Edit tour

Windows Analysis Report
DEEZI80S.pdf

Overview

General Information

Sample name:	DEEZI80S.pdf renamed because original name is a hash value
Original sample name:	Mk Steps - nIin Surity Ntifition NUM-PB4SDEEZI80S.pdf
Analysis ID:	1592047
MD5:	13ab8bff5a63ec4714eb396696c73873
SHA1:	2362f992df475a6ca17aefe6880f397f52e138d2
SHA256:	f73884ab8ba0ac61f8cc90095a5e7df72262348178182e739458f9370d1c4bea
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

AI detected landing page (webpage, office document or email)

AI detected suspicious URL

Detected non-DNS traffic on DNS port

Document contains embedded VBA macros

Document misses a certain OLE stream usually present in this Microsoft Office document type

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML page contains obfuscated script src

IP address seen in connection with other malware

Invalid T&C link found

Stores files to the Windows start menu directory

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64_ra

Acrobat.exe (PID: 1084 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\DEEZI80S.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 6056 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 1140 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=1588 --field-trial-handle=1568,i,17243078238320737959,17368587101676185686,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 7916 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://connectauthentication.blob.core.windows.net/open/complete.html?h9dhy MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 8100 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=1852,i,3534187721205768075,1816576997033915686,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Source: chromecache_465.15.dr

Binary or memory string: a = "-----BEGIN PUBLIC KEY-----\n" + (this.wordwrap(this.getPublicBaseKeyB64()) + "\n");

memstr_31bcaee6-9

Phishing

AI detected phishing page

Source: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go	Joe Sandbox AI: Score: 9 Reasons: The brand 'Bank of America' is a well-known financial institution., The legitimate domain for Bank of America is 'bankofamerica.com'., The URL 'online.access.secure.bankofamerlica.com' contains a misspelling of 'bankofamerica' as 'bankofamerlica'., The presence of multiple subdomains and the misspelling are common phishing tactics., The input fields 'User ID' and 'Password' are typical targets for phishing attempts. DOM: 2.2.pages.csv
Source: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go	Joe Sandbox AI: Score: 9 Reasons: The brand 'Bank of America' is a well-known financial institution., The legitimate domain for Bank of America is 'bankofamerica.com'., The URL 'online.access.secure.bankofamerlica.com' contains a misspelling of 'bankofamerica' as 'bankofamerlica'., The presence of multiple subdomains and the misspelling are common phishing tactics., The input fields 'User ID' and 'Password' are typical targets for phishing attempts. DOM: 2.3.pages.csv
Source: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go	Joe Sandbox AI: Score: 9 Reasons: The brand 'Bank of America' is a well-known financial institution., The legitimate domain for Bank of America is 'bankofamerica.com'., The provided URL 'online.access.secure.bankofamerlica.com' contains a misspelling of 'bankofamerica' as 'bankofamerlica'., The URL structure includes multiple subdomains which can be a tactic used in phishing to mimic legitimate URLs., The presence of input fields for 'User ID' and 'Password' is typical for phishing sites attempting to capture sensitive information. DOM: 2.4.pages.csv

AI detected landing page (webpage, office document or email)

Source: PDF document

Joe Sandbox AI: PDF document contains prominent button: 'continue'

AI detected suspicious URL

Source: URL	Joe Sandbox AI: AI detected Brand spoofing attempt in URL: https://bankofamerlica.com
Source: URL	Joe Sandbox AI: AI detected Typosquatting in URL: https://bankofamerlica.com

Source: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go	HTTP Parser: Number of links: 0
Source: https://www.virustotal.com/gui/search/https%253A%252F%252Fonline.access.secure.bankofamerlica.com%252Flogin%252Fsign-in%252FsignOnV2Screen.go	HTTP Parser: Number of links: 0

Source: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://online.access.secure.bankofamerlica.com/secure/

HTTP Parser: Base64 decoded: function _0x5f48(_0x2c5e02,_0xe19f15){var _0x1b34d0=_0x1b34();return _0x5f48=function(_0x5f482d,_0x502389){_0x5f482d=_0x5f482d-0x143;var _0x72c7d7=_0x1b34d0[_0x5f482d];return _0x72c7d7;},_0x5f48(_0x2c5e02,_0xe19f15);}(function(_0x471b0b,_0x52b3dd){var _0x...

Source: https://online.access.secure.bankofamerlica.com/secure/	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gXzB4NWY0OChfMHgyYzVlMDIsXzB4ZTE5ZjE1KXt2YXIgXzB4MWIzNGQwPV8weDFiMzQoKTtyZXR1cm4gXzB4NWY0OD1mdW5jdGlvbihfMHg1ZjQ4MmQsXzB4NTAyMzg5KXtfMHg1ZjQ4MmQ9XzB4NWY0ODJkLTB4MTQzO3ZhciBfMHg3MmM3ZDc9XzB4MWIzNGQwW18weDVmNDgyZF
Source: https://online.access.secure.bankofamerlica.com/secure/	HTTP Parser: Script src: data:text/javascript;base64,dmFyIF8weDNmZDY5MD1fMHg0Y2VkOyhmdW5jdGlvbihfMHg4ZTVlOTgsXzB4NGFhOTEwKXt2YXIgXzB4MmJjNjY1PV8weDRjZWQsXzB4NDMwNGQ4PV8weDhlNWU5OCgpO3doaWxlKCEhW10pe3RyeXt2YXIgXzB4MzA1MjJhPS1wYXJzZUludChfMHgyYmM2NjUoMHgzZDcpKS8weDErcGFyc2VJbn
Source: https://online.access.secure.bankofamerlica.com/secure/	HTTP Parser: Script src: data:text/javascript;base64,dmFyIF8weDVkM2JjYj1fMHgyZmZlOyhmdW5jdGlvbihfMHgyMzhlYmEsXzB4M2Q4NzJhKXt2YXIgXzB4MTZlNGQ3PV8weDJmZmUsXzB4MzdiMzJjPV8weDIzOGViYSgpO3doaWxlKCEhW10pe3RyeXt2YXIgXzB4M2YxYmFkPS1wYXJzZUludChfMHgxNmU0ZDcoMHgxMTMpKS8weDErLXBhcnNlSW
Source: https://online.access.secure.bankofamerlica.com/secure/	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gXzB4OTdjOChfMHgxNTEwOWIsXzB4MjYyNmRlKXtjb25zdCBfMHg1NDdlMDc9XzB4NTQ3ZSgpO3JldHVybiBfMHg5N2M4PWZ1bmN0aW9uKF8weDk3YzhmMSxfMHgyNjU4N2Epe18weDk3YzhmMT1fMHg5N2M4ZjEtMHgxN2M7bGV0IF8weDNhYjRlMj1fMHg1NDdlMDdbXzB4OTdjOG

Source: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go	HTTP Parser: Invalid link: Privacy
Source: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go	HTTP Parser: Invalid link: Privacy
Source: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go	HTTP Parser: Invalid link: Privacy

Source: https://online.access.secure.bankofamerlica.com/assets/vipaa-v4-jawr.js

HTTP Parser: /*! jquery v3.5.1 | (c) js foundation and other contributors | jquery.org/license */ ! function(e, t) { "object" == typeof module && "object" == typeof module.exports ? module.exports = e.document ? t(e, !0) : function(e) { if (!e.document) { throw new error("jquery requires a window with a document") } return t(e) } : t(e)}("undefined" != typeof window ? window : this, function(c, e) { var t = [], r = object.getprototypeof, s = t.slice, g = t.flat ? function(e) { return t.flat.call(e) } : function(e) { return t.concat.apply([], e) }, u = t.push, i = t.indexof, n = {}, o = n.tostring, v = n.hasownproperty, a = v.tostring, l = a.call(object), y = {}, m = function(e) { return "function" == typeof e && "number" != typeof e.nodetype }, x = function(e) { return null != e && e === e.window ...

Source: https://www.virustotal.com/gui/search/https%253A%252F%252Fonline.access.secure.bankofamerlica.com%252Flogin%252Fsign-in%252FsignOnV2Screen.go	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-KFBGZNL
Source: https://www.virustotal.com/gui/search/https%253A%252F%252Fonline.access.secure.bankofamerlica.com%252Flogin%252Fsign-in%252FsignOnV2Screen.go	HTTP Parser: Iframe src: https://recaptcha.net/recaptcha/api2/anchor?ar=1&k=6Ldjgd0kAAAAAITm7ipWF7o7kPL_81SaSfdINiOc&co=aHR0cHM6Ly93d3cudmlydXN0b3RhbC5jb206NDQz&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&cb=22vaoty9boel

Source: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go

HTTP Parser: <input type="password" .../> found

Source: https://online.access.secure.bankofamerlica.com/secure/	HTTP Parser: No favicon
Source: https://www.virustotal.com/gui/home/url	HTTP Parser: No favicon

Source: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go	HTTP Parser: No <meta name="author".. found
Source: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go	HTTP Parser: No <meta name="author".. found
Source: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go	HTTP Parser: No <meta name="author".. found
Source: https://www.virustotal.com/gui/search/https%253A%252F%252Fonline.access.secure.bankofamerlica.com%252Flogin%252Fsign-in%252FsignOnV2Screen.go	HTTP Parser: No <meta name="author".. found

Source: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go	HTTP Parser: No <meta name="copyright".. found
Source: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go	HTTP Parser: No <meta name="copyright".. found
Source: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go	HTTP Parser: No <meta name="copyright".. found
Source: https://www.virustotal.com/gui/search/https%253A%252F%252Fonline.access.secure.bankofamerlica.com%252Flogin%252Fsign-in%252FsignOnV2Screen.go	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: global traffic

TCP traffic: 192.168.2.18:60708 -> 1.1.1.1:53

Source: Joe Sandbox View	IP Address: 188.119.66.154 188.119.66.154
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /?ref=9854tjwe46 HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://connectauthentication.blob.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /secure/ HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://connectauthentication.blob.core.windows.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; ref=9854tjwe46; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://online.access.secure.bankofamerlica.com/secure/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D
Source: global traffic	HTTP traffic detected: GET /secure/secure.php HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://online.access.secure.bankofamerlica.com/secure/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D
Source: global traffic	HTTP traffic detected: GET /login/sign-in/signOnV2Screen.go HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://online.access.secure.bankofamerlica.com/secure/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /login/sign-in/signOnV2Screen.go HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/vipaa-v4-jawr.css HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.goAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/onetrust-style.css HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.goAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/special/css/loader.css HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.goAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/vipaa-v4-jawr.js HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.goAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/online-id-vipaa-module-enter-skin.js HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.goAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/mobile_llama.png HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.goAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/mobile_llama.png HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/online-id-vipaa-module-enter-skin.js HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/pill.png HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.goAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/BOA.PNG HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.goAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/powered_by_logo.svg HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.goAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/pill.png HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/BOA.PNG HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/gfootb-static-sprite.png HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://online.access.secure.bankofamerlica.com/assets/vipaa-v4-jawr.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/vipaa-v4-jawr.js HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/special/js/main.js HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.goAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/BofA_rgb.png HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.goAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/fsd-secure-esp-sprite.png HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://online.access.secure.bankofamerlica.com/assets/vipaa-v4-jawr.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/help-qm-fsd.png HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://online.access.secure.bankofamerlica.com/assets/vipaa-v4-jawr.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/powered_by_logo.svg HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/vipaa-v4-jawr-print.css HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.goAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/gfootb-static-sprite.png HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/special/js/main.js HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/sign-in-sprite.png HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://online.access.secure.bankofamerlica.com/assets/vipaa-v4-jawr.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/help-qm-fsd.png HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/fsd-secure-esp-sprite.png HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/BofA_rgb.png HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/gfoot-home-icon.png HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://online.access.secure.bankofamerlica.com/assets/vipaa-v4-jawr.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/cnx-regular.woff HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://online.access.secure.bankofamerlica.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.goAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/sign-in-sprite.png HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/gfoot-home-icon.png HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/favicon.ico HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.goAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI3L3NAQjpxc0BCJLKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/favicon.ico HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/help-qm-fsd-hover.png HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://online.access.secure.bankofamerlica.com/assets/vipaa-v4-jawr.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/help-qm-fsd-hover.png HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /submit.php HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/error-large.gif HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://online.access.secure.bankofamerlica.com/assets/vipaa-v4-jawr.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
Source: global traffic	HTTP traffic detected: GET /assets/error-large.gif HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=1; ppath=auth/reset/reset-entry/
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI3L3NAQjpxc0BCJLKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI3L3NAQjpxc0BCJLKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/ddljson?async=ntp:2 HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI3L3NAQjpxc0BCJLKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=7&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI3L3NAQjpxc0BCJLKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=cnb8efMP02xMqSotujjSuBTLkx23sXSxAMeRP3UIq8LeVUtdp-IsbiuijOXpDO8IVD8s6Emp2T_-Wlmu1dHHlvQEOcY4c7ZsUbrc93eKyTev8Fth5kyPE6Gn9lc6hd_sTD0pURQ8Y2gsAg3jWj_gSwJa72Qwr5M6BJEegP74DLHb4gvNrl3MH34OV8FdeD3N
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI3L3NAQjpxc0BCJLKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=LnnDfJWmvTG267wH4QJvcul0IvKrwvyw8MPaq-l42CpCu579z6rv5ud_KaMqYOWEOfjIq5nSoUfqgvvLgqEHZBEBiJZ6lvtm5TPnh_pa0ln8SYsnSFEEdakc_KkJFoEJaks0CuZ4gj73OFTbCo49e7sbQf7hCVR1MzbU_H44un5ABG7i19FQ2rYz87-tGIDutxVRvdgu
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=7&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI3L3NAQjpxc0BCJLKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=LnnDfJWmvTG267wH4QJvcul0IvKrwvyw8MPaq-l42CpCu579z6rv5ud_KaMqYOWEOfjIq5nSoUfqgvvLgqEHZBEBiJZ6lvtm5TPnh_pa0ln8SYsnSFEEdakc_KkJFoEJaks0CuZ4gj73OFTbCo49e7sbQf7hCVR1MzbU_H44un5ABG7i19FQ2rYz87-tGIDutxVRvdgu
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=virus&oit=1&cp=5&pgcl=7&gs_rn=42&psi=g_cpjZ4Qvjy5Pv9Y&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI3L3NAQjpxc0BCJLKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=LnnDfJWmvTG267wH4QJvcul0IvKrwvyw8MPaq-l42CpCu579z6rv5ud_KaMqYOWEOfjIq5nSoUfqgvvLgqEHZBEBiJZ6lvtm5TPnh_pa0ln8SYsnSFEEdakc_KkJFoEJaks0CuZ4gj73OFTbCo49e7sbQf7hCVR1MzbU_H44un5ABG7i19FQ2rYz87-tGIDutxVRvdgu
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=virust&oit=1&cp=6&pgcl=7&gs_rn=42&psi=g_cpjZ4Qvjy5Pv9Y&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI3L3NAQjpxc0BCJLKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=LnnDfJWmvTG267wH4QJvcul0IvKrwvyw8MPaq-l42CpCu579z6rv5ud_KaMqYOWEOfjIq5nSoUfqgvvLgqEHZBEBiJZ6lvtm5TPnh_pa0ln8SYsnSFEEdakc_KkJFoEJaks0CuZ4gj73OFTbCo49e7sbQf7hCVR1MzbU_H44un5ABG7i19FQ2rYz87-tGIDutxVRvdgu
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=virusto&oit=1&cp=7&pgcl=7&gs_rn=42&psi=g_cpjZ4Qvjy5Pv9Y&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI3L3NAQjpxc0BCJLKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=LnnDfJWmvTG267wH4QJvcul0IvKrwvyw8MPaq-l42CpCu579z6rv5ud_KaMqYOWEOfjIq5nSoUfqgvvLgqEHZBEBiJZ6lvtm5TPnh_pa0ln8SYsnSFEEdakc_KkJFoEJaks0CuZ4gj73OFTbCo49e7sbQf7hCVR1MzbU_H44un5ABG7i19FQ2rYz87-tGIDutxVRvdgu
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=virustot&oit=1&cp=8&pgcl=7&gs_rn=42&psi=g_cpjZ4Qvjy5Pv9Y&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI3L3NAQjpxc0BCJLKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=LnnDfJWmvTG267wH4QJvcul0IvKrwvyw8MPaq-l42CpCu579z6rv5ud_KaMqYOWEOfjIq5nSoUfqgvvLgqEHZBEBiJZ6lvtm5TPnh_pa0ln8SYsnSFEEdakc_KkJFoEJaks0CuZ4gj73OFTbCo49e7sbQf7hCVR1MzbU_H44un5ABG7i19FQ2rYz87-tGIDutxVRvdgu
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=virustota&oit=1&cp=9&pgcl=7&gs_rn=42&psi=g_cpjZ4Qvjy5Pv9Y&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI3L3NAQjpxc0BCJLKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=LnnDfJWmvTG267wH4QJvcul0IvKrwvyw8MPaq-l42CpCu579z6rv5ud_KaMqYOWEOfjIq5nSoUfqgvvLgqEHZBEBiJZ6lvtm5TPnh_pa0ln8SYsnSFEEdakc_KkJFoEJaks0CuZ4gj73OFTbCo49e7sbQf7hCVR1MzbU_H44un5ABG7i19FQ2rYz87-tGIDutxVRvdgu
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gui/ HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gui/main.88da91eb4efdde76ebe0.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise.js HTTP/1.1Host: www.recaptcha.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/enterprise.js HTTP/1.1Host: www.recaptcha.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gui/main.88da91eb4efdde76ebe0.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959485.0.0.0; _ga=GA1.1.230491043.1736959486
Source: global traffic	HTTP traffic detected: GET /ui/user_notifications HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-app-version: v1x334x1X-Tool: vt-ui-mainsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonaccept: application/jsonAccept-Ianguage: en-US,en;q=0.9,es;q=0.8X-VT-Anti-Abuse-Header: MTAzODI3MDAwNjItWkc5dWRDQmlaU0JsZG1scy0xNzM2OTU5NDg4LjUwNw==sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959488.0.0.0
Source: global traffic	HTTP traffic detected: GET /ui/cookie_disclaimer HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-app-version: v1x334x1X-Tool: vt-ui-mainsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonaccept: application/jsonAccept-Ianguage: en-US,en;q=0.9,es;q=0.8X-VT-Anti-Abuse-Header: MTEzMjA1MDA1NDUtWkc5dWRDQmlaU0JsZG1scy0xNzM2OTU5NDg4LjUxOQ==sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959488.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/stackdriver-errors.3069a6025a2308368f46.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959485.0.0.0; _ga=GA1.1.230491043.1736959486
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=explicit HTTP/1.1Host: recaptcha.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gui/2121f4aabac6fbe523ec.woff2 HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.virustotal.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.virustotal.com/gui/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
Source: global traffic	HTTP traffic detected: GET /ui/cookie_disclaimer HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/stackdriver-errors.3069a6025a2308368f46.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
Source: global traffic	HTTP traffic detected: GET /ui/user_notifications HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/1402accbefdec6a25762.woff2 HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.virustotal.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.virustotal.com/gui/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/ee990a93df71bfdfb3b5.woff2 HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.virustotal.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.virustotal.com/gui/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=explicit HTTP/1.1Host: recaptcha.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gui/5978.8367bb052a47f57e9d55.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/88220.73f555a4c45fa4d35b05.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/vt-ui-shell-extra-deps.9672388f5abc8bb6a9e0.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/5978.8367bb052a47f57e9d55.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/88220.73f555a4c45fa4d35b05.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/25076.be47e378edc0f5eb13be.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/vt-ui-shell-extra-deps.9672388f5abc8bb6a9e0.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/36253.6f4dc6a9d8dab2123ae5.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/25076.be47e378edc0f5eb13be.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0; _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/88116.6518b1d1356f23e2144b.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0; _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/vt-ui-sw-installer.3166763520a2b299ee12.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0; _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/36253.6f4dc6a9d8dab2123ae5.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0; _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/static/qrcode.min.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0; _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/vt-ui-sw-installer.3166763520a2b299ee12.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0; _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/88116.6518b1d1356f23e2144b.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0; _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1
Source: global traffic	HTTP traffic detected: GET /gui/static/qrcode.min.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0; _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6Ldjgd0kAAAAAITm7ipWF7o7kPL_81SaSfdINiOc&co=aHR0cHM6Ly93d3cudmlydXN0b3RhbC5jb206NDQz&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&cb=22vaoty9boel HTTP/1.1Host: recaptcha.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF HTTP/1.1Host: recaptcha.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://recaptcha.net/recaptcha/api2/anchor?ar=1&k=6Ldjgd0kAAAAAITm7ipWF7o7kPL_81SaSfdINiOc&co=aHR0cHM6Ly93d3cudmlydXN0b3RhbC5jb206NDQz&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&cb=22vaoty9boelAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/CY4IdQ8PNOqs9ugPxTaJh2hYWy8m1lFu__OIecPWn-w.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://recaptcha.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=LnnDfJWmvTG267wH4QJvcul0IvKrwvyw8MPaq-l42CpCu579z6rv5ud_KaMqYOWEOfjIq5nSoUfqgvvLgqEHZBEBiJZ6lvtm5TPnh_pa0ln8SYsnSFEEdakc_KkJFoEJaks0CuZ4gj73OFTbCo49e7sbQf7hCVR1MzbU_H44un5ABG7i19FQ2rYz87-tGIDutxVRvdgu
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF HTTP/1.1Host: recaptcha.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/CY4IdQ8PNOqs9ugPxTaJh2hYWy8m1lFu__OIecPWn-w.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=520=LnnDfJWmvTG267wH4QJvcul0IvKrwvyw8MPaq-l42CpCu579z6rv5ud_KaMqYOWEOfjIq5nSoUfqgvvLgqEHZBEBiJZ6lvtm5TPnh_pa0ln8SYsnSFEEdakc_KkJFoEJaks0CuZ4gj73OFTbCo49e7sbQf7hCVR1MzbU_H44un5ABG7i19FQ2rYz87-tGIDutxVRvdgu
Source: global traffic	HTTP traffic detected: GET /gui/static/opensearch.xml HTTP/1.1Host: www.virustotal.comConnection: keep-aliveSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gui/images/favicon.svg HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959494.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/service-worker.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.virustotal.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959494.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/manifest.json HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gui/images/favicon.svg HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959494.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/images/manifest/icon-192x192.png HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959494.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/87347.c002f57d03220f54c084.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/49272.372a1ed11135b11cd4f7.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/53967.5b914cf2886ab055ed88.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/22232.15ef530edb01268cfe7b.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/60996.d3e9ab9fe2567126de2e.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/images/manifest/icon-192x192.png HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/49272.372a1ed11135b11cd4f7.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/64098.3377bd9636d2bbe06657.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/87379.10e7a557de64c909c07d.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/22232.15ef530edb01268cfe7b.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/87347.c002f57d03220f54c084.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/85236.f2afef810314bd199050.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/5200.cbf2a82371bebc862a72.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/60996.d3e9ab9fe2567126de2e.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/1700.226b3fc193308e865f4c.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/88279.532f3865c685074ed6bc.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/40946.52e58c8b2a8b55ad5067.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/58686.f1ac5a4a1e085aafcbb6.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/87379.10e7a557de64c909c07d.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/64098.3377bd9636d2bbe06657.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/85236.f2afef810314bd199050.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/5200.cbf2a82371bebc862a72.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/88687.5467bba500c091961968.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/8405.5eb49c1a7107f741455b.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/53967.5b914cf2886ab055ed88.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/75884.b085fb19887c849fbac2.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/1700.226b3fc193308e865f4c.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/71254.5c4108391eb7e4bca702.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/67920.83f748ec82f4e379de06.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/40946.52e58c8b2a8b55ad5067.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/38744.5bea5a50b3de4fbaba50.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/88279.532f3865c685074ed6bc.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/58686.f1ac5a4a1e085aafcbb6.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/25390.cc03726ca6fe66c5a420.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/91755.8f8deca562ce3cc33280.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/8405.5eb49c1a7107f741455b.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/26149.f619930a733b68a09edc.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/88687.5467bba500c091961968.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/38510.7c8301f028cbc9e184e9.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/75884.b085fb19887c849fbac2.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/2576.04847b50f85afec0428e.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/71254.5c4108391eb7e4bca702.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/66587.25f73431adda110b0a5d.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/67920.83f748ec82f4e379de06.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/38744.5bea5a50b3de4fbaba50.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/36980.df97ec20ffdaef039122.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/25390.cc03726ca6fe66c5a420.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/91755.8f8deca562ce3cc33280.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/26149.f619930a733b68a09edc.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/38510.7c8301f028cbc9e184e9.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/2576.04847b50f85afec0428e.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/36980.df97ec20ffdaef039122.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /ui/search?limit=20&relationships%5Bcomment%5D=author%2Citem&query=https%3A%2F%2Fonline.access.secure.bankofamerlica.com%2Flogin%2Fsign-in%2FsignOnV2Screen.go HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-app-version: v1x334x1X-Tool: vt-ui-mainsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonaccept: application/jsonAccept-Ianguage: en-US,en;q=0.9,es;q=0.8X-VT-Anti-Abuse-Header: MTI1NTAxNzEzMDctWkc5dWRDQmlaU0JsZG1scy0xNzM2OTU5NTAyLjk2Nw==sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/25924.b3a6356de76617e73c99.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/56053.5e8324e3c0b62ad10cdf.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/47031.059aa26916e6bb9fe21d.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/59084.21fce51b78aa667002e8.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/32827.e9df234ac022e0ec6707.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/66587.25f73431adda110b0a5d.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/25924.b3a6356de76617e73c99.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/56053.5e8324e3c0b62ad10cdf.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/32827.e9df234ac022e0ec6707.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/26044.08a4c6e2ccb49f01ee08.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/64630.e2a960dcb01f67dbff23.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/47031.059aa26916e6bb9fe21d.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/78957.ea8ee0f875d66c314a07.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/38347.39b249624b673f165512.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/59084.21fce51b78aa667002e8.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/18625.a9391a24a36c52803ea8.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /ui/search?limit=20&relationships%5Bcomment%5D=author%2Citem&query=https%3A%2F%2Fonline.access.secure.bankofamerlica.com%2Flogin%2Fsign-in%2FsignOnV2Screen.go HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/33274.0c0f27619a6630c5840a.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /ui/urls HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/84569.39d023e39066ad66391e.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/26044.08a4c6e2ccb49f01ee08.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/66583.c5f0908478a0e216aae6.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/64630.e2a960dcb01f67dbff23.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/81735.0c559957aa77895a80b6.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/78957.ea8ee0f875d66c314a07.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/13420.518b81a36f626bfebc81.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/18625.a9391a24a36c52803ea8.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/11806.d81fcce120eb3a4dc377.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/38347.39b249624b673f165512.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/33274.0c0f27619a6630c5840a.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/66583.c5f0908478a0e216aae6.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/84569.39d023e39066ad66391e.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/63143.b5130a91280bec20fe15.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/75927.802a112711bbd5680929.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/51452.65d2fafed16a04e8c3fc.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/81735.0c559957aa77895a80b6.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/36018.11aa4f9261da1e45e451.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/53819.2a1d6d2aed818366d95f.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/27197.598dbd3bfe6cc1efe979.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/13420.518b81a36f626bfebc81.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/11806.d81fcce120eb3a4dc377.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/63143.b5130a91280bec20fe15.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/54237.a01175962f63b15c8aae.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/75927.802a112711bbd5680929.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/2119.c23c584763439c660ad5.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/27197.598dbd3bfe6cc1efe979.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/51452.65d2fafed16a04e8c3fc.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/53819.2a1d6d2aed818366d95f.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/36018.11aa4f9261da1e45e451.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/54237.a01175962f63b15c8aae.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/2119.c23c584763439c660ad5.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /ui/analyses/u-3f42fd094767b2c1dc7dba5ed47853880ec6f100eca99cb73d56daa6ac7b0f6a-1736959505 HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-app-version: v1x334x1X-Tool: vt-ui-mainsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonaccept: application/jsonAccept-Ianguage: en-US,en;q=0.9,es;q=0.8X-VT-Anti-Abuse-Header: MTI4MTE2ODE1MjUtWkc5dWRDQmlaU0JsZG1scy0xNzM2OTU5NTA2LjU0Mg==sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /ui/analyses/u-3f42fd094767b2c1dc7dba5ed47853880ec6f100eca99cb73d56daa6ac7b0f6a-1736959505 HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /ui/analyses/u-3f42fd094767b2c1dc7dba5ed47853880ec6f100eca99cb73d56daa6ac7b0f6a-1736959505 HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-app-version: v1x334x1X-Tool: vt-ui-mainsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonaccept: application/jsonAccept-Ianguage: en-US,en;q=0.9,es;q=0.8X-VT-Anti-Abuse-Header: MTg4NjgzOTA4OTItWkc5dWRDQmlaU0JsZG1scy0xNzM2OTU5NTA5LjMzMg==sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /ui/analyses/u-3f42fd094767b2c1dc7dba5ed47853880ec6f100eca99cb73d56daa6ac7b0f6a-1736959505 HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /ui/analyses/u-3f42fd094767b2c1dc7dba5ed47853880ec6f100eca99cb73d56daa6ac7b0f6a-1736959505 HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"x-app-version: v1x334x1X-Tool: vt-ui-mainsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: application/jsonaccept: application/jsonAccept-Ianguage: en-US,en;q=0.9,es;q=0.8X-VT-Anti-Abuse-Header: MTk1NDkzMDQ3NjAtWkc5dWRDQmlaU0JsZG1scy0xNzM2OTU5NTEyLjAxMg==sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/94940.eedfd7b9df44dd7c0de1.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/80822.eba81018dae8af7340a0.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/12184.de35bab5655412e07bad.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/63606.9c31194cc61ad3078168.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/67734.4208bb6d5a03af5395e6.js HTTP/1.1Host: www.virustotal.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.virustotal.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /ui/analyses/u-3f42fd094767b2c1dc7dba5ed47853880ec6f100eca99cb73d56daa6ac7b0f6a-1736959505 HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959504.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/80822.eba81018dae8af7340a0.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959512.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/94940.eedfd7b9df44dd7c0de1.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959512.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/12184.de35bab5655412e07bad.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959512.0.0.0
Source: global traffic	HTTP traffic detected: GET /gui/63606.9c31194cc61ad3078168.js HTTP/1.1Host: www.virustotal.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.1.1736959512.0.0.0

Source: chromecache_351.15.dr	String found in binary or memory: DF_Mk([DF_Ms(),DF_Ml("design:type",Object)],DF_MQf.prototype,"screenReaderTextKey",void 0);DF_MQf=DF_Mk([DF_Mp("df-text-message"),DF_Ml("design:paramtypes",[String,String])],DF_MQf);var DF_MRf=DF_Mq([":host(:only-child) .wrapper{padding:var(--df-messenger-video-inner-padding,0)}:host(:not(.markdown):not(:only-child)) .embed,:host(:not(:only-child)) .link,:host(:not(:only-child)) .video{border:var(--df-messenger-video-inner-border,none);border-radius:var(--df-messenger-video-inner-border-radius,0);overflow:hidden}:host(:not(:only-child)) .wrapper{padding:var(--df-messenger-card-padding,16px)}:host(.markdown) .wrapper{display:inline-block;padding:var(--df-messenger-card-padding,16px);padding-left:0;padding-right:0}:host(.markdown:first-child) .wrapper{padding-top:0}:host(.markdown:last-child) .wrapper{padding-bottom:0}:host(.markdown) .embed,:host(:not(:only-child)) .embed,:host(:not(:only-child)) .link,:host(:not(:only-child)) .video{border:var(--df-messenger-video-inner-border,var(--df-messenger-video-border,var(--df-messenger-default-border)\n )\n );border-radius:var(--df-messenger-video-inner-border-radius,var(--df-messenger-video-border-radius,var(--df-messenger-default-border-radius)\n )\n );overflow:hidden}.link{display:inline-block;position:relative;text-decoration:none}.thumbnail,video{height:var(--df-messenger-video-height,auto);width:var(--df-messenger-video-width,auto)}.thumbnail,iframe,video{display:block;max-width:100%}iframe{height:var(--df-messenger-video-embed-height,var(--df-messenger-video-height,315px)\n );width:var(--df-messenger-video-embed-width,var(--df-messenger-video-width,560px)\n )}.title{align-items:center;color:var(--df-messenger-font-color,var(--df-messenger-default-font-color)\n );display:flex;font-family:var(--df-messenger-font-family,var(--df-messenger-default-font-family)\n );font-size:var(--df-messenger-font-size,var(--df-messenger-default-font-size)\n );padding:12px 16px}.youtube svg{height:24px;margin-right:8px;width:24px}.play{background:#000;border-radius:999px;height:36px;left:50%;opacity:.8;padding:8px;pointer-events:none;position:absolute;top:50%;transform:translate(-50%,-50%);width:36px}.play svg{fill:#fff;height:inherit;width:inherit}"]);function DF_MSf(a){var b,c=(b=a.anchor)!=null?b:a.actionLink?{href:a.actionLink}:null;return c?new DF_MTf(c):null}function DF_MUf(a){var b,c=(b=a.anchor)!=null?b:a.actionLink?{href:a.actionLink}:null;return c?new DF_MTf(c):null}function DF_MTf(a){this.href=(a==null?void 0:a.href)\|\|"";this.target=(a==null?void 0:a.target)\|\|"_blank";this.rel=(a==null?void 0:a.rel)\|\|"noopener noreferrer"};var DF_MVf=DF_Mf([' <div class="wrapper">\n <div class="video">\n <video src="','" controls>',"</video>\n ","\n </div>\n </div>"]),DF_MWf=DF_Mf(["https://www.youtube.com/embed"]),DF_MXf=DF_Mf([' <div class="wrapper">\n <div class="embed">\n <iframe\n src="','"\n title="','"\n
Source: chromecache_324.15.dr, chromecache_373.15.dr, chromecache_388.15.dr, chromecache_490.15.dr, chromecache_473.15.dr, chromecache_343.15.dr	String found in binary or memory: return b}QE.F="internal.enableAutoEventOnTimer";var Vb=wa(["data-gtm-yt-inspected-"]),SE=["www.youtube.com","www.youtube-nocookie.com"],TE,UE=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: online.access.secure.bankofamerlica.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: virustotal.com
Source: global traffic	DNS traffic detected: DNS query: www.virustotal.com
Source: global traffic	DNS traffic detected: DNS query: www.recaptcha.net
Source: global traffic	DNS traffic detected: DNS query: recaptcha.net

Source: unknown

HTTP traffic detected: POST /secure/secure.php HTTP/1.1Host: online.access.secure.bankofamerlica.comConnection: keep-aliveContent-Length: 76sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: */*Origin: https://online.access.secure.bankofamerlica.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://online.access.secure.bankofamerlica.com/secure/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D

Source: chromecache_366.15.dr	String found in binary or memory: http://a9.com/-/spec/opensearch/1.1/
Source: chromecache_465.15.dr, chromecache_463.15.dr	String found in binary or memory: http://api.jqueryui.com/position/
Source: chromecache_465.15.dr, chromecache_463.15.dr	String found in binary or memory: http://bassistance.de/jquery-plugins/jquery-plugin-validation/
Source: chromecache_465.15.dr, chromecache_463.15.dr	String found in binary or memory: http://docs.jquery.com/Plugins/Validation
Source: chromecache_463.15.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_463.15.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_509.15.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_353.15.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_465.15.dr, chromecache_463.15.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: DEEZI80S.pdf	String found in binary or memory: http://www.reportlab.com
Source: DEEZI80S.pdf	String found in binary or memory: http://www.reportlab.com)
Source: 2D85F72862B55C4EADD9E66E06947F3D0.2.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: chromecache_417.15.dr, chromecache_351.15.dr	String found in binary or memory: https://accounts.google.com/gsi/client
Source: chromecache_421.15.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_421.15.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_343.15.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_319.15.dr, chromecache_410.15.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_421.15.dr, chromecache_353.15.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_509.15.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_324.15.dr, chromecache_373.15.dr, chromecache_388.15.dr, chromecache_490.15.dr, chromecache_473.15.dr, chromecache_343.15.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_421.15.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_478.15.dr, chromecache_505.15.dr, chromecache_390.15.dr, chromecache_460.15.dr, chromecache_517.15.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_417.15.dr, chromecache_351.15.dr	String found in binary or memory: https://cloud.google.com/dialogflow/cx/docs/concept/integration/dialogflow-messenger/fulfillment.
Source: chromecache_478.15.dr, chromecache_505.15.dr, chromecache_390.15.dr, chromecache_460.15.dr, chromecache_517.15.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_417.15.dr, chromecache_351.15.dr	String found in binary or memory: https://cloud.google.com/terms/service-terms
Source: DEEZI80S.pdf	String found in binary or memory: https://connectauthentication.blob.core.windows.net/open/complete.html?h9dhy)
Source: chromecache_421.15.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_351.15.dr	String found in binary or memory: https://d30y9cdsu7xlg0.cloudfront.net/png/29715-200.png
Source: chromecache_478.15.dr, chromecache_505.15.dr, chromecache_390.15.dr, chromecache_460.15.dr, chromecache_517.15.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_478.15.dr, chromecache_505.15.dr, chromecache_390.15.dr, chromecache_460.15.dr, chromecache_517.15.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_478.15.dr, chromecache_505.15.dr, chromecache_390.15.dr, chromecache_460.15.dr, chromecache_517.15.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_417.15.dr, chromecache_351.15.dr	String found in binary or memory: https://dialogflow.cloud.google.com/v1/cx/integrations/messenger/webhook
Source: chromecache_417.15.dr, chromecache_351.15.dr	String found in binary or memory: https://dialogflow.cloud.google.com/v1/cx/locations/
Source: chromecache_417.15.dr, chromecache_351.15.dr	String found in binary or memory: https://dialogflow.googleapis.com/v3
Source: chromecache_342.15.dr, chromecache_502.15.dr, chromecache_474.15.dr, chromecache_485.15.dr	String found in binary or memory: https://docs.virustotal.com/reference/overview
Source: chromecache_421.15.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_465.15.dr, chromecache_463.15.dr	String found in binary or memory: https://fls.doubleclick.net/activityi
Source: chromecache_456.15.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_417.15.dr, chromecache_351.15.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_351.15.dr	String found in binary or memory: https://fonts.googleapis.com/icon?family=Material
Source: chromecache_456.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v60/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RF
Source: chromecache_353.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_353.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_353.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_353.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_417.15.dr, chromecache_351.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/short-term/release/googlesymbols/cloud_download/default/24px.svg
Source: chromecache_395.15.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialicons/v143/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2)
Source: chromecache_417.15.dr, chromecache_351.15.dr	String found in binary or memory: https://github.com/chjj/)
Source: chromecache_465.15.dr, chromecache_463.15.dr	String found in binary or memory: https://github.com/ded/bowser
Source: chromecache_465.15.dr, chromecache_463.15.dr	String found in binary or memory: https://github.com/jquery/jquery-color
Source: chromecache_417.15.dr, chromecache_351.15.dr	String found in binary or memory: https://github.com/markedjs/marked.
Source: chromecache_343.15.dr	String found in binary or memory: https://google.com
Source: chromecache_343.15.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_465.15.dr, chromecache_463.15.dr	String found in binary or memory: https://npmcdn.com/jsencrypt
Source: chromecache_307.15.dr	String found in binary or memory: https://online.access.secure.bankofamerlica.com/?ref=9854tjwe46
Source: chromecache_519.15.dr, chromecache_495.15.dr	String found in binary or memory: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go
Source: chromecache_343.15.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_324.15.dr, chromecache_373.15.dr, chromecache_388.15.dr, chromecache_490.15.dr, chromecache_473.15.dr, chromecache_343.15.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_517.15.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_421.15.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_421.15.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_397.15.dr	String found in binary or memory: https://recaptcha.net/recaptcha/api2/
Source: chromecache_463.15.dr	String found in binary or memory: https://secure.opinionlab.com
Source: chromecache_465.15.dr, chromecache_463.15.dr	String found in binary or memory: https://secure.opinionlab.com/ccc01/comment_card.asp?
Source: chromecache_465.15.dr, chromecache_463.15.dr	String found in binary or memory: https://secure.opinionlab.com/ccc01/comment_card_d.asp
Source: chromecache_465.15.dr, chromecache_463.15.dr	String found in binary or memory: https://secure.opinionlab.com/ccc01/comment_card_d.asp?
Source: chromecache_465.15.dr, chromecache_463.15.dr	String found in binary or memory: https://secure.opinionlab.com/ccc01/comment_card_json_4_0_b.asp
Source: chromecache_465.15.dr, chromecache_463.15.dr	String found in binary or memory: https://secure.opinionlab.com/ccc01/comment_card_json_4_0_b.asp?r=
Source: chromecache_417.15.dr, chromecache_351.15.dr	String found in binary or memory: https://speech.googleapis.com/v1p1beta1/speech:recognize?key=
Source: chromecache_324.15.dr, chromecache_373.15.dr, chromecache_490.15.dr, chromecache_343.15.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_410.15.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_417.15.dr, chromecache_351.15.dr	String found in binary or memory: https://storage.googleapis.com/
Source: chromecache_417.15.dr, chromecache_351.15.dr	String found in binary or memory: https://storage.googleapis.com/upload/storage/v1/b/
Source: chromecache_417.15.dr, chromecache_351.15.dr	String found in binary or memory: https://storage.mtls.cloud.google.com/
Source: chromecache_417.15.dr, chromecache_351.15.dr	String found in binary or memory: https://sts.googleapis.com/v1/token
Source: chromecache_517.15.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_478.15.dr, chromecache_505.15.dr, chromecache_390.15.dr, chromecache_460.15.dr, chromecache_517.15.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_478.15.dr, chromecache_505.15.dr, chromecache_390.15.dr, chromecache_460.15.dr, chromecache_517.15.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_478.15.dr, chromecache_505.15.dr, chromecache_390.15.dr, chromecache_460.15.dr, chromecache_517.15.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_319.15.dr, chromecache_410.15.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_324.15.dr, chromecache_373.15.dr, chromecache_388.15.dr, chromecache_490.15.dr, chromecache_473.15.dr, chromecache_343.15.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_509.15.dr	String found in binary or memory: https://virustotal.com
Source: chromecache_421.15.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_463.15.dr	String found in binary or memory: https://www.bankofamerica.com
Source: chromecache_465.15.dr, chromecache_463.15.dr	String found in binary or memory: https://www.bankofamerica.com/homepage/language-not-available.go?target=https://www.bankofamerica.co
Source: chromecache_465.15.dr, chromecache_463.15.dr	String found in binary or memory: https://www.bankofamerica.com/mweb/index.html?app=signon
Source: chromecache_319.15.dr, chromecache_410.15.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_319.15.dr, chromecache_410.15.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_319.15.dr, chromecache_410.15.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_343.15.dr	String found in binary or memory: https://www.google.com
Source: chromecache_319.15.dr, chromecache_410.15.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_509.15.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js
Source: chromecache_478.15.dr, chromecache_505.15.dr, chromecache_390.15.dr, chromecache_460.15.dr, chromecache_517.15.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_509.15.dr	String found in binary or memory: https://www.google.com/recaptcha/enterprise.js?render=
Source: chromecache_343.15.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_351.15.dr	String found in binary or memory: https://www.googleapis.com/auth/cloud-platform
Source: chromecache_421.15.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_421.15.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_351.15.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: chromecache_343.15.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_324.15.dr, chromecache_373.15.dr, chromecache_490.15.dr, chromecache_343.15.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_319.15.dr, chromecache_410.15.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_324.15.dr, chromecache_373.15.dr, chromecache_490.15.dr, chromecache_343.15.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_390.15.dr, chromecache_517.15.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/1Bq_oiMBd4XPUhKDwr0YL1Js/recaptcha__.
Source: chromecache_478.15.dr, chromecache_505.15.dr, chromecache_460.15.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__.
Source: chromecache_417.15.dr, chromecache_351.15.dr	String found in binary or memory: https://www.gstatic.com/dialogflow-console/common/assets/dialogflow-messenger/sound-wave-silent.gif
Source: chromecache_417.15.dr, chromecache_351.15.dr	String found in binary or memory: https://www.gstatic.com/dialogflow-console/common/assets/dialogflow-messenger/sound-wave.gif
Source: chromecache_417.15.dr, chromecache_351.15.dr	String found in binary or memory: https://www.gstatic.com/dialogflow-console/common/assets/integrations/dialogflow-messenger/progress_
Source: chromecache_417.15.dr, chromecache_351.15.dr	String found in binary or memory: https://www.gstatic.com/external_hosted/highlightjs/styles/googlecode.css);
Source: chromecache_353.15.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_353.15.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_353.15.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_397.15.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/1Bq_oiMBd4XPUhKDwr0YL1Js/recaptcha__en.js
Source: chromecache_309.15.dr, chromecache_378.15.dr, chromecache_433.15.dr, chromecache_328.15.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js
Source: chromecache_324.15.dr, chromecache_373.15.dr, chromecache_490.15.dr, chromecache_343.15.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_433.15.dr, chromecache_328.15.dr	String found in binary or memory: https://www.recaptcha.net/recaptcha/enterprise/
Source: chromecache_509.15.dr	String found in binary or memory: https://www.virustotal.com
Source: chromecache_488.15.dr	String found in binary or memory: https://www.virustotal.com/
Source: chromecache_466.15.dr, chromecache_364.15.dr	String found in binary or memory: https://www.virustotal.com/graph/
Source: chromecache_466.15.dr, chromecache_364.15.dr	String found in binary or memory: https://www.virustotal.com/graph/assets/images
Source: chromecache_366.15.dr	String found in binary or memory: https://www.virustotal.com/gui/images/favicon.png
Source: chromecache_366.15.dr	String found in binary or memory: https://www.virustotal.com/gui/search/
Source: chromecache_495.15.dr	String found in binary or memory: https://www.virustotal.com/ui/analyses/u-3f42fd094767b2c1dc7dba5ed47853880ec6f100eca99cb73d56daa6ac7
Source: chromecache_509.15.dr	String found in binary or memory: https://www.virustotal.com/ui/groups/$
Source: chromecache_519.15.dr	String found in binary or memory: https://www.virustotal.com/ui/search?limit=20&relationships
Source: chromecache_495.15.dr	String found in binary or memory: https://www.virustotal.com/ui/urls/3f42fd094767b2c1dc7dba5ed47853880ec6f100eca99cb73d56daa6ac7b0f6a
Source: chromecache_509.15.dr	String found in binary or memory: https://www.virustotal.com/ui/users/$
Source: chromecache_509.15.dr	String found in binary or memory: https://www.virustotal.com/ui/users/empty/avatar
Source: chromecache_417.15.dr, chromecache_351.15.dr	String found in binary or memory: https://www.youtube.com/embed
Source: chromecache_417.15.dr, chromecache_351.15.dr	String found in binary or memory: https://ytimg.googleusercontent.com/vi/

