Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
https://clinicasanclemente.com/ap/

Overview

General Information

Sample URL:https://clinicasanclemente.com/ap/
Analysis ID:1586834
Infos:

Detection

HTMLPhisher
Score:52
Range:0 - 100
Whitelisted:false
Confidence:100%

Signatures

Yara detected HtmlPhish10
Performs DNS queries to domains with low reputation
HTML body contains low number of good links
HTML title does not match URL

Classification

  • System is w10x64
  • chrome.exe (PID: 4308 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
    • chrome.exe (PID: 4564 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2008,i,17832135286452935298,15271712750092276784,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
  • chrome.exe (PID: 6352 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://clinicasanclemente.com/ap/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
  • cleanup
No configs have been found
SourceRuleDescriptionAuthorStrings
dropped/chromecache_44JoeSecurity_HtmlPhish_10Yara detected HtmlPhish_10Joe Security
    SourceRuleDescriptionAuthorStrings
    1.0.pages.csvJoeSecurity_HtmlPhish_10Yara detected HtmlPhish_10Joe Security
      No Sigma rule has matched
      No Suricata rule has matched

      Click to jump to signature section

      Show All Signature Results

      Phishing

      barindex
      Source: Yara matchFile source: 1.0.pages.csv, type: HTML
      Source: Yara matchFile source: dropped/chromecache_44, type: DROPPED
      Source: https://clinicasanclemente.com/ap/HTTP Parser: Number of links: 0
      Source: https://clinicasanclemente.com/ap/HTTP Parser: Title: ****---*** does not match URL
      Source: https://clinicasanclemente.com/ap/HTTP Parser: No favicon
      Source: https://clinicasanclemente.com/ap/HTTP Parser: No <meta name="author".. found
      Source: https://clinicasanclemente.com/ap/HTTP Parser: No <meta name="copyright".. found

      Networking

      barindex
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeDNS query: 0nline1.online-mba.xyz
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeDNS query: 0nline1.online-mba.xyz
      Source: DNS query: 0nline1.online-mba.xyz
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeDNS query: 0nline1.online-mba.xyz
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeDNS query: 0nline1.online-mba.xyz
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeDNS query: 0nline1.online-mba.xyz
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeDNS query: 0nline1.online-mba.xyz
      Source: DNS query: 0nline1.online-mba.xyz
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeDNS query: 0nline1.online-mba.xyz
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeDNS query: 0nline1.online-mba.xyz
      Source: DNS query: 0nline1.online-mba.xyz
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeDNS query: 0nline1.online-mba.xyz
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeDNS query: 0nline1.online-mba.xyz
      Source: DNS query: 0nline1.online-mba.xyz
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeDNS query: 0nline1.online-mba.xyz
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeDNS query: 0nline1.online-mba.xyz
      Source: unknownTCP traffic detected without corresponding DNS query: 173.222.162.32
      Source: unknownTCP traffic detected without corresponding DNS query: 2.22.50.144
      Source: unknownTCP traffic detected without corresponding DNS query: 2.22.50.144
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
      Source: global trafficHTTP traffic detected: GET /ap/ HTTP/1.1Host: clinicasanclemente.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
      Source: global trafficHTTP traffic detected: GET /favicon.ico HTTP/1.1Host: clinicasanclemente.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://clinicasanclemente.com/ap/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
      Source: global trafficDNS traffic detected: DNS query: www.google.com
      Source: global trafficDNS traffic detected: DNS query: clinicasanclemente.com
      Source: global trafficDNS traffic detected: DNS query: 0nline1.online-mba.xyz
      Source: global trafficDNS traffic detected: DNS query: google.com
      Source: global trafficHTTP traffic detected: HTTP/1.1 404 Not Foundkeep-alive: timeout=5, max=100cache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1251date: Thu, 09 Jan 2025 16:08:09 GMTserver: LiteSpeedvary: User-Agentx-turbo-charged-by: LiteSpeedconnection: close
      Source: unknownNetwork traffic detected: HTTP traffic on port 49675 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49740
      Source: unknownNetwork traffic detected: HTTP traffic on port 49858 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49740 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49739
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49738
      Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49858
      Source: unknownNetwork traffic detected: HTTP traffic on port 49738 -> 443
      Source: unknownNetwork traffic detected: HTTP traffic on port 49739 -> 443
      Source: classification engineClassification label: mal52.phis.troj.win@23/4@26/4
      Source: unknownProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2008,i,17832135286452935298,15271712750092276784,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
      Source: unknownProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://clinicasanclemente.com/ap/"
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2008,i,17832135286452935298,15271712750092276784,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8Jump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
      Source: Window RecorderWindow detected: More than 3 window changes detected
      ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
      Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath Interception1
      Process Injection
      1
      Process Injection
      OS Credential DumpingSystem Service DiscoveryRemote ServicesData from Local System1
      Encrypted Channel
      Exfiltration Over Other Network MediumAbuse Accessibility Features
      CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable Media3
      Non-Application Layer Protocol
      Exfiltration Over BluetoothNetwork Denial of Service
      Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive4
      Application Layer Protocol
      Automated ExfiltrationData Encrypted for Impact
      Employee NamesVirtual Private ServerLocal AccountsCronLogin HookLogin HookBinary PaddingNTDSSystem Network Configuration DiscoveryDistributed Component Object ModelInput Capture3
      Ingress Tool Transfer
      Traffic DuplicationData Destruction
      Hide Legend

      Legend:

      • Process
      • Signature
      • Created File
      • DNS/IP Info
      • Is Dropped
      • Is Windows Process
      • Number of created Registry Values
      • Number of created Files
      • Visual Basic
      • Delphi
      • Java
      • .Net C# or VB.NET
      • C, C++ or other language
      • Is malicious
      • Internet

      This section contains all screenshots as thumbnails, including those not shown in the slideshow.


