 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 5a 0d 0a 30 30 30 30 30 30 30 31 0d 0a bd 0d 0a 30 30 30 30 30 30 30 31 0d 0a 39 0d 0a 30 30 30 30 30 30 30 31 0d 0a f9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 32 0d 0a 30 30 30 30 30 30 30 31 0d 0a 12 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7c 0d 0a 30 30 30 30 30 30 30 31 0d 0a a0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 12 0d 0a 30 30 30 30 30 30 30 31 0d 0a 35 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0b 0d 0a 30 30 31 0d 0a f0 0d 0a 63 64 38 0d 0a d3 7d b6 af 86 97 80 01 5f 74 e9 2a c0 47 62 be 34 b6 85 b9 cf aa b9 55 a6 fc b9 fc 49 6e 6d c9 65 3a 00 84 e3 54 2d 09 1b 28 8e a7 11 16 32 4b 7a 0d f1 e8 71 4e 85 06 bb 26 81 c7 5a ae 14 ea 7a a1 87 16 19 7b 59 12 98 Data Ascii: 00000001Z00000001000000019000000010000000120000000100000001\|0000000100000001>000000010000000100000001500000001001cd8}_t*Gb4UInme:T-(2KzqN&Zz{Y
2024-11-21 02:42:17 UTC	1408	IN	Data Raw: 08 34 4f 39 c0 f2 9e 72 97 35 03 a7 89 12 dc 47 67 39 ce 1d 5d 58 a7 cf 74 e0 32 0c 11 08 5d f2 73 80 8f 53 0b 0a 5c 5b db 7b 18 d2 f3 81 20 63 0f 70 f2 74 00 d9 a7 87 b4 45 6e 65 8e 0d bf 51 e3 54 a3 21 f5 35 c7 0e 0a 72 ad 77 80 f2 53 2b 94 9f 1c 14 a4 66 ef 00 65 d8 0a 65 08 28 9d 6f c4 89 08 be ce d7 d8 0e e4 a4 37 74 e1 92 9e 8f 8b 24 72 13 06 f7 b4 22 dc eb 4f c5 2d 7d a3 cb b3 82 f6 02 53 45 ef e8 90 5e 07 89 19 75 d3 5a 6c 22 72 e2 5a 6f b2 be 16 62 10 e2 a6 57 f5 50 43 22 90 58 bc f9 ac 9c a0 b9 b2 ee 65 58 e4 fc dc 5c 84 07 e9 79 d5 32 59 13 8f aa 23 da b5 04 2f 78 ae f1 e8 5d 39 81 1e fa ce 8f 2f 8f d5 a2 88 d0 fc 95 ab d8 43 cf 19 b8 24 0d 95 e7 6b 8f 10 54 9e db 5b 5c f1 c6 2a d8 f0 1e 2e 43 72 56 27 19 61 f4 ba 1d 8d 34 20 0a 49 06 fe 8b 75 Data Ascii: 4O9r5Gg9]Xt2]sS\[{ cptEneQT!5rwS+fee(o7t$r"O-}SE^uZl"rZobWPC"XeX\y2Y#/x]9/C$kT[\*.CrV'a4 Iu
2024-11-21 02:42:17 UTC	656	IN	Data Raw: f5 32 7d 7d c2 e2 4d 13 10 b6 c7 9e f9 2a 94 4d dd db f1 96 95 df 1e d3 9d 32 a4 85 06 f1 b5 11 8a a1 37 4f d5 e5 b4 93 7e e9 3f 33 6f a1 23 6f 02 cb 02 65 3d 56 85 28 3d c4 d6 ec c3 91 d4 85 9f a5 17 f8 57 f2 33 06 ae c5 70 57 d3 27 5b e8 7d 13 a8 7a 88 3a d1 15 9c 3d 94 0c df 9f ad 1b 2e f0 9d 47 b3 16 d4 99 cd 9a 4c b1 bd 66 d0 21 e4 14 8a 36 94 ff ce 19 63 cd 60 a1 8f da b5 d9 67 ac f6 51 7d 99 d7 13 7a 61 3f 9e 55 29 dc 07 a6 3c bd 2f 20 2f f0 0c 7f 0c 91 cb f6 01 c8 f1 12 9d 16 1b 82 89 d6 c0 96 ee 03 55 9f f1 17 42 df f0 a3 fe 31 a9 b6 54 4d e1 ef 64 71 c9 e5 4d 8e ef 9d b6 07 19 ec 4a 3b 99 a7 0d 14 54 f6 25 08 e0 71 6a fb 64 80 9d 7f a9 34 a7 fc 3d 01 73 cd df 13 88 49 80 6f 8a 20 44 8d f6 19 a4 ff e1 01 41 3c a4 cf ed e4 86 82 3b d1 52 79 35 fb Data Ascii: 2}}M*M27O~?3o#oe=V(=W3pW'[}z:=.GLf!6c`gQ}za?U)</ /UB1TMdqMJ;T%qjd4=sIo DA<;Ry5
2024-11-21 02:42:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49778	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:17 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=SgnCO7ldxLvL3Mw&MD=1Km4CzpZ HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-11-21 02:42:18 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 15939017-9702-4d10-bc20-c13c7f6d9b69 MS-RequestId: b5ca7e74-bfcc-466e-ade7-99331692568c MS-CV: hX3plys52UqronSo.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 21 Nov 2024 02:42:17 GMT Connection: close Content-Length: 24490
2024-11-21 02:42:18 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-11-21 02:42:18 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49796	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:18 UTC	511	OUT	GET /gui/47031.025a838d403cdd2d104e.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:18 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 87ba0c159f0a5cd2c914382d6bf6cdc7 Content-Encoding: gzip Server: Google Frontend Date: Wed, 20 Nov 2024 23:08:18 GMT Expires: Thu, 20 Nov 2025 23:08:18 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 12840 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:18 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 66 66 62 0d 0a 00 00 00 02 ff ec 5c 7b 77 d3 c6 b6 ff ff 7e 0a 45 a5 2c a9 c8 c2 79 12 6c 94 40 43 58 8b 96 16 48 c2 e9 ea ca c9 05 d9 1a c7 2a b2 e4 4a 72 1e 75 fc dd cf 6f ef 99 91 c6 b2 5d 42 4a b9 f7 ac d5 d2 05 f2 68 1e 7b f6 ec d9 ef 2d 7b 52 08 ab 28 f3 b8 5f da 5d a7 10 c9 c0 bf 14 bd 71 d8 ff 78 30 9c a4 1f 2f ca f7 93 f8 fd 28 8c d3 e0 4f de dd dc 9c 9e b9 fe 78 52 0c 9d d3 d3 ad 47 ed cd f5 33 6f ba b5 b3 be bd d3 71 84 57 7a b9 1b ec 4d 2f c2 dc 8a 83 dc d9 da 7d d4 de 72 bd 14 8f eb 3b 3b 5b db ae 97 e1 71 67 63 77 73 c3 f5 12 6a dd de dc Data Ascii: 00000001000000010000000100000001000000010000ffb\{w~E,yl@CXH*Jruo]BJh{-{R(_]qx0/(OxRG3oqWzM/}r;;[qgcwsj
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 7c df af 90 ec 7a e5 30 2e fc 11 e4 44 5b 3d 86 57 c1 7a 5b fd 48 b2 4b 91 eb 37 93 31 46 d7 ef 8a 52 8c 83 75 39 28 8a 0b 22 41 e2 89 b2 a1 18 66 97 ff 22 7e 45 6c 4e f5 11 03 91 bf 1b 47 40 2c f3 3e 9c 9e d5 1f 86 e9 39 18 c4 2b 5a 07 00 12 2e 85 a6 15 86 ec fd 5c 17 1c a3 02 77 5f 3f 68 ba 70 84 7c 37 3f 00 88 95 97 12 4c 43 ec cb c7 8e 00 b7 79 11 5f 89 c8 e1 49 70 dc f1 28 4c 8a 83 6c 92 96 ee cc 84 eb 1d 6d f9 cf e1 e2 2e 1a ae f0 4a c1 15 5e ad 84 8b 07 dc 11 ae 39 50 01 17 1f af a5 76 4e 07 52 f1 51 c7 f5 8b 71 12 97 8e 8d db ad 31 ba 41 58 50 f7 6a 5f 9c ae 9f a9 e7 4e 7b 86 99 52 dc 0b 11 1d 40 6a f4 a0 46 68 72 21 36 db 7c 23 0f 74 1e d3 12 fb 4c 30 8d d7 12 43 8c ea 09 e1 13 32 25 2f 4a 49 09 11 09 0a 26 4b bf d1 2a 27 21 26 7d 0c 1e 29 72 29 Data Ascii: \|z0.D[=Wz[HK71FRu9("Af"~ElNG@,>9+Z.\w_?hp\|7?LCy_Ip(Llm.J^9PvNRQq1AXPj_N{R@jFhr!6\|#tL0C2%/JI&K*'!&})r)
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 8d 57 0b e4 56 8d af a4 55 73 74 f5 62 f5 58 5a 40 4a eb e6 e0 fa cd ea d1 5a 8a 35 c7 ea f6 6a e4 45 a0 2f 49 5f 1a 8a d2 6a c6 ee a3 49 98 b4 a4 c1 28 6d 52 9a cb 9d 79 bb bb 1b 5b 9b 46 38 22 f7 e1 b6 f1 a6 47 1d 07 c1 89 de cc 65 a3 78 75 7c e2 f1 ce e3 dd 47 32 3e f1 68 bd bd 0e e5 9c e2 13 8f 36 d6 37 60 92 37 02 14 de 40 86 28 c8 0b d5 f3 fe 71 52 7e 09 27 e5 9a 76 b3 92 ef 44 f8 47 cf 9e bf 7c 4d da 66 14 67 b6 27 fc 57 2f 8f 4f 02 3b 89 8b d2 9e 39 3d 08 9a 5e 30 85 e9 a5 7c 9b 2c 10 2b c7 66 e2 3f bf ad 3f 53 33 19 8a b1 f4 73 81 db 7c c4 76 c6 51 96 95 95 c6 0e 65 33 2e 94 1a ff 8a ec 05 02 51 45 36 84 a9 24 14 80 ab 08 06 0d 25 81 94 a2 16 ab 0d da 9e 30 a4 3d e2 0a 95 70 57 4b bc 1e 93 ae 7f 94 5d 72 e4 63 95 7d 33 f8 30 a7 d5 f3 22 fd a1 80 Data Ascii: WVUstbXZ@JZ5jE/I_jI(mRy[F8"Gexu\|G2>h67`7@(qR~'vDG\|Mfg'W/O;9=^0\|,+f??S3s\|vQe3.QE6$%0=pWK]rc}30"
2024-11-21 02:42:18 UTC	292	IN	Data Raw: 36 8f 2b 36 aa c8 01 80 90 b2 53 25 62 26 c0 1c 61 cc 03 06 e6 11 83 25 10 0a 46 fe 3e 30 63 2c 40 59 fc c9 cd 8d d4 f3 75 d2 fe cd 8d 7e a2 ec 6d 95 ef 0f aa 0f 55 a2 7e 36 c3 7f 7a 12 4b d2 c8 df 94 d5 5d ad f2 b3 79 e9 55 06 f3 47 71 5d c0 b7 4e 86 a5 6a 41 ee a2 91 b9 2d cb 31 0a 55 69 b1 3c bb 5b f5 a1 69 40 d7 a8 94 88 95 5b ca 71 f4 da 48 6d d2 ee fb a5 cb 18 09 e2 94 51 05 cb 02 69 ff 9c 3a 8f 88 03 b4 6e ae b3 f0 c3 f1 38 b9 e6 94 4a d8 e6 5c 9a 82 84 55 5d b3 f2 3d 85 08 e0 61 e7 9c f7 32 40 01 c8 93 2a 95 5a e5 d2 76 4b e4 bd b3 2d 2d 4b 52 d6 ea 8c f6 d3 f2 6c bf ea 8e 1f 1d dc b1 f2 db 8d fd 9f eb 0a 11 0f d5 1c 3e 16 38 0c 51 ce 31 b7 b3 df 09 b1 5e 8e 61 b0 c0 dc ce 27 76 58 ec ab 0e 73 d9 e3 b1 c0 39 a8 42 8f 95 d9 f3 05 0a 1a dc 8e 01 d3 Data Ascii: 6+6S%b&a%F>0c,@Yu~mU~6zK]yUGq]NjA-1Ui<[i@[qHmQi:n8J\U]=a2@*ZvK--KRl>8Q1^a'vXs9B
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 30 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 73 0d 0a 30 30 30 30 30 30 30 31 0d 0a f9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8c 0d 0a 30 30 30 30 30 30 30 31 0d 0a cb 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1d 0d 0a 30 30 30 30 30 30 30 31 0d 0a ea 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 71 0d 0a 30 30 30 30 30 30 30 31 0d 0a 73 0d 0a 30 30 30 30 30 30 30 31 0d 0a b3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 56 0d 0a 30 30 30 30 30 30 30 31 0d 0a 55 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a c5 0d 0a 30 30 30 30 30 30 31 0d 0a e4 0d 0a 39 66 34 0d 0a ab b2 9f 32 Data Ascii: 0000000100000000100000001s000000010000000100000001000000010000000100000001J0000000100000001q00000001s0000000100000001V00000001U00000001000000010000000100000019f42
2024-11-21 02:42:18 UTC	1393	IN	Data Raw: 26 55 62 49 5f 53 4c e9 ae a4 f3 2d e9 fa ca 10 2b ba 2b ab 78 4b fa ce 71 6c dd 59 6a 7e 4b 7a cf 73 19 dd 5d 29 84 4b fa 37 b8 ea 6c 66 1e 76 55 f2 0b 62 03 33 82 0d 43 a2 99 09 91 71 04 df 01 42 89 74 34 b0 22 82 77 28 71 64 ef 0b 52 2a c9 18 c3 5b 27 f6 0b 38 a2 d6 e0 34 45 86 a2 a3 3e 34 d1 d5 85 ad c8 a4 95 06 1a 9c 81 25 f9 08 9e e1 9b 16 31 5c 00 4c f1 ac b9 21 01 0e d3 b5 c1 0e 53 25 4e c9 8f 78 1a 9f e1 b7 4e 27 a2 12 6b 69 b7 62 05 32 74 aa 0f 54 c4 3e 95 d1 d6 ee 2a 7f 00 bd 42 b2 59 ac b8 4c 53 34 4a 6e 95 d4 25 4b 7c ad 54 96 b7 a2 fd 35 90 16 7c 60 11 83 28 75 20 ac 8b ed 69 90 16 a7 59 ec af e6 82 89 20 c3 da fc cf 19 dd cd 0c 1a bb 2c b0 ad 54 50 13 27 4a 67 45 81 ec 5b 5f 12 02 2a 69 8d 44 41 25 21 0c 57 0a c5 dc 33 b5 d0 59 70 0a a5 b1 Data Ascii: &UbI_SL-++xKqlYj~Kzs])K7lfvUb3CqBt4"w(qdR['84E>4%1\L!S%NxN'kib2tT>BYLS4Jn%K\|T5\|`(u iY ,TP'JgE[_*iDA%!W3Yp
2024-11-21 02:42:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49800	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:18 UTC	511	OUT	GET /gui/30592.64f38a11064ff2dd4b23.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:18 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 0b79f9f119cae19fc93fe41b3401b0f8 Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 17:50:42 GMT Expires: Wed, 19 Nov 2025 17:50:42 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 118296 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:18 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 31 0d 0a 00 0d 0a 30 66 66 38 0d 0a 02 ff ec 7d 6b 77 db 46 d2 e6 f7 fd 15 30 93 38 a4 03 c2 24 75 27 4d 2b 8e ed 39 f1 79 9d 49 d6 97 9c 9d d5 68 65 90 04 25 c4 14 c1 01 40 5d 42 f1 bf ef 53 97 6e 34 40 52 92 93 cc 7b 66 f7 28 9e b1 a5 be 54 77 57 57 57 d7 ad 0b b5 79 16 79 59 9e c6 c3 bc d6 ab 67 d1 64 1c 5c 46 83 59 38 fc fc f2 6c 3e fd 7c 91 9f cc e3 93 f3 30 9e f6 6f a9 bb b9 39 3a 6e 04 b3 79 76 56 3f 3a da 6a ed 1c 74 fc dd dd ce 6e c7 df 3f d8 df 6f f9 7b ed ad ed Data Ascii: 000000010000000100000001000000010000000100000001000000010000010ff8}kwF08$u'M+9yIhe%@]BSn4@R{f(TwWWWyyYgd\FY8l>\|0o9:nyvV?:jtn?o{
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 1f 9e 11 ee 30 2d 1c 83 7e b4 c4 e2 31 9d eb 85 4e f1 11 16 ae 2b 0a 64 06 cc 60 40 bc cc 3f ea 0d 5f 67 39 a5 59 4e 0d c2 2d 18 2c 63 d0 c8 cf 40 0e 5e bc c4 99 67 a6 13 2e b1 1d d8 81 ea 86 a0 b1 6c 63 8d ee 98 e9 69 c1 2d 23 b3 91 21 77 64 c6 9e f6 17 cb 20 4f e4 a4 1a 24 06 d9 24 1e 46 f5 7d bf d9 36 3c ae 26 33 04 b0 7e 8a 5d 0c f8 64 a5 f3 21 76 10 6b 49 c1 4d 9d 92 60 1a 9e 03 59 b5 9f c2 19 77 b8 b9 a9 bd 8f 72 fe f1 50 88 6b 0c 6a c6 34 bb b5 17 e6 f2 d0 86 4f ff 4f fd b0 fb 31 be 79 d3 98 e6 f8 69 ff a6 bd 7b b3 d5 69 e0 c7 97 93 f0 7c 16 8d 1a 02 e1 eb a7 41 1e 65 39 f6 f5 50 56 d3 15 7e b2 8a 94 c6 42 30 37 8d 2e bd 0f e0 3f af 71 ac d2 7a ed cd 14 5b 0a 0e 14 e6 79 74 3e cb bd 3c f1 46 00 48 4b 9a a7 91 37 4d a6 4d 26 c9 c1 24 f2 62 70 91 70 Data Ascii: 0-~1N+d`@?_g9YN-,c@^g.lci-#!wd O$$F}6<&3~]d!vkIM`YwrPkj4OO1yi{i\|Ae9PV~B07.?qz[yt><FHK7MM&$bpp
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 0a 77 dd cc dc 61 67 14 3d 9d db 19 d2 59 9e 54 d9 87 5a c9 bc fc 19 a9 a3 b5 49 72 19 a5 a4 51 62 1f cd e4 20 6e 7d 9c e9 af 2e 26 69 b1 50 50 e7 33 48 db d5 2e 2a a2 69 2f 67 fb 68 fd 8d 65 45 cc c4 24 36 df 0d a4 7a 45 3d 22 2a 55 ed fa 75 15 28 dd 2d 84 36 2f 7a 2c cd fd 50 7e ec 1a 34 5a 54 13 6d c8 f9 93 2d 5f b9 35 a5 52 ee 68 17 bc 61 7c 74 ed 9c 0c c9 a2 f5 4b 49 06 c7 29 26 fe 1a b1 6a d9 d3 f9 55 4e 63 90 9d c5 63 9c f7 1e 4e 3c 9b d7 a0 92 ca e5 ed 62 b5 97 c3 a6 0a bc dd c2 a5 85 6c dc e9 81 a2 1c 1a 3e 8a 54 c3 a9 a0 b9 b1 e4 2d 55 64 7f 64 49 1f c6 c2 92 bc a6 ab fb 60 b4 1e 32 a4 ca 6c 75 51 2b da ca 33 19 d9 5d 83 f0 72 ab 39 f9 b9 34 31 5d df e2 54 bd c1 4e e8 75 e8 50 87 ca 32 66 70 b6 fb a6 aa 85 d7 41 6c 6c 5a c2 b1 3a 54 aa eb 2a c1 Data Ascii: wag=YTZIrQb n}.&iPP3H.i/gheE$6zE="Uu(-6/z,P~4ZTm-_5Rha\|tKI)&jUNccN<bl>T-UddI`2luQ+3]r941]TNuP2fpAllZ:T*
2024-11-21 02:42:18 UTC	324	IN	Data Raw: 46 db 73 fc b8 bb bb d5 da 95 eb 75 ec 5f f8 d7 fe a5 7f e5 7f f6 4f fc f7 fe 6b ff a5 ff b5 ff c6 ff e0 bf f0 7f f6 7f f7 7f f3 df fa ef fc 57 fe 2f fe af fe 0f c5 35 fc a3 ff f1 e1 22 fe 0b 2e e2 b2 8f 3b f8 71 0e 82 9c 9e e2 0a 91 1f e0 e8 0e de cf 07 d0 07 11 c5 07 2f 68 d6 af 65 ee af f0 7a ff 08 d6 fc a3 78 bd c1 2c 10 10 f1 53 7f a1 bd 4f d2 39 22 dc a2 bc 1b 06 d7 61 1a 12 ef c5 99 07 4f cb 4f 42 ba 34 51 ce ff 72 05 98 21 5d a5 18 04 c5 c5 2f 6e 27 8a fe ea 0e 02 13 04 06 4f 4d 9e 26 34 d6 c9 6f c9 00 bd ec ef d4 69 d9 93 30 bc 7f d9 40 bc f9 fd 05 0c 98 6d e1 fd a1 20 a2 d2 2d 66 7f e7 90 35 91 35 54 91 1c 25 f9 1b 38 bb 21 dd 27 a9 6d 46 2c e2 25 5d b5 b8 77 6d 21 9c f4 97 a6 50 c4 87 17 f0 ec 9b 91 c0 0f 80 b3 77 c9 a5 b5 89 13 bf 70 7f 8f c7 Data Ascii: Fsu_OkW/5".;q/hezx,SO9"aOOB4Qr!]/n'OM&4oi0@m -f55T%8!'mF,%]wm!Pwp
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 3b 0d 0a 30 30 30 30 30 30 30 31 0d 0a ba 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a 58 0d 0a 30 30 30 30 30 30 30 31 0d 0a 60 0d 0a 30 30 30 30 30 30 30 31 0d 0a de 0d 0a 30 30 30 30 30 30 30 31 0d 0a e1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a d1 0d 0a 30 30 30 30 30 30 30 31 0d 0a ae 0d 0a 30 30 30 30 30 30 30 31 0d 0a b7 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 51 0d 0a 30 30 30 30 30 30 30 31 0d 0a b5 0d 0a 30 30 30 30 30 30 30 31 0d 0a 11 0d 0a 30 30 30 30 66 66 31 0d 0a f9 3c 71 35 b0 d7 33 63 c3 07 cc 7d 12 26 55 6b 91 4d 97 e7 86 28 83 10 e4 26 9e 7f 6e 4c 1b f0 63 14 22 9c a7 08 b4 14 2c 9d 4c c8 65 79 8b 9c b8 12 8f Data Ascii: 00000001;000000010000000100000001X00000001`00000001000000010000000100000001000000010000000100000001{00000001Q00000001000000010000ff1<q53c}&UkM(&nLc",Ley
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: f9 14 80 fe 09 0f 74 91 95 b0 e4 ec e6 d7 c0 c7 d7 55 46 95 cd cf cf c3 f4 ba b2 cc 94 15 0e 38 7d a6 9f 9b 97 69 c8 11 2d 66 9d a5 5d c6 46 c2 95 98 27 d3 9a 47 92 7c 33 17 b1 bb 09 2e cd e1 cc fd 5a 4a 91 d3 95 5a 12 91 f5 80 79 df 9f 27 78 c6 88 c8 c4 d4 1c 39 63 7c 15 c0 5e 0c a1 cb 0b 06 11 ee ad 88 c4 79 52 ba 6d e7 21 de 97 7c 36 bf c9 0c 0a d8 30 63 ca 49 17 48 30 3e b2 fd d8 fc 23 d7 ac b3 9c 3c 3c cd d6 10 a4 95 3e 04 e3 a2 8c bd 05 6a c0 32 81 de 29 a2 f8 a0 5d d1 2b a5 86 44 41 0c 93 d9 b5 a3 7f 38 2a 97 96 fa 13 e1 19 53 e8 2d b3 6b 35 3d 40 9e 39 c9 10 44 43 6b fc 90 bc 9c c4 b3 41 12 a6 23 bd cb a4 90 01 db 2a c3 b2 65 5e b0 9f c8 49 2e 17 7f c0 a2 c0 b5 fd da a8 89 a7 28 11 1e 89 20 e8 90 5e c2 91 59 81 a4 4e 91 73 59 2a 0f ac bd e1 30 32 Data Ascii: tUF8}i-f]F'G\|3.ZJZy'x9c\|^yRm!\|60cIH0>#<<>j2)]+DA8S-k5=@9DCkA#e^I.( ^YNsY*02
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 87 2a 19 c5 4a 24 8a 1c 37 c8 2b 31 28 59 21 c5 ba 62 e8 99 4d 3f 85 b1 8a c2 74 10 c0 63 7c d1 4d 5a 3e 97 09 c5 78 a4 3f 21 98 f9 b2 19 ce f3 a4 46 29 4b 04 10 62 84 61 d0 1b fd 6c 6c ff 38 71 bc 6f e5 61 b4 95 87 5b 14 a7 2a 23 f7 cd b9 74 6c 52 91 83 d0 5f 81 b1 5f 99 99 40 11 d6 a0 1d b5 c9 28 e7 e4 7f 08 9f 36 b0 47 b4 68 60 77 18 5c 1e 90 a2 44 91 f3 3f a7 af f8 d9 30 14 4d e2 fd 9b 2a 29 e8 be c6 4e d6 8f b7 87 df c0 eb ce e9 7a d8 22 7b ec ff cb 8d c4 51 d7 73 11 0b b3 09 56 11 89 53 ea 2f a7 ee ee ee 26 be f7 96 a9 a8 75 f5 2f 81 65 b5 ef 7b 43 a3 18 a3 d2 ca 5c a9 eb 8f 43 71 5d 18 b7 41 a9 8e be d6 4b b1 0a 80 23 1a 91 96 e7 ab b2 ed 9f 62 92 4a 8b a9 54 9b 44 3f 4b 7f ef e0 60 67 4d d4 d2 ff e2 58 a5 cb 7b c6 2a 21 2a 69 bb 75 70 b0 4b c1 48 Data Ascii: J$7+1(Y!bM?tc\|MZ>x?!F)Kball8qoa[#tlR__@(6Gh`w\D?0M)Nz"{QsVS/&u/e{C\Cq]AK#bJTD?K`gMX{!*iupKH
2024-11-21 02:42:18 UTC	63	IN	Data Raw: 5e e8 c3 90 c5 28 b1 53 1a e0 a6 41 2a d6 9c c4 3b 84 3e b0 44 87 24 23 b9 bc 30 30 c1 84 90 e5 8a 84 ab 69 c0 19 ef 8c b0 96 06 63 88 6e bc 2d 92 66 e2 5d 72 69 03 67 35 5f 85 a1 9f 0d 0a Data Ascii: ^(SA*;>D$#00icn-f]rig5_
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a f7 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 16 0d 0a 30 30 30 30 30 30 30 31 0d 0a d0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 21 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9e 0d 0a 30 30 30 30 30 30 30 31 0d 0a c2 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 87 0d 0a 30 30 30 30 30 30 30 31 0d 0a b0 0d 0a 30 30 66 66 36 0d 0a 01 7d 60 62 08 07 f9 3e 6e 9b 2f 3c fb 3c 5f d8 75 4b f3 35 f7 5a 24 f3 ee d9 30 48 58 6c cd 22 9c 25 e4 e5 25 e4 7f 68 09 94 87 a8 44 8d 66 95 ba 95 1b 89 55 d0 64 5a 17 38 59 ac 85 26 63 38 bb 67 8d 18 64 45 31 8b 23 2f 35 5d a0 24 23 01 97 0c e9 0e c6 44 cd f1 cc 2d c5 23 37 49 a1 03 be 04 30 38 8c 66 4a 3c 45 e8 d3 85 dc 60 42 4e 70 0c 44 79 af 17 Data Ascii: 0000000100000001z000000010000000100000001!000000010000000100000001j000000010000000100ff6}`b>n/<<_uK5Z$0HXl"%%hDfUdZ8Y&c8gdE1#/5]$#D-#7I08fJ<E`BNpDy
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 19 bf 0a a6 38 ad 04 ee 58 aa 27 71 aa a9 5f 09 a3 1c 22 e4 f3 8c b8 06 71 f0 19 75 9d 25 31 04 a4 14 65 d0 8d c3 ee 19 45 72 ad 87 4d 81 05 88 2d ff 43 80 e1 51 a8 1d c3 3c 10 bc c0 43 31 9f 73 de fc 95 d8 78 72 24 72 ee b1 cc 9c ac 2e b8 ce 65 b5 de a3 18 af 70 53 7c c8 26 97 45 aa da 47 79 85 d6 2f 94 9e 56 bb 48 9c 21 77 02 2e d3 ae b7 33 bb f2 5a 8c 3d 3b 02 82 be ae b8 44 5f 69 cb 53 ec ae d7 46 d3 2c a1 0f ed 38 7b 43 1f d0 71 01 e3 f1 cc e9 54 94 9e ae 27 17 ff ca 14 75 47 c8 e2 14 49 92 24 8a 84 95 89 4b 28 4d d7 cb 42 7c bb 87 c2 d9 90 e2 8f f7 d1 59 a2 e9 4f 52 ba 3e 7e ab 20 29 9e e2 e1 5c 24 c9 b1 6e e9 3e 69 6a ac 5f 35 8c 77 41 84 86 2c 1e 43 e8 d2 58 f8 0a 08 6f ed dc f1 74 bb 99 c5 bf 33 5e 55 ce 05 f5 12 2e 41 87 01 f6 86 53 90 65 32 57 Data Ascii: 8X'q_"qu%1eErM-CQ<C1sxr$r.epS\|&EGy/VH!w.3Z=;D_iSF,8{CqT'uGI$K(MB\|YOR>~ )\$n>ij_5wA,CXot3^U.ASe2W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49797	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:18 UTC	690	OUT	GET /gui/75884.d7767dd34ca82b896517.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:18 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: c3a17a8455e1bee3f033bad813887899 Content-Encoding: gzip Server: Google Frontend Date: Wed, 20 Nov 2024 23:11:09 GMT Expires: Thu, 20 Nov 2025 23:11:09 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 12669 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:18 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a cc 0d 0a 30 30 30 30 66 66 35 0d 0a 5c 7b 77 e2 46 b2 ff ff 7e 0a 85 64 67 21 47 92 01 1b 1b f0 e0 89 c7 33 93 78 33 8f ac ed d9 73 b2 b3 3e 44 48 0d 28 16 12 91 84 1f 61 f8 ee f7 57 d5 dd a2 25 c0 33 79 dd bd e3 c4 86 7e 56 d7 bb aa 4b aa 2d 32 61 65 79 1a fa 79 ed b8 9e 89 68 ec de 89 d1 dc f3 6f ce a6 8b f8 e6 36 1f 2e c2 e1 cc 0b e3 c1 23 Data Ascii: 00000001000000010000000100000001000000010000000100000001000000010000000100000001000000010000ff5\{wF~dg!G3x3s>DH(aW%3y~VK-2aeyyho6.#
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 49 fe 8a 38 00 a7 22 1c e6 c0 79 32 27 5e f7 26 20 0f f4 03 78 d5 9d a7 e2 16 c7 7b 21 c6 de 22 ca d1 04 81 8f eb 53 f7 df 5d 52 01 17 22 08 53 88 34 2d 51 93 0b d7 6c ee 04 e1 5f 24 8b 51 04 b0 fc 24 10 12 4f 68 84 9a ab 0d 47 91 17 df d4 1a ab 14 72 23 d2 0b 31 4f d2 fc 75 18 df 14 6c 60 72 9b e6 53 66 85 69 3e 8b 1a f5 c9 c7 8f f5 c9 e0 1f 3f 3d f5 ac 69 2a c6 83 da 57 cb e6 aa 06 49 81 38 0e 00 07 a8 1c 78 e9 83 95 f2 ca 4e 84 a5 6b 56 18 b0 68 38 a5 c6 6f 20 5d fe 8d 5a e0 c4 a2 75 ac a7 7b de c9 4f 50 d7 7f e4 8c 4c de 54 fc b2 10 19 90 44 e7 7b 07 bc 85 f1 44 ca 30 21 a2 6f 1c e8 01 07 7a f8 ad 07 fa 4b 61 df c6 25 6b d8 15 e5 2e 17 23 e8 22 29 bf ac 66 6c f1 88 a2 31 ce 3b c4 79 87 38 af f5 34 08 6f 15 da 15 ee b9 01 e8 df ae 62 62 91 df 25 e9 cd Data Ascii: I8"y2'^& x{!"S]R"S4-Ql_$Q$OhGr#1Oul`rSfi>?=i*WI8xNkVh8o ]Zu{OPLTD{D0!ozKa%k.#")fl1;y84obb%
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 36 0f 2f e1 ed a9 c4 97 3c 62 e3 38 54 3c 5f b6 69 df 5e 9d 5b 3c 18 c6 cd c7 50 41 8e 62 e4 64 34 bf 64 d9 2e c1 f7 97 da b2 9d 3c 9d e4 a1 1c 64 b9 48 7c 21 6a a3 dc bd 0e e5 9f ee 15 dd b0 fb 3a f8 0e 35 d2 cb 10 bc 10 39 cc 16 32 08 19 40 08 8a 2f 96 01 cd ba b5 04 d2 0b 80 f4 a2 00 49 e7 0f d6 83 1d 24 f3 c3 04 fe 6f ee 21 35 4d 86 05 ba bd d8 40 b7 28 e3 08 ef 1b 07 4f d2 6c 8b 77 2c b9 79 9e cc 65 be 62 bd 86 b2 15 aa c7 c8 85 8c 12 a4 4a 66 64 8b 55 5a 65 3d 47 42 65 38 ce ac 6c 86 a0 db 15 01 fa 32 9e 40 dd 65 f5 e5 6a 93 cf 3c c8 da 43 16 66 43 4a 62 67 9b 1a 52 5d 95 54 52 e3 cc a2 95 a9 1f 3f ca bc 38 b9 57 cf e4 c7 7e 0e 1f 10 19 c9 10 89 19 ed 92 92 73 f2 83 3c b6 26 9e f2 da 81 7a 86 bb 4c cb 4b c0 b5 20 3a 52 3a 1b f8 44 9e 89 35 a2 a4 65 Data Ascii: 6/<b8T<_i^[<PAbd4d.<dH\|!j:592@/I$o!5M@(Olw,yebJfdUZe=GBe8l2@ej<CfCJbgR]TR?8W~s<&zLK :R:D5e
2024-11-21 02:42:18 UTC	364	IN	Data Raw: 40 54 e8 37 a8 dd 85 41 3e ed c3 09 9f df 63 fc 15 5d 9b 9e 27 67 16 78 12 26 22 b3 7e 3c bd 38 b5 52 10 de 7a 3a 52 d7 10 b0 fd b4 23 d8 09 f7 a8 5c 88 58 ee a4 d1 60 13 17 e6 49 fa 1b 85 5d 55 c8 97 b9 13 1c 45 f7 97 89 c2 ad d0 6f 74 f1 b6 4c dc e9 01 dc 6c dc 5e d2 ad 9d fe 54 cf dc 7f bc 77 cf df 9d 0d 2f af 2e 5e 9e be b1 33 77 f8 dc 7d 75 fe fa ea e5 c5 f0 f9 8f f8 7a 7e ee 5e be 7b 7f 71 f6 72 78 f6 ee f5 fb 37 6f 87 17 ef 5f bf bc 7c 79 35 7c 7b fa e6 25 fa a3 6f a9 14 52 e7 74 36 54 52 c6 3c 8e c4 3b f9 9b f5 9f be 5a 8a d5 4f f6 c2 7d 7b e7 7e b7 40 59 5f 3c 69 d4 e1 ea 52 3e f6 c1 4b 3d f2 7c 21 0d 9c 21 fd 73 21 fe bd e0 e6 db c1 cd 25 52 b7 54 11 6e 2d 36 a4 84 7f 12 4b 79 7f 21 40 f1 48 63 a4 86 1a 71 42 c3 50 11 bb 86 22 63 46 07 a7 a7 af Data Ascii: @T7A>c]'gx&"~<8Rz:R#\X`I]UEotLl^Tw/.^3w}uz~^{qrx7o_\|y5\|{%oRt6TR<;ZO}{~@Y_<iR>K=\|!!s!%RTn-6Ky!@HcqBP"cF
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 36 0d 0a 30 30 30 30 30 30 30 31 0d 0a a5 0d 0a 30 30 30 30 30 30 30 31 0d 0a ce 0d 0a 30 30 30 30 30 30 30 31 0d 0a b6 0d 0a 30 30 64 30 62 0d 0a ee a6 a1 3f b5 1e 92 05 6a ad 23 04 cf 5a c4 d6 9e 6b 59 c2 20 44 05 ca b5 79 28 55 88 ae 61 a9 d9 54 52 d4 c0 ef c8 43 60 8e 42 53 fe 8b ba 58 6a 56 06 e0 2c 99 cd 34 3f 14 c5 df 9b 16 e0 47 50 eb 47 6d 01 d6 1a 8b 4b fd 1e d3 78 ff 17 ca 9e 34 5f f9 e6 b7 14 c5 91 c2 2a d4 92 d2 5e f4 47 bb 5b 9f 56 14 90 3c c4 e5 aa 1c 4e aa 11 b2 ea df 2d 66 5e 1c fe 0a b3 89 47 14 80 d2 d2 bd 83 29 61 cf b9 9e 10 d8 a5 51 f8 a5 c8 c0 df 92 67 74 8f 17 c7 d0 85 22 78 8b 40 2c 23 b1 ea cb 54 35 2a 81 cd 1c 5e 45 ae 42 3c 56 40 95 e4 ac 48 c1 7b 54 e8 6f ba ae bf 80 66 bf fc 77 25 6c 8b 29 59 c3 Data Ascii: 00000001600000001000000010000000100d0b?j#ZkY Dy(UaTRC`BSXjV,4?GPGmKx4_^G[V<N-f^G)aQgt"x@,#T5^EB<V@H{Tofw%l)Y
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 86 2a d6 25 da 2c 3c ee 58 b3 ad 8b 04 99 82 44 ff c5 33 41 e3 dc b6 be 13 d1 ad c0 65 ab 67 5b a7 69 e8 45 b6 b5 5e 45 6e c9 4b 23 42 4d 94 c3 a3 57 a6 3b 2b b5 72 d1 2b 67 4c 52 2f 08 e1 7f f7 d9 ef f0 52 47 37 d4 5b 5d 10 65 62 5b 38 9e 57 d7 27 53 67 6c ba 2d 3c 12 be bd 0b 5e b6 b4 92 54 ef c8 00 8d bd 59 18 c1 92 a0 32 ad ce 5d 15 0c 6c 4c c8 10 27 f6 5b a9 98 55 57 ba 53 6e 11 44 df e8 2a 79 4c 2d 57 db 37 da 1f 3e 6a 42 2a 17 9e 02 4c b0 31 87 3b 24 71 f6 a1 52 49 01 1e 1c 18 fd 23 d2 de 85 25 e4 04 2c c4 63 17 a9 b5 4a 29 f6 2b 54 53 b9 67 0b 37 ac b5 86 86 75 ff 70 df 3f d0 2a b4 10 2b 03 e0 ce 81 6d 1d 82 9f 8e 94 25 5c 2f 21 a1 ee 8d bd f1 48 9e c5 ec 52 d0 1f c0 18 b4 3b 98 de ee 28 97 44 67 96 0b e8 f1 46 01 bf ab b0 51 ee 94 6b f4 ba b0 27 Data Ascii: %,<XD3Aeg[iE^EnK#BMW;+r+gLR/RG7[]eb[8W'Sgl-<^TY2]lL'[UWSnDyL-W7>jBL1;$qRI#%,cJ)+TSg7up?+m%\/!HR;(DgFQk'
2024-11-21 02:42:18 UTC	584	IN	Data Raw: e0 8b 29 9b 50 07 05 ba 77 4b 73 a6 db 6c 95 36 36 07 df 79 b7 62 49 c9 fd 82 7b 67 5e 86 2b 6e f5 42 13 30 3d 25 fe 9b 7f 83 59 df d6 bc 5a b9 6c 16 55 ce 44 99 e7 8b 6f 9f 9f d2 ab c1 64 f8 ab f3 29 30 da 8f da 66 83 7b 8e 35 7f 57 6c a2 72 bb 3e 7f 7d 4e 85 b3 fe 37 bd 00 73 a7 bf 7c 87 32 86 a4 e5 b7 4b 58 93 f6 ce c4 1d 62 d6 43 84 e9 ad 23 84 be 05 1e 19 d1 bb 8e f1 19 08 db bd e8 1f c2 d2 1f 58 76 e5 ca c7 35 0b 25 42 57 90 c7 f4 cb 91 af b5 22 17 15 d2 71 cc 1e 86 ba 2b 93 8f 51 a9 26 7a 57 61 1f 12 2b a0 50 57 2e d3 52 57 9d 2d 8b 7b 2d 75 ad c5 bd 45 63 71 05 66 5e 99 c9 1b b3 95 ab aa c7 0b b8 b8 96 dc e0 1a 1a 41 32 58 0c a8 6a 3f b7 f0 c0 e9 11 38 ed f2 28 d7 b7 a0 a8 1a c4 71 4b 63 4d 68 d3 aa 6f 36 b3 0d 69 94 80 a1 82 52 d3 09 97 91 6a 79 Data Ascii: )PwKsl66ybI{g^+nB0=%YZlUDod)0f{5Wlr>}N7s\|2KXbC#Xv5%BW"q+Q&zWa+PW.RW-{-uEcqf^A2Xj?8(qKcMho6iRjy
2024-11-21 02:42:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49798	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:18 UTC	511	OUT	GET /gui/71254.89ea96287cbc8b900860.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:18 UTC	320	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 3ecbfd46309373786f53215f56508f7b Server: Google Frontend Date: Wed, 20 Nov 2024 23:05:51 GMT Expires: Thu, 20 Nov 2025 23:05:51 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Content-Length: 22257 Age: 12987 Connection: close
2024-11-21 02:42:18 UTC	1088	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 31 32 35 34 2c 34 34 31 33 38 2c 36 38 33 37 2c 31 33 38 30 35 2c 36 30 31 33 32 2c 36 31 36 36 33 5d 2c 7b 39 35 35 32 38 3a 28 74 2c 65 2c 69 29 3d 3e 7b 76 61 72 20 6f 3d 69 28 34 38 37 30 34 29 2c 72 3d 69 28 31 36 36 34 35 29 2c 6e 3d 69 28 36 35 38 36 35 29 3b 6c 65 74 20 73 2c 61 2c 6c 3d 74 3d 3e 74 3b 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6f 29 7b 76 61 72 20 72 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 73 3d 6e 3c 33 3f 65 3a 6e 75 6c 6c 3d 3d 3d 6f 3f 6f 3d Data Ascii: "use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[71254,44138,6837,13805,60132,61663],{95528:(t,e,i)=>{var o=i(48704),r=i(16645),n=i(65865);let s,a,l=t=>t;var c=function(t,e,i,o){var r,n=arguments.length,s=n<3?e:null===o?o=
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 2c 31 38 38 31 38 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 72 28 65 29 2c 69 2e 64 28 65 2c 7b 65 64 69 74 46 69 6c 65 49 63 6f 6e 3a 28 29 3d 3e 6f 7d 29 3b 63 6f 6e 73 74 20 6f 3d 69 28 31 35 33 32 33 29 2e 64 6f 63 50 65 6e 49 63 6f 6e 7d 2c 34 31 30 39 38 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 72 28 65 29 2c 69 2e 64 28 65 2c 7b 70 68 6f 6e 65 4f 75 74 49 63 6f 6e 3a 28 29 3d 3e 6f 7d 29 3b 63 6f 6e 73 74 20 6f 3d 69 28 31 35 33 32 33 29 2e 70 68 6f 6e 65 41 72 72 6f 77 55 70 52 69 67 68 74 49 63 6f 6e 7d 2c 35 36 38 37 33 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 72 28 65 29 2c 69 2e 64 28 65 2c 7b 73 75 62 64 69 72 65 63 74 6f 72 79 41 72 72 6f 77 52 69 67 68 74 49 63 6f 6e 3a 28 29 3d 3e 6f 7d 29 3b 63 6f 6e 73 74 20 6f 3d 69 28 31 35 33 32 33 29 2e 61 Data Ascii: ,18818:(t,e,i)=>{i.r(e),i.d(e,{editFileIcon:()=>o});const o=i(15323).docPenIcon},41098:(t,e,i)=>{i.r(e),i.d(e,{phoneOutIcon:()=>o});const o=i(15323).phoneArrowUpRightIcon},56873:(t,e,i)=>{i.r(e),i.d(e,{subdirectoryArrowRightIcon:()=>o});const o=i(15323).a
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 29 2b 22 2b 22 3b 72 65 74 75 72 6e 20 67 2e 5a 38 2e 67 65 74 53 65 61 72 63 68 55 72 6c 28 7b 65 6e 74 69 74 79 3a 22 64 6f 6d 61 69 6e 22 2c 5b 74 5d 3a 69 7d 29 7d 5f 67 65 74 50 69 76 6f 74 4c 69 6e 6b 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 67 2e 5a 38 2e 67 65 74 53 65 61 72 63 68 55 72 6c 28 7b 65 6e 74 69 74 79 3a 74 68 69 73 2e 65 6e 74 69 74 79 54 79 70 65 2c 5b 74 5d 3a 65 7d 29 7d 72 65 6e 64 65 72 52 65 70 6f 72 74 4c 69 6e 6b 28 29 7b 72 65 74 75 72 6e 28 30 2c 6e 2e 68 74 6d 6c 29 28 6b 7c 7c 28 6b 3d 51 60 20 24 7b 30 7d 20 3c 76 74 2d 75 69 2d 70 75 6e 79 63 6f 64 65 20 70 75 6e 79 63 6f 64 65 3d 22 24 7b 30 7d 22 3e 3c 2f 76 74 2d 75 69 2d 70 75 6e 79 63 6f 64 65 3e 20 60 29 2c 73 75 70 65 72 2e 72 65 6e 64 65 72 52 65 70 6f 72 74 4c 69 Data Ascii: )+"+";return g.Z8.getSearchUrl({entity:"domain",[t]:i})}_getPivotLink(t,e){return g.Z8.getSearchUrl({entity:this.entityType,[t]:e})}renderReportLink(){return(0,n.html)(k\|\|(k=Q` ${0} <vt-ui-punycode punycode="${0}"></vt-ui-punycode> `),super.renderReportLi
2024-11-21 02:42:18 UTC	192	IN	Data Raw: 6f 74 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 70 79 2d 62 75 74 74 6f 6e 22 3e 20 3c 76 74 2d 75 69 2d 62 75 74 74 6f 6e 20 69 63 6f 6e 20 2e 62 65 66 6f 72 65 54 65 78 74 49 63 6f 6e 3d 22 24 7b 30 7d 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 20 64 61 74 61 2d 74 65 78 74 3d 22 24 7b 30 7d 22 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 70 6f 73 69 74 69 6f 6e 3d 22 72 69 67 68 74 22 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 74 65 78 74 3d 22 43 6f 70 79 20 49 50 20 74 6f 20 63 6c 69 70 62 6f 61 72 64 22 20 40 6d 6f 75 73 65 6f 76 65 72 3d 22 24 7b 30 7d 22 3e Data Ascii: ot> <div class="copy-button"> <vt-ui-button icon .beforeTextIcon="${0}" @click="${0}" data-text="${0}" data-tooltip-position="right" data-tooltip-text="Copy IP to clipboard" @mouseover="${0}">
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 3c 2f 76 74 2d 75 69 2d 62 75 74 74 6f 6e 3e 20 3c 2f 64 69 76 3e 20 60 29 2c 74 68 69 73 2e 69 66 50 69 76 6f 74 61 62 6c 65 28 67 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 69 70 41 64 64 72 65 73 73 22 2c 74 29 29 2c 74 68 69 73 2e 69 66 50 69 76 6f 74 61 62 6c 65 28 74 68 69 73 2e 73 68 6f 77 52 65 6c 61 74 69 6f 6e 49 6e 44 72 61 77 65 72 29 2c 74 2c 74 2c 62 2e 63 6f 6e 74 65 6e 74 43 6f 70 79 49 63 6f 6e 2c 74 68 69 73 2e 5f 73 65 6e 64 54 65 78 74 54 6f 43 6c 69 70 62 6f 61 72 64 2c 74 2c 79 2e 4b 4b 2e 73 68 6f 77 54 6f 6f 6c 74 69 70 29 29 29 29 3a 28 30 2c 6e 2e 68 74 6d 6c 29 28 77 7c 7c 28 77 3d 51 60 20 3c 64 69 76 20 69 64 3d 22 6e 61 6d 65 22 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6e 6f 2d 6e 61 6d 65 22 20 64 61 74 Data Ascii: </vt-ui-button> </div> `),this.ifPivotable(g.Z8.getRedirectUrl("ipAddress",t)),this.ifPivotable(this.showRelationInDrawer),t,t,b.contentCopyIcon,this._sendTextToClipboard,t,y.KK.showTooltip)))):(0,n.html)(w\|\|(w=Q` <div id="name"> <span class="no-name" dat
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 75 6e 74 7c 7c 6e 75 6c 6c 21 3d 72 26 26 72 2e 64 65 74 65 63 74 65 64 5f 63 6f 6d 6d 75 6e 69 63 61 74 69 6e 67 5f 66 69 6c 65 73 5f 63 6f 75 6e 74 7c 7c 6e 75 6c 6c 21 3d 72 26 26 72 2e 64 65 74 65 63 74 65 64 5f 72 65 66 65 72 72 69 6e 67 5f 66 69 6c 65 73 5f 63 6f 75 6e 74 7c 7c 6e 75 6c 6c 21 3d 72 26 26 72 2e 64 65 74 65 63 74 65 64 5f 75 72 6c 73 5f 63 6f 75 6e 74 29 26 26 74 68 69 73 2e 72 65 6e 64 65 72 43 6f 6c 75 6d 6e 28 22 22 2c 22 63 6f 6c 2d 63 6f 6e 74 65 78 74 2d 69 63 6f 6e 73 22 2c 28 30 2c 6e 2e 68 74 6d 6c 29 28 44 7c 7c 28 44 3d 51 60 20 24 7b 30 7d 20 24 7b 30 7d 20 24 7b 30 7d 20 24 7b 30 7d 20 60 29 2c 6e 75 6c 6c 21 3d 3d 28 74 3d 74 68 69 73 2e 65 6e 74 69 74 79 2e 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 29 26 26 Data Ascii: unt\|\|null!=r&&r.detected_communicating_files_count\|\|null!=r&&r.detected_referring_files_count\|\|null!=r&&r.detected_urls_count)&&this.renderColumn("","col-context-icons",(0,n.html)(D\|\|(D=Q` ${0} ${0} ${0} ${0} `),null!==(t=this.entity.context_attributes)&&
2024-11-21 02:42:18 UTC	1280	IN	Data Raw: 26 26 6f 2e 64 65 74 65 63 74 65 64 5f 75 72 6c 73 5f 63 6f 75 6e 74 3f 28 30 2c 6e 2e 68 74 6d 6c 29 28 4c 7c 7c 28 4c 3d 51 60 20 3c 76 74 2d 75 69 2d 62 75 74 74 6f 6e 20 69 63 6f 6e 20 63 6c 61 73 73 3d 22 73 6d 61 6c 6c 22 20 2e 62 65 66 6f 72 65 54 65 78 74 49 63 6f 6e 3d 22 24 7b 30 7d 22 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 74 65 78 74 3d 22 24 7b 30 7d 22 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 70 6f 73 69 74 69 6f 6e 3d 22 72 69 67 68 74 22 20 40 6d 6f 75 73 65 6f 76 65 72 3d 22 24 7b 30 7d 22 3e 3c 2f 76 74 2d 75 69 2d 62 75 74 74 6f 6e 3e 60 29 2c 76 2e 75 72 6c 44 65 74 65 63 74 69 6f 6e 49 63 6f 6e 2c 28 30 2c 6c 2e 69 66 44 65 66 69 6e 65 64 29 28 74 68 69 73 2e 67 65 74 43 6f 6e 74 65 78 74 41 74 74 72 69 62 75 74 65 73 54 6f 6f 6c Data Ascii: &&o.detected_urls_count?(0,n.html)(L\|\|(L=Q` <vt-ui-button icon class="small" .beforeTextIcon="${0}" data-tooltip-text="${0}" data-tooltip-position="right" @mouseover="${0}"></vt-ui-button>`),v.urlDetectionIcon,(0,l.ifDefined)(this.getContextAttributesTool
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 69 74 79 2e 72 65 67 69 73 74 72 61 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 6f 3f 6f 3a 22 22 29 29 2c 21 74 68 69 73 2e 65 6e 74 69 74 79 2e 72 65 67 69 73 74 72 61 72 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 72 65 67 69 73 74 72 61 72 2c 21 21 74 68 69 73 2e 65 6e 74 69 74 79 2e 72 65 67 69 73 74 72 61 72 29 29 2c 74 68 69 73 2e 72 65 6e 64 65 72 43 6f 6c 75 6d 6e 28 22 43 72 65 61 74 65 64 22 2c 22 73 65 65 6e 20 63 6f 6c 2d 63 72 65 61 74 69 6f 6e 2d 64 61 74 65 22 2c 28 30 2c 6e 2e 68 74 6d 6c 29 28 42 7c 7c 28 42 3d 51 60 20 3c 75 6c 20 3f 68 69 64 64 65 6e 3d 22 24 7b 30 7d 22 3e 20 3c 6c 69 3e 20 3c 76 74 2d 75 69 2d 70 69 76 6f 74 20 2e 68 72 65 66 3d 22 24 7b 30 7d 22 3e 20 3c 64 69 76 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 3c 64 69 76 3e 20 24 Data Ascii: ity.registrar)&&void 0!==o?o:"")),!this.entity.registrar,this.entity.registrar,!!this.entity.registrar)),this.renderColumn("Created","seen col-creation-date",(0,n.html)(B\|\|(B=Q` <ul ?hidden="${0}"> <li> <vt-ui-pivot .href="${0}"> <div> ${0} </div> <div> $
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 46 7c 7c 28 46 3d 51 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 63 6f 6e 20 73 6d 61 6c 6c 2d 69 63 6f 6e 20 66 69 6c 65 2d 6d 61 69 6e 2d 69 63 6f 6e 22 3e 20 3c 76 74 2d 75 69 2d 70 69 76 6f 74 20 2e 68 72 65 66 3d 22 24 7b 30 7d 22 3e 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 61 67 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 76 74 69 63 6f 6e 73 2f 24 7b 30 7d 22 20 61 6c 74 3d 22 46 61 76 69 63 6f 6e 22 3e 20 3c 2f 76 74 2d 75 69 2d 70 69 76 6f 74 3e 20 3c 2f 64 69 76 3e 20 60 29 2c 74 68 69 73 2e 69 66 50 69 76 6f 74 61 62 6c 65 28 74 68 69 73 2e 5f 67 65 74 46 61 76 69 63 6f 6e 50 69 76 6f 74 4c 69 6e 6b 28 74 68 69 73 2e 65 6e 74 69 74 79 2e 66 61 76 69 63 6f 6e 2e 64 68 61 73 68 29 29 2c 74 68 69 73 2e 65 6e 74 Data Ascii: F\|\|(F=Q` <div class="icon small-icon file-main-icon"> <vt-ui-pivot .href="${0}"> <img src="https://storage.googleapis.com/vticons/${0}" alt="Favicon"> </vt-ui-pivot> </div> `),this.ifPivotable(this._getFaviconPivotLink(this.entity.favicon.dhash)),this.ent
2024-11-21 02:42:18 UTC	1280	IN	Data Raw: 62 6c 65 3d 22 24 7b 30 7d 22 20 2e 63 68 69 70 73 3d 22 24 7b 30 7d 22 3e 3c 2f 76 74 2d 75 69 2d 63 68 69 70 73 3e 60 29 2c 74 68 69 73 2e 70 69 76 6f 74 61 62 6c 65 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 5f 74 61 67 73 29 3a 22 22 2c 74 68 69 73 2e 5f 67 65 74 54 6f 74 61 6c 45 6e 67 69 6e 65 73 28 7b 7d 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 6c 61 73 74 5f 61 6e 61 6c 79 73 69 73 5f 73 74 61 74 73 29 2c 28 30 2c 6c 2e 69 66 44 65 66 69 6e 65 64 29 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 65 6e 74 69 74 79 2e 6c 61 73 74 5f 61 6e 61 6c 79 73 69 73 5f 73 74 61 74 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6d 61 6c 69 63 69 6f 75 73 29 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 63 72 65 61 74 69 6f 6e 5f 64 61 74 65 7c 7c Data Ascii: ble="${0}" .chips="${0}"></vt-ui-chips>`),this.pivotable,this.entity._tags):"",this._getTotalEngines({},this.entity.last_analysis_stats),(0,l.ifDefined)(null===(t=this.entity.last_analysis_stats)\|\|void 0===t?void 0:t.malicious),this.entity.creation_date\|\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49799	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:18 UTC	690	OUT	GET /gui/67920.83f748ec82f4e379de06.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:18 UTC	348	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 9ebd0ce7daee97368280ebf65e45922c Content-Encoding: gzip Server: Google Frontend Date: Thu, 21 Nov 2024 00:07:14 GMT Expires: Fri, 21 Nov 2025 00:07:14 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 9304 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:18 UTC	1060	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a cc 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 77 0d 0a 30 30 30 30 30 30 30 31 0d 0a da 0d 0a 30 30 30 30 30 30 30 31 0d 0a 46 0d 0a 30 30 30 30 30 30 30 31 0d 0a d6 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 66 65 65 0d 0a ff f9 14 aa da 7a a1 47 92 01 03 06 1c Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001\00000001}00000001w0000000100000001F0000000100000001000feezG
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 62 1e 59 10 10 e2 84 5a 18 6d 34 cb 95 5f c0 76 8d 80 77 7e 54 93 28 66 7b 7b 19 64 b0 80 e4 8a f0 2a 4c 6f 93 38 f5 43 7c 1c 47 20 e5 55 90 2e 92 02 22 c4 db a9 f6 05 05 66 8b 24 0a 40 fd 64 f2 70 f7 4c 8c 45 96 fd a1 ae 8b 2c 56 2b 83 58 bc 8d 92 1c 8b 59 52 b3 6d c7 0e d2 d8 55 9b 72 23 da b1 ed 30 b3 a7 c5 2c ae d7 6e 3f 7d aa dd 0e ff f9 9b f5 cd b2 b1 da fc f6 1b ac a5 e2 4e f1 00 91 4c 5e 41 b1 8b 87 08 f5 d8 c0 e1 1a 38 5c 13 0e 8f 6e 0a 77 11 b9 a0 7a 91 26 16 21 0b 69 87 66 0d ed 1c 5c 8b 6d cb 1b 09 68 bb 20 dd 20 36 0f 6d c2 da b6 20 92 be 5b 48 bd 71 89 7b 3b 01 f3 34 8f c8 dc 0d ed 2c 9a 4c 0b db fa 7e 96 c2 49 a5 37 22 53 fd 8f 1f ed 9b 18 1c 5b 20 c0 c8 0b e2 74 11 3e 55 ec a6 65 89 7e b1 17 8d 9f b2 51 08 eb 52 e2 a1 55 a7 52 76 4e 4a d1 Data Ascii: bYZm4_vw~T(f{{d*Lo8C\|G U."f$@dpLE,V+XYRmUr#0,n?}NL^A8\nwz&!if\mh 6m [Hq{;4,L~I7"S[ t>Ue~QRURvNJ
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 73 b7 41 0d 71 84 6f a3 e3 53 aa af 64 77 8f f6 47 a4 25 dc 88 6f c4 08 f5 db fe 22 26 08 eb 8f e6 85 12 06 85 11 07 2a eb 82 11 6c db da 37 c3 ca e4 85 25 86 ec f7 40 dc 67 45 74 81 d8 41 45 5a 72 9e fa 11 0b 5d 59 62 39 95 69 38 45 4c 98 c8 41 de 5d 85 73 09 e6 d9 e5 73 8b 67 a2 5a 0c db 3a c4 24 b1 9b d3 e4 95 52 cc 13 d0 e8 09 d3 88 cc d6 a3 49 11 c9 4e 16 04 24 47 f1 8f 0a b2 da 82 3c da 2f c1 50 12 36 73 d8 b2 d0 62 54 62 c8 18 94 29 05 4a 3f f6 da 1a 59 06 36 46 2b 1b 32 65 94 cd 4a d1 5b a0 f7 b6 44 ef 5e c3 f8 79 d3 a7 59 5b da cd 1d 55 18 19 0f ce d3 b9 ac cc ac 51 53 d1 a0 82 b8 eb 48 51 fa 30 92 95 cf d8 55 22 92 16 8b bf a5 f6 5c 51 ed e7 8d dc b6 66 a4 8a 12 41 fa 1d 92 75 02 17 95 a4 54 c4 b2 2e ee f2 42 cc c0 5e 58 0e e9 8a 34 07 79 9c 52 Data Ascii: sAqoSdwG%o"&*l7%@gEtAEZr]Yb9i8ELA]ssgZ:$RIN$G</P6sbTb)J?Y6F+2eJ[D^yY[UQSHQ0U"\QfAuT.B^X4yR
2024-11-21 02:42:18 UTC	446	IN	Data Raw: 34 79 7f 19 ea fe 01 ea 9c e9 ec 2c 16 94 7e d7 6b b6 d4 3a b3 14 87 cb 2c b0 83 36 cd 58 5f 39 7c 5b 6b c7 ed b4 5e bf d3 c6 2d 2e dc 4e f3 92 5a 4a 77 d3 e8 1a 19 ee 94 f1 8d 34 b4 e5 40 aa 86 bb 42 f5 a3 44 dd 78 23 75 74 ec c1 34 45 61 62 f9 af c4 b2 c2 28 9f e3 c4 69 60 71 ad f6 e8 5f c9 ea 5f 89 c7 47 74 12 0e 12 a6 d9 c0 c2 cd 97 9a eb 8e f2 32 8a 92 35 ca 3a 06 58 b0 26 28 d6 e6 90 ce 81 d5 44 14 a0 26 91 c1 22 57 91 8f b1 cc 0d b9 5e 59 94 41 cd 95 62 df 5c ae 40 a5 df 81 d5 b0 9a 16 d5 47 3f 37 78 9d b6 6f 8e ec 3d b0 2c 57 46 36 07 35 29 64 b9 6f 3d 4a 7a 97 bc b9 12 bd e6 e1 67 fa ab 1c 69 6b 4c eb 9e 31 1e f8 bb 9b 0a 87 ed dd 58 a1 34 c6 c9 8e 0b cb bf 89 59 a3 b3 7b 8c 26 3b 91 7b 73 d0 e1 7a 0c 6d d6 f7 64 9e c9 53 73 50 4a b5 92 31 dc c4 Data Ascii: 4y,~k:,6X_9\|[k^-.NZJw4@BDx#ut4Eab(i`q__Gt25:X&(D&"W^YAb\@G?7xo=,WF65)do=JzgikL1X4Y{&;{szmdSsPJ1
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 6a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 11 0d 0a 30 30 30 30 30 30 30 31 0d 0a ce 0d 0a 30 30 30 30 30 30 30 31 0d 0a f8 0d 0a 30 30 30 30 30 30 30 31 0d 0a 73 0d 0a 30 30 30 30 30 30 30 31 0d 0a ee 0d 0a 30 30 30 30 30 30 30 31 0d 0a fd 0d 0a 39 66 62 0d 0a 22 42 79 28 47 a4 83 23 1b 91 59 2f 9f 5f 1a 0b 44 c5 74 81 5b 4f 98 ba b8 1d e5 fb e5 6a fb b0 3a a3 7d 92 87 fd 17 cf 4f cf 5e 5d 9c f1 d2 fb 83 0c f8 2c d9 e0 8c e2 05 e4 ec eb c6 a8 1d 86 fe 11 37 45 49 18 4d 52 34 76 bb cd c6 b8 25 1b e7 8b 6c 1e 53 cf ee b8 dd 0a 9a aa 11 f1 15 0d e6 7f b2 29 13 21 5a 02 5c 96 6d 35 64 8b 3c 01 44 a3 e8 1c 1e 34 54 e3 1d 64 9e 44 ff eb 71 20 fa dd 43 d9 13 c7 a1 22 41 db 41 df 0f da 81 6c 2b 84 0f 21 f8 ba d5 08 fa 7d d5 2d b8 f3 a9 Data Ascii: 00000001j00000001000000010000000100000001s00000001000000019fb"By(G#Y/_Dt[Oj:}O^],7EIMR4v%lS)!Z\m5d<D4TdDq C"AAl+!}-
2024-11-21 02:42:18 UTC	1245	IN	Data Raw: 0c 4e 57 2b f5 bc 6b 89 62 39 ee 27 a9 5b 86 03 96 6d e9 e3 e8 fd d9 20 01 95 fc f8 08 66 45 b8 ca 4d 29 13 b7 5a c4 cb 39 26 21 66 c5 62 5c 0c 48 f2 a9 51 4d 88 03 8c 41 e3 68 7b 76 74 b1 d6 bd e4 19 c4 a0 b1 1a 2d 79 55 e5 25 47 69 8c b4 77 c5 07 bd 8e c7 3f 24 9c dd ab d7 3b ec 60 2d 1f 4f f8 a8 9c c6 6c 2e 55 8b 2d 20 03 c8 f6 c1 d3 57 21 4a 70 60 ff e1 ec 39 ea 36 ec 2c 99 d9 95 8f 7a 1e aa 0c 4b b6 5f d5 d9 0c 0d de 65 68 eb 18 8b 82 66 ed 1d 1d 3d bc af cb cf 5c df 46 45 e2 7e 90 5a 4f 6e 46 3b 90 9d a8 e1 98 da 41 a9 64 09 f4 28 96 8a 5d 88 ef 24 19 cc 70 53 38 16 2b 2e 4e 2f 75 09 c8 ac 00 ad 64 01 06 52 65 d8 2b 22 3a 97 b7 07 ac 39 8c ad fc e8 de 44 79 84 4b 5f f5 65 ba 28 88 f5 65 57 c5 5c 30 d6 8c 8e 34 ce 52 6e a8 72 a9 5b 68 f0 a6 dc 28 5c Data Ascii: NW+kb9'[m fEM)Z9&!fb\HQMAh{vt-yU%Giw?$;`-Ol.U- W!Jp`96,zK_ehf=\FE~ZOnF;Ad(]$pS8+.N/udRe+":9DyK_e(eW\04Rnr[h(\
2024-11-21 02:42:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49801	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:18 UTC	690	OUT	GET /gui/88687.cca6b938f5ec6b221b34.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:18 UTC	321	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: e2409e9414fce5f7b52df48a00a4d5f1 Server: Google Frontend Date: Tue, 19 Nov 2024 18:38:16 GMT Expires: Wed, 19 Nov 2025 18:38:16 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Content-Length: 17409 Age: 115442 Connection: close
2024-11-21 02:42:18 UTC	1087	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 36 38 37 5d 2c 7b 38 38 36 38 37 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 72 28 39 38 39 31 29 2c 6e 3d 72 28 34 38 37 30 34 29 2c 73 3d 72 28 31 36 36 34 35 29 2c 69 3d 72 28 35 38 39 32 37 29 2c 61 3d 72 2e 6e 28 69 29 2c 62 3d 28 72 28 38 34 30 33 34 29 2c 72 28 38 35 32 30 30 29 29 2c 6c 3d 72 28 37 38 35 36 36 29 2c 64 3d 72 28 31 35 33 32 33 29 2c 70 3d 72 28 37 31 30 31 32 29 2c 63 3d 28 72 28 38 31 38 34 34 29 2c 72 28 33 39 33 33 29 29 3b 6c 65 74 20 6d 2c 68 2c 75 2c 66 2c 67 2c 79 2c 76 Data Ascii: (self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[88687],{88687:(e,t,r)=>{"use strict";var o=r(9891),n=r(48704),s=r(16645),i=r(58927),a=r.n(i),b=(r(84034),r(85200)),l=r(78566),d=r(15323),p=r(71012),c=(r(81844),r(3933));let m,h,u,f,g,y,v
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 73 2e 73 68 6f 77 55 73 65 72 3f 28 30 2c 6e 2e 68 74 6d 6c 29 28 68 7c 7c 28 68 3d 76 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 75 74 68 6f 72 22 3e 20 3c 61 20 63 6c 61 73 73 3d 22 6e 6f 2d 62 6f 72 64 65 72 22 20 68 72 65 66 3d 22 24 7b 30 7d 22 3e 20 3c 76 74 2d 75 69 2d 61 76 61 74 61 72 20 2e 75 73 65 72 3d 22 24 7b 30 7d 22 3e 3c 2f 76 74 2d 75 69 2d 61 76 61 74 61 72 3e 20 3c 2f 61 3e 20 3c 2f 64 69 76 3e 20 60 29 2c 28 30 2c 62 2e 69 66 44 65 66 69 6e 65 64 29 28 74 68 69 73 2e 61 75 74 68 6f 72 43 6f 6d 6d 65 6e 74 73 50 61 74 68 29 2c 74 68 69 73 2e 61 75 74 68 6f 72 49 64 29 3a 22 22 7d 5f 72 65 6e 64 65 72 44 65 74 61 69 6c 73 28 29 7b 63 6f 6e 73 74 20 65 3d 22 67 72 61 70 68 22 3d 3d 3d 74 68 69 73 2e 69 74 65 6d 54 79 70 65 3f 22 5f 62 Data Ascii: s.showUser?(0,n.html)(h\|\|(h=v` <div class="author"> <a class="no-border" href="${0}"> <vt-ui-avatar .user="${0}"></vt-ui-avatar> </a> </div> `),(0,b.ifDefined)(this.authorCommentsPath),this.authorId):""}_renderDetails(){const e="graph"===this.itemType?"_b
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 76 74 2d 75 69 2d 63 6f 6d 6d 65 6e 74 2d 64 65 6c 65 74 65 22 2c 7b 64 65 74 61 69 6c 3a 7b 63 6f 6d 6d 65 6e 74 49 64 3a 74 68 69 73 2e 63 6f 6d 6d 65 6e 74 49 64 7d 7d 29 29 7d 5f 67 65 74 55 6e 69 78 74 69 6d 65 44 61 74 65 28 65 29 7b 69 66 28 65 29 72 65 74 75 72 6e 20 6e 65 77 20 44 61 74 65 28 65 2e 73 6c 69 63 65 28 30 2c 2d 34 29 2e 72 65 70 6c 61 63 65 28 22 20 22 2c 22 54 22 29 2e 63 6f 6e 63 61 74 28 22 5a 22 29 29 2e 67 65 74 54 69 6d 65 28 29 2f 31 65 33 7d 7d 3b 77 28 5b 28 30 2c 73 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 53 74 72 69 6e 67 7d 29 5d 2c 78 2e 70 72 6f 74 6f 74 79 70 65 2c 22 61 75 74 68 6f 72 49 64 22 2c 76 6f 69 64 20 30 29 2c 77 28 5b 28 30 2c 73 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 42 6f 6f 6c 65 Data Ascii: vt-ui-comment-delete",{detail:{commentId:this.commentId}}))}_getUnixtimeDate(e){if(e)return new Date(e.slice(0,-4).replace(" ","T").concat("Z")).getTime()/1e3}};w([(0,s.property)({type:String})],x.prototype,"authorId",void 0),w([(0,s.property)({type:Boole
2024-11-21 02:42:18 UTC	193	IN	Data Raw: 6c 61 73 73 20 65 78 74 65 6e 64 73 20 6f 2e 56 74 55 69 50 61 67 65 64 4c 69 73 74 7b 73 74 61 74 69 63 20 67 65 74 20 73 74 79 6c 65 73 28 29 7b 72 65 74 75 72 6e 5b 2e 2e 2e 6f 2e 56 74 55 69 50 61 67 65 64 4c 69 73 74 2e 73 74 79 6c 65 73 2c 28 30 2c 6e 2e 75 6e 73 61 66 65 43 53 53 29 28 43 2e 41 29 5d 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 29 2c 74 68 69 73 2e 73 68 6f 77 55 73 65 72 3d 21 31 2c 74 68 69 73 2e 68 69 64 65 49 74 65 6d 4c 69 6e 6b 3d 21 31 2c 74 68 69 73 2e 61 70 69 52 65 6c 61 74 69 6f 6e 73 68 69 70 3d 22 63 6f 6d 6d 65 6e 74 Data Ascii: lass extends o.VtUiPagedList{static get styles(){return[...o.VtUiPagedList.styles,(0,n.unsafeCSS)(C.A)]}constructor(){super(),this.showUser=!1,this.hideItemLink=!1,this.apiRelationship="comment
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 73 22 2c 74 68 69 73 2e 6e 6f 49 74 65 6d 73 54 65 78 74 3d 28 30 2c 6e 2e 68 74 6d 6c 29 28 6b 7c 7c 28 6b 3d 24 60 20 3c 76 74 2d 75 69 2d 73 70 65 63 69 61 6c 2d 73 74 61 74 65 73 20 74 69 74 6c 65 2d 73 6d 61 6c 6c 20 2e 69 6d 61 67 65 52 61 77 3d 22 24 7b 30 7d 22 20 69 63 6f 6e 2d 73 6d 61 6c 6c 20 63 6c 61 73 73 3d 22 6d 2d 61 75 74 6f 22 3e 20 3c 73 70 61 6e 20 73 6c 6f 74 3d 22 74 69 74 6c 65 22 3e 4e 6f 20 63 6f 6d 6d 65 6e 74 73 20 66 6f 75 6e 64 3c 2f 73 70 61 6e 3e 20 3c 2f 76 74 2d 75 69 2d 73 70 65 63 69 61 6c 2d 73 74 61 74 65 73 3e 60 29 2c 61 28 29 29 7d 72 65 6e 64 65 72 44 61 74 61 28 29 7b 72 65 74 75 72 6e 28 74 68 69 73 2e 64 61 74 61 7c 7c 5b 5d 29 2e 6d 61 70 28 28 65 3d 3e 28 30 2c 6e 2e 68 74 6d 6c 29 28 49 7c 7c 28 49 3d 24 60 Data Ascii: s",this.noItemsText=(0,n.html)(k\|\|(k=$` <vt-ui-special-states title-small .imageRaw="${0}" icon-small class="m-auto"> <span slot="title">No comments found</span> </vt-ui-special-states>`),a())}renderData(){return(this.data\|\|[]).map((e=>(0,n.html)(I\|\|(I=$`
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 2d 2d 62 73 2d 62 6f 64 79 2d 63 6f 6c 6f 72 29 3b 5c 6e 7d 5c 6e 3a 68 6f 73 74 28 5b 68 69 64 64 65 6e 5d 29 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 5c 6e 7d 5c 6e 68 65 61 64 65 72 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 5c 6e 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 5c 6e 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 30 3b 5c 6e 7d 5c 6e 70 20 7b 5c 6e 20 20 6d 61 72 67 69 6e 3a 20 30 3b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 5c 6e 7d 5c 6e 63 6f 6c 6c 61 70 73 61 62 6c 65 2d 70 61 72 61 67 72 61 70 68 20 7b 5c 6e 20 20 2d 2d 63 6f 6c 6c 61 70 73 61 62 6c 65 2d 70 61 72 61 67 72 61 70 68 2d 6c 69 6e 65 73 3a 20 31 30 3b 5c 6e 7d 5c 6e 73 76 67 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 62 73 2d 74 Data Ascii: --bs-body-color);\n}\n:host([hidden]) {\n display: none;\n}\nheader {\n display: flex;\n width: 100%;\n min-width: 0;\n}\np {\n margin: 0;\n padding: 0;\n}\ncollapsable-paragraph {\n --collapsable-paragraph-lines: 10;\n}\nsvg {\n color: var(--bs-t
2024-11-21 02:42:18 UTC	1280	IN	Data Raw: 3b 5c 6e 7d 5c 6e 2e 64 65 74 61 69 6c 73 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 5c 6e 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 5c 6e 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 6f 70 3b 5c 6e 20 20 66 6c 65 78 3a 20 31 3b 5c 6e 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 30 3b 5c 6e 7d 5c 6e 69 72 6f 6e 2d 69 63 6f 6e 20 7b 5c 6e 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 32 34 70 78 3b 5c 6e 7d 5c 6e 23 69 74 65 6d 2d 69 64 20 7b 5c 6e 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 36 70 78 3b 5c 6e 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 30 3b 5c 6e 7d 5c 6e 23 69 74 65 6d 2d 69 64 20 61 20 7b 5c 6e 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 76 61 72 28 2d 2d 76 74 2d 75 69 2d 63 6f 6d Data Ascii: ;\n}\n.details {\n display: flex;\n flex-direction: column;\n vertical-align: top;\n flex: 1;\n min-width: 0;\n}\niron-icon {\n min-width: 24px;\n}\n#item-id {\n margin-left: 16px;\n min-width: 0;\n}\n#item-id a {\n border-bottom: var(--vt-ui-com
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 39 61 63 34 63 3b 2d 2d 62 73 2d 74 65 61 6c 3a 20 23 32 30 63 39 39 37 3b 2d 2d 62 73 2d 63 79 61 6e 3a 20 23 32 38 37 62 62 35 3b 2d 2d 62 73 2d 62 6c 61 63 6b 3a 20 23 30 30 30 3b 2d 2d 62 73 2d 77 68 69 74 65 3a 20 23 66 66 66 3b 2d 2d 62 73 2d 67 72 61 79 3a 20 23 36 36 36 36 36 36 3b 2d 2d 62 73 2d 67 72 61 79 2d 64 61 72 6b 3a 20 23 33 33 33 33 33 33 3b 2d 2d 62 73 2d 67 72 61 79 2d 31 30 30 3a 20 23 66 39 66 39 66 39 3b 2d 2d 62 73 2d 67 72 61 79 2d 32 30 30 3a 20 23 66 32 66 32 66 32 3b 2d 2d 62 73 2d 67 72 61 79 2d 33 30 30 3a 20 23 65 36 65 36 65 36 3b 2d 2d 62 73 2d 67 72 61 79 2d 34 30 30 3a 20 23 63 63 63 63 63 63 3b 2d 2d 62 73 2d 67 72 61 79 2d 35 30 30 3a 20 23 62 33 62 33 62 33 3b 2d 2d 62 73 2d 67 72 61 79 2d 36 30 30 3a 20 23 36 36 36 Data Ascii: 9ac4c;--bs-teal: #20c997;--bs-cyan: #287bb5;--bs-black: #000;--bs-white: #fff;--bs-gray: #666666;--bs-gray-dark: #333333;--bs-gray-100: #f9f9f9;--bs-gray-200: #f2f2f2;--bs-gray-300: #e6e6e6;--bs-gray-400: #cccccc;--bs-gray-500: #b3b3b3;--bs-gray-600: #666
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 35 35 2c 20 32 35 35 2c 20 32 35 35 3b 2d 2d 62 73 2d 62 6c 61 63 6b 2d 72 67 62 3a 20 30 2c 20 30 2c 20 30 3b 2d 2d 62 73 2d 66 6f 6e 74 2d 73 61 6e 73 2d 73 65 72 69 66 3a 20 22 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 22 2c 20 52 6f 62 6f 74 6f 2c 20 52 6f 62 6f 74 6f 44 72 61 66 74 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 2d 2d 62 73 2d 66 6f 6e 74 2d 6d 6f 6e 6f 73 70 61 63 65 3a 20 22 53 6f 75 72 63 65 20 43 6f 64 65 20 50 72 6f 22 2c 20 6d 6f 6e 6f 73 70 61 63 65 3b 2d 2d 62 73 2d 67 72 61 64 69 65 6e 74 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 38 30 64 65 67 2c 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 31 35 29 2c 20 72 67 62 61 28 32 35 35 2c 20 32 Data Ascii: 55, 255, 255;--bs-black-rgb: 0, 0, 0;--bs-font-sans-serif: "Source Sans Pro", Roboto, RobotoDraft, Helvetica, Arial, sans-serif;--bs-font-monospace: "Source Code Pro", monospace;--bs-gradient: linear-gradient(180deg, rgba(255, 255, 255, 0.15), rgba(255, 2
2024-11-21 02:42:18 UTC	1280	IN	Data Raw: 78 78 6c 29 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 70 69 6c 6c 3a 20 35 30 72 65 6d 3b 2d 2d 62 73 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 2e 35 72 65 6d 20 31 72 65 6d 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 35 29 3b 2d 2d 62 73 2d 62 6f 78 2d 73 68 61 64 6f 77 2d 73 6d 3a 20 30 20 30 2e 31 32 35 72 65 6d 20 30 2e 32 35 72 65 6d 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 37 35 29 3b 2d 2d 62 73 2d 62 6f 78 2d 73 68 61 64 6f 77 2d 6c 67 3a 20 30 20 31 72 65 6d 20 33 72 65 6d 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 37 35 29 3b 2d 2d 62 73 2d 62 6f 78 2d 73 68 61 64 6f 77 2d 69 6e 73 65 74 3a 20 69 6e 73 65 74 20 30 20 31 70 78 20 32 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e Data Ascii: xxl);--bs-border-radius-pill: 50rem;--bs-box-shadow: 0 0.5rem 1rem rgba(0, 0, 0, 0.15);--bs-box-shadow-sm: 0 0.125rem 0.25rem rgba(0, 0, 0, 0.075);--bs-box-shadow-lg: 0 1rem 3rem rgba(0, 0, 0, 0.175);--bs-box-shadow-inset: inset 0 1px 2px rgba(0, 0, 0, 0.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49802	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:18 UTC	511	OUT	GET /gui/59084.21fce51b78aa667002e8.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:18 UTC	348	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: f66fc04e1a1fdcad890a043ed313f489 Content-Encoding: gzip Server: Google Frontend Date: Thu, 21 Nov 2024 01:02:34 GMT Expires: Fri, 21 Nov 2025 01:02:34 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 5984 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:18 UTC	1060	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 31 0d 0a 02 0d 0a 30 66 66 37 0d 0a ff ec 3d 6b 93 db 46 8e df ef 57 d0 ca c5 2b e6 48 0e f5 96 a8 c8 89 d7 c9 d5 a5 d6 d9 bd 8a 93 fb 70 3e 57 96 8f 96 c4 1d 8a 54 91 d4 8c 27 b2 fe fb 01 fd 62 77 8b d2 8c b3 eb 6c 65 8b 9e 3c c6 0d f4 0b 8d 06 d0 68 80 dd 3b 54 c4 aa ea 32 8d eb de b2 5f 91 6c ed dd 93 68 1f c6 b7 af b6 87 fc f6 ae fe f9 90 fe bc 0b d3 7c 75 05 f6 e1 c3 db 77 b6 b7 3f 54 db fe db b7 93 85 3f 1f bf 73 8e b3 f1 64 e6 07 Data Ascii: 0000000100000001000000010000000100000001000000010000000100000001000010ff7=kFW+Hp>WT'bwle<h;T2_lh\|uw?T?sd
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 7a 2f 6d 27 b3 97 fb fe 5b 00 d5 de 9e 8b 41 18 0b 8a ba 80 49 8f 93 fd ce b9 43 58 5d 60 a9 d3 13 2b d7 73 ee 8a 34 b1 40 52 df ad 44 13 f1 a1 aa 8b 1d 17 1d 76 bf a7 8c cf ad c3 8d 2b eb 62 a3 f6 c9 99 cc 67 e3 4f a0 44 40 87 8c fd 09 28 9c 4c d7 27 fe 6c 36 e4 fa 04 b4 89 b3 6f f4 c9 5d a7 4f fe 41 fa e4 b0 02 61 79 45 9f 50 6d 51 1e 62 d4 b2 f6 b1 3a 80 e6 ed 7b 9e 27 95 36 df 56 c0 2d 6f 90 6d 57 cf 06 27 a9 82 50 51 96 a8 94 99 22 4a 48 1d a6 b0 63 fe 33 dc a5 d9 83 ae 8e 0a a6 70 74 14 54 4a 68 04 3c 5b ad fa e5 2a f5 fe fc 93 17 1f 4a 68 be fe a9 22 25 68 59 c6 d1 00 2e 9f 3f 2f bd 4d 9d be 8c 63 52 55 1f 3e 48 35 d4 03 20 dd 69 46 cb 4f 57 68 67 2a c8 68 29 4d 2e e8 2e a1 4d bf 0f 33 d0 19 84 2b b0 96 da 38 c5 73 35 b6 01 35 b6 59 ed 3f 89 1a 63 Data Ascii: z/m'[AICX]`+s4@RDv+bgOD@(L'l6o]OAayEPmQb:{'6V-omW'PQ"JHc3ptTJh<[Jh"%hY.?/McRU>H5 iFOWhgh)M..M3+8s55Y?c
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: ee 99 96 44 2f 0b 1d 10 3b 9e 07 16 b8 45 fb 14 64 50 e0 ac 42 95 fe 42 82 41 49 76 66 4b f7 04 b7 71 60 c1 d6 57 40 38 72 77 cb 41 03 4f e8 37 ec 1f ce 5d 05 8a 5c b0 14 40 05 2b 75 28 80 2d ce 08 44 2a 0a c0 f1 58 81 47 1b a8 25 35 21 f5 18 c1 f6 60 e2 f4 7c a9 85 00 94 fd 49 d1 a4 43 5a b8 a1 91 1a 62 ac a3 e9 28 1e 0b 11 2a b7 95 32 e0 c9 d8 b1 a6 c0 4f 33 ae 09 9b 26 d8 a8 17 eb 70 1d b1 b9 a8 20 3e fa 31 28 83 e1 04 aa 0f 27 dc 24 11 ae 30 39 fa e9 70 1a cf 39 35 74 20 6b 63 31 07 7d e2 e3 7f 84 d2 90 58 74 04 24 26 64 6d d6 97 e4 43 5a 0f 47 50 7b 28 28 be 25 c0 84 70 b5 c8 29 90 e6 70 f5 95 d6 6c 06 78 23 29 00 da 32 36 00 36 28 73 19 29 9c 5f 70 c3 5d 57 60 e5 45 ce e5 2c 05 6d f1 2e 52 b6 ac ea 79 13 cc da 3f 53 ce 31 6c aa a6 be 62 cf 6d 81 49 Data Ascii: D/;EdPBBAIvfKq`W@8rwAO7]\@+u(-DXG%5!`\|ICZb(2O3&p >1('$09p95t kc1}Xt$&dmCZGP{((%p)plx#)266(s)_p]W`E,m.Ry?S1lbmI
2024-11-21 02:42:18 UTC	333	IN	Data Raw: c0 77 38 50 43 a5 b3 be 44 e7 52 c0 66 03 60 bb 8d 5b 58 dc 44 fd 8d 07 b2 94 66 1d 4c 40 10 5b 1f be 29 45 ec 13 35 96 90 b0 6e bc 25 f1 ad fd 1f f8 7b 00 97 51 e9 1d 71 e8 ef eb b4 ac 6a 80 a6 59 a2 96 d3 18 d6 b6 89 b2 ba 8c d1 1e 23 39 c7 8d ae d2 5c 20 29 ec 75 7d dc ba b9 7b 69 16 2d 58 74 4e 7a f9 f1 e9 a4 a4 d4 12 62 9c f6 ea 89 bf b5 d1 49 c0 04 a5 b8 41 ec 92 3b 90 4d 15 93 30 d7 19 56 b6 70 9d 7e 0d 9a 4a c1 a5 d0 33 1a 97 4a 5c 0e 65 dc 4d 63 d4 1b 1b 83 0a 77 a1 fd 1b bf 20 f2 10 f3 fd c9 26 41 30 73 4f 92 a2 49 1f d3 f1 bc 91 56 ad ad 6c e7 2b c7 32 a5 b3 f3 0d 7b c1 c0 50 d9 f6 69 4d b7 f0 e5 85 b6 25 55 4d fa e8 00 65 d8 12 a0 89 a2 4b a6 91 dc ec 68 10 c0 0f 5e 75 36 26 99 69 08 04 d6 14 1c e7 53 f0 49 c2 ad 56 eb 89 93 ca 03 5c 3b 63 2f Data Ascii: w8PCDRf`[XDfL@[)E5n%{QqjY#9\ )u}{i-XtNzbIA;M0Vp~J3J\eMcw &A0sOIVl+2{PiM%UMeKh^u6&iSIV\;c/
2024-11-21 02:42:18 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 89 0d 0a 30 30 30 30 30 30 30 31 0d 0a 60 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2e 0d 0a 30 30 30 30 30 30 30 31 0d 0a ea 0d 0a 30 30 30 30 30 30 30 31 0d 0a 99 0d 0a 30 30 30 30 30 30 30 31 0d 0a 61 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 31 0d 0a 30 30 30 30 30 30 30 31 0d 0a 91 0d 0a 30 30 30 30 30 30 30 31 0d 0a f3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1b 0d 0a 30 30 30 30 30 30 30 31 0d 0a ea 0d 0a 30 30 30 30 30 30 30 31 0d 0a a1 0d 0a 30 30 30 30 30 31 0d 0a b3 0d 0a 38 63 35 0d 0a 1c 77 2e 75 39 34 38 ca 26 d5 b0 a9 a1 4b fb ba 50 e5 49 a6 ac d9 cf 13 0c 6a 59 85 9d 03 35 db 22 80 6c 8d 2c c6 34 25 76 cd a0 01 6d cb 55 a7 ab 58 ea e6 0c 92 f4 2e c5 ac 18 83 40 97 a7 2c 2a 30 c7 85 6b 9c Data Ascii: 0000000100000001`00000001.000000010000000100000001a00000001+00000001100000001000000010000000100000001000000010000018c5w.u948&KPIjY5"l,4%vmUX.@,*0k
2024-11-21 02:42:18 UTC	1024	IN	Data Raw: 64 6e 88 74 0a c5 09 d5 24 38 74 09 11 f0 69 5e 9e 0f dd 25 44 18 a9 1b 5a 7c e2 75 87 38 3b 9e e2 85 83 f4 59 8b 0b 28 70 0d 77 09 11 ca 11 b4 4b 88 10 07 02 76 db 70 f1 fa 16 98 49 3b 39 3c 16 95 8e 37 58 f4 26 a8 4b 88 a0 31 99 22 de c5 bc f1 51 6e 0a 95 5b 34 bc 1a 87 14 02 76 55 d6 25 44 e8 b7 b1 8f b1 9e b8 95 ec 12 22 20 44 92 65 08 77 09 11 dc 3f a4 5c 4e 37 5a b2 3d e2 d8 f4 1e f1 f0 dc f6 0d 7b fd 82 9c 77 ae 1f 1f 95 5e 95 a6 05 f3 2a c2 e0 42 db 52 b7 9b ad eb 00 a5 6d 09 e0 92 fc 1a 4d 94 fb f7 2e 21 82 66 b6 63 3a b0 99 f5 20 22 73 31 20 8d f1 93 8c 19 e8 12 22 2e e4 2d 18 74 52 c3 ae 44 a0 6f 97 10 c1 1f 0f 31 65 90 1a 2d 24 af 45 cc bc 01 a5 92 16 94 a4 c6 8f 18 8b 40 ab 70 d1 63 8a 93 2e 21 02 5e 71 31 72 1d da b3 31 0c a4 2e 21 82 65 c6 Data Ascii: dnt$8ti^%DZ\|u8;Y(pwKvpI;9<7X&K1"Qn[4vU%D" Dew?\N7Z={w^*BRmM.!fc: "s1 ".-tRDo1e-$E@pc.!^q1r1.!e
2024-11-21 02:42:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49804	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:18 UTC	511	OUT	GET /gui/58686.06780f63e6b75f4709dc.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:19 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: f2dfdf5387245628ea72c2e3e337220f Content-Encoding: gzip Server: Google Frontend Date: Wed, 20 Nov 2024 12:53:10 GMT Expires: Thu, 20 Nov 2025 12:53:10 GMT Cache-Control: public, max-age=31536000 ETag: "tA1SvQ" Content-Type: text/javascript Age: 49748 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:19 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 66 66 65 0d 0a 08 00 00 00 00 00 02 ff ec 7d e9 7a 1b c7 d1 ee ff 73 15 63 38 51 00 67 30 02 c0 1d 34 a4 c8 5a 2c c5 5a 1c 91 76 16 45 0f 3c 00 1a c4 58 00 06 99 19 88 a2 21 dc d8 f7 f3 bb b2 ef ad aa ee 9e 9e 05 24 25 db 67 79 9e 63 26 14 d8 6b 75 55 75 6d 5d dd 68 ac 53 e5 a5 59 12 8d b3 c6 69 33 55 f3 69 70 a9 46 ab 70 fc ee e1 6c bd 7c f7 3e 1b ae a3 e1 22 8c 96 83 6b ea 3e 7e 7c f3 b6 15 ac d6 e9 ac f9 e6 cd c1 f1 e1 f1 a1 7f dc 3d ea 9e f8 fb fb 47 9d 43 bf db 3d e9 74 7d fc ea ed bf f5 37 dd fd de 5e af df cc 7c e5 47 ad c1 bd 4d 14 24 4d d5 f2 a3 60 d2 54 fe 66 15 2d 57 71 b4 cc 9e 8d e3 65 bf 89 fa e5 b6 75 8a cf 69 e6 2d 07 51 b3 7b b0 d7 db 6b 05 f3 78 1c Data Ascii: 00000001000000010000ffe}zsc8Qg04Z,ZvE<X!$%gyc&kuUum]hSYi3UipFpl\|>"k>~\|=GC=t}7^\|GM$M`Tf-Wqeui-Q{kx
2024-11-21 02:42:19 UTC	1408	IN	Data Raw: e9 06 8d 87 28 f0 ce 9e 3e e8 1d 1c 7a 59 ec 8d e7 d1 6a 14 87 c9 04 64 a7 e1 c1 7d 51 76 75 0e bc 0f 1a 34 47 a1 f8 87 64 5e 28 8d d2 47 f1 e5 72 1e 87 93 68 79 f1 04 ad 31 ed 36 cd 20 fd c7 1e e8 0c d5 75 35 57 29 56 23 ec fc a6 d9 f1 d3 60 bd 4c c3 a9 7a 78 76 d6 6a be a1 85 07 d2 ca 7f 17 3c f0 ff 10 3c 78 db 7a bb 5d af 26 a0 e4 84 18 34 0b 66 61 da 6c 08 58 0d a2 0a 83 39 4c 97 d1 6a a5 b2 f4 e1 2c 5c 5e 50 d3 1c f8 60 28 2a c5 b6 71 57 16 0c 81 3f 60 3d b3 b5 1a af 32 27 49 f8 c2 58 c4 81 c3 2c bc 80 f0 d2 a0 0c a1 54 2e 94 03 0a a1 69 19 2e d4 8b f0 c3 73 e6 7e de ce 34 d1 62 b5 ce f2 e2 97 68 a3 a1 e7 21 30 24 53 39 c8 97 bb c5 f4 4b 70 ba 9a 3c 0c e7 f3 11 14 bd 61 85 a0 a6 c6 4f d4 7f d6 2a cd 1e 2c a3 05 6b dc 27 09 4d d1 24 cd 2c ec e4 41 00 Data Ascii: (>zYjd}Qvu4Gd^(Grhy16 u5W)V#`Lzxvj<<xz]&4falX9Lj,\^P`(qW?`=2'IX,T.i.s~4bh!0$S9Kp<aO,k'M$,A
2024-11-21 02:42:19 UTC	1408	IN	Data Raw: 81 83 99 4f 5d b0 b1 3a 98 f0 3b 76 24 d3 4a 9b 6e 82 c7 42 c3 1b ec a9 22 82 f5 7c c6 30 d1 ea a5 ec 28 7f fc e8 48 9a aa a7 fc f1 23 85 73 be 18 0c 9a da ad d4 c3 54 b7 0f fc 74 89 1f a1 31 1c 49 a7 5b a0 cd fb 21 21 af d4 2c 0b 34 7b df 6f 34 fa 0d 78 0b a4 61 8a 81 89 8a 6f 7f 6b 90 b5 8f 79 2b 90 61 cd 18 90 d5 40 ed 04 19 cd 94 05 99 31 37 4c 61 6c 7d 2f 9b b5 5f d1 1a 0b 38 d3 a5 58 b7 6f e6 d1 ee a4 80 e7 e2 05 2e 63 44 6a 39 1d ea fd 36 04 e3 c3 1f 4d 4b 48 32 03 2d 5d 6b d2 1d 68 89 45 d5 0f 74 0b d0 67 c1 c5 3c 1e 39 11 27 cb 41 f1 3a 19 ab 61 9c 5c 94 e0 29 70 52 9a b7 fa e9 dc 8a 1a 88 9c 34 ba 58 c2 cf 1e 5d c1 e1 d8 d1 63 fb 53 bf 91 f7 01 22 58 3a 51 c7 10 51 59 95 36 aa ea 79 1d b8 27 15 c6 b6 11 6b fc 6c 3d 82 5a e5 b0 d4 f5 42 fb 17 08 Data Ascii: O]:;v$JnB"\|0(H#sTt1I[!!,4{o4xaoky+a@17Lal}/_8Xo.cDj96MKH2-]khEtg<9'A:a\)pR4X]cS"X:QQY6y'kl=ZB
2024-11-21 02:42:19 UTC	256	IN	Data Raw: 83 b6 f3 08 bf 98 f5 1d 09 56 57 72 97 5b de 45 27 c8 37 06 95 18 21 5a a8 57 c9 23 9c b5 17 e0 9c 12 30 43 b6 6a d2 14 27 8a 43 d8 e9 0a bb 06 bf e1 a3 7c 5e e7 0c 53 35 68 f1 38 57 e4 63 72 27 da 8b 60 2c 1b 5a da 2b 42 92 49 c3 0d 3e f3 f4 a5 36 35 62 ed e3 c7 06 4d 02 ce 5c ac 6e 6e 0d cb b9 86 9f 9e 83 c9 2b 54 40 d2 12 91 c5 a1 c2 37 a0 c2 37 bf 37 15 78 17 7d 26 11 ea fb 1a 1a fc 8e 44 10 4f 44 78 fb 05 e7 94 4e 5e 99 93 75 c6 f7 6e ad 5a 21 39 02 fb 9f 40 d0 82 e2 f9 c4 a9 ed 34 15 a1 53 c3 23 67 da da 87 04 2f 58 ba c6 0b 48 52 4f 4e 4c db 23 85 98 42 bb 8b a4 d1 02 f7 fc 08 ee f9 b1 c8 3d e2 ae b8 5b d4 45 d6 70 bd 8c 10 dc 18 8a e9 9c 0e df 45 f3 78 a1 2e 42 d0 b1 3a 93 b6 b2 8a e2 05 90 22 0b a8 4d 07 a8 29 4b 16 3e 4a ad 76 76 99 fc 5b 80 0d Data Ascii: VWr[E'7!ZW#0Cj'C\|^S5h8Wcr'`,Z+BI>65bM\nn+T@777x}&DODxN^unZ!9@4S#g/XHRONL#B=[EpEx.B:"M)K>Jvv[
2024-11-21 02:42:19 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a f9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 81 0d 0a 30 30 30 30 30 30 30 31 0d 0a 49 0d 0a 30 30 30 30 30 30 30 31 0d 0a c0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 41 0d 0a 30 30 30 30 30 30 30 31 0d 0a 68 0d 0a 30 30 30 30 30 30 30 31 0d 0a 98 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 67 0d 0a 30 30 30 30 30 30 30 31 0d 0a 31 0d 0a 30 30 30 30 30 30 30 31 0d 0a 92 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4b 0d 0a 30 30 30 30 30 30 30 31 0d 0a a9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 10 0d 0a 30 30 30 30 30 30 30 31 0d 0a 43 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1a 0d 0a 30 30 30 30 30 30 30 31 0d 0a cd 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8d 0d 0a 30 30 30 30 30 30 30 31 Data Ascii: 0000000100000001-0000000100000001I0000000100000001A00000001h000000010000000100000001g0000000110000000100000001K000000010000000100000001C00000001000000010000000100000001
2024-11-21 02:42:19 UTC	1408	IN	Data Raw: fb b9 26 cf a7 3c 85 d2 57 32 79 0a 65 af fd 69 c0 64 4c 8b 4e b1 7a 59 92 58 3d d1 68 e8 a1 11 e8 b2 ab ed f8 27 ad 2d 10 e0 14 59 04 9c 40 8c 8a b6 6a 77 5b db 9f e8 16 d3 d3 6a 96 8f 59 fc 17 d0 48 b5 d1 ea 2f 9a 0d 7b e0 cb f1 ea 9a 56 08 aa e9 66 e6 08 77 67 cb 8f 1f 6b e7 c9 0f 95 e9 3a 48 cd 14 dc c0 8c 0e ce ab 3f fa b7 ab a9 1d 03 37 83 69 29 66 94 5d 30 02 82 da ee 05 10 08 82 d7 b5 b7 b9 34 37 d5 8f 71 7b 44 69 60 d9 71 d8 05 29 01 91 8b 71 3e ba 74 4f 74 6f c4 46 2e a6 e5 84 75 d7 3c 80 65 b9 5e 8c 10 46 b2 97 ad 6b 69 54 1e 0f 02 c2 39 a7 75 36 20 24 c8 57 d8 9d 35 a7 b5 4e 23 18 28 f1 93 e8 03 ae ed f6 48 73 69 de 9d 21 2d 4e 67 2a 50 5b e3 2e 46 17 17 2a d1 fc 0d 4b 04 79 1d cd 9f 70 38 dc c7 41 27 2c 20 4e 1f 08 48 a4 6c 1b 3f e5 83 b9 69 Data Ascii: &<W2yeidLNzYX=h'-Y@jw[jYH/{Vfwgk:H?7i)f]047q{Di`q)q>tOtoF.u<e^FkiT9u6 $W5N#(Hsi!-NgP[.FKyp8A', NHl?i
2024-11-21 02:42:19 UTC	1408	IN	Data Raw: 52 46 4f bf 17 56 e3 88 57 d5 bc 4c 49 58 a5 05 b9 aa 43 e1 bf db b6 42 e4 cf e3 3b 17 ab f5 68 1e a5 33 b9 73 c1 3b c8 4a 0b 7a 4a c5 a3 5f ed 55 82 44 65 bc b8 52 b8 2a 27 c1 f9 81 89 bd e9 7d 87 dc 0c bd 4b e8 a1 3a 24 ec 7b f6 36 3a 5f eb a0 29 44 8f d1 3b 4b b8 19 e2 ec 58 df bb 9c 45 e3 19 99 7b b8 34 32 47 d2 97 d9 bb 56 94 95 b6 2e 76 a7 c5 7a ad 03 99 c3 d2 f0 11 e1 c2 7b 1f 2a 98 87 48 28 a3 d8 13 fd 4b 8e 07 8a 35 b9 1e c6 0b dc bf 72 75 8b bf ac d1 2e 09 11 2c c9 b5 0b 84 85 23 3a 2a 0f 32 54 e4 f4 ef ac 48 1c 7d 67 95 45 ee b3 70 9a ab c9 22 70 33 01 cc 59 f9 cd 32 08 7b 1a a1 56 ed 27 88 84 a2 f0 e3 53 9d b4 0b 7f 1b 61 5e 7a 16 86 65 9a f8 a7 ee 3e d3 f7 24 f0 dc 21 5a e1 97 a6 04 ff b5 bc 3f 21 07 4d 9e 0f 7b 19 4f f4 63 9a 72 61 0b 81 74 Data Ascii: RFOVWLIXCB;h3s;JzJ_UDeR'}K:${6:_)D;KXE{42GV.vz{H(K5ru.,#:*2TH}gEp"p3Y2{V'Sa^ze>$!Z?!M{Ocrat
2024-11-21 02:42:19 UTC	129	IN	Data Raw: 44 2d 18 1d bc cf db f4 5d 18 7d b6 ee 70 b1 87 b6 6d 69 bc dc f8 70 0d 09 46 d8 8e c6 35 53 1a eb ee 9a 29 61 3b f0 55 98 df 0a 25 76 3c 97 0a 35 06 67 8d 79 53 50 6d 1a 2a e7 86 b8 40 b8 0b 1b 76 5e d1 c1 56 f4 ea b7 c2 a5 b3 11 e5 e5 da b6 4b a7 dc 68 b0 63 3a c6 b3 61 66 24 88 f6 3d c1 2f 51 ae 70 57 46 5b 80 b9 b4 26 8d fd 29 7b 5f 4b 47 19 b4 b0 63 0a f3 c8 a2 5c 4c de cc 0d 0a Data Ascii: D-]}pmipF5S)a;U%v<5gySPm*@v^VKhc:af$=/QpWF[&){_KGc\L
2024-11-21 02:42:19 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a d2 0d 0a 30 30 30 30 30 30 30 31 0d 0a 76 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 56 0d 0a 30 30 30 30 30 30 30 31 0d 0a a0 0d 0a 30 30 30 30 30 30 30 31 0d 0a f6 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 70 0d 0a 30 30 30 30 30 30 30 31 0d 0a 90 0d 0a 30 30 30 30 30 30 30 31 0d 0a 41 0d 0a 30 30 30 30 30 30 30 31 0d 0a af 0d 0a 30 30 30 30 30 30 30 31 0d 0a 17 0d 0a 30 30 30 30 30 30 30 31 0d 0a 10 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5a 0d 0a 30 30 30 30 30 30 30 31 0d 0a f1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 68 0d 0a 30 30 30 30 30 30 30 31 0d 0a c6 0d 0a 30 30 30 30 30 30 30 31 0d 0a ce 0d 0a 30 30 66 62 39 0d 0a 11 Data Ascii: 0000000100000001v00000001_00000001V00000001000000010000000100000001N00000001p0000000100000001A00000001000000010000000100000001Z0000000100000001h000000010000000100fb9
2024-11-21 02:42:19 UTC	1408	IN	Data Raw: c9 c5 08 96 56 d7 f7 8e 8e 7c af d7 3d 16 38 f4 8c 52 7b 80 9a ee 51 0f 4d 34 be 68 66 a9 ea a0 a6 b7 87 8e 7b 9a 57 34 04 52 db eb 9d a0 be 7b e0 e3 30 86 b9 55 9b 62 32 e7 09 86 dd 3b c4 ff 0d d7 4a 1a 10 52 20 f1 b8 85 e2 3b 8a 11 ad b9 73 d8 1b 1d 69 ba e6 6e 6c b9 55 ef 84 7e 8a d0 57 da 74 0e 3b 3d bb 71 b0 86 72 83 4e 67 7f ff b8 b4 92 72 9b e3 0e 38 a5 b8 9e 72 93 c3 09 6c 00 bd 2a 1c c0 e1 71 8b 72 0b 97 43 88 ab af 6d 60 48 65 ad 5e 22 e5 74 32 99 ea 6d 97 23 c5 6d a1 3a f4 53 44 48 a1 7e 3c 3d 51 4a ea 99 a0 85 ca 83 e9 9e d9 8d 86 a4 6e 3d b6 6a 4f e9 fd 5c b6 af 01 dd 34 54 5d 33 b7 20 a0 d0 79 3c c5 8f e1 08 2c de ad 74 37 a0 5d b8 1c ff 88 c9 8f e1 4f 26 a3 e3 a9 59 9a 09 2c 6b b7 41 3b 06 84 a2 1e fd 94 10 50 1a 69 d4 99 a8 91 16 55 82 84 Data Ascii: V\|=8R{QM4hf{W4R{0Ub2;JR ;sinlU~Wt;=qrNgr8rl*qrCm`He^"t2m#m:SDH~<=QJn=jO\4T]3 y<,t7]O&Y,kA;PiU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49805	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:18 UTC	690	OUT	GET /gui/40946.52e58c8b2a8b55ad5067.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:19 UTC	348	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 230f269c43159fd9e4e2305b69cc0be6 Content-Encoding: gzip Server: Google Frontend Date: Thu, 21 Nov 2024 00:22:34 GMT Expires: Fri, 21 Nov 2025 00:22:34 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 8384 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:19 UTC	1060	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 31 0d 0a 00 0d 0a 63 66 63 0d 0a 00 00 02 ff ec 5a 6b 73 db 36 16 fd be bf 82 e6 76 3d e4 16 cb da 8e ed d8 f2 b2 6e 1a c7 69 d2 34 c9 d8 49 66 76 3d 1e 0e 25 c2 12 1d 8a e4 00 a0 1c 55 d6 7f df 73 01 f0 61 4b 7e 24 75 db ec ce e6 43 0c 81 20 70 df f7 dc 0b ba 95 e4 8e 54 22 1d 28 77 cf 93 3c 3b 0b 2e 78 bf 8c 07 1f 9f 8e aa fc e3 44 45 55 1a 8d e3 34 0f 6f 79 76 79 79 72 ea 07 65 25 47 de c9 c9 e6 da ee e6 f6 29 9b ed 6e ae 6f 6d f7 3c c5 38 13 7e f8 fd 4c 04 89 c7 d9 ec 9b f3 9e 87 9f 23 f6 ec a5 1e 54 ec 70 a8 07 31 7b fe 8b 1e 0c d9 87 03 3d 28 19 3f d2 Data Ascii: 0000000100000001000000010000000100000001001cfcZks6v=ni4Ifv=%UsaK~$uC pT"(w<;.xDEU4oyvyyre%G)nom<8~L#Tp1{=(?
2024-11-21 02:42:19 UTC	1408	IN	Data Raw: 7c 73 91 bf 15 45 c9 85 9a 1e 4f c7 fd 22 93 e6 ad b4 7e 6b e9 1a 68 64 8f 60 4a 1a a6 88 4a 99 e2 c2 f3 6a 58 e1 e1 dc ab 89 e9 ea 16 07 5c 0e 44 5a aa 42 68 1a 03 9e 03 7a 88 b8 9f 21 5d 13 3e d1 0e 15 c4 65 99 4d 3d b8 9a 3f b7 9b 75 80 4b 44 6f 02 05 da 73 3c 1e 36 87 23 84 10 d3 dd 19 12 04 78 76 0b 8d b2 dc 95 50 4d 4b 5e 9c 39 ea f2 b2 f1 72 47 19 d7 0e d5 89 11 43 a0 8a b7 22 1d a7 2a 9d f0 53 12 59 03 87 70 ac 45 8a 30 a5 2c 23 52 2e 2f dd 84 9f c5 55 a6 5c 9f d6 2e 1c 95 d6 a9 1a 91 43 1b 56 ce 2f 9c 77 20 e3 99 10 90 83 fb c3 0f 9d e3 9c 71 85 38 6e b9 8e 9d b2 26 c3 d1 e1 2e 70 6b 89 78 2e e1 ec 7c e8 c2 80 f9 fe b1 1e f7 5e 57 e3 3e b0 13 14 34 07 65 f5 0a df ba 95 2b b5 8e f1 86 95 01 df 47 a6 fe d6 75 e7 d0 9a 9f 02 a8 ee 5b d3 00 3f 69 ce Data Ascii: \|sEO"~khd`JJjX\DZBhz!]>eM=?uKDos<6#xvPMK^9rGC"*SYpE0,#R./U\.CV/w q8n&.pkx.\|^W>4e+Gu[?i
2024-11-21 02:42:19 UTC	936	IN	Data Raw: b5 2e 54 d8 3e 49 13 14 e2 20 7c 51 c5 6f a9 2e c0 5d 0d 98 4b 83 27 90 30 55 2b a6 40 41 65 6a 92 69 d0 94 12 d2 6c b3 c4 54 42 6b e3 dc d8 b8 2a 54 9c 3d cb 87 28 aa a5 09 ca e0 f0 5d 67 d2 e3 d7 12 09 75 a4 24 34 d5 59 03 9f b0 25 cb d2 2d da c7 37 6d 46 ec d6 5a 3e 40 f2 69 b6 59 6c 37 5f 27 07 32 d5 c6 a3 c5 96 17 2a 3d 9b 7a 54 e0 19 0b b9 49 8e d4 57 13 8a 64 8a f0 86 f5 54 11 22 d6 96 cd 8c 06 2c 6a af 36 1c 65 b4 7f d3 76 dd a8 88 f6 0d b5 ed 3a 7b cd 97 19 8d 6e 29 fc f6 1b 2e b8 63 19 8c 5e a3 5d 41 8d c4 d6 0b 17 fb 0b 8d 3f 30 37 69 c2 4b 84 2e 19 47 8f 41 87 3d aa 79 b5 59 e9 e4 4c 4f 0e 75 5b 5c b7 d1 ba 75 31 31 74 54 c7 dc 7c 88 04 03 2f 78 48 86 5e 3f ff 3c 86 9a 68 8f 5c 05 9f 5f ce 10 1e dc c2 cf 53 60 32 14 e4 3c 39 28 a8 3b fc c0 0c Data Ascii: .T>I \|Qo.]K'0U+@AejilTBkT=(]gu$4Y%-7mFZ>@iYl7_'2=zTIWdT",j6ev:{n).c^]A?07iK.GA=yYLOu[\u11tT\|/xH^?<h\_S`2<9(;
2024-11-21 02:42:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49806	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:18 UTC	511	OUT	GET /gui/70520.2084d2d63c64ac00d8ff.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:19 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 44da4b08fd6875a09b999440d5f82ec9 Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 18:38:17 GMT Expires: Wed, 19 Nov 2025 18:38:17 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 115441 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:19 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 66 66 38 0d 0a 02 ff b4 5d 6d 73 1b 37 92 fe 7e bf 02 e1 5d e5 a4 2a 2e e3 f5 6d 72 39 bb b4 57 0a 29 3b aa b5 64 95 a4 f8 6e cf 95 e2 8e c8 a1 38 1b 92 c3 9d 19 4a 56 79 f5 df ef e9 6e 34 06 c0 cc 50 a4 ec 7c b1 45 bc 74 37 80 46 a3 df 80 e9 6d ca d4 94 55 91 4d aa de eb 83 32 5d cc 06 f7 e9 cd 3a 99 fc 36 9c 6f 56 bf dd 55 e3 4d 36 5e 26 d9 ea 68 4b dd 3f ff f9 f1 d7 c3 c1 7a 53 ce 0f 3e 7e fc cf 17 df bf 7c f1 6b ff 33 ff ff ea 20 ed 67 Data Ascii: 0000000100000001000000010000000100000001000000010000000100000001000ff8]ms7~]*.mr9W);dn8JVyn4P\|Et7FmUM2]:6oVUM6^&hK?zS>~\|k3 g
2024-11-21 02:42:19 UTC	1408	IN	Data Raw: 96 96 0b a6 4d 2e 70 62 22 3c b7 70 1e 2d d7 49 76 bb 1a 67 53 9d d2 e6 d1 d6 d5 e7 b6 c8 37 eb dd bb bd a4 c5 d9 ab 79 99 16 e3 e4 16 1b 6f 9f 5e eb a4 2c b1 c9 f6 18 0f 08 03 26 ff fc 7c 72 0e a6 f9 fd 6a 91 27 cc 6f 3b 13 57 77 da 7f 60 41 df e7 91 ba f7 c4 2c b3 72 b2 d7 9a 49 87 fd 07 e7 fa ed 35 30 ee b5 f7 a0 b0 c5 f2 87 bd 46 65 7b ec 3f ac f4 13 64 42 55 40 6c e5 ab bd 30 86 1d bf 14 31 fa ef 35 af 01 f6 fd e7 f7 36 19 43 6b d9 7d fb 4d 57 25 3a 14 38 49 77 de 48 d4 3c 9b 6c 51 c6 23 89 55 a4 b7 a4 42 3d 8c 7f 4b 9d 82 fe e4 16 77 9d ee 92 c5 66 77 5c e9 dd 3e f2 6a 9d ad 77 07 bd dc 54 e9 a7 9d 27 69 96 2f a6 7b cc 29 1d 5f 3b c3 5e 17 f9 04 4a 20 f4 38 52 12 c7 55 52 c0 f6 db b9 37 9f 71 f9 5e 8b 01 15 78 0d 45 0b c7 2c f4 c5 12 67 c2 ce c8 a0 Data Ascii: M.pb"<p-IvgS7yo^,&\|rj'o;Ww`A,rI50Fe{?dBU@l0156Ck}MW%:8IwH<lQ#UB=Kwfw\>jwT'i/{)_;^J 8RUR7q^xE,g
2024-11-21 02:42:19 UTC	1408	IN	Data Raw: ae 5e 7e ea ae 83 73 ad 13 6c 99 6f c1 19 f8 30 e8 07 d6 11 4e 1e 9a 45 10 03 dd 92 77 94 0e 52 57 81 5a 30 b1 50 da 68 3d 36 3c ed d2 21 6e eb a4 9f 56 70 fc af 16 72 f0 f1 21 dc 53 9f ca da 2c 19 d0 34 db 50 da 78 91 53 5c 08 c1 54 1b a6 96 5a 98 90 9c 87 40 10 5a 0e 1b ad 2e c7 55 5e 77 44 43 b2 e0 ec aa b7 74 4b 4a 87 a6 87 bf 41 6a 02 23 ef 7e e5 89 77 2d 40 dd 24 df d0 81 a6 f0 7b f6 37 d5 40 8c 97 e3 44 6b 74 f2 a4 f8 a6 bd 78 12 17 eb 71 ec 84 17 66 d9 f1 8e 82 8c 1b 79 3e 9b 9e ed c8 ca cf e3 e3 af fd d5 11 12 39 0e 3e bb 44 06 de cd bd 2b c9 6b 88 6c 76 97 34 21 76 5b 49 66 de 0c c1 28 8a 4e 97 30 0a b1 61 30 4e 89 ab 0b 9c 6b c4 d8 43 20 7f a3 22 84 42 11 da 5a 22 30 5c f7 87 a1 4d 61 4a f3 6f 9f d3 c7 bf d5 4e 22 81 33 7a c0 ff 9e 51 69 66 50 Data Ascii: ^~slo0NEwRWZ0Ph=6<!nVpr!S,4PxS\TZ@Z.U^wDCtKJAj#~w-@${7@Dktxqfy>9>D+klv4!v[If(N0a0NkC "BZ"0\MaJoN"3zQifP
2024-11-21 02:42:19 UTC	328	IN	Data Raw: 28 90 56 1a 9c e2 48 6b 34 79 c7 5c 68 e7 0e fb 11 53 dc ea a6 a4 51 52 3a 9d c8 c5 f7 1c 07 36 d2 19 93 a1 18 1a e1 2f 6f e0 af 7a c7 75 f5 73 11 7a 10 48 02 d4 a8 5b c2 69 01 ee 21 05 ff 49 b3 d4 20 f2 1e 8c 69 47 eb 40 8c 6c 1c da 61 a7 6d 6a 03 74 01 52 de be 1c 8c fe 02 b4 22 03 28 fc e7 f0 e1 06 a5 17 ed 0b 50 9e 5d 19 4b 2e b7 79 e6 3c 43 a5 86 b5 a0 32 16 7f c7 17 db e4 9a 58 80 f9 af 88 99 98 4b aa 10 b7 51 2d f8 e1 06 94 3b 62 90 17 d0 5f 70 23 89 fd 06 b8 ed 52 3d 28 47 0d 3d 1c a6 06 85 21 53 6f 96 35 f5 8d 9e 00 ef 48 f2 55 04 29 cb 76 d7 83 b0 91 30 b2 7e 4f 39 08 b2 ca dc 27 b4 0b 49 c3 17 cf 5b 82 16 7c 1f 10 89 a3 77 59 91 af c8 db e1 28 53 fc 7a 5b 09 34 05 77 b7 9e a0 06 d7 2e f8 ae 8a 5e 6e 50 6a 14 fe e9 ca 5c 83 c6 ff c1 21 e8 61 70 Data Ascii: (VHk4y\hSQR:6/ozuszH[i!I iG@lamjtR"(P]K.y<C2XKQ-;b_p#R=(G=!So5HU)v0~O9'I[\|wY(Sz[4w.^nPj\!ap
2024-11-21 02:42:19 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 5a 0d 0a 30 30 30 30 30 30 30 31 0d 0a bd 0d 0a 30 30 30 30 30 30 30 31 0d 0a 39 0d 0a 30 30 30 30 30 30 30 31 0d 0a f9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 32 0d 0a 30 30 30 30 30 30 30 31 0d 0a 12 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7c 0d 0a 30 30 30 30 30 30 30 31 0d 0a a0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 12 0d 0a 30 30 30 30 30 30 30 31 0d 0a 35 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0b 0d 0a 63 64 39 0d 0a f0 d3 7d b6 af 86 97 80 01 5f 74 e9 2a c0 47 62 be 34 b6 85 b9 cf aa b9 55 a6 fc b9 fc 49 6e 6d c9 65 3a 00 84 e3 54 2d 09 1b 28 8e a7 11 16 32 4b 7a 0d f1 e8 71 4e 85 06 bb 26 81 c7 5a ae 14 ea 7a a1 87 16 19 7b 59 12 98 da a3 f8 2d 23 80 ca Data Ascii: 00000001Z00000001000000019000000010000000120000000100000001\|0000000100000001>000000010000000100000001500000001cd9}_t*Gb4UInme:T-(2KzqN&Zz{Y-#
2024-11-21 02:42:19 UTC	1408	IN	Data Raw: 72 97 35 03 a7 89 12 dc 47 67 39 ce 1d 5d 58 a7 cf 74 e0 32 0c 11 08 5d f2 73 80 8f 53 0b 0a 5c 5b db 7b 18 d2 f3 81 20 63 0f 70 f2 74 00 d9 a7 87 b4 45 6e 65 8e 0d bf 51 e3 54 a3 21 f5 35 c7 0e 0a 72 ad 77 80 f2 53 2b 94 9f 1c 14 a4 66 ef 00 65 d8 0a 65 08 28 9d 6f c4 89 08 be ce d7 d8 0e e4 a4 37 74 e1 92 9e 8f 8b 24 72 13 06 f7 b4 22 dc eb 4f c5 2d 7d a3 cb b3 82 f6 02 53 45 ef e8 90 5e 07 89 19 75 d3 5a 6c 22 72 e2 5a 6f b2 be 16 62 10 e2 a6 57 f5 50 43 22 90 58 bc f9 ac 9c a0 b9 b2 ee 65 58 e4 fc dc 5c 84 07 e9 79 d5 32 59 13 8f aa 23 da b5 04 2f 78 ae f1 e8 5d 39 81 1e fa ce 8f 2f 8f d5 a2 88 d0 fc 95 ab d8 43 cf 19 b8 24 0d 95 e7 6b 8f 10 54 9e db 5b 5c f1 c6 2a d8 f0 1e 2e 43 72 56 27 19 61 f4 ba 1d 8d 34 20 0a 49 06 fe 8b 75 2d 54 21 d7 60 c9 be Data Ascii: r5Gg9]Xt2]sS\[{ cptEneQT!5rwS+fee(o7t$r"O-}SE^uZl"rZobWPC"XeX\y2Y#/x]9/C$kT[\*.CrV'a4 Iu-T!`
2024-11-21 02:42:19 UTC	649	IN	Data Raw: 13 10 b6 c7 9e f9 2a 94 4d dd db f1 96 95 df 1e d3 9d 32 a4 85 06 f1 b5 11 8a a1 37 4f d5 e5 b4 93 7e e9 3f 33 6f a1 23 6f 02 cb 02 65 3d 56 85 28 3d c4 d6 ec c3 91 d4 85 9f a5 17 f8 57 f2 33 06 ae c5 70 57 d3 27 5b e8 7d 13 a8 7a 88 3a d1 15 9c 3d 94 0c df 9f ad 1b 2e f0 9d 47 b3 16 d4 99 cd 9a 4c b1 bd 66 d0 21 e4 14 8a 36 94 ff ce 19 63 cd 60 a1 8f da b5 d9 67 ac f6 51 7d 99 d7 13 7a 61 3f 9e 55 29 dc 07 a6 3c bd 2f 20 2f f0 0c 7f 0c 91 cb f6 01 c8 f1 12 9d 16 1b 82 89 d6 c0 96 ee 03 55 9f f1 17 42 df f0 a3 fe 31 a9 b6 54 4d e1 ef 64 71 c9 e5 4d 8e ef 9d b6 07 19 ec 4a 3b 99 a7 0d 14 54 f6 25 08 e0 71 6a fb 64 80 9d 7f a9 34 a7 fc 3d 01 73 cd df 13 88 49 80 6f 8a 20 44 8d f6 19 a4 ff e1 01 41 3c a4 cf ed e4 86 82 3b d1 52 79 35 fb a0 68 f9 50 81 60 1a Data Ascii: *M27O~?3o#oe=V(=W3pW'[}z:=.GLf!6c`gQ}za?U)</ /UB1TMdqMJ;T%qjd4=sIo DA<;Ry5hP`
2024-11-21 02:42:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49803	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:18 UTC	689	OUT	GET /gui/8405.5eb49c1a7107f741455b.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:19 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 21f38f06e113b3226cf900714222fa57 Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 22:41:17 GMT Expires: Wed, 19 Nov 2025 22:41:17 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 100861 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:19 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 61 36 36 0d 0a 00 02 ff ec 5b 69 6f db 38 1a fe be bf 42 d1 62 0b 69 2b 68 e2 4c 4e 67 d5 4c d1 6b 07 e8 64 82 a4 ed 02 13 18 86 2c d3 16 a7 ba 40 52 4e 0d c7 ff 7d 1f 52 94 25 3b 76 e2 34 95 e1 16 cd 97 c8 12 45 be f7 2d 33 e7 c4 e0 82 d1 40 98 a7 16 27 d1 c0 bd 21 bd cc 0f 3e bf 0a f3 e4 f3 48 74 73 da 8d 7d 9a 78 f7 3c bb bd bd ee d8 6e 96 f3 d0 ba be 3e de df 3d e8 38 93 d6 fe 71 eb a4 6d 09 87 38 cc f6 5e 4c 98 db b7 88 33 a1 6d 0b bf c6 53 fb 74 e4 33 83 7a cc 3a d9 3b 6e 1d d8 4e Data Ascii: 00000001000000010000000100000001000000010000000100000001a66[io8Bbi+hLNgLkd,@RN}R%;v4E-3@'!>Hts}x<n>=8qm8^L3mSt3z:;nN
2024-11-21 02:42:19 UTC	1408	IN	Data Raw: ad c8 6e c3 1d c7 94 13 97 11 9e 46 23 79 cb 15 21 49 2c 1c 61 57 46 67 58 db a7 84 06 26 b5 f0 65 d2 c2 39 ac 72 56 33 8f 89 80 44 6f 5f 73 48 72 63 f5 62 ea 09 1d 92 c9 b0 b6 8a 33 65 40 39 e9 59 a9 c2 92 3b be 63 26 70 f0 30 98 35 78 fc 3b 6b 54 0c a4 16 71 1d 57 29 3f a1 63 84 f1 42 8c d0 42 8c 00 77 31 e7 d3 11 95 62 57 7b de 8f b8 7d 5f f8 ca 99 e0 f1 4b ce d3 80 16 4e 5f 63 2f 3c 89 7d 89 f1 b0 c2 f3 df 58 a0 fc 0f 9c bd 8c cc b8 9b 27 96 70 69 bf 8c 9b 8c 31 25 51 df 90 94 af e2 08 fe 4a c6 0e a4 ef 2c dc 76 11 e8 cc 8e 86 ff b3 ec 29 e0 b9 24 59 ca 04 df 30 28 ac 38 b5 80 a2 ee 62 c1 36 25 10 a7 85 a7 15 b6 43 14 75 0a 57 17 f8 fe ab 34 11 60 e5 cb d2 63 5e f8 cc 8f b9 37 19 44 fe b0 0d 6a 45 79 9c 9c fb 31 69 9b 6f 71 c7 9c 3a 62 f1 fe 87 e2 b6 Data Ascii: nF#y!I,aWFgX&e9rV3Do_sHrcb3e@9Y;c&p05x;kTqW)?cBBw1bW{}_KN_c/<}X'pi1%QJ,v)$Y0(8b6%CuW4`c^7DjEy1ioq:b
2024-11-21 02:42:19 UTC	294	IN	Data Raw: 3a c0 a4 a8 09 56 53 2d 34 bb 5c 73 a2 a5 b1 19 8e d0 9d 9f e1 58 1f b9 62 9c 63 09 56 db 32 ce f1 f5 b6 68 e9 64 c7 12 4c 1f 9e bd 29 87 22 9a 9b d2 f8 7a 2c 4b d8 ca 81 8d af 42 b0 6a 8b 37 d7 a9 ff 7a 14 2b e8 ba ba 69 3f 8f e4 92 fa 60 f5 ca 26 a6 2a be 09 6a 77 07 2c 1e c4 b2 1a 47 db 46 c9 ac a0 7b 92 6c c6 24 4e d9 f8 42 cd 09 26 18 3c 96 b5 ff 2d f3 10 05 88 dd ac 80 11 ff 15 90 4b 9d c5 c3 c6 06 71 cd a5 9c 0a 2b 3a 75 f1 b2 c1 f4 b2 53 f7 f6 c2 aa 05 a2 4d 34 ec 9a 6d 19 68 bd 29 1b 3f 8f f0 5a b5 ee 81 d6 92 c7 74 0f 54 8c be b4 67 80 2f ee 54 cf a0 0c ee d1 3a 00 3f 1e fc 7c 60 29 97 ca cf 07 c0 25 7c 3e 30 db b1 fc e4 a0 d9 af 08 1a 87 68 ee 63 02 f4 57 3a f6 e9 3f 7e f9 e5 9f 06 4f 73 16 90 3f f0 c9 2e 86 85 3e 5e be f7 e4 a7 d0 ee 01 e9 ed Data Ascii: :VS-4\sXbcV2hdL)"z,KBj7z+i?`&*jw,GF{l$NB&<-Kq+:uSM4mh)?ZtTg/T:?\|`)%\|>0hcW:?~Os?.>^
2024-11-21 02:42:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49808	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:19 UTC	690	OUT	GET /gui/71288.1829e1a8db7a3e06e295.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:19 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: e42ea1c90bed5e8d8d1c3868d8ae5372 Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 19:04:32 GMT Expires: Wed, 19 Nov 2025 19:04:32 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 113867 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:19 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 66 66 38 0d 0a 02 ff ec 5c 5b 97 db 36 92 7e df 5f c1 68 36 3d 62 96 64 53 54 4b 2d 51 96 13 8f 93 ec e6 9c 64 b2 6b 7b f6 c5 eb 33 a1 48 48 62 9a 22 79 48 aa 2f 91 f5 df f7 2b 5c 48 f0 d2 dd ce 65 f7 29 56 62 ab 51 85 42 a1 50 a8 1b 80 1e 1d 4b 66 94 55 11 87 d5 68 35 2e 59 b2 75 ee d8 26 0f c2 9b d7 fb 63 7a 73 5b fd f3 18 ff f3 10 c4 e9 fa 09 d8 c7 8f ef 3f 98 4e 7e 2c f7 e3 f7 ef af 27 de 62 f1 c1 3a 79 b3 e5 72 e1 8f 0b 8b 59 95 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000ff8\[6~_h6=bdSTK-Qdk{3HHb"yH/+\He)VbQBPKfUh5.Yu&czs[?N~,'b:yrY
2024-11-21 02:42:19 UTC	1408	IN	Data Raw: 94 d4 5a eb d7 ea c2 15 17 76 27 0d 61 43 09 b1 4c b2 ca 48 83 03 b4 bf 22 2e a0 e2 b0 69 f7 a3 97 2f 2e 09 44 18 79 90 2a f9 48 ed 36 b6 a5 3d 17 9b 40 a3 25 a4 79 49 f8 43 84 ab 2c 4b aa 38 d7 28 0b 01 f7 59 28 8f db 16 0b 92 30 2d c7 80 f4 47 24 7e 7b cf 02 6c 41 03 0a 0b 5d 7e 20 ad e5 02 ae 95 d6 1a 6d b2 02 18 d8 9d d8 f0 07 23 1f 56 ec de aa b4 8d ae be 46 09 d6 28 e1 ba 65 c0 46 f5 ad 47 5e da 9e 30 33 6d 5b d0 a8 d4 e0 6c 74 3b 23 27 a1 ec dd af d9 78 d4 87 6f bb d2 c9 59 1a c6 c9 77 d0 12 6d d3 68 5f fb 06 81 4b 74 93 45 0f 10 13 94 b7 2d 49 70 c1 1b ea ed 0a 17 ca 1b 14 9b 72 bf 0e 3b 13 53 17 61 0e 11 e6 24 c2 5c 29 58 9e 04 21 db c3 80 62 a5 76 49 76 c7 55 54 53 40 0d 6e 84 59 62 4f 3c ae 4f 42 e5 2e 73 e8 dd 9f a4 06 64 39 28 ab 9f 4c d3 d7 Data Ascii: Zv'aCLH".i/.Dy*H6=@%yIC,K8(Y(0-G$~{lA]~ m#VF(eFG^03m[lt;#'xoYwmh_KtE-Ipr;Sa$\)X!bvIvUTS@nYbO<OB.sd9(L
2024-11-21 02:42:19 UTC	1408	IN	Data Raw: 62 44 7d 91 cb 63 18 b2 b2 44 ab 2e ed 38 dd d2 c2 bb ee f5 46 4d e4 2e 28 52 c4 22 68 d5 d7 2f a2 35 2d d0 a8 af b4 1c c9 2e 76 1b df 98 4c 2c e3 fa da 32 bc c9 42 f0 21 47 14 d0 19 20 93 6b 0f 28 52 5e 34 b2 00 b9 80 78 53 74 9c 4a 5d 91 1c 08 a8 e7 2d 01 9f cc 2c 43 42 05 27 72 cc 25 c8 4e e7 f8 5f 69 ad a8 2d db bc 44 07 4b bd 0f ca 98 e6 ec ce bd cd b5 5c 57 98 d7 2c 85 1a 20 d1 a1 0a b4 86 e5 2d e9 d3 e6 be 87 e3 ce 5d af de 38 98 43 17 01 99 d2 d5 a2 33 93 2e ce c2 85 a6 b4 e7 d3 45 99 47 93 ab 89 9c 55 42 56 a3 37 90 ae 21 a4 d5 4f 22 a8 a5 da ec ec f2 b8 41 8d 92 96 72 1b 45 5b b9 ed 1a a1 e8 18 cc a5 4f 5b 20 2d 78 b8 5d 32 26 e0 7c 41 5b c0 d9 76 aa 76 a3 5a 52 1d 8e ad ea 31 b9 9f e5 a2 b6 c0 01 9b a8 b1 85 00 5a d0 70 8b 8f 18 99 4f 5e 07 ea Data Ascii: bD}cD.8FM.(R"h/5-.vL,2B!G k(R^4xStJ]-,CB'r%N_i-DK\W, -]8C3.EGUBV7!O"ArE[O[ -x]2&\|A[vvZR1ZpO^
2024-11-21 02:42:19 UTC	330	IN	Data Raw: 43 ba 70 a5 e1 95 20 13 ee b5 eb 53 27 25 3a 6d 1d 3b 42 e5 fa 6f 97 77 74 49 4c 09 73 90 89 6d 8c 3b 2c c7 9c 8e 18 15 17 a4 98 b5 4e 0e 0c 25 55 c6 f7 79 5f 5c d4 c4 99 75 86 8b 22 fc 66 d8 e9 53 7b 6b 65 aa 82 05 37 5c 6f ed 7b 72 e7 32 98 68 5a c9 89 cf ae e7 75 98 d1 40 0e 28 48 5d cf 17 03 10 f2 61 cb 25 3c 50 8f 1a f7 ea a8 f5 0c 81 38 0c 41 7b 7e 7f 46 c9 8d ae 4b 9c 70 24 7f ef c3 ff 1a b4 2a 2b e1 a9 50 40 fa fc ec e0 aa 9b b0 6b 74 e7 4d ea ba 7d 8f 90 a1 15 6f 68 30 ee c1 b4 60 03 20 dd 30 18 92 55 d5 dc cd 2e 54 bb 4a 2e 50 6a 6a 7a e8 b6 03 1c a8 dc 02 7d 84 29 6c 2c 37 cf 11 78 a3 8a 43 80 44 21 1e 37 2f 38 7b 43 f4 d5 d0 95 3b 57 7a e8 da fc eb cd 3a 19 61 32 e5 90 4f 11 54 c1 5b 97 a2 68 d7 48 8a f0 57 8e f7 34 61 15 8b 7c 7a bc 84 99 2b Data Ascii: Cp S'%:m;BowtILsm;,N%Uy_\u"fS{ke7\o{r2hZu@(H]a%<P8A{~FKp$*+P@ktM}oh0` 0U.TJ.Pjjz})l,7xCD!7/8{C;Wz:a2OT[hHW4a\|z+
2024-11-21 02:42:19 UTC	1408	IN	Data Raw: 30 31 0d 0a 5a 0d 0a 37 35 62 0d 0a d4 c7 a1 66 89 21 f5 a9 8f 23 00 38 bb d7 fc 52 0b 4b 03 98 2b b1 36 2d b8 d4 32 ee bc 84 87 a5 d0 9e e1 e2 f4 90 df 5d b5 5d d8 4a 99 1e dc 19 2f 50 82 e0 57 63 c8 cc ad b8 a3 19 68 2d ed 5e 63 af 41 28 92 df 62 b3 a5 cc 22 6f 69 4b 5e d7 3e 53 39 33 a9 c1 43 94 94 12 6f 50 b9 de 15 19 ca fa 72 17 b6 91 77 08 9a 28 e3 89 79 44 c7 85 65 a0 60 81 1b d0 41 c9 e0 43 6d 04 14 56 97 c6 00 86 b6 e9 86 a0 6a 5b f4 60 cf 85 98 22 e4 34 4f dc d2 69 9c 72 5f c3 ed 5f 2b da 6a 4d 4e cb 5a 21 b1 27 e5 20 77 38 a4 a1 cb b9 bd 44 7d 2b 60 0a 06 c4 6e 93 21 98 8c 61 ff 9f 19 59 d5 71 1f 26 a0 84 dd 66 bf 6b 45 cc 33 8f a6 48 b0 76 b8 67 e1 8d f9 6f f4 dd 0f 70 bd f5 96 59 fc fb 36 2e ca 0a d0 38 89 64 fb d0 f4 44 0f a1 5e cf 09 5a e2 Data Ascii: 01Z75bf!#8RK+6-2]]J/PWch-^cA(b"oiK^>S93CoPrw(yDe`ACmVj[`"4Oir__+jMNZ!' w8D}+`n!aYq&fkE3HvgopY6.8dD^Z
2024-11-21 02:42:19 UTC	489	IN	Data Raw: 28 46 c7 c3 df 0e 89 ce 30 6d 0a 1d 20 08 e0 d1 70 4d 80 8e 95 bb 63 d4 fd e5 3a 75 e1 20 81 37 f4 2d 12 6e 7b 96 78 10 5c 83 1f 99 06 3d 17 f7 4e f8 bb 37 fc d9 e1 4f c9 39 ac c7 3c bd c7 e6 27 55 74 ee 2e ae 70 b5 86 96 ef b6 05 8a 4c df 71 85 b7 85 d3 35 7a b5 01 38 75 20 7e 0d 69 f5 a7 94 50 99 fc 3a e1 17 7e b3 b1 57 f2 42 97 96 ee 52 88 df 3e 74 68 fb 06 fc ce 93 9a 9a ae e3 5a de 41 23 53 04 56 e3 69 f9 66 07 4d 6c 8f 2e e6 73 3c b8 ce a2 47 fd 09 5e c4 f0 2d 8e fa 89 78 bd 9f f5 e9 36 8c 3d 52 93 68 f2 ee 1e 6a 3d 89 46 da 3a 69 ba 3f 32 37 4c 6d c9 fa 14 84 55 ea ad 19 c4 ab 0a 1e ba 94 65 9b aa 59 89 a3 0c 7e 4f 1f 1d ea 2a c6 10 b5 ee 2a d4 c8 f5 1c 06 a5 43 53 68 ee f7 e8 83 3c b1 18 1a 6d 59 62 17 7c 9f 6a 6d 79 4c d4 e2 ee a1 b6 f0 b5 10 3a Data Ascii: (F0m pMc:u 7-n{x\=N7O9<'Ut.pLq5z8u ~iP:~WBR>thZA#SVifMl.s<G^-x6=Rhj=F:i?27LmUeY~O**CSh<mYb\|jmyL:
2024-11-21 02:42:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49813	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:20 UTC	511	OUT	GET /gui/75884.d7767dd34ca82b896517.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:20 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 99b19b87d1ede5d7e1e739640851c5e0 Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 21:27:48 GMT Expires: Wed, 19 Nov 2025 21:27:48 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 105272 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:20 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 31 0d 0a 08 0d 0a 30 66 66 64 0d 0a 00 00 00 00 00 02 ff cc 5c 7b 77 e2 46 b2 ff ff 7e 0a 85 64 67 21 47 92 01 1b 1b f0 e0 89 c7 33 93 78 33 8f ac ed d9 73 b2 b3 3e 44 48 0d 28 16 12 91 84 1f 61 f8 ee f7 57 d5 dd a2 25 c0 33 79 dd bd e3 c4 86 7e 56 d7 bb aa 4b aa 2d 32 61 65 79 1a fa 79 ed b8 9e 89 68 ec de 89 d1 dc f3 6f ce a6 8b f8 e6 36 1f 2e c2 e1 cc 0b e3 c1 23 7d 1f 3f 7e b8 6e b8 f3 45 36 ad 7f f8 70 d4 e9 76 0f ae ed 25 ff ed d7 73 5b d8 61 63 70 b2 bc f5 52 2b 19 84 f5 76 bb db 3b 68 d8 19 3e 76 0e bb 47 cd 86 9d 0e ea 61 bd d7 ed b5 1a 76 58 3f 40 d3 41 a3 61 c7 e8 6f 1d 1e 1e 74 1a b6 87 8f 87 ed ee 7e bb 61 47 f8 d8 ed b4 9b 98 e5 d3 ac 76 bb 4d cd 68 3c 6c 1f a2 Data Ascii: 0000000100000001010ffd\{wF~dg!G3x3s>DH(aW%3y~VK-2aeyyho6.#}?~nE6pv%s[acpR+v;h>vGavX?@Aaot~aGvMh<l
2024-11-21 02:42:20 UTC	1408	IN	Data Raw: 3e 8b 1a f5 c9 c7 8f f5 c9 e0 1f 3f 3d f5 ac 69 2a c6 83 da 57 cb e6 aa 06 49 81 38 0e 00 07 a8 1c 78 e9 83 95 f2 ca 4e 84 a5 6b 56 18 b0 68 38 a5 c6 6f 20 5d fe 8d 5a e0 c4 a2 75 ac a7 7b de c9 4f 50 d7 7f e4 8c 4c de 54 fc b2 10 19 90 44 e7 7b 07 bc 85 f1 44 ca 30 21 a2 6f 1c e8 01 07 7a f8 ad 07 fa 4b 61 df c6 25 6b d8 15 e5 2e 17 23 e8 22 29 bf ac 66 6c f1 88 a2 31 ce 3b c4 79 87 38 af f5 34 08 6f 15 da 15 ee b9 01 e8 df ae 62 62 91 df 25 e9 cd 30 4a 7c e6 d1 92 72 79 f2 24 77 c3 e0 99 b1 cf 0d f6 b9 e1 7d 6e 73 67 11 3a f3 f0 36 c9 35 9f c4 de 4c d4 2c 77 0b 07 f1 b0 9a 55 42 b0 05 65 e3 39 d2 a4 b1 14 6b ae 33 db 89 c7 98 17 0b 56 32 f6 3d b1 9e aa 6f 8b f8 81 84 c2 9a ab 0f 7a d2 d3 bd f2 00 cc 00 3a 34 bc 3e 8c 82 03 7d 9c 27 71 4d 42 93 4b 9b e1 Data Ascii: >?=i*WI8xNkVh8o ]Zu{OPLTD{D0!ozKa%k.#")fl1;y84obb%0J\|ry$w}nsg:65L,wUBe9k3V2=oz:4>}'qMBK
2024-11-21 02:42:20 UTC	1408	IN	Data Raw: c3 04 fe 6f ee 21 35 4d 86 05 ba bd d8 40 b7 28 e3 08 ef 1b 07 4f d2 6c 8b 77 2c b9 79 9e cc 65 be 62 bd 86 b2 15 aa c7 c8 85 8c 12 a4 4a 66 64 8b 55 5a 65 3d 47 42 65 38 ce ac 6c 86 a0 db 15 01 fa 32 9e 40 dd 65 f5 e5 6a 93 cf 3c c8 da 43 16 66 43 4a 62 67 9b 1a 52 5d 95 54 52 e3 cc a2 95 a9 1f 3f ca bc 38 b9 57 cf e4 c7 7e 0e 1f 10 19 c9 10 89 19 ed 92 92 73 f2 83 3c b6 26 9e f2 da 81 7a 86 bb 4c cb 4b c0 b5 20 3a 52 3a 1b f8 44 9e 89 35 a2 a4 65 d9 1c 32 58 e5 b4 37 4d 30 75 ed 0f d8 e5 07 26 b0 91 ca 2a 65 cd 0a 5d 68 0c a0 04 2a c3 66 26 7a 0a 24 73 ee 87 13 be b5 22 dd 4e fb 7e 16 70 1a 09 a6 da d8 3c 42 29 76 79 89 33 bc c4 19 1c c4 34 0a ae 32 ce 5e 85 29 a4 f7 12 31 1b f0 96 f1 1f 06 56 ed 31 a6 ee 21 47 73 59 06 29 19 c2 65 29 21 e9 14 1b 9c 32 Data Ascii: o!5M@(Olw,yebJfdUZe=GBe8l2@ej<CfCJbgR]TR?8W~s<&zLK :R:D5e2X7M0u&e]hf&z$s"N~p<B)vy342^)1V1!GsY)e)!2
2024-11-21 02:42:20 UTC	260	IN	Data Raw: af 2e 5e 9e be b1 33 77 f8 dc 7d 75 fe fa ea e5 c5 f0 f9 8f f8 7a 7e ee 5e be 7b 7f 71 f6 72 78 f6 ee f5 fb 37 6f 87 17 ef 5f bf bc 7c 79 35 7c 7b fa e6 25 fa a3 6f a9 14 52 e7 74 36 54 52 c6 3c 8e c4 3b f9 9b f5 9f be 5a 8a d5 4f f6 c2 7d 7b e7 7e b7 40 59 5f 3c 69 d4 e1 ea 52 3e f6 c1 4b 3d f2 7c 21 0d 9c 21 fd 73 21 fe bd e0 e6 db c1 cd 25 52 b7 54 11 6e 2d 36 a4 84 7f 12 4b 79 7f 21 40 f1 48 63 a4 86 1a 71 42 c3 50 11 bb 86 22 63 46 07 a7 a7 af 50 b9 cb 29 ea 57 69 32 bb fc 65 81 2b 41 46 51 4d 65 00 6d e8 0e 1d 28 c8 d5 33 95 50 23 ad a2 35 9a a1 53 be 83 4e f9 ce 30 ac 7f 35 f7 53 d1 00 17 0c cc 51 31 19 66 c8 85 50 c1 40 3e 05 a3 17 42 4d 45 8c 16 fd 72 e6 29 ae ec 71 95 69 ba 28 56 f5 7e 42 6a 06 08 b0 62 66 64 ad 2c b8 de 56 51 d4 5b 6c 21 af 7a Data Ascii: .^3w}uz~^{qrx7o_\|y5\|{%oRt6TR<;ZO}{~@Y_<iR>K=\|!!s!%RTn-6Ky!@HcqBP"cFP)Wi2e+AFQMem(3P#5SN05SQ1fP@>BMEr)qi(V~Bjbfd,VQ[l!z
2024-11-21 02:42:20 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 36 0d 0a 30 30 30 30 30 30 30 31 0d 0a a5 0d 0a 30 30 30 30 30 30 30 31 0d 0a ce 0d 0a 30 30 30 30 30 30 30 31 0d 0a b6 0d 0a 30 30 30 30 30 30 30 31 0d 0a ee 0d 0a 30 30 30 30 30 30 30 31 0d 0a a6 0d 0a 30 30 30 30 30 30 30 31 0d 0a a1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3f 0d 0a 30 64 30 37 0d 0a b5 1e 92 05 6a ad 23 04 cf 5a c4 d6 9e 6b 59 c2 20 44 05 ca b5 79 28 55 88 ae 61 a9 d9 54 52 d4 c0 ef c8 43 60 8e 42 53 fe 8b ba 58 6a 56 06 e0 2c 99 cd 34 3f 14 c5 df 9b 16 e0 47 50 eb 47 6d 01 d6 1a 8b 4b fd 1e d3 78 ff 17 ca 9e 34 5f f9 e6 b7 14 c5 91 c2 2a d4 92 d2 5e f4 47 bb 5b 9f 56 14 90 3c c4 e5 aa 1c 4e aa 11 b2 ea df 2d 66 5e 1c fe 0a b3 89 47 14 80 d2 d2 bd 83 29 61 cf b9 9e 10 d8 a5 51 f8 a5 c8 c0 df 92 67 74 8f 17 c7 Data Ascii: 00000001600000001000000010000000100000001000000010000000100000001?0d07j#ZkY Dy(UaTRC`BSXjV,4?GPGmKx4_*^G[V<N-f^G)aQgt
2024-11-21 02:42:20 UTC	1408	IN	Data Raw: 42 48 65 84 a9 a6 24 52 2a 03 4c 15 24 9d 0b 16 dd 76 07 e2 a5 7f c9 c3 b2 82 2d e4 13 22 aa 50 35 86 13 ed 64 a8 14 46 35 60 1a 8e fb 56 4d 86 2a d6 25 da 2c 3c ee 58 b3 ad 8b 04 99 82 44 ff c5 33 41 e3 dc b6 be 13 d1 ad c0 65 ab 67 5b a7 69 e8 45 b6 b5 5e 45 6e c9 4b 23 42 4d 94 c3 a3 57 a6 3b 2b b5 72 d1 2b 67 4c 52 2f 08 e1 7f f7 d9 ef f0 52 47 37 d4 5b 5d 10 65 62 5b 38 9e 57 d7 27 53 67 6c ba 2d 3c 12 be bd 0b 5e b6 b4 92 54 ef c8 00 8d bd 59 18 c1 92 a0 32 ad ce 5d 15 0c 6c 4c c8 10 27 f6 5b a9 98 55 57 ba 53 6e 11 44 df e8 2a 79 4c 2d 57 db 37 da 1f 3e 6a 42 2a 17 9e 02 4c b0 31 87 3b 24 71 f6 a1 52 49 01 1e 1c 18 fd 23 d2 de 85 25 e4 04 2c c4 63 17 a9 b5 4a 29 f6 2b 54 53 b9 67 0b 37 ac b5 86 86 75 ff 70 df 3f d0 2a b4 10 2b 03 e0 ce 81 6d 1d 82 Data Ascii: BHe$RL$v-"P5dF5`VM%,<XD3Aeg[iE^EnK#BMW;+r+gLR/RG7[]eb[8W'Sgl-<^TY2]lL'[UWSnDyL-W7>jBL1;$qRI#%,cJ)+TSg7up?*+m
2024-11-21 02:42:20 UTC	631	IN	Data Raw: b2 5c 6b 14 dc 26 d1 73 04 fb 87 14 5d e2 0e ca d8 55 4f c3 0e 77 b4 db 7a 52 06 ad 2a ea cd c6 aa 83 66 ed b6 b4 8e d7 03 98 ad cc b5 70 b7 e0 8b 29 9b 50 07 05 ba 77 4b 73 a6 db 6c 95 36 36 07 df 79 b7 62 49 c9 fd 82 7b 67 5e 86 2b 6e f5 42 13 30 3d 25 fe 9b 7f 83 59 df d6 bc 5a b9 6c 16 55 ce 44 99 e7 8b 6f 9f 9f d2 ab c1 64 f8 ab f3 29 30 da 8f da 66 83 7b 8e 35 7f 57 6c a2 72 bb 3e 7f 7d 4e 85 b3 fe 37 bd 00 73 a7 bf 7c 87 32 86 a4 e5 b7 4b 58 93 f6 ce c4 1d 62 d6 43 84 e9 ad 23 84 be 05 1e 19 d1 bb 8e f1 19 08 db bd e8 1f c2 d2 1f 58 76 e5 ca c7 35 0b 25 42 57 90 c7 f4 cb 91 af b5 22 17 15 d2 71 cc 1e 86 ba 2b 93 8f 51 a9 26 7a 57 61 1f 12 2b a0 50 57 2e d3 52 57 9d 2d 8b 7b 2d 75 ad c5 bd 45 63 71 05 66 5e 99 c9 1b b3 95 ab aa c7 0b b8 b8 96 dc e0 Data Ascii: \k&s]UOwzR*fp)PwKsl66ybI{g^+nB0=%YZlUDod)0f{5Wlr>}N7s\|2KXbC#Xv5%BW"q+Q&zWa+PW.RW-{-uEcqf^
2024-11-21 02:42:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49814	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:20 UTC	511	OUT	GET /gui/67920.83f748ec82f4e379de06.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:20 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: c7c790aea3ec3ca02ccb0d59d0d3f0b6 Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 22:59:28 GMT Expires: Wed, 19 Nov 2025 22:59:28 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 99772 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:20 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 66 66 63 0d 0a 00 00 00 00 02 ff cc 5c 7d 77 da 46 d6 ff ff f9 14 aa da 7a a1 47 92 01 03 06 1c 9c 3a 8e 9b a6 cd db b1 9d 9e d3 cd e6 b8 42 1a 40 b5 90 58 49 d8 71 08 df 7d 7f f7 ce 8c 18 01 8e db dd f4 3c 8d 5b 1b cf 9d 97 3b f7 fd de 99 b1 bd c8 85 95 17 59 14 14 f6 51 2d 17 f1 d8 bb 15 a3 b9 1f 5c 9f 4e 17 c9 f5 4d 71 b5 88 ae 66 7e 94 0c 3f 03 fb f4 e9 dd fb ba 37 5f e4 d3 da bb 77 dd c3 7e ab f1 de 59 f2 cf 41 ad 70 84 13 d5 87 c7 cb 1b 3f b3 d2 61 54 6b b5 7a fd 76 dd c9 f0 b1 d3 ed 1d 36 ea 4e 3e ac 45 b5 7e af df ac 3b 51 ad 8d a6 76 bd ee 24 80 37 bb dd 76 a7 ee f8 f8 d8 6d f5 0e 5a 75 Data Ascii: 0000000100000001000000010000000100ffc\}wFzG:B@XIq}<[;YQ-\NMqf~?7_w~YAp?aTkzv6N>E~;Qv$7vmZu
2024-11-21 02:42:20 UTC	1408	IN	Data Raw: 6d cb 1b 09 68 bb 20 dd 20 36 0f 6d c2 da b6 20 92 be 5b 48 bd 71 89 7b 3b 01 f3 34 8f c8 dc 0d ed 2c 9a 4c 0b db fa 7e 96 c2 49 a5 37 22 53 fd 8f 1f ed 9b 18 1c 5b 20 c0 c8 0b e2 74 11 3e 55 ec a6 65 89 7e b1 17 8d 9f b2 51 08 eb 52 e2 a1 55 a7 52 76 4e 4a d1 31 74 59 76 92 42 e6 d8 9b d2 63 c3 d6 df 78 3f ff ec e5 d3 f4 56 8d aa 0f c0 3e 4d ff aa 76 00 89 0d 21 35 e9 2f f6 f6 c4 9a fe f7 0a 9f c9 82 6f c0 82 6f fe 8e 2c 00 07 a6 de 7c 9a 26 e2 f5 82 79 fe 05 88 bf 83 22 0f d2 3f fa 13 f2 1f ed ed 45 6b fa ef d4 66 93 f6 57 a0 fd d5 df 94 f6 73 4f 84 51 f1 03 0c dc 17 12 fc 0d 6a 3c 48 f7 f4 4f d0 3d dd db 4b d7 74 5f 9b 46 93 d8 a7 20 f6 e9 df 94 d8 0b 0f 38 3f 65 07 03 33 f5 85 08 4e 64 b8 8f ca 75 18 22 37 81 6e c1 4d 4c d3 2c fa 08 b3 e2 c7 76 5d f9 Data Ascii: mh 6m [Hq{;4,L~I7"S[ t>Ue~QRURvNJ1tYvBcx?V>Mv!5/oo,\|&y"?EkfWsOQj<HO=Kt_F 8?e3Ndu"7nML,v]
2024-11-21 02:42:20 UTC	1408	IN	Data Raw: f7 b6 44 ef 5e c3 f8 79 d3 a7 59 5b da cd 1d 55 18 19 0f ce d3 b9 ac cc ac 51 53 d1 a0 82 b8 eb 48 51 fa 30 92 95 cf d8 55 22 92 16 8b bf a5 f6 5c 51 ed e7 8d dc b6 66 a4 8a 12 41 fa 1d 92 75 02 17 95 a4 54 c4 b2 2e ee f2 42 cc c0 5e 58 0e e9 8a 34 07 79 9c 52 03 00 4d a5 fc 88 69 3f 6e d9 44 33 f1 b2 36 c2 44 e9 8f fe 0a eb f7 d5 06 9e 15 63 76 bf 39 34 62 a5 d7 d8 cd eb 52 3e 5d a9 15 08 a5 95 6d aa aa 84 32 26 48 ce 42 4a 7e 95 7d b8 9f 72 aa 83 49 bd 67 58 ef 59 b9 9e d6 07 e9 57 4c 1a 96 81 89 74 e2 d2 57 40 52 4d 79 7c c8 65 a8 e5 ab 6e 43 35 ea 0d 2a 1e eb 56 33 1f 7b 09 54 5f 96 a8 be 4d ae 11 45 25 1a 03 a2 10 08 b0 59 50 b4 23 08 d2 ba 2e 8e b3 1a e4 58 d1 98 8b d8 69 72 45 a7 00 1b 5d 64 12 59 29 9d 57 0c e2 4b bf 40 68 12 be 4e 4e 39 ac 34 e3 Data Ascii: D^yY[UQSHQ0U"\QfAuT.B^X4yRMi?nD36Dcv94bR>]m2&HBJ~}rIgXYWLtW@RMy\|enC5*V3{T_ME%YP#.XirE]dY)WK@hNN94
2024-11-21 02:42:20 UTC	278	IN	Data Raw: 3f 37 78 9d b6 6f 8e ec 3d b0 2c 57 46 36 07 35 29 64 b9 6f 3d 4a 7a 97 bc b9 12 bd e6 e1 67 fa ab 1c 69 6b 4c eb 9e 31 1e f8 bb 9b 0a 87 ed dd 58 a1 34 c6 c9 8e 0b cb bf 89 59 a3 b3 7b 8c 26 3b 91 7b 73 d0 e1 7a 0c 6d d6 f7 64 9e c9 53 73 50 4a b5 92 31 dc c4 c0 12 31 ce ea 50 f4 03 b1 2c f2 22 85 70 61 78 03 f0 5b d6 ce b9 7d dd 5d 66 49 dc b8 53 bc 48 d2 2d 5f e2 53 76 88 12 38 43 21 8f 0c 30 14 62 b8 ff 1d 87 89 28 82 f3 bd 9d dc fa 6e 1f b2 f9 e5 c5 0a b4 e1 fd 4a 99 94 ca 28 e3 eb 77 d4 f4 5e 22 ea ba 26 c4 cd 6f 26 2e 1d 8c 69 d5 a8 00 59 69 f8 d6 90 3b 25 b2 38 6b fd 61 ff c4 70 68 25 6f 13 09 a6 fd 9e 3c e7 c9 30 59 39 fd 2e ae 63 7e 41 5d ff c7 fe 77 5f 81 6b df 59 4f d2 b4 c0 ed 41 1c 74 58 37 1d ef c0 6b 59 35 9d 21 22 d0 18 69 28 b4 74 b6 5f Data Ascii: ?7xo=,WF65)do=JzgikL1X4Y{&;{szmdSsPJ11P,"pax[}]fISH-_Sv8C!0b(nJ(w^"&o&.iYi;%8kaph%o<0Y9.c~A]w_kYOAtX7kY5!"i(t_
2024-11-21 02:42:20 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 6a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 11 0d 0a 30 30 30 30 30 30 30 31 0d 0a ce 0d 0a 30 30 30 30 30 30 30 31 0d 0a f8 0d 0a 30 30 30 30 30 30 30 31 0d 0a 73 0d 0a 30 30 30 30 30 30 30 31 0d 0a ee 0d 0a 30 30 30 30 30 30 30 31 0d 0a fd 0d 0a 30 30 30 30 30 30 30 31 0d 0a 22 0d 0a 30 30 30 30 30 30 30 31 0d 0a 42 0d 0a 30 30 30 30 30 30 30 31 0d 0a 79 0d 0a 30 30 30 30 30 30 30 31 0d 0a 28 0d 0a 30 30 30 30 30 30 30 31 0d 0a 47 0d 0a 30 30 30 30 30 30 30 31 0d 0a a4 0d 0a 30 30 30 30 30 30 30 31 0d 0a 83 0d 0a 30 30 30 30 30 30 30 31 0d 0a 23 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 91 0d 0a 30 30 30 30 30 30 30 31 0d 0a 59 0d 0a 31 0d 0a 2f 0d 0a 39 65 66 0d 0a 9f 5f 1a 0b 44 c5 74 81 5b 4f Data Ascii: 00000001j00000001000000010000000100000001s000000010000000100000001"00000001B00000001y00000001(00000001G000000010000000100000001#000000010000000100000001Y1/9ef_Dt[O
2024-11-21 02:42:20 UTC	1382	IN	Data Raw: 2a 8c 32 c0 a8 8c 07 78 54 25 39 29 45 cd 80 2a a9 e2 85 0c d9 87 d4 80 ef 8a d4 78 a6 32 73 71 7b 32 0a 4b 45 30 43 63 03 6c ca 23 2c eb 56 af 28 a9 4e 63 66 43 3c 8d ee b0 31 91 ec b7 fa ce f9 6e 30 90 cf 66 e8 13 dc a5 c8 96 a3 14 54 8c 3e 52 24 ae 46 a1 65 f5 fd 0c b7 c2 fc 1a ce 0b f0 fe 08 84 12 21 14 23 c4 0d 43 2a 1a 93 95 40 f5 9b 40 22 09 50 b8 97 69 1f 9e fb a1 ae 8c 43 d6 a9 7f 13 a1 f8 94 cf 90 0c 4e 57 2b f5 bc 6b 89 62 39 ee 27 a9 5b 86 03 96 6d e9 e3 e8 fd d9 20 01 95 fc f8 08 66 45 b8 ca 4d 29 13 b7 5a c4 cb 39 26 21 66 c5 62 5c 0c 48 f2 a9 51 4d 88 03 8c 41 e3 68 7b 76 74 b1 d6 bd e4 19 c4 a0 b1 1a 2d 79 55 e5 25 47 69 8c b4 77 c5 07 bd 8e c7 3f 24 9c dd ab d7 3b ec 60 2d 1f 4f f8 a8 9c c6 6c 2e 55 8b 2d 20 03 c8 f6 c1 d3 57 21 4a 70 60 Data Ascii: 2xT%9)Ex2sq{2KE0Ccl#,V(NcfC<1n0fT>R$Fe!#C*@@"PiCNW+kb9'[m fEM)Z9&!fb\HQMAh{vt-yU%Giw?$;`-Ol.U- W!Jp`
2024-11-21 02:42:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49815	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:20 UTC	690	OUT	GET /gui/45428.d50e11e1e27c0917ea14.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:20 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: b7a6bd913b8f70a336f3192a63bbe401 Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 20:39:04 GMT Expires: Wed, 19 Nov 2025 20:39:04 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 108196 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:20 UTC	1058	IN	Data Raw: 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 66 66 66 0d 0a 8b 08 00 00 00 00 00 02 ff ec 5c f9 73 db 46 96 fe 7d fe 0a 18 4e 14 22 01 20 f0 26 21 d3 8e 22 cb b3 aa 91 ed ac ad 64 6b 56 ab 92 01 a2 49 22 06 01 2e 00 ea 08 cd ff 7d bf d7 07 d0 20 a5 d8 93 f5 ee d6 56 8d 69 49 60 9f af 8f 77 7d fd 1a e6 ba 60 46 51 e6 f1 b4 34 8f 5a 05 4b 66 ee 2d 0b 57 c1 f4 e3 c9 62 9d 7e bc 29 af d7 f1 f5 32 88 d3 c9 1f e4 7d fa 74 79 65 b9 ab 75 b1 68 5d 5e f6 fa bd ce e8 ca de f4 bd 4e df f3 5b a5 cd ec cc 9a 3c df 64 6e d4 62 f6 e6 5f fd 16 be c5 5b eb 28 61 a5 91 1f 4d b3 b4 28 8d 78 d2 f2 ec ac d5 1b 0d bd 9e e5 16 37 73 ab 95 7f fa d4 ca 27 ad 72 f2 bc b4 3e fc c5 30 9e 21 d5 b8 5b 26 69 31 31 17 65 b9 f2 0f 0f 6f 6f 6f dd db ae 9b e5 f3 c3 8e e7 79 87 28 61 1a b3 38 49 26 Data Ascii: 0000010fff\sF}N" &!"dkVI".} ViI`w}`FQ4ZKf-Wb~)2}tyeuh]^N[<dnb_[(aM(x7s'r>0![&i11eoooy(a8I&
2024-11-21 02:42:20 UTC	1408	IN	Data Raw: e9 76 e9 2e 82 a2 65 12 01 26 f6 8d fc 4a bd 6a 5f 65 3f 58 0e 6c be 8a e0 83 03 fe 48 65 e5 a3 2c 27 bf f1 39 50 15 f8 97 af 37 62 c9 be 2d 39 7f bc 75 90 2f b6 08 f8 9a 7d fa c4 dc 9d 19 c1 84 40 bb 46 2c c7 4a 4b e6 a8 17 63 bb b5 e4 fe 9d 6c aa 0d ec d3 e3 4f e7 bf 9c 5e b7 7d f3 69 77 dc 3b 7d f5 ca b4 91 f6 f7 d3 f3 f3 b7 ff c6 53 5f 1d bf ec f4 5e ea a9 1d 94 3d 39 39 ee 79 1e 4f fd e9 fc f8 e4 6f a2 81 6e 97 a7 fc f5 dd e9 df 79 c2 b0 47 9f 3a 8d 6a be 1c d1 a7 4e eb 22 ed d5 31 7d 54 da e9 1b 5e b9 73 f2 d3 ab 5e 87 27 be 7d 77 fc e6 af 82 c8 57 a0 47 76 fc ee f4 a5 a0 f0 95 e7 b5 5f 99 5b 22 5c 30 a6 18 d3 cf c7 e7 a7 17 17 a7 fe a5 f9 b4 dd 6e 0f 7b 53 b0 c6 d3 f6 b0 e3 0d 02 fe 14 75 86 23 0c c1 7c da 09 bb 61 38 a3 a7 6e d0 63 33 fe 34 f0 86 Data Ascii: v.e&Jj_e?XlHe,'9P7b-9u/}@F,JKclO^}iw;}S_^=99yOonyG:jN"1}T^s^'}wWGv_["\0n{Su#\|a8nc34
2024-11-21 02:42:20 UTC	1408	IN	Data Raw: 12 4f 14 20 51 7e fa f4 a4 94 ee b6 21 cc 8f 0c b0 81 d8 43 6e 99 fd 9c 13 44 08 29 ca 3d 73 61 b6 3d 99 4c 32 b5 03 33 77 4a ce 2f 76 c9 a7 4f 26 66 30 58 27 a5 c9 f7 af c2 3e aa ae 72 d5 4d 7e 54 2e f2 ec d6 20 6f f7 02 a6 e2 69 9e 43 05 9b 3f fe a8 75 67 2c 61 90 19 0a 92 30 56 8a 0c e3 26 48 d6 cc 85 4b 2e f2 5a 26 60 01 d8 99 80 51 26 ec 85 10 73 fe 9b f5 32 64 39 64 ba b5 05 65 aa 84 72 f7 cd 82 33 51 0d bc 30 c0 3b ec 07 d3 dc 82 2d ac 38 35 ca 07 77 84 58 30 4c 2c fa f7 b1 2e 15 4b f8 4f 3c 1b b6 c4 2c 9e af 39 8b d0 f7 db 3c 86 98 4c 18 9e b7 96 5f 62 2b 4e 32 bb dc d2 aa bc d3 d6 89 50 e3 7f a2 4f 7f 06 7d 12 20 d2 f9 64 03 d1 c6 7c 93 7e 17 a6 1d af ae 83 28 ca 01 7a fb 66 fd 4c 39 eb 3c f1 4d fc c2 63 94 11 d2 ef 9b e2 2f 12 78 65 d1 86 de 04 Data Ascii: O Q~!CnD)=sa=L23wJ/vO&f0X'>rM~T. oiC?ug,a0V&HK.Z&`Q&s2d9der3Q0;-85wX0L,.KO<,9<L_b+N2PO} d\|~(zfL9<Mc/xe
2024-11-21 02:42:20 UTC	240	IN	Data Raw: dd 37 c7 af 4f af 5f 9e be 3f b9 7e 7d fc f3 cf 67 6f fe 2a 51 24 ad 3a ef 0e 95 1b d2 42 99 0a a5 4b 3a 07 d0 b0 12 36 ec bf d5 2e 53 ed 32 5d 6f 02 da d8 95 3d f5 98 a4 90 d4 56 ff 1e ab 7f 8f d5 37 9e 09 04 5c c4 91 90 2b 63 24 31 c2 46 a6 b0 be 78 80 89 c4 f6 60 64 06 ab 82 f2 81 d0 d1 36 31 08 05 43 ec 0a 0b 70 70 56 81 7f 0b 20 a7 d3 8f c6 ad d3 f6 3c 63 1e ac 38 14 f9 2c 8a 6f 14 3a 88 00 14 1c 0b 3a 25 0e 24 29 7c 85 8e 7b 85 6d e9 c0 4c 02 a3 c8 8d 88 1a 0f e0 8d 12 ee 94 9d cc 0a a7 5f e1 8b 62 14 65 96 25 65 bc 32 b0 89 e0 cc 66 e9 c4 cc 09 7d 32 8d 20 8d 21 44 91 e2 44 2c 09 ee 27 a6 27 7a 02 da d8 a8 a9 30 c8 60 07 db 6c e2 9e fb 74 18 cb c2 09 d6 25 b0 4c 08 67 0e bc 72 24 93 f3 93 c1 c7 2f 0d 0a Data Ascii: 7O_?~}go*Q$:BK:6.S2]o=V7\+c$1Fx`d61CppV <c8,o::%$)\|{mL_be%e2f}2 !DD,''z0`lt%Lgr$/
2024-11-21 02:42:20 UTC	1408	IN	Data Raw: 31 0d 0a a6 0d 0a 30 66 66 66 0d 0a 0b 36 32 99 bc 04 a6 6a 93 b2 bc 77 3a d4 42 8f d2 05 3d 00 88 1c 18 cd 04 e9 62 49 14 4e 08 b4 42 a2 ad c0 4c 1f 28 48 e4 8b a9 53 7f 44 a1 7a 75 89 bb 33 98 0e 09 c4 eb 2c 7b bb 2e 01 d5 b2 33 90 05 63 42 9c 52 bb 38 20 59 51 1c 40 20 55 bf d4 73 ba 1f 10 93 4d 0e 0d e2 ca f1 9c c0 47 e0 8d 44 35 a7 6a 76 8b f0 1b 38 00 86 60 8d 50 4a 69 9c 84 ec 28 4b b5 61 45 78 c0 0a 48 38 3a 80 03 73 70 b0 72 0b 28 f0 16 4e f7 21 9b 26 cf 99 48 77 4a f1 17 c2 15 3b 69 3e c7 a6 82 99 29 55 63 12 84 2c 21 e7 bf 29 06 d6 13 2e 27 17 eb 25 f6 c4 ef ec 17 3a f7 2d a0 e6 70 ce 5f 5a f6 62 c2 fd 07 48 7c d8 8c ff 18 f3 97 0d e6 cf 14 93 66 9c f9 21 17 d6 f6 ac 6e 9c 47 88 fd 03 92 a5 d9 78 ac 1a 8f 75 09 80 3e 3e 9c d0 74 15 46 96 1a df Data Ascii: 10fff62jw:B=bINBL(HSDzu3,{.3cBR8 YQ@ UsMGD5jv8`PJi(KaExH8:spr(N!&HwJ;i>)Uc,!).'%:-p_ZbH\|f!nGxu>>tF
2024-11-21 02:42:20 UTC	1408	IN	Data Raw: ed 36 0d ec fe 4b 06 54 00 86 e0 07 4f 04 f5 fd 7f 19 1a ad 9b 65 23 1e 48 33 c1 be 81 3e fe a6 d6 c7 ba 38 90 92 5a d7 ff 27 28 7d 82 d2 0a e6 a9 81 99 af 01 bb fd 29 c0 4d 01 56 c2 c6 db 0d f1 db 87 ba 2a 2b 4f b8 89 5f 0d 72 13 e0 f3 23 60 99 e8 8b 8b 25 43 5c 16 90 41 87 5c 73 28 1b 12 87 37 84 f1 29 8c 4c c4 6e 4e 4c 21 c7 f9 38 bf 3d aa a1 4a 61 d8 50 f4 9e d6 fa 67 dc e0 cc ae 84 f2 57 05 87 21 d4 33 5c 4b 80 e8 9b b2 d6 61 eb 32 70 7e 3f 76 fe fd ca 6a bd 98 5c f2 87 c3 b9 6d 7e d3 36 c0 6f fb c8 5d 45 d2 ff 04 ae bc 87 2a 65 40 95 1e 32 48 f8 b2 3c 98 41 4a fe c1 0c b9 5c 8d bc 3d 1d 0a 24 19 b7 ac dc 34 03 6b a5 38 c7 a8 ae 6a 10 f2 2f 4e ce 34 c7 53 5e 31 d1 ec c5 37 b0 f9 70 38 c8 19 53 4b 26 07 6c 3f 55 9a a1 56 d3 08 45 04 85 30 d0 c4 19 c4 Data Ascii: 6KTOe#H3>8Z'(})MV+O_r#`%C\A\s(7)LnNL!8=JaPgW!3\Ka2p~?vj\m~6o]Ee@2H<AJ\=$4k8j/N4S^17p8SK&l?UVE0
2024-11-21 02:42:20 UTC	1293	IN	Data Raw: 54 79 3c 03 08 f8 9e c7 3f 1b 00 1a 0b 03 e8 b9 69 1b ef b2 10 17 a5 d5 df 97 79 30 2b 6d e3 5f 58 72 c3 80 d8 05 b6 71 9c e3 e0 df 36 ea 56 44 97 bc e9 65 96 66 f0 b5 10 21 5b b5 7c 02 bb 50 b6 5c e5 8a 1a f3 3c 88 62 20 f9 3e e0 a5 14 f1 c9 8e 4a 68 b5 47 58 94 b9 6d f0 77 62 a8 91 c9 31 e2 35 31 78 7d ca c3 59 30 35 84 96 a4 93 42 4e d0 2c 58 c6 09 34 09 6c 98 16 cf da 99 81 bd 0a 02 2b cc d9 72 b7 a5 5b 01 4d 1b 60 7d 2d 8b 28 87 ab cc 51 6b a3 ed 2a fd 46 fd 0b 60 93 74 21 94 ab dc eb fc 08 93 67 88 c5 e9 42 a4 92 00 ec f5 b4 36 43 92 de 95 26 e4 55 c0 1e 5c 4a 37 e6 42 54 51 62 b2 ea af 12 4d cd 9c 07 76 43 2d 35 14 ad dd 41 77 da 53 22 b4 62 2b 8d e0 7e cf 36 06 d8 4f 43 a9 09 eb 26 04 d5 e3 59 30 0b 05 61 7a 96 a4 be 07 65 80 57 55 d1 2f 69 92 34 Data Ascii: Ty<?iy0+m_Xrq6VDef![\|P\<b >JhGXmwb151x}Y05BN,X4l+r[M`}-(Qk*F`t!gB6C&U\J7BTQbMvC-5AwS"b+~6OC&Y0azeWU/i4
2024-11-21 02:42:20 UTC	967	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 07 0d 0a 30 30 30 30 30 30 30 31 0d 0a a3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 07 0d 0a 30 30 30 30 30 30 30 31 0d 0a 72 0d 0a 30 30 30 30 30 30 30 31 0d 0a 48 0d 0a 30 30 30 30 30 30 30 31 0d 0a df 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8f 0d 0a 30 30 30 30 31 0d 0a c7 0d 0a 33 35 62 0d 0a 98 f1 bd d6 b8 05 c4 59 63 3f 8b e7 c1 c1 c1 42 fd 88 4b 1e b3 9c 8e 27 f1 de 83 0c 50 5f 51 d0 0b 57 60 09 e2 05 93 ac d8 78 df 6e ea 70 2a 47 dd 69 71 ee 7c b2 ae b6 5b 84 c7 f2 db 2e 42 65 c8 2f 0e f4 21 8e d8 60 81 79 0a 62 51 39 08 5b 53 7c ab d1 a6 72 a5 b8 40 eb b0 00 6a d3 6e 37 5b 9a 13 95 b9 a5 f2 a5 94 36 c4 80 55 6a 2d 65 f0 e2 57 cd da 54 f9 d2 08 a9 74 a5 74 c4 a4 f9 a1 4a 91 21 dd 2c c2 eb ed 96 6a 68 1a bd 82 a6 81 76 ea 68 26 Data Ascii: 00000001000000010000000100000001r00000001H00000001000000010000135bYc?BK'P_QW`xnp*Giq\|[.Be/!`ybQ9[S\|r@jn7[6Uj-eWTttJ!,jhvh&
2024-11-21 02:42:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49816	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:20 UTC	511	OUT	GET /gui/88687.cca6b938f5ec6b221b34.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:20 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: cb394390bedb98cb5e032d08ab696d81 Content-Encoding: gzip Server: Google Frontend Date: Wed, 20 Nov 2024 22:29:18 GMT Expires: Thu, 20 Nov 2025 22:29:18 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 15182 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:20 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 59 0d 0a 30 30 30 30 30 30 30 31 0d 0a 93 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a 46 0d 0a 30 30 30 30 30 30 30 31 0d 0a 92 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7e 0d 0a 30 30 30 30 30 66 65 65 0d 0a df 5f 51 a6 66 64 c2 0b a0 71 1f Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001\00000001Y000000010000000100000001F0000000100000001~00000fee_Qfdq
2024-11-21 02:42:20 UTC	1408	IN	Data Raw: 7d 3d ba 9e 2d b3 ea 76 34 19 5d 53 a0 1c 29 5f 19 c8 61 03 39 6c 8e e5 50 48 45 40 10 c2 6c 2e d6 c2 d6 56 68 25 d9 b4 eb ac 12 0d 05 9c bd 1f 23 79 ee ca 15 b7 b2 9b 1a 12 a9 ca 07 82 8e a5 a2 47 90 48 08 93 5e 03 f6 74 6c 37 da d5 86 7a 9b 83 de b9 a0 57 12 45 82 af b2 15 d1 01 a5 0d 55 24 ad 54 88 1e a8 61 8b 9f 2f 78 b3 b0 f3 0c 71 b5 c8 9a 2b 84 09 65 9e 9a c3 37 10 83 6c 1a 3a fe eb d1 68 32 90 f3 0d e8 be 11 74 f7 e2 23 2d 59 65 d1 4b b0 b7 b9 25 2c 9e b5 88 a6 b4 e0 e3 81 e1 31 58 1b e2 88 16 aa d2 8f 34 30 29 cd de e9 4a cc 27 23 78 9a 6f 5a fc d7 66 69 98 8a 74 e9 a3 af 0f cc 67 d2 43 b0 bf de c5 94 3f 1e 78 58 1f 03 87 aa 7a 04 cb 8f c7 a6 45 bc b5 a4 2c 69 2f b3 4d d7 d5 d2 9a 66 5d 65 09 3c 7c c4 88 76 66 cf 38 36 0a fe 0b 82 34 49 5d f1 cc Data Ascii: }=-v4]S)_a9lPHE@l.Vh%#yGH^tl7zWEU$Ta/xq+e7l:h2t#-YeK%,1X40)J'#xoZfitgC?xXzE,i/Mf]e<\|vf864I]
2024-11-21 02:42:20 UTC	1408	IN	Data Raw: 86 81 93 ec 09 2a 0e b5 42 27 68 ad 9a 17 3e 6a c6 42 22 1d 76 45 38 a8 a8 c0 62 03 9d 30 a5 01 c6 f2 4d d3 92 86 d7 75 59 81 19 c9 6e 26 ea 98 d6 0a e7 6b b9 e0 bc a6 2a a2 22 72 56 2f 0b 81 f5 d3 c2 20 92 61 0a 38 92 ff 31 c2 e5 e9 5d e0 35 95 d1 41 82 eb 06 3b 73 f3 68 b2 17 5e 1c 7b c5 0c 36 2d 8c 2c b3 fb fa 9b 44 2f 6b 71 bd de 5f 90 af 53 f9 87 29 b9 3d c5 06 48 7c 21 f6 0b 7c d3 86 81 9a 8b 44 d6 7b 47 6f 8e d9 b2 bc a9 2c 1a 04 d3 c8 91 c2 0a 79 c1 69 16 68 b3 90 11 e4 9c 24 4b d5 56 49 a0 2d ea 19 12 9d 32 4a 6b c9 e7 50 b4 b2 2b 35 40 aa 50 a4 1b b2 36 61 fe bd 52 5d f6 5d dd f1 56 a2 a8 b1 42 d9 c1 5f a5 99 f7 04 96 15 99 ab b5 f7 62 a1 ee ae c9 aa 16 25 92 d5 40 db a2 ad a4 1c 6a c2 14 36 e6 d8 1e 4a dd 59 cb 2d 78 57 bd e9 0e 48 57 cb 4b 02 Data Ascii: B'h>jB"vE8b0MuYn&k"rV/ a81]5A;sh^{6-,D/kq_S)=H\|!\|D{Go,yih$KVI-2JkP+5@P6aR]]VB_b%@j6JY-xWHWK
2024-11-21 02:42:20 UTC	449	IN	Data Raw: 1e 1d db c5 4b 5e 4f 77 21 51 dc d7 42 04 41 f3 6c 55 2e b1 93 f4 09 e8 91 04 4e 26 88 14 c7 6d f8 ea 18 93 3e 7a c3 f5 07 5d e2 d4 d7 97 0e 6c bd bf f5 b5 18 f8 29 32 05 6c c1 83 39 22 5f 93 ca f1 11 52 29 00 06 c1 a0 7f 86 b2 c9 7e 27 14 e9 12 dc e3 39 55 eb 30 a9 f3 2c da de 25 b2 c3 9e 27 ac 61 1f 35 54 0a f9 c2 8f fc 3c d0 21 b4 77 ab 01 c1 61 60 b2 08 f6 14 ab 9d 70 8f 42 52 9d ce b3 f9 4c 2e 3f ec 52 d4 07 d8 0c bc 10 d3 bd 50 a5 24 87 c5 1b f0 1d 79 51 9e 28 69 1c 76 4a 1c 69 82 fd c4 a1 7f f4 a6 d1 8f 12 14 f0 9c f3 f9 f1 fc 5e 7c 24 6b cf c7 6c 4f 4b 9c aa 5f d8 2f b5 f4 ca 6a 01 c7 e8 24 07 e2 4c a3 45 33 54 e3 be 43 12 75 ac 46 d1 7f 52 eb 11 a6 29 ba 06 35 16 b0 3c dc e7 8f bb 25 fe 93 cd 39 87 53 69 92 0f f2 b9 05 f6 1a 19 5d 9e a2 7b df 2b Data Ascii: K^Ow!QBAlU.N&m>z]l)2l9"_R)~'9U0,%'a5T<!wa`pBRL.?RP$yQ(ivJi^\|$klOK_/j$LE3TCuFR)5<%9Si]{+
2024-11-21 02:42:20 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 11 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 15 0d 0a 30 30 30 30 30 30 30 31 0d 0a 35 0d 0a 30 30 30 30 30 30 30 31 0d 0a e8 0d 0a 30 30 30 30 30 30 30 31 0d 0a de 0d 0a 30 30 30 30 30 30 30 31 0d 0a d7 0d 0a 30 30 30 30 30 30 30 31 0d 0a d1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 30 0d 0a 30 30 30 30 30 30 30 31 0d 0a 40 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5a 0d 0a 30 30 30 30 30 30 30 31 0d 0a d4 0d 0a 30 30 30 30 30 30 30 31 0d 0a a0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 57 0d 0a 30 30 30 30 30 30 30 31 0d 0a 59 0d 0a 31 0d 0a 95 0d 0a 39 65 64 0d 0a 08 ff 03 db 87 d5 60 b4 12 35 95 d5 ac 3b 14 4c 8a de 11 86 a9 f1 a0 7b 68 8f 70 b7 93 51 65 75 88 66 98 23 0b 34 7a c0 11 22 39 6e f7 8d f9 cd 64 Data Ascii: 0000000100000001000000010000000150000000100000001000000010000000100000001000000001@00000001Z000000010000000100000001W00000001Y19ed`5;L{hpQeuf#4z"9nd
2024-11-21 02:42:20 UTC	1341	IN	Data Raw: c7 ef 00 07 9e 0f 18 ed 7e 7a 09 10 b7 07 18 0d f7 c5 63 1c 00 41 64 47 5e 22 66 e2 1b 30 a2 85 ef 44 34 34 8a 93 84 e0 30 4d c5 f8 18 d5 73 e6 23 aa 04 89 4b f3 35 ec 09 c4 1a 8a 61 09 02 bb 1b 84 cc 07 99 69 ec 13 ec 46 e0 1c b0 ef a5 fe 25 2c 22 f1 10 b3 00 87 11 05 97 c0 f6 13 47 f4 47 0e e8 07 bb 69 1a 60 75 c8 26 80 88 c8 1d 22 74 27 88 2d 08 79 88 25 11 5e 77 22 e2 54 04 4b 92 94 d8 42 a4 0b 85 55 3b 49 0a ec 01 68 87 64 43 db 8b 70 3d e6 7b 76 ec 78 f0 7d df 86 cb a3 1b 58 10 ca 2e 5d cf f6 e2 08 44 20 a0 46 b1 d0 84 54 26 d0 05 49 4a 6a 1a 2a f7 b7 1f 7a fd 05 38 ff 91 95 e2 ed 2c 8f b9 04 09 e4 64 09 08 87 7e 48 d1 18 8b 1d 58 86 86 49 fe 64 03 a0 31 f1 20 4f c8 39 82 4b 81 d8 04 13 c9 17 50 52 02 76 c0 61 00 e2 00 87 11 c6 03 8e c1 0c c1 62 57 Data Ascii: ~zcAdG^"f0D440Ms#K5aiF%,"GGi`u&"t'-y%^w"TKBU;IhdCp={vx}X.]D FT&IJj*z8,d~HXId1 O9KPRvabW
2024-11-21 02:42:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49817	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:20 UTC	690	OUT	GET /gui/26044.e227fd5c65cff1753dd6.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:20 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: c909f8f0453201f5f70c4570dd33f66e Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 22:18:48 GMT Expires: Wed, 19 Nov 2025 22:18:48 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 102212 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:20 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ac 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 69 0d 0a 30 30 30 30 30 30 30 31 0d 0a 73 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a 46 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9a 0d 0a 30 30 30 30 30 30 30 31 0d 0a fe 0d 0a 30 30 30 30 30 31 0d 0a be 0d 0a 30 66 65 64 0d 0a bf 02 e1 26 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001\00000001i00000001s0000000100000001F00000001000000010000010fed&
2024-11-21 02:42:20 UTC	1408	IN	Data Raw: 7c dd 8c f7 62 a5 49 73 80 79 13 46 60 9c 7f 6a 7e fe f1 63 ee d4 ac ac f2 c5 d8 3c c0 3a 6c be 63 0f ff 53 6c 16 d5 83 80 5e 89 20 41 dd c3 f6 c0 47 38 34 7e bc 72 7e 4a c9 be bc 61 8b a2 86 bd f8 77 5d 8e 47 ed aa 66 79 7b 03 99 6b e6 f9 96 8d ac 51 8f ee c8 52 60 d6 00 73 f4 61 56 e6 9b bb 91 d8 fd f5 e6 9b 3a 7f 80 16 42 07 6e 9d 7b be 83 6c e9 57 18 59 ad 79 18 f0 80 13 9a c1 78 8c 14 33 a0 10 ed 2b 4e 38 02 b2 5b 96 99 13 de 78 a2 c3 62 ec 29 fb c4 f0 53 c2 98 07 f0 6e 01 40 05 83 b9 b7 52 56 89 28 ff d9 74 3a 6e 4f 28 7f 71 21 74 14 bd b0 ab 2d 57 54 61 bb 94 0d ff f8 51 cd 86 44 92 ed e9 e9 06 e3 d8 cd 06 ae cc 29 9a 1b f0 0d 76 e8 15 37 29 ab 76 5d 9a e3 a7 8f 1f c7 4f d3 d7 3f bf 58 14 f7 06 b7 78 d3 d1 83 ed b9 ae 51 16 4d 6b df d6 d5 6e 3b 12 Data Ascii: \|bIsyF`j~c<:lcSl^ AG84~r~Jaw]Gfy{kQR`saV:Bn{lWYyx3+N8[xb)Sn@RV(t:nO(q!t-WTaQD)v7)v]O?XxQMkn;
2024-11-21 02:42:20 UTC	1408	IN	Data Raw: 78 33 9d 0b 00 b4 c9 1b 74 2b 4b 33 32 3e 1a a3 93 4d b5 05 16 58 e0 8c 53 d7 0d de e2 e2 62 a1 d6 d3 7c fc af 60 d0 af 60 d0 5b 99 de 2f 0c 62 15 8f a5 25 7f 64 40 a7 1c 09 8f 9f 3b 36 cc 15 99 ce ee 2f e3 2a 4a bb 50 a1 23 63 03 53 73 6a 12 be 01 0c df 00 86 df 12 91 ce ac 7c 4a 4a 7a ff 49 d6 14 3e 48 f0 bd 9b 2b 58 df 3a 4b 64 5f df e5 6b 86 64 9d 91 ab 10 4c 21 45 15 02 36 ef 95 b3 51 ec d1 24 4d d3 20 11 5f ea b4 ae 5f d5 13 d7 b4 bd 57 23 0b 7c 1b 21 69 25 ab de 09 8d b2 c2 bd b3 3b 36 c4 5d 56 4f 0e 6c 60 71 9d 0e 91 a1 f1 fd f8 91 39 22 3d 97 e6 9b 04 12 61 c6 35 bc 0d 15 9f c6 aa 18 a6 f1 fe 5b d0 fd 5b 4e f7 4f 04 6b c3 70 69 a0 97 3c e0 21 7a 8f ce 6b 36 8c 7a c3 d6 c5 0c f1 f2 f9 90 a9 4f cf 44 a0 d4 45 2b 88 7e 24 1f 29 7d 1c 84 40 bf c7 21 Data Ascii: x3t+K32>MXSb\|``[/b%d@;6/*JP#cSsj\|JJzI>H+X:Kd_kdL!E6Q$M __W#\|!i%;6]VOl`q9"=a5[[NOkpi<!zk6zODE+~$)}@!
2024-11-21 02:42:20 UTC	456	IN	Data Raw: 7e 8e 08 70 34 66 e6 2e d8 4c 9a 2a 41 84 a3 01 59 36 cf 97 12 d1 8e 10 47 63 96 d1 3c c9 a4 e8 29 62 1c 0d 61 69 9e e4 52 7b 24 41 8e 46 e8 66 4a 10 e5 68 80 6e 82 b8 c5 94 3a 16 41 bd 7c f9 4b 20 cb 0d 6c a7 9f 50 51 49 aa 25 ca e9 36 2a 0d 0d 32 bb ba 58 4e 8c d1 db 6a 57 cf 99 f1 16 6d 06 ae 54 20 e3 7d 53 cd 10 8d a8 bf 38 96 5d b6 96 f1 0f 56 de 33 9c 15 e6 16 8e 5d 70 a8 67 19 fd 2a 62 4b be f4 ba da 54 a8 30 cc 21 9f 6a e5 eb 6a c1 e4 ca 5d af 98 01 1b bf 28 10 10 4c 70 66 c9 83 4c d5 30 c6 99 c9 82 dd 5a 06 2c 53 3e 56 98 49 1c 5d c7 c3 fd 9f f3 5d 70 f7 c2 4b 52 89 91 03 b4 cc d7 45 09 63 2a 4e 3f e1 40 8f 28 70 32 a1 c1 b9 ca c4 ab d9 fa 78 a5 07 1e b3 4e 0c a8 be d6 45 90 db 22 9c 85 0d 75 94 7f a3 fd 91 8a 54 64 72 11 29 c0 05 6b 73 78 87 60 Data Ascii: ~p4f.LAY6Gc<)baiR{$AFfJhn:A\|K lPQI%62XNjWmT }S8]V3]pgbKT0!jj](LpfL0Z,S>VI]]pKREcN?@(p2xNE"uTdr)ksx`
2024-11-21 02:42:20 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 33 0d 0a 30 30 30 30 30 30 30 31 0d 0a 26 0d 0a 30 30 30 30 30 30 30 31 0d 0a 19 0d 0a 30 30 30 30 30 30 30 31 0d 0a 21 0d 0a 30 31 0d 0a 4d 0d 0a 66 65 64 0d 0a a7 3a b4 c4 91 a5 d4 24 61 51 e9 6e d3 c4 68 aa 12 f7 65 f4 0e b5 0b 8b 58 a6 ec b1 5c 4a 48 0d 62 ec 4d 53 ee 28 dd 9a 08 a5 25 6b 24 fe 73 bc 24 ea 14 90 ef 43 16 61 07 8f ef 3a 41 12 69 4a a8 75 e2 06 01 f5 fb cf 75 97 d0 1e d7 79 ae f7 11 d1 a9 ae dd fa c2 8f d4 e9 3f b3 ab 4f 9d 9d 15 91 28 0a 70 6d 4c 3c 87 86 4d 59 fe c4 88 5c 6d c9 47 bb 59 e5 b8 76 03 18 25 94 1c 9c 53 ca f4 84 51 53 04 e2 98 e5 71 dc 15 0d 4e a6 ba 1a 51 bb b9 9c 2a 62 ab 00 e0 9c 4c d2 39 d1 4d 2a 90 c1 80 6b fc 0f e0 f5 b6 8f 86 8f ff b9 55 d6 b8 d8 6f b8 ac 90 e9 d9 35 e9 93 14 a4 01 a3 Data Ascii: 00000001300000001&0000000100000001!01Mfed:$aQnheX\JHbMS(%k$s$Ca:AiJuuy?O(pmL<MY\mGYv%SQSqNQbL9MkUo5
2024-11-21 02:42:20 UTC	1408	IN	Data Raw: 37 49 ad fd 0c e0 52 51 4f 10 ea 24 1e 90 2b ca f1 60 f6 38 ce 56 71 a1 a4 2e 0f 7b 8f c7 08 74 e4 32 36 17 8b 97 e2 8a 7b 5b 8b 40 1f 5c d0 24 4d a3 b4 a6 ea 02 13 4d 0a 07 d2 09 44 a4 d5 38 42 5d 49 a1 42 43 bb a1 bf a7 db 81 4b 1c 70 c1 cb 70 93 a7 82 8b ae 5d 24 61 14 33 b6 d5 6e be 3a 38 fc 38 5f c0 ca 3f 22 dc e7 31 25 f9 29 d7 89 91 82 09 95 19 76 f2 7c 37 38 ea ec e3 6d d7 a1 dc 4d 9f c8 fb 4e 2b 8f 74 97 e0 c4 c4 74 81 05 a7 a0 d8 58 8a 8a 0c 14 7a 69 18 b4 9b 9d 07 2d 36 3c d4 c7 31 e4 fc 4e 79 19 2d 40 e1 db 2a 44 9f 4c 6d b9 41 cf a3 29 f2 0a 5e 4a ed b8 20 00 ea 90 95 63 24 6e e7 46 89 2e bc 4c a9 65 1f 1e 6e 47 51 55 f5 68 3c 6f 94 29 ab c8 c5 c8 4e b3 fa 4a 54 c9 45 45 7a 53 f1 88 e0 c8 76 cc f0 0a 1d ed a0 0c c8 49 4c c5 51 1b d2 4b b2 7f Data Ascii: 7IRQO$+`8Vq.{t26{[@\$MMD8B]IBCKpp]$a3n:88_?"1%)v\|78mMN+ttXzi-6<1Ny-@*DLmA)^J c$nF.LenGQUh<o)NJTEEzSvILQK
2024-11-21 02:42:20 UTC	1327	IN	Data Raw: 2d 9f d0 e4 c7 c2 0d 4e 7e 97 c5 e4 33 2e cf a1 08 b8 fd c8 89 ae e9 6f e2 84 41 80 cb 44 fc 8f 9f 19 41 e8 00 e0 ec 1a 48 45 71 82 4f 04 aa 1a 85 4f 7c 1e fe 02 7f 74 ab 51 be 9c e7 5f ab 95 d0 82 d5 e5 28 b1 df a7 71 e8 f5 69 86 2b 5c 74 27 17 57 82 3e 81 44 96 71 46 e8 bc 19 f0 ac 67 63 02 f2 47 29 78 95 a6 8e 8b 69 61 e6 c4 01 b8 e5 39 69 1a 02 85 7f f8 de 8f 5e 94 39 59 12 5e 07 19 ee 49 e0 2d 77 2f c5 24 5c d5 8e 13 07 df f7 84 e7 8e f5 7f 2e 16 61 22 c8 0d 98 88 0f 20 77 d4 91 9b 3e 11 b9 e9 af 20 a4 1a e5 1b 62 9e 7f 1d 62 00 b1 09 2d 90 2f 39 0a 9f 68 1e b5 08 f6 aa 51 c0 5d ec f7 e7 22 a1 09 7c 08 5b 92 fa fe 75 04 95 08 bd cc 88 3d 27 49 41 3f d7 80 72 24 11 af 30 5e 43 5f bd 14 c1 87 a1 46 79 90 1a df 83 dc 77 9a f3 69 00 bb eb 9d ea 5e 2b 04 Data Ascii: -N~3.oADAHEqOO\|tQ_(qi+\t'W>DqFgcG)xia9i^9Y^I-w/$\.a" w> bb-/9hQ]"\|[u='IA?r$0^C_Fywi^+
2024-11-21 02:42:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49819	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:20 UTC	690	OUT	GET /gui/11405.d1a6906c4ce5fc5f953f.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:20 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 170b2d7fec9394ec918abf904e179c95 Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 20:22:13 GMT Expires: Wed, 19 Nov 2025 20:22:13 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 109207 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:20 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 73 0d 0a 30 30 30 30 63 61 65 0d 0a db 36 16 fd be bf 82 e6 76 34 e4 94 a4 25 db f2 43 0a ed a6 6e b6 f5 34 49 3b 79 6c 67 d6 e3 71 20 12 a2 d0 50 00 17 04 e5 6a 65 fd f7 3d 00 49 91 7a d8 c9 36 d9 e4 4b 3f 78 4c 91 78 5c dc 7b Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001Z00000001k00000001s0000cae6v4%Cn4I;ylgq Pje=Iz6K?xLx\{
2024-11-21 02:42:20 UTC	1408	IN	Data Raw: 32 c0 2e 95 d3 e5 52 c2 a2 b0 98 bb 28 5d c3 e9 7a 79 30 51 d3 d4 75 8a fb 7b a7 08 e7 ef ac 27 31 9b 59 c6 03 42 7b 96 9b 40 89 a8 e5 f7 2c f8 f9 1f 3e e4 bb f3 bb f6 f9 5a 33 05 57 f1 11 17 24 c9 2c f3 3c 12 f1 dc cf e1 f5 3c 26 72 6e 8d ef fc 91 48 63 fb fc 9b 45 77 f9 64 1f 13 9c 5b fa d1 aa 9e df b5 bd a6 74 99 52 d0 ca 42 f0 17 c7 75 2b e1 db ef cc 26 a7 7a 5f d6 26 a6 a5 2b ec 58 7e db 9e f4 fe 7e 0f 3a 64 ff a1 6e a9 08 db b7 2b 9b a8 f0 a9 94 64 1e 8c a5 98 3a c6 ad 76 8c 15 60 2b 68 2f 86 54 41 9e b2 88 42 91 87 ae 27 fe 5c 5f e4 a6 2d 73 64 30 47 06 73 b4 ad 31 69 ac 71 b0 53 cf 13 bf d7 d5 b6 31 ba 6d 29 58 eb 37 98 92 cc 71 10 31 cd 9a d6 d4 3b c7 ce 83 df 88 2a e2 5c b4 bc 62 06 31 66 5a 8c 3c 23 bc f6 8a 11 89 13 6a c1 51 e1 4b b1 9f 61 03 Data Ascii: 2.R(]zy0Qu{'1YB{@,>Z3W$,<<&rnHcEwd[tRBu+&z_&+X~~:dn+d:v`+h/TAB'\_-sd0Gs1iqS1m)X7q1;*\b1fZ<#jQKa
2024-11-21 02:42:20 UTC	973	IN	Data Raw: 01 a7 30 22 1b 03 95 8f 0f 64 a0 0b fb 5b 7b 60 db 88 65 08 65 4b af 0d c8 64 d0 62 4f 6a 40 36 37 ec 09 7f 84 3d 49 1e 61 4f fe c7 de db fe d3 00 b3 87 86 5a 11 31 6b 72 34 9b 31 ff f0 10 2f 8b e9 88 4a 4d e6 6c 8c 01 6f ff 70 ef ef 85 48 29 c1 e9 dc 46 f7 07 0c d0 0c 98 84 f5 9a 36 c9 9d 8c cd 84 22 a3 94 fa b5 bf 81 1e 6b 2d 69 0b 7f 26 a0 7c 4e 8e 7a fd e3 1d f8 b3 3a a0 d2 f8 b3 3a a0 d2 f8 b3 82 a2 e6 ac ca 1c 26 1a fc 79 76 7c da c7 b1 d5 da 59 95 23 1c 00 db 3e 0e b6 80 4f 4f 40 c7 ba 5b c7 56 5e e2 8d bd 69 03 4e 47 7f 81 d3 cf 04 4e af b6 0f af f8 27 80 d3 16 f8 7c 45 93 35 e0 b9 9b 0f 91 65 ab b5 7a be 4e 14 15 17 22 0d c4 2c 87 fb 10 01 c2 d7 8e 66 a6 5f 1f 32 9a a8 59 02 c0 95 42 6a 88 b7 7a f1 01 de a3 6a b7 a6 a3 8f e6 3c aa ce 0f f2 1d eb Data Ascii: 0"d[{`eeKdbOj@67=IaOZ1kr41/JMlopH)F6"k-i&\|Nz::&yv\|Y#>OO@[V^iNGN'\|E5ezN",f_2YBjzj<
2024-11-21 02:42:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49820	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:20 UTC	511	OUT	GET /gui/40946.52e58c8b2a8b55ad5067.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:20 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: f4508057eef260135f6b23c533b6ac37 Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 18:40:08 GMT Expires: Wed, 19 Nov 2025 18:40:08 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 115332 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:20 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 73 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a 36 0d 0a 30 30 30 30 30 30 30 31 0d 0a 16 0d 0a 30 30 30 30 30 30 30 31 0d 0a fd 0d 0a 30 30 30 30 30 30 30 31 0d 0a be 0d 0a 30 30 30 30 30 30 30 31 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001Z00000001k00000001s0000000100000001600000001000000010000000100000001
2024-11-21 02:42:20 UTC	1408	IN	Data Raw: 86 1d 8f 4d 83 d1 66 80 fc 26 29 f5 21 17 d6 e1 5d e7 2a 36 8b 15 90 47 bf 52 5c f6 4e 74 1a 3c 9d fb 81 1a f1 dc f3 28 dd af ac f9 7e 80 c4 38 18 e9 c4 4a c6 b6 b9 b6 19 22 04 04 52 c5 aa 92 36 a2 ae ac ef a9 91 28 2e 1c f8 b2 3f 9f 33 0d 41 16 a1 c7 af 1a 3a 9c 77 a0 c3 f6 a3 47 eb c0 0b 1a 3a 6c ec ac 6f 19 e8 f0 e8 d1 2e cd 12 74 b0 d8 82 a0 c3 f6 da c6 a3 47 3e 8b 09 45 3c 5e df c0 b0 c2 f0 f1 da da 16 60 c6 08 c3 47 8f d7 b7 d6 7c 36 c0 d0 e2 90 84 d6 6a c4 c1 4a 1a 6e 6c 6c 6e fb 6c 42 0b 08 1c 75 70 08 64 46 38 44 a7 df f0 6a 7e d8 03 d7 76 06 32 7c 73 91 bf 15 45 c9 85 9a 1e 4f c7 fd 22 93 e6 ad b4 7e 6b e9 1a 68 64 8f 60 4a 1a a6 88 4a 99 e2 c2 f3 6a 58 e1 e1 dc ab 89 e9 ea 16 07 5c 0e 44 5a aa 42 68 1a 03 9e 03 7a 88 b8 9f 21 5d 13 3e d1 0e 15 Data Ascii: Mf&)!]*6GR\Nt<(~8J"R6(.?3A:wG:lo.tG>E<^`G\|6jJnllnlBupdF8Dj~v2\|sEO"~khd`JJjX\DZBhz!]>
2024-11-21 02:42:20 UTC	1123	IN	Data Raw: 19 34 eb 90 38 0e 8a 8b 3c 2b d0 2c 4e c8 35 00 3d 6b b4 4a 68 33 5a 5c 31 07 63 28 ba 0c 50 ad 4b 4d 82 55 06 b2 b6 60 be 6d f8 35 18 b6 ae 65 6e 6a ad af ae 36 4b a9 d1 0e 8b 2b 82 72 e2 43 4e 7e a7 d1 de 56 36 e0 01 88 e4 c4 bd 1e 9e 5d e6 12 e1 d1 a2 4d 21 74 a1 df e6 b3 37 16 4e c3 3e 5f 24 a1 b2 18 37 be a8 63 da 2f 71 19 52 81 8a bf 1d fc cb 93 6e 1d 25 c3 13 5a 82 2e 34 89 4a ef e4 9f b2 3a 86 f1 5b 9d 17 f5 f2 0a 6f fb ea b6 36 b6 19 4a 84 7a 47 70 77 55 39 d2 43 11 1b 90 b2 bc 6e 4b 67 06 e1 e3 26 08 19 ce ca 97 6e 0a e8 27 64 18 44 67 45 95 27 b5 2e 54 d8 3e 49 13 14 e2 20 7c 51 c5 6f a9 2e c0 5d 0d 98 4b 83 27 90 30 55 2b a6 40 41 65 6a 92 69 d0 94 12 d2 6c b3 c4 54 42 6b e3 dc d8 b8 2a 54 9c 3d cb 87 28 aa a5 09 ca e0 f0 5d 67 d2 e3 d7 12 09 Data Ascii: 48<+,N5=kJh3Z\1c(PKMU`m5enj6K+rCN~V6]M!t7N>_$7c/qRn%Z.4J:[o6JzGpwU9CnKg&n'dDgE'.T>I \|Qo.]K'0U+@AejilTBk*T=(]g
2024-11-21 02:42:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49818	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:20 UTC	510	OUT	GET /gui/8405.5eb49c1a7107f741455b.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:20 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 21f38f06e113b3226cf900714222fa57 Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 22:41:17 GMT Expires: Wed, 19 Nov 2025 22:41:17 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 100863 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:20 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 31 0d 0a 02 0d 0a 61 36 34 0d 0a ff ec 5b 69 6f db 38 1a fe be bf 42 d1 62 0b 69 2b 68 e2 4c 4e 67 d5 4c d1 6b 07 e8 64 82 a4 ed 02 13 18 86 2c d3 16 a7 ba 40 52 4e 0d c7 ff 7d 1f 52 94 25 3b 76 e2 34 95 e1 16 cd 97 c8 12 45 be f7 2d 33 e7 c4 e0 82 d1 40 98 a7 16 27 d1 c0 bd 21 bd cc 0f 3e bf 0a f3 e4 f3 48 74 73 da 8d 7d 9a 78 f7 3c bb bd bd ee d8 6e 96 f3 d0 ba be 3e de df 3d e8 38 93 d6 fe 71 eb a4 6d 09 87 38 cc f6 5e 4c 98 db b7 Data Ascii: 0000000100000001000000010000000100000001000000010000000100000001000001a64[io8Bbi+hLNgLkd,@RN}R%;v4E-3@'!>Hts}x<n>=8qm8^L
2024-11-21 02:42:20 UTC	1408	IN	Data Raw: a7 3a 0d 7c 01 4f 00 75 d2 6e 5f 79 3b 04 48 f6 d4 87 1f 4b e0 a6 ad c8 6e c3 1d c7 94 13 97 11 9e 46 23 79 cb 15 21 49 2c 1c 61 57 46 67 58 db a7 84 06 26 b5 f0 65 d2 c2 39 ac 72 56 33 8f 89 80 44 6f 5f 73 48 72 63 f5 62 ea 09 1d 92 c9 b0 b6 8a 33 65 40 39 e9 59 a9 c2 92 3b be 63 26 70 f0 30 98 35 78 fc 3b 6b 54 0c a4 16 71 1d 57 29 3f a1 63 84 f1 42 8c d0 42 8c 00 77 31 e7 d3 11 95 62 57 7b de 8f b8 7d 5f f8 ca 99 e0 f1 4b ce d3 80 16 4e 5f 63 2f 3c 89 7d 89 f1 b0 c2 f3 df 58 a0 fc 0f 9c bd 8c cc b8 9b 27 96 70 69 bf 8c 9b 8c 31 25 51 df 90 94 af e2 08 fe 4a c6 0e a4 ef 2c dc 76 11 e8 cc 8e 86 ff b3 ec 29 e0 b9 24 59 ca 04 df 30 28 ac 38 b5 80 a2 ee 62 c1 36 25 10 a7 85 a7 15 b6 43 14 75 0a 57 17 f8 fe ab 34 11 60 e5 cb d2 63 5e f8 cc 8f b9 37 19 44 fe Data Ascii: :\|Oun_y;HKnF#y!I,aWFgX&e9rV3Do_sHrcb3e@9Y;c&p05x;kTqW)?cBBw1bW{}_KN_c/<}X'pi1%QJ,v)$Y0(8b6%CuW4`c^7D
2024-11-21 02:42:20 UTC	316	IN	Data Raw: 98 ab ad dd 21 c7 dd da 5a ad 73 d5 10 26 f3 1d e0 f5 31 a9 41 66 3a c0 a4 a8 09 56 53 2d 34 bb 5c 73 a2 a5 b1 19 8e d0 9d 9f e1 58 1f b9 62 9c 63 09 56 db 32 ce f1 f5 b6 68 e9 64 c7 12 4c 1f 9e bd 29 87 22 9a 9b d2 f8 7a 2c 4b d8 ca 81 8d af 42 b0 6a 8b 37 d7 a9 ff 7a 14 2b e8 ba ba 69 3f 8f e4 92 fa 60 f5 ca 26 a6 2a be 09 6a 77 07 2c 1e c4 b2 1a 47 db 46 c9 ac a0 7b 92 6c c6 24 4e d9 f8 42 cd 09 26 18 3c 96 b5 ff 2d f3 10 05 88 dd ac 80 11 ff 15 90 4b 9d c5 c3 c6 06 71 cd a5 9c 0a 2b 3a 75 f1 b2 c1 f4 b2 53 f7 f6 c2 aa 05 a2 4d 34 ec 9a 6d 19 68 bd 29 1b 3f 8f f0 5a b5 ee 81 d6 92 c7 74 0f 54 8c be b4 67 80 2f ee 54 cf a0 0c ee d1 3a 00 3f 1e fc 7c 60 29 97 ca cf 07 c0 25 7c 3e 30 db b1 fc e4 a0 d9 af 08 1a 87 68 ee 63 02 f4 57 3a f6 e9 3f 7e f9 e5 9f Data Ascii: !Zs&1Af:VS-4\sXbcV2hdL)"z,KBj7z+i?`&*jw,GF{l$NB&<-Kq+:uSM4mh)?ZtTg/T:?\|`)%\|>0hcW:?~
2024-11-21 02:42:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49824	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:20 UTC	511	OUT	GET /gui/71288.1829e1a8db7a3e06e295.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:21 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 15dfaa985c9b5ad0b52026f0d08de081 Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 17:50:34 GMT Expires: Wed, 19 Nov 2025 17:50:34 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 118307 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:21 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 97 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a 36 0d 0a 30 30 30 30 30 30 30 31 0d 0a 92 0d 0a 30 30 30 30 31 0d 0a 7e 0d 0a 30 66 65 65 0d 0a df 5f c1 68 36 3d 62 96 64 53 54 4b 2d 51 96 13 8f 93 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001\00000001[00000001000000010000000160000000100001~0fee_h6=bdSTK-Q
2024-11-21 02:42:21 UTC	1408	IN	Data Raw: 40 6b f5 1f 6b 9d 85 0d 71 d2 0c 78 e9 4e 2a 4b 5b 23 85 12 44 50 82 88 94 20 28 a0 be 09 53 2b 2b 57 9f fe 31 5e 44 f1 ed 60 fb 25 00 2f b9 a2 40 90 92 c0 4b 63 40 80 24 99 9e e8 6e b1 65 c2 1b 63 17 40 ba 43 22 e4 53 2c 61 ee a0 3f ef e2 2a 61 ba f2 86 e0 3b 24 be 3b bc 19 fb 86 aa 67 fc 8c ed 14 6f 1f 6c 6c 31 58 98 ca de b0 ea 8e b1 94 d4 5a eb d7 ea c2 15 17 76 27 0d 61 43 09 b1 4c b2 ca 48 83 03 b4 bf 22 2e a0 e2 b0 69 f7 a3 97 2f 2e 09 44 18 79 90 2a f9 48 ed 36 b6 a5 3d 17 9b 40 a3 25 a4 79 49 f8 43 84 ab 2c 4b aa 38 d7 28 0b 01 f7 59 28 8f db 16 0b 92 30 2d c7 80 f4 47 24 7e 7b cf 02 6c 41 03 0a 0b 5d 7e 20 ad e5 02 ae 95 d6 1a 6d b2 02 18 d8 9d d8 f0 07 23 1f 56 ec de aa b4 8d ae be 46 09 d6 28 e1 ba 65 c0 46 f5 ad 47 5e da 9e 30 33 6d 5b d0 a8 Data Ascii: @kkqxNK[#DP (S++W1^D`%/@Kc@$nec@C"S,a?a;$;goll1XZv'aCLH".i/.Dy*H6=@%yIC,K8(Y(0-G$~{lA]~ m#VF(eFG^03m[
2024-11-21 02:42:21 UTC	1408	IN	Data Raw: 37 5c 2e 25 5a f8 10 10 96 b7 b8 de 6c 66 02 6b 83 14 57 72 22 1a ee f6 31 f2 22 90 df 6e 15 ed e0 01 3f cf f9 9f a6 09 46 bb a0 8e 53 fe 47 6b 9f b8 2e 75 5f d2 47 6b 46 20 4b cd 1e 7d b4 66 cc 0b cd 6c 4e 1f ad f9 8a 37 87 fc 8f d6 8c e8 19 d8 9b 29 7d b4 e6 39 6f ee 71 78 cd 9b af 22 fa 68 d8 0b de dc e3 7b c9 9b 27 01 7d 04 b6 2c 6f 62 44 7d 91 cb 63 18 b2 b2 44 ab 2e ed 38 dd d2 c2 bb ee f5 46 4d e4 2e 28 52 c4 22 68 d5 d7 2f a2 35 2d d0 a8 af b4 1c c9 2e 76 1b df 98 4c 2c e3 fa da 32 bc c9 42 f0 21 47 14 d0 19 20 93 6b 0f 28 52 5e 34 b2 00 b9 80 78 53 74 9c 4a 5d 91 1c 08 a8 e7 2d 01 9f cc 2c 43 42 05 27 72 cc 25 c8 4e e7 f8 5f 69 ad a8 2d db bc 44 07 4b bd 0f ca 98 e6 ec ce bd cd b5 5c 57 98 d7 2c 85 1a 20 d1 a1 0a b4 86 e5 2d e9 d3 e6 be 87 e3 ce Data Ascii: 7\.%ZlfkWr"1"n?FSGk.u_GkF K}flN7)}9oqx"h{'},obD}cD.8FM.(R"h/5-.vL,2B!G k(R^4xStJ]-,CB'r%N_i-DK\W, -
2024-11-21 02:42:21 UTC	443	IN	Data Raw: 37 66 bb b7 98 72 0d ec 0e e8 fb 50 cd 5f 10 48 d1 ae 8e d3 14 7a 9d 07 11 b9 4b cc 5f 8a 52 78 06 ce 3c d0 25 33 54 5a ad 70 a0 60 53 45 ce de c6 2c 89 4a fb 0e d5 16 5c f1 b2 1e 43 23 79 3c 0a 3c c4 29 4e 4e 1f 05 ef 11 c5 8a 71 1e 45 89 02 84 84 c4 c9 a3 18 08 4f ab fd 33 38 0f 14 a7 72 32 8d 28 ce cd 8c b8 90 ec 32 c7 b6 94 1a 27 63 43 ba 70 a5 e1 95 20 13 ee b5 eb 53 27 25 3a 6d 1d 3b 42 e5 fa 6f 97 77 74 49 4c 09 73 90 89 6d 8c 3b 2c c7 9c 8e 18 15 17 a4 98 b5 4e 0e 0c 25 55 c6 f7 79 5f 5c d4 c4 99 75 86 8b 22 fc 66 d8 e9 53 7b 6b 65 aa 82 05 37 5c 6f ed 7b 72 e7 32 98 68 5a c9 89 cf ae e7 75 98 d1 40 0e 28 48 5d cf 17 03 10 f2 61 cb 25 3c 50 8f 1a f7 ea a8 f5 0c 81 38 0c 41 7b 7e 7f 46 c9 8d ae 4b 9c 70 24 7f ef c3 ff 1a b4 2a 2b e1 a9 50 40 fa fc Data Ascii: 7frP_HzK_Rx<%3TZp`SE,J\C#y<<)NNqEO38r2(2'cCp S'%:m;BowtILsm;,N%Uy_\u"fS{ke7\o{r2hZu@(H]a%<P8A{~FKp$*+P@
2024-11-21 02:42:21 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 5a 0d 0a 30 30 30 30 30 30 30 31 0d 0a d4 0d 0a 30 30 30 30 30 30 30 31 0d 0a c7 0d 0a 30 30 30 30 30 30 30 31 0d 0a a1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 66 0d 0a 30 30 30 30 30 30 30 31 0d 0a 89 0d 0a 30 30 30 30 30 30 30 31 0d 0a 21 0d 0a 30 30 30 30 30 30 30 31 0d 0a f5 0d 0a 30 30 30 30 30 30 30 31 0d 0a a9 0d 0a 30 30 30 30 30 30 31 0d 0a 8f 0d 0a 37 35 32 0d 0a 23 00 38 bb d7 fc 52 0b 4b 03 98 2b b1 36 2d b8 d4 32 ee bc 84 87 a5 d0 9e e1 e2 f4 90 df 5d b5 5d d8 4a 99 1e dc 19 2f 50 82 e0 57 63 c8 cc ad b8 a3 19 68 2d ed 5e 63 af 41 28 92 df 62 b3 a5 cc 22 6f 69 4b 5e d7 3e 53 39 33 a9 c1 43 94 94 12 6f 50 b9 de 15 19 ca fa 72 17 b6 91 77 08 9a 28 e3 89 79 44 c7 85 65 a0 60 81 1b d0 41 c9 e0 43 6d 04 14 56 97 c6 00 86 Data Ascii: 00000001Z00000001000000010000000100000001f0000000100000001!00000001000000010000001752#8RK+6-2]]J/PWch-^cA(b"oiK^>S93CoPrw(yDe`ACmV
2024-11-21 02:42:21 UTC	602	IN	Data Raw: 37 e2 d2 28 2e 35 c7 e5 4a 5c 56 12 17 83 d2 8c 0e 82 90 58 09 33 2e 7c 85 32 ea 5d cf d1 76 1a f5 92 cb 66 7e f6 a4 d9 77 d9 2c 7c 96 b6 6d ce ce 23 cf 84 4f 9d 76 9f b3 a8 1e 11 b7 28 c8 47 f3 f2 fc cf 4e d8 b6 f2 f9 2b fa 66 77 c2 94 d9 5e ed 9b f9 15 84 16 09 3c 24 ad a1 e4 33 da 40 3c 33 57 50 9c a0 d3 55 a3 2e 85 95 8a 53 f9 e0 5d 28 46 c7 c3 df 0e 89 ce 30 6d 0a 1d 20 08 e0 d1 70 4d 80 8e 95 bb 63 d4 fd e5 3a 75 e1 20 81 37 f4 2d 12 6e 7b 96 78 10 5c 83 1f 99 06 3d 17 f7 4e f8 bb 37 fc d9 e1 4f c9 39 ac c7 3c bd c7 e6 27 55 74 ee 2e ae 70 b5 86 96 ef b6 05 8a 4c df 71 85 b7 85 d3 35 7a b5 01 38 75 20 7e 0d 69 f5 a7 94 50 99 fc 3a e1 17 7e b3 b1 57 f2 42 97 96 ee 52 88 df 3e 74 68 fb 06 fc ce 93 9a 9a ae e3 5a de 41 23 53 04 56 e3 69 f9 66 07 4d 6c Data Ascii: 7(.5J\VX3.\|2]vf~w,\|m#Ov(GN+fw^<$3@<3WPU.S](F0m pMc:u 7-n{x\=N7O9<'Ut.pLq5z8u ~iP:~WBR>thZA#SVifMl
2024-11-21 02:42:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49823	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:20 UTC	690	OUT	GET /gui/21928.84211e4ee5e5aa330648.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:21 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 267ecb8745e407699f2f3ed65d94e138 Content-Encoding: gzip Server: Google Frontend Date: Wed, 20 Nov 2024 21:19:03 GMT Expires: Thu, 20 Nov 2025 21:19:03 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 19398 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:21 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7b 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a 46 0d 0a 30 30 30 30 30 30 30 31 0d 0a 92 0d 0a 30 30 30 30 30 30 30 31 0d 0a ee 0d 0a 30 30 30 30 30 30 30 31 0d 0a f7 0d 0a 30 31 0d 0a fd 0d 0a 30 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001}00000001k00000001{0000000100000001F000000010000000100000001010
2024-11-21 02:42:21 UTC	1408	IN	Data Raw: a7 cd a9 48 e0 8f f8 37 f1 28 08 53 fa ad f8 f7 98 1a 0b c6 44 68 30 a1 9a 82 99 9f c9 bc e0 b4 c5 8c d2 98 84 20 a5 f6 82 8c cb 49 9e ec 96 52 96 b4 6a 82 25 a5 87 3e 51 10 52 63 e1 88 28 0e b9 f7 a1 1a 45 3e 51 15 2a aa 15 33 63 46 f5 c6 fa 6f 38 27 2a 42 a6 34 4c 88 2b f8 4d 8d 85 29 35 10 e6 44 76 b8 e2 4c 77 54 2b 94 06 fd a6 c5 87 bf c9 32 9f 25 09 75 56 f1 62 5b 28 88 08 7c 8b f5 df f9 47 7c 19 cf 7c f9 9d 4d f9 2f 55 3c 8e 89 da 31 2f 89 89 4f 94 4d 46 d4 8b 89 a2 06 27 11 35 32 61 5e 4f a8 8a 89 8c db f4 6f f4 65 9a cf a9 ed 68 84 96 89 5f 51 c0 c2 26 0a 68 de 45 01 27 8d a9 82 28 0e a9 b6 68 31 4d 62 a2 2a ca 28 c7 07 9f 1a fa b0 a0 3e 7d a0 cc 1f 78 68 6f 14 c9 a8 1b ae fa 86 e9 9e f1 28 ce 12 ca 38 5b 52 1f e6 dd 25 fd ee f1 e7 1e f5 63 8e 95 Data Ascii: H7(SDh0 IRj%>QRc(E>Q3cFo8'B4L+M)5DvLwT+2%uVb[(\|G\|\|M/U<1/OMF'52a^Ooeh_Q&hE'(h1Mb*(>}xho(8[R%c
2024-11-21 02:42:21 UTC	1408	IN	Data Raw: 26 8d d3 da f3 67 07 52 cb f3 6a d5 3c 55 9d 29 0c 7f 53 dd 2a 0a f3 a9 f9 32 55 34 f9 f4 b7 4a 49 a2 0f f4 b0 3e 71 40 11 7f 40 2b 5c e1 46 23 50 e6 39 65 ee 80 7a 64 3d ac ed a1 79 94 84 f7 cd 20 99 25 29 51 4c 35 3e 3b a0 b2 1b d5 1d 4c 48 69 11 f2 d0 3e 72 43 b7 73 44 ff 37 db 5d fe 97 9a a5 fd 2a 8a 6f ca a5 6d 29 54 1e 8e 11 86 63 44 c3 81 ad 19 21 24 d0 bb c3 1a 80 92 e4 46 59 4c 1c 61 33 a3 d2 82 24 e7 ae 6d 7a 7c d7 31 9f ee 4d 5a 85 3d f7 c5 f3 b9 9f 62 c7 d4 84 e4 67 59 5e ff ca 4f d3 64 85 41 7e 76 40 6d 4b 57 52 74 26 33 94 6b a5 4b 8a 46 c4 11 89 cb 4f 9f 20 e6 78 4d da 7a 53 0b dc c4 8b 13 3c 8b 27 5a 56 a9 61 f7 a8 75 b0 99 db cd b7 2a 78 36 ec 7c fa b4 99 ef 4f 9d e1 b0 75 06 86 1e 0e 5a 5a 08 97 f3 78 01 c6 2d 88 71 60 a3 a3 e7 ca 71 0b Data Ascii: &gRj<U)S2U4JI>q@@+\F#P9ezd=y %)QL5>;LHi>rCsD7]om)TcD!$FYLa3$mz\|1MZ=bgY^OdA~v@mKWRt&3kKFO xMzS<'ZVau*x6\|OuZZx-q`q
2024-11-21 02:42:21 UTC	463	IN	Data Raw: d9 5f 14 e9 d9 34 59 a1 63 ec 8d ca 8a 7a 28 f7 cf 49 aa 5e b0 7f 4f 85 e7 f9 2b e5 67 f9 6b 78 e5 90 67 4d 8f 89 1b 24 ef f5 7a 55 82 a6 90 4b d6 a3 c7 f5 86 07 8c 22 b6 01 1b a6 a3 d2 1e ac c5 ed c4 e1 13 1b c8 91 d1 b0 a1 1c 48 af 02 c5 91 be 55 ea d4 78 9d c5 c9 ed 94 fa 03 15 f9 59 83 7f 95 e2 d0 1e 66 ea e4 f8 0c 51 07 c4 b1 5e 47 bf 48 96 36 db 00 03 60 5a 82 8b 4b 41 84 0e 5b 2d 3b 49 a4 9c 3a 5d 7a 4b 42 05 92 34 27 89 44 1a 94 a4 97 66 f3 cf 51 08 b7 ea 0a 1e 53 56 08 98 12 f6 10 99 09 60 d0 b0 8d 91 7b 97 5e 0d 73 8f e0 44 c6 cf 60 d8 02 39 84 14 56 e9 db e4 25 aa ad d7 c9 58 dd 53 e3 ae 76 64 08 36 5a 21 2d 5a 40 a1 6c 6b 12 10 ca 83 a1 35 b9 21 6f 6b ca 09 81 54 46 46 27 55 7f 5b aa 2c ff 0b 43 c4 75 b8 41 ac d5 4a 93 88 ec 78 00 47 55 a6 58 Data Ascii: _4Ycz(I^O+gkxgM$zUK"HUxYfQ^GH6`ZKA[-;I:]zKB4'DfQSV`{^sD`9V%XSvd6Z!-Z@lk5!okTFF'U[,CuAJxGUX
2024-11-21 02:42:21 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 3e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0a 0d 0a 30 30 30 30 30 30 30 31 0d 0a e3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a e3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5f 0d 0a 30 30 30 30 30 30 30 31 0d 0a cc 0d 0a 30 30 30 30 30 30 30 31 0d 0a 14 0d 0a 30 30 30 30 30 30 30 31 0d 0a 93 0d 0a 30 30 30 30 30 30 30 31 0d 0a 37 0d 0a 30 30 30 30 30 30 30 31 0d 0a d9 0d 0a 30 30 30 30 66 66 34 0d 0a ca 9b 94 15 91 d1 3a 07 34 6f b7 87 c7 09 3a 09 d4 d0 4c 37 9a a7 7b 24 d3 a7 4f 44 09 ed f3 28 03 19 39 e8 99 19 ca 8b a9 0a 6e b0 09 d3 78 46 75 98 0d bb 11 5f 41 7d b1 a4 4d 66 78 2d 0e 19 5a c6 0c 8e 17 d3 83 59 ef 16 68 b4 e9 e9 4e d6 95 0f f3 ad 9e 32 67 b9 a7 67 Data Ascii: 00000001>00000001}0000000100000001000000010000000100000001_000000010000000100000001000000017000000010000ff4:4o:L7{$OD(9nxFu_A}Mfx-ZYhN2gg
2024-11-21 02:42:21 UTC	1408	IN	Data Raw: f2 d9 55 e2 de 7c e0 6c 64 94 55 12 63 24 5e e9 b8 b4 37 c9 8a a2 e6 58 10 8a f8 7d 93 24 b9 07 58 22 bd 97 46 93 14 cd d6 6b ef 68 0e 43 d0 5e d5 2c 54 9f 36 fa 0a 60 8e 8d 62 90 b5 54 4d a9 b1 9d 78 8f d5 05 ed 6b 6c c6 57 7c e2 c0 84 8c 69 0a 10 c3 08 69 4c 76 8e 28 a9 7d 14 d5 6b d8 4a f8 69 30 6d 22 a6 06 91 3d 59 93 02 20 28 e6 47 f6 54 a5 26 b1 01 4f e6 83 6c d8 66 10 d8 b3 e1 54 eb 13 6d 86 ef aa b2 12 f0 67 e9 16 58 20 46 9d 6b dc d4 74 ac 20 82 60 0c b3 45 d6 10 20 61 5a b0 07 c5 cb 5a c0 1c a4 49 60 91 59 91 88 44 98 68 12 d2 9f d8 e8 70 5f 49 49 34 c9 53 f0 1d 8e 9c 60 3a 34 a1 f6 c0 00 66 be 2a b6 31 de ee 79 63 76 77 7a 18 8d 58 86 2f 0b 36 bc 89 42 71 58 21 20 fe 4d 15 01 2a 67 01 a1 03 65 f5 df 2d 92 05 85 c9 6f 37 0c 7f 05 6f d8 76 3c d1 Data Ascii: U\|ldUc$^7X}$X"FkhC^,T6`bTMxklW\|iiLv(}kJi0m"=Y (GT&OlfTmgX Fkt `E aZZI`YDhp_II4S`:4f1ycvwzX/6BqX! Mge-o7ov<
2024-11-21 02:42:21 UTC	1408	IN	Data Raw: 3c c5 0d 29 70 f4 98 83 53 5b b9 2c ce f7 f6 f4 94 99 a7 39 28 e5 75 63 f2 07 70 e1 82 4e 85 b2 af 49 0e 86 fe 25 05 aa 2a 83 c1 52 bb 26 ea ce 4a f1 22 f2 4b 0b c6 0a 27 3d 1d ed 85 67 9b 4e 32 62 77 05 bf 31 38 40 57 95 f8 13 b6 32 cb 1d 17 03 82 6f 38 c2 ee 35 0e b1 22 b2 47 6c 3d ab 6a 40 b1 ae 09 8c b4 92 3d ba 7a c2 e5 f3 c3 3f 80 21 0d a2 f7 2d c6 c8 d4 6d 67 d5 b1 67 0b 1a 8d 6b 90 67 6c 3e 82 c7 8c cc 40 48 51 7d b2 29 33 46 7e 38 51 4e 4a e1 47 d8 5d 2d e0 e0 72 46 93 26 45 9d 00 d0 cc 85 bf c5 37 8b f5 6d 67 de 94 23 44 ce 8f 30 38 12 9c d3 9d 98 a8 07 66 39 98 3c f3 46 b8 23 e5 47 d4 89 e3 c4 90 2f b8 01 c6 1c f0 fa fb 1b 00 b6 35 2a 2c 95 db 5c 52 35 01 4f 6d 3e 8e c1 c7 31 f3 31 9a cb 59 30 3a e4 59 73 8a c8 90 99 ff f1 1e 82 86 a4 1a 8b 2b Data Ascii: <)pS[,9(ucpNI%R&J"K'=gN2bw18@W2o85"Gl=j@=z?!-mggkgl>@HQ})3F~8QNJG]-rF&E7mg#D08f9<F#G/5,\R5Om>11Y0:Ys+
2024-11-21 02:42:21 UTC	27	IN	Data Raw: 33 5c 0a 03 1f 50 cb 59 dc b1 23 88 3a bb 09 32 9e 85 51 46 53 ad 08 46 e3 0d 0a Data Ascii: 3\PY#:2QFSF
2024-11-21 02:42:21 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 53 0d 0a 30 30 30 30 30 30 30 31 0d 0a 24 0d 0a 30 30 30 30 30 30 30 31 0d 0a c3 0d 0a 30 30 30 30 30 30 30 31 0d 0a da 0d 0a 31 0d 0a 4b 0d 0a 66 62 35 0d 0a 6e 09 40 a0 6e c9 0c f4 b3 03 69 b2 b4 7c 8a 2c 38 c6 89 71 b8 e4 12 2a d4 53 76 cf d3 a7 4f 65 46 6f 3c fe 4b 2c 09 28 1e 6e 20 0f 62 25 95 f9 e5 93 35 f0 17 14 83 8d 82 6c 2c 95 f9 84 65 97 a6 1f 5b 8f 89 66 ab d9 19 ae 2e 44 64 ca 1b f2 ff c1 90 49 56 af d4 98 6f 1e b3 36 a4 ba 0e a0 22 72 56 ec 02 d7 e6 ce f5 d5 64 bc f4 ec 49 2b 80 1a cb 8c ea 42 90 b2 b2 0c 70 0a ad 84 bd ac 8f d2 92 36 7e 0c cf a8 09 ed 2f 3e 7b 87 bb 16 e9 16 02 b6 b9 ea 87 8d 2b 39 50 41 aa da 92 5b 02 46 31 0d a9 59 0e 7c c7 d7 14 60 34 02 03 27 80 e6 30 c0 cf f2 d0 3c 2d 17 3e 07 95 eb 25 64 Data Ascii: 00000001S00000001$00000001000000011Kfb5n@ni\|,8q*SvOeFo<K,(n b%5l,e[f.DdIVo6"rVdI+Bp6~/>{+9PA[F1Y\|`4'0<->%d
2024-11-21 02:42:21 UTC	1408	IN	Data Raw: 99 d4 f9 f9 e5 5b ab 81 28 9f 2e 47 5c 75 be 1a 65 07 45 6b 07 e0 e1 08 17 e0 46 f1 c1 ab 97 17 2f 7e b9 7c c1 4d 1f 0c 52 d0 f3 c0 d7 5b 8f e8 c2 3e e7 ab d6 a8 17 86 fe 29 27 01 97 8a 26 09 12 8f 8e da ad 71 47 12 17 cb 14 5b 10 4a 1c f7 3a 41 5b 27 02 0a a2 c2 fc 9f 24 e1 a2 7b a4 04 b8 15 b4 d3 92 14 c4 12 c4 13 2a a9 0e 8f a1 87 24 f1 1e 0b 85 24 c4 57 e3 40 9d 1c 1d 4b e2 24 45 20 07 d2 ba 27 7e d0 0b 24 2d 57 3e 6e e3 fe aa d3 0a f0 9e 2c 49 0a ee 7d ca d5 e9 1f 8f 46 87 92 84 0b f7 03 4d 89 24 b0 b0 a1 ea c7 63 49 c0 81 76 c8 09 74 89 fe 2b 93 f0 22 84 94 0a 76 f9 3f 2b 1d 12 81 8a 9f d0 8f 95 8c 95 48 c9 1d fa b1 92 d1 2f 24 ab 23 fa b1 92 21 da 91 1c f0 7f 56 32 44 35 92 47 5d fa b1 92 8f 38 79 8b 42 48 64 e4 ee 85 f4 63 e5 ee 73 f2 16 dd 27 9c Data Ascii: [(.G\ueEkF/~\|MR[>)'&qG[J:A['${*$$W@K$E '~$-W>n,I}FM$cIvt+"v?+H/$#!V2D5G]8yBHdcs'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49822	142.250.185.131	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:20 UTC	752	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=-ZG7BC9TxCVEbzIO2m429usb HTTP/1.1 Host: recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://recaptcha.net/recaptcha/api2/anchor?ar=1&k=6Ldjgd0kAAAAAITm7ipWF7o7kPL_81SaSfdINiOc&co=aHR0cHM6Ly93d3cudmlydXN0b3RhbC5jb206NDQz&hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=j3rr2j2nks8n Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:21 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Thu, 21 Nov 2024 02:42:21 GMT Date: Thu, 21 Nov 2024 02:42:21 GMT Cache-Control: private, max-age=300 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Cross-Origin-Resource-Policy: same-site Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:21 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 2d 5a 47 37 42 43 39 54 78 43 56 45 62 7a 49 4f 32 6d 34 32 39 75 73 62 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/-ZG7BC9TxCVEbzIO2m429usb/recaptcha__en.js');
2024-11-21 02:42:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49825	142.250.181.228	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:21 UTC	660	OUT	GET /js/bg/4pbpW_rAqcOeS6hEUaHQz4OxZ89eKEymdS8KphqvIV8.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://recaptcha.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:21 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18891 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 19 Nov 2024 03:08:01 GMT Expires: Wed, 19 Nov 2025 03:08:01 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 11 Nov 2024 13:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 171260 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-21 02:42:21 UTC	578	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 55 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 72 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 4c 29 7b 69 66 28 4c 3d 28 72 3d 6e 75 6c 6c 2c 67 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 21 4c 7c 7c 21 4c 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 72 3b 74 72 79 7b 72 3d 4c 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 55 2c 63 72 65 61 74 65 53 63 72 69 70 Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var U=function(r){return r},S=function(r,L){if(L=(r=null,g).trustedTypes,!L\|\|!L.createPolicy)return r;try{r=L.createPolicy("bg",{createHTML:U,createScrip
2024-11-21 02:42:21 UTC	1390	IN	Data Raw: 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 6c 36 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 4c 2c 6c 2c 67 2c 46 2c 76 29 7b 66 75 6e 63 74 69 6f 6e 20 53 28 29 7b 69 66 28 72 2e 41 3d 3d 72 29 7b 69 66 28 72 2e 46 29 7b 76 61 72 20 51 3d 5b 4f 2c 6c 2c 4c 2c 76 6f 69 64 20 30 2c 46 2c 76 2c 61 72 67 75 6d 65 6e 74 73 5d 3b 69 66 28 67 3d 3d 32 29 76 61 72 20 4d 3d 49 28 72 2c 28 78 28 72 2c 51 29 2c 66 61 6c 73 65 29 2c 66 61 6c 73 65 29 3b 65 6c 73 65 20 69 66 28 67 3d 3d 31 29 7b 76 61 72 20 55 3d 21 72 2e 4b 2e 6c 65 6e 67 74 68 3b 78 28 72 2c 51 29 2c 55 26 26 49 28 72 2c 66 61 6c 73 65 2c 66 61 6c 73 65 29 7d 65 6c 73 65 20 4d 3d 72 6a 28 72 2c 51 29 3b 72 65 74 75 Data Ascii: -License-Identifier: Apache-2.0','*/','var l6=function(r,L,l,g,F,v){function S(){if(r.A==r){if(r.F){var Q=[O,l,L,void 0,F,v,arguments];if(g==2)var M=I(r,(x(r,Q),false),false);else if(g==1){var U=!r.K.length;x(r,Q),U&&I(r,false,false)}else M=rj(r,Q);retu
2024-11-21 02:42:21 UTC	1390	IN	Data Raw: 73 68 28 67 29 3a 28 46 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 74 68 69 73 2e 6e 29 2c 46 3c 35 30 26 26 28 74 68 69 73 2e 6a 5b 46 5d 3d 67 29 29 7d 2c 6c 29 2c 6e 65 77 20 6c 29 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 67 3d 4c 2e 44 37 28 29 2e 63 6f 6e 63 61 74 28 72 2e 44 37 28 29 29 2c 72 3d 6e 65 77 20 6c 2c 67 7d 29 5d 7d 2c 4f 63 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 4c 29 7b 72 65 74 75 72 6e 20 4c 5b 72 5d 3c 3c 32 34 7c 4c 5b 28 72 7c 30 29 2b 31 5d 3c 3c 31 36 7c 4c 5b 28 72 7c 30 29 2b 32 5d 3c 3c 38 7c 4c 5b 28 72 7c 30 29 2b 33 5d 7d 2c 7a 30 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 4c 2c 6c 2c 67 29 7b 65 28 54 28 4c 2c 28 67 3d 28 6c 3d 62 28 72 29 2c 62 28 72 29 29 2c 70 29 28 6c 2c 72 Data Ascii: sh(g):(F=Math.floor(Math.random()*this.n),F<50&&(this.j[F]=g))},l),new l),function(g){return g=L.D7().concat(r.D7()),r=new l,g})]},Oc=function(r,L){return L[r]<<24\|L[(r\|0)+1]<<16\|L[(r\|0)+2]<<8\|L[(r\|0)+3]},z0=function(r,L,l,g){e(T(L,(g=(l=b(r),b(r)),p)(l,r
2024-11-21 02:42:21 UTC	1390	IN	Data Raw: 2c 67 7d 5d 7d 2c 71 44 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 72 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 4c 2c 6c 2c 67 2c 46 2c 76 2c 53 2c 51 2c 4d 2c 55 2c 48 2c 6b 2c 58 2c 7a 29 7b 69 66 28 48 3d 70 28 32 30 33 2c 6c 29 2c 48 3e 3d 6c 2e 48 29 74 68 72 6f 77 5b 64 2c 33 31 5d 3b 66 6f 72 28 4d 3d 28 55 3d 28 46 3d 6c 2e 62 69 2e 6c 65 6e 67 74 68 2c 53 3d 72 2c 30 29 2c 48 29 3b 53 3e 30 3b 29 6b 3d 4d 3e 3e 33 2c 7a 3d 4d 25 38 2c 51 3d 38 2d 28 7a 7c 30 29 2c 51 3d 51 3c 53 3f 51 3a 53 2c 76 3d 6c 2e 4a 5b 6b 5d 2c 4c 26 26 28 67 3d 6c 2c 67 2e 4e 21 3d 4d 3e 3e 36 26 26 28 67 2e 4e 3d 4d 3e 3e 36 2c 58 3d 70 28 34 33 34 2c 67 29 2c 67 2e 78 70 3d 49 79 28 5b 30 2c 30 2c 58 5b 31 5d 2c 58 5b 32 5d 5d 2c 67 2e 4e 2c 67 2e Data Ascii: ,g}]},qD=function(r){return r},n=function(r,L,l,g,F,v,S,Q,M,U,H,k,X,z){if(H=p(203,l),H>=l.H)throw[d,31];for(M=(U=(F=l.bi.length,S=r,0),H);S>0;)k=M>>3,z=M%8,Q=8-(z\|0),Q=Q<S?Q:S,v=l.J[k],L&&(g=l,g.N!=M>>6&&(g.N=M>>6,X=p(434,g),g.xp=Iy([0,0,X[1],X[2]],g.N,g.
2024-11-21 02:42:21 UTC	1390	IN	Data Raw: 72 2c 4c 29 7b 69 66 28 72 2e 49 29 72 65 74 75 72 6e 20 78 6f 28 72 2c 72 2e 73 29 3b 72 65 74 75 72 6e 20 4c 3d 6e 28 38 2c 74 72 75 65 2c 72 29 2c 4c 26 31 32 38 26 26 28 4c 5e 3d 31 32 38 2c 72 3d 6e 28 32 2c 74 72 75 65 2c 72 29 2c 4c 3d 28 4c 3c 3c 32 29 2b 28 72 7c 30 29 29 2c 4c 7d 2c 6d 24 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 4c 2c 6c 2c 67 2c 46 2c 76 2c 53 2c 51 2c 4d 29 7b 66 6f 72 28 4d 3d 28 28 53 2e 7a 4b 3d 6f 79 28 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 63 61 74 28 29 7d 7d 2c 28 28 53 2e 4d 6b 3d 28 53 2e 62 69 3d 53 5b 44 5d 2c 4b 4c 29 2c 53 29 2e 43 77 3d 62 36 2c 53 2e 44 29 29 2c 53 29 2e 54 4b 3d 4b 5b 53 2e 44 5d 28 53 2e 7a 4b 2c 7b 76 61 6c 75 65 3a 7b 76 61 6c 75 65 3a 7b 7d Data Ascii: r,L){if(r.I)return xo(r,r.s);return L=n(8,true,r),L&128&&(L^=128,r=n(2,true,r),L=(L<<2)+(r\|0)),L},m$=function(r,L,l,g,F,v,S,Q,M){for(M=((S.zK=oy({get:function(){return this.concat()}},((S.Mk=(S.bi=S[D],KL),S).Cw=b6,S.D)),S).TK=K[S.D](S.zK,{value:{value:{}
2024-11-21 02:42:21 UTC	1390	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 55 2c 48 29 7b 28 55 3d 28 48 3d 62 28 55 29 2c 70 28 48 2c 55 2e 41 29 29 2c 55 29 5b 30 5d 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 55 5b 31 5d 2c 55 5b 32 5d 2c 68 29 7d 2c 28 66 28 39 2c 53 2c 28 66 28 33 38 2c 53 2c 28 59 28 53 2c 28 66 28 33 37 33 2c 53 2c 28 59 28 53 2c 28 59 28 53 2c 28 53 2e 6f 46 3d 28 59 28 53 2c 66 75 6e 63 74 69 6f 6e 28 55 2c 48 2c 6b 2c 58 2c 7a 29 7b 6b 3d 28 48 3d 28 7a 3d 62 28 55 29 2c 62 29 28 55 29 2c 62 28 55 29 29 2c 55 2e 41 3d 3d 55 26 26 28 58 3d 70 28 7a 2c 55 29 2c 48 3d 70 28 48 2c 55 29 2c 6b 3d 70 28 6b 2c 55 29 2c 58 5b 48 5d 3d 6b 2c 7a 3d 3d 34 33 34 26 26 28 55 2e 4e 3d 76 6f 69 64 20 30 2c 48 3d 3d 32 26 26 28 55 2e 57 3d 6e 28 33 32 2c 66 61 6c 73 65 2c Data Ascii: function(U,H){(U=(H=b(U),p(H,U.A)),U)[0].removeEventListener(U[1],U[2],h)},(f(9,S,(f(38,S,(Y(S,(f(373,S,(Y(S,(Y(S,(S.oF=(Y(S,function(U,H,k,X,z){k=(H=(z=b(U),b)(U),b(U)),U.A==U&&(X=p(z,U),H=p(H,U),k=p(k,U),X[H]=k,z==434&&(U.N=void 0,H==2&&(U.W=n(32,false,
2024-11-21 02:42:21 UTC	1390	IN	Data Raw: 2c 6b 2c 58 2c 7a 2c 71 2c 50 2c 6d 2c 42 2c 52 2c 47 2c 4a 29 7b 66 75 6e 63 74 69 6f 6e 20 43 28 4e 2c 41 29 7b 66 6f 72 28 3b 4a 3c 4e 3b 29 58 7c 3d 79 28 55 29 3c 3c 4a 2c 4a 2b 3d 38 3b 72 65 74 75 72 6e 20 58 3e 3e 3d 28 41 3d 28 4a 2d 3d 4e 2c 58 26 28 31 3c 3c 4e 29 2d 31 29 2c 4e 29 2c 41 7d 66 6f 72 28 48 3d 28 6b 3d 28 47 3d 28 52 3d 28 28 58 3d 4a 3d 28 71 3d 62 28 55 29 2c 30 29 2c 43 28 33 29 29 7c 30 29 2b 31 2c 43 29 28 35 29 2c 30 29 2c 42 3d 5b 5d 2c 30 29 3b 48 3c 47 3b 48 2b 2b 29 6d 3d 43 28 31 29 2c 42 2e 70 75 73 68 28 6d 29 2c 6b 2b 3d 6d 3f 30 3a 31 3b 66 6f 72 28 48 3d 28 7a 3d 28 6b 3d 28 28 6b 7c 30 29 2d 31 29 2e 74 6f 53 74 72 69 6e 67 28 32 29 2e 6c 65 6e 67 74 68 2c 5b 5d 29 2c 30 29 3b 48 3c 47 3b 48 2b 2b 29 42 5b 48 5d Data Ascii: ,k,X,z,q,P,m,B,R,G,J){function C(N,A){for(;J<N;)X\|=y(U)<<J,J+=8;return X>>=(A=(J-=N,X&(1<<N)-1),N),A}for(H=(k=(G=(R=((X=J=(q=b(U),0),C(3))\|0)+1,C)(5),0),B=[],0);H<G;H++)m=C(1),B.push(m),k+=m?0:1;for(H=(z=(k=((k\|0)-1).toString(2).length,[]),0);H<G;H++)B[H]
2024-11-21 02:42:21 UTC	1390	IN	Data Raw: 28 48 2c 55 29 29 7d 29 2c 33 38 31 29 2c 53 29 2c 77 28 34 29 29 2c 31 38 37 29 29 2c 31 34 33 29 29 2c 53 29 2c 77 28 34 29 29 2c 30 29 29 2c 5b 5d 29 29 2c 31 35 38 29 29 2c 66 29 28 33 38 34 2c 53 2c 77 28 34 29 29 2c 59 28 53 2c 66 75 6e 63 74 69 6f 6e 28 55 2c 48 2c 6b 29 7b 56 28 66 61 6c 73 65 2c 48 2c 55 2c 74 72 75 65 29 7c 7c 28 48 3d 62 28 55 29 2c 6b 3d 62 28 55 29 2c 66 28 6b 2c 55 2c 66 75 6e 63 74 69 6f 6e 28 58 29 7b 72 65 74 75 72 6e 20 65 76 61 6c 28 58 29 7d 28 42 5a 28 70 28 48 2c 55 2e 41 29 29 29 29 29 7d 2c 33 32 36 29 2c 37 32 29 29 2c 66 75 6e 63 74 69 6f 6e 28 55 2c 48 2c 6b 2c 58 29 7b 28 58 3d 62 28 28 48 3d 62 28 28 6b 3d 62 28 55 29 2c 55 29 29 2c 55 29 29 2c 6b 3d 70 28 6b 2c 55 29 2c 48 3d 70 28 48 2c 55 29 2c 66 29 28 58 Data Ascii: (H,U))}),381),S),w(4)),187)),143)),S),w(4)),0)),[])),158)),f)(384,S,w(4)),Y(S,function(U,H,k){V(false,H,U,true)\|\|(H=b(U),k=b(U),f(k,U,function(X){return eval(X)}(BZ(p(H,U.A)))))},326),72)),function(U,H,k,X){(X=b((H=b((k=b(U),U)),U)),k=p(k,U),H=p(H,U),f)(X
2024-11-21 02:42:21 UTC	1390	IN	Data Raw: 3d 32 30 33 7c 7c 72 3d 3d 31 31 31 29 4c 2e 46 5b 72 5d 3f 4c 2e 46 5b 72 5d 2e 63 6f 6e 63 61 74 28 6c 29 3a 4c 2e 46 5b 72 5d 3d 58 7a 28 6c 2c 4c 29 3b 65 6c 73 65 7b 69 66 28 4c 2e 4f 42 26 26 72 21 3d 34 33 34 29 72 65 74 75 72 6e 3b 72 3d 3d 32 35 31 7c 7c 72 3d 3d 33 36 37 7c 7c 72 3d 3d 33 31 32 7c 7c 72 3d 3d 33 38 34 7c 7c 72 3d 3d 31 37 32 7c 7c 72 3d 3d 32 39 34 7c 7c 72 3d 3d 33 37 33 7c 7c 72 3d 3d 34 34 39 7c 7c 72 3d 3d 34 37 31 7c 7c 72 3d 3d 34 32 34 3f 4c 2e 46 5b 72 5d 7c 7c 28 4c 2e 46 5b 72 5d 3d 54 30 28 39 34 2c 72 2c 4c 2c 6c 29 29 3a 4c 2e 46 5b 72 5d 3d 54 30 28 31 30 35 2c 72 2c 4c 2c 6c 29 7d 72 3d 3d 34 33 34 26 26 28 4c 2e 57 3d 6e 28 33 32 2c 66 61 6c 73 65 2c 4c 29 2c 4c 2e 4e 3d 76 6f 69 64 20 30 29 7d 2c 65 63 3d 66 75 Data Ascii: =203\|\|r==111)L.F[r]?L.F[r].concat(l):L.F[r]=Xz(l,L);else{if(L.OB&&r!=434)return;r==251\|\|r==367\|\|r==312\|\|r==384\|\|r==172\|\|r==294\|\|r==373\|\|r==449\|\|r==471\|\|r==424?L.F[r]\|\|(L.F[r]=T0(94,r,L,l)):L.F[r]=T0(105,r,L,l)}r==434&&(L.W=n(32,false,L),L.N=void 0)},ec=fu
2024-11-21 02:42:21 UTC	1390	IN	Data Raw: 72 75 65 2c 72 29 2e 4c 77 3d 6c 3b 74 72 79 7b 67 3d 72 2e 6c 28 29 2c 72 2e 43 3d 30 2c 72 2e 75 3d 67 2c 72 2e 52 3d 67 2c 72 2e 67 3d 30 2c 76 3d 43 4c 28 72 2c 6c 29 2c 4c 3d 4c 3f 30 3a 31 30 2c 46 3d 72 2e 6c 28 29 2d 72 2e 75 2c 72 2e 41 4a 2b 3d 46 2c 72 2e 4b 77 26 26 72 2e 4b 77 28 46 2d 72 2e 4f 2c 72 2e 47 2c 72 2e 50 2c 72 2e 43 29 2c 72 2e 50 3d 66 61 6c 73 65 2c 72 2e 4f 3d 30 2c 72 2e 47 3d 66 61 6c 73 65 2c 46 3c 4c 7c 7c 72 2e 49 46 2d 2d 3c 3d 30 7c 7c 28 46 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 46 29 2c 72 2e 72 72 2e 70 75 73 68 28 46 3c 3d 32 35 34 3f 46 3a 32 35 34 29 29 7d 66 69 6e 61 6c 6c 79 7b 72 2e 6f 3d 66 61 6c 73 65 7d 72 65 74 75 72 6e 20 76 7d 7d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 4c 2c 6c 2c 67 2c 46 2c 76 2c 53 2c Data Ascii: rue,r).Lw=l;try{g=r.l(),r.C=0,r.u=g,r.R=g,r.g=0,v=CL(r,l),L=L?0:10,F=r.l()-r.u,r.AJ+=F,r.Kw&&r.Kw(F-r.O,r.G,r.P,r.C),r.P=false,r.O=0,r.G=false,F<L\|\|r.IF--<=0\|\|(F=Math.floor(F),r.rr.push(F<=254?F:254))}finally{r.o=false}return v}},V=function(r,L,l,g,F,v,S,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49828	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:21 UTC	690	OUT	GET /gui/76194.9a49eca4de4d4a1bd1bf.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:22 UTC	348	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 904d6aa8966c0ba7fbe1716db7a573c2 Content-Encoding: gzip Server: Google Frontend Date: Thu, 21 Nov 2024 01:39:36 GMT Expires: Fri, 21 Nov 2025 01:39:36 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 3766 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:22 UTC	1060	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 77 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 31 0d 0a 46 0d 0a 30 66 66 30 0d 0a 92 f6 f7 fd 15 30 33 51 88 59 00 02 c0 3b 69 da f1 30 99 8d ce c4 71 4e e4 c9 9e 1d ad d6 01 c9 a6 88 11 09 f0 05 40 5d 42 f1 fd ed fb 54 75 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001}00000001k00000001w0000000101F0ff003QY;i0qN@]BTu
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: 55 42 eb 07 10 ac 96 0a af 99 0c 25 f6 56 c0 de ea 37 60 af 61 cd a3 22 72 63 60 f0 41 63 ad 8e c3 59 ba 5a 45 9b 9c 37 82 db 2a 16 d1 ad 41 40 b3 5b aa 7d c3 9c f3 9e f0 6f 79 84 89 2c 9a 15 62 ae db 7d cd 0d dd da fe c8 32 dd e2 d4 6e bd 52 f8 3f 42 3c 91 a0 73 02 6f 4e 2e 19 19 f2 30 b9 94 cc 7c 31 7f 31 1e ab 62 88 47 ac e7 7d 7a 51 88 b5 6c a8 21 7d 57 2c 45 96 63 c8 23 6c f3 d6 41 6e 33 3b 67 2c 51 f3 ed cd 8d c8 b1 ba 0f c5 32 13 51 f1 81 f7 0c 52 54 d8 52 42 28 a6 2f c6 4d cd b7 d9 18 db 35 f5 7e 78 f3 f6 db 0f df 7c 7b 39 f9 f0 f6 cd 8f 3f 5e fc f0 6f 76 d3 06 7d 98 7c 9c 69 3e ce 58 3e a1 2a f2 ee 07 5e 91 32 6e 27 51 2e 20 81 1b 1f 4a 3e 36 c8 e0 06 64 70 c3 64 10 1d 50 b2 66 a2 b9 3b 5d a5 b3 db 06 d8 86 f8 64 ba 05 27 24 8a 0a 0e 76 96 77 db Data Ascii: UB%V7`a"rc`AcYZE7A@[}oy,b}2nR?B<soN.0\|11bG}zQl!}W,Ec#lAn3;g,Q2QRTRB(/M5~x\|{9?^ov}\|i>X>^2n'Q. J>6dpdPf;]d'$vw
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: 08 86 47 43 e2 ac f9 f0 a1 6a 51 2a 03 68 a5 c6 db 38 f9 54 e7 38 79 ae f3 37 e5 ac d6 9b 9f ff ad 31 7c 1b 15 4b 6f b1 4a 21 7d 8f 81 28 01 f8 00 81 99 45 37 c2 36 00 21 1b 55 69 3d c1 94 a3 8c 7d d3 38 3b f2 9f f0 1c 26 53 7c 83 33 01 0e 3c a4 88 a1 c5 e0 57 e1 16 b3 74 bd 4e a1 ad e3 02 18 37 cf 55 42 9f ab 04 9f 26 6c 32 4b 32 6d 0a 71 d7 e3 ed cf ec 7d be 4c b7 ab f9 5f 37 38 81 e0 e0 a5 4d ac a6 f0 96 51 5e 37 53 09 9e 06 64 ba 04 43 1e 5f cc 15 3d 3d 9d 00 50 37 8f 56 b3 ed 0a 53 5c aa 8d 95 28 3d 81 17 db 79 71 e4 a7 b1 78 e0 52 06 9d 9d bd 38 9e c9 74 17 6c 80 b6 cd 78 52 3a 5b f2 5b f8 a0 70 10 84 ff 84 45 03 bb 4f 5e 69 7f 87 ae 7d 85 43 77 e2 fd ea fd 20 c4 3c ff 3e ce 8b 4b d5 cd 1e ca f9 8e 37 47 52 ad 77 2b 1e 95 5f e8 b0 89 ad 78 e7 14 6e Data Ascii: GCjQ*h8T8y71\|KoJ!}(E76!Ui=}8;&S\|3<WtN7UB&l2K2mq}L_78MQ^7SdC_==P7VS\(=yqxR8tlxR:[[pEO^i}Cw <>K7GRw+_xn
2024-11-21 02:42:22 UTC	414	IN	Data Raw: 98 18 4c 5e 27 43 38 56 e3 b3 b3 99 f7 97 bf 50 af c9 2a 85 44 29 2e 59 e0 93 4f 4e 42 c0 a2 c1 f6 24 29 fc e9 11 41 0b 68 b2 d8 e5 0d af a9 8f a9 80 23 2e 4e 11 88 c9 d7 d8 93 25 42 4b 70 db 1e 9e a1 a0 20 0e 0c 6b b2 29 b4 05 4d 31 3d 69 cb 4a db 02 22 cd 34 a4 a5 0c 8c b4 55 c2 67 98 fc e9 69 87 78 01 19 f7 f8 4a 4e e9 48 7b ef 8e 8c d6 07 08 a4 07 08 a4 5f 4a 0b 07 b8 85 90 86 e7 14 51 04 1a c3 14 c8 24 2b c7 2b ef f2 db c9 fb 8b 77 3f 7c 78 f3 c3 37 1f 7e bc f8 f9 dd fb 4b 1d 28 2c 85 73 73 67 18 de 10 c4 06 39 b0 cd 3e 54 4b 66 80 05 f9 e5 d7 79 cd 92 82 97 13 e7 1f da 6b d0 31 10 40 c7 5a 1c 2a 49 c9 e2 9f 13 7b 39 e4 05 4c 7e 56 2d 08 13 7a f7 51 96 34 1b 7f 85 8d 8e 3c 8b 78 11 23 da 5e b3 7c 1b c8 e2 50 46 9c 3a 84 6b c5 2e 0f 18 c9 5c 1d 2f 0c Data Ascii: L^'C8VPD).YONB$)Ah#.N%BKp k)M1=iJ"4UgixJNH{_JQ$++w?\|x7~K(,ssg9>TKfyk1@ZI{9L~V-zQ4<x#^\|PF:k.\/
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 41 0d 0a 30 30 30 30 30 30 30 31 0d 0a 49 0d 0a 30 30 30 30 30 30 30 31 0d 0a 51 0d 0a 30 30 30 30 30 30 30 31 0d 0a 42 0d 0a 31 0d 0a 91 0d 0a 31 36 39 36 0d 0a c7 77 66 e4 b1 74 5a 54 41 c1 e7 86 90 74 7d 34 82 41 ff 39 bb 60 ca 98 e4 3f 39 d0 01 4d eb c8 a6 1e 85 1d 0a 1c d9 ac 2d 40 91 d2 6f 06 5f 5a 4a bf b9 7b e9 4c 3c 1e e1 19 80 4d 7c c9 e3 f7 71 d7 c3 b0 f1 33 a8 e7 d3 e3 a7 7b 3f b7 f7 06 24 74 b8 fc f4 40 55 f4 ba b6 05 29 07 68 2e e6 9f 1e e0 39 48 8c 13 ec a7 07 f9 28 14 6c 4d 1f 51 20 db 22 88 6a 7f 71 74 ca 38 e4 07 d9 80 46 f9 33 8c d7 0a 98 77 63 4d 87 87 Data Ascii: 00000001000000010000000100000001J00000001A00000001I00000001Q00000001B11696wftZTAt}4A9`?9M-@o_ZJ{L<M\|q3{?$t@U)h.9H(lMQ "jqt8F3wcM
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: 4d 90 74 03 01 91 69 dc 26 19 5a 79 8a 74 b5 5a 85 9e 45 74 c4 40 cb 63 35 94 a4 1a d8 d8 49 be da c2 1a 06 83 30 3f 93 34 92 7f bd a0 d7 29 19 90 e7 21 89 b0 85 c6 f7 bd 56 af 63 30 a1 51 e9 e6 6b aa 0f 9f ab 5e 81 7b 7c ef b9 da 07 58 a7 26 77 9b 03 3f 50 65 f8 cc ac 21 55 96 52 44 2d 51 82 eb a2 e3 a9 65 b0 3b 7a 68 75 7c 63 c8 07 dc 95 21 af 2c 60 54 50 32 38 c7 98 a9 10 a3 bb c8 85 a3 57 c0 6b d7 38 38 ea ea 1b 48 2d fb 32 56 e4 54 2d 80 73 d4 c9 dc 89 b2 13 8e 69 02 bb c6 1f 80 17 44 61 85 f8 77 b8 8b d5 84 0b dc 12 ca 5d ca f8 74 15 21 d5 36 ca a8 46 66 fb 2c 2e 20 98 a9 81 a4 28 a3 56 51 15 4f 64 d0 3e a8 06 ad 15 aa 39 10 c1 f9 93 25 23 98 a6 b1 51 6d d2 23 24 eb 51 ab 58 a6 61 96 c3 98 36 32 0f a3 1b 1c 0c 24 db ed ff e8 fc 71 38 9c 0a b4 14 f4 Data Ascii: Mti&ZytZEt@c5I0?4)!Vc0Qk^{\|X&w?Pe!URD-Qe;zhu\|c!,`TP28Wk88H-2VT-siDaw]t!6Ff,. (VQOd>9%#Qm#$QXa62$q8
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: 41 28 19 5e 0e 00 9b 8a b3 d0 57 05 26 5d c0 41 9c 18 05 07 d1 42 54 8c 4e c4 40 68 37 47 2c 78 0c ce e0 c2 c3 e7 23 d7 6f e9 ab ad f0 0b c0 f1 56 a6 2a 9a c0 97 f9 87 a7 1b ba 5c 59 6b 9e 09 84 f3 0a 08 69 44 87 e9 9b 39 94 0e 4c 0c 29 9b 42 64 66 15 a7 2d 21 31 12 ee de 44 45 e8 aa 39 95 7b 9b 71 66 cb 24 8e ca 91 ac 2a d9 f7 8c a3 98 0a e4 21 ef 0e 51 4e 19 79 8a e6 7f c7 6b 84 86 e2 01 6f 47 c4 9d 19 04 9d dd 5a d1 73 6d 8f 37 59 ca 23 be 25 78 7d e0 8b 47 10 e3 b8 fd 10 33 c6 08 5a 68 a8 e4 dd ea e1 94 f3 b0 13 44 71 9a 03 ff 4b bc 84 88 df 07 70 58 7c 62 38 0e 68 ea 89 0f bc ed 2a d3 d0 d6 92 90 23 9d da ac 1a 22 5b 43 65 40 94 3b a9 12 b3 6c 47 d6 c1 9d 5e 21 b5 4c 5b d4 f9 9a f0 d1 1b 24 c2 1c 32 54 b7 24 77 06 b1 48 98 74 e6 af b9 35 43 55 f8 fc Data Ascii: A(^W&]ABTN@h7G,x#oV\YkiD9L)Bdf-!1DE9{qf$!QNykoGZsm7Y#%x}G3ZhDqKpX\|b8h*#"[Ce@;lG^!L[$2T$wHt5CU
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: d9 12 72 7f f9 55 63 d2 71 21 29 92 5f b0 b6 97 6f 9f d9 91 5f 54 16 f7 28 83 b8 9e ef c8 af d7 1f d2 cb 78 84 87 df fa 82 e4 d7 7c fc d5 4b 44 77 2c 7a 77 c9 9f 52 fc 62 12 76 17 0d fa 56 30 e8 37 2c 38 41 56 e3 06 59 99 0d eb 61 bd c2 2f eb 69 d0 db 06 f0 b2 81 fb fb 7b ef be e5 a5 d9 cd 39 b2 6f fd 73 8c d1 78 85 37 08 58 2f f1 1b 16 96 f4 c5 b2 f0 da bc b7 18 06 29 d0 13 fa 08 3a 2d af db eb 56 9f 5c 45 13 4d ba 2d 30 52 8b 27 b5 5a a1 d7 1e b4 7a b8 b6 3d f0 5a 83 10 cd f1 37 f0 da 41 ff e7 56 38 c1 53 d8 f2 82 6e ab 6d 85 a1 fc 0c ba 56 0b 07 af ee 77 41 27 f4 06 fd f6 04 b7 30 3d bf df b1 5a 98 af 1b 62 24 4c d4 6d 7b 21 8f c6 93 fe ad 21 21 e4 bb 00 fc be 1a f3 92 54 49 6d 53 5c e5 fc 42 5e cc b3 b9 c7 f9 a9 25 02 ee b0 e3 75 26 f4 d9 f3 da ad 16 Data Ascii: rUcq!)_o_T(x\|KDw,zwRbvV07,8AVYa/i{9osx7X/):-V\EM-0R'Zz=Z7AV8SnmVwA'0=Zb$Lm{!!!TImS\B^%u&
2024-11-21 02:42:22 UTC	268	IN	Data Raw: 1d 41 56 33 d6 a1 78 9a 29 0f cb 08 a1 bd a9 58 3e 43 49 61 d5 10 7d f5 6a f0 3a 2d 97 7a d3 02 81 dd 36 2d 90 47 c7 ba 7d f0 0a 71 30 3e 7d 9e 15 f4 c8 b3 01 2a 88 06 39 3c 7d f2 33 13 3a 49 0a f9 88 45 80 79 58 86 a2 bb c4 a6 01 3b 2d a6 e7 f9 3e 38 1f 38 f0 7b 7d 74 27 e9 07 e1 09 8b bc d3 27 7c 63 58 9c 48 a0 49 49 96 ea d9 d4 33 a0 83 9c f3 d1 bc ac a7 bd 03 eb 72 77 22 9d 01 99 5f 3c 7a 87 16 0f a5 07 79 43 04 d8 03 c6 b1 c6 2e ec 9f 3e 14 32 14 bc 1a 1d 7a 28 f4 5a 5d 1c 02 88 9c 21 30 54 3d 6d 36 b4 5e 10 c8 ee 24 a1 eb c0 ff 43 b6 10 4c b5 56 d4 16 a6 a9 86 77 5d df dd e0 a0 f2 d5 7e 7f 6d 8f fe e5 fc fc 0b 78 55 e8 45 f6 f8 95 52 b8 05 7a 83 77 3c 8f f9 b7 b9 79 83 a8 3d 10 b3 a8 3d 17 78 a9 53 14 4c e7 c1 74 e1 fd 3d a7 d7 9f fe 37 00 00 00 ff Data Ascii: AV3x)X>CIa}j:-z6-G}q0>}*9<}3:IEyX;->88{}t''\|cXHII3rw"_<zyC.>2z(Z]!0T=m6^$CLVw]~mxUERzw<y==xSLt=7
2024-11-21 02:42:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49829	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:21 UTC	690	OUT	GET /gui/11358.785da0b97a9021932562.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:22 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: ba8401c16ade6d0cffc1dee7404b87ab Content-Encoding: gzip Server: Google Frontend Date: Wed, 20 Nov 2024 22:04:46 GMT Expires: Thu, 20 Nov 2025 22:04:46 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 16656 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:22 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a fd 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7b 0d 0a 30 30 66 66 32 0d 0a db c6 f1 e7 ef f7 57 c0 4c ea 92 09 08 93 d4 3b 65 da 71 64 b7 f5 c5 8e fb b5 e4 7c 9f 9e a3 c7 06 49 90 44 45 12 2c 00 4a 56 68 fe ef f7 99 99 dd c5 2e 00 c9 b2 2f cd dd 73 75 dd d8 d2 be ce ce ce Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001}0000000100000001{00ff2WL;eqd\|IDE,JVh./su
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: 61 34 8f 47 17 6a c0 47 de 7f 13 ae bd 87 0f c2 ca 00 ab 34 ba 8c a3 2b b3 4c 00 5c 3f c4 df a5 a1 1a e4 81 bb 5c 0c 4b 78 53 a8 d2 28 b1 8a 08 9b 0d 81 1c 78 58 84 f9 a0 31 6c 94 a1 54 38 1c ae f3 3c 59 7a 31 68 cb 0b 86 11 da 33 1d 3c c7 ef 7a 41 0f d5 fc d2 d4 60 9f 66 c9 e3 95 17 2e 63 4c 11 8d bd 71 34 0f af 07 8d 4e e3 d1 8f 20 2e dd 4b 35 43 b7 07 00 d1 85 bd 06 d0 f8 0f 05 f4 79 1e 62 eb be 10 d4 f5 1f 0a ea 1b 3a 5b 73 70 94 2f c5 ec bf d6 09 d1 7f 89 58 ff 9d 64 f0 5f 34 a3 37 9c 27 a3 8b 2f 44 f1 08 cc eb 0f 05 f9 04 13 7e 02 62 45 c6 35 d4 0c fe 09 a6 b5 cc 21 0d 45 29 b1 a9 5c 71 54 e1 71 ea 17 73 fa e9 6c 72 fb 34 99 7b c3 24 c5 fe b6 3b de aa dd 69 78 9a 87 0b 8b fa 21 5e ae d6 38 c4 f2 9b c3 be a5 e8 31 d8 f7 38 b2 0e ac 9e 58 1d 37 62 b1 Data Ascii: a4GjG4+L\?\KxS(xX1lT8<Yz1h3<zA`f.cLq4N .K5Cyb:[sp/Xd_47'/D~bE5!E)\qTqslr4{$;ix!^818X7b
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: d2 c3 7f 6d 98 c0 c8 84 d0 5e a5 b0 d9 a4 d7 de 22 6b 87 eb 3c 69 78 ae 06 58 36 12 9c f2 7e c1 82 63 4c 40 8e 12 0c 0d b1 ba e9 52 e4 50 87 2a 9a 27 e1 18 77 8f fa cd a1 85 16 b8 eb e9 ad dc d5 27 f3 5e 0c 38 a2 3e 2b 2d b0 f3 81 7a 88 76 1b c4 78 bf b5 19 af b3 8d 05 2b fb 76 a0 a7 a8 67 65 9a 68 78 23 69 cc d6 d6 ef 1e ed 77 7b 35 66 7b 76 5c 88 2b 01 76 fd 2e cc ee 64 b7 57 26 7c b2 db 2b 13 7e c9 6e 7f d4 db ef c2 2e 4f 76 fb ee de 4e 0f dd c8 70 7f b4 db 3d 10 bb fd 2e b9 09 8c dd 7e 5f 31 cf b5 3f 83 79 9e ad f1 da 08 ee 5d 6a cb b6 0f 23 3c 0c d3 9b 3c bd 66 69 16 a6 ed b7 d9 39 ec d6 70 14 84 5a b4 26 9d 81 c4 18 21 63 8f af a4 04 05 db 30 18 27 cb e8 71 de 9c b7 fa 30 59 2f e2 8c e4 ce 2c 99 5f 46 28 0a f2 59 b4 64 59 61 4b 56 f3 e9 57 be fd 3b Data Ascii: m^"k<ixX6~cL@RP*'w'^8>+-zvx+vgehx#iw{5f{v\+v.dW&\|+~n.OvNp=.~_1?y]j#<<fi9pZ&!c0'q0Y/,_F(YdYaKVW;
2024-11-21 02:42:22 UTC	398	IN	Data Raw: 71 e9 e6 09 e4 00 09 d9 c1 d8 6d 13 b3 a3 4d 53 fa 22 27 20 1a de 32 89 97 17 0a 29 e5 10 0e e0 47 3c 9e ef e6 e4 be 2b 30 64 c1 5e 59 e6 58 05 fb 95 d6 35 c4 ba 86 84 c8 9a 65 b9 3b e6 15 4b 49 e3 e9 2c d7 5b 58 03 1d 8b 56 d6 84 ad 7e a3 41 ff 95 a8 c9 c6 ef 0a 70 ac 18 bf ab 47 67 d0 b7 10 2d 26 64 1e 67 cb 3f e7 5e b2 ca e3 05 f4 97 31 8b b1 42 d9 08 7b ba 8c 11 c9 f0 f0 c1 8a b6 b8 d5 b7 88 6f 8d e1 d6 3c 5c 36 4f 72 6f 09 7f e3 a0 11 2d 21 96 6b 41 ad f1 08 d4 81 3a ee ea b8 8b b5 92 af 89 de 52 ef df f1 21 63 f5 5e e4 c7 77 ba 91 68 6f fa 37 45 4f d2 9c 4c 6b 8b 5b 4d 6b 64 3f bb b4 2f 5d 39 23 e6 ae fd cc de 16 e6 8b 2b ee a6 31 7e 44 2c 41 14 42 b8 2e ac 7b 86 77 b0 61 cf 01 4c 2f b0 3a 6e 71 d1 3a 1d 0c 82 aa 3d 56 37 3a 71 9c 11 f8 3c dc 11 15 Data Ascii: qmMS"' 2)G<+0d^YX5e;KI,[XV~ApGg-&dg?^1B{o<\6Oro-!kA:R!c^who7EOLk[Mkd?/]9#+1~D,AB.{waL/:nq:=V7:q<
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a ed 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1c 0d 0a 30 30 30 30 30 30 30 31 0d 0a ae 0d 0a 30 30 30 30 30 30 30 31 0d 0a 38 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7f 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a 60 0d 0a 30 30 32 37 33 39 0d 0a a7 7b 68 49 3d 0a e0 5f 38 e6 fb 67 0b 60 ac ab 03 8b 2b c5 7c f7 7a 87 47 2a c0 7a 6f 1f c1 d6 14 60 8d 48 68 11 94 b4 f1 56 42 ad 95 f5 96 43 ad f7 7a 1d 34 25 93 ad b2 de 72 ac b5 58 6f 29 d6 7a bf 7b d0 43 03 8a b5 ee ee c1 2e 2c b1 d6 47 fb 47 87 30 ea ce a8 1b 9b 77 29 be 5a 99 77 2f a9 10 20 20 6e 7b 4a a5 12 96 0d 9b 20 02 bb 0f 0e 3b 1c 96 8d f0 f4 5d 00 4b 7d 76 0e f7 61 ec b9 a6 6a 8e 22 a7 d2 c3 43 ac 80 7e 60 03 35 fd c0 72 20 fd b0 73 b8 73 84 91 f1 Data Ascii: 000000010000000100000001000000018000000010000000100000001`002739{hI=_8g`+\|zG*zo`HhVBCz4%rXo)z{C.,GG0w)Zw/ n{J ;]K}vaj"C~`5r ss
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: db 27 94 7a 48 b7 97 a6 04 5c 39 ce 54 6c 77 dc d0 c9 91 d3 e1 2c 64 2b c4 0f d7 2c a4 2d 06 82 c7 b3 4b df 60 5e 29 04 c3 ad 21 19 19 af 38 7d 7a 7c 7d f2 76 b7 9c 01 0c cd bb b2 fd aa ab b8 d9 b3 e3 a6 de 7b f8 59 ab 07 94 9d 1d a7 27 05 85 68 32 f8 25 c9 89 a7 49 84 61 85 02 48 c0 44 fa 30 f7 f6 70 ff 93 ff 0f 14 03 cb 35 71 2c 21 04 a4 6b 2e b0 dd 2e 0f b2 36 f1 19 36 f1 99 de 44 e4 9d f2 60 4a 76 e5 9f 35 ee b5 94 5a 34 28 ac be 5c a6 d8 5f 1d 1e b9 be 40 a3 6a ae b1 b8 b3 3d 57 8c 4a 45 a7 11 93 aa e2 02 2c 94 59 7d 89 41 3d 99 cf c1 86 a4 0a 1c 3f f2 56 eb 21 e8 46 5d 0f a0 f7 1c c4 3f 41 6e 08 e4 7d c6 0b 65 f7 e6 d7 1e 89 4f cb e9 6d a8 79 0e d4 3c b7 50 a3 67 51 d8 71 04 0b 8f cf 8e 26 72 8e 0e 20 e2 32 05 14 78 fc 1c 5b 41 b7 99 29 04 1e 2c ea Data Ascii: 'zH\9Tlw,d+,-K`^)!8}z\|}v{Y'h2%IaHD0p5q,!k..66D`Jv5Z4(\_@j=WJE,Y}A=?V!F]?An}eOmy<PgQq&r 2x[A),
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: 46 e2 1b 3b 91 e8 a5 05 90 31 5b c7 20 73 cd eb 5d 35 83 1c 84 ab 48 d2 c6 4e 1d 66 91 66 5a 34 b9 0d b3 74 16 ee 21 cc 45 6f 35 de 61 2a 3b aa ac ad be c4 cf c5 56 eb 53 ea da 77 ea c0 59 f9 65 db 0e 96 c9 5b ca 46 86 4c 1f 01 6d 2c a8 1b c3 6a 4e e4 af 8d 05 0e f1 eb fe 58 94 95 e1 71 1a e5 b0 97 e2 e9 38 52 10 48 8b 79 8d 04 e1 e6 0c e9 e5 56 66 88 30 c6 68 30 03 5d ac 38 01 41 11 00 a5 d6 8f d7 23 62 2e 14 b7 80 b7 cf be 6f e6 8f 73 75 1f f6 e1 23 f7 95 7b 9c d2 25 e9 9a ea 90 eb 07 01 0e 03 78 c1 22 0a 6c 9b 61 6f e9 69 01 10 2b 67 e4 bc c4 ab 4a ad d6 e3 c6 f7 88 e1 6d 6c df 6f 19 30 e8 b5 5a 6a 53 42 94 55 d2 dc 50 58 48 7f 83 1c e2 70 7e 02 f3 14 44 8c 33 4e 8e dc fa c4 52 5e 46 fd e8 11 82 cb 68 3b 79 34 a5 69 6b 72 1e 57 b7 d5 7a a7 60 ac 35 a4 Data Ascii: F;1[ s]5HNffZ4t!Eo5a*;VSwYe[FLm,jNXq8RHyVf0h0]8A#b.osu#{%x"laoi+gJmlo0ZjSBUPXHp~D3NR^Fh;y4ikrWz`5
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: 21 ed e1 9f 82 ef 80 c6 a1 9f 6a bd 57 dc 95 91 00 6c 1e 3f e5 ac 8b b1 4a 32 fc d9 ce b0 10 45 a8 88 db bf a5 29 8f 89 43 70 a7 c6 8a e1 dd b5 39 d3 e7 1d 87 2e cc 0c 77 ec e0 5a 0b ca e0 87 84 0e f8 1a f2 6b fd 8a 56 4d 2a 88 b8 29 1a b0 b1 f2 23 e0 fc 42 e1 b9 ef 60 52 37 11 09 b6 e5 0b 26 ab a3 17 6f 74 39 dd 4b 56 fb 2a 94 fc 00 20 fc e8 78 df bd ac 15 51 f2 84 33 58 71 db 6b 07 47 75 bc 22 51 c5 e9 5a 1b 00 58 f4 fe 79 a0 d7 55 9f d7 41 f4 d4 86 3d 1a 71 8e 23 b0 61 ba 31 c9 87 b0 58 e3 dd 85 eb 36 ec 0b 0c 2b 12 3d 28 c6 df 4a 9b 20 a3 19 bd 8c ff a9 64 d1 83 83 fd 83 23 2b 59 b4 48 11 1d 7d 8d 62 ff 9d a2 d8 87 6e 14 fb ef 9a 22 ca 07 1d 4e 8d cf 78 e4 6b 79 97 8c d0 b1 f5 fe d5 15 22 b1 70 a0 11 de 60 e7 82 1a 31 5f 8b f2 4e ee a0 98 ea 18 3a f9 Data Ascii: !jWl?J2E)Cp9.wZkVM)#B`R7&ot9KV xQ3XqkGu"QZXyUA=q#a1X6+=(J d#+YH}bn"Nxky"p`1_N:
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: 02 4d 77 42 8a 77 2f 86 ff 2c cd c3 a5 a2 a9 6f 48 80 c1 b7 b0 a4 2d c5 74 52 fa ec 72 5c 3e 78 c3 a9 60 44 f6 09 1c e8 2e 9c d7 4c 6d 20 2f 3d 1c 87 a7 d1 f0 6d bf a8 3d 8c f2 2b d8 82 65 05 06 a4 47 f0 0f e1 1b 5b 02 1a 52 58 8c c4 64 98 6a 75 02 c5 aa db ce 11 c6 76 55 06 95 c1 4b 28 2a 2e 32 c3 f2 71 63 30 bb f5 3a 80 8e c4 39 12 1b fb 1e e4 48 0f 64 ea b5 81 08 ae d0 42 83 2d 9a 7d 16 b2 cc 35 44 9f 8b b9 13 82 6f 58 16 ce 9b fe ea d8 bf 65 57 ef 02 28 3e d6 e3 52 4c 3b 45 74 ff 1a 52 08 e1 93 fe eb 30 42 3f bd 84 db ce aa cb 07 ca 63 d1 f7 62 4a fb 6b e8 d0 e1 c7 3b fb bc 87 b5 fd 89 4c 30 90 a2 41 b5 f9 90 ed 49 d0 e6 7d ff ac 3d 36 54 c5 82 fa 8d 74 e3 42 27 9a c4 6d d0 d9 38 fa 0c 78 30 64 c0 1c 0e ca 9b 7c 45 4a d1 8b 25 a4 99 cd fe 82 d5 aa be Data Ascii: MwBw/,oH-tRr\>x`D.Lm /=m=+eG[RXdjuvUK(*.2qc0:9HdB-}5DoXeW(>RL;EtR0B?cbJk;L0AI}=6TtB'm8x0d\|EJ%
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: 8c 71 74 88 fb a4 43 7f e9 4b c3 b4 62 08 a2 51 14 4d ca fd 0d fa 08 d7 bd 1d f4 ee 69 8c d3 ab 61 b0 55 eb f9 b5 bb 80 c9 08 9b 7b a1 2b 9c 6d 2c 2a 04 a8 f2 36 72 7d c5 e4 54 8c c9 a6 2b 33 b2 7d cf 73 4f ab 5a c6 af 5c ce f4 c9 c5 a2 bf 25 cf cd e0 8e 12 ee a2 b7 d4 26 bf a2 56 76 2b 9a 0c 23 b5 11 8a d7 68 4d 0b 7a 98 3a 49 6c 89 e7 97 d9 61 e8 21 33 bd 53 a1 67 89 f6 a2 23 cd 8f d5 50 42 35 ec ba 9a 23 37 86 ce 39 9f 67 e2 46 f2 ff a0 7b b0 67 0e 20 cf a3 0d 0c 9d 60 e7 60 cf 3a 84 56 65 3b 83 61 a5 13 f4 6e aa 9e e3 f4 c0 a9 70 43 e7 0f 90 4e ed d3 6d 0f fc 81 2a 7b 37 74 ec 51 65 d9 41 21 e0 b6 d1 b1 6e 19 ed 55 3c 47 a7 bd 8e 35 24 3c 27 b3 10 2f 81 01 46 05 25 83 53 c5 4c 81 18 dd 45 16 8e 5e 5d 5e bb c6 41 a5 6b c7 42 aa e9 cb 58 91 a9 76 00 4e Data Ascii: qtCKbQMiaU{+m,6r}T+3}sOZ\%&Vv+#hMz:Ila!3Sg#PB5#79gF{g ``:Ve;anpCNm{7tQeA!nU<G5$<'/F%SLE^]^AkBXvN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49831	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:21 UTC	511	OUT	GET /gui/45428.d50e11e1e27c0917ea14.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:22 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: dc13418f9430994a272283fd1493d93b Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 17:47:45 GMT Expires: Wed, 19 Nov 2025 17:47:45 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 118477 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:22 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 31 0d 0a 00 0d 0a 30 66 66 39 0d 0a 00 02 ff ec 5c f9 73 db 46 96 fe 7d fe 0a 18 4e 14 22 01 20 f0 26 21 d3 8e 22 cb b3 aa 91 ed ac ad 64 6b 56 ab 92 01 a2 49 22 06 01 2e 00 ea 08 cd ff 7d bf d7 07 d0 20 a5 d8 93 f5 ee d6 56 8d 69 49 60 9f af 8f 77 7d fd 1a e6 ba 60 46 51 e6 f1 b4 34 8f 5a 05 4b 66 ee 2d 0b 57 c1 f4 e3 c9 62 9d 7e bc 29 af d7 f1 f5 32 88 d3 c9 1f e4 7d fa 74 79 65 b9 ab 75 b1 68 5d 5e f6 fa bd ce e8 ca de f4 bd 4e df f3 5b a5 cd ec cc 9a 3c df 64 6e d4 62 f6 e6 5f fd 16 be c5 5b eb 28 61 a5 91 1f 4d Data Ascii: 00000001000000010000000100000001000000010000000100010ff9\sF}N" &!"dkVI".} ViI`w}`FQ4ZKf-Wb~)2}tyeuh]^N[<dnb_[(aM
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: 5d 04 79 39 a1 51 95 ee af e5 2f f1 09 7d 3f 0f 7e bf b7 eb 6c 97 36 d1 84 7f a7 27 3d 07 04 05 22 87 9e f4 9c 6c 45 1b bd 10 99 f2 8b c8 cf d9 7f ae 99 1a 4d cb da 42 18 ae e5 c8 4a c1 10 0c ba 72 8d dd ed d6 e9 76 e9 2e 82 a2 65 12 01 26 f6 8d fc 4a bd 6a 5f 65 3f 58 0e 6c be 8a e0 83 03 fe 48 65 e5 a3 2c 27 bf f1 39 50 15 f8 97 af 37 62 c9 be 2d 39 7f bc 75 90 2f b6 08 f8 9a 7d fa c4 dc 9d 19 c1 84 40 bb 46 2c c7 4a 4b e6 a8 17 63 bb b5 e4 fe 9d 6c aa 0d ec d3 e3 4f e7 bf 9c 5e b7 7d f3 69 77 dc 3b 7d f5 ca b4 91 f6 f7 d3 f3 f3 b7 ff c6 53 5f 1d bf ec f4 5e ea a9 1d 94 3d 39 39 ee 79 1e 4f fd e9 fc f8 e4 6f a2 81 6e 97 a7 fc f5 dd e9 df 79 c2 b0 47 9f 3a 8d 6a be 1c d1 a7 4e eb 22 ed d5 31 7d 54 da e9 1b 5e b9 73 f2 d3 ab 5e 87 27 be 7d 77 fc e6 af 82 Data Ascii: ]y9Q/}?~l6'="lEMBJrv.e&Jj_e?XlHe,'9P7b-9u/}@F,JKclO^}iw;}S_^=99yOonyG:jN"1}T^s^'}w
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: ec 57 e1 26 a3 1a 39 35 fe 67 46 58 bc 90 05 1a 9e 6e 0c d9 5e da 9f ab 0a 32 2c 5f a3 e9 11 82 1e ea e0 9e 13 f9 99 0e 30 b9 0c 72 81 3b 22 7c 82 cb 7a 82 e5 28 d5 42 42 2a aa b9 a7 99 a7 5d a5 a7 90 e3 ad 01 12 4f 14 20 51 7e fa f4 a4 94 ee b6 21 cc 8f 0c b0 81 d8 43 6e 99 fd 9c 13 44 08 29 ca 3d 73 61 b6 3d 99 4c 32 b5 03 33 77 4a ce 2f 76 c9 a7 4f 26 66 30 58 27 a5 c9 f7 af c2 3e aa ae 72 d5 4d 7e 54 2e f2 ec d6 20 6f f7 02 a6 e2 69 9e 43 05 9b 3f fe a8 75 67 2c 61 90 19 0a 92 30 56 8a 0c e3 26 48 d6 cc 85 4b 2e f2 5a 26 60 01 d8 99 80 51 26 ec 85 10 73 fe 9b f5 32 64 39 64 ba b5 05 65 aa 84 72 f7 cd 82 33 51 0d bc 30 c0 3b ec 07 d3 dc 82 2d ac 38 35 ca 07 77 84 58 30 4c 2c fa f7 b1 2e 15 4b f8 4f 3c 1b b6 c4 2c 9e af 39 8b d0 f7 db 3c 86 98 4c 18 9e Data Ascii: W&95gFXn^2,_0r;"\|z(BB*]O Q~!CnD)=sa=L23wJ/vO&f0X'>rM~T. oiC?ug,a0V&HK.Z&`Q&s2d9der3Q0;-85wX0L,.KO<,9<L
2024-11-21 02:42:22 UTC	310	IN	Data Raw: 5e ae b2 82 45 64 5a 87 eb 10 e2 b3 e0 96 35 19 00 29 8c a3 92 fd 8d dd 43 0a 02 8e 23 13 1b d4 90 fe dd 63 ba e2 ed 8c 9a 6e 6e 0a 98 2c c5 7a b9 0c f2 7b 18 7f 82 5f 34 3e 95 55 a0 a5 ab 83 45 8a d6 c0 7c cd dd 37 c7 af 4f af 5f 9e be 3f b9 7e 7d fc f3 cf 67 6f fe 2a 51 24 ad 3a ef 0e 95 1b d2 42 99 0a a5 4b 3a 07 d0 b0 12 36 ec bf d5 2e 53 ed 32 5d 6f 02 da d8 95 3d f5 98 a4 90 d4 56 ff 1e ab 7f 8f d5 37 9e 09 04 5c c4 91 90 2b 63 24 31 c2 46 a6 b0 be 78 80 89 c4 f6 60 64 06 ab 82 f2 81 d0 d1 36 31 08 05 43 ec 0a 0b 70 70 56 81 7f 0b 20 a7 d3 8f c6 ad d3 f6 3c 63 1e ac 38 14 f9 2c 8a 6f 14 3a 88 00 14 1c 0b 3a 25 0e 24 29 7c 85 8e 7b 85 6d e9 c0 4c 02 a3 c8 8d 88 1a 0f e0 8d 12 ee 94 9d cc 0a a7 5f e1 8b 62 14 65 96 25 65 bc 32 b0 89 e0 cc 66 e9 c4 cc Data Ascii: ^EdZ5)C#cnn,z{_4>UE\|7O_?~}go*Q$:BK:6.S2]o=V7\+c$1Fx`d61CppV <c8,o::%$)\|{mL_be%e2f
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a a6 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0b 0d 0a 30 66 66 65 0d 0a 36 32 99 bc 04 a6 6a 93 b2 bc 77 3a d4 42 8f d2 05 3d 00 88 1c 18 cd 04 e9 62 49 14 4e 08 b4 42 a2 ad c0 4c 1f 28 48 e4 8b a9 53 7f 44 a1 7a 75 89 bb 33 98 0e 09 c4 eb 2c 7b bb 2e 01 d5 b2 33 90 05 63 42 9c 52 bb 38 20 59 51 1c 40 20 55 bf d4 73 ba 1f 10 93 4d 0e 0d e2 ca f1 9c c0 47 e0 8d 44 35 a7 6a 76 8b f0 1b 38 00 86 60 8d 50 4a 69 9c 84 ec 28 4b b5 61 45 78 c0 0a 48 38 3a 80 03 73 70 b0 72 0b 28 f0 16 4e f7 21 9b 26 cf 99 48 77 4a f1 17 c2 15 3b 69 3e c7 a6 82 99 29 55 63 12 84 2c 21 e7 bf 29 06 d6 13 2e 27 17 eb 25 f6 c4 ef ec 17 3a f7 2d a0 e6 70 ce 5f 5a f6 62 c2 fd 07 48 7c d8 8c ff 18 f3 97 0d e6 cf 14 93 66 9c f9 21 17 d6 f6 ac 6e 9c 47 88 fd 03 92 Data Ascii: 00000001000000010ffe62jw:B=bINBL(HSDzu3,{.3cBR8 YQ@ UsMGD5jv8`PJi(KaExH8:spr(N!&HwJ;i>)Uc,!).'%:-p_ZbH\|f!nG
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: ff 7d 66 51 c6 01 dc 12 ba 8c 04 bd 0c 48 c3 df d0 52 fb ed 36 0d ec fe 4b 06 54 00 86 e0 07 4f 04 f5 fd 7f 19 1a ad 9b 65 23 1e 48 33 c1 be 81 3e fe a6 d6 c7 ba 38 90 92 5a d7 ff 27 28 7d 82 d2 0a e6 a9 81 99 af 01 bb fd 29 c0 4d 01 56 c2 c6 db 0d f1 db 87 ba 2a 2b 4f b8 89 5f 0d 72 13 e0 f3 23 60 99 e8 8b 8b 25 43 5c 16 90 41 87 5c 73 28 1b 12 87 37 84 f1 29 8c 4c c4 6e 4e 4c 21 c7 f9 38 bf 3d aa a1 4a 61 d8 50 f4 9e d6 fa 67 dc e0 cc ae 84 f2 57 05 87 21 d4 33 5c 4b 80 e8 9b b2 d6 61 eb 32 70 7e 3f 76 fe fd ca 6a bd 98 5c f2 87 c3 b9 6d 7e d3 36 c0 6f fb c8 5d 45 d2 ff 04 ae bc 87 2a 65 40 95 1e 32 48 f8 b2 3c 98 41 4a fe c1 0c b9 5c 8d bc 3d 1d 0a 24 19 b7 ac dc 34 03 6b a5 38 c7 a8 ae 6a 10 f2 2f 4e ce 34 c7 53 5e 31 d1 ec c5 37 b0 f9 70 38 c8 19 53 Data Ascii: }fQHR6KTOe#H3>8Z'(})MV+O_r#`%C\A\s(7)LnNL!8=JaPgW!3\Ka2p~?vj\m~6o]Ee@2H<AJ\=$4k8j/N4S^17p8S
2024-11-21 02:42:22 UTC	1312	IN	Data Raw: fc 25 06 cb 05 6c c5 9f 60 51 39 55 84 87 39 30 7e 0a b8 54 79 3c 03 08 f8 9e c7 3f 1b 00 1a 0b 03 e8 b9 69 1b ef b2 10 17 a5 d5 df 97 79 30 2b 6d e3 5f 58 72 c3 80 d8 05 b6 71 9c e3 e0 df 36 ea 56 44 97 bc e9 65 96 66 f0 b5 10 21 5b b5 7c 02 bb 50 b6 5c e5 8a 1a f3 3c 88 62 20 f9 3e e0 a5 14 f1 c9 8e 4a 68 b5 47 58 94 b9 6d f0 77 62 a8 91 c9 31 e2 35 31 78 7d ca c3 59 30 35 84 96 a4 93 42 4e d0 2c 58 c6 09 34 09 6c 98 16 cf da 99 81 bd 0a 02 2b cc d9 72 b7 a5 5b 01 4d 1b 60 7d 2d 8b 28 87 ab cc 51 6b a3 ed 2a fd 46 fd 0b 60 93 74 21 94 ab dc eb fc 08 93 67 88 c5 e9 42 a4 92 00 ec f5 b4 36 43 92 de 95 26 e4 55 c0 1e 5c 4a 37 e6 42 54 51 62 b2 ea af 12 4d cd 9c 07 76 43 2d 35 14 ad dd 41 77 da 53 22 b4 62 2b 8d e0 7e cf 36 06 d8 4f 43 a9 09 eb 26 04 d5 e3 Data Ascii: %l`Q9U90~Ty<?iy0+m_Xrq6VDef![\|P\<b >JhGXmwb151x}Y05BN,X4l+r[M`}-(Qk*F`t!gB6C&U\J7BTQbMvC-5AwS"b+~6OC&
2024-11-21 02:42:22 UTC	979	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 07 0d 0a 30 30 30 30 30 30 30 31 0d 0a a3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 07 0d 0a 30 30 30 30 30 30 30 31 0d 0a 72 0d 0a 30 30 30 30 30 30 30 31 0d 0a 48 0d 0a 30 30 30 30 30 30 30 31 0d 0a df 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8f 0d 0a 30 30 30 30 30 30 30 31 0d 0a c7 0d 0a 30 30 30 30 31 0d 0a 98 0d 0a 33 35 61 0d 0a f1 bd d6 b8 05 c4 59 63 3f 8b e7 c1 c1 c1 42 fd 88 4b 1e b3 9c 8e 27 f1 de 83 0c 50 5f 51 d0 0b 57 60 09 e2 05 93 ac d8 78 df 6e ea 70 2a 47 dd 69 71 ee 7c b2 ae b6 5b 84 c7 f2 db 2e 42 65 c8 2f 0e f4 21 8e d8 60 81 79 0a 62 51 39 08 5b 53 7c ab d1 a6 72 a5 b8 40 eb b0 00 6a d3 6e 37 5b 9a 13 95 b9 a5 f2 a5 94 36 c4 80 55 6a 2d 65 f0 e2 57 cd da 54 f9 d2 08 a9 74 a5 74 c4 a4 f9 a1 4a 91 21 dd 2c c2 eb ed Data Ascii: 00000001000000010000000100000001r00000001H0000000100000001000000010000135aYc?BK'P_QW`xnp*Giq\|[.Be/!`ybQ9[S\|r@jn7[6Uj-eWTttJ!,
2024-11-21 02:42:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49830	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:22 UTC	690	OUT	GET /gui/33274.3b5af0d06c20ca4c42c4.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:22 UTC	348	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 6a6f2dc94310b672f1e41b9232d75bdb Content-Encoding: gzip Server: Google Frontend Date: Thu, 21 Nov 2024 01:01:29 GMT Expires: Fri, 21 Nov 2025 01:01:29 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 6053 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:22 UTC	1060	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 66 66 62 0d 0a 00 00 00 02 ff ac 5c 6b 9b 9b 46 b2 fe be bf 82 b0 89 57 ca 02 03 48 20 c1 58 de b5 c7 76 ec c4 76 12 df b2 bb 39 7e 12 84 5a 12 19 04 0a a0 d1 8c c7 f3 df cf 5b d5 0d 42 33 42 f6 d9 e7 d8 71 54 54 57 57 57 57 df aa ab ab 5b df 94 42 2b ab 22 89 2b fd b4 57 8a 74 6e 6d c5 74 1d c5 e7 67 cb 4d 76 7e 51 fd b6 49 7e 5b 45 49 36 39 92 f6 e9 d3 af 1f fa d6 7a 53 2e 7b bf fe 3a 18 b8 a3 a1 31 1e bb 81 67 8c 5d 2f 18 19 ce 70 e8 f8 86 ef bb a3 91 31 18 f8 fe d8 18 fb de 60 6c 0c 5d 3b 00 25 e0 c0 18 39 83 a1 11 0c 86 81 6f 38 fe c8 1b 19 c3 b1 6d 13 c6 Data Ascii: 00000001000000010000000100000001000000010ffb\kFWH Xvv9~Z[B3BqTTWWWW[B+"+WtnmtgMv~QI~[EI69zS.{:1g]/p1`l];%9o8m
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: d7 c3 08 60 6e b7 e4 ce fb f8 73 53 a0 05 d1 42 7b 3a 5c 56 ab b4 df 9b 7d fa d4 9b 4d 56 bf 6b 5f 5f db 37 bf ef 37 5b 23 d1 3f 58 e9 32 c3 14 19 a6 c8 70 7f 96 5c 68 dc 43 26 fa 12 cd 15 9f 6b 09 f5 0a b3 c8 b7 fa 03 66 a7 dd 3f 01 d1 03 70 55 fd ed 5c 5c 95 87 eb dc b7 56 d1 ba 87 5a 18 05 e6 8b 56 71 cf 51 dc f3 5b c5 a1 47 69 45 be 41 95 66 66 9c 14 71 2a b4 99 99 64 29 fa b2 89 21 78 a9 45 69 b2 c8 cc 55 32 9b 21 69 ba 30 a7 f9 ec 8a 25 ba 23 18 4a aa 2c ae c5 cb 68 dd ef 5d ef ba 67 f8 d5 57 ac cf 1d c6 d0 d7 a6 a3 d7 78 d5 af 8c 69 5e 40 b5 35 b6 4d 4d ea 30 57 18 12 49 d6 e4 da a5 a3 23 3c b0 6f 94 c2 77 e8 b6 aa d7 a8 fb ba ae 3b 3a 78 64 56 79 9e 56 c9 da ac 30 28 27 3a 35 99 ae ed 25 ac f3 32 a1 c9 6f a2 17 c9 62 59 e9 da 3f 57 39 0c 81 fc 42 Data Ascii: `nsSB{:\V}MVk__77[#?X2p\hC&kf?pU\\VZVqQ[GiEAffq*d)!xEiU2!i0%#J,h]gWxi^@5MM0WI#<ow;:xdVyV0(':5%2obY?W9B
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: 83 00 fd 8e 60 6c 70 a9 e6 30 a2 c0 c6 67 29 33 a6 19 0e a9 4f c5 04 fb e8 5e a8 6d 45 b0 33 0e c6 e0 59 12 8c 1d 2d 75 9e 84 60 6c ce b9 df 11 ec c1 2f 00 7c ca b0 67 7b c8 3b 23 78 e0 61 3f 8c 4e 48 b0 ef 7b 34 5b 3d 27 18 8e 17 ea 9c 6b a6 a7 f1 b7 64 0a 6f 4c d2 af 98 62 84 86 43 17 24 18 6e 17 1a 6d 1b a6 b1 31 62 d1 05 99 c6 81 cb 03 5d 90 e0 21 36 eb c0 6f 09 c6 30 47 41 57 04 8e 02 0c 65 f4 40 82 5d cc 03 68 b6 73 49 02 57 0e 7a 20 c1 63 0f 4a 46 0f 54 34 1e 68 de 10 3c 82 83 c0 ae 97 a1 17 c5 e4 5a c7 22 05 fb fb 52 0f 33 6b b7 5e 19 ba 34 d1 e5 62 a2 87 31 0c b3 bd f5 07 04 eb c4 c4 7e 41 0f 2b 0b e0 0f e2 8a 96 1b 23 5a af cb 10 66 1c 7e f8 5b 8f 60 c7 6d cd 54 cc 2b 50 e6 d8 80 e2 f3 05 be da a9 d2 14 6e 92 5f 93 65 dc 4e af f2 b5 1e 26 32 ef Data Ascii: `lp0g)3O^mE3Y-u`l/\|g{;#xa?NH{4[='kdoLbC$nm1b]!6o0GAWe@]hsIWz cJFT4h<Z"R3k^4b1~A+#Zf~[`mT+Pn_eN&2
2024-11-21 02:42:22 UTC	288	IN	Data Raw: d0 82 9e d2 44 5d 22 05 df 4f f9 53 66 c0 67 58 49 b4 ca b0 99 2a 03 20 01 7a 33 05 71 ad e9 cd 74 96 14 50 48 5e 5c 99 d2 f0 55 c6 5e c4 94 4d 22 7c 71 f9 b6 65 f7 95 db 68 6d 2e f3 22 f9 a8 87 29 48 f1 f9 8c be b8 c0 2a 59 09 5a 47 c2 59 61 d5 70 93 80 b1 16 4e 25 1e a0 14 90 88 5a 03 68 2d 93 f7 46 10 93 84 cf 55 8a e4 56 60 05 0f 97 40 11 20 51 db a4 c2 42 11 ae 80 94 a0 2c 60 83 45 20 ad 4d 87 45 81 d3 1e fa de d9 0e 2a 5d da 0e 9b 3a 7d 67 3c 6c d6 34 69 37 13 e2 05 28 18 d3 9a 12 25 22 9c d7 49 aa e0 22 35 69 ed e2 2e a7 87 5b a4 16 e9 e3 1a a1 68 d0 63 cd 28 8e 71 fe 80 e1 78 05 12 20 1e ca 6f 49 71 81 23 10 3e 9c d0 c3 cb c2 ba 78 2d 3f 54 9a c8 60 e3 27 d1 a2 88 56 e6 00 f6 2a 08 80 7a 2c 31 03 49 b4 8d 8a 0c 5d 9b cd 9a 87 85 a5 3e 95 69 a3 be Data Ascii: D]"OSfgXI* z3qtPH^\U^M"\|qehm.")HYZGYapN%Zh-FUV`@ QB,`E ME]:}g<l4i7(%"I"5i.[hc(qx oIq#>x-?T`'V*z,1I]>i
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 10 0d 0a 30 30 30 30 30 30 30 31 0d 0a 20 0d 0a 30 30 30 30 30 30 30 31 0d 0a 99 0d 0a 30 30 30 30 30 30 30 31 0d 0a d1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 76 0d 0a 30 30 30 30 30 30 30 31 0d 0a 86 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 26 0d 0a 30 30 30 30 30 30 30 31 0d 0a b8 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 28 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 53 0d 0a 30 30 30 30 30 30 30 31 0d 0a 58 0d 0a 30 30 30 30 30 30 30 31 0d 0a f4 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 73 0d 0a 30 30 30 30 30 30 30 31 Data Ascii: 0000000100000001 00000001000000010000000100000001v0000000100000001O00000001&00000001000000010000000100000001(00000001\|00000001S00000001X0000000100000001+00000001s00000001
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: f6 80 0e 39 80 a2 b3 fa 8d b3 be bb de 55 b4 a8 8d 46 8a bf 38 c2 4a 7a f9 95 64 b5 d3 ff 80 48 1c bb 71 84 0f 26 fb 3d b7 46 c3 f1 76 c2 21 de 14 0b 72 9c 77 bb d7 ec ce 21 0e f0 42 50 ff b8 db 48 de 3b aa a8 45 6c 1f 5f 1c e0 c8 11 29 dd d2 ed ce 38 ba 9b a3 84 5b 3d 13 c5 d3 7c 53 54 ec bf c3 76 8e 62 5b 8e 70 dd db 74 d7 87 26 07 a4 e3 b8 98 4e 3e f5 e1 4a b7 68 22 bb 10 29 0e 39 e4 14 e3 53 64 4d 37 b7 dd b1 4c 37 43 58 1e 2f 77 74 b0 3d 28 28 a7 9b 65 7d 86 a3 1a a3 39 d3 39 50 d5 21 85 f4 1c e1 a4 8e 7e 1a 4e ea fb 00 27 0e 08 ea e6 74 f7 9c a8 e6 79 37 e5 00 77 0e 31 ea e4 be 7f c0 c4 8c ff 5b a3 eb 0b 2c ab ff 4f 17 16 ad fa b4 48 7b 16 ae b3 58 e3 f7 9e e5 c4 b6 49 9e 28 db 1a 9a 0e fe 3f 36 9d a5 17 db 96 67 d8 f4 85 7f 80 c8 41 85 15 7d c4 6e Data Ascii: 9UF8JzdHq&=Fv!rw!BPH;El_)8[=\|STvb[pt&N>Jh")9SdM7L7CX/wt=((e}99P!~N'ty7w1[,OH{XI(?6gA}n
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: d1 28 33 ff 91 28 dc b6 00 26 c6 b3 20 ae 2d 31 78 4a 03 57 8d 81 14 58 aa 6d 85 bc c2 95 9d 7c 0b e4 3c 16 81 3f 92 94 0b 8e 82 d7 fe 3a 08 a2 78 18 4b 5c 25 a2 14 64 ae 1d 07 81 22 8b af 10 2c 0c d4 78 34 9d 7a 92 6a 8a 8b dd 4a 12 89 d8 2e 71 b2 45 ec e7 f3 9a 37 82 7f a9 4a f4 67 87 32 71 5b 88 32 e2 25 1a fc 69 e1 f1 2a 0c 65 0f e8 6f 0b 8d 90 2d 42 bb f4 b7 85 46 bd 80 16 3e fd 6d a1 87 8c 8e f9 4f 0b ed 31 7a 3a a0 bf 2d b4 cf e8 3b 12 8e 18 3d 9c d1 df 16 35 1d 5b 1c 90 1b 17 f5 80 76 22 fa 2b a9 71 1b 05 41 09 54 f9 76 23 97 9b 38 46 d0 0f b1 68 69 9b 23 fb a9 41 47 d3 ba 22 75 28 e3 7e fb cd a8 4d 0b e4 6e b7 b4 2a c9 2c 16 d3 10 d1 61 86 86 17 7c 34 d7 19 4b 39 54 89 32 15 6f d1 68 0e 5e a5 d1 46 4a 5f 1c 19 c9 19 6d a4 e0 19 1d 0d 46 8f cc a8 Data Ascii: (3(& -1xJWXm\|<?:xK\%d",x4zjJ.qE7Jg2q[2%ieo-BF>mO1z:-;=5[v"+qATv#8Fhi#AG"u(~Mn,a\|4K9T2oh^FJ_mF
2024-11-21 02:42:22 UTC	130	IN	Data Raw: 36 55 de a2 53 17 2e 77 33 fb 75 ad 3a d2 11 2e 78 a1 dd 38 ee b3 95 47 2e 9e b8 1e 88 ab 9c b5 32 0f 0a 41 01 b7 a6 ba 66 a7 a4 20 63 25 6c 96 24 d5 4a ad a2 24 19 0a e3 bc f2 2e 67 5e d4 75 f8 d2 dc 2d ef 02 ae 35 9c f3 4d 24 f3 92 66 61 b5 06 ec b0 34 f7 e2 95 9f 66 75 d8 a5 ac e0 47 80 a7 f2 40 0a 4d 3d 78 36 ea 40 0a 4f c6 d8 a2 1f 4a e2 34 d8 5a 6b 8c 1a 3c 59 32 c7 dd 3e 51 0d 0a Data Ascii: 6US.w3u:.x8G.2Af c%l$J$.g^u-5M$fa4fuG@M=x6@OJ4Zk<Y2>Q
2024-11-21 02:42:22 UTC	685	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 6a 0d 0a 30 30 30 30 30 30 30 31 0d 0a b8 0d 0a 30 30 30 30 30 30 30 31 0d 0a 22 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0c 0d 0a 30 30 30 30 30 30 30 31 0d 0a af 0d 0a 30 30 30 30 30 30 30 31 0d 0a 43 0d 0a 30 30 30 30 30 30 30 31 0d 0a 89 0d 0a 30 30 30 30 30 30 30 31 0d 0a 38 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5a 0d 0a 30 30 30 30 30 30 30 31 0d 0a b4 0d 0a 30 30 32 32 32 0d 0a 27 3d 80 b6 16 e5 b5 fd cd f5 2e 90 d7 ac 5f eb 33 2f d9 8c bb 69 67 57 e1 56 88 c2 a5 21 79 5d e5 d7 bc 3c d1 20 c7 60 a3 93 42 7a 89 06 a6 67 ff 60 36 84 0a 6f a9 b4 5d a6 92 ee ab e1 79 b8 1b 0f e8 7a 4e 73 4e 77 04 3c c2 da 22 f0 9b 76 4b 0e 18 35 f1 4e c0 f6 ba 9d d3 b2 9d bd 82 db c4 5b 5c 0e be 86 9b e3 9b a6 cf ad a2 f2 bc a9 6e 08 8f 94 fd 8d Data Ascii: 00000001j0000000100000001"000000010000000100000001C0000000100000001800000001Z0000000100222'=._3/igWV!y]< `Bzg`6o]yzNsNw<"vK5N[\n
2024-11-21 02:42:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49833	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:22 UTC	511	OUT	GET /gui/26044.e227fd5c65cff1753dd6.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:22 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: d98e65e8f94a9760d51f1529f4f62754 Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 20:48:02 GMT Expires: Wed, 19 Nov 2025 20:48:02 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 107660 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:22 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 66 66 37 0d 0a ff ac 5c 69 73 db 46 9a fe be bf 02 e1 26 0a 91 02 20 dc 07 65 da 93 51 66 76 5c a3 24 b3 76 26 5b 15 af cb 01 c9 a6 88 08 24 58 00 a8 23 34 ff fb 3e 6f 1f 40 83 a4 9c 64 2b 56 22 11 7d be f7 d5 0d 8e 1b 56 2e 9d 07 36 db e6 f3 bb eb d5 6e 73 77 df 7e d8 15 1f d6 79 b1 99 7e a2 ef e3 c7 77 ef 4d 67 bb 6b 56 e3 77 ef fc d8 0d 43 2b 89 22 cf 7d 6f ed f9 d3 64 dc 5a cc aa cd e9 cb fd 68 Data Ascii: 0000000100000001000000010000000100000001000000010000000100000001000000010000ff7\isF& eQfv\$v&[$X#4>o@d+V"}V.6nsw~y~wMgkVwC+"}odZh
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: 6c e9 57 18 59 ad 79 18 f0 80 13 9a c1 78 8c 14 33 a0 10 ed 2b 4e 38 02 b2 5b 96 99 13 de 78 a2 c3 62 ec 29 fb c4 f0 53 c2 98 07 f0 6e 01 40 05 83 b9 b7 52 56 89 28 ff d9 74 3a 6e 4f 28 7f 71 21 74 14 bd b0 ab 2d 57 54 61 bb 94 0d ff f8 51 cd 86 44 92 ed e9 e9 06 e3 d8 cd 06 ae cc 29 9a 1b f0 0d 76 e8 15 37 29 ab 76 5d 9a e3 a7 8f 1f c7 4f d3 d7 3f bf 58 14 f7 06 b7 78 d3 d1 83 ed b9 ae 51 16 4d 6b df d6 d5 6e 3b 12 26 69 3a 6a ab ed c4 80 55 1e db 76 bf 8f cd 07 36 b0 5e 77 4f 36 46 98 57 c6 af 36 18 ce 1e 27 86 37 7a 09 29 75 0f c6 8b 4b ac ff f2 67 a9 10 82 16 af 37 4d 71 bb 6a 9b 37 10 1e d3 9c 68 40 2d 01 d4 92 80 ba 6f ed 5d 61 37 5b 36 2f f2 d2 26 1b c9 1a a3 2d da 92 d9 cd 3a 2f 4b c3 29 d6 f9 2d 7b 93 3f 4c a1 07 ee 01 db bd 68 b6 f9 c6 68 ca aa Data Ascii: lWYyx3+N8[xb)Sn@RV(t:nO(q!t-WTaQD)v7)v]O?XxQMkn;&i:jUv6^wO6FW6'7z)uKg7Mqj7h@-o]a7[6/&-:/K)-{?Lhh
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: 86 64 9d 91 ab 10 4c 21 45 15 02 36 ef 95 b3 51 ec d1 24 4d d3 20 11 5f ea b4 ae 5f d5 13 d7 b4 bd 57 23 0b 7c 1b 21 69 25 ab de 09 8d b2 c2 bd b3 3b 36 c4 5d 56 4f 0e 6c 60 71 9d 0e 91 a1 f1 fd f8 91 39 22 3d 97 e6 9b 04 12 61 c6 35 bc 0d 15 9f c6 aa 18 a6 f1 fe 5b d0 fd 5b 4e f7 4f 04 6b c3 70 69 a0 97 3c e0 21 7a 8f ce 6b 36 8c 7a c3 d6 c5 0c f1 f2 f9 90 a9 4f cf 44 a0 d4 45 2b 88 7e 24 1f 29 7d 1c 84 40 bf c7 21 3c 37 97 12 c9 46 fa 48 9e a8 84 cf 78 14 7d 01 fe 19 b2 a4 e2 84 41 01 e3 38 de 91 b1 8c ac 1b 09 f9 53 06 eb ac 0b 50 fa a3 9b 7f 87 e7 af 7a 58 44 c6 9d 62 22 25 a4 4d 57 eb eb cc b2 26 9b 95 5a f4 d8 38 57 b7 6c c3 a8 0e bb f8 20 03 6f 5d 6a 9b 57 8d 2a 09 a3 ba 7a 6a 12 cf 1b d7 85 2c 12 c3 2f 59 b3 73 11 d1 d7 90 b2 af 21 65 cf e4 8a aa Data Ascii: dL!E6Q$M __W#\|!i%;6]VOl`q9"=a5[[NOkpi<!zk6zODE+~$)}@!<7FHx}A8SPzXDb"%MW&Z8Wl o]jW*zj,/Ys!e
2024-11-21 02:42:22 UTC	341	IN	Data Raw: 0f 56 de 33 9c 15 e6 16 8e 5d 70 a8 67 19 fd 2a 62 4b be f4 ba da 54 a8 30 cc 21 9f 6a e5 eb 6a c1 e4 ca 5d af 98 01 1b bf 28 10 10 4c 70 66 c9 83 4c d5 30 c6 99 c9 82 dd 5a 06 2c 53 3e 56 98 49 1c 5d c7 c3 fd 9f f3 5d 70 f7 c2 4b 52 89 91 03 b4 cc d7 45 09 63 2a 4e 3f e1 40 8f 28 70 32 a1 c1 b9 ca c4 ab d9 fa 78 a5 07 1e b3 4e 0c a8 be d6 45 90 db 22 9c 85 0d 75 94 7f a3 fd 91 8a 54 64 72 11 29 c0 05 6b 73 78 87 60 4e 00 93 4a 06 30 0c b5 fe 19 59 ef ce 13 f2 14 01 ea c1 ad f4 80 16 62 8a 32 29 dd 7e 9d 69 1a f6 9c 91 86 de 6a 28 58 83 38 98 87 ca 84 76 6a a5 01 1c 85 96 11 43 9e 12 e9 09 fb 25 04 d4 d9 32 5f ce 04 60 7a 97 84 3e 84 33 f0 11 5f e3 97 0c 49 54 ee d3 41 1f fb f1 3c 95 d4 18 76 8a 35 b2 14 fe c4 a5 5f ca 69 74 a3 38 04 08 ec d9 f2 78 7e 47 Data Ascii: V3]pgbKT0!jj](LpfL0Z,S>VI]]pKREcN?@(p2xNE"uTdr)ksx`NJ0Yb2)~ij(X8vjC%2_`z>3_ITA<v5_it8x~G
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 33 0d 0a 30 30 30 30 30 30 30 31 0d 0a 26 0d 0a 30 30 30 30 30 30 30 31 0d 0a 19 0d 0a 30 30 30 30 30 30 30 31 0d 0a 21 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4d 0d 0a 30 66 65 64 0d 0a a7 3a b4 c4 91 a5 d4 24 61 51 e9 6e d3 c4 68 aa 12 f7 65 f4 0e b5 0b 8b 58 a6 ec b1 5c 4a 48 0d 62 ec 4d 53 ee 28 dd 9a 08 a5 25 6b 24 fe 73 bc 24 ea 14 90 ef 43 16 61 07 8f ef 3a 41 12 69 4a a8 75 e2 06 01 f5 fb cf 75 97 d0 1e d7 79 ae f7 11 d1 a9 ae dd fa c2 8f d4 e9 3f b3 ab 4f 9d 9d 15 91 28 0a 70 6d 4c 3c 87 86 4d 59 fe c4 88 5c 6d c9 47 bb 59 e5 b8 76 03 18 25 94 1c 9c 53 ca f4 84 51 53 04 e2 98 e5 71 dc 15 0d 4e a6 ba 1a 51 bb b9 9c 2a 62 ab 00 e0 9c 4c d2 39 d1 4d 2a 90 c1 80 6b fc 0f e0 f5 b6 8f 86 8f ff b9 55 d6 b8 d8 6f b8 ac 90 e9 d9 Data Ascii: 00000001300000001&0000000100000001!00000001M0fed:$aQnheX\JHbMS(%k$s$Ca:AiJuuy?O(pmL<MY\mGYv%SQSqNQbL9MkUo
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: ca f8 c9 f0 0f b9 5a 37 49 ad fd 0c e0 52 51 4f 10 ea 24 1e 90 2b ca f1 60 f6 38 ce 56 71 a1 a4 2e 0f 7b 8f c7 08 74 e4 32 36 17 8b 97 e2 8a 7b 5b 8b 40 1f 5c d0 24 4d a3 b4 a6 ea 02 13 4d 0a 07 d2 09 44 a4 d5 38 42 5d 49 a1 42 43 bb a1 bf a7 db 81 4b 1c 70 c1 cb 70 93 a7 82 8b ae 5d 24 61 14 33 b6 d5 6e be 3a 38 fc 38 5f c0 ca 3f 22 dc e7 31 25 f9 29 d7 89 91 82 09 95 19 76 f2 7c 37 38 ea ec e3 6d d7 a1 dc 4d 9f c8 fb 4e 2b 8f 74 97 e0 c4 c4 74 81 05 a7 a0 d8 58 8a 8a 0c 14 7a 69 18 b4 9b 9d 07 2d 36 3c d4 c7 31 e4 fc 4e 79 19 2d 40 e1 db 2a 44 9f 4c 6d b9 41 cf a3 29 f2 0a 5e 4a ed b8 20 00 ea 90 95 63 24 6e e7 46 89 2e bc 4c a9 65 1f 1e 6e 47 51 55 f5 68 3c 6f 94 29 ab c8 c5 c8 4e b3 fa 4a 54 c9 45 45 7a 53 f1 88 e0 c8 76 cc f0 0a 1d ed a0 0c c8 49 4c Data Ascii: Z7IRQO$+`8Vq.{t26{[@\$MMD8B]IBCKpp]$a3n:88_?"1%)v\|78mMN+ttXzi-6<1Ny-@*DLmA)^J c$nF.LenGQUh<o)NJTEEzSvIL
2024-11-21 02:42:22 UTC	1334	IN	Data Raw: 3f e6 9b 8e e8 6d 04 2d 9f d0 e4 c7 c2 0d 4e 7e 97 c5 e4 33 2e cf a1 08 b8 fd c8 89 ae e9 6f e2 84 41 80 cb 44 fc 8f 9f 19 41 e8 00 e0 ec 1a 48 45 71 82 4f 04 aa 1a 85 4f 7c 1e fe 02 7f 74 ab 51 be 9c e7 5f ab 95 d0 82 d5 e5 28 b1 df a7 71 e8 f5 69 86 2b 5c 74 27 17 57 82 3e 81 44 96 71 46 e8 bc 19 f0 ac 67 63 02 f2 47 29 78 95 a6 8e 8b 69 61 e6 c4 01 b8 e5 39 69 1a 02 85 7f f8 de 8f 5e 94 39 59 12 5e 07 19 ee 49 e0 2d 77 2f c5 24 5c d5 8e 13 07 df f7 84 e7 8e f5 7f 2e 16 61 22 c8 0d 98 88 0f 20 77 d4 91 9b 3e 11 b9 e9 af 20 a4 1a e5 1b 62 9e 7f 1d 62 00 b1 09 2d 90 2f 39 0a 9f 68 1e b5 08 f6 aa 51 c0 5d ec f7 e7 22 a1 09 7c 08 5b 92 fa fe 75 04 95 08 bd cc 88 3d 27 49 41 3f d7 80 72 24 11 af 30 5e 43 5f bd 14 c1 87 a1 46 79 90 1a df 83 dc 77 9a f3 69 00 Data Ascii: ?m-N~3.oADAHEqOO\|tQ_(qi+\t'W>DqFgcG)xia9i^9Y^I-w/$\.a" w> bb-/9hQ]"\|[u='IA?r$0^C_Fywi
2024-11-21 02:42:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49832	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:22 UTC	690	OUT	GET /gui/27197.598dbd3bfe6cc1efe979.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:22 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 13fcde31c1e495b11b78fe46506ccf90 Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 17:50:19 GMT Expires: Wed, 19 Nov 2025 17:50:19 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 118323 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:22 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a c4 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5c 0d 0a 30 30 30 30 30 30 30 31 0d 0a eb 0d 0a 30 30 30 30 30 30 30 31 0d 0a 96 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a 36 0d 0a 30 30 30 30 30 30 30 31 0d 0a 92 0d 0a 30 30 30 30 30 30 30 31 0d 0a fe 0d 0a 30 30 30 30 30 30 30 31 0d 0a bf 0d 0a 30 30 30 30 30 30 30 31 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001\00000001000000010000000100000001600000001000000010000000100000001
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: 51 5b 1c c5 da b1 ba 0e 37 cc 6a 4a 0b 53 6d c2 b8 f9 ea 21 ab 0e 75 53 36 61 ee c5 e5 6e 04 63 02 35 24 a2 79 b9 19 8f be 0b 33 a8 9a 55 f3 f5 b2 4c 46 ad 7d c5 52 06 19 c5 ac 86 b6 c3 34 79 7f fe b3 57 63 c9 7f 2e c3 ba e1 f3 76 46 6f cb 1d c3 24 c0 c0 11 d2 b4 8e 55 89 af 5b 74 83 62 63 ac cc fb d9 c3 72 24 39 fb 96 4f a1 b4 b1 41 ce 67 50 4d 58 25 96 e5 a7 f2 48 2b 63 a8 c0 b6 d9 e5 f6 38 c7 86 ca d7 bb 7f 58 af ea 7d 58 58 7c 3b ad 47 5b a8 4f fc c1 da 84 7b 77 6a 25 30 4c 49 79 2c dc ac 61 bb 91 55 61 56 eb 51 74 68 1a a8 b9 f5 55 9c 67 f1 87 f5 e8 5f 4f fe 79 64 d1 02 bb 62 75 3b 4d 98 31 6c e1 c1 8d f3 b2 66 6e 59 e0 0b 7a 59 61 95 01 5d a8 88 c4 7f 6d bd 4a b2 07 c5 c7 03 e7 63 84 46 93 bb f4 e8 46 65 9e 8c 5e d3 a0 af 6e 08 d4 c3 68 60 10 dc a8 Data Ascii: Q[7jJSm!uS6anc5$y3ULF}R4yWc.vFo$U[tbcr$9OAgPMX%H+c8X}XX\|;G[O{wj%0LIy,aUaVQthUg_Oydbu;M1lfnYzYa]mJcFFe^nh`
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: 11 05 74 0e c8 e4 6e 0a 14 29 2f 1a 59 80 7c 40 a6 33 74 9c a9 b5 14 1c 08 e8 74 ba 04 7c 32 77 2c 09 15 9c c8 31 97 20 3b 5b e0 af d2 5a 11 eb b9 3c f0 63 bb fd 36 ac 33 9a b3 bf 98 46 77 72 5d 6b d4 98 0a a8 c1 e3 00 6b ba a4 4f 97 fb 3e a5 a9 bf f0 a7 7a e3 60 0e 7d 04 df bf bd bd ef cd a4 8f 73 ef 43 53 ba f3 e9 a3 2c 92 c9 ed 44 ce 8a d7 63 06 03 99 1a 42 5a fd 24 82 5a aa 68 e3 c2 83 35 7c 67 c7 69 92 a4 72 db b5 42 31 31 98 4f 9f ae 40 3a f0 38 5d 32 26 e0 7c 41 3b c0 79 3a 53 bb 51 2a 95 6b c2 b1 55 a7 4c ee 67 b9 a8 1d 70 c8 26 6a 6c 21 80 0e 34 4e f1 11 23 f3 c9 9b 40 73 03 ea 89 97 15 ec 68 3b f9 65 12 dd a7 6a 6a 5a 23 a2 1e 56 3c a5 4f 4f 00 3d 9c c8 4f 58 24 4d 95 10 42 0f 61 b9 8c c3 54 4e 54 0b a2 87 93 ce e3 bb a5 54 3d 25 8c 1e 0a bb 0f Data Ascii: tn)/Y\|@3tt\|2w,1 ;[Z<c63Fwr]kkO>z`}sCS,DcBZ$Zh5\|girB11O@:8]2&\|A;y:SQ*kULgp&jl!4N#@sh;ejjZ#V<OO=OX$MBaTNTT=%
2024-11-21 02:42:22 UTC	475	IN	Data Raw: b8 54 80 cc 7d 6f 49 4e 54 73 3f 86 56 ed 2a 84 46 41 a5 ed 61 9a 06 70 a0 22 68 f4 91 5e c0 70 ba 2a aa 56 de 16 48 14 c8 70 eb b1 0f 71 ba 20 03 37 3a 9d 93 1b 53 fa 21 83 08 37 7d bc d9 24 23 2c a2 1c f2 29 82 2a 44 e9 53 14 ed 06 49 11 e4 49 36 9e 26 ac 3c ee a7 47 05 98 a0 b2 57 ae e1 4b 0d e9 09 73 c5 fd 50 1b 71 f0 a8 43 84 0f dc b9 b6 93 00 41 d1 43 c4 27 14 77 22 cb f2 e0 6d 2f 39 92 95 32 80 1d 02 4a 95 1e 6d 23 52 02 61 d5 fe d1 ee b8 8b 4e 5f 43 9f 24 16 d7 a2 21 0e 35 4b 0c a9 4f 43 1c 01 c0 4d 2a 23 3b eb 60 19 00 7b 25 d6 a6 03 e7 4d f6 8a fb 26 e1 5b 29 80 65 d5 ea a2 c7 5d 75 3d d4 4a 59 16 dc 4f 43 c9 82 5b 11 ee 1a 56 dc 8f 5c 68 ad dd 41 e3 a0 41 28 52 d0 61 d3 d4 71 5b 44 e7 5d c9 9b da 67 2b 5f 25 35 f8 12 25 a5 c4 11 ea b3 9b 0a 07 Data Ascii: T}oINTs?VFAap"h^pVHpq 7:S!7}$#,)DSII6&<GWKsPqCAC'w"m/92Jm#RaN_C$!5KOCM#;`{%M&[)e]u=JYOC[V\hAA(Raq[D]g+_%5%
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a e3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4a 0d 0a 30 30 30 30 30 30 30 31 0d 0a a8 0d 0a 30 30 30 30 30 30 30 31 0d 0a d0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 37 0d 0a 30 30 30 30 30 30 30 31 0d 0a a6 0d 0a 30 36 61 62 0d 0a 8d 31 b8 71 57 de bf 2d a0 91 0e 89 22 99 26 09 c3 2c 4b 2e 86 27 7d ce c7 4b 22 17 bd b6 b1 9d 8d fc 9d 0f 63 80 8c c1 e4 a6 36 66 7e 25 c0 30 d5 f6 d3 48 5f d0 cb 2b b4 b5 54 fb f2 e9 02 0c b6 35 c0 34 35 57 a8 1b 1a 4a 01 01 3e ed 49 1c 6d ec 7e 20 10 58 0b 54 98 17 28 de e1 f8 87 fb c4 36 62 17 39 0f b7 07 24 d4 de 5e b8 60 5f 79 93 a1 25 9f 66 89 cf 9e be c9 24 2e 5a 9d 44 01 5c 14 9b 8b 92 b2 aa 01 8e 4a c6 21 9b 41 2a bc 12 Data Ascii: 0000000100000001J000000010000000100000001n00000001~0000000170000000106ab1qW-"&,K.'}K"c6f~%0H_+T545WJ>Im~ XT(6b9$^`_y%f$.ZD\J!A*
2024-11-21 02:42:22 UTC	411	IN	Data Raw: f2 55 1f a7 5a b4 78 e4 2d fa b5 16 ba 5b 68 78 28 0a 92 9e 75 9a 3d 67 fa 4e b9 49 5c 5c 78 2a 5a 50 68 ff 57 de 94 78 7d d7 79 df 4a cf 9c df ab 2a 91 72 b1 e6 75 10 ec 1a 59 da fa ef ff fa cf 51 b7 22 86 7a 98 21 08 59 73 53 44 b8 2b e1 d6 8f 24 39 c0 13 4e 5d 56 10 a8 58 a6 f7 9e 5e 14 51 19 32 65 2d 86 10 05 75 59 d9 6a fd ae 74 d6 e2 5e e8 b0 97 9a a4 3a 78 23 97 d8 0e 1a c6 f8 bf 12 24 f4 46 d4 d8 88 19 e6 6e e3 5e 1e 1c 08 6e 8c 34 b8 a5 f5 39 fd d5 67 77 dc ab f2 dc 2f a6 cb 7a 9d f6 df 49 fa 7f c1 55 9f 1b 23 fe 11 4a 26 df 34 bf 21 8d 53 e9 a0 bf 92 b7 2e 78 9a 2e f3 06 ac 97 4a 70 3d ba eb 46 e5 5f f3 30 4f cb dc f2 a6 e2 3c ef 4c 2f 82 4f e2 1a 12 85 61 3d ad ce 8a fd 01 4f 9f 8d 3d 6b a4 1b 66 b9 65 a0 26 6a d5 f8 90 e2 28 d1 18 7d 22 47 7f Data Ascii: UZx-[hx(u=gNI\\xZPhWx}yJruYQ"z!YsSD+$9N]VX^Q2e-uYjt^:x#$Fn^n49gw/zIU#J&4!S.x.Jp=F_0O<L/Oa=O=kfe&j(}"G
2024-11-21 02:42:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49835	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:22 UTC	690	OUT	GET /gui/74278.df011db4b71607f93e04.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:22 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: f5d8ef88b88298b9c77fa19c78ef6e0b Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 20:01:13 GMT Expires: Wed, 19 Nov 2025 20:01:13 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 110469 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:22 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 77 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a b6 0d 0a 30 30 30 30 30 30 30 31 0d 0a 92 0d 0a 30 30 31 0d 0a ff 0d 0a 30 66 65 65 0d 0a 7f 3f 05 c3 de e4 92 5b 8a 16 a9 b7 64 c6 4d 9d 74 d3 b3 4e Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001]00000001{00000001w0000000100000001000000010010fee?[dMtN
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: 30 5e 64 59 78 b3 05 42 11 e2 e1 e6 df a6 69 2c c2 64 0b 80 9e bd 6d 08 ff bd 14 d9 8d 6d 99 72 72 cc 4d e4 55 f6 16 de b4 64 85 6d 6d 56 97 2b be ea 65 19 e8 81 4e e4 4a 92 d2 05 fd 5d 16 8d 65 d4 00 98 64 1a 66 d3 46 ad 7b 7b e5 78 cd ae 77 df de 11 b9 53 c8 b1 db 17 bd a1 85 7d e5 c8 79 79 c2 1f d7 ce bb 39 7f 1c 3b ff b9 e0 8f 13 e7 e7 9c 3f 2e 9d ff 3e e7 8f 2b e7 fa df f8 03 93 c4 7b 09 ed 41 dd 41 b7 e9 c9 3d c8 f7 fb 03 6c 47 b4 07 f5 7b ad 76 cf c6 fe 81 4d ca f7 db 5d db 09 69 67 ea f6 3b 1d 7b c4 b2 d1 88 83 53 f3 3c 8a 0b 91 99 8e 19 47 f3 a8 30 cf 9c c9 76 a6 63 a6 19 96 29 0a 67 28 84 64 89 8a 9b 0f 71 94 a3 fa 48 ef 23 c6 94 36 07 2d 33 0c 9d 4d 92 14 1b 11 33 85 1b e5 fc 8b 3c 5b cb d0 15 12 77 77 55 6d 02 41 c2 30 0a a4 04 2c 0e e8 77 68 Data Ascii: 0^dYxBi,dmmrrMUdmmV+eNJ]edfF{{xwS}yy9;?.>+{AA=lG{vM]ig;{S<G0vc)g(dqH#6-3M3<[wwUmA0,wh
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: 7d 02 da b0 00 64 ac 7b 28 c3 e7 d0 bc 63 7b 24 ad 01 7c 06 5a 5e da 96 45 a8 46 2e 1d 09 f2 ef 68 c8 c7 7a c4 e0 96 b9 75 2b a9 3c cc 1d 06 33 4c 56 b0 5d 94 08 da 8e 6f 3b 74 b8 83 aa b8 5a 49 24 8f 35 92 16 fa 48 dd c2 a3 3e 24 7e 98 83 2d 0c b3 12 43 c2 95 b5 01 85 eb 84 d4 76 25 56 a1 78 67 24 c8 73 c8 65 d6 da f9 48 f9 e4 09 69 de be 7d ea 9d 01 a7 8d 83 a6 2c 52 d3 8d 63 bb 38 6d 9e ad 86 38 a7 0b 54 5f 99 bf 42 16 bb bf a5 51 62 99 86 69 43 11 ce b1 37 96 da bd b3 04 b9 72 67 66 3b 8b 4d 14 96 7f 14 0a 37 41 7c a0 26 e2 47 91 bd 62 64 78 0e 30 0b 44 75 07 7f eb e9 08 09 7b e6 12 3e 5a f3 1e a1 86 aa 74 1d c9 a2 1b 4c 8d 95 28 99 95 14 fa bb 3b 29 b1 a8 a6 70 61 22 fa 20 09 b0 56 49 9b 5a 44 49 5e eb 36 9a 62 b9 28 62 45 53 87 8d 12 55 0e 8b 55 1c Data Ascii: }d{(c{$\|Z^EF.hzu+<3LV]o;tZI$5H>$~-Cv%Vxg$seHi},Rc8m8T_BQbiC7rgf;M7A\|&Gbdx0Du{>ZtL(;)pa" VIZDI^6b(bESUU
2024-11-21 02:42:22 UTC	441	IN	Data Raw: 6f 0b ea 93 b8 92 12 b2 8c b2 32 48 51 91 e1 34 16 5c 45 c9 34 bd 22 f5 5b 67 c9 53 7f 29 94 75 63 e9 85 af 0f 05 7a 3f c9 34 1a 96 65 37 a4 3f 9e 14 2a dd 6f 55 c8 7a 10 2d 84 ef a2 6b 31 b5 3c d2 63 bd 66 13 cb 4a 36 4f 97 a4 c5 e3 08 01 07 02 42 0f d6 30 7c f6 6c 02 c7 67 89 b0 b5 5d 83 a0 0d 44 c7 5e c1 17 ba 83 22 8a 56 bb 0b 9d 07 81 ef 22 9a dc 7c 64 49 9d 22 66 d3 6d 2a af fa fa 0c c8 06 30 b6 7d 3a 82 20 fc 75 7f d6 7a be 9f c7 69 01 1f 3a ff b0 0f 3b df df 43 be b1 2f 5d ab 30 96 5d e0 9c 4b 46 40 c4 2b 88 6c 0e 17 58 21 d0 60 bd b8 0c 05 a8 61 48 4e 6e 9c ed d8 c0 43 47 63 e9 e8 9d d4 9d da b5 da 95 b7 17 e7 20 d5 6a b7 b7 57 35 22 27 f3 04 5e de 7e af 7d af 8c d3 b2 4d f9 61 29 42 48 05 0b 91 77 56 05 0b 91 77 b6 eb f7 e1 8e 62 ef 6c bf e3 13 Data Ascii: o2HQ4\E4"[gS)ucz?4e7?oUz-k1<cfJ6OB0\|lg]D^"V"\|dI"fm0}: uzi:;C/]0]KF@+lX!`aHNnCGc jW5"'^~}Ma)BHwVwbl
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: 30 30 30 30 31 0d 0a 43 0d 0a 30 66 66 66 0d 0a d4 2b 94 36 84 af c8 ac eb c3 34 5e ce 13 0a 8c e1 2a 63 aa 10 60 27 85 63 06 a1 43 b0 fc 70 f6 1c fe 6c 04 31 04 b7 47 af be 3b 19 7a 5e d3 79 f7 fd bf bd 96 5f df be 3d 39 79 fb 66 d8 6e 3a 27 6f 7f c4 0f ce 79 a4 ee 5c 1f 93 8d 50 82 fa 71 91 97 a0 6e 6a f9 f3 f6 5f ab 7c ff 9e 82 eb 17 d7 51 2e e1 c4 bd 3e 1c a3 15 74 28 5f d1 e4 63 8e 8d d2 c1 19 af f1 d3 31 1d 90 26 ee bf ff bb ab 55 08 71 c4 a6 4a cb 3e 30 9f ce f7 9e 4e 11 39 f8 74 ba f7 74 8e 83 38 35 3d c6 81 d1 82 2b 9e be 7f 0c a7 53 90 06 c0 d4 a0 6f 4e 08 b8 0c c9 94 58 ab ee 10 f7 cb 48 dc 54 98 bd 6f 63 84 32 93 87 a1 6b f8 75 18 72 84 9b 40 fc 0a 8a 78 dd d2 50 64 5d 05 86 bc 66 8a 94 49 ff 37 90 cc bd 66 6f 50 8d 14 d0 5a 89 3f 60 3d 75 6f Data Ascii: 00001C0fff+64^*c`'cCpl1G;z^y_=9yfn:'oy\Pqnj_\|Q.>t(_c1&UqJ>0N9tt85=+SoNXHToc2kur@xPd]fI7foPZ?`=uo
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: c5 a3 99 80 38 e0 1f 83 0d 36 c4 03 4d d4 ff 15 1b d4 7c d3 0f b1 82 94 0e 58 6a bc b2 1f 64 8c bc 0a 6d f9 22 e6 b0 e9 7e ef 6b 5a 88 62 fa 2e bd aa 47 ae 30 02 72 13 d3 a7 02 1d f3 f4 9f eb e2 8b 44 93 2d 4f 1c 33 68 ae 31 69 af 0a e6 0f e9 54 20 70 a4 f4 14 da ab 9d 35 6a 01 33 e0 ff dc fd cb 4b dc 45 92 08 48 cb 1b 82 00 e9 8c b3 bd 47 0a 0e fd a8 0e 38 88 f0 23 45 96 ae fb 71 6d b5 bb 96 71 7f 64 da 41 e0 9f 2c 53 36 8b aa 10 06 9a 11 23 70 54 20 02 9a 2b e5 b3 10 3e d2 77 69 5a b8 7c a9 f2 98 6f 1d d3 d5 a6 af 36 b7 1a 0f c6 01 0e 14 b7 cc c9 b5 89 b0 00 9d b8 31 9d 44 27 aa bd 06 71 2e 9c 80 c6 8d c8 3e 1a f6 17 f5 ea 7f a2 d7 f4 d3 bd 2a db 4a 18 c0 05 46 24 54 e6 3b 9c 70 e8 02 36 85 3e 4c 82 90 8e 97 33 fc e0 50 f9 78 24 ab c3 44 49 92 6b af 46 Data Ascii: 86M\|Xjdm"~kZb.G0rD-O3h1iT p5j3KEHG8#EqmqdA,S6#pT +>wiZ\|o61D'q.>*JF$T;p6>L3Px$DIkF
2024-11-21 02:42:22 UTC	1297	IN	Data Raw: f1 ca 11 d8 fc 11 21 63 89 c3 01 61 7f 25 fb c2 fd 81 60 7c ad eb 56 b3 a8 d4 e1 3f 8d 83 22 7a 15 d3 75 5f cc 1a 87 58 20 c8 dd 4a c8 04 f8 bb 86 af e9 70 1c b9 0c ea 11 68 72 c6 69 c0 78 b3 50 df b7 52 51 3b 51 4e 77 25 2e f0 f6 88 9a ce 6a 0c 5b d1 6d 4c 33 0e 46 c2 4b 33 44 71 19 2b f7 49 5a 72 9b ef 38 f2 91 43 be 76 98 8c d4 eb 86 74 16 c3 7f 9a ab ea 03 50 6b f1 91 23 f8 64 68 dd f6 18 64 b0 de ef 3c 88 ba 28 a4 e0 98 4f 4a 43 39 e4 da e6 86 43 29 b4 0a 3c 9f c1 2f 32 1e c3 a3 71 4c 1e 8d 69 74 a9 9d 44 e3 8b 06 85 89 e1 45 3a f4 84 b7 e9 6e 0c bc 02 c2 ba 79 23 13 10 ba 78 fe c6 44 c0 03 f4 94 44 37 81 27 1d 37 b8 3f 1a a4 df 20 f4 e7 aa 21 ed 31 55 c3 70 8c 33 25 02 d8 0c 0d 1c da 47 11 11 6c b2 37 ca fe ca ac 85 68 e0 b1 2b 21 63 2d d8 8a 95 6b Data Ascii: !ca%`\|V?"zu_X JphrixPRQ;QNw%.j[mL3FK3Dq+IZr8CvtPk#dhd<(OJC9C)</2qLitDE:ny#xDD7'7? !1Up3%Gl7h+!c-k
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a ca 0d 0a 30 30 30 30 30 30 30 31 0d 0a 62 0d 0a 30 30 30 30 30 30 30 31 0d 0a d8 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 55 0d 0a 30 30 30 30 30 30 30 31 0d 0a 73 0d 0a 30 30 30 30 30 30 30 31 0d 0a c3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 38 0d 0a 30 30 30 30 30 30 30 31 0d 0a b5 0d 0a 30 30 30 30 30 30 30 31 0d 0a 84 0d 0a 30 30 30 30 30 30 30 31 0d 0a cf 0d 0a 30 30 31 0d 0a f4 0d 0a 35 62 32 0d 0a 68 a4 10 d6 08 65 1f ba 3e 1e aa d6 17 8e 86 7a 05 af df ff 71 20 bd 9a 78 94 63 0d e6 06 59 a3 e4 3c 5d ab 20 fb a9 46 43 15 38 b2 b1 81 f7 8c e1 83 85 97 4c c1 93 ae 25 85 23 27 7c bc 4c fd 48 9c 46 cc 0a b4 43 ad 41 c3 f5 93 2c fd 28 d6 bb 5f eb d0 df 59 Data Ascii: 0000000100000001b0000000100000001^00000001}00000001U00000001s000000010000000180000000100000001000000010015b2he>zq xcY<] FC8L%#'\|LHFCA,(_Y
2024-11-21 02:42:22 UTC	221	IN	Data Raw: 9f d4 92 00 1f d9 c5 f8 29 d6 40 cf 31 e4 9f a7 fe 00 b9 4f 5b af d0 0d 29 31 f4 2f bb 41 fb 6c e0 99 70 84 78 d0 6b e1 d4 ca 6b 12 8c 29 7d be c1 d2 1c 38 2d b7 53 36 e3 6b 8e 35 08 aa 9a ef d0 66 78 e4 c9 df 49 03 32 c6 69 e2 ef 16 7d e1 4f 9b 7e 8f 7a 00 e6 79 54 ea d7 fe 74 b8 66 2f 87 84 a3 5c 07 6c e7 34 63 ac 22 74 dc a6 df 06 fe 18 13 d5 08 c5 b5 6a 68 44 0d 00 82 9a c5 a8 d9 43 ab 1e 69 10 2d 42 a9 ef e0 cb 63 e4 f0 c5 bf 7f db 35 16 9a 00 8c ca 5c ad e0 75 fd 97 bd bd af 60 28 a0 2b da 70 19 2c 60 ae 80 69 2e e0 7f 22 cf 9d 9e 37 3d 6f 3a 6e 8f 7b 5e b7 d9 3b 1f b4 44 b3 ed fe 86 77 85 c3 c5 ff 00 00 00 ff ff 03 00 80 35 9e 50 89 6f 00 00 0d 0a Data Ascii: )@1O[)1/Alpxkk)}8-S6k5fxI2i}O~zyTtf/\l4c"tjhDCi-Bc5\u`(+p,`i."7=o:n{^;Dw5Po
2024-11-21 02:42:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49836	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:22 UTC	511	OUT	GET /gui/11405.d1a6906c4ce5fc5f953f.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:22 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: dce0ddb3c8f3d3fb377fdf29fea82a7c Content-Encoding: gzip Server: Google Frontend Date: Wed, 20 Nov 2024 21:37:53 GMT Expires: Thu, 20 Nov 2025 21:37:53 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 18269 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:22 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 63 62 31 0d 0a 5a 6b 73 db 36 16 fd be bf 82 e6 76 34 e4 94 a4 25 db f2 43 0a ed a6 6e b6 f5 34 49 3b 79 6c 67 d6 e3 71 20 12 a2 d0 50 00 17 04 e5 6a 65 fd f7 3d 00 49 91 7a d8 c9 36 d9 e4 4b 3f 78 4c 91 78 5c dc 7b 71 ef b9 07 b0 8b 9c 5a b9 92 2c 52 f6 d0 c9 69 3a 0e ee e8 28 23 d1 fb cb 49 c1 df cf d4 6d c1 6e a7 84 f1 f0 91 6f Data Ascii: 00000001000000010000000100000001000000010000000100000001000000010000000100000001000000010cb1Zks6v4%Cn4I;ylgq Pje=Iz6K?xLx\{qZ,Ri:(#Imno
2024-11-21 02:42:22 UTC	1408	IN	Data Raw: 9b 40 89 a8 e5 f7 2c f8 f9 1f 3e e4 bb f3 bb f6 f9 5a 33 05 57 f1 11 17 24 c9 2c f3 3c 12 f1 dc cf e1 f5 3c 26 72 6e 8d ef fc 91 48 63 fb fc 9b 45 77 f9 64 1f 13 9c 5b fa d1 aa 9e df b5 bd a6 74 99 52 d0 ca 42 f0 17 c7 75 2b e1 db ef cc 26 a7 7a 5f d6 26 a6 a5 2b ec 58 7e db 9e f4 fe 7e 0f 3a 64 ff a1 6e a9 08 db b7 2b 9b a8 f0 a9 94 64 1e 8c a5 98 3a c6 ad 76 8c 15 60 2b 68 2f 86 54 41 9e b2 88 42 91 87 ae 27 fe 5c 5f e4 a6 2d 73 64 30 47 06 73 b4 ad 31 69 ac 71 b0 53 cf 13 bf d7 d5 b6 31 ba 6d 29 58 eb 37 98 92 cc 71 10 31 cd 9a d6 d4 3b c7 ce 83 df 88 2a e2 5c b4 bc 62 06 31 66 5a 8c 3c 23 bc f6 8a 11 89 13 6a c1 51 e1 4b b1 9f 61 03 5b 24 65 09 87 c5 d3 b1 1f 41 37 54 5a a3 04 36 87 17 e0 59 31 ed 04 2b c7 b0 ad ef a6 02 00 41 cc a8 0c 6d 2d 26 44 fe Data Ascii: @,>Z3W$,<<&rnHcEwd[tRBu+&z_&+X~~:dn+d:v`+h/TAB'\_-sd0Gs1iqS1m)X7q1;*\b1fZ<#jQKa[$eA7TZ6Y1+Am-&D
2024-11-21 02:42:22 UTC	933	IN	Data Raw: 61 4f fe c7 de db fe d3 00 b3 87 86 5a 11 31 6b 72 34 9b 31 ff f0 10 2f 8b e9 88 4a 4d e6 6c 8c 01 6f ff 70 ef ef 85 48 29 c1 e9 dc 46 f7 07 0c d0 0c 98 84 f5 9a 36 c9 9d 8c cd 84 22 a3 94 fa b5 bf 81 1e 6b 2d 69 0b 7f 26 a0 7c 4e 8e 7a fd e3 1d f8 b3 3a a0 d2 f8 b3 3a a0 d2 f8 b3 82 a2 e6 ac ca 1c 26 1a fc 79 76 7c da c7 b1 d5 da 59 95 23 1c 00 db 3e 0e b6 80 4f 4f 40 c7 ba 5b c7 56 5e e2 8d bd 69 03 4e 47 7f 81 d3 cf 04 4e af b6 0f af f8 27 80 d3 16 f8 7c 45 93 35 e0 b9 9b 0f 91 65 ab b5 7a be 4e 14 15 17 22 0d c4 2c 87 fb 10 01 c2 d7 8e 66 a6 5f 1f 32 9a a8 59 02 c0 95 42 6a 88 b7 7a f1 01 de a3 6a b7 a6 a3 8f e6 3c aa ce 0f f2 1d eb df db 5c 47 ad cb 12 3c 4d 3f 1b 5c db 79 ae 52 8a b1 cd 73 d4 42 94 b9 1d 42 7c 55 9e a3 3a 82 f9 c0 a9 ca 6a 2d fa 6c Data Ascii: aOZ1kr41/JMlopH)F6"k-i&\|Nz::&yv\|Y#>OO@[V^iNGN'\|E5ezN",f_2YBjzj<\G<M?\yRsBB\|U:j-l
2024-11-21 02:42:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49838	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:22 UTC	511	OUT	GET /gui/21928.84211e4ee5e5aa330648.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:23 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 74d86c6e407e61b919aec80079a25ef5 Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 18:40:45 GMT Expires: Wed, 19 Nov 2025 18:40:45 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 115297 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:23 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7b 0d 0a 30 31 0d 0a db 0d 0a 30 66 66 31 0d 0a 46 92 ee f7 fd 15 30 93 f1 92 09 08 f1 26 89 a2 4c 2b 8a e2 9c f8 ac 13 cf 5a 9e dd 3d eb d1 23 83 40 93 84 45 02 1c 00 14 25 cb fc ef fb 56 55 37 d0 e0 c5 4e f2 64 77 e7 99 a3 28 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001}00000001k00000001{010ff1F0&L+Z=#@E%VU7Ndw(
2024-11-21 02:42:23 UTC	1408	IN	Data Raw: 63 e1 88 28 0e b9 f7 a1 1a 45 3e 51 15 2a aa 15 33 63 46 f5 c6 fa 6f 38 27 2a 42 a6 34 4c 88 2b f8 4d 8d 85 29 35 10 e6 44 76 b8 e2 4c 77 54 2b 94 06 fd a6 c5 87 bf c9 32 9f 25 09 75 56 f1 62 5b 28 88 08 7c 8b f5 df f9 47 7c 19 cf 7c f9 9d 4d f9 2f 55 3c 8e 89 da 31 2f 89 89 4f 94 4d 46 d4 8b 89 a2 06 27 11 35 32 61 5e 4f a8 8a 89 8c db f4 6f f4 65 9a cf a9 ed 68 84 96 89 5f 51 c0 c2 26 0a 68 de 45 01 27 8d a9 82 28 0e a9 b6 68 31 4d 62 a2 2a ca 28 c7 07 9f 1a fa b0 a0 3e 7d a0 cc 1f 78 68 6f 14 c9 a8 1b ae fa 86 e9 9e f1 28 ce 12 ca 38 5b 52 1f e6 dd 25 fd ee f1 e7 1e f5 63 8e 95 47 95 ce 7d 62 da 9c d9 3f 0f a9 f1 39 4f a1 79 44 7d 9b 27 9c 77 d1 a5 cf 8b 1e ff e6 3a 98 88 79 46 2d cc 33 9a 03 b1 16 bc 4c 7f c2 d5 25 21 0d 4b c2 95 26 21 65 4d 42 ca 9a Data Ascii: c(E>Q3cFo8'B4L+M)5DvLwT+2%uVb[(\|G\|\|M/U<1/OMF'52a^Ooeh_Q&hE'(h1Mb*(>}xho(8[R%cG}b?9OyD}'w:yF-3L%!K&!eMB
2024-11-21 02:42:23 UTC	1408	IN	Data Raw: a1 79 94 84 f7 cd 20 99 25 29 51 4c 35 3e 3b a0 b2 1b d5 1d 4c 48 69 11 f2 d0 3e 72 43 b7 73 44 ff 37 db 5d fe 97 9a a5 fd 2a 8a 6f ca a5 6d 29 54 1e 8e 11 86 63 44 c3 81 ad 19 21 24 d0 bb c3 1a 80 92 e4 46 59 4c 1c 61 33 a3 d2 82 24 e7 ae 6d 7a 7c d7 31 9f ee 4d 5a 85 3d f7 c5 f3 b9 9f 62 c7 d4 84 e4 67 59 5e ff ca 4f d3 64 85 41 7e 76 40 6d 4b 57 52 74 26 33 94 6b a5 4b 8a 46 c4 11 89 cb 4f 9f 20 e6 78 4d da 7a 53 0b dc c4 8b 13 3c 8b 27 5a 56 a9 61 f7 a8 75 b0 99 db cd b7 2a 78 36 ec 7c fa b4 99 ef 4f 9d e1 b0 75 06 86 1e 0e 5a 5a 08 97 f3 78 01 c6 2d 88 71 60 a3 a3 e7 ca 71 0b 03 6b a6 4a f7 10 5f c8 fa 10 45 51 8e 1d 66 3e 25 c7 10 b9 59 ad 4c 76 78 d2 5b cc a3 71 2f be 3e c3 60 97 5f 20 02 b3 f2 ab e3 3c 13 e6 72 bd cc d6 9a 73 1b a9 d5 f7 09 ad 14 Data Ascii: y %)QL5>;LHi>rCsD7]om)TcD!$FYLa3$mz\|1MZ=bgY^OdA~v@mKWRt&3kKFO xMzS<'ZVaux6\|OuZZx-q`qkJ_EQf>%YLvx[q/>`_ <rs
2024-11-21 02:42:23 UTC	404	IN	Data Raw: a6 a3 d2 1e ac c5 ed c4 e1 13 1b c8 91 d1 b0 a1 1c 48 af 02 c5 91 be 55 ea d4 78 9d c5 c9 ed 94 fa 03 15 f9 59 83 7f 95 e2 d0 1e 66 ea e4 f8 0c 51 07 c4 b1 5e 47 bf 48 96 36 db 00 03 60 5a 82 8b 4b 41 84 0e 5b 2d 3b 49 a4 9c 3a 5d 7a 4b 42 05 92 34 27 89 44 1a 94 a4 97 66 f3 cf 51 08 b7 ea 0a 1e 53 56 08 98 12 f6 10 99 09 60 d0 b0 8d 91 7b 97 5e 0d 73 8f e0 44 c6 cf 60 d8 02 39 84 14 56 e9 db e4 25 aa ad d7 c9 58 dd 53 e3 ae 76 64 08 36 5a 21 2d 5a 40 a1 6c 6b 12 10 ca 83 a1 35 b9 21 6f 6b ca 09 81 54 46 46 27 55 7f 5b aa 2c ff 0b 43 c4 75 b8 41 ac d5 4a 93 88 ec 78 00 47 55 a6 58 f3 0a 0e 64 72 c4 8f d0 b3 d4 74 6c 17 2b 21 6c a1 f1 40 37 84 6e 65 75 fc e4 93 17 3b a5 c9 ca fd af 3c c4 68 0a 1e ec b1 94 5f c3 e8 ff 11 28 55 f8 32 57 73 6b 7e 3f 79 52 87 Data Ascii: HUxYfQ^GH6`ZKA[-;I:]zKB4'DfQSV`{^sD`9V%XSvd6Z!-Z@lk5!okTFF'U[,CuAJxGUXdrtl+!l@7neu;<h_(U2Wsk~?yR
2024-11-21 02:42:23 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 3e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0a 0d 0a 30 30 30 30 30 30 30 31 0d 0a e3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a e3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5f 0d 0a 30 30 30 30 30 30 30 31 0d 0a cc 0d 0a 30 30 30 30 30 30 30 31 0d 0a 14 0d 0a 30 30 30 30 30 30 30 31 0d 0a 93 0d 0a 30 30 30 30 30 30 30 31 0d 0a 37 0d 0a 30 30 30 30 30 30 30 31 0d 0a d9 0d 0a 30 30 31 0d 0a ca 0d 0a 30 66 66 33 0d 0a 9b 94 15 91 d1 3a 07 34 6f b7 87 c7 09 3a 09 d4 d0 4c 37 9a a7 7b 24 d3 a7 4f 44 09 ed f3 28 03 19 39 e8 99 19 ca 8b a9 0a 6e b0 09 d3 78 46 75 98 0d bb 11 5f 41 7d b1 a4 4d 66 78 2d 0e 19 5a c6 0c 8e 17 d3 83 59 ef 16 68 b4 e9 e9 4e d6 95 0f f3 ad 9e 32 Data Ascii: 00000001>00000001}0000000100000001000000010000000100000001_000000010000000100000001000000017000000010010ff3:4o:L7{$OD(9nxFu_A}Mfx-ZYhN2
2024-11-21 02:42:23 UTC	1408	IN	Data Raw: d3 fe b0 37 f2 d9 55 e2 de 7c e0 6c 64 94 55 12 63 24 5e e9 b8 b4 37 c9 8a a2 e6 58 10 8a f8 7d 93 24 b9 07 58 22 bd 97 46 93 14 cd d6 6b ef 68 0e 43 d0 5e d5 2c 54 9f 36 fa 0a 60 8e 8d 62 90 b5 54 4d a9 b1 9d 78 8f d5 05 ed 6b 6c c6 57 7c e2 c0 84 8c 69 0a 10 c3 08 69 4c 76 8e 28 a9 7d 14 d5 6b d8 4a f8 69 30 6d 22 a6 06 91 3d 59 93 02 20 28 e6 47 f6 54 a5 26 b1 01 4f e6 83 6c d8 66 10 d8 b3 e1 54 eb 13 6d 86 ef aa b2 12 f0 67 e9 16 58 20 46 9d 6b dc d4 74 ac 20 82 60 0c b3 45 d6 10 20 61 5a b0 07 c5 cb 5a c0 1c a4 49 60 91 59 91 88 44 98 68 12 d2 9f d8 e8 70 5f 49 49 34 c9 53 f0 1d 8e 9c 60 3a 34 a1 f6 c0 00 66 be 2a b6 31 de ee 79 63 76 77 7a 18 8d 58 86 2f 0b 36 bc 89 42 71 58 21 20 fe 4d 15 01 2a 67 01 a1 03 65 f5 df 2d 92 05 85 c9 6f 37 0c 7f 05 6f Data Ascii: 7U\|ldUc$^7X}$X"FkhC^,T6`bTMxklW\|iiLv(}kJi0m"=Y (GT&OlfTmgX Fkt `E aZZI`YDhp_II4S`:4f1ycvwzX/6BqX! Mge-o7o
2024-11-21 02:42:23 UTC	1408	IN	Data Raw: 99 a4 dc 85 3c c5 0d 29 70 f4 98 83 53 5b b9 2c ce f7 f6 f4 94 99 a7 39 28 e5 75 63 f2 07 70 e1 82 4e 85 b2 af 49 0e 86 fe 25 05 aa 2a 83 c1 52 bb 26 ea ce 4a f1 22 f2 4b 0b c6 0a 27 3d 1d ed 85 67 9b 4e 32 62 77 05 bf 31 38 40 57 95 f8 13 b6 32 cb 1d 17 03 82 6f 38 c2 ee 35 0e b1 22 b2 47 6c 3d ab 6a 40 b1 ae 09 8c b4 92 3d ba 7a c2 e5 f3 c3 3f 80 21 0d a2 f7 2d c6 c8 d4 6d 67 d5 b1 67 0b 1a 8d 6b 90 67 6c 3e 82 c7 8c cc 40 48 51 7d b2 29 33 46 7e 38 51 4e 4a e1 47 d8 5d 2d e0 e0 72 46 93 26 45 9d 00 d0 cc 85 bf c5 37 8b f5 6d 67 de 94 23 44 ce 8f 30 38 12 9c d3 9d 98 a8 07 66 39 98 3c f3 46 b8 23 e5 47 d4 89 e3 c4 90 2f b8 01 c6 1c f0 fa fb 1b 00 b6 35 2a 2c 95 db 5c 52 35 01 4f 6d 3e 8e c1 c7 31 f3 31 9a cb 59 30 3a e4 59 73 8a c8 90 99 ff f1 1e 82 86 Data Ascii: <)pS[,9(ucpNI%R&J"K'=gN2bw18@W2o85"Gl=j@=z?!-mggkgl>@HQ})3F~8QNJG]-rF&E7mg#D08f9<F#G/5,\R5Om>11Y0:Ys
2024-11-21 02:42:23 UTC	31	IN	Data Raw: 56 7c e3 8c 33 5c 0a 03 1f 50 cb 59 dc b1 23 88 3a bb 09 32 9e 85 51 46 53 ad 08 46 e3 0d 0a Data Ascii: V\|3\PY#:2QFSF
2024-11-21 02:42:23 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 53 0d 0a 30 30 30 30 30 30 30 31 0d 0a 24 0d 0a 30 30 30 30 30 30 30 31 0d 0a c3 0d 0a 30 30 30 30 30 30 30 31 0d 0a da 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 09 0d 0a 30 30 30 30 30 30 30 31 0d 0a 40 0d 0a 30 30 30 30 30 30 30 31 0d 0a a0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6e 0d 0a 30 30 30 30 30 30 30 31 0d 0a c9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0c 0d 0a 30 30 30 30 30 30 30 31 0d 0a f4 0d 0a 30 30 30 30 30 30 30 31 0d 0a b3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 03 0d 0a 30 30 30 30 30 30 30 31 0d 0a 69 0d 0a 30 30 30 30 30 30 30 31 0d 0a b2 0d 0a 30 30 30 30 30 30 30 31 0d 0a b4 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7c 0d 0a 31 0d 0a 8a 0d 0a 66 61 Data Ascii: 00000001S00000001$000000010000000100000001K00000001n0000000100000001@0000000100000001n000000010000000100000001000000010000000100000001i000000010000000100000001\|1fa
2024-11-21 02:42:23 UTC	1408	IN	Data Raw: 7b a9 41 cf 1a 0c 98 9e 35 bb a7 c7 17 1a 2a bb f0 7b 7b 4c 9d d3 c4 c9 19 b6 0a 79 b8 ba 51 93 b7 9f 10 bd 9e 88 59 03 1a 97 92 0d 7f 08 75 b8 8e 99 de 14 92 7b e7 43 7f ed d2 5b 86 fe 9b e4 49 d1 43 0e 2d 95 71 ff 8a d6 0d f6 30 40 bf 1e 68 b5 e2 b5 1d 08 24 18 38 6c 02 ab b4 ec ea e6 52 05 5b 37 08 a7 cb 27 ff 40 ca ff f9 e0 9b 27 a0 e8 1b 07 5a 24 a7 83 d9 0b c7 b9 3d f4 ba 5e c7 a9 1b 77 3a e2 11 46 e6 29 5d bc 70 d0 e0 12 74 cd 45 4a 0b dc e9 b4 da ed 66 a7 d5 e9 e2 0c b7 b2 6a 3a 5f e2 5d 11 69 c6 b9 5f 45 90 87 b8 a1 df a1 38 99 d4 f9 f9 e5 5b ab 81 28 9f 2e 47 5c 75 be 1a 65 07 45 6b 07 e0 e1 08 17 e0 46 f1 c1 ab 97 17 2f 7e b9 7c c1 4d 1f 0c 52 d0 f3 c0 d7 5b 8f e8 c2 3e e7 ab d6 a8 17 86 fe 29 27 01 97 8a 26 09 12 8f 8e da ad 71 47 12 17 cb 14 Data Ascii: {A5*{{LyQYu{C[IC-q0@h$8lR[7'@'Z$=^w:F)]ptEJfj:_]i_E8[(.G\ueEkF/~\|MR[>)'&qG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49837	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:22 UTC	690	OUT	GET /gui/18625.f201464ef45c9d80f24f.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156932.0.0.0; _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1
2024-11-21 02:42:23 UTC	320	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 11a42337ddc7f7322d07f45a4551fa95 Server: Google Frontend Date: Wed, 20 Nov 2024 12:53:16 GMT Expires: Thu, 20 Nov 2025 12:53:16 GMT Cache-Control: public, max-age=31536000 ETag: "tA1SvQ" Content-Type: text/javascript Content-Length: 56905 Age: 49747 Connection: close
2024-11-21 02:42:23 UTC	1088	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 36 32 35 2c 33 37 32 32 31 2c 38 35 30 34 33 2c 36 37 31 37 33 5d 2c 7b 35 34 32 39 33 3a 28 74 2c 65 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 65 2c 7b 72 3a 28 29 3d 3e 53 74 7d 29 3b 69 28 39 38 39 31 29 3b 76 61 72 20 6f 3d 69 28 34 38 37 30 34 29 2c 6c 3d 69 28 31 36 36 34 35 29 2c 73 3d 28 69 28 31 36 32 36 34 29 2c 69 28 37 31 30 31 32 29 29 2c 72 3d 69 28 33 31 30 38 38 29 2c 61 3d 69 28 36 32 38 33 32 29 2c 6e 3d 69 28 32 31 39 30 33 29 2c 64 3d 69 28 35 31 35 36 30 29 2c 63 3d 69 2e 6e 28 64 29 2c 62 3d 69 28 Data Ascii: (self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[18625,37221,85043,67173],{54293:(t,e,i)=>{"use strict";i.d(e,{r:()=>St});i(9891);var o=i(48704),l=i(16645),s=(i(16264),i(71012)),r=i(31088),a=i(62832),n=i(21903),d=i(51560),c=i.n(d),b=i(
2024-11-21 02:42:23 UTC	1408	IN	Data Raw: 64 20 30 21 3d 3d 74 3f 74 3a 22 22 7d 67 65 74 20 69 73 4c 61 73 74 41 63 74 69 76 69 74 79 41 74 54 6f 70 52 69 67 68 74 56 69 73 69 62 6c 65 28 29 7b 76 61 72 20 74 2c 65 2c 69 3b 72 65 74 75 72 6e 21 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 2e 61 74 74 72 69 62 75 74 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 21 74 2e 6c 61 73 74 5f 73 65 65 6e 7c 7c 21 5b 22 74 68 72 65 61 74 2d 61 63 74 6f 72 22 2c 22 6d 61 6c 77 61 72 65 2d 66 61 6d 69 6c 79 22 2c 22 73 6f 66 74 77 61 72 65 2d 74 6f 6f 6c 6b 69 74 22 5d 2e 69 6e 63 6c 75 64 65 73 28 6e 75 6c 6c 21 3d 3d 28 65 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 Data Ascii: d 0!==t?t:""}get isLastActivityAtTopRightVisible(){var t,e,i;return!(null===(t=this.collection)\|\|void 0===t\|\|null===(t=t.attributes)\|\|void 0===t\|\|!t.last_seen\|\|!["threat-actor","malware-family","software-toolkit"].includes(null!==(e=null===(i=this.collect
2024-11-21 02:42:23 UTC	1408	IN	Data Raw: 61 69 67 6e 22 2c 22 63 6f 6c 6c 65 63 74 69 6f 6e 22 2c 22 72 65 70 6f 72 74 22 5d 2e 69 6e 63 6c 75 64 65 73 28 6e 75 6c 6c 21 3d 3d 28 74 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 65 3d 65 2e 61 74 74 72 69 62 75 74 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 63 6f 6c 6c 65 63 74 69 6f 6e 5f 74 79 70 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 22 22 29 26 26 21 28 6e 75 6c 6c 3d 3d 3d 28 69 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 7c 7c 6e 75 6c 6c 3d 3d 3d 28 69 3d 69 2e 61 74 74 72 69 62 75 74 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 7c 7c 6e 75 6c 6c 3d 3d 3d Data Ascii: aign","collection","report"].includes(null!==(t=null===(e=this.collection)\|\|void 0===e\|\|null===(e=e.attributes)\|\|void 0===e?void 0:e.collection_type)&&void 0!==t?t:"")&&!(null===(i=this.collection)\|\|void 0===i\|\|null===(i=i.attributes)\|\|void 0===i\|\|null===
2024-11-21 02:42:23 UTC	192	IN	Data Raw: 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 2e 64 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 2e 74 68 72 65 61 74 5f 61 63 74 6f 72 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 64 61 74 61 7d 67 65 74 20 61 73 73 6f 63 69 61 74 65 64 4d 61 6c 77 61 72 65 46 61 6d 69 6c 69 65 73 28 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 Data Ascii: id 0===t\|\|null===(t=t.data)\|\|void 0===t\|\|null===(t=t.relationships)\|\|void 0===t\|\|null===(t=t.threat_actors)\|\|void 0===t?void 0:t.data}get associatedMalwareFamilies(){var t;return null===(t=thi
2024-11-21 02:42:23 UTC	1408	IN	Data Raw: 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 2e 64 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 2e 6d 61 6c 77 61 72 65 5f 66 61 6d 69 6c 69 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 64 61 74 61 7d 67 65 74 20 72 69 73 6b 52 61 74 69 6e 67 28 29 7b 76 61 72 20 74 2c 65 3b 72 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 2e 64 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 Data Ascii: s.collection)\|\|void 0===t\|\|null===(t=t.data)\|\|void 0===t\|\|null===(t=t.relationships)\|\|void 0===t\|\|null===(t=t.malware_families)\|\|void 0===t?void 0:t.data}get riskRating(){var t,e;return(null===(t=this.collection)\|\|void 0===t\|\|null===(t=t.data)\|\|void 0===t
2024-11-21 02:42:23 UTC	1408	IN	Data Raw: 64 65 73 28 22 61 76 61 69 6c 61 62 6c 65 22 29 7c 7c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 63 6c 75 64 65 73 28 22 72 65 70 6f 72 74 65 64 22 29 3f 22 74 65 78 74 2d 77 61 72 6e 69 6e 67 22 3a 22 22 3a 22 22 7d 63 61 63 68 65 42 65 66 6f 72 65 4e 61 76 69 67 61 74 69 6e 67 28 29 7b 76 61 72 20 74 3b 66 2e 4e 6d 2e 63 61 63 68 65 43 6f 6c 6c 65 63 74 69 6f 6e 28 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 2e 69 64 2c 7b 64 61 74 61 3a 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 64 61 74 61 7d 29 7d 6f 6e 43 6f 6c 6c 65 63 74 69 6f 6e 43 6c 69 63 6b 28 74 2c 65 29 7b 76 61 72 20 69 3b 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 26 26 28 74 Data Ascii: des("available")\|\|e.toLowerCase().includes("reported")?"text-warning":"":""}cacheBeforeNavigating(){var t;f.Nm.cacheCollection(this.collection.id,{data:null===(t=this.collection)\|\|void 0===t?void 0:t.data})}onCollectionClick(t,e){var i;this.collection&&(t
2024-11-21 02:42:23 UTC	1280	IN	Data Raw: 7d 20 3c 2f 64 69 76 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 60 29 2c 68 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 63 6f 6c 6c 65 63 74 69 6f 6e 22 2c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 69 64 29 2c 74 68 69 73 2e 6f 6e 43 6f 6c 6c 65 63 74 69 6f 6e 43 6c 69 63 6b 2c 28 30 2c 79 2e 69 66 44 65 66 69 6e 65 64 29 28 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 54 79 70 65 54 6f 53 74 72 69 6e 67 29 2c 75 2e 4b 4b 2e 73 68 6f 77 54 6f 6f 6c 74 69 70 2c 28 30 2c 6d 2e 53 29 28 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 65 3d 65 2e 61 Data Ascii: } </div> ${0} </div> `),h.Z8.getRedirectUrl("collection",null===(t=this.collection)\|\|void 0===t?void 0:t.id),this.onCollectionClick,(0,y.ifDefined)(this.collectionTypeToString),u.KK.showTooltip,(0,m.S)(null===(e=this.collection)\|\|void 0===e\|\|null===(e=e.a
2024-11-21 02:42:23 UTC	1408	IN	Data Raw: 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 63 3f 76 6f 69 64 20 30 3a 63 2e 73 68 61 72 65 64 5f 77 69 74 68 5f 6d 65 2c 21 28 6e 75 6c 6c 3d 3d 3d 28 70 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 70 7c 7c 6e 75 6c 6c 3d 3d 3d 28 70 3d 70 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 70 7c 7c 6e 75 6c 6c 3d 3d 3d 28 70 3d 70 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 5f 70 72 65 66 65 72 65 6e 63 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 70 7c 7c 21 70 2e 69 64 29 2c 6e 75 6c 6c 3d 3d 3d 28 76 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 76 7c 7c 6e 75 6c 6c 3d 3d 3d 28 76 3d 76 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 2e 6f 77 6e 65 72 29 7c 7c 76 Data Ascii: es)\|\|void 0===c?void 0:c.shared_with_me,!(null===(p=this.collection)\|\|void 0===p\|\|null===(p=p.relationships)\|\|void 0===p\|\|null===(p=p.subscription_preferences)\|\|void 0===p\|\|!p.id),null===(v=this.collection)\|\|void 0===v\|\|null===(v=v.relationships.owner)\|\|v
2024-11-21 02:42:23 UTC	1408	IN	Data Raw: 74 2d 62 6f 64 79 2d 74 65 72 74 69 61 72 79 22 3a 21 28 6e 75 6c 6c 21 3d 3d 28 43 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 26 26 76 6f 69 64 20 30 21 3d 3d 43 26 26 6e 75 6c 6c 21 3d 3d 28 43 3d 43 2e 61 74 74 72 69 62 75 74 65 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 43 26 26 43 2e 63 6f 6e 74 65 6e 74 7c 7c 6e 75 6c 6c 21 3d 3d 28 54 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 26 26 76 6f 69 64 20 30 21 3d 3d 54 26 26 6e 75 6c 6c 21 3d 3d 28 54 3d 54 2e 61 74 74 72 69 62 75 74 65 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 54 26 26 54 2e 65 78 65 63 75 74 69 76 65 5f 73 75 6d 6d 61 72 79 7c 7c 6e 75 6c 6c 21 3d 3d 28 53 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 26 26 76 6f 69 64 20 30 21 3d 3d 53 26 26 6e 75 6c 6c 21 3d 3d 28 53 3d Data Ascii: t-body-tertiary":!(null!==(C=this.collection)&&void 0!==C&&null!==(C=C.attributes)&&void 0!==C&&C.content\|\|null!==(T=this.collection)&&void 0!==T&&null!==(T=T.attributes)&&void 0!==T&&T.executive_summary\|\|null!==(S=this.collection)&&void 0!==S&&null!==(S=
2024-11-21 02:42:23 UTC	1280	IN	Data Raw: 53 7c 7c 28 53 3d 6f 74 60 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 6f 72 64 65 72 20 62 6f 72 64 65 72 2d 70 72 69 6d 61 72 79 2d 73 75 62 74 6c 65 20 72 6f 75 6e 64 65 64 2d 35 20 6f 76 65 72 66 6c 6f 77 2d 68 69 64 64 65 6e 20 70 6f 73 69 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 33 72 65 6d 3b 20 68 65 69 67 68 74 3a 20 33 72 65 6d 3b 22 3e 20 3c 76 74 2d 75 69 2d 66 6c 61 67 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 20 70 6f 73 69 74 69 6f 6e 2d 61 62 73 6f 6c 75 74 65 22 20 2e 69 73 6f 3d 22 24 7b 30 7d 22 3e 3c 2f 76 74 2d 75 69 2d 66 6c 61 67 3e 20 3c 2f 64 69 76 3e 60 29 2c 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 2e 61 74 74 72 69 62 75 74 65 73 2e 73 6f 75 72 63 65 5f 72 65 67 69 6f 6e 73 5f 68 69 65 Data Ascii: S\|\|(S=ot`<div class="border border-primary-subtle rounded-5 overflow-hidden position-relative" style="width: 3rem; height: 3rem;"> <vt-ui-flag class="h-100 position-absolute" .iso="${0}"></vt-ui-flag> </div>`),this.collection.attributes.source_regions_hie