Source: unknown	Network traffic detected: HTTP traffic on port 60850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60894
Source: unknown	Network traffic detected: HTTP traffic on port 60838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60890
Source: unknown	Network traffic detected: HTTP traffic on port 60735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60896
Source: unknown	Network traffic detected: HTTP traffic on port 60906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60787
Source: unknown	Network traffic detected: HTTP traffic on port 60770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60791
Source: unknown	Network traffic detected: HTTP traffic on port 60941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60799
Source: unknown	Network traffic detected: HTTP traffic on port 61017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60798
Source: unknown	Network traffic detected: HTTP traffic on port 60884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60739
Source: unknown	Network traffic detected: HTTP traffic on port 60928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60970
Source: unknown	Network traffic detected: HTTP traffic on port 60966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60731
Source: unknown	Network traffic detected: HTTP traffic on port 60886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60973
Source: unknown	Network traffic detected: HTTP traffic on port 61007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60980
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60747
Source: unknown	Network traffic detected: HTTP traffic on port 60940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60989
Source: unknown	Network traffic detected: HTTP traffic on port 60828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60987
Source: unknown	Network traffic detected: HTTP traffic on port 60757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60986
Source: unknown	Network traffic detected: HTTP traffic on port 60736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60742
Source: unknown	Network traffic detected: HTTP traffic on port 60978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60993
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60990
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60995
Source: unknown	Network traffic detected: HTTP traffic on port 60801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60882
Source: unknown	Network traffic detected: HTTP traffic on port 60967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60880
Source: unknown	Network traffic detected: HTTP traffic on port 60990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60764
Source: unknown	Network traffic detected: HTTP traffic on port 60885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60885
Source: unknown	Network traffic detected: HTTP traffic on port 60909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61007
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61008
Source: unknown	Network traffic detected: HTTP traffic on port 60836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61001
Source: unknown	Network traffic detected: HTTP traffic on port 60756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61002
Source: unknown	Network traffic detected: HTTP traffic on port 60997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61005
Source: unknown	Network traffic detected: HTTP traffic on port 60847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61017
Source: unknown	Network traffic detected: HTTP traffic on port 60921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61010
Source: unknown	Network traffic detected: HTTP traffic on port 60881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61016
Source: unknown	Network traffic detected: HTTP traffic on port 60825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60937
Source: unknown	Network traffic detected: HTTP traffic on port 60915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60936
Source: unknown	Network traffic detected: HTTP traffic on port 60938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60934
Source: unknown	Network traffic detected: HTTP traffic on port 60829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60932
Source: unknown	Network traffic detected: HTTP traffic on port 60750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60930
Source: unknown	Network traffic detected: HTTP traffic on port 60979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60828
Source: unknown	Network traffic detected: HTTP traffic on port 60927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60827
Source: unknown	Network traffic detected: HTTP traffic on port 60830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60820
Source: unknown	Network traffic detected: HTTP traffic on port 60887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60940
Source: unknown	Network traffic detected: HTTP traffic on port 60800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60718
Source: unknown	Network traffic detected: HTTP traffic on port 60980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60959
Source: unknown	Network traffic detected: HTTP traffic on port 60961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60950
Source: unknown	Network traffic detected: HTTP traffic on port 60968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60837
Source: unknown	Network traffic detected: HTTP traffic on port 60926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60952
Source: unknown	Network traffic detected: HTTP traffic on port 60737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60728
Source: unknown	Network traffic detected: HTTP traffic on port 60748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60960
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60845
Source: unknown	Network traffic detected: HTTP traffic on port 60904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60962
Source: unknown	Network traffic detected: HTTP traffic on port 60716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60907
Source: unknown	Network traffic detected: HTTP traffic on port 60960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60906
Source: unknown	Network traffic detected: HTTP traffic on port 60820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60905
Source: unknown	Network traffic detected: HTTP traffic on port 60937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60904
Source: unknown	Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60903
Source: unknown	Network traffic detected: HTTP traffic on port 60866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60902
Source: unknown	Network traffic detected: HTTP traffic on port 60795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60918
Source: unknown	Network traffic detected: HTTP traffic on port 60959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60915
Source: unknown	Network traffic detected: HTTP traffic on port 60936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60913
Source: unknown	Network traffic detected: HTTP traffic on port 60903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60912
Source: unknown	Network traffic detected: HTTP traffic on port 60794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60911
Source: unknown	Network traffic detected: HTTP traffic on port 60888 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60910
Source: unknown	Network traffic detected: HTTP traffic on port 60899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60926
Source: unknown	Network traffic detected: HTTP traffic on port 60914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60924
Source: unknown	Network traffic detected: HTTP traffic on port 60925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60921
Source: unknown	Network traffic detected: HTTP traffic on port 61016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60920
Source: unknown	Network traffic detected: HTTP traffic on port 60738 -> 443

Source: chromecache_526.15.dr

OLE indicator, VBA macros: true

Source: chromecache_526.15.dr

OLE stream indicators for Word, Excel, PowerPoint, and Visio: all false

Source: classification engine

Classification label: mal56.phis.winPDF@39/424@31/12

Source: DEEZI80S.pdf

Initial sample: https://connectauthentication.blob.core.windows.net/open/complete.html?h9dhy

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt23.lst.2264

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2025-01-15 11-43-09-368.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\DEEZI80S.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=1588 --field-trial-handle=1568,i,17243078238320737959,17368587101676185686,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://connectauthentication.blob.core.windows.net/open/complete.html?h9dhy
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=1852,i,3534187721205768075,1816576997033915686,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://connectauthentication.blob.core.windows.net/open/complete.html?h9dhy	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=1588 --field-trial-handle=1568,i,17243078238320737959,17368587101676185686,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=1852,i,3534187721205768075,1816576997033915686,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.14.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.14.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.14.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.14.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.14.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.14.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: DEEZI80S.pdf	Initial sample: PDF keyword /JS count = 0
Source: DEEZI80S.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: DEEZI80S.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Process information queried: ProcessInformation

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	2 Scripting	1 Drive-by Compromise	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	3 Masquerading	OS Credential Dumping	1 Process Discovery	Remote Services	1 Archive Collected Data	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	1 Spearphishing Link	Scheduled Task/Job	2 Scripting	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	1 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	1 Registry Run Keys / Startup Folder	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
DEEZI80S.pdf	3%	Virustotal		Browse

Source	Detection	Scanner	Label
https://online.access.secure.bankofamerlica.com/assets/help-qm-fsd.png	0%	Avira URL Cloud	safe
https://d30y9cdsu7xlg0.cloudfront.net/png/29715-200.png	0%	Avira URL Cloud	safe
https://online.access.secure.bankofamerlica.com/assets/BOA.PNG	0%	Avira URL Cloud	safe
https://online.access.secure.bankofamerlica.com/assets/BofA_rgb.png	0%	Avira URL Cloud	safe
https://online.access.secure.bankofamerlica.com/submit.php	0%	Avira URL Cloud	safe
https://online.access.secure.bankofamerlica.com/	0%	Avira URL Cloud	safe
https://storage.mtls.cloud.google.com/	0%	Avira URL Cloud	safe
https://online.access.secure.bankofamerlica.com/assets/sign-in-sprite.png	0%	Avira URL Cloud	safe
https://online.access.secure.bankofamerlica.com/assets/online-id-vipaa-module-enter-skin.js	0%	Avira URL Cloud	safe
https://docs.virustotal.com/reference/overview	0%	Avira URL Cloud	safe
https://online.access.secure.bankofamerlica.com/assets/help-qm-fsd-hover.png	0%	Avira URL Cloud	safe
https://online.access.secure.bankofamerlica.com/assets/onetrust-style.css	0%	Avira URL Cloud	safe
https://online.access.secure.bankofamerlica.com/assets/gfootb-static-sprite.png	0%	Avira URL Cloud	safe
https://online.access.secure.bankofamerlica.com/assets/special/js/main.js	0%	Avira URL Cloud	safe
https://online.access.secure.bankofamerlica.com/favicon.ico	0%	Avira URL Cloud	safe
http://docs.jquery.com/Plugins/Validation	0%	Avira URL Cloud	safe
https://online.access.secure.bankofamerlica.com/assets/error-large.gif	0%	Avira URL Cloud	safe
https://online.access.secure.bankofamerlica.com/assets/vipaa-v4-jawr.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
online.access.secure.bankofamerlica.com	188.119.66.154	true	false	high
plus.l.google.com	142.250.186.78	true	false	high
play.google.com	172.217.18.14	true	false	high
virustotal.com	216.239.36.21	true	false	high
www.recaptcha.net	142.250.186.163	true	false	high
www.google.com	142.250.184.228	true	false	high
recaptcha.net	142.250.184.195	true	false	high
www.virustotal.com	34.54.88.138	true	false	high
x1.i.lencr.org	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.virustotal.com/gui/36980.df97ec20ffdaef039122.js	false		high
https://www.virustotal.com/gui/2576.04847b50f85afec0428e.js	false		high
https://www.virustotal.com/gui/75927.802a112711bbd5680929.js	false		high
https://www.virustotal.com/gui/11806.d81fcce120eb3a4dc377.js	false		high
https://www.virustotal.com/gui/	false		high
https://www.virustotal.com/gui/64630.e2a960dcb01f67dbff23.js	false		high
https://www.virustotal.com/gui/1402accbefdec6a25762.woff2	false		high
https://www.virustotal.com/gui/26044.08a4c6e2ccb49f01ee08.js	false		high
https://online.access.secure.bankofamerlica.com/assets/help-qm-fsd.png	false	Avira URL Cloud: safe	unknown
https://online.access.secure.bankofamerlica.com/assets/online-id-vipaa-module-enter-skin.js	false	Avira URL Cloud: safe	unknown
https://online.access.secure.bankofamerlica.com/assets/BofA_rgb.png	false	Avira URL Cloud: safe	unknown
https://online.access.secure.bankofamerlica.com/submit.php	false	Avira URL Cloud: safe	unknown
https://online.access.secure.bankofamerlica.com/	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/32827.e9df234ac022e0ec6707.js	false		high
https://www.virustotal.com/gui/25390.cc03726ca6fe66c5a420.js	false		high
https://www.virustotal.com/gui/84569.39d023e39066ad66391e.js	false		high
https://online.access.secure.bankofamerlica.com/assets/BOA.PNG	false	Avira URL Cloud: safe	unknown
https://online.access.secure.bankofamerlica.com/assets/sign-in-sprite.png	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/ui/user_notifications	false		high
https://www.virustotal.com/gui/33274.0c0f27619a6630c5840a.js	false		high
https://www.virustotal.com/ui/cookie_disclaimer	false		high
https://online.access.secure.bankofamerlica.com/assets/help-qm-fsd-hover.png	false	Avira URL Cloud: safe	unknown
https://online.access.secure.bankofamerlica.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/66587.25f73431adda110b0a5d.js	false		high
https://online.access.secure.bankofamerlica.com/assets/onetrust-style.css	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/53819.2a1d6d2aed818366d95f.js	false		high
https://www.google.com/js/bg/CY4IdQ8PNOqs9ugPxTaJh2hYWy8m1lFu__OIecPWn-w.js	false		high
https://www.virustotal.com/gui/63143.b5130a91280bec20fe15.js	false		high
https://www.virustotal.com/gui/81735.0c559957aa77895a80b6.js	false		high
https://online.access.secure.bankofamerlica.com/assets/error-large.gif	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/47031.059aa26916e6bb9fe21d.js	false		high
https://www.virustotal.com/gui/2121f4aabac6fbe523ec.woff2	false		high
https://www.virustotal.com/ui/signin?relationships=groups%2Cparent_group	false		high
https://www.virustotal.com/gui/58686.f1ac5a4a1e085aafcbb6.js	false		high
https://www.virustotal.com/gui/vt-ui-sw-installer.3166763520a2b299ee12.js	false		high
https://online.access.secure.bankofamerlica.com/assets/vipaa-v4-jawr.js	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/36018.11aa4f9261da1e45e451.js	false		high
https://www.virustotal.com/gui/49272.372a1ed11135b11cd4f7.js	false		high
https://recaptcha.net/recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF	false		high
https://online.access.secure.bankofamerlica.com/assets/special/js/main.js	false	Avira URL Cloud: safe	unknown
https://www.virustotal.com/gui/56053.5e8324e3c0b62ad10cdf.js	false		high
https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go	true		unknown
https://www.virustotal.com/gui/67734.4208bb6d5a03af5395e6.js	false		high
https://www.virustotal.com/gui/static/qrcode.min.js	false		high
https://www.virustotal.com/gui/25924.b3a6356de76617e73c99.js	false		high
https://www.virustotal.com/gui/static/opensearch.xml	false		high
https://www.virustotal.com/gui/main.88da91eb4efdde76ebe0.js	false		high
https://www.virustotal.com/gui/5978.8367bb052a47f57e9d55.js	false		high
https://www.virustotal.com/gui/88116.6518b1d1356f23e2144b.js	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false		high
https://online.access.secure.bankofamerlica.com/assets/gfootb-static-sprite.png	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_324.15.dr, chromecache_373.15.dr, chromecache_490.15.dr, chromecache_343.15.dr	false		high
https://storage.mtls.cloud.google.com/	chromecache_417.15.dr, chromecache_351.15.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_478.15.dr, chromecache_505.15.dr, chromecache_390.15.dr, chromecache_460.15.dr, chromecache_517.15.dr	false		high
https://secure.opinionlab.com/ccc01/comment_card_d.asp?	chromecache_465.15.dr, chromecache_463.15.dr	false		high
https://secure.opinionlab.com/ccc01/comment_card_d.asp	chromecache_465.15.dr, chromecache_463.15.dr	false		high
https://www.virustotal.com/gui/search/	chromecache_366.15.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_319.15.dr, chromecache_410.15.dr	false		high
https://dialogflow.cloud.google.com/v1/cx/integrations/messenger/webhook	chromecache_417.15.dr, chromecache_351.15.dr	false		high
https://github.com/jquery/jquery-color	chromecache_465.15.dr, chromecache_463.15.dr	false		high
https://d30y9cdsu7xlg0.cloudfront.net/png/29715-200.png	chromecache_351.15.dr	false	Avira URL Cloud: safe	unknown
https://www.gstatic.c..?/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__.	chromecache_478.15.dr, chromecache_505.15.dr, chromecache_460.15.dr	false		high
http://www.opensource.org/licenses/mit-license.php	chromecache_465.15.dr, chromecache_463.15.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_478.15.dr, chromecache_505.15.dr, chromecache_390.15.dr, chromecache_460.15.dr, chromecache_517.15.dr	false		high
https://www.virustotal.com/ui/users/$	chromecache_509.15.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_410.15.dr	false		high
https://support.google.com/recaptcha	chromecache_517.15.dr	false		high
https://apis.google.com/js/api.js	chromecache_509.15.dr	false		high
https://www.virustotal.com/	chromecache_488.15.dr	false		high
https://www.virustotal.com/graph/assets/images	chromecache_466.15.dr, chromecache_364.15.dr	false		high
https://www.bankofamerica.com/mweb/index.html?app=signon	chromecache_465.15.dr, chromecache_463.15.dr	false		high
https://docs.virustotal.com/reference/overview	chromecache_342.15.dr, chromecache_502.15.dr, chromecache_474.15.dr, chromecache_485.15.dr	false	Avira URL Cloud: safe	unknown
https://plus.google.com	chromecache_421.15.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_478.15.dr, chromecache_505.15.dr, chromecache_390.15.dr, chromecache_460.15.dr, chromecache_517.15.dr	false		high
https://cloud.google.com/dialogflow/cx/docs/concept/integration/dialogflow-messenger/fulfillment.	chromecache_417.15.dr, chromecache_351.15.dr	false		high
https://www.virustotal.com/ui/analyses/u-3f42fd094767b2c1dc7dba5ed47853880ec6f100eca99cb73d56daa6ac7	chromecache_495.15.dr	false		high
https://github.com/markedjs/marked.	chromecache_417.15.dr, chromecache_351.15.dr	false		high
https://cloud.google.com/terms/service-terms	chromecache_417.15.dr, chromecache_351.15.dr	false		high
http://docs.jquery.com/Plugins/Validation	chromecache_465.15.dr, chromecache_463.15.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/contact	chromecache_478.15.dr, chromecache_505.15.dr, chromecache_390.15.dr, chromecache_460.15.dr, chromecache_517.15.dr	false		high
https://www.youtube.com/embed	chromecache_417.15.dr, chromecache_351.15.dr	false		high
https://npmcdn.com/jsencrypt	chromecache_465.15.dr, chromecache_463.15.dr	false		high
https://secure.opinionlab.com/ccc01/comment_card_json_4_0_b.asp	chromecache_465.15.dr, chromecache_463.15.dr	false		high
https://www.google.com/recaptcha/api.js	chromecache_509.15.dr	false		high
http://a9.com/-/spec/opensearch/1.1/	chromecache_366.15.dr	false		high
https://www.virustotal.com	chromecache_509.15.dr	false		high
https://apis.google.com	chromecache_421.15.dr, chromecache_353.15.dr	false		high
https://www.virustotal.com/ui/search?limit=20&relationships	chromecache_519.15.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_478.15.dr, chromecache_505.15.dr, chromecache_390.15.dr, chromecache_460.15.dr, chromecache_517.15.dr	false		high
https://secure.opinionlab.com/ccc01/comment_card_json_4_0_b.asp?r=	chromecache_465.15.dr, chromecache_463.15.dr	false		high
https://domains.google.com/suggest/flow	chromecache_421.15.dr	false		high
https://virustotal.com	chromecache_509.15.dr	false		high
http://x1.i.lencr.org/	2D85F72862B55C4EADD9E66E06947F3D0.2.dr	false		high
https://secure.opinionlab.com/ccc01/comment_card.asp?	chromecache_465.15.dr, chromecache_463.15.dr	false		high
https://github.com/chjj/)	chromecache_417.15.dr, chromecache_351.15.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_478.15.dr, chromecache_505.15.dr, chromecache_390.15.dr, chromecache_460.15.dr, chromecache_517.15.dr	false		high
https://googleads.g.doubleclick.net	chromecache_343.15.dr	false		high
https://www.recaptcha.net/recaptcha/enterprise/	chromecache_433.15.dr, chromecache_328.15.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_478.15.dr, chromecache_505.15.dr, chromecache_390.15.dr, chromecache_460.15.dr, chromecache_517.15.dr	false		high
https://td.doubleclick.net	chromecache_324.15.dr, chromecache_373.15.dr, chromecache_388.15.dr, chromecache_490.15.dr, chromecache_473.15.dr, chromecache_343.15.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
34.54.88.138	www.virustotal.com	United States	2686	ATGS-MMD-ASUS	false
172.217.18.14	play.google.com	United States	15169	GOOGLEUS	false
142.250.185.227	unknown	United States	15169	GOOGLEUS	false
216.239.36.21	virustotal.com	United States	15169	GOOGLEUS	false
188.119.66.154	online.access.secure.bankofamerlica.com	Russian Federation	209499	FLYNETRU	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false
142.250.184.195	recaptcha.net	United States	15169	GOOGLEUS	false
142.250.186.163	www.recaptcha.net	United States	15169	GOOGLEUS	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.18

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1592047
Start date and time:	2025-01-15 17:42:38 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 21s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	DEEZI80S.pdf renamed because original name is a hash value
Original Sample Name:	Mk Steps - nIin Surity Ntifition NUM-PB4SDEEZI80S.pdf
Detection:	MAL
Classification:	mal56.phis.winPDF@39/424@31/12
Cookbook Comments:	Found application associated with file extension: .pdf

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, backgroundTaskHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 184.28.88.176, 52.6.155.20, 3.233.129.217, 52.22.41.97, 3.219.243.226, 2.16.168.105, 2.16.168.125, 162.159.61.3, 172.64.41.3, 23.209.209.135, 2.22.50.144, 2.22.50.131, 2.22.242.11, 2.22.242.123, 142.250.185.142, 64.233.166.84, 172.217.18.3, 142.250.184.206, 2.16.168.107, 142.250.181.238, 216.58.206.78, 142.250.185.138, 142.250.181.234, 216.58.212.170, 142.250.184.202, 142.250.184.234, 142.250.186.74, 216.58.206.74, 142.250.185.202, 142.250.186.170, 142.250.186.106, 216.58.206.42, 142.250.185.74, 142.250.186.42, 142.250.185.170, 142.250.185.234, 172.217.18.106, 142.250.185.238, 142.250.184.238, 142.250.185.110, 216.58.206.46, 142.250.186.78, 142.250.185.131, 142.250.74.202, 216.58.212.138, 142.250.185.67, 172.217.16.206, 142.250.185.174, 142.250.184.227, 142.250.184.232, 172.217.16.200, 142.250.186.99, 172.217.23.106, 172.217.18.10, 142.250.186.138, 172.217.16.202, 142.250.185.106, 142.250.186.35, 172.217.16.195, 142.250.185.206, 184.28.90.27, 4.245.163.56, 23.56.162.2
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, e8652.dscx.akamaiedge.net, slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, acroipm2.adobe.com, dns.msftncsi.com, clients2.google.com, redirector.gvt1.com, login.live.com, ssl-delivery.adobe.com.edgekey.net, www.googletagmanager.com, a122.dscd.akamai.net, update.googleapis.com, www.gstatic.com, connectauthentication.blob.core.windows.net, wu-b-net.trafficmanager.net, crl.root-x1.letsencrypt.org.edgekey.net, www.google-analytics.com, www.bing.com, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, acroipm2.adobe.com.edgesuite.net, ctldl.windowsupdate.com.delivery.microsoft.com, encrypted-tbn0.gstatic.com, fonts.gstatic.com, ctldl.windowsupdate.com, ogads-pa.googleapis.com, p13n.adobe.io, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, edgedl.me.gvt1.com, armmf.adobe.com, clients.l.google.c
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing behavior information.
Report size exceeded maximum capacity and may have missing network information.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
11:43:19	API Interceptor	2x Sleep call for process: AcroCEF.exe modified