      windows-stand
      SourceDetectionScannerLabelLink
      https://clinicasanclemente.com/ap/0%Avira URL Cloudsafe
      No Antivirus matches
      No Antivirus matches
      No Antivirus matches
      SourceDetectionScannerLabelLink
      https://clinicasanclemente.com/favicon.ico0%Avira URL Cloudsafe
      NameIPActiveMaliciousAntivirus DetectionReputation
      google.com
      172.217.16.206
      truefalse
        high
        www.google.com
        142.250.186.164
        truefalse
          high
          clinicasanclemente.com
          68.65.120.84
          truefalse
            unknown
            0nline1.online-mba.xyz
            unknown
            unknownfalse
              high
              NameMaliciousAntivirus DetectionReputation
              https://clinicasanclemente.com/ap/false
                unknown
                https://clinicasanclemente.com/favicon.icofalse
                • Avira URL Cloud: safe
                unknown
                • No. of IPs < 25%
                • 25% < No. of IPs < 50%
                • 50% < No. of IPs < 75%
                • 75% < No. of IPs
                IPDomainCountryFlagASNASN NameMalicious
                239.255.255.250
                unknownReserved
                unknownunknownfalse
                142.250.186.164
                www.google.comUnited States
                15169GOOGLEUSfalse
                68.65.120.84
                clinicasanclemente.comUnited States
                22612NAMECHEAP-NETUSfalse
                IP
                192.168.2.4
                Joe Sandbox version:42.0.0 Malachite
                Analysis ID:1586834
                Start date and time:2025-01-09 17:07:00 +01:00
                Joe Sandbox product:CloudBasic
                Overall analysis duration:0h 3m 4s
                Hypervisor based Inspection enabled:false
                Report type:full
                Cookbook file name:browseurl.jbs
                Sample URL:https://clinicasanclemente.com/ap/
                Analysis system description:Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
                Number of analysed new started processes analysed:8
                Number of new started drivers analysed:0
                Number of existing processes analysed:0
                Number of existing drivers analysed:0
                Number of injected processes analysed:0
                Technologies:
                • HCA enabled
                • EGA enabled
                • AMSI enabled
                Analysis Mode:default
                Analysis stop reason:Timeout
                Detection:MAL
                Classification:mal52.phis.troj.win@23/4@26/4
                EGA Information:Failed
                HCA Information:
                • Successful, ratio: 100%
                • Number of executed functions: 0
                • Number of non-executed functions: 0
                • Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
                • Excluded IPs from analysis (whitelisted): 142.250.74.195, 172.217.18.14, 74.125.71.84, 142.250.185.174, 216.58.206.78, 142.250.186.46, 142.250.184.202, 142.250.185.202, 142.250.185.234, 142.250.185.170, 142.250.184.234, 172.217.16.202, 172.217.16.138, 216.58.206.74, 216.58.206.42, 172.217.18.10, 142.250.186.170, 142.250.186.106, 142.250.181.234, 142.250.185.106, 142.250.185.138, 142.250.186.138, 199.232.214.172, 192.229.221.95, 142.250.185.110, 142.250.185.206, 142.250.184.206, 172.217.16.206, 142.250.185.67, 142.250.186.174, 184.28.90.27, 20.12.23.50, 13.107.246.45
                • Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
                • Not all processes where analyzed, report is missing behavior information
                • Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
                • VT rate limit hit for: https://clinicasanclemente.com/ap/
                No simulations
                No context
                No context
                No context
                No context
                No context
                Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                File Type:ASCII text, with no line terminators
                Category:downloaded
                Size (bytes):16
                Entropy (8bit):3.452819531114783
                Encrypted:false
                SSDEEP:3:Has6Ln:6sCn
                MD5:CD598D2DCE38CFBA2981425AFD8CC5FF
                SHA1:56C8577B18B89C77A6AC58B925F8ECAB11BEF02C
                SHA-256:64BC0BCC655408713CCC3195B859007631C335758AAC8575658AC138509233E8
                SHA-512:61797961E4747CA9CD7B3E6746E5243F7D9EF59B21B27911E974CEB68460C71ED438FEAAE6C7E1BC77A50E687D63A26623DB0AC1204DEAC60D094EFD0271C6FA
                Malicious:false
                Reputation:low
                URL:https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnWm0MRbjt0xBIFDa8aOOA=?alt=proto
                Preview:CgkKBw2vGjjgGgA=
                Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                File Type:HTML document, ASCII text, with very long lines (64968), with CRLF line terminators
                Category:downloaded
                Size (bytes):353536
                Entropy (8bit):6.031117862766441
                Encrypted:false
                SSDEEP:6144:SODDORezIlikECAtwafzsCNU1W9gor53/OR7uxc6RrA8EvhIajS4qbVw7TvoN:SKORVmptw6sCGA9gsJ/OR7VRWeSpRJN
                MD5:2D035C5D226CC83EE6D98FA46E76DAE4
                SHA1:7D83647F3AEF744D6AA6F201AA04242F6671F9EE
                SHA-256:1FFF84BD0F1C927C3D92CFA8A6DD033CDE24062A29F22255204D94742AB858C1
                SHA-512:71ECA620E6C8ACF157EC96C49275138F1A4A3E4957AFDEA7BEA8865DE7316F045A7E3516BD24E54C10F2082EC9AF7951C2D17A1DA7FE75A01B1ADB959C59D9ED
                Malicious:false
                Reputation:low
                URL:https://clinicasanclemente.com/ap/
                Preview:<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>****---***</title>.. <style>.. body {.. font-family: "Segoe UI", "Segoe UI Web (West European)", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;.. background-color: #f4f4f4;.. margin: 0;.. display: flex;.. justify-content: center;.. align-items: center;.. height: 100vh;.. color: #333;.. background-image: url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAABioAAALkCAYAAACRC231AAAgAElEQVR4Xuy9S8ttzbImdNa3T/0WL4ggNgQbNuzYsWPHI0qBKIJYIGhDBBvasKEdQbCj5aVU1EIoCrRQERVRwQIvUKKoICL+Dc/e25kZ8UQ8T2RkjjHnu9ba33rXfPf+1hwjR17iHpER4/Llr/t7//zv/+jw92Vcm//kQTnNy6Prl7g6x9GZz7A2Sp864ATc6VqDVYdot7a17fEwFL9YD+9mx972Ksw+bsLp/+SxNz0u/J4Q4es2/HEd6584q+gJf3fg08xYylf0UwJmhdGAEZAeJ3sQl9USrKPEfpD4u+HM5yofxvr4y0OT9UUHitCpjjUATDo
                No static file info
                TimestampSource PortDest PortSource IPDest IP
                Jan 9, 2025 17:08:01.990148067 CET49675443192.168.2.4173.222.162.32
                Jan 9, 2025 17:08:06.562278986 CET49738443192.168.2.4142.250.186.164
                Jan 9, 2025 17:08:06.562304974 CET44349738142.250.186.164192.168.2.4
                Jan 9, 2025 17:08:06.562432051 CET49738443192.168.2.4142.250.186.164
                Jan 9, 2025 17:08:06.562809944 CET49738443192.168.2.4142.250.186.164
                Jan 9, 2025 17:08:06.562824965 CET44349738142.250.186.164192.168.2.4
                Jan 9, 2025 17:08:07.280939102 CET44349738142.250.186.164192.168.2.4