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49842	142.250.185.132	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:23 UTC	487	OUT	GET /js/bg/4pbpW_rAqcOeS6hEUaHQz4OxZ89eKEymdS8KphqvIV8.js HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:24 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18891 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 19 Nov 2024 03:08:01 GMT Expires: Wed, 19 Nov 2025 03:08:01 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 11 Nov 2024 13:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 171262 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-21 02:42:24 UTC	578	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 55 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 72 7d 2c 53 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 4c 29 7b 69 66 28 4c 3d 28 72 3d 6e 75 6c 6c 2c 67 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 21 4c 7c 7c 21 4c 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 72 3b 74 72 79 7b 72 3d 4c 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 55 2c 63 72 65 61 74 65 53 63 72 69 70 Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var U=function(r){return r},S=function(r,L){if(L=(r=null,g).trustedTypes,!L\|\|!L.createPolicy)return r;try{r=L.createPolicy("bg",{createHTML:U,createScrip
2024-11-21 02:42:24 UTC	1390	IN	Data Raw: 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 6c 36 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 4c 2c 6c 2c 67 2c 46 2c 76 29 7b 66 75 6e 63 74 69 6f 6e 20 53 28 29 7b 69 66 28 72 2e 41 3d 3d 72 29 7b 69 66 28 72 2e 46 29 7b 76 61 72 20 51 3d 5b 4f 2c 6c 2c 4c 2c 76 6f 69 64 20 30 2c 46 2c 76 2c 61 72 67 75 6d 65 6e 74 73 5d 3b 69 66 28 67 3d 3d 32 29 76 61 72 20 4d 3d 49 28 72 2c 28 78 28 72 2c 51 29 2c 66 61 6c 73 65 29 2c 66 61 6c 73 65 29 3b 65 6c 73 65 20 69 66 28 67 3d 3d 31 29 7b 76 61 72 20 55 3d 21 72 2e 4b 2e 6c 65 6e 67 74 68 3b 78 28 72 2c 51 29 2c 55 26 26 49 28 72 2c 66 61 6c 73 65 2c 66 61 6c 73 65 29 7d 65 6c 73 65 20 4d 3d 72 6a 28 72 2c 51 29 3b 72 65 74 75 Data Ascii: -License-Identifier: Apache-2.0','*/','var l6=function(r,L,l,g,F,v){function S(){if(r.A==r){if(r.F){var Q=[O,l,L,void 0,F,v,arguments];if(g==2)var M=I(r,(x(r,Q),false),false);else if(g==1){var U=!r.K.length;x(r,Q),U&&I(r,false,false)}else M=rj(r,Q);retu
2024-11-21 02:42:24 UTC	1390	IN	Data Raw: 73 68 28 67 29 3a 28 46 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 74 68 69 73 2e 6e 29 2c 46 3c 35 30 26 26 28 74 68 69 73 2e 6a 5b 46 5d 3d 67 29 29 7d 2c 6c 29 2c 6e 65 77 20 6c 29 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 67 3d 4c 2e 44 37 28 29 2e 63 6f 6e 63 61 74 28 72 2e 44 37 28 29 29 2c 72 3d 6e 65 77 20 6c 2c 67 7d 29 5d 7d 2c 4f 63 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 4c 29 7b 72 65 74 75 72 6e 20 4c 5b 72 5d 3c 3c 32 34 7c 4c 5b 28 72 7c 30 29 2b 31 5d 3c 3c 31 36 7c 4c 5b 28 72 7c 30 29 2b 32 5d 3c 3c 38 7c 4c 5b 28 72 7c 30 29 2b 33 5d 7d 2c 7a 30 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 4c 2c 6c 2c 67 29 7b 65 28 54 28 4c 2c 28 67 3d 28 6c 3d 62 28 72 29 2c 62 28 72 29 29 2c 70 29 28 6c 2c 72 Data Ascii: sh(g):(F=Math.floor(Math.random()*this.n),F<50&&(this.j[F]=g))},l),new l),function(g){return g=L.D7().concat(r.D7()),r=new l,g})]},Oc=function(r,L){return L[r]<<24\|L[(r\|0)+1]<<16\|L[(r\|0)+2]<<8\|L[(r\|0)+3]},z0=function(r,L,l,g){e(T(L,(g=(l=b(r),b(r)),p)(l,r
2024-11-21 02:42:24 UTC	1390	IN	Data Raw: 2c 67 7d 5d 7d 2c 71 44 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 72 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 4c 2c 6c 2c 67 2c 46 2c 76 2c 53 2c 51 2c 4d 2c 55 2c 48 2c 6b 2c 58 2c 7a 29 7b 69 66 28 48 3d 70 28 32 30 33 2c 6c 29 2c 48 3e 3d 6c 2e 48 29 74 68 72 6f 77 5b 64 2c 33 31 5d 3b 66 6f 72 28 4d 3d 28 55 3d 28 46 3d 6c 2e 62 69 2e 6c 65 6e 67 74 68 2c 53 3d 72 2c 30 29 2c 48 29 3b 53 3e 30 3b 29 6b 3d 4d 3e 3e 33 2c 7a 3d 4d 25 38 2c 51 3d 38 2d 28 7a 7c 30 29 2c 51 3d 51 3c 53 3f 51 3a 53 2c 76 3d 6c 2e 4a 5b 6b 5d 2c 4c 26 26 28 67 3d 6c 2c 67 2e 4e 21 3d 4d 3e 3e 36 26 26 28 67 2e 4e 3d 4d 3e 3e 36 2c 58 3d 70 28 34 33 34 2c 67 29 2c 67 2e 78 70 3d 49 79 28 5b 30 2c 30 2c 58 5b 31 5d 2c 58 5b 32 5d 5d 2c 67 2e 4e 2c 67 2e Data Ascii: ,g}]},qD=function(r){return r},n=function(r,L,l,g,F,v,S,Q,M,U,H,k,X,z){if(H=p(203,l),H>=l.H)throw[d,31];for(M=(U=(F=l.bi.length,S=r,0),H);S>0;)k=M>>3,z=M%8,Q=8-(z\|0),Q=Q<S?Q:S,v=l.J[k],L&&(g=l,g.N!=M>>6&&(g.N=M>>6,X=p(434,g),g.xp=Iy([0,0,X[1],X[2]],g.N,g.
2024-11-21 02:42:24 UTC	1390	IN	Data Raw: 72 2c 4c 29 7b 69 66 28 72 2e 49 29 72 65 74 75 72 6e 20 78 6f 28 72 2c 72 2e 73 29 3b 72 65 74 75 72 6e 20 4c 3d 6e 28 38 2c 74 72 75 65 2c 72 29 2c 4c 26 31 32 38 26 26 28 4c 5e 3d 31 32 38 2c 72 3d 6e 28 32 2c 74 72 75 65 2c 72 29 2c 4c 3d 28 4c 3c 3c 32 29 2b 28 72 7c 30 29 29 2c 4c 7d 2c 6d 24 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 4c 2c 6c 2c 67 2c 46 2c 76 2c 53 2c 51 2c 4d 29 7b 66 6f 72 28 4d 3d 28 28 53 2e 7a 4b 3d 6f 79 28 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 63 61 74 28 29 7d 7d 2c 28 28 53 2e 4d 6b 3d 28 53 2e 62 69 3d 53 5b 44 5d 2c 4b 4c 29 2c 53 29 2e 43 77 3d 62 36 2c 53 2e 44 29 29 2c 53 29 2e 54 4b 3d 4b 5b 53 2e 44 5d 28 53 2e 7a 4b 2c 7b 76 61 6c 75 65 3a 7b 76 61 6c 75 65 3a 7b 7d Data Ascii: r,L){if(r.I)return xo(r,r.s);return L=n(8,true,r),L&128&&(L^=128,r=n(2,true,r),L=(L<<2)+(r\|0)),L},m$=function(r,L,l,g,F,v,S,Q,M){for(M=((S.zK=oy({get:function(){return this.concat()}},((S.Mk=(S.bi=S[D],KL),S).Cw=b6,S.D)),S).TK=K[S.D](S.zK,{value:{value:{}
2024-11-21 02:42:24 UTC	1390	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 55 2c 48 29 7b 28 55 3d 28 48 3d 62 28 55 29 2c 70 28 48 2c 55 2e 41 29 29 2c 55 29 5b 30 5d 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 55 5b 31 5d 2c 55 5b 32 5d 2c 68 29 7d 2c 28 66 28 39 2c 53 2c 28 66 28 33 38 2c 53 2c 28 59 28 53 2c 28 66 28 33 37 33 2c 53 2c 28 59 28 53 2c 28 59 28 53 2c 28 53 2e 6f 46 3d 28 59 28 53 2c 66 75 6e 63 74 69 6f 6e 28 55 2c 48 2c 6b 2c 58 2c 7a 29 7b 6b 3d 28 48 3d 28 7a 3d 62 28 55 29 2c 62 29 28 55 29 2c 62 28 55 29 29 2c 55 2e 41 3d 3d 55 26 26 28 58 3d 70 28 7a 2c 55 29 2c 48 3d 70 28 48 2c 55 29 2c 6b 3d 70 28 6b 2c 55 29 2c 58 5b 48 5d 3d 6b 2c 7a 3d 3d 34 33 34 26 26 28 55 2e 4e 3d 76 6f 69 64 20 30 2c 48 3d 3d 32 26 26 28 55 2e 57 3d 6e 28 33 32 2c 66 61 6c 73 65 2c Data Ascii: function(U,H){(U=(H=b(U),p(H,U.A)),U)[0].removeEventListener(U[1],U[2],h)},(f(9,S,(f(38,S,(Y(S,(f(373,S,(Y(S,(Y(S,(S.oF=(Y(S,function(U,H,k,X,z){k=(H=(z=b(U),b)(U),b(U)),U.A==U&&(X=p(z,U),H=p(H,U),k=p(k,U),X[H]=k,z==434&&(U.N=void 0,H==2&&(U.W=n(32,false,
2024-11-21 02:42:24 UTC	1390	IN	Data Raw: 2c 6b 2c 58 2c 7a 2c 71 2c 50 2c 6d 2c 42 2c 52 2c 47 2c 4a 29 7b 66 75 6e 63 74 69 6f 6e 20 43 28 4e 2c 41 29 7b 66 6f 72 28 3b 4a 3c 4e 3b 29 58 7c 3d 79 28 55 29 3c 3c 4a 2c 4a 2b 3d 38 3b 72 65 74 75 72 6e 20 58 3e 3e 3d 28 41 3d 28 4a 2d 3d 4e 2c 58 26 28 31 3c 3c 4e 29 2d 31 29 2c 4e 29 2c 41 7d 66 6f 72 28 48 3d 28 6b 3d 28 47 3d 28 52 3d 28 28 58 3d 4a 3d 28 71 3d 62 28 55 29 2c 30 29 2c 43 28 33 29 29 7c 30 29 2b 31 2c 43 29 28 35 29 2c 30 29 2c 42 3d 5b 5d 2c 30 29 3b 48 3c 47 3b 48 2b 2b 29 6d 3d 43 28 31 29 2c 42 2e 70 75 73 68 28 6d 29 2c 6b 2b 3d 6d 3f 30 3a 31 3b 66 6f 72 28 48 3d 28 7a 3d 28 6b 3d 28 28 6b 7c 30 29 2d 31 29 2e 74 6f 53 74 72 69 6e 67 28 32 29 2e 6c 65 6e 67 74 68 2c 5b 5d 29 2c 30 29 3b 48 3c 47 3b 48 2b 2b 29 42 5b 48 5d Data Ascii: ,k,X,z,q,P,m,B,R,G,J){function C(N,A){for(;J<N;)X\|=y(U)<<J,J+=8;return X>>=(A=(J-=N,X&(1<<N)-1),N),A}for(H=(k=(G=(R=((X=J=(q=b(U),0),C(3))\|0)+1,C)(5),0),B=[],0);H<G;H++)m=C(1),B.push(m),k+=m?0:1;for(H=(z=(k=((k\|0)-1).toString(2).length,[]),0);H<G;H++)B[H]
2024-11-21 02:42:24 UTC	1390	IN	Data Raw: 28 48 2c 55 29 29 7d 29 2c 33 38 31 29 2c 53 29 2c 77 28 34 29 29 2c 31 38 37 29 29 2c 31 34 33 29 29 2c 53 29 2c 77 28 34 29 29 2c 30 29 29 2c 5b 5d 29 29 2c 31 35 38 29 29 2c 66 29 28 33 38 34 2c 53 2c 77 28 34 29 29 2c 59 28 53 2c 66 75 6e 63 74 69 6f 6e 28 55 2c 48 2c 6b 29 7b 56 28 66 61 6c 73 65 2c 48 2c 55 2c 74 72 75 65 29 7c 7c 28 48 3d 62 28 55 29 2c 6b 3d 62 28 55 29 2c 66 28 6b 2c 55 2c 66 75 6e 63 74 69 6f 6e 28 58 29 7b 72 65 74 75 72 6e 20 65 76 61 6c 28 58 29 7d 28 42 5a 28 70 28 48 2c 55 2e 41 29 29 29 29 29 7d 2c 33 32 36 29 2c 37 32 29 29 2c 66 75 6e 63 74 69 6f 6e 28 55 2c 48 2c 6b 2c 58 29 7b 28 58 3d 62 28 28 48 3d 62 28 28 6b 3d 62 28 55 29 2c 55 29 29 2c 55 29 29 2c 6b 3d 70 28 6b 2c 55 29 2c 48 3d 70 28 48 2c 55 29 2c 66 29 28 58 Data Ascii: (H,U))}),381),S),w(4)),187)),143)),S),w(4)),0)),[])),158)),f)(384,S,w(4)),Y(S,function(U,H,k){V(false,H,U,true)\|\|(H=b(U),k=b(U),f(k,U,function(X){return eval(X)}(BZ(p(H,U.A)))))},326),72)),function(U,H,k,X){(X=b((H=b((k=b(U),U)),U)),k=p(k,U),H=p(H,U),f)(X
2024-11-21 02:42:24 UTC	1390	IN	Data Raw: 3d 32 30 33 7c 7c 72 3d 3d 31 31 31 29 4c 2e 46 5b 72 5d 3f 4c 2e 46 5b 72 5d 2e 63 6f 6e 63 61 74 28 6c 29 3a 4c 2e 46 5b 72 5d 3d 58 7a 28 6c 2c 4c 29 3b 65 6c 73 65 7b 69 66 28 4c 2e 4f 42 26 26 72 21 3d 34 33 34 29 72 65 74 75 72 6e 3b 72 3d 3d 32 35 31 7c 7c 72 3d 3d 33 36 37 7c 7c 72 3d 3d 33 31 32 7c 7c 72 3d 3d 33 38 34 7c 7c 72 3d 3d 31 37 32 7c 7c 72 3d 3d 32 39 34 7c 7c 72 3d 3d 33 37 33 7c 7c 72 3d 3d 34 34 39 7c 7c 72 3d 3d 34 37 31 7c 7c 72 3d 3d 34 32 34 3f 4c 2e 46 5b 72 5d 7c 7c 28 4c 2e 46 5b 72 5d 3d 54 30 28 39 34 2c 72 2c 4c 2c 6c 29 29 3a 4c 2e 46 5b 72 5d 3d 54 30 28 31 30 35 2c 72 2c 4c 2c 6c 29 7d 72 3d 3d 34 33 34 26 26 28 4c 2e 57 3d 6e 28 33 32 2c 66 61 6c 73 65 2c 4c 29 2c 4c 2e 4e 3d 76 6f 69 64 20 30 29 7d 2c 65 63 3d 66 75 Data Ascii: =203\|\|r==111)L.F[r]?L.F[r].concat(l):L.F[r]=Xz(l,L);else{if(L.OB&&r!=434)return;r==251\|\|r==367\|\|r==312\|\|r==384\|\|r==172\|\|r==294\|\|r==373\|\|r==449\|\|r==471\|\|r==424?L.F[r]\|\|(L.F[r]=T0(94,r,L,l)):L.F[r]=T0(105,r,L,l)}r==434&&(L.W=n(32,false,L),L.N=void 0)},ec=fu
2024-11-21 02:42:24 UTC	1390	IN	Data Raw: 72 75 65 2c 72 29 2e 4c 77 3d 6c 3b 74 72 79 7b 67 3d 72 2e 6c 28 29 2c 72 2e 43 3d 30 2c 72 2e 75 3d 67 2c 72 2e 52 3d 67 2c 72 2e 67 3d 30 2c 76 3d 43 4c 28 72 2c 6c 29 2c 4c 3d 4c 3f 30 3a 31 30 2c 46 3d 72 2e 6c 28 29 2d 72 2e 75 2c 72 2e 41 4a 2b 3d 46 2c 72 2e 4b 77 26 26 72 2e 4b 77 28 46 2d 72 2e 4f 2c 72 2e 47 2c 72 2e 50 2c 72 2e 43 29 2c 72 2e 50 3d 66 61 6c 73 65 2c 72 2e 4f 3d 30 2c 72 2e 47 3d 66 61 6c 73 65 2c 46 3c 4c 7c 7c 72 2e 49 46 2d 2d 3c 3d 30 7c 7c 28 46 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 46 29 2c 72 2e 72 72 2e 70 75 73 68 28 46 3c 3d 32 35 34 3f 46 3a 32 35 34 29 29 7d 66 69 6e 61 6c 6c 79 7b 72 2e 6f 3d 66 61 6c 73 65 7d 72 65 74 75 72 6e 20 76 7d 7d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 4c 2c 6c 2c 67 2c 46 2c 76 2c 53 2c Data Ascii: rue,r).Lw=l;try{g=r.l(),r.C=0,r.u=g,r.R=g,r.g=0,v=CL(r,l),L=L?0:10,F=r.l()-r.u,r.AJ+=F,r.Kw&&r.Kw(F-r.O,r.G,r.P,r.C),r.P=false,r.O=0,r.G=false,F<L\|\|r.IF--<=0\|\|(F=Math.floor(F),r.rr.push(F<=254?F:254))}finally{r.o=false}return v}},V=function(r,L,l,g,F,v,S,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49844	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:23 UTC	690	OUT	GET /gui/38304.8a071d9cca91b836aa99.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:24 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 88084935a4f7ac44416b73e43c38f753 Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 19:01:19 GMT Expires: Wed, 19 Nov 2025 19:01:19 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 114064 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:24 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 31 0d 0a 00 0d 0a 30 66 66 61 0d 0a 00 00 02 ff ec 7d eb 76 1b 47 92 e6 ff 7d 8a 12 ac 96 01 4f a1 88 fb 8d 82 64 35 a5 1e 6b 5a b6 3c 22 ed 39 3b 6c 2e 5d 00 8a 44 59 00 0a 8d 2a f0 62 08 e7 ec b3 ec a3 ed 93 ec 17 11 99 59 59 55 00 49 ab d5 dd 73 66 69 77 9b a8 bc 67 64 64 64 64 dc b2 1c 07 b3 0b ef 3a 18 2d fd f1 c7 a3 e9 7a f1 f1 2a 39 5f 87 e7 73 3f 5c 0c ef c8 fb f4 e9 f4 ac e2 2d d7 f1 b4 7c 7a da ec 35 6b 2d b7 d7 ed 77 6a 67 ee a6 db 6c b6 db 83 72 e0 26 ee aa 32 7c b1 29 ad e3 c0 89 93 55 38 4e 4a 87 57 fe ca 89 86 ab 72 ab d7 ad b5 2a 6e 8c 9f f5 Data Ascii: 00000001000000010000000100000001000000010010ffa}vG}Od5kZ<"9;l.]DYbYYUIsfiwgdddd:-z9_s?\-\|z5k-wjglr&2\|)U8NJWr*n
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 29 fa e0 2f 99 97 fe dc 72 b5 d0 63 0c fa de 5f a2 76 89 97 57 76 49 69 f0 24 bb e9 9e 3d e3 ef 02 02 ab 74 7b 27 bb d2 90 da 5b 3b 5a 92 a6 7f 47 53 6a 9b e7 09 81 ea 28 8b eb 9a 58 18 8a f5 ec 99 f4 67 0f 51 a7 ed 18 43 6e de 80 53 b1 fa 1e 12 ba b7 a4 dd 75 ba 5a b3 e0 22 19 94 b0 f3 68 ad 92 68 89 df 7d fa 8d 2e d7 df 94 eb 55 06 b8 a6 48 48 93 5e 05 69 dc 7a ad b2 dd ba 63 8f 77 76 3c 64 0a b1 5e c4 fe 45 70 74 7c 5c 29 4f bc 57 15 77 5c 39 9c 96 4f 91 15 7b 68 86 cf 51 2c 33 9d 95 83 1f d6 f3 51 b0 da 56 ce dc 39 e5 61 80 48 75 4b 05 78 94 dc ab 28 9c 38 b5 8a fb 3b 5b b2 a7 7c 7f 23 7f 8c a2 59 e0 2f dc 95 1c e0 83 27 35 d7 4f c0 bd 8c d6 49 30 28 85 71 d5 d7 e7 0f a0 93 1b b3 75 b4 3c b8 a3 1d 8d a8 c3 25 6d 62 3e d4 53 1e 83 a0 45 73 75 c0 56 ca Data Ascii: )/rc_vWvIi$=t{'[;ZGSj(XgQCnSuZ"hh}.UHH^izcwv<d^Ept\|\)OWw\9O{hQ,3QV9aHuKx(8;[\|#Y/'5OI0(qu<%mb>SEsuV
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 58 52 b3 5d 94 45 6f 68 a0 df ec 77 71 7a 5c a2 80 c2 f6 29 15 68 74 1b 34 06 24 92 46 86 47 40 3b 8a 7e d4 1b bd 5a 1f 55 d6 a8 d2 e9 36 eb 48 9c e3 67 bd db 6d 63 db 90 94 00 3d b5 b2 52 02 17 c2 01 f7 a9 7b ec 9e b8 af dc df dc 0f ee 1b f7 bd fb da 3d 77 7f 75 df b9 6f 65 43 e9 6b af f3 47 52 60 e8 a5 76 74 32 dd f1 a0 2c 79 45 92 49 1c c0 fc 17 69 15 a5 90 08 b6 f8 f8 f4 29 2d 4d 4d 90 da 63 35 14 a5 4c f0 92 fe 0e 4a 24 62 26 65 c5 a4 f4 44 eb 5b 8e 6f e7 a3 68 f6 ec 59 70 2a bf 3c 5c 84 a0 5b 89 56 67 9f 3e 05 a7 a5 6f bf d5 df a5 33 d2 d7 50 3b 4f 86 2b 69 3e 72 a1 10 72 7d d0 88 d3 33 a8 99 70 4b 9c e1 72 7a 98 ac 6e 69 b4 b4 86 c3 15 4e e6 d9 8c c6 ea 2d c0 b0 ba ac 37 e0 c9 88 f6 a4 bc aa 40 06 bf 52 33 39 44 23 f5 ad d1 dc 1c 3e 01 ea 96 a3 21 Data Ascii: XR]Eohwqz\)ht4$FG@;~ZU6Hgmc=R{=wuoeCkGR`vt2,yEIi)-MMc5LJ$b&eD[ohYp*<\[Vg>o3P;O+i>rr}3pKrzniN-7@R39D#>!
2024-11-21 02:42:24 UTC	297	IN	Data Raw: e9 99 ff db ed 3b 2c 7c 30 31 34 c1 f4 ae 2c 6b a8 a7 57 16 c9 23 32 0a ba 64 1a 9f fa f1 eb 30 86 e2 3e 9c 43 c8 0a 9e f7 ce fb 5e e8 59 f7 bd d3 b9 f7 ca 85 04 e9 ac c2 e6 2e e3 69 00 03 34 4d 9b d4 38 3e 04 7f 5d 87 10 07 9b 4b a3 c3 30 21 e3 b4 e3 f7 5a 71 be 7f 1a a6 84 5c 08 f5 27 e1 39 4b d0 01 c3 63 1c 03 09 ba 5d 2a e3 01 85 3c d9 af 98 2c c0 ca 25 53 0f 1c 95 b1 8a a1 53 db 58 18 f1 e8 54 13 f1 cb b2 35 58 11 e6 89 dd cc 2d ae b2 b7 c3 b7 d9 ab 2c 51 72 4c 0b f4 4d c4 ef 2f 63 48 ed 60 70 a1 e5 d6 19 13 9b 6b 67 3e 82 6e 68 02 69 fe 22 c0 1f a8 72 60 6d 76 03 bd 8d 92 3d a7 c6 29 c6 2c e7 5a 5b bd a8 14 9c 77 a5 17 cf e3 59 94 38 c4 4d 0f 4b 20 69 53 a0 39 2e c1 50 c1 50 3a fe 48 3b f2 47 9a de 31 8e 5d 0d 53 e1 6c f5 ac 91 90 cc c0 0c d8 6a 95 Data Ascii: ;,\|014,kW#2d0>C^Y.i4M8>]K0!Zq\'9Kc]*<,%SSXT5X-,QrLM/cH`pkg>nhi"r`mv=),Z[wY8MK iS9.PP:H;G1]Slj
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 71 0d 0a 30 30 30 30 30 30 30 31 0d 0a dc 0d 0a 30 30 30 30 30 30 30 31 0d 0a 93 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4a 0d 0a 30 30 30 30 30 30 30 31 0d 0a b0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 81 0d 0a 30 30 30 30 30 30 30 31 0d 0a c1 0d 0a 30 30 30 30 30 30 30 31 0d 0a d7 0d 0a 30 66 66 37 0d 0a ec 1c e6 2e 01 ae 0c 8a 4d 1e 42 6e 6c ad 26 ee 44 c2 b9 e1 b6 12 40 7c 2c 16 83 28 13 78 a4 db b8 23 9b 0f ec 9b e4 dc 98 14 c4 99 c2 2f a5 d9 41 e0 91 11 44 e5 25 8b 80 05 6b 44 5f 98 c3 1a 7f 06 fb 34 68 fe f0 df 6a b8 b8 88 1c d6 33 d1 82 2c b5 02 6a 7e 0b b5 86 a5 e7 c1 0e 85 05 12 4a 1c 2c 5f d8 6b 62 ab 18 29 1b 57 95 68 71 f9 42 08 1a 9d 0d 38 b4 a0 77 89 e6 0e 54 5f 40 d3 7f 8d a2 4b Data Ascii: 00000001q000000010000000100000001J0000000100000001m0000000100000001000000010ff7.MBnl&D@\|,(x#/AD%kD_4hj3,j~J,_kb)WhqB8wT_@K
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 37 b5 e2 ca 50 2d e0 ff ea d6 70 58 bf 9c d2 3d 8b c8 65 b0 ad 26 fe a8 74 06 8e cc ba 5b 58 f4 4c 2a b2 c2 45 1d da bf 3c 95 61 8f fc 38 a0 be b7 07 2a e1 2a 11 5d ca db 09 25 05 db a7 9b d5 cb 5f 5e e2 bf db 5f c0 ed 6d 7f d9 82 e3 85 53 84 da 17 06 0a 34 2b a5 19 c3 9c 58 15 c0 60 b1 27 a7 b6 d7 3d b8 83 f3 49 21 0e e6 64 21 cf 6e e4 30 26 99 6a 5f 0e 02 b2 c4 a4 d1 68 3a 75 1d 82 e1 bd f6 80 28 24 17 84 35 0a 88 ec 61 2e 11 1d ce fc 71 70 4c 79 58 21 30 67 ec dd e5 25 61 02 ed 49 02 f9 fa c2 bf 3a 89 40 49 68 8d a4 65 d2 75 c8 22 1f 82 96 c1 ec 1d 12 c1 a5 2f d2 5d 70 bf 01 8c 56 70 6d 58 24 af 83 0b 7f 3d 4b ca da 20 17 07 8a 60 c5 21 54 55 36 49 21 15 a0 4a d9 09 e3 55 65 0b a9 21 64 cb 18 46 7c 12 a9 73 e2 89 d6 9b 29 a4 51 07 9c 02 07 15 f5 f2 68 Data Ascii: 7P-pX=e&t[XLE<a8*]%_^_mS4+X`'=I!d!n0&j_h:u($5a.qpLyX!0g%aI:@Iheu"/]pVpmX$=K `!TU6I!JUe!dF\|s)Qh
2024-11-21 02:42:24 UTC	1396	IN	Data Raw: 4b ae b1 4b 2f 60 55 ef fb 25 4d e6 28 5a 5c 84 97 b1 2a 9b d1 e2 ba 3f bb 7f ae 9c b1 ec 5e ef 17 c5 b6 08 1f ce 80 d7 62 a9 c2 86 7d 0f 20 be 07 10 b1 f5 d5 f1 1a ec 22 a5 50 93 40 67 91 52 d3 64 28 d4 f4 30 21 36 5c 13 3e 10 54 50 85 2c dd 95 92 f5 8a 5d 8e 88 9c a0 82 de 44 cc 58 15 c9 c9 6b 8c ee 35 2f 31 f6 31 ac 73 35 43 26 de f3 6a 9a 66 7b cc 13 f2 27 c2 d9 22 57 73 83 f8 3a a1 1a 22 12 81 5c f3 75 1e 3c 78 99 0f d4 df df ea 84 7c c1 9c 06 56 1d 7d d9 51 a5 c2 4c 3d 4e 61 74 82 89 20 88 be 73 ca 57 46 c0 20 49 59 51 44 56 3f 09 33 b2 5d 34 44 93 42 5e 65 7d f4 15 34 d4 2f b3 54 c9 2e 6c 93 d0 5f 01 ee 5f 09 dc 3c 3d 2d 99 35 27 17 b6 a8 d1 90 67 84 d1 ef 50 ef 9d 20 91 2d a3 3e 47 f2 b9 24 6f c1 f4 4c 48 40 4b e4 92 65 22 77 31 f4 54 60 a5 b1 4a Data Ascii: KK/`U%M(Z\*?^b} "P@gRd(0!6\>TP,]DXk5/11s5C&jf{'"Ws:"\u<x\|V}QL=Nat sWF IYQDV?3]4DB^e}4/T.l__<=-5'gP ->G$oLH@Ke"w1T`J
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 7f 0d 0a 30 30 30 30 30 30 30 31 0d 0a e5 0d 0a 30 30 30 30 30 30 30 31 0d 0a e6 0d 0a 30 30 30 30 30 30 30 31 0d 0a 52 0d 0a 30 30 30 30 30 30 30 31 0d 0a 25 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1c 0d 0a 30 30 30 30 30 30 30 31 0d 0a a6 0d 0a 30 30 30 30 30 30 30 31 0d 0a a8 0d 0a 30 30 30 30 30 30 30 31 0d 0a 40 0d 0a 30 30 30 30 30 30 30 31 0d 0a 71 0d 0a 30 30 30 30 30 30 30 31 0d 0a 30 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0f 0d 0a 30 30 30 30 30 30 30 31 0d 0a e1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8d 0d 0a 30 30 30 30 30 30 30 31 0d 0a b3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 92 0d 0a 30 30 30 30 30 30 30 31 0d 0a 83 0d 0a 30 30 30 30 30 30 30 31 0d 0a 48 0d 0a 30 30 30 66 65 64 0d 0a Data Ascii: 00000001000000010000000100000001R00000001%00000001000000010000000100000001@00000001q000000010000000010000000100000001>0000000100000001000000010000000100000001H000fed
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 1b 7b 26 63 ef a8 2d 23 1f 66 53 59 bc bf 8b df 9c e6 68 d4 bd 73 07 17 63 b3 37 c5 fb 96 5e 22 cd 50 80 c5 ce 98 1a 32 ab 48 41 9d cd ab 13 14 ea 16 51 44 25 02 a9 e6 12 29 ac a8 0a d1 99 4d 82 19 18 44 d4 74 03 21 d6 12 0e e4 aa 54 36 11 06 8b 23 6f fa 03 84 86 45 f6 c2 98 68 00 8c 2c f9 24 39 04 59 86 9d 16 c5 a7 67 30 59 14 cc b7 50 5b 98 0d b6 b2 81 cf da 62 3c 5b 63 97 62 41 60 9b 83 7d 49 c5 11 a5 2c bd d1 a8 9d 69 dd 35 c4 2b 10 f8 9e bd d7 58 f6 10 da 26 92 51 54 91 32 be 31 40 fc b9 86 db 03 45 e5 a3 a0 fd 99 e8 0c 53 0a ed b9 ae 1c 9e b0 b1 42 d1 02 21 55 98 fd 66 1b 30 a4 08 96 6a 2a 8a 4d 40 35 94 a9 c5 52 a3 b4 c2 6f 43 5d 25 af da 48 9b af c2 73 d7 44 f1 a1 f6 b0 81 41 e0 d8 6c 71 f8 1b c9 75 7b b5 ce dd 72 5d 57 c5 f1 7b ab 3c 82 8f cc 6e Data Ascii: {&c-#fSYhsc7^"P2HAQD%)MDt!T6#oEh,$9Yg0YP[b<[cbA`}I,i5+X&QT21@ESB!Uf0j*M@5RoC]%HsDAlqu{r]W{<n
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: d9 ec 0d 4b 84 ca 3e 10 c4 96 25 3d 10 14 fa 3d 84 f2 f3 30 53 9f c0 fc 41 90 25 92 b9 63 41 34 c3 24 f5 ce d3 24 c8 bb 66 2a 34 8d 3e 8f f6 91 25 2b e8 09 4b 0c d3 bd 2d ad f2 4a 6b 6f 38 52 17 3e 80 d6 88 26 9e 79 0b b3 99 d4 d2 ca 4d 93 c3 1f e3 62 cc c1 06 15 b4 f0 70 14 47 f8 72 24 0e 11 87 45 0e 26 7f 42 38 42 b3 c6 aa 1a a5 bd 03 8f 9f 22 5b b1 55 bd 7c 38 1d b4 2c 9a 3d f9 29 88 f2 de e0 8c d6 be 63 0b 30 53 55 05 a7 bf a3 aa 25 8d 53 a3 3c a7 c9 59 a4 52 35 66 49 06 11 e7 0d 57 de 73 f2 6c 24 4e e4 5c 39 25 bb f5 76 cd c5 ff 4a ef a2 e8 23 d9 81 92 a1 29 b4 ed 3a f8 2f 85 17 64 23 5b dc 84 55 24 c3 8c e9 2a 42 0a e7 ce 2c 11 dc 17 16 cf c8 2f 0a 42 e1 9a 45 b2 4d 26 9c fd 2c 77 f9 da d9 80 de 07 a7 78 87 e2 41 68 db 7f 3a bf 03 e6 a9 7a 07 d4 10 Data Ascii: K>%==0SA%cA4$$f4>%+K-Jko8R>&yMbpGr$E&B8B"[U\|8,=)c0SU%S<YR5fIWsl$N\9%vJ#):/d#[U$B,/BEM&,wxAh:z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49846	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:23 UTC	511	OUT	GET /gui/11358.785da0b97a9021932562.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:24 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: c81986742e536c71004d346eb9c01910 Content-Encoding: gzip Server: Google Frontend Date: Wed, 20 Nov 2024 12:53:20 GMT Expires: Thu, 20 Nov 2025 12:53:20 GMT Cache-Control: public, max-age=31536000 ETag: "tA1SvQ" Content-Type: text/javascript Age: 49744 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:24 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a fd 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7b 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a c6 0d 0a 30 30 30 30 30 30 31 0d 0a f1 0d 0a 30 66 65 66 0d 0a e7 ef f7 57 c0 4c ea 92 09 08 93 d4 3b 65 da 71 64 b7 f5 c5 8e fb b5 e4 7c 9f 9e a3 c7 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001}0000000100000001{000000010000000100000010fefWL;eqd\|
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: d1 7f 0d 14 78 d2 89 4a 79 30 6f 12 ce 31 f5 e8 42 35 07 6d 6b 6c 61 9e d0 2b ba ea 62 6b 36 81 c7 fb 61 34 8f 47 17 6a c0 47 de 7f 13 ae bd 87 0f c2 ca 00 ab 34 ba 8c a3 2b b3 4c 00 5c 3f c4 df a5 a1 1a e4 81 bb 5c 0c 4b 78 53 a8 d2 28 b1 8a 08 9b 0d 81 1c 78 58 84 f9 a0 31 6c 94 a1 54 38 1c ae f3 3c 59 7a 31 68 cb 0b 86 11 da 33 1d 3c c7 ef 7a 41 0f d5 fc d2 d4 60 9f 66 c9 e3 95 17 2e 63 4c 11 8d bd 71 34 0f af 07 8d 4e e3 d1 8f 20 2e dd 4b 35 43 b7 07 00 d1 85 bd 06 d0 f8 0f 05 f4 79 1e 62 eb be 10 d4 f5 1f 0a ea 1b 3a 5b 73 70 94 2f c5 ec bf d6 09 d1 7f 89 58 ff 9d 64 f0 5f 34 a3 37 9c 27 a3 8b 2f 44 f1 08 cc eb 0f 05 f9 04 13 7e 02 62 45 c6 35 d4 0c fe 09 a6 b5 cc 21 0d 45 29 b1 a9 5c 71 54 e1 71 ea 17 73 fa e9 6c 72 fb 34 99 7b c3 24 c5 fe b6 3b de Data Ascii: xJy0o1B5mkla+bk6a4GjG4+L\?\KxS(xX1lT8<Yz1h3<zA`f.cLq4N .K5Cyb:[sp/Xd_47'/D~bE5!E)\qTqslr4{$;
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: b0 bd 53 51 f2 18 8f 5a 68 2b db 5e 9c 61 5c 23 ca 0c e7 78 74 41 33 6a 5b 0e b4 3d c1 b0 d1 f4 86 f9 d2 c3 7f 6d 98 c0 c8 84 d0 5e a5 b0 d9 a4 d7 de 22 6b 87 eb 3c 69 78 ae 06 58 36 12 9c f2 7e c1 82 63 4c 40 8e 12 0c 0d b1 ba e9 52 e4 50 87 2a 9a 27 e1 18 77 8f fa cd a1 85 16 b8 eb e9 ad dc d5 27 f3 5e 0c 38 a2 3e 2b 2d b0 f3 81 7a 88 76 1b c4 78 bf b5 19 af b3 8d 05 2b fb 76 a0 a7 a8 67 65 9a 68 78 23 69 cc d6 d6 ef 1e ed 77 7b 35 66 7b 76 5c 88 2b 01 76 fd 2e cc ee 64 b7 57 26 7c b2 db 2b 13 7e c9 6e 7f d4 db ef c2 2e 4f 76 fb ee de 4e 0f dd c8 70 7f b4 db 3d 10 bb fd 2e b9 09 8c dd 7e 5f 31 cf b5 3f 83 79 9e ad f1 da 08 ee 5d 6a cb b6 0f 23 3c 0c d3 9b 3c bd 66 69 16 a6 ed b7 d9 39 ec d6 70 14 84 5a b4 26 9d 81 c4 18 21 63 8f af a4 04 05 db 30 18 27 Data Ascii: SQZh+^a\#xtA3j[=m^"k<ixX6~cL@RP*'w'^8>+-zvx+vgehx#iw{5f{v\+v.dW&\|+~n.OvNp=.~_1?y]j#<<fi9pZ&!c0'
2024-11-21 02:42:24 UTC	432	IN	Data Raw: 70 f9 6b 3b 08 15 2a c5 8c 7e d4 41 71 40 b1 3d e1 08 13 8e 18 ff 62 75 55 d7 2e 49 55 ce dc 65 7b 4e 71 e9 e6 09 e4 00 09 d9 c1 d8 6d 13 b3 a3 4d 53 fa 22 27 20 1a de 32 89 97 17 0a 29 e5 10 0e e0 47 3c 9e ef e6 e4 be 2b 30 64 c1 5e 59 e6 58 05 fb 95 d6 35 c4 ba 86 84 c8 9a 65 b9 3b e6 15 4b 49 e3 e9 2c d7 5b 58 03 1d 8b 56 d6 84 ad 7e a3 41 ff 95 a8 c9 c6 ef 0a 70 ac 18 bf ab 47 67 d0 b7 10 2d 26 64 1e 67 cb 3f e7 5e b2 ca e3 05 f4 97 31 8b b1 42 d9 08 7b ba 8c 11 c9 f0 f0 c1 8a b6 b8 d5 b7 88 6f 8d e1 d6 3c 5c 36 4f 72 6f 09 7f e3 a0 11 2d 21 96 6b 41 ad f1 08 d4 81 3a ee ea b8 8b b5 92 af 89 de 52 ef df f1 21 63 f5 5e e4 c7 77 ba 91 68 6f fa 37 45 4f d2 9c 4c 6b 8b 5b 4d 6b 64 3f bb b4 2f 5d 39 23 e6 ae fd cc de 16 e6 8b 2b ee a6 31 7e 44 2c 41 14 42 Data Ascii: pk;*~Aq@=buU.IUe{NqmMS"' 2)G<+0d^YX5e;KI,[XV~ApGg-&dg?^1B{o<\6Oro-!kA:R!c^who7EOLk[Mkd?/]9#+1~D,AB
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a ed 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1c 0d 0a 30 30 30 30 30 30 30 31 0d 0a ae 0d 0a 30 30 30 30 30 30 30 31 0d 0a 38 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7f 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a 60 0d 0a 30 30 30 30 30 30 30 31 0d 0a a7 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 68 0d 0a 30 30 30 30 30 30 30 31 0d 0a 49 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0a 0d 0a 30 30 30 30 30 30 30 31 0d 0a e0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5f 0d 0a 30 30 30 66 66 31 0d 0a 38 e6 fb 67 0b 60 ac ab 03 8b 2b c5 7c f7 7a 87 47 2a c0 7a 6f 1f c1 d6 14 60 8d 48 68 11 94 b4 f1 56 42 ad 95 f5 96 43 ad f7 7a 1d 34 25 93 ad b2 de 72 ac Data Ascii: 000000010000000100000001000000018000000010000000100000001`0000000100000001{00000001h00000001I00000001=000000010000000100000001_000ff18g`+\|zG*zo`HhVBCz4%r
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: c1 29 fb 57 e2 db e5 8d 79 81 8d 80 80 21 3d bd ab 19 24 1a 26 d4 29 2e 05 24 ee 72 98 03 dd 0c 93 64 8d 83 42 ae dd 59 14 a7 b0 7a e1 74 95 48 58 cf 7e 17 f2 b5 f6 f5 0d f6 f5 0d df 78 e0 cb 3c 86 c8 3c 8b 98 a2 d0 e7 5e 40 84 ff 6a 22 d0 6b 7e fc 83 34 b4 b3 0a bd 1f 88 47 b7 9d 22 66 db 27 94 7a 48 b7 97 a6 04 5c 39 ce 54 6c 77 dc d0 c9 91 d3 e1 2c 64 2b c4 0f d7 2c a4 2d 06 82 c7 b3 4b df 60 5e 29 04 c3 ad 21 19 19 af 38 7d 7a 7c 7d f2 76 b7 9c 01 0c cd bb b2 fd aa ab b8 d9 b3 e3 a6 de 7b f8 59 ab 07 94 9d 1d a7 27 05 85 68 32 f8 25 c9 89 a7 49 84 61 85 02 48 c0 44 fa 30 f7 f6 70 ff 93 ff 0f 14 03 cb 35 71 2c 21 04 a4 6b 2e b0 dd 2e 0f b2 36 f1 19 36 f1 99 de 44 e4 9d f2 60 4a 76 e5 9f 35 ee b5 94 5a 34 28 ac be 5c a6 d8 5f 1d 1e b9 be 40 a3 6a ae b1 Data Ascii: )Wy!=$&).$rdBYztHX~x<<^@j"k~4G"f'zH\9Tlw,d+,-K`^)!8}z\|}v{Y'h2%IaHD0p5q,!k..66D`Jv5Z4(\_@j
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 6b eb 42 30 0d eb f5 00 ec dd f0 b1 6c 5f 71 3e 4e 4f ea d6 34 f4 2d 53 50 69 1d 76 5f 44 51 f0 ae bc 36 e7 ad a9 a3 fa 89 b6 75 0c be 04 fa bf 28 62 79 29 50 9a 5d 32 8a ec ed b8 f6 39 ac b5 65 47 0a de a2 d0 e2 24 05 b2 93 a4 63 df 03 a5 6a db 1e 5a bc 05 e6 9c 43 2b d6 dd c4 b5 5b 4b 46 e2 1b 3b 91 e8 a5 05 90 31 5b c7 20 73 cd eb 5d 35 83 1c 84 ab 48 d2 c6 4e 1d 66 91 66 5a 34 b9 0d b3 74 16 ee 21 cc 45 6f 35 de 61 2a 3b aa ac ad be c4 cf c5 56 eb 53 ea da 77 ea c0 59 f9 65 db 0e 96 c9 5b ca 46 86 4c 1f 01 6d 2c a8 1b c3 6a 4e e4 af 8d 05 0e f1 eb fe 58 94 95 e1 71 1a e5 b0 97 e2 e9 38 52 10 48 8b 79 8d 04 e1 e6 0c e9 e5 56 66 88 30 c6 68 30 03 5d ac 38 01 41 11 00 a5 d6 8f d7 23 62 2e 14 b7 80 b7 cf be 6f e6 8f 73 75 1f f6 e1 23 f7 95 7b 9c d2 25 e9 Data Ascii: kB0l_q>NO4-SPiv_DQ6u(by)P]29eG$cjZC+[KF;1[ s]5HNffZ4t!Eo5a*;VSwYe[FLm,jNXq8RHyVf0h0]8A#b.osu#{%
2024-11-21 02:42:24 UTC	62	IN	Data Raw: 59 ff c1 83 cb 38 a5 27 86 a0 f8 90 04 fe 80 9b 3c 88 20 87 8c e9 bd af 2d 89 7a d1 8f fc 6c ed a0 0b eb 33 5e 47 1e 7c 2b 87 27 ce 9e 22 36 8b 9f 8e 83 b6 85 77 29 2f a0 70 c1 40 0d 0a Data Ascii: Y8'< -zl3^G\|+'"6w)/p@
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 87 0d 0a 30 30 30 30 30 30 30 31 0d 0a 34 0d 0a 30 30 30 30 30 30 30 31 0d 0a 91 0d 0a 30 30 30 30 30 30 30 31 0d 0a ed 0d 0a 30 30 30 31 0d 0a fb 0d 0a 30 66 66 62 0d 0a e3 49 f0 e2 a7 00 6f 4e 2f f5 9b 45 f1 84 5e 80 83 80 38 0e e7 a0 56 11 c9 cc e2 04 34 db a9 21 ed e1 9f 82 ef 80 c6 a1 9f 6a bd 57 dc 95 91 00 6c 1e 3f e5 ac 8b b1 4a 32 fc d9 ce b0 10 45 a8 88 db bf a5 29 8f 89 43 70 a7 c6 8a e1 dd b5 39 d3 e7 1d 87 2e cc 0c 77 ec e0 5a 0b ca e0 87 84 0e f8 1a f2 6b fd 8a 56 4d 2a 88 b8 29 1a b0 b1 f2 23 e0 fc 42 e1 b9 ef 60 52 37 11 09 b6 e5 0b 26 ab a3 17 6f 74 39 dd 4b 56 fb 2a 94 fc 00 20 fc e8 78 df bd ac 15 51 f2 84 33 58 71 db 6b 07 47 75 bc 22 51 c5 e9 5a 1b 00 58 f4 fe 79 a0 d7 55 9f d7 41 f4 d4 86 3d 1a 71 8e 23 Data Ascii: 00000001000000014000000010000000100010ffbIoN/E^8V4!jWl?J2E)Cp9.wZkVM)#B`R7&ot9KV xQ3XqkGu"QZXyUA=q#
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 98 e5 fb 48 86 94 dd b6 37 4b ef b5 3a 29 73 5c 20 ea 10 ca 6d 6e 50 1c d6 03 c1 1f 03 31 64 a5 f6 55 7d 8e 0b 86 c6 3e 44 6e be a5 eb 2e 4c 60 3d c4 15 8f b3 52 3f b6 7a ab 56 58 07 ef 43 cd c0 18 c4 bd 0f f8 73 66 ff a6 fb c0 88 03 86 01 d2 0f 6d b1 80 f1 72 81 0a b0 78 c1 36 04 6e 2d bb c8 02 4d 77 42 8a 77 2f 86 ff 2c cd c3 a5 a2 a9 6f 48 80 c1 b7 b0 a4 2d c5 74 52 fa ec 72 5c 3e 78 c3 a9 60 44 f6 09 1c e8 2e 9c d7 4c 6d 20 2f 3d 1c 87 a7 d1 f0 6d bf a8 3d 8c f2 2b d8 82 65 05 06 a4 47 f0 0f e1 1b 5b 02 1a 52 58 8c c4 64 98 6a 75 02 c5 aa db ce 11 c6 76 55 06 95 c1 4b 28 2a 2e 32 c3 f2 71 63 30 bb f5 3a 80 8e c4 39 12 1b fb 1e e4 48 0f 64 ea b5 81 08 ae d0 42 83 2d 9a 7d 16 b2 cc 35 44 9f 8b b9 13 82 6f 58 16 ce 9b fe ea d8 bf 65 57 ef 02 28 3e d6 e3 Data Ascii: H7K:)s\ mnP1dU}>Dn.L`=R?zVXCsfmrx6n-MwBw/,oH-tRr\>x`D.Lm /=m=+eG[RXdjuvUK(*.2qc0:9HdB-}5DoXeW(>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49845	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:23 UTC	690	OUT	GET /gui/84569.030dc629fa8cc22ed550.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:24 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 4ccf11e11c77ddb97f295e3a7c5d926c Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 23:13:20 GMT Expires: Wed, 19 Nov 2025 23:13:20 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 98944 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:24 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 66 66 63 0d 0a 00 00 00 00 02 ff bc 5c e9 7a db 46 96 fd 3f 4f 01 b1 13 37 90 80 10 49 89 14 45 06 76 dc b6 33 ad e9 b4 3b 9f ed cc a6 68 2c 10 28 92 68 83 00 07 28 4a 66 53 7c f7 39 b7 36 14 37 2d 3d 76 ac c4 86 6a bd 75 ee 5a 17 55 68 2c 2a e6 54 bc 4c 63 de 18 ba 15 cb c6 c1 2d 1b cd a3 f8 d3 ab e9 22 ff 74 c3 3f 2e d2 8f b3 28 cd c3 7b ea ee ee 2e af bc 60 be a8 a6 ee e5 65 ff b4 db 3b bf f2 57 9d 4e f7 f4 74 e0 32 9f fb b9 17 3e 5f dd 44 a5 53 84 b9 7b da 3f 6b 9d 7a 7e 8a c7 76 af 77 da f5 fc 12 8f fd 6e a7 d5 f2 fc 08 8f 9d 7e e7 a4 ef f9 15 b5 ed 76 4e db 9e 9f e1 f1 bc db eb a3 Data Ascii: 0000000100000001000000010000000100000ffc\zF?O7IEv3;h,(h(JfS\|967-=vjuZUh,*TLc-"t?.({.`e;WNt2>_DS{?kz~vwn~vN
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: d8 dd 4d 85 34 f3 ef ca 40 10 47 b3 79 94 4e f2 8d 89 2d e6 de 37 b1 e9 ab 64 cd 12 80 31 04 60 0c 01 10 e2 6f fe 02 6f 24 14 a9 5e 59 ba 4f 7a a6 e8 3c dd 27 3d 0a ac a6 00 6b f9 18 f9 f9 89 60 5d 1e 16 9d cd 11 b5 f0 48 3b ba cf 74 2a fa 4b 4d 7f b9 8f fe 39 e8 9f ef a3 5f 03 e6 18 d8 0f 53 a6 db 6a 9a bc f5 da 1f 05 15 5f 66 ac 0a 05 d2 8b bc 8a c6 ec d5 fb f7 9e 1b 07 2f 3d 7f e4 0d 6f dc 4b 54 a5 c1 5c b9 51 cf 5d 91 ab 1c 48 ef b3 f6 ae fc 25 d5 f1 82 4a fd 86 a5 48 0d 5f 9a 77 cf 3f 34 c6 9f 60 67 58 94 ef 0c 62 c4 bc 1e 62 19 ea 41 e2 45 c5 8b 99 72 60 9e 6b cf 48 aa 5b 35 88 24 6f ed f7 ce fa ad be 15 ef c0 04 c1 43 ac fe 93 0d 5c 84 3f d3 35 96 06 a3 56 88 c0 a7 d3 e9 9f 23 48 a1 c0 a7 d7 3e a3 00 86 02 1f 15 ed 50 e0 a3 a2 1d 0a 7c 64 b4 33 d4 Data Ascii: M4@GyN-7d1`oo$^YOz<'=k`]H;t*KM9_Sj_f/=oKT\Q]H%JH_w?4`gXbbAEr`kH[5$oC\?5V#H>P\|d3
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 23 c7 92 4b bd f8 c5 2c 13 8f 8d b5 5b 20 6a 2e 60 1f 91 6e 04 91 14 17 86 e4 0a 44 c2 66 55 2e b0 ef 41 8a 50 64 00 63 ca 66 c1 86 c0 ac 22 ec 50 c1 d1 8a ac e0 80 f9 a2 e5 80 fb 59 3a 4b f9 a0 dd 6a f9 33 8a a2 3e 16 a2 eb 47 b1 1f ca 7d 96 53 48 9a 20 56 f6 69 1f 32 b8 6c 44 0b 5e 4c 18 52 53 94 7e 69 20 56 16 44 98 74 9b d8 52 c7 d3 02 fb f0 bf b2 7c 61 14 ef 12 ce 9e 22 ec 62 c7 28 f9 53 16 21 0a 1e 10 02 95 51 3a 52 a3 14 a1 10 7c 98 c8 70 22 f1 31 68 bc 2d 78 3a 5e 22 da 75 90 d5 64 c8 1f c1 84 2c 90 3f 64 8e 41 2f 51 c6 8d fa 13 2d d2 c6 ac 7d 33 bd e4 86 16 11 61 16 0d 05 4a 8e fe 59 22 14 a3 05 17 1f a4 63 cb 8a 1a 1a c0 e4 7f 76 7e 68 e0 e3 e6 86 e0 29 91 57 fc 31 b3 0b 1e 28 d9 07 7b 9f 02 bf e9 45 96 dd 40 ef dc 22 c4 46 9e 96 c5 0b 92 97 1d Data Ascii: #K,[ j.`nDfU.APdcf"PY:Kj3>G}SH Vi2lD^LRS~i VDtR\|a"b(S!Q:R\|p"1h-x:^"ud,?dA/Q-}3aJY"cv~h)W1({E@"F
2024-11-21 02:42:24 UTC	281	IN	Data Raw: a0 4d a8 9a e6 1e 1b 25 5b e8 a0 e0 d7 fa e5 e6 43 9a 40 3b 08 f8 57 d9 ff 7e 36 5b a3 de 87 09 9c cc 17 db 31 5b 0b 4f 0f 58 67 4c a7 97 4d ce 79 d3 ad 20 17 f5 80 84 08 87 be ed c3 d2 f9 fd 48 ec 9b e8 10 24 c6 d9 7c 01 07 be ed bb b0 d9 24 99 d8 49 1e 1c f6 58 8f 04 04 91 08 9d 9f a0 f8 f0 31 58 d4 9e ea 62 fe 15 71 d0 e9 14 ed a4 d2 5d 07 05 a3 c1 cb 68 3c 4e e3 3a 24 a4 2d 39 f2 34 48 b1 53 ac f8 11 bd 2c c0 1e e3 53 90 4c 7c 8c 14 d5 fe e4 31 98 19 5f 02 9b bb 1d 16 12 89 26 e6 ff ea 51 61 3a df e7 3f 5e 8b 04 cf 3b 79 8a 51 9c 31 78 08 04 d9 43 e7 21 d5 09 84 fb 15 69 77 92 43 e2 63 99 c1 7f c6 da 92 c8 48 63 82 63 ae 74 02 81 44 9b 0a c5 60 56 8e ee 90 4a c9 ce da d2 c0 14 be 57 67 2a 1e 42 85 0c ac b0 ec 94 1d 7e c0 ae 58 c3 de 87 c3 97 b4 b0 87 Data Ascii: M%[C@;W~6[1[OXgLMy H$\|$IX1Xbq]h<N:$-94HS,SL\|1_&Qa:?^;yQ1xC!iwCcHcctD`VJWg*B~X
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 9e 0d 0a 30 30 30 30 30 30 30 31 0d 0a ee 0d 0a 30 30 30 30 30 30 30 31 0d 0a 69 0d 0a 30 30 30 30 30 30 30 31 0d 0a 46 0d 0a 30 30 30 30 30 30 30 31 0d 0a c5 0d 0a 30 30 30 30 30 30 30 31 0d 0a 56 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2b 0d 0a 30 30 30 30 30 30 30 31 0d 0a ca 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a a4 0d 0a 30 30 30 30 63 32 34 0d 0a ee c6 3b 66 94 5a 6d a4 7c ec 6b a7 6a ae ae 02 70 f1 4d 84 83 b9 38 d4 f6 7c 45 57 e3 f2 70 81 13 b0 b8 56 87 3b 7a 97 ad 2b 3a a6 7e d9 36 c7 d7 e4 94 45 3e 4e 27 c8 37 ff 54 94 a0 f9 6f e3 97 f4 d6 fb 7d 8c cc 6e 99 16 38 ca 22 4e eb 7a ea 0e 17 25 8d 3f e0 bc 35 2e c4 b0 0a 9d 70 3a 13 4a 79 ff 00 e2 2c Data Ascii: 000000010000000100000001i00000001F0000000100000001V00000001+000000010000000100000001000000010000c24;fZm\|kjpM8\|EWpV;z+:~6E>N'7To}n8"Nz%?5.p:Jy,
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: ae ef a8 5a 49 89 9a f3 1c c3 9e f4 f0 bf 96 5a b9 76 71 f3 bb a9 6f 85 d3 02 7b 9d d1 99 e2 6b 85 af 0e e4 10 83 e5 4e ab ce 39 fd 6c 52 2f ee 99 5b 23 75 5a bd 56 c7 28 0e d6 b0 dd a0 d5 3a 3d ed 6f ad 64 bb 4d bf 05 49 d9 5c cf 76 93 5e d2 3e 6d ab 55 21 8a 9a f2 9d 89 6c 09 21 a9 be b7 81 66 15 2e d2 23 a7 04 6b 4d ac 1c 27 c9 58 a9 5d 0d 8a dd 82 b5 e8 67 13 90 8d fa 78 7c ce 98 ac 17 0c dd a8 ec 8e 4f b4 36 ea cb fb 76 3d 54 b5 c3 94 3e 2b a6 6e 54 47 ac ad e7 96 00 6c d4 c6 63 fc c8 99 c5 e2 ed 4a 5b 01 cd c2 c5 b5 c7 7a f1 e7 c9 a8 3f d6 4b 33 12 31 da 6a 15 77 e8 67 0b 80 ad 36 a3 56 c2 46 ca 54 49 10 b6 1a 9c 9f c7 d1 58 2d d4 00 b1 d5 66 dc 8d cf ce 95 e8 69 30 b6 9a b0 7e 74 16 29 ed 51 80 6c b5 b0 cd 94 04 65 ab 81 6d 82 84 c5 94 6a d4 e9 42 Data Ascii: ZIZvqo{kN9lR/[#uZV(:=odMI\v^>mU!l!f.#kM'X]gx\|O6v=T>+nTGlcJ[z?K31jwg6VFTIX-fi0~t)QlemjB
2024-11-21 02:42:24 UTC	446	IN	Data Raw: 41 eb 4e 9b 6b f1 6a d3 b5 05 01 7d e5 80 b6 31 b4 a6 ad de a6 42 b5 51 6b db d7 4a 56 21 19 6f 45 f0 6d 24 df c9 a6 6e b5 17 85 ca 5e 4a bb 43 e1 0c 2b 87 72 13 26 37 3c 79 41 76 63 b8 65 a0 46 11 64 14 33 68 2b a4 a0 da 9a 60 03 47 4f b1 7f 80 f8 9d 2f 57 1a 3c a1 64 3f 7e 62 cb 71 89 54 74 e5 cc cb 02 09 b8 0a 29 41 28 3a 9d 43 9c b3 6a d5 fa 76 35 42 6a 6d 22 be be d7 34 9f 7f fb 2c 76 34 eb b5 d5 9d 54 1f 76 b2 29 a7 5e f1 02 5f cb 41 a4 46 fe 0e 7e 87 c3 2e ba 27 3d da 85 21 af bc a7 1b 66 b8 a5 d9 ea 4e f8 94 60 86 ef a8 79 eb 2e 8a b5 7b a7 8f b2 e8 51 c5 02 ec b1 20 13 31 9b 16 19 05 98 13 a4 17 57 76 cf a0 d5 de 98 d8 6e 7c 8b af 1a ad 90 f1 fb d6 18 a3 59 54 7d 32 cb 1d 20 39 db fa d6 69 7d 3b dc 5f bc 5e 07 06 19 fd 61 bc 95 2e 19 e8 12 e7 48 Data Ascii: ANkj}1BQkJV!oEm$n^JC+r&7<yAvceFd3h+`GO/W<d?~bqTt)A(:Cjv5Bjm"4,v4Tv)^_AF~.'=!fN`y.{Q 1Wvn\|YT}2 9i};_^a.H
2024-11-21 02:42:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49847	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:23 UTC	511	OUT	GET /gui/76194.9a49eca4de4d4a1bd1bf.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:24 UTC	321	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 40ab3aa2a25474496ea815653a72d3ab Server: Google Frontend Date: Tue, 19 Nov 2024 18:41:37 GMT Expires: Wed, 19 Nov 2025 18:41:37 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Content-Length: 30780 Age: 115247 Connection: close
2024-11-21 02:42:24 UTC	1087	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 36 31 39 34 2c 35 35 36 38 35 5d 2c 7b 35 35 36 38 35 3a 28 65 2c 72 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 72 28 72 29 2c 74 2e 64 28 72 2c 7b 41 67 67 72 65 67 61 74 69 6f 6e 73 54 61 62 6c 65 4f 66 43 6f 6e 74 65 6e 74 3a 28 29 3d 3e 75 7d 29 3b 76 61 72 20 6f 3d 74 28 34 38 37 30 34 29 2c 73 3d 74 28 31 36 36 34 35 29 2c 61 3d 28 74 28 33 38 33 39 38 29 2c 74 28 39 36 39 38 37 29 29 2c 69 3d 74 28 37 31 30 31 32 29 2c 6e 3d 74 28 32 31 36 39 29 2c 62 3d 74 28 37 30 35 32 30 29 3b 6c 65 74 20 63 2c 64 2c 6c 2c 67 2c 70 3d Data Ascii: (self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[76194,55685],{55685:(e,r,t)=>{"use strict";t.r(r),t.d(r,{AggregationsTableOfContent:()=>u});var o=t(48704),s=t(16645),a=(t(38398),t(96987)),i=t(71012),n=t(2169),b=t(70520);let c,d,l,g,p=
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 62 67 2d 62 6f 64 79 2d 73 65 63 6f 6e 64 61 72 79 20 72 6f 75 6e 64 65 64 20 70 2d 32 22 20 2e 74 69 74 6c 65 3d 22 24 7b 30 7d 22 20 6e 6f 2d 74 6f 70 2d 68 65 61 64 65 72 2d 62 6f 72 64 65 72 20 6e 6f 2d 62 6f 74 74 6f 6d 2d 68 65 61 64 65 72 2d 62 6f 72 64 65 72 3e 20 3c 64 69 76 20 73 6c 6f 74 3d 22 63 6f 6e 74 65 6e 74 22 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 3c 2f 76 74 2d 75 69 2d 65 78 70 61 6e 64 61 62 6c 65 3e 20 60 29 2c 22 54 61 62 6c 65 20 6f 66 20 63 6f 6e 74 65 6e 74 73 22 2c 74 68 69 73 2e 73 65 63 74 69 6f 6e 73 5b 65 5d 2e 6d 61 70 28 28 28 72 2c 74 29 3d 3e 7b 63 6f 6e 73 74 20 73 3d 60 24 7b 65 7d 2d 24 7b 72 2e 70 69 76 6f 74 43 6f 6e 66 69 67 2e 6c 61 62 65 6c 7d 60 3b 72 65 74 75 72 6e 20 72 2e 61 67 67 72 65 67 61 74 69 6f 6e Data Ascii: bg-body-secondary rounded p-2" .title="${0}" no-top-header-border no-bottom-header-border> <div slot="content"> ${0} </div> </vt-ui-expandable> `),"Table of contents",this.sections[e].map(((r,t)=>{const s=`${e}-${r.pivotConfig.label}`;return r.aggregation
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 6f 74 79 70 65 2c 22 73 65 63 74 69 6f 6e 73 22 2c 76 6f 69 64 20 30 29 2c 6d 28 5b 28 30 2c 73 2e 73 74 61 74 65 29 28 29 5d 2c 75 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6f 70 65 6e 53 65 63 74 69 6f 6e 49 64 22 2c 76 6f 69 64 20 30 29 2c 75 3d 6d 28 5b 28 30 2c 73 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 29 28 22 61 67 67 72 65 67 61 74 69 6f 6e 73 2d 74 61 62 6c 65 2d 6f 66 2d 63 6f 6e 74 65 6e 74 22 29 5d 2c 75 29 7d 2c 37 36 31 39 34 3a 28 65 2c 72 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 72 28 72 29 2c 74 2e 64 28 72 2c 7b 49 6e 73 69 67 68 74 73 41 67 67 72 65 67 61 74 69 6f 6e 73 3a 28 29 3d 3e 4f 7d 29 3b 76 61 72 20 6f 3d 74 28 34 38 37 30 34 29 2c 73 3d 74 28 31 36 36 34 35 29 2c 61 3d 74 28 38 32 32 31 37 29 2c 69 3d 74 2e Data Ascii: otype,"sections",void 0),m([(0,s.state)()],u.prototype,"openSectionId",void 0),u=m([(0,s.customElement)("aggregations-table-of-content")],u)},76194:(e,r,t)=>{"use strict";t.r(r),t.d(r,{InsightsAggregations:()=>O});var o=t(48704),s=t(16645),a=t(82217),i=t.
2024-11-21 02:42:24 UTC	193	IN	Data Raw: 3d 65 5b 74 5d 3b 72 65 74 75 72 6e 20 6f 7d 76 61 72 20 54 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 2c 6f 29 7b 76 61 72 20 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 69 3d 61 3c 33 3f 72 3a 6e 75 6c 6c 3d 3d 3d 6f 3f 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 72 2c 74 29 3a 6f 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 29 69 3d 52 65 66 6c Data Ascii: =e[t];return o}var T=function(e,r,t,o){var s,a=arguments.length,i=a<3?r:null===o?o=Object.getOwnPropertyDescriptor(r,t):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)i=Refl
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 65 63 74 2e 64 65 63 6f 72 61 74 65 28 65 2c 72 2c 74 2c 6f 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 6e 3e 3d 30 3b 6e 2d 2d 29 28 73 3d 65 5b 6e 5d 29 26 26 28 69 3d 28 61 3c 33 3f 73 28 69 29 3a 61 3e 33 3f 73 28 72 2c 74 2c 69 29 3a 73 28 72 2c 74 29 29 7c 7c 69 29 3b 72 65 74 75 72 6e 20 61 3e 33 26 26 69 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 74 2c 69 29 2c 69 7d 3b 6c 65 74 20 4f 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 64 2e 44 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 69 73 4c 6f 61 64 69 6e 67 3d 21 31 2c 74 68 69 73 2e 63 6f 75 6e 74 73 3d 7b 66 69 6c 65 73 43 6f 75 6e 74 3a 30 2c 64 Data Ascii: ect.decorate(e,r,t,o);else for(var n=e.length-1;n>=0;n--)(s=e[n])&&(i=(a<3?s(i):a>3?s(r,t,i):s(r,t))\|\|i);return a>3&&i&&Object.defineProperty(r,t,i),i};let O=class extends d.D{constructor(){super(...arguments),this.isLoading=!1,this.counts={filesCount:0,d
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 74 6d 6c 29 28 70 7c 7c 28 70 3d 43 60 20 3c 76 74 2d 75 69 2d 73 6b 65 6c 65 74 6f 6e 20 2e 74 79 70 65 3d 22 24 7b 30 7d 22 3e 3c 2f 76 74 2d 75 69 2d 73 6b 65 6c 65 74 6f 6e 3e 60 29 2c 6e 2e 7a 2e 4e 65 65 64 73 4c 69 73 74 53 6b 65 6c 65 74 6f 6e 29 3a 21 74 68 69 73 2e 61 67 67 72 65 67 61 74 69 6f 6e 73 44 61 74 61 7c 7c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 61 67 67 72 65 67 61 74 69 6f 6e 73 44 61 74 61 29 2e 6c 65 6e 67 74 68 7c 7c 74 68 69 73 2e 63 6f 6d 6d 6f 6e 61 6c 69 74 69 65 73 3f 74 68 69 73 2e 72 65 6e 64 65 72 41 67 67 72 65 67 61 74 69 6f 6e 73 28 29 3a 28 30 2c 6f 2e 68 74 6d 6c 29 28 6d 7c 7c 28 6d 3d 43 60 20 3c 76 74 2d 75 69 2d 73 70 65 63 69 61 6c 2d 73 74 61 74 65 73 20 2e 69 6d 61 67 65 52 61 77 3d 22 24 7b 30 7d Data Ascii: tml)(p\|\|(p=C` <vt-ui-skeleton .type="${0}"></vt-ui-skeleton>`),n.z.NeedsListSkeleton):!this.aggregationsData\|\|Object.keys(this.aggregationsData).length\|\|this.commonalities?this.renderAggregations():(0,o.html)(m\|\|(m=C` <vt-ui-special-states .imageRaw="${0}
2024-11-21 02:42:24 UTC	1280	IN	Data Raw: 73 2e 73 65 63 74 69 6f 6e 3f 28 30 2c 6f 2e 68 74 6d 6c 29 28 76 7c 7c 28 76 3d 43 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 67 67 72 65 67 61 74 69 6f 6e 73 22 3e 24 7b 30 7d 3c 2f 64 69 76 3e 20 3c 64 69 76 20 69 64 3d 22 74 61 62 6c 65 2d 6f 66 2d 63 6f 6e 74 65 6e 74 22 20 73 74 79 6c 65 3d 22 74 6f 70 3a 20 24 7b 30 7d 70 78 22 3e 20 3c 61 67 67 72 65 67 61 74 69 6f 6e 73 2d 74 61 62 6c 65 2d 6f 66 2d 63 6f 6e 74 65 6e 74 20 2e 73 65 63 74 69 6f 6e 73 3d 22 24 7b 30 7d 22 20 2e 6e 61 6d 65 3d 22 24 7b 30 7d 22 20 40 73 63 72 6f 6c 6c 2d 74 6f 2d 69 74 65 6d 3d 22 24 7b 30 7d 22 3e 3c 2f 61 67 67 72 65 67 61 74 69 6f 6e 73 2d 74 61 62 6c 65 2d 6f 66 2d 63 6f 6e 74 65 6e 74 3e 20 3c 2f 64 69 76 3e 60 29 2c 65 5b 72 5d 2c 74 68 69 73 2e 68 65 61 64 Data Ascii: s.section?(0,o.html)(v\|\|(v=C` <div class="aggregations">${0}</div> <div id="table-of-content" style="top: ${0}px"> <aggregations-table-of-content .sections="${0}" .name="${0}" @scroll-to-item="${0}"></aggregations-table-of-content> </div>`),e[r],this.head
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 74 68 69 73 2e 73 65 63 74 69 6f 6e 3d 3d 3d 65 2c 61 2c 73 29 7d 29 29 29 7d 73 63 72 6f 6c 6c 54 6f 49 74 65 6d 28 65 29 7b 76 61 72 20 72 2c 74 2c 6f 3b 6c 65 74 20 73 3d 6e 75 6c 6c 3d 3d 3d 28 72 3d 74 68 69 73 2e 72 65 6e 64 65 72 52 6f 6f 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 60 5b 69 64 3d 27 24 7b 65 2e 64 65 74 61 69 6c 2e 73 65 63 74 69 6f 6e 7d 27 5d 60 29 3b 76 61 72 20 61 3b 6e 75 6c 6c 21 3d 3d 28 74 3d 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 26 26 74 2e 73 68 61 64 6f 77 52 6f 6f 74 26 26 65 2e 64 65 74 61 69 6c 2e 61 67 67 72 65 67 61 74 69 6f 6e 26 26 28 73 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 28 Data Ascii: this.section===e,a,s)})))}scrollToItem(e){var r,t,o;let s=null===(r=this.renderRoot)\|\|void 0===r?void 0:r.querySelector(`[id='${e.detail.section}']`);var a;null!==(t=s)&&void 0!==t&&t.shadowRoot&&e.detail.aggregation&&(s=null===(a=s)\|\|void 0===a\|\|null===(
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 64 2d 72 75 6c 65 22 2c 7b 64 65 74 61 69 6c 3a 7b 72 75 6c 65 54 79 70 65 3a 65 2e 64 65 74 61 69 6c 2e 72 75 6c 65 54 79 70 65 2c 72 75 6c 65 49 64 3a 65 2e 64 65 74 61 69 6c 2e 72 75 6c 65 49 64 7d 2c 63 6f 6d 70 6f 73 65 64 3a 21 30 2c 62 75 62 62 6c 65 73 3a 21 30 7d 29 29 7d 7d 3b 54 28 5b 28 30 2c 73 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 7d 29 5d 2c 4f 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 73 4c 6f 61 64 69 6e 67 22 2c 76 6f 69 64 20 30 29 2c 54 28 5b 28 30 2c 73 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 4f 62 6a 65 63 74 7d 29 5d 2c 4f 2e 70 72 6f 74 6f 74 79 70 65 2c 22 61 67 67 72 65 67 61 74 69 6f 6e 73 44 61 74 61 22 2c 76 6f 69 64 20 30 29 2c 54 28 5b 28 30 2c 73 2e 70 72 6f 70 65 72 74 79 29 28 7b Data Ascii: d-rule",{detail:{ruleType:e.detail.ruleType,ruleId:e.detail.ruleId},composed:!0,bubbles:!0}))}};T([(0,s.property)({type:Boolean})],O.prototype,"isLoading",void 0),T([(0,s.property)({type:Object})],O.prototype,"aggregationsData",void 0),T([(0,s.property)({
2024-11-21 02:42:24 UTC	1280	IN	Data Raw: 62 73 2d 79 65 6c 6c 6f 77 3a 20 23 66 63 65 39 36 37 3b 2d 2d 62 73 2d 67 72 65 65 6e 3a 20 23 33 39 61 63 34 63 3b 2d 2d 62 73 2d 74 65 61 6c 3a 20 23 32 30 63 39 39 37 3b 2d 2d 62 73 2d 63 79 61 6e 3a 20 23 32 38 37 62 62 35 3b 2d 2d 62 73 2d 62 6c 61 63 6b 3a 20 23 30 30 30 3b 2d 2d 62 73 2d 77 68 69 74 65 3a 20 23 66 66 66 3b 2d 2d 62 73 2d 67 72 61 79 3a 20 23 36 36 36 36 36 36 3b 2d 2d 62 73 2d 67 72 61 79 2d 64 61 72 6b 3a 20 23 33 33 33 33 33 33 3b 2d 2d 62 73 2d 67 72 61 79 2d 31 30 30 3a 20 23 66 39 66 39 66 39 3b 2d 2d 62 73 2d 67 72 61 79 2d 32 30 30 3a 20 23 66 32 66 32 66 32 3b 2d 2d 62 73 2d 67 72 61 79 2d 33 30 30 3a 20 23 65 36 65 36 65 36 3b 2d 2d 62 73 2d 67 72 61 79 2d 34 30 30 3a 20 23 63 63 63 63 63 63 3b 2d 2d 62 73 2d 67 72 61 79 Data Ascii: bs-yellow: #fce967;--bs-green: #39ac4c;--bs-teal: #20c997;--bs-cyan: #287bb5;--bs-black: #000;--bs-white: #fff;--bs-gray: #666666;--bs-gray-dark: #333333;--bs-gray-100: #f9f9f9;--bs-gray-200: #f2f2f2;--bs-gray-300: #e6e6e6;--bs-gray-400: #cccccc;--bs-gray