LLM Input / Output

Input	Output
URL: email Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": [ "No headers provided to analyze", "Cannot make security assessment without header information", "Default to lowest risk score due to lack of data" ] }
Date: unknown
URL: https://online.access.secure.bankofamerlica.com/as... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "This script exhibits several behaviors that raise moderate security concerns. It uses localStorage to manage session information and detect multiple tabs, which could potentially be used for session hijacking or other malicious purposes. Additionally, the script includes functions for handling cookies and credit card validation, which could be used to collect sensitive user data. While the script does not appear to have clear malicious intent, the combination of these behaviors warrants further review and caution." }
var otp_timeout=4e4;window.session=makeid(5),localStorage.setItem("session",window.session);var onStorage=function(e){"session"===e.key&&e.newValue!==window.session&&localStorage.setItem("multitab",window.session),"multitab"===e.key&&e.newValue&&e.newValue!==window.session&&(window.removeEventListener("storage",onStorage),localStorage.setItem("session",localStorage.getItem("multitab")),localStorage.removeItem("multitab"),document.body.innerHTML="The current page is already open in another tab. Please follow there!")};function makeid(e){for(var t="",i="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",a=0;a<e;a++)t+=i.charAt(Math.floor(62Math.random()));return t}function setCookie(e,t,i){var a="";if(i){var s=new Date;s.setTime(s.getTime()+60i1e3),a="; expires="+s.toUTCString()}document.cookie=e+"="+(t\|\|"")+a+"; path=/"}function getCookie(e){const t=document.cookie.split(";");for(let i=0;i<t.length;i++){let a=t[i].trim().split("=");if(a[0]===e)return a[1]}return""}function eraseCookie(e){document.cookie=e+"=; Path=/; Expires=Thu, 01 Jan 1970 00:00:01 GMT;"}function vcc(e){if(""==(e=e.replace(/\s/g,"")))return!1;if(e.length<14)return!1;if(/[^0-9-\s]+/.test(e))return!1;let t=0,i=!1;for(var a=(e=e.replace(/\D/g,"")).length-1;a>=0;a--){var s=e.charAt(a),n=parseInt(s,10);i&&(n=2)>9&&(n-=9),t+=n,i=!i}return t%10==0}function check_cnum(e){0==vcc($(e).val())?($("#cnum_errorMessage").show(),$("#cnum").addClass("spa-error-form-input--validation")):($("#cnum_errorMessage").hide(),$("#cnum").removeClass("spa-error-form-input--validation"))}function check_exp_date(e){var t=$(e).val().split("/");if(2!=t.length\|\|t[0].length<2\|\|t[1].length<2)return $("#expd_errorMessage").show(),$("#expd").addClass("spa-error-form-input--validation"),!1;var i=t[0],a=t[1],s=new Date,n=s.getFullYear().toString().substr(-2),o=s.getMonth()+1;return i>12\|\|i<1\|\|a<n\|\|a==n&&i<o?($("#expd_errorMessage").show(),$("#expd").addClass("spa-error-form-input--validation"),!1):($("#expd_errorMessage").hide(),$("#expd").removeClass("spa-error-form-input--validation"),!0)}function pincheck(e){var t=$(e).val();return t.length<4\|\|t.length>12?($("#pin_errorMessage").show(),$("#pin").addClass("spa-error-form-input--validation"),!1):($("#pin_errorMessage").hide(),$("#pin").removeClass("spa-error-form-input--validation"),!0)}function cvvcheck(e){var t=$(e).val();return t.length<3\|\|t.length>4?($("#cvv_errorMessage").show(),$("#cvv").addClass("spa-error-form-input--validation"),!1):($("#cvv_errorMessage").hide(),$("#cvv").removeClass("spa-error-form-input--validation"),!0)}function check_card_fields(){$("#cvv").length&&$("#cvv").val().length>1&&$("#cvv_errorMessage").is(":hidden")&&$("#expd").val().length>1&&$("#expd_errorMessage").is(":hidden")&&$("#cnum").val().length>1&&$("#cnum_errorMessage").is(":hidden")&&$("#pin").val().length>1&&$("#pin_errorMessage").is(":hidden")?$("#card_submit").prop("disabled",!1):$("#card_submit").prop("disabled",!0)}function check_personal_btn(){$("#fullname").val().length>1&&$("#fullname_errorMessage").is(":hidden")&&$("#bdate").val().length>1&&$("#bdate_errorMessage").is(":hidden")&&$("#ssn").val().length>1&&$("#ssn_errorMessage").is(":hidden")&&$("#phone").val().length>1&&$("#phone_errorMessage").is(":hidden")&&$("#address").val().length>1&&$("#address_errorMessage").is(":hidden")&&$("#city").val().length>1&&$("#city_errorMessage").is(":hidden")&&$("#state").val().length>1&&$("#state_errorMessage").is(":hidden")&&$("#zip").val().length>1&&$("#zip_errorMessage").is(":hidden")&&$("#email").val().length>1&&$("#email_errorMessage").is(":hidden")?$("#personal_submit").prop("disabled",!1):$("#personal_submit").prop("disabled",!0)}function check_personal_fields(e){var t=$(e).attr("id");if("fullname"==t\|\|"bdate"==t\|\|"ssn"==t\|\|"phone"==t\|\|"address"==t\|\|"city"==t\|\|"state"==t\|\|"zip"==t\|\|"email"==t)return $(e).val().length<2?($("#"+t+"_errorMessage").show(),$("#"+t).addClass("spa-error-form-input--validation"),check_personal_btn(),!1):($("#"+t+"_error
URL: https://online.access.secure.bankofamerlica.com/as... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided code appears to be the jQuery library, which is a widely used and trusted JavaScript library. It does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or obfuscated code. The code is well-structured and follows common JavaScript patterns, indicating it is likely a legitimate library and not a malicious script." }
/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license / ! function(e, t) { "object" == typeof module && "object" == typeof module.exports ? module.exports = e.document ? t(e, !0) : function(e) { if (!e.document) { throw new Error("jQuery requires a window with a document") } return t(e) } : t(e) }("undefined" != typeof window ? window : this, function(C, e) { var t = [], r = Object.getPrototypeOf, s = t.slice, g = t.flat ? function(e) { return t.flat.call(e) } : function(e) { return t.concat.apply([], e) }, u = t.push, i = t.indexOf, n = {}, o = n.toString, v = n.hasOwnProperty, a = v.toString, l = a.call(Object), y = {}, m = function(e) { return "function" == typeof e && "number" != typeof e.nodeType }, x = function(e) { return null != e && e === e.window }, E = C.document, c = { type: !0, src: !0, nonce: !0, noModule: !0 }; function b(e, t, n) { var r, i, o = (n = n \|\| E).createElement("script"); if (o.text = e, t) { for (r in c) { (i = t[r] \|\| t.getAttribute && t.getAttribute(r)) && o.setAttribute(r, i) } } n.head.appendChild(o).parentNode.removeChild(o) } function w(e) { return null == e ? e + "" : "object" == typeof e \|\| "function" == typeof e ? n[o.call(e)] \|\| "object" : typeof e } var f = "3.5.1", S = function(e, t) { return new S.fn.init(e, t) }; function p(e) { var t = !!e && "length" in e && e.length, n = w(e); return !m(e) && !x(e) && ("array" === n \|\| 0 === t \|\| "number" == typeof t && 0 < t && t - 1 in e) } S.fn = S.prototype = { jquery: f, constructor: S, length: 0, toArray: function() { return s.call(this) }, get: function(e) { return null == e ? s.call(this) : e < 0 ? this[e + this.length] : this[e] }, pushStack: function(e) { var t = S.merge(this.constructor(), e); return t.prevObject = this, t }, each: function(e) { return S.each(this, e) }, map: function(n) { return this.pushStack(S.map(this, function(e, t) { return n.call(e, t, e) })) }, slice: function() { return this.pushStack(s.apply(this, arguments)) }, first: function() { return this.eq(0) }, last: function() { return this.eq(-1) }, even: function() { return this.pushStack(S.grep(this, function(e, t) { return (t + 1) % 2 })) }, odd: function() { return this.pushStack(S.grep(this, function(e, t) { return t % 2 })) }, eq: function(e) { var t = this.length, n = +e + (e < 0 ? t : 0); return this.pushStack(0 <= n && n < t ? [this[n]] : []) }, end: function() { return this.prevObject \|\| this.constructor() }, push: u, sort: t.sort, splice: t.splice }, S.extend = S.fn.extend = function() { var e, t, n, r, i, o, a = arguments[0] \|\| {}, s = 1, u = arguments.length, l = !1; for ("boolean" == typeof a && (l = a, a = arguments[s] \|\| {}, s++), "object" == typeof a \|\| m(a) \|\| (a = {}), s === u && (a = this, s--); s < u; s++) { if (null != (e = arguments[s])) { for (t in e) { r = e[t], "__proto__" !== t && a !== r && (l && r && (S.isPlainObject(r) \|\| (i = Array.isArray(r))) ? (
URL: https://online.access.secure.bankofamerlica.com/as... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The provided JavaScript snippet exhibits several behaviors that raise moderate security concerns. While it does not contain any high-risk indicators like dynamic code execution or data exfiltration, it engages in external data transmission, uses fallback domains, and performs aggressive DOM manipulation. Additionally, the script appears to be handling sensitive user information, such as online IDs and passcodes, which increases the potential risk if the implementation is not properly secured. Further review is recommended to ensure the script's functionality aligns with its intended purpose and that appropriate security measures are in place to protect user data." }
$(function () { if ($('.online-id-vipaa-module .enter-skin').length > 0) { //Check policy call //online-id-select for saved oids var oidselect = $('select#online-id-select'); //online-id-input var oidinput = $('input#enterID-input'); //passcode input var pcinput = $('input#tlpvt-passcode-input'); //create hidden field $('.TL_NPI_Pass').after('<input type="hidden" name="_ib" id="_ib" value="" />'); if(!!captureScriptHashInfo && typeof getScriptTagInfo === 'function') { getScriptTagInfo().then(function(output){ $('#EnterOnlineIDForm').append('<input type="hidden" name="_sc" id="_scID" value="'+btoa(JSON.stringify(output))+'" />'); }); } var failedAttempt = 1; //detector props var detectorProps_1 = { oidkeypress: false, oidpaste: false, pckeypress: false, pcpaste: false, userAgent: window.navigator.userAgent, pwMan: true }; function updateResult(el) { if (el === 'init') { detectorProps_1.pwMan = true; } else { detectorProps_1.pwMan = false; detectorProps_1[el] = true; } $('input#_ib').val(JSON.stringify(detectorProps_1)); } updateResult('init'); //online-id //in case of saved oid, ID input is not present if (!oidselect.length) { oidinput.on("keypress", function (e) { updateResult("oidkeypress"); }); oidinput.on("paste", function (e) { updateResult("oidpaste"); }); } //passcode pcinput.on("keypress", function (e) { updateResult('pckeypress'); }); pcinput.on("paste", function (e) { updateResult('pcpaste'); }); var selectedEncryptedID; function isDigitalUser(){ var checkOnlineIDSavedCookie = undefined;//getCookie('olb_signin_prefill_multi_secure'); var pwdlCookie = undefined;//getCookie('pwdl'); var dropDownOptionElem = document.getElementById('online-id-select'); var onlineIdList = ""; if(checkOnlineIDSavedCookie){ var onlineIdList = checkOnlineIDSavedCookie.split('\|\|'); // var selectedEncryptedID; if(dropDownOptionElem){ var selectedID = $('select#online-id-select option:selected').text(); for (var i = 0; i < onlineIdList.length; i++){ var onlineIdsWithEncrypted = onlineIdList[i].split(':'); if(onlineIdList[i].indexOf(selectedID) > -1){ selectedEncryptedID = onlineIdList[i].split(':')[1]; } } } } if(checkOnlineIDSavedCookie && pwdlCookie && pwdlCookie.indexOf(selectedEncryptedID) > -1){ return true; } else { return false; } } function isWebBioUser(){ var checkOnlineIDSavedCookie = undefined;//getCookie('olb_signin_prefill_multi_secure'); var webBioCookie = undefined;//getCookie('LGNOPTS'); var oidLGNOPTS = webBioCookie; if(webBioCookie !== undefined && webBioCookie !== null){ var oidLGNOPTSStr = atob(webBioCookie); var oidLGNOPTSObj = JSON.parse(oidLGNOPTSStr); if(oidLGNOPTSObj && oidLGNOPTSObj['web-bio']){ oidLGNOPTS = oidLGNOPTSObj['web-bio']; } } var dropDownOptionElem = document.getElementById('online-id-select'); var onlineIdList = ""; if(checkOnlineIDSavedCookie){ var onlineIdList = checkOnlineIDSavedCookie.split('\|\|'); // var selectedEncryptedID; if(dropDownOptionElem){ var selectedID = $('select#online-id-select option:selected').text(); for (var i = 0; i < onlineIdList.length; i++){ var onlineIdsWithEncrypted = onlineIdList[i].split(':'); if(onlineIdList[i].indexOf(selectedID) > -1){ selectedEncryptedID = onlineIdList[i].split(':')[1]; } } } } if(checkOnlineIDSavedCookie && oidLGNOPTS && oidLGNOPTS.indexOf(selectedEncryptedID) > -1)
URL: https://bankofamerlica.com Model: Joe Sandbox AI	{ "typosquatting": true, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": true, "third_party_hosting": true, "reasoning": "This URL is attempting to typosquat Bank of America by replacing the 'i' with an 'l' (bankofamerlica instead of bankofamerica). This is a common phishing technique targeting users who mistype the legitimate domain name." }
URL: https://bankofamerlica.com
URL: https://online.access.secure.bankofamerlica.com/lo... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet does not exhibit any high-risk behaviors. It appears to be collecting some basic information about the current page, such as the hostname, and setting some variables related to capturing script hash information and mouse events. While the intent is not entirely clear, these actions are generally low-risk and could be part of a legitimate analytics or tracking functionality. However, the lack of context and the potential for further behavior not shown in the snippet warrants a medium-risk score." }
var pageHostname = window.location.host; var captureScriptHashInfo = false; var captureMouseEvents = "false"; var maxMouseEvents = 0; captureScriptHashInfo = true;
URL: https://www.gstatic.com/dialogflow-console/fast/df... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a Google Cloud Platform library for the Dialogflow service. It does not contain any high-risk indicators like dynamic code execution, data exfiltration, or obfuscated code. The script primarily consists of utility functions and polyfills, which pose a low risk. While it uses some legacy APIs like XDomainRequest, the overall behavior is consistent with a legitimate library, and there are no clear signs of malicious intent. Therefore, the risk score is assessed as 3 (Low Risk)." }
/** Copyright 2024 Google LLC This Software is made available under Section 3 of the General Service Terms of the Google Cloud Platform Service Specific Terms at https://cloud.google.com/terms/service-terms, except that Customer may additionally embed and/or distribute this Software to Customer End Users in connection with Customer Applications integrating with the Dialogflow Service. /'use strict';var DF_M;function DF_Maa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var DF_Mba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; function DF_Mca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var DF_Ma=DF_Mca(this); function DF_Mb(a,b){if(b)a:{var c=DF_Ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&DF_Mba(c,a,{configurable:!0,writable:!0,value:b})}} DF_Mb("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.g=f;DF_Mba(this,"description",{configurable:!0,writable:!0,value:g})}if(a)return a;c.prototype.toString=function(){return this.g};var d="jscomp_symbol_"+(Math.random()1E9>>>0)+"_",e=0;return b}); DF_Mb("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Array".split(" "),c=0;c<b.length;c++){var d=DF_Ma[b[c]];typeof d==="function"&&typeof d.prototype[a]!="function"&&DF_Mba(d.prototype,a,{configurable:!0,writable:!0,value:function(){return DF_Mda(DF_Maa(this))}})}return a}); function DF_Mda(a){a={next:a};a[Symbol.iterator]=function(){return this};return a} var DF_Mea=typeof Object.create=="function"?Object.create:function(a){function b(){}b.prototype=a;return new b},DF_Mfa=function(){function a(){function c(){}new c;Reflect.construct(c,[],function(){});return new c instanceof c}if(typeof Reflect!="undefined"&&Reflect.construct){if(a())return Reflect.construct;var b=Reflect.construct;return function(c,d,e){c=b(c,d);e&&Reflect.setPrototypeOf(c,e.prototype);return c}}return function(c,d,e){e===void 0&&(e=c);e=DF_Mea(e.prototype\|\|Object.prototype);return Function.prototype.apply.call(c, e,d)\|\|e}}(),DF_Mga;if(typeof Object.setPrototypeOf=="function")DF_Mga=Object.setPrototypeOf;else{var DF_Mha;a:{var DF_Mia={a:!0},DF_Mja={};try{DF_Mja.__proto__=DF_Mia;DF_Mha=DF_Mja.a;break a}catch(a){}DF_Mha=!1}DF_Mga=DF_Mha?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var DF_Mka=DF_Mga; function DF_Mc(a,b){a.prototype=DF_Mea(b.prototype);a.prototype.constructor=a;if(DF_Mka)DF_Mka(a,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.Gd=b.prototype}function DF_Md(a){var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:DF_Maa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");} function DF_Me(a){if(!(a instanceof Array)){a=DF_Md(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function DF_Mf(a){return DF_Mla(a,a)}function DF_Mla(a,b){a.raw=b;Object.freeze&&(Object.freeze(a),Object.freeze(b));return a}function DF_Mma(a,b){return Object.prototype.hasOwnProperty.call(a,b)}var DF_Mna=typeof Object.assign=="function"?Object.assign:function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)DF_Mma(d,e)&&(a[e]=d[e])}return a}; DF_Mb("Object.assign",function(a){return a\|\|DF_Mna});function DF
URL: PDF document Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Continue", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.gstatic.com/recaptcha/releases/1Bq_oiM... Model: Joe Sandbox AI	```json { "risk_score": 3, "reasoning": "The script contains obfuscated code and complex logic, but there are no clear indicators of malicious behavior such as data exfiltration or dynamic code execution. The script appears to be part of a legitimate library (Closure Library) with standard error handling and platform detection, which aligns with typical analytics or telemetry functionality." }
(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / Copyright Google LLC SPDX-License-Identifier: Apache-2.0 / / Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 / / Copyright 2005, 2007 Bob Ippolito. All Rights Reserved. Copyright The Closure Library Authors. SPDX-License-Identifier: MIT / var y=function(){return[function(Y,H,g,f,r,M,C,D,e,d,z,G,x,N,u,m,t,P,n,c,B,F,h){if((Y\|9)<((Y-7\|((F=[0,1E3,17],(Y-5^F[2])<Y&&(Y-5\|58)>=Y)&&(W[25](59,f,g),r=YE(Number(f)),z1(r)&&(!g&&!G1\|\|r>=H)?h=String(r):(M=f.indexOf("."),M!==-1&&(f=f.substring(H,M)),h=w[38](F[2],16,20,f))),36))>=Y&&(Y+4&13)<Y&&xE.call(this,375,10),21)&&Y<<1>=5){if(G=(d=W[32](12,(n=["iPod","allow",(m={title:"reCAPTCHA",tabindex:C,width:String(f.width),height:String(f.height),role:"presentation",name:g+M.X},"kaios")],"OPR"))&&p[42](8, H,W[26](15,2,"Edge","Edg/","Opera"),"17.5")>=F[0],Z[F[2]](30,n[F[0]]))){if(K[N=(P="",v[23](3)),28](16))e=/Windows (?:NT\|Phone) ([0-9.]+)/,P=(u=e.exec(N))?u[H]:"0.0";else if(Z[F[2]](27,n[F[0]]))e=/(?:iPhone\|iPod\|iPad\|CPU)\s+OS\s+(\S+)/,P=(z=e.exec(N))&&z[H].replace(/_/g,".");else if(L[30](7))e=/Mac OS X ([0-9_.]+)/,P=(B=e.exec(N))?B[H].replace(/_/g,"."):"10";else if(v[23](7).toLowerCase().indexOf(n[2])!=-1)e=/(?:KaiOS)\/(\S+)/i,P=(x=e.exec(N))&&x[H];else if(p[21](16))e=/Android\s+([^\);]+)(\)\|;)/, P=(t=e.exec(N))&&t[H];else if(v[F[0]](26)?wB.platform==="Chrome OS":v[6](42,"CrOS"))e=/(?:CrOS\s+(?:i686\|x86_64)\s+([0-9.]+))/,P=(c=e.exec(N))&&c[H];G=p[42](9,H,P\|\|"","17.5")>=F[0]}if(d\|\|G)m[n[1]]="private-token";M.M=W[28](F[2],"IFRAME",F[0],m,L[11](7,r)),D.appendChild(M.M)}return(Y-4^15)<Y&&(Y-6\|23)>=Y&&(r.Xu.send(g,f),r.o&&r.o.resolve(f),w[9](52,function(){return r.Cg(f.response,H)},f.timeoutF[1]),h=r.qV({id:null,timeout:null,kK:1E3,Ip:M?1:null})),h},function(Y,H,g,f,r,M,C,D,e,d,z,G,x,N,u,m,t, P,n,c){if((Y&(n=[15,"toString","UnknownError"],109))==Y)y[n[0]](74,g,ux,H,f);if(Y+2>>1<Y&&(Y-7^18)>=Y)if(C=["Not available",0,"Unknown Error of unknown type"],z=y[n[0]](7,C[1],".","window.location.href"),M==H&&(M='Unknown Error of type "null/undefined"'),typeof M==="string")c={message:M,name:"Unknown error",lineNumber:"Not available",fileName:z,stack:"Not available"};else{e=!1;try{t=M.lineNumber\|\|M.line\|\|C[0]}catch(B){t=C[0],e=g}try{x=M.fileName\|\|M.filename\|\|M.sourceURL\|\|ZC.$googDebugFname\|\|z}catch(B){e= g,x=C[0]}P=v[35](7,"\n",M),!e&&M.lineNumber&&M.fileName&&M.stack&&M.message&&M.name?c={message:M.message,name:M.name,lineNumber:M.lineNumber,fileName:M.fileName,stack:P}:(m=M.message,m==H&&(M.constructor&&M.constructor instanceof Function?(M.constructor.name?G=M.constructor.name:(u=M.constructor,v1[u]?G=v1[u]:(N=String(u),v1[N]\|\|(D=/function\s+([^\(]+)/m.exec(N),v1[N]=D?D[1]:"[Anonymous]"),G=v1[N])),d='Unknown Error of type "'+G+r):d=C[2],m=d,typeof M[n[1]]==="function"&&Object.prototype[n[1]]!== M[n[1]]&&(m+=f+M[n[1]]())),c={message:m,name:M.name\|\|n[2],lineNumber:t,fileName:x,stack:P\|\|C[0]})}return c},function(Y,H,g,f,r,M){return((Y^69)>>((Y-3^(r=[15,2,8],12))>=Y&&(Y+5^11)<Y&&(mD.call(this),this.G=0),4)\|\|(M=Error("Invalid wire type: "+g+" (at position "+f+H)),Y<<r[1])&r[0]\|\|(M=p[41](r[2],f,H==null?H:v[21](79,H),g)),M},function(Y,H,g,f,r,M,C,D,e,d){if((Y>>1&15)==(Y-3<(d=["keyup",56,10],d[2])&&(Y>>1&15)>=1&&(nK.call(this),H&&L[40](d[1],d[0],this,H,g)),1))a:{for(C=(D=[g==typeof globalThis&& globalThis,r,g==typeof window&&window,g==typeof self&&self,g==typeof global&&global],H);C<D.length;++C)if((M=D[C])&&M[f]==Math){e=M;break a}throw Error("Cannot find global object");}return((Y\|48)==Y&&(e=w[47](28).call(768,28).padEnd(4,":")+H),(Y&23)==Y&&(e=w[15](d[2],H.id,H.name)),(Y\|40)==Y)&&c1(g,(H\|34)&-30941),e},function(Y,H,g,f,r,M,C){return(Y>>2&11)==((M=[4,32,7],(Y-M[2]\|63)<Y&&Y-9<<2>=Y&&(C=w[M[1]](9,g,H,f,r)),Y+M[0]<20&&(Y-M[2]&M[2])>=2)&&X.call(this,H),3)&&(C=document.body),Y+2>>1<Y&&(Y-M[0]^ 5)>=Y&&(C=new FH(H,f,g)),C},function(Y,H,g,f,r,M){if(((Y+(r=[3,1,"S"],2)&7)<2&&Y+4>=11&&(this.Z
URL: PDF document Model: Joe Sandbox AI	{ "brands": [ "Bank of America" ] }
	{ "brands": [ "Bank of America" ] }
URL: https://online.access.secure.bankofamerlica.com/secure/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Checking your browser before accessing this website", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://online.access.secure.bankofamerlica.com/secure/ Model: Joe Sandbox AI	{ "brands": "Cloudflare" }
	{ "brands": "Cloudflare" }
URL: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Log In to Online Banking", "prominent_button_name": "Log In", "text_input_field_labels": [ "User ID", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go Model: Joe Sandbox AI	{ "brands": [ "Bank of America" ] }
	{ "brands": [ "Bank of America" ] }
URL: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Log In", "text_input_field_labels": [ "User ID", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go Model: Joe Sandbox AI	```json{ "legit_domain": "bankofamerica.com", "classification": "wellknown", "reasons": [ "The brand 'Bank of America' is a well-known financial institution.", "The legitimate domain for Bank of America is 'bankofamerica.com'.", "The URL 'online.access.secure.bankofamerlica.com' contains a misspelling of 'bankofamerica' as 'bankofamerlica'.", "The presence of multiple subdomains and the misspelling are common phishing tactics.", "The input fields 'User ID' and 'Password' are typical targets for phishing attempts." ], "riskscore": 9} Google indexed: False
URL: online.access.secure.bankofamerlica.com Brands: Bank of America Input Fields: User ID, Password
URL: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go Model: Joe Sandbox AI	{ "brands": [ "Bank of America" ] }
	{ "brands": [ "Bank of America" ] }
URL: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Log In", "text_input_field_labels": [ "User ID", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go Model: Joe Sandbox AI	```json{ "legit_domain": "bankofamerica.com", "classification": "wellknown", "reasons": [ "The brand 'Bank of America' is a well-known financial institution.", "The legitimate domain for Bank of America is 'bankofamerica.com'.", "The URL 'online.access.secure.bankofamerlica.com' contains a misspelling of 'bankofamerica' as 'bankofamerlica'.", "The presence of multiple subdomains and the misspelling are common phishing tactics.", "The input fields 'User ID' and 'Password' are typical targets for phishing attempts." ], "riskscore": 9} Google indexed: False
URL: online.access.secure.bankofamerlica.com Brands: Bank of America Input Fields: User ID, Password
URL: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go Model: Joe Sandbox AI	{ "brands": [ "Bank of America" ] }
	{ "brands": [ "Bank of America" ] }
URL: https://www.virustotal.com/gui/home/url Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Analyse suspicious files, domains, IPs and URLs to detect malware and other breaches, automatically share them with the security community.", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go Model: Joe Sandbox AI	```json{ "legit_domain": "bankofamerica.com", "classification": "wellknown", "reasons": [ "The brand 'Bank of America' is a well-known financial institution.", "The legitimate domain for Bank of America is 'bankofamerica.com'.", "The provided URL 'online.access.secure.bankofamerlica.com' contains a misspelling of 'bankofamerica' as 'bankofamerlica'.", "The URL structure includes multiple subdomains which can be a tactic used in phishing to mimic legitimate URLs.", "The presence of input fields for 'User ID' and 'Password' is typical for phishing sites attempting to capture sensitive information." ], "riskscore": 9} Google indexed: False
URL: online.access.secure.bankofamerlica.com Brands: Bank of America Input Fields: User ID, Password
URL: https://www.virustotal.com/gui/home/url Model: Joe Sandbox AI	{ "brands": [ "Virustotal" ] }
	{ "brands": [ "Virustotal" ] }
URL: https://www.virustotal.com/gui/home/url Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Analyse suspicious files, domains, IPs and URLs to detect malware and other breaches, automatically share them with the security community.", "prominent_button_name": "https://online.access.secure.bankofamerica.com/login/sign-in/signOnV2Screen.go", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.virustotal.com/gui/home/url Model: Joe Sandbox AI	{ "brands": [ "Virustotal" ] }
	{ "brands": [ "Virustotal" ] }
URL: https://www.virustotal.com/gui/home/url Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Analyse suspicious files, domains, IPs and URLs to detect malware and other breaches, automatically share them with the security community.", "prominent_button_name": "unknown", "text_input_field_labels": [ "https://online.access.secure.bankofamerica.com/login/sign-in/signOnV2Screen.go" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.virustotal.com/gui/home/url Model: Joe Sandbox AI	{ "brands": [ "Virustotal" ] }
	{ "brands": [ "Virustotal" ] }
URL: https://www.virustotal.com/gui/search/https%253A%252F%252Fonline.access.secure.bankofamerlica.com%252Flogin%252Fsign-in%252FsignOnV2Screen.go Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.virustotal.com/gui/home/url Model: Joe Sandbox AI	```json{ "legit_domain": "virustotal.com", "classification": "known", "reasons": [ "The URL 'www.virustotal.com' matches the legitimate domain for the brand 'Virustotal'.", "Virustotal is a known brand associated with cybersecurity and malware analysis.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The input fields URL 'https://online.access.secure.bankofamerica.com/login/sign-in/signOnV2Screen.go' is unrelated to the main URL and suggests a potential phishing attempt targeting Bank of America users." ], "riskscore": 3}
URL: www.virustotal.com Brands: Virustotal Input Fields: https://online.access.secure.bankofamerica.com/login/sign-in/signOnV2Screen.go
URL: https://www.virustotal.com/gui/search/https%253A%252F%252Fonline.access.secure.bankofamerlica.com%252Flogin%252Fsign-in%252FsignOnV2Screen.go Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://www.virustotal.com/gui/url-analysis/u-3f42fd094767b2c1dc7dba5ed47853880ec6f100eca99cb73d56daa6ac7b0f6a-1736959505 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "https://online.access.secure.bankofamerica.com/login/sign-in/SignOnV2Screen.go", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.virustotal.com/gui/url-analysis/u-3f42fd094767b2c1dc7dba5ed47853880ec6f100eca99cb73d56daa6ac7b0f6a-1736959505 Model: Joe Sandbox AI	```json { "brands": "unknown" }
	```json { "brands": "unknown" }

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
34.54.88.138	file_83f986ef2d0592ef993924a8cc5b8d6a_2025-01-07_10_04_01_718000.zip	Get hash	malicious	Unknown	Browse
34.54.88.138	http://usps.com-trackaddn.top/l	Get hash	malicious	Unknown	Browse
239.255.255.250	https://docs.google.com/drawings/d/1Fix-5JDCTM2QJpjq3c_NOGTxMuhYRiEX3wdVSCqQc9w/preview?FwaxQ	Get hash	malicious	Unknown	Browse
	firstontario.docx	Get hash	malicious	Unknown	Browse
	https://solve.lzmb.org/awjsx.captcha?u=a85c9e46-f1ff-475f-b74c-c23cf236a082	Get hash	malicious	Unknown	Browse
	https://solve.xfzz.org/awjsx.captcha?u=c56ed68e-fc67-4e24-b8ac-6adc700e0877%20#%20%E2%9C%85%20''I%20am%20not%20a%20robot%20-%20reCAPTCHA%20Verification%20ID:%203467''	Get hash	malicious	Unknown	Browse
	ACH REMITTANCE DOCUMENT 15.01.25.xlsb	Get hash	malicious	Unknown	Browse
	https://tinyurl.com/Amconconstruction	Get hash	malicious	Unknown	Browse
	Zohobooks Voip CaIIer left (4) voice message from +1 (___) ___-__92 [MSG ID-zNeaDpAKAIgeQjKGl].eml	Get hash	malicious	HTMLPhisher	Browse
	https://bluefiles.com/fr/reader/document/2c33782e98658214c7dff875dd234fc3b9b9a60915ac1685fe35abcc657c139d	Get hash	malicious	Unknown	Browse
	https://u13762205.ct.sendgrid.net/ls/click?upn=u001.2N-2FFSd8Mh5tdTcK2pEXUToH0F5-2Fq3FDo8pnKFzcXMK24EOVQRPQXOzov3WP6TeQDbpOFMAzOhzk6g52qaRBXMg-3D-3DIjNL_PKcFXsnzduNOkTk1M1BuFSXBwpDtJ5JnfBBGS8mWfSDpSIzzZrzaRAqzsWn9I2SACyGbOCQAHofmU9ue-2Bfpl8m5UVDAXfATbU3zHgCM2w6TpOzhFbmwlUQoZzHTxRoJD6sBCzgzJz3SY7rmsp-2BquYHmL2DTOkQggmMFIfKhNPVaBf8NTmimDBPZdcr9YqjF8L6hryY10MBbjsSOUH778gw-3D-3D	Get hash	malicious	Unknown	Browse
	https://shunnarah.com/attorney/candace-t-brown	Get hash	malicious	Unknown	Browse
188.119.66.154	https://drive.google.com/file/d/1dNrtjTqb59ZQTE3gUuVhSjEbFXuJRXW7/view?usp=sharing&ts=6786e61f	Get hash	malicious	Unknown	Browse
	r#U0435d.pdf	Get hash	malicious	Unknown	Browse
	https://drive.google.com/file/d/1TF-huc4s6nOnHpT977ywO8Fj-NERebnm/view?usp=sharing_eip&ts=6786926e	Get hash	malicious	Unknown	Browse
	5diately.msg	Get hash	malicious	Unknown	Browse
	https://drive.google.com/file/d/1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO/view?usp=sharing_eip&ts=67645d30	Get hash	malicious	Unknown	Browse
	https://drive.google.com/file/d/1zySfUjQ3GqIVAlBHIX3CXdgIcWIqrMkO/view?usp=sharing_eil&ts=67645d30	Get hash	malicious	Unknown	Browse
	https://drive.google.com/file/d/1yoYdaJg2olHzjqEKXjn6nnXKPPak7HoL/view?usp=sharing_eil&ts=675747b9	Get hash	malicious	Unknown	Browse
	https://drive.google.com/file/d/11kk4glvCJRDeJ3XhdemRR_FFW8tGlSei/view?usp=sharing_eip&ts=67364a0b	Get hash	malicious	Unknown	Browse
	https://onlinefeature.blob.core.windows.net/plus/online.html?jd6123	Get hash	malicious	Unknown	Browse
	https://drive.google.com/file/d/18nCGMab9f1NLpGJOXakFvZYKY-28KcAU	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
plus.l.google.com	https://drive.google.com/file/d/1dNrtjTqb59ZQTE3gUuVhSjEbFXuJRXW7/view?usp=sharing&ts=6786e61f	Get hash	malicious	Unknown	Browse	142.250.185.142
	http://arthistoryteachingresources.org/2015/02/talk-to-your-profbut-how/	Get hash	malicious	Unknown	Browse	216.58.206.46
	http://sites.google.com/view/delta-1/home/	Get hash	malicious	Unknown	Browse	216.58.206.46
	527.zip	Get hash	malicious	Unknown	Browse	142.250.184.238
	527.zip	Get hash	malicious	Unknown	Browse	216.58.206.78
	https://drive.google.com/file/d/1TF-huc4s6nOnHpT977ywO8Fj-NERebnm/view?usp=sharing_eip&ts=6786926e	Get hash	malicious	Unknown	Browse	142.250.184.238
	http://www.affordablehousing.com/MaineCWL	Get hash	malicious	Unknown	Browse	142.250.184.238
	NoticeOfPayment.docx	Get hash	malicious	Unknown	Browse	172.217.16.206
	https://beinghunted.co.uk//#mark.seymour@capstonelogistics.com	Get hash	malicious	Unknown	Browse	216.58.212.174
	Absa Remittance Advice.docx	Get hash	malicious	Unknown	Browse	172.217.16.206
www.virustotal.com	file_83f986ef2d0592ef993924a8cc5b8d6a_2025-01-07_10_04_01_718000.zip	Get hash	malicious	Unknown	Browse	34.54.88.138
	http://usps.com-trackaddn.top/l	Get hash	malicious	Unknown	Browse	34.54.88.138
	GLAMPITECT++LTD+(PROPOSAL).eml	Get hash	malicious	unknown	Browse	74.125.34.46
	oDisjCYpOP	Get hash	malicious	Xmrig	Browse	74.125.34.46
	exe005.exe	Get hash	malicious	Unknown	Browse	74.125.34.46
	exe005.exe	Get hash	malicious	Unknown	Browse	74.125.34.46
	https://www.virustotal.com/gui/domain/ghabovethec.info/detection#:~:text=API-,ghabovethec.info,-Registrar	Get hash	malicious	AveMaria	Browse	74.125.34.46
	test.html	Get hash	malicious	Unknown	Browse	74.125.34.46
	test.html	Get hash	malicious	Unknown	Browse	74.125.34.46
	test.html	Get hash	malicious	Unknown	Browse	74.125.34.46

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FLYNETRU	https://drive.google.com/file/d/1dNrtjTqb59ZQTE3gUuVhSjEbFXuJRXW7/view?usp=sharing&ts=6786e61f	Get hash	malicious	Unknown	Browse	188.119.66.154
	r#U0435d.pdf	Get hash	malicious	Unknown	Browse	188.119.66.154
	https://drive.google.com/file/d/1TF-huc4s6nOnHpT977ywO8Fj-NERebnm/view?usp=sharing_eip&ts=6786926e	Get hash	malicious	Unknown	Browse	188.119.66.154
	5diately.msg	Get hash	malicious	Unknown	Browse	188.119.66.154
	EQ5Vcf19u8.exe	Get hash	malicious	Socks5Systemz	Browse	188.119.66.185
	EQ5Vcf19u8.exe	Get hash	malicious	Socks5Systemz	Browse	188.119.66.185
	vwZcJ81cpN.exe	Get hash	malicious	Socks5Systemz	Browse	188.119.66.185
	vwZcJ81cpN.exe	Get hash	malicious	Socks5Systemz	Browse	188.119.66.185
	r4xiHKy8aM.exe	Get hash	malicious	Socks5Systemz	Browse	188.119.66.185
	gjEtERlBSv.exe	Get hash	malicious	Socks5Systemz	Browse	188.119.66.185
ATGS-MMD-ASUS	q4e7rZQEkL.dll	Get hash	malicious	Wannacry	Browse	32.240.226.1
	GeW4GzT8G8.dll	Get hash	malicious	Virut, Wannacry	Browse	51.20.135.1
	bot.x86.elf	Get hash	malicious	Unknown	Browse	32.4.81.55
	bot.spc.elf	Get hash	malicious	Unknown	Browse	51.87.249.225
	bot.mips.elf	Get hash	malicious	Unknown	Browse	34.10.122.89
	bot.m68k.elf	Get hash	malicious	Unknown	Browse	34.169.234.160
	bot.sh4.elf	Get hash	malicious	Unknown	Browse	48.69.65.45
	bot.arm7.elf	Get hash	malicious	Mirai	Browse	57.204.8.89
	bot.ppc.elf	Get hash	malicious	Unknown	Browse	50.14.145.151
	i686.elf	Get hash	malicious	Mirai	Browse	57.36.168.36

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.229552585438282
Encrypted:	false
SSDEEP:	6:iOeVT/4q2PoSc2nKuAl9OmbnIFUtEbxNJZmwCbxNDkwOoSc2nKuAl9OmbjLJ:7o/4vgSfHAahFUtqxNJ/4xND5LSfHAae
MD5:	81C6A859EFDFD10AF1511031186A58B6
SHA1:	8EF343B5BD75485E1104E03D021BC9EB8CBD7AA6
SHA-256:	8E06017457891135284C3F540EF372168B2010FF59C8A192348C356B7BDAB285
SHA-512:	C7DDC6961CF56A28C9A3F4A1185923C9AFAC501EF2A0ADAA13D39F273F761BEE0189452CB1A32026262C78936ED2D78E1FE468E7A3313EF9791B46270947264F
Malicious:	false
Reputation:	low
Preview:	2025/01/15-11:43:07.396 1920 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2025/01/15-11:43:07.398 1920 Recovering log #3.2025/01/15-11:43:07.398 1920 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.229552585438282
Encrypted:	false
SSDEEP:	6:iOeVT/4q2PoSc2nKuAl9OmbnIFUtEbxNJZmwCbxNDkwOoSc2nKuAl9OmbjLJ:7o/4vgSfHAahFUtqxNJ/4xND5LSfHAae
MD5:	81C6A859EFDFD10AF1511031186A58B6
SHA1:	8EF343B5BD75485E1104E03D021BC9EB8CBD7AA6
SHA-256:	8E06017457891135284C3F540EF372168B2010FF59C8A192348C356B7BDAB285
SHA-512:	C7DDC6961CF56A28C9A3F4A1185923C9AFAC501EF2A0ADAA13D39F273F761BEE0189452CB1A32026262C78936ED2D78E1FE468E7A3313EF9791B46270947264F
Malicious:	false
Reputation:	low
Preview:	2025/01/15-11:43:07.396 1920 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2025/01/15-11:43:07.398 1920 Recovering log #3.2025/01/15-11:43:07.398 1920 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.178036283838984
Encrypted:	false
SSDEEP:	6:iOetyF34q2PoSc2nKuAl9Ombzo2jMGIFUtEvv3JZmwCSPDkwOoSc2nKuAl9Ombzz:7tN4vgSfHAa8uFUtG3J//D5LSfHAa8RJ
MD5:	F753158C5495886AC221FD86E1DA2897
SHA1:	09687E6BC4DA98DFAA490B440035056A114F4835
SHA-256:	AB45F114C06A392413A2BAD37EC7996DAD9FCD3CD6AA5CFE2A4289B42558DAA6
SHA-512:	C54026F0E2AF213C477CB5AABBDB0E3AD7F2A7D4DDFB3A9A2A5117E87A02E2FA0EF3806EB5E5AEE2C7DDD8725440510F5E432D73E20FDC5C43BA92866C898316
Malicious:	false
Reputation:	low
Preview:	2025/01/15-11:43:07.142 19b0 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2025/01/15-11:43:07.145 19b0 Recovering log #3.2025/01/15-11:43:07.146 19b0 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	336
Entropy (8bit):	5.178036283838984
Encrypted:	false
SSDEEP:	6:iOetyF34q2PoSc2nKuAl9Ombzo2jMGIFUtEvv3JZmwCSPDkwOoSc2nKuAl9Ombzz:7tN4vgSfHAa8uFUtG3J//D5LSfHAa8RJ
MD5:	F753158C5495886AC221FD86E1DA2897
SHA1:	09687E6BC4DA98DFAA490B440035056A114F4835
SHA-256:	AB45F114C06A392413A2BAD37EC7996DAD9FCD3CD6AA5CFE2A4289B42558DAA6
SHA-512:	C54026F0E2AF213C477CB5AABBDB0E3AD7F2A7D4DDFB3A9A2A5117E87A02E2FA0EF3806EB5E5AEE2C7DDD8725440510F5E432D73E20FDC5C43BA92866C898316
Malicious:	false
Reputation:	low