                Jan 9, 2025 17:08:07.281542063 CET49738443192.168.2.4142.250.186.164
                Jan 9, 2025 17:08:07.281573057 CET44349738142.250.186.164192.168.2.4
                Jan 9, 2025 17:08:07.282584906 CET44349738142.250.186.164192.168.2.4
                Jan 9, 2025 17:08:07.282660961 CET49738443192.168.2.4142.250.186.164
                Jan 9, 2025 17:08:07.283878088 CET49738443192.168.2.4142.250.186.164
                Jan 9, 2025 17:08:07.283943892 CET44349738142.250.186.164192.168.2.4
                Jan 9, 2025 17:08:07.334285975 CET49738443192.168.2.4142.250.186.164
                Jan 9, 2025 17:08:07.334312916 CET44349738142.250.186.164192.168.2.4
                Jan 9, 2025 17:08:07.381283998 CET49738443192.168.2.4142.250.186.164
                Jan 9, 2025 17:08:07.901191950 CET49739443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:07.901233912 CET4434973968.65.120.84192.168.2.4
                Jan 9, 2025 17:08:07.901304007 CET49739443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:07.901818037 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:07.901865959 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:07.901916027 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:07.902080059 CET49739443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:07.902095079 CET4434973968.65.120.84192.168.2.4
                Jan 9, 2025 17:08:07.902331114 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:07.902344942 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:08.639734030 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:08.640258074 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:08.640271902 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:08.640532017 CET4434973968.65.120.84192.168.2.4
                Jan 9, 2025 17:08:08.640717030 CET49739443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:08.640734911 CET4434973968.65.120.84192.168.2.4
                Jan 9, 2025 17:08:08.641163111 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:08.641213894 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:08.641585112 CET4434973968.65.120.84192.168.2.4
                Jan 9, 2025 17:08:08.641642094 CET49739443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:08.647429943 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:08.647489071 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:08.649385929 CET49739443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:08.649440050 CET4434973968.65.120.84192.168.2.4
                Jan 9, 2025 17:08:08.649827003 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:08.649836063 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:08.694689035 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:08.694698095 CET49739443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:08.694761038 CET4434973968.65.120.84192.168.2.4
                Jan 9, 2025 17:08:08.740703106 CET49739443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.122041941 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.122107029 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.122128963 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.122170925 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.122167110 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.122198105 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.122200966 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.122210026 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.122220039 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.122243881 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.122252941 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.142728090 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.142797947 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.142808914 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.142827034 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.142858982 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.188290119 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.212227106 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.212260962 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.212291956 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.212304115 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.212346077 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.233186960 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.233237982 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.233254910 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.233261108 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.233300924 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.234925032 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.234970093 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.234978914 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.234997988 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.235038996 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.236890078 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.236932039 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.236938953 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.236954927 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.236988068 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.237018108 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.302742958 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.302778959 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.302824974 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.302845001 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.302870989 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.302894115 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.323184013 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.323213100 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.323287964 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.323297024 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.323337078 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.324081898 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.324103117 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.324151993 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.324157000 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.324187040 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.325064898 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.325086117 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.325129986 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.325134039 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.325169086 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.326639891 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.326658964 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.326692104 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.326697111 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.326739073 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.327630997 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.327672005 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.327707052 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.327717066 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.327739000 