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49848	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:23 UTC	690	OUT	GET /gui/13420.2099364bebdd02277cf9.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:24 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: ef2b9339fa2e306739e253f878c832ca Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 17:54:42 GMT Expires: Wed, 19 Nov 2025 17:54:42 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 118062 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:24 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 31 0d 0a 5d 0d 0a 30 66 66 34 0d 0a 79 77 db 46 92 ff 7f 3e 05 8c cd 7a 81 31 08 53 b7 4c 99 56 14 d9 89 9d 91 8f 58 72 2e ad d6 81 c8 96 88 98 04 18 00 94 cd 48 fc ee fb ab aa 6e a0 01 42 87 93 9d 79 3b f3 66 de bc 58 6c 74 37 aa ab ab aa eb 6c b8 b3 5c 39 79 91 c5 83 c2 dd f1 72 35 3e 0b 3f aa d3 69 34 f8 b0 3f 9a 25 1f Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100001]0ff4ywF>z1SLVXr.HnBy;fXlt7l\9yr5>?i4?%
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: f4 ab ab 5a 47 59 11 fa ed 5f 5d dd e3 27 16 36 c1 0c b4 00 3c 95 31 d6 d2 18 ca 21 de 7f 10 9d aa 31 e0 23 6a 2f 34 e9 a9 3e f1 24 86 81 94 6a 6f 23 80 01 16 08 ff 22 8d 87 4e 97 66 de 2d 7a 4d 18 35 c1 3f 3c fe ef 07 9d 93 2f 1e 86 85 ca 0b 4f f9 bb ee fe 2c 2f d2 89 db 53 4b 64 c9 f0 08 19 19 88 84 0d 1a 10 c8 7a 0d 47 31 70 32 ca 10 5f 38 8a 72 af f0 77 27 61 4c 72 64 3f 9d 25 45 36 7f 15 4d 14 5a 7b ae 8c 77 65 93 d2 ac f8 6a 6e 5e a7 99 b4 b6 5e a1 8c 7e ff 68 d7 3d 44 67 e7 74 ee 68 f4 ba bd d6 8e 2f ab 8e 16 7f ba 3d 33 5c bf d8 da 88 fa eb 79 bf 20 0c 65 72 ab db ae fb 7d 0c ae a2 ed ec b9 f6 d4 37 74 b6 bb f5 64 bc 81 de 42 77 45 cd c7 fb 27 21 90 3e 88 0a ef 18 4c de 86 dc 0f 6a 8e fe 27 61 0e 6c 78 90 34 81 a2 03 56 76 2a ee b7 e2 3c c8 db da Data Ascii: ZGY_]'6<1!1#j/4>$jo#"Nf-zM5?</O,/SKdzG1p2_8rw'aLrd?%E6MZ{wejn^^~h=Dgth/=3\y er}7tdBwE'!>Lj'alx4Vv*<
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: df 8b 7a 37 db 5c 35 5d ed b6 c5 49 70 bc 04 9d f6 04 c9 96 1e 5a 2a 90 56 53 f4 82 48 4a b4 2e 84 27 94 d1 4f d1 c7 f0 5e e0 d2 08 39 7f e0 5c d3 58 b1 ac 38 1c 4a 4d af 87 06 45 c4 41 db cb 8c 87 46 7a 94 0e 8b 3c fe 5d c9 0b e4 41 5e 7f db 5b d6 ea 03 f2 ea 15 d0 27 f6 ed a3 eb 0b 90 e3 17 20 47 12 a4 b4 77 30 5e c8 23 25 e7 da 01 1e 1e d8 b4 3a 8e ce 8d 74 8a c6 f1 39 53 dc 59 67 00 4d 5a 65 10 47 71 9e 1a 89 50 92 10 86 3c 31 93 07 ad e6 3d 3c c3 c6 0f d0 fa 3c 2c d2 83 f4 a3 ca f6 a3 1c 26 19 8e e1 c1 78 06 d6 f4 54 fd 01 a6 31 2c ac b1 a0 19 5d f6 46 90 50 ee 0e ef da ad cc fa 1a 08 78 6d 23 80 39 be 22 77 83 8c 49 ce 27 0d 50 40 f2 ab 2e 5b 1b a7 de 3f 05 f3 56 6e ad 06 db 6a df 61 9c b3 ff 35 28 99 f8 40 7c cb ae e6 ba a3 8a 31 0f 2b 27 b3 79 fa Data Ascii: z7\5]IpZ*VSHJ.'O^9\X8JMEAFz<]A^[' Gw0^#%:t9SYgMZeGqP<1=<<,&xT1,]FPxm#9"wI'P@.[?Vnja5(@\|1+'y
2024-11-21 02:42:24 UTC	371	IN	Data Raw: 39 2e 7f 20 c7 c5 10 bb 33 63 69 23 d4 e0 be 4b 3e 24 70 85 ec a7 43 45 87 1a 9d 8c 43 b5 a0 74 a3 69 d1 f7 de ff 1f 64 aa 90 67 e3 28 2d a2 71 2d db c4 d2 cc cb ac 14 b8 a3 a3 49 8e fc 8b 9f bf 09 9f 3e fb 7a ef dd 81 ce 10 e1 70 35 e9 e3 e2 41 62 0d 4e 0c ad 81 24 1b b0 b5 52 4f 82 29 10 90 94 a4 12 d2 c4 d8 7c d5 9d 1b ad 17 71 1e e3 d8 d4 69 0b 8d 87 67 71 96 17 87 e4 c6 86 76 22 51 4a a4 c5 ac 70 d0 1b 56 38 42 f1 3c 73 bd db b3 64 38 4d e3 a4 20 3b bd 0a d6 eb 50 6d 63 2d c2 80 da 4c 24 0f 88 2c 51 9a 11 c7 e5 e9 09 85 da 62 84 28 29 9b 2c 53 51 9f 99 26 78 09 f7 44 b1 80 bf d9 5e b6 3d 31 3d 53 bb 2e ce 74 24 dd f4 dc 07 55 10 5f bf 66 d7 ce 80 42 fe 03 e5 43 d9 9e 21 28 43 ee e2 97 60 4c b2 ae b7 d2 5d 40 e4 0a 8e cf d8 e2 7f ce 61 7f 68 97 48 55 Data Ascii: 9. 3ci#K>$pCECtidg(-q-I>zp5AbN$RO)\|qigqv"QJpV8B<sd8M ;Pmc-L$,Qb(),SQ&xD^=1=S.t$U_fBC!(C`L]@ahHU
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 84 0d 0a 30 30 30 30 30 30 30 31 0d 0a d6 0d 0a 30 30 30 30 30 30 30 31 0d 0a 43 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 67 0d 0a 30 30 30 30 30 30 30 31 0d 0a cb 0d 0a 30 30 30 30 30 30 30 31 0d 0a 01 0d 0a 30 30 30 30 30 30 30 31 0d 0a d6 0d 0a 30 30 30 30 30 30 30 31 0d 0a b6 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5e 0d 0a 30 30 66 66 36 0d 0a 3f c8 ea c4 03 2b d2 69 1f 43 cf 1b 1d 85 c6 1a dd 11 c8 89 a1 69 fe ce 39 1b 42 32 1e bc 07 67 e1 8f 53 1c 0f b4 39 d5 9b b0 4c 68 09 c8 cf 81 3d f3 b4 41 ba 77 98 96 67 6b 0c 96 19 35 3a 6d 8a 2d e7 73 0d b5 d6 3a ed fe e2 98 6d 6b a3 fa c5 2f a0 57 7f d1 b6 38 b1 3f ca 23 dd 75 75 fc 8f 48 96 23 fe 01 d9 0b 88 85 69 52 02 6b 11 08 31 de 48 49 00 5f Data Ascii: 000000010000000100000001C00000001k00000001g0000000100000001000000010000000100000001^00ff6?+iCi9B2gS9Lh=Awgk5:m-s:mk/W8?#uuH#iRk1HI_
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 65 38 d4 15 47 51 86 2f 10 9d f0 d8 a0 37 69 92 be 44 a3 58 92 48 19 99 e8 cf 1c 41 91 a3 04 01 33 fd 8a 42 c7 e6 fa 28 f7 aa cd c8 12 c3 d5 73 ed e5 4f 01 be 7d 9a 64 46 2f cc e4 6d af cf 10 a6 32 81 3e 94 8b d5 27 03 82 af 9f 2a 35 53 a5 d5 54 3b 79 5f fc b8 e4 20 33 85 38 14 5b da 6d 26 a4 f4 2e 19 d2 1e 4a 74 28 15 5e 47 79 38 5b 3c de 8d ad a6 85 44 f4 70 f6 c8 59 d7 10 bc 96 87 4b 6b 58 75 05 44 1a b5 bf 82 f5 8d 1c 7c a9 b5 b1 cf d9 52 3a 33 a8 3f 30 1a 81 c1 6a fb cb 79 fd 9e ab 19 c9 05 c2 e9 bc 17 78 6f 87 aa 94 02 04 d8 10 a4 82 54 1f d0 f5 58 3b b8 88 ef ae a3 2b 2c 08 7e a1 02 24 ae c6 c3 1d 21 27 ce 4b 25 a2 51 a2 13 dd 0e 00 a3 a5 b9 41 00 a6 e7 d2 91 f0 f9 53 95 3b 50 29 a9 75 3b 0b 2c 4f ee 23 a1 00 21 98 05 47 54 10 63 2e e2 f1 df ef 8d Data Ascii: e8GQ/7iDXHA3B(sO}dF/m2>'*5ST;y_ 38[m&.Jt(^Gy8[<DpYKkXuD\|R:3?0jyxoTX;+,~$!'K%QAS;P)u;,O#!GTc.
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 93 03 3e f3 f2 52 18 5a b9 f8 02 e7 75 a2 aa 14 3f 62 e0 1a f1 a9 d5 b0 2a a3 5f 23 05 9a 6d db 01 61 51 ef 57 58 f3 57 86 7a 8d 78 b8 ab 88 22 d9 2f 14 ff d5 1c 62 97 94 8e bb 52 bd e4 94 83 74 65 18 51 f3 05 dd a4 61 e3 8c 4c 70 34 44 85 ee d4 a4 e9 da d9 b3 24 ca 98 91 2b 41 28 5a 06 3c ed 7f 50 12 6a 2d a5 21 0c 59 0b 2a 05 98 45 cd b5 36 8b a0 75 7b 29 9c 1a 60 95 72 5b 7d 82 ae 0e 31 cd f7 d4 98 7d 99 94 2a 3f 69 b9 e5 2b e2 04 4a 75 34 de 27 5b ba 6c 94 09 5e 40 49 2e 9b 48 61 ce a2 41 61 37 7e a9 cd 6a a3 38 b3 a7 b1 ac 1e 35 22 b4 06 4d db 79 5e 52 32 09 86 28 64 79 47 e1 0d ef 12 46 28 5f 33 24 68 bf e5 24 2e c9 db b8 08 da 8c 7e a1 ed da 7e 48 13 6f 46 45 f9 07 26 7a 4b 7a 43 e3 cc a9 cd 21 de 87 60 b5 1b cc c2 c1 48 5d 64 69 f2 14 f6 34 a1 a9 Data Ascii: >RZu?b_#maQWXWzx"/bRteQaLp4D$+A(Z<Pj-!YE6u{)`r[}1}*?i+Ju4'[l^@I.HaAa7~j85"My^R2(dyGF(_3$h$.~~HoFE&zKzC!`H]di4
2024-11-21 02:42:24 UTC	1	IN	Data Raw: 0a Data Ascii:
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 89 0d 0a 30 30 30 30 30 30 30 31 0d 0a 25 0d 0a 30 30 30 30 30 30 30 31 0d 0a 86 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 44 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7c 0d 0a 30 30 30 30 30 30 30 31 0d 0a cb 0d 0a 30 30 30 30 30 30 30 31 0d 0a c0 0d 0a 30 30 30 30 30 30 30 31 0d 0a ae 0d 0a 30 30 30 30 30 30 30 31 0d 0a c2 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1d 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a bd 0d 0a 30 30 30 30 30 30 30 31 0d 0a 37 0d 0a 30 30 30 30 63 39 63 0d 0a f0 dd 21 fd 8d b2 db d2 f1 05 35 49 0a 3c 5e 61 55 86 8f aa 33 bd ba b3 c1 94 d9 92 c4 43 82 56 59 b4 ac ed 19 ae 7a d7 d3 5b 45 ca 34 31 c3 8c 54 6f 5d Data Ascii: 0000000100000001%000000010000000100000001Z00000001D00000001\|000000010000000100000001000000010000000100000001000000010000000170000c9c!5I<^aU3CVYz[E41To]
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 0f 85 63 51 75 b4 0d d6 6b 50 a9 42 0e 19 eb 12 a1 40 b5 be 9f 2f 00 d4 56 f5 9c ca 5a 70 42 97 57 f1 11 de d3 46 b4 d9 d7 77 e8 15 10 aa 32 3f 88 ae 75 6a 2a 13 05 cc 74 6c 6b 27 2f f6 97 98 b4 30 00 93 d0 05 ae 41 8b ec 69 6c 20 10 28 17 96 42 97 c2 70 25 d7 da 91 5b 55 2e 29 a0 30 f1 1d a8 0a 0b 59 da 1f 73 87 95 5e f5 6d 9b 20 ae 5f bd 0f b4 a6 32 6f c4 00 f0 a7 56 55 ce c6 f8 8a 25 47 1a 33 cb d6 48 79 40 03 3f 57 57 1c 45 e0 40 6e 9d 2e 45 be 8d f9 db 6a 3a 4c 4c c6 82 16 90 e2 72 31 d0 b6 61 5e 12 bd 78 77 f9 32 4a da 23 62 38 6e b1 b7 c5 aa 96 96 ab 23 b5 9c a0 54 05 f9 b3 01 33 43 a6 d3 5d 9b 8f 4a 14 ec de 65 5d 25 60 d0 0f 98 4b c0 bd 36 68 56 e9 9d 80 e6 9b af cb a1 ec ae 1c 41 bb 6a 8f b2 aa ec ec 05 35 41 a5 f3 a3 9a 8f 04 90 ce 83 b0 e7 ca Data Ascii: cQukPB@/VZpBWFw2?uj*tlk'/0Ail (Bp%[U.)0Ys^m _2oVU%G3Hy@?WWE@n.Ej:LLr1a^xw2J#b8n#T3C]Je]%`K6hVAj5A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49849	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:23 UTC	511	OUT	GET /gui/33274.3b5af0d06c20ca4c42c4.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:24 UTC	348	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: c19438286d1b291c1dc2df4a7d72f3d2 Content-Encoding: gzip Server: Google Frontend Date: Wed, 20 Nov 2024 23:59:46 GMT Expires: Thu, 20 Nov 2025 23:59:46 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 9758 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:24 UTC	1060	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ac 0d 0a 30 30 30 30 66 66 35 0d 0a 5c 6b 9b 9b 46 b2 fe be bf 82 b0 89 57 ca 02 03 48 20 c1 58 de b5 c7 76 ec c4 76 12 df b2 bb 39 7e 12 84 5a 12 19 04 0a a0 d1 8c c7 f3 df cf 5b d5 0d 42 33 42 f6 d9 e7 d8 71 54 54 57 57 57 57 df aa ab ab 5b df 94 42 2b ab 22 89 2b fd b4 57 8a 74 6e 6d c5 74 1d c5 e7 67 cb 4d 76 7e 51 fd b6 49 7e 5b 45 49 36 Data Ascii: 00000001000000010000000100000001000000010000000100000001000000010000000100000001000000010000ff5\kFWH Xvv9~Z[B3BqTTWWWW[B+"+WtnmtgMv~QI~[EI6
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 3f db 85 4b a9 50 f4 1b 29 fd 73 54 76 8f b8 df 37 f6 99 8b 92 d8 53 2f fa 6a 32 e9 15 93 36 67 51 22 e9 22 4f 66 9a 8d c4 e2 de bd 42 35 27 b5 5d 9b 70 4f 04 d5 23 7b e2 36 af 4f 9f 24 2f 74 57 f1 e9 93 b0 d0 4d 9e 44 f1 b2 d7 c3 08 60 6e b7 e4 ce fb f8 73 53 a0 05 d1 42 7b 3a 5c 56 ab b4 df 9b 7d fa d4 9b 4d 56 bf 6b 5f 5f db 37 bf ef 37 5b 23 d1 3f 58 e9 32 c3 14 19 a6 c8 70 7f 96 5c 68 dc 43 26 fa 12 cd 15 9f 6b 09 f5 0a b3 c8 b7 fa 03 66 a7 dd 3f 01 d1 03 70 55 fd ed 5c 5c 95 87 eb dc b7 56 d1 ba 87 5a 18 05 e6 8b 56 71 cf 51 dc f3 5b c5 a1 47 69 45 be 41 95 66 66 9c 14 71 2a b4 99 99 64 29 fa b2 89 21 78 a9 45 69 b2 c8 cc 55 32 9b 21 69 ba 30 a7 f9 ec 8a 25 ba 23 18 4a aa 2c ae c5 cb 68 dd ef 5d ef ba 67 f8 d5 57 ac cf 1d c6 d0 d7 a6 a3 d7 78 d5 af Data Ascii: ?KP)sTv7S/j26gQ""OfB5']pO#{6O$/tWMD`nsSB{:\V}MVk__77[#?X2p\hC&kf?pU\\VZVqQ[GiEAffq*d)!xEiU2!i0%#J,h]gWx
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 8c 0d 39 55 f7 27 c6 a3 3f a1 bb 11 e8 b9 a3 00 e4 7f 12 ec e3 0f 48 be 23 18 1d 26 40 4d be 27 18 7b d5 00 f4 3f 13 0c 2e 63 d0 fc 42 f0 c0 f5 a9 55 fe 45 b0 6b 8f 51 d2 bf 99 04 33 0d d0 ff 61 12 07 db 7f f4 bb 02 24 a3 00 83 00 fd 8e 60 6c 70 a9 e6 30 a2 c0 c6 67 29 33 a6 19 0e a9 4f c5 04 fb e8 5e a8 6d 45 b0 33 0e c6 e0 59 12 8c 1d 2d 75 9e 84 60 6c ce b9 df 11 ec c1 2f 00 7c ca b0 67 7b c8 3b 23 78 e0 61 3f 8c 4e 48 b0 ef 7b 34 5b 3d 27 18 8e 17 ea 9c 6b a6 a7 f1 b7 64 0a 6f 4c d2 af 98 62 84 86 43 17 24 18 6e 17 1a 6d 1b a6 b1 31 62 d1 05 99 c6 81 cb 03 5d 90 e0 21 36 eb c0 6f 09 c6 30 47 41 57 04 8e 02 0c 65 f4 40 82 5d cc 03 68 b6 73 49 02 57 0e 7a 20 c1 63 0f 4a 46 0f 54 34 1e 68 de 10 3c 82 83 c0 ae 97 a1 17 c5 e4 5a c7 22 05 fb fb 52 0f 33 6b Data Ascii: 9U'?H#&@M'{?.cBUEkQ3a$`lp0g)3O^mE3Y-u`l/\|g{;#xa?NH{4[='kdoLbC$nm1b]!6o0GAWe@]hsIWz cJFT4h<Z"R3k
2024-11-21 02:42:24 UTC	363	IN	Data Raw: ea 43 25 55 15 86 68 19 fe 87 52 24 2c 13 60 91 89 30 87 db 8b 00 89 4a 16 ab 28 2c 80 22 40 a1 78 54 85 82 90 0c b6 d1 d2 de f8 a5 96 e5 4d 3d 04 61 85 30 99 5e 42 7f a6 63 06 30 5d c1 00 1f 4e 20 f3 93 86 33 89 52 94 55 54 d0 82 9e d2 44 5d 22 05 df 4f f9 53 66 c0 67 58 49 b4 ca b0 99 2a 03 20 01 7a 33 05 71 ad e9 cd 74 96 14 50 48 5e 5c 99 d2 f0 55 c6 5e c4 94 4d 22 7c 71 f9 b6 65 f7 95 db 68 6d 2e f3 22 f9 a8 87 29 48 f1 f9 8c be b8 c0 2a 59 09 5a 47 c2 59 61 d5 70 93 80 b1 16 4e 25 1e a0 14 90 88 5a 03 68 2d 93 f7 46 10 93 84 cf 55 8a e4 56 60 05 0f 97 40 11 20 51 db a4 c2 42 11 ae 80 94 a0 2c 60 83 45 20 ad 4d 87 45 81 d3 1e fa de d9 0e 2a 5d da 0e 9b 3a 7d 67 3c 6c d6 34 69 37 13 e2 05 28 18 d3 9a 12 25 22 9c d7 49 aa e0 22 35 69 ed e2 2e a7 87 5b Data Ascii: C%UhR$,`0J(,"@xTM=a0^Bc0]N 3RUTD]"OSfgXI* z3qtPH^\U^M"\|qehm.")HYZGYapN%Zh-FUV`@ QB,`E ME]:}g<l4i7(%"I"5i.[
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 10 0d 0a 30 30 30 30 30 30 30 31 0d 0a 20 0d 0a 30 30 30 30 30 30 30 31 0d 0a 99 0d 0a 30 30 30 30 30 30 30 31 0d 0a d1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 76 0d 0a 30 30 30 30 30 30 30 31 0d 0a 86 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 26 0d 0a 30 30 30 30 30 30 30 31 0d 0a b8 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8a 0d 0a 30 30 30 30 31 0d 0a 28 0d 0a 30 66 66 33 0d 0a 7c 53 58 f4 2b 73 f0 72 a9 fa 9a da 9a a8 35 94 fb 58 b3 3d 81 51 9d 49 b5 95 e1 19 99 d8 f5 17 b3 49 66 65 98 51 69 3c 7a 6e 6e 70 6e 0c 3f 5f b7 d3 b0 d9 ef 49 bf 66 6b 03 d8 72 20 4a df ce 8d c1 2e c1 4e 5e f5 06 4e 71 aa 3f 0f f0 61 7f 62 27 9f Data Ascii: 0000000100000001 00000001000000010000000100000001v0000000100000001O00000001&00000001000000010000000100001(0ff3\|SX+sr5X=QIIfeQi<znnpn?_Ifkr J.N^Nq?ab'
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: bf c3 76 8e 62 5b 8e 70 dd db 74 d7 87 26 07 a4 e3 b8 98 4e 3e f5 e1 4a b7 68 22 bb 10 29 0e 39 e4 14 e3 53 64 4d 37 b7 dd b1 4c 37 43 58 1e 2f 77 74 b0 3d 28 28 a7 9b 65 7d 86 a3 1a a3 39 d3 39 50 d5 21 85 f4 1c e1 a4 8e 7e 1a 4e ea fb 00 27 0e 08 ea e6 74 f7 9c a8 e6 79 37 e5 00 77 0e 31 ea e4 be 7f c0 c4 8c ff 5b a3 eb 0b 2c ab ff 4f 17 16 ad fa b4 48 7b 16 ae b3 58 e3 f7 9e e5 c4 b6 49 9e 28 db 1a 9a 0e fe 3f 36 9d a5 17 db 96 67 d8 f4 85 7f 80 c8 41 85 15 7d c4 6e 28 f0 a8 2d 00 f8 e1 d6 35 4b 38 bc 70 2b c8 b6 06 cf 1c 27 06 cb 81 41 8c 3d fc 73 d5 af 57 2a 98 98 12 6e e9 5b 23 14 85 42 0c c7 f2 81 81 db 0c bf 8e 15 bc 07 0f ca 0e 26 32 7b 9d 05 2c 48 1e 97 be e9 5f e3 9e 83 11 e9 5b c3 33 12 80 5c 67 e0 14 90 1d c2 9f b5 64 1f 8f ca 0f 3f 1d ae f5 Data Ascii: vb[pt&N>Jh")9SdM7L7CX/wt=((e}99P!~N'ty7w1[,OH{XI(?6gA}n(-5K8p+'A=sW*n[#B&2{,H_[3\gd?
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 71 5b 88 32 e2 25 1a fc 69 e1 f1 2a 0c 65 0f e8 6f 0b 8d 90 2d 42 bb f4 b7 85 46 bd 80 16 3e fd 6d a1 87 8c 8e f9 4f 0b ed 31 7a 3a a0 bf 2d b4 cf e8 3b 12 8e 18 3d 9c d1 df 16 35 1d 5b 1c 90 1b 17 f5 80 76 22 fa 2b a9 71 1b 05 41 09 54 f9 76 23 97 9b 38 46 d0 0f b1 68 69 9b 23 fb a9 41 47 d3 ba 22 75 28 e3 7e fb cd a8 4d 0b e4 6e b7 b4 2a c9 2c 16 d3 10 d1 61 86 86 17 7c 34 d7 19 4b 39 54 89 32 15 6f d1 68 0e 5e a5 d1 46 4a 5f 1c 19 c9 19 6d a4 e0 19 1d 0d 46 8f cc a8 24 90 19 71 7f 15 e9 08 41 d3 54 aa 94 44 95 89 e7 8e b4 81 8f 7f 75 af 95 75 e7 a7 18 4c 3c 5d 82 9b ef 09 d5 d9 f6 dd e9 48 b5 6b 89 d7 5e e8 d2 d8 d5 1d 2a ba 03 ec d6 54 52 5f 77 69 b0 a9 76 9b 81 83 8b 13 74 80 bb 57 94 3d c4 85 cf fd 9a dc a6 c1 85 50 0c 21 49 a3 ea 73 9b c4 9f e1 85 Data Ascii: q[2%ieo-BF>mO1z:-;=5[v"+qATv#8Fhi#AG"u(~Mn,a\|4K9T2oh^FJ_mF$qATDuuL<]Hk^*TR_wivtW=P!Is
2024-11-21 02:42:24 UTC	33	IN	Data Raw: a7 f2 40 0a 4d 3d 78 36 ea 40 0a 4f c6 d8 a2 1f 4a e2 34 d8 5a 6b 8c 1a 3c 59 32 c7 dd 3e 51 0d 0a Data Ascii: @M=x6@OJ4Zk<Y2>Q
2024-11-21 02:42:24 UTC	654	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 6a 0d 0a 30 30 30 30 30 30 30 31 0d 0a b8 0d 0a 30 30 30 30 30 30 30 31 0d 0a 22 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0c 0d 0a 30 30 30 30 30 30 30 31 0d 0a af 0d 0a 30 30 30 30 30 30 30 31 0d 0a 43 0d 0a 30 30 30 30 30 30 30 31 0d 0a 89 0d 0a 30 30 31 0d 0a 38 0d 0a 32 32 34 0d 0a 5a b4 27 3d 80 b6 16 e5 b5 fd cd f5 2e 90 d7 ac 5f eb 33 2f d9 8c bb 69 67 57 e1 56 88 c2 a5 21 79 5d e5 d7 bc 3c d1 20 c7 60 a3 93 42 7a 89 06 a6 67 ff 60 36 84 0a 6f a9 b4 5d a6 92 ee ab e1 79 b8 1b 0f e8 7a 4e 73 4e 77 04 3c c2 da 22 f0 9b 76 4b 0e 18 35 f1 4e c0 f6 ba 9d d3 b2 9d bd 82 db c4 5b 5c 0e be 86 9b e3 9b a6 cf ad a2 f2 bc a9 6e 08 8f 94 fd 8d 66 7f 73 7a 18 7d 73 63 c9 17 25 af 67 09 5e cd 83 77 85 5e 75 3c a5 ff e1 ee 24 5d 80 25 43 Data Ascii: 00000001j0000000100000001"000000010000000100000001C000000010018224Z'=._3/igWV!y]< `Bzg`6o]yzNsNw<"vK5N[\nfsz}sc%g^w^u<$]%C
2024-11-21 02:42:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49851	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:23 UTC	690	OUT	GET /gui/30192.c1eb6d619c8f6b7d4a0f.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:24 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 427f20d14b5c0761b6c6afb35eac73a9 Content-Encoding: gzip Server: Google Frontend Date: Wed, 20 Nov 2024 12:53:21 GMT Expires: Thu, 20 Nov 2025 12:53:21 GMT Cache-Control: public, max-age=31536000 ETag: "tA1SvQ" Content-Type: text/javascript Age: 49743 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:24 UTC	1059	IN	Data Raw: 30 30 30 31 30 30 30 0d 0a 1f 8b 08 00 00 00 00 00 02 ff ec 7d eb 76 db 46 b2 ee ff f3 14 30 26 e3 4d ce 80 34 49 89 ba 50 a1 15 47 76 66 3c b1 93 8c e5 64 d6 1a 6f 2f 05 24 41 11 31 08 70 00 50 b2 22 73 ad f3 1a e7 f5 ce 93 9c af aa 2f 28 5c a8 4b 62 e7 cc de 3b 71 12 4b e8 7b 75 75 75 dd db 5d 67 81 93 e5 69 38 cd dd a3 56 16 44 f3 ee 65 30 59 f9 d3 77 27 8b 75 fc ee 22 3f 5b 87 67 4b 3f 8c c7 37 94 7d f8 f0 e6 6d bb bb 5a 67 8b d6 9b 37 3b bd fe e1 c0 db e9 ed f5 7b de 61 7f 77 b8 eb 0d 87 fb 87 83 b7 de f5 ce c1 fe ee ee a8 95 7b 81 17 b6 c7 8f af 2f fc d4 c9 c6 61 6b a7 df 3b 38 68 7b 3e 7e dc 3d d8 ef ed b6 bd 04 3f f6 f7 f6 76 87 6d 2f a5 0a 7b bb 7b a8 10 e1 c7 bd c1 c1 ce a0 ed c5 f8 f1 60 38 e8 f5 da de 8c ea 0e 77 06 3b 6d 6f 8a 1f 0f f7 0e 86 Data Ascii: 0001000}vF0&M4IPGvf<do/$A1pP"s/(\Kb;qK{uuu]gi8VDe0Yw'u"?[gK?7}mZg7;{aw{/ak;8h{>~=?vm/{{`8w;mo
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 18 1f e3 2a 5b a5 c1 0c 0c 71 30 3b 93 a3 81 d8 7f 67 0a 5e d5 d7 ad af e0 07 f5 29 fd f2 65 7f f8 f0 20 e8 6e 99 4d 01 fa 93 24 02 17 02 66 40 71 3e 18 8e 58 8f a2 1c 45 86 3f c0 45 dc cd 93 17 c9 65 90 9e f8 59 d0 6a 17 97 a9 1b 25 97 6e fb d8 cd c1 ef 74 c2 78 9e b8 a3 ed 75 97 00 d0 7a 69 ab e3 82 8e b1 21 37 b5 58 84 e7 0b 5b 7f 91 c4 c1 d5 4d b5 c1 b1 e6 e1 d4 8f 6c 8b 99 1f 9f 07 a9 3b 52 d3 9b 24 b3 ab 0e ce 4c 1e fa 29 fa 69 fa b8 09 de af a2 24 cc 9f 5c 80 df f2 27 61 14 e6 57 16 50 c4 9b 06 9a 51 0c c7 35 e6 e1 97 6f 58 81 a7 7a f8 33 5f 8c 6f 76 21 04 e7 1b 6e dd 87 d5 7a 12 85 d3 e8 ca d1 4d a3 c0 05 a6 6f af 0f a6 e3 22 24 50 99 cd b3 bb 01 96 4b 4f 83 ef a9 d3 1c 94 fe ff 03 0c 78 f0 b3 8c 46 b7 10 38 de be 9e cb 70 86 15 6b 44 34 fb be bd Data Ascii: *[q0;g^)e nM$f@q>XE?EeYj%ntxuzi!7X[Ml;R$L)i$\'aWPQ5oXz3_ov!nzMo"$PKOxF8pkD4
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 0f dc ef b8 f1 68 ca a3 59 f7 3c 4a 26 a4 3b 7f 47 bf 6f 08 1a 17 eb 28 0e 52 2d fb b9 7a 99 d3 30 9d 46 c1 8b 64 ca f5 de be f5 5a 0a 44 c5 8d 40 ed 71 36 ee 7f 0c a6 0d 88 32 35 38 30 fd 6d 8e 41 6d 77 16 0d 93 5a 14 d8 bb 18 2f b6 60 ef c2 cc 7c d1 25 fe 80 ce 47 d4 65 12 fc d2 5f b5 5b d7 4d 42 f7 48 69 3f 4a 64 73 62 26 20 28 e1 a4 20 9b 93 f1 44 4e a0 5c 69 02 03 93 b2 5e 11 91 f4 d4 90 86 f4 bb 23 3e 30 30 aa d4 8d 26 9e 8b 1b 28 e8 60 ba cb 95 3b 7a b0 bd 22 28 07 81 ac 34 e3 65 c3 8c 97 c5 8c 97 e3 e5 96 19 a3 d2 52 ce f8 78 dd bd 3c ec a6 c1 12 f7 db 4b 3f 7d 37 4b 2e e3 af d8 24 a3 34 66 6c 73 11 7d c9 b6 ed 11 18 5d 47 2c 1f 1a ff 32 42 e3 b0 d4 89 d5 95 99 bb 38 8c e0 5b 0c b1 ba 1a 5f 89 f1 a4 34 76 65 b6 fb aa 4a ac da c7 82 30 fd 20 cf 94 Data Ascii: hY<J&;Go(R-z0FdZD@q62580mAmwZ/`\|%Ge_[MBHi?Jdsb& ( DN\i^#>00&(`;z"(4eRx<K?}7K.$4fls}]G,2B8[_4veJ0
2024-11-21 02:42:24 UTC	232	IN	Data Raw: 6a bd 92 34 31 92 dc ec 25 2a 77 e8 39 76 e8 39 ef 10 6c f6 da 9f 14 07 b9 be 4f c6 ed 14 bc 84 a9 47 60 b6 bf 14 7b 57 7c 2b 75 44 74 b9 06 f1 8f 21 7d 28 3d 32 7c a7 8a 81 61 7d 0f 82 1b a0 52 f3 15 95 20 f9 0e 20 f9 8e 0e 8e a2 af 59 69 15 06 e7 2c 38 74 57 80 85 ae 5e 00 a2 a9 7d 23 14 ac 70 24 f6 fb be 0a 7f 0b 05 3d ea d9 22 04 96 a4 d3 c5 55 03 1c 1a 5d 49 25 0c 9e 01 06 cf 08 06 cb c2 e9 b4 11 0e a2 27 80 40 d4 2e c0 20 3e 96 ba 68 04 c5 c7 90 89 c4 80 0d 6b 37 aa b1 ba 0b aa 04 c0 0f 00 c0 0f 7c 2e 56 e1 45 92 fb f0 1f ef 18 fd 17 ee b6 42 ec 6a 46 8f 62 10 d2 ba c0 d1 15 c0 51 b7 36 f8 74 ed 17 f0 7c a6 61 e4 08 bd 90 a1 81 f4 0d 5e 9a b6 06 94 ce 2f c1 df 3f 27 f2 f6 7a 0d 0a Data Ascii: j41%*w9v9lOG`{W\|+uDt!}(=2\|a}R Yi,8tW^}#p$="U]I%'@. >hk7\|.VEBjFbQ6t\|a^/?'z
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a e1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 83 0d 0a 30 30 30 30 30 30 30 31 0d 0a dd 0d 0a 30 30 30 30 30 30 30 31 0d 0a 27 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4e 0d 0a 30 30 30 30 30 30 30 31 0d 0a d3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 03 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8c 0d 0a 30 30 30 30 30 30 30 31 0d 0a e7 0d 0a 30 30 30 30 30 30 30 31 0d 0a f7 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 66 0d 0a 30 30 30 30 30 30 30 31 0d 0a 23 0d 0a 30 30 30 30 30 30 30 31 0d 0a e8 0d 0a 30 30 30 30 66 66 31 0d 0a ad 9c 28 b0 30 32 54 27 02 07 5d 3f be 96 ab 17 4d e2 82 9a d5 b9 fa ed f5 72 36 40 9d f1 3d 59 32 91 c7 66 0a 31 73 e7 f5 49 cc 8c 68 21 3a 9f 15 93 98 Data Ascii: 00000001000000010000000100000001'0000000100000001N00000001000000010000000100000001000000010000000100000001f00000001#000000010000ff1(02T']?Mr6@=Y2f1sIh!:
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: e1 39 3f 84 c1 e5 13 64 44 31 39 35 10 98 94 5f bd e6 88 03 9d 85 83 bf 9c ae 27 fa 63 11 a4 a3 ac 83 38 c7 99 0e cf 89 40 31 a3 f1 b4 1c 9e 23 98 ba 1d c3 77 70 18 0d f1 a4 2a 66 46 b0 21 e6 8a 14 b3 3d ce 8c 2d 94 2c 5a 66 2c e8 e9 5a 31 c6 d2 46 35 11 dc c1 f3 ed 20 b8 03 d1 0e dd 10 ac bb d5 42 12 f1 b6 bf 90 b9 af f8 1d 2a 48 65 64 6b ee 88 34 8e 4c ff b8 f3 82 21 b3 d0 12 a5 1a 54 86 60 16 30 a6 cb c5 4c 1f 1a b9 d6 8c a6 6f 6d f2 34 19 63 13 96 f6 79 b7 62 91 2f c5 92 3c 76 68 ff 1c c8 4d 8e bd 77 d8 40 cf 5e da 3c 63 78 be ac fc 7c ba 78 46 21 5a ad 18 b5 4f 14 69 e0 df dd 0b b4 ef a0 bd eb 5d 4f d6 13 e8 89 b3 d1 83 9e 47 22 4c 02 41 88 7f f6 e1 76 01 73 57 14 e0 b7 0d 22 74 d4 5a c5 0e 81 ee 43 d6 df 20 1e a0 20 fb 59 57 90 fd 84 c8 3e 32 d3 ac Data Ascii: 9?dD195_'c8@1#wpfF!=-,Zf,Z1F5 BHedk4L!T`0Lom4cyb/<vhMw@^<cx\|xF!ZOi]OG"LAvsW"tZC YW>2
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: c3 20 ee b6 3c 4c 15 cd c4 70 22 d4 f6 96 e1 96 c7 4b 0c f7 16 be 6a f0 12 a7 0c 4e 26 9d ee e3 1e c4 4b cd d7 9e 3f 7c f8 60 be b9 0c a3 e8 fb 15 b1 22 96 71 b7 89 76 8c f7 13 5c 9a be 81 37 8b e2 bf c1 ea aa 5f 0d 6e 07 fc 3b b9 23 21 32 27 ff 1e c1 0f 12 a1 c1 99 23 17 1d 02 5c 9e b0 9e bf 7d 44 5c 68 41 f2 66 9e 25 77 47 79 17 ba 64 4a 19 b1 5c ae 81 fa 94 76 4d fb d8 c1 85 42 df d6 4d 85 58 47 08 51 d3 cc 47 93 8c a6 9a 72 62 08 fa 54 e4 a2 05 90 e8 a1 61 7b 9f 85 7e 9c 5b 14 b6 e3 d6 4a 2a 83 6a 3a 53 ab 26 47 f4 3f 7c f0 99 4c 34 8d d8 b0 56 db 59 51 56 19 55 13 a9 86 8a 72 5c f8 a0 2a f2 24 c6 45 52 96 80 d2 3a 04 d9 0b e4 dc b1 cb 2c 7f ae 8c a6 4d 2b e5 3a 72 20 c4 1a 21 e3 16 28 b0 18 08 c2 16 c2 f2 94 f7 64 69 a8 6a 41 65 30 4d 31 ab b5 e4 70 Data Ascii: <Lp"KjN&K?\|`"qv\7_n;#!2'#\}D\hAf%wGydJ\vMBMXGQGrbTa{~[Jj:S&G?\|L4VYQVUr\$ER:,M+:r !(dijAe0M1p
2024-11-21 02:42:24 UTC	63	IN	Data Raw: 8f bc 41 ae 7b 1d 07 24 98 b1 0a c3 1f 5a 3f b4 c0 87 df 84 ff 94 61 46 ab 17 01 77 54 be 56 8a 89 3e f9 3a 5a b6 5f 9b f2 b6 2c 4a 8a 01 e0 ca 94 39 8f 36 a2 45 21 90 37 8e 6e 4f 2e 0d 0a Data Ascii: A{$Z?aFwTV>:Z_,J96E!7nO.
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 65 0d 0a 30 30 30 30 30 30 30 31 0d 0a e7 0d 0a 30 30 30 30 30 30 30 31 0d 0a 67 0d 0a 30 30 31 0d 0a 71 0d 0a 30 66 66 63 0d 0a 14 51 6a 69 80 b7 f1 90 91 9f be f0 af 88 c3 b5 5e b0 86 71 31 a4 bb 4e b0 55 5a 39 6c b9 08 38 6c 74 c3 35 e1 47 04 67 45 b5 c8 c4 51 32 69 08 0c 63 4a 65 2d 1a 32 cb e9 93 22 35 77 d6 2a 25 37 7d 11 9c fb d3 2b cd 63 49 85 82 e5 bf b6 d7 b8 d6 ce 46 85 d7 ac ca d7 86 4b 92 d1 90 fe 57 fd cf f8 e9 aa 64 69 27 75 f2 4b 0f 16 90 92 49 57 b0 e2 14 1c cf e8 b3 39 ad 62 aa 9e 25 f8 5a cb ea 7c 45 8f ed c1 71 01 ae 1c a6 be 2e 72 ef d8 bb f1 a8 28 fa b6 fa 4c d1 69 f1 ed e6 6e 9b 4c 3e e8 d9 4a 29 62 31 e5 09 4a 9a 54 06 4c 03 57 6c f0 ae bc d9 f5 4d 52 f9 c6 ee c5 2e d8 43 60 65 d8 aa 3a e7 06 e5 8d 26 Data Ascii: 00000001e0000000100000001g001q0ffcQji^q1NUZ9l8lt5GgEQ2icJe-2"5w*%7}+cIFKWdi'uKIW9b%Z\|Eq.r(LinL>J)b1JTLWlMR.C`e:&
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 91 45 1a ea 98 5a 0d 7b c5 18 0b 9c d5 26 c9 eb 1d 5e 53 2a de 07 5a 4f 73 27 19 23 43 63 03 98 d9 82 72 7e 53 fd ec 4a 97 52 be b5 38 dd 82 92 d1 8f 4c 7f b7 4d 40 d4 2b f7 dc 65 47 e6 2d d3 55 61 c9 a4 66 f9 76 45 7a 2e 1b bd a0 ed b7 53 6f 5d d7 07 c0 2f 16 57 ee a4 64 10 d8 a6 41 d4 cf e6 56 75 88 2a 3b 06 5e 02 87 9d ad 78 92 56 7e ed 64 08 da 19 39 83 de ea 3d a5 0b be 38 7f 0d 5b 2c f9 56 14 b6 6a 59 bd a2 63 64 4d 52 dd e6 66 d4 11 a4 8e 44 8b fa c3 a4 b4 0c 3c d4 8b c7 75 85 82 a3 fa 9e ab 0c 53 d5 cf 58 d4 32 e0 e9 05 df f0 3a b0 b0 a6 f0 6c ab ca 53 28 4d 97 c0 d4 c7 8e 8a 2b 99 99 84 ff 79 88 77 02 fc f3 c4 41 74 c7 7b fa a5 0a 10 53 c1 aa 2e 74 3f 66 b9 52 17 3b f1 67 e7 c5 23 05 2b 44 b1 38 93 f3 ea 1b 06 3c 3d f3 ae 01 76 01 8a 5a 68 14 09 Data Ascii: EZ{&^SZOs'#Ccr~SJR8LM@+eG-UafvEz.So]/WdAVu;^xV~d9=8[,VjYcdMRfD<uSX2:lS(M+ywAt{S.t?fR;g#+D8<=vZh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49852	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:23 UTC	511	OUT	GET /gui/27197.598dbd3bfe6cc1efe979.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:24 UTC	320	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 2c1349a72a1c38b96742b55068e08fe7 Server: Google Frontend Date: Tue, 19 Nov 2024 23:27:28 GMT Expires: Wed, 19 Nov 2025 23:27:28 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Content-Length: 17630 Age: 98096 Connection: close
2024-11-21 02:42:24 UTC	1088	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 37 31 39 37 5d 2c 7b 32 37 31 39 37 3a 28 6f 2c 72 2c 65 29 3d 3e 7b 65 28 39 38 39 31 29 3b 76 61 72 20 74 3d 65 28 34 38 37 30 34 29 2c 73 3d 65 28 31 36 36 34 35 29 2c 62 3d 65 28 36 32 38 33 32 29 2c 6e 3d 65 28 31 35 33 32 33 29 2c 69 3d 65 28 39 34 31 37 29 2c 61 3d 65 28 34 35 32 34 31 29 2c 64 3d 65 28 37 31 30 31 32 29 2c 63 3d 28 65 28 34 32 33 32 30 29 2c 65 28 39 32 31 30 33 29 29 3b 6c 65 74 20 6c 2c 70 2c 67 2c 68 2c 75 2c 6d 3d 6f 3d 3e 6f 3b 76 61 72 20 76 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 6f Data Ascii: "use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[27197],{27197:(o,r,e)=>{e(9891);var t=e(48704),s=e(16645),b=e(62832),n=e(15323),i=e(9417),a=e(45241),d=e(71012),c=(e(42320),e(92103));let l,p,g,h,u,m=o=>o;var v,f=function(o
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 3d 72 3b 69 66 28 72 26 26 74 68 69 73 2e 73 75 62 73 63 72 69 62 65 46 6e 29 7b 69 66 28 74 68 69 73 2e 6e 6f 43 68 6f 69 63 65 29 65 3d 72 3b 65 6c 73 65 20 69 66 28 65 3d 3d 3d 74 68 69 73 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 43 68 6f 69 63 65 29 72 65 74 75 72 6e 3b 74 68 69 73 2e 73 75 62 73 63 72 69 62 65 46 6e 28 65 29 2e 63 61 74 63 68 28 28 6f 3d 3e 7b 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 50 6c 65 61 73 65 20 72 65 70 6f 72 74 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 65 72 72 6f 72 20 6d 65 73 73 61 67 65 20 74 6f 20 63 6f 6e 74 61 63 74 40 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 22 29 2c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 46 61 69 6c 65 64 20 73 61 76 69 6e 67 20 73 75 62 73 63 72 69 70 74 69 6f 6e 20 70 72 65 66 65 72 65 6e Data Ascii: =r;if(r&&this.subscribeFn){if(this.noChoice)e=r;else if(e===this.subscriptionChoice)return;this.subscribeFn(e).catch((o=>{console.error("Please report the following error message to contact@virustotal.com"),console.log("Failed saving subscription preferen
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 22 2c 74 68 69 73 2e 64 69 73 61 62 6c 65 64 2c 28 30 2c 62 2e 63 6c 61 73 73 4d 61 70 29 28 7b 22 74 65 78 74 2d 70 72 69 6d 61 72 79 22 3a 74 68 69 73 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 43 68 6f 69 63 65 7d 29 2c 28 30 2c 62 2e 63 6c 61 73 73 4d 61 70 29 28 7b 22 66 73 2d 35 22 3a 74 68 69 73 2e 73 6d 61 6c 6c 49 63 6f 6e 2c 22 66 73 2d 34 22 3a 21 74 68 69 73 2e 73 6d 61 6c 6c 49 63 6f 6e 7d 29 2c 74 68 69 73 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 43 68 6f 69 63 65 3f 6e 2e 62 65 6c 6c 46 69 6c 6c 65 64 49 63 6f 6e 3a 6e 2e 62 65 6c 6c 49 63 6f 6e 2c 28 30 2c 62 2e 63 6c 61 73 73 4d 61 70 29 28 7b 22 65 6e 64 2d 30 22 3a 74 68 69 73 2e 6f 70 65 6e 69 6e 67 44 69 72 65 63 74 69 6f 6e 3d 3d 3d 76 2e 4c 65 66 74 2c 22 73 74 61 72 74 2d 30 22 3a 74 68 Data Ascii: ",this.disabled,(0,b.classMap)({"text-primary":this.subscriptionChoice}),(0,b.classMap)({"fs-5":this.smallIcon,"fs-4":!this.smallIcon}),this.subscriptionChoice?n.bellFilledIcon:n.bellIcon,(0,b.classMap)({"end-0":this.openingDirection===v.Left,"start-0":th
2024-11-21 02:42:24 UTC	192	IN	Data Raw: 6f 6f 6c 65 61 6e 7d 29 5d 2c 77 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 73 53 61 76 69 6e 67 22 2c 76 6f 69 64 20 30 29 2c 66 28 5b 28 30 2c 73 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 7d 29 5d 2c 77 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6e 6f 43 68 6f 69 63 65 22 2c 76 6f 69 64 20 30 29 2c 77 3d 66 28 5b 28 30 2c 73 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 29 28 22 76 74 2d 75 69 2d 73 75 62 73 63 72 69 62 65 2d 62 75 74 74 6f 6e 22 29 5d 2c 77 29 7d 2c 39 32 31 30 33 3a 28 6f 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 74 3d 65 28 38 39 35 34 37 Data Ascii: oolean})],w.prototype,"isSaving",void 0),f([(0,s.property)({type:Boolean})],w.prototype,"noChoice",void 0),w=f([(0,s.customElement)("vt-ui-subscribe-button")],w)},92103:(o,r,e)=>{var t=e(89547
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 29 2c 73 3d 65 2e 6e 28 74 29 2c 62 3d 65 28 33 38 35 33 32 29 2c 6e 3d 65 2e 6e 28 62 29 28 29 28 73 28 29 29 3b 6e 2e 70 75 73 68 28 5b 6f 2e 69 64 2c 27 2f 2a 21 5c 6e 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 20 76 35 2e 33 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 5c 6e 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 33 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 5c 6e 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 5c 6e 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 73 2d 62 6c 75 65 3a 20 23 30 62 34 64 Data Ascii: ),s=e.n(t),b=e(38532),n=e.n(b)()(s());n.push([o.id,'/!\n Bootstrap v5.3.2 (https://getbootstrap.com/)\n * Copyright 2011-2023 The Bootstrap Authors\n * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE)\n */:root{--bs-blue: #0b4d
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 66 32 65 35 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 66 61 65 31 65 30 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 66 63 66 63 66 63 3b 2d 2d 62 73 2d 64 61 72 6b 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 63 63 63 63 63 63 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 39 64 62 38 66 30 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 63 32 63 32 63 32 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 62 30 64 65 62 37 3b 2d 2d 62 73 2d 69 6e 66 6f 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 39 39 63 61 66 35 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 62 6f 72 64 Data Ascii: f2e5;--bs-danger-bg-subtle: #fae1e0;--bs-light-bg-subtle: #fcfcfc;--bs-dark-bg-subtle: #cccccc;--bs-primary-border-subtle: #9db8f0;--bs-secondary-border-subtle: #c2c2c2;--bs-success-border-subtle: #b0deb7;--bs-info-border-subtle: #99caf5;--bs-warning-bord
2024-11-21 02:42:24 UTC	1280	IN	Data Raw: 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 2d 2d 62 73 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 23 32 30 32 34 32 63 3b 2d 2d 62 73 2d 68 69 67 68 6c 69 67 68 74 2d 62 67 3a 20 23 66 65 66 62 65 31 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 31 70 78 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 65 35 65 39 66 30 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 74 72 61 6e 73 6c 75 63 65 6e 74 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 37 35 29 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 2e 33 37 35 72 65 6d 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 73 6d 3a 20 30 2e 32 35 Data Ascii: color: #000000;--bs-highlight-color: #20242c;--bs-highlight-bg: #fefbe1;--bs-border-width: 1px;--bs-border-style: solid;--bs-border-color: #e5e9f0;--bs-border-color-translucent: rgba(0, 0, 0, 0.175);--bs-border-radius: 0.375rem;--bs-border-radius-sm: 0.25
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 79 70 65 3d 62 75 74 74 6f 6e 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 62 75 74 74 6f 6e 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 2c 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 3a 3a 2d 77 65 62 6b 69 74 2d 64 61 74 65 74 69 6d 65 2d 65 64 69 74 2d 66 69 65 6c 64 73 2d 77 72 61 70 70 65 72 2c 3a 3a 2d 77 65 62 6b 69 74 2d 64 61 74 65 74 69 6d 65 2d 65 64 69 74 2d 74 65 78 74 2c 3a 3a 2d 77 65 62 6b 69 74 2d 64 61 74 65 74 69 6d 65 2d 65 64 69 74 2d 6d 69 6e 75 74 65 2c 3a 3a 2d 77 65 Data Ascii: ype=button]{-webkit-appearance:button}button:not(:disabled),[type=button]:not(:disabled){cursor:pointer}::-moz-focus-inner{padding:0;border-style:none}::-webkit-datetime-edit-fields-wrapper,::-webkit-datetime-edit-text,::-webkit-datetime-edit-minute,::-we
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 69 6e 67 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 70 61 64 64 69 6e 67 2d 79 29 20 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 70 61 64 64 69 6e 67 2d 78 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 66 6f 6e 74 2d 73 69 7a 65 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 66 6f 6e 74 2d 77 65 69 67 68 74 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 6c 69 6e 65 2d 68 65 69 67 68 74 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 63 6f 6c 6f 72 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 76 65 72 74 69 63 61 6c 2d 61 6c Data Ascii: ing:var(--bs-btn-padding-y) var(--bs-btn-padding-x);font-family:var(--bs-btn-font-family);font-size:var(--bs-btn-font-size);font-weight:var(--bs-btn-font-weight);line-height:var(--bs-btn-line-height);color:var(--bs-btn-color);text-align:center;vertical-al
2024-11-21 02:42:24 UTC	1280	IN	Data Raw: 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 64 69 73 61 62 6c 65 64 2d 62 67 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 64 69 73 61 62 6c 65 64 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 3b 6f 70 61 63 69 74 79 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 29 7d 2e 62 74 6e 2d 6c 69 6e 6b 7b 2d 2d 62 73 2d 62 74 6e 2d 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 2d 2d 62 73 2d 62 74 6e 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 62 73 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 29 3b 2d 2d 62 73 2d 62 74 6e 2d 62 67 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 2d 2d 62 73 2d 62 Data Ascii: pointer-events:none;background-color:var(--bs-btn-disabled-bg);border-color:var(--bs-btn-disabled-border-color);opacity:var(--bs-btn-disabled-opacity)}.btn-link{--bs-btn-font-weight: 400;--bs-btn-color: var(--bs-link-color);--bs-btn-bg: transparent;--bs-b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49854	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:23 UTC	511	OUT	GET /gui/74278.df011db4b71607f93e04.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:24 UTC	319	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: b96bc57f3fd212fd907060342a213abd Server: Google Frontend Date: Thu, 21 Nov 2024 00:06:40 GMT Expires: Fri, 21 Nov 2025 00:06:40 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Content-Length: 28553 Age: 9344 Connection: close
2024-11-21 02:42:24 UTC	1089	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 34 32 37 38 5d 2c 7b 34 31 39 34 30 3a 28 74 2c 65 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 73 3d 69 28 34 38 37 30 34 29 2c 72 3d 69 28 31 36 36 34 35 29 2c 6e 3d 69 28 39 33 38 36 31 29 3b 6c 65 74 20 6f 2c 61 2c 6c 2c 63 2c 68 3d 74 3d 3e 74 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 73 29 7b 76 61 72 20 72 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 3c 33 3f 65 3a 6e 75 6c 6c 3d 3d 3d 73 3f 73 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 Data Ascii: (self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[74278],{41940:(t,e,i)=>{"use strict";var s=i(48704),r=i(16645),n=i(93861);let o,a,l,c,h=t=>t;var d=function(t,e,i,s){var r,n=arguments.length,o=n<3?e:null===s?s=Object.getOwnPropertyDesc
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 74 6d 6c 29 28 6c 7c 7c 28 6c 3d 68 60 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 22 20 3f 73 65 6c 65 63 74 65 64 3d 22 24 7b 30 7d 22 3e 3c 2f 6f 70 74 69 6f 6e 3e 60 29 2c 21 74 68 69 73 2e 76 61 6c 75 65 29 2c 2e 2e 2e 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 6d 61 70 28 28 74 3d 3e 7b 6c 65 74 20 65 3d 74 2e 76 61 6c 2c 69 3d 74 2e 74 65 78 74 3b 72 65 74 75 72 6e 28 30 2c 73 2e 68 74 6d 6c 29 28 63 7c 7c 28 63 3d 68 60 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 24 7b 30 7d 22 20 3f 73 65 6c 65 63 74 65 64 3d 22 24 7b 30 7d 22 3e 20 24 7b 30 7d 20 3c 2f 6f 70 74 69 6f 6e 3e 20 60 29 2c 65 2c 74 68 69 73 2e 76 61 6c 75 65 3d 3d 3d 65 2c 69 7c 7c 65 29 7d 29 29 5d 29 7d 7d 3b 64 28 5b 28 30 2c 72 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a Data Ascii: tml)(l\|\|(l=h`<option value="" ?selected="${0}"></option>`),!this.value),...this.options.map((t=>{let e=t.val,i=t.text;return(0,s.html)(c\|\|(c=h` <option value="${0}" ?selected="${0}"> ${0} </option> `),e,this.value===e,i\|\|e)}))])}};d([(0,r.property)({type:
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 74 72 75 63 74 6f 72 26 26 28 69 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 2c 22 4d 61 70 22 3d 3d 3d 69 7c 7c 22 53 65 74 22 3d 3d 3d 69 3f 41 72 72 61 79 2e 66 72 6f 6d 28 74 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 69 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 69 29 3f 75 28 74 2c 65 29 3a 76 6f 69 64 20 30 7d 7d 28 74 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f Data Ascii: tructor&&(i=t.constructor.name),"Map"===i\|\|"Set"===i?Array.from(t):"Arguments"===i\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(i)?u(t,e):void 0}}(t,e)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to
2024-11-21 02:42:24 UTC	191	IN	Data Raw: 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 74 5b 65 5d 3d 69 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 69 2c 73 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 69 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 74 29 69 66 28 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 73 29 29 7b 69 66 28 65 2e 69 6e 63 6c Data Ascii: ble:!0,configurable:!0,writable:!0}):t[e]=i,t}function f(t,e){if(null==t)return{};var i,s,r=function(t,e){if(null==t)return{};var i={};for(var s in t)if({}.hasOwnProperty.call(t,s)){if(e.incl
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 75 64 65 73 28 73 29 29 63 6f 6e 74 69 6e 75 65 3b 69 5b 73 5d 3d 74 5b 73 5d 7d 72 65 74 75 72 6e 20 69 7d 28 74 2c 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 74 29 3b 66 6f 72 28 73 3d 30 3b 73 3c 6e 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 69 3d 6e 5b 73 5d 2c 65 2e 69 6e 63 6c 75 64 65 73 28 69 29 7c 7c 7b 7d 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 2e 63 61 6c 6c 28 74 2c 69 29 26 26 28 72 5b 69 5d 3d 74 5b 69 5d 29 7d 72 65 74 75 72 6e 20 72 7d 63 6f 6e 73 74 20 76 3d 74 3d 3e 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 66 69 6c 74 65 72 22 2c 7b 64 65 74 61 Data Ascii: udes(s))continue;i[s]=t[s]}return i}(t,e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);for(s=0;s<n.length;s++)i=n[s],e.includes(i)\|\|{}.propertyIsEnumerable.call(t,i)&&(r[i]=t[i])}return r}const v=t=>new CustomEvent("filter",{deta
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 72 5f 65 6e 74 69 74 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 6d 61 70 28 28 74 3d 3e 28 7b 69 64 3a 74 2e 65 6e 74 69 74 79 5f 69 64 2c 6c 61 62 65 6c 3a 74 2e 65 6e 74 69 74 79 5f 76 61 6c 75 65 7c 7c 74 2e 65 6e 74 69 74 79 5f 69 64 2c 6d 65 74 72 69 63 73 3a 5b 74 2e 6e 75 6d 5f 6c 6f 6f 6b 75 70 73 2c 74 2e 6e 75 6d 5f 73 75 62 6d 69 73 73 69 6f 6e 73 5d 7d 29 29 29 29 7c 7c 5b 5d 7d 29 29 2e 63 61 74 63 68 28 28 28 29 3d 3e 5b 5d 29 29 3b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 61 6c 6c 28 5b 79 2c 76 5d 29 2e 74 68 65 6e 28 28 74 3d 3e 28 7b 64 61 74 61 3a 41 72 72 61 79 2e 66 72 6f 6d 28 74 2e 72 65 64 75 63 65 28 28 28 74 2c 65 29 3d 3e 28 65 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 6c 65 74 20 69 3d 65 2e 69 Data Ascii: r_entity)\|\|void 0===e?void 0:e.map((t=>({id:t.entity_id,label:t.entity_value\|\|t.entity_id,metrics:[t.num_lookups,t.num_submissions]}))))\|\|[]})).catch((()=>[]));return Promise.all([y,v]).then((t=>({data:Array.from(t.reduce(((t,e)=>(e.forEach((e=>{let i=e.i
2024-11-21 02:42:24 UTC	1280	IN	Data Raw: 6f 77 53 75 62 6d 69 73 73 69 6f 6e 73 3a 21 30 2c 6f 72 64 65 72 3a 22 6e 75 6d 5f 6c 6f 6f 6b 75 70 73 2d 22 2c 64 61 74 65 3a 77 2e 4c 41 53 54 5f 31 34 5f 44 41 59 53 2c 65 6e 74 69 74 79 5f 6c 69 73 74 3a 6e 65 77 20 53 65 74 2c 63 6f 75 6e 74 72 79 3a 6e 75 6c 6c 7d 7d 2c 66 72 6f 6d 50 61 72 73 65 64 51 75 65 72 79 53 74 72 69 6e 67 28 74 29 7b 63 6f 6e 73 74 20 65 3d 4c 2e 44 45 46 41 55 4c 54 3b 66 6f 72 28 76 61 72 20 69 3d 30 2c 73 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 69 3c 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 63 6f 6e 73 74 20 72 3d 73 5b 69 5d 3b 73 77 69 74 63 68 28 72 29 7b 63 61 73 65 22 6c 22 3a 65 2e 73 68 6f 77 4c 6f 6f 6b 75 70 73 3d 22 74 72 75 65 22 3d 3d 3d 74 5b 72 5d 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 22 3a 65 Data Ascii: owSubmissions:!0,order:"num_lookups-",date:w.LAST_14_DAYS,entity_list:new Set,country:null}},fromParsedQueryString(t){const e=L.DEFAULT;for(var i=0,s=Object.keys(t);i<s.length;i++){const r=s[i];switch(r){case"l":e.showLookups="true"===t[r];break;case"s":e
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 69 2c 73 29 7b 76 61 72 20 72 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6f 3d 6e 3c 33 3f 65 3a 6e 75 6c 6c 3d 3d 3d 73 3f 73 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 69 29 3a 73 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 29 6f 3d 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 28 74 2c 65 2c 69 2c 73 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 61 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 61 3e 3d 30 3b 61 2d 2d 29 28 72 3d 74 5b 61 5d 29 26 26 28 6f 3d 28 6e 3c 33 3f 72 28 6f 29 3a 6e 3e 33 3f 72 28 65 2c 69 2c 6f 29 3a 72 28 65 Data Ascii: i,s){var r,n=arguments.length,o=n<3?e:null===s?s=Object.getOwnPropertyDescriptor(e,i):s;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)o=Reflect.decorate(t,e,i,s);else for(var a=t.length-1;a>=0;a--)(r=t[a])&&(o=(n<3?r(o):n>3?r(e,i,o):r(e
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 74 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 74 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 6e 75 6c 6c 21 3d 69 29 7b 76 61 72 20 73 2c 72 2c 6e 2c 6f 2c 61 3d 5b 5d 2c 6c 3d 21 30 2c 63 3d 21 31 3b 74 72 79 7b 69 66 28 6e 3d 28 69 3d 69 2e 63 61 6c 6c 28 74 29 29 2e 6e 65 78 74 2c 30 3d 3d 3d 65 29 7b 69 66 28 4f 62 6a 65 63 74 28 69 29 21 3d 3d 69 29 72 65 74 75 72 6e 3b 6c 3d 21 31 7d 65 6c 73 65 20 66 6f 72 28 3b 21 28 6c 3d 28 73 3d 6e 2e 63 61 6c 6c 28 69 29 29 2e 64 6f 6e 65 29 26 26 28 61 2e 70 75 73 68 28 73 2e 76 61 6c 75 65 29 2c 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 29 3b 6c 3d 21 30 29 3b 7d 63 61 74 63 68 28 74 29 7b 63 3d 21 30 2c 72 3d 74 Data Ascii: ndefined"!=typeof Symbol&&t[Symbol.iterator]\|\|t["@@iterator"];if(null!=i){var s,r,n,o,a=[],l=!0,c=!1;try{if(n=(i=i.call(t)).next,0===e){if(Object(i)!==i)return;l=!1}else for(;!(l=(s=n.call(i)).done)&&(a.push(s.value),a.length!==e);l=!0);}catch(t){c=!0,r=t
2024-11-21 02:42:24 UTC	1280	IN	Data Raw: 74 68 69 73 2e 73 68 6f 77 4c 6f 6f 6b 75 70 73 3d 21 30 2c 74 68 69 73 2e 73 68 6f 77 53 75 62 6d 69 73 73 69 6f 6e 73 3d 21 30 2c 74 68 69 73 2e 69 73 42 72 75 73 68 69 6e 67 3d 21 31 2c 74 68 69 73 2e 78 43 6f 6c 75 6d 6e 3d 5b 5d 2c 74 68 69 73 2e 62 72 75 73 68 3d 28 30 2c 73 2e 6e 35 35 29 28 29 2c 74 68 69 73 2e 6d 61 72 67 69 6e 73 3d 7b 4c 45 46 54 3a 31 31 30 2c 52 49 47 48 54 3a 31 31 30 2c 42 4f 54 54 4f 4d 3a 34 30 2c 54 4f 50 3a 34 30 7d 2c 74 68 69 73 2e 78 53 63 61 6c 65 3d 28 30 2c 73 2e 50 70 73 29 28 29 2c 74 68 69 73 2e 79 53 63 61 6c 65 3d 28 30 2c 73 2e 6d 34 59 29 28 29 2c 74 68 69 73 2e 79 32 53 63 61 6c 65 3d 28 30 2c 73 2e 6d 34 59 29 28 29 2c 74 68 69 73 2e 78 41 78 69 73 3d 28 30 2c 73 2e 6c 37 38 29 28 74 68 69 73 2e 78 53 63 Data Ascii: this.showLookups=!0,this.showSubmissions=!0,this.isBrushing=!1,this.xColumn=[],this.brush=(0,s.n55)(),this.margins={LEFT:110,RIGHT:110,BOTTOM:40,TOP:40},this.xScale=(0,s.Pps)(),this.yScale=(0,s.m4Y)(),this.y2Scale=(0,s.m4Y)(),this.xAxis=(0,s.l78)(this.xSc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49853	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:23 UTC	690	OUT	GET /gui/51452.78c2117408c1bf8fcbcf.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:24 UTC	348	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 7136e23ac14d98b34319affd2b6eb4ef Content-Encoding: gzip Server: Google Frontend Date: Thu, 21 Nov 2024 00:46:37 GMT Expires: Fri, 21 Nov 2025 00:46:37 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 6947 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:24 UTC	1060	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a fb 0d 0a 30 30 30 30 30 30 30 31 0d 0a 63 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a c6 0d 0a 30 30 30 30 30 30 30 31 0d 0a 91 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ef 0d 0a 30 30 30 30 30 30 30 31 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001}0000000100000001c000000010000000100000001000000010000000100000001
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 1a dc 4d 90 34 f0 75 ec 5f e1 6f 99 8e dd 4f 3b 5a e2 f8 db f1 c8 9b 4c c2 d9 d8 c9 c1 97 9e 65 27 77 04 66 ee 7f 94 9d 6e 8f a6 5e 70 a1 c6 fa f3 86 09 d0 72 1f 3f a2 a9 a1 c2 a3 ad d3 a0 4a 32 e3 42 9b 6c 27 9f 38 7f 6f b9 8d e7 f6 96 e8 5d 6b 94 2e 8a 7c c8 ad 02 10 4b b8 93 6e 54 ee 3b 50 c3 58 25 9e 3f eb 5c 79 b3 a5 5a b7 5c 8d c9 50 bf 1a 5a 00 e4 02 be 00 32 f5 54 7e ec ab ce dc 5b 30 10 5a 60 31 04 58 0c 2d b0 a8 38 07 2c c7 c9 a0 d6 ec ff d4 1f ab 67 8c 81 e3 ca 6d 66 98 d2 a7 ec 30 8a 19 34 26 d7 ed 21 0e 94 be f2 b6 e7 4e 80 61 44 57 24 40 43 d5 f1 6d 1b 57 36 f1 bd e8 16 6d da 8e 37 02 5a 1d fb c1 85 93 84 8e 00 9d 43 7d a0 48 83 51 e2 cf 55 db bb 08 9d 65 e0 df d0 2f 66 6e e6 80 4d 05 3a 4d 73 f4 b9 53 e5 fe 4c ed ea dd e0 63 ce 2e b2 fb a0 Data Ascii: M4u_oO;ZLe'wfn^pr?J2Bl'8o]k.\|KnT;PX%?\yZ\PZ2T~[0Z`1X-8,gmf04&!NaDW$@CmW6m7ZC}HQUe/fnM:MsSLc.
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 4e 2f 15 fb bf 04 27 1c 2d 03 30 d9 0e d8 6d 67 31 f3 12 dc af 79 e7 ae 6b 62 38 1c 1b 2e ad 6d 62 36 4b f6 ca de 17 c3 ab 68 fc c6 a0 07 1c bb 9c 25 02 86 05 ec f3 d8 37 3b ad 0b 20 1f bb c1 96 81 d6 bd 6c 13 1a d3 b0 eb a7 3f 99 69 31 34 83 15 89 ca 40 a6 3a b2 72 94 01 5a fc 8e 3f 79 c1 52 ac 71 0b 62 1d c0 07 48 69 e2 98 46 b8 84 17 61 74 2b 30 c7 e4 34 83 3f 78 2c 7a 23 bf 84 88 e2 b9 ae 82 76 a6 36 b5 04 1e 18 43 10 7a aa bc 68 34 7d 5a f8 1d 48 23 15 7c 41 02 24 72 34 2d e7 c1 e9 cd d4 77 fe 55 98 40 f6 24 d2 1a 3a f3 30 56 e3 f4 ab 05 e0 73 00 f8 9c 01 9c b1 82 de 53 e0 52 ff ca 1f 2f bd 59 3b 05 76 c3 0c ca ee 18 0e 0d 0b 25 89 95 ec 3f 5f 25 e2 d5 c0 ac e5 e6 61 4b ca 44 de 33 c5 b8 d3 7b 8e 4b af 84 cd a4 5a 07 9f 1d 9f 85 e0 78 6e b9 0d a4 43 Data Ascii: N/'-0mg1ykb8.mb6Kh%7; l?i14@:rZ?yRqbHiFat+04?x,z#v6Czh4}ZH#\|A$r4-wU@$:0VsSR/Y;v%?_%aKD3{KZxnC
2024-11-21 02:42:24 UTC	476	IN	Data Raw: 81 bc dc 4f d3 97 c9 48 0c b5 61 0c 37 b7 2c 0b 22 83 55 a2 72 27 2d 98 f4 e4 45 eb 64 1b e6 86 6e ec fa 7a 76 d6 53 fa 16 18 e8 ed e0 05 30 90 25 05 bc c2 6e 40 9a 4c 42 ee 5d 42 d5 b6 fc a4 28 05 a7 0a 42 28 09 c3 ff 3d a4 6e 24 63 01 ef 0c 3e 98 94 3e 10 bd 8d a2 25 64 6f b7 0e ac 82 9c a1 52 b0 48 a1 bf 20 4f 7b 3c 44 f7 9e 79 9e b6 90 1a 45 b9 f1 16 d2 43 93 6f 10 17 60 20 88 74 23 32 a4 09 58 03 e5 3c 9f 46 d0 07 41 e3 85 32 2c 16 67 08 4a 85 e6 a2 4d 13 74 5b 59 52 ce 5c 26 13 f9 b6 81 0f 20 93 d7 ef da 7c 08 89 db 5d 06 3d af a0 27 83 fc 1d cc 3e 8c 88 b4 0d 8f 3d 0d 88 d3 60 b8 06 c5 15 2a 5d 78 62 6c 41 d3 48 0f 40 8c 0a 78 50 bc 6e 39 e1 b6 fd b6 b6 21 b0 5a 40 88 46 8a a9 ec c5 dc 8c c1 a0 27 21 8e 20 b5 2e 61 bd 88 b1 2c c9 3f ae b4 3f fa 05 Data Ascii: OHa7,"Ur'-EdnzvS0%n@LB]B(B(=n$c>>%doRH O{<DyECo` t#2X<FA2,gJMt[YR\& \|]='>=`*]xblAH@xPn9!Z@F'! .a,??
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 05 0d 0a 30 30 30 30 30 30 30 31 0d 0a 83 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1a 0d 0a 30 30 30 31 0d 0a ec 0d 0a 30 66 66 62 0d 0a 47 63 f0 03 89 93 62 5a d2 e0 c0 22 12 f2 7d bc c3 51 ec dc 2a 96 e9 a3 9a cc 14 3f 84 c1 0c da 34 e1 08 59 94 86 eb 39 99 38 0f 9d 71 78 31 09 43 42 27 dc b6 5a fa fe 6d 6e 34 0d 81 38 d0 61 41 95 52 75 a2 f7 c0 b5 7c 2e 7c 5f 52 43 b0 44 f8 dc 22 86 4e 0c 86 4e 3a 72 9a f9 56 da 46 b1 d8 2a 34 ad c2 ca 56 b0 e2 25 69 65 b1 55 6c 5a c1 1e 54 66 a8 29 b6 74 92 90 14 55 35 f4 4d 43 df 34 64 ba 8d a8 c8 9f aa a8 c8 2f 6c 2a 92 66 91 91 50 db eb eb bb f4 21 4d 2c 90 cf 9a 7d 31 30 63 55 13 6b e9 b5 03 96 31 64 1b 49 d9 be 10 2a ed 7b 50 69 47 87 bb 7b 10 94 7d Data Ascii: 000000010000000100000001M0000000100010ffbGcbZ"}Q?4Y98qx1CB'Zmn48aARu\|.\|_RCD"NN:rVF4V%ieUlZTf)tU5MC4d/lfP!M,}10cUk1dI{PiG{}
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: be 2d 40 df cb 36 d2 f6 7d cc 51 b1 a0 81 d8 a2 fc 25 fd 0b 26 32 a7 b9 68 57 d9 47 a4 6e 86 86 f4 cb 9f 2f 30 16 49 e9 5f e0 9f 7e ee dc a4 da 13 e7 4d 74 e1 05 fe 4f ac 18 28 d6 10 31 bb be 80 b4 34 1c b6 ef 26 e6 00 6d 1b 10 98 f9 c2 1a 82 0f 91 c6 3a 9d 02 0f 6a 6b 88 10 27 08 f9 a8 a1 d6 72 d6 21 7f c5 81 fc 95 b1 86 b5 67 1b 77 36 0f fb 7c 6d 86 64 94 59 06 3e c3 45 96 41 e0 6f 18 f1 6f c5 11 2d 4a 90 9c 2e 72 47 f2 51 f5 51 a4 8e 4a af 72 85 da e8 f5 ab d3 ef ee ab 31 2a f0 98 c6 63 c4 86 d1 0c 8c 6d 88 9e cc 10 e2 21 e5 3d b5 2e e5 5f 66 f8 00 38 95 5b c2 ff 98 23 ad 60 47 ff 1b 27 f5 df 72 59 7f 27 fc 28 d1 2d 1a fb e2 27 6d a1 46 1f 49 a7 c2 57 97 74 2a 72 87 a5 9e 45 3a db ec 88 52 58 9b 52 0c 86 35 13 0b 50 fc 25 6a 15 2d 95 b4 6d 3c b6 18 c8 Data Ascii: -@6}Q%&2hWGn/0I_~MtO(14&m:jk'r!gw6\|mdY>EAoo-J.rGQQJr1cm!=._f8[#`G'rY'(-'mFIWtrE:RXR5P%j-m<
2024-11-21 02:42:24 UTC	1344	IN	Data Raw: cd c0 92 73 8a 44 aa 1d 19 52 51 fd 06 cf 05 99 01 e2 42 b4 81 d2 c4 9d ca 79 8a 3d 40 48 27 84 f4 30 c6 fa 4f 11 e5 69 e6 0d 11 b3 d7 7c 21 b1 96 9e 42 fa 29 73 cb 28 5a f5 e7 fa 27 9f 03 31 c7 32 46 ff 59 43 e1 cb 48 89 d2 28 ae 94 6c 49 25 24 24 cb 26 df c5 b0 64 9b 09 95 ae 7f 8e c8 be 64 2d 86 23 d9 41 7d 03 3d 55 ee 8c 2c 8d df 82 0e 03 be c2 38 0c ad 38 8c d2 68 18 ec d9 9b e0 34 c9 fa 0e a8 26 12 d5 99 46 b2 56 27 17 d4 c9 c5 cf 3e d1 2a 9f 94 e2 29 fe 7c 77 14 4b b9 d6 83 c5 1c 42 d3 5c 47 78 f6 8d 55 9d d1 33 6c 3f 8f 24 db 7e c4 23 ae 72 a0 a6 6d 58 ca 36 e8 cd 94 98 9e b6 54 7f 4e 95 e0 e9 82 0d cf 14 77 1f a4 60 a5 48 51 00 cf 92 0f f4 87 39 26 51 c4 2a 00 99 4c 90 fe 21 e0 ce f9 37 4f 69 a6 53 99 a9 ad 7f f8 b9 93 d5 4a 48 de 68 1e 99 89 10 Data Ascii: sDRQBy=@H'0Oi\|!B)s(Z'12FYCH(lI%$$&dd-#A}=U,88h4&FV'>)\|wKB\GxU3l?$~#rmX6TNw`HQ9&QL!7OiSJHh
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a b0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 42 0d 0a 30 30 30 30 30 30 30 31 0d 0a fc 0d 0a 30 30 30 30 30 30 30 31 0d 0a 56 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 54 0d 0a 30 30 30 30 30 30 30 31 0d 0a fb 0d 0a 30 30 30 30 30 30 30 31 0d 0a 88 0d 0a 30 30 30 30 30 30 30 31 0d 0a e1 0d 0a 30 30 30 30 30 30 30 31 0d 0a a8 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3f 0d 0a 30 30 30 30 30 30 30 31 0d 0a de 0d 0a 30 30 66 66 34 0d 0a 22 ec 1b 52 3a 39 9f 4c 46 ea f8 e0 50 6a 5e 44 08 a5 82 6f bb c7 de 68 6f 24 df 12 85 24 50 ce 27 3b dd d1 f1 b1 ae 36 ba f5 a8 d6 ce d1 e1 70 b8 2f b5 90 07 65 a4 67 22 1f 10 13 99 cc 90 3f 99 4c 26 a6 6f ef 16 bf 1f f0 7f d9 27 40 47 44 0d 77 f9 3f eb 3b 62 a7 53 f3 63 fa Data Ascii: 0000000100000001B0000000100000001V00000001\|00000001T0000000100000001000000010000000100000001?0000000100ff4"R:9LFPj^Doho$$P';6p/eg"?L&o'@GDw?;bSc
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: e2 39 98 c1 e9 7a ed 41 10 49 0f 0c 6f 52 0a 98 79 cc 84 77 32 5f a2 b7 1d d8 13 4f 25 d3 ac 16 96 22 24 b5 f6 fa 8c 9c 56 7c 2b f3 bd 59 f0 5f 85 a6 5a 68 8b 90 7b cd 33 8a 28 74 de 92 9f 39 50 e2 39 18 f4 8d 45 7a 3c 59 8c 41 bf 95 53 8b af 2e 56 c0 9b 44 85 cc 10 28 08 a1 ba fa 12 b5 7a 7d 46 2a 8f 73 19 82 ec 0a 07 10 22 28 33 85 f4 03 a7 01 45 66 38 6f 96 2b 02 55 92 4c 73 5f ae 95 ba cc 7d a0 96 f8 d0 6f 23 75 f6 a5 9f b4 d1 05 b4 99 a0 58 90 8b ee 12 98 3c 8d 3a ba 1a 43 46 88 2c 4e 98 0a dc d4 1f f8 48 11 13 21 c6 67 b2 46 db 79 f8 13 68 12 ba 20 3e 84 de d1 6a 81 cc 57 04 1f c8 fa ac e9 3c 46 b2 7c 0a d9 50 b4 12 9e 38 20 27 69 4f 7c 35 1b c7 6c cc 00 ad 80 bb a9 1a 6d df c6 42 48 df 91 f2 63 63 31 92 0e 45 32 ce c6 2a 63 0f d4 15 cd 64 63 0d de Data Ascii: 9zAIoRyw2_O%"$V\|+Y_Zh{3(t9P9Ez<YAS.VD(z}Fs"(3Ef8o+ULs_}o#uX<:CF,NH!gFyh >jW<F\|P8 'iO\|5lmBHcc1E2cdc
2024-11-21 02:42:24 UTC	1408	IN	Data Raw: 58 98 2e 8a 0a 97 b3 38 37 58 da 19 1a 37 58 bb 9c 15 a8 36 a0 b0 d8 e9 da 80 a2 36 a0 48 cd 55 48 e1 0b 91 70 6d 40 e1 43 b4 f4 49 6d 40 11 11 1b 96 d9 0f d4 06 14 b5 01 85 51 56 42 a8 01 56 b4 60 3e 90 99 39 d4 06 14 da e2 a2 36 a0 a8 0d 28 6a 03 8a da 80 82 a4 9a b6 75 45 6d 40 51 1b 50 d8 f2 71 d0 9b bf ad 01 c5 30 a7 74 43 dc 23 98 8e d6 56 15 96 55 45 6d b3 00 8b 8b bc fd 45 6d b3 b0 d9 e2 a1 93 4b 7f 9a 9a 53 68 4b bd 4c ed 55 54 18 1b e5 97 36 83 c9 c4 ce 1a 5b b0 90 be b5 4d d5 66 3d 35 a5 1e c4 4c af 05 2d bc 49 37 cf 5a bd 9c 3d 89 25 21 b2 2c 1e 7e 3f 06 17 9d 62 3c 88 95 a5 e0 21 93 98 13 73 32 e9 77 51 d1 93 89 51 12 2e 47 d3 75 87 83 78 40 53 4e 1a 47 4a cf 6a 14 ec 50 11 c1 b2 ee 60 3f 35 7a ce 15 b2 91 de 6e a1 30 53 52 77 a1 e8 c9 37 b4 Data Ascii: X.87X7X66HUHpm@CIm@QVBV`>96(juEm@QPq0tC#VUEmEmKShKLUT6[Mf=5L-I7Z=%!,~?b<!s2wQQ.Gux@SNGJjP`?5zn0SRw7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49855	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:24 UTC	537	OUT	GET /gui/manifest.json HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:25 UTC	341	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 8555b6ebfadcd80d5e05d2714c8b6797 Content-Encoding: gzip Server: Google Frontend Date: Thu, 21 Nov 2024 02:42:03 GMT Expires: Thu, 21 Nov 2024 02:43:03 GMT Cache-Control: public, max-age=60 Age: 22 ETag: "V0s7xg" Content-Type: application/json Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:25 UTC	242	IN	Data Raw: 30 31 0d 0a 1f 0d 0a 65 35 0d 0a 8b 08 00 00 00 00 00 02 ff 8c 90 c1 0e 82 30 0c 86 ef 3c c5 32 af 0a 82 e1 a0 cf 61 bc 18 63 0a 4c 5c 1c 1b 59 87 11 09 ef ee 3a 48 3c 11 3d b4 87 7e fd fb ff e9 10 31 c6 35 34 82 1f 18 3f 49 db e1 d1 38 50 7c 4d 73 bc 1b eb ae 8b d4 81 a7 9d 55 24 8d 93 49 52 49 6c 15 f4 34 42 07 ba 02 65 b4 98 90 bb 8b 46 5c 4b a3 8c 25 bc da dd f2 b4 c8 27 56 40 f9 a8 ad e9 74 b5 b0 20 4b a3 d1 cb ce 3e 17 63 43 e8 94 d0 96 74 4b 36 50 0b 4c 1a d0 f2 26 d0 25 b4 bd 49 f7 d9 cb 57 dc ea 3a 98 90 90 a3 7c 0b ba c3 67 fa 25 ae 6f c3 13 c2 ad 84 44 c1 64 a4 4f fc e9 98 a7 d9 cb d7 82 e3 4c 7f 3b 7a c3 4b f8 ff 53 58 94 46 87 b8 f1 2e dd c7 5b 1e 8d d1 07 00 00 ff ff 03 00 9f 9d 45 4b b3 01 00 00 0d 0a Data Ascii: 01e50<2acL\Y:H<=~154?I8P\|MsU$IRIl4BeF\K%'V@t K>cCtK6PL&%IW:\|g%oDdOL;zKSXF.[EK
2024-11-21 02:42:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49856	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:24 UTC	511	OUT	GET /gui/18625.f201464ef45c9d80f24f.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:25 UTC	320	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 11a42337ddc7f7322d07f45a4551fa95 Server: Google Frontend Date: Wed, 20 Nov 2024 12:53:16 GMT Expires: Thu, 20 Nov 2025 12:53:16 GMT Cache-Control: public, max-age=31536000 ETag: "tA1SvQ" Content-Type: text/javascript Content-Length: 56905 Age: 49749 Connection: close
2024-11-21 02:42:25 UTC	1088	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 36 32 35 2c 33 37 32 32 31 2c 38 35 30 34 33 2c 36 37 31 37 33 5d 2c 7b 35 34 32 39 33 3a 28 74 2c 65 2c 69 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 69 2e 64 28 65 2c 7b 72 3a 28 29 3d 3e 53 74 7d 29 3b 69 28 39 38 39 31 29 3b 76 61 72 20 6f 3d 69 28 34 38 37 30 34 29 2c 6c 3d 69 28 31 36 36 34 35 29 2c 73 3d 28 69 28 31 36 32 36 34 29 2c 69 28 37 31 30 31 32 29 29 2c 72 3d 69 28 33 31 30 38 38 29 2c 61 3d 69 28 36 32 38 33 32 29 2c 6e 3d 69 28 32 31 39 30 33 29 2c 64 3d 69 28 35 31 35 36 30 29 2c 63 3d 69 2e 6e 28 64 29 2c 62 3d 69 28 Data Ascii: (self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[18625,37221,85043,67173],{54293:(t,e,i)=>{"use strict";i.d(e,{r:()=>St});i(9891);var o=i(48704),l=i(16645),s=(i(16264),i(71012)),r=i(31088),a=i(62832),n=i(21903),d=i(51560),c=i.n(d),b=i(
2024-11-21 02:42:25 UTC	1408	IN	Data Raw: 64 20 30 21 3d 3d 74 3f 74 3a 22 22 7d 67 65 74 20 69 73 4c 61 73 74 41 63 74 69 76 69 74 79 41 74 54 6f 70 52 69 67 68 74 56 69 73 69 62 6c 65 28 29 7b 76 61 72 20 74 2c 65 2c 69 3b 72 65 74 75 72 6e 21 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 2e 61 74 74 72 69 62 75 74 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 21 74 2e 6c 61 73 74 5f 73 65 65 6e 7c 7c 21 5b 22 74 68 72 65 61 74 2d 61 63 74 6f 72 22 2c 22 6d 61 6c 77 61 72 65 2d 66 61 6d 69 6c 79 22 2c 22 73 6f 66 74 77 61 72 65 2d 74 6f 6f 6c 6b 69 74 22 5d 2e 69 6e 63 6c 75 64 65 73 28 6e 75 6c 6c 21 3d 3d 28 65 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 Data Ascii: d 0!==t?t:""}get isLastActivityAtTopRightVisible(){var t,e,i;return!(null===(t=this.collection)\|\|void 0===t\|\|null===(t=t.attributes)\|\|void 0===t\|\|!t.last_seen\|\|!["threat-actor","malware-family","software-toolkit"].includes(null!==(e=null===(i=this.collect
2024-11-21 02:42:25 UTC	1408	IN	Data Raw: 61 69 67 6e 22 2c 22 63 6f 6c 6c 65 63 74 69 6f 6e 22 2c 22 72 65 70 6f 72 74 22 5d 2e 69 6e 63 6c 75 64 65 73 28 6e 75 6c 6c 21 3d 3d 28 74 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 65 3d 65 2e 61 74 74 72 69 62 75 74 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 63 6f 6c 6c 65 63 74 69 6f 6e 5f 74 79 70 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 22 22 29 26 26 21 28 6e 75 6c 6c 3d 3d 3d 28 69 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 7c 7c 6e 75 6c 6c 3d 3d 3d 28 69 3d 69 2e 61 74 74 72 69 62 75 74 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 7c 7c 6e 75 6c 6c 3d 3d 3d Data Ascii: aign","collection","report"].includes(null!==(t=null===(e=this.collection)\|\|void 0===e\|\|null===(e=e.attributes)\|\|void 0===e?void 0:e.collection_type)&&void 0!==t?t:"")&&!(null===(i=this.collection)\|\|void 0===i\|\|null===(i=i.attributes)\|\|void 0===i\|\|null===
2024-11-21 02:42:25 UTC	192	IN	Data Raw: 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 2e 64 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 2e 74 68 72 65 61 74 5f 61 63 74 6f 72 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 64 61 74 61 7d 67 65 74 20 61 73 73 6f 63 69 61 74 65 64 4d 61 6c 77 61 72 65 46 61 6d 69 6c 69 65 73 28 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 Data Ascii: id 0===t\|\|null===(t=t.data)\|\|void 0===t\|\|null===(t=t.relationships)\|\|void 0===t\|\|null===(t=t.threat_actors)\|\|void 0===t?void 0:t.data}get associatedMalwareFamilies(){var t;return null===(t=thi
2024-11-21 02:42:25 UTC	1408	IN	Data Raw: 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 2e 64 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 2e 6d 61 6c 77 61 72 65 5f 66 61 6d 69 6c 69 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 64 61 74 61 7d 67 65 74 20 72 69 73 6b 52 61 74 69 6e 67 28 29 7b 76 61 72 20 74 2c 65 3b 72 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 2e 64 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 Data Ascii: s.collection)\|\|void 0===t\|\|null===(t=t.data)\|\|void 0===t\|\|null===(t=t.relationships)\|\|void 0===t\|\|null===(t=t.malware_families)\|\|void 0===t?void 0:t.data}get riskRating(){var t,e;return(null===(t=this.collection)\|\|void 0===t\|\|null===(t=t.data)\|\|void 0===t
2024-11-21 02:42:25 UTC	1408	IN	Data Raw: 64 65 73 28 22 61 76 61 69 6c 61 62 6c 65 22 29 7c 7c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 63 6c 75 64 65 73 28 22 72 65 70 6f 72 74 65 64 22 29 3f 22 74 65 78 74 2d 77 61 72 6e 69 6e 67 22 3a 22 22 3a 22 22 7d 63 61 63 68 65 42 65 66 6f 72 65 4e 61 76 69 67 61 74 69 6e 67 28 29 7b 76 61 72 20 74 3b 66 2e 4e 6d 2e 63 61 63 68 65 43 6f 6c 6c 65 63 74 69 6f 6e 28 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 2e 69 64 2c 7b 64 61 74 61 3a 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 64 61 74 61 7d 29 7d 6f 6e 43 6f 6c 6c 65 63 74 69 6f 6e 43 6c 69 63 6b 28 74 2c 65 29 7b 76 61 72 20 69 3b 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 26 26 28 74 Data Ascii: des("available")\|\|e.toLowerCase().includes("reported")?"text-warning":"":""}cacheBeforeNavigating(){var t;f.Nm.cacheCollection(this.collection.id,{data:null===(t=this.collection)\|\|void 0===t?void 0:t.data})}onCollectionClick(t,e){var i;this.collection&&(t
2024-11-21 02:42:25 UTC	1280	IN	Data Raw: 7d 20 3c 2f 64 69 76 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 60 29 2c 68 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 63 6f 6c 6c 65 63 74 69 6f 6e 22 2c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 69 64 29 2c 74 68 69 73 2e 6f 6e 43 6f 6c 6c 65 63 74 69 6f 6e 43 6c 69 63 6b 2c 28 30 2c 79 2e 69 66 44 65 66 69 6e 65 64 29 28 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 54 79 70 65 54 6f 53 74 72 69 6e 67 29 2c 75 2e 4b 4b 2e 73 68 6f 77 54 6f 6f 6c 74 69 70 2c 28 30 2c 6d 2e 53 29 28 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 65 3d 65 2e 61 Data Ascii: } </div> ${0} </div> `),h.Z8.getRedirectUrl("collection",null===(t=this.collection)\|\|void 0===t?void 0:t.id),this.onCollectionClick,(0,y.ifDefined)(this.collectionTypeToString),u.KK.showTooltip,(0,m.S)(null===(e=this.collection)\|\|void 0===e\|\|null===(e=e.a
2024-11-21 02:42:25 UTC	1408	IN	Data Raw: 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 63 3f 76 6f 69 64 20 30 3a 63 2e 73 68 61 72 65 64 5f 77 69 74 68 5f 6d 65 2c 21 28 6e 75 6c 6c 3d 3d 3d 28 70 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 70 7c 7c 6e 75 6c 6c 3d 3d 3d 28 70 3d 70 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 70 7c 7c 6e 75 6c 6c 3d 3d 3d 28 70 3d 70 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 5f 70 72 65 66 65 72 65 6e 63 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 70 7c 7c 21 70 2e 69 64 29 2c 6e 75 6c 6c 3d 3d 3d 28 76 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 76 7c 7c 6e 75 6c 6c 3d 3d 3d 28 76 3d 76 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 2e 6f 77 6e 65 72 29 7c 7c 76 Data Ascii: es)\|\|void 0===c?void 0:c.shared_with_me,!(null===(p=this.collection)\|\|void 0===p\|\|null===(p=p.relationships)\|\|void 0===p\|\|null===(p=p.subscription_preferences)\|\|void 0===p\|\|!p.id),null===(v=this.collection)\|\|void 0===v\|\|null===(v=v.relationships.owner)\|\|v
2024-11-21 02:42:25 UTC	1408	IN	Data Raw: 74 2d 62 6f 64 79 2d 74 65 72 74 69 61 72 79 22 3a 21 28 6e 75 6c 6c 21 3d 3d 28 43 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 26 26 76 6f 69 64 20 30 21 3d 3d 43 26 26 6e 75 6c 6c 21 3d 3d 28 43 3d 43 2e 61 74 74 72 69 62 75 74 65 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 43 26 26 43 2e 63 6f 6e 74 65 6e 74 7c 7c 6e 75 6c 6c 21 3d 3d 28 54 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 26 26 76 6f 69 64 20 30 21 3d 3d 54 26 26 6e 75 6c 6c 21 3d 3d 28 54 3d 54 2e 61 74 74 72 69 62 75 74 65 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 54 26 26 54 2e 65 78 65 63 75 74 69 76 65 5f 73 75 6d 6d 61 72 79 7c 7c 6e 75 6c 6c 21 3d 3d 28 53 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 26 26 76 6f 69 64 20 30 21 3d 3d 53 26 26 6e 75 6c 6c 21 3d 3d 28 53 3d Data Ascii: t-body-tertiary":!(null!==(C=this.collection)&&void 0!==C&&null!==(C=C.attributes)&&void 0!==C&&C.content\|\|null!==(T=this.collection)&&void 0!==T&&null!==(T=T.attributes)&&void 0!==T&&T.executive_summary\|\|null!==(S=this.collection)&&void 0!==S&&null!==(S=
2024-11-21 02:42:25 UTC	1280	IN	Data Raw: 53 7c 7c 28 53 3d 6f 74 60 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 6f 72 64 65 72 20 62 6f 72 64 65 72 2d 70 72 69 6d 61 72 79 2d 73 75 62 74 6c 65 20 72 6f 75 6e 64 65 64 2d 35 20 6f 76 65 72 66 6c 6f 77 2d 68 69 64 64 65 6e 20 70 6f 73 69 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 33 72 65 6d 3b 20 68 65 69 67 68 74 3a 20 33 72 65 6d 3b 22 3e 20 3c 76 74 2d 75 69 2d 66 6c 61 67 20 63 6c 61 73 73 3d 22 68 2d 31 30 30 20 70 6f 73 69 74 69 6f 6e 2d 61 62 73 6f 6c 75 74 65 22 20 2e 69 73 6f 3d 22 24 7b 30 7d 22 3e 3c 2f 76 74 2d 75 69 2d 66 6c 61 67 3e 20 3c 2f 64 69 76 3e 60 29 2c 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 2e 61 74 74 72 69 62 75 74 65 73 2e 73 6f 75 72 63 65 5f 72 65 67 69 6f 6e 73 5f 68 69 65 Data Ascii: S\|\|(S=ot`<div class="border border-primary-subtle rounded-5 overflow-hidden position-relative" style="width: 3rem; height: 3rem;"> <vt-ui-flag class="h-100 position-absolute" .iso="${0}"></vt-ui-flag> </div>`),this.collection.attributes.source_regions_hie