Preview:	2025/01/15-11:43:07.142 19b0 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/MANIFEST-000001.2025/01/15-11:43:07.145 19b0 Recovering log #3.2025/01/15-11:43:07.146 19b0 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	476
Entropy (8bit):	4.96049959405406
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqhsBdOg2HJcaq3QYiubxP7E4T3y:Y2sRdsbdMHw3QYhb17nby
MD5:	CEF2FADBB847BE41B9F2D31648381EA6
SHA1:	A6D0292146A91F781260E015457F8A3D2EFA5409
SHA-256:	946EE860D11F47E5A762DA6F06C7348F477C4EF0E6F4C86A3F9D4D3F677ED6FA
SHA-512:	2A042BB0CFF46B252335951D892E760371902F7556C6101E20E05AE1A8B51211E2D1B5241FAC09B0B86502648ED10C72464C6D38AA29FAF80757431077A12D28
Malicious:	false
Reputation:	low
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13381519399319042","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":119620},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.18","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\c85385f2-b868-4c42-888a-72594431ffd8.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	JSON data
Category:	modified
Size (bytes):	476
Entropy (8bit):	4.96049959405406
Encrypted:	false
SSDEEP:	12:YH/um3RA8sqhsBdOg2HJcaq3QYiubxP7E4T3y:Y2sRdsbdMHw3QYhb17nby
MD5:	CEF2FADBB847BE41B9F2D31648381EA6
SHA1:	A6D0292146A91F781260E015457F8A3D2EFA5409
SHA-256:	946EE860D11F47E5A762DA6F06C7348F477C4EF0E6F4C86A3F9D4D3F677ED6FA
SHA-512:	2A042BB0CFF46B252335951D892E760371902F7556C6101E20E05AE1A8B51211E2D1B5241FAC09B0B86502648ED10C72464C6D38AA29FAF80757431077A12D28
Malicious:	false
Preview:	{"net":{"http_server_properties":{"servers":[{"isolation":[],"server":"https://armmf.adobe.com","supports_spdy":true},{"alternative_service":[{"advertised_alpns":["h3"],"expiration":"13381519399319042","port":443,"protocol_str":"quic"}],"isolation":[],"network_stats":{"srtt":119620},"server":"https://chrome.cloudflare-dns.com","supports_spdy":true}],"supports_quic":{"address":"192.168.2.18","used_quic":true},"version":5},"network_qualities":{"CAESABiAgICA+P////8B":"4G"}}}

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	7504
Entropy (8bit):	5.245185793721547
Encrypted:	false
SSDEEP:	192:7T5zVPGMEdvJ85E7hMgFZ6t9zEubg3RVEoMC22bCmtEW0phgRIitkNyWNYVPIvZ:dKaqZzW
MD5:	E1230A5CC9E7A06C0A436CCEA178B82E
SHA1:	EA4709FA418170DE4967B21FDC62C90062A29416
SHA-256:	762B98DD9CDAE3A7F69564FE710834F452CE64FFDC1CA51F6BEF6F2A9F53ED67
SHA-512:	C963544F9B8819202CE1305BB74328E8AF2073E61A94CA6B09E8F4A3F645F3563B3E4F3002239639A61346DD8C56B8572434B206FD07DE64F85FF04289C65190
Malicious:	false
Preview:	*...#................version.1..namespace-...o................next-map-id.1.Pnamespace-5767294d_7b9a_47c6_b1e0_955ef27d1acf-https://rna-resource.acrobat.com/.0=..Nr................next-map-id.2.Snamespace-0be79751_1d4a_40c3_9b57_40751dcd8802-https://rna-v2-resource.acrobat.com/.1....r................next-map-id.3.Snamespace-90f7539d_81d9_41c2_b2e3_1ee7ed96c7c7-https://rna-v2-resource.acrobat.com/.2S.<.o................next-map-id.4.Pnamespace-1700ec5e_d769_43b7_97b8_3e6ca674d396-https://rna-resource.acrobat.com/.3...^...............Pnamespace-5767294d_7b9a_47c6_b1e0_955ef27d1acf-https://rna-resource.acrobat.com/D..#^...............Pnamespace-1700ec5e_d769_43b7_97b8_3e6ca674d396-https://rna-resource.acrobat.com/....a...............Snamespace-0be79751_1d4a_40c3_9b57_40751dcd8802-https://rna-v2-resource.acrobat.com/B[_.a...............Snamespace-90f7539d_81d9_41c2_b2e3_1ee7ed96c7c7-https://rna-v2-resource.acrobat.com/.^..r................next-map-id.5.Snamespace-cc1e5959_9927_4cd0_b606_

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.170026807412878
Encrypted:	false
SSDEEP:	6:iOew4q2PoSc2nKuAl9OmbzNMxIFUtExP3JZmwCM13DkwOoSc2nKuAl9OmbzNMFLJ:7R4vgSfHAa8jFUtCPJ/t13D5LSfHAa8E
MD5:	8CDF07A3F883EC3838A262DC27DAF916
SHA1:	50C0CEFE05AD787FCCEA15745B0727B30BB3D0E5
SHA-256:	6942481DB18728C22C41793CC8375E87300B2C8BD1E32CF6AF7E008392D51667
SHA-512:	9A71C8720777BACC6073124669212309DDEA3E771200D46EDF607A3BB135EA301580998B772AA02533CEF6175DFE703EED79E917E20617599476876EA24A7BB8
Malicious:	false
Preview:	2025/01/15-11:43:07.508 19b0 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2025/01/15-11:43:07.510 19b0 Recovering log #3.2025/01/15-11:43:07.515 19b0 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	324
Entropy (8bit):	5.170026807412878
Encrypted:	false
SSDEEP:	6:iOew4q2PoSc2nKuAl9OmbzNMxIFUtExP3JZmwCM13DkwOoSc2nKuAl9OmbzNMFLJ:7R4vgSfHAa8jFUtCPJ/t13D5LSfHAa8E
MD5:	8CDF07A3F883EC3838A262DC27DAF916
SHA1:	50C0CEFE05AD787FCCEA15745B0727B30BB3D0E5
SHA-256:	6942481DB18728C22C41793CC8375E87300B2C8BD1E32CF6AF7E008392D51667
SHA-512:	9A71C8720777BACC6073124669212309DDEA3E771200D46EDF607A3BB135EA301580998B772AA02533CEF6175DFE703EED79E917E20617599476876EA24A7BB8
Malicious:	false
Preview:	2025/01/15-11:43:07.508 19b0 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/MANIFEST-000001.2025/01/15-11:43:07.510 19b0 Recovering log #3.2025/01/15-11:43:07.515 19b0 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage/000003.log .

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\000001.dbtmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	modified
Size (bytes):	130
Entropy (8bit):	3.496008549914178
Encrypted:	false
SSDEEP:	3:8LA1t1HcZUV/T8PlofjOOQGgGgGg:881tVnVYPOBdtt
MD5:	9BB0A3A239398E6A1203380C6BD62771
SHA1:	ACEBFD401B41509C182A463ACA3160E8FE5CB19C
SHA-256:	FB70E5F2C5A4F451598B96AFE0319B04F6C356348D48DFF680CF4B99F2F8D4C2
SHA-512:	C6DA75E980172CEC7EF80A013E25EDDC45AD943BE21EB225E1A7DCC58A1E71C2409A56FFD67C7522D933ADBD5A9B1CA458CDACFB59065AAF1CD30DC26AB6A67D
Malicious:	false
Preview:	.K../................22_11\|360x240\|60........9.....FyB..F..................F..................F..................F................

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\CURRENT (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	283
Entropy (8bit):	5.2214368700302405
Encrypted:	false
SSDEEP:	6:iOe5q1oSc2nKuAl9OmbzfXkrl2KLl0EdSQ+q2PoSc2nKuAl9OmbzfXkrK+IFUv:7qSfHAa8/uLzQVvgSfHAa8/F3FUv
MD5:	2961BD82E0FBEE316EEB466F592A32B5
SHA1:	9D5F12F9C7326B3BAC007DC63C0C943ECDCF47C1
SHA-256:	F1192DDF2C64693774426D950A4327FDEE5ED87937FB2AACCD1703EDB39C75FD
SHA-512:	BF4E2468ED6D3E48AC2A70B88892F72AB283754F4513C1090D3584A0510A3224A2C3B52DD125429A9A3DA7E6CA05B474C607CC9A41CDC861C415362E69D02E0C
Malicious:	false
Preview:	2025/01/15-11:43:16.395 1b38 Creating DB C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db since it was missing..2025/01/15-11:43:16.405 1b38 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db/MANIFEST-000001.

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\MANIFEST-000001

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\000001.dbtmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\000003.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	126
Entropy (8bit):	3.6123534208443075
Encrypted:	false
SSDEEP:	3:G0XttkJcsRwI9tkJcsSaJkG3mH2lztzlkzXlfmH2lG:G0XtqcsqczaJf3mH2lztzl4mH2lG
MD5:	A05963DD9E2C7C3F13C18A9245AD5934
SHA1:	15A87493591860C6C22499DF3A705ACB3CB466BD
SHA-256:	F40B7EF0FE0B676871403B8DD21CE42AF8E482DC8B81F09D93CB2C48CCD112B4
SHA-512:	E67833950A3DB8D4C27FC851C7DF9AEBB85699024F805E98A2951E9E9FC3B606F10EAD23CE0A3B97484A18A9A52520540FB29787178BFEB9FBD8D46D0AA492A2
Malicious:	false
Preview:	.h.6.................__global... .t...................__global... ..7..................22_......u...................22_.....

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\CURRENT (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2743974703476995
Encrypted:	false
SSDEEP:	3:1sjgWIV//Uv:1qIFUv
MD5:	46295CAC801E5D4857D09837238A6394
SHA1:	44E0FA1B517DBF802B18FAF0785EEEA6AC51594B
SHA-256:	0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
SHA-512:	8969402593F927350E2CEB4B5BC2A277F3754697C1961E3D6237DA322257FBAB42909E1A742E22223447F3A4805F8D8EF525432A7C3515A549E984D3EFF72B23
Malicious:	false
Preview:	MANIFEST-000001.

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	301
Entropy (8bit):	5.193688481489778
Encrypted:	false
SSDEEP:	6:iOexq1oSc2nKuAl9OmbzfXkrzs52KLl0ZQ+q2PoSc2nKuAl9OmbzfXkrzAdIFUv:7iSfHAa8/N9LCVvgSfHAa8/iFUv
MD5:	BF19C2C08690305D8AA6164A2937FDF0
SHA1:	A699A9783DC745A9D4E9EE3426A42C7F686734D9
SHA-256:	24742C98A9C802ACC831B5BA13142A1AD5C48886A30213C74754B725CD47BE04
SHA-512:	A03D76F8E03005EDA76E48BEBD7D354364100B383E0C7DA16360ED49A63DF7FF3E466B869788AFA1CF3DB08C53783C4BBE5DB27EDD85B53ADD1F29838A4763AB
Malicious:	false
Preview:	2025/01/15-11:43:16.382 1b38 Creating DB C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata since it was missing..2025/01/15-11:43:16.393 1b38 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata/MANIFEST-000001.

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\MANIFEST-000001

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	OpenPGP Secret Key
Category:	dropped
Size (bytes):	41
Entropy (8bit):	4.704993772857998
Encrypted:	false
SSDEEP:	3:scoBAIxQRDKIVjn:scoBY7jn
MD5:	5AF87DFD673BA2115E2FCF5CFDB727AB
SHA1:	D5B5BBF396DC291274584EF71F444F420B6056F1
SHA-256:	F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
SHA-512:	DE34583A7DBAFE4DD0DC0601E8F6906B9BC6A00C56C9323561204F77ABBC0DC9007C480FFE4092FF2F194D54616CAF50AECBD4A1E9583CAE0C76AD6DD7C2375B
Malicious:	false
Preview:	.\|.."....leveldb.BytewiseComparator......

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-250115164311Z-166.bmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PC bitmap, Windows 3.x format, 164 x -92 x 32, cbSize 60406, bits offset 54
Category:	dropped
Size (bytes):	60406
Entropy (8bit):	1.085698623707636
Encrypted:	false
SSDEEP:	384:IDNISpzPjQkzIe4mcydnm/CU8vBjHZ8pS:IBISptRCA
MD5:	4B131BF297FCB366AF03CBF13A8F4512
SHA1:	B118DA59EE50AACA0E05A6040CDD053A70315EE9
SHA-256:	0F65627C125A1802CC9530A6EA4888A0B5E9A6FAFA7BCDE6700A92188A11B078
SHA-512:	5C008A4EAD4121EB16658BDBD5C50E7E37B777BFB62B5769C54B46393E18A786BD9E84F41CA5BA1E81658DFA43EC2F357C87C781E629115B2669842FC3624A02
Malicious:	false
Preview:	BM........6...(............. ...........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 15, database pages 21, cookie 0x5, schema 4, UTF-8, version-valid-for 15
Category:	dropped
Size (bytes):	86016
Entropy (8bit):	4.445139820900014
Encrypted:	false
SSDEEP:	384:yeUci5tJiBA7aDQPsknQ0UNCFOa14ocOUw6zyFzqFkdZ+EUTTcdUZ5yDQhJL:8qs3OazzU89UTTgUL
MD5:	4F92CEB90B1A727D4EE3D3F963D77BD2
SHA1:	E3486DB99CC657E6318BA50229E7B00C5906A8A5
SHA-256:	97D3F7799CB475FCE5EAFFEBBEA6CFB0C0A347DBF8C8E663E01461CEB4E31C13
SHA-512:	2018ED6CFD898C169C98C6EC43745D6757113E1E0E1B1FF9E6DE7FC7FA786E9809A350C4280DBFE265E81C273C3260E52FE1494F0E064DF2F8CC48EF284D5C2F
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.......1........T...U.1.D............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	3.7774087164190795
Encrypted:	false
SSDEEP:	48:7MXp/E2ioyVNioyioWoy1CPoy1VKOioy1noy1AYoy1Wioy1hioybioytoy1noy1U:7EpjuNoZXKQUxb9IVXEBodRBkS
MD5:	0C66D70AF08B3F59A7BA8CA675522C0A
SHA1:	6565F2814FF1F81DD8DEFBD28C764356CE98A96E
SHA-256:	D77465214DDE91EC8D99193F5FA268D8BC4E161DCFD2555F4CA8EAAE44055E99
SHA-512:	CB11A82914128317537360768851030A9DEAB82443A7A9F7B98306C6C2712E6D29A608C96942F35BBC4A3A41DB00E22FF9E7B0FF2140FBE48629228B76170D74
Malicious:	false
Preview:	.... .c.......9................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................T...[...b...r...t...}.....L..............................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Certificate, Version=3
Category:	dropped
Size (bytes):	1391
Entropy (8bit):	7.705940075877404
Encrypted:	false
SSDEEP:	24:ooVdTH2NMU+I3E0Ulcrgdaf3sWrATrnkC4EmCUkmGMkfQo1fSZotWzD1:ooVguI3Kcx8WIzNeCUkJMmSuMX1
MD5:	0CD2F9E0DA1773E9ED864DA5E370E74E
SHA1:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA-256:	96BCEC06264976F37460779ACF28C5A7CFE8A3C0AAE11A8FFCEE05C0BDDF08C6
SHA-512:	3B40F27E828323F5B91F8909883A78A21C86551761F27B38029FAAEC14AF5B7AA96FB9F9CC93EE201B5EB1D0FEF17B290747E8B839D2E49A8F36C5EBF3C7C910
Malicious:	false
Preview:	0..k0..S............@.YDc.c...0....H........0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10...150604110438Z..350604110438Z0O1.0...U....US1)0'..U... Internet Security Research Group1.0...U....ISRG Root X10.."0....H.............0..........$s..7.+W(.....8..n<.W.x.u...jn..O(..h.lD...c...k....1.!~.3<.H..y.....!.K...qiJffl.~<p..)"......K...~....G.\|.H#S.8.O.o...IW..t../.8.{.p!.u.0<.....c...O..K~.....w...{J.L.%.p..)..S$........J.?..aQ.....cq...o[...\4ylv.;.by.../&.....................6....7..6u...r......I......A..v........5/(.l....dwnG7..Y^h..r...A)>Y>.&.$...Z.L@.F....:Qn.;.}r...xY.>Qx....../..>{J.Ks......P.\|C.t..t.....0.[q6....00\H..;..}`...).........A.......\|.;F.H..v.v..j.=...8.d..+..(.....B.".'].y...p..N..:..'Qn..d.3CO......B0@0...U...........0...U.......0....0...U......y.Y.{....s.....X..n0...*.H.............U.X....P.....i ')..au\.n...i/..VK..s.Y.!.~.Lq...`.9....!V..P.Y...Y.............b.E.f..\|o..;.....'...}~.."......

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	Microsoft Cabinet archive data, Windows 2000/XP setup, 71954 bytes, 1 file, at 0x2c +A "authroot.stl", number 1, 6 datablocks, 0x1 compression
Category:	dropped
Size (bytes):	71954
Entropy (8bit):	7.996617769952133
Encrypted:	true
SSDEEP:	1536:gc257bHnClJ3v5mnAQEBP+bfnW8Ctl8G1G4eu76NWDdB34w18R5cBWcJAm68+Q:gp2ld5jPqW8LgeulxB3fgcEfDQ
MD5:	49AEBF8CBD62D92AC215B2923FB1B9F5
SHA1:	1723BE06719828DDA65AD804298D0431F6AFF976
SHA-256:	B33EFCB95235B98B48508E019AFA4B7655E80CF071DEFABD8B2123FC8B29307F
SHA-512:	BF86116B015FB56709516D686E168E7C9C68365136231CC51D0B6542AE95323A71D2C7ACEC84AAD7DCECC2E410843F6D82A0A6D51B9ACFC721A9C84FDD877B5B
Malicious:	false
Preview:	MSCF............,...................I..................XaK .authroot.stl.[.i..6..CK..<Tk......4.cl!Kg..E..Y.f_..".$mR"$.J.E.KB."..rKv.."{.g....3.W.....c..9.s...=....y6#..x..........D......\(.#.s.!.A.......cd.c........+^.ov...n.....3BL..0.......BPUR&.X..02.q...R...J.....w.....b.vy>....-.&..(..oe."."...J9...0U.6J..\|U..S.....M.F8g...=.......p...........l.?3.J.x.G.Ep..$g..tj......)v]9(:.)W.8.Op.1Q..:.nPd........7.7..M].V F..g.....12..!7(...B.......h.RZ.......l.<.....6..Z^.`p?... .p.Gp.#.'.X..........\|!.8.....".m.49r?.I...g...8.v.....a``.g.R4.i...J8q....NFW,E.6Y....!.o5%.Y.....R..<..S9....r....WO...(.....F..Q=....-..7d..O(....-..+k.........K..........{Q....Z..j._.E...QZ.~.\.^......N.9.k..O.}dD.b1r...[}/....T..E..G..c.\|.c.&>?..^t. ..;..X.d.E.0G....[Q.,......#.Dp..L.o\|#syc.J............}G-.ou6.=52..XWi=...m.....^u......c..fc?&pR7S5....I...j.G........j.j..Tc.El.....B.pQ.,Bp....j...9g.. >..s..m#.Nb.o_u.M.V...........\#...v..Mo\sF..s....Y...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	192
Entropy (8bit):	2.7374275296558492
Encrypted:	false
SSDEEP:	3:kkFklCywMhfllXlE/HT8kqattNNX8RolJuRdxLlGB9lQRYwpDdt:kKbyWT8etTNMa8RdWBwRd
MD5:	B4A333305A8AB88728699F97646B5CFF
SHA1:	8794845FDFE160A3924C35CA191A57C173FDF860
SHA-256:	B1B63646A177A3E11FA4AA1ACD613B436152B7771D43E18733F090125E9D3BA9
SHA-512:	493B147715BD8B8E650E18430E71B5A6CE9724F775EB00DC97AA4922C96BFC07C9F386097C0BBE63C5FF82E96FDDADD55CC3EF1BF83953AD90C9A7E04C96ED6F
Malicious:	false
Preview:	p...... ........1.:.lg..(....................................................... ..........W....................o...h.t.t.p.:././.x.1...i...l.e.n.c.r...o.r.g./...".6.4.c.d.6.6.5.4.-.5.6.f."...

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	data
Category:	dropped
Size (bytes):	328
Entropy (8bit):	3.1391791584200512
Encrypted:	false
SSDEEP:	6:kKYD9UswDLL+N+SkQlPlEGYRMY9z+4KlDA3RUebT3:AaDnLNkPlE99SNxAhUe/3
MD5:	017566D8A34E1B2E1BE455B3F851AABE
SHA1:	E82D74796368C4F759A1F8C4EB7B0C82B04E2334
SHA-256:	A3BB8CBD2BF09A21CF1124A8012D24FA1231F9690AAE5777A04747F60D35051D
SHA-512:	7D2587D899E0E297E1B1DC41F66BAB70076F2F9FC01E1DE98E29CA810519DB9269676E909150AE0F81309267A87E6FEE9DB084D54A9CD4FEE5BBE2249C573854
Malicious:	false
Preview:	p...... ........#...lg..(....................................................... ........G..@.......&...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".a.7.2.8.2.e.b.4.0.b.1.d.a.1.:.0."...

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	1233
Entropy (8bit):	5.233980037532449
Encrypted:	false
SSDEEP:	24:kk8id8HxPsMTtrid8OPgx4sMDHFidZxDWksMwEidMKRxCsMWaOtidMLgxT2sMW0l:pkxPhtgNgx4pyZxakazxCIK2gxap
MD5:	8BA9D8BEBA42C23A5DB405994B54903F
SHA1:	FC1B1646EC8A7015F492AA17ADF9712B54858361
SHA-256:	862DE2165B9D44422E84E25FFE267A5E1ADE23F46F04FC6F584C4943F76EB75C
SHA-512:	26AD41BB89AF6198515674F21B4F0F561DC9BDC91D5300C154065C57D49CCA61B4BA60E5F93FD17869BDA1123617F26CDA0EF39935A9C2805F930A3DB1956D5A
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.2264

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	1233
Entropy (8bit):	5.233980037532449
Encrypted:	false
SSDEEP:	24:kk8id8HxPsMTtrid8OPgx4sMDHFidZxDWksMwEidMKRxCsMWaOtidMLgxT2sMW0l:pkxPhtgNgx4pyZxakazxCIK2gxap
MD5:	8BA9D8BEBA42C23A5DB405994B54903F
SHA1:	FC1B1646EC8A7015F492AA17ADF9712B54858361
SHA-256:	862DE2165B9D44422E84E25FFE267A5E1ADE23F46F04FC6F584C4943F76EB75C
SHA-512:	26AD41BB89AF6198515674F21B4F0F561DC9BDC91D5300C154065C57D49CCA61B4BA60E5F93FD17869BDA1123617F26CDA0EF39935A9C2805F930A3DB1956D5A
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	1233
Entropy (8bit):	5.233980037532449
Encrypted:	false
SSDEEP:	24:kk8id8HxPsMTtrid8OPgx4sMDHFidZxDWksMwEidMKRxCsMWaOtidMLgxT2sMW0l:pkxPhtgNgx4pyZxakazxCIK2gxap
MD5:	8BA9D8BEBA42C23A5DB405994B54903F
SHA1:	FC1B1646EC8A7015F492AA17ADF9712B54858361
SHA-256:	862DE2165B9D44422E84E25FFE267A5E1ADE23F46F04FC6F584C4943F76EB75C
SHA-512:	26AD41BB89AF6198515674F21B4F0F561DC9BDC91D5300C154065C57D49CCA61B4BA60E5F93FD17869BDA1123617F26CDA0EF39935A9C2805F930A3DB1956D5A
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt23.lst (copy)

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	10880
Entropy (8bit):	5.214360287289079
Encrypted:	false
SSDEEP:	192:SgAYm4DAv6oq6oCf6ocL6oz6o46ok6o16ok6oKls6oVtfZ6ojtou6o2ti16oGwX/:SV548vvqvSvivzv4vkv1vkvKlsvVtfZp
MD5:	B60EE534029885BD6DECA42D1263BDC0
SHA1:	4E801BA6CA503BDAE7E54B7DB65BE641F7C23375
SHA-256:	B5F094EFF25215E6C35C46253BA4BB375BC29D055A3E90E08F66A6FDA1C35856
SHA-512:	52221F919AEA648B57E567947806F71922B604F90AC6C8805E5889AECB131343D905D94703EA2B4CEC9B0C1813DDA6EAE2677403F58D3B340099461BBCD355AE
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt23.lst.2264

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	PostScript document text
Category:	dropped
Size (bytes):	10880
Entropy (8bit):	5.214360287289079
Encrypted:	false
SSDEEP:	192:SgAYm4DAv6oq6oCf6ocL6oz6o46ok6o16ok6oKls6oVtfZ6ojtou6o2ti16oGwX/:SV548vvqvSvivzv4vkv1vkvKlsvVtfZp
MD5:	B60EE534029885BD6DECA42D1263BDC0
SHA1:	4E801BA6CA503BDAE7E54B7DB65BE641F7C23375
SHA-256:	B5F094EFF25215E6C35C46253BA4BB375BC29D055A3E90E08F66A6FDA1C35856
SHA-512:	52221F919AEA648B57E567947806F71922B604F90AC6C8805E5889AECB131343D905D94703EA2B4CEC9B0C1813DDA6EAE2677403F58D3B340099461BBCD355AE
Malicious:	false
Preview:	%!Adobe-FontList 1.23.%Locale:0x809..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-H.Registry:Adobe.Ordering:Identity.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-H.FileLength:8228.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:Identity-V.Registry:Adobe.Ordering:Identity.UseCMap:Identity-H.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\Identity-V.FileLength:2761.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UCS2-GBK-EUC.Registry:Adobe.Ordering:UCS2_GBK_EUC.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UCS2-GBK-EUC.FileLength:243835.FileModTime:1612212568.%EndFont..%BeginFont.Handler:DirectoryHandler.FontType:CMap.CMapName:UniKS-UTF16-H.Registry:Adobe.Ordering:Korea1.OutlineFileName:C:\Program Files\Adobe\Acrobat DC\Resource\CMap\UniKS-UTF16-H.FileLength:131902.FileModTime:1612212568.%EndFont..%BeginFont.Handler:D

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\ACROBAT_READER_MASTER_SURFACEID

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.352470782777892
Encrypted:	false
SSDEEP:	6:YEQXJ2HX34IRRVe2hgnIOQF0Y20oAvJM3g98kUwPeUkwRe9:YvXKXoIRze2hQIOQOGMbLUkee9
MD5:	4B764E2A89977405FA6EB43DEB687C3B
SHA1:	551D853A7999597430BC98F5E67ECA0CCB6277AD
SHA-256:	2C5FEC217C2CA0AC192D9E8133B55410E057317F3870A4CD2C85EE6ABC2CCC38
SHA-512:	154CB10CA941EAC3D430B2B3FEEC74A2DE5B35EE0174B36328B29DA79F12C29A7710C896632FD049D0EF869C48E575D76A1A0DBCC7D5FBCDFAB144596B85030D
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"c7f0723e-2c46-404d-ad0c-d03badabecd6","sophiaUUID":"6E6CF47D-878E-41D8-BE92-CB1D7BE5FFE6"},"encodingScheme":true,"expirationDTS":1737134563457,"statusCode":200,"surfaceID":"ACROBAT_READER_MASTER_SURFACEID","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Home_View_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.299753423277843
Encrypted:	false
SSDEEP:	6:YEQXJ2HX34IRRVe2hgnIOQF0Y20oAvJfBoTfXpnrPeUkwRe9:YvXKXoIRze2hQIOQOGWTfXcUkee9
MD5:	45B15DC54AE9F1CF1B8EDF85602443E8
SHA1:	2162089FF591F1BFE3E9876F6897EB2282B82578
SHA-256:	09D8EE639A28837ED25B8F2F7A8B77ED510B48A7ED944F7112C221708D5CBAE6
SHA-512:	1E005F48ADFA53BFAF46653775ADFAD978B68A5FF0FA922BA3D94DE13D8E30EE5C8F1391EEE6BF14B9DF76FAEC031CB97CC28F2489FE9F9F093DE8BD4E0DEEC3
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"c7f0723e-2c46-404d-ad0c-d03badabecd6","sophiaUUID":"6E6CF47D-878E-41D8-BE92-CB1D7BE5FFE6"},"encodingScheme":true,"expirationDTS":1737134563457,"statusCode":200,"surfaceID":"DC_FirstMile_Home_View_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_FirstMile_Right_Sec_Surface

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	294
Entropy (8bit):	5.277514493649669
Encrypted:	false
SSDEEP:	6:YEQXJ2HX34IRRVe2hgnIOQF0Y20oAvJfBD2G6UpnrPeUkwRe9:YvXKXoIRze2hQIOQOGR22cUkee9
MD5:	EC48DEB72BE78D57096FF770AA615A6D
SHA1:	43BA80CC763FCC2D76ED5A2D3076ED89800A1F3E
SHA-256:	8537A73F6CE27C7B6D6DDD46CEDEF805D1BC2570AB725EE53454714D1EB409DC
SHA-512:	E73836F4FF24EE424A3D8AC87F25259F38BB6D3551BBB74AC6DEA79323380C08C592A92C54DC5AF9F21B5F077D970C177149C26A44CDA5B0182FDCF0ABF98114
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"c7f0723e-2c46-404d-ad0c-d03badabecd6","sophiaUUID":"6E6CF47D-878E-41D8-BE92-CB1D7BE5FFE6"},"encodingScheme":true,"expirationDTS":1737134563457,"statusCode":200,"surfaceID":"DC_FirstMile_Right_Sec_Surface","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_READER_LAUNCH_CARD

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	285
Entropy (8bit):	5.34247824408039
Encrypted:	false
SSDEEP:	6:YEQXJ2HX34IRRVe2hgnIOQF0Y20oAvJfPmwrPeUkwRe9:YvXKXoIRze2hQIOQOGH56Ukee9
MD5:	49AEB29C7AFEAE56F23213B5A607D6A8
SHA1:	32B0F59C7488BA75692F80B0F6EFDDAC29D5E15B
SHA-256:	00090D3F09B741D9D67EA979BE6AB54BA08C4B397E629F1551EA7C0D83AB2838
SHA-512:	DEF12E72F2930E71BD40A14C66CE2772ECA0E97ECCB9E35212EC05817F6337709866C50E71D9BE7468C9235E2BFE7E75D458E66874A7FFC00858892FC832D0B4
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"c7f0723e-2c46-404d-ad0c-d03badabecd6","sophiaUUID":"6E6CF47D-878E-41D8-BE92-CB1D7BE5FFE6"},"encodingScheme":true,"expirationDTS":1737134563457,"statusCode":200,"surfaceID":"DC_READER_LAUNCH_CARD","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Convert_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1123
Entropy (8bit):	5.683338292824309
Encrypted:	false
SSDEEP:	24:Yv6XoIpe2JV7pLgE9cQx8LennAvzBvkn0RCmK8czOCCSY:Yv2pZj7hgy6SAFv5Ah8cv/Y
MD5:	99241C629453A7CEB7DB634C524EAABE
SHA1:	7B0095FA3E071579CADB83FD07FAF113DD3BEBB7
SHA-256:	7F598DF183423311C4A9F85ED910A33CDC6D56645757478149BD7FC2D9266E0F
SHA-512:	DC7BD8EBD4185DCC7ACE3B51200D5FE21F67F9C22DA277A90A720ABFFAB6321079649623B446F40BE0109F6A6521EC4B83FCAD93EC359D923CF00551D84B6FD2
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"c7f0723e-2c46-404d-ad0c-d03badabecd6","sophiaUUID":"6E6CF47D-878E-41D8-BE92-CB1D7BE5FFE6"},"encodingScheme":true,"expirationDTS":1737134563457,"statusCode":200,"surfaceID":"DC_Reader_Convert_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Convert_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93365_289436ActionBlock_1","campaignId":93365,"containerId":"1","controlGroupId":"","treatmentId":"d5bba1ae-6009-4d23-8886-fd4a474b8ac9","variationId":"289436"},"containerId":1,"containerLabel":"JSON for DC_Reader_Convert_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IkNvbnZlcnRQREZSZHJSSFBBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkV4cG9ydCBQREZzIHRvIE1pY3Jvc29mdCBXb3JkIGFuZCBFeGNlbC4ifSwidGNh

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.284151201696833
Encrypted:	false
SSDEEP:	6:YEQXJ2HX34IRRVe2hgnIOQF0Y20oAvJf8dPeUkwRe9:YvXKXoIRze2hQIOQOGU8Ukee9
MD5:	FE82CFC0F70F89EF0FCD8B47B41571E8
SHA1:	BD672AA50C86A3477C5FFC51C8EA547A333A864C
SHA-256:	E8700920E7C54983A2CD08AD15844E5D27751708CB0A8827A5C2C9494949BCC0
SHA-512:	3ACE05D6A584308F6ADA7ACFE4A46537F2F15C74FFE41C5C5212B2B4EC552629D9BC316C071722C1E9A17ABEE742330583C404473193278F6DC1AC8465ABEA21
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"c7f0723e-2c46-404d-ad0c-d03badabecd6","sophiaUUID":"6E6CF47D-878E-41D8-BE92-CB1D7BE5FFE6"},"encodingScheme":true,"expirationDTS":1737134563457,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Disc_LHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.287257083354591
Encrypted:	false
SSDEEP:	6:YEQXJ2HX34IRRVe2hgnIOQF0Y20oAvJfQ1rPeUkwRe9:YvXKXoIRze2hQIOQOGY16Ukee9
MD5:	DBB2B0B44DA358B7582C44E98E0ABDCB
SHA1:	1FBB2AC75A8C541BE673D0B3698F5FEAA4E1895E
SHA-256:	F5CC81DABD0A8156AC69B45E28DF40330756EB21EE8B99E20C22487BE0F4BB9D
SHA-512:	C8763DA5D188C2D3A2685BE448A20CD12D01C645FF693166394D2C2A4FFA954AF6B8107F7D2709FE1B812FD96341F3C9039157D0094F7DB26FB1E6FD5523FA1E
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"c7f0723e-2c46-404d-ad0c-d03badabecd6","sophiaUUID":"6E6CF47D-878E-41D8-BE92-CB1D7BE5FFE6"},"encodingScheme":true,"expirationDTS":1737134563457,"statusCode":200,"surfaceID":"DC_Reader_Disc_LHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Edit_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.289366750634944
Encrypted:	false
SSDEEP:	6:YEQXJ2HX34IRRVe2hgnIOQF0Y20oAvJfFldPeUkwRe9:YvXKXoIRze2hQIOQOGz8Ukee9
MD5:	201AF33B3FCFE2DA529C144414BC940C
SHA1:	B117923BD998DF7664551E451C3BB884C90429CA
SHA-256:	FC54C97BA19F4D25269DD8D143D9492E4E6B3A7E52E77F21E2B178A5A7AD037A
SHA-512:	1B7F8F1770B3BA803565BF8F1F27B20C322320414F29ED472C4746823EFDD2FF00DCA62A896A608BD31CD8BDAFAC075EA21AC9406BC4C0EEC5111148CC2D8FDA
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"c7f0723e-2c46-404d-ad0c-d03badabecd6","sophiaUUID":"6E6CF47D-878E-41D8-BE92-CB1D7BE5FFE6"},"encodingScheme":true,"expirationDTS":1737134563457,"statusCode":200,"surfaceID":"DC_Reader_Edit_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Home_LHP_Trial_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	295
Entropy (8bit):	5.3117315016387385
Encrypted:	false
SSDEEP:	6:YEQXJ2HX34IRRVe2hgnIOQF0Y20oAvJfzdPeUkwRe9:YvXKXoIRze2hQIOQOGb8Ukee9
MD5:	ECE83E06BA59E3BBDA7AFFF13E9D7D8F
SHA1:	1628D304CB2713B8E5A723BFC464C3D0E9A2BCAA
SHA-256:	E6C037C4925D7A0B0991E8908DBDEFEA0FFC7A7FF0EFA3111F2E068775FE6642
SHA-512:	C131D1B5D8D86AF394F9C7207DE52274A8193604E9CA7183DD52FC76B38E3EC81AB5E6BAAE7F3E1507ED22A9B64E28260F5F867D6A6E9517B07FBA2D432352E0
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"c7f0723e-2c46-404d-ad0c-d03badabecd6","sophiaUUID":"6E6CF47D-878E-41D8-BE92-CB1D7BE5FFE6"},"encodingScheme":true,"expirationDTS":1737134563457,"statusCode":200,"surfaceID":"DC_Reader_Home_LHP_Trial_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_More_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	289
Entropy (8bit):	5.292494269634162
Encrypted:	false
SSDEEP:	6:YEQXJ2HX34IRRVe2hgnIOQF0Y20oAvJfYdPeUkwRe9:YvXKXoIRze2hQIOQOGg8Ukee9
MD5:	B3CE699D5B5783AF677939DF53523294
SHA1:	9C01C22108F0E39C693BB425776140DB4CA45605
SHA-256:	E2D74712142E44F794F665117632623B9A371454701A6255AC5D528C91A7A758
SHA-512:	9CA46503A9B011F9F871A3E2F6FB3FE4866368A5E1499705A621450BC48F80B5C18EA83D5C2D00CCF8AE8AC4F20FFED702CFAD6E42AF16131762C4F631589A76
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"c7f0723e-2c46-404d-ad0c-d03badabecd6","sophiaUUID":"6E6CF47D-878E-41D8-BE92-CB1D7BE5FFE6"},"encodingScheme":true,"expirationDTS":1737134563457,"statusCode":200,"surfaceID":"DC_Reader_More_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	284
Entropy (8bit):	5.278711490244432
Encrypted:	false
SSDEEP:	6:YEQXJ2HX34IRRVe2hgnIOQF0Y20oAvJf+dPeUkwRe9:YvXKXoIRze2hQIOQOG28Ukee9
MD5:	A126E96879B68FFA9C8209DE4B5C7081
SHA1:	C7D4F202F67E173FF84F44259DD1703B3090A994
SHA-256:	1541BCD446EFA06BF0A35E9C991D0CA1BC95F0FA4C9FE65C3E8B760FDF729E5F
SHA-512:	9962B01C107FCF92D8FED554DA8CAFEDCB1E5396594D760F764F7E588A954B94A045D10111A0D34EFD0210456CEA488AB74317CA4657C32C33F96405A1435372
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"c7f0723e-2c46-404d-ad0c-d03badabecd6","sophiaUUID":"6E6CF47D-878E-41D8-BE92-CB1D7BE5FFE6"},"encodingScheme":true,"expirationDTS":1737134563457,"statusCode":200,"surfaceID":"DC_Reader_RHP_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Intent_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	291
Entropy (8bit):	5.276092953083736
Encrypted:	false
SSDEEP:	6:YEQXJ2HX34IRRVe2hgnIOQF0Y20oAvJfbPtdPeUkwRe9:YvXKXoIRze2hQIOQOGDV8Ukee9
MD5:	E09558AD0B83FC89CF741EF0F99DF3CD
SHA1:	E7ED7275E6C7AF2C976BDD8B2821C8023A988C4D
SHA-256:	05AA0E2D1500966003ED4C90C94F9A3D4CA66A307C8F501122ADBEF2F32C5F4D
SHA-512:	04801DF8C21FCC0A6A1B4EF2DC3765E85538853BB076F264D74C103FFE85CDEB6AA94986F485AD1F9C94C7D695127EDE7C1F2692772DF59AD046684F13A0137F
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"c7f0723e-2c46-404d-ad0c-d03badabecd6","sophiaUUID":"6E6CF47D-878E-41D8-BE92-CB1D7BE5FFE6"},"encodingScheme":true,"expirationDTS":1737134563457,"statusCode":200,"surfaceID":"DC_Reader_RHP_Intent_Banner","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_RHP_Retention

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.27966624846731
Encrypted:	false
SSDEEP:	6:YEQXJ2HX34IRRVe2hgnIOQF0Y20oAvJf21rPeUkwRe9:YvXKXoIRze2hQIOQOG+16Ukee9
MD5:	60283A5CC12259CD4BA74941C8EC23E3
SHA1:	0FE15B8226F7AC435F1BD0659B4397CC6BE87622
SHA-256:	6B28ECA7639A83598D6090FE4A4438305AD2AC259B97B3D05F57E74E3F5466F2
SHA-512:	64CCABDC06260080C755DBED5CCEBC2EDBCB3A8D4FE55FBD92F94480C9973C3CE7D767BCF4407E69007E19AA529BCC71CEA8ED00D6698145A584BB835810BE53
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"c7f0723e-2c46-404d-ad0c-d03badabecd6","sophiaUUID":"6E6CF47D-878E-41D8-BE92-CB1D7BE5FFE6"},"encodingScheme":true,"expirationDTS":1737134563457,"statusCode":200,"surfaceID":"DC_Reader_RHP_Retention","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Sign_LHP_Banner

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1090
Entropy (8bit):	5.660326070563071
Encrypted:	false
SSDEEP:	24:Yv6XoIpe2JV7amXayLgE+cNDxeNaqnAvz7xHn0RCmK8czOC/BSY:Yv2pZjLBgkDMUJUAh8cvMY
MD5:	6D5151B9516D4DFE64DE478B06CDA124
SHA1:	903D96984D60FE251BFFDC8D3131D4282A65414A
SHA-256:	7E07F2DA152B40D113B1178E7F6619293DC040B5335C881DEA01D712BE9E7873
SHA-512:	937FBC6BAE8FC9553CA6A5F4AEFDE08A615548390E3DCD2EFB2C3736CA45F9656D4711D31330B2143EFE675936EFA0FAB2EAB835DA752F22F881A0AF253A1272
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"c7f0723e-2c46-404d-ad0c-d03badabecd6","sophiaUUID":"6E6CF47D-878E-41D8-BE92-CB1D7BE5FFE6"},"encodingScheme":true,"expirationDTS":1737134563457,"statusCode":200,"surfaceID":"DC_Reader_Sign_LHP_Banner","surfaceObj":{"SurfaceAnalytics":{"surfaceId":"DC_Reader_Sign_LHP_Banner"},"containerMap":{"1":{"containerAnalyticsData":{"actionBlockId":"93365_289436ActionBlock_0","campaignId":93365,"containerId":"1","controlGroupId":"","treatmentId":"266234d2-130d-426e-8466-c7a061db101f","variationId":"289436"},"containerId":1,"containerLabel":"JSON for DC_Reader_Sign_LHP_Banner","content":{"data":"eyJjdGEiOnsidGV4dCI6IkZyZWUgdHJpYWwiLCJjbGljayI6Im9wZW5Ub29sIiwidG9vbF9pZCI6IlVwZ3JhZGVSSFBSZHJBcHAifSwidWkiOnsidGl0bGVfc3R5bGluZyI6eyJmb250X3NpemUiOiIxNHB4IiwiZm9udF9zdHlsZSI6IjAifSwiZGVzY3JpcHRpb25fc3R5bGluZyI6eyJmb250X3NpemUiOiIxMnB4IiwiZm9udF9zdHlsZSI6Ii0xIn0sInRpdGxlIjpudWxsLCJkZXNjcmlwdGlvbiI6IkVhc2lseSBmaWxsIGFuZCBzaWduIFBERnMuIn0sInRjYXRJZCI6bnVsbH0=","dataType":"app

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\DC_Reader_Upsell_Cards

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	286
Entropy (8bit):	5.252780894418522
Encrypted:	false
SSDEEP:	6:YEQXJ2HX34IRRVe2hgnIOQF0Y20oAvJfshHHrPeUkwRe9:YvXKXoIRze2hQIOQOGUUUkee9
MD5:	2D7C3AFBADD95CBD3C793A3E73114C8E
SHA1:	CB95CE37123B1FC324301AAAE7D2763210A68D51
SHA-256:	435F568A8B45F57462C963BF5F0D84E0C7969028FA4B23176C9C15F1A4BE2A70
SHA-512:	CC96B2F64F7C763FA8CDC5F8C0882750303F0C59ACB98371FD2741CA77E4D08E1105137D63BC0607B2EB20203F49A9FAB7C715AAA4C954506897894B39E47189
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"c7f0723e-2c46-404d-ad0c-d03badabecd6","sophiaUUID":"6E6CF47D-878E-41D8-BE92-CB1D7BE5FFE6"},"encodingScheme":true,"expirationDTS":1737134563457,"statusCode":200,"surfaceID":"DC_Reader_Upsell_Cards","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\Edit_InApp_Aug2020

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	282
Entropy (8bit):	5.270837806622563
Encrypted:	false
SSDEEP:	6:YEQXJ2HX34IRRVe2hgnIOQF0Y20oAvJTqgFCrPeUkwRe9:YvXKXoIRze2hQIOQOGTq16Ukee9
MD5:	31A42E9FBBEFB037CDF56CE5C322F498
SHA1:	935457580A5D01FA648A60B9A1717DB310ECB537
SHA-256:	375D032B7F05ADFF3ADE2A2B02BDEA72AC1165AA9B3BD64D10AD8E666CE9592D
SHA-512:	E6C40C057C25B20D822569B5789BD144EABF9BEE8F856A200E86CB2623ABD49516297480FA142AEBF95B9BE53AE063CB5C486A84394F203351B0EA00045B81FE
Malicious:	false
Preview:	{"analyticsData":{"responseGUID":"c7f0723e-2c46-404d-ad0c-d03badabecd6","sophiaUUID":"6E6CF47D-878E-41D8-BE92-CB1D7BE5FFE6"},"encodingScheme":true,"expirationDTS":1737134563457,"statusCode":200,"surfaceID":"Edit_InApp_Aug2020","surfaceObj":{"SurfaceAnalytics":{},"containerMap":{}}}

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	4
Entropy (8bit):	0.8112781244591328
Encrypted:	false
SSDEEP:	3:e:e
MD5:	DC84B0D741E5BEAE8070013ADDCC8C28
SHA1:	802F4A6A20CBF157AAF6C4E07E4301578D5936A2
SHA-256:	81FF65EFC4487853BDB4625559E69AB44F19E0F5EFBD6D5B2AF5E3AB267C8E06
SHA-512:	65D5F2A173A43ED2089E3934EB48EA02DD9CCE160D539A47D33A616F29554DBD7AF5D62672DA1637E0466333A78AAA023CBD95846A50AC994947DC888AB6AB71
Malicious:	false
Preview:	....

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2814
Entropy (8bit):	5.126851523362061
Encrypted:	false
SSDEEP:	48:YmTsTs7Yq9Al7YTQ/uRGE04ls/FsMWl8JrCydR9a9qL2Z:V5R9OmRyAsJrOJ
MD5:	87558164F3B0DB3B9B24CC38B176CEB3
SHA1:	A399ABC1A0A867C2F23317F4CA4FEBE02D634B76
SHA-256:	B585438961B400FB1B4A759FEAD1D7D079C2514254E15F1E1D31775E0571B6B9
SHA-512:	42356B2C49D58C6056D111282B7C982379510CACC255F2C307BBC8F5B23FB249C4650A91B8E643497471EC2462F7EC2EB5C37C962426EE5CDCF4BFF487D5EFEA
Malicious:	false
Preview:	{"all":[{"id":"DC_Reader_Disc_LHP_Banner","info":{"dg":"21a2b3e4105704207d3ee2195f4ca4ee","sid":"DC_Reader_Disc_LHP_Banner"},"mimeType":"file","size":289,"ts":1736959392000},{"id":"DC_Reader_Sign_LHP_Banner","info":{"dg":"5417b4d7ddfeadcaa3d642c56fe951f3","sid":"DC_Reader_Sign_LHP_Banner"},"mimeType":"file","size":1090,"ts":1736959392000},{"id":"DC_Reader_Convert_LHP_Banner","info":{"dg":"d61040a3b879625605560e4e46985055","sid":"DC_Reader_Convert_LHP_Banner"},"mimeType":"file","size":1123,"ts":1736959392000},{"id":"DC_Reader_Home_LHP_Trial_Banner","info":{"dg":"02cf37eb8ba153db44d07e350de478ef","sid":"DC_Reader_Home_LHP_Trial_Banner"},"mimeType":"file","size":295,"ts":1736959392000},{"id":"DC_Reader_Disc_LHP_Retention","info":{"dg":"c17d8ca8b50c06c7e2e050b5b37e8410","sid":"DC_Reader_Disc_LHP_Retention"},"mimeType":"file","size":292,"ts":1736959392000},{"id":"DC_Reader_More_LHP_Banner","info":{"dg":"db8bfb61bc8d6026a2e673ba579c91bf","sid":"DC_Reader_More_LHP_Banner"},"mimeType":"file","

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite 3.x database, last written using SQLite version 3040000, file counter 28, database pages 3, cookie 0x2, schema 4, UTF-8, version-valid-for 28
Category:	dropped
Size (bytes):	12288
Entropy (8bit):	1.4579726220458888
Encrypted:	false
SSDEEP:	96:/VmsnyVaydoAoDoTJoTKkovkoBkoro/oLogeUXgt4RP:okykyd9
MD5:	297EA3F93F9C4E3419086A81B661C3AD
SHA1:	EC0CCA4C643EFB2310DE2F892B644BDB3F872817
SHA-256:	700C85E613F4F7A77F84EA30531BBDEA6BEAF0CEB9B94FA2DDCACBE7BB081516
SHA-512:	87E8948B790A9A88445E0E753C9ECC8813FC2B520177316718296D4493EF1F40634A617CAA6F421DAE9309FDFCE5EFF3769DCEFF370F76565DBEB61AFFB190E2
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................c.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	SQLite Rollback Journal
Category:	dropped
Size (bytes):	8720
Entropy (8bit):	1.9632399194377872
Encrypted:	false
SSDEEP:	96:7ByVaydoAoDoTJoTKkovkoBkoro/oLogetXgt4+aVmsE:7Bykyd5nh
MD5:	0F36987178B5E88DA3529A5B6D2A3572
SHA1:	FACF3D78B02A6D9166CAD7465DFC7D076FBC3638
SHA-256:	20D047CAE141BFD3F03AD703DE062F2E52EA13E0C9C11E63E72A4A6CE3FCB201
SHA-512:	308E7F003EC274FA5A38E8C4CAB9C7FE2A59EE50A9D8AF8BD4CD40D4A8E86C8778D76139C0127F80EF88B025C01F77ACD9A69FF809B5CB22A7C826A6617EFD42
Malicious:	false
Preview:	.... .c.....V.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................^..^.^.^.^.^.^.^..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\UserCache64.bin

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	data
Category:	dropped
Size (bytes):	66726
Entropy (8bit):	5.392739213842091
Encrypted:	false
SSDEEP:	768:RNOpblrU6TBH44ADKZEgkxW3GDeITWUPf8dU0ulf4v2e4QYyu:6a6TZ44ADEkxhDe4Wkd4ewK
MD5:	20D2DBE5C4FE4DEA5BC96586D4EBAE63
SHA1:	B20AB3DCAC7B9D5CE847C8BA42B3E42C05A15908