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.327754974 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.357780933 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.357801914 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.357872963 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.357887983 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.358226061 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.393507004 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.393537045 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.393716097 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.393734932 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.393773079 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.394071102 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.394093037 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.394140959 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.394145966 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.394220114 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.425457001 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.425499916 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.425523043 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.425539970 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.425570965 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.425904989 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.425921917 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.425955057 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.425961018 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.425987005 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.426006079 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.426234961 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.426249027 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.426290989 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.426295042 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.426322937 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.426338911 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.426604986 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.426628113 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.426675081 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.426678896 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.426707983 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.431947947 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.431965113 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.432015896 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.432020903 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.432065010 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.448483944 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.448502064 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.448668957 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.448674917 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.448709965 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.467061043 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.467149019 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.467155933 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.467175007 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.467212915 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.576446056 CET49740443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.576488972 CET4434974068.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.661036015 CET49739443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.707329988 CET4434973968.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.835728884 CET4434973968.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.844407082 CET4434973968.65.120.84192.168.2.4
                Jan 9, 2025 17:08:09.844472885 CET49739443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.844882011 CET49739443192.168.2.468.65.120.84
                Jan 9, 2025 17:08:09.844903946 CET4434973968.65.120.84192.168.2.4
                Jan 9, 2025 17:08:16.014576912 CET4972380192.168.2.42.22.50.144
                Jan 9, 2025 17:08:16.019629002 CET80497232.22.50.144192.168.2.4
                Jan 9, 2025 17:08:16.019682884 CET4972380192.168.2.42.22.50.144
                Jan 9, 2025 17:08:17.097002983 CET44349738142.250.186.164192.168.2.4
                Jan 9, 2025 17:08:17.097059011 CET44349738142.250.186.164192.168.2.4
                Jan 9, 2025 17:08:17.097174883 CET49738443192.168.2.4142.250.186.164
                Jan 9, 2025 17:08:18.959654093 CET49738443192.168.2.4142.250.186.164
                Jan 9, 2025 17:08:18.959686995 CET44349738142.250.186.164192.168.2.4
                Jan 9, 2025 17:09:02.161267042 CET4972480192.168.2.4199.232.210.172
                Jan 9, 2025 17:09:02.166516066 CET8049724199.232.210.172192.168.2.4
                Jan 9, 2025 17:09:02.166594028 CET4972480192.168.2.4199.232.210.172
                Jan 9, 2025 17:09:06.616791964 CET49858443192.168.2.4142.250.186.164
                Jan 9, 2025 17:09:06.616842031 CET44349858142.250.186.164192.168.2.4
                Jan 9, 2025 17:09:06.616931915 CET49858443192.168.2.4142.250.186.164
                Jan 9, 2025 17:09:06.617151022 CET49858443192.168.2.4142.250.186.164
                Jan 9, 2025 17:09:06.617189884 CET44349858142.250.186.164192.168.2.4
                Jan 9, 2025 17:09:07.266601086 CET44349858142.250.186.164192.168.2.4
                Jan 9, 2025 17:09:07.300431013 CET49858443192.168.2.4142.250.186.164
                Jan 9, 2025 17:09:07.300512075 CET44349858142.250.186.164192.168.2.4
                Jan 9, 2025 17:09:07.301064968 CET44349858142.250.186.164192.168.2.4
                Jan 9, 2025 17:09:07.303060055 CET49858443192.168.2.4142.250.186.164
                Jan 9, 2025 17:09:07.303138971 CET44349858142.250.186.164192.168.2.4
                Jan 9, 2025 17:09:07.361653090 CET49858443192.168.2.4142.250.186.164
                Jan 9, 2025 17:09:17.197649956 CET44349858142.250.186.164192.168.2.4
                Jan 9, 2025 17:09:17.197709084 CET44349858142.250.186.164192.168.2.4
                Jan 9, 2025 17:09:17.197820902 CET49858443192.168.2.4142.250.186.164
                Jan 9, 2025 17:09:18.959151030 CET49858443192.168.2.4142.250.186.164
                Jan 9, 2025 17:09:18.959194899 CET44349858142.250.186.164192.168.2.4
                TimestampSource PortDest PortSource IPDest IP
                Jan 9, 2025 17:08:02.468964100 CET53498481.1.1.1192.168.2.4
                Jan 9, 2025 17:08:02.498549938 CET53551991.1.1.1192.168.2.4
                Jan 9, 2025 17:08:03.493657112 CET53563821.1.1.1192.168.2.4
                Jan 9, 2025 17:08:06.554194927 CET6280553192.168.2.41.1.1.1
                Jan 9, 2025 17:08:06.554572105 CET5279053192.168.2.41.1.1.1
                Jan 9, 2025 17:08:06.560868979 CET53628051.1.1.1192.168.2.4
                Jan 9, 2025 17:08:06.561297894 CET53527901.1.1.1192.168.2.4
                Jan 9, 2025 17:08:07.866121054 CET6031153192.168.2.41.1.1.1
                Jan 9, 2025 17:08:07.866262913 CET5960253192.168.2.41.1.1.1
                Jan 9, 2025 17:08:07.878905058 CET53596021.1.1.1192.168.2.4
                Jan 9, 2025 17:08:07.900584936 CET53603111.1.1.1192.168.2.4