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49858	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:25 UTC	690	OUT	GET /gui/58735.9012aa1d7929d719c24f.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:26 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 5dd7b970850dda1801f443f1832f1187 Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 21:38:00 GMT Expires: Wed, 19 Nov 2025 21:38:00 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 104665 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:26 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 66 66 64 0d 0a 00 00 00 00 00 02 ff ec 5d 6d 73 db c8 91 fe 7e bf 02 66 1c 87 dc 80 30 a9 37 4b d4 d2 5a ad a4 ad b8 e2 b5 7d 96 bd c9 9d a2 d2 42 c4 48 c4 0a 04 18 00 d4 4b 64 fd f7 7b ba 67 06 33 00 01 8a b2 b5 57 b9 2b 6d 25 16 39 ef d3 d3 d3 d3 fd 74 cf b0 35 cb 84 93 e5 69 38 ca 5b db ed 4c 44 67 de 95 38 9d fa a3 8b bd f1 2c be b8 cc 4f 66 e1 c9 c4 0f e3 e1 82 bc 2f 5f 8e 8e 3b de 74 96 8d db 47 47 eb 9b af 56 d7 dd fe c6 ca c6 9a bb b6 b5 b9 de 77 57 7a ab eb 6b ee ea 16 92 8e dd db 95 8d de ca c6 a0 2d dc dc 0d 3b c3 d7 b7 97 7e ea c4 c3 b0 bd b6 f9 aa b7 d6 71 33 7c ec 6f 6c ac ad 77 5c 1f 1f 37 d7 57 7a bd 8e 9b d0 c7 Data Ascii: 0000000100000001000000010000ffd]ms~f07KZ}BHKd{g3W+m%9t5i8[LDg8,Of/_;tGGVwWzk-;~q3\|olw\7Wz
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 6d 18 5f b4 5b 59 16 9d 64 2c f5 5a 56 0b 32 e5 24 66 39 d8 b1 db 2e e5 2c dd 43 5e c8 48 bb 17 93 5a ea c2 24 db 23 d2 32 f3 c4 d7 32 53 e6 d2 7c f6 a4 30 c4 3e d8 8d 03 08 bd 99 90 73 a5 f3 c1 0b 59 3e 76 bc 89 3f 6d b7 71 c8 5b e7 c5 25 ce 8b 4b 3a 2f 2a 82 9e 65 e9 50 91 17 f2 1e d4 5d 96 96 b2 b7 96 2b 3c 96 d3 98 98 f0 94 ac de 4b 02 61 d2 6d a2 a2 28 cb 69 2f 4e f2 93 53 16 c7 d6 d4 4b b9 3e 09 e4 25 67 9e 49 09 5b 3b f5 19 a6 3e 7b dc a9 ab ee 1e 38 f7 29 0b f9 93 0b 71 e3 99 95 8d bc bf fe d5 f3 53 71 f0 cf 99 1f 59 6b 59 5b b8 f5 f1 70 b7 d5 b1 f5 80 09 26 37 e1 c9 d5 48 60 12 aa fa a8 e8 82 65 06 4e 9b 57 fa 34 cc 3b e5 e3 f3 e7 24 98 45 b3 25 a4 0b 37 79 70 3d 4d 62 08 ff f2 41 5a 3a 26 4b bb d4 9a 4b 9a f9 1e 08 70 92 85 ff 82 8a 43 9a 0d 71 Data Ascii: m_[Yd,ZV2$f9.,C^HZ$#22S\|0>sY>v?mq[%K:/*eP]+<Kam(i/NSK>%gI[;>{8)qSqYkY[p&7H`eNW4;$E%7yp=MbAZ:&KKpCq
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: cc c2 d3 48 a8 b4 bb e5 7d 24 97 25 1f 89 e5 47 91 0e 11 89 f2 5c 4b 95 c4 09 83 61 eb 2a f5 09 c6 6c 39 3b d9 c4 87 cb 4a ba 36 9c 9d 89 08 c2 d9 44 7b 3a 4a c8 f3 58 f8 70 c1 00 f3 64 8d 42 03 96 30 33 b5 a9 0a fa c3 bf 93 eb 12 73 c5 76 c6 61 00 4b a1 b6 71 55 d7 51 74 84 5f 43 b7 55 02 bf 25 95 bb 69 72 d5 7a 5d 33 02 5d fb ff 54 7e 09 1a 32 ca 8d d4 31 78 75 24 4b 9d c8 b5 91 5f 14 13 d7 e9 9f 12 f5 d2 8b bd 33 49 4e c3 48 74 4b b4 d7 2b 96 8a f3 59 e4 a7 5d f8 29 a2 40 af 9b 19 02 ce 51 ae fc 17 5e 37 68 4d 6c 90 68 e0 c8 62 d6 ba 61 48 f4 89 86 21 25 3b 30 25 b0 be 0f f6 ee 06 22 f7 c3 a8 18 44 72 25 45 bd e3 85 58 76 cd 8a 1e 1c a6 b1 08 de 98 24 38 dc 32 b4 e1 64 51 92 c3 93 e7 9f 8a a8 81 4f 78 fd cb 7c fa 92 aa 96 5b b0 78 ac fe f0 71 d8 b3 a8 Data Ascii: H}$%G\Ka*l9;J6D{:JXpdB03svaKqUQt_CU%irz]3]T~21xu$K_3INHtK+Y])@Q^7hMlhbaH!%;0%"Dr%EXv$82dQOx\|[xq
2024-11-21 02:42:26 UTC	269	IN	Data Raw: 3c f9 aa e1 57 e7 29 67 61 a6 a5 50 c8 39 3d 59 48 4e 6a 20 94 d1 87 94 5b 6b 69 a4 52 06 b9 55 37 db bf 1d 52 69 8e 42 20 e1 15 b0 52 a3 97 65 b0 52 4b 99 47 41 2b 0d 7d 29 42 44 1a 2d 0a 89 51 f1 1e 0a db 93 dc aa cc 1a 53 8b f9 96 81 4a 0d 98 18 9c 92 01 18 62 80 52 14 8a ec c3 4c 5b 75 53 45 00 ff 66 8c 28 6a 67 31 22 6a 5a 33 a0 e8 49 05 94 64 c6 d3 10 85 44 45 4d 35 44 4c 14 4c ff a8 c8 a8 1e 85 26 5f 01 64 b6 c2 29 2e bb 89 1d ed 9e 7d eb c3 3b fb 59 06 f3 b4 5c b9 04 7c ca 0c 5a 65 f7 55 e1 bc 7d 9f 9e fb 71 f8 2f be 19 52 a9 11 25 f1 b9 f2 76 15 c5 0f 70 b1 31 aa 94 ab b4 7c 0c ec 54 3a 8b 1f 3e 9a 8f e2 9c e2 da fc b4 d2 45 dd 50 74 59 38 51 17 ce 54 87 d2 14 27 2e e1 8e 2a 3e 87 97 53 71 2a 50 6a fb 5c be d3 44 ff 45 01 e2 4b e0 d1 7a 53 b1 4e Data Ascii: <W)gaP9=YHNj [kiRU7RiB ReRKGA+})BD-QSJbRL[uSEf(jg1"jZ3IdDEM5DLL&_d).};Y\\|ZeU}q/R%vp1\|T:>EPtY8QT'.>SqPj\DEKzSN
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 65 0d 0a 30 30 30 30 30 30 30 31 0d 0a 54 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8f 0d 0a 30 30 30 30 30 30 30 31 0d 0a f0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 40 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 49 0d 0a 30 30 30 30 30 30 30 31 0d 0a 04 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 69 0d 0a 30 30 30 30 30 30 30 31 0d 0a fc 0d 0a 30 30 30 30 30 30 30 31 0d 0a f2 0d 0a 30 30 30 30 30 30 30 31 0d 0a a5 0d 0a 30 30 30 30 30 30 30 31 0d 0a d5 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6d 0d 0a 30 30 31 0d 0a 6d 0d 0a 30 66 66 30 0d 0a db a9 2a 72 88 36 da 9f 87 bf 52 24 7e 4d ee 5d e7 57 09 1a 85 c3 72 fd 38 e7 66 51 9b 6c 61 dd 97 4a c5 36 b3 52 4c 47 e1 5c 47 a8 a0 b2 Data Ascii: 00000001e00000001T000000010000000100000001@00000001O00000001I000000010000000100000001i0000000100000001000000010000000100000001m001m0ff0*r6R$~M]Wr8fQlaJ6RLG\G
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 05 35 c7 c1 15 4c 9c d5 74 05 53 64 5e cb c5 09 33 3e 4c 66 e9 08 dd 72 1d 7e 2e 45 3e 5a 24 73 7f a2 e8 6b b6 80 61 6a 66 80 bf 71 64 f0 0b 02 16 d0 2d 23 2e 9e 17 1e 12 d3 12 62 61 b1 7d 71 ca 61 38 dc f4 3e dd 28 50 f1 fc 85 42 ee 20 fe 1b 81 d7 bc 63 c8 b9 20 fd 2c a6 12 b7 62 c2 44 4d 86 1c 28 5e d9 42 ab c5 56 1b 87 d3 d2 64 5a 6e 36 92 67 a1 55 11 f0 81 a2 36 6e 53 c8 9e b3 0a 81 e5 0e ce 30 38 01 80 6c 34 a6 d8 cf e8 06 74 06 29 99 aa 8a f8 a7 82 08 9b e5 b3 20 14 41 85 a6 88 45 54 8d b3 a6 58 22 29 c7 3b ca 94 f7 29 2e 2f 0c 7a cd 14 96 51 27 86 c2 e7 88 3e 47 30 aa 22 2f 4d 7f 8e a8 86 90 76 61 43 c5 ca d0 58 33 ac 21 a4 29 66 e8 68 d2 2c 32 e2 6e 08 e8 d0 44 c4 7c ec e7 0e 1e cb 70 c2 98 69 97 01 a1 61 06 b7 a9 eb f0 d3 0b b8 21 77 ee 81 b3 47 Data Ascii: 5LtSd^3>Lfr~.E>Z$skajfqd-#.ba}qa8>(PB c ,bDM(^BVdZn6gU6nS08l4t) AETX");)./zQ'>G0"/MvaCX3!)fh,2nD\|pia!wG
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: bc 62 ba 1b 58 18 a1 3b e4 f9 cd 5c 7a 42 09 01 b0 f4 f9 58 46 09 10 fa 07 5f 00 fd 4e 04 e2 b6 2e 38 f0 2a f1 fe 93 1f 00 3b b4 83 b4 2c a2 5b 11 37 cd e5 59 c0 14 41 55 0b 1a ae 50 6c a9 c6 e7 57 6a a9 6a a5 35 5f aa 86 59 fa e5 8a 6b 39 bc cc c4 2b 5c bb 54 07 a6 4e 85 a9 97 aa 6d 38 6b b9 e2 16 e3 2d 55 a1 e0 f3 a5 4a 17 db 60 a9 d2 46 3c 54 8b 23 24 a9 78 b3 ae c4 b2 66 ba 4a 17 59 ba 66 31 91 87 56 ac d1 e5 96 ee b4 a0 c7 43 3b 35 a4 99 ab 79 38 94 3b 2f 03 58 55 f7 46 9f c4 cf ba 85 b3 95 5e 09 38 24 8f 3d fd da cf 42 8f fd 07 3c 24 1b bc 05 4e c6 be fa 74 49 5f 3d 2e ca 6e be da 58 93 be 76 84 e3 1a 8f 7a f0 e4 51 7f 24 8f 7a 5a f1 a8 c7 de db 30 3f 90 8f 33 96 e2 0c 17 3c ac 07 17 39 3d 27 54 bc 6e a7 a2 64 f1 fd 01 97 56 fd c5 97 56 13 bc 0d 90 Data Ascii: bX;\zBXF_N.8*;,[7YAUPlWjj5_Yk9+\TNm8k-UJ`F<T#$xfJYf1VC;5y8;/XUF^8$=B<$NtI_=.nXvzQ$zZ0?3<9='TndVV
2024-11-21 02:42:26 UTC	67	IN	Data Raw: da 92 d1 26 51 3d 9d f4 1e b2 36 16 da fc 01 2a de 19 5c 5f 08 e9 13 d7 3e 5d 5b 91 b5 7b 7f 94 7f 1d de 21 03 a7 bb b2 2e 4f 71 d4 71 1c 7c 29 67 bf b2 32 d7 ab 75 57 b7 ac dc 57 73 55 95 7a 80 0d 0a Data Ascii: &Q=6*\_>][{!.Oqq\|)g2uWWsUz
2024-11-21 02:42:26 UTC	1021	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 86 0d 0a 30 30 30 30 30 30 30 31 0d 0a f1 0d 0a 30 30 30 30 30 30 30 31 0d 0a bf 0d 0a 30 30 30 30 30 30 30 31 0d 0a 62 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2e 0d 0a 30 30 30 30 30 30 30 31 0d 0a df 0d 0a 30 30 30 30 30 30 30 31 0d 0a 40 0d 0a 30 30 30 30 30 30 30 31 0d 0a 27 0d 0a 30 30 30 30 30 30 30 31 0d 0a bb 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 39 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 07 0d 0a 30 30 30 30 30 30 30 31 0d 0a 48 0d 0a 30 30 30 30 30 30 30 31 0d 0a 26 0d 0a 30 30 30 30 30 30 30 31 0d 0a e0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 65 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 32 66 65 0d 0a f3 14 Data Ascii: 00000001000000010000000100000001b00000001.0000000100000001@00000001'000000010000000100000001900000001L000000010000000100000001H00000001&0000000100000001e0000000102fe
2024-11-21 02:42:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49860	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:25 UTC	511	OUT	GET /gui/84569.030dc629fa8cc22ed550.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:26 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 337ceeb29674dec1a767b34bb44ae6cb Content-Encoding: gzip Server: Google Frontend Date: Fri, 15 Nov 2024 17:24:40 GMT Expires: Sat, 15 Nov 2025 17:24:40 GMT Cache-Control: public, max-age=31536000 ETag: "fs6b4A" Content-Type: text/javascript Age: 465465 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:26 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a bc 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5c 0d 0a 30 30 30 30 30 30 30 31 0d 0a e9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7a 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a 46 0d 0a 30 30 30 30 30 30 30 31 0d 0a 96 0d 0a 30 30 30 30 30 30 30 31 0d 0a fd 0d 0a 31 0d 0a 3f 0d 0a 30 66 65 64 0d 0a 4f 01 b1 13 37 90 80 10 49 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001\0000000100000001z0000000100000001F00000001000000011?0fedO7I
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: d2 8c 25 1f 25 15 8a d5 b6 38 e4 5a 1c f2 60 16 cd 5d 08 cf 73 0b fc 19 c0 9f 01 fc 1f 2c 61 6a f2 68 d2 b4 59 a8 59 31 2f aa 94 a4 ad 59 b2 2c e2 e9 0d 6b 38 86 00 89 9c 00 4e 43 0a f8 6a 09 dd 19 94 90 65 9e e7 29 c1 d7 c2 4e 76 94 24 f5 68 5b c4 eb 75 b3 30 09 de fe 1a c4 8b 12 3a c3 7f ad 58 69 af 97 dd dd 1d b1 20 cd ab 74 32 e5 d5 cb 38 66 55 e5 29 1d 2f 82 bc c0 b8 f9 44 a9 54 2a a1 36 7a f8 42 43 cb 77 78 00 f0 32 08 1d fb 38 8e 66 69 96 b2 ca 9e 93 6b 8c 79 50 65 69 cc 00 70 cb 1b 6c af 60 67 08 d8 dd 4d 85 34 f3 ef ca 40 10 47 b3 79 94 4e f2 8d 89 2d e6 de 37 b1 e9 ab 64 cd 12 80 31 04 60 0c 01 10 e2 6f fe 02 6f 24 14 a9 5e 59 ba 4f 7a a6 e8 3c dd 27 3d 0a ac a6 00 6b f9 18 f9 f9 89 60 5d 1e 16 9d cd 11 b5 f0 48 3b ba cf 74 2a fa 4b 4d 7f b9 8f Data Ascii: %%8Z`]s,ajhYY1/Y,k8NCje)Nv$h[u0:Xi t28fU)/DT6zBCwx28fikyPeipl`gM4@GyN-7d1`oo$^YOz<'=k`]H;tKM
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: e6 46 d9 4e 4b 38 fd ad 76 28 d1 ad 24 45 60 8c a1 8e 9e f5 4c 9b c4 49 44 0e d0 97 08 2e ea 8e 35 89 1b 9d 2c 2a 37 db bf 41 dc 95 24 a0 7e a3 39 d3 a5 40 83 64 84 46 bf 98 bf 23 0f 2a 52 1f 00 56 b7 07 fc c2 b3 8a 72 ca 12 59 5d de 2f 46 b2 bf d5 de 94 6d b5 05 52 17 90 45 91 0f 14 f2 9a e6 d6 48 12 2d 59 6d 00 53 bf ea a5 6f 62 76 31 3f 80 57 3a d7 1d 6a ac 4c 63 0b a7 ba 9d c1 e8 e2 17 35 66 8d 8f 6c 25 29 11 f8 dc b0 ea 43 41 e3 c9 32 09 0e 0a 45 68 28 a6 c6 4a df 33 86 38 90 5a 91 66 56 f8 0d 11 a2 23 c7 92 4b bd f8 c5 2c 13 8f 8d b5 5b 20 6a 2e 60 1f 91 6e 04 91 14 17 86 e4 0a 44 c2 66 55 2e b0 ef 41 8a 50 64 00 63 ca 66 c1 86 c0 ac 22 ec 50 c1 d1 8a ac e0 80 f9 a2 e5 80 fb 59 3a 4b f9 a0 dd 6a f9 33 8a a2 3e 16 a2 eb 47 b1 1f ca 7d 96 53 48 9a 20 Data Ascii: FNK8v($E`LID.5,7A$~9@dF#RVrY]/FmREH-YmSobv1?W:jLc5fl%)CA2Eh(J38ZfV#K,[ j.`nDfU.APdcf"PY:Kj3>G}SH
2024-11-21 02:42:26 UTC	451	IN	Data Raw: 8b 50 ad 74 92 1d bf 07 3a 5a ef b2 a2 f8 b4 d8 d5 bc 24 af 3e ca 2a 4b e5 64 41 40 db 5e ca fa ef d1 3c 11 35 43 a3 77 5b 6e 22 6e 47 d7 82 12 64 6d 68 eb 2f a2 6b d2 ef 83 2a 6c 36 7e 12 aa 47 49 6e bd 25 7c 2c 47 b6 66 d9 51 67 39 ce ef a9 d1 72 c6 7d 4a bd 3f d3 f3 80 a8 22 0e a8 d3 3e d6 1b b3 fb d5 79 ef 54 bb d2 5a c7 03 25 bd 55 a9 98 12 a5 1d 81 91 3b a0 dd 48 c0 a4 84 ea 6c d1 03 eb 31 3d 1e bd 16 d3 c3 cc b1 bb 90 3a 3e 96 f0 07 e3 b4 ac f8 47 0b b9 a7 ec 14 45 b7 1b 84 ef 22 ef 64 52 57 3a 2e a0 4d a8 9a e6 1e 1b 25 5b e8 a0 e0 d7 fa e5 e6 43 9a 40 3b 08 f8 57 d9 ff 7e 36 5b a3 de 87 09 9c cc 17 db 31 5b 0b 4f 0f 58 67 4c a7 97 4d ce 79 d3 ad 20 17 f5 80 84 08 87 be ed c3 d2 f9 fd 48 ec 9b e8 10 24 c6 d9 7c 01 07 be ed bb b0 d9 24 99 d8 49 1e Data Ascii: Pt:Z$>KdA@^<5Cw[n"nGdmh/kl6~GIn%\|,GfQg9r}J?">yTZ%U;Hl1=:>GE"dRW:.M%[C@;W~6[1[OXgLMy H$\|$I
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 9e 0d 0a 30 30 30 30 30 30 30 31 0d 0a ee 0d 0a 30 30 30 30 30 30 30 31 0d 0a 69 0d 0a 30 30 30 30 30 30 30 31 0d 0a 46 0d 0a 30 30 30 30 30 30 30 31 0d 0a c5 0d 0a 30 30 30 30 30 30 30 31 0d 0a 56 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2b 0d 0a 30 30 30 30 30 30 30 31 0d 0a ca 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a a4 0d 0a 30 30 30 30 30 31 0d 0a ee 0d 0a 63 32 33 0d 0a c6 3b 66 94 5a 6d a4 7c ec 6b a7 6a ae ae 02 70 f1 4d 84 83 b9 38 d4 f6 7c 45 57 e3 f2 70 81 13 b0 b8 56 87 3b 7a 97 ad 2b 3a a6 7e d9 36 c7 d7 e4 94 45 3e 4e 27 c8 37 ff 54 94 a0 f9 6f e3 97 f4 d6 fb 7d 8c cc 6e 99 16 38 ca 22 4e eb 7a ea 0e 17 25 8d 3f e0 bc 35 2e c4 b0 0a 9d 70 3a 13 Data Ascii: 000000010000000100000001i00000001F0000000100000001V00000001+00000001000000010000000100000001000001c23;fZm\|kjpM8\|EWpV;z+:~6E>N'7To}n8"Nz%?5.p:
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: d8 4e e7 1c f5 ed ae ef a8 5a 49 89 9a f3 1c c3 9e f4 f0 bf 96 5a b9 76 71 f3 bb a9 6f 85 d3 02 7b 9d d1 99 e2 6b 85 af 0e e4 10 83 e5 4e ab ce 39 fd 6c 52 2f ee 99 5b 23 75 5a bd 56 c7 28 0e d6 b0 dd a0 d5 3a 3d ed 6f ad 64 bb 4d bf 05 49 d9 5c cf 76 93 5e d2 3e 6d ab 55 21 8a 9a f2 9d 89 6c 09 21 a9 be b7 81 66 15 2e d2 23 a7 04 6b 4d ac 1c 27 c9 58 a9 5d 0d 8a dd 82 b5 e8 67 13 90 8d fa 78 7c ce 98 ac 17 0c dd a8 ec 8e 4f b4 36 ea cb fb 76 3d 54 b5 c3 94 3e 2b a6 6e 54 47 ac ad e7 96 00 6c d4 c6 63 fc c8 99 c5 e2 ed 4a 5b 01 cd c2 c5 b5 c7 7a f1 e7 c9 a8 3f d6 4b 33 12 31 da 6a 15 77 e8 67 0b 80 ad 36 a3 56 c2 46 ca 54 49 10 b6 1a 9c 9f c7 d1 58 2d d4 00 b1 d5 66 dc 8d cf ce 95 e8 69 30 b6 9a b0 7e 74 16 29 ed 51 80 6c b5 b0 cd 94 04 65 ab 81 6d 82 84 Data Ascii: NZIZvqo{kN9lR/[#uZV(:=odMI\v^>mU!l!f.#kM'X]gx\|O6v=T>+nTGlcJ[z?K31jwg6VFTIX-fi0~t)Qlem
2024-11-21 02:42:26 UTC	452	IN	Data Raw: 87 55 c4 9f 86 5a 41 eb 4e 9b 6b f1 6a d3 b5 05 01 7d e5 80 b6 31 b4 a6 ad de a6 42 b5 51 6b db d7 4a 56 21 19 6f 45 f0 6d 24 df c9 a6 6e b5 17 85 ca 5e 4a bb 43 e1 0c 2b 87 72 13 26 37 3c 79 41 76 63 b8 65 a0 46 11 64 14 33 68 2b a4 a0 da 9a 60 03 47 4f b1 7f 80 f8 9d 2f 57 1a 3c a1 64 3f 7e 62 cb 71 89 54 74 e5 cc cb 02 09 b8 0a 29 41 28 3a 9d 43 9c b3 6a d5 fa 76 35 42 6a 6d 22 be be d7 34 9f 7f fb 2c 76 34 eb b5 d5 9d 54 1f 76 b2 29 a7 5e f1 02 5f cb 41 a4 46 fe 0e 7e 87 c3 2e ba 27 3d da 85 21 af bc a7 1b 66 b8 a5 d9 ea 4e f8 94 60 86 ef a8 79 eb 2e 8a b5 7b a7 8f b2 e8 51 c5 02 ec b1 20 13 31 9b 16 19 05 98 13 a4 17 57 76 cf a0 d5 de 98 d8 6e 7c 8b af 1a ad 90 f1 fb d6 18 a3 59 54 7d 32 cb 1d 20 39 db fa d6 69 7d 3b dc 5f bc 5e 07 06 19 fd 61 bc 95 Data Ascii: UZANkj}1BQkJV!oEm$n^JC+r&7<yAvceFd3h+`GO/W<d?~bqTt)A(:Cjv5Bjm"4,v4Tv)^_AF~.'=!fN`y.{Q 1Wvn\|YT}2 9i};_^a
2024-11-21 02:42:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49859	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:25 UTC	689	OUT	GET /gui/6209.c71bf99427508f94bc7c.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:26 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: f33551bd4fdd5212fca691ed76bf17d1 Content-Encoding: gzip Server: Google Frontend Date: Wed, 20 Nov 2024 22:09:12 GMT Expires: Thu, 20 Nov 2025 22:09:12 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 16393 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:26 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a bd 0d 0a 30 30 30 30 30 30 30 31 0d 0a f9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 63 0d 0a 30 30 30 30 30 30 30 31 0d 0a 13 0d 0a 30 30 30 30 30 30 30 31 0d 0a c7 0d 0a 30 30 30 30 30 30 30 31 0d 0a 96 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2f 0d 0a 30 30 30 30 30 30 30 31 0d 0a fe 0d 0a 30 30 30 30 30 30 30 31 Data Ascii: 0000000100000001000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001c00000001000000010000000100000001/0000000100000001
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 04 00 fd 6e 9c 78 cb 6c 26 59 6c 97 35 5f c4 29 40 cb c3 11 40 22 bf e2 38 99 be 0f 32 ec 6e 73 18 cd 93 2c 1a 27 7f c4 bc fc 5a 30 8a b2 a8 39 48 9b d9 ec f4 54 81 5a 0b fe 32 1c 27 c3 f7 fd 1a 01 a2 16 44 8b 24 6a 82 50 61 01 f1 c8 14 ca 16 0c 96 59 36 9b 3a 58 46 04 c3 71 f2 10 c0 c3 f4 c7 2d de fb 17 d1 bc 51 bf 92 bd eb 31 84 d2 e5 20 15 70 00 08 d9 0a 95 63 c0 94 3f 9d ce 5e cd 00 2d fd cc 20 09 2b da 84 c0 40 1e 23 6a fd da 20 7c 9d b6 8e 1b f5 42 c5 f0 cd 1b 77 1c 88 2a 7a 20 3d 05 48 4f 01 52 5a 22 66 cb 2d 05 a3 fd 7d ab 37 1a 6f c3 37 de e9 09 0b dd 2c d1 cd b2 b2 9b 97 e6 f0 51 1f 6f 31 db 55 55 f7 8c 48 4c c2 c3 85 a2 93 37 c9 73 f4 7e ce 07 29 05 a6 9b 1d a5 93 94 8e 67 59 2d a0 ff f7 6b 38 b9 16 d1 08 ed 6b c1 d1 18 74 14 27 44 f6 ef 28 9d Data Ascii: nxl&Yl5_)@@"82ns,'Z09HTZ2'D$jPaY6:XFq-Q1 pc?^- +@#j \|Bw*z =HORZ"f-}7o7,Qo1UUHL7s~)gY-k8kt'D(
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 16 14 69 dc 91 87 4e a2 46 04 3a 3d a2 d9 a4 a0 80 a0 8e c1 ef 8d 46 af 06 ed 26 69 da 88 36 3c 1b e9 1a 16 e6 80 cb 37 f7 ab 48 ed 43 3d 9d 4f 70 38 a5 46 ae 44 2a 41 0b 9a e9 68 a9 ab 58 2c 05 3b 74 78 ca dc ce ac c4 ed 7c 3f 83 6e 32 9a 86 0b d1 34 f7 ee b5 89 67 58 fa 9c 8f 3d 3e 8e 3d 58 f6 4d 7f 45 f6 40 90 7b 34 23 6b 41 73 32 1b 24 d0 c3 0c a3 c5 a8 46 bd 82 45 c0 b5 be 7b 7b 16 41 95 fb d0 4b 43 7b bf bf 75 00 95 3e 78 81 9d ad ee 16 c9 e8 5c ba d5 dd 83 a9 00 7c 43 f7 60 6b 1f a5 64 13 d8 e9 ec ed 6e 0b b7 30 0a 99 5f 70 bc c2 d9 1d af f0 85 78 85 49 81 57 58 78 7a f7 9b 32 0d a4 9c 13 a2 97 82 6d 10 7c 9f ce 70 c8 c1 d1 bb 92 34 c6 6d 0b 85 15 9d 4f 68 69 fb 57 30 a1 80 bd 88 c6 bd a8 15 7f 80 f2 76 c2 17 da 2b 28 80 a7 d0 0e f3 31 3e 4b 4e cf Data Ascii: iNF:=F&i6<7HC=Op8FD*AhX,;tx\|?n24gX=>=XME@{4#kAs2$FE{{AKC{u>x\\|C`kdn0_pxIWXxz2m\|p4mOhiW0v+(1>KN
2024-11-21 02:42:26 UTC	469	IN	Data Raw: e3 c7 ed 9d ee 36 fc 42 cf a8 54 bc 3a 27 54 ba dd de 41 0f a7 f8 71 77 6f bf 0d c5 d0 92 d4 41 db dd ad 2e 86 a3 aa 3b 5d d6 16 ed ed 1c 6c ed 41 2f 74 8e 9a 7b 9d dd ad 5d 62 93 ba 7b 9d 83 3d 61 76 3c e7 cf 10 3e 9f e1 a3 f0 71 f8 2c 7c 19 be 0b 5f 85 bf 84 bf 86 cf c3 7f 38 16 e8 f5 1d 03 f4 05 18 20 ba 84 9e 16 94 47 e7 ad f7 37 d5 19 59 bd a4 d5 18 91 7e 95 cc cc fd 9a 28 20 6b b7 50 b7 2c 89 8b 11 c3 f5 88 5c 54 d9 be a5 96 6c 2a c0 05 03 c1 18 f6 4f d6 e1 d6 e0 04 c1 a4 eb 9d fc fe 58 e8 8f 78 f4 49 91 b9 75 ab ac 59 e2 17 f5 8f 3c 4f 44 6a 52 e7 20 e6 49 94 f4 41 5d d1 8c 34 c6 1a 8d 0b 68 df 83 7f c0 3e 9b 9c 5c 1a 5f d5 e6 20 ce 2e e2 78 1a b0 32 c7 c8 9b 7c 13 55 58 6a b8 67 96 f2 46 4d ea 32 6f e3 b2 ca 71 5e a9 30 17 a2 77 27 5f 3c 21 64 86 Data Ascii: 6BT:'TAqwoA.;]lA/t{]b{=av<>q,\|_8 G7Y~( kP,\Tl*OXxIuY<ODjR IA]4h>\_ .x2\|UXjgFM2oq^0w'_<!d
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 3e 0d 0a 30 30 30 30 30 30 30 31 0d 0a f0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5b 0d 0a 30 30 30 30 30 30 30 31 0d 0a c6 0d 0a 30 30 30 30 30 30 30 31 0d 0a cd 0d 0a 30 30 30 30 30 30 30 31 0d 0a 31 0d 0a 30 30 30 30 30 30 30 31 0d 0a 43 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3f 0d 0a 30 30 31 0d 0a be 0d 0a 30 66 66 37 0d 0a 1b 60 66 1c de b2 d6 10 37 ee e9 6c 91 c4 e8 58 9c f9 8d c3 74 b1 91 e7 16 3d 9f cd 97 f0 bd 84 8e da 36 52 f0 16 1b 25 66 a4 a4 c5 9f 7c 2e 5a fc e5 0a c8 e9 8e bc 8f a6 06 03 2d af 99 53 30 e5 05 83 47 aa 45 c5 e9 c5 41 64 20 c5 c4 26 61 a1 8f 16 a7 16 f1 10 07 40 4c 59 71 c2 33 33 e1 99 07 9a c6 91 ad eb 95 56 09 2c e2 05 46 6b b2 1c f8 20 82 dd 1d ce f1 4b 38 e6 8f 9a f3 64 3c 26 a5 13 b1 a0 4d 78 db 40 Data Ascii: 00000001>0000000100000001[000000010000000100000001100000001C00000001?0010ff7`f7lXt=6R%f\|.Z-S0GEAd &a@LYq33V,Fk K8d<&Mx@
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 7e 40 38 32 bc d4 0c 3e d8 39 e8 cc 45 bd 40 e9 23 88 ba cf a6 c7 76 8e dc 8e ac b2 c2 b4 62 a2 fa 09 b3 0d e1 8c 74 da fa 7b ec 4d 0e dc 94 b0 ff 29 7d 34 ec bd 27 ca 85 75 0a ee 96 f8 aa 6b ac 64 f0 25 16 9f 64 f8 91 c4 ff 84 45 1a 9e 74 b0 95 0d 96 03 b8 6c a7 70 fa 0d 81 44 20 5f f1 88 7e 86 d2 8d 02 a9 ae 92 91 d8 cf 54 30 a1 bf 48 bb de 33 73 51 53 da 14 21 20 f0 57 79 09 64 cc 62 eb 9d a4 bc 84 f3 0a 67 78 bc 5b e7 d9 8d 9b 7b 12 9d 4e a1 c9 06 34 7e 04 e7 93 d2 76 20 9c 2c 95 43 ca bf 71 17 ff 88 16 13 9f a1 f8 15 a8 f4 ab de cf 65 fc 2e 51 84 e2 91 f0 74 44 c2 ec 61 43 89 38 6d a2 16 ff f6 e8 e5 0b 7b 38 ff 8b c6 84 8e 1b 9a ad 00 40 39 49 4e 97 48 f8 01 2d 9e cc 01 6c 8f 11 08 e5 aa 22 71 f0 4a 10 d8 ee 55 48 60 93 ed a4 9f 56 84 53 f7 c8 9c a6 Data Ascii: ~@82>9E@#vbt{M)}4'ukd%dEtlpD _~T0H3sQS! Wydbgx[{N4~v ,Cqe.QtDaC8m{8@9INH-l"qJUH`VS
2024-11-21 02:42:26 UTC	1391	IN	Data Raw: 15 fd 8e 54 60 30 ae bf a5 36 aa a0 2f 95 3f 84 3b a7 e7 82 47 93 76 dd 8b b0 fb c3 38 3a 15 8f 00 dc 94 4f 59 81 43 45 3f 2c 66 93 67 aa bb d0 d9 e8 6f b8 bf e0 f9 c1 6e 7d e5 dd aa c1 2f 48 3f c2 3c cd 1a 13 af 84 34 6f 85 dd f2 1a 94 66 0f de d8 81 c2 6e 84 cc a6 3c b4 4a 4e 3a 2c b5 d4 00 c3 52 bf 20 d9 22 3c 55 a1 8f b7 3c 87 41 de 2c 1d 4a e4 a6 e7 21 85 c8 3a d6 67 cc d8 49 5c c3 c6 aa 4a c3 65 18 0a 6d ee e9 b9 fa 20 88 53 f6 ce 62 07 1b 84 af 33 0c c2 da 63 0e 77 9f 9e 06 cf 71 c1 20 e9 2c 08 3e 85 3d c5 59 2b f8 15 48 8a ec a5 17 51 92 21 a0 be 46 f9 e0 a0 28 83 bb 32 d4 70 b2 cb a0 ec 34 94 1c 5c 61 54 29 e0 02 2a 2f 30 25 ac 25 ab 9a 49 07 77 e9 bb 13 18 d0 09 39 74 2f 25 b5 10 65 28 25 ed dd 66 ad 5a f6 c9 0a 34 99 8d 22 21 6b d1 20 24 ab 99 Data Ascii: T`06/?;Gv8:OYCE?,fgon}/H?<4ofn<JN:,R "<U<A,J!:gI\Jem Sb3cwq ,>=Y+HQ!F(2p4\aT)*/0%%Iw9t/%e(%fZ4"!k $
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a d7 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2c 0d 0a 30 30 30 30 30 30 30 31 0d 0a f8 0d 0a 30 30 30 30 30 30 30 31 0d 0a f0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 71 0d 0a 30 30 30 30 30 30 30 31 0d 0a ae 0d 0a 30 30 30 30 30 30 30 31 0d 0a 12 0d 0a 30 30 30 30 30 30 30 31 0d 0a ee 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 56 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 36 0d 0a 30 30 30 30 30 30 30 31 0d 0a fa 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8f 0d 0a 30 30 30 30 30 30 30 31 0d 0a ee 0d 0a 30 30 30 31 0d 0a c9 0d 0a 30 66 65 64 0d 0a c7 2a 9a e0 52 10 Data Ascii: 0000000100000001,000000010000000100000001q0000000100000001000000010000000100000001,00000001l00000001V000000010000000160000000100000001-000000010000000100010fed*R
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 7d 43 36 06 3e 24 2a d6 eb e5 d8 1a 98 64 32 03 aa 47 ab fe 8d dc 3e 7d 90 0c 8f 86 bd 76 e3 db ce aa 89 c0 92 3c ef 5f 02 a5 e9 84 40 07 65 12 98 b2 da 2b b6 02 e2 c1 61 32 06 1a 9c 9a db b9 22 f3 b2 c3 13 9f e9 83 a6 cb ac e7 ac 7f e6 63 a0 37 fd 33 33 fd 33 c9 85 e3 11 84 f9 d1 fc 16 f8 85 e9 31 6a 59 c3 b9 91 9c 0c 77 58 e6 04 e5 39 d8 2f cb 09 e2 0e 8f f4 1d 59 ce dd 8f 4c 51 27 27 c9 07 13 56 5c 88 9d 26 8d 1c 94 6e 09 3d e6 5a 78 26 f8 61 f0 1b 58 db 40 54 e4 f1 08 79 68 54 12 94 a0 ba ef e8 79 28 57 46 ba 3a 24 84 82 d3 df 2f d3 f1 a5 65 f1 c0 56 cf 67 70 26 b2 05 70 27 4b b3 63 52 30 82 37 4d 9f 16 3e ff 05 59 ac b2 cb 26 09 9c c9 d0 e8 c4 89 2b c9 0d 56 64 53 fc 6b dc ca ab 9f 7c 81 6f 0c 1a 1d b4 c4 a4 70 2c 5c ba 78 c3 e1 1d 01 05 0d dc 04 21 Data Ascii: }C6>$*d2G>}v<_@e+a2"c73331jYwX9/YLQ''V\&n=Zx&aX@TyhTy(WF:$/eVgp&p'KcR07M>Y&+VdSk\|op,\x!
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 36 bc d3 e9 1c 70 3f 07 30 24 6b 9d 6d 7d 24 60 5b 6d c3 9d ed 7d 36 05 f3 bb 02 db 7b bb 78 7e 7a 89 c5 88 85 98 df 10 d0 57 0c 4e 78 89 78 ab ba 11 5e d2 c2 f7 3b 5d cc e8 82 ea 62 31 68 f6 01 3f 6a 70 f8 7b 2a 15 bb f2 d7 54 2a 4f 17 3c c1 8f 6a 57 3e e6 53 bd dd a1 76 58 14 80 44 e6 e8 47 d2 ac 83 a9 3e c6 8f 9d 1d 58 b2 25 90 bc f0 3e 41 f8 3a 7c 1a fe 11 be 08 bf 0f 7f 08 7f 0e ff 1a fe 18 fe 16 fe 14 fe 47 f8 cf f0 6f e1 bf 87 7f 0f ff ad 10 76 fe bf 25 48 48 43 6b 5d 84 30 bb ff b3 77 06 54 bf ea 0b d7 30 61 1f 19 02 69 71 6d ba da 14 67 44 5c 43 a2 2a 8b ec 88 ee db 5e 8d d2 3a 73 7a e5 9a 0d 31 96 58 62 98 51 4d 54 31 9c 3d 20 d3 cc 16 6f 61 bf 7c 83 b0 5f f3 7b 8d 63 8c a9 9f 7b 36 c0 18 62 5c 0a d3 d3 b4 0f a5 d8 98 82 80 28 fa f1 10 b6 5b 0a Data Ascii: 6p?0$km}$`[m}6{x~zWNxx^;]b1h?jp{TO<jW>SvXDG>X%>A:\|Gov%HHCk]0wT0aiqmgD\C*^:sz1XbQMT1= oa\|_{c{6b\([