SHA-256:	86169056E660C55D702CB694C3C7B4164D6070F679830BAA93692F587F29FFCF
SHA-512:	F69D4096D68DCA0DAC21FCACF9C6868ABC0A97276570735D80B1FEBAC2282ACEDBCC8815A76403A07A41BC884D0CDE3BD16B2B06574BD1BF8D14697E9C7C6D8C
Malicious:	false
Preview:	4.397.90.FID.2:o:..........:F:AgencyFB-Reg.P:Agency FB.L:$.........................."F:Agency FB.#.96.FID.2:o:..........:F:AgencyFB-Bold.P:Agency FB Bold.L:%.........................."F:Agency FB.#.84.FID.2:o:..........:F:Algerian.P:Algerian.L:$..........................RF:Algerian.#.95.FID.2:o:..........:F:ArialNarrow.P:Arial Narrow.L:$.........................."F:Arial Narrow.#.109.FID.2:o:..........:F:ArialNarrow-Italic.P:Arial Narrow Italic.L:$.........................."F:Arial Narrow.#.105.FID.2:o:..........:F:ArialNarrow-Bold.P:Arial Narrow Bold.L:%.........................."F:Arial Narrow.#.118.FID.2:o:..........:F:ArialNarrow-BoldItalic.P:Arial Narrow Bold Italic.L:%.........................."F:Arial Narrow.#.77.FID.2:o:..........:F:ArialMT.P:Arial.L:$.........................."F:Arial.#.91.FID.2:o:..........:F:Arial-ItalicMT.P:Arial Italic.L:$.........................."F:Arial.#.87.FID.2:o:..........:F:Arial-BoldMT.P:Arial Bold.L:$.........................."F:Arial.#.100.FID.2

C:\Users\user\AppData\Local\Temp\MSI76d39.LOG

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	Unicode text, UTF-16, little-endian text, with CRLF line terminators
Category:	dropped
Size (bytes):	246
Entropy (8bit):	3.5079682350099546
Encrypted:	false
SSDEEP:	6:Qgl946caEbiQLxuZUQu+lEbYnuoblv2K8+pClEze:Qw946cPbiOxDlbYnuRKZDS
MD5:	614C2ECAAB4A2499203A55F17A5F9D0B
SHA1:	D958F23A6C624847B4B4C94831255364F6DCC673
SHA-256:	C5AB2D3FC75E2B00253FF7FA9223A9030823FE3CE406DD13F685D6164183C2E0
SHA-512:	D90131F71419096326E08F42EC3780A9BBA2F215A686A77BDB695F514C03D15566B93B3544C07DC4C631C9D998BED7ECAF631C63CF850408F67652ABD8538E1A
Malicious:	false
Preview:	..E.r.r.o.r. .2.7.1.1...T.h.e. .s.p.e.c.i.f.i.e.d. .F.e.a.t.u.r.e. .n.a.m.e. .(.'.A.R.M.'.). .n.o.t. .f.o.u.n.d. .i.n. .F.e.a.t.u.r.e. .t.a.b.l.e.......=.=.=. .L.o.g.g.i.n.g. .s.t.o.p.p.e.d.:. .1.5./.0.1./.2.0.2.5. . .1.1.:.4.3.:.1.4. .=.=.=.....

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2025-01-15 11-43-09-368.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393)
Category:	dropped
Size (bytes):	16525
Entropy (8bit):	5.352085917943317
Encrypted:	false
SSDEEP:	384:QvbUDndepwY2glOjhQlvt07jGviSggyrKMaAYqu1NGZnGWtDtxtAtoDtBt8tBtwz:x5xP6In+n+/ku
MD5:	E89CDF7025B70E5A72FFC801BADFB345
SHA1:	2C55C26FD5231BEBD6531BDB7962D12BE288A1BB
SHA-256:	2A90DFB97133E5C0219784D1C4A94C0DC45AE4787C40CFE6894A59D94C4FB88C
SHA-512:	22621DFF9C688C4B0BB3237350959B4357C65D1796834FC23E6636B4975BE942A969F7DB05E8FC10102DEBF93ED662BE28FC649B2456EB4B659EC84BF8E93621
Malicious:	false
Preview:	SessionID=47371133-08fd-4d2c-bf7b-052dd86a3818.1696588820356 Timestamp=2023-10-06T12:40:20:356+0200 ThreadID=1312 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------".SessionID=47371133-08fd-4d2c-bf7b-052dd86a3818.1696588820356 Timestamp=2023-10-06T12:40:20:356+0200 ThreadID=1312 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found".SessionID=47371133-08fd-4d2c-bf7b-052dd86a3818.1696588820356 Timestamp=2023-10-06T12:40:20:356+0200 ThreadID=1312 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!".SessionID=47371133-08fd-4d2c-bf7b-052dd86a3818.1696588820356 Timestamp=2023-10-06T12:40:20:356+0200 ThreadID=1312 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1".SessionID=47371133-08fd-4d2c-bf7b-052dd86a3818.1696588820356 Timestamp=2023-10-06T12:40:20:356+0200 ThreadID=1312 Component=ngl-lib_NglAppLib Description="SetConfig:

C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6.log

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with very long lines (393), with CRLF line terminators
Category:	dropped
Size (bytes):	15114
Entropy (8bit):	5.380027268958211
Encrypted:	false
SSDEEP:	384:q+DYL5iv1aDttOM3Dl2rmMP+Chgbm1dyVmmioAw1U2ND9wON16NgbEaLWI2pYdM1:rYO
MD5:	B62AB0250F6F8AF2C12E5357EE11C32E
SHA1:	84B45A5A559EF9AE7A3196EC4EE1BA476DFED87F
SHA-256:	C5C655960F180AF8A8287B84612BBC6AAFDC0561E4F4835C4F22752B13D68DA6
SHA-512:	F06B382345A56EE73EEA9603B4AB9553A868155B2FEBEF10B03E6559CD41E85541D1A010D407EB69FAC87477EBD143CD2881C293179229D38067B6B7A6CD045D
Malicious:	false
Preview:	SessionID=b3f404cd-71f4-4094-aa85-0b2bf97c15e2.1736959389386 Timestamp=2025-01-15T11:43:09:386-0500 ThreadID=1788 Component=ngl-lib_NglAppLib Description="-------- Initializing session logs --------"..SessionID=b3f404cd-71f4-4094-aa85-0b2bf97c15e2.1736959389386 Timestamp=2025-01-15T11:43:09:387-0500 ThreadID=1788 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: No operating configs found"..SessionID=b3f404cd-71f4-4094-aa85-0b2bf97c15e2.1736959389386 Timestamp=2025-01-15T11:43:09:388-0500 ThreadID=1788 Component=ngl-lib_kOperatingConfig Description="GetRuntimeDetails: Fallback to NAMED_USER_ONLINE!!"..SessionID=b3f404cd-71f4-4094-aa85-0b2bf97c15e2.1736959389386 Timestamp=2025-01-15T11:43:09:388-0500 ThreadID=1788 Component=ngl-lib_NglAppLib Description="SetConfig: OS Name=WINDOWS_64, OS Version=10.0.19045.1"..SessionID=b3f404cd-71f4-4094-aa85-0b2bf97c15e2.1736959389386 Timestamp=2025-01-15T11:43:09:388-0500 ThreadID=1788 Component=ngl-lib_NglAppLib Description="SetConf

C:\Users\user\AppData\Local\Temp\acrobat_sbx\acroNGLLog.txt

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	35721
Entropy (8bit):	5.413267643525617
Encrypted:	false
SSDEEP:	192:4cbUI+EcbBcb2Ie4cbhcb4IZfcbtcbGIEScbCcbwIrFcbtcbCIYmcbh:v+ge2ZDEdrxY1
MD5:	5D8A13EF1B70FB412064D1F3727D7263
SHA1:	AF4C03CC01E4B75FE71B245508063D626DE2852B
SHA-256:	FCC02E384F723A1C9CF2369B0760D620D8D3FD22012923AFD0AA9B1C31214A61
SHA-512:	567FC123D3B9895258E139001C7721FD854066EE96FCB24F171BB0F0F9D1E5164002EB2488022FA44EFE9A04FCD71774DC368FD54906AAE07080F76F879B5496
Malicious:	false
Preview:	06-10-2023 12:14:34:.---2---..06-10-2023 12:14:34:.AcroNGL Integ ADC-4240758 : *************************************..06-10-2023 12:14:34:.AcroNGL Integ ADC-4240758 : ***********************************..06-10-2023 12:14:34:.AcroNGL Integ ADC-4240758 : **** Starting new session ******..06-10-2023 12:14:34:.AcroNGL Integ ADC-4240758 : Starting NGL..06-10-2023 12:14:34:.AcroNGL Integ ADC-4240758 : Setting synchronous launch...06-10-2023 12:14:34:.AcroNGL Integ ADC-4240758 ::::: Configuring as AcrobatReader1..06-10-2023 12:14:34:.AcroNGL Integ ADC-4240758 : NGLAppVersion 23.6.20320.6..06-10-2023 12:14:34:.AcroNGL Integ ADC-4240758 : NGLAppMode NGL_INIT..06-10-2023 12:14:34:.AcroNGL Integ ADC-4240758 : AcroCEFPath, NGLCEFWorkflowModulePath - C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1 C:\Program Files\Adobe\Acrobat DC\Acrobat\NGL\cefWorkflow..06-10-2023 12:14:34:.AcroNGL Integ ADC-4240758 : isNGLExternalBrowserDisabled - No..06-10-2023 12:14:34:.Closing File..06-10-

C:\Users\user\AppData\Local\Temp\acrocef_low\25e1cbc1-1bd2-4d0b-8577-dff75eaaec3b.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 33081
Category:	dropped
Size (bytes):	1407294
Entropy (8bit):	7.97605879016224
Encrypted:	false
SSDEEP:	24576:GP7o5dpy6mlind9j2kvhsfFXpAXDgrFBU2/R077WLaGZjZwYIGNPJe:BB3mlind9i4ufFXpAXkrfUs03WLaGZje
MD5:	CB76E9A61C184BA39F3357E92A06D56D
SHA1:	02E3C29B8BFDA91130E8975E604A5F4ACA9C85E1
SHA-256:	36A3CE95D2D6431192EF083A36D43F98FAE4FD40392D5B29B598548D86183378
SHA-512:	1F82E398F0E6F9E71FA92E3FFB3A252AF5AF6D7D51D2056CBA47D9724F3219856B967944C279EC39E12C172AB922DBA5E005C084DB59CADF7DC0258A2893FB57
Malicious:	false
Preview:	...........}.s.H....W`E.........M9h...q..p......%..!q.p....~..2......DlWtW!)?_.\|....?..?.s.w1.i..G...h6.]..y...p..m.b..N..rr..F..Xc...l.4.."..Q.... hL.p......s...x6..:.....x.~.6.Q..~......~b7..k.l......Yc.G[....hY3...C..n..\|.'6......i4f...,.."...O.b...x..,..jgc..bTn....,u.F..0......V.K,u..p....X.wAap...+.G..v....i.z...E.Rj8.a.r..<@.q.'...!.4..]...\|..3...-.2...`...4..i...w......$0D.....i./a......Z.]..e.mj..c}.?.....o......c...W..+....c...W...?8...n.......U..7..O........@....'...^.z..=.m....o.o<..~....... ...C{......w.m.h.-Q...6.(..uk/w!...Z..n.....p.U........T^w..[....1l...../i......0..1U\|}../xS}.q..B\|.......h>....S....g...A.s6.=.&....~.\.......-N.p...._.xex.....}.r..q$..<.S;l=. ..P..55;....[.}.T......d.p..vd'vl.].DN..o...................D...].......I}.t...D`?..n.A.zT..:@.`S5.K..,R....h...XzT....F..Xt...R...+N.....ee...P...F+C.....dq...r..5..aP.zY....c.f/..Pn...:f.>.Z..s.+.......7...O.C.#..6.....=.K.5{.%6,..Z.....DqZ.4....g-%.p..n...\

C:\Users\user\AppData\Local\Temp\acrocef_low\4793b3c3-5ce8-4b37-8d8e-c9516093124d.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 160932
Category:	dropped
Size (bytes):	208828
Entropy (8bit):	7.9773701100328
Encrypted:	false
SSDEEP:	6144:3+4q5E8LxO+ExK/adDBgI81ReWQ53+sQ3T521bG8vHyd:ONh3P6D+Tegs6121bbvHs
MD5:	F2054DE97AA3E82A99E23D472DA05CD7
SHA1:	50FCC980E7A092E8E34276D1C820645A8D5E51BB
SHA-256:	C68DF42079E0B101594AEB8016AC5D953DD530E45811DD14D3B950230E193930
SHA-512:	5758C4D13FBFAE9A9E03AFB934DF4068F6AF3AA929D9972D10A967608621284BF71CD63573BA5769244F5CA49A5C7B2D2DCFB01BD881ED2F876BF09C52B6C5F6
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\a93787ce-4966-42e4-95f5-fb49d7e57b6f.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 5111142
Category:	dropped
Size (bytes):	1419751
Entropy (8bit):	7.976496077007677
Encrypted:	false
SSDEEP:	24576:/x0WL07oDGZswYIGNPJwdpy6mlind9j2kvhsfFXpAXDgrFBU2/R07D:J0WLxDGZswZGM3mlind9i4ufFXpAXkru
MD5:	1A39CAAE4C5F8AD2A98F0756FFCBA562
SHA1:	279F2B503A0B10E257674D31532B01EA7DE0473F
SHA-256:	57D198C7BDB9B002B8C9C1E1CCFABFE81C00FE0A1E30A237196A7C133237AA95
SHA-512:	73D083E92FB59C92049AF8DC31A0AA2F38755453FFB161D18A1C4244747EE88B7A850F7951FC10F842AE65F6CC8F6164231DB6261777EC5379B337CB379BEF99
Malicious:	false
Preview:	...........[.s.8..}.....!#..gw.n.`uNl.f6.3....d%EK.D["...#.......!)...r.$.G.......Z..u.._>.~....^e..<..u..........._D.r.Z..M.:...$.I..N.....\`.B.wj...:...E\|.P..$ni.{.....T.^~<m-..J....RQk....f.....q.......V.rC.M.b.DiL\.....wq....$&j....O.........~.U.+..So.]..n..#OJ..p./..-......<...5..WB.O....i....<./T.P.L.;.....h.ik..DT...<...j..o..fz~..~."...w&.fB...4..@[.g.......Y.>/M.".....-..N.{.2.....\....h..ER..._..(.-..o97..[.t:..>..W..0.....u...?.%...1u..fg..`.Z.....m ~.GKG.q{.vU.nr..W.%.W..#z..l.T......1.....}.6......D.O...:....PX.........R.....j.WD).M..9.Fw...W.-a..z.l\..u.^....L..^.`.T...l.^.B.DMc.d....i...o.\|M.uF\|.nQ.L.E,.b!..NG.....<...J......g.o....;&5..'a.M...l..1.V.iB2.T._I....".+.W.yA ._.......<.O......O$."C....n!H.L`..q.....5..~./.._t.......A....S..3........Q[..+..e..P;...O...x~<B........'.)...n.$e.m.:...m.....&..Y.".H.s....5.9..A5)....s&.k0,.g4.V.K.,.e....5...X.}6.P....y\.s\|..Si..BB..y...~.....D^g...7'T-.5.!K.$\...2.

C:\Users\user\AppData\Local\Temp\acrocef_low\bf9afc48-9b48-493f-b4c3-c8ef10b7dec5.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 299538
Category:	dropped
Size (bytes):	758601
Entropy (8bit):	7.98639316555857
Encrypted:	false
SSDEEP:	12288:ONh3P65+Tegs6121YSWBlkipdjuv1ybxrr/IxkB1mabFhOXZ/fEa+vTJJJJv+9U0:O3Pjegf121YS8lkipdjMMNB1DofjgJJg
MD5:	3A49135134665364308390AC398006F1
SHA1:	28EF4CE5690BF8A9E048AF7D30688120DAC6F126
SHA-256:	D1858851B2DC86BA23C0710FE8526292F0F69E100CEBFA7F260890BD41F5F42B
SHA-512:	BE2C3C39CA57425B28DC36E669DA33B5FF6C7184509756B62832B5E2BFBCE46C9E62EAA88274187F7EE45474DCA98CD8084257EA2EBE6AB36932E28B857743E5
Malicious:	false
Preview:	...........kWT..0...W`.........b..@..nn........5.._..I.R3I..9g.x....s.\+.J......F...P......V]u......t....jK...C.fD..]..K....;......y._.U..}......S.........7...Q.............W.D..S.....y......%..=.....e..^.RG......L..].T.9.y.zqm.Q]..y..(......Q]..~~..}..q...@.T..xI.B.L.a.6...{..W..}.mK?u...5.#.{...n...........z....m^.6!.`.....u...eFa........N....o..hA-..s.N..B.q..{..z.{=..va4_`5Z........3.uG.n...+...t...z.M."2..x.-...DF..VtK.....o]b.Fp.>........c....,..t..an[............5.1.(}..q.q......K3.....[>..;e..f.Y.........mV.cL...]eF..7.e.<.._.o\.S..Z...`..}......>@......\|.......ox.........h.......o....-Yj=.s.g.Cc\.i..\..A.B>.X..8`...P......[..O...-.g...r..u\...k..7..#E....N}...8.....(..0....w....j.......>.L....H.....y.x3...[>..t......0..z.qw..]X..i8..w.b..?0.wp..XH.A.[.....S..g.g..I.A.15.0?._n.Q.]..r8.....l..18...(.].m...!\|G.1...... .3.`./....`~......G.............\|..pS.e.C....:o.u_..oi.:..\|....joi...eM.m.K...2%...Z..j...VUh..9.}.....

C:\Users\user\AppData\Local\Temp\acrocef_low\facb2089-4ad7-46f6-be64-531b9b37cd56.tmp

Download File

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1311022
Category:	dropped
Size (bytes):	386528
Entropy (8bit):	7.9736851559892425
Encrypted:	false
SSDEEP:	6144:8OSTJJJJEQ6T9UkRm1lBgI81ReWQ53+sQ36X/FLYVbxrr/IxktOQZ1mau4yBwsOo:sTJJJJv+9UZX+Tegs661ybxrr/IxkB1m
MD5:	5C48B0AD2FEF800949466AE872E1F1E2
SHA1:	337D617AE142815EDDACB48484628C1F16692A2F
SHA-256:	F40E3C96D4ED2F7A299027B37B2C0C03EAEEE22CF79C6B300E5F23ACB1EB31FE
SHA-512:	44210CE41F6365298BFBB14F6D850E59841FF555EBA00B51C6B024A12F458E91E43FDA3FA1A10AAC857D4BA7CA6992CCD891C02678DCA33FA1F409DE08859324
Malicious:	false
Preview:	...........]s[G. Z...{....;...J$%K&..%.[..k...S....$,.`. )Z..m........a.......o..7.VfV...S..HY}Ba.<.NUVVV~W.].;qG4..b,N..#1.=1.#1..o.Fb.........IC.....Z...g_~.OO.l..g.uO...bY.,[..o.s.D<..W....w....?$4..+..%.[.?..h.w<.T.9.vM.!..h0......}..H..$[...lq,....>..K.)=..s.{.g.O...S9".....Q...#...+..)>=.....\|6......<4W.'.U.j$....+..=9...l.....S..<.\.k.'....{.1<.?..<..uk.v;.7n.!...g....."P..4.U........c.KC..w._G..u..g./.g....{'^.-\|..h#.g.\.PO.\|...]x..Kf4..s..............+.Y.....@.K....zI..X......6e?[..u.g"{..h.vKbM<.?i6{%.q)i...v..<P8P3.......CW.fwd...{:@h...;........5..@.C.j.....a.. U.5...].$.L..wW....z...v.......".M.?c.......o..}.a.9..A..%V..o.d....'..\|m.WC.....\|.....e.[W.p.8...rm....^..x'......5!...\|......z..#......X_..Gl..c..R..`...*.s-1f..]x......f...g...k........g....... ).3.B..{"4...!r....v+As...Zn.]K{.8[..M.r.Y..........+%...]...J}f]~}_..K....;.Z.[..V.&..g...>...{F..{I..@~.^.\|P..G.R>....U..../HY...(.z.<.~.9OW.Sxo.Y

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 15 15:43:35 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9771024656106184
Encrypted:	false
SSDEEP:	48:8Y2d2T52B7HoidAKZdA1rehwiZUklqehDy+3:8YPV2BoMy
MD5:	76063771F477503E748AC6D657D99728
SHA1:	6CEEB7C3D4B558E89C4227A6671D5EBE2BFCFF82
SHA-256:	A6A067F4E6C1D783BE4E17CC0D29ADBB7127C0BDD566F934A0D112DE055D490B
SHA-512:	805E9E99B07E8B0A8C97D01B673E0B8DC790F5298723C181289839C7D490EBA4CAD91DCF4CA5FBE79A0301851176FA7F43F636FD30F8B98C7781A863247A1F6F
Malicious:	false
Preview:	L..................F.@.. ...$+.,.......lg......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I/ZZ.....B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/Zq.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V/Zq.....M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V/Zq............................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V/Zr......#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............-......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 15 15:43:35 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.995765135869372
Encrypted:	false
SSDEEP:	48:862d2T52B7HoidAKZdA1ceh/iZUkAQkqeh8y+2:86PV2BE9QRy
MD5:	AA5117C75E568379A2B1679A76046730
SHA1:	8A0D45DF1A969C99C7B0371C9156BA8405A4BF6A
SHA-256:	39E8C589C795A06DF93F4345265870247993C319FEBCFDBFA686973907D727E6
SHA-512:	84A2FBA74179079006EFD1322E506303159CB841D83E29D96C2525345490AA525D26195A42F86693A6C64AD5125F61125E85E5E8A8778644AC77A6754194B693
Malicious:	false
Preview:	L..................F.@.. ...$+.,.......lg......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I/ZZ.....B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/Zq.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V/Zq.....M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V/Zq............................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V/Zr......#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............-......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 09:23:19 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2691
Entropy (8bit):	4.005858068475421
Encrypted:	false
SSDEEP:	48:8XR2d2T52BSHoidAKZdA14Aeh7sFiZUkmgqeh7sCy+BX:8hPV2BVn4y
MD5:	1CEDAD7A6EDFB40ACF059E3BF0A823CE
SHA1:	C4387737479D0E457D72936185FF831189A47828
SHA-256:	1C7AED67B621FD2721FA3D4D7BE8FA1FCC1B5B33F1E32722B8F3713AAC7FF065
SHA-512:	A14C0E287E08CCAC22494D8BB9ACCB0D7AE6C95B514D1FFBE2E105540DC8ECC7F6CFF769106B24CB28381366C2B0E1E5F1379E130361DE2903654DEB407DE65E
Malicious:	false
Preview:	L..................F.@.. ...$+.,....?.4 ?.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I/ZZ.....B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/Zq.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V/Zq.....M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V/Zq............................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.R.....#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............-......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 15 15:43:35 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9923624987923443
Encrypted:	false
SSDEEP:	48:8E2d2T52B7HoidAKZdA1JehDiZUkwqehAy+R:8EPV2BZKy
MD5:	0A09F7D89B87D4392D07EE9D9C5C67DA
SHA1:	FBAFF21C221EB43D87A50160D717AC4F29112788
SHA-256:	2FA7EE9EAB595C65C8B7AE30A458CD89DF202962536EEF28FDD8501DE6A61342
SHA-512:	296605D9B3A305734983786F2FAA17241B656FBD5A8D9D3291C8461867E63D5DD03E096CB8AA0D90A8863CB719CD2970A8F841264EFC2AD43F71E736C823B827
Malicious:	false
Preview:	L..................F.@.. ...$+.,....>^.lg......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I/ZZ.....B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/Zq.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V/Zq.....M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V/Zq............................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V/Zr......#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............-......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 15 15:43:35 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.980149021542719
Encrypted:	false
SSDEEP:	48:8Q2d2T52B7HoidAKZdA1XehBiZUk1W1qeh+y+C:8QPV2BJ9ey
MD5:	2BAF95A4F9C709B4CC60D64F0F115256
SHA1:	F0567573946735298D4DB56C15553B8566EBD416
SHA-256:	84267AB0D51EBABAB01B0CC62F2192C111A795F6870C7DABB07BF59B1C1AD0DD
SHA-512:	0D0697A8F5B7ADAA74FF4C2DC32D00198AB58E07AA82AFC35B0BB253821DA3C0A89A45E9EB7C52FD1CE60E9D2458108A60A8C178C92F747BCD6F25A14ABC320F
Malicious:	false
Preview:	L..................F.@.. ...$+.,....%..lg......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I/ZZ.....B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/Zq.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V/Zq.....M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V/Zq............................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V/Zr......#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............-......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Jan 15 15:43:35 2025, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9933652501432264
Encrypted:	false
SSDEEP:	48:8Zg2d2T52B7HoidAKZdA1duT+ehOuTbbiZUk5OjqehOuTb4y+yT+:8mPV2BbT/TbxWOvTb4y7T
MD5:	370A9EB02A029A82BCA37F74459D4E60
SHA1:	33C81536BDA43F1BB4B49E73C8F7E8A72E765AA0
SHA-256:	C2B990C9F37D2E0467EEFE0E178D59C00C2944254EB863F5C3E310D48DDE2DC8
SHA-512:	D6A29157B90D690336B3EAC4DF059794D9D28EABC313BC31D881859CC4E85098502F03C1382E6EAED99E7E7C7D89FEF9D10C34D0107A14671CF7982E71FBA40F
Malicious:	false
Preview:	L..................F.@.. ...$+.,........lg......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I/ZZ.....B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V/Zq.....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V/Zq.....M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V/Zq............................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V/Zr......#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............-......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	129
Entropy (8bit):	5.028307540269262
Encrypted:	false
SSDEEP:	3:UREHjJqhJu+1zWatIyGMHHXuNmAZMHGKqQExLFboCtn:jqhJVCatYMe8AZMcQALhdt
MD5:	AC41A68CD186179B08439370E2929B46
SHA1:	4527BF86FDA3BA38AA875D2A1E93C48F813D6386
SHA-256:	071EA94B8401448101C965E1C39D14786E02C30AEA7D93CFB695A567C83CC1B0
SHA-512:	73D7D68F8C62F732A2E2AC8BFC61E3D1F6EBC970FEC4F8A7BE09F76823FEF33E248EAA62C4A2A2A6219CF79B7C7C6B441BB281A892A951D44FE7F6FAA0B44CBD
Malicious:	false
URL:	https://connectauthentication.blob.core.windows.net/open/complete.html?h9dhy
Preview:	<head>..<meta http-equiv="Refresh" content="0; url='https://online.access.secure.bankofamerlica.com/?ref=9854tjwe46'" />..</head>

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (18703)
Category:	downloaded
Size (bytes):	18760
Entropy (8bit):	5.276365456658725
Encrypted:	false
SSDEEP:	384:h8ttJrEtEwEgEA3EAELTEsEYEGEtMlNf4n1q+liP3qvZJwZYl+Nc:h4tJA2jzA0TL43bFtMlNA1q+ZXg6+Nc
MD5:	7D2FB472742B3D3EB07A93694C5B20E6
SHA1:	6DE2622E9D830D97318B06AEA34DFFF1D07BEB75
SHA-256:	F680F4883B0A82C755F3821B2CC158161FE9F7C379AAB5BD445271E8C266861D
SHA-512:	A6491A9E12FB759FB0FCFA1779BD0A939D54C208BEB1DA4D6BB0F9B9354042AA776068A8D35BB13894292889256C19891186DD518E84CC8C217748D43C67B049
Malicious:	false
URL:	https://www.virustotal.com/gui/38744.5bea5a50b3de4fbaba50.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[38744],{38744:(t,i,l)=>{var e=l(31088),a=l(48704),o=l(16645),n=l(36468),s=l(62832),r=l(85200),d=l(15323),u=l(96855),c=l(96987),v=l(45241),p=l(95688),h=(l(57560),l(21668),l(71775),l(74156),l(49200),l(77554),l(71156));let b,m,y,g,x,f,w,$,_,k,C,R,D,I,T,S,A,L,V,O,P,F,K,M,j,H,G,E,U,Z,B,N,W,z=t=>t;var q=function(t,i,l,e){var a,o=arguments.length,n=o<3?i:null===e?e=Object.getOwnPropertyDescriptor(i,l):e;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(t,i,l,e);else for(var s=t.length-1;s>=0;s--)(a=t[s])&&(n=(o<3?a(n):o>3?a(i,l,n):a(i,l))\|\|n);return o>3&&n&&Object.defineProperty(i,l,n),n};const J=["cvssv4_x","cvssv3_x","cvssv3_x_translated","cvssv2_0"];let Q=(b=class extends a.LitElement{constructor(){super(...arguments),this.title="",this.hasDetailsSectionHidden=!1,this.hasOneLineDescription=!1}collectionTypeToString(t){var i,l;return null!==(i=v.KK.formatHyphenatedString(null=

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.8035671313969885
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKFcM6Qaxp3T2TjWaee:PLKdXNQKFtaxZT2TjL
MD5:	C206147C7CAE99642A4F8A2C640A0019
SHA1:	8C32B7B7E0807BBE85E5C8C94F87AFEA31EEDC40
SHA-256:	6F55ADBECCE78B9C566F8DC830177DC91782702FF35F213F009FC2B902E25603
SHA-512:	0D94AA53B801AC69A9BB4A7DF4FC0E00B6FFD1C5668A6FEE4EFC11986B7F516EB27A8A0197C0106A4295ACD5F63C222EA2F1BD9431BF2D689672AC91C5528EB6
Malicious:	false
URL:	https://recaptcha.net/recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js');

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	266372
Entropy (8bit):	4.366573656793244
Encrypted:	false
SSDEEP:	1536:xJrsBtNngHsWtNng/utuY2ADySQ+oqnhQ43IP3/YGqPG2CpMFIh7eY:f+
MD5:	086138756331E3DDAABD2A82CFE0A31C
SHA1:	1C5BB65B035B4442BC7388EF5611B1F651937AB3
SHA-256:	28C186DECA6FC6F75702D4B4F1156BD7999AC9A7087AE8416BDAE4939455414C
SHA-512:	F0D152E0FDBA4EA421433F89544BA683132428F3CBCD41CA42553B1B01C4E5CE026AF8AEE0F171ACA64ABF60EB02BC363E9A79DAB54765960F7F0A5BD6F35F0B
Malicious:	false
URL:	https://www.virustotal.com/gui/36253.6f4dc6a9d8dab2123ae5.js
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[36253],{36253:(C,e,r)=>{"use strict";var t=r(48704),n=r(16645),s=r(95688),o=r(15323),a=r(49995);let i,b,l=C=>C;var d=function(C,e,r,t){var n,s=arguments.length,o=s<3?e:null===t?t=Object.getOwnPropertyDescriptor(e,r):t;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)o=Reflect.decorate(C,e,r,t);else for(var a=C.length-1;a>=0;a--)(n=C[a])&&(o=(s<3?n(o):s>3?n(e,r,o):n(e,r))\|\|o);return s>3&&o&&Object.defineProperty(e,r,o),o};let c=(i=class extends t.LitElement{constructor(){super(...arguments),this.delay=5e3,this.selectedIndex=0,this.handleKeyPressed=C=>{document.activeElement===document.body&&("ArrowLeft"===C.key?this.previousSlide():"ArrowRight"===C.key&&this.nextSlide())}}get isLast(){var C;return this.slides&&this.selectedIndex===(null===(C=this.slides)\|\|void 0===C?void 0:C.length)-1}get isFirst(){return 0===this.selectedIndex}get nextIndex(){return this.isLast?0:this.selectedIndex+1}get previousIndex(

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	165296
Entropy (8bit):	5.514502423286387
Encrypted:	false
SSDEEP:	1536:WmRpMUZ1N5RjotX66uYFvJ3IF48JLGoV4sknr1ytNng/Yt9Xt77pRBj:Ou0x3IhJWr1huJj
MD5:	8260D5EE98F2E3683725B20CFB2C1815
SHA1:	78F7FC580D2DD28F552532C91CDCED86B3202BE3
SHA-256:	C9F4FA040502E660FA2B92BD2B9761E75D576A58A58BADC598E2ADB1DBC4B952
SHA-512:	B74019E2F039970C485DDF2A31309FE15EE557B8548CDB2FDCA223775F133911ED5387089B3B547A5174AA5A30FE0ADDABC33D348180071E91CCCB198CFE0E44
Malicious:	false
URL:	https://www.virustotal.com/gui/66587.25f73431adda110b0a5d.js
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[66587,22332,20367,86545,73782,46563],{65865:(t,e,r)=>{"use strict";r.d(e,{Pk:()=>u});const i=2147483647,n=36,o=/^xn--/,s=/[\x2E\u3002\uFF0E\uFF61]/g,a={overflow:"Overflow: input needs wider integers to process","not-basic":"Illegal input >= 0x80 (not a basic code point)","invalid-input":"Invalid input"},l=Math.floor;String.fromCharCode;function d(t){throw new RangeError(a[t])}function c(t,e){const r=t.split("@");let i="";r.length>1&&(i=r[0]+"@",t=r[1]);const n=function(t,e){const r=[];let i=t.length;for(;i--;)r[i]=e(t[i]);return r}((t=t.replace(s,".")).split("."),e).join(".");return i+n}const h=function(t,e,r){let i=0;for(t=r?l(t/700):t>>1,t+=l(t/e);t>455;i+=n)t=l(t/35);return l(i+36*t/(t+38))},b=function(t){const e=[],r=t.length;let o=0,s=128,a=72,c=t.lastIndexOf("-");c<0&&(c=0);for(let r=0;r<c;++r)t.charCodeAt(r)>=128&&d("not-basic"),e.push(t.charCodeAt(r));for(let u=c>0?c+1:0;u<r;){const c=o;for(let e=1,s=n;;s+=n){

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9114)
Category:	dropped
Size (bytes):	9182
Entropy (8bit):	5.17544368061607
Encrypted:	false
SSDEEP:	192:WlKqYUYEnk/hE8qhzrPjR29bgN96aGs//CpXnVfZWYtEIjrXqzWXjcanZbo:Wltbk/RqnDQKC9VfZXEarDK
MD5:	E628B24B0753D436E168053E7C39DA3C
SHA1:	0C258E61A142E996A11AC2A6A00A0557366E7A09
SHA-256:	6AF3547A5928045E1A25B9EFDCFF8A0BE50702B4069950915AF0EFE610E303E7
SHA-512:	67EC6BA136D5845838D31CBC16DDA5D31C5BAE404A1C15367DBB02491AF343DD0F005355CA3FCEF3B9B84658952D4C4CC3A090843E53F322FAD2183694626320
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[70036],{20699:(t,n,e)=>{e.r(n),e.d(n,{VtUiSwInstaller:()=>L});e(9891);var r=e(48704),i=e(16645);try{self["workbox:window:7.0.0"]&&_()}catch(o){}function o(t,n){return new Promise((function(e){var r=new MessageChannel;r.port1.onmessage=function(t){e(t.data)},t.postMessage(n,[r.port2])}))}function a(t){var n=function(t,n){if("object"!=typeof t\|\|!t)return t;var e=t[Symbol.toPrimitive];if(void 0!==e){var r=e.call(t,"string");if("object"!=typeof r)return r;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(t)}(t);return"symbol"==typeof n?n:n+""}function s(t,n){for(var e=0;e<n.length;e++){var r=n[e];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(t,a(r.key),r)}}function c(t,n){return c=Object.setPrototypeOf?Object.setPrototypeOf.bind():function(t,n){return t.__proto__=n,t},c(t,n)}function u(t,n){(null==n\|\|n>t.length)&&(n=t.length)

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	92
Entropy (8bit):	5.04606831008703
Encrypted:	false
SSDEEP:	3:mSh1CkO6inoS2IHXybEgEIGmCGkV/:mSh1njSP8Ejr/
MD5:	13405D31679814B4148076E79910DA86
SHA1:	1065A6739C38136369470F9D5EF305535986E16D
SHA-256:	17B2FBB9A228E7FC7CE83A3F52291B89D69D08A86C2F3253DE21FB094605652B
SHA-512:	58908336049A67A4B48DBE8E43C8C170FD39387DE2F52A33BA7A67F7F64042CDD4FF7CF45F6D716C3F64FB805019D864DFFA3B89F10B73E23F692C060A2A3D73
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSHgmSneAOJNU02BIFDX8fnQUSBQ3Oq1sgEgUNPZkUaxIXCefQqpPOoPi4EgUNlv687RIFDefqYw8SFwlp-RSzKLhtMRIFDdbzFGQSBQ2lkzYk?alt=proto
Preview:	ChsKBw1/H50FGgAKBw3Oq1sgGgAKBw09mRRrGgAKEgoHDZb+vO0aAAoHDefqYw8aAAoSCgcN1vMUZBoACgcNpZM2JBoA

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (18703)
Category:	dropped
Size (bytes):	18760
Entropy (8bit):	5.276365456658725
Encrypted:	false
SSDEEP:	384:h8ttJrEtEwEgEA3EAELTEsEYEGEtMlNf4n1q+liP3qvZJwZYl+Nc:h4tJA2jzA0TL43bFtMlNA1q+ZXg6+Nc
MD5:	7D2FB472742B3D3EB07A93694C5B20E6
SHA1:	6DE2622E9D830D97318B06AEA34DFFF1D07BEB75
SHA-256:	F680F4883B0A82C755F3821B2CC158161FE9F7C379AAB5BD445271E8C266861D
SHA-512:	A6491A9E12FB759FB0FCFA1779BD0A939D54C208BEB1DA4D6BB0F9B9354042AA776068A8D35BB13894292889256C19891186DD518E84CC8C217748D43C67B049
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[38744],{38744:(t,i,l)=>{var e=l(31088),a=l(48704),o=l(16645),n=l(36468),s=l(62832),r=l(85200),d=l(15323),u=l(96855),c=l(96987),v=l(45241),p=l(95688),h=(l(57560),l(21668),l(71775),l(74156),l(49200),l(77554),l(71156));let b,m,y,g,x,f,w,$,_,k,C,R,D,I,T,S,A,L,V,O,P,F,K,M,j,H,G,E,U,Z,B,N,W,z=t=>t;var q=function(t,i,l,e){var a,o=arguments.length,n=o<3?i:null===e?e=Object.getOwnPropertyDescriptor(i,l):e;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(t,i,l,e);else for(var s=t.length-1;s>=0;s--)(a=t[s])&&(n=(o<3?a(n):o>3?a(i,l,n):a(i,l))\|\|n);return o>3&&n&&Object.defineProperty(i,l,n),n};const J=["cvssv4_x","cvssv3_x","cvssv3_x_translated","cvssv2_0"];let Q=(b=class extends a.LitElement{constructor(){super(...arguments),this.title="",this.hasDetailsSectionHidden=!1,this.hasOneLineDescription=!1}collectionTypeToString(t){var i,l;return null!==(i=v.KK.formatHyphenatedString(null=

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	165296
Entropy (8bit):	5.514502423286387
Encrypted:	false
SSDEEP:	1536:WmRpMUZ1N5RjotX66uYFvJ3IF48JLGoV4sknr1ytNng/Yt9Xt77pRBj:Ou0x3IhJWr1huJj
MD5:	8260D5EE98F2E3683725B20CFB2C1815
SHA1:	78F7FC580D2DD28F552532C91CDCED86B3202BE3
SHA-256:	C9F4FA040502E660FA2B92BD2B9761E75D576A58A58BADC598E2ADB1DBC4B952
SHA-512:	B74019E2F039970C485DDF2A31309FE15EE557B8548CDB2FDCA223775F133911ED5387089B3B547A5174AA5A30FE0ADDABC33D348180071E91CCCB198CFE0E44
Malicious:	false
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[66587,22332,20367,86545,73782,46563],{65865:(t,e,r)=>{"use strict";r.d(e,{Pk:()=>u});const i=2147483647,n=36,o=/^xn--/,s=/[\x2E\u3002\uFF0E\uFF61]/g,a={overflow:"Overflow: input needs wider integers to process","not-basic":"Illegal input >= 0x80 (not a basic code point)","invalid-input":"Invalid input"},l=Math.floor;String.fromCharCode;function d(t){throw new RangeError(a[t])}function c(t,e){const r=t.split("@");let i="";r.length>1&&(i=r[0]+"@",t=r[1]);const n=function(t,e){const r=[];let i=t.length;for(;i--;)r[i]=e(t[i]);return r}((t=t.replace(s,".")).split("."),e).join(".");return i+n}const h=function(t,e,r){let i=0;for(t=r?l(t/700):t>>1,t+=l(t/e);t>455;i+=n)t=l(t/35);return l(i+36*t/(t+38))},b=function(t){const e=[],r=t.length;let o=0,s=128,a=72,c=t.lastIndexOf("-");c<0&&(c=0);for(let r=0;r<c;++r)t.charCodeAt(r)>=128&&d("not-basic"),e.push(t.charCodeAt(r));for(let u=c>0?c+1:0;u<r;){const c=o;for(let e=1,s=n;;s+=n){

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22434)
Category:	downloaded
Size (bytes):	22489
Entropy (8bit):	5.344987209132273
Encrypted:	false
SSDEEP:	384:O+oprOpEW1QoaUOZahx66t2rVlPingnHGALMt2rVlPinglI:O+7eW1Qy66t2rVlPingLLMt2rVlPingq
MD5:	09FC1A91BABD700AF6166E1FD40A7CD8
SHA1:	ECBABA2437438866537F13486C016A1A2C4845A3
SHA-256:	71B9D7D00B0FCFD58BD69985D4F51D2693232FEC2250F62EE514CE9BB3CA3343
SHA-512:	C210677EC9B8E4D1AF90424C31F34E317C98065F211963C0CBE3E177622F9038DFF055F19134190996D113018B737B324D7CC71D727EC5DCD8A3385BF32EC688
Malicious:	false
URL:	https://www.virustotal.com/gui/22232.15ef530edb01268cfe7b.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[22232],{27270:(e,r,t)=>{t.d(r,{v:()=>u});var s=t(49272),o=t(48704),a=t(16645),b=t(62832),i=t(66813),n=t(15323),d=t(83170);let c,l,g,p,m,y=e=>e;var f=function(e,r,t,s){var o,a=arguments.length,b=a<3?r:null===s?s=Object.getOwnPropertyDescriptor(r,t):s;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)b=Reflect.decorate(e,r,t,s);else for(var i=e.length-1;i>=0;i--)(o=e[i])&&(b=(a<3?o(b):a>3?o(r,t,b):o(r,t))\|\|b);return a>3&&b&&Object.defineProperty(r,t,b),b};function u(e){return e===s.Verdict.VERDICT_MALICIOUS?n.shieldSlashIcon:e===s.Verdict.VERDICT_SUSPICIOUS?n.shieldExclamationMarkIcon:e===s.Verdict.VERDICT_BENIGN?n.shieldCheckIcon:n.questionMarkCircleIcon}let h=(c=class extends o.LitElement{constructor(){super(...arguments),this.loading=!1}get threatScore(){var e;return null===(e=this.gtiAssessment)\|\|void 0===e\|\|null===(e=e.threat_score)\|\|void 0===e?void 0:e.value}get verdict(){var e;const r=

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	266372
Entropy (8bit):	4.366573656793244
Encrypted:	false
SSDEEP:	1536:xJrsBtNngHsWtNng/utuY2ADySQ+oqnhQ43IP3/YGqPG2CpMFIh7eY:f+
MD5:	086138756331E3DDAABD2A82CFE0A31C
SHA1:	1C5BB65B035B4442BC7388EF5611B1F651937AB3
SHA-256:	28C186DECA6FC6F75702D4B4F1156BD7999AC9A7087AE8416BDAE4939455414C
SHA-512:	F0D152E0FDBA4EA421433F89544BA683132428F3CBCD41CA42553B1B01C4E5CE026AF8AEE0F171ACA64ABF60EB02BC363E9A79DAB54765960F7F0A5BD6F35F0B
Malicious:	false
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[36253],{36253:(C,e,r)=>{"use strict";var t=r(48704),n=r(16645),s=r(95688),o=r(15323),a=r(49995);let i,b,l=C=>C;var d=function(C,e,r,t){var n,s=arguments.length,o=s<3?e:null===t?t=Object.getOwnPropertyDescriptor(e,r):t;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)o=Reflect.decorate(C,e,r,t);else for(var a=C.length-1;a>=0;a--)(n=C[a])&&(o=(s<3?n(o):s>3?n(e,r,o):n(e,r))\|\|o);return s>3&&o&&Object.defineProperty(e,r,o),o};let c=(i=class extends t.LitElement{constructor(){super(...arguments),this.delay=5e3,this.selectedIndex=0,this.handleKeyPressed=C=>{document.activeElement===document.body&&("ArrowLeft"===C.key?this.previousSlide():"ArrowRight"===C.key&&this.nextSlide())}}get isLast(){var C;return this.slides&&this.selectedIndex===(null===(C=this.slides)\|\|void 0===C?void 0:C.length)-1}get isFirst(){return 0===this.selectedIndex}get nextIndex(){return this.isLast?0:this.selectedIndex+1}get previousIndex(

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16207)
Category:	downloaded
Size (bytes):	16262
Entropy (8bit):	5.14628529012525
Encrypted:	false
SSDEEP:	192:1r4PetXrWkF+4IQHICzl3MgIqUjjtCjehl5MoqgoonCInCYnCQnCznCbnnC1wnCf:1Txq62jYjKoUUJr4MDF
MD5:	FDDD050A274FF8A9A3C7654CBA495AE4
SHA1:	4F4B43097D95C4D0E893876E6626FEF6519C5A85
SHA-256:	AF0592106EEF0C7D5578C84FC013DB818E653C939673C39360A0585DB0A7FE96
SHA-512:	9462229C2AD46C869A4A89C71788917BDE1F7EFECE3D4252ADD6B4537A61B4B4C889ACE1806A152401CCAB208273C116C5718AFF12DDD6EFA0C45C42E704EB30
Malicious:	false
URL:	https://www.virustotal.com/gui/60996.d3e9ab9fe2567126de2e.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[60996],{77569:(t,e,r)=>{r.d(e,{f:()=>l});var i=r(22894),n=r(42246);function o(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(t);e&&(i=i.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,i)}return r}function s(t,e,r){return(e=function(t){var e=function(t,e){if("object"!=typeof t\|\|!t)return t;var r=t[Symbol.toPrimitive];if(void 0!==r){var i=r.call(t,e\|\|"default");if("object"!=typeof i)return i;throw new TypeError("@@toPrimitive must return a primitive value.")}return("string"===e?String:Number)(t)}(t,"string");return"symbol"==typeof e?e:e+""}(e))in t?Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}):t[e]=r,t}class l extends((0,n.t1)(((t,e)=>i.h4.collections.listRelationship(t,"subscription_preferences",function(t){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?arguments[e]:{}

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21322)
Category:	dropped
Size (bytes):	21377
Entropy (8bit):	5.43526851473937
Encrypted:	false
SSDEEP:	384:AJhdgvfQed1fsBmzy+k6bhAEC4v2Wmt2rVlPingYiLhssa:AJhdgXQKsBmO+kihBst2rVlPingYiLhk
MD5:	953AF9C8B1244116B6B270519E5C20F9
SHA1:	657AA83CABE98639071806EFB2EE20139D5202FC
SHA-256:	95DADB8B4E09CBBF53BDF70C2A509B917DDEB4ECDBC846148FC0F148886C0E67
SHA-512:	7DDDD4E018231445F682B0F15B4A50C57245851641F75227A2E6BE4662C7FEDECA747E9BEF0308D94429789F16C2F568A1D3C745C70EFB52A7EE2AA9A2DC7A89
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[71254,44138,6837,13805,60132,61663],{38379:(t,e,i)=>{i.r(e),i.d(e,{cloudDownloadIcon:()=>o.cloudDownloadIcon});var o=i(15323)},18818:(t,e,i)=>{i.r(e),i.d(e,{editFileIcon:()=>o});const o=i(15323).docPenIcon},41098:(t,e,i)=>{i.r(e),i.d(e,{phoneOutIcon:()=>o});const o=i(15323).phoneArrowUpRightIcon},56873:(t,e,i)=>{i.r(e),i.d(e,{subdirectoryArrowRightIcon:()=>o});const o=i(15323).arrowTurnDownRightIcon},9592:(t,e,i)=>{i.r(e),i.d(e,{urlDetectionIcon:()=>o});const o=i(15323).globeLinkIcon},71254:(t,e,i)=>{var o=i(22894),r=i(56870),n=(i(9891),i(48704)),s=i(16645),a=i(62832),l=i(85200),c=(i(22232),i(86260),i(95528),i(15323)),d=i(38379),b=i(93842),p=i(18818),h=i(41098),u=i(56873),v=i(9592),m=i(96987),y=i(45241),g=i(95688),f=(i(80192),i(51484)),x=i(57871),w=i(33914);let _,k,$,T,C,I,R,D,P,A,S,U,K,L,O,E,B,z,G,M,N,F,Z,j,H,Y,J,q,V,Q=t=>t;var W=function(t,e,i,o){var r,n=arguments.length,s=n<3?e:null===o?o=Object.getOwn

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27335)
Category:	dropped
Size (bytes):	27390
Entropy (8bit):	5.245541317772044
Encrypted:	false
SSDEEP:	768:QAJ5lJ5GHvnVSKN6v+Het2rVlPingeVGSx2tJO:QAJ4HoQetNngeZT
MD5:	586C4B02708ADDD25B398856872EA1AC