                Jan 9, 2025 17:08:09.667128086 CET53627791.1.1.1192.168.2.4
                Jan 9, 2025 17:08:13.745136976 CET138138192.168.2.4192.168.2.255
                Jan 9, 2025 17:08:20.419329882 CET53533071.1.1.1192.168.2.4
                Jan 9, 2025 17:08:24.250590086 CET6358853192.168.2.41.1.1.1
                Jan 9, 2025 17:08:24.250885963 CET5078353192.168.2.41.1.1.1
                Jan 9, 2025 17:08:24.270525932 CET53635881.1.1.1192.168.2.4
                Jan 9, 2025 17:08:24.272803068 CET53507831.1.1.1192.168.2.4
                Jan 9, 2025 17:08:24.273360968 CET6053053192.168.2.41.1.1.1
                Jan 9, 2025 17:08:24.284105062 CET53605301.1.1.1192.168.2.4
                Jan 9, 2025 17:08:24.355858088 CET5432753192.168.2.48.8.8.8
                Jan 9, 2025 17:08:24.356185913 CET5548753192.168.2.41.1.1.1
                Jan 9, 2025 17:08:24.362977982 CET53554871.1.1.1192.168.2.4
                Jan 9, 2025 17:08:24.364511967 CET53543278.8.8.8192.168.2.4
                Jan 9, 2025 17:08:25.368539095 CET5310553192.168.2.41.1.1.1
                Jan 9, 2025 17:08:25.368675947 CET5337853192.168.2.41.1.1.1
                Jan 9, 2025 17:08:25.377784967 CET53531051.1.1.1192.168.2.4
                Jan 9, 2025 17:08:25.384635925 CET53533781.1.1.1192.168.2.4
                Jan 9, 2025 17:08:30.404686928 CET6492653192.168.2.41.1.1.1
                Jan 9, 2025 17:08:30.404870987 CET5820753192.168.2.41.1.1.1
                Jan 9, 2025 17:08:30.413489103 CET53582071.1.1.1192.168.2.4
                Jan 9, 2025 17:08:30.417789936 CET53649261.1.1.1192.168.2.4
                Jan 9, 2025 17:08:30.418890953 CET5825353192.168.2.41.1.1.1
                Jan 9, 2025 17:08:30.428750992 CET53582531.1.1.1192.168.2.4
                Jan 9, 2025 17:08:36.249083996 CET5793653192.168.2.41.1.1.1
                Jan 9, 2025 17:08:36.249083996 CET6482353192.168.2.41.1.1.1
                Jan 9, 2025 17:08:36.257783890 CET53579361.1.1.1192.168.2.4
                Jan 9, 2025 17:08:36.263629913 CET53648231.1.1.1192.168.2.4
                Jan 9, 2025 17:08:36.264199018 CET6392153192.168.2.41.1.1.1
                Jan 9, 2025 17:08:36.281095982 CET53639211.1.1.1192.168.2.4
                Jan 9, 2025 17:08:36.293430090 CET5936153192.168.2.41.1.1.1
                Jan 9, 2025 17:08:36.293966055 CET6193253192.168.2.48.8.8.8
                Jan 9, 2025 17:08:36.300265074 CET53593611.1.1.1192.168.2.4
                Jan 9, 2025 17:08:36.301265001 CET53619328.8.8.8192.168.2.4
                Jan 9, 2025 17:08:39.200105906 CET53635251.1.1.1192.168.2.4
                Jan 9, 2025 17:09:01.950880051 CET53607261.1.1.1192.168.2.4
                Jan 9, 2025 17:09:02.145755053 CET53629631.1.1.1192.168.2.4
                Jan 9, 2025 17:09:06.309418917 CET5829853192.168.2.41.1.1.1
                Jan 9, 2025 17:09:06.309534073 CET5215853192.168.2.41.1.1.1
                Jan 9, 2025 17:09:06.327634096 CET53582981.1.1.1192.168.2.4
                Jan 9, 2025 17:09:06.330037117 CET53521581.1.1.1192.168.2.4
                Jan 9, 2025 17:09:06.330667019 CET6136553192.168.2.41.1.1.1
                Jan 9, 2025 17:09:06.344058990 CET53613651.1.1.1192.168.2.4
                Jan 9, 2025 17:09:06.719813108 CET6310053192.168.2.41.1.1.1
                Jan 9, 2025 17:09:06.720029116 CET6507253192.168.2.41.1.1.1
                Jan 9, 2025 17:09:06.729790926 CET53650721.1.1.1192.168.2.4
                Jan 9, 2025 17:09:06.751132011 CET53631001.1.1.1192.168.2.4
                Jan 9, 2025 17:09:06.764997959 CET5519253192.168.2.41.1.1.1
                Jan 9, 2025 17:09:06.765193939 CET5894353192.168.2.48.8.8.8
                Jan 9, 2025 17:09:06.772303104 CET53589438.8.8.8192.168.2.4
                Jan 9, 2025 17:09:06.772635937 CET53551921.1.1.1192.168.2.4
                TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                Jan 9, 2025 17:08:06.554194927 CET192.168.2.41.1.1.10x5f60Standard query (0)www.google.comA (IP address)IN (0x0001)false
                Jan 9, 2025 17:08:06.554572105 CET192.168.2.41.1.1.10x3773Standard query (0)www.google.com65IN (0x0001)false
                Jan 9, 2025 17:08:07.866121054 CET192.168.2.41.1.1.10x27fStandard query (0)clinicasanclemente.comA (IP address)IN (0x0001)false
                Jan 9, 2025 17:08:07.866262913 CET192.168.2.41.1.1.10x20c0Standard query (0)clinicasanclemente.com65IN (0x0001)false
                Jan 9, 2025 17:08:24.250590086 CET192.168.2.41.1.1.10xee67Standard query (0)0nline1.online-mba.xyzA (IP address)IN (0x0001)false
                Jan 9, 2025 17:08:24.250885963 CET192.168.2.41.1.1.10x9bcStandard query (0)0nline1.online-mba.xyz65IN (0x0001)false
                Jan 9, 2025 17:08:24.273360968 CET192.168.2.41.1.1.10x7f59Standard query (0)0nline1.online-mba.xyzA (IP address)IN (0x0001)false
                Jan 9, 2025 17:08:24.355858088 CET192.168.2.48.8.8.80x2adaStandard query (0)google.comA (IP address)IN (0x0001)false
                Jan 9, 2025 17:08:24.356185913 CET192.168.2.41.1.1.10xb1a8Standard query (0)google.comA (IP address)IN (0x0001)false
                Jan 9, 2025 17:08:25.368539095 CET192.168.2.41.1.1.10x2c2eStandard query (0)0nline1.online-mba.xyzA (IP address)IN (0x0001)false
                Jan 9, 2025 17:08:25.368675947 CET192.168.2.41.1.1.10xb9e5Standard query (0)0nline1.online-mba.xyz65IN (0x0001)false
                Jan 9, 2025 17:08:30.404686928 CET192.168.2.41.1.1.10xad83Standard query (0)0nline1.online-mba.xyzA (IP address)IN (0x0001)false
                Jan 9, 2025 17:08:30.404870987 CET192.168.2.41.1.1.10xb34aStandard query (0)0nline1.online-mba.xyz65IN (0x0001)false
                Jan 9, 2025 17:08:30.418890953 CET192.168.2.41.1.1.10x4cffStandard query (0)0nline1.online-mba.xyzA (IP address)IN (0x0001)false
                Jan 9, 2025 17:08:36.249083996 CET192.168.2.41.1.1.10xcf18Standard query (0)0nline1.online-mba.xyzA (IP address)IN (0x0001)false
                Jan 9, 2025 17:08:36.249083996 CET192.168.2.41.1.1.10x40e1Standard query (0)0nline1.online-mba.xyz65IN (0x0001)false
                Jan 9, 2025 17:08:36.264199018 CET192.168.2.41.1.1.10x2702Standard query (0)0nline1.online-mba.xyzA (IP address)IN (0x0001)false
                Jan 9, 2025 17:08:36.293430090 CET192.168.2.41.1.1.10xb977Standard query (0)google.comA (IP address)IN (0x0001)false
                Jan 9, 2025 17:08:36.293966055 CET192.168.2.48.8.8.80x7db6Standard query (0)google.comA (IP address)IN (0x0001)false
                Jan 9, 2025 17:09:06.309418917 CET192.168.2.41.1.1.10x907bStandard query (0)0nline1.online-mba.xyzA (IP address)IN (0x0001)false
                Jan 9, 2025 17:09:06.309534073 CET192.168.2.41.1.1.10x9327Standard query (0)0nline1.online-mba.xyz65IN (0x0001)false
                Jan 9, 2025 17:09:06.330667019 CET192.168.2.41.1.1.10x6739Standard query (0)0nline1.online-mba.xyzA (IP address)IN (0x0001)false
                Jan 9, 2025 17:09:06.719813108 CET192.168.2.41.1.1.10xdb6eStandard query (0)0nline1.online-mba.xyzA (IP address)IN (0x0001)false
                Jan 9, 2025 17:09:06.720029116 CET192.168.2.41.1.1.10x194bStandard query (0)0nline1.online-mba.xyz65IN (0x0001)false
                Jan 9, 2025 17:09:06.764997959 CET192.168.2.41.1.1.10xfa30Standard query (0)google.comA (IP address)IN (0x0001)false