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49861	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:25 UTC	689	OUT	GET /gui/5978.4206cee10d7d4c2afd11.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:26 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 5ebb272b5b8ae44f3f685799a110bd1d Content-Encoding: gzip Server: Google Frontend Date: Fri, 15 Nov 2024 19:34:04 GMT Expires: Sat, 15 Nov 2025 19:34:04 GMT Cache-Control: public, max-age=31536000 ETag: "fs6b4A" Content-Type: text/javascript Age: 457701 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:26 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 66 66 35 0d 0a 5d 79 97 db c6 91 ff 7f 3f 05 4c db 13 c2 0b 40 24 67 38 07 29 4a b6 65 39 d1 da 4a b4 3a 36 9b 55 f4 14 90 6c 0e 91 01 01 06 00 e7 30 cd ef be bf aa 3e d0 38 c8 99 28 89 37 2f 6f 35 f6 88 ec b3 ba ee aa 2e 40 9d 4d 2e 9c bc c8 a2 59 d1 19 77 73 11 2f 82 1b 31 5d 87 b3 ab 67 cb 4d 72 75 5d 7c dc 44 1f 57 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000ff5]y?L@$g8)Je9J:6Ul0>8(7/o5.@M.Yws/1]gMru]\|DW
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 44 40 bd 08 e7 9d 51 e7 1d 9f ee d0 12 9d 1d a0 9d 8b ec 59 9a 2c a2 6c f5 ed a6 28 d2 a4 8a b8 65 b1 8a dd ee f5 cf 3f 77 af 27 af fe f4 78 ca 43 9c 79 58 84 7e 21 f2 62 d2 01 ad 69 ae 2f 01 ee 38 cc 0d 93 ce b4 48 1c fc ef a7 9b 22 06 f3 f8 80 73 15 66 77 ce fa d6 1f 76 1c 12 85 49 27 df 4c 81 f7 8e 13 cd cd 32 12 66 09 48 e7 89 a3 00 d3 d8 78 fc 48 ee ff e4 4f 90 63 09 7a 1b b4 77 80 f6 8e a0 9d 47 d7 1a 9e 6b 30 c8 ec ca b9 0c d7 fe 89 13 c6 d1 65 e2 83 e4 ab dc 9f 81 5e 22 c3 5e 5f 6c 7b 3b e7 31 b0 bc 72 be 96 90 4d 3a d4 66 8e 74 ff 12 8f a3 64 bd 29 d4 e9 16 a0 74 c7 59 46 f3 b9 48 f8 88 d4 f0 46 90 ec a7 59 c7 f9 7a b6 0c 93 4b 60 81 f7 50 db 33 0c b5 5f f6 29 6e fc f3 9e b3 f2 c3 4d 91 3a 38 08 a0 7e 7c 5d f8 9b c8 2f 52 9c 04 52 87 c3 54 b6 7f Data Ascii: D@QY,l(e?w'xCyX~!bi/8H"sfwvI'L2fHxHOczwGk0e^"^_l{;1rM:ftd)tYFHFYzK`P3_)nM:8~\|]/RRT
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: a0 a7 d8 97 90 58 83 e0 c5 c1 17 37 12 1d d2 d9 80 82 58 53 22 e6 39 94 5c d1 a5 f0 f7 19 14 59 ba 92 df d9 17 f6 65 00 82 98 b4 e3 6d e7 a2 08 a3 78 b4 25 35 35 e2 ee 8e 17 cd 47 62 47 fb 42 3f 51 f8 25 19 ed 81 84 a2 14 11 e6 41 79 16 93 3b 52 9a 0c e4 7f be 94 40 8e 91 9a 48 49 8b 7d 0a 90 05 c3 a4 d3 4c 48 7f 7c d6 ad d0 90 91 86 5c 43 a5 31 0f 7e 83 6c c8 6b 31 0b d7 40 4b a8 03 7b 1e 8b dc 08 32 1b b3 74 2e 5c 95 43 6a 52 60 dc e0 89 92 85 08 49 a0 0c fb cf e0 51 29 28 5a 72 aa a9 07 77 87 34 4e c5 0d c4 04 ca ad 64 63 89 2d 99 ab 78 49 0e b2 a2 15 3b fa 20 d1 75 24 6e 46 37 51 32 4f 6f bc e9 66 0a 77 2e 1f 7d d6 f3 60 d6 66 22 26 27 17 df 76 ee 58 25 90 20 0e 0d e9 03 4e 64 ba 80 ce 0b fc d4 08 20 00 5c 3d e0 22 c1 27 f0 c4 38 0b d6 19 99 cc e2 3b Data Ascii: X7XS"9\Yemx%55GbGB?Q%Ay;R@HI}LH\|\C1~lk1@K{2t.\CjR`IQ)(Zrw4Ndc-xI; u$nF7Q2Oofw.}`f"&'vX% Nd \="'8;
2024-11-21 02:42:26 UTC	366	IN	Data Raw: 1b 39 88 3d aa d8 b1 e0 ab 2e 6f 1f ea 00 ca 6a cb d1 9d 51 89 6c ac 08 8f 16 65 3e c8 00 7d 33 99 ee 3c aa f4 fb 3b f2 d8 af 1e 7d f5 19 58 e5 2b 07 e2 56 e0 fa 32 5c 3b ce f5 30 38 0e 06 4e 77 59 14 eb 7c f4 e8 11 ae 5c a7 ba 17 79 d5 d5 23 97 67 3c 4b d7 77 19 f1 91 33 e8 f5 fb fe a0 37 38 76 e8 7a ae 5c e9 9b 4d b1 4c b3 9c 47 ff 88 f8 0f 81 2c 2e 86 a9 7c c8 79 f9 e2 ad b5 01 2e 2d 37 53 5e ba b8 99 e6 8f cc 6e 8f 70 b5 3c 7d 44 99 a4 47 3f be 78 f6 fc b7 6f 9e f3 d6 8f 46 19 e0 d9 4a de 04 31 47 ce e7 bd e9 c9 7c 1e 8e b9 09 49 d5 e8 32 45 e3 e9 69 bf b7 18 c8 c6 f5 26 83 5f 4a 8d 8b 93 c1 ac af 1a 11 60 d3 64 fe 23 9b c0 44 68 99 a1 36 73 d0 93 2d 28 ab 03 fb a0 51 0c cf 8e 7b aa f1 4e c4 71 7a 83 c6 c5 4c 5c 9c 9e c9 91 14 cd 43 1a 3e 3f be 08 67 Data Ascii: 9=.ojQle>}3<;}X+V2\;08NwY\|\y#g<Kw378vz\MLG,.\|y.-7S^np<}DG?xoFJ1G\|I2Ei&_J`d#Dh6s-(Q{NqzL\C>?g
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 9c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 70 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5f 0d 0a 30 30 30 31 32 34 36 0d 0a 70 73 3f a4 1f 39 5a c9 17 e0 b3 89 9c 6f 38 c8 a5 a3 5b d8 a6 08 9f 06 f6 ce a6 fa 20 37 08 c2 a1 f9 e9 78 16 fd a4 4a 40 a3 4d 69 b5 93 9f 5d 4e a1 1b fb 9e 73 76 e6 39 a8 b7 95 70 a8 1d 65 ef 10 3d fd b3 01 86 28 7c d1 ce b2 ab 87 9e c1 31 26 1e 2b 5e 51 10 c8 de c1 e0 02 fd fd a1 e7 a8 5e 09 89 da f3 02 cb 1e 9f e2 7f cd b5 52 57 72 bd 0d d5 72 20 81 1c e5 74 c0 d3 c1 f4 4c d1 d5 d4 24 34 46 0d 2e e8 a7 0a 3d 2b 22 6b a5 41 ef b4 37 30 82 83 33 d4 07 f4 7a 27 27 e7 b5 93 d4 c7 9c f7 c0 29 d5 f3 d4 87 9c ce fb 27 7d 75 2a d4 d2 2d 8b Data Ascii: 00000001000000010000000100000001p00000001_0001246ps?9Zo8[ 7xJ@Mi]Nsv9pe=(\|1&+^Q^RWrr tL$4F.=+"kA703z'')'}u*-
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: f5 85 6f c7 8a 0f 5b 1f 4f b0 5e 45 85 4f 55 0a 21 ec 02 dc 44 39 4b 1f 9e 98 64 a4 cb 83 dd ea c2 12 27 f5 4e b9 4f 7b 9f da b6 d6 59 3f c4 68 04 f9 fb 09 35 3b a4 ba 22 94 61 67 db 35 aa c3 49 72 7b 63 45 24 7e 60 4e 22 04 c3 d5 29 50 e1 00 8f 78 25 7c c8 74 81 67 0e 50 26 98 33 6f 20 af eb ed 1b 46 38 de db b9 8a 92 4d 21 f6 76 2f e1 aa cb 7d f6 0e 99 87 f4 f4 03 20 d9 3b 02 3e 78 b1 bc 67 cc 1d 39 e3 bc 4c 89 8a 5d 79 22 46 92 9f af 51 f0 a4 38 47 f1 13 3d 75 65 8d 53 b7 0e a5 1e 69 63 00 e6 b2 72 6d a9 52 f2 1b 2a 90 d4 c8 6c 05 82 2f 29 65 59 b0 86 82 98 7d a4 f9 5c 53 a9 c9 6b a3 11 cf 95 d5 75 69 f6 57 ce 46 3e 9e eb b2 eb c2 3d 45 d5 2c c9 d6 ee bd 7c 34 eb c3 56 e7 b0 e9 84 ce 67 d1 8a ea 67 f1 60 c2 ce ce e6 91 12 61 69 f2 6f c9 eb 51 3e 57 d9 Data Ascii: o[O^EOU!D9Kd'NO{Y?h5;"ag5Ir{cE$~`N")Px%\|tgP&3o F8M!v/} ;>xg9L]y"FQ8G=ueSicrmR*l/)eY}\SkuiWF>=E,\|4Vgg`aioQ>W
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 68 45 b6 e9 6d c5 7a d9 5b 83 8e d1 cf 2a ab fe ca b7 26 71 eb b4 aa e3 fb d3 48 d9 3a eb 9e a5 9b a4 b4 ee 63 4b 27 e9 c1 94 ac c1 b0 87 92 ed a3 fe 1e 94 ac 63 b6 24 d7 3e ff b7 1c d1 46 50 89 02 5d b8 24 4b c3 41 64 7a e3 9a 22 2b 7d 2c 3d 37 ba f0 3e a5 4b 46 29 d0 95 4e 8e 0e 8e 6b 9d c6 57 1b f5 02 be 9d b4 26 da e9 75 a7 ac 4b e2 45 15 eb 96 3a 86 ea ac 49 5d 59 f3 15 ed ef f3 c4 81 81 87 38 ae d5 b3 d8 ae 6b a5 e7 b6 dd 2d e5 31 e6 b0 fb 1c d3 72 54 9b 6b da 6f b8 a0 3c 5e 99 7e be de ac 38 a1 b2 86 4e d6 ab e1 a5 24 b8 d6 1d d7 fc 52 7d ab a3 13 5d 0a 55 25 56 79 83 0a 1e 49 71 53 eb 08 e5 57 c5 9d c9 fe ca 80 1b 5a cf 51 dc b1 4e d5 8d 40 86 17 60 90 d1 1f 17 e9 7a e4 a3 c8 62 17 f0 fb c1 24 ff c8 57 85 b5 46 67 b2 cb 04 05 88 3b 35 5f 55 7b c0 Data Ascii: hEmz[*&qH:cK'c$>FP]$KAdz"+},=7>KF)NkW&uKE:I]Y8k-1rTko<^~8N$R}]U%VyIqSWZQN@`zb$WFg;5_U{
2024-11-21 02:42:26 UTC	530	IN	Data Raw: 4d ca 01 1a cd 2c 35 84 b7 2f 77 60 7f bd 8e 05 ed df ce 18 06 79 75 2a 36 51 63 86 12 0d 1b 79 22 c2 7b 39 a2 9d 5a 7a 4d a6 52 f3 fe ab ce ef 75 90 9a aa c5 3a bf a1 29 01 72 00 55 ed 90 d1 24 b3 98 85 e0 fa 1d 9f c9 06 eb 5b ca 52 11 ee 1b 2a d3 22 f5 ac 0a e1 d0 80 7c 20 4d 52 c7 c1 7d d9 97 f6 e3 b5 cd 52 9c 26 43 10 59 ff a0 6a 5c 54 8f 0a c5 64 23 d7 47 c8 8f 76 a2 c8 51 49 23 ca cb d4 ef e5 da 36 65 e3 59 3e 3d 30 e2 57 69 60 b2 a8 d5 fe 68 4e 92 e8 6d 94 b3 36 ac 8e 1e af 54 67 75 b5 b2 94 79 db f0 8f d9 0a 5b b5 c8 d5 99 e6 c1 10 f2 99 50 69 14 1b 87 d5 8a 57 18 77 78 86 0e 0e 2d a2 f2 92 aa 9a 5d e5 c3 76 a6 f2 81 51 40 6b a9 43 18 2e e0 f1 52 2b 54 4c bd 5d b7 2a ef e6 39 a8 91 57 ab 2e ee 54 cb 88 ba 8c 9d 1e b4 18 b3 ac 79 08 89 9e 05 ac 65 Data Ascii: M,5/w`yu6Qcy"{9ZzMRu:)rU$[R"\| MR}R&CYj\Td#GvQI#6eY>=0Wi`hNm6Tguy[PiWwx-]vQ@kC.R+TL]*9W.Tye
2024-11-21 02:42:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49862	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:25 UTC	511	OUT	GET /gui/13420.2099364bebdd02277cf9.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:26 UTC	320	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 3bb9247b1ab58830041251e110e7d0af Server: Google Frontend Date: Wed, 20 Nov 2024 21:42:38 GMT Expires: Thu, 20 Nov 2025 21:42:38 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Content-Length: 35260 Age: 17987 Connection: close
2024-11-21 02:42:26 UTC	1088	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 33 34 32 30 5d 2c 7b 31 33 34 32 30 3a 28 74 2c 65 2c 69 29 3d 3e 7b 76 61 72 20 73 3d 69 28 31 33 35 37 30 29 2c 72 3d 28 69 28 39 38 39 31 29 2c 69 28 38 37 33 34 37 29 29 2c 6f 3d 69 28 34 38 37 30 34 29 2c 6e 3d 69 28 31 36 36 34 35 29 2c 61 3d 69 28 36 32 38 33 32 29 2c 6c 3d 69 28 35 32 34 36 33 29 2c 68 3d 69 2e 6e 28 6c 29 2c 63 3d 69 28 34 32 32 34 36 29 2c 64 3d 69 28 39 32 36 31 39 29 2c 75 3d 69 28 31 35 33 32 33 29 2c 70 3d 69 28 36 38 31 32 32 29 2c 6d 3d 69 28 39 36 38 35 35 29 2c 67 3d 69 28 39 Data Ascii: "use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[13420],{13420:(t,e,i)=>{var s=i(13570),r=(i(9891),i(87347)),o=i(48704),n=i(16645),a=i(62832),l=i(52463),h=i.n(l),c=i(42246),d=i(92619),u=i(15323),p=i(68122),m=i(96855),g=i(9
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 69 73 2e 74 65 6d 70 53 65 6c 65 63 74 65 64 44 61 74 65 3d 5b 66 2e 71 66 2e 41 4c 4c 5f 48 49 53 54 4f 52 59 5d 2c 74 68 69 73 2e 73 65 6c 65 63 74 65 64 52 65 67 69 6f 6e 3d 43 2c 74 68 69 73 2e 73 65 6c 65 63 74 65 64 4f 72 64 65 72 3d 54 2c 74 68 69 73 2e 73 68 6f 77 6e 4d 65 74 72 69 63 73 3d 22 61 6c 6c 22 7d 73 74 61 74 69 63 20 67 65 74 20 73 74 79 6c 65 73 28 29 7b 72 65 74 75 72 6e 28 30 2c 6f 2e 75 6e 73 61 66 65 43 53 53 29 28 62 2e 41 29 7d 67 65 74 20 73 68 6f 77 52 65 73 65 74 42 75 74 74 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 6c 65 63 74 65 64 44 61 74 65 2e 6c 65 6e 67 74 68 26 26 74 68 69 73 2e 73 65 6c 65 63 74 65 64 44 61 74 65 5b 30 5d 21 3d 3d 66 2e 71 66 2e 41 4c 4c 5f 48 49 53 54 4f 52 59 7c 7c 74 68 69 73 2e 73 Data Ascii: is.tempSelectedDate=[f.qf.ALL_HISTORY],this.selectedRegion=C,this.selectedOrder=T,this.shownMetrics="all"}static get styles(){return(0,o.unsafeCSS)(b.A)}get showResetButton(){return this.selectedDate.length&&this.selectedDate[0]!==f.qf.ALL_HISTORY\|\|this.s
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 75 65 73 74 46 69 6c 74 65 72 28 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 73 65 6c 65 63 74 65 64 44 61 74 65 5b 30 5d 2c 65 3d 2f 5b 5c 2b 2d 5d 24 2f 2e 74 65 73 74 28 74 29 3b 6c 65 74 20 69 2c 73 3b 69 66 28 65 29 7b 63 6f 6e 73 74 20 65 3d 74 2e 73 6c 69 63 65 28 2d 31 29 2c 72 3d 74 68 69 73 2e 73 65 6c 65 63 74 65 64 44 61 74 65 5b 31 5d 3b 22 2b 22 3d 3d 3d 65 3f 28 69 3d 6e 65 77 20 44 61 74 65 28 74 2e 73 6c 69 63 65 28 30 2c 2d 31 29 29 2e 67 65 74 54 69 6d 65 28 29 2f 31 65 33 2c 73 3d 72 3f 6e 65 77 20 44 61 74 65 28 72 2e 73 6c 69 63 65 28 30 2c 2d 31 29 29 2e 67 65 74 54 69 6d 65 28 29 2f 31 65 33 3a 76 6f 69 64 20 30 29 3a 28 73 3d 6e 65 77 20 44 61 74 65 28 74 2e 73 6c 69 63 65 28 30 2c 2d 31 29 29 2e 67 65 74 54 69 6d 65 28 29 2f 31 Data Ascii: uestFilter(){const t=this.selectedDate[0],e=/[\+-]$/.test(t);let i,s;if(e){const e=t.slice(-1),r=this.selectedDate[1];"+"===e?(i=new Date(t.slice(0,-1)).getTime()/1e3,s=r?new Date(r.slice(0,-1)).getTime()/1e3:void 0):(s=new Date(t.slice(0,-1)).getTime()/1
2024-11-21 02:42:26 UTC	192	IN	Data Raw: 63 6c 65 61 72 2d 66 69 6c 74 65 72 22 2c 7b 62 75 62 62 6c 65 73 3a 21 30 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 2c 63 6f 6d 70 6f 73 65 64 3a 21 30 7d 29 3b 74 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 69 29 7d 75 70 64 61 74 65 54 65 6d 70 53 65 6c 65 63 74 65 64 44 61 74 65 28 74 29 7b 76 61 72 20 65 3b 63 6f 6e 73 74 20 69 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 2e 64 65 74 61 69 6c 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 66 69 6c 74 65 72 51 75 65 72 79 3b 74 68 69 73 2e 74 65 6d 70 53 65 6c Data Ascii: clear-filter",{bubbles:!0,cancelable:!0,composed:!0});t.currentTarget.dispatchEvent(i)}updateTempSelectedDate(t){var e;const i=null===(e=t.detail)\|\|void 0===e?void 0:e.filterQuery;this.tempSel
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 65 63 74 65 64 44 61 74 65 3d 69 26 26 79 2e 62 2e 70 61 72 73 65 51 75 65 72 79 28 69 29 2e 64 61 74 65 5f 72 61 6e 67 65 7c 7c 5b 5d 7d 72 65 6e 64 65 72 28 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 28 74 3d 76 2e 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 26 26 74 2e 69 6e 73 69 67 68 74 73 41 63 63 65 73 73 3f 28 30 2c 6f 2e 68 74 6d 6c 29 28 53 7c 7c 28 53 3d 6b 60 3c 64 69 76 20 63 6c 61 73 73 3d 22 76 73 74 61 63 6b 20 67 61 70 2d 32 22 3e 20 3c 76 74 2d 75 69 2d 66 69 6c 74 65 72 20 2e 61 76 6f 69 64 55 52 4c 48 61 6e 64 6c 69 6e 67 3d 22 24 7b 30 7d 22 20 40 66 69 6c 74 65 72 2d 63 68 61 6e 67 65 2d 77 69 74 68 6f 75 74 2d 72 65 6c 6f 61 64 69 6e 67 3d 22 24 7b 30 7d 22 3e 20 3c 76 74 Data Ascii: ectedDate=i&&y.b.parseQuery(i).date_range\|\|[]}render(){var t;return null!==(t=v.NU.currentUser)&&void 0!==t&&t.insightsAccess?(0,o.html)(S\|\|(S=k`<div class="vstack gap-2"> <vt-ui-filter .avoidURLHandling="${0}" @filter-change-without-reloading="${0}"> <vt
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 75 69 2d 66 69 6c 74 65 72 2d 6d 65 6e 75 2d 69 74 65 6d 3e 60 29 2c 74 68 69 73 2e 73 68 6f 77 6e 4d 65 74 72 69 63 73 4c 61 62 65 6c 2c 74 68 69 73 2e 69 73 4c 6f 61 64 69 6e 67 2c 5b 7b 74 69 74 6c 65 3a 22 56 69 65 77 20 61 6c 6c 22 2c 76 61 6c 75 65 3a 22 61 6c 6c 22 7d 2c 7b 74 69 74 6c 65 3a 22 56 69 65 77 20 6c 6f 6f 6b 75 70 73 22 2c 76 61 6c 75 65 3a 22 6c 6f 6f 6b 75 70 73 22 7d 2c 7b 74 69 74 6c 65 3a 22 56 69 65 77 20 73 75 62 6d 69 73 73 69 6f 6e 73 22 2c 76 61 6c 75 65 3a 22 73 75 62 6d 69 73 73 69 6f 6e 73 22 7d 5d 2c 5b 74 68 69 73 2e 73 68 6f 77 6e 4d 65 74 72 69 63 73 5d 2c 74 68 69 73 2e 68 61 6e 64 6c 65 53 68 6f 77 6e 4d 65 74 72 69 63 73 43 68 61 6e 67 65 64 29 2c 74 68 69 73 2e 64 61 74 65 4c 61 62 65 6c 2c 74 68 69 73 2e 69 73 4c Data Ascii: ui-filter-menu-item>`),this.shownMetricsLabel,this.isLoading,[{title:"View all",value:"all"},{title:"View lookups",value:"lookups"},{title:"View submissions",value:"submissions"}],[this.shownMetrics],this.handleShownMetricsChanged),this.dateLabel,this.isL
2024-11-21 02:42:26 UTC	1280	IN	Data Raw: 6f 69 64 20 30 29 2c 41 28 5b 28 30 2c 6e 2e 73 74 61 74 65 29 28 29 5d 2c 44 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 65 6c 65 63 74 65 64 44 61 74 65 22 2c 76 6f 69 64 20 30 29 2c 41 28 5b 28 30 2c 6e 2e 73 74 61 74 65 29 28 29 5d 2c 44 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 65 6c 65 63 74 65 64 52 65 67 69 6f 6e 22 2c 76 6f 69 64 20 30 29 2c 41 28 5b 28 30 2c 6e 2e 73 74 61 74 65 29 28 29 5d 2c 44 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 65 6c 65 63 74 65 64 4f 72 64 65 72 22 2c 76 6f 69 64 20 30 29 2c 41 28 5b 28 30 2c 6e 2e 73 74 61 74 65 29 28 29 5d 2c 44 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 68 6f 77 6e 4d 65 74 72 69 63 73 22 2c 76 6f 69 64 20 30 29 2c 41 28 5b 28 30 2c 6e 2e 71 75 65 72 79 29 28 22 23 72 65 67 69 6f 6e 2d 73 65 6c 65 63 74 22 29 5d Data Ascii: oid 0),A([(0,n.state)()],D.prototype,"selectedDate",void 0),A([(0,n.state)()],D.prototype,"selectedRegion",void 0),A([(0,n.state)()],D.prototype,"selectedOrder",void 0),A([(0,n.state)()],D.prototype,"shownMetrics",void 0),A([(0,n.query)("#region-select")]
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 28 29 7d 66 75 6e 63 74 69 6f 6e 20 61 74 28 74 2c 65 29 7b 28 6e 75 6c 6c 3d 3d 65 7c 7c 65 3e 74 2e 6c 65 6e 67 74 68 29 26 26 28 65 3d 74 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 69 3d 30 2c 73 3d 41 72 72 61 79 28 65 29 3b 69 3c 65 3b 69 2b 2b 29 73 5b 69 5d 3d 74 5b 69 5d 3b 72 65 74 75 72 6e 20 73 7d 66 75 6e 63 74 69 6f 6e 20 6c 74 28 74 2c 65 29 7b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 73 3d 4f Data Ascii: iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function at(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var i=0,s=Array(e);i<e;i++)s[i]=t[i];return s}function lt(t,e){var i=Object.keys(t);if(Object.getOwnPropertySymbols){var s=O
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 20 66 6f 72 28 76 61 72 20 61 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 61 3e 3d 30 3b 61 2d 2d 29 28 72 3d 74 5b 61 5d 29 26 26 28 6e 3d 28 6f 3c 33 3f 72 28 6e 29 3a 6f 3e 33 3f 72 28 65 2c 69 2c 6e 29 3a 72 28 65 2c 69 29 29 7c 7c 6e 29 3b 72 65 74 75 72 6e 20 6f 3e 33 26 26 6e 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 69 2c 6e 29 2c 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 74 28 74 29 7b 72 65 74 75 72 6e 22 55 6e 6b 6e 6f 77 6e 43 6f 64 65 22 3d 3d 3d 74 2e 63 6f 64 65 7d 6c 65 74 20 70 74 3d 28 5f 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 6f 2e 4c 69 74 45 6c 65 6d 65 6e 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 73 68 6f 77 54 6f 74 61 6c Data Ascii: for(var a=t.length-1;a>=0;a--)(r=t[a])&&(n=(o<3?r(n):o>3?r(e,i,n):r(e,i))\|\|n);return o>3&&n&&Object.defineProperty(e,i,n),n};function ut(t){return"UnknownCode"===t.code}let pt=(_=class extends o.LitElement{constructor(){super(...arguments),this.showTotal
2024-11-21 02:42:26 UTC	1280	IN	Data Raw: 7d 73 65 72 69 61 6c 69 7a 65 44 61 74 65 46 69 6c 74 65 72 28 74 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 22 22 3b 63 6f 6e 73 74 20 65 3d 74 2e 73 74 61 72 74 2c 69 3d 74 2e 65 6e 64 3b 72 65 74 75 72 6e 60 24 7b 22 22 2b 28 69 3f 60 20 65 6e 64 3a 24 7b 69 7d 60 3a 22 22 29 7d 24 7b 22 22 2b 28 65 3f 60 20 73 74 61 72 74 3a 24 7b 65 7d 60 3a 22 22 29 7d 60 7d 67 65 74 20 63 6f 75 6e 74 72 79 46 69 6c 74 65 72 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 61 6d 73 2e 63 6f 75 6e 74 72 79 7d 67 65 74 20 6f 72 64 65 72 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 61 72 61 6d 73 2e 6f 72 64 65 72 7d 67 65 74 20 66 69 6c 74 65 72 73 28 29 7b 72 65 74 75 72 6e 7b 64 61 74 65 3a 74 68 69 73 2e 64 61 74 65 46 69 6c 74 65 72 2c 63 6f 75 6e 74 72 79 Data Ascii: }serializeDateFilter(t){if(!t)return"";const e=t.start,i=t.end;return`${""+(i?` end:${i}`:"")}${""+(e?` start:${e}`:"")}`}get countryFilter(){return this.params.country}get order(){return this.params.order}get filters(){return{date:this.dateFilter,country