SHA1:	475A58D05C922F545A26CC66779A54E7E32B0D15
SHA-256:	CBDD6C0C8DF3BC921843EB75291D4222C09369CC039DEAF5DDA77B66665B4ADB
SHA-512:	CAA81BFA6AE806B0D41277523F3C9BF066563850A2CDAB60CF0E97EC95E59096335B370D92C525200185367C89C3DD6D6757281E70257EBF9CCDA1820B5E7F03
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[25390],{58215:(o,e,r)=>{var t=r(48704),s=r(16645),n=r(15431),i=r(45241),b=r(95960);let d,a=o=>o;function l(o,e,r,t,s,n,i){try{var b=o[n](i),d=b.value}catch(o){return void r(o)}b.done?e(d):Promise.resolve(d).then(t,s)}var c=function(o,e,r,t){var s,n=arguments.length,i=n<3?e:null===t?t=Object.getOwnPropertyDescriptor(e,r):t;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)i=Reflect.decorate(o,e,r,t);else for(var b=o.length-1;b>=0;b--)(s=o[b])&&(i=(n<3?s(i):n>3?s(e,r,i):s(e,r))\|\|i);return n>3&&i&&Object.defineProperty(e,r,i),i};let p=class extends t.LitElement{constructor(){super(...arguments),this.loading=!1}render(){return["json","csv","stix"].map((o=>(0,t.html)(d\|\|(d=a`<slot name="${0}" @click="${0}"></slot>`),o,(()=>this.onExportClick(o)))))}onExportClick(o){var e,r=this;return(e=function*(){if(!r.loading){r.loading=!0,i.KK.showToast(r,"Preparing download",b.M.MAX_DELAY,!0);try{yield r.ex

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15687)
Category:	downloaded
Size (bytes):	15741
Entropy (8bit):	5.166413524141114
Encrypted:	false
SSDEEP:	192:aVMZ40JXCnWWJ/2/p+/huVEUvG/abTAG/NJG/s9IQMINkpwUQawk/nCZTtHbGK9W:yRu+/huVZWlWLWjRwIxMZaN
MD5:	152CBAA65D5E01C1040BB12996F89245
SHA1:	246EB7CD0B3489572DA0DB92998538498BFE0994
SHA-256:	0BE5C7F016BC53DDF7F1FA26A22FE0861F78A9A976724802FB4DA9917C0D63E4
SHA-512:	5C598AC1CD41E80A404064FE553E07B5F04A36085D90F2D49225177408B75229A9EC48754F1717820D69082CB934E40BE2486B13C52726CCE9809574049FD5A7
Malicious:	false
URL:	https://www.virustotal.com/gui/8405.5eb49c1a7107f741455b.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[8405],{14819:(t,e,r)=>{r.d(e,{i:()=>y});var i=r(92815),n=r(22894),o=r(60233),s=r(47123),a=r(70051),l=r(96987),h=r(95688),c=r(42246);function u(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(t);e&&(i=i.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,i)}return r}function d(t,e,r){return(e=function(t){var e=function(t,e){if("object"!=typeof t\|\|!t)return t;var r=t[Symbol.toPrimitive];if(void 0!==r){var i=r.call(t,e\|\|"default");if("object"!=typeof i)return i;throw new TypeError("@@toPrimitive must return a primitive value.")}return("string"===e?String:Number)(t)}(t,"string");return"symbol"==typeof e?e:e+""}(e))in t?Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}):t[e]=r,t}class p extends((0,c.tV)((function(t){let e=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};return n.h4.domai

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17021)
Category:	dropped
Size (bytes):	387724
Entropy (8bit):	5.658814188540675
Encrypted:	false
SSDEEP:	6144:puAs+syIJDyA0HgvICvzKtyCFjGgMShymktR2lfyiRiEv:wTlJOLHgAPtx0tRShio
MD5:	F726CCD589E21F147388796301173045
SHA1:	902F20F72D725EF62AAE9C22529517E0924756EF
SHA-256:	905C54481E8CF195E6B885A254FB02E83C7E961EF9E8ADE56FE14D950FCB568B
SHA-512:	7141B039FAE1895AFC71F568EE5EEDF96E19AAC554867A12C271876D36C427D2B0302699DF5E4B522E3D0353F6E82F054D63460A6615F5977DB89EDC322A558D
Malicious:	false
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":10,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":8},{"function":"__ogt_1p_data_v2","priority":10,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_l

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Category:	downloaded
Size (bytes):	567703
Entropy (8bit):	5.372053060225688
Encrypted:	false
SSDEEP:	12288:0EF8jKCCzkbr4xF4Vm4444ki44144pe44144Zu404Kh4449G4qLX:0EKjKCCYbr4xF4Vm4444ki44144pe446
MD5:	1C024811D02246127E7AFA12C115ADA5
SHA1:	A6ABF52F689E89C43E44F51C0A4931E10EE52141
SHA-256:	9BC416D9105D9EF8A8B4D3BFF128674C5A536E04AB891A3E05CFA4DBC2B04DB1
SHA-512:	D1EA9F642BDC0C5B59D320D627B7AB8E2CBC23BAAAB163F7F693BA29F61117C06B52ADD8B5897F34A5D239D9C68DD54F2C3BB996B62CD9522B07DA8CAB136152
Malicious:	false
URL:	https://www.virustotal.com/gui/36018.11aa4f9261da1e45e451.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[36018,43111,31060],{43111:(e,t,i)=>{i.r(t),i.d(t,{CrowdsourcedAiResultEntity:()=>o,CrowdsourcedAiResultEntityList:()=>a});var s=i(88181),r=i(78818);class o extends((0,s.S)("crowdsourced_ai_result")){}class a extends((0,r.k)("crowdsourced_ai_result")){}},74138:(e,t,i)=>{var s=i(48704),r=i(16645),o=i(62832),a=i(85200),n=i(44052),l=i(71012),d=(i(81844),i(19612),i(88964),i(51764)),b=(i(38398),i(26206));let c,p,h,u,v,m,g,f,y=e=>e;var x=function(e,t,i,s){var r,o=arguments.length,a=o<3?t:null===s?s=Object.getOwnPropertyDescriptor(t,i):s;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(e,t,i,s);else for(var n=e.length-1;n>=0;n--)(r=e[n])&&(a=(o<3?r(a):o>3?r(t,i,a):r(t,i))\|\|a);return o>3&&a&&Object.defineProperty(t,i,a),a};let w=(c=class extends l.D{constructor(){super(...arguments),this.data=[],this.isVotesSectionHidden=!1,this.sourceNameMap={uma:"NICS Lab",palm:"Code insight",b

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (39808)
Category:	dropped
Size (bytes):	39864
Entropy (8bit):	5.362358040516677
Encrypted:	false
SSDEEP:	768:qT/JRq97yQ9YsQsgpJxGQCNaOZvYpt2rVlPingfiLhsWs/:Kc59rQsglGFvYptNngL
MD5:	DCDF936C498BFB7B6DD5A02BF193ED1F
SHA1:	62D8EE4C5B8D1F78D53641A7673EC97D76E9DE0F
SHA-256:	8162E6754683CDA2C7938D044C1889695B6B6C8E2D966B1DEEBD116D5E4797CC
SHA-512:	D42D3EE9202402A891E7DC8CEE033A2BE219F81D84798E2DD5A4477AEC6F171390592761C54DEE24C8E11120B5DE3FD6FB32404EE2DEB2492EBD4CD5BAE257A4
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[58686,8590,81719,44706,11901,19024],{25423:(t,e,i)=>{i.r(e),i.d(e,{downloadIcon:()=>n.downloadIcon});var n=i(15323)},14232:(t,e,i)=>{i.r(e),i.d(e,{pinpointIcon:()=>n});const n=i(15323).locationPinIcon},40187:(t,e,i)=>{i.r(e),i.d(e,{searchMatchesIcon:()=>n});const n=i(15323).targetEyeIcon},36066:(t,e,i)=>{i.r(e),i.d(e,{similarIcon:()=>n.similarIcon});var n=i(15323)},65813:(t,e,i)=>{i.r(e),i.d(e,{trashIcon:()=>n});const n=i(15323).binIcon},58686:(t,e,i)=>{var n=i(22894),o=i(56870),s=(i(9891),i(48704)),r=i(16645),a=i(62832),l=i(85200),c=(i(22232),i(45386)),d=(i(86260),i(15323)),p=i(93842),b=i(25423),h=i(72970),u=i(14232),m=i(40187),v=i(36066),f=i(65813),y=i(6052),g=i(96987),x=i(45241),w=i(95688),_=(i(80192),i(51484)),k=i(42091),$=i(11566);let C,S,I,T,R,z,K,A,L,E,P,D,F,H,M,O,q,N,U,B,V,G,Z,j,W,J,Y,Q,X,tt,et,it,nt,ot,st,rt,at,lt,ct=t=>t;function dt(t,e,i,n,o,s,r){try{var a=t[s](r),l=a.value}catch(t){return void

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1838), with no line terminators
Category:	downloaded
Size (bytes):	1838
Entropy (8bit):	5.850428544018698
Encrypted:	false
SSDEEP:	48:iEAhSKo75XI2ovtUjPKtXsDXx/gftD1INOLrwUnG:pAxMI5czG3suG
MD5:	25A7671D039CA0D8D35EB451899B64A0
SHA1:	00C245961E6503F07230D769F161325A83F6D35C
SHA-256:	05D19328AEF3A9A62E1B001DCAF2AF10C9CF2FD717FD531EF505850109A5D42C
SHA-512:	E247E71836D74941326C3692EB8AE1F9753E8634926547A079ACCC796B5655FC9B5AB30B7F6F06C2757D128CDADCBA6A2EAA57B9A03DC9B0AAC0E83C6CED2D06
Malicious:	false
URL:	https://www.recaptcha.net/recaptcha/enterprise.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.recaptcha.net/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().t

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21659)
Category:	downloaded
Size (bytes):	21714
Entropy (8bit):	5.434957500972003
Encrypted:	false
SSDEEP:	384:5GfCVegOxtJDNd6eaZoQqWegZWWNFG+n0rWxNt2rVlPingUdT:5YCVePxDNdRaWQqWpZ1NFjGW3t2rVlPO
MD5:	B6306CE58D9FB2C9126362A2563A544D
SHA1:	2E84E0EC8E0CAD9FA4608E72492968957318B086
SHA-256:	9D6616467D82980E2C9EEC47FEA4F46A89D5A06636901CC6E2E1D4524121044C
SHA-512:	6E805B51A2D1C0FC96E03A8DB2588AB48A37AA45C53F682B730944786F9C9C50EF0041ADCDD05FFA1B93DB88D0B012EF3005F130917D73BAC12AB201B5CC13F6
Malicious:	false
URL:	https://www.virustotal.com/gui/64098.3377bd9636d2bbe06657.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[64098,87960,67173],{32674:(t,e,o)=>{o(9891);var r=o(48704),i=o(16645),s=o(72970),l=o(45241),n=o(95688),a=o(71012),c=o(21302);let d,b,h,p,u,m,g,f,v,y=t=>t;function w(t,e){return function(t){if(Array.isArray(t))return t}(t)\|\|function(t,e){var o=null==t?null:"undefined"!=typeof Symbol&&t[Symbol.iterator]\|\|t["@@iterator"];if(null!=o){var r,i,s,l,n=[],a=!0,c=!1;try{if(s=(o=o.call(t)).next,0===e){if(Object(o)!==o)return;a=!1}else for(;!(a=(r=s.call(o)).done)&&(n.push(r.value),n.length!==e);a=!0);}catch(t){c=!0,i=t}finally{try{if(!a&&null!=o.return&&(l=o.return(),Object(l)!==l))return}finally{if(c)throw i}}return n}}(t,e)\|\|function(t,e){if(t){if("string"==typeof t)return k(t,e);var o={}.toString.call(t).slice(8,-1);return"Object"===o&&t.constructor&&(o=t.constructor.name),"Map"===o\|\|"Set"===o?Array.from(t):"Arguments"===o\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(o)?k(t,e):void 0}}(t,e)\|\|function(){throw

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22627)
Category:	dropped
Size (bytes):	22682
Entropy (8bit):	5.234709138220891
Encrypted:	false
SSDEEP:	384:A31CmUfBvzU2PU5K3t2rVlPingi2t2rVlPingj0l4rkWMUuw4L4ynmbirY7NjzAK:A31ClzUkU5K3t2rVlPingi2t2rVlPinw
MD5:	C04BE45BF633F976D39C9F29C5E810E1
SHA1:	B46E368B72CFD92371A48836C48B9CD3F43DD183
SHA-256:	89F272FE520D67755C47F6F24819198A355AB80EE87467EAC5657F6FB0AFC914
SHA-512:	5E04E5E56996A8C55F6160B04B17D89F99BDFEA656F4AE63DAA75983D5A2A2B51D998174251A367D9658F86683B89BFECF08A8D2C49E090748C5BAA5EFA81603
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[66583],{88964:(r,e,t)=>{var o=t(48704),s=t(16645),a=t(62832),i=t(15323),b=(t(33274),t(82938)),n=t(51764);let l,c,d,p=r=>r;var g=function(r,e,t,o){var s,a=arguments.length,i=a<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,t):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)i=Reflect.decorate(r,e,t,o);else for(var b=r.length-1;b>=0;b--)(s=r[b])&&(i=(a<3?s(i):a>3?s(e,t,i):s(e,t))\|\|i);return a>3&&i&&Object.defineProperty(e,t,i),i};let m=class extends o.LitElement{constructor(){super(...arguments),this.hideActions=!1,this.noDetails=!1,this.severityIconMap={critical:i.exclamationTriangleIcon,high:i.exclamationTriangleIcon,medium:i.exclamationTriangleIcon,low:i.exclamationTriangleIcon,info:i.infoCircleIcon,success:i.checkCircleIcon}}static get styles(){return(0,o.unsafeCSS)(b.A)}render(){return(0,o.html)(l\|\|(l=p` <div class="border-top position-relative matches-row"> <div class="hstack gap-2

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1520 x 170, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	39422
Entropy (8bit):	6.177610708123144
Encrypted:	false
SSDEEP:	384:NXE05nUKKL5nCngNR1RJTyKHbja/4078pTuUnMuxaTX3xG7JAejgeqHeJ7CLKr29:535nUMgrDJTXHbcuT7nKRaJ9RCLKaD1
MD5:	49BC9262C4A31F1EE2CA2DD5E1DC8588
SHA1:	5B145BA3666FFA9EDED453160010567CCC24E8CC
SHA-256:	30652CEE5990B3B76F6CBF6F26362BE9254DD62B4C6E6003C1127D1484573787
SHA-512:	6E6C30CC2C6A8944948184440A22942962FA2715DFBB9804ADB98377E2C35F73DC8B1A7BDED2991C7CC108F23EDA908E06DAE492169D93E52FC310E59883830B
Malicious:	false
Preview:	.PNG........IHDR...............nA....pHYs.........g..R...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 42 x 22, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2022
Entropy (8bit):	6.718501039531958
Encrypted:	false
SSDEEP:	48:vhI+kW9Wv2628b9+NNMRlj3BHnbWRqEKXMrMzpwMiAp81H:DkkWv2628bgNqRrHnbWgMwzprVEH
MD5:	DEB336030CC20254AF3372FA76D24905
SHA1:	36CEF85FB2CF764DDADF34FDCD8ABFB120FC4172
SHA-256:	6D608A9D27AE614AA0B16FE920F6A811BF6D4F320A5819B51D3EDB9672912AD9
SHA-512:	4F243A7A61B5CC98908CE65BB0D43E373E3837804DD38760CB341616A957C8D9DB3E33D05706D63F269602F6B6ED4C47743B436DFB7A587360A0568088E0E3CD
Malicious:	false
Preview:	.PNG........IHDR...*..........{.....TiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.1b65a79b4, 2022/06/13-22:01:01 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmp:CreatorTool="Adobe Photoshop 23.5 (Macintosh)". xmp:CreateDate="2023-07-12T11:56:32-04:00". xmp:ModifyDate="2023-08-01T11:59:34-04:00". xmp:MetadataDate="2023-08-01T11:59:34-04:00". dc:format="image/png". photoshop:ColorMode="3". xmpMM:InstanceID="xmp.iid:e44b26bf-fcbc-4366-a1b8-af324bc03e89". xmpMM:DocumentID="xmp.did:e44b26bf-fcbc-4366-a1b8-af324bc03e89". xmpMM:OriginalDocumen

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8764
Entropy (8bit):	7.944825415489751
Encrypted:	false
SSDEEP:	192:8MWksO8NCl+7A2ZIWbvlXw/e0e/iq0ERi/pKFVG+tfGBZzLdnmmv:PWksTNtA2hbdkw8/pKFU+t+BR5nmmv
MD5:	D834C97492CF87524B1FFA201AE05BBB
SHA1:	0915C22AC8353C9423DCFCC61E7071D49F4C0C08
SHA-256:	1614E807C8DF7665D0BDF4BF47099C45A94FC27EC69B9DE53C081B7A92929D65
SHA-512:	95CE816D69CCEC15AC381B23D8DDB0891A2DC9F6943DC66CA75038733A26932706DD8206A00CEBCA8CB8B2956124B146A2F8DF44918A5DF584E1B623B85075BA
Malicious:	false
URL:	https://www.virustotal.com/gui/images/manifest/icon-192x192.png
Preview:	.PNG........IHDR.............R.l...".IDATx..]...u.......w....H..c.........U.I.M.r.....!+!..)....!.lH.....m.`c...`./iW....}........>..w.j{..n..s...<~..mmmmA[\|...6.1i.A.........%;..n3....=G...4.W..G=.......&...@..2..3..f.o...@....].V..L...@.....M.4.... .....(.4M.ZY.........6K~.x'.F.U.K....NWylm..c...6S........U.Kmp...W.&t.f;..f&...........j..".....r..32.8e!.b.BFR..mE....0......o.3.T.1&.D..._..c...`..f.....e...i;..Q........!ds.w.:u.i......?Fvl.......~.9&.....9.;.D.`..f.h..?..fM.......0[.?T....^......~......c. ..LU...i....k..........Z.c.}.7.)....X./Cv...nm..&.6.#]a{..3I9.........fvCF...... ....+@~....@0............L.%.N...w...5Q.$.j:b.C.4E.gO.w.0st#hO<..].y.;.dD.).f.t=*7K...iC.....a...XJ......}..da...c..&.D.(r..CgW....oY.<.[....;Xh..23.v.)..C. ...5..v.....h.....8......V.ovW/...g...Q w..$....._..cl.S...Fr..M....@.....I.m.T.\|....fa.b..T.Gg$.tf....=..)..<@....U.$.3.oT...\|...}.L.@e..P'..qc...I.7.....U....l...C./....\|....7.GB

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16207)
Category:	dropped
Size (bytes):	16262
Entropy (8bit):	5.14628529012525
Encrypted:	false
SSDEEP:	192:1r4PetXrWkF+4IQHICzl3MgIqUjjtCjehl5MoqgoonCInCYnCQnCznCbnnC1wnCf:1Txq62jYjKoUUJr4MDF
MD5:	FDDD050A274FF8A9A3C7654CBA495AE4
SHA1:	4F4B43097D95C4D0E893876E6626FEF6519C5A85
SHA-256:	AF0592106EEF0C7D5578C84FC013DB818E653C939673C39360A0585DB0A7FE96
SHA-512:	9462229C2AD46C869A4A89C71788917BDE1F7EFECE3D4252ADD6B4537A61B4B4C889ACE1806A152401CCAB208273C116C5718AFF12DDD6EFA0C45C42E704EB30
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[60996],{77569:(t,e,r)=>{r.d(e,{f:()=>l});var i=r(22894),n=r(42246);function o(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(t);e&&(i=i.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,i)}return r}function s(t,e,r){return(e=function(t){var e=function(t,e){if("object"!=typeof t\|\|!t)return t;var r=t[Symbol.toPrimitive];if(void 0!==r){var i=r.call(t,e\|\|"default");if("object"!=typeof i)return i;throw new TypeError("@@toPrimitive must return a primitive value.")}return("string"===e?String:Number)(t)}(t,"string");return"symbol"==typeof e?e:e+""}(e))in t?Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}):t[e]=r,t}class l extends((0,n.t1)(((t,e)=>i.h4.collections.listRelationship(t,"subscription_preferences",function(t){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?arguments[e]:{}

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	1315773
Entropy (8bit):	5.383125172840838
Encrypted:	false
SSDEEP:	24576:thoXQ2rXCQcbmhNR8M2CUSVTYFGkdBn6Iz0EIMIxRErKIoWEg:kLcaXR8M2CUSVTYFGkrn6Iz0EIMIxRER
MD5:	80E882B5D3AB072A239C128852F3B90C
SHA1:	1DABA389211C42C5B46D3159D8AEB230D9D26B17
SHA-256:	2F5E56412E346EB25FCB3C5B953B8E28FB3DBCB5B3475F5364F109DCFF99D245
SHA-512:	B2E19D2AEEFAE52242BAB3B7905B15A52B3D9C4A57D7A37FF00F761119C5BCEB44612D13D3501278ACD61B80BEE9E185C2FFA051B86845915FD485CE77E39635
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[53967],{16097:function(e,_,s){var t=this&&this.__importDefault\|\|function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(_,"__esModule",{value:!0}),_.SigmaAnalysisSeverityStats=_.EngineAnalysis=_.AnalysisStats=_.engineAnalysis_EngineResultCategoryToNumber=_.engineAnalysis_EngineResultCategoryToJSON=_.engineAnalysis_EngineResultCategoryFromJSON=_.EngineAnalysis_EngineResultCategory=_.engineAnalysis_EngineAnalysisMethodToNumber=_.engineAnalysis_EngineAnalysisMethodToJSON=_.engineAnalysis_EngineAnalysisMethodFromJSON=_.EngineAnalysis_EngineAnalysisMethod=_.protobufPackage=void 0;const a=t(s(25380)),n=t(s(93360));var r,c;function o(e){switch(e){case 0:case"UNKNOWN_METHOD":return r.UNKNOWN_METHOD;case 1:case"BLACKLIST":return r.BLACKLIST;case 2:case"WHITELIST":return r.WHITELIST;default:return r.UNRECOGNIZED}}function i(e){switch(e){case r.UNKNOWN_METHOD:return"UNKNOWN_METHOD";case r.BLACKLIST:r

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1520 x 170, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	39422
Entropy (8bit):	6.177610708123144
Encrypted:	false
SSDEEP:	384:NXE05nUKKL5nCngNR1RJTyKHbja/4078pTuUnMuxaTX3xG7JAejgeqHeJ7CLKr29:535nUMgrDJTXHbcuT7nKRaJ9RCLKaD1
MD5:	49BC9262C4A31F1EE2CA2DD5E1DC8588
SHA1:	5B145BA3666FFA9EDED453160010567CCC24E8CC
SHA-256:	30652CEE5990B3B76F6CBF6F26362BE9254DD62B4C6E6003C1127D1484573787
SHA-512:	6E6C30CC2C6A8944948184440A22942962FA2715DFBB9804ADB98377E2C35F73DC8B1A7BDED2991C7CC108F23EDA908E06DAE492169D93E52FC310E59883830B
Malicious:	false
URL:	https://online.access.secure.bankofamerlica.com/assets/BofA_rgb.png
Preview:	.PNG........IHDR...............nA....pHYs.........g..R...OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	221
Entropy (8bit):	5.1597725432282076
Encrypted:	false
SSDEEP:	6:tnr/bmc4sl3UNI/QRthyKMtRLvGVmqdZrJM:tr/b1WfhjMXam4o
MD5:	245B6F249B722CDEB1D29455E7781FA4
SHA1:	6364F43AA6225E642C1B7001CD436F2AA50C92D9
SHA-256:	F0D88CF32C5EE0030DF2ABB579468878F3FB8472E18AD74DFD1E5BF99D54351D
SHA-512:	13B2F5B48C151220835C136D838CA2F3256692D93C609D75415B58FF98A60E29B890F5BC142D1FEBAEE599DDF3DBC9298F6CEABD596B8E844D2F5DDFF4566B72
Malicious:	false
URL:	https://www.virustotal.com/gui/images/favicon.svg
Preview:	<svg width="1em" height="1em" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 89">. <path fill="#0b4dda" fill-rule="evenodd" d="M45.292 44.5 0 89h100V0H0l45.292 44.5zM90 80H22l35.987-35.2L22 9h68v71z"></path>.</svg>.

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15905)
Category:	downloaded
Size (bytes):	15960
Entropy (8bit):	5.356890235772424
Encrypted:	false
SSDEEP:	192:/1z0MugiUy1gnfwVSZ6YVFbqF5xL05TH2XI43NUvEWYsAUduWavHcf/Jdgg+P9WE:tfuOyGnfwVSZ6YVFWFrot2rVlPingoil
MD5:	526AE0C2C78B61B51B40DB16B4AFC6CB
SHA1:	C12B28CBA80C9B9E9E1A8FD6CC1A6BBE7FFE8CEE
SHA-256:	0A94111EEC0549FAF1FFB4F2DBF3343E47D916D0E915CFCD30F7C67FC5877DCA
SHA-512:	8574D4D49BA7F80D262ABAEC1F9BDE715A7AFA3BCF75B7B0A9F6BE0AD2863CEE0DCAD07BAC9EA505DA8D131E62ACD345D24F2691A08CA401C4F7E8E3493BDE4F
Malicious:	false
URL:	https://www.virustotal.com/gui/32827.e9df234ac022e0ec6707.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[32827,38398],{90604:(t,e,o)=>{var i=o(9891),r=o(48704),s=o(16645),n=o(98217);let a,b,l,c,d,p,h,m=t=>t;var g=function(t,e,o,i){var r,s=arguments.length,n=s<3?e:null===i?i=Object.getOwnPropertyDescriptor(e,o):i;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(t,e,o,i);else for(var a=t.length-1;a>=0;a--)(r=t[a])&&(n=(s<3?r(n):s>3?r(e,o,n):r(e,o))\|\|n);return s>3&&n&&Object.defineProperty(e,o,n),n};let y=class extends((0,i.ResponsiveMixin)(r.LitElement)){constructor(){super(...arguments),this.title="",this.noMobile=!1}static get styles(){return(0,r.unsafeCSS)(n.A)}render(){return(0,r.html)(a\|\|(a=m` <section ?medium="${0}" ?small="${0}" ?no-mobile="${0}"> ${0} ${0} ${0} </section> `),this._medium,this._small,this._noMobile,this.titlePrefixIcon,this.title?(0,r.html)(b\|\|(b=m`<h4 id="section-title"> ${0} ${0} </h4> ${0} ${0} `),this.title,this.info?(0,r.html)(l\|\|(l=m`<span id="in

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (33088)
Category:	downloaded
Size (bytes):	37900
Entropy (8bit):	5.398854998229405
Encrypted:	false
SSDEEP:	768:VZ1UoyaMG3HU5QGalv8C2wgEc6t2rVlPingrt2rVlPingFVTWw:VD3MG3HU5QGYd+6tNngrtNngF4w
MD5:	5B48E59983E9089922B7D8521B80430F
SHA1:	704C66721E3DEF8949E2802E441E7FA996D9EE1A
SHA-256:	72B3BF071604F361F5F6261C7F312EB5B01C035ACFE2F045872682B9A027B72E
SHA-512:	2A15B7045C0E58F32A68A7188501BA410872F6FAF5C855589DB87489D79129A678F88EF39B858D47E47EEBE58B82AE9B6DB76A3C5647336D8E6468595E688C6B
Malicious:	false
URL:	https://www.virustotal.com/gui/75927.802a112711bbd5680929.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[75927,47615,39626],{50250:(e,t,r)=>{r.d(t,{Q:()=>o});let s;const o=(0,r(48704).svg)(s\|\|(s=(e=>e)`. <svg xmlns="http://www.w3.org/2000/svg" fill="currentColor">. <g id="expand-less">. <path stroke-miterlimit="10" d="M18.9,3.5" />. <path. d="M12,9.6L12,9.6c0.1,0,0.3,0.1,0.4,0.1l3.7,3.7c0.2,0.2,0.2,0.5,0,0.7s-0.5,0.2-0.7,0L12,10.8l-3.4,3.4. c-0.2,0.2-0.5,0.2-0.7,0s-0.2-0.5,0-0.7l3.7-3.7C11.7,9.7,11.9,9.6,12,9.6z". />. </g>. </svg>.`))},61994:(e,t,r)=>{r.d(t,{m:()=>o});let s;const o=(0,r(48704).svg)(s\|\|(s=(e=>e)`. <svg xmlns="http://www.w3.org/2000/svg" fill="currentColor">. <g>. <path stroke-miterlimit="10" d="M18.9,3.5" />. <path. d="M12,14.9L12,14.9c-0.1,0-0.3-0.1-0.4-0.1L7.9,11c-0.2-0.2-0.2-0.5,0-0.7s0.5-0.2,0.7,0l3.4,3.4l3.4-3.4. c0.2-0.2,0.5-0.2,0.7,0s0.2,0.5,0,0.7l-3.7,3.7C12.3,14.8,12.1,14.9,12,14.9z". />. </g>. </svg>.`))},71515:(e,t,r

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60746)
Category:	dropped
Size (bytes):	60801
Entropy (8bit):	5.407598397341863
Encrypted:	false
SSDEEP:	1536:0sptvrT61UrilADEhId4r5qIbwbDUu18JttNngNtNngStNngN:mAwhIE59KDUu18D
MD5:	D22A865ACDA04A48039D1C52600D3D35
SHA1:	F6396A4C48A22F634D52D1344BE16B0360EB140D
SHA-256:	75FB6045435379F99C32AB1216A20E8693995C7780EF8D8F79AC95F3A1DC994B
SHA-512:	27030F9A1C2A3344CEAF34632E4A0EF34674ED851E07B7BD60A39D918F4541ACAB6D4DEE791385E41855B2198DF338E3F7E81A8108B7C114C9E5E468DBB48799
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[38347,5584,43820],{52419:(e,t,o)=>{var r=o(48704),s=o(16645),i=o(71012),a=o(9891),n=o(62832),l=o(82954),d=o(4988),c=o(12593),b=o(93349),p=o(57145),h=o(44052),u=(o(63956),o(32177)),m=o(51224);let g,v=e=>e;var f=function(e,t,o,r){var s,i=arguments.length,a=i<3?t:null===r?r=Object.getOwnPropertyDescriptor(t,o):r;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(e,t,o,r);else for(var n=e.length-1;n>=0;n--)(s=e[n])&&(a=(i<3?s(a):i>3?s(t,o,a):s(t,o))\|\|a);return i>3&&a&&Object.defineProperty(t,o,a),a};let y=class extends((0,a.ResponsiveMixin)(r.LitElement)){constructor(){super(...arguments),this.value="",this.mode="write",this.placeholder="",this.hideTextarea=!1}static get styles(){return(0,r.unsafeCSS)([u.A,m.A])}render(){var e,t,o,s,i;return(0,r.html)(g\|\|(g=v` <div id="toolbar" class="flex-column flex-lg-row ${0}"> <vt-ui-selector class="tabs" attr-for-selected="data-route" se

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43566)
Category:	dropped
Size (bytes):	43621
Entropy (8bit):	5.029401868339729
Encrypted:	false
SSDEEP:	768:mnRRSjyt2rVlPingVVGSjt2rVlPingVVGS4Dt2rVlPingVVGSv:+rGytNngVJjtNngVJ0tNngVJv
MD5:	57F33356C0A2D69EA3E4727D7BE6BC10
SHA1:	916BB61A73963A3AC9CC430022C94BF72532FE49
SHA-256:	7B3D515643BE590E5E228ECC69672C1D5CAAD3EC3A0AF6AD0650DDA85E41F9D7
SHA-512:	51F639D82D0FBB81870AC2B5F626EECA744ACAA7BED9E4EB46DA64D4114F846ACB8AB34D159EAB407B4845A03E21868B20ED8487DFAFBB759B076B0D6088583A
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[59084],{74570:(r,o,e)=>{var b=e(48704),t=e(16645),s=e(62832),a=e(85200),n=e(45241),d=e(95688),i=(e(42320),e(18124));let l,c,g=r=>r;var p=function(r,o,e,b){var t,s=arguments.length,a=s<3?o:null===b?b=Object.getOwnPropertyDescriptor(o,e):b;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(r,o,e,b);else for(var n=r.length-1;n>=0;n--)(t=r[n])&&(a=(s<3?t(a):s>3?t(o,e,a):t(o,e))\|\|a);return s>3&&a&&Object.defineProperty(o,e,a),a};let v=(l=class extends b.LitElement{render(){if(!this.campaign)return;const r=this.campaign.id?"mandiant"===this.campaign.source.toLowerCase()?d.Z8.getRedirectUrl("mandiantCampaigns",this.campaign.id\|\|this.campaign.name):d.Z8.getRedirectUrl("collection",this.campaign.id):null;return(0,b.html)(c\|\|(c=g`<vt-ui-menu> <button slot="trigger" class="border-0 btn btn-link badge rounded-pill bg-warning-subtle text-warning-emphasis" data-tooltip-text="${0}" @mous

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (60524)
Category:	downloaded
Size (bytes):	86400
Entropy (8bit):	5.277044395824353
Encrypted:	false
SSDEEP:	1536:EzmJWeCrHCCD6c/sXKM33tNngTtNngDtNngPAtNngAtNngptNngWtNng4:0HCCDfXH
MD5:	9021C89EA7AE7A33AEFC696EB4CC3E78
SHA1:	90882E5EDA65AF6744D2A89EC6E4EE535483E4D9
SHA-256:	EA9396E83FDAEBCB96EE5F023DA0EE123D7448C9C3B637368AB2D593D6965DA4
SHA-512:	8189C9E70D8733E52419F2631BF05E6E85DC33B58911559DD2697AE44146E00209FAEBD77780E5F0EF26333331660BE5EA94A1CA31BCF9EC1416A0CDEE295CA1
Malicious:	false
URL:	https://www.virustotal.com/gui/51452.65d2fafed16a04e8c3fc.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[51452],{78066:(e,r,t)=>{t(9891);var o=t(48704),s=t(16645),a=(t(38398),t(88964),t(51764),t(99122));let i,b,n,l,d=e=>e;var c=function(e,r,t,o){var s,a=arguments.length,i=a<3?r:null===o?o=Object.getOwnPropertyDescriptor(r,t):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)i=Reflect.decorate(e,r,t,o);else for(var b=e.length-1;b>=0;b--)(s=e[b])&&(i=(a<3?s(i):a>3?s(r,t,i):s(r,t))\|\|i);return a>3&&i&&Object.defineProperty(r,t,i),i};let p=class extends o.LitElement{constructor(){super(...arguments),this.alertsStats={critical:void 0,low:0,medium:0,high:0,info:0,success:0}}static get styles(){return(0,o.unsafeCSS)(a.A)}updated(e){var r;super.updated(e),(e.has("currentFilter")\|\|e.has("info"))&&null!==(r=this.info)&&void 0!==r&&r.length&&(this.currentFilter?this.sortedContextInfo=this.info.filter((e=>e.severity===this.currentFilter)):this.sortedContextInfo=this.sortBySeverity(this.info))}render(){va

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17021)
Category:	dropped
Size (bytes):	383521
Entropy (8bit):	5.658032925500807
Encrypted:	false
SSDEEP:	6144:puAs+syIJDyA0HgvICvzKtyCFjGgMShOmktR2lfyiRiEv:wTlJOLHgAPtxQtRShio
MD5:	F746DCF224DD4544164987CB846E5C9C
SHA1:	9A051465C1E5374967243335D931158BB0E2960C
SHA-256:	183A1942569F4D9F0E1B5A21D352E10E371B5E3C75690C6420414F1F32FC6665
SHA-512:	2D0ED1C186840F76980B061F55DE7F6ACA058E33B5CD411DDF035AB51005D27A63543CC09F85BB6110167CA9493FD90BAD4EFD3E07A17AA3C1B2F7DE5063D686
Malicious:	false
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":10,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":8},{"function":"__ogt_1p_data_v2","priority":10,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_l

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22434)
Category:	dropped
Size (bytes):	22489
Entropy (8bit):	5.344987209132273
Encrypted:	false
SSDEEP:	384:O+oprOpEW1QoaUOZahx66t2rVlPingnHGALMt2rVlPinglI:O+7eW1Qy66t2rVlPingLLMt2rVlPingq
MD5:	09FC1A91BABD700AF6166E1FD40A7CD8
SHA1:	ECBABA2437438866537F13486C016A1A2C4845A3
SHA-256:	71B9D7D00B0FCFD58BD69985D4F51D2693232FEC2250F62EE514CE9BB3CA3343
SHA-512:	C210677EC9B8E4D1AF90424C31F34E317C98065F211963C0CBE3E177622F9038DFF055F19134190996D113018B737B324D7CC71D727EC5DCD8A3385BF32EC688
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[22232],{27270:(e,r,t)=>{t.d(r,{v:()=>u});var s=t(49272),o=t(48704),a=t(16645),b=t(62832),i=t(66813),n=t(15323),d=t(83170);let c,l,g,p,m,y=e=>e;var f=function(e,r,t,s){var o,a=arguments.length,b=a<3?r:null===s?s=Object.getOwnPropertyDescriptor(r,t):s;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)b=Reflect.decorate(e,r,t,s);else for(var i=e.length-1;i>=0;i--)(o=e[i])&&(b=(a<3?o(b):a>3?o(r,t,b):o(r,t))\|\|b);return a>3&&b&&Object.defineProperty(r,t,b),b};function u(e){return e===s.Verdict.VERDICT_MALICIOUS?n.shieldSlashIcon:e===s.Verdict.VERDICT_SUSPICIOUS?n.shieldExclamationMarkIcon:e===s.Verdict.VERDICT_BENIGN?n.shieldCheckIcon:n.questionMarkCircleIcon}let h=(c=class extends o.LitElement{constructor(){super(...arguments),this.loading=!1}get threatScore(){var e;return null===(e=this.gtiAssessment)\|\|void 0===e\|\|null===(e=e.threat_score)\|\|void 0===e?void 0:e.value}get verdict(){var e;const r=

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9543)
Category:	dropped
Size (bytes):	23911
Entropy (8bit):	5.455783304372154
Encrypted:	false
SSDEEP:	384:eJ1mvaLlQ75saP5amxCQHyr9LVVkyXmWdCRgprp6Ru49+A5nlSgBgZypXNwuw+do:eTMGa5sQH+BVkyXmWdqgprp6Ru49/5nU
MD5:	B471914FA6A4B6812C6C7405C359A076
SHA1:	F272F7AAE5B8D97BE0F00F62F5EF66BD7769FA47
SHA-256:	E6DF2C2C2733AF3EFDA0B56052DBD74ED117CC88379CEB3DF0C70D628B81E8DF
SHA-512:	5AD3D8DAA6482271270C95E528FD171FF026FB9008E256EFB2807F07D185DAE12635BD0B37797DD8B7CA81486C8F8B354936AE55CC73BDE9683A9E60961F0120
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[33274,88295,82597,14416,66277,33668,86538,42094,86539,7134,93496,16757,48004,93154,69045,34949,31076,47268,9533,57662,6971,66084,40261,38367,86457,79388,85780,78420,29169,47333,63140,52252,6089,67798,16077,42658,22671,40340,3798,47623,93424,53040,64850,57798,48596,24247,25530,4191,55403,26211,146,21915,77100,46687,4529,46563,33420,76962,43165,53291,56149,22839,77827,10171,21284,61410,7923,32283,19565,30980,46576,63433,33994,84661,866,30113,55300,9091,65582,37786,52438,82579,47315,86238,4275,63399,37457,74359,88964,62212,31826,1645,43672,5857,5634,45591],{33274:(o,r,n)=>{var e=n(48704),c=n(16645),t=n(62832),s=n(42303),i=n(45241),a=n(62508),d=n(81446);let l,b,I,p,h,m=o=>o;var g=function(o,r,n,e){var c,t=arguments.length,s=t<3?r:null===e?e=Object.getOwnPropertyDescriptor(r,n):e;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)s=Reflect.decorate(o,r,n,e);else for(var i=o.length-1;i>=0;i--)(c=o

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (18521)
Category:	downloaded
Size (bytes):	18575
Entropy (8bit):	5.443826231986199
Encrypted:	false
SSDEEP:	384:EJDOGqAmWxxCetLkEIOsusSfp21taCyj18m:EgTGxxNtwUJgaCyZ8m
MD5:	647AB516B5A83C77225E1E942EA8A9C5
SHA1:	AD8EFFEEFE75609E25E15B5F5BFD27B9D6B35C48
SHA-256:	494342A2FCE3B93BCCBD0D2746E910B4F4C577B8013FBC9F6AE0604BC3B30D2E
SHA-512:	C4244E912CEAE381D6CA6685586CAF63F60E81240FF1AA1F997081662B5AAD8462C85CC74A226F26BE71D6D4171CF38BEEB3040FE493BA5ECF7DEF07231C73EF
Malicious:	false
URL:	https://www.virustotal.com/gui/2119.c23c584763439c660ad5.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[2119,42094,7923],{39431:(t,e,i)=>{i.r(e),i.d(e,{checkIcon:()=>n.checkIcon});var n=i(15323)},51436:(t,e,i)=>{i.r(e),i.d(e,{refreshIcon:()=>n});const n=i(15323).arrowRotateRightIcon},2119:(t,e,i)=>{i.r(e),i.d(e,{default:()=>dt});var n=i(48704),s=i(16645),o=(i(9891),i(39431)),r=i(47312),a=i(51436),l=i(88999),c=i(88237),d=i(22894),h=i(62832),p=i(85200),u=i(15323),v=i(90672),g=i(96987),y=i(45241),b=i(62508),f=i(95688),m=i(44052),$=i(67808),w=(i(95528),i(71636)),x=(i(27197),i(49802));let k,_,I,S,D,A,j,R,O,T,L,P,U,z,E,C=t=>t;function F(t,e){var i=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),i.push.apply(i,n)}return i}function K(t){for(var e=1;e<arguments.length;e++){var i=null!=arguments[e]?arguments[e]:{};e%2?F(Object(i),!0).forEach((function(e){V(t,e,i[e])})):Object.getOwnPropertyDesc

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (845)
Category:	downloaded
Size (bytes):	850
Entropy (8bit):	5.1716130723048535
Encrypted:	false
SSDEEP:	24:1cqFUWLBHslgT9lCuABAT8q8uoB7HHHHHHHYqmffffffo:iyKlgZ01BAAJuSEqmffffffo
MD5:	704F550903340945C2D46049DACA97D4
SHA1:	57D7EE33A97FC8BEC9A314A03CE6257498AEE605
SHA-256:	581FBC9CC31F404B5902A1E009D17A9B9C7840E5ED5A30E51F2FFE1393D6E972
SHA-512:	3138F5696FE671083CED90E02652FBF10939CA671DD00C64FACCB552466354A9623DFDA15FDB26A701FB681E7A40DBFE25A2ADB15ADED7B2763795FA844F8CC2
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["dividend stocks","wordle today january 15","buffalo bills vs baltimore ravens","wolf moon full moon","elder scrolls iv oblivion remake","jared padalecki medical drama","blue origin new glenn rocket launch","school closings in tn for tomorrow"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggesteventid":"-3695026443236303286","google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"]}]

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (44027)
Category:	downloaded
Size (bytes):	93938
Entropy (8bit):	5.42767011789847
Encrypted:	false
SSDEEP:	1536:lkxVq1oQ0dVm7tNngdbewttNngZd9ztNngOfk8nNRzJcyGbS:S/mKps
MD5:	53A2EBE4B0C92003164E23554AFEC369
SHA1:	5FF0BF15EE5013C10645B6D23E8F296B7C9D132B
SHA-256:	A4D50844D2BF693621F2113F7666CC8E250DB290956A76CDD90D5D53738467CA
SHA-512:	F6D16A4DD6AD2D7492508CA17864182E58C868907A63BC3F1B7666F45C27BE9768730C5C6F5B2FA6E78E42A4405F96B437757504C3DDD1F6241D265E38D497EB
Malicious:	false
URL:	https://www.virustotal.com/gui/88220.73f555a4c45fa4d35b05.js
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[88220,50854,98900],{88220:(r,e,t)=>{"use strict";t.r(e),t.d(e,{default:()=>vr});var o=t(48704),a=t(16645),s=t(62832),n=t(21903),i=t(80909),b=t(66813),l=t(15323),c=t(95688),d=t(44052),h=(t(45580),t(45386)),p=t(35034),u=t(98696);let m,v,g=r=>r;var f=function(r,e,t,o){var a,s=arguments.length,n=s<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,t):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(r,e,t,o);else for(var i=r.length-1;i>=0;i--)(a=r[i])&&(n=(s<3?a(n):s>3?a(e,t,n):a(e,t))\|\|n);return s>3&&n&&Object.defineProperty(e,t,n),n};let y=(m=class extends o.LitElement{constructor(){super(...arguments),this.query="",this.isSearching=!1}openDialog(r){h.LK.open("vt-ui-easy-search-form-modal",{selectedMode:r,updateSearchInput:r=>{this.inputAutocomplete.query=r,r&&(this.isSearching=!0)},onRedirect:()=>{this.isSearching=!0}})}focus(){var r;null===(r=this.inputAutocomplete)\|\|void 0===r\|\|r.foc

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (21570)
Category:	dropped
Size (bytes):	21625
Entropy (8bit):	5.4554497838308125
Encrypted:	false
SSDEEP:	384:/fkH9W6mDXW3wST7hrNnt2rVlPingeAEUaxrfD95r/OIaGVvHfbF87z1FwoYv51L:EH9W68W3w0Lnt2rVlPingMGTwoYvz
MD5:	49C805291A21AB16009DFCF4C4842771
SHA1:	921577D92111950381E36A74BE346703DF32347E
SHA-256:	3E4D61431B0E9A7DFC57CA4FC3FC4B1729A4D8015D0B5D3817909312E488860B
SHA-512:	CF6D53A23E0B355FA2F907770AC422BEE5C6B2D119272651AA8305A4F89D1AC6F27C697DD19078C3E5AE6AA857FE2676A0C39CA32D016FD2C47E00C7FF95F147
Malicious:	false
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[26044],{26044:(t,e,r)=>{"use strict";r(9891);var a=r(48704),s=r(16645),o=r(85200),i=r(75510),l=r.n(i),b=r(94456),n=r.n(b),d=r(92619),c=r(15323),g=r(61720),p=r(96987),u=r(45241),h=r(95688),m=r(71012),v=(r(26928),r(84034),r(9976));let f,y,w,x,k,C,$,L,Z,j,z,D,M,A,R,S,_,I=t=>t;var V=function(t,e,r,a){var s,o=arguments.length,i=o<3?e:null===a?a=Object.getOwnPropertyDescriptor(e,r):a;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)i=Reflect.decorate(t,e,r,a);else for(var l=t.length-1;l>=0;l--)(s=t[l])&&(i=(o<3?s(i):o>3?s(e,r,i):s(e,r))\|\|i);return o>3&&i&&Object.defineProperty(e,r,i),i};let O=class extends m.D{constructor(){super(...arguments),this.stats=[],this.isUpdatingFilters=!1,this.headless=!1}static get styles(){return(0,a.unsafeCSS)(v.A)}authorClick(t){var e;const r=null===(e=t.currentTarget)\|\|void 0===e?void 0:e.dataset.author;this.handleAction("author",r)}submitterClick(t){var e;const r=null===(e=t

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1212)
Category:	downloaded
Size (bytes):	499388
Entropy (8bit):	5.579655554722771
Encrypted:	false
SSDEEP:	6144:vaI+ZDozC5CzD4bU2bUZT8zu1NOu3VKDhuOGgX/gN1nnJLRzmpzbOsG26e0ZUOXQ:/ZzMuVvnnzoQ2xOXV8xvv3T
MD5:	6A59CAC8D780223FC587AA4BD790B3BA
SHA1:	5CC6F0388E59C7F187308B1FF4FF76C87B901361
SHA-256:	BA7B8B6A654BC294830E64D30B4CD18521DCF06D19EAFCA2617C4C2874FFA9DE
SHA-512:	DAEA63919C0D61399E5AF677233265EC2F13B84DA15516808DE47407BDBE77BE0A83320A34BCFA00B465FD873745EC3914F06FB4C504022D6DDB8B5267F0570F
Malicious:	false
URL:	https://www.gstatic.com/dialogflow-console/fast/df-messenger/prod/v1/df-messenger.js
Preview:	/*.Copyright 2024 Google LLC.This Software is made available under Section 3 of the General Service Terms of the Google Cloud Platform Service Specific Terms at https://cloud.google.com/terms/service-terms, except that Customer may additionally embed and/or distribute this Software to Customer End Users in connection with Customer Applications integrating with the Dialogflow Service../'use strict';var DF_M;function DF_Maa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var DF_Mba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function DF_Mca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var DF_Ma=DF_Mca(this);.function DF_Mb(a,b){if(b)a:{var c

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	452054
Entropy (8bit):	5.013404989452136
Encrypted:	false
SSDEEP:	1536:grqx/OFPlFGcycoT//maQxdE3eoOwshv9pS3Hfx8L9DkhqFiEUxuegRrscerXuwg:gXFNfvE/x8LkXxq0PuMSJjhk5pfbmsO
MD5:	98807EAA5A59B11002059D4F6016E583
SHA1:	A452EE263D0D79B504FF1BA324183B784DA90B81
SHA-256:	A17627B116A26D370EFFEBB99BE69C76CC3F0842326EEC74D691F4C820FD8E27
SHA-512:	98603EB0A2E2FEF2A2BE05377C0F11C12B0E5166987024BB81AE852671BDBB109FD48AE2ED219397E556D0EFF27433D1D9744FD3CB1C1CD45A97F52ECAFE8B0E
Malicious:	false
URL:	https://online.access.secure.bankofamerlica.com/assets/vipaa-v4-jawr.css