                Jan 9, 2025 17:09:06.765193939 CET192.168.2.48.8.8.80x11b2Standard query (0)google.comA (IP address)IN (0x0001)false
                TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                Jan 9, 2025 17:08:06.560868979 CET1.1.1.1192.168.2.40x5f60No error (0)www.google.com142.250.186.164A (IP address)IN (0x0001)false
                Jan 9, 2025 17:08:06.561297894 CET1.1.1.1192.168.2.40x3773No error (0)www.google.com65IN (0x0001)false
                Jan 9, 2025 17:08:07.900584936 CET1.1.1.1192.168.2.40x27fNo error (0)clinicasanclemente.com68.65.120.84A (IP address)IN (0x0001)false
                Jan 9, 2025 17:08:24.270525932 CET1.1.1.1192.168.2.40xee67Name error (3)0nline1.online-mba.xyznonenoneA (IP address)IN (0x0001)false
                Jan 9, 2025 17:08:24.272803068 CET1.1.1.1192.168.2.40x9bcName error (3)0nline1.online-mba.xyznonenone65IN (0x0001)false
                Jan 9, 2025 17:08:24.284105062 CET1.1.1.1192.168.2.40x7f59Name error (3)0nline1.online-mba.xyznonenoneA (IP address)IN (0x0001)false
                Jan 9, 2025 17:08:24.362977982 CET1.1.1.1192.168.2.40xb1a8No error (0)google.com172.217.16.206A (IP address)IN (0x0001)false
                Jan 9, 2025 17:08:24.364511967 CET8.8.8.8192.168.2.40x2adaNo error (0)google.com172.217.168.78A (IP address)IN (0x0001)false
                Jan 9, 2025 17:08:25.377784967 CET1.1.1.1192.168.2.40x2c2eName error (3)0nline1.online-mba.xyznonenoneA (IP address)IN (0x0001)false
                Jan 9, 2025 17:08:25.384635925 CET1.1.1.1192.168.2.40xb9e5Name error (3)0nline1.online-mba.xyznonenone65IN (0x0001)false
                Jan 9, 2025 17:08:30.413489103 CET1.1.1.1192.168.2.40xb34aName error (3)0nline1.online-mba.xyznonenone65IN (0x0001)false
                Jan 9, 2025 17:08:30.417789936 CET1.1.1.1192.168.2.40xad83Name error (3)0nline1.online-mba.xyznonenoneA (IP address)IN (0x0001)false
                Jan 9, 2025 17:08:30.428750992 CET1.1.1.1192.168.2.40x4cffName error (3)0nline1.online-mba.xyznonenoneA (IP address)IN (0x0001)false
                Jan 9, 2025 17:08:36.257783890 CET1.1.1.1192.168.2.40xcf18Name error (3)0nline1.online-mba.xyznonenoneA (IP address)IN (0x0001)false
                Jan 9, 2025 17:08:36.263629913 CET1.1.1.1192.168.2.40x40e1Name error (3)0nline1.online-mba.xyznonenone65IN (0x0001)false
                Jan 9, 2025 17:08:36.281095982 CET1.1.1.1192.168.2.40x2702Name error (3)0nline1.online-mba.xyznonenoneA (IP address)IN (0x0001)false
                Jan 9, 2025 17:08:36.300265074 CET1.1.1.1192.168.2.40xb977No error (0)google.com142.250.186.78A (IP address)IN (0x0001)false
                Jan 9, 2025 17:08:36.301265001 CET8.8.8.8192.168.2.40x7db6No error (0)google.com172.217.168.78A (IP address)IN (0x0001)false
                Jan 9, 2025 17:09:06.327634096 CET1.1.1.1192.168.2.40x907bName error (3)0nline1.online-mba.xyznonenoneA (IP address)IN (0x0001)false
                Jan 9, 2025 17:09:06.330037117 CET1.1.1.1192.168.2.40x9327Name error (3)0nline1.online-mba.xyznonenone65IN (0x0001)false
                Jan 9, 2025 17:09:06.344058990 CET1.1.1.1192.168.2.40x6739Name error (3)0nline1.online-mba.xyznonenoneA (IP address)IN (0x0001)false
                Jan 9, 2025 17:09:06.729790926 CET1.1.1.1192.168.2.40x194bName error (3)0nline1.online-mba.xyznonenone65IN (0x0001)false
                Jan 9, 2025 17:09:06.751132011 CET1.1.1.1192.168.2.40xdb6eName error (3)0nline1.online-mba.xyznonenoneA (IP address)IN (0x0001)false
                Jan 9, 2025 17:09:06.772303104 CET8.8.8.8192.168.2.40x11b2No error (0)google.com172.217.168.78A (IP address)IN (0x0001)false
                Jan 9, 2025 17:09:06.772635937 CET1.1.1.1192.168.2.40xfa30No error (0)google.com216.58.206.46A (IP address)IN (0x0001)false
                • clinicasanclemente.com
                • https:
                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                0192.168.2.44974068.65.120.844434564C:\Program Files\Google\Chrome\Application\chrome.exe
                TimestampBytes transferredDirectionData
                2025-01-09 16:08:08 UTC668OUTGET /ap/ HTTP/1.1
                Host: clinicasanclemente.com
                Connection: keep-alive
                sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                sec-ch-ua-mobile: ?0
                sec-ch-ua-platform: "Windows"
                Upgrade-Insecure-Requests: 1
                User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
                Sec-Fetch-Site: none
                Sec-Fetch-Mode: navigate
                Sec-Fetch-User: ?1
                Sec-Fetch-Dest: document
                Accept-Encoding: gzip, deflate, br
                Accept-Language: en-US,en;q=0.9
                2025-01-09 16:08:09 UTC269INHTTP/1.1 200 OK
                keep-alive: timeout=5, max=100
                x-powered-by: PHP/8.1.31
                content-type: text/html; charset=UTF-8
                transfer-encoding: chunked
                date: Thu, 09 Jan 2025 16:08:08 GMT
                server: LiteSpeed
                vary: User-Agent
                x-turbo-charged-by: LiteSpeed
                connection: close
                2025-01-09 16:08:09 UTC16115INData Raw: 31 30 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 2a 2a 2a 2a 2d 2d 2d 2a 2a 2a 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 53 65 67 6f 65 20 55 49 22 2c 20 22 53 65 67
                Data Ascii: 10000<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>****---***</title> <style> body { font-family: "Segoe UI", "Seg
                2025-01-09 16:08:09 UTC16384INData Raw: 69 48 41 56 6c 4d 71 68 36 77 34 33 6e 35 71 41 52 6a 69 66 6d 49 63 65 7a 58 4a 74 42 4b 61 31 34 4f 4c 37 6c 57 6f 42 6a 65 48 34 2f 4f 4f 42 4f 79 63 49 45 5a 4d 56 37 46 37 4e 55 73 48 6a 76 62 66 4d 68 63 5a 78 78 4f 6e 49 69 55 5a 78 77 47 6d 51 38 68 53 4b 46 37 34 45 51 74 36 4d 6f 41 5a 4a 53 67 70 4a 39 74 50 4c 39 6d 6e 41 39 62 69 31 6d 4e 6e 56 63 61 75 49 51 58 68 7a 39 4b 48 62 4a 57 53 46 7a 56 55 6f 4c 4e 4f 30 70 4a 72 54 66 69 4f 73 51 4f 78 72 56 35 37 38 41 74 75 74 6a 33 4d 6c 2f 71 35 6f 5a 72 41 7a 6e 71 6d 66 67 63 55 34 6a 74 38 42 6b 63 70 63 33 50 6d 58 64 2b 74 5a 38 32 37 50 5a 57 6a 50 4f 68 67 78 52 34 59 4b 66 70 46 68 65 2f 38 54 6a 43 33 36 79 44 33 73 73 77 62 59 66 52 59 69 48 32 38 69 43 78 58 77 43 4c 2f 2b 4c 4a 79
                Data Ascii: iHAVlMqh6w43n5qARjifmIcezXJtBKa14OL7lWoBjeH4/OOBOycIEZMV7F7NUsHjvbfMhcZxxOnIiUZxwGmQ8hSKF74EQt6MoAZJSgpJ9tPL9mnA9bi1mNnVcauIQXhz9KHbJWSFzVUoLNO0pJrTfiOsQOxrV578Atutj3Ml/q5oZrAznqmfgcU4jt8Bkcpc3PmXd+tZ827PZWjPOhgxR4YKfpFhe/8TjC36yD3sswbYfRYiH28iCxXwCL/+LJy
                2025-01-09 16:08:09 UTC16384INData Raw: 72 4f 49 58 75 4f 68 75 59 7a 6d 62 66 38 31 73 39 56 39 76 57 4f 77 4a 77 77 4c 38 54 68 65 44 39 79 61 36 36 4d 64 34 48 4c 4d 4d 6f 75 50 50 79 39 61 76 66 31 4b 73 37 49 42 57 49 6e 54 30 49 6e 7a 42 74 63 64 72 6b 32 59 35 41 68 68 78 48 34 72 69 7a 38 42 63 75 38 6f 35 38 37 70 4b 6e 6a 6d 70 72 48 79 35 30 73 38 4a 39 67 32 71 35 32 6a 4d 47 69 58 68 33 57 38 54 49 6c 36 4c 34 6a 49 4a 42 2f 59 30 43 41 78 63 62 75 46 44 68 54 30 2b 73 42 51 6f 74 56 48 43 52 41 6b 55 51 33 43 79 43 41 67 55 32 31 69 46 76 4e 78 46 61 75 74 55 67 41 69 4a 65 6d 4c 44 6a 4b 2b 75 56 53 4a 33 48 44 33 42 69 4f 56 37 6c 32 4a 59 35 4f 4a 71 62 65 48 58 4a 67 51 61 31 46 72 75 2b 48 77 69 77 69 61 4d 57 49 53 32 57 73 63 43 4e 70 45 6a 79 4b 7a 76 6b 2b 69 56 71 51 35