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49863	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:25 UTC	511	OUT	GET /gui/38304.8a071d9cca91b836aa99.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:26 UTC	321	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: d4b5a380fc75a4e2a9d6580d0efc2bf2 Server: Google Frontend Date: Tue, 19 Nov 2024 20:54:51 GMT Expires: Wed, 19 Nov 2025 20:54:51 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Content-Length: 70187 Age: 107255 Connection: close
2024-11-21 02:42:26 UTC	1087	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 38 33 30 34 2c 38 37 39 36 30 5d 2c 7b 37 33 33 35 35 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 72 28 34 38 37 30 34 29 2c 73 3d 72 28 31 36 36 34 35 29 2c 69 3d 72 28 36 32 38 33 32 29 2c 61 3d 72 28 31 35 33 32 33 29 2c 6e 3d 72 28 34 35 32 34 31 29 2c 62 3d 72 28 34 34 30 35 32 29 2c 6c 3d 72 28 36 36 38 31 33 29 2c 64 3d 72 28 31 37 31 35 29 3b 6c 65 74 20 63 2c 70 2c 67 3d 65 3d 3e 65 3b 76 61 72 20 68 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6f 29 7b 76 61 72 20 73 2c 69 3d 61 72 67 75 6d Data Ascii: (self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[38304,87960],{73355:(e,t,r)=>{"use strict";var o=r(48704),s=r(16645),i=r(62832),a=r(15323),n=r(45241),b=r(44052),l=r(66813),d=r(1715);let c,p,g=e=>e;var h=function(e,t,r,o){var s,i=argum
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 28 70 3d 67 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 75 6e 64 65 64 2d 63 69 72 63 6c 65 20 62 67 2d 62 6f 64 79 2d 74 65 72 74 69 61 72 79 22 20 73 74 79 6c 65 3d 22 24 7b 30 7d 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 2d 31 30 30 20 68 2d 31 30 30 20 72 6f 75 6e 64 65 64 2d 63 69 72 63 6c 65 20 62 67 2d 62 6f 64 79 2d 73 65 63 6f 6e 64 61 72 79 20 74 65 78 74 2d 62 6f 64 79 2d 74 65 72 74 69 61 72 79 20 74 65 78 74 2d 63 65 6e 74 65 72 20 76 73 74 61 63 6b 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 63 65 6e 74 65 72 22 3e 20 3c 64 69 76 20 69 64 3d 22 70 6f 73 69 74 69 76 65 73 22 20 63 6c 61 73 73 3d 22 66 73 2d 31 20 6c 68 2d 31 20 24 7b 30 7d 22 20 3f 68 69 64 64 65 6e 3d 22 24 7b 30 7d 22 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e Data Ascii: (p=g` <div class="rounded-circle bg-body-tertiary" style="${0}"> <div class="w-100 h-100 rounded-circle bg-body-secondary text-body-tertiary text-center vstack justify-content-center"> <div id="positives" class="fs-1 lh-1 ${0}" ?hidden="${0}"> ${0} </div>
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 22 76 74 2d 69 6f 63 2d 73 63 6f 72 65 2d 77 69 64 67 65 74 2d 64 65 74 65 63 74 69 6f 6e 73 2d 63 68 61 72 74 22 29 5d 2c 6d 29 3b 76 61 72 20 76 3d 72 28 31 38 38 32 30 29 3b 6c 65 74 20 79 2c 66 2c 77 2c 78 3d 65 3d 3e 65 3b 76 61 72 20 6b 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6f 29 7b 76 61 72 20 73 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 61 3d 69 3c 33 3f 74 3a 6e 75 6c 6c 3d 3d 3d 6f 3f 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 72 29 3a 6f 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 29 61 3d 52 65 66 Data Ascii: "vt-ioc-score-widget-detections-chart")],m);var v=r(18820);let y,f,w,x=e=>e;var k,C=function(e,t,r,o){var s,i=arguments.length,a=i<3?t:null===o?o=Object.getOwnPropertyDescriptor(t,r):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Ref
2024-11-21 02:42:26 UTC	193	IN	Data Raw: 3a 28 30 2c 6f 2e 68 74 6d 6c 29 28 77 7c 7c 28 77 3d 78 60 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 73 74 61 63 6b 20 67 61 70 2d 32 20 61 6c 69 67 6e 2d 73 65 6c 66 2d 63 65 6e 74 65 72 22 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 65 6e 64 20 6c 68 2d 73 6d 20 74 65 78 74 2d 62 6f 64 79 2d 74 65 72 74 69 61 72 79 22 3e 43 6f 6d 6d 75 6e 69 74 79 20 53 63 6f 72 65 3c 2f 73 70 61 6e 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 62 61 64 67 65 20 72 6f 75 6e 64 65 64 2d 70 69 6c 6c 20 66 73 2d 36 20 66 77 2d 6e 6f 72 6d 61 6c 20 68 73 74 61 63 6b 20 61 Data Ascii: :(0,o.html)(w\|\|(w=x` <span class="hstack gap-2 align-self-center"> <span class="text-end lh-sm text-body-tertiary">Community Score</span> <span class="badge rounded-pill fs-6 fw-normal hstack a
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 6c 69 67 6e 2d 73 65 6c 66 2d 61 75 74 6f 20 70 65 2d 32 20 24 7b 30 7d 22 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 20 33 35 70 78 3b 22 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 73 2d 32 20 6d 65 2d 31 20 24 7b 30 7d 22 3e 24 7b 30 7d 20 3c 2f 73 70 61 6e 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 76 73 74 61 63 6b 20 6d 73 2d 31 22 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 74 65 78 74 3d 22 4f 6e 6c 79 20 72 65 67 69 73 74 65 72 65 64 20 75 73 65 72 73 20 63 61 6e 20 76 6f 74 65 2e 20 53 69 67 6e 20 75 70 2c 20 69 74 20 69 73 20 66 72 65 65 2e 22 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 70 6f 73 69 74 69 6f 6e 3d 22 62 6f 74 74 6f 6d 22 20 40 6d 6f 75 73 65 6f 76 65 72 3d 22 24 7b 30 7d 22 3e 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 Data Ascii: lign-self-auto pe-2 ${0}" style="height: 35px;"> <span class="ms-2 me-1 ${0}">${0} </span> <span class="vstack ms-1" data-tooltip-text="Only registered users can vote. Sign up, it is free." data-tooltip-position="bottom" @mouseover="${0}"> <button class="
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 76 65 72 64 69 63 74 22 2c 76 6f 69 64 20 30 29 2c 43 28 5b 28 30 2c 73 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 2c 72 65 66 6c 65 63 74 3a 21 30 7d 29 5d 2c 53 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 73 41 6e 61 6c 79 7a 69 6e 67 22 2c 76 6f 69 64 20 30 29 2c 43 28 5b 28 30 2c 73 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 7d 29 5d 2c 53 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 73 54 72 75 73 74 65 64 22 2c 76 6f 69 64 20 30 29 2c 43 28 5b 28 30 2c 73 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 7d 29 5d 2c 53 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 73 4c 6f 61 64 69 6e 67 22 2c 76 6f 69 64 20 30 29 2c 53 3d 43 28 5b 28 30 2c 73 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 29 Data Ascii: verdict",void 0),C([(0,s.property)({type:Boolean,reflect:!0})],S.prototype,"isAnalyzing",void 0),C([(0,s.property)({type:Boolean})],S.prototype,"isTrusted",void 0),C([(0,s.property)({type:Boolean})],S.prototype,"isLoading",void 0),S=C([(0,s.customElement)
2024-11-21 02:42:26 UTC	1280	IN	Data Raw: 7b 76 61 72 20 6f 2c 73 2c 69 2c 61 2c 6e 3d 5b 5d 2c 62 3d 21 30 2c 6c 3d 21 31 3b 74 72 79 7b 69 66 28 69 3d 28 72 3d 72 2e 63 61 6c 6c 28 65 29 29 2e 6e 65 78 74 2c 30 3d 3d 3d 74 29 7b 69 66 28 4f 62 6a 65 63 74 28 72 29 21 3d 3d 72 29 72 65 74 75 72 6e 3b 62 3d 21 31 7d 65 6c 73 65 20 66 6f 72 28 3b 21 28 62 3d 28 6f 3d 69 2e 63 61 6c 6c 28 72 29 29 2e 64 6f 6e 65 29 26 26 28 6e 2e 70 75 73 68 28 6f 2e 76 61 6c 75 65 29 2c 6e 2e 6c 65 6e 67 74 68 21 3d 3d 74 29 3b 62 3d 21 30 29 3b 7d 63 61 74 63 68 28 65 29 7b 6c 3d 21 30 2c 73 3d 65 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 69 66 28 21 62 26 26 6e 75 6c 6c 21 3d 72 2e 72 65 74 75 72 6e 26 26 28 61 3d 72 2e 72 65 74 75 72 6e 28 29 2c 4f 62 6a 65 63 74 28 61 29 21 3d 3d 61 29 29 72 65 74 75 72 6e 7d 66 Data Ascii: {var o,s,i,a,n=[],b=!0,l=!1;try{if(i=(r=r.call(e)).next,0===t){if(Object(r)!==r)return;b=!1}else for(;!(b=(o=i.call(r)).done)&&(n.push(o.value),n.length!==t);b=!0);}catch(e){l=!0,s=e}finally{try{if(!b&&null!=r.return&&(a=r.return(),Object(a)!==a))return}f
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 29 61 3d 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 28 65 2c 74 2c 72 2c 6f 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 6e 3e 3d 30 3b 6e 2d 2d 29 28 73 3d 65 5b 6e 5d 29 26 26 28 61 3d 28 69 3c 33 3f 73 28 61 29 3a 69 3e 33 3f 73 28 74 2c 72 2c 61 29 3a 73 28 74 2c 72 29 29 7c 7c 61 29 3b 72 65 74 75 72 6e 20 69 3e 33 26 26 61 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 72 2c 61 29 2c 61 7d 3b 63 6f 6e 73 74 20 71 3d 7b 61 63 74 69 76 69 74 79 3a 22 41 63 74 69 76 69 74 79 22 2c 22 67 74 69 2d 73 75 6d 6d 61 72 79 22 Data Ascii: "==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(e,t,r,o);else for(var n=e.length-1;n>=0;n--)(s=e[n])&&(a=(i<3?s(a):i>3?s(t,r,a):s(t,r))\|\|a);return i>3&&a&&Object.defineProperty(t,r,a),a};const q={activity:"Activity","gti-summary"
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 74 68 69 73 2e 73 68 6f 77 43 6f 6d 6d 65 6e 74 73 53 65 63 74 69 6f 6e 3d 21 30 2c 74 68 69 73 2e 69 73 45 78 70 6f 72 74 69 6e 67 3d 21 31 2c 74 68 69 73 2e 68 69 64 65 54 61 62 73 3d 21 31 2c 74 68 69 73 2e 61 6e 79 53 61 6e 64 62 6f 78 41 6e 61 6c 79 7a 69 6e 67 3d 21 31 2c 74 68 69 73 2e 6f 6e 45 78 70 6f 72 74 43 6c 69 63 6b 3d 28 29 3d 3e 7b 7d 2c 74 68 69 73 2e 6c 61 7a 79 4c 6f 61 64 65 64 43 6f 6d 6d 75 6e 69 74 79 53 65 63 74 69 6f 6e 3d 21 31 2c 74 68 69 73 2e 68 69 64 65 41 67 67 72 65 67 61 74 69 6f 6e 73 41 63 74 69 6f 6e 73 3d 21 31 2c 74 68 69 73 2e 68 61 73 44 69 73 63 6c 61 69 6d 65 72 3d 21 31 7d 73 74 61 74 69 63 20 67 65 74 20 73 74 79 6c 65 73 28 29 7b 72 65 74 75 72 6e 28 30 2c 69 2e 75 6e 73 61 66 65 43 53 53 29 28 5b 6d 2e 41 2c Data Ascii: this.showCommentsSection=!0,this.isExporting=!1,this.hideTabs=!1,this.anySandboxAnalyzing=!1,this.onExportClick=()=>{},this.lazyLoadedCommunitySection=!1,this.hideAggregationsActions=!1,this.hasDisclaimer=!1}static get styles(){return(0,i.unsafeCSS)([m.A,
2024-11-21 02:42:26 UTC	1280	IN	Data Raw: 61 73 20 6e 6f 74 20 62 65 65 6e 20 75 70 6c 6f 61 64 65 64 20 74 6f 20 74 68 65 20 70 75 62 6c 69 63 20 63 6f 72 70 75 73 20 6f 66 20 47 6f 6f 67 6c 65 20 54 68 72 65 61 74 20 49 6e 74 65 6c 6c 69 67 65 6e 63 65 20 66 6f 72 20 70 72 69 76 61 63 79 20 72 65 61 73 6f 6e 73 2e 20 46 6f 72 20 74 68 61 74 20 6d 61 74 74 65 72 2c 20 73 6f 6d 65 20 6f 66 20 74 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 6f 75 72 20 70 75 62 6c 69 63 20 73 65 72 76 69 63 65 73 20 28 65 67 2e 20 73 65 63 75 72 69 74 79 20 76 65 6e 64 6f 72 73 20 61 6e 61 6c 79 73 69 73 29 20 77 6f 6e 27 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 20 61 74 20 74 68 69 73 20 6d 6f 6d 65 6e 74 2e 20 3c 2f 64 69 76 3e 20 3c 70 3e 3c 2f 70 3e 20 3c 2f 64 69 76 3e 60 Data Ascii: as not been uploaded to the public corpus of Google Threat Intelligence for privacy reasons. For that matter, some of the information coming from our public services (eg. security vendors analysis) won't be available at this moment. </div> <p></p> </div>`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49865	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:25 UTC	707	OUT	GET /gui/vt-ui-shell-extra-deps.2f0832bf9cf1fc541ba6.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:26 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 550628400c8b9b5ecf28a416d3eddb29 Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 18:40:25 GMT Expires: Wed, 19 Nov 2025 18:40:25 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 115321 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:26 UTC	1058	IN	Data Raw: 30 31 30 30 30 0d 0a 1f 8b 08 00 00 00 00 00 02 ff ec 7d 69 77 db 46 b2 f6 f7 fc 0a 18 49 7c 80 09 00 91 d4 4e 19 56 bc de 68 e2 6d bc 24 93 28 7a 65 88 6c 92 88 48 80 01 40 c9 b2 cc fb db ef 53 d5 dd 40 03 04 65 c5 93 39 ef 97 9c 93 d8 20 d0 4b 75 75 ed 55 dd b6 17 b9 b0 f2 22 8b 07 85 7d e0 e4 62 3a 0a 2e c5 d9 3c 1a 9c 3f 9a 2c 92 f3 8b e2 74 11 9f ce a2 38 09 6f f8 f6 e9 d3 f1 89 1b cc 17 f9 c4 39 3e de d9 df db de f6 ba 3b bb db bb de d6 ce e6 de f6 89 77 bd bf bd bf d3 e9 3b c2 2b bc c4 0d ef 5f 27 c1 d0 29 bc eb e7 7d 07 bf 06 4b f7 e0 22 ca ac 2c 4c 9c ad bd dd ce 96 eb e5 78 ec ee ec 6c 6d bb 5e cc 6f 77 76 77 dc 83 a9 28 ac d4 8b bc 69 28 c2 fb 82 fb 0c c3 d1 22 19 14 71 9a c8 c1 bd cc bd a6 b1 72 f4 8b b2 f1 62 26 92 22 0f a6 22 19 17 13 2f 0d Data Ascii: 01000}iwFI\|NVhm$(zelH@S@e9 KuuU"}b:.<?,t8o9>;w;+_')}K",Lxlm^owvw(i("qrb&""/
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: f5 e3 22 16 97 0f d3 0f a1 dd b1 3a 56 6f 0b ff d9 d6 28 86 02 b3 93 34 11 b6 f5 61 36 4d f2 d0 9e 14 c5 bc bf b1 71 79 79 19 5c 6e 06 69 36 de e8 75 3a 9d 0d 0c 6d df ff ea de 1c 04 c2 bd fc 6c 31 15 a1 2d 20 14 d3 e1 d0 b6 06 d3 78 de 7c 37 0c ed e7 3d 6b 33 d8 7e d6 ed 04 7b 3b db 5d ab db 0b 36 f1 f7 b3 9e d5 eb 06 bd cd 4e ef 87 5e ef 27 34 f8 a1 f7 ab 06 e6 eb cd c7 bb bb 4f b7 ed 0d cc 46 b3 de ff ea ab af 20 a8 0e 0a 28 bc 51 b4 98 16 61 be f4 76 f6 f6 77 76 57 90 7a 90 38 fb 7b fb 5d 6c 96 b3 b3 b3 bb b5 57 59 03 bd de de be b2 06 b6 77 60 19 68 6b 80 6d 84 b4 b2 11 22 3c ee 6d 63 c1 2e 6c 03 20 7b bb b7 85 e1 86 78 dc 47 bf 3d d7 1b d0 db ad ce 76 cf f5 e6 78 dc ed 76 ba 78 5c d0 e3 fe fe 1e a6 98 50 83 9d 9d ce ae dc bd b1 37 f3 ce bc 0b 6f e4 Data Ascii: ":Vo(4a6Mqyy\ni6u:ml1- x\|7=k3~{;]6N^'4OF (QavwvWz8{]lWYw`hkm"<mc.l {xG=vxvx\P7o
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 4d 48 32 ea f6 e5 66 d5 da 83 97 59 b1 1b ed 97 2d 36 b8 0e 69 7d 66 75 44 38 ac 31 7c 36 fa 04 cc 7f 77 79 aa 40 2b a7 2a 37 f7 8e 23 23 d1 82 6d 62 08 fb b2 6d b9 0c 65 3f af 48 76 ec 94 24 10 65 c2 bc ff 06 ae c5 28 ce f2 82 f4 c2 12 da 9a 2c 56 f5 eb fd a7 4f b0 ef 86 cb d3 86 c4 85 fe d0 74 66 01 86 36 ce 7b 4f 28 dc 40 50 6d f9 1e d0 a1 7f 4d fa 96 2b 59 d7 dd d6 a2 d9 46 ef ba e0 bd 25 4a 59 fa 92 22 36 31 1a e7 0f 10 f3 bf 10 2a a1 a0 78 e5 8e 73 87 30 59 e0 ff e4 ee dd 0e 74 53 02 45 25 8e 93 13 f6 2c 10 f1 2f f8 61 b9 2a 93 34 30 ad 5b 2f 45 52 a5 a5 65 f7 32 4e a5 6c ca 86 8e 53 30 d9 b0 a7 26 05 25 06 28 38 5e b2 8b e9 3b 9c 43 e9 9c b3 d2 89 ea 1a 03 ba 60 9d 69 f1 18 6e 29 49 fd 59 dd 6c d2 66 85 8c 34 02 f7 0c 94 23 85 16 f9 91 a6 b2 fb 80 Data Ascii: MH2fY-6i}fuD81\|6wy@+7##mbme?Hv$e(,VOtf6{O(@PmM+YF%JY"61xs0YtSE%,/a*40[/ERe2NlS0&%(8^;C`in)IYlf4#
2024-11-21 02:42:26 UTC	231	IN	Data Raw: c7 80 20 6b 81 20 d3 10 64 26 04 08 1a 91 9a 79 2d 90 ce cc 11 ac 91 23 79 d5 64 ab 89 50 11 40 29 fc 9c 41 51 50 49 17 c2 33 9c a7 04 61 2c a9 08 e2 b9 f7 b6 b2 9e 1f 7a 2f fe b6 9f ff 22 fb f9 8f f0 61 c3 82 8e cd 5a 3d f2 d5 50 58 07 a7 f0 55 96 8e 33 04 21 a9 50 ec a1 0e e1 eb 97 aa a0 06 d1 c2 75 9f 88 5d b9 3f 82 97 a4 91 42 f8 da e0 a4 75 86 77 b3 75 c7 5b 37 30 8b d9 ca 56 29 ab fe 74 ea f7 39 24 ea f3 f0 2d 59 29 23 9f b5 bc aa ce b1 02 fa a5 25 60 9c c3 3a 40 61 5c a3 11 67 74 df bf 63 13 9e 52 11 90 a4 2c d6 1b f0 2d bf 85 bd b4 3c 78 b1 46 84 55 ee fa 1f a6 d8 6a 0c 52 89 20 da 14 3d 56 bb 10 02 af 40 c0 4b 8c 92 14 fa 43 4a a1 8f 90 37 a8 8f ed aa 12 d7 5f bd 7f 79 0d 0a Data Ascii: k d&y-#ydP@)AQPI3a,z/"aZ=PXU3!Pu]?Buwu[70V)t9$-Y)#%`:@a\gtcR,-<xFUjR =V@KCJ7_y
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 3f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7a 0d 0a 30 31 0d 0a 3f 0d 0a 31 38 61 65 0d 0a 48 de d1 d5 a5 d6 2f ba 64 d4 43 75 2b 4a bc ae 8b ec 8a ad 3c d4 8c 1e c7 27 28 08 45 f5 4b 14 50 fe 47 2c 07 14 84 a5 5d 57 d9 75 56 5f 28 92 75 97 51 30 44 e1 d0 61 e1 4c dd fe ab 2c 45 4c 5a 20 05 05 13 0f f1 b4 a9 1b c0 46 48 9c cc cb dd 65 39 f1 4f c6 38 fa a5 32 30 0b de 48 2f a9 8a 6d 55 40 92 bd 2a 35 bc e3 94 bd 68 60 86 39 46 9d 2b fc f4 e9 15 71 84 7b a0 1b 58 29 cd f5 8b 13 7b 68 e9 51 b1 af 9d 60 bf a1 b9 0c 78 a2 95 36 c5 24 4b 2f b9 51 ea 48 45 cd 31 a7 6a 09 ff 63 48 ee d0 26 23 8c 4a 61 87 f6 1d 5d cd fb e6 6a 06 3b 95 c2 85 f2 29 40 96 06 95 ac Data Ascii: 00000001?00000001{00000001?00000001z01?18aeH/dCu+J<'(EKPG,]WuV_(uQ0DaL,ELZ FHe9O820H/mU@*5h`9F+q{X){hQ`x6$K/QHE1jcH&#Ja]j;)@
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 56 46 1e 23 b2 4e 36 87 f6 5e b4 b9 d5 19 74 77 fc d1 d6 ee c8 df da 3d db f2 f7 77 87 91 bf bd 19 89 bd c1 60 6b 6b b0 d7 b1 65 69 09 aa bc 69 40 b5 de 6a 4e 49 c8 16 ea c1 a9 7c 0e 00 bc 42 cb b7 71 41 87 9e bc 22 bc 8e 73 5d b9 21 c7 a9 7e 7b 58 33 6d 80 2e 9a 7c 06 2b 3d c9 21 9d 64 05 da 85 2e 8a f3 34 32 e4 00 fa 97 87 0a 5c 39 51 5f 67 50 82 82 e6 85 29 35 9f a2 5e d1 79 4f 31 7d 1c 6a 7a ef d9 10 c7 90 e9 c8 29 90 1f cc fc 41 e7 8b 1e 51 dc 1c e6 1c 4e ba f0 c7 16 82 21 43 41 38 44 36 ae 87 3f b1 1c 93 f1 f4 92 cc 77 0c d7 6b e4 68 44 05 17 d5 ca 53 32 20 a0 93 24 e4 4e 94 30 6e fc b6 31 5e c4 8e 7f 1c f9 1f 4f be 73 0f 7f db d8 60 68 15 44 f5 e9 f4 b6 83 e5 8f 86 64 ea 71 55 84 2c 2c 34 a8 3c a0 aa 93 a3 a1 8c c5 ca 67 35 5c 6d f5 55 0f 01 51 92 Data Ascii: VF#N6^tw=w`kkeii@jNI\|BqA"s]!~{X3m.\|+=!d.42\9Q_gP)5^yO1}jz)AQN!CA8D6?wkhDS2 $N0n1^Os`hDdqU,,4<g5\mUQ
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 83 71 9a 42 6b 47 73 ec 00 4a 11 36 e8 4c e1 e1 28 9a c5 d3 2b ba 06 41 64 70 ad bf a3 52 8f dc 3d c0 c1 2b 1e c6 ba c7 f2 ce a2 a4 43 68 b3 9e b7 48 29 d0 13 b3 19 8a 2c 98 e7 50 51 c1 52 56 4b 44 5d 47 22 6d 7c 79 80 09 29 8f 7e 79 c8 49 2d 7a 95 6a 6f bf e6 1f b1 e6 1f 79 cd 52 b5 ac 95 4c ba e4 89 44 96 92 62 4a 5c 85 b6 04 80 ab 18 e9 26 19 48 4b 19 a7 58 15 58 66 b9 d2 4c e1 8b 4f cf e2 80 d1 82 13 a6 d5 51 3a 09 d0 fd 3a 16 c8 d7 30 31 60 fa 3f 92 0f 4b b4 4a f3 33 d4 e2 a8 7a cf 36 35 48 a6 8e 57 e9 d4 34 4d 08 65 1d 52 52 40 16 a9 50 f0 fe 4e 41 31 77 18 d4 32 44 59 5a 90 ea 35 0a 23 a4 b3 ac 6c 57 bd 73 4f d1 07 b6 9e 3e 79 53 7b ad 6d 1a 52 aa d9 8c 5a 1e e5 0f 05 34 8e c4 2d d9 47 52 34 40 cd 00 6f 88 da e2 24 a7 d0 c4 0c d8 65 e6 94 8e d5 48 Data Ascii: qBkGsJ6L(+AdpR=+ChH),PQRVKD]G"m\|y)~yI-zjoyRLDbJ\&HKXXfLOQ::01`?KJ3z65HW4MeRR@PNA1w2DYZ5#lWsO>yS{mRZ4-GR4@o$eH
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: de b7 fc b2 da 1b da 8f 4a f0 20 88 57 14 5b 7d 0c b5 c6 72 04 ba 35 4f 03 df 2e bb cc 95 90 f8 da de df c5 fd 8b 38 6b 8d 2b 17 71 b4 86 6e 64 44 a9 3b 3d 6c 77 77 7b 5d 1c e4 e4 6b 17 8d 4b 21 49 d4 d1 55 d0 7b fb db 5b bb 7c 15 34 92 9d b8 c6 83 2e 82 c6 6d d2 a8 3e 46 09 2c 25 40 63 78 5e 0e 32 a2 ee 01 8e fd f3 dd d3 e4 93 7b 76 7f 92 c2 82 bf fe 2d b1 2c ba af 03 dc d1 e7 63 78 07 f4 86 cf e3 c9 fb 96 e0 fd f7 71 6d ce 74 31 4b f8 13 5f c1 d9 b7 70 d1 de b7 fc 5b 5e c3 69 bc 20 8c 8e f9 0c 57 1f 45 72 99 e3 fb 67 39 f2 0a 10 08 b8 26 10 2c 38 76 e5 14 88 53 fa 39 ea 7b d0 75 6b fe 81 df 11 9b 8e 28 a7 04 58 22 94 f9 e0 e5 f2 b7 84 21 75 8e 65 f0 f1 c4 6d c0 4c f7 7b ca 76 5c 0f c1 d7 8a f5 11 28 58 db 81 d6 c6 b3 55 80 ca 9b 56 0c 70 a9 cc 0f c0 4a Data Ascii: J W[}r5O.8k+qndD;=lww{]kK!IU{[\|4.m>F,%@cx^2{v-,cxqmt1K_p[^i WErg9&,8vS9{uk(X"!uemL{v\(XUVpJ
2024-11-21 02:42:26 UTC	753	IN	Data Raw: 5f d3 b6 74 3a bd 9d 66 77 45 98 f2 2e 51 a6 e0 1a 37 22 ec 50 da 5f 0d 08 75 cf d6 4e 2c 40 14 fb ae e9 a7 c6 d5 5a b7 94 54 9f 9b af 0a 83 b4 ce 5c 7d 6e 9f 1e 6a 57 17 9b 72 35 d2 ca fc a5 ec 6b c0 5d 56 70 56 82 ae cd 4a 5d d7 ab 15 d8 75 73 49 20 db 82 40 37 f6 a0 6c 06 92 4c 53 dc 67 05 9f 8d 5c b7 5b f8 7c 0d 80 b9 80 4d f5 c6 3f 3e d4 ee ca d7 1a b5 e3 d9 6c f2 c5 50 fc 19 0c c8 09 d7 a3 f9 26 30 d9 94 52 c5 c0 ad 23 34 dd fc 06 d2 a8 c8 c3 a0 26 2e f2 bd 40 d0 e8 b3 44 ad 76 cc 67 df f5 26 c2 a2 9b ce 50 67 80 8a 3c b7 c9 c2 b5 31 5a a1 d7 ac c6 1e 09 ea 74 90 6f 8d 51 b5 d8 58 84 1e 07 3e 11 07 f9 57 02 90 7a 98 cf 83 42 43 fc 07 90 70 a5 79 2b 36 d6 92 3f d5 a6 7f 29 c9 cb e9 28 ec 51 1a 01 b7 92 9d 26 c2 74 61 fa 8d 50 2f a5 2b 24 cf de a9 ca Data Ascii: _t:fwE.Q7"P_uN,@ZT\}njWr5k]VpVJ]usI @7lLSg\[\|M?>lP&0R#4&.@Dvg&Pg<1ZtoQX>WzBCpy+6?)(Q&taP/+$
2024-11-21 02:42:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49867	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:25 UTC	511	OUT	GET /gui/51452.78c2117408c1bf8fcbcf.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:26 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 83ee96a01c20267c3f18a9aac7a74cf2 Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 22:40:52 GMT Expires: Wed, 19 Nov 2025 22:40:52 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 100894 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:26 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a fb 0d 0a 30 30 30 30 31 0d 0a 63 0d 0a 30 66 66 32 0d 0a db c6 91 ff ef f7 57 c0 4c e2 23 53 90 26 f5 16 65 da 75 6c 27 75 13 c7 39 2b 49 db d3 e9 5c 90 5c 8a a8 48 80 05 40 3d 42 f3 7f ff 7e 66 66 17 58 3c 28 ca 89 d3 a4 f7 45 dc da 12 f6 bd 3b 3b 3b ef 69 2c 63 e5 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001}0000000100001c0ff2WL#S&eul'u9+I\\H@=B~ffX<(E;;;i,c
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 6b 94 2e 8a 7c c8 ad 02 10 4b b8 93 6e 54 ee 3b 50 c3 58 25 9e 3f eb 5c 79 b3 a5 5a b7 5c 8d c9 50 bf 1a 5a 00 e4 02 be 00 32 f5 54 7e ec ab ce dc 5b 30 10 5a 60 31 04 58 0c 2d b0 a8 38 07 2c c7 c9 a0 d6 ec ff d4 1f ab 67 8c 81 e3 ca 6d 66 98 d2 a7 ec 30 8a 19 34 26 d7 ed 21 0e 94 be f2 b6 e7 4e 80 61 44 57 24 40 43 d5 f1 6d 1b 57 36 f1 bd e8 16 6d da 8e 37 02 5a 1d fb c1 85 93 84 8e 00 9d 43 7d a0 48 83 51 e2 cf 55 db bb 08 9d 65 e0 df d0 2f 66 6e e6 80 4d 05 3a 4d 73 f4 b9 53 e5 fe 4c ed ea dd e0 63 ce 2e b2 fb a0 eb 02 79 fb c1 e5 53 6b 63 03 6c 6c 80 8d 7d ec 39 d3 48 4d 0c 84 26 c0 9d 0a d7 e0 dd 70 e6 05 97 8d 27 b2 05 de 13 00 8e f4 81 7f 78 eb 5a 38 2f fe 01 1f 64 a9 5c 32 57 c0 93 f3 05 7e 16 90 88 ed 31 67 18 73 c6 87 c9 9b 29 17 4e d7 93 a1 cc Data Ascii: k.\|KnT;PX%?\yZ\PZ2T~[0Z`1X-8,gmf04&!NaDW$@CmW6m7ZC}HQUe/fnM:MsSLc.ySkcll}9HM&p'xZ8/d\2W~1gs)N
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 15 89 ca 40 a6 3a b2 72 94 01 5a fc 8e 3f 79 c1 52 ac 71 0b 62 1d c0 07 48 69 e2 98 46 b8 84 17 61 74 2b 30 c7 e4 34 83 3f 78 2c 7a 23 bf 84 88 e2 b9 ae 82 76 a6 36 b5 04 1e 18 43 10 7a aa bc 68 34 7d 5a f8 1d 48 23 15 7c 41 02 24 72 34 2d e7 c1 e9 cd d4 77 fe 55 98 40 f6 24 d2 1a 3a f3 30 56 e3 f4 ab 05 e0 73 00 f8 9c 01 9c b1 82 de 53 e0 52 ff ca 1f 2f bd 59 3b 05 76 c3 0c ca ee 18 0e 0d 0b 25 89 95 ec 3f 5f 25 e2 d5 c0 ac e5 e6 61 4b ca 44 de 33 c5 b8 d3 7b 8e 4b af 84 cd a4 5a 07 9f 1d 9f 85 e0 78 6e b9 0d a4 43 f2 f0 cc 43 92 08 aa 05 fc 4e 83 f8 e1 f6 98 c4 30 51 a3 df 48 a9 39 30 7b d9 39 40 92 91 1e e6 ba b8 89 e5 25 4d b0 a4 c9 7d 97 a4 81 2e dd 4c 2d 0b bd 54 b7 31 20 21 37 f9 96 20 a7 28 87 98 ae 30 d8 15 0f 96 db 9b 14 86 b1 1d e5 6d 38 8b ce Data Ascii: @:rZ?yRqbHiFat+04?x,z#v6Czh4}ZH#\|A$r4-wU@$:0VsSR/Y;v%?_%aKD3{KZxnCCN0QH90{9@%M}.L-T1 !7 (0m8
2024-11-21 02:42:26 UTC	395	IN	Data Raw: 3e 98 94 3e 10 bd 8d a2 25 64 6f b7 0e ac 82 9c a1 52 b0 48 a1 bf 20 4f 7b 3c 44 f7 9e 79 9e b6 90 1a 45 b9 f1 16 d2 43 93 6f 10 17 60 20 88 74 23 32 a4 09 58 03 e5 3c 9f 46 d0 07 41 e3 85 32 2c 16 67 08 4a 85 e6 a2 4d 13 74 5b 59 52 ce 5c 26 13 f9 b6 81 0f 20 93 d7 ef da 7c 08 89 db 5d 06 3d af a0 27 83 fc 1d cc 3e 8c 88 b4 0d 8f 3d 0d 88 d3 60 b8 06 c5 15 2a 5d 78 62 6c 41 d3 48 0f 40 8c 0a 78 50 bc 6e 39 e1 b6 fd b6 b6 21 b0 5a 40 88 46 8a a9 ec c5 dc 8c c1 a0 27 21 8e 20 b5 2e 61 bd 88 b1 2c c9 3f ae b4 3f fa 05 de dc 1f 55 62 f1 a2 d9 cb b4 4d 6a f7 24 3b 67 55 a4 fa 86 64 9a 85 17 e1 0f d1 cc 26 52 9f 01 48 9f 31 90 ca e8 de 15 ae 13 8e 93 84 5e 83 46 84 97 1e c6 4e ed 11 ab 30 1d 7f 7e 01 c9 f1 72 3e 0c c0 29 e0 44 2c 01 7a ba c8 c8 bb 3e 8d 46 46 Data Ascii: >>%doRH O{<DyECo` t#2X<FA2,gJMt[YR\& \|]='>=`*]xblAH@xPn9!Z@F'! .a,??UbMj$;gUd&RH1^FN0~r>)D,z>FF
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 05 0d 0a 30 30 30 30 30 30 30 31 0d 0a 83 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1a 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 47 0d 0a 30 30 30 30 30 30 30 31 0d 0a 63 0d 0a 30 30 30 30 30 30 30 31 0d 0a f0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 03 0d 0a 30 30 30 30 30 30 30 31 0d 0a 89 0d 0a 30 30 30 30 30 30 30 31 0d 0a 93 0d 0a 30 30 30 30 30 30 30 31 0d 0a 62 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5a 0d 0a 30 30 30 30 30 30 30 31 0d 0a d2 0d 0a 30 30 30 30 30 30 30 31 0d 0a e0 0d 0a 30 30 30 30 30 30 30 31 0d 0a c0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 22 0d 0a 30 30 30 30 30 30 30 31 0d 0a 12 0d 0a 30 30 30 30 30 30 30 31 0d 0a f2 0d 0a 30 30 30 30 30 30 30 31 Data Ascii: 000000010000000100000001M000000010000000100000001G00000001c0000000100000001000000010000000100000001b00000001Z00000001000000010000000100000001"000000010000000100000001
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 7d 94 a0 be bc 68 69 f5 38 f7 d0 59 bd c7 44 fa 1a 6d fb f7 de 05 2c 06 60 5d b6 4a 9d 62 8d fe ee cf d8 d5 3f d3 ae f2 2e d0 5f d8 02 eb 09 61 f0 20 73 49 98 39 6a 75 b2 db d0 46 6f f0 38 b4 e4 f0 7f 41 4f 7f a1 9e f2 f4 64 c5 01 61 19 39 ff 3c 39 1f fa a4 4f 44 13 ad 22 c9 c6 7c c8 72 20 d3 18 9b 55 69 55 b6 01 5c cd d0 9c ed 9d 1b 41 25 8c 08 98 c7 81 f2 1b 74 7a ca 6c 9a af 3d 5d 91 6c 93 cc b7 7d d3 d8 4f 3f ed 98 4f e4 66 2d fd ed ea 4f 65 20 fd 2f 6c c2 7f c9 26 94 89 74 26 c9 c5 40 1f e6 08 71 d2 be 80 5c 73 c1 4a 5d 67 71 c3 e6 ae 36 33 c7 0c 0d 3c a8 03 32 3d 35 5a 74 e1 e5 ac be 2d 40 df cb 36 d2 f6 7d cc 51 b1 a0 81 d8 a2 fc 25 fd 0b 26 32 a7 b9 68 57 d9 47 a4 6e 86 86 f4 cb 9f 2f 30 16 49 e9 5f e0 9f 7e ee dc a4 da 13 e7 4d 74 e1 05 fe 4f ac Data Ascii: }hi8YDm,`]Jb?._a sI9juFo8AOda9<9OD"\|r UiU\A%tzl=]l}O?Of-Oe /l&t&@q\sJ]gq63<2=5Zt-@6}Q%&2hWGn/0I_~MtO
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 8f 54 49 e4 5f a7 7f 3b 81 14 80 43 86 26 00 89 70 c0 e0 0a ef f0 93 e4 71 74 92 fc e1 0f ad f0 2c 39 47 d4 d0 c4 08 16 9c 90 77 e9 a7 9a 5f fc 58 21 53 bf 28 f0 8b 4d 48 3d e2 ce db d4 e0 fd b5 7f e3 07 14 a6 34 8b a4 da d2 ca b9 ed b1 54 33 73 51 88 c8 3d f8 d0 7e 80 53 c8 f7 86 93 f4 e3 17 c6 4e 39 43 09 33 8a fa e2 53 98 d6 09 5c 17 f9 37 28 bc be 82 ef 08 c5 51 0d 3b 2f cf 1a 44 19 92 55 3f f9 27 c0 be a9 9d 5a 3b 37 ce 8d c6 e6 65 6a ce fa 05 b4 65 a3 ef 10 e2 2e a7 97 72 ba f0 ed 34 98 27 f5 38 b5 fd 26 47 44 16 8e d4 e0 19 31 6d 1b d8 92 3b 42 92 f2 b0 14 8b 85 62 f6 c2 7c ab e8 cd c0 92 73 8a 44 aa 1d 19 52 51 fd 06 cf 05 99 01 e2 42 b4 81 d2 c4 9d ca 79 8a 3d 40 48 27 84 f4 30 c6 fa 4f 11 e5 69 e6 0d 11 b3 d7 7c 21 b1 96 9e 42 fa 29 73 cb 28 5a Data Ascii: TI_;C&pqt,9Gw_X!S(MH=4T3sQ=~SN9C3S\7(Q;/DU?'Z;7eje.r4'8&GD1m;Bb\|sDRQBy=@H'0Oi\|!B)s(Z
2024-11-21 02:42:26 UTC	134	IN	Data Raw: de e9 ee ec 52 4c 60 ab a7 67 4b 48 a8 a3 98 6b 7f 03 55 05 89 92 74 78 82 d7 af be b7 06 40 14 e0 25 e2 a3 a3 eb e4 7a 18 3f 4a 47 7b 34 9c 85 c3 47 14 e6 fc 11 9c 87 5f 7e 7b fa 92 87 7e d4 8f 30 9f 55 bb 3d 8c db 43 e4 82 e9 3b 9f 74 87 7b e3 b1 77 c2 9f 28 e4 c9 45 88 8f 07 07 bd ee 64 47 3e 2e 96 d1 02 31 e4 f1 71 b2 b7 33 ea e9 8f b0 2f a1 c6 fc 9f 7c c2 73 8b 2f 23 e4 45 d8 e9 ca 17 e4 0d 0a Data Ascii: RL`gKHkUtx@%z?JG{4G_~{~0U=C;t{w(EdG>.1q3/\|s/#E
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 30 30 31 0d 0a b0 0d 0a 30 66 66 66 0d 0a 42 fc 56 7c 54 fb 88 e1 a8 3f de 22 ec 1b 52 3a 39 9f 4c 46 ea f8 e0 50 6a 5e 44 08 a5 82 6f bb c7 de 68 6f 24 df 12 85 24 50 ce 27 3b dd d1 f1 b1 ae 36 ba f5 a8 d6 ce d1 e1 70 b8 2f b5 90 07 65 a4 67 22 1f 10 13 99 cc 90 3f 99 4c 26 a6 6f ef 16 bf 1f f0 7f d9 27 40 47 44 0d 77 f9 3f eb 3b 62 a7 53 f3 63 fa 63 7d 46 54 31 fa bc 43 7f ac cf 58 17 3e ab 03 fa 63 7d de e3 cf 23 fe cf fa bc cf 9f 87 bb f4 c7 fa 7c c0 9f 4b 33 3c e4 cf 7b 63 fa 63 d5 3e e2 cf a5 79 1f f3 e7 9e 47 7f a4 b6 36 e5 c6 fc ec 43 36 39 b3 f2 bb ed 03 a7 52 c5 ee e1 d0 2c 44 07 d4 a0 e5 59 e7 27 de 07 f8 68 9f b4 1e a9 1d 5d 0c fb 4e af e7 3a 87 87 ae b3 d3 3b 92 79 18 47 06 2e dd 47 49 ef 70 07 55 f4 7e d1 c8 d2 b0 8b 92 9d 5d 34 dc d5 b0 62 Data Ascii: 0010fffBV\|T?"R:9LFPj^Doho$$P';6p/eg"?L&o'@GDw?;bScc}FT1CX>c}#\|K3<{cc>yG6C69R,DY'h]N:;yG.GIpU~]4b
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 23 75 f6 a5 9f b4 d1 05 b4 99 a0 58 90 8b ee 12 98 3c 8d 3a ba 1a 43 46 88 2c 4e 98 0a dc d4 1f f8 48 11 13 21 c6 67 b2 46 db 79 f8 13 68 12 ba 20 3e 84 de d1 6a 81 cc 57 04 1f c8 fa ac e9 3c 46 b2 7c 0a d9 50 b4 12 9e 38 20 27 69 4f 7c 35 1b c7 6c cc 00 ad 80 bb a9 1a 6d df c6 42 48 df 91 f2 63 63 31 92 0e 45 32 ce c6 2a 63 0f d4 15 cd 64 63 0d de d3 2d 75 6e 89 e4 e3 6e b2 ad a0 7d d2 7b cc 9b d4 46 b6 bf 40 07 c6 5e 69 32 8b c2 4b 5a f5 62 4e e6 83 8c 3a 9c 7d 1b f7 68 65 7a 20 cd 89 44 c9 e5 e3 b0 da 30 b0 b5 e3 6b 4a b2 62 36 b3 72 12 94 ab ac bd 5c cc 42 6f 6c 66 41 04 64 df c0 69 c5 50 12 1a 1c 83 71 5b 44 76 62 b3 aa 0f 6d 6d 49 7c 10 7b ea 72 11 42 1d dd be a1 97 51 bf 97 d9 57 7a 0f f7 0f 0f d2 17 3b 2b 99 43 b6 73 78 70 54 51 42 cf c1 f1 31 90 Data Ascii: #uX<:CF,NH!gFyh >jW<F\|P8 'iO\|5lmBHcc1E2*cdc-unn}{F@^i2KZbN:}hez D0kJb6r\BolfAdiPq[DvbmmI\|{rBQWz;+CsxpTQB1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49866	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:25 UTC	511	OUT	GET /gui/30192.c1eb6d619c8f6b7d4a0f.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:26 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: c367805d380916ba06bd936606db7726 Content-Encoding: gzip Server: Google Frontend Date: Wed, 20 Nov 2024 12:52:34 GMT Expires: Thu, 20 Nov 2025 12:52:34 GMT Cache-Control: public, max-age=31536000 ETag: "tA1SvQ" Content-Type: text/javascript Age: 49792 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:26 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7d 0d 0a 30 30 30 30 30 30 30 31 0d 0a eb 0d 0a 30 30 30 30 30 30 30 31 0d 0a 76 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a 46 0d 0a 30 30 30 30 30 30 30 31 0d 0a b2 0d 0a 30 30 30 30 30 30 30 31 0d 0a ee 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001}0000000100000001v0000000100000001F00000001000000010000000100000001
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: e7 41 56 aa 74 ac ea 8f c2 6e 31 c7 33 c2 a9 36 b6 57 95 61 3e 01 f0 d4 75 37 61 f6 2a 89 82 1f c2 2c 9c 44 41 7d f6 0f 1e bc 71 97 7e 74 e9 a7 41 67 ee 2f c3 e8 0a fb 92 25 f3 9c bf e4 49 12 bd 0b 73 f7 6d 37 8c a7 d1 7a 16 64 ad 62 b5 bf c9 8a 6a 0b 6a 63 45 af b1 e5 01 40 fb 3c 9e ad 89 8e 06 d9 8d eb cb 17 69 e0 e7 1d 9f 10 07 ab bb 7d b9 40 5d 7f b9 f2 c3 f3 98 90 d4 e2 01 7e 49 83 55 92 fe db c2 e3 55 70 0e 74 bd 17 30 fe 6b 2d f4 65 92 87 17 3e 9d c9 7b 2c f2 df 0c 79 9f 64 59 32 0d 89 32 3c 21 84 bc 79 21 76 7b fe cd 16 f1 8a cf 01 11 c6 1b 4f de bf e7 71 79 9e 4c 4f 92 75 9c 07 e9 8d 93 17 07 ff df 0a fa 69 98 bd 7b 85 43 d0 74 19 31 79 06 83 51 dc 23 41 c3 35 13 c8 e2 60 cb 35 13 98 6b 26 e8 d2 88 67 e0 42 30 24 2e a2 fa 18 1f e3 2a 5b a5 c1 0c Data Ascii: AVtn136Wa>u7a,DA}q~tAg/%Ism7zdbjjcE@<i}@]~IUUpt0k-e>{,ydY22<!y!v{OqyLOui{Ct1yQ#A5`5k&gB0$.[
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 01 95 5e 51 e1 e8 77 c4 57 66 8b 60 a6 cb da a5 d2 6f 71 ee 43 e2 63 bc 55 f7 9f 07 a4 43 7e 05 92 9a e2 fe ff 3e 8d 5a 25 cd 93 3a 4b 42 ae 6b 94 b9 cc 51 0a bb e1 0c e0 0c b4 c2 df aa 2a f9 1c d6 09 73 a0 8f ea bd ba df 60 80 9e 17 77 c3 39 68 36 d4 a7 b3 36 53 67 a1 93 ac e8 4d 61 15 30 f4 fc b5 c2 4a ea 20 ed 9e b6 f5 dd 26 86 4f cc be 0b c6 06 dc 91 a1 28 09 98 20 b1 df b2 92 01 41 22 26 c2 ca 51 ef cd 1b b7 ac 09 6c c1 20 c2 10 51 7b f5 9a d5 84 ac 94 79 0e a4 c2 b6 bc f5 ea ca 51 6a 34 eb 4e d6 e7 54 87 2a d4 94 a5 9e aa b2 f0 97 cb 20 fd 07 fa 9e 2e 4c 5d ab ce d1 75 72 56 64 9a 52 ad 2d e1 32 45 a3 0c 55 aa ed be 3d 17 62 e9 f7 95 ea 13 c6 be 36 f1 24 dd 82 82 66 0a 29 bb 7f 49 92 f3 28 50 30 79 8e 13 16 1d cf ba b3 64 fa 0f dc ef b8 f1 68 ca a3 Data Ascii: ^QwWf`oqCcUC~>Z%:KBkQs`w9h66SgMa0J &O( A"&Ql Q{yQj4NT .L]urVdR-2EU=b6$f)I(P0ydh
2024-11-21 02:42:26 UTC	479	IN	Data Raw: 19 06 ec ef a4 14 be c8 3b eb 10 9b e5 9f 5b ac e8 f4 7b b0 08 98 8e fd 49 96 44 f0 19 74 9d 6e 98 25 46 c3 fb f9 a3 a2 21 7a 61 e5 2c b6 54 4b 3a 5b a1 30 12 34 e0 05 a0 f0 a2 8a 37 1a 25 15 02 0a 9c 46 df 5a 3d a4 54 3b 50 16 f9 64 d6 a4 df b4 76 be 26 b3 56 b9 66 2f f6 66 d0 d0 5f 28 1d 3d 1b 50 8d 52 a1 c9 a5 b3 2e 47 9e 62 c6 a7 95 7d 13 4a f6 a1 43 38 df 61 e9 11 e4 bc c3 aa 7a 73 8c f8 70 6f fd 5f 01 40 72 fb a8 fa 58 4a dc 79 8a 39 3c 25 7c fc 9c a9 49 b6 5e 12 c1 64 23 8c 03 1f 89 20 1a bb e4 a0 49 bb 05 83 42 56 ec 57 ad 3a b6 ad f6 cd 74 f1 2d 7c 61 71 73 c4 e7 ce e9 55 46 fd dc a5 3f ec 91 12 dd 84 e2 d5 9e ca 5f 21 85 68 07 cb 33 ba 05 b2 fa 10 86 0d 90 9a 10 98 64 8d 14 59 91 40 c4 3c 42 23 45 86 5d 72 b3 e6 f5 9e 65 6a bd 92 34 31 92 dc ec Data Ascii: ;[{IDtn%F!za,TK:[047%FZ=T;Pdv&Vf/f_(=PR.Gb}JC8azspo_@rXJy9<%\|I^d# IBVW:t-\|aqsUF?_!h3dY@<B#E]rej41
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a e1 0d 0a 30 30 30 30 30 30 30 31 0d 0a 83 0d 0a 30 30 30 30 30 30 30 31 0d 0a dd 0d 0a 30 30 30 30 30 30 30 31 0d 0a 27 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4e 0d 0a 30 30 30 30 30 30 30 31 0d 0a d3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 03 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8c 0d 0a 30 30 30 30 30 30 30 31 0d 0a e7 0d 0a 30 30 66 66 36 0d 0a f7 9a 66 23 e8 ad 9c 28 b0 30 32 54 27 02 07 5d 3f be 96 ab 17 4d e2 82 9a d5 b9 fa ed f5 72 36 40 9d f1 3d 59 32 91 c7 66 0a 31 73 e7 f5 49 cc 8c 68 21 3a 9f 15 93 98 41 4c 2a 8b 16 db eb 6d 9d 44 a5 3f 16 31 64 37 66 8e 33 13 2c d3 e0 95 d9 68 ad 29 e6 39 1d 4f b7 cf 73 5a ae b7 75 9e 95 7a 4b 04 7f c8 9b 06 c5 0f a6 dd e9 3a cd e0 63 d5 70 36 9a 3c Data Ascii: 00000001000000010000000100000001'0000000100000001N0000000100000001000000010000000100ff6f#(02T']?Mr6@=Y2f1sIh!:AL*mD?1d7f3,h)9OsZuzK:cp6<
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 21 e6 8a 14 b3 3d ce 8c 2d 94 2c 5a 66 2c e8 e9 5a 31 c6 d2 46 35 11 dc c1 f3 ed 20 b8 03 d1 0e dd 10 ac bb d5 42 12 f1 b6 bf 90 b9 af f8 1d 2a 48 65 64 6b ee 88 34 8e 4c ff b8 f3 82 21 b3 d0 12 a5 1a 54 86 60 16 30 a6 cb c5 4c 1f 1a b9 d6 8c a6 6f 6d f2 34 19 63 13 96 f6 79 b7 62 91 2f c5 92 3c 76 68 ff 1c c8 4d 8e bd 77 d8 40 cf 5e da 3c 63 78 be ac fc 7c ba 78 46 21 5a ad 18 b5 4f 14 69 e0 df dd 0b b4 ef a0 bd eb 5d 4f d6 13 e8 89 b3 d1 83 9e 47 22 4c 02 41 88 7f f6 e1 76 01 73 57 14 e0 b7 0d 22 74 d4 5a c5 0e 81 ee 43 d6 df 20 1e a0 20 fb 59 57 90 fd 84 c8 3e 32 d3 ac 99 ec fb 35 b2 af d0 92 88 dd 85 a4 fb 62 88 82 c4 6d eb 43 93 f1 5a 27 14 83 a6 91 fc f6 4e 54 84 68 ad 0f bb eb b7 f7 a0 52 c6 34 f7 40 27 e8 d7 f5 a0 71 ab e8 e4 62 6c e0 51 25 f8 c6 Data Ascii: !=-,Zf,Z1F5 B*Hedk4L!T`0Lom4cyb/<vhMw@^<cx\|xF!ZOi]OG"LAvsW"tZC YW>25bmCZ'NThR4@'qblQ%
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 81 37 8b e2 bf c1 ea aa 5f 0d 6e 07 fc 3b b9 23 21 32 27 ff 1e c1 0f 12 a1 c1 99 23 17 1d 02 5c 9e b0 9e bf 7d 44 5c 68 41 f2 66 9e 25 77 47 79 17 ba 64 4a 19 b1 5c ae 81 fa 94 76 4d fb d8 c1 85 42 df d6 4d 85 58 47 08 51 d3 cc 47 93 8c a6 9a 72 62 08 fa 54 e4 a2 05 90 e8 a1 61 7b 9f 85 7e 9c 5b 14 b6 e3 d6 4a 2a 83 6a 3a 53 ab 26 47 f4 3f 7c f0 99 4c 34 8d d8 b0 56 db 59 51 56 19 55 13 a9 86 8a 72 5c f8 a0 2a f2 24 c6 45 52 96 80 d2 3a 04 d9 0b e4 dc b1 cb 2c 7f ae 8c a6 4d 2b e5 3a 72 20 c4 1a 21 e3 16 28 b0 18 08 c2 16 c2 f2 94 f7 64 69 a8 6a 41 65 30 4d 31 ab b5 e4 70 50 b3 46 d5 e1 80 85 e4 33 20 c9 6b 69 d4 2d e5 95 c1 35 09 dd 52 59 ce 01 dc 18 9c 05 f5 92 11 90 c1 18 5c 5c 1a 72 1e 16 c8 cd c5 b8 fd 80 c4 15 6a 20 db 77 b3 20 47 4c 97 bf cc 5a d7 Data Ascii: 7_n;#!2'#\}D\hAf%wGydJ\vMBMXGQGrbTa{~[Jj:S&G?\|L4VYQVUr\$ER:,M+:r !(dijAe0M1pPF3 ki-5RY\\rj w GLZ
2024-11-21 02:42:26 UTC	1	IN	Data Raw: 0a Data Ascii:
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 65 0d 0a 30 30 30 30 30 30 30 31 0d 0a e7 0d 0a 30 30 30 30 30 30 30 31 0d 0a 67 0d 0a 30 30 30 30 30 30 30 31 0d 0a 71 0d 0a 30 30 30 30 30 30 30 31 0d 0a 14 0d 0a 30 30 30 30 30 30 30 31 0d 0a 51 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 69 0d 0a 30 30 30 30 31 66 66 38 0d 0a 80 b7 f1 90 91 9f be f0 af 88 c3 b5 5e b0 86 71 31 a4 bb 4e b0 55 5a 39 6c b9 08 38 6c 74 c3 35 e1 47 04 67 45 b5 c8 c4 51 32 69 08 0c 63 4a 65 2d 1a 32 cb e9 93 22 35 77 d6 2a 25 37 7d 11 9c fb d3 2b cd 63 49 85 82 e5 bf b6 d7 b8 d6 ce 46 85 d7 ac ca d7 86 4b 92 d1 90 fe 57 fd cf f8 e9 aa 64 69 27 75 f2 4b 0f 16 90 92 49 57 b0 e2 14 1c cf e8 b3 39 ad 62 aa 9e 25 f8 5a cb ea 7c 45 8f ed c1 71 01 ae 1c a6 be 2e 72 ef d8 Data Ascii: 00000001e0000000100000001g00000001q0000000100000001Q00000001j00000001i00001ff8^q1NUZ9l8lt5GgEQ2icJe-2"5w*%7}+cIFKWdi'uKIW9b%Z\|Eq.r
2024-11-21 02:42:26 UTC	1408	IN	Data Raw: 2b d1 ca 88 4b 1e 0e f7 55 ec f1 f0 90 a3 91 c9 2d c5 3a 69 17 89 2d 96 bf 47 12 7e a4 c4 16 57 e3 d6 fa a6 90 37 68 6f 62 b8 7a 11 17 1a 45 13 3c dd 6a 34 de 5e 70 94 ad 91 45 1a ea 98 5a 0d 7b c5 18 0b 9c d5 26 c9 eb 1d 5e 53 2a de 07 5a 4f 73 27 19 23 43 63 03 98 d9 82 72 7e 53 fd ec 4a 97 52 be b5 38 dd 82 92 d1 8f 4c 7f b7 4d 40 d4 2b f7 dc 65 47 e6 2d d3 55 61 c9 a4 66 f9 76 45 7a 2e 1b bd a0 ed b7 53 6f 5d d7 07 c0 2f 16 57 ee a4 64 10 d8 a6 41 d4 cf e6 56 75 88 2a 3b 06 5e 02 87 9d ad 78 92 56 7e ed 64 08 da 19 39 83 de ea 3d a5 0b be 38 7f 0d 5b 2c f9 56 14 b6 6a 59 bd a2 63 64 4d 52 dd e6 66 d4 11 a4 8e 44 8b fa c3 a4 b4 0c 3c d4 8b c7 75 85 82 a3 fa 9e ab 0c 53 d5 cf 58 d4 32 e0 e9 05 df f0 3a b0 b0 a6 f0 6c ab ca 53 28 4d 97 c0 d4 c7 8e 8a 2b Data Ascii: +KU-:i-G~W7hobzE<j4^pEZ{&^SZOs'#Ccr~SJR8LM@+eG-UafvEz.So]/WdAVu;^xV~d9=8[,VjYcdMRfD<uSX2:lS(M+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49864	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:25 UTC	690	OUT	GET /gui/25076.f1d5707846ec1ba9ed7f.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:26 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 07f4728a23d44bf60733914e608dec3e Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 22:19:57 GMT Expires: Wed, 19 Nov 2025 22:19:57 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 102149 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:26 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 94 0d 0a 30 30 30 30 30 30 30 31 0d 0a dd 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6e 0d 0a 30 30 30 30 30 30 30 31 0d 0a e3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 36 0d 0a 30 30 30 30 30 30 30 31 0d 0a 10 0d 0a 30 30 30 30 30 30 30 31 0d 0a 85 0d 0a 30 30 30 31 0d 0a ef 0d 0a 34 30 31 0d 0a fb 14 ac da 1a 64 21 Data Ascii: 0000000100000001000000010000000100000001000000010000000100000001000000010000000100000001\|000000010000000100000001n0000000100000001600000001000000010001401d!
2024-11-21 02:42:26 UTC	217	IN	Data Raw: ac eb 3e a3 17 16 79 04 fb df e6 b7 7e a7 18 6d b0 fb 06 bb 27 b7 85 6c 4f 26 f1 e0 62 02 c1 f1 7c 49 49 25 ea 84 4c 50 60 4a 84 ea f1 41 15 3b 97 90 1c 01 03 9b e2 e0 69 3f 76 f2 2b 24 e4 ba cf 0a d6 e4 fb 43 dc 91 5b 04 51 5f f6 fc 57 d2 14 93 82 75 8f 2c 36 4f 90 c5 db ab 3e 73 4d 6e af 50 c4 9a 7c c6 cb 34 ea 5b d3 60 7f 35 8d f5 db 07 1c 10 6c 25 6d 79 4d 1f f1 e8 4c 94 9f 98 56 d0 5f 4f 8c 06 ca 54 3d d4 ad 84 e7 80 6d c2 96 85 1e ef 89 52 34 ca f3 b6 eb 36 2c fd e6 ea ea 3b e2 70 bb 1c 7e 43 f8 b0 f4 c7 0f ef f8 70 eb 47 e5 a4 98 2f e3 e5 6a b6 80 7c 92 89 1b 28 96 65 f4 c5 45 3b 51 ff 0d 00 00 ff ff 03 00 83 b8 5d ba 69 06 00 00 0d 0a Data Ascii: >y~m'lO&b\|II%LP`JA;i?v+$C[Q_Wu,6O>sMnP\|4[`5l%myMLV_OT=mR46,;p~CpG/j\|(eE;Q]i
2024-11-21 02:42:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49868	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:26 UTC	905	OUT	GET /ui/domains/ghabovethec.info/parent HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x319x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTQ5MTQzOTI1NjYtWkc5dWRDQmlaU0JsZG1scy0xNzMyMTU2OTQ1LjU3Ng== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:27 UTC	880	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: 25e155785709a1eac96518a6f4eb4733 Date: Thu, 21 Nov 2024 02:42:26 GMT Server: Google Frontend Content-Length: 120 Expires: Thu, 21 Nov 2024 02:42:26 GMT Cache-Control: private Connection: close
2024-11-21 02:42:27 UTC	120	IN	Data Raw: 7b 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 64 6f 6d 61 69 6e 73 2f 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 2f 70 61 72 65 6e 74 22 7d 2c 20 22 6d 65 74 61 22 3a 20 7b 22 63 6f 75 6e 74 22 3a 20 30 7d 2c 20 22 64 61 74 61 22 3a 20 6e 75 6c 6c 7d Data Ascii: {"links": {"self": "https://www.virustotal.com/ui/domains/ghabovethec.info/parent"}, "meta": {"count": 0}, "data": null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49870	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:27 UTC	511	OUT	GET /gui/58735.9012aa1d7929d719c24f.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:27 UTC	348	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 219f50e80c7cbe6581c120784eaf3c2e Content-Encoding: gzip Server: Google Frontend Date: Thu, 21 Nov 2024 00:26:53 GMT Expires: Fri, 21 Nov 2025 00:26:53 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 8134 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:27 UTC	1060	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 31 0d 0a ff 0d 0a 30 66 66 36 0d 0a ec 5d 6d 73 db c8 91 fe 7e bf 02 66 1c 87 dc 80 30 a9 37 4b d4 d2 5a ad a4 ad b8 e2 b5 7d 96 bd c9 9d a2 d2 42 c4 48 c4 0a 04 18 00 d4 4b 64 fd f7 7b ba 67 06 33 00 01 8a b2 b5 57 b9 2b 6d 25 16 39 ef d3 d3 d3 d3 fd 74 cf b0 35 cb 84 93 e5 69 38 ca 5b db ed 4c 44 67 de 95 38 9d fa a3 8b bd f1 2c be b8 cc 4f 66 e1 c9 c4 0f e3 e1 82 bc 2f 5f 8e 8e 3b de 74 96 8d Data Ascii: 0000000100000001000000010000000100000001000000010000000100000001000000010000010ff6]ms~f07KZ}BHKd{g3W+m%9t5i8[LDg8,Of/_;t
2024-11-21 02:42:27 UTC	1408	IN	Data Raw: fd 81 1d 3a 9b 42 92 8f fc 4c 6c 63 d7 ed ed 0e ec 95 e8 7b ab de 86 d7 f7 d6 f0 ff 7e bf bf b2 e5 ad e0 f3 ca fd 54 d1 0c f8 35 92 c1 1a c0 af 1d b7 90 88 de a5 14 6f 2e 24 a3 ef 85 67 fb 2c a2 83 4e 9b 4b 9c 40 f2 7e 08 2f 93 fc 6d 18 5f b4 5b 59 16 9d 64 2c f5 5a 56 0b 32 e5 24 66 39 d8 b1 db 2e e5 2c dd 43 5e c8 48 bb 17 93 5a ea c2 24 db 23 d2 32 f3 c4 d7 32 53 e6 d2 7c f6 a4 30 c4 3e d8 8d 03 08 bd 99 90 73 a5 f3 c1 0b 59 3e 76 bc 89 3f 6d b7 71 c8 5b e7 c5 25 ce 8b 4b 3a 2f 2a 82 9e 65 e9 50 91 17 f2 1e d4 5d 96 96 b2 b7 96 2b 3c 96 d3 98 98 f0 94 ac de 4b 02 61 d2 6d a2 a2 28 cb 69 2f 4e f2 93 53 16 c7 d6 d4 4b b9 3e 09 e4 25 67 9e 49 09 5b 3b f5 19 a6 3e 7b dc a9 ab ee 1e 38 f7 29 0b f9 93 0b 71 e3 99 95 8d bc bf fe d5 f3 53 71 f0 cf 99 1f 59 6b Data Ascii: :BLlc{~T5o.$g,NK@~/m_[Yd,ZV2$f9.,C^HZ$#22S\|0>sY>v?mq[%K:/*eP]+<Kam(i/NSK>%gI[;>{8)qSqYk
2024-11-21 02:42:27 UTC	1408	IN	Data Raw: 28 89 66 93 38 1b 1e dd f2 9e 6e fd 14 a6 19 9c 10 42 c4 ad 3b 57 a5 1d 4a c8 c4 24 18 74 bf 75 77 6c 4e c1 e1 91 fa 12 25 7e 80 8d 35 c4 86 62 41 9b 8d 93 ab c3 0b 01 a9 96 c4 45 62 9c 00 1c f0 e3 a0 48 00 ea b6 8f 53 a7 68 e5 32 cc c2 d3 48 a8 b4 bb e5 7d 24 97 25 1f 89 e5 47 91 0e 11 89 f2 5c 4b 95 c4 09 83 61 eb 2a f5 09 c6 6c 39 3b d9 c4 87 cb 4a ba 36 9c 9d 89 08 c2 d9 44 7b 3a 4a c8 f3 58 f8 70 c1 00 f3 64 8d 42 03 96 30 33 b5 a9 0a fa c3 bf 93 eb 12 73 c5 76 c6 61 00 4b a1 b6 71 55 d7 51 74 84 5f 43 b7 55 02 bf 25 95 bb 69 72 d5 7a 5d 33 02 5d fb ff 54 7e 09 1a 32 ca 8d d4 31 78 75 24 4b 9d c8 b5 91 5f 14 13 d7 e9 9f 12 f5 d2 8b bd 33 49 4e c3 48 74 4b b4 d7 2b 96 8a f3 59 e4 a7 5d f8 29 a2 40 af 9b 19 02 ce 51 ae fc 17 5e 37 68 4d 6c 90 68 e0 c8 Data Ascii: (f8nB;WJ$tuwlN%~5bAEbHSh2H}$%G\Ka*l9;J6D{:JXpdB03svaKqUQt_CU%irz]3]T~21xu$K_3INHtK+Y])@Q^7hMlh
2024-11-21 02:42:27 UTC	346	IN	Data Raw: d6 99 a6 93 9a 41 43 d3 e6 b2 70 21 02 d6 34 5c 98 96 e1 c2 c4 33 70 21 45 51 d4 41 86 12 07 04 d9 ef 87 0c 25 78 f7 0d fc 23 d5 c0 02 65 81 a2 52 65 21 59 02 e6 fa 9e e1 24 40 8a 46 3b 03 57 31 98 69 61 8a 12 75 7b c8 b0 be 05 4a 3c f9 aa e1 57 e7 29 67 61 a6 a5 50 c8 39 3d 59 48 4e 6a 20 94 d1 87 94 5b 6b 69 a4 52 06 b9 55 37 db bf 1d 52 69 8e 42 20 e1 15 b0 52 a3 97 65 b0 52 4b 99 47 41 2b 0d 7d 29 42 44 1a 2d 0a 89 51 f1 1e 0a db 93 dc aa cc 1a 53 8b f9 96 81 4a 0d 98 18 9c 92 01 18 62 80 52 14 8a ec c3 4c 5b 75 53 45 00 ff 66 8c 28 6a 67 31 22 6a 5a 33 a0 e8 49 05 94 64 c6 d3 10 85 44 45 4d 35 44 4c 14 4c ff a8 c8 a8 1e 85 26 5f 01 64 b6 c2 29 2e bb 89 1d ed 9e 7d eb c3 3b fb 59 06 f3 b4 5c b9 04 7c ca 0c 5a 65 f7 55 e1 bc 7d 9f 9e fb 71 f8 2f be 19 Data Ascii: ACp!4\3p!EQA%x#eRe!Y$@F;W1iau{J<W)gaP9=YHNj [kiRU7RiB ReRKGA+})BD-QSJbRL[uSEf(jg1"jZ3IdDEM5DLL&_d).};Y\\|ZeU}q/
2024-11-21 02:42:27 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 65 0d 0a 30 30 30 30 30 30 30 31 0d 0a 54 0d 0a 30 30 30 30 66 66 65 0d 0a 8f f0 40 4f 49 04 8e 69 fc f2 a5 d5 6d 6d db a9 2a 72 88 36 da 9f 87 bf 52 24 7e 4d ee 5d e7 57 09 1a 85 c3 72 fd 38 e7 66 51 9b 6c 61 dd 97 4a c5 36 b3 52 4c 47 e1 5c 47 a8 a0 b2 a9 a7 ce 36 dc 2f 60 3d b2 a7 f9 60 c6 05 d8 a9 07 de da 3d c5 6d 59 66 1a 5c 53 ad e4 7d 12 a3 b1 cc f2 ab 59 ef 28 e0 2e 19 c6 5f be 64 7c 29 32 1a de de 29 7c be 15 24 74 b9 96 ee 78 92 a3 c3 08 91 1d 14 2a 63 f7 e3 05 d8 3d 54 2f 5c d4 e5 9d 42 2e 91 46 28 3f 77 0d b2 4e 91 69 16 b4 ae 29 05 66 c5 5a 6b 54 3e 94 15 4a 84 a4 ed b0 23 cf ac 72 13 4c 2b 02 e5 75 5b 6a 1d 3a 03 09 0e 00 a0 e7 22 08 62 2d c8 7a 37 90 bb be 32 7d 2c e8 ef 42 00 bf 99 00 6a f4 be 99 7c 72 6f e1 Data Ascii: 00000001e00000001T0000ffe@OIimmr6R$~M]Wr8fQlaJ6RLG\G6/`=`=mYf\S}Y(._d\|)2)\|$txc=T/\B.F(?wNi)fZkT>J#rL+u[j:"b-z72},Bj\|ro
2024-11-21 02:42:27 UTC	1408	IN	Data Raw: 85 a6 88 45 54 8d b3 a6 58 22 29 c7 3b ca 94 f7 29 2e 2f 0c 7a cd 14 96 51 27 86 c2 e7 88 3e 47 30 aa 22 2f 4d 7f 8e a8 86 90 76 61 43 c5 ca d0 58 33 ac 21 a4 29 66 e8 68 d2 2c 32 e2 6e 08 e8 d0 44 c4 7c ec e7 0e 1e cb 70 c2 98 69 97 01 a1 61 06 b7 a9 eb f0 d3 0b b8 21 77 ee 81 b3 47 99 77 9e 24 d0 cc 21 98 27 0e e2 8f 9d 20 c5 b6 28 25 a2 41 ba 94 42 1d 57 29 af 93 89 38 5f 4d 77 79 67 f3 71 e9 6e 0f ac 8e 75 f5 84 2c 7a ab 2a 86 da 9f 3f be ad 52 fa 2d 8e 75 02 a3 91 e3 e0 e6 1d 3d 39 84 b7 93 4e 6f 1c 6c 6f 67 8a 63 88 b0 51 26 23 a9 97 c8 e2 95 28 64 48 85 7c b3 34 aa 91 02 48 c5 93 1b 4d 62 40 be 6c 66 88 85 d2 cb 31 a8 2e 68 98 b3 e8 be 8e 40 94 69 88 43 df 0c 61 f6 93 ab 98 00 10 cc ef 27 dc 2c 69 20 12 b4 7f 41 c2 b3 28 7b 86 fb cd e0 cb 26 6a 98 Data Ascii: ETX");)./zQ'>G0"/MvaCX3!)fh,2nD\|pia!wGw$!' (%ABW)8_Mwygqnu,z*?R-u=9NologcQ&#(dH\|4HMb@lf1.h@iCa',i A({&j
2024-11-21 02:42:27 UTC	1315	IN	Data Raw: 9f c4 cf ba 85 b3 95 5e 09 38 24 8f 3d fd da cf 42 8f fd 07 3c 24 1b bc 05 4e c6 be fa 74 49 5f 3d 2e ca 6e be da 58 93 be 76 84 e3 1a 8f 7a f0 e4 51 7f 24 8f 7a 5a f1 a8 c7 de db 30 3f 90 8f 33 96 e2 0c 17 3c ac 07 17 39 3d 27 54 bc 6e a7 a2 64 f1 fd 01 97 56 fd c5 97 56 13 bc 0d 90 0c a3 5f bf a7 47 c0 f0 04 1c ff 29 3f 53 87 8d 3d ba 70 7e 03 eb 22 e8 4e 3f 10 86 97 2e 60 c9 d1 7b 77 a5 87 d0 80 94 49 4f b8 7a a7 49 3d 65 40 23 ef 4e 30 17 40 ea 7a 16 ca a3 fe c3 88 62 22 15 5e 8c 01 d8 d5 09 77 a3 67 d7 f1 18 81 8c ef 51 14 91 47 b2 6a 08 e0 62 1f 97 f1 10 78 27 ed 87 c5 31 68 2a 78 ad 6b 46 e4 de 36 86 97 f1 c5 fd a0 21 0e da 8a 65 c6 23 63 e6 dd 50 35 46 23 71 1e da 80 9a 97 69 20 1d ea 26 ea e5 c7 94 a4 00 63 f6 24 39 52 92 1c f4 43 5d 96 e4 d0 ef Data Ascii: ^8$=B<$NtI_=.nXvzQ$zZ0?3<9='TndVV_G)?S=p~"N?.`{wIOzI=e@#N0@zb"^wgQGjbx'1h*xkF6!e#cP5F#qi &c$9RC]
2024-11-21 02:42:27 UTC	948	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 86 0d 0a 30 30 30 30 30 30 30 31 0d 0a f1 0d 0a 30 30 30 30 30 30 30 31 0d 0a bf 0d 0a 30 30 30 30 30 30 30 31 0d 0a 62 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2e 0d 0a 30 30 30 30 30 30 30 31 0d 0a df 0d 0a 30 30 30 30 30 30 30 31 0d 0a 40 0d 0a 30 30 30 30 30 30 30 31 0d 0a 27 0d 0a 30 30 30 30 30 30 30 31 0d 0a bb 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 39 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9b 0d 0a 33 30 34 0d 0a 07 48 26 e0 65 ec f3 14 ef ba 43 51 6d 53 c4 37 49 6d b7 a2 a7 83 3b 9c de 1f ad 54 58 99 78 dc 37 bd e9 52 ce 5a 29 8b 39 85 92 37 7b 7f 94 3c 85 bb 41 b8 59 44 3a bd 44 53 2e 05 b3 c4 3c f3 14 4c a2 ce 8c 39 82 e3 c5 03 f9 5b 98 83 62 85 56 Data Ascii: 00000001000000010000000100000001b00000001.0000000100000001@00000001'000000010000000100000001900000001L00000001304H&eCQmS7Im;TXx7RZ)97{<AYD:DS.<L9[bV
2024-11-21 02:42:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49872	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:27 UTC	510	OUT	GET /gui/5978.4206cee10d7d4c2afd11.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:27 UTC	353	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 5244f5906d653582ccd514b48a9049b6;o=1 Content-Encoding: gzip Server: Google Frontend Date: Wed, 20 Nov 2024 21:17:03 GMT Expires: Thu, 20 Nov 2025 21:17:03 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 19524 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:27 UTC	1055	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 31 0d 0a 8b 0d 0a 30 66 66 65 0d 0a 08 00 00 00 00 00 02 ff ec 5d 79 97 db c6 91 ff 7f 3f 05 4c db 13 c2 0b 40 24 67 38 07 29 4a b6 65 39 d1 da 4a b4 3a 36 9b 55 f4 14 90 6c 0e 91 01 01 06 00 e7 30 cd ef be bf aa 3e d0 38 c8 99 28 89 37 2f 6f 35 f6 88 ec b3 ba ee aa 2e 40 9d 4d 2e 9c bc c8 a2 59 d1 19 77 73 11 2f 82 1b 31 5d 87 b3 ab 67 cb 4d 72 75 5d 7c dc 44 1f 57 61 94 4c 0e f4 fd fc f3 fb 0f 6e b0 de e4 cb ee fb f7 c3 8b b3 f3 0f de 96 fe 1a 75 33 4f 78 a9 3b 79 b2 bd 0e 33 a7 98 a4 dd f3 de 45 ef c2 f5 72 7c ec 1f 0f cf 7a ae 17 4e ba 69 f7 e2 fc a2 ef 7a 69 f7 e4 fc ac 77 e2 ba de 94 fa 4f 4f 4f 86 ae 97 d0 c7 e1 f1 e0 d8 f5 22 fe 78 72 8c a1 31 3e 0e ce 06 c3 33 d7 9b e3 e3 c5 49 1f 9f 66 f8 74 32 1c Data Ascii: 0000000100010ffe]y?L@$g8)Je9J:6Ul0>8(7/o5.@M.Yws/1]gMru]\|DWaLnu3Ox;y3Er\|zNiziwOOO"xr1>3Ift2
2024-11-21 02:42:27 UTC	1408	IN	Data Raw: d3 d8 78 fc 48 ee ff e4 4f 90 63 09 7a 1b b4 77 80 f6 8e a0 9d 47 d7 1a 9e 6b 30 c8 ec ca b9 0c d7 fe 89 13 c6 d1 65 e2 83 e4 ab dc 9f 81 5e 22 c3 5e 5f 6c 7b 3b e7 31 b0 bc 72 be 96 90 4d 3a d4 66 8e 74 ff 12 8f a3 64 bd 29 d4 e9 16 a0 74 c7 59 46 f3 b9 48 f8 88 d4 f0 46 90 ec a7 59 c7 f9 7a b6 0c 93 4b 60 81 f7 50 db 33 0c b5 5f f6 29 6e fc f3 9e b3 f2 c3 4d 91 3a 38 08 a0 7e 7c 5d f8 9b c8 2f 52 9c 04 52 87 c3 54 b6 7f aa c8 03 ee d2 3b 3d 7e d4 98 82 65 1e 01 57 f4 17 9d df 7c fd 13 2c 53 f0 56 09 2b 13 eb 7b 9c 41 7e 4f 93 17 74 58 6a 78 c6 27 f1 20 68 90 e3 1f 5c 16 64 29 dc 68 58 26 ee 53 16 41 c9 49 37 a0 cd 0d 68 e3 28 5c 25 e1 0a 38 20 d4 d0 27 cd 19 12 6b 1d 87 cd 96 06 dc 79 9c af c3 44 13 54 4f 71 a6 e1 fc 52 38 d3 4b cd 62 7e 18 03 07 50 47 Data Ascii: xHOczwGk0e^"^_l{;1rM:ftd)tYFHFYzK`P3_)nM:8~\|]/RRT;=~eW\|,SV+{A~OtXjx' h\d)hX&SAI7h(\%8 'kyDTOqR8Kb~PG
2024-11-21 02:42:27 UTC	1408	IN	Data Raw: 43 a5 31 0f 7e 83 6c c8 6b 31 0b d7 40 4b a8 03 7b 1e 8b dc 08 32 1b b3 74 2e 5c 95 43 6a 52 60 dc e0 89 92 85 08 49 a0 0c fb cf e0 51 29 28 5a 72 aa a9 07 77 87 34 4e c5 0d c4 04 ca ad 64 63 89 2d 99 ab 78 49 0e b2 a2 15 3b fa 20 d1 75 24 6e 46 37 51 32 4f 6f bc e9 66 0a 77 2e 1f 7d d6 f3 60 d6 66 22 26 27 17 df 76 ee 58 25 90 20 0e 0d e9 03 4e 64 ba 80 ce 0b fc d4 08 20 00 5c 3d e0 22 c1 27 f0 c4 38 0b d6 19 99 cc e2 3b b1 08 37 71 d1 d5 f1 85 e0 f8 ac ab f7 95 89 39 0e 38 b4 26 e0 2f b9 bd bb 78 2a 01 19 89 f7 3d e4 49 a0 66 48 7a cc 66 87 34 00 e7 0c 05 6d 8f 8c 87 31 39 c2 c4 82 ac 8c d4 d7 00 3e 16 dc 3e b5 b6 92 1f 13 63 3e 68 3b b0 57 cb c9 3f e3 8d 49 67 96 1b 93 c2 94 ec a3 48 99 12 53 c9 64 cd 5b 76 62 bd 82 13 51 df c3 e6 7f 87 e4 46 17 e9 c7 Data Ascii: C1~lk1@K{2t.\CjR`IQ)(Zrw4Ndc-xI; u$nF7Q2Oofw.}`f"&'vX% Nd \="'8;7q98&/x*=IfHzf4m19>>c>h;W?IgHSd[vbQF
2024-11-21 02:42:27 UTC	253	IN	Data Raw: f8 0f 81 2c 2e 86 a9 7c c8 79 f9 e2 ad b5 01 2e 2d 37 53 5e ba b8 99 e6 8f cc 6e 8f 70 b5 3c 7d 44 99 a4 47 3f be 78 f6 fc b7 6f 9e f3 d6 8f 46 19 e0 d9 4a de 04 31 47 ce e7 bd e9 c9 7c 1e 8e b9 09 49 d5 e8 32 45 e3 e9 69 bf b7 18 c8 c6 f5 26 83 5f 4a 8d 8b 93 c1 ac af 1a 11 60 d3 64 fe 23 9b c0 44 68 99 a1 36 73 d0 93 2d 28 ab 03 fb a0 51 0c cf 8e 7b aa f1 4e c4 71 7a 83 c6 c5 4c 5c 9c 9e c9 91 14 cd 43 1a 3e 3f be 08 67 27 33 d9 86 ca aa 18 4d 83 de ec e2 42 0d 9b dd 85 34 6a 70 7e 36 9d 0e e5 28 dc 86 cf 14 24 b2 e1 66 09 56 a4 e5 17 0b bd 36 49 3f 8e 44 7f ca 26 1f 97 d1 34 f1 98 ff 58 ed fd 5e 8f a6 5f d0 8f d5 3c 90 cd 83 05 7e ac 66 9c 0b a3 c5 29 fd 58 cd 27 dc 3c e3 3f 56 f3 90 9b a7 c7 f4 63 35 9f 72 73 03 c2 33 6e 3e 99 d3 8f 35 fa 0d 0a Data Ascii: ,.\|y.-7S^np<}DG?xoFJ1G\|I2Ei&_J`d#Dh6s-(Q{NqzL\C>?g'3MB4jp~6($fV6I?D&4X^_<~f)X'<?Vc5rs3n>5
2024-11-21 02:42:27 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 9c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 70 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 70 0d 0a 30 30 30 30 30 30 30 31 0d 0a 73 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3f 0d 0a 30 30 30 30 30 30 30 31 0d 0a a4 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 39 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5a 0d 0a 30 30 30 30 30 30 30 31 0d 0a c9 0d 0a 30 30 66 66 33 0d 0a 17 e0 b3 89 9c 6f 38 c8 a5 a3 5b d8 a6 08 9f 06 f6 ce a6 fa 20 37 08 c2 a1 f9 e9 78 16 fd a4 4a 40 a3 4d 69 b5 93 9f 5d 4e a1 1b fb 9e 73 76 e6 39 a8 b7 95 70 a8 1d 65 ef 10 3d fd b3 01 86 28 7c d1 ce b2 ab 87 9e c1 31 26 1e 2b 5e 51 10 Data Ascii: 00000001000000010000000100000001p00000001_00000001p00000001s00000001?000000010000000100000001900000001Z0000000100ff3o8[ 7xJ@Mi]Nsv9pe=(\|1&+^Q
2024-11-21 02:42:27 UTC	1408	IN	Data Raw: 2c dd 33 ea a9 e6 11 4b 01 63 48 7e f4 29 4d 83 fa 28 77 ab 1e 14 c2 50 ae 8b 45 19 15 3d 8c b4 c5 f3 0e 97 51 32 ea c9 a3 a9 f3 6b 6c 95 c7 d5 2d 60 03 e1 ab 84 98 86 55 ad c4 a8 65 7d 4d 5c 0f 18 40 f4 f7 fc e0 86 1c f0 61 ab f2 5d 2a dd a5 40 f6 de 73 c5 83 1a a3 be 71 39 d9 07 f5 85 6f c7 8a 0f 5b 1f 4f b0 5e 45 85 4f 55 0a 21 ec 02 dc 44 39 4b 1f 9e 98 64 a4 cb 83 dd ea c2 12 27 f5 4e b9 4f 7b 9f da b6 d6 59 3f c4 68 04 f9 fb 09 35 3b a4 ba 22 94 61 67 db 35 aa c3 49 72 7b 63 45 24 7e 60 4e 22 04 c3 d5 29 50 e1 00 8f 78 25 7c c8 74 81 67 0e 50 26 98 33 6f 20 af eb ed 1b 46 38 de db b9 8a 92 4d 21 f6 76 2f e1 aa cb 7d f6 0e 99 87 f4 f4 03 20 d9 3b 02 3e 78 b1 bc 67 cc 1d 39 e3 bc 4c 89 8a 5d 79 22 46 92 9f af 51 f0 a4 38 47 f1 13 3d 75 65 8d 53 b7 0e Data Ascii: ,3KcH~)M(wPE=Q2kl-`Ue}M\@a]*@sq9o[O^EOU!D9Kd'NO{Y?h5;"ag5Ir{cE$~`N")Px%\|tgP&3o F8M!v/} ;>xg9L]y"FQ8G=ueS
2024-11-21 02:42:27 UTC	1408	IN	Data Raw: 96 4a d6 ae 0f 00 3c 7c 9b 6b 5f 23 13 90 b6 ce a2 b2 00 ab 64 90 ba 2d f9 ac 94 1b 98 2e b9 28 5e e0 38 55 05 01 e5 ac fa d2 17 c7 22 54 75 44 34 a8 6e 00 47 ce 09 df da a3 76 60 30 50 77 f3 34 ce 66 d8 3a 0c 86 41 09 f4 da fa ba cf c2 2a 8d 3a 3f 0e c3 e6 ea 7f ed 7d 2b e0 32 b4 68 45 b6 e9 6d c5 7a d9 5b 83 8e d1 cf 2a ab fe ca b7 26 71 eb b4 aa e3 fb d3 48 d9 3a eb 9e a5 9b a4 b4 ee 63 4b 27 e9 c1 94 ac c1 b0 87 92 ed a3 fe 1e 94 ac 63 b6 24 d7 3e ff b7 1c d1 46 50 89 02 5d b8 24 4b c3 41 64 7a e3 9a 22 2b 7d 2c 3d 37 ba f0 3e a5 4b 46 29 d0 95 4e 8e 0e 8e 6b 9d c6 57 1b f5 02 be 9d b4 26 da e9 75 a7 ac 4b e2 45 15 eb 96 3a 86 ea ac 49 5d 59 f3 15 ed ef f3 c4 81 81 87 38 ae d5 b3 d8 ae 6b a5 e7 b6 dd 2d e5 31 e6 b0 fb 1c d3 72 54 9b 6b da 6f b8 a0 3c Data Ascii: J<\|k_#d-.(^8U"TuD4nGv`0Pw4f:A:?}+2hEmz[&qH:cK'c$>FP]$KAdz"+},=7>KF)NkW&uKE:I]Y8k-1rTko<
2024-11-21 02:42:27 UTC	37	IN	Data Raw: 4a 1f 8c 26 54 f3 6b 66 30 75 29 9b 68 d6 d6 29 35 ed b3 95 ee 97 bd 34 3d 4a 71 ea d8 6c d2 d8 cc f6 3e 0d 0a Data Ascii: J&Tkf0u)h)54=Jql>
2024-11-21 02:42:27 UTC	800	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 6c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 95 0d 0a 30 30 30 30 30 30 30 31 0d 0a e0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 94 0d 0a 30 30 30 30 30 30 30 31 0d 0a e9 0d 0a 30 30 30 30 30 30 30 31 0d 0a a4 0d 0a 30 30 30 30 30 30 30 31 0d 0a b2 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 27 0d 0a 30 30 30 30 30 30 30 31 0d 0a e9 0d 0a 30 30 30 30 30 30 30 31 0d 0a c8 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 95 0d 0a 30 30 30 30 30 30 30 31 0d 0a 4b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 24 0d 0a 30 30 32 33 61 0d 0a 5a 83 03 5a 4e 60 06 df 4f 88 f2 51 17 ac 53 ce db 4f 8c 72 0c 0c 34 d9 b2 7b 93 Data Ascii: 00000001l0000000100000001000000010000000100000001000000010000000100000001M00000001'000000010000000100000001j0000000100000001K0000000100000001$0023aZZN`OQSOr4{
2024-11-21 02:42:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49873	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:27 UTC	910	OUT	GET /ui/domains/ghabovethec.info/resolutions HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x319x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTQzODc4NDI1MTktWkc5dWRDQmlaU0JsZG1scy0xNzMyMTU2OTQ1LjU4Mw== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:28 UTC	881	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: aa394aefb78fe920a216ee61b1f214d0 Date: Thu, 21 Nov 2024 02:42:28 GMT Server: Google Frontend Content-Length: 5610 Expires: Thu, 21 Nov 2024 02:42:28 GMT Cache-Control: private Connection: close
2024-11-21 02:42:28 UTC	527	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 5b 7b 22 69 64 22 3a 20 22 33 2e 31 36 37 2e 39 39 2e 33 37 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 22 2c 20 22 74 79 70 65 22 3a 20 22 72 65 73 6f 6c 75 74 69 6f 6e 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 72 65 73 6f 6c 75 74 69 6f 6e 73 2f 33 2e 31 36 37 2e 39 39 2e 33 37 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 69 70 5f 61 64 64 72 65 73 73 22 3a 20 22 33 2e 31 36 37 2e 39 39 2e 33 37 22 2c 20 22 68 6f 73 74 5f 6e 61 6d 65 5f 6c 61 73 74 5f 61 6e 61 6c 79 73 69 73 5f 73 74 61 74 73 22 3a 20 7b 22 6d 61 6c 69 63 69 6f 75 73 22 3a 20 30 2c Data Ascii: {"data": [{"id": "3.167.99.37ghabovethec.info", "type": "resolution", "links": {"self": "https://www.virustotal.com/ui/resolutions/3.167.99.37ghabovethec.info"}, "attributes": {"ip_address": "3.167.99.37", "host_name_last_analysis_stats": {"malicious": 0,
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 20 22 33 2e 31 36 37 2e 39 39 2e 35 30 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 22 2c 20 22 74 79 70 65 22 3a 20 22 72 65 73 6f 6c 75 74 69 6f 6e 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 72 65 73 6f 6c 75 74 69 6f 6e 73 2f 33 2e 31 36 37 2e 39 39 2e 35 30 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 69 70 5f 61 64 64 72 65 73 73 22 3a 20 22 33 2e 31 36 37 2e 39 39 2e 35 30 22 2c 20 22 68 6f 73 74 5f 6e 61 6d 65 5f 6c 61 73 74 5f 61 6e 61 6c 79 73 69 73 5f 73 74 61 74 73 22 3a 20 7b 22 6d 61 6c 69 63 69 6f 75 73 22 3a 20 30 2c 20 22 73 75 73 70 69 63 69 6f 75 73 22 3a 20 30 Data Ascii: "3.167.99.50ghabovethec.info", "type": "resolution", "links": {"self": "https://www.virustotal.com/ui/resolutions/3.167.99.50ghabovethec.info"}, "attributes": {"ip_address": "3.167.99.50", "host_name_last_analysis_stats": {"malicious": 0, "suspicious": 0
2024-11-21 02:42:28 UTC	486	IN	Data Raw: 73 5f 73 74 61 74 73 22 3a 20 7b 22 6d 61 6c 69 63 69 6f 75 73 22 3a 20 30 2c 20 22 73 75 73 70 69 63 69 6f 75 73 22 3a 20 30 2c 20 22 75 6e 64 65 74 65 63 74 65 64 22 3a 20 39 34 2c 20 22 68 61 72 6d 6c 65 73 73 22 3a 20 30 2c 20 22 74 69 6d 65 6f 75 74 22 3a 20 30 7d 2c 20 22 72 65 73 6f 6c 76 65 72 22 3a 20 22 43 41 50 45 20 53 61 6e 64 62 6f 78 22 7d 7d 2c 20 7b 22 69 64 22 3a 20 22 31 38 2e 36 36 2e 31 39 32 2e 38 33 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 22 2c 20 22 74 79 70 65 22 3a 20 22 72 65 73 6f 6c 75 74 69 6f 6e 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 72 65 73 6f 6c 75 74 69 6f 6e 73 2f 31 38 2e 36 36 2e 31 39 32 2e 38 Data Ascii: s_stats": {"malicious": 0, "suspicious": 0, "undetected": 94, "harmless": 0, "timeout": 0}, "resolver": "CAPE Sandbox"}}, {"id": "18.66.192.83ghabovethec.info", "type": "resolution", "links": {"self": "https://www.virustotal.com/ui/resolutions/18.66.192.8
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 34 30 2c 20 22 69 70 5f 61 64 64 72 65 73 73 5f 6c 61 73 74 5f 61 6e 61 6c 79 73 69 73 5f 73 74 61 74 73 22 3a 20 7b 22 6d 61 6c 69 63 69 6f 75 73 22 3a 20 30 2c 20 22 73 75 73 70 69 63 69 6f 75 73 22 3a 20 30 2c 20 22 75 6e 64 65 74 65 63 74 65 64 22 3a 20 33 36 2c 20 22 68 61 72 6d 6c 65 73 73 22 3a 20 35 38 2c 20 22 74 69 6d 65 6f 75 74 22 3a 20 30 7d 2c 20 22 72 65 73 6f 6c 76 65 72 22 3a 20 22 5a 65 6e 62 6f 78 22 7d 7d 2c 20 7b 22 69 64 22 3a 20 22 31 38 2e 36 36 2e 31 39 32 2e 31 32 33 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 22 2c 20 22 74 79 70 65 22 3a 20 22 72 65 73 6f 6c 75 74 69 6f 6e 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 Data Ascii: 40, "ip_address_last_analysis_stats": {"malicious": 0, "suspicious": 0, "undetected": 36, "harmless": 58, "timeout": 0}, "resolver": "Zenbox"}}, {"id": "18.66.192.123ghabovethec.info", "type": "resolution", "links": {"self": "https://www.virustotal.com/ui
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 22 3a 20 30 2c 20 22 73 75 73 70 69 63 69 6f 75 73 22 3a 20 30 2c 20 22 75 6e 64 65 74 65 63 74 65 64 22 3a 20 33 31 2c 20 22 68 61 72 6d 6c 65 73 73 22 3a 20 36 33 2c 20 22 74 69 6d 65 6f 75 74 22 3a 20 30 7d 2c 20 22 68 6f 73 74 5f 6e 61 6d 65 22 3a 20 22 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 22 2c 20 22 64 61 74 65 22 3a 20 31 37 33 30 36 32 30 36 34 30 2c 20 22 69 70 5f 61 64 64 72 65 73 73 5f 6c 61 73 74 5f 61 6e 61 6c 79 73 69 73 5f 73 74 61 74 73 22 3a 20 7b 22 6d 61 6c 69 63 69 6f 75 73 22 3a 20 30 2c 20 22 73 75 73 70 69 63 69 6f 75 73 22 3a 20 30 2c 20 22 75 6e 64 65 74 65 63 74 65 64 22 3a 20 33 30 2c 20 22 68 61 72 6d 6c 65 73 73 22 3a 20 36 34 2c 20 22 74 69 6d 65 6f 75 74 22 3a 20 30 7d 2c 20 22 72 65 73 6f 6c 76 65 72 22 3a 20 22 Data Ascii: ": 0, "suspicious": 0, "undetected": 31, "harmless": 63, "timeout": 0}, "host_name": "ghabovethec.info", "date": 1730620640, "ip_address_last_analysis_stats": {"malicious": 0, "suspicious": 0, "undetected": 30, "harmless": 64, "timeout": 0}, "resolver": "
2024-11-21 02:42:28 UTC	373	IN	Data Raw: 30 61 57 39 75 49 68 30 78 4f 43 34 78 4e 54 51 75 4d 54 4d 79 4c 6a 4d 34 5a 32 68 68 59 6d 39 32 5a 58 52 6f 5a 57 4d 75 61 57 35 6d 62 77 77 59 41 43 41 42 22 7d 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 64 6f 6d 61 69 6e 73 2f 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 2f 72 65 73 6f 6c 75 74 69 6f 6e 73 3f 6c 69 6d 69 74 3d 31 30 22 2c 20 22 6e 65 78 74 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 64 6f 6d 61 69 6e 73 2f 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 2f 72 65 73 6f 6c 75 74 69 6f 6e 73 3f 6c 69 6d 69 74 3d 31 30 26 63 75 72 73 6f 72 3d 43 6c 73 4b 45 51 6f 45 5a Data Ascii: 0aW9uIh0xOC4xNTQuMTMyLjM4Z2hhYm92ZXRoZWMuaW5mbwwYACAB"}, "links": {"self": "https://www.virustotal.com/ui/domains/ghabovethec.info/resolutions?limit=10", "next": "https://www.virustotal.com/ui/domains/ghabovethec.info/resolutions?limit=10&cursor=ClsKEQoEZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49869	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:27 UTC	894	OUT	GET /ui/domains/ghabovethec.info HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x319x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTEwNzc3OTM0MjQtWkc5dWRDQmlaU0JsZG1scy0xNzMyMTU2OTQ1LjU4 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:28 UTC	882	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: b45b4aeca8e96a0b23b0794c1e0b9531 Date: Thu, 21 Nov 2024 02:42:27 GMT Server: Google Frontend Content-Length: 16076 Expires: Thu, 21 Nov 2024 02:42:27 GMT Cache-Control: private Connection: close
2024-11-21 02:42:28 UTC	526	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 7b 22 69 64 22 3a 20 22 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 22 2c 20 22 74 79 70 65 22 3a 20 22 64 6f 6d 61 69 6e 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 64 6f 6d 61 69 6e 73 2f 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 6c 61 73 74 5f 61 6e 61 6c 79 73 69 73 5f 73 74 61 74 73 22 3a 20 7b 22 6d 61 6c 69 63 69 6f 75 73 22 3a 20 30 2c 20 22 73 75 73 70 69 63 69 6f 75 73 22 3a 20 30 2c 20 22 75 6e 64 65 74 65 63 74 65 64 22 3a 20 33 31 2c 20 22 68 61 72 6d 6c 65 73 73 22 3a 20 36 33 2c 20 22 74 69 6d 65 6f 75 74 22 3a 20 30 7d 2c 20 22 6a 61 Data Ascii: {"data": {"id": "ghabovethec.info", "type": "domain", "links": {"self": "https://www.virustotal.com/ui/domains/ghabovethec.info"}, "attributes": {"last_analysis_stats": {"malicious": 0, "suspicious": 0, "undetected": 31, "harmless": 63, "timeout": 0}, "ja
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 66 33 33 64 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 30 78 53 49 5f 66 33 33 64 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 41 62 75 73 69 78 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 41 62 75 73 69 78 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 41 44 4d 49 4e 55 53 4c 61 62 73 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e Data Ascii: f33d": {"method": "blacklist", "engine_name": "0xSI_f33d", "category": "undetected", "result": "unrated"}, "Abusix": {"method": "blacklist", "engine_name": "Abusix", "category": "harmless", "result": "clean"}, "ADMINUSLabs": {"method": "blacklist", "engin
2024-11-21 02:42:28 UTC	483	IN	Data Raw: 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 62 65 6e 6b 6f 77 2e 63 63 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 42 66 6f 72 65 2e 41 69 20 50 72 65 43 72 69 6d 65 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 42 66 6f 72 65 2e 41 69 20 50 72 65 43 72 69 6d 65 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 42 69 74 44 65 66 65 6e 64 65 72 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 Data Ascii: "blacklist", "engine_name": "benkow.cc", "category": "harmless", "result": "clean"}, "Bfore.Ai PreCrime": {"method": "blacklist", "engine_name": "Bfore.Ai PreCrime", "category": "undetected", "result": "unrated"}, "BitDefender": {"method": "blacklist", "e
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 75 65 6c 69 76 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 43 65 72 74 65 67 6f 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 43 65 72 74 65 67 6f 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 43 68 6f 6e 67 20 4c 75 61 20 44 61 6f 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 43 68 6f 6e 67 20 4c 75 61 20 44 61 6f 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 Data Ascii: ueliv", "category": "harmless", "result": "clean"}, "Certego": {"method": "blacklist", "engine_name": "Certego", "category": "harmless", "result": "clean"}, "Chong Lua Dao": {"method": "blacklist", "engine_name": "Chong Lua Dao", "category": "harmless", "
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 57 65 62 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 44 72 2e 57 65 62 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 45 72 6d 65 73 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 45 72 6d 65 73 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 45 53 45 54 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 45 53 45 Data Ascii: Web": {"method": "blacklist", "engine_name": "Dr.Web", "category": "harmless", "result": "clean"}, "Ermes": {"method": "blacklist", "engine_name": "Ermes", "category": "undetected", "result": "unrated"}, "ESET": {"method": "blacklist", "engine_name": "ESE
2024-11-21 02:42:28 UTC	1280	IN	Data Raw: 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 47 72 69 64 69 6e 73 6f 66 74 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 48 65 69 6d 64 61 6c 20 53 65 63 75 72 69 74 79 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 48 65 69 6d 64 61 6c 20 53 65 63 75 72 69 74 79 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 48 75 6e 74 2e 69 6f 20 49 6e 74 65 6c 6c 69 67 65 6e 63 65 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e Data Ascii: ngine_name": "Gridinsoft", "category": "undetected", "result": "unrated"}, "Heimdal Security": {"method": "blacklist", "engine_name": "Heimdal Security", "category": "harmless", "result": "clean"}, "Hunt.io Intelligence": {"method": "blacklist", "engine_n
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 4f 70 65 6e 50 68 69 73 68 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 4f 70 65 6e 50 68 69 73 68 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 50 68 69 73 68 69 6e 67 20 44 61 74 61 62 61 73 65 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 50 68 69 73 68 69 6e 67 20 44 61 74 61 62 61 73 65 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c Data Ascii: ory": "undetected", "result": "unrated"}, "OpenPhish": {"method": "blacklist", "engine_name": "OpenPhish", "category": "harmless", "result": "clean"}, "Phishing Database": {"method": "blacklist", "engine_name": "Phishing Database", "category": "harmless",
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 41 52 45 2e 6f 72 67 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 53 43 55 4d 57 41 52 45 2e 6f 72 67 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 53 65 63 6c 6f 6f 6b 75 70 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 53 65 63 6c 6f 6f 6b 75 70 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 53 65 63 75 72 65 42 72 61 69 6e 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 Data Ascii: ARE.org": {"method": "blacklist", "engine_name": "SCUMWARE.org", "category": "harmless", "result": "clean"}, "Seclookup": {"method": "blacklist", "engine_name": "Seclookup", "category": "harmless", "result": "clean"}, "SecureBrain": {"method": "blacklist"
2024-11-21 02:42:28 UTC	1280	IN	Data Raw: 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 55 52 4c 68 61 75 73 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 55 52 4c 68 61 75 73 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 55 52 4c 51 75 65 72 79 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 55 52 4c 51 75 65 72 79 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 Data Ascii: "category": "undetected", "result": "unrated"}, "URLhaus": {"method": "blacklist", "engine_name": "URLhaus", "category": "harmless", "result": "clean"}, "URLQuery": {"method": "blacklist", "engine_name": "URLQuery", "category": "undetected", "result": "u
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 6b 65 72 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 73 65 63 75 72 6f 6c 79 74 69 63 73 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 73 65 63 75 72 6f 6c 79 74 69 63 73 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 58 63 69 74 69 75 6d 20 56 65 72 64 69 63 74 20 43 6c 6f 75 64 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 58 63 69 74 69 75 6d 20 56 65 72 64 69 63 74 20 43 6c 6f 75 64 22 2c 20 22 Data Ascii: ker", "category": "harmless", "result": "clean"}, "securolytics": {"method": "blacklist", "engine_name": "securolytics", "category": "harmless", "result": "clean"}, "Xcitium Verdict Cloud": {"method": "blacklist", "engine_name": "Xcitium Verdict Cloud", "

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49871	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:27 UTC	915	OUT	GET /ui/domains/ghabovethec.info/historical_whois HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x319x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTY4MDcxMDg4NDUtWkc5dWRDQmlaU0JsZG1scy0xNzMyMTU2OTQ1LjU4Mw== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:28 UTC	882	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: 973f3e26aa7903d6f0053ad9fd267ce1 Date: Thu, 21 Nov 2024 02:42:28 GMT Server: Google Frontend Content-Length: 21574 Expires: Thu, 21 Nov 2024 02:42:28 GMT Cache-Control: private Connection: close
2024-11-21 02:42:28 UTC	526	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 5b 7b 22 69 64 22 3a 20 22 37 33 64 36 63 61 30 63 31 33 37 36 65 38 61 36 34 33 62 61 39 66 30 65 61 38 32 38 30 33 34 35 36 64 37 34 66 66 30 33 65 61 31 37 33 34 66 32 32 36 35 66 35 30 38 36 66 65 38 35 61 37 36 39 22 2c 20 22 74 79 70 65 22 3a 20 22 77 68 6f 69 73 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 77 68 6f 69 73 2f 37 33 64 36 63 61 30 63 31 33 37 36 65 38 61 36 34 33 62 61 39 66 30 65 61 38 32 38 30 33 34 35 36 64 37 34 66 66 30 33 65 61 31 37 33 34 66 32 32 36 35 66 35 30 38 36 66 65 38 35 61 37 36 39 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 6c 61 73 74 5f 75 70 64 61 74 65 64 22 3a Data Ascii: {"data": [{"id": "73d6ca0c1376e8a643ba9f0ea82803456d74ff03ea1734f2265f5086fe85a769", "type": "whois", "links": {"self": "https://www.virustotal.com/ui/whois/73d6ca0c1376e8a643ba9f0ea82803456d74ff03ea1734f2265f5086fe85a769"}, "attributes": {"last_updated":
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 4f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 3a 20 22 30 33 37 66 65 34 32 32 62 33 39 32 65 62 33 66 20 7c 20 34 37 33 64 61 66 31 37 34 35 33 64 38 33 63 64 22 2c 20 22 52 65 67 69 73 74 72 61 6e 74 20 4e 61 6d 65 22 3a 20 22 31 66 38 66 34 31 36 36 35 39 39 64 32 33 65 65 22 2c 20 22 41 64 6d 69 6e 20 4f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 3a 20 22 52 45 44 41 43 54 45 44 20 46 4f 52 20 50 52 49 56 41 43 59 20 7c 20 53 75 70 65 72 20 50 72 69 76 61 63 79 20 53 65 72 76 69 63 65 20 4c 54 44 20 63 2f 6f 20 44 79 6e 61 64 6f 74 22 2c 20 22 52 65 67 69 73 74 72 61 72 20 52 65 67 69 73 74 72 61 74 69 6f 6e 20 45 78 70 69 72 61 74 69 6f 6e 20 44 61 74 65 22 3a 20 22 32 30 32 35 2d 30 33 2d 30 31 54 30 39 3a 32 35 3a 32 31 2e 30 5a 22 2c 20 22 52 65 67 69 73 74 72 Data Ascii: Organization": "037fe422b392eb3f \| 473daf17453d83cd", "Registrant Name": "1f8f4166599d23ee", "Admin Organization": "REDACTED FOR PRIVACY \| Super Privacy Service LTD c/o Dynadot", "Registrar Registration Expiration Date": "2025-03-01T09:25:21.0Z", "Registr
2024-11-21 02:42:28 UTC	483	IN	Data Raw: 20 50 68 6f 6e 65 22 3a 20 22 31 66 38 66 34 31 36 36 35 39 39 64 32 33 65 65 20 7c 20 64 64 38 62 38 36 65 37 63 66 33 38 37 65 31 30 22 2c 20 22 54 65 63 68 20 43 69 74 79 22 3a 20 22 52 45 44 41 43 54 45 44 20 46 4f 52 20 50 52 49 56 41 43 59 20 7c 20 53 61 6e 20 4d 61 74 65 6f 22 2c 20 22 52 65 67 69 73 74 72 79 20 45 78 70 69 72 79 20 44 61 74 65 22 3a 20 22 32 30 32 35 2d 30 33 2d 30 31 54 30 39 3a 32 35 3a 32 31 5a 22 2c 20 22 4e 61 6d 65 20 53 65 72 76 65 72 22 3a 20 22 6d 61 63 6b 2e 6e 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 7c 20 72 6f 73 61 6c 79 6e 2e 6e 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 2c 20 22 52 65 67 69 73 74 72 61 72 20 41 62 75 73 65 20 43 6f 6e 74 61 63 74 20 50 68 6f 6e 65 22 3a 20 22 2b 31 2e 36 35 30 32 Data Ascii: Phone": "1f8f4166599d23ee \| dd8b86e7cf387e10", "Tech City": "REDACTED FOR PRIVACY \| San Mateo", "Registry Expiry Date": "2025-03-01T09:25:21Z", "Name Server": "mack.ns.cloudflare.com \| rosalyn.ns.cloudflare.com", "Registrar Abuse Contact Phone": "+1.6502
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 65 65 20 7c 20 33 34 33 32 36 35 30 65 63 33 33 37 63 39 34 35 20 7c 20 38 61 31 38 38 37 30 36 30 34 36 66 64 66 66 61 22 2c 20 22 52 65 67 69 73 74 72 61 72 20 41 62 75 73 65 20 43 6f 6e 74 61 63 74 20 45 6d 61 69 6c 22 3a 20 22 61 62 75 73 65 40 64 79 6e 61 64 6f 74 2e 63 6f 6d 22 2c 20 22 52 65 67 69 73 74 72 61 6e 74 20 43 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 20 22 54 65 63 68 20 53 74 61 74 65 2f 50 72 6f 76 69 6e 63 65 22 3a 20 22 43 61 6c 69 66 6f 72 6e 69 61 20 7c 20 52 45 44 41 43 54 45 44 20 46 4f 52 20 50 52 49 56 41 43 59 22 2c 20 22 44 6f 6d 61 69 6e 20 4e 61 6d 65 22 3a 20 22 47 48 41 42 4f 56 45 54 48 45 43 2e 49 4e 46 4f 20 7c 20 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 22 7d 7d 7d 2c 20 7b 22 69 64 22 3a 20 22 61 65 38 62 65 Data Ascii: ee \| 3432650ec337c945 \| 8a188706046fdffa", "Registrar Abuse Contact Email": "abuse@dynadot.com", "Registrant Country": "US", "Tech State/Province": "California \| REDACTED FOR PRIVACY", "Domain Name": "GHABOVETHEC.INFO \| ghabovethec.info"}}}, {"id": "ae8be
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 52 65 67 69 73 74 72 61 72 20 55 52 4c 22 3a 20 22 68 74 74 70 3a 2f 2f 64 79 6e 61 64 6f 74 2e 63 6f 6d 22 2c 20 22 52 65 67 69 73 74 72 79 20 54 65 63 68 20 49 44 22 3a 20 22 52 45 44 41 43 54 45 44 20 46 4f 52 20 50 52 49 56 41 43 59 22 2c 20 22 52 65 67 69 73 74 72 79 20 52 65 67 69 73 74 72 61 6e 74 20 49 44 22 3a 20 22 52 45 44 41 43 54 45 44 20 46 4f 52 20 50 52 49 56 41 43 59 22 2c 20 22 52 65 67 69 73 74 72 61 6e 74 20 43 69 74 79 22 3a 20 22 31 66 38 66 34 31 36 36 35 39 39 64 32 33 65 65 22 2c 20 22 52 65 67 69 73 74 72 61 72 22 3a 20 22 44 79 6e 61 64 6f 74 20 49 6e 63 22 2c 20 22 52 65 67 69 73 74 72 61 6e 74 20 46 61 78 20 45 78 74 22 3a 20 22 31 66 38 66 34 31 36 36 35 39 39 64 32 33 65 65 22 2c 20 22 52 65 67 69 73 74 72 61 6e 74 20 53 74 Data Ascii: Registrar URL": "http://dynadot.com", "Registry Tech ID": "REDACTED FOR PRIVACY", "Registry Registrant ID": "REDACTED FOR PRIVACY", "Registrant City": "1f8f4166599d23ee", "Registrar": "Dynadot Inc", "Registrant Fax Ext": "1f8f4166599d23ee", "Registrant St
2024-11-21 02:42:28 UTC	1280	IN	Data Raw: 65 22 2c 20 22 44 4e 53 53 45 43 22 3a 20 22 75 6e 73 69 67 6e 65 64 22 2c 20 22 52 65 67 69 73 74 72 61 6e 74 20 4f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 3a 20 22 30 33 37 66 65 34 32 32 62 33 39 32 65 62 33 66 22 2c 20 22 52 65 67 69 73 74 72 61 6e 74 20 4e 61 6d 65 22 3a 20 22 31 66 38 66 34 31 36 36 35 39 39 64 32 33 65 65 22 2c 20 22 41 64 6d 69 6e 20 4f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 3a 20 22 52 45 44 41 43 54 45 44 20 46 4f 52 20 50 52 49 56 41 43 59 22 2c 20 22 52 65 67 69 73 74 72 79 20 44 6f 6d 61 69 6e 20 49 44 22 3a 20 22 35 31 37 36 31 38 34 30 39 63 32 65 34 36 32 33 39 30 39 30 62 30 62 34 34 63 62 37 31 35 33 66 2d 44 4f 4e 55 54 53 22 2c 20 22 54 65 63 68 20 4f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 3a 20 22 52 45 44 41 43 54 45 44 20 46 Data Ascii: e", "DNSSEC": "unsigned", "Registrant Organization": "037fe422b392eb3f", "Registrant Name": "1f8f4166599d23ee", "Admin Organization": "REDACTED FOR PRIVACY", "Registry Domain ID": "517618409c2e46239090b0b44cb7153f-DONUTS", "Tech Organization": "REDACTED F
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 36 35 30 32 36 32 30 31 30 30 22 2c 20 22 44 6f 6d 61 69 6e 20 53 74 61 74 75 73 22 3a 20 22 63 6c 69 65 6e 74 54 72 61 6e 73 66 65 72 50 72 6f 68 69 62 69 74 65 64 20 68 74 74 70 73 3a 2f 2f 69 63 61 6e 6e 2e 6f 72 67 2f 65 70 70 23 63 6c 69 65 6e 74 54 72 61 6e 73 66 65 72 50 72 6f 68 69 62 69 74 65 64 20 7c 20 72 65 6e 65 77 50 65 72 69 6f 64 20 68 74 74 70 73 3a 2f 2f 69 63 61 6e 6e 2e 6f 72 67 2f 65 70 70 23 72 65 6e 65 77 50 65 72 69 6f 64 22 2c 20 22 52 65 67 69 73 74 72 61 6e 74 20 50 68 6f 6e 65 20 45 78 74 22 3a 20 22 31 66 38 66 34 31 36 36 35 39 39 64 32 33 65 65 22 2c 20 22 52 65 67 69 73 74 72 61 72 20 57 48 4f 49 53 20 53 65 72 76 65 72 22 3a 20 22 77 68 6f 69 73 2e 64 79 6e 61 64 6f 74 2e 63 6f 6d 22 2c 20 22 52 65 67 69 73 74 72 61 6e 74 Data Ascii: 6502620100", "Domain Status": "clientTransferProhibited https://icann.org/epp#clientTransferProhibited \| renewPeriod https://icann.org/epp#renewPeriod", "Registrant Phone Ext": "1f8f4166599d23ee", "Registrar WHOIS Server": "whois.dynadot.com", "Registrant
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 3a 20 22 52 45 44 41 43 54 45 44 20 46 4f 52 20 50 52 49 56 41 43 59 20 7c 20 55 53 22 2c 20 22 43 72 65 61 74 69 6f 6e 20 44 61 74 65 22 3a 20 22 32 30 32 33 2d 30 33 2d 30 31 54 30 39 3a 32 35 3a 32 31 2e 30 5a 20 7c 20 32 30 32 33 2d 30 33 2d 30 31 54 30 39 3a 32 35 3a 32 31 5a 22 2c 20 22 55 70 64 61 74 65 64 20 44 61 74 65 22 3a 20 22 32 30 32 34 2d 30 31 2d 30 33 54 30 39 3a 33 36 3a 31 30 2e 30 5a 20 7c 20 32 30 32 34 2d 30 31 2d 30 33 54 30 39 3a 33 36 3a 31 30 5a 22 2c 20 22 41 64 6d 69 6e 20 43 69 74 79 22 3a 20 22 52 45 44 41 43 54 45 44 20 46 4f 52 20 50 52 49 56 41 43 59 20 7c 20 53 61 6e 20 4d 61 74 65 6f 22 2c 20 22 54 65 63 68 20 43 6f 75 6e 74 72 79 22 3a 20 22 52 45 44 41 43 54 45 44 20 46 4f 52 20 50 52 49 56 41 43 59 20 7c 20 55 53 22 Data Ascii: : "REDACTED FOR PRIVACY \| US", "Creation Date": "2023-03-01T09:25:21.0Z \| 2023-03-01T09:25:21Z", "Updated Date": "2024-01-03T09:36:10.0Z \| 2024-01-03T09:36:10Z", "Admin City": "REDACTED FOR PRIVACY \| San Mateo", "Tech Country": "REDACTED FOR PRIVACY \| US"
2024-11-21 02:42:28 UTC	1280	IN	Data Raw: 64 32 33 65 65 22 2c 20 22 52 65 67 69 73 74 72 61 72 20 57 48 4f 49 53 20 53 65 72 76 65 72 22 3a 20 22 77 68 6f 69 73 2e 64 79 6e 61 64 6f 74 2e 63 6f 6d 22 2c 20 22 52 65 67 69 73 74 72 61 6e 74 20 53 74 72 65 65 74 22 3a 20 22 31 66 38 66 34 31 36 36 35 39 39 64 32 33 65 65 20 7c 20 33 34 33 32 36 35 30 65 63 33 33 37 63 39 34 35 20 7c 20 38 61 31 38 38 37 30 36 30 34 36 66 64 66 66 61 22 2c 20 22 52 65 67 69 73 74 72 61 72 20 41 62 75 73 65 20 43 6f 6e 74 61 63 74 20 45 6d 61 69 6c 22 3a 20 22 61 62 75 73 65 40 64 79 6e 61 64 6f 74 2e 63 6f 6d 22 2c 20 22 52 65 67 69 73 74 72 61 6e 74 20 43 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 20 22 54 65 63 68 20 53 74 61 74 65 2f 50 72 6f 76 69 6e 63 65 22 3a 20 22 43 61 6c 69 66 6f 72 6e 69 61 20 7c 20 52 45 Data Ascii: d23ee", "Registrar WHOIS Server": "whois.dynadot.com", "Registrant Street": "1f8f4166599d23ee \| 3432650ec337c945 \| 8a188706046fdffa", "Registrar Abuse Contact Email": "abuse@dynadot.com", "Registrant Country": "US", "Tech State/Province": "California \| RE
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 20 43 6f 75 6e 74 72 79 22 3a 20 22 52 45 44 41 43 54 45 44 20 46 4f 52 20 50 52 49 56 41 43 59 20 7c 20 55 53 22 2c 20 22 43 72 65 61 74 69 6f 6e 20 44 61 74 65 22 3a 20 22 32 30 32 33 2d 30 33 2d 30 31 54 30 39 3a 32 35 3a 32 31 2e 30 5a 20 7c 20 32 30 32 33 2d 30 33 2d 30 31 54 30 39 3a 32 35 3a 32 31 5a 22 2c 20 22 55 70 64 61 74 65 64 20 44 61 74 65 22 3a 20 22 32 30 32 33 2d 30 34 2d 30 39 54 31 32 3a 31 31 3a 35 37 2e 30 5a 20 7c 20 32 30 32 33 2d 30 34 2d 30 39 54 31 32 3a 31 31 3a 35 38 5a 22 2c 20 22 41 64 6d 69 6e 20 43 69 74 79 22 3a 20 22 52 45 44 41 43 54 45 44 20 46 4f 52 20 50 52 49 56 41 43 59 20 7c 20 53 61 6e 20 4d 61 74 65 6f 22 2c 20 22 54 65 63 68 20 43 6f 75 6e 74 72 79 22 3a 20 22 52 45 44 41 43 54 45 44 20 46 4f 52 20 50 52 49 56 Data Ascii: Country": "REDACTED FOR PRIVACY \| US", "Creation Date": "2023-03-01T09:25:21.0Z \| 2023-03-01T09:25:21Z", "Updated Date": "2023-04-09T12:11:57.0Z \| 2023-04-09T12:11:58Z", "Admin City": "REDACTED FOR PRIVACY \| San Mateo", "Tech Country": "REDACTED FOR PRIV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49874	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:27 UTC	926	OUT	GET /ui/domains/ghabovethec.info/historical_ssl_certificates HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x319x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTUzMTg2MzYxMDQtWkc5dWRDQmlaU0JsZG1scy0xNzMyMTU2OTQ1LjU4Mw== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:28 UTC	881	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: 12349cad15fa6245918a60a7bab3d924 Date: Thu, 21 Nov 2024 02:42:28 GMT Server: Google Frontend Content-Length: 5498 Expires: Thu, 21 Nov 2024 02:42:28 GMT Cache-Control: private Connection: close
2024-11-21 02:42:28 UTC	527	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 5b 7b 22 69 64 22 3a 20 22 37 66 31 36 39 65 39 62 63 39 38 64 66 64 66 64 31 33 61 34 62 34 38 35 62 39 30 37 37 61 66 31 65 61 64 61 38 63 66 35 36 34 65 36 61 38 66 61 62 65 65 38 30 30 33 62 61 31 34 37 65 39 65 32 22 2c 20 22 74 79 70 65 22 3a 20 22 73 73 6c 5f 63 65 72 74 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 73 73 6c 5f 63 65 72 74 73 2f 37 66 31 36 39 65 39 62 63 39 38 64 66 64 66 64 31 33 61 34 62 34 38 35 62 39 30 37 37 61 66 31 65 61 64 61 38 63 66 35 36 34 65 36 61 38 66 61 62 65 65 38 30 30 33 62 61 31 34 37 65 39 65 32 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 69 73 73 75 65 72 22 Data Ascii: {"data": [{"id": "7f169e9bc98dfdfd13a4b485b9077af1eada8cf564e6a8fabee8003ba147e9e2", "type": "ssl_cert", "links": {"self": "https://www.virustotal.com/ui/ssl_certs/7f169e9bc98dfdfd13a4b485b9077af1eada8cf564e6a8fabee8003ba147e9e2"}, "attributes": {"issuer"
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 6f 22 2c 20 22 2a 2e 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 22 5d 2c 20 22 63 65 72 74 69 66 69 63 61 74 65 5f 70 6f 6c 69 63 69 65 73 22 3a 20 5b 22 32 2e 32 33 2e 31 34 30 2e 31 2e 32 2e 31 22 5d 2c 20 22 6b 65 79 5f 75 73 61 67 65 22 3a 20 5b 22 64 69 67 69 74 61 6c 53 69 67 6e 61 74 75 72 65 22 2c 20 22 6b 65 79 45 6e 63 69 70 68 65 72 6d 65 6e 74 22 5d 2c 20 22 65 78 74 65 6e 64 65 64 5f 6b 65 79 5f 75 73 61 67 65 22 3a 20 5b 22 73 65 72 76 65 72 41 75 74 68 22 2c 20 22 63 6c 69 65 6e 74 41 75 74 68 22 5d 2c 20 22 63 72 6c 5f 64 69 73 74 72 69 62 75 74 69 6f 6e 5f 70 6f 69 6e 74 73 22 3a 20 5b 22 68 74 74 70 3a 2f 2f 63 72 6c 2e 72 32 6d 30 32 2e 61 6d 61 7a 6f 6e 74 72 75 73 74 2e 63 6f 6d 2f 72 32 6d 30 32 2e 63 72 6c 22 5d 2c 20 22 63 61 Data Ascii: o", "*.ghabovethec.info"], "certificate_policies": ["2.23.140.1.2.1"], "key_usage": ["digitalSignature", "keyEncipherment"], "extended_key_usage": ["serverAuth", "clientAuth"], "crl_distribution_points": ["http://crl.r2m02.amazontrust.com/r2m02.crl"], "ca
2024-11-21 02:42:28 UTC	484	IN	Data Raw: 34 63 37 36 31 30 32 34 38 61 30 35 31 32 61 32 32 63 62 36 33 32 63 36 63 61 37 63 30 33 33 38 37 36 30 61 22 7d 2c 20 22 76 65 72 73 69 6f 6e 22 3a 20 22 56 33 22 2c 20 22 70 75 62 6c 69 63 5f 6b 65 79 22 3a 20 7b 22 61 6c 67 6f 72 69 74 68 6d 22 3a 20 22 52 53 41 22 2c 20 22 72 73 61 22 3a 20 7b 22 6d 6f 64 75 6c 75 73 22 3a 20 22 63 62 39 34 31 61 66 63 36 39 34 30 35 32 37 37 36 61 31 65 61 65 38 34 63 35 65 38 31 63 38 64 65 39 38 30 66 61 64 66 61 38 38 34 35 34 33 38 33 36 34 30 65 64 62 35 32 39 31 32 35 39 37 30 33 61 34 30 64 33 63 64 38 36 32 30 63 64 64 33 37 61 34 31 34 35 64 36 61 39 31 63 34 32 38 30 36 32 65 36 63 33 62 66 62 65 37 39 64 32 62 62 35 37 34 32 38 33 32 31 32 39 65 66 63 30 61 31 31 63 30 35 35 32 66 31 66 34 64 62 31 66 35 Data Ascii: 4c7610248a0512a22cb632c6ca7c0338760a"}, "version": "V3", "public_key": {"algorithm": "RSA", "rsa": {"modulus": "cb941afc694052776a1eae84c5e81c8de980fadfa88454383640edb5291259703a40d3cd8620cdd37a4145d6a91c428062e6c3bfbe79d2bb5742832129efc0a11c0552f1f4db1f5
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 64 34 65 30 64 37 35 32 35 38 66 66 39 65 32 37 36 35 34 32 35 61 33 63 62 33 34 35 31 66 62 31 31 31 37 65 34 36 66 31 65 30 62 33 62 61 62 63 34 31 64 64 66 38 31 33 32 66 61 35 66 61 61 30 32 36 32 66 33 66 34 39 61 64 36 36 39 34 62 66 38 39 62 35 33 63 36 34 61 36 36 62 39 31 39 39 63 39 64 32 61 33 62 33 31 33 35 32 31 63 35 62 65 61 38 33 30 38 35 65 39 39 36 66 62 62 31 35 36 37 35 31 66 63 65 31 34 34 63 66 22 2c 20 22 65 78 70 6f 6e 65 6e 74 22 3a 20 22 31 30 30 30 31 22 2c 20 22 6b 65 79 5f 73 69 7a 65 22 3a 20 32 30 34 38 7d 7d 7d 2c 20 22 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 70 6f 72 74 22 3a 20 22 34 34 33 22 2c 20 22 66 69 72 73 74 5f 73 65 65 6e 5f 64 61 74 65 22 3a 20 22 32 30 32 34 2d 30 33 2d 30 39 22 7d Data Ascii: d4e0d75258ff9e2765425a3cb3451fb1117e46f1e0b3babc41ddf8132fa5faa0262f3f49ad6694bf89b53c64a66b9199c9d2a3b313521c5bea83085e996fbb156751fce144cf", "exponent": "10001", "key_size": 2048}}}, "context_attributes": {"port": "443", "first_seen_date": "2024-03-09"}
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 31 39 32 39 31 36 38 2c 20 22 73 75 62 6a 65 63 74 22 3a 20 7b 22 43 4e 22 3a 20 22 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 22 7d 2c 20 22 74 68 75 6d 62 70 72 69 6e 74 22 3a 20 22 33 31 64 37 35 33 33 65 37 33 62 39 35 63 63 61 61 39 34 65 39 61 32 30 34 63 63 61 39 36 34 30 63 33 61 30 35 61 38 66 22 2c 20 22 74 68 75 6d 62 70 72 69 6e 74 5f 73 68 61 32 35 36 22 3a 20 22 34 34 33 31 32 39 64 35 64 33 32 63 36 61 63 66 36 62 38 31 37 61 63 34 63 64 63 36 61 39 62 37 65 62 39 38 34 63 66 32 35 39 38 65 65 63 64 66 35 30 38 35 63 38 62 32 33 35 32 38 63 30 37 33 22 2c 20 22 73 69 67 6e 61 74 75 72 65 5f 61 6c 67 6f 72 69 74 68 6d 22 3a 20 22 73 68 61 32 35 36 52 53 41 22 2c 20 22 73 69 7a 65 22 3a 20 31 35 30 37 2c 20 22 63 65 72 74 5f 73 69 67 6e Data Ascii: 1929168, "subject": {"CN": "ghabovethec.info"}, "thumbprint": "31d7533e73b95ccaa94e9a204cca9640c3a05a8f", "thumbprint_sha256": "443129d5d32c6acf6b817ac4cdc6a9b7eb984cf2598eecdf5085c8b23528c073", "signature_algorithm": "sha256RSA", "size": 1507, "cert_sign
2024-11-21 02:42:28 UTC	263	IN	Data Raw: 35 38 38 63 39 66 22 2c 20 22 65 78 70 6f 6e 65 6e 74 22 3a 20 22 30 31 30 30 30 31 22 7d 2c 20 22 61 6c 67 6f 72 69 74 68 6d 22 3a 20 22 52 53 41 22 7d 7d 2c 20 22 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 70 6f 72 74 22 3a 20 22 34 34 33 22 2c 20 22 66 69 72 73 74 5f 73 65 65 6e 5f 64 61 74 65 22 3a 20 22 32 30 32 33 2d 30 34 2d 31 39 22 7d 7d 5d 2c 20 22 6d 65 74 61 22 3a 20 7b 22 63 6f 75 6e 74 22 3a 20 32 7d 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 64 6f 6d 61 69 6e 73 2f 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 2f 68 69 73 74 6f 72 69 63 61 6c 5f 73 73 6c 5f 63 65 72 74 69 66 69 63 61 74 65 73 3f 6c 69 6d Data Ascii: 588c9f", "exponent": "010001"}, "algorithm": "RSA"}}, "context_attributes": {"port": "443", "first_seen_date": "2023-04-19"}}], "meta": {"count": 2}, "links": {"self": "https://www.virustotal.com/ui/domains/ghabovethec.info/historical_ssl_certificates?lim