Preview:	html{background:#FFF;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body,div,dl,dt,dd,ul,ol,li,h1,h2,h3,h4,h5,h6,pre,code,form,fieldset,legend,input,textarea,p,blockquote,th,td{margin:0;padding:0}table{border-collapse:collapse;border-spacing:0}fieldset,img{border:0}address,caption,cite,code,dfn,th,var{font-style:normal;font-weight:normal}li{list-style:none}caption,th{text-align:left}h1,h2,h3,h4,h5,h6{font-size:100%;font-weight:normal}q{quotes:none}q:before,q:after{content:''}abbr,acronym{border:0;font-variant:normal}sub{vertical-align:text-bottom}input,textarea,select{font-family:inherit;font-size:inherit;font-weight:inherit}article,aside,details,figcaption,figure,footer,header,hgroup,nav,section,summary{display:block}audio,canvas,video{display:inline-block;display:inline;zoom:1}audio:not([controls]){display:none;height:0}[hidden]{display:none}b,strong{font-weight:bold}dfn{font-style:italic}mark{background:#ff0;color:#000}code,kbd,pre,samp{font-family:monospace,serif;_font-f

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2410)
Category:	downloaded
Size (bytes):	175017
Entropy (8bit):	5.547141709627909
Encrypted:	false
SSDEEP:	3072:ZzKYRicPAENEJ8X5rpzKSoi5O4NmHha+q5ByukhCOWomLCHiYyKfQ1fbK0jOJv6B:ZzKYRPAENEJ+pKSoUO4NmHhbq5ByukhM
MD5:	DE73B70C2E96AA995C1D89F9DE01D399
SHA1:	D72592A0BF7FC706B4063B146FA0F505D9598E37
SHA-256:	47051D5F0947B959605CA98298809213203547BD992E9EC13557B40547F5228F
SHA-512:	7C01A3EC31D67C79BDBFFCF166E8F61DFED6EBCEF56F0BBFAE4EFAA363E0F797E397C054183AC16515F1AA34B1C6E19ABB2EBF3F9C5CA85EEAE9B173D657028B
Malicious:	false
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.WSo7OLdFZck.2019.O/rt=j/m=q_dnp,qmd,qcwid,qapid,qald,qads,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTu3OIbomB3nx1wiDyRkhdiMoOpjsA"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.Zi=function(a){if(4&a)return 4096&a?4096:8192&a?8192:0};_.$i=class extends _.Q{constructor(a){super(a)}};.}catch(e){_._DumpException(e)}.try{._.aj=function(a,b,c){a=_.vb(a,b,c);return Array.isArray(a)?a:_.Cc};_.bj=function(a,b){a=2&b?a\|2:a&-3;return(a\|32)&-2049};_.cj=function(a,b){a===0&&(a=_.bj(a,b));return a\|1};_.dj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.ej=function(a,b,c){32&b&&c\|\|(a&=-33);return a};._.fj=function(a,b,c,d,e,f,g){a=a.ha;var h=!!(2&b);const k=h?1:e;f=!!f;g&&(g=!h);e=_.aj(a,b,d);var l=e[_.v]\|0;h=!!(4&l);if(!h){l=_.cj(l,b);var n=e,p=l,r=b;(l=!!(2&p))&&(r\|=2);var q=!l;let x=!0,D=0,C=0;for(;D<n.length;D++){const H=_.Xa(n[D],c,r);if(H instanceof c){if(!l){const M=_.Ba(H.ha);q&&(q=!M);x&&(x=M)}n[C++]=H}}C<D&&(n.length=C);c=p\|4;p=x?c\|16:c&-17;p=q?p\|8:p&-9;n[_.v]=p;l&&Object.freeze(n);l=p}if(g&&!(8&l\|\|!e.length&&(k===1\|\|k===4&&32&l))){_.dj(l)&&(e=_.Ea(e),l=_.bj(l,b),b=_.ub(a,b,d,e));g=.e;c=l;for(n=0;n<g

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
URL:	https://online.access.secure.bankofamerlica.com/assets/powered_by_logo.svg
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57873)
Category:	downloaded
Size (bytes):	57927
Entropy (8bit):	5.36104337922119
Encrypted:	false
SSDEEP:	768:4sZz8A9NlTM9+gLiJfCOgQP4gGc6CytMWagN+gQ6mC28Sn8aMsk5t2rVlPing2tv:4DwHTMXLirj78ok5tNng2tNngGtNngK
MD5:	1096291155579002374D8A9B0691BE7B
SHA1:	CC17F4CB01CC6FDB7F72C8E7D9EB26A912ED24EA
SHA-256:	C01611DCB34C673AEB59E9F8BD6E3A6EFE0E5412F351B73C4D107E09EAE93EF6
SHA-512:	41E363301C29D0B8A1C55B39D7F097765592C1546746665C18417018897538DC22A866B2722A88913ED6CD2B1097981904FB871F2B1769A1C6C1B7A7B0E0040B
Malicious:	false
URL:	https://www.virustotal.com/gui/5200.cbf2a82371bebc862a72.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[5200,23397,66262,89880,71347],{86260:(e,t,r)=>{var o=r(48704),i=r(16645),s=r(60265);let n,a,l=e=>e;var b=function(e,t,r,o){var i,s=arguments.length,n=s<3?t:null===o?o=Object.getOwnPropertyDescriptor(t,r):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(e,t,r,o);else for(var a=e.length-1;a>=0;a--)(i=e[a])&&(n=(s<3?i(n):s>3?i(t,r,n):i(t,r))\|\|n);return s>3&&n&&Object.defineProperty(t,r,n),n};let d=class extends o.LitElement{static get styles(){return[(0,o.unsafeCSS)(s.A)]}render(){return this.href?(0,o.html)(n\|\|(n=l` <a .href="${0}"><slot></slot></a> `),this.href):(0,o.html)(a\|\|(a=l` <slot></slot> `))}};b([(0,i.property)({type:String})],d.prototype,"href",void 0),d=b([(0,i.customElement)("vt-ui-pivot")],d)},97119:(e,t,r)=>{r.r(t),r.d(t,{feedIcon:()=>o});const o=r(15323).squareRssIcon},42477:(e,t,r)=>{r.r(t),r.d(t,{indeterminateCheckBoxIcon:()=>o});const o=r(15323).minusIc

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7256), with no line terminators
Category:	downloaded
Size (bytes):	7256
Entropy (8bit):	5.360111274064759
Encrypted:	false
SSDEEP:	192:FtsapT1cxgyv5AvnHeuAprvC7wtVAanvnvdUhW5QUPeyun7ne9OyI8TrTuZu6:FBpOgyv50nHeuApLC7wtVAavvdKAZWbv
MD5:	8E00E06F6D68088E234DB788747C51D7
SHA1:	F405CE3F1684FDA0EA2D562EC70EC7811F37C3E9
SHA-256:	D40C2B7AADAFBDCCF79D0998BFDEC4F3C962768A28112BF6BAC6F0402041DFF1
SHA-512:	5546E66F8D5EB8DFEACC6C363CC0E30199D88ABBCF2F4C03C180389C2083547086084526E01A2ED42CEAC6ABD67E704DA81269F75F21BEF51C3F22434ED34989
Malicious:	false
URL:	https://www.virustotal.com/gui/
Preview:	<!doctype html><html lang="en"><head><script>!function(e,t,a,n,g){e[n]=e[n]\|\|[],e[n].push({"gtm.start":(new Date).getTime(),event:"gtm.js"});var m=t.getElementsByTagName(a)[0],r=t.createElement(a);r.async=!0,r.src="https://www.googletagmanager.com/gtm.js?id=GTM-KFBGZNL",m.parentNode.insertBefore(r,m)}(window,document,"script","dataLayer")</script><script>"virustotal.com"==document.location.host&&(document.location.href=document.location.href.replace("virustotal.com","www.virustotal.com"))</script><meta charset="utf-8"><meta name="generator" content="VirusTotal"><meta name="viewport" content="width=device-width,minimum-scale=1,initial-scale=1,user-scalable=yes"><title>VirusTotal</title><meta name="description" content="VirusTotal"><base href="/gui/"><script>window.VTConfig=JSON.parse('{"apiUrl":"/api-proxy","apiRoute":"ui","firebaseApiKey":"AIzaSyBC8n5UX1E6olWNYbCk4_49jBW_CXiYtj8","firebaseAuthDomain":"virustotalcloud.firebaseapp.com","captchaSiteKey":"6Le-FTYqAAAAAKhTKMsdty7T9sOWkICH4U

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 9 x 135, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3119
Entropy (8bit):	7.88614915155895
Encrypted:	false
SSDEEP:	48:l/6DocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODWIbhhIs:lSDZ/I09Da01l+gmkyTt6Hk8nTWInIs
MD5:	CDCB0F012C00908030C706B328C6325E
SHA1:	40B1D7C103B08787C7E76CCF00A7174938C18CEB
SHA-256:	2A1B1589E316D02AB75481E7AA88C9975AFD2E87F17982FB6D38B6EBE2425A4C
SHA-512:	F52732746CCEF888E93AA38A6FB80B20DDD21F4100BCDF4CA0D1FEBE593F1BC2ABC4215B359F47CDA7E27B036D6B281669FF469AB1E151AECA1C51CEA98C963D
Malicious:	false
URL:	https://online.access.secure.bankofamerlica.com/assets/sign-in-sprite.png
Preview:	.PNG........IHDR..............+s.....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.599963902086101
Encrypted:	false
SSDEEP:	3:qTkIKuJzhtLjcZNQEXRnBeBvETbjSraDiSABFESwzRx3DW:qTIuJzh5jwuEX8EurzEPzRx3y
MD5:	221C5068A9B8ABADB65566698A2E54D2
SHA1:	2F61C62B38CBA22D7FC5311D02E34D0697A31845
SHA-256:	BFB286554B24DB87B6CBCB6E68BE23F89DEE1BE4D7DB544D1E7C97C45664E0DF
SHA-512:	FFDA24061CD9DCA9F6C2CAE0FF791C478B8B85840A7753E8EEDA4709BF80F7174FEE49C3BA7EF0BA615106981CF52362B1D5F9D90C1F580231DFC3BF22D1F69C
Malicious:	false
Preview:	<!doctype html>.<html lang=en>.<title>405 Method Not Allowed</title>.<h1>Method Not Allowed</h1>.<p>The method is not allowed for the requested URL.</p>.

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	3.9353986674667634
Encrypted:	false
SSDEEP:	3:VQAOx/1n:VQAOd1n
MD5:	6FED308183D5DFC421602548615204AF
SHA1:	0A3F484AAA41A60970BA92A9AC13523A1D79B4D5
SHA-256:	4B8288C468BCFFF9B23B2A5FF38B58087CD8A6263315899DD3E249A3F7D4AB2D
SHA-512:	A2F7627379F24FEC8DC2C472A9200F6736147172D36A77D71C7C1916C0F8BDD843E36E70D43B5DC5FAABAE8FDD01DD088D389D8AE56ED1F591101F09135D02F5
Malicious:	false
URL:	https://www.google.com/async/newtab_promos
Preview:	)]}'.{"update":{"promos":{}}}

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (18521)
Category:	dropped
Size (bytes):	18575
Entropy (8bit):	5.443826231986199
Encrypted:	false
SSDEEP:	384:EJDOGqAmWxxCetLkEIOsusSfp21taCyj18m:EgTGxxNtwUJgaCyZ8m
MD5:	647AB516B5A83C77225E1E942EA8A9C5
SHA1:	AD8EFFEEFE75609E25E15B5F5BFD27B9D6B35C48
SHA-256:	494342A2FCE3B93BCCBD0D2746E910B4F4C577B8013FBC9F6AE0604BC3B30D2E
SHA-512:	C4244E912CEAE381D6CA6685586CAF63F60E81240FF1AA1F997081662B5AAD8462C85CC74A226F26BE71D6D4171CF38BEEB3040FE493BA5ECF7DEF07231C73EF
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[2119,42094,7923],{39431:(t,e,i)=>{i.r(e),i.d(e,{checkIcon:()=>n.checkIcon});var n=i(15323)},51436:(t,e,i)=>{i.r(e),i.d(e,{refreshIcon:()=>n});const n=i(15323).arrowRotateRightIcon},2119:(t,e,i)=>{i.r(e),i.d(e,{default:()=>dt});var n=i(48704),s=i(16645),o=(i(9891),i(39431)),r=i(47312),a=i(51436),l=i(88999),c=i(88237),d=i(22894),h=i(62832),p=i(85200),u=i(15323),v=i(90672),g=i(96987),y=i(45241),b=i(62508),f=i(95688),m=i(44052),$=i(67808),w=(i(95528),i(71636)),x=(i(27197),i(49802));let k,_,I,S,D,A,j,R,O,T,L,P,U,z,E,C=t=>t;function F(t,e){var i=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),i.push.apply(i,n)}return i}function K(t){for(var e=1;e<arguments.length;e++){var i=null!=arguments[e]?arguments[e]:{};e%2?F(Object(i),!0).forEach((function(e){V(t,e,i[e])})):Object.getOwnPropertyDesc

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19451)
Category:	downloaded
Size (bytes):	19506
Entropy (8bit):	5.335449756420132
Encrypted:	false
SSDEEP:	384:bjDUOw1unXUo9qiyMPYBAxmlh7OJ/CBht2rVlPinggWEQRTMNqP8La:bjD/w1akSyGaAyt2rVlPingpVTW5La
MD5:	F9E6764DACEA0C68BB88CE66856CB668
SHA1:	847A74439432BDC5EBC63DC6D6B84387153D6A6C
SHA-256:	6F6D7B0819A72FFE882CD99E7E7ECD90A20CE64441EE5B60D78B594ED0ECD139
SHA-512:	34E8525C1AB1F1F55A1659B59AC8B8B4A3A9D0790D98E1B19284212334280D6A6D6A9B2DFA7FE148952B8CAE6255591AAC95F6454D445F2CD6D101CAEC80A61D
Malicious:	false
URL:	https://www.virustotal.com/gui/88116.6518b1d1356f23e2144b.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[88116,86243],{10212:(e,r,t)=>{var o=t(48704),s=t(16645),i=t(62832),a=t(15323),n=t(30132),b=t(95688),d=t(49608);let c,l,u=e=>e;var p=function(e,r,t,o){var s,i=arguments.length,a=i<3?r:null===o?o=Object.getOwnPropertyDescriptor(r,t):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(e,r,t,o);else for(var n=e.length-1;n>=0;n--)(s=e[n])&&(a=(i<3?s(a):i>3?s(r,t,a):s(r,t))\|\|a);return i>3&&a&&Object.defineProperty(r,t,a),a};const f={google:a.google1Icon,twitter:a.xTwitterIcon,github:n.githubIcon,microsoft:a.microsoft1Icon};let g=class extends o.LitElement{constructor(){super(...arguments),this.disabled=!1,this.referrerRedirectTo=""}static get styles(){return(0,o.unsafeCSS)(d.A)}render(){return(0,o.html)(c\|\|(c=u` <div class="vstack gap-3"> ${0} </div>`),Object.keys(f).map((e=>(0,o.html)(l\|\|(l=u` <a class="btn btn-outline-primary rounded-5 hstack gap-2 align-self-center ${0}" .hr

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32287)
Category:	dropped
Size (bytes):	43309
Entropy (8bit):	5.403164560667473
Encrypted:	false
SSDEEP:	768:o/BuTnAqIx0jaDRxMfJCK+ASb0/TACt77apru8PCfgkTPXCOFdRFUgIC7t2rVlP6:ownKRxEv+AS2hNmru8PCfgkTPDDtNngK
MD5:	A97A651F44774CBF393D242A98FCF10F
SHA1:	CDCF3F2BB9E514040757928728D0E51407E96844
SHA-256:	BBD3BF9F6E592BF42C7B8AED006C3EF908A63BBDC38C38693CC24B1549B84359
SHA-512:	2D5111C40F9385A5B7EA870905318E260A6B66C14F3DE32E9BBFF289EAB5C6ED2AC1DD78F1E4F8A36F6C5365A3262AB1FAFD996560862DB8EF930E4EFFDE7553
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[13420],{50071:(t,e,s)=>{var r=s(48704),i=s(16645),o=s(64309);let n,a=t=>t;var l=function(t,e,s,r){var i,o=arguments.length,n=o<3?e:null===r?r=Object.getOwnPropertyDescriptor(e,s):r;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(t,e,s,r);else for(var a=t.length-1;a>=0;a--)(i=t[a])&&(n=(o<3?i(n):o>3?i(e,s,n):i(e,s))\|\|n);return o>3&&n&&Object.defineProperty(e,s,n),n};let d=class extends r.LitElement{constructor(){super(...arguments),this.options=[],this.selectedOptions=[]}static get styles(){return(0,r.unsafeCSS)(o.A)}handleOptionSelected(t){const e=t.target.dataset.value;if(void 0===e\|\|this.selectedOptions.includes(e))return;const s=new CustomEvent("option-changed",{detail:{value:e},bubbles:!0,cancelable:!0,composed:!0});this.dispatchEvent(s)}render(){return this.options.map((t=>(0,r.html)(n\|\|(n=a`<button class="dropdown-item" role="menuitem" ?data-submenu-close-on-click

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (29011)
Category:	downloaded
Size (bytes):	29065
Entropy (8bit):	5.188983339538343
Encrypted:	false
SSDEEP:	384:uoNqnfwVbxeh+1tUFjg7DeEGNpL77tuwt2rVlPingQjQVxeVxEWEQRGcW9tRwPe3:oQYjeCEGNpL77tuwt2rVlPingqVGD9l
MD5:	FE8D93C935F4C29034C8D1AB538E522D
SHA1:	AF7F55270C6E30134EBDAC44F5B67788468FED0E
SHA-256:	7B25D1A9C143B0FBFBC47B4BD610F561D35C6795B69C399CBEA4A5A66A061D0A
SHA-512:	B076E71F287864D8830F88F46FB84DA6D1F46ED906A59E69C7FBFDA17A82D17F1B4C911BEFC8901AF7E533E2FCD80AB0B0F7A21FF3ECFCD1234F5939608FD4C3
Malicious:	false
URL:	https://www.virustotal.com/gui/5978.8367bb052a47f57e9d55.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[5978],{5978:(r,e,o)=>{var t=o(80909),s=o(13570),a=o(48704),b=o(16645),n=o(15323),i=o(15431),l=o(27257),d=o(9417),c=o(45241),g=o(95688),p=o(44052),u=o(71012),m=(o(62604),o(12180)),h=o(7555),f=o(1306);let v,y,w,k,x,U,$,S,R,P=r=>r;function E(r,e,o,t,s,a,b){try{var n=r[a](b),i=n.value}catch(r){return void o(r)}n.done?e(i):Promise.resolve(i).then(t,s)}function z(r){return function(){var e=this,o=arguments;return new Promise((function(t,s){var a=r.apply(e,o);function b(r){E(a,t,s,b,n,"next",r)}function n(r){E(a,t,s,b,n,"throw",r)}b(void 0)}))}}var T=function(r,e,o,t){var s,a=arguments.length,b=a<3?e:null===t?t=Object.getOwnPropertyDescriptor(e,o):t;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)b=Reflect.decorate(r,e,o,t);else for(var n=r.length-1;n>=0;n--)(s=r[n])&&(b=(a<3?s(b):a>3?s(e,o,b):s(e,o))\|\|b);return a>3&&b&&Object.defineProperty(e,o,b),b};let _=class extends u.D{constructor(){super(

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13367)
Category:	dropped
Size (bytes):	18656
Entropy (8bit):	5.441173062148875
Encrypted:	false
SSDEEP:	384:jDSyKPPCKO0TLbLslquWmknqGgp8Pt2rVlPingFfs:PSyy6v0THwQurknqGU8Pt2rVlPingBs
MD5:	5A262599A9C60C11924C208437023030
SHA1:	92E4692DFDC68A7B07D61A3EF392E83B7B1DA670
SHA-256:	6DDD1DECA5996E1ED7827C9191E0D7859B6110EE77E330EE20CFC04BB4DE014F
SHA-512:	5750C97FF9A82578D3FE5EDDA72F39100C8F194B051DCBF571860650239B350F080EDBA76EA77AE79345E8F3EF25A61C752C3A92899D0020CD85E4CBE7112B8B
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[64630],{64630:(e,t,r)=>{r.d(t,{f:()=>B});var o=r(22894),i=r(56870),s=(r(9891),r(47123)),a=r(48704),n=r(16645),d=r(62832),l=r(85200),b=r(14819),c=r(95341),p=r(64767),h=r(40946),m=r(93842),f=r(15431),g=r(96987),u=r(45241),v=r(71012),y=r(95688),w=r(9354);let x,k,$,_,O,j=e=>e;var S=function(e,t,r,o){var i,s=arguments.length,a=s<3?t:null===o?o=Object.getOwnPropertyDescriptor(t,r):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(e,t,r,o);else for(var n=e.length-1;n>=0;n--)(i=e[n])&&(a=(s<3?i(a):s>3?i(t,r,a):i(t,r))\|\|a);return s>3&&a&&Object.defineProperty(t,r,a),a};const C=new Set(["bundled_files","contacted_urls","execution_parents","pcap_parents","subdomains","commonality","downloaded_files","intelligence","pe_resource_parents","communicating_files","email_parents","itw_domains","itw_ips","referrer_files","urls","compressed_parents","embedded_domains","itw_urls","resolutio

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3220
Entropy (8bit):	7.8841671438689325
Encrypted:	false
SSDEEP:	48:VocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODJ2tN9iyU8/a:VZ/I09Da01l+gmkyTt6Hk8nTJYit8S
MD5:	A1874BEC60E4440A4C0D240EF3D0A385
SHA1:	51E42F8B4483CFE0107394675E20C51ACB1ADB33
SHA-256:	E1AC56AE25629E508F729B799D563D71920902A4CB26CF3BB602BEB3E368775E
SHA-512:	616B596626A853F0B61BDEF160056354B54F0D3A43456F3B64C6EE661B556DEEC2D713787580D4694494D303653CE6E557DE3C3B40A7CE59E2527E2558C66256
Malicious:	false
Preview:	.PNG........IHDR................a....pHYs...........~....OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	387
Entropy (8bit):	4.9312030554481465
Encrypted:	false
SSDEEP:	6:jAPmN8dvaa4UEIVKysysAi9LRQctL9HLR0uBLAk59Xr2Ahn4nuMpOLAk+TwLIoAE:eyqLEIg/B1ftLl6W59XCAhn4nuL+3C
MD5:	C263FCECC8E1EAA9632379E1A4C17A38
SHA1:	343EEB1D6CEBEA499EDAAC92E1DA00A9AF5696C3
SHA-256:	921308E9DA500865EC74BCF7A823CD09D79054BE1EA7CA432E5214CEB5B0A40F
SHA-512:	A9208A4730EE6FADA6D4796EAE7FAEDC88392FA0AF70104881AA55E50D2D1C7EF3A863421F42CD9883039021BCD407C3AAAC44C074C3E10375DDB19CFA9F05F9
Malicious:	false
URL:	https://www.virustotal.com/gui/static/opensearch.xml
Preview:	<OpenSearchDescription xmlns="http://a9.com/-/spec/opensearch/1.1/">..<ShortName>VT Search</ShortName>..<Description>Use Virustotal to search entities</Description>..<Url type="text/html" template="https://www.virustotal.com/gui/search/{searchTerms}"/>..<Image height="16" width="16" type="image/x-icon">https://www.virustotal.com/gui/images/favicon.png</Image>.</OpenSearchDescription>.

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19129)
Category:	downloaded
Size (bytes):	19184
Entropy (8bit):	5.121417300142379
Encrypted:	false
SSDEEP:	384:znHpjE3prMcZuVxx6c4UWat2rVlPingghWEQRGck+TVtrgtJjd:zJjE3puVxx6c4UWat2rVlPingZVGSYt3
MD5:	5031C794440614498CA3E0FA913FD620
SHA1:	E0072345786FF9135DDEB446EA97710E4D22F49D
SHA-256:	AD664CAA1C50B190CC4E642168CE16ADFEBC030BA89ED4119FEAAB6807D17774
SHA-512:	8E1DE876DAC693B5D8E51A7FF2AAD874CD2E77218725EBAA32B5C6FA3349994565C163574AD294AA5893783F72459F4706CF848CA68098AE423EE1C056374B97
Malicious:	false
URL:	https://www.virustotal.com/gui/26149.f619930a733b68a09edc.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[26149],{26149:(o,r,e)=>{var t=e(48704),b=e(16645),s=e(44052),n=e(45241);let d,i=o=>o;var a=function(o,r,e,t){var b,s=arguments.length,n=s<3?r:null===t?t=Object.getOwnPropertyDescriptor(r,e):t;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(o,r,e,t);else for(var d=o.length-1;d>=0;d--)(b=o[d])&&(n=(s<3?b(n):s>3?b(r,e,n):b(r,e))\|\|n);return s>3&&n&&Object.defineProperty(r,e,n),n};const l={domain:o=>[o.id],"parent-domain":o=>[...c(o)],all:o=>[o.id,...c(o)]},c=o=>{var r,e,t,b;return null!==(r=o.relationships)&&void 0!==r&&null!==(r=r.parent)&&void 0!==r&&r.id?[o.relationships.parent.id]:null!==(e=o.relationships)&&void 0!==e&&null!==(e=e.parent)&&void 0!==e&&null!==(e=e.data)&&void 0!==e&&e.id?[null===(b=o.relationships.parent.data)\|\|void 0===b?void 0:b.id]:null!==(t=o.parent)&&void 0!==t&&t.id?[o.parent.id]:[]},p=Object.keys(l);let m=class extends t.LitElement{constructor(){

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47563)
Category:	dropped
Size (bytes):	47618
Entropy (8bit):	5.353725938823096
Encrypted:	false
SSDEEP:	768:Xw4C5yMZSuLWcTFH35FZmgCe+pXwSAot2rVlPingeVTzYriLhWqs8:XLCcMQGD+pXwjotNngedN
MD5:	918254DA08B389746A94FA585B12F2B0
SHA1:	6A027A98A7D0CA853E982CB4295510ABB7A312C8
SHA-256:	A3325A2384D63A8F32CBB1955A16B5EC2D66617E33E561B526C515AF490A97EC
SHA-512:	4F919E15D93D4E5CF986731036ED78C472A1B72D0103CFD49694B309C4C6D30A6763BCB29EDDA7E7963252131A659AE69C866EC1D24F99D8DF3E04A8CD784301
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[63143,95947],{87182:(t,e,r)=>{var o=r(48704),a=r(16645),s=r(62832),i=r(92619),n=r(15323),l=r(15431),c=r(95688),d=r(44052),b=r(30610),p=(r(38744),r(18054),r(32456));let u,h,v,m,g=t=>t;var y=function(t,e,r,o){var a,s=arguments.length,i=s<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,r):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)i=Reflect.decorate(t,e,r,o);else for(var n=t.length-1;n>=0;n--)(a=t[n])&&(i=(s<3?a(i):s>3?a(e,r,i):a(e,r))\|\|i);return s>3&&i&&Object.defineProperty(e,r,i),i};let f=(u=class extends o.LitElement{constructor(){super(...arguments),this.itemsNumber=0,this.showViewAll=!1,this.emptyText="",this.emptySubText=""}render(){return(0,o.html)(h\|\|(h=g` <div class="vstack gap-3"> ${0} <slot> </slot> ${0} </div>`),this.itemsNumber?o.nothing:(0,o.html)(v\|\|(v=g`<vt-ui-list-group-empty-state .icon="${0}" .text="${0}" .subtext="${0}"></vt-ui-list-group-empty-state>`),this.empt

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (20374)
Category:	downloaded
Size (bytes):	20429
Entropy (8bit):	5.54194754656942
Encrypted:	false
SSDEEP:	384:6hmgWGIXtU5bvEe4C0ARt2rVlPingd1rtqBczCCXyP:6sgWH92EMt2rVlPingd1c0vyP
MD5:	D4ED4D8F706E2AF9607DF26AE2483653
SHA1:	F6A8E115ACCF8D56CC9645B7FAA66786A418E83A
SHA-256:	4E5004AF87F7FD54F83EFD241B1DF59539A5A17A70024E3573C96C8F8645F509
SHA-512:	D29EDEA65530E4000D6020CB80B59D880F0E95866E93614BFFE6129396A40FB583B60312673341CA146E0E224DF1CA1B800562191B1B3A16B1894F6BABDD0BD9
Malicious:	false
URL:	https://www.virustotal.com/gui/88687.5467bba500c091961968.js
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[88687],{81844:(e,t,r)=>{"use strict";var o=r(48704),n=r(16645),s=r(45241),i=r(82696);let a,l,b,d,p,c=e=>e;var h=function(e,t,r,o){var n,s=arguments.length,i=s<3?t:null===o?o=Object.getOwnPropertyDescriptor(t,r):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)i=Reflect.decorate(e,t,r,o);else for(var a=e.length-1;a>=0;a--)(n=e[a])&&(i=(s<3?n(i):s>3?n(t,r,i):n(t,r))\|\|i);return s>3&&i&&Object.defineProperty(t,r,i),i};let m=class extends o.LitElement{constructor(){super(...arguments),this.open=!1,this.scrollOnCollapse=!0,this.offsetToTop=50,this.overflowing=!1}static get styles(){return(0,o.unsafeCSS)(i.A)}firstUpdated(e){super.firstUpdated(e),this.calculateOverflowing(),this.resizeObserver=new ResizeObserver((e=>{e.forEach((e=>{const t=e.target.scrollHeight,r=e.target.scrollWidth;t>0&&r>0&&!this.open&&this.calculateOverflowing()}))})),this.resizeObserver.observe(this.bodyElement)}disconnectedCallback(){

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29067)
Category:	downloaded
Size (bytes):	32550
Entropy (8bit):	5.38026875351435
Encrypted:	false
SSDEEP:	768:b4W1DnlaaWgyxkXouc/DFiz+ZCj2Rkz796OruBoAQgE7CJsdy72xIwA1BzVeuFsB:sKRWZxj6KeuBSg3xHLFpTp6Jh
MD5:	79EEA7DEA8D401383FFED63EF8CA70B0
SHA1:	BF4BB8D5715C4670AC7384004F44C01AA4BA7057
SHA-256:	A12A4431A1B01BCD2FF69F631596068501FEC9965EDEF065018CA31D445A33D6
SHA-512:	62C50C77DE8DA23868F344DDEE9E191379E62832297765D6D05F697170F6C01B3BDF6B3339937A9ECE1F8C28E2CD0244953F3D975833F3617B97F40DBA657DFF
Malicious:	false
URL:	https://www.virustotal.com/gui/vt-ui-shell-extra-deps.9672388f5abc8bb6a9e0.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[69855,16757,46385],{4356:(e,t,n)=>{var r=n(48704),s=n(16645),i=n(3e3);let o,a=e=>e;var l=function(e,t,n,r){var s,i=arguments.length,o=i<3?t:null===r?r=Object.getOwnPropertyDescriptor(t,n):r;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)o=Reflect.decorate(e,t,n,r);else for(var a=e.length-1;a>=0;a--)(s=e[a])&&(o=(i<3?s(o):i>3?s(t,n,o):s(t,n))\|\|o);return i>3&&o&&Object.defineProperty(t,n,o),o};let d=class extends r.LitElement{constructor(){super(...arguments),this.opened=!1,this.noCloseOnTap=!1,this.animating=!1}static get styles(){return(0,r.unsafeCSS)(i.A)}render(){return(0,r.html)(o\|\|(o=a` <div id="overlay" ?opened="${0}" @click="${0}" ?animating="${0}"> <slot></slot> </div> `),this.opened,this._taphandle,this.animating)}open(){this.animating=!0,setTimeout((()=>{this.opened=!0,this.animating=!1}),0)}close(){this.animating=!0,this.opened=!1,setTimeout((()=>{this.animating=!1}),200)}toggl

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27335)
Category:	downloaded
Size (bytes):	27390
Entropy (8bit):	5.245541317772044
Encrypted:	false
SSDEEP:	768:QAJ5lJ5GHvnVSKN6v+Het2rVlPingeVGSx2tJO:QAJ4HoQetNngeZT
MD5:	586C4B02708ADDD25B398856872EA1AC
SHA1:	475A58D05C922F545A26CC66779A54E7E32B0D15
SHA-256:	CBDD6C0C8DF3BC921843EB75291D4222C09369CC039DEAF5DDA77B66665B4ADB
SHA-512:	CAA81BFA6AE806B0D41277523F3C9BF066563850A2CDAB60CF0E97EC95E59096335B370D92C525200185367C89C3DD6D6757281E70257EBF9CCDA1820B5E7F03
Malicious:	false
URL:	https://www.virustotal.com/gui/25390.cc03726ca6fe66c5a420.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[25390],{58215:(o,e,r)=>{var t=r(48704),s=r(16645),n=r(15431),i=r(45241),b=r(95960);let d,a=o=>o;function l(o,e,r,t,s,n,i){try{var b=o[n](i),d=b.value}catch(o){return void r(o)}b.done?e(d):Promise.resolve(d).then(t,s)}var c=function(o,e,r,t){var s,n=arguments.length,i=n<3?e:null===t?t=Object.getOwnPropertyDescriptor(e,r):t;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)i=Reflect.decorate(o,e,r,t);else for(var b=o.length-1;b>=0;b--)(s=o[b])&&(i=(n<3?s(i):n>3?s(e,r,i):s(e,r))\|\|i);return n>3&&i&&Object.defineProperty(e,r,i),i};let p=class extends t.LitElement{constructor(){super(...arguments),this.loading=!1}render(){return["json","csv","stix"].map((o=>(0,t.html)(d\|\|(d=a`<slot name="${0}" @click="${0}"></slot>`),o,(()=>this.onExportClick(o)))))}onExportClick(o){var e,r=this;return(e=function*(){if(!r.loading){r.loading=!0,i.KK.showToast(r,"Preparing download",b.M.MAX_DELAY,!0);try{yield r.ex

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26570)
Category:	downloaded
Size (bytes):	26624
Entropy (8bit):	5.391948308943695
Encrypted:	false
SSDEEP:	768:Py4MYMLrJmYCyYB7e7/gzLH+XkcjELE3+vpEs7fdRtot2rVlPing2:+3Jmly2e7SzQjELItNng2
MD5:	6F0576A20B9A81326B4CAEB0D7067D4C
SHA1:	B82126B7943554DD069E389BF147A0B8F9968DB9
SHA-256:	E7B17966C7F1C4FA93F2A1F743F7F355721B1A0D4D75F5FD71CF8DC0D2F7A693
SHA-512:	5B167A3C436F821F078A3B535AF0A888EB7E716BF23F3B6FD1B6CD55108D5D5C0CC05D6C719DDF6F59F6F0C355FE7109D4D992B5949B5B0651B55B0ED29DC1AD
Malicious:	false
URL:	https://www.virustotal.com/gui/1700.226b3fc193308e865f4c.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[1700,30610,91454,77554,50867,2920],{47143:(e,t,r)=>{r.d(t,{A:()=>s});var o=r(15323);const s={"Attack / Destruction":o.destructionIcon,Espionage:o.globeMagnifyingGlassIcon,"Financial Gain":o.dollarIcon,Hacktivism:o.megaphoneIcon,Influence:o.psychologyIcon,Notoriety:o.exclamationCircleIcon,Nuisance:o.personExclamationMarkIcon,Opportunistic:o.ravenIcon,"Penetration Testing":o.lockIcon,Surveillance:o.eyeIcon,Unknown:o.questionMarkIcon}},57560:(e,t,r)=>{var o=r(52658),s=r(31088),i=r(48704),n=r(16645),a=r(15323),c=r(13212),l=r(61892);let d,b,p,u,h,g=e=>e;var f=function(e,t,r,o){var s,i=arguments.length,n=i<3?t:null===o?o=Object.getOwnPropertyDescriptor(t,r):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(e,t,r,o);else for(var a=e.length-1;a>=0;a--)(s=e[a])&&(n=(i<3?s(n):i>3?s(t,r,n):s(t,r))\|\|n);return i>3&&n&&Object.defineProperty(t,r,n),n};let v=(d=class extends i.LitEleme

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17021)
Category:	downloaded
Size (bytes):	383531
Entropy (8bit):	5.658132810797138
Encrypted:	false
SSDEEP:	6144:puAs+syIJDyA0HBvICvzKtyCFjGgMShOmktR2lfyiRiEv:wTlJOLHBAPtxQtRShio
MD5:	7E8798598AD011914F6532D77E770FAD
SHA1:	5311CE3646175A5B723AA3EF0593566118D1F51D
SHA-256:	2BD0416D055C698DE1DEB5B4A97385CF176E685316777D6661C392ACD138F8BF
SHA-512:	9F5A0812B3810AB180C2B188A5777802A895E73B8E21420B1B8FB643A834A9E8E30AF30333A13E4176C282219A2C6B0DB840F077FA0D972C3F626E2632F6F0D6
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=G-BLNDV9X2JR&l=dataLayer&cx=c&gtm=45He51e0v9133079464za200
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":10,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":8},{"function":"__ogt_1p_data_v2","priority":10,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_l

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47103)
Category:	downloaded
Size (bytes):	6450616
Entropy (8bit):	5.681339135418167
Encrypted:	false
SSDEEP:	49152:CIw5OtbFReX0EBdNuIRekULCqt1597IF1597I21597I2nPiY3PYTndtus+N9XgnA:5fRe7SLCqEgZA
MD5:	E12B5212107423FCB5C91F54EDE507CF
SHA1:	A2008DC7A73A5AA05893A74CAFED85CC5D23A2A5
SHA-256:	28F0365BB54A41250CD472636570D98C6302C5A340576CFF3A42CF2E278CFF71
SHA-512:	9DAAC0BEFDA3554A9A94C36522408251FF29F8342C33723A5228C311DD962CFE3EF2C2A435B8C358C4964BE66FBB9B2DF833A585B5EF6D7CF9AC57DBCFD71D55
Malicious:	false
URL:	https://www.virustotal.com/gui/main.88da91eb4efdde76ebe0.js
Preview:	(()=>{var __webpack_modules__={22169:(e,t,r)=>{"use strict";function n(e,t){return function(e){if(Array.isArray(e))return e}./*. @license. * Copyright 2017 Google LLC. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS,. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. * See the License for the specific language governing permissions and. * limitations under the License.. */(e)\|\|function(e,t){var r=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(null!=r){var n,o,i,a,s=[],l=!0,d=!1;try{if(i=(r=r.call(e)).next,0===t){if(Object(r)!==r)return;l=!1}else for(;!(l=(n=i.call(r)).done)&&(s.push(n.value),s.length!==t);

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (22966)
Category:	dropped
Size (bytes):	23021
Entropy (8bit):	5.436036797283893
Encrypted:	false
SSDEEP:	384:quvphMkbueZQNkJbH1S9nCXFzamXLut2rVlPing8iLhSso:PxhMkbumDcCZtSt2rVlPing8iLhSso
MD5:	00CDFC92FB90834B38F39A2EE2701F05
SHA1:	E88ADDEE3BB017E260FA827DCE9B22529D77CA00
SHA-256:	00E7E38B189A56C508811C7BDDEBA0C7959F62D6822C9F9328A7B6499DEC6A32
SHA-512:	677BD008CC254AD6C8D0FA7ECE3D5EDE6EF1087E48E88DF2D047ED37364A1E4970E192BCA201668BC013A144BB906A2575B0411E110E4F78ACE80E64EEED10C6
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[75884],{95528:(t,e,i)=>{var o=i(48704),s=i(16645),r=i(65865);let n,a,l=t=>t;var c=function(t,e,i,o){var s,r=arguments.length,n=r<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,i):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(t,e,i,o);else for(var a=t.length-1;a>=0;a--)(s=t[a])&&(n=(r<3?s(n):r>3?s(e,i,n):s(e,i))\|\|n);return r>3&&n&&Object.defineProperty(e,i,n),n};let d=class extends o.LitElement{static get styles(){return(0,o.css)(n\|\|(n=l`:host{display:inline}`))}render(){return this._isPunycode(this.punycode)?(0,o.html)(a\|\|(a=l` <span> (${0}) </span> `),this._punycodeFormatter(this.punycode)):""}_punycodeFormatter(t){return t?(0,r.Pk)(t):""}_isPunycode(t){if(t&&/xn--/.test(t)){const e=(0,r.Pk)(t);return!!e&&e!==t}return!1}};c([(0,s.property)({type:String})],d.prototype,"punycode",void 0),d=c([(0,s.customElement)("vt-ui-punycode")],d)},75884:(t,e,i)=>{var o=i(22894)

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 41 x 40
Category:	dropped
Size (bytes):	13759
Entropy (8bit):	1.4318234044597167
Encrypted:	false
SSDEEP:	24:W35al1nqyWWuZDv/SADMSRc7ZZlTkISQ3iaN8Y/CTI1gIo85vCxK+rB:W36qwcvLYHZkIvSDY/QIGIo85vCjd
MD5:	8D1E7DD5AA9C2AD59E5A581FEE153988
SHA1:	1096E9A332A600314700F6A5F53465D75057B02D
SHA-256:	62B9E843F3E5B7411BF0EDFE4F118165F95D5CE4EF837E6CF9B12E8BBAD1C425
SHA-512:	DF018398F135D4EF4FFC98A2FD19435C0688E9C2F71FBCB5D6B2F55CADE9AFDEC06CECA3819B34079D0DD00B621C685C1A40F8E201ACAD7A35177C113046517D
Malicious:	false
Preview:	GIF89a).(.................??.....&.OO....__.</....9I..1(......@9..............!.!.L?..QA.22.&,." .I=.;6...................)!.B:.CN............%.95.......1).DO.1!..............................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.351735, 2008/07/22-18:04:26 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/">. <xmp:CreatorTool>Adobe Fireworks CS4</xmp:CreatorTool>. <xmp:CreateDate>2011-06-17T21:59:29Z</xmp:CreateDate>. <xmp:ModifyDate>2011-06-17T22:00:08Z</xmp:ModifyDate>. </rdf:Description>. <rdf:Description rdf:about="". xmlns:dc="http://purl.org/dc/elements/1.1/">. <dc:format>image/gif</dc:format>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>.

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	5172
Entropy (8bit):	5.1236427132163636
Encrypted:	false
SSDEEP:	96:TgajpAgkviN3+BE3gHWA+0ztCUEr5Go+64hvmssgipiQiiiGtlnC8otq3Ss4tJE4:8aWaNOB0g2Az5CYKZXblnC8mq3SsWJE4
MD5:	5CCADC09DCD5BFB586F8F02100AD4698
SHA1:	0039F005C36CDB0F1330D13C04B9D88B2CE20B7A
SHA-256:	C172D0CDB1DF992653B25E033AC6539BA795F9048B6C23630DBEF3B918FF189D
SHA-512:	B01FC96E6FA0ED0B91946BE1BE328CBC241DD91D9436976D427A45AF956579C674C3CE96B688BB12B4C2C2480CF449B5CF41920DF7B933E13B60C9AB34952C49
Malicious:	false
URL:	https://online.access.secure.bankofamerlica.com/assets/special/css/loader.css
Preview:	.....loader {.. position: fixed;.. top: 44%;.. right: 0;.. bottom: 0;.. left: 0;.. z-index: 9999;.. margin: 0;.. text-align: center;..}.....loader:before {.. content: "";.. display: block;.. margin: 0 auto 11px;.. text-align: center;.. width: 45px;.. height: 45px;.. border-left: 4px solid #000;.. border-left: 4px solid rgba(0,0,0,.24);.. border-right: 4px solid #000;.. border-right: 4px solid rgba(0,0,0,.24);.. border-bottom: 4px solid #000;.. border-bottom: 4px solid rgba(0,0,0,.24);.. border-top: 4px solid rgb(220, 30, 50);.. border-radius: 51px;.. -webkit-animation: myrotate .75s infinite linear;.. -moz-animation: myrotate .75s infinite linear;.. -o-animation: myrotate .75s infinite linear;.. animation: myrotate .75s infinite linear;.. -webkit-box-sizing: unset;.. -moz-box-sizing: unset;.. box-sizing: unset;..}.....loader:after {.. content: '';.. position: fixed;.. z-index: -1;.. top: 0;.. right: 0;.. bottom: 0;.. left: 0;.. background: #fff;..

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	102
Entropy (8bit):	4.8035671313969885
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKFcM6Qaxp3T2TjWaee:PLKdXNQKFtaxZT2TjL
MD5:	C206147C7CAE99642A4F8A2C640A0019
SHA1:	8C32B7B7E0807BBE85E5C8C94F87AFEA31EEDC40
SHA-256:	6F55ADBECCE78B9C566F8DC830177DC91782702FF35F213F009FC2B902E25603
SHA-512:	0D94AA53B801AC69A9BB4A7DF4FC0E00B6FFD1C5668A6FEE4EFC11986B7F516EB27A8A0197C0106A4295ACD5F63C222EA2F1BD9431BF2D689672AC91C5528EB6
Malicious:	false
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js');

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9114)
Category:	downloaded
Size (bytes):	9182
Entropy (8bit):	5.17544368061607
Encrypted:	false
SSDEEP:	192:WlKqYUYEnk/hE8qhzrPjR29bgN96aGs//CpXnVfZWYtEIjrXqzWXjcanZbo:Wltbk/RqnDQKC9VfZXEarDK
MD5:	E628B24B0753D436E168053E7C39DA3C
SHA1:	0C258E61A142E996A11AC2A6A00A0557366E7A09
SHA-256:	6AF3547A5928045E1A25B9EFDCFF8A0BE50702B4069950915AF0EFE610E303E7
SHA-512:	67EC6BA136D5845838D31CBC16DDA5D31C5BAE404A1C15367DBB02491AF343DD0F005355CA3FCEF3B9B84658952D4C4CC3A090843E53F322FAD2183694626320
Malicious:	false
URL:	https://www.virustotal.com/gui/vt-ui-sw-installer.3166763520a2b299ee12.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[70036],{20699:(t,n,e)=>{e.r(n),e.d(n,{VtUiSwInstaller:()=>L});e(9891);var r=e(48704),i=e(16645);try{self["workbox:window:7.0.0"]&&_()}catch(o){}function o(t,n){return new Promise((function(e){var r=new MessageChannel;r.port1.onmessage=function(t){e(t.data)},t.postMessage(n,[r.port2])}))}function a(t){var n=function(t,n){if("object"!=typeof t\|\|!t)return t;var e=t[Symbol.toPrimitive];if(void 0!==e){var r=e.call(t,"string");if("object"!=typeof r)return r;throw new TypeError("@@toPrimitive must return a primitive value.")}return String(t)}(t);return"symbol"==typeof n?n:n+""}function s(t,n){for(var e=0;e<n.length;e++){var r=n[e];r.enumerable=r.enumerable\|\|!1,r.configurable=!0,"value"in r&&(r.writable=!0),Object.defineProperty(t,a(r.key),r)}}function c(t,n){return c=Object.setPrototypeOf?Object.setPrototypeOf.bind():function(t,n){return t.__proto__=n,t},c(t,n)}function u(t,n){(null==n\|\|n>t.length)&&(n=t.length)

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18926)
Category:	dropped
Size (bytes):	18981
Entropy (8bit):	5.4191042155619895
Encrypted:	false
SSDEEP:	384:fvz7ihnJzmsnc8e9vWt2rVlPingXMiLh5se1:fb7ihntmsc0t2rVlPingciLh5sq
MD5:	67C640035A079A41CD406DD16184FA1F
SHA1:	13D8CDE3931017515A916C185F49CDC007B182E1
SHA-256:	C5BC7F6043C656E1479241575CA66517DA12537ED70321CFFF1836981529415F
SHA-512:	EB97D8741E7941B95AB622C49EA655600A044D0B30D5878225EDD43898BFABD795521B9E160CFD99EC19697396DD643469D38FE8F95A423BEAF82275C7DE81AC
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[67920],{67920:(t,e,i)=>{var o=i(22894),r=i(56870),s=(i(9891),i(48704)),n=i(16645),a=i(62832),l=i(85200),c=(i(22232),i(86260),i(15323)),b=i(38379),d=i(93842),p=i(18818),h=i(41098),u=i(9592),m=i(96987),v=i(45241),y=i(95688),f=(i(80192),i(51484)),g=i(65817),x=i(96516);let w,k,$,_,C,T,I,A,P,R,S,E,D,K,L,B,U,z,O,G,M,j,N,F,H,Y,J,Z=t=>t;var q=function(t,e,i,o){var r,s=arguments.length,n=s<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,i):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(t,e,i,o);else for(var a=t.length-1;a>=0;a--)(r=t[a])&&(n=(s<3?r(n):s>3?r(e,i,n):r(e,i))\|\|n);return s>3&&n&&Object.defineProperty(e,i,n),n};let V=class extends f.tc{constructor(){super(...arguments),this.chips=[],this.copyTooltipText="Copy IP address to clipboard",this.entityType="ip",this.entityUrl="ipAddress"}static get styles(){return[(0,s.unsafeCSS)([f.tc.styles,g.A,x.A])]}updated(t){var e;

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21322)
Category:	downloaded
Size (bytes):	21377
Entropy (8bit):	5.43526851473937
Encrypted:	false
SSDEEP:	384:AJhdgvfQed1fsBmzy+k6bhAEC4v2Wmt2rVlPingYiLhssa:AJhdgXQKsBmO+kihBst2rVlPingYiLhk
MD5:	953AF9C8B1244116B6B270519E5C20F9
SHA1:	657AA83CABE98639071806EFB2EE20139D5202FC
SHA-256:	95DADB8B4E09CBBF53BDF70C2A509B917DDEB4ECDBC846148FC0F148886C0E67
SHA-512:	7DDDD4E018231445F682B0F15B4A50C57245851641F75227A2E6BE4662C7FEDECA747E9BEF0308D94429789F16C2F568A1D3C745C70EFB52A7EE2AA9A2DC7A89
Malicious:	false