                Data Ascii: rOIXuOhuYzmbf81s9V9vWOwJwwL8TheD9ya66Md4HLMMouPPy9avf1Ks7IBWInT0InzBtcdrk2Y5AhhxH4riz8Bcu8o587pKnjmprHy50s8J9g2q52jMGiXh3W8TIl6L4jIJB/Y0CAxcbuFDhT0+sBQotVHCRAkUQ3CyCAgU21iFvNxFautUgAiJemLDjK+uVSJ3HD3BiOV7l2JY5OJqbeHXJgQa1Fru+HwiwiaMWIS2WscCNpEjyKzvk+iVqQ5
                2025-01-09 16:08:09 UTC15259INData Raw: 4c 41 63 78 41 75 48 73 71 55 5a 35 77 58 4e 79 39 5a 6a 50 41 7a 59 7a 4a 51 4b 6b 49 46 38 72 48 4a 76 68 76 2f 2f 54 58 32 72 6a 34 36 31 2b 6a 57 44 51 32 4e 64 7a 79 6e 7a 59 72 59 44 52 47 4b 67 79 73 38 4f 69 4b 52 78 65 4b 6d 78 50 58 47 78 57 2f 76 4c 6f 57 30 72 42 77 63 4f 68 54 6a 6d 6d 67 71 58 51 50 68 6d 77 35 53 7a 37 70 76 65 51 74 45 32 38 34 6f 57 44 35 71 4a 44 4e 44 72 4e 35 4c 79 6f 6c 53 77 4e 46 35 53 42 50 7a 67 73 6d 4e 76 4f 67 39 36 50 54 4b 39 73 45 78 2b 37 38 46 6f 55 37 2f 6c 4a 4d 4e 44 47 56 54 63 4d 70 53 4c 70 6c 77 71 46 71 73 65 2b 4d 36 2f 6f 6b 38 75 67 67 69 46 2f 64 31 39 54 43 44 64 6b 70 32 32 36 78 58 2f 41 33 34 6f 45 78 67 76 73 57 33 73 66 55 6a 68 32 61 36 79 6c 35 36 54 4b 49 74 34 58 45 35 72 6c 52 6c 62
                Data Ascii: LAcxAuHsqUZ5wXNy9ZjPAzYzJQKkIF8rHJvhv//TX2rj461+jWDQ2NdzynzYrYDRGKgys8OiKRxeKmxPXGxW/vLoW0rBwcOhTjmmgqXQPhmw5Sz7pveQtE284oWD5qJDNDrN5LyolSwNF5SBPzgsmNvOg96PTK9sEx+78FoU7/lJMNDGVTcMpSLplwqFqse+M6/ok8uggiF/d19TCDdkp226xX/A34oExgvsW3sfUjh2a6yl56TKIt4XE5rlRlb
                2025-01-09 16:08:09 UTC1401INData Raw: 50 69 68 74 64 61 32 75 43 63 4d 2b 53 35 65 61 6a 4f 77 57 6c 4c 61 48 34 4a 75 45 59 54 4b 41 53 63 56 50 4d 51 56 55 76 57 61 73 30 32 74 34 32 4b 55 67 64 66 31 78 34 51 65 39 31 30 6e 55 2f 47 5a 66 36 78 48 72 6a 66 6a 7a 78 77 67 55 48 55 4e 58 65 37 6b 75 69 6a 79 74 33 6f 48 76 45 65 31 2f 55 38 66 32 4b 70 33 70 38 61 46 55 41 64 76 7a 6c 68 53 4f 56 4e 6f 52 32 58 35 6b 55 55 37 4d 75 54 6f 71 62 53 58 73 74 6c 50 62 47 44 78 50 48 36 42 41 72 50 7a 59 6f 69 47 74 7a 52 52 63 32 4e 42 41 4d 49 76 77 6c 53 47 78 66 36 39 6b 51 32 4b 4b 36 2f 55 58 47 78 73 54 34 64 70 4c 4b 57 44 62 61 53 74 62 43 35 43 4d 56 72 4d 64 35 77 6b 41 59 46 47 68 62 36 64 6f 55 32 4b 76 44 57 68 44 55 78 30 4c 53 34 6c 42 72 66 35 54 34 43 47 79 4d 6e 44 4b 46 59 43
                Data Ascii: Pihtda2uCcM+S5eajOwWlLaH4JuEYTKAScVPMQVUvWas02t42KUgdf1x4Qe910nU/GZf6xHrjfjzxwgUHUNXe7kuijyt3oHvEe1/U8f2Kp3p8aFUAdvzlhSOVNoR2X5kUU7MuToqbSXstlPbGDxPH6BArPzYoiGtzRRc2NBAMIvwlSGxf69kQ2KK6/UXGxsT4dpLKWDbaStbC5CMVrMd5wkAYFGhb6doU2KvDWhDUx0LS4lBrf5T4CGyMnDKFYC
                2025-01-09 16:08:09 UTC16384INData Raw: 0d 0a 31 30 30 30 30 0d 0a 32 6e 78 79 44 38 4e 75 6d 54 5a 58 39 49 4a 4a 48 47 36 4f 78 4f 46 76 53 37 55 65 4e 6d 6b 31 67 56 6f 63 72 56 48 59 62 44 61 44 49 47 31 49 4b 6e 79 64 6f 6b 47 77 7a 66 4a 65 47 36 63 33 62 59 43 68 4c 6b 33 4a 37 53 70 70 30 68 72 34 47 6a 45 39 76 53 35 7a 47 7a 42 53 65 38 4f 64 57 50 4f 51 64 47 6f 50 49 31 70 63 62 32 55 55 59 55 6b 75 49 37 73 48 63 73 78 6d 47 33 7a 71 74 68 49 78 71 7a 71 7a 36 44 61 70 30 72 6c 2b 36 56 62 73 37 45 46 58 6b 4e 64 4a 56 38 30 32 33 39 38 77 2f 2b 55 6d 72 62 69 63 71 63 66 2b 32 4e 59 32 66 49 4f 4d 37 48 58 7a 50 66 79 58 77 44 79 6d 42 35 33 37 30 74 78 45 50 62 42 31 30 66 57 33 2f 74 35 48 37 7a 37 72 4c 72 34 32 6e 43 51 2f 7a 50 58 75 38 32 2b 58 56 50 55 2b 78 6b 5a 55 38 48
                Data Ascii: 100002nxyD8NumTZX9IJJHG6OxOFvS7UeNmk1gVocrVHYbDaDIG1IKnydokGwzfJeG6c3bYChLk3J7Spp0hr4GjE9vS5zGzBSe8OdWPOQdGoPI1pcb2UUYUkuI7sHcsxmG3zqthIxqzqz6Dap0rl+6Vbs7EFXkNdJV802398w/+Umrbicqcf+2NY2fIOM7HXzPfyXwDymB5370txEPbB10fW3/t5H7z7rLr42nCQ/zPXu82+XVPU+xkZU8H
                2025-01-09 16:08:09 UTC16384INData Raw: 74 6e 49 52 4a 4c 6f 6f 62 41 45 70 39 65 6b 46 72 30 38 33 45 47 59 79 53 53 43 4f 53 4b 4a 2b 61 77 4b 47 6a 69 43 35 53 64 7a 70 55 35 6f 70 75 4b 33 6a 76 62 48 78 56 67 69 79 52 6b 4b 56 6c 5a 4a 2f 4c 37 71 65 6d 31 36 43 72 59 4f 33 32 58 74 53 6a 41 4d 7a 47 36 55 61 41 69 68 65 69 4e 61 4b 77 2b 49 45 68 6e 66 30 76 48 48 42 38 6b 56 68 6a 75 36 37 38 56 74 31 37 6a 4c 4d 5a 31 54 4c 37 4f 49 2b 44 43 66 39 76 53 4e 6c 6e 79 62 5a 49 75 39 76 74 42 42 75 7a 51 69 5a 72 4d 58 4d 75 65 4a 6f 79 71 38 6b 68 41 56 65 6d 64 57 52 70 68 55 62 44 65 6d 49 62 75 4d 39 4d 4f 53 51 32 35 4b 68 45 6d 38 6a 53 42 4a 67 7a 6f 2b 34 37 49 54 70 39 5a 69 57 45 79 72 38 70 44 38 32 65 44 69 74 55 57 41 6c 70 4f 54 37 67 50 6b 69 33 48 75 64 31 78 35 44 2b 44 51
                Data Ascii: tnIRJLoobAEp9ekFr083EGYySSCOSKJ+awKGjiC5SdzpU5opuK3jvbHxVgiyRkKVlZJ/L7qem16CrYO32XtSjAMzG6UaAiheiNaKw+IEhnf0vHHB8kVhju678Vt17jLMZ1TL7OI+DCf9vSNlnybZIu9vtBBuzQiZrMXMueJoyq8khAVemdWRphUbDemIbuM9MOSQ25KhEm8jSBJgzo+47ITp9ZiWEyr8pD82eDitUWAlpOT7gPki3Hud1x5D+DQ
                2025-01-09 16:08:09 UTC16384INData Raw: 2b 4a 67 34 4a 4b 36 61 6d 75 4b 57 36 4b 58 39 51 58 34 61 4f 74 6d 79 4d 33 54 71 4f 70 6c 72 70 57 77 66 4c 6b 4c 76 67 35 2f 65 79 79 4b 64 45 55 79 35 6f 48 66 74 6d 73 64 59 78 68 43 34 58 4d 39 70 43 2b 67 6c 31 7a 66 57 61 77 61 4e 54 42 39 36 77 52 57 66 36 6f 6d 2f 56 64 4f 78 56 69 4c 4c 38 38 66 41 73 69 4e 49 46 45 6f 34 31 66 57 79 35 5a 2f 74 56 63 4d 2f 78 74 56 6c 52 4b 79 70 62 6f 47 4f 73 6c 56 6b 50 59 35 7a 70 30 55 62 69 33 4a 68 5a 7a 50 7a 69 46 2b 73 55 44 4b 4d 54 55 5a 62 6e 48 4a 52 50 4a 54 67 5a 6e 43 78 33 4f 50 6f 62 78 6d 73 51 48 76 6b 78 7a 44 30 6a 4c 59 4a 46 2b 6b 58 78 42 43 41 39 68 7a 43 72 69 32 6a 65 62 6a 6e 70 50 2b 33 4f 4e 37 79 73 50 69 6d 31 65 78 38 42 65 4b 59 54 6d 4e 32 2b 36 64 78 34 41 42 2b 68 6d 77
                Data Ascii: +Jg4JK6amuKW6KX9QX4aOtmyM3TqOplrpWwfLkLvg5/eyyKdEUy5oHftmsdYxhC4XM9pC+gl1zfWawaNTB96wRWf6om/VdOxViLL88fAsiNIFEo41fWy5Z/tVcM/xtVlRKypboGOslVkPY5zp0Ubi3JhZzPziF+sUDKMTUZbnHJRPJTgZnCx3OPobxmsQHvkxzD0jLYJF+kXxBCA9hzCri2jebjnpP+3ON7ysPim1ex8BeKYTmN2+6dx4AB+hmw
                2025-01-09 16:08:09 UTC16322INData Raw: 74 7a 53 57 37 36 69 6a 34 2b 33 72 75 72 6a 2f 62 53 42 44 33 48 63 76 58 31 2f 66 2b 67 76 33 72 6a 72 6d 39 2f 38 55 77 36 36 59 4d 7a 32 58 72 65 75 43 4b 53 58 71 42 5a 68 66 6a 47 74 6f 59 51 2f 70 6d 75 62 71 36 79 49 6e 35 67 4c 6b 6d 43 72 45 69 2b 36 66 49 43 62 54 79 4c 5a 41 37 4b 5a 44 7a 52 42 31 75 70 68 7a 39 72 45 6f 4b 6c 6d 36 31 56 2f 67 78 75 42 78 35 41 65 6e 68 75 36 6d 46 54 71 61 57 6b 4e 36 65 71 43 56 6c 34 4b 74 37 4a 74 56 6d 67 5a 46 4b 31 66 6c 62 52 4d 6e 45 52 73 37 55 39 68 68 42 44 5a 52 34 37 4e 57 46 36 42 75 61 7a 54 4a 72 30 59 53 39 57 67 58 6a 71 70 4e 36 37 59 55 69 49 62 6c 57 52 58 66 79 6f 78 41 4e 4a 74 50 4d 64 66 4e 2f 78 33 52 79 31 7a 32 64 34 70 2f 4c 58 5a 6c 48 62 2f 4f 4b 75 58 74 4b 6b 44 33 34 6e 71
                Data Ascii: tzSW76ij4+3rurj/bSBD3HcvX1/f+gv3rjrm9/8Uw66YMz2XreuCKSXqBZhfjGtoYQ/pmubq6yIn5gLkmCrEi+6fICbTyLZA7KZDzRB1uphz9rEoKlm61V/gxuBx5Aenhu6mFTqaWkN6eqCVl4Kt7JtVmgZFK1flbRMnERs7U9hhBDZR47NWF6BuazTJr0YS9WgXjqpN67YUiIblWRXfyoxANJtPMdfN/x3Ry1z2d4p/LXZlHb/OKuXtKkD34nq
                2025-01-09 16:08:09 UTC71INData Raw: 4d 76 4b 53 61 55 50 7a 65 54 70 2b 35 76 64 31 50 68 76 76 78 33 55 5a 74 7a 30 54 74 2f 30 2f 43 35 51 30 4a 70 59 66 69 6b 4a 56 62 39 79 30 55 42 35 4d 37 4d 4b 6e 74 7a 6f 4c 50 70 45 55 38 70 5a 4e 7a 42 70
                Data Ascii: MvKSaUPzeTp+5vd1Phvvx3UZtz0Tt/0/C5Q0JpYfikJVb9y0UB5M7MKntzoLPpEU8pZNzBp