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49875	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:27 UTC	528	OUT	GET /gui/vt-ui-shell-extra-deps.2f0832bf9cf1fc541ba6.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:28 UTC	348	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 7138b3abb8ba35a4b28962652c9a1e85 Content-Encoding: gzip Server: Google Frontend Date: Thu, 21 Nov 2024 01:39:27 GMT Expires: Fri, 21 Nov 2025 01:39:27 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 3781 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:28 UTC	1060	IN	Data Raw: 30 31 0d 0a 1f 0d 0a 30 66 66 66 0d 0a 8b 08 00 00 00 00 00 02 ff ec 7d 69 77 db 46 b2 f6 f7 fc 0a 18 49 7c 80 09 00 91 d4 4e 19 56 bc de 68 e2 6d bc 24 93 28 7a 65 88 6c 92 88 48 80 01 40 c9 b2 cc fb db ef 53 d5 dd 40 03 04 65 c5 93 39 ef 97 9c 93 d8 20 d0 4b 75 75 ed 55 dd b6 17 b9 b0 f2 22 8b 07 85 7d e0 e4 62 3a 0a 2e c5 d9 3c 1a 9c 3f 9a 2c 92 f3 8b e2 74 11 9f ce a2 38 09 6f f8 f6 e9 d3 f1 89 1b cc 17 f9 c4 39 3e de d9 df db de f6 ba 3b bb db bb de d6 ce e6 de f6 89 77 bd bf bd bf d3 e9 3b c2 2b bc c4 0d ef 5f 27 c1 d0 29 bc eb e7 7d 07 bf 06 4b f7 e0 22 ca ac 2c 4c 9c ad bd dd ce 96 eb e5 78 ec ee ec 6c 6d bb 5e cc 6f 77 76 77 dc 83 a9 28 ac d4 8b bc 69 28 c2 fb 82 fb 0c c3 d1 22 19 14 71 9a c8 c1 bd cc bd a6 b1 72 f4 8b b2 f1 62 26 92 22 0f a6 22 Data Ascii: 010fff}iwFI\|NVhm$(zelH@S@e9 KuuU"}b:.<?,t8o9>;w;+_')}K",Lxlm^owvw(i("qrb&""
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 1e 4f 0a f5 e3 22 16 97 0f d3 0f a1 dd b1 3a 56 6f 0b ff d9 d6 28 86 02 b3 93 34 11 b6 f5 61 36 4d f2 d0 9e 14 c5 bc bf b1 71 79 79 19 5c 6e 06 69 36 de e8 75 3a 9d 0d 0c 6d df ff ea de 1c 04 c2 bd fc 6c 31 15 a1 2d 20 14 d3 e1 d0 b6 06 d3 78 de 7c 37 0c ed e7 3d 6b 33 d8 7e d6 ed 04 7b 3b db 5d ab db 0b 36 f1 f7 b3 9e d5 eb 06 bd cd 4e ef 87 5e ef 27 34 f8 a1 f7 ab 06 e6 eb cd c7 bb bb 4f b7 ed 0d cc 46 b3 de ff ea ab af 20 a8 0e 0a 28 bc 51 b4 98 16 61 be f4 76 f6 f6 77 76 57 90 7a 90 38 fb 7b fb 5d 6c 96 b3 b3 b3 bb b5 57 59 03 bd de de be b2 06 b6 77 60 19 68 6b 80 6d 84 b4 b2 11 22 3c ee 6d 63 c1 2e 6c 03 20 7b bb b7 85 e1 86 78 dc 47 bf 3d d7 1b d0 db ad ce 76 cf f5 e6 78 dc ed 76 ba 78 5c d0 e3 fe fe 1e a6 98 50 83 9d 9d ce ae dc bd b1 37 f3 ce bc Data Ascii: O":Vo(4a6Mqyy\ni6u:ml1- x\|7=k3~{;]6N^'4OF (QavwvWz8{]lWYw`hkm"<mc.l {xG=vxvx\P7
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 49 46 29 4d 48 32 ea f6 e5 66 d5 da 83 97 59 b1 1b ed 97 2d 36 b8 0e 69 7d 66 75 44 38 ac 31 7c 36 fa 04 cc 7f 77 79 aa 40 2b a7 2a 37 f7 8e 23 23 d1 82 6d 62 08 fb b2 6d b9 0c 65 3f af 48 76 ec 94 24 10 65 c2 bc ff 06 ae c5 28 ce f2 82 f4 c2 12 da 9a 2c 56 f5 eb fd a7 4f b0 ef 86 cb d3 86 c4 85 fe d0 74 66 01 86 36 ce 7b 4f 28 dc 40 50 6d f9 1e d0 a1 7f 4d fa 96 2b 59 d7 dd d6 a2 d9 46 ef ba e0 bd 25 4a 59 fa 92 22 36 31 1a e7 0f 10 f3 bf 10 2a a1 a0 78 e5 8e 73 87 30 59 e0 ff e4 ee dd 0e 74 53 02 45 25 8e 93 13 f6 2c 10 f1 2f f8 61 b9 2a 93 34 30 ad 5b 2f 45 52 a5 a5 65 f7 32 4e a5 6c ca 86 8e 53 30 d9 b0 a7 26 05 25 06 28 38 5e b2 8b e9 3b 9c 43 e9 9c b3 d2 89 ea 1a 03 ba 60 9d 69 f1 18 6e 29 49 fd 59 dd 6c d2 66 85 8c 34 02 f7 0c 94 23 85 16 f9 91 a6 Data Ascii: IF)MH2fY-6i}fuD81\|6wy@+7##mbme?Hv$e(,VOtf6{O(@PmM+YF%JY"61xs0YtSE%,/a*40[/ERe2NlS0&%(8^;C`in)IYlf4#
2024-11-21 02:42:28 UTC	234	IN	Data Raw: 30 73 be c7 80 20 6b 81 20 d3 10 64 26 04 08 1a 91 9a 79 2d 90 ce cc 11 ac 91 23 79 d5 64 ab 89 50 11 40 29 fc 9c 41 51 50 49 17 c2 33 9c a7 04 61 2c a9 08 e2 b9 f7 b6 b2 9e 1f 7a 2f fe b6 9f ff 22 fb f9 8f f0 61 c3 82 8e cd 5a 3d f2 d5 50 58 07 a7 f0 55 96 8e 33 04 21 a9 50 ec a1 0e e1 eb 97 aa a0 06 d1 c2 75 9f 88 5d b9 3f 82 97 a4 91 42 f8 da e0 a4 75 86 77 b3 75 c7 5b 37 30 8b d9 ca 56 29 ab fe 74 ea f7 39 24 ea f3 f0 2d 59 29 23 9f b5 bc aa ce b1 02 fa a5 25 60 9c c3 3a 40 61 5c a3 11 67 74 df bf 63 13 9e 52 11 90 a4 2c d6 1b f0 2d bf 85 bd b4 3c 78 b1 46 84 55 ee fa 1f a6 d8 6a 0c 52 89 20 da 14 3d 56 bb 10 02 af 40 c0 4b 8c 92 14 fa 43 4a a1 8f 90 37 a8 8f ed aa 12 d7 5f bd 7f 79 0d 0a Data Ascii: 0s k d&y-#ydP@)AQPI3a,z/"aZ=PXU3!Pu]?Buwu[70V)t9$-Y)#%`:@a\gtcR,-<xFUjR =V@KCJ7_y
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 3f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 7a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 48 0d 0a 30 30 30 30 30 30 30 31 0d 0a de 0d 0a 30 30 30 30 30 30 30 31 0d 0a d1 0d 0a 30 30 30 30 30 30 30 31 0d 0a d5 0d 0a 30 30 30 30 30 30 30 31 0d 0a a5 0d 0a 30 30 30 30 30 30 30 31 0d 0a d6 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2f 0d 0a 30 30 30 30 30 30 30 31 0d 0a ba 0d 0a 30 30 30 30 30 30 30 31 0d 0a 64 0d 0a 30 30 30 31 38 61 35 0d 0a d4 43 75 2b 4a bc ae 8b ec 8a ad 3c d4 8c 1e c7 27 28 08 45 f5 4b 14 50 fe 47 2c 07 14 84 a5 5d 57 d9 75 56 5f 28 92 75 97 51 30 44 e1 d0 61 e1 4c dd fe ab 2c 45 4c 5a 20 05 05 13 0f f1 b4 a9 Data Ascii: 00000001?00000001{00000001?00000001z00000001?00000001H000000010000000100000001000000010000000100000001/0000000100000001d00018a5Cu+J<'(EKPG,]WuV_(uQ0DaL,ELZ
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 37 43 32 3e 9e c9 6e aa e4 ea 5f 54 5d fc 2a ca a2 59 0e f3 50 ad 55 8e 42 48 84 5b 86 53 29 38 b6 c7 41 3b fb e6 63 55 b5 1a ea 8f 94 48 31 8e 12 c9 73 4a d5 0b ef d8 a6 70 3b 95 14 20 89 11 a3 94 c5 dc 1b fb 24 c8 11 25 74 20 17 a1 bf e9 10 12 98 5b 9f 3f d2 fd d4 71 a4 66 5f f5 5a 4e f5 1c 05 20 54 e3 08 db 01 ea 18 05 55 24 0d 1f a0 0e b1 38 1a 56 46 1e 23 b2 4e 36 87 f6 5e b4 b9 d5 19 74 77 fc d1 d6 ee c8 df da 3d db f2 f7 77 87 91 bf bd 19 89 bd c1 60 6b 6b b0 d7 b1 65 69 09 aa bc 69 40 b5 de 6a 4e 49 c8 16 ea c1 a9 7c 0e 00 bc 42 cb b7 71 41 87 9e bc 22 bc 8e 73 5d b9 21 c7 a9 7e 7b 58 33 6d 80 2e 9a 7c 06 2b 3d c9 21 9d 64 05 da 85 2e 8a f3 34 32 e4 00 fa 97 87 0a 5c 39 51 5f 67 50 82 82 e6 85 29 35 9f a2 5e d1 79 4f 31 7d 1c 6a 7a ef d9 10 c7 90 Data Ascii: 7C2>n_T]*YPUBH[S)8A;cUH1sJp; $%t [?qf_ZN TU$8VF#N6^tw=w`kkeii@jNI\|BqA"s]!~{X3m.\|+=!d.42\9Q_gP)5^yO1}jz
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 98 bb 6c 13 ec 55 b6 98 4d 59 1d a4 6c 88 70 9c b1 d3 92 98 14 46 a5 19 56 ad da d2 98 47 50 68 c5 6a a6 fa 7d 9c 3e 27 6b e1 2a 16 a8 b9 41 98 b7 52 ce e4 ae a3 84 26 10 1c d3 ae a9 e9 5b 4f df 36 2b 84 33 14 0a 66 5a 4b bc 3a 4a cf 34 89 5c 89 f2 a1 95 1f 6f 96 42 ff 0c 59 fe 33 c9 72 9c fe c3 7d 20 f7 bf 8f 51 f8 0f 16 44 fa db d9 d8 18 c1 d9 c9 83 71 9a 42 6b 47 73 ec 00 4a 11 36 e8 4c e1 e1 28 9a c5 d3 2b ba 06 41 64 70 ad bf a3 52 8f dc 3d c0 c1 2b 1e c6 ba c7 f2 ce a2 a4 43 68 b3 9e b7 48 29 d0 13 b3 19 8a 2c 98 e7 50 51 c1 52 56 4b 44 5d 47 22 6d 7c 79 80 09 29 8f 7e 79 c8 49 2d 7a 95 6a 6f bf e6 1f b1 e6 1f 79 cd 52 b5 ac 95 4c ba e4 89 44 96 92 62 4a 5c 85 b6 04 80 ab 18 e9 26 19 48 4b 19 a7 58 15 58 66 b9 d2 4c e1 8b 4f cf e2 80 d1 82 13 a6 d5 Data Ascii: lUMYlpFVGPhj}>'k*AR&[O6+3fZK:J4\oBY3r} QDqBkGsJ6L(+AdpR=+ChH),PQRVKD]G"m\|y)~yI-zjoyRLDbJ\&HKXXfLO
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: c2 47 a0 28 14 22 8f cb f2 79 26 f3 aa d1 f2 b0 4f fb 64 55 e4 92 27 a9 d5 12 fc 97 af 25 95 e8 ad dd 0c aa ee eb d4 8b e7 d3 77 b0 18 a1 78 5a ae e1 94 0b c6 c9 20 9c 23 ab 2e f7 94 a3 c2 05 83 51 d0 97 19 af 95 86 fa 56 4e dd 76 cd 04 25 18 8c 1a f8 08 ae b7 83 2b dc a0 f9 90 d1 52 5a a9 14 22 0a fd 90 20 c3 9a 6e 52 ef 4b f1 b1 da 53 4f 43 02 a3 de b7 fc b2 da 1b da 8f 4a f0 20 88 57 14 5b 7d 0c b5 c6 72 04 ba 35 4f 03 df 2e bb cc 95 90 f8 da de df c5 fd 8b 38 6b 8d 2b 17 71 b4 86 6e 64 44 a9 3b 3d 6c 77 77 7b 5d 1c e4 e4 6b 17 8d 4b 21 49 d4 d1 55 d0 7b fb db 5b bb 7c 15 34 92 9d b8 c6 83 2e 82 c6 6d d2 a8 3e 46 09 2c 25 40 63 78 5e 0e 32 a2 ee 01 8e fd f3 dd d3 e4 93 7b 76 7f 92 c2 82 bf fe 2d b1 2c ba af 03 dc d1 e7 63 78 07 f4 86 cf e3 c9 fb 96 e0 Data Ascii: G("y&OdU'%wxZ #.QVNv%+RZ" nRKSOCJ W[}r5O.8k+qndD;=lww{]kK!IU{[\|4.m>F,%@cx^2{v-,cx
2024-11-21 02:42:28 UTC	870	IN	Data Raw: 10 3f f8 b7 20 94 12 92 3e 67 60 6e 28 79 f9 ca f9 2c 61 53 f2 d9 44 0a 21 a0 06 9b 62 2d ab 12 0a 6d 9f c1 c0 75 ce e3 a3 ee 5f c6 79 38 f7 8a c0 c0 de de ce 3e 9d 75 4f b5 ff 3f 0d 62 27 42 e8 cc 9b ae 06 02 ae b5 a4 88 13 18 99 a8 9c 61 15 e8 fb 66 04 5a c6 8f 65 75 aa 76 4e b7 f6 08 8d 37 b4 d3 74 bf 4d 62 f3 a6 86 75 42 86 20 44 04 c9 ea d2 1f 5f d3 b6 74 3a bd 9d 66 77 45 98 f2 2e 51 a6 e0 1a 37 22 ec 50 da 5f 0d 08 75 cf d6 4e 2c 40 14 fb ae e9 a7 c6 d5 5a b7 94 54 9f 9b af 0a 83 b4 ce 5c 7d 6e 9f 1e 6a 57 17 9b 72 35 d2 ca fc a5 ec 6b c0 5d 56 70 56 82 ae cd 4a 5d d7 ab 15 d8 75 73 49 20 db 82 40 37 f6 a0 6c 06 92 4c 53 dc 67 05 9f 8d 5c b7 5b f8 7c 0d 80 b9 80 4d f5 c6 3f 3e d4 ee ca d7 1a b5 e3 d9 6c f2 c5 50 fc 19 0c c8 09 d7 a3 f9 26 30 d9 94 Data Ascii: ? >g`n(y,aSD!b-mu_y8>uO?b'BafZeuvN7tMbuB D_t:fwE.Q7"P_uN,@ZT\}njWr5k]VpVJ]usI @7lLSg\[\|M?>lP&0
2024-11-21 02:42:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49876	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:27 UTC	913	OUT	GET /ui/domains/ghabovethec.info/referrer_files HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x319x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTgzNzkxMzUwNjItWkc5dWRDQmlaU0JsZG1scy0xNzMyMTU2OTQ1LjU4Mw== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:28 UTC	883	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: c42204c299d33661e730b45801e44cc4 Date: Thu, 21 Nov 2024 02:42:28 GMT Server: Google Frontend Content-Length: 179814 Expires: Thu, 21 Nov 2024 02:42:28 GMT Cache-Control: private Connection: close
2024-11-21 02:42:28 UTC	525	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 5b 7b 22 69 64 22 3a 20 22 33 64 32 63 33 32 31 65 37 32 39 61 63 63 32 31 30 31 32 63 35 34 31 31 34 64 33 35 61 65 35 37 31 30 32 66 38 66 35 31 35 39 66 35 63 63 61 34 36 61 64 65 32 35 36 36 38 66 39 66 34 62 38 65 22 2c 20 22 74 79 70 65 22 3a 20 22 66 69 6c 65 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 66 69 6c 65 73 2f 33 64 32 63 33 32 31 65 37 32 39 61 63 63 32 31 30 31 32 63 35 34 31 31 34 64 33 35 61 65 35 37 31 30 32 66 38 66 35 31 35 39 66 35 63 63 61 34 36 61 64 65 32 35 36 36 38 66 39 66 34 62 38 65 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 6c 61 73 74 5f 61 6e 61 6c 79 73 69 73 5f 64 Data Ascii: {"data": [{"id": "3d2c321e729acc21012c54114d35ae57102f8f5159f5cca46ade25668f9f4b8e", "type": "file", "links": {"self": "https://www.virustotal.com/ui/files/3d2c321e729acc21012c54114d35ae57102f8f5159f5cca46ade25668f9f4b8e"}, "attributes": {"last_analysis_d
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 5d 2c 20 22 66 69 72 73 74 5f 73 75 62 6d 69 73 73 69 6f 6e 5f 64 61 74 65 22 3a 20 31 37 33 30 37 33 32 38 35 39 2c 20 22 74 72 69 64 22 3a 20 5b 7b 22 66 69 6c 65 5f 74 79 70 65 22 3a 20 22 66 69 6c 65 20 73 65 65 6d 73 20 74 6f 20 62 65 20 70 6c 61 69 6e 20 74 65 78 74 2f 41 53 43 49 49 22 2c 20 22 70 72 6f 62 61 62 69 6c 69 74 79 22 3a 20 30 2e 30 7d 5d 2c 20 22 74 6f 74 61 6c 5f 76 6f 74 65 73 22 3a 20 7b 22 68 61 72 6d 6c 65 73 73 22 3a 20 30 2c 20 22 6d 61 6c 69 63 69 6f 75 73 22 3a 20 30 7d 2c 20 22 73 69 7a 65 22 3a 20 32 33 31 38 39 35 34 2c 20 22 73 68 61 31 22 3a 20 22 39 32 34 36 37 33 38 30 38 61 38 33 63 32 63 37 33 39 63 32 36 31 38 39 39 31 31 39 32 30 35 66 32 63 63 61 31 64 33 61 22 2c 20 22 6d 65 61 6e 69 6e 67 66 75 6c 5f 6e 61 6d 65 Data Ascii: ], "first_submission_date": 1730732859, "trid": [{"file_type": "file seems to be plain text/ASCII", "probability": 0.0}], "total_votes": {"harmless": 0, "malicious": 0}, "size": 2318954, "sha1": "924673808a83c2c739c261899119205f2cca1d3a", "meaningful_name
2024-11-21 02:42:28 UTC	482	IN	Data Raw: 74 65 20 61 20 6e 65 74 77 6f 72 6b 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 74 6f 20 61 20 6e 6f 6e 2d 70 72 69 76 61 74 65 20 49 50 20 61 64 64 72 65 73 73 65 73 2e 5c 6e 54 68 69 73 20 72 75 6c 65 20 61 69 6d 73 20 74 6f 20 64 65 74 65 63 74 20 74 72 61 66 66 69 63 20 73 69 6d 69 6c 61 72 20 74 6f 20 6f 6e 65 20 73 65 65 6e 20 65 78 70 6c 6f 69 74 65 64 20 69 6e 20 43 56 45 2d 32 30 32 31 2d 34 32 32 39 32 2e 5c 6e 54 68 69 73 20 72 75 6c 65 20 77 69 6c 6c 20 72 65 71 75 69 72 65 20 61 6e 20 69 6e 69 74 69 61 6c 20 62 61 73 65 6c 69 6e 65 20 61 6e 64 20 74 75 6e 69 6e 67 20 74 68 61 74 20 69 73 20 73 70 65 63 69 66 69 63 20 74 6f 20 79 6f 75 72 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 2e 5c 6e 22 2c 20 22 72 75 6c 65 5f 61 75 74 68 6f 72 22 3a 20 22 43 68 72 Data Ascii: te a network connection to a non-private IP addresses.\nThis rule aims to detect traffic similar to one seen exploited in CVE-2021-42292.\nThis rule will require an initial baseline and tuning that is specific to your organization.\n", "rule_author": "Chr
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 73 74 69 6e 61 74 69 6f 6e 49 70 22 3a 20 22 38 30 38 3a 38 30 38 3a 30 3a 30 3a 30 3a 30 3a 30 3a 30 22 2c 20 22 50 72 6f 74 6f 63 6f 6c 22 3a 20 22 75 64 70 22 2c 20 22 53 6f 75 72 63 65 49 70 22 3a 20 22 63 30 61 38 3a 32 31 61 3a 30 3a 30 3a 66 38 61 30 3a 32 32 64 62 3a 38 61 63 62 3a 66 66 66 66 22 2c 20 22 44 65 73 74 69 6e 61 74 69 6f 6e 49 73 49 70 76 36 22 3a 20 22 74 72 75 65 22 2c 20 22 45 76 65 6e 74 49 44 22 3a 20 22 33 22 2c 20 22 53 6f 75 72 63 65 50 6f 72 74 22 3a 20 22 36 31 35 31 36 22 2c 20 22 49 6d 61 67 65 22 3a 20 22 43 3a 5c 5c 50 52 4f 47 52 41 7e 31 5c 5c 4d 49 43 52 4f 53 7e 31 5c 5c 4f 66 66 69 63 65 31 36 5c 5c 4f 55 54 4c 4f 4f 4b 2e 45 58 45 22 2c 20 22 49 6e 69 74 69 61 74 65 64 22 3a 20 22 74 72 75 65 22 7d 7d 2c 20 7b 22 Data Ascii: stinationIp": "808:808:0:0:0:0:0:0", "Protocol": "udp", "SourceIp": "c0a8:21a:0:0:f8a0:22db:8acb:ffff", "DestinationIsIpv6": "true", "EventID": "3", "SourcePort": "61516", "Image": "C:\\PROGRA~1\\MICROS~1\\Office16\\OUTLOOK.EXE", "Initiated": "true"}}, {"
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 22 53 6f 75 72 63 65 50 6f 72 74 22 3a 20 22 35 31 38 32 31 22 2c 20 22 44 65 73 74 69 6e 61 74 69 6f 6e 49 70 22 3a 20 22 38 30 38 3a 34 30 34 3a 30 3a 30 3a 30 3a 30 3a 30 3a 30 22 7d 7d 5d 7d 5d 2c 20 22 73 68 61 32 35 36 22 3a 20 22 33 64 32 63 33 32 31 65 37 32 39 61 63 63 32 31 30 31 32 63 35 34 31 31 34 64 33 35 61 65 35 37 31 30 32 66 38 66 35 31 35 39 66 35 63 63 61 34 36 61 64 65 32 35 36 36 38 66 39 66 34 62 38 65 22 2c 20 22 63 72 6f 77 64 73 6f 75 72 63 65 64 5f 79 61 72 61 5f 72 65 73 75 6c 74 73 22 3a 20 5b 7b 22 72 75 6c 65 73 65 74 5f 69 64 22 3a 20 22 30 31 32 32 62 61 65 31 65 39 22 2c 20 22 72 75 6c 65 73 65 74 5f 6e 61 6d 65 22 3a 20 22 42 61 73 65 36 34 5f 45 6e 63 6f 64 65 64 5f 55 52 4c 22 2c 20 22 72 75 6c 65 5f 6e 61 6d 65 22 3a Data Ascii: "SourcePort": "51821", "DestinationIp": "808:404:0:0:0:0:0:0"}}]}], "sha256": "3d2c321e729acc21012c54114d35ae57102f8f5159f5cca46ade25668f9f4b8e", "crowdsourced_yara_results": [{"ruleset_id": "0122bae1e9", "ruleset_name": "Base64_Encoded_URL", "rule_name":
2024-11-21 02:42:28 UTC	1280	IN	Data Raw: 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 31 2e 34 2e 31 2e 30 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 34 31 31 30 34 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 6e 75 6c 6c 7d 2c 20 22 43 54 58 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 43 54 58 22 2c 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 32 30 32 34 2e 38 2e 32 39 2e 31 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 34 31 31 30 34 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 6e 75 6c 6c 7d 2c 20 Data Ascii: ine_version": "1.4.1.0", "engine_update": "20241104", "category": "undetected", "result": null}, "CTX": {"method": "blacklist", "engine_name": "CTX", "engine_version": "2024.8.29.1", "engine_update": "20241104", "category": "undetected", "result": null},
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 4b 37 47 57 22 2c 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 31 32 2e 31 39 37 2e 35 33 37 37 33 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 34 31 31 30 34 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 6e 75 6c 6c 7d 2c 20 22 4b 37 41 6e 74 69 56 69 72 75 73 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 4b 37 41 6e 74 69 56 69 72 75 73 22 2c 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 31 32 2e 31 39 37 2e 35 33 37 37 35 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 Data Ascii: cklist", "engine_name": "K7GW", "engine_version": "12.197.53773", "engine_update": "20241104", "category": "undetected", "result": null}, "K7AntiVirus": {"method": "blacklist", "engine_name": "K7AntiVirus", "engine_version": "12.197.53775", "engine_update
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 65 72 73 69 6f 6e 22 3a 20 22 31 30 2e 30 2e 30 2e 31 30 34 30 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 34 31 31 30 34 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 6e 75 6c 6c 7d 2c 20 22 41 76 61 73 74 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 41 76 61 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 32 33 2e 39 2e 38 34 39 34 2e 30 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 34 31 31 30 34 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 6e 75 6c 6c Data Ascii: ersion": "10.0.0.1040", "engine_update": "20241104", "category": "undetected", "result": null}, "Avast": {"method": "blacklist", "engine_name": "Avast", "engine_version": "23.9.8494.0", "engine_update": "20241104", "category": "undetected", "result": null
2024-11-21 02:42:28 UTC	1280	IN	Data Raw: 61 74 65 22 3a 20 22 32 30 32 34 31 31 30 34 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 6e 75 6c 6c 7d 2c 20 22 46 2d 53 65 63 75 72 65 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 46 2d 53 65 63 75 72 65 22 2c 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 31 38 2e 31 30 2e 31 35 34 37 2e 33 30 37 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 34 31 31 30 34 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 6e 75 6c 6c 7d 2c 20 22 44 72 57 65 62 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c Data Ascii: ate": "20241104", "category": "undetected", "result": null}, "F-Secure": {"method": "blacklist", "engine_name": "F-Secure", "engine_version": "18.10.1547.307", "engine_update": "20241104", "category": "undetected", "result": null}, "DrWeb": {"method": "bl
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 3a 20 22 33 35 2e 34 37 2e 30 2e 30 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 34 31 31 30 34 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 6e 75 6c 6c 7d 2c 20 22 4a 69 61 6e 67 6d 69 6e 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 4a 69 61 6e 67 6d 69 6e 22 2c 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 31 36 2e 30 2e 31 30 30 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 34 31 31 30 33 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 6e 75 6c 6c 7d 2c 20 22 56 61 Data Ascii: : "35.47.0.0", "engine_update": "20241104", "category": "undetected", "result": null}, "Jiangmin": {"method": "blacklist", "engine_name": "Jiangmin", "engine_version": "16.0.100", "engine_update": "20241103", "category": "undetected", "result": null}, "Va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49878	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:27 UTC	510	OUT	GET /gui/6209.c71bf99427508f94bc7c.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:28 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 5c613f5cbd279e1e3e18cbd6735f0695 Content-Encoding: gzip Server: Google Frontend Date: Wed, 20 Nov 2024 12:53:09 GMT Expires: Thu, 20 Nov 2025 12:53:09 GMT Cache-Control: public, max-age=31536000 ETag: "tA1SvQ" Content-Type: text/javascript Age: 49759 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:28 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a bd 0d 0a 30 30 30 30 30 30 30 31 0d 0a f9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 63 0d 0a 30 30 30 30 30 30 30 31 0d 0a 13 0d 0a 30 30 30 30 30 30 30 31 0d 0a c7 0d 0a 30 30 30 30 30 30 30 31 0d 0a 96 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2f 0d 0a 30 30 30 30 30 31 0d 0a fe 0d 0a 30 66 65 64 0d 0a fb fb 2b 1a Data Ascii: 0000000100000001000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001c00000001000000010000000100000001/0000010fed+
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: c4 29 40 cb c3 11 40 22 bf e2 38 99 be 0f 32 ec 6e 73 18 cd 93 2c 1a 27 7f c4 bc fc 5a 30 8a b2 a8 39 48 9b d9 ec f4 54 81 5a 0b fe 32 1c 27 c3 f7 fd 1a 01 a2 16 44 8b 24 6a 82 50 61 01 f1 c8 14 ca 16 0c 96 59 36 9b 3a 58 46 04 c3 71 f2 10 c0 c3 f4 c7 2d de fb 17 d1 bc 51 bf 92 bd eb 31 84 d2 e5 20 15 70 00 08 d9 0a 95 63 c0 94 3f 9d ce 5e cd 00 2d fd cc 20 09 2b da 84 c0 40 1e 23 6a fd da 20 7c 9d b6 8e 1b f5 42 c5 f0 cd 1b 77 1c 88 2a 7a 20 3d 05 48 4f 01 52 5a 22 66 cb 2d 05 a3 fd 7d ab 37 1a 6f c3 37 de e9 09 0b dd 2c d1 cd b2 b2 9b 97 e6 f0 51 1f 6f 31 db 55 55 f7 8c 48 4c c2 c3 85 a2 93 37 c9 73 f4 7e ce 07 29 05 a6 9b 1d a5 93 94 8e 67 59 2d a0 ff f7 6b 38 b9 16 d1 08 ed 6b c1 d1 18 74 14 27 44 f6 ef 28 9d 44 20 9e f2 1b 36 68 38 1b d3 5e 12 32 36 Data Ascii: )@@"82ns,'Z09HTZ2'D$jPaY6:XFq-Q1 pc?^- +@#j \|Bw*z =HORZ"f-}7o7,Qo1UUHL7s~)gY-k8kt'D(D 6h8^26
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: a4 a0 80 a0 8e c1 ef 8d 46 af 06 ed 26 69 da 88 36 3c 1b e9 1a 16 e6 80 cb 37 f7 ab 48 ed 43 3d 9d 4f 70 38 a5 46 ae 44 2a 41 0b 9a e9 68 a9 ab 58 2c 05 3b 74 78 ca dc ce ac c4 ed 7c 3f 83 6e 32 9a 86 0b d1 34 f7 ee b5 89 67 58 fa 9c 8f 3d 3e 8e 3d 58 f6 4d 7f 45 f6 40 90 7b 34 23 6b 41 73 32 1b 24 d0 c3 0c a3 c5 a8 46 bd 82 45 c0 b5 be 7b 7b 16 41 95 fb d0 4b 43 7b bf bf 75 00 95 3e 78 81 9d ad ee 16 c9 e8 5c ba d5 dd 83 a9 00 7c 43 f7 60 6b 1f a5 64 13 d8 e9 ec ed 6e 0b b7 30 0a 99 5f 70 bc c2 d9 1d af f0 85 78 85 49 81 57 58 78 7a f7 9b 32 0d a4 9c 13 a2 97 82 6d 10 7c 9f ce 70 c8 c1 d1 bb 92 34 c6 6d 0b 85 15 9d 4f 68 69 fb 57 30 a1 80 bd 88 c6 bd a8 15 7f 80 f2 76 c2 17 da 2b 28 80 a7 d0 0e f3 31 3e 4b 4e cf 36 7c 9e c4 a3 64 39 d9 50 61 3c bb d8 f0 Data Ascii: F&i6<7HC=Op8FD*AhX,;tx\|?n24gX=>=XME@{4#kAs2$FE{{AKC{u>x\\|C`kdn0_pxIWXxz2m\|p4mOhiW0v+(1>KN6\|d9Pa<
2024-11-21 02:42:28 UTC	455	IN	Data Raw: 54 ba dd de 41 0f a7 f8 71 77 6f bf 0d c5 d0 92 d4 41 db dd ad 2e 86 a3 aa 3b 5d d6 16 ed ed 1c 6c ed 41 2f 74 8e 9a 7b 9d dd ad 5d 62 93 ba 7b 9d 83 3d 61 76 3c e7 cf 10 3e 9f e1 a3 f0 71 f8 2c 7c 19 be 0b 5f 85 bf 84 bf 86 cf c3 7f 38 16 e8 f5 1d 03 f4 05 18 20 ba 84 9e 16 94 47 e7 ad f7 37 d5 19 59 bd a4 d5 18 91 7e 95 cc cc fd 9a 28 20 6b b7 50 b7 2c 89 8b 11 c3 f5 88 5c 54 d9 be a5 96 6c 2a c0 05 03 c1 18 f6 4f d6 e1 d6 e0 04 c1 a4 eb 9d fc fe 58 e8 8f 78 f4 49 91 b9 75 ab ac 59 e2 17 f5 8f 3c 4f 44 6a 52 e7 20 e6 49 94 f4 41 5d d1 8c 34 c6 1a 8d 0b 68 df 83 7f c0 3e 9b 9c 5c 1a 5f d5 e6 20 ce 2e e2 78 1a b0 32 c7 c8 9b 7c 13 55 58 6a b8 67 96 f2 46 4d ea 32 6f e3 b2 ca 71 5e a9 30 17 a2 77 27 5f 3c 21 64 86 b2 db cd f0 64 50 af 99 ea f6 4c 6d e9 eb Data Ascii: TAqwoA.;]lA/t{]b{=av<>q,\|_8 G7Y~( kP,\Tl*OXxIuY<ODjR IA]4h>\_ .x2\|UXjgFM2oq^0w'_<!ddPLm
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 3e 0d 0a 30 30 30 30 30 30 30 31 0d 0a f0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5b 0d 0a 30 30 30 30 30 30 30 31 0d 0a c6 0d 0a 30 30 30 30 30 30 30 31 0d 0a cd 0d 0a 30 30 30 30 30 30 30 31 0d 0a 31 0d 0a 30 30 30 30 30 30 30 31 0d 0a 43 0d 0a 30 30 30 30 30 30 30 31 0d 0a 3f 0d 0a 30 30 30 30 30 30 30 31 0d 0a be 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 60 0d 0a 30 30 30 30 30 30 30 31 0d 0a 66 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1c 0d 0a 30 30 30 30 30 30 30 31 0d 0a de 0d 0a 30 30 30 30 30 30 30 31 0d 0a b2 0d 0a 30 30 30 30 30 30 30 31 0d 0a d6 0d 0a 30 30 30 30 30 30 30 31 0d 0a 10 0d 0a 30 30 30 30 30 30 30 31 0d 0a 37 0d 0a 30 30 30 30 30 30 30 31 0d 0a ee 0d 0a 30 30 30 30 30 30 30 31 Data Ascii: 00000001>0000000100000001[000000010000000100000001100000001C00000001?000000010000000100000001`00000001f00000001000000010000000100000001000000010000000170000000100000001
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 88 8d 46 64 de e4 01 04 d2 18 07 7e 18 e3 2b e1 24 4b d1 b5 a0 08 3d dd 30 0f 62 ec bd 72 0d 3e 3c fa f5 99 01 8a b9 cf 6e a1 88 e3 a3 ca 8a 38 8f ce fc 02 3a f3 0b d3 19 8b 51 94 0f 61 10 37 f5 28 28 ca 48 e1 f7 12 b6 6d 60 a9 ba 4a 38 8a 21 f0 9a 5b fd 60 bd ad 11 7b 79 0c 6a 4a 39 04 04 49 e0 d2 f3 f8 6c 96 0c 8d 0b 3b 82 7f f9 d7 17 40 46 5b 87 23 8e 89 aa da 12 30 df 50 e2 3c 89 a7 b3 49 32 65 1b 96 91 2b 7e 40 38 32 bc d4 0c 3e d8 39 e8 cc 45 bd 40 e9 23 88 ba cf a6 c7 76 8e dc 8e ac b2 c2 b4 62 a2 fa 09 b3 0d e1 8c 74 da fa 7b ec 4d 0e dc 94 b0 ff 29 7d 34 ec bd 27 ca 85 75 0a ee 96 f8 aa 6b ac 64 f0 25 16 9f 64 f8 91 c4 ff 84 45 1a 9e 74 b0 95 0d 96 03 b8 6c a7 70 fa 0d 81 44 20 5f f1 88 7e 86 d2 8d 02 a9 ae 92 91 d8 cf 54 30 a1 bf 48 bb de 33 73 Data Ascii: Fd~+$K=0br><n8:Qa7((Hm`J8![`{yjJ9Il;@F[#0P<I2e+~@82>9E@#vbt{M)}4'ukd%dEtlpD _~T0H3s
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 82 9f 92 59 90 05 b0 e0 dc 64 03 0c 72 6e ec cc f5 dc 2e 69 41 81 81 73 de 65 be c0 6e 4b 91 f6 11 2e 04 ea 56 43 7e 51 7d 0d 2b 9a 2f 07 c8 02 76 16 8f 9e 4d 5f cc a6 09 78 6f db 86 f5 36 4f a5 a1 a9 ce 65 2f 29 b5 60 3c 7a a2 c1 cd e6 9b 73 9f 71 5d 90 fa 07 e1 70 26 58 92 22 55 d0 4c b0 fe d7 71 34 8c cf e0 cf 09 57 08 53 21 49 9f c1 b1 82 bd e3 5c d1 63 8a fd d5 b2 5b f8 ca 0d 0b be 72 ea 1a 57 02 05 79 c9 15 fd 8e 54 60 30 ae bf a5 36 aa a0 2f 95 3f 84 3b a7 e7 82 47 93 76 dd 8b b0 fb c3 38 3a 15 8f 00 dc 94 4f 59 81 43 45 3f 2c 66 93 67 aa bb d0 d9 e8 6f b8 bf e0 f9 c1 6e 7d e5 dd aa c1 2f 48 3f c2 3c cd 1a 13 af 84 34 6f 85 dd f2 1a 94 66 0f de d8 81 c2 6e 84 cc a6 3c b4 4a 4e 3a 2c b5 d4 00 c3 52 bf 20 d9 22 3c 55 a1 8f b7 3c 87 41 de 2c 1d 4a e4 Data Ascii: Ydrn.iAsenK.VC~Q}+/vM_xo6Oe/)`<zsq]p&X"ULq4WS!I\c[rWyT`06/?;Gv8:OYCE?,fgon}/H?<4ofn<JN:,R "<U<A,J
2024-11-21 02:42:28 UTC	121	IN	Data Raw: 98 1d e1 79 01 80 98 e5 6a 72 e3 8f e1 52 c4 25 d0 03 d2 07 fc a5 f1 36 fe fc 6d 16 46 e3 69 2f 51 5c 36 c1 11 de 96 a1 04 4a 35 7a 0d 07 c9 52 ec a6 59 4c 96 65 6b cf 0c 29 e4 5f 34 23 89 43 71 8b 7c 31 a9 10 07 93 26 a5 bf f2 5f 00 25 d2 be 91 2e 40 de 11 a9 5d 9c 61 90 26 80 3f 8c 9b c8 94 c0 bb c4 09 bf 5a f0 94 5c 8e 47 c7 d0 84 3d 45 00 fe 3c 3e 26 0d 0a Data Ascii: yjrR%6mFi/Q\6J5zRYLek)_4#Cq\|1&_%.@]a&?Z\G=E<>&
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a d7 0d 0a 30 30 30 30 30 30 30 31 0d 0a 2c 0d 0a 30 30 30 30 30 30 30 31 0d 0a f8 0d 0a 30 30 30 30 30 30 30 31 0d 0a f0 0d 0a 30 30 30 30 30 30 30 31 0d 0a 71 0d 0a 31 0d 0a ae 0d 0a 30 66 66 61 0d 0a 12 ee 9c 2c 6c 56 1a 36 fa 2d 8f ee c9 c7 2a 9a e0 52 10 94 33 5c 3b ce 21 97 82 40 ce 17 11 58 7b a3 87 92 7f e0 c6 5d a0 ad 25 db d7 77 62 99 e2 dc 34 68 4b 3c ae 78 dd 0c 84 7d f5 f2 56 fa 0c 72 8e cc 30 f7 99 1f c2 03 e1 a7 4e 33 07 f4 4f ee a4 92 3c b9 de 4c 2a 07 ca 0d c2 99 cf 6d 1a 6e 3d 9c c9 64 8e 04 9b b2 73 fc e6 09 3d 3c 62 b2 38 ec 6d ef b7 73 b9 36 5b 78 6c 8a 4c b6 fc f0 16 de a1 9a 3e 57 3f 79 b6 86 c3 07 43 95 2a c4 b2 49 96 06 71 ed 7b 3d 67 b7 3e 52 a4 1f ff 73 89 c8 24 42 92 95 bc ef e5 71 7b 49 ae 7f 71 5e Data Ascii: 0000000100000001,000000010000000100000001q10ffa,lV6-R3\;!@X{]%wb4hK<x}Vr0N3O<Lmn=ds=<b8ms6[xlL>W?yC*Iq{=g>Rs$Bq{Iq^
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 79 68 54 12 94 a0 ba ef e8 79 28 57 46 ba 3a 24 84 82 d3 df 2f d3 f1 a5 65 f1 c0 56 cf 67 70 26 b2 05 70 27 4b b3 63 52 30 82 37 4d 9f 16 3e ff 05 59 ac b2 cb 26 09 9c c9 d0 e8 c4 89 2b c9 0d 56 64 53 fc 6b dc ca ab 9f 7c 81 6f 0c 1a 1d b4 c4 a4 70 2c 5c ba 78 c3 e1 1d 01 05 0d dc 04 21 b1 c2 89 8a 68 12 52 06 6d 2b f5 4a 91 ef 15 29 96 7f 8d 11 9c 75 f9 68 3a 62 9b cc 02 5e d2 0e 71 5b 09 9e ea 61 87 c4 aa 96 3f e4 c0 56 d9 8e 62 5d b9 bf 82 d8 8e 58 0c 15 57 1e 23 4d 62 fa 98 1f fb 35 38 29 22 2e 4b 2c 5e 32 f3 32 a6 4a 3e c6 02 a6 52 18 09 ac 11 f2 7a 30 45 ca 4d f0 1a 56 76 89 11 cc 73 c4 76 db f1 34 ed 08 6f 8e 64 1b bf 45 93 79 84 87 34 cc be 07 90 29 35 68 3b a5 17 78 6d 67 22 d4 22 55 03 64 da dc 07 e4 88 c5 55 32 92 07 72 2b be 9b 67 f9 f2 55 6c Data Ascii: yhTy(WF:$/eVgp&p'KcR07M>Y&+VdSk\|op,\x!hRm+J)uh:b^q[a?Vb]XW#Mb58)".K,^22J>Rz0EMVvsv4odEy4)5h;xmg""UdU2r+gUl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49877	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:27 UTC	511	OUT	GET /gui/25076.f1d5707846ec1ba9ed7f.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:28 UTC	320	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 803c84bcc465f1e66b97bcaaec4457f7 Server: Google Frontend Date: Tue, 19 Nov 2024 21:06:46 GMT Expires: Wed, 19 Nov 2025 21:06:46 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Content-Length: 1641 Age: 106542 Connection: close
2024-11-21 02:42:28 UTC	1088	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 35 30 37 36 5d 2c 7b 32 36 39 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 72 28 74 29 3b 6e 28 39 38 39 31 29 3b 76 61 72 20 72 3d 6e 28 34 38 37 30 34 29 2c 6f 3d 6e 28 31 36 36 34 35 29 2c 69 3d 6e 28 31 35 33 32 33 29 2c 73 3d 6e 28 35 36 37 31 37 29 2c 61 3d 6e 28 39 35 36 38 38 29 2c 63 3d 6e 28 34 34 30 35 32 29 3b 6c 65 74 20 6c 2c 75 2c 66 3d 65 3d 3e 65 3b 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 2c 73 29 7b 74 72 79 7b 76 61 72 20 61 3d 65 5b 69 5d 28 73 29 2c 63 3d 61 2e 76 61 Data Ascii: "use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[25076],{2695:(e,t,n)=>{n.r(t);n(9891);var r=n(48704),o=n(16645),i=n(15323),s=n(56717),a=n(95688),c=n(44052);let l,u,f=e=>e;function d(e,t,n,r,o,i,s){try{var a=e[i](s),c=a.va
2024-11-21 02:42:28 UTC	553	IN	Data Raw: 28 30 2c 72 2e 63 73 73 29 28 6c 7c 7c 28 6c 3d 66 60 3a 68 6f 73 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 30 32 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 62 67 29 3b 70 61 64 64 69 6e 67 3a 31 2e 32 38 72 65 6d 7d 73 76 67 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 31 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 7b 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 7d 7d 60 29 29 7d 72 65 6e 64 65 72 28 29 7b 72 65 74 75 72 6e 28 30 Data Ascii: (0,r.css)(l\|\|(l=f`:host{display:block;position:absolute;top:0;left:0;right:0;bottom:0;z-index:102;background-color:var(--bs-body-bg);padding:1.28rem}svg{animation:spin 1s linear infinite}@keyframes spin{100%{transform:rotate(360deg)}}`))}render(){return(0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49883	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:28 UTC	512	OUT	GET /ui/domains/ghabovethec.info/parent HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:28 UTC	225	IN	HTTP/1.1 429 Too Many Requests Content-Type: application/json X-Cloud-Trace-Context: 5080f5d8f023157bb66ae43c9a5d702d Date: Thu, 21 Nov 2024 02:42:28 GMT Server: Google Frontend Content-Length: 153 Connection: close
2024-11-21 02:42:28 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49882	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:28 UTC	864	OUT	GET /gui/static/gcs.html?q=%22ghabovethec.info%22 HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:28 UTC	305	IN	HTTP/1.1 200 OK Date: Thu, 21 Nov 2024 02:42:28 GMT Expires: Thu, 21 Nov 2024 02:43:28 GMT Cache-Control: public, max-age=60 ETag: "V0s7xg" X-Cloud-Trace-Context: 060d0281bb2912e7236eb701687fcc66;o=1 Content-Type: text/html Server: Google Frontend Transfer-Encoding: chunked Connection: close
2024-11-21 02:42:28 UTC	1103	IN	Data Raw: 63 39 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 65 73 74 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 20 20 3c 73 63 72 69 70 74 0a 20 20 20 20 20 20 61 73 79 6e 63 0a 20 20 20 20 20 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 73 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 65 2e 6a 73 3f 63 78 3d 30 30 33 34 31 34 34 36 36 30 30 34 32 33 37 39 36 36 32 32 31 3a 64 67 67 37 69 66 74 76 72 79 6f 22 0a 20 20 20 20 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 6d 61 Data Ascii: c90<!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8" /> <title>Test</title> <script async src="https://cse.google.com/cse.js?cx=003414466004237966221:dgg7iftvryo" ></script> <style> body { ma
2024-11-21 02:42:28 UTC	1408	IN	Data Raw: 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 62 67 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 2e 67 73 63 2d 73 65 6c 65 63 74 65 64 2d 6f 70 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 2e 67 73 63 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 7b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 62 67 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 63 6f 6c 6f 72 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 20 Data Ascii: portant; background-color: var(--bs-body-bg) !important; } .gsc-selected-option-container.gsc-inline-block { background-color: var(--bs-body-bg) !important; color: var(--bs-body-color) !important; border: 0;
2024-11-21 02:42:28 UTC	712	IN	Data Raw: 61 74 54 79 70 65 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 63 6f 6c 6f 72 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 2e 67 73 2d 77 65 62 52 65 73 75 6c 74 2e 67 73 2d 72 65 73 75 6c 74 20 61 2e 67 73 2d 74 69 74 6c 65 3a 6c 69 6e 6b 2c 0a 20 20 20 20 20 20 2e 67 73 2d 77 65 62 52 65 73 75 6c 74 2e 67 73 2d 72 65 73 75 6c 74 20 61 2e 67 73 2d 74 69 74 6c 65 3a 6c 69 6e 6b 20 62 2c 0a 20 20 20 20 20 20 2e 67 73 2d 69 6d 61 67 65 52 65 73 75 6c 74 20 61 2e 67 73 2d 74 69 74 6c 65 3a 6c 69 6e 6b 2c 0a 20 20 20 20 20 20 2e 67 73 2d 69 6d 61 67 65 52 65 73 75 6c 74 20 61 2e 67 73 2d 74 69 74 6c 65 3a 6c 69 6e 6b 20 62 20 7b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 Data Ascii: atType { color: var(--bs-body-color) !important; } .gs-webResult.gs-result a.gs-title:link, .gs-webResult.gs-result a.gs-title:link b, .gs-imageResult a.gs-title:link, .gs-imageResult a.gs-title:link b { color
2024-11-21 02:42:28 UTC	784	IN	Data Raw: 33 30 39 0d 0a 67 65 20 7b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 62 67 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 63 6f 6c 6f 72 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 70 61 72 65 6e 74 57 69 6e 64 6f 77 20 3d 20 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 3b 0a Data Ascii: 309ge { border-color: transparent !important; background-color: var(--bs-body-bg) !important; color: var(--bs-body-color) !important; } </style> </head> <body> <script> const parentWindow = window.parent;
2024-11-21 02:42:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49885	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:29 UTC	505	OUT	GET /ui/domains/ghabovethec.info HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:29 UTC	225	IN	HTTP/1.1 429 Too Many Requests Content-Type: application/json X-Cloud-Trace-Context: 8c378ed8b66b7d7538f60a1177bd7cb5 Date: Thu, 21 Nov 2024 02:42:29 GMT Server: Google Frontend Content-Length: 153 Connection: close
2024-11-21 02:42:29 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49884	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:29 UTC	918	OUT	GET /ui/domains/ghabovethec.info/communicating_files HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x319x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTg2MzE4MDgxNzMtWkc5dWRDQmlaU0JsZG1scy0xNzMyMTU2OTQ1LjU4Mw== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:30 UTC	883	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: 6ad97ea85e53516448e0c4c33b200046 Date: Thu, 21 Nov 2024 02:42:30 GMT Server: Google Frontend Content-Length: 288717 Expires: Thu, 21 Nov 2024 02:42:30 GMT Cache-Control: private Connection: close
2024-11-21 02:42:30 UTC	525	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 5b 7b 22 69 64 22 3a 20 22 30 30 30 64 64 35 30 62 32 66 33 64 66 38 34 61 61 34 39 39 65 33 38 65 38 61 38 38 39 39 34 62 39 32 63 31 34 35 35 36 63 35 31 37 63 64 32 36 32 33 37 65 61 63 65 64 65 31 31 33 30 63 33 62 22 2c 20 22 74 79 70 65 22 3a 20 22 66 69 6c 65 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 66 69 6c 65 73 2f 30 30 30 64 64 35 30 62 32 66 33 64 66 38 34 61 61 34 39 39 65 33 38 65 38 61 38 38 39 39 34 62 39 32 63 31 34 35 35 36 63 35 31 37 63 64 32 36 32 33 37 65 61 63 65 64 65 31 31 33 30 63 33 62 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 6d 64 35 22 3a 20 22 33 34 32 36 64 62 62 32 Data Ascii: {"data": [{"id": "000dd50b2f3df84aa499e38e8a88994b92c14556c517cd26237eacede1130c3b", "type": "file", "links": {"self": "https://www.virustotal.com/ui/files/000dd50b2f3df84aa499e38e8a88994b92c14556c517cd26237eacede1130c3b"}, "attributes": {"md5": "3426dbb2
2024-11-21 02:42:30 UTC	1408	IN	Data Raw: 6f 6e 22 3a 20 22 49 64 65 6e 74 69 66 69 65 73 20 52 44 50 20 57 72 61 70 70 65 72 2c 20 73 6f 6d 65 74 69 6d 65 73 20 75 73 65 64 20 62 79 20 61 74 74 61 63 6b 65 72 73 20 74 6f 20 6d 61 69 6e 74 61 69 6e 20 70 65 72 73 69 73 74 65 6e 63 65 2e 22 2c 20 22 61 75 74 68 6f 72 22 3a 20 22 40 62 61 72 74 62 6c 61 7a 65 22 2c 20 22 72 75 6c 65 73 65 74 5f 6e 61 6d 65 22 3a 20 22 52 44 50 57 72 61 70 22 2c 20 22 72 75 6c 65 5f 6e 61 6d 65 22 3a 20 22 52 44 50 57 72 61 70 22 2c 20 22 72 75 6c 65 73 65 74 5f 69 64 22 3a 20 22 30 30 32 32 32 63 62 32 61 32 22 2c 20 22 6d 61 74 63 68 5f 69 6e 5f 73 75 62 66 69 6c 65 22 3a 20 74 72 75 65 2c 20 22 73 6f 75 72 63 65 22 3a 20 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 62 61 72 74 62 6c 61 7a 65 2f 59 Data Ascii: on": "Identifies RDP Wrapper, sometimes used by attackers to maintain persistence.", "author": "@bartblaze", "ruleset_name": "RDPWrap", "rule_name": "RDPWrap", "ruleset_id": "00222cb2a2", "match_in_subfile": true, "source": "https://github.com/bartblaze/Y
2024-11-21 02:42:30 UTC	484	IN	Data Raw: 65 2f 59 61 72 61 2d 72 75 6c 65 73 22 7d 2c 20 7b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 20 22 48 65 61 76 65 6e 27 73 20 47 61 74 65 3a 20 53 77 69 74 63 68 20 66 72 6f 6d 20 33 32 2d 62 69 74 20 74 6f 20 36 34 2d 6d 6f 64 65 22 2c 20 22 61 75 74 68 6f 72 22 3a 20 22 6b 65 76 6f 72 65 69 6c 6c 79 22 2c 20 22 72 75 6c 65 73 65 74 5f 6e 61 6d 65 22 3a 20 22 48 65 61 76 65 6e 73 47 61 74 65 22 2c 20 22 72 75 6c 65 5f 6e 61 6d 65 22 3a 20 22 48 65 61 76 65 6e 73 47 61 74 65 22 2c 20 22 72 75 6c 65 73 65 74 5f 69 64 22 3a 20 22 30 30 62 39 39 61 38 63 32 32 22 2c 20 22 6d 61 74 63 68 5f 69 6e 5f 73 75 62 66 69 6c 65 22 3a 20 74 72 75 65 2c 20 22 73 6f 75 72 63 65 22 3a 20 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6b 65 76 6f 72 65 69 6c Data Ascii: e/Yara-rules"}, {"description": "Heaven's Gate: Switch from 32-bit to 64-mode", "author": "kevoreilly", "ruleset_name": "HeavensGate", "rule_name": "HeavensGate", "ruleset_id": "00b99a8c22", "match_in_subfile": true, "source": "https://github.com/kevoreil
2024-11-21 02:42:30 UTC	1408	IN	Data Raw: 63 65 22 3a 20 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 4e 65 6f 32 33 78 30 2f 73 69 67 6e 61 74 75 72 65 2d 62 61 73 65 22 7d 2c 20 7b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 20 22 44 65 74 65 63 74 73 20 7a 67 52 41 54 22 2c 20 22 61 75 74 68 6f 72 22 3a 20 22 64 69 74 65 6b 53 48 65 6e 22 2c 20 22 72 75 6c 65 73 65 74 5f 6e 61 6d 65 22 3a 20 22 6d 61 6c 77 61 72 65 22 2c 20 22 72 75 6c 65 5f 6e 61 6d 65 22 3a 20 22 4d 41 4c 57 41 52 45 5f 57 69 6e 5f 7a 67 52 41 54 22 2c 20 22 72 75 6c 65 73 65 74 5f 69 64 22 3a 20 22 30 30 63 63 38 30 33 62 64 63 22 2c 20 22 6d 61 74 63 68 5f 69 6e 5f 73 75 62 66 69 6c 65 22 3a 20 74 72 75 65 2c 20 22 73 6f 75 72 63 65 22 3a 20 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 64 69 74 Data Ascii: ce": "https://github.com/Neo23x0/signature-base"}, {"description": "Detects zgRAT", "author": "ditekSHen", "ruleset_name": "malware", "rule_name": "MALWARE_Win_zgRAT", "ruleset_id": "00cc803bdc", "match_in_subfile": true, "source": "https://github.com/dit
2024-11-21 02:42:30 UTC	1408	IN	Data Raw: 72 75 6c 65 5f 6e 61 6d 65 22 3a 20 22 57 69 6e 64 6f 77 73 5f 54 72 6f 6a 61 6e 5f 41 76 65 4d 61 72 69 61 5f 33 31 64 32 62 63 65 39 22 2c 20 22 72 75 6c 65 73 65 74 5f 6e 61 6d 65 22 3a 20 22 57 69 6e 64 6f 77 73 5f 54 72 6f 6a 61 6e 5f 41 76 65 4d 61 72 69 61 22 2c 20 22 6d 61 74 63 68 5f 69 6e 5f 73 75 62 66 69 6c 65 22 3a 20 74 72 75 65 2c 20 22 61 75 74 68 6f 72 22 3a 20 22 45 6c 61 73 74 69 63 20 53 65 63 75 72 69 74 79 22 2c 20 22 73 6f 75 72 63 65 22 3a 20 22 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 65 6c 61 73 74 69 63 2f 70 72 6f 74 65 63 74 69 6f 6e 73 2d 61 72 74 69 66 61 63 74 73 22 7d 5d 2c 20 22 73 69 67 6e 61 74 75 72 65 5f 69 6e 66 6f 22 3a 20 7b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 20 22 70 65 72 66 6f 72 6d 61 6e Data Ascii: rule_name": "Windows_Trojan_AveMaria_31d2bce9", "ruleset_name": "Windows_Trojan_AveMaria", "match_in_subfile": true, "author": "Elastic Security", "source": "https://github.com/elastic/protections-artifacts"}], "signature_info": {"description": "performan
2024-11-21 02:42:30 UTC	1280	IN	Data Raw: 68 69 32 22 3a 20 37 38 32 38 2e 37 38 30 32 37 33 34 33 37 35 2c 20 22 6d 64 35 22 3a 20 22 32 62 64 35 64 38 63 36 35 35 36 34 30 35 61 33 30 33 39 38 62 34 32 66 39 64 32 34 61 62 36 64 22 2c 20 22 65 6e 74 72 6f 70 79 22 3a 20 35 2e 37 30 35 32 31 33 35 34 36 37 35 32 39 33 2c 20 22 73 69 7a 65 22 3a 20 31 30 38 34 7d 2c 20 22 23 55 53 22 3a 20 7b 22 63 68 69 32 22 3a 20 31 39 30 38 33 31 2e 31 30 39 33 37 35 2c 20 22 6d 64 35 22 3a 20 22 37 64 62 65 36 31 31 38 61 30 30 39 34 32 38 32 34 33 66 63 66 61 39 39 39 64 33 33 63 63 65 64 22 2c 20 22 65 6e 74 72 6f 70 79 22 3a 20 34 2e 30 35 30 34 32 34 35 37 35 38 30 35 36 36 34 2c 20 22 73 69 7a 65 22 3a 20 33 34 32 38 7d 2c 20 22 23 7e 22 3a 20 7b 22 63 68 69 32 22 3a 20 31 30 35 38 34 33 2e 30 35 34 36 Data Ascii: hi2": 7828.7802734375, "md5": "2bd5d8c6556405a30398b42f9d24ab6d", "entropy": 5.70521354675293, "size": 1084}, "#US": {"chi2": 190831.109375, "md5": "7dbe6118a009428243fcfa999d33cced", "entropy": 4.050424575805664, "size": 3428}, "#~": {"chi2": 105843.0546
2024-11-21 02:42:30 UTC	1408	IN	Data Raw: 75 74 65 22 2c 20 22 52 75 6e 74 69 6d 65 43 6f 6d 70 61 74 69 62 69 6c 69 74 79 41 74 74 72 69 62 75 74 65 22 2c 20 22 43 6f 6d 70 69 6c 65 72 47 65 6e 65 72 61 74 65 64 41 74 74 72 69 62 75 74 65 22 2c 20 22 52 75 6e 74 69 6d 65 48 65 6c 70 65 72 73 22 5d 7d 2c 20 7b 22 6e 61 6d 65 73 70 61 63 65 22 3a 20 22 53 79 73 74 65 6d 2e 44 69 61 67 6e 6f 73 74 69 63 73 22 2c 20 22 74 79 70 65 5f 64 65 66 69 6e 69 74 69 6f 6e 73 22 3a 20 5b 22 44 65 62 75 67 67 61 62 6c 65 41 74 74 72 69 62 75 74 65 22 2c 20 22 44 65 62 75 67 67 65 72 4e 6f 6e 55 73 65 72 43 6f 64 65 41 74 74 72 69 62 75 74 65 22 5d 7d 2c 20 7b 22 6e 61 6d 65 73 70 61 63 65 22 3a 20 22 75 6e 63 61 74 65 67 6f 72 69 7a 65 64 22 2c 20 22 74 79 70 65 5f 64 65 66 69 6e 69 74 69 6f 6e 73 22 3a 20 5b Data Ascii: ute", "RuntimeCompatibilityAttribute", "CompilerGeneratedAttribute", "RuntimeHelpers"]}, {"namespace": "System.Diagnostics", "type_definitions": ["DebuggableAttribute", "DebuggerNonUserCodeAttribute"]}, {"namespace": "uncategorized", "type_definitions": [
2024-11-21 02:42:30 UTC	1408	IN	Data Raw: 69 7a 65 4d 6f 64 65 22 2c 20 22 44 61 74 61 47 72 69 64 56 69 65 77 43 6f 6c 75 6d 6e 43 6f 6c 6c 65 63 74 69 6f 6e 22 2c 20 22 44 61 74 61 47 72 69 64 56 69 65 77 43 6f 6c 75 6d 6e 22 2c 20 22 44 61 74 61 47 72 69 64 56 69 65 77 43 65 6c 6c 45 76 65 6e 74 48 61 6e 64 6c 65 72 22 2c 20 22 50 61 64 64 69 6e 67 22 2c 20 22 50 61 69 6e 74 45 76 65 6e 74 48 61 6e 64 6c 65 72 22 2c 20 22 41 70 70 6c 69 63 61 74 69 6f 6e 22 5d 7d 2c 20 7b 22 6e 61 6d 65 73 70 61 63 65 22 3a 20 22 53 79 73 74 65 6d 2e 43 6f 6d 70 6f 6e 65 6e 74 4d 6f 64 65 6c 22 2c 20 22 74 79 70 65 5f 64 65 66 69 6e 69 74 69 6f 6e 73 22 3a 20 5b 22 49 43 6f 6e 74 61 69 6e 65 72 22 2c 20 22 43 6f 6d 70 6f 6e 65 6e 74 52 65 73 6f 75 72 63 65 4d 61 6e 61 67 65 72 22 2c 20 22 45 64 69 74 6f 72 42 Data Ascii: izeMode", "DataGridViewColumnCollection", "DataGridViewColumn", "DataGridViewCellEventHandler", "Padding", "PaintEventHandler", "Application"]}, {"namespace": "System.ComponentModel", "type_definitions": ["IContainer", "ComponentResourceManager", "EditorB
2024-11-21 02:42:30 UTC	1280	IN	Data Raw: 6e 61 6d 65 22 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 4c 69 6e 6b 65 72 22 7d 5d 7d 2c 20 22 6d 61 67 69 6b 61 22 3a 20 22 50 45 42 49 4e 22 2c 20 22 73 69 67 6d 61 5f 61 6e 61 6c 79 73 69 73 5f 73 75 6d 6d 61 72 79 22 3a 20 7b 22 53 69 67 6d 61 20 49 6e 74 65 67 72 61 74 65 64 20 52 75 6c 65 20 53 65 74 20 28 47 69 74 48 75 62 29 22 3a 20 7b 22 68 69 67 68 22 3a 20 32 2c 20 22 6d 65 64 69 75 6d 22 3a 20 31 30 2c 20 22 63 72 69 74 69 63 61 6c 22 3a 20 30 2c 20 22 6c 6f 77 22 3a 20 35 7d 7d 2c 20 22 73 73 64 65 65 70 22 3a 20 22 31 32 32 38 38 3a 2b 4a 33 49 55 38 53 36 65 55 64 51 76 36 39 51 46 47 36 77 78 46 4f 6c 34 44 49 7a 58 57 42 4e 6f 6d 6c 34 74 63 59 45 49 4f 46 36 6d 46 62 6d 57 3a 2b 68 49 74 53 41 64 6b 36 34 66 6f 36 58 36 6c 30 45 7a 46 36 Data Ascii: name": "Microsoft Linker"}]}, "magika": "PEBIN", "sigma_analysis_summary": {"Sigma Integrated Rule Set (GitHub)": {"high": 2, "medium": 10, "critical": 0, "low": 5}}, "ssdeep": "12288:+J3IU8S6eUdQv69QFG6wxFOl4DIzXWBNoml4tcYEIOF6mFbmW:+hItSAdk64fo6X6l0EzF6
2024-11-21 02:42:30 UTC	1408	IN	Data Raw: 65 74 4f 62 6a 65 63 74 22 3a 20 22 48 4b 4c 4d 5c 5c 53 79 73 74 65 6d 5c 5c 43 75 72 72 65 6e 74 43 6f 6e 74 72 6f 6c 53 65 74 5c 5c 53 65 72 76 69 63 65 73 5c 5c 54 65 72 6d 53 65 72 76 69 63 65 5c 5c 50 61 72 61 6d 65 74 65 72 73 5c 5c 53 65 72 76 69 63 65 44 6c 6c 22 7d 7d 2c 20 7b 22 76 61 6c 75 65 73 22 3a 20 7b 22 45 76 65 6e 74 49 44 22 3a 20 22 31 33 22 2c 20 22 45 76 65 6e 74 54 79 70 65 22 3a 20 22 53 65 74 56 61 6c 75 65 22 2c 20 22 44 65 74 61 69 6c 73 22 3a 20 22 25 25 50 72 6f 67 72 61 6d 46 69 6c 65 73 25 25 5c 5c 4d 69 63 72 6f 73 6f 66 74 20 44 4e 31 5c 5c 73 71 6c 6d 61 70 2e 64 6c 6c 22 2c 20 22 54 61 72 67 65 74 4f 62 6a 65 63 74 22 3a 20 22 48 4b 4c 4d 5c 5c 53 79 73 74 65 6d 5c 5c 43 75 72 72 65 6e 74 43 6f 6e 74 72 6f 6c 53 65 74 Data Ascii: etObject": "HKLM\\System\\CurrentControlSet\\Services\\TermService\\Parameters\\ServiceDll"}}, {"values": {"EventID": "13", "EventType": "SetValue", "Details": "%%ProgramFiles%%\\Microsoft DN1\\sqlmap.dll", "TargetObject": "HKLM\\System\\CurrentControlSet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49886	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:29 UTC	935	OUT	GET /ui/domains/ghabovethec.info/subdomains?relationships=resolutions HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x319x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTk3NTY4OTA0NzgtWkc5dWRDQmlaU0JsZG1scy0xNzMyMTU2OTQ1LjU4NA== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:30 UTC	882	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: 80303691b9c835e508fa179f4dcbbec3 Date: Thu, 21 Nov 2024 02:42:30 GMT Server: Google Frontend Content-Length: 18136 Expires: Thu, 21 Nov 2024 02:42:30 GMT Cache-Control: private Connection: close
2024-11-21 02:42:30 UTC	526	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 5b 7b 22 69 64 22 3a 20 22 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 22 2c 20 22 74 79 70 65 22 3a 20 22 64 6f 6d 61 69 6e 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 64 6f 6d 61 69 6e 73 2f 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 6c 61 73 74 5f 61 6e 61 6c 79 73 69 73 5f 73 74 61 74 73 22 3a 20 7b 22 6d 61 6c 69 63 69 6f 75 73 22 3a 20 30 2c 20 22 73 75 73 70 69 63 69 6f 75 73 22 3a 20 30 2c 20 22 75 6e 64 65 74 65 63 74 65 64 22 3a 20 33 31 2c 20 22 68 61 72 6d 6c 65 73 73 22 3a 20 36 33 2c 20 22 74 69 6d 65 6f 75 74 22 3a 20 30 7d 2c 20 22 6c Data Ascii: {"data": [{"id": "ghabovethec.info", "type": "domain", "links": {"self": "https://www.virustotal.com/ui/domains/ghabovethec.info"}, "attributes": {"last_analysis_stats": {"malicious": 0, "suspicious": 0, "undetected": 31, "harmless": 63, "timeout": 0}, "l
2024-11-21 02:42:30 UTC	1408	IN	Data Raw: 20 31 36 37 37 36 36 32 37 32 31 2c 20 22 6c 61 73 74 5f 61 6e 61 6c 79 73 69 73 5f 72 65 73 75 6c 74 73 22 3a 20 7b 22 41 63 72 6f 6e 69 73 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 41 63 72 6f 6e 69 73 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 30 78 53 49 5f 66 33 33 64 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 30 78 53 49 5f 66 33 33 64 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d Data Ascii: 1677662721, "last_analysis_results": {"Acronis": {"method": "blacklist", "engine_name": "Acronis", "category": "harmless", "result": "clean"}, "0xSI_f33d": {"method": "blacklist", "engine_name": "0xSI_f33d", "category": "undetected", "result": "unrated"}
2024-11-21 02:42:30 UTC	482	IN	Data Raw: 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 41 75 74 6f 53 68 75 6e 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 41 75 74 6f 53 68 75 6e 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 62 65 6e 6b 6f 77 2e 63 63 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 62 65 6e 6b 6f 77 2e 63 63 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 42 66 6f 72 65 2e 41 69 20 50 72 65 43 72 69 6d 65 22 3a Data Ascii: ": "unrated"}, "AutoShun": {"method": "blacklist", "engine_name": "AutoShun", "category": "undetected", "result": "unrated"}, "benkow.cc": {"method": "blacklist", "engine_name": "benkow.cc", "category": "harmless", "result": "clean"}, "Bfore.Ai PreCrime":
2024-11-21 02:42:30 UTC	1408	IN	Data Raw: 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 42 6b 61 76 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 42 6c 75 65 6c 69 76 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 42 6c 75 65 6c 69 76 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 43 65 72 74 65 67 6f 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 43 Data Ascii: ": {"method": "blacklist", "engine_name": "Bkav", "category": "undetected", "result": "unrated"}, "Blueliv": {"method": "blacklist", "engine_name": "Blueliv", "category": "harmless", "result": "clean"}, "Certego": {"method": "blacklist", "engine_name": "C
2024-11-21 02:42:30 UTC	1408	IN	Data Raw: 72 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 44 4e 53 38 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 44 4e 53 38 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 44 72 2e 57 65 62 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 44 72 2e 57 65 62 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 45 72 6d 65 Data Ascii: r", "category": "harmless", "result": "clean"}, "DNS8": {"method": "blacklist", "engine_name": "DNS8", "category": "harmless", "result": "clean"}, "Dr.Web": {"method": "blacklist", "engine_name": "Dr.Web", "category": "harmless", "result": "clean"}, "Erme
2024-11-21 02:42:30 UTC	1280	IN	Data Raw: 2c 20 22 47 72 65 65 6e 53 6e 6f 77 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 47 72 65 65 6e 53 6e 6f 77 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 47 72 69 64 69 6e 73 6f 66 74 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 47 72 69 64 69 6e 73 6f 66 74 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 48 65 69 6d 64 61 6c 20 53 65 63 75 72 69 74 79 22 3a 20 7b 22 6d 65 74 68 6f 64 22 Data Ascii: , "GreenSnow": {"method": "blacklist", "engine_name": "GreenSnow", "category": "harmless", "result": "clean"}, "Gridinsoft": {"method": "blacklist", "engine_name": "Gridinsoft", "category": "undetected", "result": "unrated"}, "Heimdal Security": {"method"
2024-11-21 02:42:30 UTC	1408	IN	Data Raw: 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 4d 61 6c 77 61 72 65 64 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 4e 65 74 63 72 61 66 74 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 4e 65 74 63 72 61 66 74 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 4f 70 65 6e 50 68 69 73 68 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 4f 70 65 6e 50 68 69 73 68 Data Ascii: lacklist", "engine_name": "Malwared", "category": "harmless", "result": "clean"}, "Netcraft": {"method": "blacklist", "engine_name": "Netcraft", "category": "undetected", "result": "unrated"}, "OpenPhish": {"method": "blacklist", "engine_name": "OpenPhish
2024-11-21 02:42:30 UTC	1408	IN	Data Raw: 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 53 63 61 6e 74 69 74 61 6e 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 53 63 61 6e 74 69 74 61 6e 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 53 43 55 4d 57 41 52 45 2e 6f 72 67 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 53 43 55 4d 57 41 52 45 2e 6f 72 67 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 Data Ascii: "undetected", "result": "unrated"}, "Scantitan": {"method": "blacklist", "engine_name": "Scantitan", "category": "harmless", "result": "clean"}, "SCUMWARE.org": {"method": "blacklist", "engine_name": "SCUMWARE.org", "category": "harmless", "result": "clea
2024-11-21 02:42:30 UTC	1280	IN	Data Raw: 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 54 72 75 73 74 77 61 76 65 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 55 6e 64 65 72 77 6f 72 6c 64 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 55 6e 64 65 72 77 6f 72 6c 64 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 55 52 4c 68 61 75 73 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 55 52 4c 68 Data Ascii: "blacklist", "engine_name": "Trustwave", "category": "harmless", "result": "clean"}, "Underworld": {"method": "blacklist", "engine_name": "Underworld", "category": "undetected", "result": "unrated"}, "URLhaus": {"method": "blacklist", "engine_name": "URLh
2024-11-21 02:42:30 UTC	1408	IN	Data Raw: 64 65 73 65 6e 6d 61 73 63 61 72 61 2e 6d 65 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 6d 61 6c 77 61 72 65 73 2e 63 6f 6d 20 55 52 4c 20 63 68 65 63 6b 65 72 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 6d 61 6c 77 61 72 65 73 2e 63 6f 6d 20 55 52 4c 20 63 68 65 63 6b 65 72 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 73 65 63 75 72 6f 6c 79 74 69 63 73 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a Data Ascii: desenmascara.me", "category": "harmless", "result": "clean"}, "malwares.com URL checker": {"method": "blacklist", "engine_name": "malwares.com URL checker", "category": "harmless", "result": "clean"}, "securolytics": {"method": "blacklist", "engine_name":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49887	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:29 UTC	533	OUT	GET /ui/domains/ghabovethec.info/historical_ssl_certificates HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:30 UTC	225	IN	HTTP/1.1 429 Too Many Requests Content-Type: application/json X-Cloud-Trace-Context: 195869b1ab468e9143a0e971980cfc3b Date: Thu, 21 Nov 2024 02:42:29 GMT Server: Google Frontend Content-Length: 153 Connection: close
2024-11-21 02:42:30 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49888	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:29 UTC	933	OUT	GET /ui/domains/ghabovethec.info/siblings?relationships=resolutions HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x319x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTc2OTE0MTA2NDAtWkc5dWRDQmlaU0JsZG1scy0xNzMyMTU2OTQ1LjU4NA== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:30 UTC	880	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: 76c99f0ca5b4e59d6de6783769f12f64 Date: Thu, 21 Nov 2024 02:42:30 GMT Server: Google Frontend Content-Length: 155 Expires: Thu, 21 Nov 2024 02:42:30 GMT Cache-Control: private Connection: close
2024-11-21 02:42:30 UTC	155	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 5b 5d 2c 20 22 6d 65 74 61 22 3a 20 7b 22 63 6f 75 6e 74 22 3a 20 30 7d 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 64 6f 6d 61 69 6e 73 2f 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 2f 73 69 62 6c 69 6e 67 73 3f 6c 69 6d 69 74 3d 31 30 26 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 3d 72 65 73 6f 6c 75 74 69 6f 6e 73 22 7d 7d Data Ascii: {"data": [], "meta": {"count": 0}, "links": {"self": "https://www.virustotal.com/ui/domains/ghabovethec.info/siblings?limit=10&relationships=resolutions"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49890	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:29 UTC	517	OUT	GET /ui/domains/ghabovethec.info/resolutions HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:30 UTC	225	IN	HTTP/1.1 429 Too Many Requests Content-Type: application/json X-Cloud-Trace-Context: 7d62f8f9ee67354b89996c29346a5c3e Date: Thu, 21 Nov 2024 02:42:30 GMT Server: Google Frontend Content-Length: 153 Connection: close
2024-11-21 02:42:30 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49891	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:29 UTC	522	OUT	GET /ui/domains/ghabovethec.info/historical_whois HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:30 UTC	225	IN	HTTP/1.1 429 Too Many Requests Content-Type: application/json X-Cloud-Trace-Context: ec7918d0520b8399fc538ab0d81379a3 Date: Thu, 21 Nov 2024 02:42:30 GMT Server: Google Frontend Content-Length: 153 Connection: close
2024-11-21 02:42:30 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49889	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:29 UTC	911	OUT	GET /ui/domains/ghabovethec.info/associations HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x319x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTgyMTkwODcwNDYtWkc5dWRDQmlaU0JsZG1scy0xNzMyMTU2OTQ1LjU5OQ== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:30 UTC	881	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: 541240ec65db52d57839f3889977cb8b Date: Thu, 21 Nov 2024 02:42:30 GMT Server: Google Frontend Content-Length: 3608 Expires: Thu, 21 Nov 2024 02:42:30 GMT Cache-Control: private Connection: close
2024-11-21 02:42:30 UTC	527	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 5b 7b 22 69 64 22 3a 20 22 61 65 35 32 34 35 39 66 37 37 31 63 39 65 66 31 64 38 65 33 62 39 61 64 62 64 38 32 62 64 63 63 66 65 66 64 34 34 64 63 38 35 32 66 65 36 37 62 33 64 37 63 35 37 61 61 31 64 38 36 64 30 31 36 22 2c 20 22 74 79 70 65 22 3a 20 22 63 6f 6c 6c 65 63 74 69 6f 6e 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 63 6f 6c 6c 65 63 74 69 6f 6e 73 2f 61 65 35 32 34 35 39 66 37 37 31 63 39 65 66 31 64 38 65 33 62 39 61 64 62 64 38 32 62 64 63 63 66 65 66 64 34 34 64 63 38 35 32 66 65 36 37 62 33 64 37 63 35 37 61 61 31 64 38 36 64 30 31 36 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 72 65 63 Data Ascii: {"data": [{"id": "ae52459f771c9ef1d8e3b9adbd82bdccfefd44dc852fe67b3d7c57aa1d86d016", "type": "collection", "links": {"self": "https://www.virustotal.com/ui/collections/ae52459f771c9ef1d8e3b9adbd82bdccfefd44dc852fe67b3d7c57aa1d86d016"}, "attributes": {"rec
2024-11-21 02:42:30 UTC	1408	IN	Data Raw: 30 30 37 2c 20 31 30 30 35 2c 20 39 38 36 2c 20 39 32 30 2c 20 39 30 34 2c 20 36 37 34 2c 20 37 31 36 2c 20 31 31 34 33 5d 2c 20 22 74 61 67 73 5f 64 65 74 61 69 6c 73 22 3a 20 5b 5d 2c 20 22 70 72 69 76 61 74 65 22 3a 20 66 61 6c 73 65 2c 20 22 66 69 6c 65 73 5f 63 6f 75 6e 74 22 3a 20 30 2c 20 22 61 75 74 6f 67 65 6e 65 72 61 74 65 64 5f 74 61 67 73 22 3a 20 5b 5d 2c 20 22 73 74 61 74 75 73 22 3a 20 22 43 4f 4d 50 55 54 45 44 22 2c 20 22 63 72 65 61 74 69 6f 6e 5f 64 61 74 65 22 3a 20 31 37 32 30 34 32 33 30 39 33 2c 20 22 6f 72 69 67 69 6e 22 3a 20 22 43 72 6f 77 64 73 6f 75 72 63 65 64 22 2c 20 22 61 6c 74 5f 6e 61 6d 65 73 5f 64 65 74 61 69 6c 73 22 3a 20 5b 5d 2c 20 22 6c 61 73 74 5f 6d 6f 64 69 66 69 63 61 74 69 6f 6e 5f 64 61 74 65 22 3a 20 31 37 Data Ascii: 007, 1005, 986, 920, 904, 674, 716, 1143], "tags_details": [], "private": false, "files_count": 0, "autogenerated_tags": [], "status": "COMPUTED", "creation_date": 1720423093, "origin": "Crowdsourced", "alt_names_details": [], "last_modification_date": 17
2024-11-21 02:42:30 UTC	481	IN	Data Raw: 20 6f 66 20 63 6f 6d 70 72 6f 6d 69 73 65 20 66 6f 72 20 61 20 56 69 64 61 72 20 49 6e 66 6f 73 74 65 61 6c 65 72 20 76 61 72 69 61 6e 74 2e 22 2c 20 22 6e 61 6d 65 22 3a 20 22 56 69 64 61 72 20 49 6e 66 6f 73 74 65 61 6c 65 72 22 2c 20 22 74 61 67 73 22 3a 20 5b 5d 2c 20 22 74 6f 70 5f 69 63 6f 6e 5f 6d 64 35 22 3a 20 5b 22 32 32 38 35 61 66 66 30 66 39 38 32 31 39 31 33 34 32 64 62 38 64 63 34 61 65 33 33 31 34 35 38 22 2c 20 22 33 38 39 35 34 39 62 31 32 33 65 65 31 66 65 65 66 34 39 30 65 34 33 32 32 37 33 66 61 39 62 38 22 2c 20 22 35 34 34 36 35 39 34 36 32 33 65 61 31 37 38 31 35 66 35 62 38 36 34 39 64 65 62 36 63 35 35 31 22 5d 7d 2c 20 22 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 73 68 61 72 65 64 5f 77 69 74 68 5f 6d Data Ascii: of compromise for a Vidar Infostealer variant.", "name": "Vidar Infostealer", "tags": [], "top_icon_md5": ["2285aff0f982191342db8dc4ae331458", "389549b123ee1feef490e432273fa9b8", "5446594623ea17815f5b8649deb6c551"]}, "context_attributes": {"shared_with_m
2024-11-21 02:42:30 UTC	1192	IN	Data Raw: 37 65 65 36 66 35 37 31 32 34 34 62 66 32 31 32 64 32 35 37 32 62 30 38 31 62 30 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 72 65 63 65 6e 74 5f 61 63 74 69 76 69 74 79 5f 72 65 6c 61 74 69 76 65 5f 63 68 61 6e 67 65 22 3a 20 2d 30 2e 31 36 34 34 30 30 34 39 34 34 33 37 35 37 37 32 2c 20 22 63 6f 6c 6c 65 63 74 69 6f 6e 5f 74 79 70 65 22 3a 20 22 63 6f 6c 6c 65 63 74 69 6f 6e 22 2c 20 22 61 6c 74 5f 6e 61 6d 65 73 22 3a 20 5b 5d 2c 20 22 69 70 5f 61 64 64 72 65 73 73 65 73 5f 63 6f 75 6e 74 22 3a 20 30 2c 20 22 63 6f 75 6e 74 65 72 73 22 3a 20 7b 22 66 69 6c 65 73 22 3a 20 32 2c 20 22 64 6f 6d 61 69 6e 73 22 3a 20 39 33 2c 20 22 69 70 5f 61 64 64 72 65 73 73 65 73 22 3a 20 30 2c 20 22 75 72 6c 73 22 3a 20 30 2c 20 22 69 6f 63 73 22 3a 20 Data Ascii: 7ee6f571244bf212d2572b081b0"}, "attributes": {"recent_activity_relative_change": -0.1644004944375772, "collection_type": "collection", "alt_names": [], "ip_addresses_count": 0, "counters": {"files": 2, "domains": 93, "ip_addresses": 0, "urls": 0, "iocs":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49893	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:30 UTC	906	OUT	GET /ui/domains/ghabovethec.info/reports HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x319x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTY2MjQ3MjMzNzEtWkc5dWRDQmlaU0JsZG1scy0xNzMyMTU2OTQ1LjU5OQ== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:30 UTC	239	IN	HTTP/1.1 403 Forbidden Content-Type: application/json Vary: Accept-Encoding X-Cloud-Trace-Context: 75f91a7fc23e907b3c68a62298b0c781 Date: Thu, 21 Nov 2024 02:42:30 GMT Server: Google Frontend Content-Length: 52 Connection: close
2024-11-21 02:42:30 UTC	52	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 46 6f 72 62 69 64 64 65 6e 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 22 7d 7d Data Ascii: {"error": {"code": "ForbiddenError", "message": ""}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49894	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:30 UTC	899	OUT	GET /ui/ip_addresses/3.167.163.46 HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x319x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTM2NDQ5OTQ2NzctWkc5dWRDQmlaU0JsZG1scy0xNzMyMTU2OTQ3LjQzNw== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:30 UTC	882	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: a6eaeb9defccca1b5e53dd440f1cdb8b Date: Thu, 21 Nov 2024 02:42:30 GMT Server: Google Frontend Content-Length: 11479 Expires: Thu, 21 Nov 2024 02:42:30 GMT Cache-Control: private Connection: close
2024-11-21 02:42:30 UTC	526	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 7b 22 69 64 22 3a 20 22 33 2e 31 36 37 2e 31 36 33 2e 34 36 22 2c 20 22 74 79 70 65 22 3a 20 22 69 70 5f 61 64 64 72 65 73 73 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 69 70 5f 61 64 64 72 65 73 73 65 73 2f 33 2e 31 36 37 2e 31 36 33 2e 34 36 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 61 73 6e 22 3a 20 31 36 35 30 39 2c 20 22 6c 61 73 74 5f 61 6e 61 6c 79 73 69 73 5f 72 65 73 75 6c 74 73 22 3a 20 7b 22 41 63 72 6f 6e 69 73 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 41 63 72 6f 6e 69 73 22 2c 20 22 63 61 74 65 67 6f Data Ascii: {"data": {"id": "3.167.163.46", "type": "ip_address", "links": {"self": "https://www.virustotal.com/ui/ip_addresses/3.167.163.46"}, "attributes": {"asn": 16509, "last_analysis_results": {"Acronis": {"method": "blacklist", "engine_name": "Acronis", "catego
2024-11-21 02:42:30 UTC	1408	IN	Data Raw: 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 41 44 4d 49 4e 55 53 4c 61 62 73 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 41 78 75 72 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 41 78 75 72 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 43 72 69 6d 69 6e 61 6c 20 49 50 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 43 72 Data Ascii: ethod": "blacklist", "engine_name": "ADMINUSLabs", "category": "harmless", "result": "clean"}, "Axur": {"method": "blacklist", "engine_name": "Axur", "category": "undetected", "result": "unrated"}, "Criminal IP": {"method": "blacklist", "engine_name": "Cr
2024-11-21 02:42:30 UTC	486	IN	Data Raw: 65 72 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 42 69 74 44 65 66 65 6e 64 65 72 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 42 6b 61 76 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 42 6b 61 76 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 42 6c 75 65 6c 69 76 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a Data Ascii: er": {"method": "blacklist", "engine_name": "BitDefender", "category": "harmless", "result": "clean"}, "Bkav": {"method": "blacklist", "engine_name": "Bkav", "category": "undetected", "result": "unrated"}, "Blueliv": {"method": "blacklist", "engine_name":
2024-11-21 02:42:30 UTC	1408	IN	Data Raw: 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 43 49 4e 53 20 41 72 6d 79 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 43 49 4e 53 20 41 72 6d 79 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 43 6c 75 73 74 65 72 32 35 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 43 6c 75 73 74 65 72 32 35 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 Data Ascii: ", "category": "harmless", "result": "clean"}, "CINS Army": {"method": "blacklist", "engine_name": "CINS Army", "category": "harmless", "result": "clean"}, "Cluster25": {"method": "blacklist", "engine_name": "Cluster25", "category": "undetected", "result"
2024-11-21 02:42:30 UTC	1408	IN	Data Raw: 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 45 53 45 54 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 45 53 54 73 65 63 75 72 69 74 79 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 45 53 54 73 65 63 75 72 69 74 79 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 45 6d 65 72 67 69 6e 67 54 68 72 65 61 74 73 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 45 6d 65 72 67 69 6e Data Ascii: cklist", "engine_name": "ESET", "category": "harmless", "result": "clean"}, "ESTsecurity": {"method": "blacklist", "engine_name": "ESTsecurity", "category": "harmless", "result": "clean"}, "EmergingThreats": {"method": "blacklist", "engine_name": "Emergin
2024-11-21 02:42:30 UTC	1280	IN	Data Raw: 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 48 75 6e 74 2e 69 6f 20 49 6e 74 65 6c 6c 69 67 65 6e 63 65 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 49 50 73 75 6d 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 49 50 73 75 6d 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 4a 75 6e 69 70 65 72 20 4e 65 74 77 6f 72 6b 73 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 Data Ascii: hod": "blacklist", "engine_name": "Hunt.io Intelligence", "category": "undetected", "result": "unrated"}, "IPsum": {"method": "blacklist", "engine_name": "IPsum", "category": "harmless", "result": "clean"}, "Juniper Networks": {"method": "blacklist", "eng
2024-11-21 02:42:30 UTC	1408	IN	Data Raw: 74 61 62 61 73 65 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 50 68 69 73 68 46 6f 72 74 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 50 68 69 73 68 46 6f 72 74 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 50 68 69 73 68 4c 61 62 73 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 50 68 69 73 68 4c 61 62 73 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 Data Ascii: tabase", "category": "harmless", "result": "clean"}, "PhishFort": {"method": "blacklist", "engine_name": "PhishFort", "category": "undetected", "result": "unrated"}, "PhishLabs": {"method": "blacklist", "engine_name": "PhishLabs", "category": "undetected"
2024-11-21 02:42:30 UTC	1408	IN	Data Raw: 72 65 42 72 61 69 6e 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 53 65 63 75 72 65 42 72 61 69 6e 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 53 65 67 61 73 65 63 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 53 65 67 61 73 65 63 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 53 4f 43 52 61 64 61 72 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 Data Ascii: reBrain": {"method": "blacklist", "engine_name": "SecureBrain", "category": "undetected", "result": "unrated"}, "Segasec": {"method": "blacklist", "engine_name": "Segasec", "category": "undetected", "result": "unrated"}, "SOCRadar": {"method": "blacklist"
2024-11-21 02:42:30 UTC	1280	IN	Data Raw: 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 56 69 65 74 74 65 6c 20 54 68 72 65 61 74 20 49 6e 74 65 6c 6c 69 67 65 6e 63 65 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 56 69 65 74 74 65 6c 20 54 68 72 65 61 74 20 49 6e 74 65 6c 6c 69 67 65 6e 63 65 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 68 61 72 6d 6c 65 73 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 63 6c 65 61 6e 22 7d 2c 20 22 56 49 50 52 45 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 56 49 50 52 45 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a Data Ascii: ory": "undetected", "result": "unrated"}, "Viettel Threat Intelligence": {"method": "blacklist", "engine_name": "Viettel Threat Intelligence", "category": "harmless", "result": "clean"}, "VIPRE": {"method": "blacklist", "engine_name": "VIPRE", "category":
2024-11-21 02:42:30 UTC	867	IN	Data Raw: 61 6d 65 22 3a 20 22 58 63 69 74 69 75 6d 20 56 65 72 64 69 63 74 20 43 6c 6f 75 64 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 7a 76 65 6c 6f 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 7a 76 65 6c 6f 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 75 6e 72 61 74 65 64 22 7d 2c 20 22 5a 65 72 6f 46 6f 78 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 5a 65 72 6f 46 6f 78 22 2c 20 22 63 61 74 65 67 6f 72 79 22 Data Ascii: ame": "Xcitium Verdict Cloud", "category": "undetected", "result": "unrated"}, "zvelo": {"method": "blacklist", "engine_name": "zvelo", "category": "undetected", "result": "unrated"}, "ZeroFox": {"method": "blacklist", "engine_name": "ZeroFox", "category"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49895	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:30 UTC	520	OUT	GET /ui/domains/ghabovethec.info/referrer_files HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:30 UTC	225	IN	HTTP/1.1 429 Too Many Requests Content-Type: application/json X-Cloud-Trace-Context: 1cf56b0e8a8b609b379c66eae9fd5caf Date: Thu, 21 Nov 2024 02:42:30 GMT Server: Google Frontend Content-Length: 153 Connection: close
2024-11-21 02:42:30 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49896	142.250.186.142	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:30 UTC	656	OUT	GET /cse.js?cx=003414466004237966221:dgg7iftvryo HTTP/1.1 Host: cse.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:31 UTC	1154	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-OuS6Ir6zwKoU5zqtm-Fyeg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Thu, 21 Nov 2024 02:42:30 GMT Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:31 UTC	236	IN	Data Raw: 32 32 65 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 6f 70 74 73 5f 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 68 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 2c 62 29 7b 74 68 69 73 2e 68 3d 61 3d 3d 3d 6c 26 26 62 7c 7c 22 22 3b 74 68 69 73 2e 67 3d 6d 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 Data Ascii: 22ec(function(opts_){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/'use strict';var f=this\|\|self;function g(a){return a};var h;function k(a,b){this.h=a===l&&b\|\|"";this.g=m}function n(a){return a i
2024-11-21 02:42:31 UTC	1390	IN	Data Raw: 6e 73 74 61 6e 63 65 6f 66 20 6b 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 6b 26 26 61 2e 67 3d 3d 3d 6d 3f 61 2e 68 3a 22 74 79 70 65 5f 65 72 72 6f 72 3a 43 6f 6e 73 74 22 7d 76 61 72 20 6d 3d 7b 7d 2c 6c 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 70 28 61 2c 62 29 7b 74 68 69 73 2e 68 3d 62 3d 3d 3d 71 3f 61 3a 22 22 7d 70 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 2b 22 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 70 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 70 3f 61 2e 68 3a 22 74 79 70 65 5f 65 72 72 6f 72 3a 54 72 75 73 74 65 64 52 65 73 6f 75 72 63 65 55 72 6c 22 7d 0a 66 75 Data Ascii: nstanceof k&&a.constructor===k&&a.g===m?a.h:"type_error:Const"}var m={},l={};function p(a,b){this.h=b===q?a:""}p.prototype.toString=function(){return this.h+""};function r(a){return a instanceof p&&a.constructor===p?a.h:"type_error:TrustedResourceUrl"}fu
2024-11-21 02:42:31 UTC	1390	IN	Data Raw: 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 44 3d 65 5b 74 5d 3b 6e 75 6c 6c 21 3d 44 26 26 28 62 7c 7c 28 62 3d 61 29 2c 62 2b 3d 28 62 2e 6c 65 6e 67 74 68 3e 61 2e 6c 65 6e 67 74 68 3f 22 26 22 3a 22 22 29 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 74 72 69 6e 67 28 44 29 29 29 7d 7d 72 65 74 75 72 6e 20 62 7d 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 74 68 69 73 2e 67 3d 62 3d 3d 3d 46 3f 61 3a 22 22 7d 45 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 76 61 72 20 46 3d 7b 7d 3b 2f 2a 0a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 Data Ascii: gth;t++){var D=e[t];null!=D&&(b\|\|(b=a),b+=(b.length>a.length?"&":"")+encodeURIComponent(d)+"="+encodeURIComponent(String(D)))}}return b};function E(a,b){this.g=b===F?a:""}E.prototype.toString=function(){return this.g.toString()};var F={};/* SPDX-License
2024-11-21 02:42:31 UTC	1390	IN	Data Raw: 61 5d 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 61 3f 6e 75 6c 6c 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 29 7b 76 61 72 20 61 3b 72 65 74 75 72 6e 21 28 6e 75 6c 6c 3d 3d 28 61 3d 77 69 6e 64 6f 77 2e 5f 5f 67 63 73 65 29 3f 30 3a 61 2e 70 6c 61 69 6e 53 74 79 6c 65 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 4f 28 61 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 6e 6b 22 29 3b 62 2e 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3b 61 3a 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 70 29 62 2e 68 72 65 66 3d 72 28 61 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 65 6c 73 65 7b 69 66 28 2d 31 3d 3d 3d 49 2e 69 6e 64 65 78 4f 66 28 22 73 74 79 6c 65 73 68 65 65 74 22 29 Data Ascii: a];return"function"!==typeof a?null:a}function M(){var a;return!(null==(a=window.__gcse)?0:a.plainStyle)}function O(a){var b=document.createElement("link");b.type="text/css";a:{if(a instanceof p)b.href=r(a).toString();else{if(-1===I.indexOf("stylesheet")
2024-11-21 02:42:31 UTC	1390	IN	Data Raw: 76 65 72 73 69 6f 6e 53 6c 61 73 68 3a 4c 2c 65 78 70 65 72 69 6d 65 6e 74 3a 6f 70 74 73 5f 2e 75 69 4f 70 74 69 6f 6e 73 2e 63 73 73 54 68 65 6d 65 56 65 72 73 69 6f 6e 26 26 34 21 3d 3d 6f 70 74 73 5f 2e 75 69 4f 70 74 69 6f 6e 73 2e 63 73 73 54 68 65 6d 65 56 65 72 73 69 6f 6e 3f 22 5f 76 22 2b 6f 70 74 73 5f 2e 75 69 4f 70 74 69 6f 6e 73 2e 63 73 73 54 68 65 6d 65 56 65 72 73 69 6f 6e 3a 22 22 2c 6c 61 6e 67 3a 6f 70 74 73 5f 2e 6c 61 6e 67 75 61 67 65 7d 29 3a 75 28 4b 2c 7b 76 65 72 73 69 6f 6e 44 69 72 3a 22 22 2c 76 65 72 73 69 6f 6e 53 6c 61 73 68 3a 22 22 2c 65 78 70 65 72 69 6d 65 6e 74 3a 22 22 2c 6c 61 6e 67 3a 6f 70 74 73 5f 2e 6c 61 6e 67 75 61 67 65 7d 29 29 29 3b 76 61 72 20 58 2c 59 3d 22 76 22 2b 28 6f 70 74 73 5f 2e 75 69 4f 70 74 69 Data Ascii: versionSlash:L,experiment:opts_.uiOptions.cssThemeVersion&&4!==opts_.uiOptions.cssThemeVersion?"_v"+opts_.uiOptions.cssThemeVersion:"",lang:opts_.language}):u(K,{versionDir:"",versionSlash:"",experiment:"",lang:opts_.language})));var X,Y="v"+(opts_.uiOpti
2024-11-21 02:42:31 UTC	1390	IN	Data Raw: 6f 78 2d 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 44 46 45 31 45 35 7d 2e 67 73 63 2d 73 65 61 72 63 68 2d 62 75 74 74 6f 6e 2d 76 32 2c 2e 67 73 63 2d 73 65 61 72 63 68 2d 62 75 74 74 6f 6e 2d 76 32 3a 68 6f 76 65 72 2c 2e 67 73 63 2d 73 65 61 72 63 68 2d 62 75 74 74 6f 6e 2d 76 32 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 33 30 37 39 45 44 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 44 39 30 46 45 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 3b 66 69 6c 74 65 72 3a 6e 6f 6e 65 7d 2e 67 73 63 2d 73 65 61 72 63 68 2d 62 75 74 74 6f 6e 2d 76 32 20 73 76 67 7b 66 69 6c 6c 3a 23 46 46 46 46 46 46 7d 2e 67 73 63 2d 74 61 62 48 65 61 64 65 72 2e 67 73 63 2d 74 61 62 68 41 63 74 69 76 Data Ascii: ox-focus{border-color:#DFE1E5}.gsc-search-button-v2,.gsc-search-button-v2:hover,.gsc-search-button-v2:focus{border-color:#3079ED;background-color:#4D90FE;background-image:none;filter:none}.gsc-search-button-v2 svg{fill:#FFFFFF}.gsc-tabHeader.gsc-tabhActiv
2024-11-21 02:42:31 UTC	1390	IN	Data Raw: 61 69 6c 69 6e 67 2d 6d 6f 72 65 2d 72 65 73 75 6c 74 73 3a 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 34 44 34 44 34 44 7d 2e 67 73 2d 77 65 62 52 65 73 75 6c 74 3a 6e 6f 74 28 2e 67 73 2d 6e 6f 2d 72 65 73 75 6c 74 73 2d 72 65 73 75 6c 74 29 3a 6e 6f 74 28 2e 67 73 2d 65 72 72 6f 72 2d 72 65 73 75 6c 74 29 20 2e 67 73 2d 73 6e 69 70 70 65 74 2c 2e 67 73 2d 66 69 6c 65 46 6f 72 6d 61 74 54 79 70 65 7b 63 6f 6c 6f 72 3a 23 34 44 34 44 34 44 7d 2e 67 73 2d 77 65 62 52 65 73 75 6c 74 20 64 69 76 2e 67 73 2d 76 69 73 69 62 6c 65 55 72 6c 7b 63 6f 6c 6f 72 3a 23 34 44 34 44 34 44 7d 2e 67 73 2d 77 65 62 52 65 73 75 6c 74 20 64 69 76 2e 67 73 2d 76 69 73 69 62 6c 65 55 72 6c 2d 73 68 6f 72 74 7b 63 6f 6c 6f 72 3a 23 34 44 34 44 34 44 7d 2e 67 73 2d 77 65 62 52 65 73 Data Ascii: ailing-more-results:link{color:#4D4D4D}.gs-webResult:not(.gs-no-results-result):not(.gs-error-result) .gs-snippet,.gs-fileFormatType{color:#4D4D4D}.gs-webResult div.gs-visibleUrl{color:#4D4D4D}.gs-webResult div.gs-visibleUrl-short{color:#4D4D4D}.gs-webRes
2024-11-21 02:42:31 UTC	372	IN	Data Raw: 74 6c 65 2d 72 69 67 68 74 20 2a 7b 63 6f 6c 6f 72 3a 23 33 33 33 33 33 33 7d 2e 67 73 2d 70 72 6f 6d 6f 74 69 6f 6e 20 2e 67 73 2d 76 69 73 69 62 6c 65 55 72 6c 2c 2e 67 73 2d 70 72 6f 6d 6f 74 69 6f 6e 20 2e 67 73 2d 76 69 73 69 62 6c 65 55 72 6c 2d 73 68 6f 72 74 7b 63 6f 6c 6f 72 3a 23 30 30 39 39 33 33 7d 2e 67 63 73 63 2d 66 69 6e 64 2d 6d 6f 72 65 2d 6f 6e 2d 67 6f 6f 67 6c 65 7b 63 6f 6c 6f 72 3a 23 34 44 34 44 34 44 7d 2e 67 63 73 63 2d 66 69 6e 64 2d 6d 6f 72 65 2d 6f 6e 2d 67 6f 6f 67 6c 65 2d 6d 61 67 6e 69 66 69 65 72 7b 66 69 6c 6c 3a 23 34 44 34 44 34 44 7d 22 2c 0a 20 20 22 63 73 65 5f 74 6f 6b 65 6e 22 3a 20 22 41 42 2d 74 43 5f 37 45 61 4b 4f 78 5f 71 39 58 45 38 68 49 71 77 59 4e 53 52 48 41 3a 31 37 33 32 31 35 36 39 35 30 39 38 32 22 Data Ascii: tle-right *{color:#333333}.gs-promotion .gs-visibleUrl,.gs-promotion .gs-visibleUrl-short{color:#009933}.gcsc-find-more-on-google{color:#4D4D4D}.gcsc-find-more-on-google-magnifier{fill:#4D4D4D}", "cse_token": "AB-tC_7EaKOx_q9XE8hIqwYNSRHA:1732156950982"
2024-11-21 02:42:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49899	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:31 UTC	540	OUT	GET /ui/domains/ghabovethec.info/siblings?relationships=resolutions HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:32 UTC	225	IN	HTTP/1.1 429 Too Many Requests Content-Type: application/json X-Cloud-Trace-Context: ce01d263ecc93150cddca154146347bb Date: Thu, 21 Nov 2024 02:42:31 GMT Server: Google Frontend Content-Length: 153 Connection: close
2024-11-21 02:42:32 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49898	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:31 UTC	927	OUT	GET /ui/domains/ghabovethec.info/votes?relationships=item%2Cvoter HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x319x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTIxODUwNzM4OTItWkc5dWRDQmlaU0JsZG1scy0xNzMyMTU2OTQ3LjYz sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:32 UTC	881	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: f985eeb126f5abe12816553f34126d0d Date: Thu, 21 Nov 2024 02:42:32 GMT Server: Google Frontend Content-Length: 1696 Expires: Thu, 21 Nov 2024 02:42:32 GMT Cache-Control: private Connection: close
2024-11-21 02:42:32 UTC	527	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 5b 7b 22 69 64 22 3a 20 22 64 2d 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 2d 30 64 61 37 33 61 31 63 22 2c 20 22 74 79 70 65 22 3a 20 22 76 6f 74 65 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 76 6f 74 65 73 2f 64 2d 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 2d 30 64 61 37 33 61 31 63 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 76 61 6c 75 65 22 3a 20 2d 31 2c 20 22 64 61 74 65 22 3a 20 31 37 32 39 31 36 30 32 34 31 2c 20 22 76 65 72 64 69 63 74 22 3a 20 22 6d 61 6c 69 63 69 6f 75 73 22 7d 2c 20 22 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 22 3a 20 7b 22 76 6f 74 65 72 22 3a 20 7b 22 6c 69 6e Data Ascii: {"data": [{"id": "d-ghabovethec.info-0da73a1c", "type": "vote", "links": {"self": "https://www.virustotal.com/ui/votes/d-ghabovethec.info-0da73a1c"}, "attributes": {"value": -1, "date": 1729160241, "verdict": "malicious"}, "relationships": {"voter": {"lin
2024-11-21 02:42:32 UTC	1169	IN	Data Raw: 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 76 6f 74 65 73 2f 64 2d 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 2d 30 64 61 37 33 61 31 63 2f 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 2f 69 74 65 6d 22 2c 20 22 72 65 6c 61 74 65 64 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 76 6f 74 65 73 2f 64 2d 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 2d 30 64 61 37 33 61 31 63 2f 69 74 65 6d 22 7d 2c 20 22 6d 65 74 61 22 3a 20 7b 22 63 6f 75 6e 74 22 3a 20 31 7d 2c 20 22 64 61 74 61 22 3a 20 7b 22 74 79 70 65 22 3a 20 22 64 6f 6d 61 69 6e 22 2c 20 22 69 64 22 3a 20 22 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 22 7d 7d Data Ascii: {"self": "https://www.virustotal.com/ui/votes/d-ghabovethec.info-0da73a1c/relationships/item", "related": "https://www.virustotal.com/ui/votes/d-ghabovethec.info-0da73a1c/item"}, "meta": {"count": 1}, "data": {"type": "domain", "id": "ghabovethec.info"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49900	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:31 UTC	935	OUT	GET /ui/domains/ghabovethec.info/comments?relationships=author%2Citem HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x319x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTY1Njg1OTk5MjgtWkc5dWRDQmlaU0JsZG1scy0xNzMyMTU2OTQ3LjYzMQ== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:32 UTC	880	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: cb7d0066d2a953a655833cad076fe9d5 Date: Thu, 21 Nov 2024 02:42:32 GMT Server: Google Frontend Content-Length: 157 Expires: Thu, 21 Nov 2024 02:42:32 GMT Cache-Control: private Connection: close
2024-11-21 02:42:32 UTC	157	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 5b 5d 2c 20 22 6d 65 74 61 22 3a 20 7b 22 63 6f 75 6e 74 22 3a 20 30 7d 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 64 6f 6d 61 69 6e 73 2f 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 2f 63 6f 6d 6d 65 6e 74 73 3f 6c 69 6d 69 74 3d 31 30 26 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 3d 61 75 74 68 6f 72 25 32 43 69 74 65 6d 22 7d 7d Data Ascii: {"data": [], "meta": {"count": 0}, "links": {"self": "https://www.virustotal.com/ui/domains/ghabovethec.info/comments?limit=10&relationships=author%2Citem"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49901	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:31 UTC	542	OUT	GET /ui/domains/ghabovethec.info/subdomains?relationships=resolutions HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:32 UTC	225	IN	HTTP/1.1 429 Too Many Requests Content-Type: application/json X-Cloud-Trace-Context: b72eeadf4d0b1391083a45b5386b27ce Date: Thu, 21 Nov 2024 02:42:32 GMT Server: Google Frontend Content-Length: 153 Connection: close
2024-11-21 02:42:32 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49902	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:31 UTC	973	OUT	GET /ui/domains/ghabovethec.info/graphs?attributes=private%2Cgraph_data%2Ccreation_date&relationships=owner HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x319x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTk0NzM5NzUyMTQtWkc5dWRDQmlaU0JsZG1scy0xNzMyMTU2OTQ3LjYzMQ== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:32 UTC	881	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: 55f2644f18d4e26d1534546c346b3912 Date: Thu, 21 Nov 2024 02:42:32 GMT Server: Google Frontend Content-Length: 3326 Expires: Thu, 21 Nov 2024 02:42:32 GMT Cache-Control: private Connection: close
2024-11-21 02:42:32 UTC	527	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 5b 7b 22 69 64 22 3a 20 22 67 64 65 65 65 32 34 30 62 66 30 62 37 34 30 31 34 62 35 35 35 38 65 38 64 65 33 35 33 62 39 64 39 63 64 31 39 30 61 65 30 63 36 30 61 34 31 36 63 38 33 61 62 61 34 33 33 62 30 63 30 30 31 34 33 22 2c 20 22 74 79 70 65 22 3a 20 22 67 72 61 70 68 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 67 72 61 70 68 73 2f 67 64 65 65 65 32 34 30 62 66 30 62 37 34 30 31 34 62 35 35 35 38 65 38 64 65 33 35 33 62 39 64 39 63 64 31 39 30 61 65 30 63 36 30 61 34 31 36 63 38 33 61 62 61 34 33 33 62 30 63 30 30 31 34 33 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 70 72 69 76 61 74 65 22 3a 20 66 Data Ascii: {"data": [{"id": "gdeee240bf0b74014b5558e8de353b9d9cd190ae0c60a416c83aba433b0c00143", "type": "graph", "links": {"self": "https://www.virustotal.com/ui/graphs/gdeee240bf0b74014b5558e8de353b9d9cd190ae0c60a416c83aba433b0c00143"}, "attributes": {"private": f
2024-11-21 02:42:32 UTC	1408	IN	Data Raw: 20 22 72 65 6c 61 74 65 64 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 67 72 61 70 68 73 2f 67 64 65 65 65 32 34 30 62 66 30 62 37 34 30 31 34 62 35 35 35 38 65 38 64 65 33 35 33 62 39 64 39 63 64 31 39 30 61 65 30 63 36 30 61 34 31 36 63 38 33 61 62 61 34 33 33 62 30 63 30 30 31 34 33 2f 6f 77 6e 65 72 22 7d 2c 20 22 6d 65 74 61 22 3a 20 7b 22 63 6f 75 6e 74 22 3a 20 31 7d 2c 20 22 64 61 74 61 22 3a 20 7b 22 74 79 70 65 22 3a 20 22 75 73 65 72 22 2c 20 22 69 64 22 3a 20 22 72 6f 6e 6f 6e 5f 64 65 78 22 7d 7d 7d 2c 20 22 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 73 68 61 72 65 64 5f 77 69 74 68 5f 6d 65 22 3a 20 66 61 6c 73 65 2c 20 22 72 6f 6c 65 22 3a 20 22 76 69 65 77 Data Ascii: "related": "https://www.virustotal.com/ui/graphs/gdeee240bf0b74014b5558e8de353b9d9cd190ae0c60a416c83aba433b0c00143/owner"}, "meta": {"count": 1}, "data": {"type": "user", "id": "ronon_dex"}}}, "context_attributes": {"shared_with_me": false, "role": "view
2024-11-21 02:42:32 UTC	486	IN	Data Raw: 6e 73 68 69 70 73 22 3a 20 7b 22 6f 77 6e 65 72 22 3a 20 7b 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 67 72 61 70 68 73 2f 67 35 63 33 63 31 64 37 31 35 66 63 36 34 38 38 30 38 63 62 61 61 65 35 62 63 32 63 35 38 39 32 63 65 39 32 62 31 39 37 37 35 64 35 66 34 39 63 37 39 32 37 63 65 63 38 36 66 66 33 36 33 61 37 34 2f 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 2f 6f 77 6e 65 72 22 2c 20 22 72 65 6c 61 74 65 64 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 67 72 61 70 68 73 2f 67 35 63 33 63 31 64 37 31 35 66 63 36 34 38 38 30 38 63 62 61 61 65 35 62 63 32 63 35 38 39 32 63 65 39 32 62 31 39 37 37 35 Data Ascii: nships": {"owner": {"links": {"self": "https://www.virustotal.com/ui/graphs/g5c3c1d715fc648808cbaae5bc2c5892ce92b19775d5f49c7927cec86ff363a74/relationships/owner", "related": "https://www.virustotal.com/ui/graphs/g5c3c1d715fc648808cbaae5bc2c5892ce92b19775
2024-11-21 02:42:32 UTC	905	IN	Data Raw: 64 62 63 64 38 39 39 30 66 30 35 22 2c 20 22 74 79 70 65 22 3a 20 22 67 72 61 70 68 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 67 72 61 70 68 73 2f 67 38 61 34 34 39 30 62 38 65 35 30 36 34 36 63 33 62 62 31 34 38 34 36 62 35 33 36 34 62 33 62 36 32 33 38 36 35 38 65 31 36 63 39 63 34 38 34 34 62 66 30 35 38 64 62 63 64 38 39 39 30 66 30 35 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 70 72 69 76 61 74 65 22 3a 20 66 61 6c 73 65 2c 20 22 67 72 61 70 68 5f 64 61 74 61 22 3a 20 7b 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 20 22 61 72 74 64 69 74 65 6d 65 6e 74 2e 69 6e 66 6f 22 2c 20 22 76 65 72 73 69 6f 6e 22 3a 20 22 35 2e 30 2e Data Ascii: dbcd8990f05", "type": "graph", "links": {"self": "https://www.virustotal.com/ui/graphs/g8a4490b8e50646c3bb14846b5364b3b6238658e16c9c4844bf058dbcd8990f05"}, "attributes": {"private": false, "graph_data": {"description": "artditement.info", "version": "5.0.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49903	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:31 UTC	518	OUT	GET /ui/domains/ghabovethec.info/associations HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:32 UTC	225	IN	HTTP/1.1 429 Too Many Requests Content-Type: application/json X-Cloud-Trace-Context: 4ab13c5cab88f03eba73c3f42de31974 Date: Thu, 21 Nov 2024 02:42:32 GMT Server: Google Frontend Content-Length: 153 Connection: close
2024-11-21 02:42:32 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49904	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:32 UTC	1051	OUT	GET /ui/domains/ghabovethec.info/resolutions?limit=10&cursor=ClsKEQoEZGF0ZRIJCMyu1OT0vYkDEkJqEXN-dmlydXN0b3RhbGNsb3Vkci0LEgpSZXNvbHV0aW9uIh0xOC4xNTQuMTMyLjM4Z2hhYm92ZXRoZWMuaW5mbwwYACAB HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x319x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTUzNDc4MzU4MDUtWkc5dWRDQmlaU0JsZG1scy0xNzMyMTU2OTQ3LjcxNg== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:33 UTC	881	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: 767de8f9f8f7c55d38c64d3bc2ae2894 Date: Thu, 21 Nov 2024 02:42:32 GMT Server: Google Frontend Content-Length: 5725 Expires: Thu, 21 Nov 2024 02:42:32 GMT Cache-Control: private Connection: close
2024-11-21 02:42:33 UTC	527	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 5b 7b 22 69 64 22 3a 20 22 31 38 2e 31 35 34 2e 31 33 32 2e 37 39 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 22 2c 20 22 74 79 70 65 22 3a 20 22 72 65 73 6f 6c 75 74 69 6f 6e 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 72 65 73 6f 6c 75 74 69 6f 6e 73 2f 31 38 2e 31 35 34 2e 31 33 32 2e 37 39 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 68 6f 73 74 5f 6e 61 6d 65 22 3a 20 22 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 22 2c 20 22 68 6f 73 74 5f 6e 61 6d 65 5f 6c 61 73 74 5f 61 6e 61 6c 79 73 69 73 5f 73 74 61 74 73 22 3a 20 7b 22 6d 61 6c 69 63 69 Data Ascii: {"data": [{"id": "18.154.132.79ghabovethec.info", "type": "resolution", "links": {"self": "https://www.virustotal.com/ui/resolutions/18.154.132.79ghabovethec.info"}, "attributes": {"host_name": "ghabovethec.info", "host_name_last_analysis_stats": {"malici
2024-11-21 02:42:33 UTC	1408	IN	Data Raw: 69 64 22 3a 20 22 31 38 2e 31 35 34 2e 31 33 32 2e 31 32 30 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 22 2c 20 22 74 79 70 65 22 3a 20 22 72 65 73 6f 6c 75 74 69 6f 6e 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 72 65 73 6f 6c 75 74 69 6f 6e 73 2f 31 38 2e 31 35 34 2e 31 33 32 2e 31 32 30 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 68 6f 73 74 5f 6e 61 6d 65 22 3a 20 22 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 22 2c 20 22 68 6f 73 74 5f 6e 61 6d 65 5f 6c 61 73 74 5f 61 6e 61 6c 79 73 69 73 5f 73 74 61 74 73 22 3a 20 7b 22 6d 61 6c 69 63 69 6f 75 73 22 3a 20 30 2c 20 22 Data Ascii: id": "18.154.132.120ghabovethec.info", "type": "resolution", "links": {"self": "https://www.virustotal.com/ui/resolutions/18.154.132.120ghabovethec.info"}, "attributes": {"host_name": "ghabovethec.info", "host_name_last_analysis_stats": {"malicious": 0, "
2024-11-21 02:42:33 UTC	486	IN	Data Raw: 73 5f 73 74 61 74 73 22 3a 20 7b 22 6d 61 6c 69 63 69 6f 75 73 22 3a 20 30 2c 20 22 73 75 73 70 69 63 69 6f 75 73 22 3a 20 30 2c 20 22 75 6e 64 65 74 65 63 74 65 64 22 3a 20 33 32 2c 20 22 68 61 72 6d 6c 65 73 73 22 3a 20 36 32 2c 20 22 74 69 6d 65 6f 75 74 22 3a 20 30 7d 2c 20 22 69 70 5f 61 64 64 72 65 73 73 22 3a 20 22 33 2e 31 36 35 2e 32 30 36 2e 38 22 7d 7d 2c 20 7b 22 69 64 22 3a 20 22 33 2e 31 36 35 2e 32 30 36 2e 33 30 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 22 2c 20 22 74 79 70 65 22 3a 20 22 72 65 73 6f 6c 75 74 69 6f 6e 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 72 65 73 6f 6c 75 74 69 6f 6e 73 2f 33 2e 31 36 35 2e 32 30 36 Data Ascii: s_stats": {"malicious": 0, "suspicious": 0, "undetected": 32, "harmless": 62, "timeout": 0}, "ip_address": "3.165.206.8"}}, {"id": "3.165.206.30ghabovethec.info", "type": "resolution", "links": {"self": "https://www.virustotal.com/ui/resolutions/3.165.206
2024-11-21 02:42:33 UTC	1408	IN	Data Raw: 70 5f 61 64 64 72 65 73 73 5f 6c 61 73 74 5f 61 6e 61 6c 79 73 69 73 5f 73 74 61 74 73 22 3a 20 7b 22 6d 61 6c 69 63 69 6f 75 73 22 3a 20 30 2c 20 22 73 75 73 70 69 63 69 6f 75 73 22 3a 20 30 2c 20 22 75 6e 64 65 74 65 63 74 65 64 22 3a 20 33 32 2c 20 22 68 61 72 6d 6c 65 73 73 22 3a 20 36 32 2c 20 22 74 69 6d 65 6f 75 74 22 3a 20 30 7d 2c 20 22 69 70 5f 61 64 64 72 65 73 73 22 3a 20 22 33 2e 31 36 35 2e 32 30 36 2e 33 30 22 7d 7d 2c 20 7b 22 69 64 22 3a 20 22 33 2e 31 36 35 2e 32 30 36 2e 31 30 37 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 22 2c 20 22 74 79 70 65 22 3a 20 22 72 65 73 6f 6c 75 74 69 6f 6e 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f Data Ascii: p_address_last_analysis_stats": {"malicious": 0, "suspicious": 0, "undetected": 32, "harmless": 62, "timeout": 0}, "ip_address": "3.165.206.30"}}, {"id": "3.165.206.107ghabovethec.info", "type": "resolution", "links": {"self": "https://www.virustotal.com/
2024-11-21 02:42:33 UTC	1408	IN	Data Raw: 6f 75 73 22 3a 20 30 2c 20 22 73 75 73 70 69 63 69 6f 75 73 22 3a 20 30 2c 20 22 75 6e 64 65 74 65 63 74 65 64 22 3a 20 33 31 2c 20 22 68 61 72 6d 6c 65 73 73 22 3a 20 36 33 2c 20 22 74 69 6d 65 6f 75 74 22 3a 20 30 7d 2c 20 22 72 65 73 6f 6c 76 65 72 22 3a 20 22 5a 65 6e 62 6f 78 22 2c 20 22 64 61 74 65 22 3a 20 31 37 32 38 39 35 33 32 36 33 2c 20 22 69 70 5f 61 64 64 72 65 73 73 5f 6c 61 73 74 5f 61 6e 61 6c 79 73 69 73 5f 73 74 61 74 73 22 3a 20 7b 22 6d 61 6c 69 63 69 6f 75 73 22 3a 20 30 2c 20 22 73 75 73 70 69 63 69 6f 75 73 22 3a 20 30 2c 20 22 75 6e 64 65 74 65 63 74 65 64 22 3a 20 33 33 2c 20 22 68 61 72 6d 6c 65 73 73 22 3a 20 36 31 2c 20 22 74 69 6d 65 6f 75 74 22 3a 20 30 7d 2c 20 22 69 70 5f 61 64 64 72 65 73 73 22 3a 20 22 33 2e 31 36 34 2e Data Ascii: ous": 0, "suspicious": 0, "undetected": 31, "harmless": 63, "timeout": 0}, "resolver": "Zenbox", "date": 1728953263, "ip_address_last_analysis_stats": {"malicious": 0, "suspicious": 0, "undetected": 33, "harmless": 61, "timeout": 0}, "ip_address": "3.164.
2024-11-21 02:42:33 UTC	488	IN	Data Raw: 41 75 4f 44 4e 6e 61 47 46 69 62 33 5a 6c 64 47 68 6c 59 79 35 70 62 6d 5a 76 44 42 67 41 49 41 45 3d 22 7d 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 64 6f 6d 61 69 6e 73 2f 67 68 61 62 6f 76 65 74 68 65 63 2e 69 6e 66 6f 2f 72 65 73 6f 6c 75 74 69 6f 6e 73 3f 63 75 72 73 6f 72 3d 43 6c 73 4b 45 51 6f 45 5a 47 46 30 5a 52 49 4a 43 4d 79 75 31 4f 54 30 76 59 6b 44 45 6b 4a 71 45 58 4e 2d 64 6d 6c 79 64 58 4e 30 62 33 52 68 62 47 4e 73 62 33 56 6b 63 69 30 4c 45 67 70 53 5a 58 4e 76 62 48 56 30 61 57 39 75 49 68 30 78 4f 43 34 78 4e 54 51 75 4d 54 4d 79 4c 6a 4d 34 5a 32 68 68 59 6d 39 32 5a 58 52 6f 5a 57 4d 75 61 57 35 6d 62 77 77 59 41 43 41 42 Data Ascii: AuODNnaGFib3ZldGhlYy5pbmZvDBgAIAE="}, "links": {"self": "https://www.virustotal.com/ui/domains/ghabovethec.info/resolutions?cursor=ClsKEQoEZGF0ZRIJCMyu1OT0vYkDEkJqEXN-dmlydXN0b3RhbGNsb3Vkci0LEgpSZXNvbHV0aW9uIh0xOC4xNTQuMTMyLjM4Z2hhYm92ZXRoZWMuaW5mbwwYACAB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49905	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:32 UTC	1042	OUT	GET /ui/domains/ghabovethec.info/referrer_files?limit=10&cursor=MTB8fHYzfHwxNzMyMTU2OTQ4fHw1Y2NkYjc2MmU2YzExMmNhYzI1YWI5NzdhMzliZjNmMzU4NTVmOTVjZGFlZjg3NDY4NzRjN2M1MGNlMDcyYTY3 HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x319x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTMzNTU0OTAxOTEtWkc5dWRDQmlaU0JsZG1scy0xNzMyMTU2OTQ4LjI2Nw== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:32 UTC	883	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: 71dee15951b38c030b64cb3cebf362d8 Date: Thu, 21 Nov 2024 02:42:32 GMT Server: Google Frontend Content-Length: 171656 Expires: Thu, 21 Nov 2024 02:42:32 GMT Cache-Control: private Connection: close
2024-11-21 02:42:32 UTC	525	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 5b 7b 22 69 64 22 3a 20 22 30 31 30 63 34 34 38 66 33 37 66 35 63 64 38 30 31 34 66 32 31 37 38 30 30 37 61 37 62 37 38 64 65 64 66 65 66 62 34 31 31 33 34 37 37 63 66 63 65 62 64 34 32 37 64 64 61 66 65 32 36 38 36 64 22 2c 20 22 74 79 70 65 22 3a 20 22 66 69 6c 65 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 66 69 6c 65 73 2f 30 31 30 63 34 34 38 66 33 37 66 35 63 64 38 30 31 34 66 32 31 37 38 30 30 37 61 37 62 37 38 64 65 64 66 65 66 62 34 31 31 33 34 37 37 63 66 63 65 62 64 34 32 37 64 64 61 66 65 32 36 38 36 64 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 73 69 7a 65 22 3a 20 37 38 38 35 37 33 2c 20 Data Ascii: {"data": [{"id": "010c448f37f5cd8014f2178007a7b78dedfefb4113477cfcebd427ddafe2686d", "type": "file", "links": {"self": "https://www.virustotal.com/ui/files/010c448f37f5cd8014f2178007a7b78dedfefb4113477cfcebd427ddafe2686d"}, "attributes": {"size": 788573,
2024-11-21 02:42:32 UTC	1408	IN	Data Raw: 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 34 30 39 31 34 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 6e 75 6c 6c 7d 2c 20 22 74 65 68 74 72 69 73 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 74 65 68 74 72 69 73 22 2c 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 6e 75 6c 6c 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 34 30 39 31 35 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 6e 75 6c 6c 7d 2c 20 22 43 6c 61 6d 41 56 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 Data Ascii: gine_update": "20240914", "category": "undetected", "result": null}, "tehtris": {"method": "blacklist", "engine_name": "tehtris", "engine_version": null, "engine_update": "20240915", "category": "undetected", "result": null}, "ClamAV": {"method": "blackli
2024-11-21 02:42:32 UTC	483	IN	Data Raw: 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 53 61 6e 67 66 6f 72 22 2c 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 32 2e 32 35 2e 31 30 2e 30 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 34 30 39 31 32 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 6e 75 6c 6c 7d 2c 20 22 4b 37 41 6e 74 69 56 69 72 75 73 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 4b 37 41 6e 74 69 56 69 72 75 73 22 2c 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 31 32 2e 31 38 38 2e 35 33 32 36 36 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a Data Ascii: list", "engine_name": "Sangfor", "engine_version": "2.25.10.0", "engine_update": "20240912", "category": "undetected", "result": null}, "K7AntiVirus": {"method": "blacklist", "engine_name": "K7AntiVirus", "engine_version": "12.188.53266", "engine_update":
2024-11-21 02:42:32 UTC	1408	IN	Data Raw: 65 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 43 72 6f 77 64 53 74 72 69 6b 65 22 2c 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 31 2e 30 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 33 30 34 31 37 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 6e 75 6c 6c 7d 2c 20 22 41 72 63 61 62 69 74 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 41 72 63 61 62 69 74 22 2c 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 32 30 32 32 2e 30 2e 30 2e 31 38 22 2c 20 22 65 6e 67 69 6e Data Ascii: e": {"method": "blacklist", "engine_name": "CrowdStrike", "engine_version": "1.0", "engine_update": "20230417", "category": "undetected", "result": null}, "Arcabit": {"method": "blacklist", "engine_name": "Arcabit", "engine_version": "2022.0.0.18", "engin
2024-11-21 02:42:32 UTC	1408	IN	Data Raw: 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 32 33 2e 39 2e 38 34 39 34 2e 30 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 34 30 39 31 35 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 6e 75 6c 6c 7d 2c 20 22 43 79 6e 65 74 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 43 79 6e 65 74 22 2c 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 34 2e 30 2e 31 2e 31 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 34 30 39 31 35 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 6e 75 6c 6c Data Ascii: ne_version": "23.9.8494.0", "engine_update": "20240915", "category": "undetected", "result": null}, "Cynet": {"method": "blacklist", "engine_name": "Cynet", "engine_version": "4.0.1.1", "engine_update": "20240915", "category": "undetected", "result": null
2024-11-21 02:42:32 UTC	1280	IN	Data Raw: 34 2e 31 2e 30 2e 35 33 37 35 32 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 34 30 39 31 35 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 6e 75 6c 6c 7d 2c 20 22 46 2d 53 65 63 75 72 65 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 46 2d 53 65 63 75 72 65 22 2c 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 31 38 2e 31 30 2e 31 35 34 37 2e 33 30 37 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 34 30 39 31 35 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 6e 75 6c 6c 7d Data Ascii: 4.1.0.53752", "engine_update": "20240915", "category": "undetected", "result": null}, "F-Secure": {"method": "blacklist", "engine_name": "F-Secure", "engine_version": "18.10.1547.307", "engine_update": "20240915", "category": "undetected", "result": null}
2024-11-21 02:42:32 UTC	1408	IN	Data Raw: 69 72 65 45 79 65 22 2c 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 33 35 2e 34 37 2e 30 2e 30 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 34 30 39 31 35 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 6e 75 6c 6c 7d 2c 20 22 4a 69 61 6e 67 6d 69 6e 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 4a 69 61 6e 67 6d 69 6e 22 2c 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 31 36 2e 30 2e 31 30 30 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 34 30 39 31 34 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 Data Ascii: ireEye", "engine_version": "35.47.0.0", "engine_update": "20240915", "category": "undetected", "result": null}, "Jiangmin": {"method": "blacklist", "engine_name": "Jiangmin", "engine_version": "16.0.100", "engine_update": "20240914", "category": "undetect
2024-11-21 02:42:32 UTC	1408	IN	Data Raw: 75 6c 74 22 3a 20 6e 75 6c 6c 7d 2c 20 22 56 69 52 6f 62 6f 74 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 56 69 52 6f 62 6f 74 22 2c 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 32 30 31 34 2e 33 2e 32 30 2e 30 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 34 30 39 31 34 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 6e 75 6c 6c 7d 2c 20 22 5a 6f 6e 65 41 6c 61 72 6d 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 5a 6f 6e 65 41 6c 61 72 6d 22 2c 20 22 65 6e 67 69 6e 65 5f 76 65 72 Data Ascii: ult": null}, "ViRobot": {"method": "blacklist", "engine_name": "ViRobot", "engine_version": "2014.3.20.0", "engine_update": "20240914", "category": "undetected", "result": null}, "ZoneAlarm": {"method": "blacklist", "engine_name": "ZoneAlarm", "engine_ver
2024-11-21 02:42:32 UTC	1280	IN	Data Raw: 73 69 6f 6e 22 3a 20 22 35 2e 30 2e 30 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 34 30 39 31 33 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 6e 75 6c 6c 7d 2c 20 22 5a 6f 6e 65 72 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 5a 6f 6e 65 72 22 2c 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 32 2e 32 2e 32 2e 30 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 34 30 39 31 35 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 6e 75 6c 6c 7d 2c 20 22 52 69 73 69 6e 67 22 3a Data Ascii: sion": "5.0.0", "engine_update": "20240913", "category": "undetected", "result": null}, "Zoner": {"method": "blacklist", "engine_name": "Zoner", "engine_version": "2.2.2.0", "engine_update": "20240915", "category": "undetected", "result": null}, "Rising":
2024-11-21 02:42:32 UTC	1408	IN	Data Raw: 2c 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 34 2e 36 2e 34 2e 32 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 34 30 39 31 34 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 6e 75 6c 6c 7d 2c 20 22 61 6c 69 62 61 62 61 63 6c 6f 75 64 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 61 6c 69 62 61 62 61 63 6c 6f 75 64 22 2c 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 32 2e 32 2e 30 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 34 30 39 31 30 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c Data Ascii: , "engine_version": "4.6.4.2", "engine_update": "20240914", "category": "undetected", "result": null}, "alibabacloud": {"method": "blacklist", "engine_name": "alibabacloud", "engine_version": "2.2.0", "engine_update": "20240910", "category": "undetected",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49906	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:32 UTC	506	OUT	GET /ui/ip_addresses/3.167.163.46 HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:32 UTC	225	IN	HTTP/1.1 429 Too Many Requests Content-Type: application/json X-Cloud-Trace-Context: 67370e1b1578931adb97f240c5a98a8b Date: Thu, 21 Nov 2024 02:42:32 GMT Server: Google Frontend Content-Length: 153 Connection: close
2024-11-21 02:42:32 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49907	216.58.206.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:32 UTC	478	OUT	GET /cse.js?cx=003414466004237966221:dgg7iftvryo HTTP/1.1 Host: cse.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:33 UTC	1154	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-8lhL4g2dc64mxF3yWC9nGA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Thu, 21 Nov 2024 02:42:33 GMT Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:33 UTC	236	IN	Data Raw: 32 33 30 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 6f 70 74 73 5f 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 67 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 68 3b 66 75 6e 63 74 69 6f 6e 20 6b 28 61 2c 62 29 7b 74 68 69 73 2e 68 3d 61 3d 3d 3d 6c 26 26 62 7c 7c 22 22 3b 74 68 69 73 2e 67 3d 6d 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 Data Ascii: 230c(function(opts_){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/'use strict';var f=this\|\|self;function g(a){return a};var h;function k(a,b){this.h=a===l&&b\|\|"";this.g=m}function n(a){return a i
2024-11-21 02:42:33 UTC	1390	IN	Data Raw: 6e 73 74 61 6e 63 65 6f 66 20 6b 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 6b 26 26 61 2e 67 3d 3d 3d 6d 3f 61 2e 68 3a 22 74 79 70 65 5f 65 72 72 6f 72 3a 43 6f 6e 73 74 22 7d 76 61 72 20 6d 3d 7b 7d 2c 6c 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 70 28 61 2c 62 29 7b 74 68 69 73 2e 68 3d 62 3d 3d 3d 71 3f 61 3a 22 22 7d 70 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 2b 22 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 70 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 70 3f 61 2e 68 3a 22 74 79 70 65 5f 65 72 72 6f 72 3a 54 72 75 73 74 65 64 52 65 73 6f 75 72 63 65 55 72 6c 22 7d 0a 66 75 Data Ascii: nstanceof k&&a.constructor===k&&a.g===m?a.h:"type_error:Const"}var m={},l={};function p(a,b){this.h=b===q?a:""}p.prototype.toString=function(){return this.h+""};function r(a){return a instanceof p&&a.constructor===p?a.h:"type_error:TrustedResourceUrl"}fu
2024-11-21 02:42:33 UTC	1390	IN	Data Raw: 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 44 3d 65 5b 74 5d 3b 6e 75 6c 6c 21 3d 44 26 26 28 62 7c 7c 28 62 3d 61 29 2c 62 2b 3d 28 62 2e 6c 65 6e 67 74 68 3e 61 2e 6c 65 6e 67 74 68 3f 22 26 22 3a 22 22 29 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 53 74 72 69 6e 67 28 44 29 29 29 7d 7d 72 65 74 75 72 6e 20 62 7d 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 74 68 69 73 2e 67 3d 62 3d 3d 3d 46 3f 61 3a 22 22 7d 45 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 76 61 72 20 46 3d 7b 7d 3b 2f 2a 0a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 Data Ascii: gth;t++){var D=e[t];null!=D&&(b\|\|(b=a),b+=(b.length>a.length?"&":"")+encodeURIComponent(d)+"="+encodeURIComponent(String(D)))}}return b};function E(a,b){this.g=b===F?a:""}E.prototype.toString=function(){return this.g.toString()};var F={};/* SPDX-License
2024-11-21 02:42:33 UTC	1390	IN	Data Raw: 61 5d 3b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 61 3f 6e 75 6c 6c 3a 61 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 29 7b 76 61 72 20 61 3b 72 65 74 75 72 6e 21 28 6e 75 6c 6c 3d 3d 28 61 3d 77 69 6e 64 6f 77 2e 5f 5f 67 63 73 65 29 3f 30 3a 61 2e 70 6c 61 69 6e 53 74 79 6c 65 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 4f 28 61 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 6e 6b 22 29 3b 62 2e 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3b 61 3a 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 70 29 62 2e 68 72 65 66 3d 72 28 61 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 65 6c 73 65 7b 69 66 28 2d 31 3d 3d 3d 49 2e 69 6e 64 65 78 4f 66 28 22 73 74 79 6c 65 73 68 65 65 74 22 29 Data Ascii: a];return"function"!==typeof a?null:a}function M(){var a;return!(null==(a=window.__gcse)?0:a.plainStyle)}function O(a){var b=document.createElement("link");b.type="text/css";a:{if(a instanceof p)b.href=r(a).toString();else{if(-1===I.indexOf("stylesheet")
2024-11-21 02:42:33 UTC	1390	IN	Data Raw: 76 65 72 73 69 6f 6e 53 6c 61 73 68 3a 4c 2c 65 78 70 65 72 69 6d 65 6e 74 3a 6f 70 74 73 5f 2e 75 69 4f 70 74 69 6f 6e 73 2e 63 73 73 54 68 65 6d 65 56 65 72 73 69 6f 6e 26 26 34 21 3d 3d 6f 70 74 73 5f 2e 75 69 4f 70 74 69 6f 6e 73 2e 63 73 73 54 68 65 6d 65 56 65 72 73 69 6f 6e 3f 22 5f 76 22 2b 6f 70 74 73 5f 2e 75 69 4f 70 74 69 6f 6e 73 2e 63 73 73 54 68 65 6d 65 56 65 72 73 69 6f 6e 3a 22 22 2c 6c 61 6e 67 3a 6f 70 74 73 5f 2e 6c 61 6e 67 75 61 67 65 7d 29 3a 75 28 4b 2c 7b 76 65 72 73 69 6f 6e 44 69 72 3a 22 22 2c 76 65 72 73 69 6f 6e 53 6c 61 73 68 3a 22 22 2c 65 78 70 65 72 69 6d 65 6e 74 3a 22 22 2c 6c 61 6e 67 3a 6f 70 74 73 5f 2e 6c 61 6e 67 75 61 67 65 7d 29 29 29 3b 76 61 72 20 58 2c 59 3d 22 76 22 2b 28 6f 70 74 73 5f 2e 75 69 4f 70 74 69 Data Ascii: versionSlash:L,experiment:opts_.uiOptions.cssThemeVersion&&4!==opts_.uiOptions.cssThemeVersion?"_v"+opts_.uiOptions.cssThemeVersion:"",lang:opts_.language}):u(K,{versionDir:"",versionSlash:"",experiment:"",lang:opts_.language})));var X,Y="v"+(opts_.uiOpti
2024-11-21 02:42:33 UTC	1390	IN	Data Raw: 6f 78 2d 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 44 46 45 31 45 35 7d 2e 67 73 63 2d 73 65 61 72 63 68 2d 62 75 74 74 6f 6e 2d 76 32 2c 2e 67 73 63 2d 73 65 61 72 63 68 2d 62 75 74 74 6f 6e 2d 76 32 3a 68 6f 76 65 72 2c 2e 67 73 63 2d 73 65 61 72 63 68 2d 62 75 74 74 6f 6e 2d 76 32 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 33 30 37 39 45 44 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 44 39 30 46 45 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 3b 66 69 6c 74 65 72 3a 6e 6f 6e 65 7d 2e 67 73 63 2d 73 65 61 72 63 68 2d 62 75 74 74 6f 6e 2d 76 32 20 73 76 67 7b 66 69 6c 6c 3a 23 46 46 46 46 46 46 7d 2e 67 73 63 2d 74 61 62 48 65 61 64 65 72 2e 67 73 63 2d 74 61 62 68 41 63 74 69 76 Data Ascii: ox-focus{border-color:#DFE1E5}.gsc-search-button-v2,.gsc-search-button-v2:hover,.gsc-search-button-v2:focus{border-color:#3079ED;background-color:#4D90FE;background-image:none;filter:none}.gsc-search-button-v2 svg{fill:#FFFFFF}.gsc-tabHeader.gsc-tabhActiv
2024-11-21 02:42:33 UTC	1390	IN	Data Raw: 61 69 6c 69 6e 67 2d 6d 6f 72 65 2d 72 65 73 75 6c 74 73 3a 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 34 44 34 44 34 44 7d 2e 67 73 2d 77 65 62 52 65 73 75 6c 74 3a 6e 6f 74 28 2e 67 73 2d 6e 6f 2d 72 65 73 75 6c 74 73 2d 72 65 73 75 6c 74 29 3a 6e 6f 74 28 2e 67 73 2d 65 72 72 6f 72 2d 72 65 73 75 6c 74 29 20 2e 67 73 2d 73 6e 69 70 70 65 74 2c 2e 67 73 2d 66 69 6c 65 46 6f 72 6d 61 74 54 79 70 65 7b 63 6f 6c 6f 72 3a 23 34 44 34 44 34 44 7d 2e 67 73 2d 77 65 62 52 65 73 75 6c 74 20 64 69 76 2e 67 73 2d 76 69 73 69 62 6c 65 55 72 6c 7b 63 6f 6c 6f 72 3a 23 34 44 34 44 34 44 7d 2e 67 73 2d 77 65 62 52 65 73 75 6c 74 20 64 69 76 2e 67 73 2d 76 69 73 69 62 6c 65 55 72 6c 2d 73 68 6f 72 74 7b 63 6f 6c 6f 72 3a 23 34 44 34 44 34 44 7d 2e 67 73 2d 77 65 62 52 65 73 Data Ascii: ailing-more-results:link{color:#4D4D4D}.gs-webResult:not(.gs-no-results-result):not(.gs-error-result) .gs-snippet,.gs-fileFormatType{color:#4D4D4D}.gs-webResult div.gs-visibleUrl{color:#4D4D4D}.gs-webResult div.gs-visibleUrl-short{color:#4D4D4D}.gs-webRes
2024-11-21 02:42:33 UTC	404	IN	Data Raw: 74 6c 65 2d 72 69 67 68 74 20 2a 7b 63 6f 6c 6f 72 3a 23 33 33 33 33 33 33 7d 2e 67 73 2d 70 72 6f 6d 6f 74 69 6f 6e 20 2e 67 73 2d 76 69 73 69 62 6c 65 55 72 6c 2c 2e 67 73 2d 70 72 6f 6d 6f 74 69 6f 6e 20 2e 67 73 2d 76 69 73 69 62 6c 65 55 72 6c 2d 73 68 6f 72 74 7b 63 6f 6c 6f 72 3a 23 30 30 39 39 33 33 7d 2e 67 63 73 63 2d 66 69 6e 64 2d 6d 6f 72 65 2d 6f 6e 2d 67 6f 6f 67 6c 65 7b 63 6f 6c 6f 72 3a 23 34 44 34 44 34 44 7d 2e 67 63 73 63 2d 66 69 6e 64 2d 6d 6f 72 65 2d 6f 6e 2d 67 6f 6f 67 6c 65 2d 6d 61 67 6e 69 66 69 65 72 7b 66 69 6c 6c 3a 23 34 44 34 44 34 44 7d 22 2c 0a 20 20 22 63 73 65 5f 74 6f 6b 65 6e 22 3a 20 22 41 42 2d 74 43 5f 36 62 6e 73 46 67 6d 42 52 62 42 48 64 6e 6a 49 4c 77 34 4f 34 38 3a 31 37 33 32 31 35 36 39 35 33 31 38 30 22 Data Ascii: tle-right *{color:#333333}.gs-promotion .gs-visibleUrl,.gs-promotion .gs-visibleUrl-short{color:#009933}.gcsc-find-more-on-google{color:#4D4D4D}.gcsc-find-more-on-google-magnifier{fill:#4D4D4D}", "cse_token": "AB-tC_6bnsFgmBRbBHdnjILw4O48:1732156953180"
2024-11-21 02:42:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49911	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:32 UTC	971	OUT	GET /ui/domains/ghabovethec.info/communicating_files?limit=10&cursor=eyJsaW1pdCI6IDEwLCAib2Zmc2V0IjogMTB9 HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x319x0 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTkxNjg1NjY3MjUtWkc5dWRDQmlaU0JsZG1scy0xNzMyMTU2OTUwLjc1Ng== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:33 UTC	883	IN	HTTP/1.1 200 OK Content-Type: application/json Vary: Accept-Encoding Set-Cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ Set-Cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ X-Cloud-Trace-Context: 1ee156385155c11e4ff51976af701836 Date: Thu, 21 Nov 2024 02:42:33 GMT Server: Google Frontend Content-Length: 193546 Expires: Thu, 21 Nov 2024 02:42:33 GMT Cache-Control: private Connection: close
2024-11-21 02:42:33 UTC	525	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 5b 7b 22 69 64 22 3a 20 22 30 33 33 39 66 34 62 65 62 64 34 61 64 32 62 65 34 30 61 35 38 31 31 62 36 66 31 65 61 61 65 35 63 32 35 64 36 30 66 32 66 66 66 39 63 38 61 38 31 65 33 66 34 34 66 35 35 35 63 36 39 31 66 39 22 2c 20 22 74 79 70 65 22 3a 20 22 66 69 6c 65 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 66 69 6c 65 73 2f 30 33 33 39 66 34 62 65 62 64 34 61 64 32 62 65 34 30 61 35 38 31 31 62 36 66 31 65 61 61 65 35 63 32 35 64 36 30 66 32 66 66 66 39 63 38 61 38 31 65 33 66 34 34 66 35 35 35 63 36 39 31 66 39 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 63 72 65 61 74 69 6f 6e 5f 64 61 74 65 22 3a Data Ascii: {"data": [{"id": "0339f4bebd4ad2be40a5811b6f1eaae5c25d60f2fff9c8a81e3f44f555c691f9", "type": "file", "links": {"self": "https://www.virustotal.com/ui/files/0339f4bebd4ad2be40a5811b6f1eaae5c25d60f2fff9c8a81e3f44f555c691f9"}, "attributes": {"creation_date":
2024-11-21 02:42:33 UTC	1408	IN	Data Raw: 31 66 35 61 37 34 34 22 2c 20 22 6d 61 63 68 69 6e 65 5f 74 79 70 65 22 3a 20 33 33 32 2c 20 22 65 6e 74 72 79 5f 70 6f 69 6e 74 22 3a 20 35 33 38 32 31 32 36 2c 20 22 72 65 73 6f 75 72 63 65 5f 64 65 74 61 69 6c 73 22 3a 20 5b 7b 22 6c 61 6e 67 22 3a 20 22 4e 45 55 54 52 41 4c 22 2c 20 22 63 68 69 32 22 3a 20 38 32 35 39 39 2e 33 36 2c 20 22 66 69 6c 65 74 79 70 65 22 3a 20 22 75 6e 6b 6e 6f 77 6e 22 2c 20 22 65 6e 74 72 6f 70 79 22 3a 20 32 2e 38 31 35 34 37 37 31 33 32 37 39 37 32 34 31 2c 20 22 73 68 61 32 35 36 22 3a 20 22 35 36 66 35 62 65 61 34 65 39 34 61 62 64 66 64 35 39 61 63 30 65 30 63 39 38 37 61 38 63 34 33 66 38 61 30 30 37 61 37 35 37 66 32 64 39 31 65 33 66 37 36 61 64 30 33 37 34 35 31 66 32 34 63 22 2c 20 22 74 79 70 65 22 3a 20 22 52 Data Ascii: 1f5a744", "machine_type": 332, "entry_point": 5382126, "resource_details": [{"lang": "NEUTRAL", "chi2": 82599.36, "filetype": "unknown", "entropy": 2.815477132797241, "sha256": "56f5bea4e94abdfd59ac0e0c987a8c43f8a007a757f2d91e3f76ad037451f24c", "type": "R
2024-11-21 02:42:33 UTC	486	IN	Data Raw: 7d 2c 20 7b 22 6c 61 6e 67 22 3a 20 22 4e 45 55 54 52 41 4c 22 2c 20 22 63 68 69 32 22 3a 20 33 39 38 34 32 2e 37 2c 20 22 66 69 6c 65 74 79 70 65 22 3a 20 22 75 6e 6b 6e 6f 77 6e 22 2c 20 22 65 6e 74 72 6f 70 79 22 3a 20 35 2e 32 32 37 34 34 35 31 32 35 35 37 39 38 33 34 2c 20 22 73 68 61 32 35 36 22 3a 20 22 61 35 61 30 34 33 30 65 30 66 39 38 31 65 61 61 36 61 33 37 64 38 36 33 39 31 33 36 64 63 37 38 35 63 33 38 33 65 61 31 32 39 39 30 61 61 39 34 37 61 64 64 30 62 62 32 37 62 37 64 64 33 31 37 22 2c 20 22 74 79 70 65 22 3a 20 22 52 54 5f 4d 41 4e 49 46 45 53 54 22 7d 5d 2c 20 22 72 65 73 6f 75 72 63 65 5f 6c 61 6e 67 73 22 3a 20 7b 22 4e 45 55 54 52 41 4c 22 3a 20 38 7d 2c 20 22 72 65 73 6f 75 72 63 65 5f 74 79 70 65 73 22 3a 20 7b 22 52 54 5f 49 43 Data Ascii: }, {"lang": "NEUTRAL", "chi2": 39842.7, "filetype": "unknown", "entropy": 5.227445125579834, "sha256": "a5a0430e0f981eaa6a37d8639136dc785c383ea12990aa947add0bb27b7dd317", "type": "RT_MANIFEST"}], "resource_langs": {"NEUTRAL": 8}, "resource_types": {"RT_IC
2024-11-21 02:42:33 UTC	1408	IN	Data Raw: 33 34 62 31 39 65 63 33 63 32 66 32 61 32 31 35 64 37 65 65 38 31 38 64 30 22 7d 2c 20 7b 22 6e 61 6d 65 22 3a 20 22 2e 72 73 72 63 22 2c 20 22 63 68 69 32 22 3a 20 33 38 36 33 35 34 38 38 2e 30 2c 20 22 76 69 72 74 75 61 6c 5f 61 64 64 72 65 73 73 22 3a 20 35 33 38 32 31 34 34 2c 20 22 65 6e 74 72 6f 70 79 22 3a 20 31 2e 32 37 2c 20 22 72 61 77 5f 73 69 7a 65 22 3a 20 32 32 32 37 32 30 2c 20 22 66 6c 61 67 73 22 3a 20 22 72 22 2c 20 22 76 69 72 74 75 61 6c 5f 73 69 7a 65 22 3a 20 32 32 32 32 34 30 2c 20 22 6d 64 35 22 3a 20 22 32 61 37 65 66 32 32 63 37 62 31 36 33 39 36 64 37 38 31 30 34 38 65 65 62 33 66 63 37 38 36 30 22 7d 2c 20 7b 22 6e 61 6d 65 22 3a 20 22 2e 72 65 6c 6f 63 22 2c 20 22 63 68 69 32 22 3a 20 31 32 38 30 31 35 2e 30 2c 20 22 76 69 72 Data Ascii: 34b19ec3c2f2a215d7ee818d0"}, {"name": ".rsrc", "chi2": 38635488.0, "virtual_address": 5382144, "entropy": 1.27, "raw_size": 222720, "flags": "r", "virtual_size": 222240, "md5": "2a7ef22c7b16396d781048eeb3fc7860"}, {"name": ".reloc", "chi2": 128015.0, "vir
2024-11-21 02:42:33 UTC	1408	IN	Data Raw: 64 5f 69 64 73 5f 72 65 73 75 6c 74 73 22 3a 20 5b 7b 22 72 75 6c 65 5f 63 61 74 65 67 6f 72 79 22 3a 20 22 4d 69 73 63 20 61 63 74 69 76 69 74 79 22 2c 20 22 61 6c 65 72 74 5f 73 65 76 65 72 69 74 79 22 3a 20 22 6c 6f 77 22 2c 20 22 72 75 6c 65 5f 6d 73 67 22 3a 20 22 45 54 20 49 4e 46 4f 20 4f 62 73 65 72 76 65 64 20 44 69 73 63 6f 72 64 20 44 6f 6d 61 69 6e 20 28 64 69 73 63 6f 72 64 61 70 70 20 2e 63 6f 6d 20 69 6e 20 54 4c 53 20 53 4e 49 29 22 2c 20 22 72 75 6c 65 5f 69 64 22 3a 20 22 31 3a 32 30 33 35 34 36 34 22 2c 20 22 72 75 6c 65 5f 73 6f 75 72 63 65 22 3a 20 22 50 72 6f 6f 66 70 6f 69 6e 74 20 45 6d 65 72 67 69 6e 67 20 54 68 72 65 61 74 73 20 4f 70 65 6e 22 2c 20 22 72 75 6c 65 5f 75 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 72 75 6c 65 73 2e Data Ascii: d_ids_results": [{"rule_category": "Misc activity", "alert_severity": "low", "rule_msg": "ET INFO Observed Discord Domain (discordapp .com in TLS SNI)", "rule_id": "1:2035464", "rule_source": "Proofpoint Emerging Threats Open", "rule_url": "https://rules.
2024-11-21 02:42:33 UTC	1280	IN	Data Raw: 76 65 64 20 44 69 73 63 6f 72 64 20 44 6f 6d 61 69 6e 20 69 6e 20 44 4e 53 20 4c 6f 6f 6b 75 70 20 28 64 69 73 63 6f 72 64 61 70 70 20 2e 63 6f 6d 29 5c 22 3b 20 64 6e 73 2e 71 75 65 72 79 3b 20 64 6f 74 70 72 65 66 69 78 3b 20 63 6f 6e 74 65 6e 74 3a 5c 22 2e 64 69 73 63 6f 72 64 61 70 70 2e 63 6f 6d 5c 22 3b 20 6e 6f 63 61 73 65 3b 20 65 6e 64 73 77 69 74 68 3b 20 72 65 66 65 72 65 6e 63 65 3a 6d 64 35 2c 30 33 66 39 33 34 39 38 65 31 30 30 36 66 66 61 33 61 31 66 39 66 63 62 36 31 37 30 35 32 35 61 3b 20 63 6c 61 73 73 74 79 70 65 3a 6d 69 73 63 2d 61 63 74 69 76 69 74 79 3b 20 73 69 64 3a 32 30 33 35 34 36 36 3b 20 72 65 76 3a 34 3b 20 6d 65 74 61 64 61 74 61 3a 63 72 65 61 74 65 64 5f 61 74 20 32 30 32 32 5f 30 33 5f 31 35 2c 20 73 69 67 6e 61 74 75 Data Ascii: ved Discord Domain in DNS Lookup (discordapp .com)\"; dns.query; dotprefix; content:\".discordapp.com\"; nocase; endswith; reference:md5,03f93498e1006ffa3a1f9fcb6170525a; classtype:misc-activity; sid:2035466; rev:4; metadata:created_at 2022_03_15, signatu
2024-11-21 02:42:33 UTC	1408	IN	Data Raw: 4d 43 22 2c 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 32 2e 34 2e 32 30 32 32 2e 31 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 34 30 36 31 36 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 75 6e 64 65 74 65 63 74 65 64 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 6e 75 6c 6c 7d 2c 20 22 43 41 54 2d 51 75 69 63 6b 48 65 61 6c 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 43 41 54 2d 51 75 69 63 6b 48 65 61 6c 22 2c 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 32 32 2e 30 30 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 34 30 36 31 35 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 6d 61 6c 69 Data Ascii: MC", "engine_version": "2.4.2022.1", "engine_update": "20240616", "category": "undetected", "result": null}, "CAT-QuickHeal": {"method": "blacklist", "engine_name": "CAT-QuickHeal", "engine_version": "22.00", "engine_update": "20240615", "category": "mali
2024-11-21 02:42:33 UTC	1408	IN	Data Raw: 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 41 6c 69 62 61 62 61 22 2c 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 30 2e 33 2e 30 2e 35 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 31 39 30 35 32 37 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 6d 61 6c 69 63 69 6f 75 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 54 72 6f 6a 61 6e 44 6f 77 6e 6c 6f 61 64 65 72 3a 4d 53 49 4c 2f 41 6e 74 69 56 4d 2e 34 35 64 37 35 39 37 32 22 7d 2c 20 22 4b 37 47 57 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 4b 37 47 57 22 2c 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 Data Ascii: ethod": "blacklist", "engine_name": "Alibaba", "engine_version": "0.3.0.5", "engine_update": "20190527", "category": "malicious", "result": "TrojanDownloader:MSIL/AntiVM.45d75972"}, "K7GW": {"method": "blacklist", "engine_name": "K7GW", "engine_version":
2024-11-21 02:42:33 UTC	1280	IN	Data Raw: 74 22 3a 20 6e 75 6c 6c 7d 2c 20 22 45 53 45 54 2d 4e 4f 44 33 32 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 45 53 45 54 2d 4e 4f 44 33 32 22 2c 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 32 39 34 30 31 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 34 30 36 31 35 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 6d 61 6c 69 63 69 6f 75 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 61 20 76 61 72 69 61 6e 74 20 6f 66 20 4d 53 49 4c 2f 41 6e 74 69 56 4d 2e 41 20 73 75 73 70 69 63 69 6f 75 73 22 7d 2c 20 22 41 50 45 58 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 Data Ascii: t": null}, "ESET-NOD32": {"method": "blacklist", "engine_name": "ESET-NOD32", "engine_version": "29401", "engine_update": "20240615", "category": "malicious", "result": "a variant of MSIL/AntiVM.A suspicious"}, "APEX": {"method": "blacklist", "engine_name
2024-11-21 02:42:33 UTC	1408	IN	Data Raw: 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 4e 41 4e 4f 2d 41 6e 74 69 76 69 72 75 73 22 2c 20 22 65 6e 67 69 6e 65 5f 76 65 72 73 69 6f 6e 22 3a 20 22 31 2e 30 2e 31 34 36 2e 32 35 37 39 36 22 2c 20 22 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 22 3a 20 22 32 30 32 34 30 36 31 36 22 2c 20 22 63 61 74 65 67 6f 72 79 22 3a 20 22 6d 61 6c 69 63 69 6f 75 73 22 2c 20 22 72 65 73 75 6c 74 22 3a 20 22 54 72 6f 6a 61 6e 2e 57 69 6e 33 32 2e 41 6e 74 69 56 4d 2e 6a 70 6c 72 6d 61 22 7d 2c 20 22 53 55 50 45 52 41 6e 74 69 53 70 79 77 61 72 65 22 3a 20 7b 22 6d 65 74 68 6f 64 22 3a 20 22 62 6c 61 63 6b 6c 69 73 74 22 2c 20 22 65 6e 67 69 6e 65 5f 6e 61 6d 65 22 3a 20 22 53 55 50 45 52 41 6e 74 69 53 70 79 77 61 72 65 22 2c 20 22 65 6e 67 Data Ascii: cklist", "engine_name": "NANO-Antivirus", "engine_version": "1.0.146.25796", "engine_update": "20240616", "category": "malicious", "result": "Trojan.Win32.AntiVM.jplrma"}, "SUPERAntiSpyware": {"method": "blacklist", "engine_name": "SUPERAntiSpyware", "eng

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49909	142.250.185.228	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:32 UTC	677	OUT	GET /cse/static/element/8fa85d58e016b414/default+en.css HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:33 UTC	863	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/css Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="prose-team" Report-To: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]} Content-Length: 41700 Date: Thu, 21 Nov 2024 02:42:33 GMT Expires: Thu, 21 Nov 2024 02:42:33 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 12 Jun 2024 21:33:21 GMT X-Content-Type-Options: nosniff Link: <https://www.adsensecustomsearchads.com>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-21 02:42:33 UTC	527	IN	Data Raw: 2f 2a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 35 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 20 2a 2f 0a 0a 2f 2a 20 74 68 65 20 47 53 65 61 72 63 68 43 6f 6e 74 72 6f 6c 20 43 53 53 20 43 6c 61 73 73 65 73 0a 20 2a 20 2e 67 73 63 2d 63 6f 6e 74 72 6f 6c 3a 20 74 68 65 20 70 72 69 6d 61 72 79 20 63 6c 61 73 73 20 6f 66 20 74 68 65 20 63 6f 6e 74 72 6f 6c 0a 20 2a 2f 0a 2e 67 73 63 2d 63 6f 6e 74 72 6f 6c 20 7b 0a 20 20 77 69 64 74 68 3a 20 33 30 30 70 78 3b 0a 7d 0a 0a 2e 67 73 63 2d 63 6f 6e 74 72 6f 6c 20 64 69 76 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 73 74 61 74 69 63 3b 0a 7d 0a 0a 2f 2a 20 53 6c 69 67 68 74 20 72 65 73 65 74 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 70 72 65 76 69 65 77 Data Ascii: /** Copyright 2005 Google Inc. All rights reserved. // the GSearchControl CSS Classes * .gsc-control: the primary class of the control /.gsc-control { width: 300px;}.gsc-control div { position: static;}/ Slight reset to make the preview
2024-11-21 02:42:33 UTC	1390	IN	Data Raw: 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 74 68 61 74 20 68 6f 73 74 73 20 74 68 65 20 74 65 78 74 20 69 6e 70 75 74 20 61 72 65 61 0a 20 2a 20 2e 67 73 63 2d 69 6e 70 75 74 3a 20 74 68 65 20 74 65 78 74 20 69 6e 70 75 74 20 61 72 65 61 0a 20 2a 20 2e 67 73 63 2d 6b 65 65 70 65 72 3a 20 74 68 65 20 73 61 76 65 20 6c 69 6e 6b 20 62 65 6c 6f 77 20 73 61 76 61 62 6c 65 20 72 65 73 75 6c 74 73 0a 20 2a 2f 0a 66 6f 72 6d 2e 67 73 63 2d 73 65 61 72 63 68 2d 62 6f 78 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 34 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 77 Data Ascii: he container that hosts the text input area * .gsc-input: the text input area * .gsc-keeper: the save link below savable results */form.gsc-search-box { font-size: 13px; margin-top: 0; margin-right: 0; margin-bottom: 4px; margin-left: 0; w
2024-11-21 02:42:33 UTC	1390	IN	Data Raw: 67 2c 0a 2e 67 63 73 63 2d 62 72 61 6e 64 69 6e 67 2d 69 6d 67 20 7b 0a 20 20 77 69 64 74 68 3a 20 36 35 70 78 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 6f 74 74 6f 6d 3b 0a 7d 0a 0a 2e 67 73 63 2d 62 72 61 6e 64 69 6e 67 2d 79 6f 75 74 75 62 65 20 2e 67 73 63 2d 62 72 61 6e 64 69 6e 67 2d 69 6d 67 2d 6e 6f 63 6c 65 61 72 20 7b 0a 20 20 77 69 64 74 68 3a 20 35 35 70 78 3b 0a 7d 0a 0a 2e 67 73 63 2d 62 72 61 6e 64 69 6e 67 2d 79 6f 75 74 75 62 65 20 2e 67 73 63 2d 62 72 61 6e 64 69 6e 67 2d 69 6d 67 20 7b 0a 20 20 77 69 64 74 68 3a 20 36 39 70 78 3b 0a 7d 0a 0a 2e 67 73 63 2d 62 72 61 6e 64 69 6e 67 2d 76 65 72 74 69 63 61 6c 20 2e 67 73 63 2d 62 72 61 6e 64 69 6e 67 2d 74 65 78 74 20 2e 67 73 63 2d 62 72 61 6e 64 69 6e 67 2d 74 65 78 Data Ascii: g,.gcsc-branding-img { width: 65px; vertical-align: bottom;}.gsc-branding-youtube .gsc-branding-img-noclear { width: 55px;}.gsc-branding-youtube .gsc-branding-img { width: 69px;}.gsc-branding-vertical .gsc-branding-text .gsc-branding-tex
2024-11-21 02:42:33 UTC	1390	IN	Data Raw: 6c 73 20 2e 67 73 63 2d 63 6c 65 61 72 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 67 73 63 2d 72 65 73 75 6c 74 73 2d 63 6c 6f 73 65 2d 62 74 6e 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 6e 61 76 5f 6c 6f 67 6f 31 31 34 2e 70 6e 67 22 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 2d 31 34 30 70 78 20 2d 32 33 30 70 78 3b 0a 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 Data Ascii: ls .gsc-clear-button { display: none;}.gsc-results-close-btn { background-image: url("//www.google.com/images/nav_logo114.png"); background-repeat: no-repeat; background-position: -140px -230px; float: right; display: none; opacity: 0;
2024-11-21 02:42:33 UTC	1390	IN	Data Raw: 72 65 63 74 69 6f 6e 3d 31 33 35 2c 20 43 6f 6c 6f 72 3d 27 23 38 38 38 38 38 38 27 29 3b 0a 0a 7d 0a 0a 2e 67 73 63 2d 72 65 73 75 6c 74 73 2d 77 72 61 70 70 65 72 2d 76 69 73 69 62 6c 65 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 67 73 63 2d 6d 6f 64 61 6c 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 33 30 25 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 30 30 Data Ascii: rection=135, Color='#888888');}.gsc-results-wrapper-visible { opacity: 1 !important; visibility: visible !important;}.gsc-modal-background-image { position: fixed !important; top: 0; left: 0; height: 130%; width: 100%; z-index: 1000
2024-11-21 02:42:33 UTC	1390	IN	Data Raw: 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 31 70 78 20 33 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 27 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 65 2f 73 74 61 74 69 63 2f 63 73 73 2f 62 6c 75 65 5f 63 68 65 63 6b 2e 67 69 66 27 29 3b 0a 7d 0a 0a 2f 2a 20 74 61 62 62 65 64 20 6d 6f 64 65 20 6f 66 20 73 65 61 72 63 68 20 63 6f 6e 74 72 6f 6c 0a 20 2a 20 2e 67 73 63 2d 70 6f 73 69 74 69 6f 6e 69 6e 67 57 72 61 70 70 65 72 3a 20 77 72 61 70 70 65 72 20 66 6f 72 20 61 62 73 6f 6c 75 74 65 20 70 6f 73 69 74 69 6f 6e 69 6e 67 20 6f 66 20 67 72 61 64 69 65 6e 74 0a 20 2a 20 2e 67 73 63 2d 74 61 62 73 41 72 65 61 3a 20 74 68 65 20 62 6f 78 20 63 6f 6e 74 61 69 6e 69 6e 67 20 Data Ascii: ; background-position: 1px 3px; background-image: url('//www.google.com/cse/static/css/blue_check.gif');}/* tabbed mode of search control * .gsc-positioningWrapper: wrapper for absolute positioning of gradient * .gsc-tabsArea: the box containing
2024-11-21 02:42:33 UTC	1390	IN	Data Raw: 76 69 73 69 62 6c 65 20 69 73 20 70 72 65 66 65 72 72 65 64 20 6f 76 65 72 20 67 73 63 2d 74 61 62 64 41 63 74 69 76 65 20 2a 2f 0a 2e 67 73 63 2d 74 61 62 44 61 74 61 2e 67 73 63 2d 74 61 62 64 41 63 74 69 76 65 2e 67 73 63 2d 72 65 73 75 6c 74 73 62 6f 78 2d 69 6e 76 69 73 69 62 6c 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 67 73 63 2d 72 65 66 69 6e 65 6d 65 6e 74 73 41 72 65 61 20 7b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 66 65 31 65 35 3b 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 36 70 78 20 30 20 34 70 78 20 30 3b 0a 7d 0a 0a 2e 67 73 63 2d 72 65 66 69 6e 65 6d 65 6e 74 48 65 61 64 65 72 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 Data Ascii: visible is preferred over gsc-tabdActive */.gsc-tabData.gsc-tabdActive.gsc-resultsbox-invisible { display: none;}.gsc-refinementsArea { border-bottom: 1px solid #dfe1e5; clear: both; margin: 6px 0 4px 0;}.gsc-refinementHeader { position:
2024-11-21 02:42:33 UTC	1390	IN	Data Raw: 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 32 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 0a 2e 67 73 63 2d 63 6f 6d 70 6c 65 74 69 6f 6e 2d 74 69 74 6c 65 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 30 30 63 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 0a 2e 67 73 63 2d 63 6f 6d 70 6c 65 74 69 6f 6e 2d 73 6e 69 70 70 65 74 20 7b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 0a 2e 67 73 63 2d 63 6f 6d 70 6c 65 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 67 73 63 2d 63 6f 6d 70 Data Ascii: ox-shadow: 0 2px 4px rgba(0, 0, 0, 0.2); margin: 0;}.gsc-completion-title { color: #00c; line-height: normal; white-space: normal;}.gsc-completion-snippet { line-height: normal; white-space: normal;}.gsc-completion-container .gsc-comp
2024-11-21 02:42:33 UTC	1390	IN	Data Raw: 6c 6f 63 6b 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 39 65 39 65 39 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 34 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 35 70 78 3b 0a 7d 0a 0a 2e 67 73 63 2d 61 64 42 6c 6f 63 6b 20 68 32 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 33 70 78 20 35 70 78 20 30 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 2e 39 65 6d 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 36 37 36 37 36 37 3b 0a 7d 0a 0a 2e 67 73 63 2d 61 64 42 6c 6f 63 6b 20 2e 67 73 63 2d 61 64 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 20 20 70 Data Ascii: lock; border-bottom: 1px solid #e9e9e9; margin-bottom: 4px; padding-bottom: 5px;}.gsc-adBlock h2 { float: right; margin: 3px 5px 0; font-weight: normal; font-size: .9em; color: #676767;}.gsc-adBlock .gsc-ad { padding-left: 8px; p
2024-11-21 02:42:33 UTC	1390	IN	Data Raw: 0a 0a 2f 2a 20 53 74 61 6e 64 61 72 64 20 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 20 64 69 76 2f 66 6f 72 6d 20 2a 2f 0a 2e 67 73 63 2d 63 6f 6e 66 69 67 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 39 65 39 65 39 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 36 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 36 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 36 70 78 3b 0a 7d 0a 0a 2e 67 73 63 2d 63 6f 6e 66 69 67 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 7d 0a 0a 2e 67 73 63 2d 63 Data Ascii: /* Standard configuration div/form */.gsc-config { border: 1px solid #e9e9e9; margin-top: 0; margin-bottom: 10px; padding-top: 2px; padding-left: 6px; padding-right: 6px; padding-bottom: 6px;}.gsc-config { margin-bottom: 0;}.gsc-c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49910	142.250.185.228	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:32 UTC	663	OUT	GET /cse/static/style/look/v4/default.css HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:33 UTC	799	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="prose-team" Report-To: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]} Content-Length: 4495 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 21 Nov 2024 02:42:33 GMT Expires: Thu, 21 Nov 2024 03:32:33 GMT Cache-Control: public, max-age=3000 Last-Modified: Wed, 17 Jun 2020 00:00:00 GMT Content-Type: text/css Vary: Accept-Encoding Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-21 02:42:33 UTC	591	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 44 65 66 61 75 6c 74 20 54 68 65 6d 65 2c 20 76 34 2e 0a 20 2a 0a 20 2a 2f 0a 0a 2f 2a 20 53 65 6c 65 63 74 6f 72 20 66 6f 72 20 65 6e 74 69 72 65 20 65 6c 65 6d 65 6e 74 2e 20 2a 2f 0a 2e 67 73 63 2d 63 6f 6e 74 72 6f 6c 2d 63 73 65 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 66 66 66 3b 0a 7d 0a 0a 2e 67 73 63 2d 63 6f 6e 74 72 6f 6c 2d 63 73 65 20 2e 67 73 63 2d 74 61 62 6c 65 2d 72 65 73 75 6c 74 20 7b 0a 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 7d 0a 0a 2e 67 73 63 2d 72 65 73 75 6c 74 73 48 65 61 64 65 72 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2f 2a 20 53 65 61 72 63 68 20 69 6e 70 75 74 20 Data Ascii: /** * Default Theme, v4. * // Selector for entire element. /.gsc-control-cse { background-color: #fff; border: 1px solid #fff;}.gsc-control-cse .gsc-table-result { width: auto;}.gsc-resultsHeader { border: block;}/ Search input
2024-11-21 02:42:33 UTC	1390	IN	Data Raw: 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 33 29 3b 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2f 2a 20 53 65 61 72 63 68 20 62 75 74 74 6f 6e 20 2a 2f 0a 2e 67 73 63 2d 73 65 61 72 63 68 2d 62 75 74 74 6f 6e 2d 76 32 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 36 70 78 20 32 37 70 78 3b 0a 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 36 36 36 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 70 78 3b 0a 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 30 37 39 65 64 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f Data Ascii: x rgba(0, 0, 0, .3); outline: none;}/* Search button */.gsc-search-button-v2 { font-size: 0; padding: 6px 27px; width: auto; vertical-align: middle; border: 1px solid #666; border-radius: 2px; border-color: #3079ed; background-colo
2024-11-21 02:42:33 UTC	1390	IN	Data Raw: 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 36 66 36 66 36 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 66 36 66 36 66 36 3b 0a 7d 0a 0a 2f 2a 20 50 72 6f 6d 6f 74 69 6f 6e 20 6c 69 6e 6b 73 20 2a 2f 0a 2e 67 73 2d 70 72 6f 6d 6f 74 69 6f 6e 20 2e 67 73 2d 74 69 74 6c 65 3a 6c 69 6e 6b 2c 0a 2e 67 73 2d 70 72 6f 6d 6f 74 69 6f 6e 20 2e 67 73 2d 74 69 74 6c 65 3a 6c 69 6e 6b 20 2a 2c 0a 2e 67 73 2d 70 72 6f 6d 6f 74 69 6f 6e 20 2e 67 73 2d 73 6e 69 70 70 65 74 20 61 3a 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 35 63 3b 0a 7d 0a 0a 2e 67 73 2d 70 72 6f 6d 6f 74 69 6f 6e 20 2e 67 73 2d 74 69 74 6c 65 3a 76 69 73 69 74 65 64 2c 0a 2e 67 73 2d 70 72 6f 6d 6f 74 69 6f 6e 20 2e 67 73 2d 74 69 74 6c 65 3a 76 69 73 69 74 65 64 20 2a 2c 0a 2e 67 Data Ascii: und-color: #f6f6f6; border-color: #f6f6f6;}/* Promotion links /.gs-promotion .gs-title:link,.gs-promotion .gs-title:link ,.gs-promotion .gs-snippet a:link { color: #15c;}.gs-promotion .gs-title:visited,.gs-promotion .gs-title:visited *,.g
2024-11-21 02:42:33 UTC	1124	IN	Data Raw: 6d 61 72 67 69 6e 3a 20 31 30 70 78 3b 0a 7d 0a 0a 2e 67 73 63 2d 72 65 73 75 6c 74 73 20 2e 67 73 63 2d 63 75 72 73 6f 72 2d 62 6f 78 20 2e 67 73 63 2d 63 75 72 73 6f 72 2d 70 61 67 65 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 36 36 36 3b 0a 7d 0a 0a 2e 67 73 63 2d 72 65 73 75 6c 74 73 20 2e 67 73 63 2d 63 75 72 73 6f 72 2d 62 6f 78 20 2e 67 73 63 2d 63 75 72 73 6f 72 2d 70 61 67 65 3a 68 6f 76 65 72 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 0a 2e 67 73 63 2d 72 65 73 75 6c 74 73 20 2e 67 73 63 2d 63 75 72 73 6f 72 2d 62 6f 78 20 2e 67 73 63 2d 63 75 72 73 6f 72 2d 63 75 72 72 65 6e 74 2d 70 61 67 65 20 7b 0a 20 20 63 6f Data Ascii: margin: 10px;}.gsc-results .gsc-cursor-box .gsc-cursor-page { text-decoration: none; color: #666;}.gsc-results .gsc-cursor-box .gsc-cursor-page:hover { text-decoration: underline;}.gsc-results .gsc-cursor-box .gsc-cursor-current-page { co

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49908	142.250.185.228	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:32 UTC	679	OUT	GET /cse/static/element/8fa85d58e016b414/cse_element__en.js?usqp=CAI%3D HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:33 UTC	871	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="prose-team" Report-To: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]} Content-Length: 292561 Date: Thu, 21 Nov 2024 02:42:33 GMT Expires: Thu, 21 Nov 2024 02:42:33 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 12 Jun 2024 21:33:21 GMT X-Content-Type-Options: nosniff Link: <https://www.adsensecustomsearchads.com>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-21 02:42:33 UTC	519	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 63 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e Data Ascii: (function(){var g,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.
2024-11-21 02:42:33 UTC	1390	IN	Data Raw: 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 0a 7d 2c 6c 61 3d 6a 61 28 74 68 69 73 29 2c 6d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 6c 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 63 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 6d 61 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e Data Ascii: bal object");},la=ja(this),ma=function(a,b){if(b)a:{var c=la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ca(c,a,{configurable:!0,writable:!0,value:b})}};ma("Symbol",fun
2024-11-21 02:42:33 UTC	1390	IN	Data Raw: 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 74 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 2c 77 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 0a 62 29 7d 2c 7a 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 31 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b Data Ascii: anceof Array)){a=t(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a},wa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)},za=typeof Object.assign=="function"?Object.assign:function(a,b){for(var c=1;c<arguments.length;c++){
2024-11-21 02:42:33 UTC	1390	IN	Data Raw: 28 29 7d 3b 67 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 55 61 3d 7b 72 65 74 75 72 6e 3a 61 7d 3b 74 68 69 73 2e 4c 62 3d 74 68 69 73 2e 7a 64 7d 3b 67 2e 58 71 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 4c 62 3d 62 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 61 7d 7d 3b 67 2e 52 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 4c 62 3d 61 7d 3b 67 2e 77 79 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 51 66 3d 61 3b 62 21 3d 76 6f 69 64 20 30 26 26 28 74 68 69 73 2e 7a 64 3d 62 29 7d 3b 67 2e 68 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 51 66 3d 61 7c 7c 30 3b 61 3d 74 68 69 73 2e 55 61 2e 75 6d 3b 74 68 69 73 2e 55 61 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 61 7d 3b 67 Data Ascii: ()};g.return=function(a){this.Ua={return:a};this.Lb=this.zd};g.Xq=function(a,b){this.Lb=b;return{value:a}};g.Rd=function(a){this.Lb=a};g.wy=function(a,b){this.Qf=a;b!=void 0&&(this.zd=b)};g.ht=function(a){this.Qf=a\|\|0;a=this.Ua.um;this.Ua=null;return a};g
2024-11-21 02:42:33 UTC	1390	IN	Data Raw: 65 3a 21 31 7d 7d 63 61 74 63 68 28 62 29 7b 74 68 69 73 2e 4b 2e 72 68 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 4b 2e 7a 66 28 62 29 7d 74 68 69 73 2e 4b 2e 43 6b 28 29 3b 69 66 28 74 68 69 73 2e 4b 2e 55 61 29 7b 61 3d 74 68 69 73 2e 4b 2e 55 61 3b 74 68 69 73 2e 4b 2e 55 61 3d 6e 75 6c 6c 3b 69 66 28 61 2e 63 6f 29 74 68 72 6f 77 20 61 2e 75 6d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 61 2e 72 65 74 75 72 6e 2c 64 6f 6e 65 3a 21 30 7d 7d 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 3b 0a 76 61 72 20 51 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 65 66 28 62 29 7d 3b 74 68 69 73 2e 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e Data Ascii: e:!1}}catch(b){this.K.rh=void 0,this.K.zf(b)}this.K.Ck();if(this.K.Ua){a=this.K.Ua;this.K.Ua=null;if(a.co)throw a.um;return{value:a.return,done:!0}}return{value:void 0,done:!0}};var Qa=function(a){this.next=function(b){return a.ef(b)};this.throw=function
2024-11-21 02:42:33 UTC	1390	IN	Data Raw: 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 70 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 47 78 29 2c 72 65 6a 65 63 74 3a 68 28 74 68 69 73 2e 52 6a 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 47 78 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 69 66 28 68 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 52 6a 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 65 20 74 6f 20 69 74 73 65 6c 66 22 29 29 3b 65 6c 73 65 20 69 66 28 68 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 69 73 2e 49 7a 28 68 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 68 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 6b Data Ascii: 0,m.call(k,p))}}var k=this,l=!1;return{resolve:h(this.Gx),reject:h(this.Rj)}};e.prototype.Gx=function(h){if(h===this)this.Rj(new TypeError("A Promise cannot resolve to itself"));else if(h instanceof e)this.Iz(h);else{a:switch(typeof h){case "object":var k
2024-11-21 02:42:33 UTC	1390	IN	Data Raw: 65 2e 49 7a 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 56 68 28 29 3b 68 2e 4f 66 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4a 7a 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 56 68 28 29 3b 74 72 79 7b 68 2e 63 61 6c 6c 28 6b 2c 6c 2e 72 65 73 6f 6c 76 65 2c 6c 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6d 29 7b 6c 2e 72 65 6a 65 63 74 28 6d 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 77 2c 76 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 77 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 42 29 7b 74 72 79 7b 6d 28 77 28 Data Ascii: e.Iz=function(h){var k=this.Vh();h.Of(k.resolve,k.reject)};e.prototype.Jz=function(h,k){var l=this.Vh();try{h.call(k,l.resolve,l.reject)}catch(m){l.reject(m)}};e.prototype.then=function(h,k){function l(w,v){return typeof w=="function"?function(B){try{m(w(
2024-11-21 02:42:33 UTC	1390	IN	Data Raw: 69 6f 6e 20 62 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 63 28 6c 29 7b 76 61 72 20 6d 3d 74 79 70 65 6f 66 20 6c 3b 72 65 74 75 72 6e 20 6d 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6c 21 3d 3d 6e 75 6c 6c 7c 7c 6d 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6c 29 7b 69 66 28 21 77 61 28 6c 2c 66 29 29 7b 76 61 72 20 6d 3d 6e 65 77 20 62 3b 63 61 28 6c 2c 66 2c 7b 76 61 6c 75 65 3a 6d 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6c 29 7b 76 61 72 20 6d 3d 4f 62 6a 65 63 74 5b 6c 5d 3b 6d 26 26 28 4f 62 6a 65 63 74 5b 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 69 66 28 70 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 70 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 70 29 26 26 64 28 70 29 3b 72 Data Ascii: ion b(){}function c(l){var m=typeof l;return m==="object"&&l!==null\|\|m==="function"}function d(l){if(!wa(l,f)){var m=new b;ca(l,f,{value:m})}}function e(l){var m=Object[l];m&&(Object[l]=function(p){if(p instanceof b)return p;Object.isExtensible(p)&&d(p);r
2024-11-21 02:42:33 UTC	1390	IN	Data Raw: 6e 21 31 3b 76 61 72 20 6d 3d 6c 2e 65 6e 74 72 69 65 73 28 29 2c 70 3d 6d 2e 6e 65 78 74 28 29 3b 69 66 28 70 2e 64 6f 6e 65 7c 7c 70 2e 76 61 6c 75 65 5b 30 5d 21 3d 6b 7c 7c 70 2e 76 61 6c 75 65 5b 31 5d 21 3d 22 73 22 29 72 65 74 75 72 6e 21 31 3b 70 3d 6d 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 70 2e 64 6f 6e 65 7c 7c 70 2e 76 61 6c 75 65 5b 30 5d 2e 78 21 3d 34 7c 7c 70 2e 76 61 6c 75 65 5b 31 5d 21 3d 22 74 22 7c 7c 21 6d 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 3f 21 31 3a 21 30 7d 63 61 74 63 68 28 72 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 0a 66 28 29 3b 74 68 69 Data Ascii: n!1;var m=l.entries(),p=m.next();if(p.done\|\|p.value[0]!=k\|\|p.value[1]!="s")return!1;p=m.next();return p.done\|\|p.value[0].x!=4\|\|p.value[1]!="t"\|\|!m.next().done?!1:!0}catch(r){return!1}}())return a;var b=new WeakMap,c=function(k){this[0]={};this[1]=f();thi
2024-11-21 02:42:33 UTC	1390	IN	Data Raw: 6e 28 6b 2c 6c 29 7b 76 61 72 20 6d 3d 6c 26 26 74 79 70 65 6f 66 20 6c 3b 6d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 6d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 62 2e 68 61 73 28 6c 29 3f 6d 3d 62 2e 67 65 74 28 6c 29 3a 28 6d 3d 22 22 2b 20 2b 2b 68 2c 62 2e 73 65 74 28 6c 2c 6d 29 29 3a 6d 3d 22 70 5f 22 2b 6c 3b 76 61 72 20 70 3d 6b 5b 30 5d 5b 6d 5d 3b 69 66 28 70 26 26 77 61 28 6b 5b 30 5d 2c 6d 29 29 66 6f 72 28 6b 3d 30 3b 6b 3c 70 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 76 61 72 20 72 3d 70 5b 6b 5d 3b 69 66 28 6c 21 3d 3d 6c 26 26 72 2e 6b 65 79 21 3d 3d 72 2e 6b 65 79 7c 7c 6c 3d 3d 3d 72 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 74 3a 70 2c 69 6e 64 65 78 3a 6b 2c 78 61 3a 72 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 74 3a Data Ascii: n(k,l){var m=l&&typeof l;m=="object"\|\|m=="function"?b.has(l)?m=b.get(l):(m=""+ ++h,b.set(l,m)):m="p_"+l;var p=k[0][m];if(p&&wa(k[0],m))for(k=0;k<p.length;k++){var r=p[k];if(l!==l&&r.key!==r.key\|\|l===r.key)return{id:m,list:p,index:k,xa:r}}return{id:m,list:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49912	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:33 UTC	525	OUT	GET /ui/domains/ghabovethec.info/communicating_files HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:33 UTC	225	IN	HTTP/1.1 429 Too Many Requests Content-Type: application/json X-Cloud-Trace-Context: aa5fb9af6e68841c88ae886c4863ac94 Date: Thu, 21 Nov 2024 02:42:33 GMT Server: Google Frontend Content-Length: 153 Connection: close
2024-11-21 02:42:33 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49915	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:33 UTC	690	OUT	GET /gui/36253.6f4dc6a9d8dab2123ae5.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:33 UTC	322	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 6202a033affe6f4f1701e676dedfd84a Server: Google Frontend Date: Fri, 15 Nov 2024 18:01:02 GMT Expires: Sat, 15 Nov 2025 18:01:02 GMT Cache-Control: public, max-age=31536000 ETag: "fs6b4A" Content-Type: text/javascript Content-Length: 266372 Age: 463291 Connection: close
2024-11-21 02:42:33 UTC	1086	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 36 32 35 33 5d 2c 7b 33 36 32 35 33 3a 28 43 2c 65 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 72 28 34 38 37 30 34 29 2c 6e 3d 72 28 31 36 36 34 35 29 2c 73 3d 72 28 39 35 36 38 38 29 2c 6f 3d 72 28 31 35 33 32 33 29 2c 61 3d 72 28 34 39 39 39 35 29 3b 6c 65 74 20 69 2c 62 2c 6c 3d 43 3d 3e 43 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 65 2c 72 2c 74 29 7b 76 61 72 20 6e 2c 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6f 3d 73 3c 33 3f 65 3a 6e 75 6c 6c 3d 3d 3d 74 3f 74 3d 4f 62 6a 65 63 74 2e Data Ascii: (self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[36253],{36253:(C,e,r)=>{"use strict";var t=r(48704),n=r(16645),s=r(95688),o=r(15323),a=r(49995);let i,b,l=C=>C;var d=function(C,e,r,t){var n,s=arguments.length,o=s<3?e:null===t?t=Object.
2024-11-21 02:42:33 UTC	1408	IN	Data Raw: 6c 69 64 53 6c 69 64 65 73 28 29 7b 72 65 74 75 72 6e 21 74 68 69 73 2e 73 6c 69 64 65 73 7c 7c 74 68 69 73 2e 73 6c 69 64 65 73 26 26 74 68 69 73 2e 73 6c 69 64 65 73 2e 6c 65 6e 67 74 68 3c 3d 31 7d 64 69 73 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 28 29 7b 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 64 6f 77 6e 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 4b 65 79 50 72 65 73 73 65 64 29 7d 66 69 72 73 74 55 70 64 61 74 65 64 28 29 7b 74 68 69 73 2e 73 74 61 72 74 43 61 72 6f 75 73 65 6c 28 29 7d 68 61 6e 64 6c 65 4d 6f 75 73 65 4f 76 65 72 28 29 7b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 64 6f 77 6e 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 4b 65 79 50 72 65 Data Ascii: lidSlides(){return!this.slides\|\|this.slides&&this.slides.length<=1}disconnectedCallback(){window.removeEventListener("keydown",this.handleKeyPressed)}firstUpdated(){this.startCarousel()}handleMouseOver(){window.addEventListener("keydown",this.handleKeyPre
2024-11-21 02:42:33 UTC	1408	IN	Data Raw: 2d 66 6c 65 78 20 66 6c 65 78 2d 6e 6f 77 72 61 70 20 61 6c 69 67 6e 2d 69 74 65 6d 73 2d 63 65 6e 74 65 72 22 20 73 74 79 6c 65 3d 22 74 72 61 6e 73 66 6f 72 6d 3a 20 24 7b 30 7d 3b 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 74 72 61 6e 73 66 6f 72 6d 20 30 2e 35 73 20 65 61 73 65 3b 22 3e 20 3c 73 6c 6f 74 20 40 73 65 6c 65 63 74 2d 69 74 65 6d 3d 22 24 7b 30 7d 22 20 40 73 6c 6f 74 63 68 61 6e 67 65 3d 22 24 7b 30 7d 22 3e 3c 2f 73 6c 6f 74 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 60 29 2c 74 68 69 73 2e 68 61 6e 64 6c 65 4d 6f 75 73 65 4f 76 65 72 2c 74 68 69 73 2e 68 61 6e 64 6c 65 4d 6f 75 73 65 4f 75 74 2c 74 68 69 73 2e 6e 65 78 74 53 6c 69 64 65 2c 6f 2e 63 68 65 76 72 6f 6e 52 69 67 68 74 49 63 6f 6e 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 53 Data Ascii: -flex flex-nowrap align-items-center" style="transform: ${0}; transition: transform 0.5s ease;"> <slot @select-item="${0}" @slotchange="${0}"></slot> </div> </div>`),this.handleMouseOver,this.handleMouseOut,this.nextSlide,o.chevronRightIcon,this.previousS
2024-11-21 02:42:33 UTC	194	IN	Data Raw: 68 74 6d 6c 29 28 76 7c 7c 28 76 3d 6d 60 3c 6c 69 20 63 6c 61 73 73 3d 22 6c 69 73 74 2d 75 6e 73 74 79 6c 65 64 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 64 61 74 61 2d 62 73 2d 74 61 72 67 65 74 20 64 61 74 61 2d 69 6e 64 65 78 3d 22 24 7b 30 7d 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 3e 20 3c 61 20 63 6c 61 73 73 3d 22 72 6f 75 6e 64 65 64 2d 63 69 72 63 6c 65 20 64 2d 62 6c 6f 63 6b 20 24 7b 30 7d 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 38 70 78 3b 20 68 65 69 67 68 74 3a 38 70 78 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 3e 3c 2f 61 3e 20 3c 2f 6c 69 Data Ascii: html)(v\|\|(v=m`<li class="list-unstyled" role="button" data-bs-target data-index="${0}" @click="${0}"> <a class="rounded-circle d-block ${0}" style="width:8px; height:8px" role="button"></a> </li
2024-11-21 02:42:33 UTC	1408	IN	Data Raw: 3e 60 29 2c 65 2c 74 68 69 73 2e 68 61 6e 64 6c 65 53 65 6c 65 63 74 65 64 2c 28 30 2c 68 2e 63 6c 61 73 73 4d 61 70 29 28 7b 22 62 67 2d 62 6f 64 79 2d 74 65 72 74 69 61 72 79 22 3a 65 21 3d 3d 74 68 69 73 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 22 62 67 2d 70 72 69 6d 61 72 79 22 3a 65 3d 3d 3d 74 68 69 73 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 7d 29 29 29 29 29 7d 72 65 6e 64 65 72 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 6c 69 64 65 3f 28 30 2c 74 2e 68 74 6d 6c 29 28 66 7c 7c 28 66 3d 6d 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 6c 69 64 65 20 24 7b 30 7d 22 20 73 74 79 6c 65 3d 22 66 6c 65 78 3a 20 30 20 30 20 31 30 30 25 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 2d 66 6c 65 78 20 61 6c 69 67 6e 2d 69 74 65 6d 73 2d 63 65 6e Data Ascii: >`),e,this.handleSelected,(0,h.classMap)({"bg-body-tertiary":e!==this.selectedIndex,"bg-primary":e===this.selectedIndex})))))}render(){return this.slide?(0,t.html)(f\|\|(f=m` <div class="slide ${0}" style="flex: 0 0 100%"> <div class="d-flex align-items-cen
2024-11-21 02:42:33 UTC	1408	IN	Data Raw: 74 3f 74 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 72 29 3a 74 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 29 6f 3d 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 28 43 2c 65 2c 72 2c 74 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 61 3d 43 2e 6c 65 6e 67 74 68 2d 31 3b 61 3e 3d 30 3b 61 2d 2d 29 28 6e 3d 43 5b 61 5d 29 26 26 28 6f 3d 28 73 3c 33 3f 6e 28 6f 29 3a 73 3e 33 3f 6e 28 65 2c 72 2c 6f 29 3a 6e 28 65 2c 72 29 29 7c 7c 6f 29 3b 72 65 74 75 72 6e 20 73 3e 33 26 26 6f 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 Data Ascii: t?t=Object.getOwnPropertyDescriptor(e,r):t;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)o=Reflect.decorate(C,e,r,t);else for(var a=C.length-1;a>=0;a--)(n=C[a])&&(o=(s<3?n(o):s>3?n(e,r,o):n(e,r))\|\|o);return s>3&&o&&Object.defineProperty
2024-11-21 02:42:33 UTC	1280	IN	Data Raw: 20 6e 6f 74 20 6c 69 6d 69 74 65 64 20 74 6f 29 20 68 65 6c 70 69 6e 67 20 6d 61 6c 77 61 72 65 20 72 65 73 65 61 72 63 68 65 72 73 20 74 6f 20 69 64 65 6e 74 69 66 79 20 61 6e 64 20 63 6c 61 73 73 69 66 79 20 6d 61 6c 77 61 72 65 20 73 61 6d 70 6c 65 73 2e 20 57 69 74 68 20 59 41 52 41 20 79 6f 75 20 63 61 6e 20 63 72 65 61 74 65 20 64 65 73 63 72 69 70 74 69 6f 6e 73 20 6f 66 20 6d 61 6c 77 61 72 65 20 66 61 6d 69 6c 69 65 73 20 28 6f 72 20 77 68 61 74 65 76 65 72 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 65 73 63 72 69 62 65 29 20 62 61 73 65 64 20 6f 6e 20 74 65 78 74 75 61 6c 20 6f 72 20 62 69 6e 61 72 79 20 70 61 74 74 65 72 6e 73 2e 20 45 61 63 68 20 64 65 73 63 72 69 70 74 69 6f 6e 2c 20 61 2e 6b 2e 61 20 72 75 6c 65 2c 20 63 6f 6e 73 69 73 74 73 Data Ascii: not limited to) helping malware researchers to identify and classify malware samples. With YARA you can create descriptions of malware families (or whatever you want to describe) based on textual or binary patterns. Each description, a.k.a rule, consists
2024-11-21 02:42:33 UTC	1408	IN	Data Raw: 6d 61 70 28 28 43 3d 3e 28 30 2c 74 2e 68 74 6d 6c 29 28 7a 7c 7c 28 7a 3d 41 60 3c 67 74 69 2d 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 20 2e 73 6c 69 64 65 3d 22 24 7b 30 7d 22 3e 3c 2f 67 74 69 2d 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 3e 60 29 2c 43 29 29 29 29 7d 7d 3b 50 3d 52 28 5b 28 30 2c 6e 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 29 28 22 64 69 73 63 6f 76 65 72 2d 67 74 69 2d 63 61 72 6f 75 73 65 6c 22 29 5d 2c 50 29 7d 2c 37 35 32 36 35 3a 28 43 2c 65 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 72 28 38 39 35 34 37 29 2c 6e 3d 72 2e 6e 28 74 29 2c 73 3d 72 28 33 38 35 33 32 29 2c 6f 3d 72 2e 6e 28 73 29 28 29 28 6e 28 29 29 3b 6f 2e 70 75 73 68 28 5b 43 2e 69 64 2c 27 2f 2a 21 5c 6e 20 2a 20 42 6f 6f 74 73 74 72 Data Ascii: map((C=>(0,t.html)(z\|\|(z=A`<gti-carousel-item .slide="${0}"></gti-carousel-item>`),C))))}};P=R([(0,n.customElement)("discover-gti-carousel")],P)},75265:(C,e,r)=>{"use strict";var t=r(89547),n=r.n(t),s=r(38532),o=r.n(s)()(n());o.push([C.id,'/!\n Bootstr
2024-11-21 02:42:33 UTC	1408	IN	Data Raw: 3b 2d 2d 62 73 2d 64 61 72 6b 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 34 64 34 64 34 64 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 63 66 64 64 66 63 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 65 30 65 30 65 30 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 65 63 66 39 65 65 3b 2d 2d 62 73 2d 69 6e 66 6f 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 65 35 66 33 66 66 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 66 66 66 32 65 35 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 66 61 65 31 65 30 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 66 63 66 63 66 63 3b 2d Data Ascii: ;--bs-dark-text-emphasis: #4d4d4d;--bs-primary-bg-subtle: #cfddfc;--bs-secondary-bg-subtle: #e0e0e0;--bs-success-bg-subtle: #ecf9ee;--bs-info-bg-subtle: #e5f3ff;--bs-warning-bg-subtle: #fff2e5;--bs-danger-bg-subtle: #fae1e0;--bs-light-bg-subtle: #fcfcfc;-
2024-11-21 02:42:33 UTC	1280	IN	Data Raw: 2d 68 65 61 64 69 6e 67 2d 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 3a 20 23 32 30 32 34 32 63 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 2d 72 67 62 3a 20 33 32 2c 20 33 36 2c 20 34 34 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 20 23 30 62 34 64 64 61 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 2d 72 67 62 3a 20 31 31 2c 20 37 37 2c 20 32 31 38 3b 2d 2d 62 73 2d 63 6f 64 65 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 2d 2d 62 73 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 23 32 30 32 34 32 63 3b 2d 2d 62 73 2d 68 69 67 68 6c 69 67 68 74 2d 62 67 3a 20 23 66 65 Data Ascii: -heading-color: inherit;--bs-link-color: #20242c;--bs-link-color-rgb: 32, 36, 44;--bs-link-decoration: none;--bs-link-hover-color: #0b4dda;--bs-link-hover-color-rgb: 11, 77, 218;--bs-code-color: #000000;--bs-highlight-color: #20242c;--bs-highlight-bg: #fe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49913	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:33 UTC	690	OUT	GET /gui/88116.be3428c199d3d7ca9393.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:33 UTC	321	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 03a58a69904f513fa14bd8eeede59152 Server: Google Frontend Date: Tue, 19 Nov 2024 20:01:05 GMT Expires: Wed, 19 Nov 2025 20:01:05 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Content-Length: 19516 Age: 110488 Connection: close
2024-11-21 02:42:33 UTC	1087	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 31 31 36 2c 38 36 32 34 33 5d 2c 7b 31 30 32 31 32 3a 28 65 2c 72 2c 74 29 3d 3e 7b 76 61 72 20 6f 3d 74 28 34 38 37 30 34 29 2c 73 3d 74 28 31 36 36 34 35 29 2c 69 3d 74 28 36 32 38 33 32 29 2c 61 3d 74 28 31 35 33 32 33 29 2c 6e 3d 74 28 33 30 31 33 32 29 2c 62 3d 74 28 39 35 36 38 38 29 2c 64 3d 74 28 34 39 36 30 38 29 3b 6c 65 74 20 63 2c 6c 2c 75 3d 65 3d 3e 65 3b 76 61 72 20 70 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 2c 6f 29 7b 76 61 72 20 73 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 Data Ascii: "use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[88116,86243],{10212:(e,r,t)=>{var o=t(48704),s=t(16645),i=t(62832),a=t(15323),n=t(30132),b=t(95688),d=t(49608);let c,l,u=e=>e;var p=function(e,r,t,o){var s,i=arguments.lengt
2024-11-21 02:42:33 UTC	1408	IN	Data Raw: 70 69 74 61 6c 69 7a 65 22 3e 24 7b 30 7d 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 20 3c 2f 61 3e 20 60 29 2c 28 30 2c 69 2e 63 6c 61 73 73 4d 61 70 29 28 7b 64 69 73 61 62 6c 65 64 3a 74 68 69 73 2e 64 69 73 61 62 6c 65 64 7d 29 2c 74 68 69 73 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 65 2c 74 68 69 73 2e 72 65 64 69 72 65 63 74 54 6f 29 2c 66 5b 65 5d 2c 65 29 29 29 29 7d 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 65 2c 72 29 7b 63 6f 6e 73 74 20 74 3d 62 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 73 73 6f 22 2c 65 29 3b 69 66 28 22 6d 61 6e 64 69 61 6e 74 22 3d 3d 3d 74 68 69 73 2e 72 65 66 65 72 72 65 72 29 7b 63 6f 6e 73 74 20 65 3d 6e 65 77 20 55 52 4c 28 74 29 3b 72 65 74 75 72 6e 20 65 2e 73 65 61 72 63 68 50 61 72 61 6d Data Ascii: pitalize">${0}</span></span> </a> `),(0,i.classMap)({disabled:this.disabled}),this.getRedirectUrl(e,this.redirectTo),f[e],e))))}getRedirectUrl(e,r){const t=b.Z8.getRedirectUrl("sso",e);if("mandiant"===this.referrer){const e=new URL(t);return e.searchParam
2024-11-21 02:42:33 UTC	1408	IN	Data Raw: 72 3a 6e 75 6c 6c 3d 3d 3d 6f 3f 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 72 2c 74 29 3a 6f 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 29 61 3d 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 28 65 2c 72 2c 74 2c 6f 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 6e 3e 3d 30 3b 6e 2d 2d 29 28 73 3d 65 5b 6e 5d 29 26 26 28 61 3d 28 69 3c 33 3f 73 28 61 29 3a 69 3e 33 3f 73 28 72 2c 74 2c 61 29 3a 73 28 72 2c 74 29 29 7c 7c 61 29 3b 72 65 74 75 72 6e 20 69 3e 33 26 26 61 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e Data Ascii: r:null===o?o=Object.getOwnPropertyDescriptor(r,t):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(e,r,t,o);else for(var n=e.length-1;n>=0;n--)(s=e[n])&&(a=(i<3?s(a):i>3?s(r,t,a):s(r,t))\|\|a);return i>3&&a&&Object.defin
2024-11-21 02:42:33 UTC	193	IN	Data Raw: 6c 6f 67 69 6e 5f 75 72 6c 3b 7b 76 61 72 20 6f 2c 73 3b 63 6f 6e 73 74 20 72 3d 6e 75 6c 6c 21 3d 3d 28 6f 3d 65 2e 6d 65 74 61 29 26 26 76 6f 69 64 20 30 21 3d 3d 6f 26 26 6f 2e 70 72 6f 76 69 64 65 72 5f 69 64 3f 6e 75 6c 6c 3d 3d 3d 28 73 3d 65 2e 6d 65 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 73 3f 76 6f 69 64 20 30 3a 73 2e 70 72 6f 76 69 64 65 72 5f 69 64 2e 73 70 6c 69 74 28 22 2e 22 29 5b 30 5d 3a 22 22 3b 72 65 74 75 72 6e 20 64 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 73 73 6f 22 2c 72 29 7d 7d 67 65 74 45 72 72 6f 72 54 65 78 74 28 65 29 7b Data Ascii: login_url;{var o,s;const r=null!==(o=e.meta)&&void 0!==o&&o.provider_id?null===(s=e.meta)\|\|void 0===s?void 0:s.provider_id.split(".")[0]:"";return d.Z8.getRedirectUrl("sso",r)}}getErrorText(e){
2024-11-21 02:42:33 UTC	1408	IN	Data Raw: 72 65 74 75 72 6e 7b 55 73 65 72 4e 6f 74 41 63 74 69 76 65 45 72 72 6f 72 3a 28 30 2c 69 2e 68 74 6d 6c 29 28 66 7c 7c 28 66 3d 77 60 3c 73 74 72 6f 6e 67 3e 49 6e 61 63 74 69 76 65 20 75 73 65 72 3c 2f 73 74 72 6f 6e 67 3e 2e 20 59 6f 75 20 73 68 6f 75 6c 64 20 68 61 76 65 20 72 65 63 65 69 76 65 64 20 61 6e 20 65 6d 61 69 6c 20 77 69 74 68 20 61 20 6c 69 6e 6b 20 74 6f 20 61 63 74 69 76 61 74 65 20 79 6f 75 72 20 61 63 63 6f 75 6e 74 2c 20 79 6f 75 20 68 61 76 65 20 6e 6f 74 20 66 6f 6c 6c 6f 77 65 64 20 69 74 20 79 65 74 2e 20 43 68 65 63 6b 20 79 6f 75 72 20 69 6e 62 6f 78 20 6f 72 20 3c 61 20 68 72 65 66 3d 22 24 7b 30 7d 22 3e 72 65 2d 73 65 6e 64 20 74 68 65 20 61 63 74 69 76 61 74 69 6f 6e 20 65 6d 61 69 6c 3c 2f 61 3e 2e 20 3c 62 72 3e 20 52 65 Data Ascii: return{UserNotActiveError:(0,i.html)(f\|\|(f=w`<strong>Inactive user</strong>. You should have received an email with a link to activate your account, you have not followed it yet. Check your inbox or <a href="${0}">re-send the activation email</a>. <br> Re
2024-11-21 02:42:33 UTC	1408	IN	Data Raw: 66 74 65 72 4c 6f 67 69 6e 53 75 63 63 65 73 73 28 29 7d 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 28 29 29 2e 63 61 74 63 68 28 28 65 3d 3e 7b 22 54 77 6f 46 61 63 74 6f 72 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 21 3d 3d 65 2e 63 6f 64 65 3f 28 72 2e 68 61 73 45 72 72 6f 72 3d 21 30 2c 72 2e 65 72 72 6f 72 54 65 78 74 3d 72 2e 67 65 74 45 72 72 6f 72 54 65 78 74 28 65 29 2c 62 2e 54 2e 68 61 6e 64 6c 65 45 72 72 6f 72 28 65 29 29 3a 72 2e 69 73 32 66 61 45 6e 61 62 6c 65 64 3d 21 30 7d 29 29 2c 72 2e 6c 6f 61 64 69 6e 67 3d 21 31 7d 29 29 28 29 7d 73 65 74 55 70 47 74 69 53 69 67 6e 49 6e 28 Data Ascii: fterLoginSuccess()}));return function(r){return e.apply(this,arguments)}}()).catch((e=>{"TwoFactorAuthenticationRequiredError"!==e.code?(r.hasError=!0,r.errorText=r.getErrorText(e),b.T.handleError(e)):r.is2faEnabled=!0})),r.loading=!1}))()}setUpGtiSignIn(
2024-11-21 02:42:33 UTC	1280	IN	Data Raw: 77 3f 20 3c 61 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 2d 70 72 69 6d 61 72 79 22 20 68 72 65 66 3d 22 24 7b 30 7d 22 3e 20 4a 6f 69 6e 20 6f 75 72 20 63 6f 6d 6d 75 6e 69 74 79 20 3c 2f 61 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 3e 20 3c 61 20 69 64 3d 22 66 6f 72 67 6f 74 2d 70 61 73 73 77 6f 72 64 2d 6c 69 6e 6b 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 2d 70 72 69 6d 61 72 79 22 20 68 72 65 66 3d 22 24 7b 30 7d 22 3e 20 46 6f 72 67 6f 74 20 70 61 73 73 77 6f 72 64 3f 20 3c 2f 61 3e 20 3c 2f 64 69 76 3e 20 3c 2f 66 6f 6f 74 65 72 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 2d 6e 6f 6e 65 20 64 2d 6c 67 2d 62 6c 6f 63 6b 20 63 6f 6c 2d 6c 67 20 62 67 2d 62 6f 64 79 20 70 2d 30 22 3e 20 3c 64 69 73 63 6f 76 65 72 2d 67 74 69 2d 63 61 72 6f Data Ascii: w? <a class="link-primary" href="${0}"> Join our community </a> </div> <div> <a id="forgot-password-link" class="link-primary" href="${0}"> Forgot password? </a> </div> </footer> </div> <div class="d-none d-lg-block col-lg bg-body p-0"> <discover-gti-caro
2024-11-21 02:42:33 UTC	1408	IN	Data Raw: 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 22 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 22 63 75 72 72 65 6e 74 2d 70 61 73 73 77 6f 72 64 22 20 73 70 65 6c 6c 63 68 65 63 6b 3d 22 66 61 6c 73 65 22 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 67 72 6f 75 70 22 20 3f 68 69 64 64 65 6e 3d 22 24 7b 30 7d 22 3e 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 63 6f 64 65 32 66 61 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 6c 61 62 65 6c 20 6d 74 2d 34 22 3e 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 63 6f 64 65 3c 2f 6c 61 62 65 6c 3e 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 22 20 69 64 3d 22 63 6f 64 65 32 66 61 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 53 Data Ascii: your password" autocomplete="current-password" spellcheck="false"> </div> <div class="form-group" ?hidden="${0}"> <label for="code2fa" class="form-label mt-4">Authentication code</label> <input type="text" class="form-control" id="code2fa" placeholder="S
2024-11-21 02:42:33 UTC	1408	IN	Data Raw: 6f 67 69 6e 22 29 2c 74 68 69 73 2e 74 6f 6b 65 6e 2c 74 68 69 73 2e 72 65 64 69 72 65 63 74 55 72 69 29 7d 7d 3b 52 28 5b 28 30 2c 61 2e 73 74 61 74 65 29 28 29 5d 2c 53 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 73 52 65 6d 65 6d 62 65 72 4d 65 43 68 65 63 6b 65 64 22 2c 76 6f 69 64 20 30 29 2c 52 28 5b 28 30 2c 61 2e 73 74 61 74 65 29 28 29 5d 2c 53 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 73 32 66 61 45 6e 61 62 6c 65 64 22 2c 76 6f 69 64 20 30 29 2c 52 28 5b 28 30 2c 61 2e 73 74 61 74 65 29 28 29 5d 2c 53 2e 70 72 6f 74 6f 74 79 70 65 2c 22 68 61 73 45 72 72 6f 72 22 2c 76 6f 69 64 20 30 29 2c 52 28 5b 28 30 2c 61 2e 73 74 61 74 65 29 28 29 5d 2c 53 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 72 72 6f 72 54 65 78 74 22 2c 76 6f 69 64 20 30 29 2c 52 28 5b 28 30 Data Ascii: ogin"),this.token,this.redirectUri)}};R([(0,a.state)()],S.prototype,"isRememberMeChecked",void 0),R([(0,a.state)()],S.prototype,"is2faEnabled",void 0),R([(0,a.state)()],S.prototype,"hasError",void 0),R([(0,a.state)()],S.prototype,"errorText",void 0),R([(0
2024-11-21 02:42:33 UTC	1280	IN	Data Raw: 3b 2d 2d 62 73 2d 67 72 61 79 2d 33 30 30 3a 20 23 65 36 65 36 65 36 3b 2d 2d 62 73 2d 67 72 61 79 2d 34 30 30 3a 20 23 63 63 63 63 63 63 3b 2d 2d 62 73 2d 67 72 61 79 2d 35 30 30 3a 20 23 62 33 62 33 62 33 3b 2d 2d 62 73 2d 67 72 61 79 2d 36 30 30 3a 20 23 36 36 36 36 36 36 3b 2d 2d 62 73 2d 67 72 61 79 2d 37 30 30 3a 20 23 34 64 34 64 34 64 3b 2d 2d 62 73 2d 67 72 61 79 2d 38 30 30 3a 20 23 33 33 33 33 33 33 3b 2d 2d 62 73 2d 67 72 61 79 2d 39 30 30 3a 20 23 31 61 31 61 31 61 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 3a 20 23 30 62 34 64 64 61 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 3a 20 23 33 39 61 63 34 63 3b 2d 2d 62 73 2d 69 6e 66 6f 3a 20 23 30 30 37 62 65 36 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 3a 20 23 65 35 37 33 30 30 3b 2d 2d 62 73 2d 64 61 6e Data Ascii: ;--bs-gray-300: #e6e6e6;--bs-gray-400: #cccccc;--bs-gray-500: #b3b3b3;--bs-gray-600: #666666;--bs-gray-700: #4d4d4d;--bs-gray-800: #333333;--bs-gray-900: #1a1a1a;--bs-primary: #0b4dda;--bs-success: #39ac4c;--bs-info: #007be6;--bs-warning: #e57300;--bs-dan

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49914	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:33 UTC	542	OUT	GET /ui/domains/ghabovethec.info/comments?relationships=author%2Citem HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:34 UTC	225	IN	HTTP/1.1 429 Too Many Requests Content-Type: application/json X-Cloud-Trace-Context: 933e6b2d77812e0327f86f9e365a4624 Date: Thu, 21 Nov 2024 02:42:33 GMT Server: Google Frontend Content-Length: 153 Connection: close
2024-11-21 02:42:34 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49916	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:33 UTC	538	OUT	GET /ui/domains/ghabovethec.info/votes?relationships=item%2Cvoter HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:34 UTC	225	IN	HTTP/1.1 429 Too Many Requests Content-Type: application/json X-Cloud-Trace-Context: 0a6245731db70d6d39d330f805043128 Date: Thu, 21 Nov 2024 02:42:33 GMT Server: Google Frontend Content-Length: 153 Connection: close
2024-11-21 02:42:34 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49918	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:33 UTC	580	OUT	GET /ui/domains/ghabovethec.info/graphs?attributes=private%2Cgraph_data%2Ccreation_date&relationships=owner HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:34 UTC	225	IN	HTTP/1.1 429 Too Many Requests Content-Type: application/json X-Cloud-Trace-Context: 0c5fb73c4b24287e92b5040f4791fadc Date: Thu, 21 Nov 2024 02:42:34 GMT Server: Google Frontend Content-Length: 153 Connection: close
2024-11-21 02:42:34 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49917	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:33 UTC	703	OUT	GET /gui/vt-ui-sw-installer.3166763520a2b299ee12.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:34 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: cfdbcf49662551a7fe48da11d6ae16dd Content-Encoding: gzip Server: Google Frontend Date: Tue, 19 Nov 2024 22:18:53 GMT Expires: Wed, 19 Nov 2025 22:18:53 GMT Cache-Control: public, max-age=31536000 ETag: "sq5xCg" Content-Type: text/javascript Age: 102221 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:34 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 66 66 61 0d 0a 00 00 02 ff 94 5a 59 73 db 38 b6 7e bf bf 82 e6 74 a9 c8 09 c5 c8 4b 36 2a b4 db 93 4e dd 72 75 a6 3b d5 4e c6 0f 6e 5f 37 44 41 12 62 0a d0 80 90 14 b7 ac ff 7e bf 03 80 8b 25 a7 27 f3 90 0a 04 02 38 07 67 f9 ce 02 87 cb 8a 07 95 d1 a2 30 e1 30 aa 78 39 49 d7 7c b4 60 c5 dd bb d9 52 de ad cc ed 52 dc ce 99 90 f9 5f 7c 7b 78 b8 be 89 d3 c5 b2 9a 45 d7 d7 af 06 83 e3 97 37 c9 e6 68 f0 f2 cd 9b 2c 32 89 4c 78 9c 9f 6e 78 aa 23 19 27 3c 1d 47 32 d9 fc cb 7c 16 97 eb 0b 59 19 56 96 5c 67 11 96 7c d8 c6 43 Data Ascii: 000000010000000100000001000000010000000100000001000ffaZYs8~tK6*Nru;Nn_7DAb~%'8g00x9I\|`RR_\|{xE7h,2Lxnx#'<G2\|YV\g\|C
2024-11-21 02:42:34 UTC	1408	IN	Data Raw: d5 e9 52 3e 7b c9 4f ce e0 d1 2b d0 b6 c6 36 57 2b fe 7e c5 a5 f9 20 2a c3 25 07 e2 2d 17 40 75 3e 51 4b 39 0e 2d 67 71 9c 61 cb 8c b6 e8 94 c9 94 8d 11 d0 00 08 b8 69 a3 5e 09 f5 3e 7b 46 dc 25 76 c1 ce 99 08 7a 86 17 08 2b 53 4e 67 96 30 2a fb df 23 85 90 71 4a 00 19 6e 0d 5b 4c 0d d3 53 c8 06 81 30 b5 db 13 95 73 a8 83 98 4f 58 be a9 d6 19 4f 44 f5 fe ab e1 5a b2 32 53 89 d2 62 2a 30 b4 b4 33 b3 1d 1e a8 5e 4f a7 73 09 05 b2 54 54 9f ed c5 72 42 3b 9d 8e 45 b5 a0 88 69 17 47 e4 29 93 48 24 0c d7 00 40 ba 18 3d 06 54 e7 e2 0c 40 e9 73 01 c0 db 27 31 e7 6a 69 3a 01 34 de ec 6c e8 f5 64 ba 66 08 4d 72 ea ac e7 69 62 a1 5f 13 12 51 18 d7 d1 60 10 67 21 43 e4 5e c1 bb 11 af 88 38 38 2f 4a ce 74 4d 96 78 89 13 f5 f0 40 b6 d5 08 9f e3 00 5c e9 be 63 43 4d a0 Data Ascii: R>{O+6W+~ %-@u>QK9-gqai^>{F%vz+SNg0#qJn[LS0sOXODZ2Sb*03^OsTTrB;EiG)H$@=T@s'1ji:4ldfMrib_Q`g!C^88/JtMx@\cCM
2024-11-21 02:42:34 UTC	1408	IN	Data Raw: 63 97 d7 0d 6a 83 6c 44 db b8 9e 3e c5 ed 5c 8b ec 6c 33 56 d2 a6 19 99 1f 1d 26 b6 e9 95 99 6b fd ec d9 cd 76 bb 7d b2 c9 77 21 b1 0a 0d 44 66 0c 9f 2f 4c 60 54 e0 6c 81 07 52 c9 be 1d a3 c9 16 d8 ca 90 2a ea df e5 05 da ab 7a cc 01 d7 2a 18 e1 0b 99 12 96 24 76 03 a3 46 53 a0 6c 4b ad 72 4d c3 19 5b f1 80 05 7b a6 17 c5 c1 9c 9b 99 1a 53 f7 d0 c5 08 f2 a6 94 04 82 5c e9 00 2d 2d 8e 58 9b d2 c5 86 71 34 80 77 d9 1b c5 90 23 b9 da 97 0e a0 b7 41 d8 c2 d1 47 74 88 50 09 91 4d d6 bf 51 c1 52 07 05 d5 2e 14 1e 27 f5 34 80 c9 1e 67 b6 20 95 cc 41 f1 f5 eb a3 e3 57 71 72 4f 5d e8 17 27 c7 87 71 32 c2 f0 e4 c5 d1 09 86 97 34 3c 19 bc 38 8a 93 8f 18 1e bf 7c fd e6 38 1e c2 8b 83 f7 c9 97 dc e4 a7 a6 ed 5c dd b9 8e 51 a2 13 91 28 00 99 0d cf a4 d3 0a 8d 37 75 13 Data Ascii: cjlD>\l3V&kv}w!Df/L`TlRz$vFSlKrM[{S\--Xq4w#AGtPMQR.'4g AWqrO]'q24<8\|8\Q(7u
2024-11-21 02:42:34 UTC	304	IN	Data Raw: fe 68 da af 96 23 53 22 95 a2 b5 08 b1 73 0b 99 59 30 01 60 5c c8 4b e4 e4 fc f3 22 18 a4 47 08 ac f0 3c 5c a7 8f d7 17 4a 2a d6 4c 8f 2b 6c db fe 2e 29 c2 21 e8 7a 26 be 40 14 62 72 df f7 93 59 80 77 9e 82 f7 47 dc ac 39 97 8e 50 89 d7 4d ca ea e7 15 48 95 fc 6b 1f c6 6b bf ac c5 d8 cc b2 e0 e5 60 b0 f8 6a 27 c0 27 de 94 fa 25 9f 98 2c 38 aa 67 9b 8b d2 e6 1d 26 c8 c8 36 74 1d b7 35 0b 0e b1 2b 70 3b bb cc 32 b7 aa 50 a5 d2 1d d9 8c d4 98 78 c7 a4 13 ca c8 56 19 fd 91 82 71 ce 71 18 ce 82 6f a2 56 d9 95 a6 5b 6e 60 b1 7d 9f 9d c1 6b 32 2a 47 f8 0e 87 0c 2a 83 57 39 fa df da 10 04 bb 9c 79 ad 11 1d 7b 8f da 83 dc 39 f8 03 10 3c 79 11 45 36 02 83 4b 43 54 03 54 47 8b 2c 18 d8 21 5e e7 66 10 62 23 09 64 51 48 9e 50 c2 9c e7 6c bb 45 1a f5 3f cf 9f ff 0d 97 Data Ascii: h#S"sY0`\K"G<\JL+l.)!z&@brYwG9PMHkk`j''%,8g&6t5+p;2PxVqqoV[n`}k2G*W9y{9<yE6KCTTG,!^fb#dQHPlE?
2024-11-21 02:42:34 UTC	100	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 0b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 60 0d 0a 30 30 30 30 30 30 30 31 0d 0a b3 0d 0a 30 30 30 30 30 30 30 31 0d 0a d5 0d 0a 30 30 30 30 30 30 30 31 0d 0a de 0d 0a 30 30 30 30 30 30 30 31 0d 0a 23 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 31 0d 0a 00 0d 0a Data Ascii: 0000000100000001`00000001000000010000000100000001#000000010001
2024-11-21 02:42:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49919	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:34 UTC	681	OUT	GET /gui/static/qrcode.min.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:34 UTC	340	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 59eb1fc1b2368b3cc5b1b8a511ca5413 Content-Encoding: gzip Server: Google Frontend Date: Thu, 21 Nov 2024 02:42:23 GMT Expires: Thu, 21 Nov 2024 02:43:23 GMT Cache-Control: public, max-age=60 Age: 11 ETag: "V0s7xg" Content-Type: text/javascript Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:34 UTC	1068	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 31 0d 0a 08 0d 0a 30 66 66 64 0d 0a 00 00 00 00 00 02 ff b4 5c eb 72 db 38 b2 7e 15 5b 5b f1 90 11 24 91 d4 5d 34 95 b5 93 cc c4 3b b9 4d 2e 7b 76 cb ab 71 d1 16 25 71 23 93 2a 8a 8a 93 b2 f5 ee e7 eb 06 40 82 92 9c c9 f9 71 a6 76 63 12 04 1a 7d 47 77 03 d0 d7 30 3b fa e3 c3 f3 74 1a f9 c7 b3 4d 72 93 c7 69 62 d9 f7 fa f1 28 b7 72 fb 3e 5f c4 eb e6 2d fa 04 eb e6 9b 77 2f 5e 5e 0d ce 2f 3e 5d 9d ff fb d3 4b c1 9f a6 61 1e 06 b9 7c 5e 85 d9 3a 9a be a0 96 cb 89 3f 4b 33 eb 2b a6 88 f0 22 b2 c0 11 69 50 8c 68 2e a3 64 9e 2f fc 74 9c f9 59 bd 6e df 53 c7 d8 f8 7e b3 08 33 c2 ec 2c b7 32 db 8f c7 bd 6e b7 dd 7b 66 45 97 ce 24 f0 3a ce 83 e5 0e da 5d c7 19 9c c4 f6 78 3c 76 07 22 Data Ascii: 0000000100000001010ffd\r8~[[$]4;M.{vq%q#*@qvc}Gw0;tMrib(r>_-w/^^/>]Ka\|^:?K3+"iPh.d/tYnS~3,2n{fE$:]x<v"
2024-11-21 02:42:34 UTC	1408	IN	Data Raw: d6 c3 4b 33 15 a5 af 54 5e 6e e7 3b fb ba 22 42 20 df 4e 0e cf f0 98 3b fd 4b 78 30 3c 3f 3e dd 95 0a db 9e d1 48 e0 60 6b bc 12 c8 05 70 0d e7 b5 7a 9f ae 63 8a 55 de 67 e9 75 a4 79 e2 08 47 29 c6 e3 7d 0c d0 4c 5f a3 ff 13 83 d4 ba 64 48 ae a1 57 ca ca 4c 67 d3 ff 6e d6 b9 46 c7 c4 e5 53 7c 0b 47 7a f0 0b ac f4 22 99 d1 92 a0 d5 ba 14 d4 38 e8 9f 9c 30 ca 3c cf a7 62 a1 25 cf a5 d6 3c 62 30 2f 19 b4 62 ea a5 bf 68 80 1b bf 81 8f ca a3 17 70 12 d2 26 4b f0 52 09 f6 16 eb d2 b8 68 c5 25 a7 cd 42 0c 57 25 8c 02 3e 90 de 8a 0a 13 4c 91 98 9a 09 cb d6 5e 24 0b 1a ae df 1f 07 32 f0 83 81 1e 5b 0d 77 1c e4 f5 ec 90 31 a2 d9 b6 f5 d0 54 0d 4d 59 f1 68 54 54 4f 0f 8d e2 66 49 b0 d2 f2 4b 00 82 a1 d6 a1 9f d9 38 70 4e 4e 7a c0 00 0c c3 a2 0f 08 3d fc 6b 3f 3c a4 Data Ascii: K3T^n;"B N;Kx0<?>H`kpzcUguyG)}L_dHWLgnFS\|Gz"80<b%<b0/bhp&KRh%BW%>L^$2[w1TMYhTTOfIK8pNNz=k?<
2024-11-21 02:42:34 UTC	1408	IN	Data Raw: 16 cf 27 28 16 69 16 33 c5 57 06 07 6f 6d f1 d5 00 10 8f e7 cc b7 d2 fa 0a 80 24 c8 0a 83 a1 a0 57 97 5f eb f5 09 5b 24 e6 91 c2 20 3c 92 bf 02 63 50 57 82 51 64 16 9a 7b b5 65 b6 91 47 58 07 f7 5c 70 7f fb f9 cd f9 cb 0f 23 57 f0 db d9 eb f7 af ce ae d0 36 f2 64 43 51 8f 1f 75 64 c3 ef 67 6f ff 71 31 1a 6c e1 c1 ee 5f d3 b0 91 23 fe 18 b5 c5 ab 91 b7 15 9b e0 fe fd d9 a7 4f 2f 3f bc 75 1c 07 1f 8a 17 17 3d f5 8b eb 00 78 f1 e2 62 ac 7a 41 44 8e 59 8a 17 77 d4 2d 5e 30 a6 57 be b8 a3 fe 56 2c 8b b9 ae de bf fb 78 f1 e9 e2 dd db ab 4f 67 e7 af 5f 8e 2e 51 c1 bc ec 09 77 c0 7f 3c 4f fe e9 f1 9f b6 23 ff 74 d4 37 d1 56 bd 3a a2 a3 3b 8a 8e ec eb 0d 44 57 75 77 44 57 8e 68 7b a2 2b 47 b4 3b a2 67 8c 10 3d 35 a8 27 3a 03 d1 97 e3 bc 1e 20 88 be 1a 4a 40 44 5f Data Ascii: '(i3Wom$W_[$ <cPWQd{eGX\p#W6dCQudgoq1l_#O/?u=xbzADYw-^0WV,xOg_.Qw<O#t7V:;DWuwDWh{+G;g=5': J@D_
2024-11-21 02:42:34 UTC	250	IN	Data Raw: 46 63 2d 54 28 0b 25 93 61 44 84 d0 01 d4 a4 d3 0a 21 d0 56 0d a4 c0 b4 32 fb a9 63 1b 2c 2c 52 f5 88 30 a9 a0 80 c0 a4 a1 db 18 05 34 80 e2 c7 f9 23 0b e8 6a 4f dc e4 07 d1 9b d2 2e b8 c6 0c d4 14 66 7c 88 39 d4 79 8f 35 9a 0d b4 04 2b 0a 24 23 52 30 82 0b 3a 1c b9 a5 cd 0f 1f af ce 5f bf 7b fe bb b4 9c e0 f2 d2 15 c8 91 dd 21 b2 71 f9 44 f9 9e 7c 6a eb 27 f9 b1 d3 11 9c 4b ba 02 4f 1e 25 90 f2 89 d2 5e 7e 72 e5 d0 3e 52 c5 2e b7 e1 a9 43 d9 a7 27 90 a4 b9 fd e2 49 02 86 87 41 9a cc 8d c8 b0 db 04 06 99 a1 23 3c 1a 82 19 ba 42 ce 8b 0c 96 32 59 fe dc eb 8b 0e 8d 06 c4 36 12 4a 81 bf f8 48 f3 ca 16 20 ce 2d 12 18 52 ec 1e 8d 43 65 a1 2d 3c 9a 9f 9f 98 58 f9 44 78 22 b5 47 b9 40 f5 1b 8a 36 c2 54 82 86 2c 13 7d e4 3c 3c b2 3d 44 52 2a 0d 0a Data Ascii: Fc-T(%aD!V2c,,R04#jO.f\|9y5+$#R0:_{!qD\|j'KO%^~r>R.C'IA#<B2Y6JH -RCe-<XDx"G@6T,}<<=DR*
2024-11-21 02:42:34 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 40 0d 0a 30 30 30 30 30 30 30 31 0d 0a 29 0d 0a 30 30 30 30 30 30 30 31 0d 0a 92 0d 0a 30 30 30 30 30 30 30 31 0d 0a 53 0d 0a 30 30 30 30 30 30 30 31 0d 0a 49 0d 0a 30 30 30 30 30 30 30 31 0d 0a 95 0d 0a 30 30 30 30 30 30 30 31 0d 0a eb 0d 0a 30 30 30 30 30 30 30 31 0d 0a b9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 62 0d 0a 30 30 30 30 30 30 30 31 0d 0a 28 0d 0a 30 30 30 30 30 30 30 31 0d 0a c9 0d 0a 30 30 30 30 30 30 30 31 0d 0a ea 0d 0a 30 30 30 30 30 30 30 31 0d 0a 81 0d 0a 30 30 30 30 30 30 30 31 0d 0a 82 0d 0a 65 38 36 0d 0a 01 26 ef b9 a2 4d 68 63 28 ba 51 4b c7 95 dc 95 2d a0 8b 5b e4 c4 c8 ae 91 d3 12 fa 6d aa 11 20 17 06 07 80 82 44 95 53 63 42 a1 2f 99 87 27 74 c7 78 6e 91 6c 60 12 31 6a d0 17 3d 39 6f 6f 48 d4 ba 28 80 Data Ascii: 00000001@00000001)0000000100000001S00000001I00000001000000010000000100000001b00000001(00000001000000010000000100000001e86&Mhc(QK-[m DScB/'txnl`1j=9ooH(
2024-11-21 02:42:34 UTC	1408	IN	Data Raw: 39 01 a8 ec 85 74 7e 9f 04 42 58 0e 20 62 18 01 89 bf 6a 3d 0d 70 f8 d8 6c 66 45 a1 03 d9 28 91 19 ed 38 14 f8 40 97 b4 80 2f b7 4a 98 a0 5d 9e 32 96 af b8 fc b0 55 a7 14 90 7d 92 b7 87 89 0a 5a 22 e0 3f e0 39 d9 25 e0 0d 4b 23 3c 06 b5 d1 c2 8d 1d 56 6c ca c2 c8 65 0e 8a e0 04 3b aa 48 0b 38 c1 94 29 22 7c 25 ec 98 23 27 98 35 85 dc 94 1d f1 aa 8f cc 84 7d 2a 36 44 07 d4 e0 61 4b d1 a5 3d 5a fc e5 8d 5c 0f 91 a9 47 8b 22 39 61 76 18 6d 2c 34 1e bd f5 81 22 67 64 6d 78 19 0f 89 80 e7 50 3f 0a 61 3a 58 65 db 58 f8 3d 0a 47 fb 44 42 87 73 1e e0 8c bf 2e 6f 19 77 41 4f 07 2b 83 47 d9 11 e7 5f 5d a0 d5 41 34 dd 06 86 9e dc 46 a5 65 c7 a1 fc 0e e1 05 e7 c4 7d 78 d8 2e 65 3d 43 b4 f2 be 71 1f e3 7b 70 a8 1d 62 0a ef df 0e 30 47 8f 12 10 6c 99 b6 79 23 7b 48 eb Data Ascii: 9t~BX bj=plfE(8@/J]2U}Z"?9%K#<Vle;H8)"\|%#'5}*6DaK=Z\G"9avm,4"gdmxP?a:XeX=GDBs.owAO+G_]A4Fe}x.e=Cq{pb0Gly#{H
2024-11-21 02:42:34 UTC	1091	IN	Data Raw: 50 5f 95 ce 9b fa 63 b9 17 bf 0c c2 6c ce 2b a9 0e 94 b1 8b bf a4 63 4f cb 46 c3 2e be 5d 2e 71 70 54 77 c4 cb d3 cc e7 d3 1e a4 33 47 24 9e 0d e2 e5 b2 83 3b 79 8a e3 ee e5 bb b7 f3 de de 79 ef d0 bb ed f3 22 81 03 33 64 91 e5 68 38 49 5a 01 0d 33 32 02 8b eb 8b f5 fb 10 77 cd a2 29 d9 91 74 02 4a 72 01 ee 9b aa 96 32 e6 d8 f1 13 8f 9a ee 0d fb 36 c3 f7 28 bf c2 ab 2a 0e f7 f0 df 1d 60 4d b9 ca e2 ab 7c 80 6b 37 17 bd aa 87 d2 a8 19 91 51 aa 3c e8 ae 57 44 62 a4 be 58 35 6f 5a e0 74 88 74 e5 5b 1f 25 4b 7a 24 8d 89 f2 c3 07 5c 65 41 d9 41 0a 78 9c 26 60 c7 27 ca 3b af da 6f 19 19 e7 7e 64 27 d3 b5 0a 32 fa 9a f6 95 e6 45 11 56 69 11 1e 0c ae 50 27 48 75 4c 85 72 41 aa 04 d0 8a 71 2a 85 23 ac 0c b7 0f 38 ec 58 98 ef a1 ed 63 19 7a 94 7c 1d 7f e9 d8 82 4e Data Ascii: P_cl+cOF.].qpTw3G$;yy"3dh8IZ32w)tJr26(`M\|k7Q<WDbX5oZtt[%Kz$\eAAx&`';o~d'2EViP'HuLrAq#8Xcz\|N
2024-11-21 02:42:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49920	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:34 UTC	658	OUT	GET /ui/domains/ghabovethec.info/resolutions?limit=10&cursor=ClsKEQoEZGF0ZRIJCMyu1OT0vYkDEkJqEXN-dmlydXN0b3RhbGNsb3Vkci0LEgpSZXNvbHV0aW9uIh0xOC4xNTQuMTMyLjM4Z2hhYm92ZXRoZWMuaW5mbwwYACAB HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:34 UTC	225	IN	HTTP/1.1 429 Too Many Requests Content-Type: application/json X-Cloud-Trace-Context: 66ed81c1c0747246db1e95ad693e1cb4 Date: Thu, 21 Nov 2024 02:42:34 GMT Server: Google Frontend Content-Length: 153 Connection: close
2024-11-21 02:42:34 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49897	142.250.186.142	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:34 UTC	640	OUT	GET /adsense/search/async-ads.js HTTP/1.1 Host: cse.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:34 UTC	717	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 149607 Date: Thu, 21 Nov 2024 02:42:34 GMT Expires: Thu, 21 Nov 2024 02:42:34 GMT Cache-Control: private, max-age=3600 ETag: "3695740269991252204" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-21 02:42:34 UTC	673	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 34 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 63 73 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 32 34 38 32 31 34 36 33 37 31 32 32 37 36 34 39 30 35 33 22 2c 70 61 63 6b 61 67 65 73 3a 22 73 65 61 72 63 68 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 33 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 31 2c 31 37 33 30 31 34 33 34 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=4;var sffeData_={service_host:"cse.google.com",hash:"2482146371227649053",packages:"search",module:"ads",version:"3",m:{cei:"17301431,17301434,17301
2024-11-21 02:42:34 UTC	1390	IN	Data Raw: 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 48 4a 68 62 6e 4e 73 59 58 52 6c 4c 6d 64 76 62 32 63 73 64 57 73 75 59 32 39 74 4c 48 56 7a 4c 6d 4e 76 62 53 78 33 5a 57 49 75 59 58 42 77 22 2c 63 64 6c 3a 66 61 6c 73 65 2c 63 64 68 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 63 64 65 6d 3a 7b 22 61 66 73 5f 61 61 5f 62 61 73 65 6c 69 6e 65 22 3a 35 30 30 2c 22 61 66 73 5f 63 68 61 74 62 6f 74 22 3a 35 30 30 2c 22 61 66 73 5f 63 68 61 74 62 6f 74 5f 61 Data Ascii: l:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog",cdem:{"afs_aa_baseline":500,"afs_chatbot":500,"afs_chatbot_a
2024-11-21 02:42:34 UTC	1390	IN	Data Raw: 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 61 79 22 2e 73 70 6c 69 74 28 22 20 22 Data Ascii: Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "
2024-11-21 02:42:34 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 75 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 71 61 28 61 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 2c 62 29 7b 61 2e 72 61 77 3d 62 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 26 26 28 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 61 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 62 29 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 72 61 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 4e 75 6d 62 65 72 Data Ascii: nction oa(a){if(!(a instanceof Array)){a=u(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function pa(a){return qa(a,a)}function qa(a,b){a.raw=b;Object.freeze&&(Object.freeze(a),Object.freeze(b));return a}function ra(){for(var a=Number
2024-11-21 02:42:34 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 76 6f 69 64 20 30 3b 74 72 79 7b 68 3d 67 2e 74 68 65 6e 7d 63 61 74 63 68 28 6b 29 7b 74 68 69 73 2e 56 63 28 6b 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 68 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 4e 66 28 68 2c 67 29 3a 74 68 69 73 2e 48 64 28 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 56 63 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 5a 64 28 32 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 48 64 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 5a 64 28 31 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 5a 64 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 74 68 69 73 2e 42 21 3d 30 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 73 Data Ascii: unction(g){var h=void 0;try{h=g.then}catch(k){this.Vc(k);return}typeof h=="function"?this.Nf(h,g):this.Hd(g)};b.prototype.Vc=function(g){this.Zd(2,g)};b.prototype.Hd=function(g){this.Zd(1,g)};b.prototype.Zd=function(g,h){if(this.B!=0)throw Error("Cannot s
2024-11-21 02:42:34 UTC	1390	IN	Data Raw: 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 0a 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 42 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 5a 61 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 5a 61 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b 6c 2e 42 29 3b 7d 7d 76 61 72 20 6c 3d 74 68 69 73 3b 74 68 69 73 2e 41 61 3d 3d 6e 75 6c 6c 3f 66 2e 72 64 28 6b 29 3a 74 68 69 73 2e 41 61 2e 70 75 73 68 28 6b 29 3b 74 68 69 73 2e 4b 64 3d 21 30 7d 3b 62 2e Data Ascii: .catch=function(g){return this.then(void 0,g)};b.prototype.lb=function(g,h){function k(){switch(l.B){case 1:g(l.Za);break;case 2:h(l.Za);break;default:throw Error("Unexpected state: "+l.B);}}var l=this;this.Aa==null?f.rd(k):this.Aa.push(k);this.Kd=!0};b.
2024-11-21 02:42:34 UTC	1390	IN	Data Raw: 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 0a 6d 3d 6e 65 77 20 61 28 5b 5b 6b 2c 32 5d 2c 5b 6c 2c 33 5d 5d 29 3b 69 66 28 6d 2e 67 65 74 28 6b 29 21 3d 32 7c 7c 6d 2e 67 65 74 28 6c 29 21 3d 33 29 72 65 74 75 72 6e 21 Data Ascii: l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal({}),l=Object.seal({}),m=new a([[k,2],[l,3]]);if(m.get(k)!=2\|\|m.get(l)!=3)return!
2024-11-21 02:42:34 UTC	1390	IN	Data Raw: 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 75 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 75 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 Data Ascii: is[1]=b();this.size=0;if(h){h=u(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var h=Object.seal({x:4}),k=new a(u([[h,"s"]]));if(
2024-11-21 02:42:34 UTC	1390	IN	Data Raw: 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 0a 6d 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 6d 5b 31 5d 2c 6d 5b 30 5d 2c 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 67 3d 30 3b 72 65 74 75 72 6e 20 65 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 Data Ascii: e})};e.prototype.forEach=function(h,k){for(var l=this.entries(),m;!(m=l.next()).done;)m=m.value,h.call(k,m[1],m[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;var g=0;return e});function ua(a,b){a instanceof String&&(a+="");var c=0,d=!1,e={ne
2024-11-21 02:42:34 UTC	1390	IN	Data Raw: 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 3a 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 30 3b 66 3c 65 3b 66 2b 2b 29 7b 76 61 72 20 67 3d 64 5b 66 5d 3b 69 66 28 62 2e 63 61 6c 6c 28 63 2c 67 2c 66 2c 64 29 29 7b 62 3d 67 3b 62 72 65 61 6b 20 61 7d 7d 62 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 62 7d 7d 29 3b 71 28 22 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e 20 62 29 73 61 28 62 2c 64 29 26 26 63 Data Ascii: turn a?a:function(b,c){a:{var d=this;d instanceof String&&(d=String(d));for(var e=d.length,f=0;f<e;f++){var g=d[f];if(b.call(c,g,f,d)){b=g;break a}}b=void 0}return b}});q("Object.entries",function(a){return a?a:function(b){var c=[],d;for(d in b)sa(b,d)&&c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49921	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:34 UTC	690	OUT	GET /gui/90396.306e7eb0c5c689cee651.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:35 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: afa8b1bd8d977faf2804d682415b5cce Content-Encoding: gzip Server: Google Frontend Date: Wed, 20 Nov 2024 14:37:34 GMT Expires: Thu, 20 Nov 2025 14:37:34 GMT Cache-Control: public, max-age=31536000 ETag: "oBosjg" Content-Type: text/javascript Age: 43501 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:35 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 66 66 39 0d 0a 00 02 ff ec 7d 7b 97 db c6 b1 e7 ff fb 29 60 3a 56 48 5f 02 e2 63 38 0f 8e 29 45 51 9c ac 76 9d c4 47 92 73 f7 ae 56 47 06 49 90 44 04 12 bc 00 38 8f d0 bc 9f 7d 7f 55 d5 dd e8 06 c0 99 91 ec 3c ee 39 63 c7 11 d5 8f ea ea ea ea aa ea aa ea 46 6b 97 47 5e 5e 64 f1 ac 68 5d b6 f3 28 59 04 d7 d1 74 1b ce 3e be 5c ed 36 1f af 8a 0f bb f8 c3 3a 8c 37 93 3b ea 7e fa e9 dd fb 4e b0 dd e5 ab f6 bb 77 17 bd e1 c5 69 f7 fc 74 70 32 7c df dd f7 7b 83 fe 60 dc ce ba 51 37 Data Ascii: 000000010000000100000001000000010000000100000001000000010000ff9}{)`:VH_c8)EQvGsVGID8}U<9cFkG^^dh](Yt>\6:7;~Nwitp2\|{`Q7
2024-11-21 02:42:35 UTC	1408	IN	Data Raw: e3 f4 70 b8 dc b6 df 81 ea 61 b0 55 d2 0b 54 27 09 35 fe 6d 9a 26 51 b8 39 74 de 77 57 54 59 a4 54 dc 6d e9 25 69 75 af d2 78 ee f5 3a dd 63 10 04 89 1a 00 8d c3 5b 90 f7 b3 41 08 cd 7e 36 80 92 6e 25 a8 d5 44 4f 68 b6 cb 8b 74 ad e4 4b a7 4d 1c e1 4f 77 45 01 71 d7 22 b2 74 0e dd 51 1f aa e5 67 2a ad 8b b3 d3 13 d1 4e 9b ee bc 9b 94 da 69 f6 a8 9d 7e 01 ed 14 07 b3 55 04 23 25 ce 66 49 c4 6a 26 0e a2 1b 08 99 35 24 7c ba 79 9b 61 63 43 6b a9 9a 1b 48 4d b7 6d bc 59 a4 65 67 d6 43 eb 5f 40 0f 25 d1 55 94 4c 5a 50 aa e1 2e 29 3e 45 e1 bc 9b 06 2f de df a5 72 36 50 0f 9b 49 e2 aa 9c 30 81 6d 22 52 1e 82 9d c4 ae 17 cf 27 2d 68 4d e8 d2 e2 0d fe 6e 14 51 9e a4 c5 33 88 66 fa 03 a2 59 8b 68 52 4f 4d 42 ba c5 a0 fd 7c 37 9b 45 79 de 1a b7 f4 2f 25 2b 79 a6 5d Data Ascii: paUT'5m&Q9twWTYTm%iux:c[A~6n%DOhtKMOwEq"tQg*Ni~U#%fIj&5$\|yacCkHMmYegC_@%ULZP.)>E/r6PI0m"R'-hMnQ3fYhROMB\|7Ey/%+y]
2024-11-21 02:42:35 UTC	1408	IN	Data Raw: af 0a d6 59 24 3b 9c b9 d7 f1 c6 bf 5a 11 bb 95 ec 1a 4e 61 2e 41 4f 60 95 b6 e0 46 f8 7a b2 a2 c6 69 b0 e4 ec ce 70 40 de f8 9b f4 3a 0b b7 15 be b5 46 f7 93 68 01 ff 0d 80 af 37 c0 24 f1 fb 03 fe 23 59 fa 27 fc e3 e6 26 f1 87 de 16 1e 26 e5 d5 62 b0 4b 8c 05 3c f8 77 be 82 37 e2 63 0d 9b 75 e1 87 bb 22 a5 a1 43 cf f2 3b e9 f5 9c fb f1 86 7d 59 04 c4 5b 5c fb d3 34 99 b3 cf 6c e0 a1 fc a3 f1 71 ad a7 fe 09 41 89 75 4f c7 57 c5 0c 8d 15 89 9f 79 7f 48 bd 29 f9 dd d8 dd 64 39 dd 74 93 da fe 99 83 3c 1b 12 01 98 2d 4b 01 35 75 6f 8a bf 63 57 61 da 6a 37 e7 b3 f4 0a 0b b4 2c 62 f8 ba a0 b1 e1 5a c3 11 0a 92 aa a1 1c e3 cb 48 ce 1f e2 fe 0a 6d d7 e2 12 ae c5 2e ab d0 19 79 a8 b4 e7 04 9e 08 c5 b5 2d a8 49 ae 67 8d 4c ea e7 cf 3b 08 63 18 8b e2 a3 86 ae e5 9a Data Ascii: Y$;ZNa.AO`Fzip@:Fh7$#Y'&&bK<w7cu"C;}Y[\4lqAuOWyH)d9t<-K5uocWaj7,bZHm.y-IgL;c
2024-11-21 02:42:35 UTC	316	IN	Data Raw: 6f e1 24 c9 c7 c0 a6 3e 30 8e 6a cd 6d 2f 28 4f ed 2f 74 aa c2 89 89 dc bd f5 29 c6 39 84 1d 8f 86 69 ca 3c c5 f8 e0 79 be c5 89 e4 a7 9f 54 79 be 83 37 2b 17 93 bc 85 7e aa 17 63 17 e7 64 ce bc 9a f3 60 32 12 fb a4 b9 f2 83 f8 ac b5 c1 f3 e2 0a 1e 5a da 63 dc ae 71 4c 99 44 05 11 e5 1b 2e b1 a0 98 63 18 88 b3 73 87 f3 ec 4e 9c 9d 14 74 55 3b a0 ae 57 bd b7 48 4f 32 c6 91 47 bf 11 71 52 08 11 63 a9 38 ac 6d f4 58 13 c7 1e 7e 53 22 30 e6 4d a5 3b e9 58 a6 d5 dc c6 70 01 0c 17 c0 90 8c a2 86 a6 76 06 92 9e d4 2d ba 20 dc f0 a3 91 8c 5f e2 28 3d c3 f1 e8 a3 36 b7 c4 da 52 69 3d 11 82 00 11 42 a2 88 79 6f 0a f0 21 85 bc b5 b7 00 79 31 c9 6d 89 3a bb a0 25 67 67 dc 6a 75 f0 df 83 58 43 db 05 86 39 ba 16 23 b4 4b 77 08 2f bb 6e 7c c4 17 02 f6 d9 45 48 96 13 06 Data Ascii: o$>0jm/(O/t)9i<yTy7+~cd`2ZcqLD.csNtU;WHO2GqRc8mX~S"0M;Xpv- _(=6Ri=Byo!y1m:%ggjuXC9#Kw/n\|EH
2024-11-21 02:42:35 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 5d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 60 0d 0a 30 30 30 30 30 30 30 31 0d 0a 62 0d 0a 30 30 30 30 30 30 30 31 0d 0a d7 0d 0a 30 30 30 30 30 30 30 31 0d 0a d9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 20 0d 0a 30 30 30 30 30 30 30 31 0d 0a 53 0d 0a 30 30 30 30 30 30 30 31 0d 0a 0d 0d 0a 30 30 30 30 30 30 30 31 0d 0a 32 0d 0a 30 30 30 30 30 30 30 31 0d 0a 95 0d 0a 30 30 31 0d 0a ce 0d 0a 30 66 66 35 0d 0a 77 2e 81 ec 5f 96 23 86 28 cd 2e ac 3f bc 7d c5 e6 c7 9f 17 ca 86 81 3f ab d1 d7 85 86 4a 93 8b 22 47 3b 1e 45 c5 3e 6a 74 bd 4f 8c 6b cf 97 f6 84 95 09 84 7a 1b 7d c4 36 fa 48 db 48 7c da 5a 38 b0 89 a6 f2 f2 2c 2f 29 6b 53 e5 98 af 44 00 e0 84 37 a9 80 ae 29 66 39 56 21 21 a0 5e c9 e9 cf 0e 50 ad 9e 45 49 3f a4 3b 78 7c 99 96 56 Data Ascii: 00000001]00000001`00000001b000000010000000100000001 00000001S00000001000000012000000010010ff5w._#(.?}?J"G;E>jtOkz}6HH\|Z8,/)kSD7)f9V!!^PEI?;x\|V
2024-11-21 02:42:35 UTC	1408	IN	Data Raw: c2 ed 2e 43 a2 05 15 2e 4e 06 b3 be 2a 44 be 14 75 e6 7f a4 08 36 31 4a 66 a3 c1 c9 a0 27 25 30 c1 11 8b 46 61 34 3a 1b f6 54 e1 2d f2 34 d2 6b 14 2e 66 d1 c5 e9 99 b4 a4 08 d1 06 65 c3 8b 70 76 32 93 b2 02 a9 82 28 1a f4 66 17 17 aa d9 ec 36 a4 56 83 f3 b3 e9 74 24 ad 10 10 82 e5 cf 98 48 c1 f5 0a 87 07 14 2c 16 0b 0d 3b bc c5 df 4f f9 9f b2 08 79 32 19 75 1c f2 3f 56 39 d2 e0 a8 fb 05 fd 6b 15 23 67 9e 8a 07 f4 af 55 8c 79 a1 38 3a a5 7f ad e2 13 2e 9e f1 3f 56 31 4e 69 68 3d 1d d2 bf 56 f1 29 17 d7 30 3c e3 e2 93 39 fd 6b b5 3e e7 e2 1a de 17 5c dc 0f e9 5f 69 ad 22 3f 18 d1 5e 64 15 08 41 a9 4d 6d ba fd 42 0d 7b 67 53 3d 11 75 a1 06 a5 f6 fa 49 7a 11 0a ed 95 56 23 f9 d9 72 3a f6 fa fd ae 77 76 d6 f5 06 fd 73 c1 43 8d 28 b5 23 d4 f4 cf 06 68 a2 e8 45 Data Ascii: .C.N*Du61Jf'%0Fa4:T-4k.fepv2(f6Vt$H,;Oy2u?V9k#gUy8:.?V1Nih=V)0<9k>\_i"?^dAMmB{gS=uIzV#r:wvsC(#hE
2024-11-21 02:42:35 UTC	1408	IN	Data Raw: 5d 14 b0 6a d6 91 8f db e7 85 bf 88 a3 64 9e fb 74 15 0a ef 06 75 8f 35 23 e4 8e 56 22 07 17 77 06 8e 56 23 67 0c 17 b8 68 9c a3 4d e6 21 6c 97 3b 5b c0 8e 2a 56 f7 b4 b9 25 83 8a c1 94 a4 b0 26 ce 44 f2 f3 2d dc 2f 92 9a b8 57 46 0c dd d2 b0 da c9 e3 35 7e c9 25 7b 4d 3a a2 11 52 8f c1 a9 55 a2 f2 52 fa f9 35 45 01 34 31 1b 91 58 c4 49 e4 ef b6 94 59 a1 b1 20 f3 6c ac b9 a0 61 28 41 16 08 72 5f b9 ce 91 66 9f da db f2 a7 20 e1 f5 e3 16 5e a8 c2 bf 21 bd a3 b4 5e 59 4a da 66 74 76 6a f4 61 59 b3 86 e7 e4 ec f4 bc a1 86 84 ed c5 05 44 65 0d 1a ab 1f 38 25 9a aa b8 0e d6 e5 f6 e6 10 20 0d 54 76 20 bd e6 a4 58 d9 bf 81 ea 72 f4 9e 55 c7 92 d4 52 7a a8 72 ec 5f 85 89 2e ae 5a b9 ba 5c 1b b9 70 79 94 3d b0 d9 9b 6c 5c f4 51 12 d3 c8 18 b6 55 b9 50 eb 43 34 22 Data Ascii: ]jdtu5#V"wV#ghM!l;[*V%&D-/WF5~%{M:RUR5E41XIY la(Ar_f ^!^YJftvjaYDe8% Tv XrURzr_.Z\py=l\QUPC4"
2024-11-21 02:42:35 UTC	7	IN	Data Raw: 44 05 4c 22 ce 0d 0a Data Ascii: DL"
2024-11-21 02:42:35 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 63 0d 0a 30 30 30 30 30 30 30 31 0d 0a 9a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8e 0d 0a 30 30 30 30 30 30 30 31 0d 0a 32 0d 0a 30 30 30 30 30 30 30 31 0d 0a e9 0d 0a 30 30 30 30 30 30 30 31 0d 0a 1e 0d 0a 30 30 30 30 30 30 30 31 0d 0a d3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 74 0d 0a 30 30 30 30 30 30 30 31 0d 0a ac 0d 0a 30 30 30 30 30 30 30 31 0d 0a 24 0d 0a 30 30 30 31 31 35 32 0d 0a a3 c7 34 1d 1f 4e d7 8f 15 a7 97 ed 58 aa 56 3f a6 e9 50 6e ba 73 a0 7f 4c d3 79 4c d3 01 53 58 79 38 ca 21 50 4f c0 c1 7d d9 18 19 00 ce d9 be de 4a 67 e1 68 30 ff 3d d2 74 56 d9 1e 1f 13 59 c6 1b f6 bc 22 c1 a0 e2 42 b0 67 ad a3 54 1c ed 61 9f 19 2e fd d6 1c 66 12 18 57 b9 78 c6 bf 7a 58 8d ba 01 fe 5b 9d e0 8f 13 35 a6 4f fd 7b f0 7e 12 02 20 Data Ascii: 00000001c000000010000000100000001200000001000000010000000100000001t0000000100000001$00011524NXV?PnsLyLSXy8!PO}Jgh0=tVY"BgTa.fWxzX[5O{~
2024-11-21 02:42:35 UTC	1408	IN	Data Raw: f2 06 e5 5c e2 16 1d 6b 5b 5f 64 f1 00 ea 97 4d df ef d5 d8 ea 88 c0 6b 56 ef a4 af 5d 68 d4 b0 33 a0 db c7 53 76 7e 6c e0 c5 6e 5f f4 be c2 25 aa c6 e2 06 70 9c be a8 87 ae 18 1b 77 db e6 74 80 96 bb dd 16 f5 f8 c9 89 4e 57 ea 86 b8 f3 6d ea 14 b0 f2 c1 16 23 09 ca 6d 32 66 62 44 73 3b 05 5d 70 d2 d9 f9 f6 fa 8c 55 61 c3 ac 14 9c 2a 85 d9 bf d2 c0 73 56 62 ae 55 2b f6 b5 02 45 78 0b 7f d6 87 ab 0c 83 eb 74 73 7c eb 36 83 30 41 12 7c 7d 2e 55 92 18 3b e9 18 f9 3f 07 6d 07 87 bb 90 37 2e e9 7d 93 9d 58 61 33 d6 46 8a b7 f8 b7 36 97 83 51 03 59 b4 6d fd fe bf 6c 81 c8 01 82 ae 5d c2 84 36 78 d4 1b 6b af b6 7a df cd 9c 8a 68 50 e7 a3 12 5a f0 8a 47 02 62 06 e1 41 3d 92 94 e1 bb c3 72 f7 ff 08 cb f3 f2 d7 c3 8a a5 33 d2 72 5b b2 ec 46 c8 8a 02 45 8e d4 12 21 Data Ascii: \k[_dMkV]h3Sv~ln_%pwtNWm#m2fbDs;]pUa*sVbU+Exts\|60A\|}.U;?m7.}Xa3F6QYml]6xkzhPZGbA=r3r[FE!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49922	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:34 UTC	649	OUT	GET /ui/domains/ghabovethec.info/referrer_files?limit=10&cursor=MTB8fHYzfHwxNzMyMTU2OTQ4fHw1Y2NkYjc2MmU2YzExMmNhYzI1YWI5NzdhMzliZjNmMzU4NTVmOTVjZGFlZjg3NDY4NzRjN2M1MGNlMDcyYTY3 HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:35 UTC	225	IN	HTTP/1.1 429 Too Many Requests Content-Type: application/json X-Cloud-Trace-Context: 05a2ab343ba91381964fab001ce00f8c Date: Thu, 21 Nov 2024 02:42:35 GMT Server: Google Frontend Content-Length: 153 Connection: close
2024-11-21 02:42:35 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49926	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:35 UTC	779	OUT	GET /graph/assets/images/relationships/dark-default-resolutions.png HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:36 UTC	313	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 8b67d3bfc674183f0aba321323f8de14 Server: Google Frontend Date: Tue, 19 Nov 2024 19:03:11 GMT Expires: Thu, 19 Dec 2024 19:03:11 GMT Cache-Control: public, max-age=2592000 ETag: "_R0--g" Content-Type: image/png Content-Length: 2755 Age: 113964 Connection: close
2024-11-21 02:42:36 UTC	1095	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 75 49 44 41 54 78 9c d5 5b 69 70 54 c7 11 5e 5c 71 7e c5 51 40 9a 11 32 18 8c f4 de 0a 14 0e 61 71 c4 1c 31 09 20 9b 14 2e 2e 99 90 70 99 84 1b 1b 02 81 90 22 20 c0 2e c0 46 48 c8 40 c0 11 e6 16 02 db 40 20 86 54 81 4d 1c 11 0b 73 09 01 02 53 71 c5 58 80 12 47 08 49 dc 05 02 69 52 df 48 f3 32 3b fb de 6a f7 bd b7 5a dc 55 5d 5a bd 63 66 ba 77 ba a7 fb eb 5e 8f 27 cc 14 1b 1b 4f 09 d1 d2 28 d5 16 12 a2 ed a0 54 2f 24 44 bb 44 a9 5e 49 a9 56 5d c7 7a 65 fd 35 dc cb a3 54 4b 27 44 1b 86 77 3d df 46 6a de dc db 95 10 3d 8b 10 bd 98 52 bd 96 52 9d d9 e4 5a 8c 41 88 96 19 1d 9d d8 c5 f3 38 53 Data Ascii: PNGIHDR@@iqpHYsuIDATx[ipT^\q~Q@2aq1 ..p" .FH@@ TMsSqXGIiRH2;jZU]Zcfw^'O(T/$DD^IV]ze5TK'Dw=Fj=RRZA8S
2024-11-21 02:42:36 UTC	1408	IN	Data Raw: 07 90 7b 8b 94 16 df be 9b 0b 1b 3d 7a 32 b3 22 1c 5f 83 06 fd d2 b5 b9 c4 2e 80 ff 52 f1 84 98 18 ad b3 fc ed 67 c9 37 c7 8d 9b 66 2c 0a 59 9d 9b 0a 00 af 5d bb c1 52 09 35 35 35 dc f7 b8 61 72 f0 33 82 fc 33 47 29 44 26 44 3f 2f df 04 92 23 f2 79 27 29 2d b4 6e 85 e4 bc f3 ce bb c6 e2 4a 4a ae f0 e0 0a f6 2a 08 38 82 53 25 e0 04 10 88 d4 be 7d 7f 55 15 50 c4 85 07 f6 2e 43 d7 38 4b 05 08 81 45 d8 9d 1c a1 f3 b5 6b e5 9c 93 92 7e 64 fa 4c 46 c6 2a 1e 56 7f f2 49 3e ff bf 4b 97 9f b0 8b 17 ff 69 28 e1 ad b7 b2 1d ef 82 5d bb f6 f1 b1 6e dc b8 a9 c6 30 b5 71 71 de 18 c4 fd 69 f2 0b 03 06 bc 62 2c 60 ea d4 d9 b6 27 de bb f7 00 1f 03 02 5a 24 28 9c 11 b7 cb e0 a7 d7 db 85 7d f9 e5 bf 0c 73 e8 db 77 90 23 05 4c 9f 3e d7 90 07 0e 58 be 47 88 3e 14 db 7f 91 7c Data Ascii: {=z2"_.Rg7f,Y]R555ar33G)D&D?/#y')-nJJ8S%}UP.C8KEk~dLFVI>Ki(]n0qqib,`'Z$(}sw#L>XG>\|
2024-11-21 02:42:36 UTC	252	IN	Data Raw: 86 6e 2c 2c 2e d0 cf 5e d0 73 04 a4 09 e6 23 7e 32 83 cf b8 86 d4 5b b6 6d 99 90 d2 22 ab 33 03 3e ea f9 66 4c 4c c2 70 5b 42 85 4a 38 53 d1 7b 6b f5 0d 22 b7 47 33 14 50 1f 40 56 76 09 ca 40 c6 07 33 0b 5c 5f d0 f2 63 63 bd 6d 3c 11 fa d9 5c 59 a0 ed 0c 1c 2e 35 75 28 6f 4e 40 7d 1e d8 3c 7a 82 ea 7e 36 57 6d fc 6c 0e d7 00 7f e1 19 a0 b7 e8 e6 68 a8 2d b7 be aa 35 31 ac 5b be 21 42 ef 6d fd 6f 7d 7d 4a 6c e1 64 42 b4 eb c8 ea 1a 4c 6c 1a 93 08 49 fa 1e 80 06 b5 e3 cc 5d c1 81 5a 69 33 31 97 e7 71 a6 98 18 ad 73 dd 89 a1 9d 01 fc ec 40 e8 1a b4 b3 01 c0 f4 c3 f0 be 2d 14 17 e7 8d 41 2c 8e 2a 0c 22 33 4a b5 93 84 68 5f c1 64 50 9a af 67 7c fe aa ee 9e 9e 8b 67 51 b4 30 70 fb 30 d2 ff 00 65 25 1f f4 4a c6 c9 e5 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: n,,.^s#~2[m"3>fLLp[BJ8S{k"G3P@Vv@3\_ccm<\Y.5u(oN@}<z~6Wmlh-51[!Bmo}}JldBLlI]Zi31qs@-A,*"3Jh_dPg\|gQ0p0e%JIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49927	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:35 UTC	511	OUT	GET /gui/88116.be3428c199d3d7ca9393.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:36 UTC	350	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: a089db8509805b014eb689fcef521354 Content-Encoding: gzip Server: Google Frontend Date: Fri, 15 Nov 2024 17:38:34 GMT Expires: Sat, 15 Nov 2025 17:38:34 GMT Cache-Control: public, max-age=31536000 ETag: "fs6b4A" Content-Type: text/javascript Age: 464641 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:36 UTC	1058	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a ec 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5c 0d 0a 30 30 30 30 30 30 30 31 0d 0a 6b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 77 0d 0a 30 30 30 30 30 30 30 31 0d 0a db 0d 0a 30 30 30 30 30 30 30 31 0d 0a 38 0d 0a 30 30 30 30 30 30 30 31 0d 0a 92 0d 0a 30 30 30 30 30 30 30 31 0d 0a fd 0d 0a 30 30 30 30 30 30 30 31 0d 0a be 0d 0a 30 30 30 30 30 30 30 31 Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001\00000001k00000001w0000000100000001800000001000000010000000100000001
2024-11-21 02:42:36 UTC	1408	IN	Data Raw: 1d 6d 27 fa 28 3e 39 c2 c6 cf 76 af 71 6e 4b 95 b1 ca e9 cc fb 8f 0b 32 62 93 5a ab 28 b2 16 fa b2 f1 2e fd 34 8c fd b4 84 89 4e d5 20 52 69 34 0d 31 4d c5 a3 f5 e1 f6 c7 76 59 99 8f f0 0a e1 e7 c1 e2 17 3f f7 97 85 e7 af 56 50 92 76 4b eb 5b 4b b3 ab 28 39 5f 69 ff 59 4f ec f3 3a 8f 77 3a 6b c6 df 67 36 c8 94 d9 1d dc 74 3a 6f 93 5e b2 25 e7 d7 bf fe 7e 53 6e af 35 89 e9 ef 37 f9 f6 d7 71 b9 dd 4e 56 ed 8f 90 7a e1 ad 94 f7 82 d4 c9 43 8d ff 9c 65 89 f0 d3 ad fd c9 99 53 65 99 51 b1 d3 d2 4b d2 72 1e b2 38 b4 3a b6 73 8c 82 64 62 8f 80 e6 e1 3d c4 fb 4f 93 90 32 fb 1f 13 a8 e5 56 93 9a 4f f5 84 82 75 51 66 4b e5 5f ec 36 69 84 3b 5b 97 25 dc 5d 8b c4 62 6f 1d 0e 38 46 d0 2a 3d 38 7d a8 a7 17 c2 3f 6e 6a d7 36 6e 23 a4 65 86 af db da 1c 80 28 c0 c9 f8 b5 Data Ascii: m'(>9vqnK2bZ(.4N Ri41MvY?VPvK[K(9_iYO:w:kg6t:o^%~Sn57qNVzCeSeQKr8:sdb=O2VOuQfK_6i;[%]bo8F*=8}?nj6n#e(
2024-11-21 02:42:36 UTC	1408	IN	Data Raw: 28 e0 46 43 f1 e9 e5 a5 f0 fe 4a 7b aa 9f 64 07 68 10 02 c5 4d 0a 24 87 5d 03 69 43 0a 3f 71 2a d7 1a cb b2 c2 be 1e 52 0d b1 f3 5e cf 96 50 57 1d 65 19 8c 69 8d dd f1 c0 14 86 4b 18 92 80 85 88 07 ec 63 bf 17 91 bf 4e e0 fb 69 33 55 66 2b 70 b7 f2 e7 ec 97 50 96 93 07 ab a2 2b 99 b2 1f 62 15 a7 af 3a ca 14 e3 e9 86 38 83 99 e9 24 0f ac 3a e7 50 c8 ee 0b 53 38 64 da 8c 4e 1d 3d 83 aa 6b 81 ae ba 70 af bb 61 aa b2 3b 32 38 98 42 3e ce 0f 61 86 ed 84 a6 ea 4f a8 b2 06 0d 48 e7 c4 d8 ec 95 2b f6 20 70 37 c8 ee e4 2c 7e ed 6f 4d 86 7d ed 1c 7c 09 a7 ed 89 0c 60 fb d1 3e 56 88 59 03 d8 2a 54 36 c4 af 16 a8 74 38 bf 95 7b 5f f0 e7 8e 1c 29 f1 de 7d f0 d6 1c 50 c8 8b c8 20 81 25 6a c0 f5 0d e2 8d 3f 16 08 6e 48 e9 29 1c 51 4e b9 6b b0 46 9e 26 85 ce 8b dc 74 cb Data Ascii: (FCJ{dhM$]iC?qR^PWeiKcNi3Uf+pP+b:8$:PS8dN=kpa;28B>aOH+ p7,~oM}\|`>VYT6t8{_)}P %j?nH)QNkF&t
2024-11-21 02:42:36 UTC	479	IN	Data Raw: ca 48 57 48 6c bc ab 1b 59 14 fd b6 89 b3 f6 58 1c 78 28 0b 21 15 dd ba 94 cb ac 02 95 54 68 52 33 c0 19 58 0b 07 6a d6 fe fd 06 6c 15 2d 65 16 4c 1c 69 0f 98 67 80 4c e2 1c ca 4f 4e 8e fa d3 b1 6b a5 91 12 17 b4 ae 74 aa 1a b6 5d 1f cc 6a 7b db d7 64 93 6b 9c 09 23 51 c2 67 63 6c 72 05 3c 09 c0 87 8b 23 69 cd 8d f4 10 d5 fa e9 03 6b 75 50 0d d7 a0 4f 16 2b 2e 39 e0 43 f1 2e 4f 25 e5 5a 7f 10 e1 f2 25 9d 95 b3 9f 94 94 e5 b3 b9 3f 56 25 66 d2 fa 40 a3 57 4c a3 d1 8f f3 b1 aa 58 0b a5 ce df 23 c3 21 37 a2 ef 39 db e3 b1 98 45 a8 4f a5 55 56 a1 f2 a9 46 2c 90 5b 98 7d 4c fb 0c cf fa cc 98 d6 08 57 e6 1d 01 6b f9 4c c7 ee cd 75 33 e0 4a eb ea 67 c2 1b c6 19 7c b5 80 c6 a1 a5 55 c1 7f ba e3 c0 aa 40 45 32 3f bf 57 a0 77 17 55 5b 44 7f 83 98 5e 0c 2c 82 11 e1 Data Ascii: HWHlYXx(!ThR3Xjl-eLigLONkt]j{dk#Qgclr<#ikuPO+.9C.O%Z%?V%f@WLX#!79EOUVF,[}LWkLu3Jg\|U@E2?WwU[D^,
2024-11-21 02:42:36 UTC	1408	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a dd 0d 0a 30 30 30 62 61 39 0d 0a c8 50 61 e6 21 16 8f 74 25 e3 8e 12 49 b8 a7 46 49 e0 e9 dd d6 e1 9b 7f c6 95 0a ca 29 d0 95 8b 8b d1 70 80 6b 0d b8 53 e8 e1 62 80 bc 51 d8 bf c0 3d 42 be 1e 81 b2 18 a6 d3 c6 41 95 3d f1 3d 79 5b 51 78 71 e8 fc f1 f4 bb 57 ff 99 5a df 59 b8 1d 53 e2 30 c3 5f 59 d6 c3 d0 eb 7b 3d ab 4d 59 bd 02 69 3d b8 bd 99 ae 45 32 76 79 6a 73 8f 37 d9 ea 39 8f e7 8b d2 ea 75 ba 5d b7 d7 e9 f5 ad f7 38 74 a8 29 11 80 c9 f2 82 5b ff 18 e3 5a 56 81 a3 0c ba bd 95 5b 3f dd bc 37 06 e0 9b 73 4c ba 7c 9c 15 a7 d5 68 a7 d8 d0 cd 4e e9 0a e6 e9 8f 37 6f de be bb 7b cb 43 9f 8e 29 0b b9 71 dd 59 81 2d df 5a 8c ad df 75 66 83 30 f4 27 5c 14 e3 6a d3 3c 43 e1 d9 59 b7 13 f5 64 e1 6a 9d 03 ee 52 61 34 e8 05 5d 55 88 Data Ascii: 00000001000ba9Pa!t%IFI)pkSbQ=BA==y[QxqWZYS0_Y{=MYi=E2vyjs79u]8t)[ZV[?7sL\|hN7o{C)qY-Zuf0'\j<CYdjRa4]U
2024-11-21 02:42:36 UTC	1408	IN	Data Raw: a3 da d4 47 78 d6 bd 56 b1 bc d4 54 91 31 31 32 93 d1 0d 76 08 c9 76 db ef 9c ef c6 e3 99 40 4b 41 4f 08 97 22 df 20 6b eb 22 94 10 12 57 bd 50 b2 fd d3 12 c7 f7 7e 1b 97 9d 90 b3 2b 70 55 33 84 61 84 ee 32 a3 a3 26 f2 12 38 40 a5 2a 91 06 b8 9d 23 b7 7d 78 17 0d d7 e2 dc 99 c0 3d bb 18 01 a5 58 62 33 b8 d8 6e 7d dc 69 a6 00 c3 42 aa 14 b3 e9 99 10 27 9b 35 4a ec f0 9e 08 95 8c 59 0d 2f 45 4e 6a eb 8f d9 39 6d 38 58 36 a9 19 fa 7f c8 4d d9 e8 8b 33 b6 f6 47 ba 9e f7 c9 96 cf 9c e1 fe 84 5d f9 d1 2a 35 9e 9c 8c 76 bf 07 59 2b 1e e6 1b 9c 68 12 0a 49 5c 3e fd 1d 2f 71 a4 96 88 ed 78 0c 19 fe 03 11 1f f9 05 64 ad 71 4f 60 b3 c2 49 10 49 bf 33 51 f2 e7 1b 06 e0 02 73 44 73 bc f9 78 1f d3 31 62 09 54 b3 14 2e d6 a5 74 23 ba 10 5c b8 74 1b 00 2f 9f 39 c7 9a 11 Data Ascii: GxVT112vv@KAO" k"WP~+pU3a2&8@#}x=Xb3n}iB'5JY/ENj9m8X6M3G]5vY+hI\>/qxdqO`II3QsDsx1bT.t#\t/9
2024-11-21 02:42:36 UTC	192	IN	Data Raw: 94 38 49 32 5f 2f 8e 9a cc 2e 23 ea 20 c3 10 a8 31 eb 8a b4 11 36 80 25 f6 04 d4 70 90 8d 4e 15 31 a3 d7 6e c8 57 ce 53 62 20 4a 16 d5 4c 1f 69 4a 6f c5 6e 64 0a 8e dc ab 9c 53 35 2e 5f 18 6b 84 4e 63 5f 65 9c 4b d8 db 3f 3a ad 16 d2 60 b9 f7 7a ea e3 9b 42 e8 eb 35 fe b9 6b 2d fc 35 59 17 17 17 67 23 fa 66 0d 5f df 72 99 79 71 3b a5 bb f9 33 f3 ba 0b de d1 af 86 9d 6d b7 9f ec c9 bf 9c 9e fe 0e db 10 3a f3 c3 37 f4 c0 f5 cf f1 9d 37 53 fe 22 2f 6f 26 fa 83 de 45 d0 1d 8d c2 7e 78 1e f8 a3 fe a8 ef fd bd a0 2f 30 fa 6f 00 00 00 ff ff 03 00 c8 46 7e 8b 3c 4c 00 00 0d 0a Data Ascii: 8I2_/.# 16%pN1nWSb JLiJondS5._kNc_eK?:`zB5k-5Yg#f_ryq;3m:77S"/o&E~x/0oF~<L
2024-11-21 02:42:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49925	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:35 UTC	524	OUT	GET /gui/vt-ui-sw-installer.3166763520a2b299ee12.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:35 UTC	349	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: 7c2c2bf90c06f90cc9666bcdfde27501 Content-Encoding: gzip Server: Google Frontend Date: Wed, 20 Nov 2024 22:03:58 GMT Expires: Thu, 20 Nov 2025 22:03:58 GMT Cache-Control: public, max-age=31536000 ETag: "V0s7xg" Content-Type: text/javascript Age: 16717 Connection: close Transfer-Encoding: chunked
2024-11-21 02:42:35 UTC	1059	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a 94 0d 0a 30 30 30 30 30 30 30 31 0d 0a 5a 0d 0a 30 30 30 30 30 30 30 31 0d 0a 59 0d 0a 30 30 30 30 30 30 30 31 0d 0a 73 0d 0a 30 30 66 66 32 0d 0a db 38 b6 7e bf bf 82 e6 74 a9 c8 09 c5 c8 4b 36 2a b4 db 93 4e dd 72 75 a6 3b d5 4e c6 0f 6e 5f 37 44 41 12 62 0a d0 80 90 14 b7 ac ff 7e bf 03 80 8b 25 a7 27 f3 90 0a 04 02 38 07 67 f9 ce 02 87 cb Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001Z00000001Y00000001s00ff28~tK6*Nru;Nn_7DAb~%'8g
2024-11-21 02:42:35 UTC	1408	IN	Data Raw: 44 1a e6 e5 50 05 92 89 1f 1e 48 40 71 2a 25 be c2 df 8c cc 07 f8 4f 4b 2b f8 12 43 de 0e 55 3b 5c ba 75 cc cd 5c 72 43 be da 81 c4 da 8a 74 3a 91 09 59 b4 70 41 03 20 06 9f 37 f2 74 00 07 5f 45 32 ad 0a 2d 16 06 5a c7 01 95 04 26 7a d8 89 c1 1a fc 17 0e 30 67 b2 e0 a9 54 eb 28 3e d5 e9 52 3e 7b c9 4f ce e0 d1 2b d0 b6 c6 36 57 2b fe 7e c5 a5 f9 20 2a c3 25 07 e2 2d 17 40 75 3e 51 4b 39 0e 2d 67 71 9c 61 cb 8c b6 e8 94 c9 94 8d 11 d0 00 08 b8 69 a3 5e 09 f5 3e 7b 46 dc 25 76 c1 ce 99 08 7a 86 17 08 2b 53 4e 67 96 30 2a fb df 23 85 90 71 4a 00 19 6e 0d 5b 4c 0d d3 53 c8 06 81 30 b5 db 13 95 73 a8 83 98 4f 58 be a9 d6 19 4f 44 f5 fe ab e1 5a b2 32 53 89 d2 62 2a 30 b4 b4 33 b3 1d 1e a8 5e 4f a7 73 09 05 b2 54 54 9f ed c5 72 42 3b 9d 8e 45 b5 a0 88 69 17 47 Data Ascii: DPH@q%OK+CU;\u\rCt:YpA 7t_E2-Z&z0gT(>R>{O+6W+~ %-@u>QK9-gqai^>{F%vz+SNg0#qJn[LS0sOXODZ2Sb03^OsTTrB;EiG
2024-11-21 02:42:35 UTC	1408	IN	Data Raw: f3 76 c3 c3 43 88 2a d4 0e cf dc 7d 26 00 59 30 9d 85 e7 75 62 eb 17 3e ff bf e8 2c fb 2c 1e 2e 62 69 30 7a fd 70 f8 f2 e1 f8 28 c6 f0 5d c9 e6 0b 3e 8e dd 09 3f 3c 4f 0d af 0c da 8b 67 ee 6e 35 06 51 43 0c 42 42 e8 04 76 85 e8 5f 8d b8 c6 d9 54 f6 53 d3 af ee e5 6c 70 0b 74 11 20 63 97 d7 0d 6a 83 6c 44 db b8 9e 3e c5 ed 5c 8b ec 6c 33 56 d2 a6 19 99 1f 1d 26 b6 e9 95 99 6b fd ec d9 cd 76 bb 7d b2 c9 77 21 b1 0a 0d 44 66 0c 9f 2f 4c 60 54 e0 6c 81 07 52 c9 be 1d a3 c9 16 d8 ca 90 2a ea df e5 05 da ab 7a cc 01 d7 2a 18 e1 0b 99 12 96 24 76 03 a3 46 53 a0 6c 4b ad 72 4d c3 19 5b f1 80 05 7b a6 17 c5 c1 9c 9b 99 1a 53 f7 d0 c5 08 f2 a6 94 04 82 5c e9 00 2d 2d 8e 58 9b d2 c5 86 71 34 80 77 d9 1b c5 90 23 b9 da 97 0e a0 b7 41 d8 c2 d1 47 74 88 50 09 91 4d d6 Data Ascii: vC}&Y0ub>,,.bi0zp(]>?<Ogn5QCBBv_TSlpt cjlD>\l3V&kv}w!Df/L`TlRz*$vFSlKrM[{S\--Xq4w#AGtPM
2024-11-21 02:42:35 UTC	398	IN	Data Raw: 2d 43 87 74 1e 32 46 9b ac 75 fe 48 c1 a5 d7 48 f8 de bc 38 41 c2 47 af 2d 32 d2 78 63 a0 c4 ee f5 0b e4 f6 48 2f 68 4e 81 a5 48 00 96 86 cc ff e1 03 1e a6 c6 49 98 91 d3 06 9b df 65 10 50 bb ad 64 f7 59 30 82 6b de 0d 69 8a 22 d1 54 d3 5b 52 86 47 72 1d f5 fb a3 aa 4f ef e6 70 cb fe 68 da af 96 23 53 22 95 a2 b5 08 b1 73 0b 99 59 30 01 60 5c c8 4b e4 e4 fc f3 22 18 a4 47 08 ac f0 3c 5c a7 8f d7 17 4a 2a d6 4c 8f 2b 6c db fe 2e 29 c2 21 e8 7a 26 be 40 14 62 72 df f7 93 59 80 77 9e 82 f7 47 dc ac 39 97 8e 50 89 d7 4d ca ea e7 15 48 95 fc 6b 1f c6 6b bf ac c5 d8 cc b2 e0 e5 60 b0 f8 6a 27 c0 27 de 94 fa 25 9f 98 2c 38 aa 67 9b 8b d2 e6 1d 26 c8 c8 36 74 1d b7 35 0b 0e b1 2b 70 3b bb cc 32 b7 aa 50 a5 d2 1d d9 8c d4 98 78 c7 a4 13 ca c8 56 19 fd 91 82 71 ce Data Ascii: -Ct2FuHH8AG-2xcH/hNHIePdY0ki"T[RGrOph#S"sY0`\K"G<\J*L+l.)!z&@brYwG9PMHkk`j''%,8g&6t5+p;2PxVq
2024-11-21 02:42:35 UTC	78	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 0b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 60 0d 0a 30 30 30 30 30 30 30 31 0d 0a b3 0d 0a 30 30 30 30 30 30 30 31 0d 0a d5 0d 0a 30 30 30 30 30 30 30 31 0d 0a de 0d 0a 31 0d 0a 23 0d 0a 32 0d 0a 00 00 0d 0a Data Ascii: 0000000100000001`0000000100000001000000011#2
2024-11-21 02:42:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49924	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:35 UTC	769	OUT	GET /graph/assets/images/entities/dark-default-domain.png HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:35 UTC	312	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: ef71e122eaabbe50bd8eb725d533d29b Server: Google Frontend Date: Wed, 20 Nov 2024 21:48:54 GMT Expires: Fri, 20 Dec 2024 21:48:54 GMT Cache-Control: public, max-age=2592000 ETag: "_R0--g" Content-Type: image/png Content-Length: 2918 Age: 17621 Connection: close
2024-11-21 02:42:35 UTC	1096	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0b 18 49 44 41 54 78 9c e5 5b 77 74 16 c7 11 3f fc e2 fc 15 47 01 69 57 c8 60 30 e8 4e 72 44 93 22 6c d3 02 c1 80 0c e6 85 48 20 da 13 82 80 a9 0e 8f 16 78 b4 98 08 8c 31 20 44 6f 51 a8 a6 06 d3 4d 31 a2 0a 24 20 54 f3 44 07 53 45 47 a2 07 10 a0 cd fb ad b4 eb bb ef 3b e9 bb bb 4f 35 99 f7 e6 e9 be dd d9 b9 9d bd 99 d9 99 d9 95 a2 14 32 f8 fb 57 a5 84 a8 d1 94 aa 7f 27 44 5d 41 a9 76 94 10 f5 12 a5 5a 26 a5 6a 56 0e 6a 99 b9 6d e8 5b 4e a9 3a 8a 10 b5 0d c6 2a a5 11 ca 97 0f fa 90 10 6d 32 21 5a 1a a5 5a 36 a5 1a 73 88 d9 e0 41 88 9a e0 eb 1b 5c 5b 29 c9 50 ae 9c fa 6b 42 b4 c1 84 a8 a7 bd Data Ascii: PNGIHDR@@iqpHYsIDATx[wt?GiW`0NrD"lH x1 DoQM1$ TDSEG;O52W'D]AvZ&jVjm[N:*m2!ZZ6sA\[)PkB
2024-11-21 02:42:35 UTC	1408	IN	Data Raw: 81 c2 3e 11 a4 d4 ac 59 df 94 a6 7f ff 61 f2 cb f4 ec 39 c0 b6 f0 02 7b f5 1a e8 51 8b 60 5a 22 60 82 9f 71 14 22 13 a2 9d 74 3a c9 d2 8b ea 71 2e 3c 6a ef 5e 96 ae 4b 2b 66 07 04 04 f9 21 ee 8f 2e 01 93 29 16 24 44 6b 0d f5 8f cb 8f 08 81 4c 72 72 2a f7 fc fa f6 1e 3d fa f3 76 60 64 64 8c 61 fb 13 ed d3 a6 cd 65 8b 16 2d e7 cf bb 76 ed 35 38 32 c4 11 82 2e 36 b6 b7 21 0e 40 d2 83 76 8c 05 0f 41 17 14 54 5b d2 b5 68 d1 56 b6 f7 ed 3b c4 74 ce f8 9b ff 22 a8 5f 2a b9 c7 55 79 12 c1 d3 0b f8 f8 e3 a6 b2 5d 9f f5 cd 9b b7 c4 90 0a eb a3 b4 b9 73 17 c8 df 9f 7d d6 4e d2 ad 58 b1 46 b6 af 5f bf 59 b6 7f f2 49 2b d9 3e 67 ce 02 c3 76 aa 5f a8 99 33 ff 29 db 53 52 0e c8 f6 1a 35 ea c9 76 64 a1 1e 34 60 29 aa bc 47 f2 23 ea dd 7b 90 64 08 ef 8e b6 8a 15 ab 19 8a Data Ascii: >Ya9{Q`Z"`q"t:q.<j^K+f!.)$DkLrr=v`ddae-v582.6!@vAT[hV;t"_Uy]s}NXF_YI+>gv_3)SR5vd4`)G#{d
2024-11-21 02:42:35 UTC	414	IN	Data Raw: d7 e7 22 d6 17 20 30 56 b1 78 35 2e c5 2e 73 20 84 12 db 92 f8 92 70 56 d0 00 f8 83 3e 7d fe ca 93 15 fd 22 e9 ab ce d8 ef 71 04 06 da 2e 5d fa f0 b2 98 fe d2 14 78 23 0e 71 32 37 4a d5 64 4b 57 64 bc b9 24 25 8e ce 51 c3 13 45 12 01 b0 ff 9d 3b 93 d9 fe fd 87 58 5e 70 e0 c0 61 4e 23 0a 1b 02 c0 0b 39 be bd 23 70 03 3e b0 73 49 8a 83 b7 27 46 50 5d 9c 17 e8 2f 4e d9 05 8c 4d 4c 5c 6c 30 25 c7 27 40 4e 80 10 35 c1 9b 17 8b 80 05 0e 0d 55 5b dc f7 73 d5 0c d7 2f 8d fb 44 28 6d a3 00 63 16 60 39 c0 09 8a 17 50 86 52 75 61 01 4c c2 90 d3 23 4a 44 d5 07 49 13 10 cf 68 cb af 96 e0 f0 cb 2f 2b 80 9b e3 e1 6f 97 c6 cb d2 84 68 df 17 d8 8d 71 45 69 f4 0b 4a b5 f9 a5 48 f8 25 05 28 bc c1 1c e2 8b 5b 38 0f 98 9d 6b f3 d6 b6 3b 27 40 69 50 64 11 ff 87 98 55 7c e4 e7 Data Ascii: " 0Vx5..s pV>}"q.]x#q27JdKWd$%QE;X^paN#9#p>sI'FP]/NML\l0%'@N5U[s/D(mc`9PRuaL#JDIh/+ohqEiJH%([8k;'@iPdU\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49928	142.250.185.132	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:35 UTC	501	OUT	GET /cse/static/element/8fa85d58e016b414/cse_element__en.js?usqp=CAI%3D HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-11-21 02:42:36 UTC	871	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="prose-team" Report-To: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]} Content-Length: 292561 Date: Thu, 21 Nov 2024 02:42:36 GMT Expires: Thu, 21 Nov 2024 02:42:36 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 12 Jun 2024 21:33:21 GMT X-Content-Type-Options: nosniff Link: <https://www.adsensecustomsearchads.com>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-11-21 02:42:36 UTC	519	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 63 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e Data Ascii: (function(){var g,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.
2024-11-21 02:42:36 UTC	1390	IN	Data Raw: 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 0a 7d 2c 6c 61 3d 6a 61 28 74 68 69 73 29 2c 6d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 6c 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 63 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 6d 61 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e Data Ascii: bal object");},la=ja(this),ma=function(a,b){if(b)a:{var c=la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ca(c,a,{configurable:!0,writable:!0,value:b})}};ma("Symbol",fun
2024-11-21 02:42:36 UTC	1390	IN	Data Raw: 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 74 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 2c 77 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 0a 62 29 7d 2c 7a 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 31 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b Data Ascii: anceof Array)){a=t(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a},wa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)},za=typeof Object.assign=="function"?Object.assign:function(a,b){for(var c=1;c<arguments.length;c++){
2024-11-21 02:42:36 UTC	1390	IN	Data Raw: 28 29 7d 3b 67 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 55 61 3d 7b 72 65 74 75 72 6e 3a 61 7d 3b 74 68 69 73 2e 4c 62 3d 74 68 69 73 2e 7a 64 7d 3b 67 2e 58 71 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 4c 62 3d 62 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 61 7d 7d 3b 67 2e 52 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 4c 62 3d 61 7d 3b 67 2e 77 79 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 51 66 3d 61 3b 62 21 3d 76 6f 69 64 20 30 26 26 28 74 68 69 73 2e 7a 64 3d 62 29 7d 3b 67 2e 68 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 51 66 3d 61 7c 7c 30 3b 61 3d 74 68 69 73 2e 55 61 2e 75 6d 3b 74 68 69 73 2e 55 61 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 61 7d 3b 67 Data Ascii: ()};g.return=function(a){this.Ua={return:a};this.Lb=this.zd};g.Xq=function(a,b){this.Lb=b;return{value:a}};g.Rd=function(a){this.Lb=a};g.wy=function(a,b){this.Qf=a;b!=void 0&&(this.zd=b)};g.ht=function(a){this.Qf=a\|\|0;a=this.Ua.um;this.Ua=null;return a};g
2024-11-21 02:42:36 UTC	1390	IN	Data Raw: 65 3a 21 31 7d 7d 63 61 74 63 68 28 62 29 7b 74 68 69 73 2e 4b 2e 72 68 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 4b 2e 7a 66 28 62 29 7d 74 68 69 73 2e 4b 2e 43 6b 28 29 3b 69 66 28 74 68 69 73 2e 4b 2e 55 61 29 7b 61 3d 74 68 69 73 2e 4b 2e 55 61 3b 74 68 69 73 2e 4b 2e 55 61 3d 6e 75 6c 6c 3b 69 66 28 61 2e 63 6f 29 74 68 72 6f 77 20 61 2e 75 6d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 61 2e 72 65 74 75 72 6e 2c 64 6f 6e 65 3a 21 30 7d 7d 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 3b 0a 76 61 72 20 51 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 65 66 28 62 29 7d 3b 74 68 69 73 2e 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e Data Ascii: e:!1}}catch(b){this.K.rh=void 0,this.K.zf(b)}this.K.Ck();if(this.K.Ua){a=this.K.Ua;this.K.Ua=null;if(a.co)throw a.um;return{value:a.return,done:!0}}return{value:void 0,done:!0}};var Qa=function(a){this.next=function(b){return a.ef(b)};this.throw=function
2024-11-21 02:42:36 UTC	1390	IN	Data Raw: 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 70 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 47 78 29 2c 72 65 6a 65 63 74 3a 68 28 74 68 69 73 2e 52 6a 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 47 78 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 69 66 28 68 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 52 6a 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 65 20 74 6f 20 69 74 73 65 6c 66 22 29 29 3b 65 6c 73 65 20 69 66 28 68 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 69 73 2e 49 7a 28 68 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 68 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 6b Data Ascii: 0,m.call(k,p))}}var k=this,l=!1;return{resolve:h(this.Gx),reject:h(this.Rj)}};e.prototype.Gx=function(h){if(h===this)this.Rj(new TypeError("A Promise cannot resolve to itself"));else if(h instanceof e)this.Iz(h);else{a:switch(typeof h){case "object":var k
2024-11-21 02:42:36 UTC	1390	IN	Data Raw: 65 2e 49 7a 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 56 68 28 29 3b 68 2e 4f 66 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4a 7a 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 56 68 28 29 3b 74 72 79 7b 68 2e 63 61 6c 6c 28 6b 2c 6c 2e 72 65 73 6f 6c 76 65 2c 6c 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6d 29 7b 6c 2e 72 65 6a 65 63 74 28 6d 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 77 2c 76 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 77 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 42 29 7b 74 72 79 7b 6d 28 77 28 Data Ascii: e.Iz=function(h){var k=this.Vh();h.Of(k.resolve,k.reject)};e.prototype.Jz=function(h,k){var l=this.Vh();try{h.call(k,l.resolve,l.reject)}catch(m){l.reject(m)}};e.prototype.then=function(h,k){function l(w,v){return typeof w=="function"?function(B){try{m(w(
2024-11-21 02:42:36 UTC	1390	IN	Data Raw: 69 6f 6e 20 62 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 63 28 6c 29 7b 76 61 72 20 6d 3d 74 79 70 65 6f 66 20 6c 3b 72 65 74 75 72 6e 20 6d 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6c 21 3d 3d 6e 75 6c 6c 7c 7c 6d 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6c 29 7b 69 66 28 21 77 61 28 6c 2c 66 29 29 7b 76 61 72 20 6d 3d 6e 65 77 20 62 3b 63 61 28 6c 2c 66 2c 7b 76 61 6c 75 65 3a 6d 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6c 29 7b 76 61 72 20 6d 3d 4f 62 6a 65 63 74 5b 6c 5d 3b 6d 26 26 28 4f 62 6a 65 63 74 5b 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 69 66 28 70 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 70 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 70 29 26 26 64 28 70 29 3b 72 Data Ascii: ion b(){}function c(l){var m=typeof l;return m==="object"&&l!==null\|\|m==="function"}function d(l){if(!wa(l,f)){var m=new b;ca(l,f,{value:m})}}function e(l){var m=Object[l];m&&(Object[l]=function(p){if(p instanceof b)return p;Object.isExtensible(p)&&d(p);r
2024-11-21 02:42:36 UTC	1390	IN	Data Raw: 6e 21 31 3b 76 61 72 20 6d 3d 6c 2e 65 6e 74 72 69 65 73 28 29 2c 70 3d 6d 2e 6e 65 78 74 28 29 3b 69 66 28 70 2e 64 6f 6e 65 7c 7c 70 2e 76 61 6c 75 65 5b 30 5d 21 3d 6b 7c 7c 70 2e 76 61 6c 75 65 5b 31 5d 21 3d 22 73 22 29 72 65 74 75 72 6e 21 31 3b 70 3d 6d 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 70 2e 64 6f 6e 65 7c 7c 70 2e 76 61 6c 75 65 5b 30 5d 2e 78 21 3d 34 7c 7c 70 2e 76 61 6c 75 65 5b 31 5d 21 3d 22 74 22 7c 7c 21 6d 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 3f 21 31 3a 21 30 7d 63 61 74 63 68 28 72 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 0a 66 28 29 3b 74 68 69 Data Ascii: n!1;var m=l.entries(),p=m.next();if(p.done\|\|p.value[0]!=k\|\|p.value[1]!="s")return!1;p=m.next();return p.done\|\|p.value[0].x!=4\|\|p.value[1]!="t"\|\|!m.next().done?!1:!0}catch(r){return!1}}())return a;var b=new WeakMap,c=function(k){this[0]={};this[1]=f();thi
2024-11-21 02:42:36 UTC	1390	IN	Data Raw: 6e 28 6b 2c 6c 29 7b 76 61 72 20 6d 3d 6c 26 26 74 79 70 65 6f 66 20 6c 3b 6d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 6d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 62 2e 68 61 73 28 6c 29 3f 6d 3d 62 2e 67 65 74 28 6c 29 3a 28 6d 3d 22 22 2b 20 2b 2b 68 2c 62 2e 73 65 74 28 6c 2c 6d 29 29 3a 6d 3d 22 70 5f 22 2b 6c 3b 76 61 72 20 70 3d 6b 5b 30 5d 5b 6d 5d 3b 69 66 28 70 26 26 77 61 28 6b 5b 30 5d 2c 6d 29 29 66 6f 72 28 6b 3d 30 3b 6b 3c 70 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 76 61 72 20 72 3d 70 5b 6b 5d 3b 69 66 28 6c 21 3d 3d 6c 26 26 72 2e 6b 65 79 21 3d 3d 72 2e 6b 65 79 7c 7c 6c 3d 3d 3d 72 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 74 3a 70 2c 69 6e 64 65 78 3a 6b 2c 78 61 3a 72 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 74 3a Data Ascii: n(k,l){var m=l&&typeof l;m=="object"\|\|m=="function"?b.has(l)?m=b.get(l):(m=""+ ++h,b.set(l,m)):m="p_"+l;var p=k[0][m];if(p&&wa(k[0],m))for(k=0;k<p.length;k++){var r=p[k];if(l!==l&&r.key!==r.key\|\|l===r.key)return{id:m,list:p,index:k,xa:r}}return{id:m,list:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49936	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:35 UTC	578	OUT	GET /ui/domains/ghabovethec.info/communicating_files?limit=10&cursor=eyJsaW1pdCI6IDEwLCAib2Zmc2V0IjogMTB9 HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:36 UTC	225	IN	HTTP/1.1 429 Too Many Requests Content-Type: application/json X-Cloud-Trace-Context: a3ba7fa1de9f0315bf8594e9cfc744f5 Date: Thu, 21 Nov 2024 02:42:36 GMT Server: Google Frontend Content-Length: 153 Connection: close
2024-11-21 02:42:36 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49933	74.125.34.46	443	5500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-11-21 02:42:36 UTC	782	OUT	GET /graph/assets/images/relationships/dark-default-referrer_files.png HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.260360209.1732156933; _gid=GA1.2.1893638834.1732156935; _gat=1; _ga_BLNDV9X2JR=GS1.1.1732156932.1.0.1732156941.0.0.0
2024-11-21 02:42:36 UTC	313	IN	HTTP/1.1 200 OK X-Cloud-Trace-Context: f36ed559dae71cddccdd22445ed44f85 Server: Google Frontend Date: Tue, 19 Nov 2024 18:39:55 GMT Expires: Thu, 19 Dec 2024 18:39:55 GMT Cache-Control: public, max-age=2592000 ETag: "_R0--g" Content-Type: image/png Content-Length: 2785 Age: 115361 Connection: close
2024-11-21 02:42:36 UTC	1095	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 93 49 44 41 54 78 9c dd 5b 7b 54 54 c7 19 5f 73 9a fe d5 94 2a 3b 83 44 a3 51 ee 5d 94 56 05 89 da a8 2d 9e aa 34 a6 26 05 83 36 1e c5 47 5b df 27 f1 6d 9b a0 68 6a 8d 51 44 ad 5a 6b 35 be 01 35 6a d5 56 3d f1 19 49 21 3e 91 f8 a0 6d d2 a3 41 a5 26 56 01 9f 3d 8a c2 f4 fc 2e cc ed ec ec bd 77 77 ef ee 05 d2 ef 9c ef 88 f7 ce ce cc f7 db f9 be f9 5e eb 72 39 4c 51 51 6d 29 21 4a 1a a5 ca 6c 42 94 2d 94 aa 45 84 28 97 29 55 2b 28 55 aa 6a 59 ad a8 7b 86 77 79 94 2a 99 84 28 af e1 b3 ae af 23 35 6f ee e9 42 88 ba 98 10 f5 02 a5 6a 0d a5 2a b3 c9 35 98 83 10 25 3b 32 32 f6 05 57 63 a6 66 cd Data Ascii: PNGIHDR@@iqpHYsIDATx[{TT_s;DQ]V-4&6G['mhjQDZk55jV=I!>mA&V=.ww^r9LQQm)!JlB-E()U+(UjY{wy(#5oBj*5%;22Wcf
2024-11-21 02:42:36 UTC	1408	IN	Data Raw: de fa 03 00 e0 c9 04 a3 2a 8e 89 89 49 d0 c7 15 16 9e 08 cb 29 48 4b 1b ae af b7 68 d1 72 e9 14 a8 25 3e 39 3c 2a 0c 40 ec cd 43 5a 6c cc 6a 21 7f 00 c0 6e 4c 9a f4 36 9b 3a 75 26 2b 2d bd aa 8d 3d 7a f4 63 fd bd a2 74 f6 f2 ef 37 6c c8 0b 9b 2a f0 53 00 fb 25 e7 13 dc 6e 25 41 fc f6 17 8b 2f 47 8e 9c a0 6f 08 51 5d 28 00 88 cc 23 3a 11 80 fd fb 0f 99 de 1e 38 0d af bc f2 ba 6d 00 c6 8e 9d a2 cf e7 1b 39 0a 2e 32 21 ea 45 f1 25 32 39 20 18 30 7f 21 6d a8 00 e4 e7 17 32 2b 7a fc f8 09 1b 32 64 94 2d 00 60 57 78 46 6a cf 9e fd 32 00 c5 9a f0 c8 bd 8b a9 6b dc a5 3c 09 81 64 86 bf 45 42 05 a0 43 87 ee ec f3 cf 2f e9 f3 7c f6 d9 3f d9 dc b9 59 9a 53 f3 f0 e1 43 ed d9 f5 eb 5f f9 cd 0f 9a f1 8e 1d 7b b4 39 6e df be 23 fb 30 35 d1 d1 1e 37 fc fe 34 f1 03 fd fa Data Ascii: I)HKhr%>9<@CZlj!nL6:u&+-=zct7l*S%n%A/GoQ](#:8m9.2!E%29 0!m2+z2d-`WxFj2k<dEBC/\|?YSC_{9n#0574
2024-11-21 02:42:36 UTC	282	IN	Data Raw: c3 9b 43 59 1b c9 0c f9 27 37 f8 3f dc 5b 93 3c 45 4d 9d ce 07 76 dd d9 21 4a 3d 29 66 bf 10 43 37 16 36 67 f5 b3 17 f8 fa c8 0a 41 7d 78 2b 1d fe c6 33 84 de a2 6e 8b 84 90 16 31 80 6f 60 a3 f3 1d b7 3b 66 90 2d a1 82 25 dc a9 e8 bd 35 fb 06 91 4f 40 35 17 49 10 74 66 d8 25 80 81 4c 0e d4 cc ba 36 a8 e4 47 45 79 da b8 1a e8 67 73 37 ac 8e 33 f2 70 c9 c9 03 b4 e6 04 d4 e7 91 9b 47 6e a0 f6 67 73 55 fa cf e6 f0 0c 4d 51 18 83 ec 2d ba 39 fc b5 e2 d7 55 b5 46 3b 7a e4 fd 11 7a 6f eb 7e eb eb 55 62 73 92 09 51 6e 21 aa f3 1b d8 d4 27 11 12 f7 2d 24 1a e4 8e b3 f0 0a 8e ac 95 32 19 6b b9 1a 33 b9 dd 4a 42 ed 8d a1 7c 8a f4 73 08 42 57 a3 9d 0d 09 4c 9f 1c de d7 85 a2 a3 3d 6e f8 e2 a8 c2 c0 33 a3 54 39 4d 88 72 09 2a 83 d2 7c 1d e3 ef 4b b5 ef d4 1c 8c 45 d1 Data Ascii: CY'7?[<EMv!J=)fC76gA}x+3n1o`;f-%5O@5Itf%L6GEygs73pGngsUMQ-9UF;zzo~UbsQn!'-$2k3JB\|sBWL=n3T9Mr*\|KE

Target ID:	0
Start time:	21:41:56
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	21:42:01
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2040 --field-trial-handle=1912,i,7117171991923956869,650583693760184098,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	21:42:04
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.virustotal.com/gui/domain/ghabovethec.info/detection#:~:text=API-,ghabovethec.info,-Registrar"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	21:43:19
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4052 --field-trial-handle=1912,i,7117171991923956869,650583693760184098,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	21:43:19
Start date:	20/11/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4788 --field-trial-handle=1912,i,7117171991923956869,650583693760184098,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://www.virustotal.com/gui/join-us	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-KFBGZNL
Source: https://www.virustotal.com/gui/join-us	HTTP Parser: Iframe src: https://recaptcha.net/recaptcha/api2/anchor?ar=1&k=6Ldjgd0kAAAAAITm7ipWF7o7kPL_81SaSfdINiOc&co=aHR0cHM6Ly93d3cudmlydXN0b3RhbC5jb206NDQz&hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=j3rr2j2nks8n
Source: https://www.virustotal.com/gui/join-us	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-KFBGZNL
Source: https://www.virustotal.com/gui/join-us	HTTP Parser: Iframe src: https://recaptcha.net/recaptcha/api2/anchor?ar=1&k=6Ldjgd0kAAAAAITm7ipWF7o7kPL_81SaSfdINiOc&co=aHR0cHM6Ly93d3cudmlydXN0b3RhbC5jb206NDQz&hl=en&v=-ZG7BC9TxCVEbzIO2m429usb&size=invisible&cb=j3rr2j2nks8n

Source: https://www.virustotal.com/gui/domain/ghabovethec.info/detection	HTTP Parser: No favicon
Source: https://www.virustotal.com/gui/join-us	HTTP Parser: No favicon
Source: https://www.virustotal.com/gui/graph-overview	HTTP Parser: No favicon
Source: https://www.virustotal.com/gui/graph-overview	HTTP Parser: No favicon
Source: https://www.virustotal.com/gui/graph-overview	HTTP Parser: No favicon
Source: https://www.virustotal.com/gui/contact-us/premium-services	HTTP Parser: No favicon

Source: https://www.virustotal.com/gui/join-us	HTTP Parser: No <meta name="author".. found
Source: https://www.virustotal.com/gui/join-us	HTTP Parser: No <meta name="author".. found

Source: https://www.virustotal.com/gui/join-us	HTTP Parser: No <meta name="copyright".. found
Source: https://www.virustotal.com/gui/join-us	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.131
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.131
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: chromecache_277.2.dr	String found in binary or memory: href="https://www.linkedin.com/sharing/share-offsite/?url=${e}" equals www.linkedin.com (Linkedin)
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: (g.zk(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.zk(c,"www.youtube.com"),d=c.toString()):(c=Cwa(d),xE(c)&&(d=c));c=new g.HM(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: 0?"http":"https";this.Ea=wE((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)\|\|"")\|\|wE(this.Te)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";h==="adunit"?d=this.D?"embedded":"detailpage":h==="embedded"\|\|this.U?d=vs(d,h,sKa):h&&(d="embedded");this.Ma=d;era();h=null;d=b?b.playerStyle:a.ps;f=g.Zb(tKa,d);!d\|\|f&&!this.U\|\|(h=d);this.playerStyle=h;this.L=g.Zb(tKa,this.playerStyle);this.houseBrandUserStatus=b==null?void 0:b.houseBrandUserStatus;this.ra=this.L&&this.playerStyle!=="play"&& equals www.youtube.com (Youtube)
Source: chromecache_320.2.dr	String found in binary or memory: DF_Mk([DF_Ms({type:Boolean,K:!0}),DF_Ml("design:type",Object)],DF_M1f.prototype,"isBot",void 0);DF_Mk([DF_Ms(),DF_Ml("design:type",Object)],DF_M1f.prototype,"screenReaderTextKey",void 0);DF_M1f=DF_Mk([DF_Mp("df-text-message"),DF_Ml("design:paramtypes",[String,String])],DF_M1f);var DF_M2f=DF_Mq([":host(:only-child) .wrapper{padding:var(--df-messenger-video-inner-padding,0)}:host(:not(.markdown):not(:only-child)) .embed,:host(:not(:only-child)) .link,:host(:not(:only-child)) .video{border:var(--df-messenger-video-inner-border,none);border-radius:var(--df-messenger-video-inner-border-radius,0);overflow:hidden}:host(:not(:only-child)) .wrapper{padding:var(--df-messenger-card-padding,16px)}:host(.markdown) .wrapper{display:inline-block;padding:var(--df-messenger-card-padding,16px);padding-left:0;padding-right:0}:host(.markdown:first-child) .wrapper{padding-top:0}:host(.markdown:last-child) .wrapper{padding-bottom:0}:host(.markdown) .embed,:host(:not(:only-child)) .embed,:host(:not(:only-child)) .link,:host(:not(:only-child)) .video{border:var(--df-messenger-video-inner-border,var(--df-messenger-video-border,var(--df-messenger-default-border)\n )\n );border-radius:var(--df-messenger-video-inner-border-radius,var(--df-messenger-video-border-radius,var(--df-messenger-default-border-radius)\n )\n );overflow:hidden}.link{display:inline-block;position:relative;text-decoration:none}.thumbnail,video{height:var(--df-messenger-video-height,auto);width:var(--df-messenger-video-width,auto)}.thumbnail,iframe,video{display:block;max-width:100%}iframe{height:var(--df-messenger-video-embed-height,var(--df-messenger-video-height,315px)\n );width:var(--df-messenger-video-embed-width,var(--df-messenger-video-width,560px)\n )}.title{align-items:center;color:var(--df-messenger-font-color,var(--df-messenger-default-font-color)\n );display:flex;font-family:var(--df-messenger-font-family,var(--df-messenger-default-font-family)\n );font-size:var(--df-messenger-font-size,var(--df-messenger-default-font-size)\n );padding:12px 16px}.youtube svg{height:24px;margin-right:8px;width:24px}.play{background:#000;border-radius:999px;height:36px;left:50%;opacity:.8;padding:8px;pointer-events:none;position:absolute;top:50%;transform:translate(-50%,-50%);width:36px}.play svg{fill:#fff;height:inherit;width:inherit}"]);function DF_M3f(a){var b,c=(b=a.anchor)!=null?b:a.actionLink?{href:a.actionLink}:null;return c?new DF_M4f(c):null}function DF_M5f(a){var b,c=(b=a.anchor)!=null?b:a.actionLink?{href:a.actionLink}:null;return c?new DF_M4f(c):null}function DF_M4f(a){this.href=(a==null?void 0:a.href)\|\|"";this.target=(a==null?void 0:a.target)\|\|"_blank";this.rel=(a==null?void 0:a.rel)\|\|"noopener noreferrer"};var DF_M6f=DF_Mc([' <div class="wrapper">\n <div class="video">\n <video src="','" controls>',"</video>\n ","\n </div>\n </div>"]),DF_M7f=DF_Mc(["https://www.youtube.com/embed"]),DF_M8f=DF_Mc([' <div class="wrapper">\n <d
Source: chromecache_360.2.dr	String found in binary or memory: Ko.prototype.uU=function(){return this.Rg.l()};var zna=(new Date).getTime();var Hla="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Ila=/\bocr\b/;var Kla=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var Xla=0,Wla=0,Yla=0;var ap;g.Uo=null;g.Wo=!1;g.bp=1;ap=Symbol("SIGNAL");g.cp={version:0,F_:0,Um:!1,pg:void 0,Zy:void 0,Gn:void 0,XL:0,pj:void 0,Vu:void 0,YE:!1,CP:!1,W1:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_360.2.dr	String found in binary or memory: a))):this.api.V().N("enable_adb_handling_in_sabr")&&c==="BROWSER_OR_EXTENSION_ERROR"&&!d.L?(d=d.hostLanguage,a="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",d&&(a=g.bj(a,{hl:d})),this.Ed(FY(this,"BROWSER_OR_EXTENSION_ERROR",a))):this.Ed(g.DY(a.errorMessage)):this.Ed(FY(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.bj(c, equals www.youtube.com (Youtube)
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: a.details.rc!=="429"?a.errorCode==="ump.spsrejectfailure"&&(e="HTML5_SPS_UMP_STATUS_REJECTED"):(e="TOO_MANY_REQUESTS",f="6");this.ma.vg(a.errorCode,a.severity,e,VF(a.details),f)}else this.ma.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Id(a.errorCode,a.details),d&&a.errorCode==="manifest.net.connect"&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.Ut)(),qT(a,"manifest",function(h){b.L=!0;b.oa("pathprobe",h)},function(h){b.Id(h.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_360.2.dr	String found in binary or memory: a.ismb);this.Cq?(r=a.vss_host\|\|"s.youtube.com",r==="s.youtube.com"&&(r=UP(this.Ea)\|\|"www.youtube.com")):r="video.google.com";this.jo=r;VP(this,a,!0);this.La=new oP;g.P(this,this.La);q=b?b.innertubeApiKey:xs("",a.innertube_api_key);p=b?b.innertubeApiVersion:xs("",a.innertube_api_version);r=b?b.innertubeContextClientVersion:xs("",a.innertube_context_client_version);q=g.lr("INNERTUBE_API_KEY")\|\|q;p=g.lr("INNERTUBE_API_VERSION")\|\|p;l=g.lr("INNERTUBE_CONTEXT_CLIENT_CONFIG_INFO");m=gP(this);n=typeof this.j.c=== equals www.youtube.com (Youtube)
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: b=this.api.V();a=this.api.getVideoData();var c="";b.C\|\|(b=g.ZP(b),b.indexOf("www.")===0&&(b=b.substring(4)),c=g.TR(a)?"Watch on YouTube Music":b==="youtube.com"?"Watch on YouTube":g.OE("Watch on $WEBSITE",{WEBSITE:b}));this.updateValue("title",c)}; equals www.youtube.com (Youtube)
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: g.ZP=function(a){a=UP(a.Ea);return a==="www.youtube-nocookie.com"?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_360.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f,h){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=h?"music.youtube.com":g.ZP(this);e=c==="www.youtube.com";!f&&d&&e?f="https://youtu.be/"+a:g.QP(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),mu&&(a=pna())&&(b.ebc=a));return g.bj(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: g.lQ=function(a){var b=g.ZP(a);DKa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_269.2.dr, chromecache_219.2.dr, chromecache_292.2.dr, chromecache_424.2.dr, chromecache_398.2.dr, chromecache_285.2.dr, chromecache_420.2.dr	String found in binary or memory: return b}GD.F="internal.enableAutoEventOnTimer";var Zb=wa(["data-gtm-yt-inspected-"]),ID=["www.youtube.com","www.youtube-nocookie.com"],JD,KD=!1; equals www.youtube.com (Youtube)
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: this.ea.Ba&&(a.authuser=this.ea.Ba);this.ea.pageId&&(a.pageid=this.ea.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.Fb()))?e[1]:"";e==="ATV"&&(a.cdt=e);this.G=a;this.G.session_id=d;this.qa=!0;this.B.flavor==="widevine"&&(this.G.hdr="1");this.B.flavor==="playready"&&(b=Number(iP(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&b>=0&&(this.G.mfpe=""+b),this.qa=!1);b="";g.WO(this.B)?VO(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_196.2.dr, chromecache_360.2.dr	String found in binary or memory: var $2={};var pfb={Hs:[{Gs:/Unable to load player module/,weight:20},{Gs:/Failed to fetch/,weight:500},{Gs:/XHR API fetch failed/,weight:10},{Gs:/JSON parsing failed after XHR fetch/,weight:10},{Gs:/Retrying OnePlatform request/,weight:10},{Gs:/CSN Missing or undefined during playback association/,weight:100},{Gs:/Non-recoverable error. Do not retry./,weight:0},{Gs:/Internal Error. Retry with an exponential backoff./,weight:0},{Gs:/API disabled by application./,weight:0}],Nr:[{callback:b9a,weight:500}]};var o9a=/[&\?]action_proxy=1/,n9a=/[&\?]token=([\w-])/,p9a=/[&\?]video_id=([\w-])/,q9a=/[&\?]index=([\d-])/,r9a=/[&\?]m_pos_ms=([\d-])/,t9a=/[&\?]vvt=([\w-]*)/,f9a="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),s9a="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),i9a={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_360.2.dr	String found in binary or memory: xJa=function(a,b){if(!a.j["0"]){var c=new mG("0","fakesb",{video:new iG(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new $N(new g.HM("http://www.youtube.com/videoplayback"),c,"fake"):new qO(new g.HM("http://www.youtube.com/videoplayback"),c,new LN(0,0),new LN(0,0))}}; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.virustotal.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.recaptcha.net
Source: global traffic	DNS traffic detected: DNS query: recaptcha.net
Source: global traffic	DNS traffic detected: DNS query: cse.google.com
Source: global traffic	DNS traffic detected: DNS query: www.adsensecustomsearchads.com
Source: global traffic	DNS traffic detected: DNS query: syndicatedsearch.goog
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.virustotal.com/gui/domain/ghabovethec.info/detection#:~:text=API-,ghabovethec.info,-Registrar

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Yara Signatures

Dropped Files

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

E-Banking Fraud

System Summary

Data Obfuscation

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Windows Analysis Report
https://www.virustotal.com/gui/domain/ghabovethec.info/detection#:~:text=API-,ghabovethec.info,-Registrar