                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                1192.168.2.44973968.65.120.844434564C:\Program Files\Google\Chrome\Application\chrome.exe
                TimestampBytes transferredDirectionData
                2025-01-09 16:08:09 UTC603OUTGET /favicon.ico HTTP/1.1
                Host: clinicasanclemente.com
                Connection: keep-alive
                sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                sec-ch-ua-mobile: ?0
                User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                sec-ch-ua-platform: "Windows"
                Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                Sec-Fetch-Site: same-origin
                Sec-Fetch-Mode: no-cors
                Sec-Fetch-Dest: image
                Referer: https://clinicasanclemente.com/ap/
                Accept-Encoding: gzip, deflate, br
                Accept-Language: en-US,en;q=0.9
                2025-01-09 16:08:09 UTC319INHTTP/1.1 404 Not Found
                keep-alive: timeout=5, max=100
                cache-control: private, no-cache, no-store, must-revalidate, max-age=0
                pragma: no-cache
                content-type: text/html
                content-length: 1251
                date: Thu, 09 Jan 2025 16:08:09 GMT
                server: LiteSpeed
                vary: User-Agent
                x-turbo-charged-by: LiteSpeed
                connection: close
                2025-01-09 16:08:09 UTC1251INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79
                Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</sty


                Click to jump to process

                Click to jump to process

                Click to jump to process

                Target ID:0
                Start time:11:07:57
                Start date:09/01/2025
                Path:C:\Program Files\Google\Chrome\Application\chrome.exe
                Wow64 process (32bit):false
                Commandline:"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
                Imagebase:0x7ff76e190000
                File size:3'242'272 bytes
                MD5 hash:45DE480806D1B5D462A7DDE4DCEFC4E4
                Has elevated privileges:true
                Has administrator privileges:true
                Programmed in:C, C++ or other language
                Reputation:low
                Has exited:false

                Target ID:2
                Start time:11:08:01
                Start date:09/01/2025
                Path:C:\Program Files\Google\Chrome\Application\chrome.exe
                Wow64 process (32bit):false
                Commandline:"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2008,i,17832135286452935298,15271712750092276784,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
                Imagebase:0x7ff76e190000
                File size:3'242'272 bytes
                MD5 hash:45DE480806D1B5D462A7DDE4DCEFC4E4
                Has elevated privileges:true
                Has administrator privileges:true
                Programmed in:C, C++ or other language
                Reputation:low
                Has exited:false

                Target ID:3
                Start time:11:08:07
                Start date:09/01/2025
                Path:C:\Program Files\Google\Chrome\Application\chrome.exe
                Wow64 process (32bit):false
                Commandline:"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://clinicasanclemente.com/ap/"
                Imagebase:0x7ff76e190000
                File size:3'242'272 bytes
                MD5 hash:45DE480806D1B5D462A7DDE4DCEFC4E4
                Has elevated privileges:true
                Has administrator privileges:true
                Programmed in:C, C++ or other language
                Reputation:low
                Has exited:true

                No disassembly