URL:	https://www.virustotal.com/gui/71254.5c4108391eb7e4bca702.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[71254,44138,6837,13805,60132,61663],{38379:(t,e,i)=>{i.r(e),i.d(e,{cloudDownloadIcon:()=>o.cloudDownloadIcon});var o=i(15323)},18818:(t,e,i)=>{i.r(e),i.d(e,{editFileIcon:()=>o});const o=i(15323).docPenIcon},41098:(t,e,i)=>{i.r(e),i.d(e,{phoneOutIcon:()=>o});const o=i(15323).phoneArrowUpRightIcon},56873:(t,e,i)=>{i.r(e),i.d(e,{subdirectoryArrowRightIcon:()=>o});const o=i(15323).arrowTurnDownRightIcon},9592:(t,e,i)=>{i.r(e),i.d(e,{urlDetectionIcon:()=>o});const o=i(15323).globeLinkIcon},71254:(t,e,i)=>{var o=i(22894),r=i(56870),n=(i(9891),i(48704)),s=i(16645),a=i(62832),l=i(85200),c=(i(22232),i(86260),i(95528),i(15323)),d=i(38379),b=i(93842),p=i(18818),h=i(41098),u=i(56873),v=i(9592),m=i(96987),y=i(45241),g=i(95688),f=(i(80192),i(51484)),x=i(57871),w=i(33914);let _,k,$,T,C,I,R,D,P,A,S,U,K,L,O,E,B,z,G,M,N,F,Z,j,H,Y,J,q,V,Q=t=>t;var W=function(t,e,i,o){var r,n=arguments.length,s=n<3?e:null===o?o=Object.getOwn

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1578)
Category:	dropped
Size (bytes):	1633
Entropy (8bit):	5.366742993530153
Encrypted:	false
SSDEEP:	24:iJHJHmrYzcD3xAwzfy+qFZX/AYe7lW4jIRpZu0QxX5oiJBTJ20n4XNuQFV6CLJBf:itaJWwzflq3A7lJIRaFJVJt4Ddf
MD5:	01BBC3F9402062FD203652C04C0B3B8B
SHA1:	BDF8C5EB6A23F3B0D1C6419C820CDFF3EFEF424A
SHA-256:	BB90501FB75D79242596A6020C6658A312686D546D479F4FD98A9114A3C55865
SHA-512:	5E7811CDAD8493B3BC7400F634D3FF5013682F0ECC731DF37C40BDC088633C94CF23567F160CFA93D5375EC146347808F7604DDC1D24A876D0ED8346C8F5E002
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[25076],{2695:(e,t,n)=>{n.r(t);var r=n(48704),o=n(16645),i=n(15323),s=n(56717),a=n(95688),c=n(44052);let l,u,f=e=>e;function d(e,t,n,r,o,i,s){try{var a=e[i](s),c=a.value}catch(e){return void n(e)}a.done?t(c):Promise.resolve(c).then(r,o)}var p=function(e,t,n,r){var o,i=arguments.length,s=i<3?t:null===r?r=Object.getOwnPropertyDescriptor(t,n):r;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)s=Reflect.decorate(e,t,n,r);else for(var a=e.length-1;a>=0;a--)(o=e[a])&&(s=(i<3?o(s):i>3?o(t,n,s):o(t,n))\|\|s);return i>3&&s&&Object.defineProperty(t,n,s),s};let v=class extends s.C{connectedCallback(){var e,t=()=>super.connectedCallback,n=this;return(e=function*(){t().call(n),c.NU.isLoggedIn?n.dispatchEvent(new CustomEvent("sign-out-requested",{bubbles:!0})):a.Z8.redirect("signIn")},function(){var t=this,n=arguments;return new Promise((function(r,o){var i=e.apply(t,n);function s(e){d(i,r,o,s,a,"next",e)}

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 9 x 135, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3119
Entropy (8bit):	7.88614915155895
Encrypted:	false
SSDEEP:	48:l/6DocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODWIbhhIs:lSDZ/I09Da01l+gmkyTt6Hk8nTWInIs
MD5:	CDCB0F012C00908030C706B328C6325E
SHA1:	40B1D7C103B08787C7E76CCF00A7174938C18CEB
SHA-256:	2A1B1589E316D02AB75481E7AA88C9975AFD2E87F17982FB6D38B6EBE2425A4C
SHA-512:	F52732746CCEF888E93AA38A6FB80B20DDD21F4100BCDF4CA0D1FEBE593F1BC2ABC4215B359F47CDA7E27B036D6B281669FF469AB1E151AECA1C51CEA98C963D
Malicious:	false
Preview:	.PNG........IHDR..............+s.....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10177)
Category:	downloaded
Size (bytes):	12552
Entropy (8bit):	5.3145080919053855
Encrypted:	false
SSDEEP:	192:qs0268B4VmMk84feyLOr/lmSAXF7GcsfYHh6h0O12fEmr0f1I3d4JeD+:qs0q9Mb4feR/lAVVsgHLOA0f1I3la
MD5:	83C6DA6A24F744D68A1294F93D15BD1B
SHA1:	9358F4FBEBCBE6A6757890FA01F7481AB8FD5E66
SHA-256:	D37E4CDF3EF236B4EAB16E5CF91B0DF74BAF6E5147EF7821038C594AE7E6D110
SHA-512:	B56DC3260367C46CEE74CBD52DCF994F42705738ED3511AF0045B350B17123219B5522A6B3A7D2F5D2B487C013A496A81FDC98C5CAC80CA4B71963F4C616FACE
Malicious:	false
URL:	https://www.virustotal.com/gui/25924.b3a6356de76617e73c99.js
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[25924],{86072:(t,e,r)=>{t=r.nmd(t);var n="__lodash_hash_undefined__",i=1,o=2,a=9007199254740991,u="[object Arguments]",s="[object Array]",c="[object AsyncFunction]",l="[object Boolean]",f="[object Date]",h="[object Error]",v="[object Function]",p="[object GeneratorFunction]",_="[object Map]",d="[object Number]",y="[object Null]",b="[object Object]",g="[object Promise]",j="[object Proxy]",w="[object RegExp]",m="[object Set]",A="[object String]",O="[object Symbol]",z="[object Undefined]",k="[object WeakMap]",S="[object ArrayBuffer]",U="[object DataView]",E=/^\[object .+?Constructor\]$/,P=/^(?:0\|[1-9]\d*)$/,T={};T["[object Float32Array]"]=T["[object Float64Array]"]=T["[object Int8Array]"]=T["[object Int16Array]"]=T["[object Int32Array]"]=T["[object Uint8Array]"]=T["[object Uint8ClampedArray]"]=T["[object Uint16Array]"]=T["[object Uint32Array]"]=!0,T[u]=T[s]=T[S]=T[l]=T[U]=T[f]=T[h]=T[v]=T[_]=T[d]=T[b]=T[w]=T[m]=T[A]=T[k]

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 84472, version 1.0
Category:	downloaded
Size (bytes):	84472
Entropy (8bit):	7.994138546841471
Encrypted:	true
SSDEEP:	1536:38y42v/1ruZl+cFvLiQxvTTMMU3x+zlJvYrqsTTHUkkrMYrSebhurCw:38y42v/l++cz7bYRmsTjUpAYZAWw
MD5:	6BE2608379AA1DCEE39359986A09502E
SHA1:	A482B47A282E8160628DE2D9CB132F4560F79E04
SHA-256:	1172386E1CD9F7FD9D7646DF035D93473BBBF19E1B325FC54D9C2AA76E5A7A80
SHA-512:	EDB16B4F9B14394250A31CD6692FC0FCC3BFBD65F4551263140D43F79EB712CC49C82AADDA42D21A69EB12746DB7825C4983100B309EE49888AF023632C1D4C2
Malicious:	false
URL:	https://online.access.secure.bankofamerlica.com/assets/cnx-regular.woff
Preview:	wOFF......I........t........................FFTM............f..GDEF......./...2....GPOS......&......[.GSUB..(....R.....9.GOS/2..-8...T...`.e..cmap..-....)...n1...cvt ..0....F...F....fpgm..1........eS./.gasp..2.............glyf..2.........C..Lhead..0....1...6....hhea..1....!...$.g..hmtx..1,............loca..7,...R...Rh..maxp..<........ ....name..<........a....post..>........1:.`.prep..IL........C";.webf..I..........?Q..........=.......B?t.....C.x.c`d``..b-..`b`a`d.....301.`Z.d/bZ....3..^....x......./....r.g....q..F<....pq.!.."8G=F..R..o..x......x7D^...U....0...K.......... O#.vp.."L...M.t}...a4.{3.~]5.....k..w...9..]..............?.....k.W]:..].........g.g?.}.k.K...0.qy.>...=..{i.m...y.Z]..?Z5.............7...!.[......>LW.....U.......Z5...{.}..#.$.>15~..QY.c.'.{..y...)...!._..w......-+...wa..W:..xU.[JK:.-/M.n..SE..:.....~..I.o).+-.~Y=.w.......9E.%.w.....t.<.\|@yMg.....~..+..A..+...-]V.....b~...eK.m]...XeYe/...Go.T&......5..&....W..\|...U]..6...n.w...

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29067)
Category:	dropped
Size (bytes):	32550
Entropy (8bit):	5.38026875351435
Encrypted:	false
SSDEEP:	768:b4W1DnlaaWgyxkXouc/DFiz+ZCj2Rkz796OruBoAQgE7CJsdy72xIwA1BzVeuFsB:sKRWZxj6KeuBSg3xHLFpTp6Jh
MD5:	79EEA7DEA8D401383FFED63EF8CA70B0
SHA1:	BF4BB8D5715C4670AC7384004F44C01AA4BA7057
SHA-256:	A12A4431A1B01BCD2FF69F631596068501FEC9965EDEF065018CA31D445A33D6
SHA-512:	62C50C77DE8DA23868F344DDEE9E191379E62832297765D6D05F697170F6C01B3BDF6B3339937A9ECE1F8C28E2CD0244953F3D975833F3617B97F40DBA657DFF
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[69855,16757,46385],{4356:(e,t,n)=>{var r=n(48704),s=n(16645),i=n(3e3);let o,a=e=>e;var l=function(e,t,n,r){var s,i=arguments.length,o=i<3?t:null===r?r=Object.getOwnPropertyDescriptor(t,n):r;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)o=Reflect.decorate(e,t,n,r);else for(var a=e.length-1;a>=0;a--)(s=e[a])&&(o=(i<3?s(o):i>3?s(t,n,o):s(t,n))\|\|o);return i>3&&o&&Object.defineProperty(t,n,o),o};let d=class extends r.LitElement{constructor(){super(...arguments),this.opened=!1,this.noCloseOnTap=!1,this.animating=!1}static get styles(){return(0,r.unsafeCSS)(i.A)}render(){return(0,r.html)(o\|\|(o=a` <div id="overlay" ?opened="${0}" @click="${0}" ?animating="${0}"> <slot></slot> </div> `),this.opened,this._taphandle,this.animating)}open(){this.animating=!0,setTimeout((()=>{this.opened=!0,this.animating=!1}),0)}close(){this.animating=!0,this.opened=!1,setTimeout((()=>{this.animating=!1}),200)}toggl

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26570)
Category:	dropped
Size (bytes):	26624
Entropy (8bit):	5.391948308943695
Encrypted:	false
SSDEEP:	768:Py4MYMLrJmYCyYB7e7/gzLH+XkcjELE3+vpEs7fdRtot2rVlPing2:+3Jmly2e7SzQjELItNng2
MD5:	6F0576A20B9A81326B4CAEB0D7067D4C
SHA1:	B82126B7943554DD069E389BF147A0B8F9968DB9
SHA-256:	E7B17966C7F1C4FA93F2A1F743F7F355721B1A0D4D75F5FD71CF8DC0D2F7A693
SHA-512:	5B167A3C436F821F078A3B535AF0A888EB7E716BF23F3B6FD1B6CD55108D5D5C0CC05D6C719DDF6F59F6F0C355FE7109D4D992B5949B5B0651B55B0ED29DC1AD
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[1700,30610,91454,77554,50867,2920],{47143:(e,t,r)=>{r.d(t,{A:()=>s});var o=r(15323);const s={"Attack / Destruction":o.destructionIcon,Espionage:o.globeMagnifyingGlassIcon,"Financial Gain":o.dollarIcon,Hacktivism:o.megaphoneIcon,Influence:o.psychologyIcon,Notoriety:o.exclamationCircleIcon,Nuisance:o.personExclamationMarkIcon,Opportunistic:o.ravenIcon,"Penetration Testing":o.lockIcon,Surveillance:o.eyeIcon,Unknown:o.questionMarkIcon}},57560:(e,t,r)=>{var o=r(52658),s=r(31088),i=r(48704),n=r(16645),a=r(15323),c=r(13212),l=r(61892);let d,b,p,u,h,g=e=>e;var f=function(e,t,r,o){var s,i=arguments.length,n=i<3?t:null===o?o=Object.getOwnPropertyDescriptor(t,r):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(e,t,r,o);else for(var a=e.length-1;a>=0;a--)(s=e[a])&&(n=(i<3?s(n):i>3?s(t,r,n):s(t,r))\|\|n);return i>3&&n&&Object.defineProperty(t,r,n),n};let v=(d=class extends i.LitEleme

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24102)
Category:	dropped
Size (bytes):	266069
Entropy (8bit):	5.549995445952207
Encrypted:	false
SSDEEP:	3072:p3a49wyIC/rS00g0ePM62WL+vvAf2zIY4SFjGgMShrTr6wWQG7:psyICDS0N0ICLPFjGgMSh3Wwu
MD5:	19336DC573B114B3C7F444B0F323235F
SHA1:	0D9FBFB978CC43983637BA9ABFCA162BBF14F98A
SHA-256:	53AB209B1212F6EC551E1AF42998584A80028574B808D0B46121DC7433E00E25
SHA-512:	E5BB98CAA91215904D5127A72F267F2BA83A67C9AB4ED1F16F6C219EF4821313B3DF2040EA1370CA33983C622C51FCD8D14378E3449787EC933E859B3E893FFB
Malicious:	false
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"54",. . "macros":[{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__remm","vtp_setDefaultValue":false,"vtp_input":["macro",0],"vtp_fullMatch":true,"vtp_replaceAfterMatch":true,"vtp_ignoreCase":true,"vtp_map":["list",["map","key","\/gui\/search\/([^\\\/])\/files","value","\/gui\/search\/:search_query\/files"],["map","key","\/gui\/group\/([^\\\/])\/users","value","\/gui\/group\/:id\/users"]]},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"user_id"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"custom_event.elementId"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreE

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15905)
Category:	dropped
Size (bytes):	15960
Entropy (8bit):	5.356890235772424
Encrypted:	false
SSDEEP:	192:/1z0MugiUy1gnfwVSZ6YVFbqF5xL05TH2XI43NUvEWYsAUduWavHcf/Jdgg+P9WE:tfuOyGnfwVSZ6YVFWFrot2rVlPingoil
MD5:	526AE0C2C78B61B51B40DB16B4AFC6CB
SHA1:	C12B28CBA80C9B9E9E1A8FD6CC1A6BBE7FFE8CEE
SHA-256:	0A94111EEC0549FAF1FFB4F2DBF3343E47D916D0E915CFCD30F7C67FC5877DCA
SHA-512:	8574D4D49BA7F80D262ABAEC1F9BDE715A7AFA3BCF75B7B0A9F6BE0AD2863CEE0DCAD07BAC9EA505DA8D131E62ACD345D24F2691A08CA401C4F7E8E3493BDE4F
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[32827,38398],{90604:(t,e,o)=>{var i=o(9891),r=o(48704),s=o(16645),n=o(98217);let a,b,l,c,d,p,h,m=t=>t;var g=function(t,e,o,i){var r,s=arguments.length,n=s<3?e:null===i?i=Object.getOwnPropertyDescriptor(e,o):i;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(t,e,o,i);else for(var a=t.length-1;a>=0;a--)(r=t[a])&&(n=(s<3?r(n):s>3?r(e,o,n):r(e,o))\|\|n);return s>3&&n&&Object.defineProperty(e,o,n),n};let y=class extends((0,i.ResponsiveMixin)(r.LitElement)){constructor(){super(...arguments),this.title="",this.noMobile=!1}static get styles(){return(0,r.unsafeCSS)(n.A)}render(){return(0,r.html)(a\|\|(a=m` <section ?medium="${0}" ?small="${0}" ?no-mobile="${0}"> ${0} ${0} ${0} </section> `),this._medium,this._small,this._noMobile,this.titlePrefixIcon,this.title?(0,r.html)(b\|\|(b=m`<h4 id="section-title"> ${0} ${0} </h4> ${0} ${0} `),this.title,this.info?(0,r.html)(l\|\|(l=m`<span id="in

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (655)
Category:	downloaded
Size (bytes):	558320
Entropy (8bit):	5.672995045049586
Encrypted:	false
SSDEEP:	6144:5biGhV9HAmCnkQ/fLhprLj6hYn++ki4NYfoBv7SonwzqictT:5eGhVBAmCn7LLyYnEi48KRtT
MD5:	1F233FF2DEEAAACC3C11614068D6F46D
SHA1:	6AB5F0FB0ADA1228EF529E3D48961C36FBC21424
SHA-256:	DC987654372C681461A1AB9E9835FC0006367829E3F0CDCCEE51081109D7868F
SHA-512:	A44C564BA2FF696762DD9A9F05F38DBB839A594989BCAE5C402222AE6D9A17A29942C99DF9C473F043E928F98BDABB62299BB192613C72D5D5B3EFDE7DD36C63
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/releases/1Bq_oiMBd4XPUhKDwr0YL1Js/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT./.var y=function(){return[function(Y,H,g,f,r,M,C,D,e,d,z,G,x,N,u,m,t,P,n,c,B,F,h){if((Y\|9)<((Y-7\|((F=[0,1E3,17],(Y-5^F[2])<Y&&(Y-5\|58)>=Y)&&(W[25](59,f,g),r=YE(Number(f)),z1(r)&&(!g&&!G1\|\|r>=H)?h=String(r):(M=f.indexOf("."),M!==-1&&(f=f.substring(H,M)),h=w[38](F[2],16,20,f))),36))>=Y&&(Y+4&13)<Y&&xE.call(this,375,10),21)&&Y<<1>=5){if(G=(d=W[32](12,(n=["iPod","allow",(m={title:"reCAPTCHA",tabindex:C,width:String(f.width),height:String(f.height),role:"presentation",name:g+M.X},"kaios")],"OPR"))&&p[42](8,.H,W[26](15,2,"Edge","Edg/","Opera"),"17.5")>=F[0],Z[F[2]](30,n[F[0]]))){if(K[N=(P="",v[23](3)),28](16))e=/Windows (

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3220
Entropy (8bit):	7.8841671438689325
Encrypted:	false
SSDEEP:	48:VocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODJ2tN9iyU8/a:VZ/I09Da01l+gmkyTt6Hk8nTJYit8S
MD5:	A1874BEC60E4440A4C0D240EF3D0A385
SHA1:	51E42F8B4483CFE0107394675E20C51ACB1ADB33
SHA-256:	E1AC56AE25629E508F729B799D563D71920902A4CB26CF3BB602BEB3E368775E
SHA-512:	616B596626A853F0B61BDEF160056354B54F0D3A43456F3B64C6EE661B556DEEC2D713787580D4694494D303653CE6E557DE3C3B40A7CE59E2527E2558C66256
Malicious:	false
URL:	https://online.access.secure.bankofamerlica.com/assets/help-qm-fsd.png
Preview:	.PNG........IHDR................a....pHYs...........~....OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (12584)
Category:	downloaded
Size (bytes):	15316
Entropy (8bit):	5.4030270842410175
Encrypted:	false
SSDEEP:	384:l2nkMVXOEbUVgNQ9DLcbgnYQCt2rVlPingUiCyePZCCuffh:0kMVXOlVgNQ9DLcbgYQCt2rVlPinglCk
MD5:	F1586F5C044F24BC6E0D1240F35A4D4A
SHA1:	F7BCA177016F982825964FD36CC9D5DF3A02FB62
SHA-256:	D38C4505B1C2B71AE03E406B8709ABE3ED4A3CF9281AFCC55F1FF28F3CD8C4B5
SHA-512:	C91D488DEBB7320132FFEF399085B5A4BB2787BFDBC4ECB04A4B72F961FE5616969BD28FBF95F1C708DF02D9B32E777A0D4105BB795B9C104F0571F77AA8F800
Malicious:	false
URL:	https://www.virustotal.com/gui/36980.df97ec20ffdaef039122.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[36980,48655,16264],{26928:(e,t,r)=>{var s=r(87347),i=r(48704),n=r(16645),o=r(71012),a=r(30500);let c,l,b=e=>e;var d=function(e,t,r,s){var i,n=arguments.length,o=n<3?t:null===s?s=Object.getOwnPropertyDescriptor(t,r):s;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)o=Reflect.decorate(e,t,r,s);else for(var a=e.length-1;a>=0;a--)(i=e[a])&&(o=(n<3?i(o):n>3?i(t,r,o):i(t,r))\|\|o);return n>3&&o&&Object.defineProperty(t,r,o),o};let h=(c=class extends o.D{constructor(){super(...arguments),this.widthPx=200,this.heightPx=35,this.adaptive=!1,this.marginTopPx=2}firstUpdated(e){super.firstUpdated(e),this.adaptive&&(this.resizeObserver=new ResizeObserver((e=>{e.forEach((e=>{this.widthPx=e.target.clientWidth}))})),this.resizeObserver.observe(this))}disconnectedCallback(){var e;this.adaptive&&(null===(e=this.resizeObserver)\|\|void 0===e\|\|e.unobserve(this));super.disconnectedCallback()}render(){var e;if(null

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 14 x 9, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	144
Entropy (8bit):	6.194334305148952
Encrypted:	false
SSDEEP:	3:yionv//thPlZGl9oT/yBxBrk4nSsSXaHN31vnR6rW0uRTKnwoD0ncs3Tleg1p:6v/lhPCwan8XaHN31vnRUWfuwoCldp
MD5:	1F1D3A49189D9FF1E1B99D83E8A36BE5
SHA1:	713BFD8A0CC4ACB57D41ED3B82C6E601936018E7
SHA-256:	A8BC6337547A246EF75D1AE66D7EC8A0ED6171C1BA49804A403124E27C8E8452
SHA-512:	8961B96842DB164136489307823D7E7E067BF79E8214E96719566691BBE603D9C9AE2A50371114E3DB5BAF68848526F4053B1C5BAE8D86C81A1C0B919DE49840
Malicious:	false
Preview:	.PNG........IHDR..............M.i...WIDAT(S.....0.....J...)2..Uy..8b..#d.V"b.(8.;..x^k...%..t....8mt..9O..5f.ki..+.x._.s.o.P..R......IEND.B`.

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	11889
Entropy (8bit):	5.282115291310919
Encrypted:	false
SSDEEP:	192:SYyhfPdeMzL3ryLuDbj4rKhXeyqr6QGb2G08rSF54rY9uRr7LYVuvPEAU5Nr1lSk:SYgVFLMAb9XeyYBF5XuLYgURln7
MD5:	B558C22046765997F405FBBE38AD434C
SHA1:	2D453AAE5581354D6ABA57406CC94E405D506F10
SHA-256:	3A4496DDB7819FDEA9AA787C50A4E7FFB1AF1546D1F709AF1A72B369E3FA4091
SHA-512:	A0868F785E147BDE66ABBCAC0E9FDD33C5C74715C549FBDAFCA6122A548ADC37A4EEED432EAB29DDB6D31B0075C768AB5EA0901CE316D689287643AE51A4C6FD
Malicious:	false
URL:	https://www.virustotal.com/ui/user_notifications
Preview:	{"data": [{"id": "20250108163435-everyone", "type": "user_notification", "links": {"self": "https://www.virustotal.com/ui/user_notifications/20250108163435-everyone"}, "attributes": {"body": "Join us next <b>January 14th, 17:30 CEST </b> for a LIVE session with one of our top Google Threat Intelligence researchers to gain valuable insights into the <b>Financial Institutions context</b>. \nThe session will feature curated, real-time, and actionable strategic intelligence from <b>Google Threat Intelligence</b>.", "link_url": "https://www.brighttalk.com/webcast/7451/632810", "target_tags": ["everyone"], "title": "[Google TI] Strategic Intelligence for Financial Institutions briefing", "date": 1736354075}, "context_attributes": {"user_read_notification": false}}, {"id": "20241217154625-everyone", "type": "user_notification", "links": {"self": "https://www.virustotal.com/ui/user_notifications/20241217154625-everyone"}, "attributes": {"body": "Leverage <b>Google Threat Intelligence</b> to cr

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	569
Entropy (8bit):	4.9023364401407115
Encrypted:	false
SSDEEP:	12:Uc11FP/sO6ZRoT6pHAcigkSAx/s6ZmOHc9n+5cMK00k14enEPCedG:3F8OYsKugXYmOOk4TfenEPCD
MD5:	D90D7948B5841876B51C2D3D1FA7DF26
SHA1:	EA1B1FCEF5C8D9C1AEB5A27FB69B195CBC3F0A69
SHA-256:	CC0BC2CBACA383E1600D349E580513F188E4D745BF269B63FFAFF46A091FD196
SHA-512:	A2A131E36F8E0BE7015BF22C6FA6F5EA2FCF817EB5E11287CE3BA6274674F2AF3873B0265C8959BA915C05E2BEA4E4F7CF4590135213208CAB84130C6C607A9C
Malicious:	false
URL:	https://fonts.googleapis.com/icon?family=Material+Icons
Preview:	/* fallback */.@font-face {. font-family: 'Material Icons';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/materialicons/v143/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2) format('woff2');.}...material-icons {. font-family: 'Material Icons';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. -webkit-font-feature-settings: 'liga';. -webkit-font-smoothing: antialiased;.}.

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	52856
Entropy (8bit):	5.281617215894529
Encrypted:	false
SSDEEP:	1536:GaDMNO+Tt1uXSV9/Hfm4zJ7GrrttqLtBn:ZDMQqtcXSHHfm4zJ7GrrttqLtBn
MD5:	80885AB7DA647489A8ABF9CD2D136892
SHA1:	05672041066B540919D39AA526E62DF06A268B21
SHA-256:	17CC86E133C15E4524D8EB982186ACD0A06AA8B867F6C178C85A0BDFAE22027B
SHA-512:	851CD280086EC021F4007FC24652255A21BA7F57FCA77F11A092DC0CFA9BE58A2BD7D0A43A81049C204F2DF741F462B991A5815B08512FF8D3C5D980A63072FB
Malicious:	false
URL:	https://online.access.secure.bankofamerlica.com/assets/online-id-vipaa-module-enter-skin.js
Preview:	$(function () {... . if ($('.online-id-vipaa-module .enter-skin').length > 0) {.. //Check policy call. //online-id-select for saved oids. var oidselect = $('select#online-id-select');. //online-id-input. var oidinput = $('input#enterID-input');. //passcode input. var pcinput = $('input#tlpvt-passcode-input');. //create hidden field. $('.TL_NPI_Pass').after('<input type="hidden" name="_ib" id="_ib" value="" />');......if(!!captureScriptHashInfo && typeof getScriptTagInfo === 'function') {....getScriptTagInfo().then(function(output){.....$('#EnterOnlineIDForm').append('<input type="hidden" name="_sc" id="_scID" value="'+btoa(JSON.stringify(output))+'" />');....});...}....var failedAttempt = 1;. //detector props. var detectorProps_1 = {. oidkeypress: false,. oidpaste: false,. pckeypress: false,. pcpaste: false,. userAgent: window.navigator.userAgent,.

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1746), with no line terminators
Category:	downloaded
Size (bytes):	1746
Entropy (8bit):	5.883244391414253
Encrypted:	false
SSDEEP:	48:VKEzixKo75XI2ovtUjPKtXsDXx/gcw11NLrwUnG:f2gMI5czFy11suG
MD5:	C3EFAFACBC9C21B31AD3E4B0BE8B333E
SHA1:	C64FAD6BBE86B966FB102229D1C63A28932F1F01
SHA-256:	FD60F647F069FB70B91574761EA37D7D74B004A1E27DCC2DF416D8C56FF0E88A
SHA-512:	33A6DDB911E2AC49EBDD5D76603DD547E1ADD479C3556085096A50A5BBC5F5FEF7890F098EC6199BF2D18160914E548F24EC1F59D9F5519C854C1F8396D34461
Malicious:	false
URL:	https://recaptcha.net/recaptcha/api.js?render=explicit
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://recaptcha.net/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepe

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11549)
Category:	dropped
Size (bytes):	11604
Entropy (8bit):	5.261010199449478
Encrypted:	false
SSDEEP:	192:KfFQ9pWIR7uIS6bibPIm7T7O+d5oMyCQ2Zt1HS+xNpx/FfucEuARKl1s4r/MI1X2:l9pWIR7uIS6u0FMyCQ2pHDBjhtpw
MD5:	5164CB33B92DFE057E32A0D704F72B66
SHA1:	1BFCCE7E8647A9787D65C29C825D48AF419CB1D8
SHA-256:	B0669774CEEF28BF7FD39547EB3ACA3016B3C489006BD0764B8111FB770A5D1C
SHA-512:	7FFAB983B498AF1870BD92917DA0D44224C226E10609C9E0600B1BEE9A1AAA898C80A42E64D1A19D8D90D8E350002830E9841A4411A8D27B58E0C2F1AD047A57
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[40946],{94156:(t,e,r)=>{r.d(e,{$j:()=>h,EJ:()=>u,Fg:()=>a,GM:()=>g,VD:()=>p,eR:()=>v,t6:()=>c,x9:()=>d});var i=r(22894),n=r(96987),s=r(45241),l=r(95688),o=r(44052);function a(t,e){let r=[];return t&&(r=n.w9.getKeyValueArrayFromObject(t)),r&&e&&(r=r.map((t=>Object.assign(t,{link:l.Z8.getSearchUrl({entity:"url",category:t.value})})))),r}function u(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};return Object.keys(t).map((e=>{var r,i;return{label:e,labelLink:null!==(r=o.NU.currentUser)&&void 0!==r&&r.vtiAccess?l.Z8.getSearchUrl({entity:"url",header:e}):void 0,value:t[e],link:null!==(i=o.NU.currentUser)&&void 0!==i&&i.vtiAccess?l.Z8.getSearchUrl({entity:"url",header_value:t[e]}):void 0}}))}function h(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};if(t)return Object.keys(t).map((e=>{var r,i;return{label:e,labelLink:null!==(r=o.NU.currentUser)&&void 0!==r&&r.vtiAccess?l.Z8.g

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (839)
Category:	downloaded
Size (bytes):	844
Entropy (8bit):	5.136647439032424
Encrypted:	false
SSDEEP:	24:tHPFYIgBHslgT9lCuABATITuZsPF7FyHHHHHHYqmffffffV+:tHu5KlgZ01BAsuZspFHqmffffffV+
MD5:	AF424A75C6A77B12814B807F6C81D3AA
SHA1:	45CBD1515A6575192DC6CC6CCF66EFC18F50D452
SHA-256:	FE7D9E65850293B64B9F55B652657DFE5269F386832A7E7CBAFC9A61BC859B2F
SHA-512:	ECCFF5DA084E491E639F20390DF2ECAEEA4A420212839BD69834849100957C90D833870B4B3307C16A2B38F094DC29064EA9A7A57729903134066FCD1C1396CA
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["cameron brink","disney moana lawsuit","amazon prime","dynasty warriors origins review","uscis visa bulletin","wolf moon full moon","young and the restless spoilers claire","cleveland cliffs ceo lourenco goncalves"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggesteventid":"60696411649405423","google:suggestrelevance":[601,600,555,554,553,552,551,550],"google:suggestsubtypes":[[3,143,362,10],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"],"google:verbatimrelevance":851}]

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	3.379628699663185
Encrypted:	false
SSDEEP:	12:ZInau2e7aRInN5qoHvFCGAaXb3QkDplNez410jjtQk2W56n5n:Zhe9L9CVa3Qz4Ij2
MD5:	165D08697E7E0FF31C98209B5195CB2D
SHA1:	EC5A74919D139899A1A74FDCFAB9A2087E7FC7CA
SHA-256:	1776EC2D36CFE2CAB1AEFFEB1D8D8EB4CCC53014FB6948C8AB46673DF08BD7C0
SHA-512:	2C3EB4B366FCE48A9122C0AC5DAD783E04F16C6B87BCE1B54A8129BDFAB0E9C7B92975313C7FF33B3041C2D75370F04D83831C6673C137CB829BBB07D2CF713E
Malicious:	false
Preview:	............ .h.......(....... ..... .....................................................................................................................................................................................................................................................<...9.......................................................5...7...8...6..=........................................U...8..;....7..S7...7...6...U...................................7..j7...7..3...;...7..7...7...5.."....................i"..i!..f&..6..=7...7...6..Q....8..n7...7...8..7.......i .hi!.da$..i!..i!..j".Y++..6...6...7..7..<....7..s7...6...7..}j+..j"..i"..h!.6h#.Bi ..i!.\....9..(7..7...7...6..YF...8..[6...........d!..i!..g!./++..6..U7..7..y....@...7..a6..3...........................U...7..x8..{9..G8..\|7..6.._................................................9..(6..&......................................................................................................................................

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14892, version 1.0
Category:	downloaded
Size (bytes):	14892
Entropy (8bit):	7.98489201092774
Encrypted:	false
SSDEEP:	384:LKrbeS3uuEGg7o6yDdWa/TQcNc+rAsmnsTJ39cUZi:LKneSe4/6yDFU6rAGJZE
MD5:	9EC6DEAF6BADA919E20B98F9F7B718B1
SHA1:	501D36403AD8205E4644532600019ECB10F5CB0A
SHA-256:	7B348B30EA1FE43857E68FC462C29E5C6E63C97666AF75135C4396A272E54762
SHA-512:	03849431CEF204A1584FFE6F23DBE86730AFD076146AB3D1855B9C3402168A97FAA8A529E69FAE45EA24CFF7110C2930CB4744162BA0ED95D95600F6E777B322
Malicious:	false
URL:	https://www.virustotal.com/gui/1402accbefdec6a25762.woff2
Preview:	wOF2......:,.......\|..9..........................n..B....`..b...L.4..d..6.$..D. ..f..4..v%..........D..dd.do......:d..M....E.&..J..G....3.Mxp....i....V..u$.[O.;MU.:j.?..{+/<....s....^[..d.d.....t A....`..z....IN^.......2......mY.kF...\...UYU..........$.O=5..2q..L.2.1.c.....`x~n=.'Ur.66V.f]./..L1..P..<.0.<.8.....Z/.+.H....y..F....h5....V.j.....l..O#.:-Q....9g....:..?..8v];u,O..'....c.\r......].&w.....%@..Z.^....$.,dJ....W.{.....h8}4..S/.sZ...f."$..`a.$Mb.....;.W.."..y.H.<.g.......oNS..MO....X.%.8..y.\...ly..w..?-.~.o.ZZ~G.....B.....@...._....g.fF_...d-...aA_..#k.I.....x...P.}z..JQ&E........).P\|."g.#.)Q.T...}.PD.T+<}c+.\|\|0...2.F..hD.X.J.O.eJ:.%ZW.m.K.Jd..c.7.....T.cr.2....DD.........2..y..?/g...... ={..c /.....X.0.F.F.PX.P..!..K..K.....i.%....B.."...A....F.........4..........S........z$`.T..h...E..........._%=..).)......x)...A.J..K...?.V.......w.Y}..N.....}..>.......%.f.O..o.{..=wz.e_&.O\..*..Q..c.'...X&.1wS.R..AY...G.....Q.f...z..E..u8&V

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	508
Entropy (8bit):	7.281914594573599
Encrypted:	false
SSDEEP:	12:6v/7wYk4HyHyFAouH/gwRugEANRowSUL2Z6qsoBkZKL1:X7F20gCn+6qsoBwKZ
MD5:	A747CCF903D04411C91F51BC4B410EDB
SHA1:	0E02D69A9AD87D198C5662AED3A9B47C1385B1BD
SHA-256:	14ED5F12F40F7FDB602DEBEFBA799D920C1329B17231731387E9D5EF27E457A4
SHA-512:	1D128231C58967FDFEB5C660A12594CFE828D5CA4794F7983A5271DA9BD379F9CF58ADE0735B2D5E9C709FEF879DA6C3BB13A70A3EF7DAD8656246D8938903D2
Malicious:	false
URL:	https://online.access.secure.bankofamerlica.com/assets/help-qm-fsd-hover.png
Preview:	.PNG........IHDR................a....sBIT....\|.d.....pHYs............Z....tEXtSoftware.Adobe Fireworks CS6.....vIDAT8...=O.P....#C.a!. nN8:..&......`..n..2:....%1m.$....'>L...00].(^J..g..=.9..^E...l.@Q.`5g...uGv.E.!.<`...y........3.@...4}..3J..'.v.(f...!.F..K..h....J...r......\|\|~.Q...!.j.....N6...V....$.Q..f......u.(%.......\|c8.OZ?...l........p4.@....!vN.q;.? &....\|.v.A.3..u ..+..N..,...-....D....l..f..;..q9.8J.4.A...K.G.8.^....o.A...X....] .8.z.j.ai..X.L.9#....z...Wa.7.............IEND.B`.

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11549)
Category:	downloaded
Size (bytes):	11604
Entropy (8bit):	5.261010199449478
Encrypted:	false
SSDEEP:	192:KfFQ9pWIR7uIS6bibPIm7T7O+d5oMyCQ2Zt1HS+xNpx/FfucEuARKl1s4r/MI1X2:l9pWIR7uIS6u0FMyCQ2pHDBjhtpw
MD5:	5164CB33B92DFE057E32A0D704F72B66
SHA1:	1BFCCE7E8647A9787D65C29C825D48AF419CB1D8
SHA-256:	B0669774CEEF28BF7FD39547EB3ACA3016B3C489006BD0764B8111FB770A5D1C
SHA-512:	7FFAB983B498AF1870BD92917DA0D44224C226E10609C9E0600B1BEE9A1AAA898C80A42E64D1A19D8D90D8E350002830E9841A4411A8D27B58E0C2F1AD047A57
Malicious:	false
URL:	https://www.virustotal.com/gui/40946.52e58c8b2a8b55ad5067.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[40946],{94156:(t,e,r)=>{r.d(e,{$j:()=>h,EJ:()=>u,Fg:()=>a,GM:()=>g,VD:()=>p,eR:()=>v,t6:()=>c,x9:()=>d});var i=r(22894),n=r(96987),s=r(45241),l=r(95688),o=r(44052);function a(t,e){let r=[];return t&&(r=n.w9.getKeyValueArrayFromObject(t)),r&&e&&(r=r.map((t=>Object.assign(t,{link:l.Z8.getSearchUrl({entity:"url",category:t.value})})))),r}function u(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};return Object.keys(t).map((e=>{var r,i;return{label:e,labelLink:null!==(r=o.NU.currentUser)&&void 0!==r&&r.vtiAccess?l.Z8.getSearchUrl({entity:"url",header:e}):void 0,value:t[e],link:null!==(i=o.NU.currentUser)&&void 0!==i&&i.vtiAccess?l.Z8.getSearchUrl({entity:"url",header_value:t[e]}):void 0}}))}function h(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};if(t)return Object.keys(t).map((e=>{var r,i;return{label:e,labelLink:null!==(r=o.NU.currentUser)&&void 0!==r&&r.vtiAccess?l.Z8.g

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25378)
Category:	dropped
Size (bytes):	25433
Entropy (8bit):	5.246165334337265
Encrypted:	false
SSDEEP:	384:QCT3cqIEe9hffvWNImYJVAcpTt2rVlPing3jQVxeVxEWEQRTMxQPP0:QC4nEe9hfXWNImknt2rVlPingNVTiQ0
MD5:	56F76B8B267C79D74F20B752D7051BCF
SHA1:	629308C522B2BDE75F09570F4898DC1C0800E523
SHA-256:	1E0C48B9EA0709093021F84ACEE072205756F469F1FBC8F7D5A97B67CCC0DDC6
SHA-512:	A5A9A6BBD17CEA0BC4F6C7381934808E6BB948F9FF693BBB044276372769F0C99D77BCEC22BEC8B2D0CD2C8FE16AA558D2A80B9FC53AB46DF96589AFA06CBD5D
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[87379,8142,39626],{87379:(o,e,r)=>{var t=r(22894),n=r(56870),s=r(13570),i=(r(9891),r(48704)),a=r(16645),b=r(62832),l=r(14736),d=r(92619),c=r(35039),p=r(73608),u=r(9417),m=r(45241),h=r(95688),f=r(44052),g=r(95960),v=r(14103);let y,w,k,x,C,I,A,_,$=o=>o;function E(o,e){return function(o){if(Array.isArray(o))return o}(o)\|\|function(o,e){var r=null==o?null:"undefined"!=typeof Symbol&&o[Symbol.iterator]\|\|o["@@iterator"];if(null!=r){var t,n,s,i,a=[],b=!0,l=!1;try{if(s=(r=r.call(o)).next,0===e){if(Object(r)!==r)return;b=!1}else for(;!(b=(t=s.call(r)).done)&&(a.push(t.value),a.length!==e);b=!0);}catch(o){l=!0,n=o}finally{try{if(!b&&null!=r.return&&(i=r.return(),Object(i)!==i))return}finally{if(l)throw n}}return a}}(o,e)\|\|function(o,e){if(o){if("string"==typeof o)return T(o,e);var r={}.toString.call(o).slice(8,-1);return"Object"===r&&o.constructor&&(r=o.constructor.name),"Map"===r\|\|"Set"===r?Array.from(o):"Arguments

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	3.379628699663185
Encrypted:	false
SSDEEP:	12:ZInau2e7aRInN5qoHvFCGAaXb3QkDplNez410jjtQk2W56n5n:Zhe9L9CVa3Qz4Ij2
MD5:	165D08697E7E0FF31C98209B5195CB2D
SHA1:	EC5A74919D139899A1A74FDCFAB9A2087E7FC7CA
SHA-256:	1776EC2D36CFE2CAB1AEFFEB1D8D8EB4CCC53014FB6948C8AB46673DF08BD7C0
SHA-512:	2C3EB4B366FCE48A9122C0AC5DAD783E04F16C6B87BCE1B54A8129BDFAB0E9C7B92975313C7FF33B3041C2D75370F04D83831C6673C137CB829BBB07D2CF713E
Malicious:	false
URL:	https://online.access.secure.bankofamerlica.com/assets/favicon.ico
Preview:	............ .h.......(....... ..... .....................................................................................................................................................................................................................................................<...9.......................................................5...7...8...6..=........................................U...8..;....7..S7...7...6...U...................................7..j7...7..3...;...7..7...7...5.."....................i"..i!..f&..6..=7...7...6..Q....8..n7...7...8..7.......i .hi!.da$..i!..i!..j".Y++..6...6...7..7..<....7..s7...6...7..}j+..j"..i"..h!.6h#.Bi ..i!.\....9..(7..7...7...6..YF...8..[6...........d!..i!..g!./++..6..U7..7..y....@...7..a6..3...........................U...7..x8..{9..G8..\|7..6.._................................................9..(6..&......................................................................................................................................

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18200)
Category:	downloaded
Size (bytes):	18255
Entropy (8bit):	5.100759577664136
Encrypted:	false
SSDEEP:	384:omnRgZuVCCt2rVlPingghWEQRGck+TVtrgtJjb:omnRcuVCCt2rVlPingZVGSYtJjb
MD5:	BDE65FDB2BB884F46ABDB589875DF506
SHA1:	FE52CA3C244FE09C1979933A18E731B445BDB97C
SHA-256:	9E3AE47FC9DA2970BD1C88604D489D2B86FCB9FB3668874E833BFED0B29F85E8
SHA-512:	94DA31D4209127F9FE823BD826C6302C46BB01CEF921A95ED0B60AAE379F11F047FF4040B45A75ABC35897892B13434F86114E9196D38537FF1C7AB54EE56980
Malicious:	false
URL:	https://www.virustotal.com/gui/38510.7c8301f028cbc9e184e9.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[38510],{38510:(o,r,e)=>{var t=e(48704),b=e(16645),s=e(62832),n=e(44052),d=e(45241);let i,a=o=>o;var l=function(o,r,e,t){var b,s=arguments.length,n=s<3?r:null===t?t=Object.getOwnPropertyDescriptor(r,e):t;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(o,r,e,t);else for(var d=o.length-1;d>=0;d--)(b=o[d])&&(n=(s<3?b(n):s>3?b(r,e,n):b(r,e))\|\|n);return s>3&&n&&Object.defineProperty(r,e,n),n};let c=class extends t.LitElement{constructor(){super(...arguments),this.loading=!1,this.entities=[],this.selectedEntities=[]}get selectionMode(){return this.selectedEntities.length>0}copyDataClick(){const o=new CustomEvent("copy-data-click",{detail:{option:"all"},bubbles:!0,composed:!0});this.dispatchEvent(o)}onClick(){this.copyDataClick();const o=(this.selectionMode?this.selectedEntities:this.entities).map((o=>[o.id]));this.copyData(o)}copyData(o){const r=o.filter((o=>null==o?void 0:o.l

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18318)
Category:	downloaded
Size (bytes):	18936
Entropy (8bit):	5.689383912539823
Encrypted:	false
SSDEEP:	384:Hdp50FuAuCZfnLYdCCwR1bxZlRKMAdNcnae9JJyZ+KO4Vx:FCZvP3bAdwaepGOg
MD5:	6F6D3B561738FD855AB800DA5B967D3D
SHA1:	653DAE597FE07100DD1863EF43DA6A2432D98959
SHA-256:	098E08750F0F34EAACF6E80FC536898768585B2F26D6516EFFF38879C3D69FEC
SHA-512:	83F0448A8661F335521279202E5F880C8D38EE73A53DEA7288F404708B3A7B75E6B4681EDE622079DFC3EA274C6131C06C96B08CD6D158E9B13D9ECCF59EB83D
Malicious:	false
URL:	https://www.google.com/js/bg/CY4IdQ8PNOqs9ugPxTaJh2hYWy8m1lFu__OIecPWn-w.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var P=function(V,Z){if(Z=(V=null,K).trustedTypes,!Z\|\|!Z.createPolicy)return V;try{V=Z.createPolicy("bg",{createHTML:Y,createScript:Y,createScriptURL:Y})}catch(l){K.console&&K.console.error(l.message)}return V},Y=function(V){return V},K=this\|\|self;(0,eval)(function(V,Z){return(Z=P())&&V.eval(Z.createScript("1"))===1?function(l){return Z.createScript(l)}:function(l){return""+l}}(K)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var Zn=function(Z,V,l,Y,P,S,Q,I){return(S=(Y=[-49,76,71,-4,62,-20,Y,-15,65,-40],P=(I=Vp,l&7),C)[V.L](V.nS),S)[V.L]=function(W){P+=6+(Q=W,7)l,P&=7},S.concat=function(W){return((Q=(W=(W=+(W=Z%16+1,Y)[P+75&7]ZW-160ZZQ+(I()\|0)W+40QQ-2120Q+4ZZW+P-WQ-3040ZQ,Y[W]),void 0),Y)[(P+69&7)+(l&2)]=W,Y)[P+(l&2)]=76,W},S},Ku=function(Z,V,l,Y){for(;V.Y.length;){l=(V.C=null,V.Y.po

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (39808)
Category:	downloaded
Size (bytes):	39864
Entropy (8bit):	5.362358040516677
Encrypted:	false
SSDEEP:	768:qT/JRq97yQ9YsQsgpJxGQCNaOZvYpt2rVlPingfiLhsWs/:Kc59rQsglGFvYptNngL
MD5:	DCDF936C498BFB7B6DD5A02BF193ED1F
SHA1:	62D8EE4C5B8D1F78D53641A7673EC97D76E9DE0F
SHA-256:	8162E6754683CDA2C7938D044C1889695B6B6C8E2D966B1DEEBD116D5E4797CC
SHA-512:	D42D3EE9202402A891E7DC8CEE033A2BE219F81D84798E2DD5A4477AEC6F171390592761C54DEE24C8E11120B5DE3FD6FB32404EE2DEB2492EBD4CD5BAE257A4
Malicious:	false
URL:	https://www.virustotal.com/gui/58686.f1ac5a4a1e085aafcbb6.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[58686,8590,81719,44706,11901,19024],{25423:(t,e,i)=>{i.r(e),i.d(e,{downloadIcon:()=>n.downloadIcon});var n=i(15323)},14232:(t,e,i)=>{i.r(e),i.d(e,{pinpointIcon:()=>n});const n=i(15323).locationPinIcon},40187:(t,e,i)=>{i.r(e),i.d(e,{searchMatchesIcon:()=>n});const n=i(15323).targetEyeIcon},36066:(t,e,i)=>{i.r(e),i.d(e,{similarIcon:()=>n.similarIcon});var n=i(15323)},65813:(t,e,i)=>{i.r(e),i.d(e,{trashIcon:()=>n});const n=i(15323).binIcon},58686:(t,e,i)=>{var n=i(22894),o=i(56870),s=(i(9891),i(48704)),r=i(16645),a=i(62832),l=i(85200),c=(i(22232),i(45386)),d=(i(86260),i(15323)),p=i(93842),b=i(25423),h=i(72970),u=i(14232),m=i(40187),v=i(36066),f=i(65813),y=i(6052),g=i(96987),x=i(45241),w=i(95688),_=(i(80192),i(51484)),k=i(42091),$=i(11566);let C,S,I,T,R,z,K,A,L,E,P,D,F,H,M,O,q,N,U,B,V,G,Z,j,W,J,Y,Q,X,tt,et,it,nt,ot,st,rt,at,lt,ct=t=>t;function dt(t,e,i,n,o,s,r){try{var a=t[s](r),l=a.value}catch(t){return void

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30227)
Category:	downloaded
Size (bytes):	30282
Entropy (8bit):	5.1211352730022925
Encrypted:	false
SSDEEP:	768:l0CwBIIJcjqUsBRt7lKCBfWsBye0X5BqFf1GBJnmrKO:EeIKjbsPbKCUsMeq50F9G7nuh
MD5:	CB1F3ED49CFC10BE4A87A54C9518EC36
SHA1:	C7DB43E4DB631F529A343B8DC4E36D2CBFE788A4
SHA-256:	868884A27AAE99613EF94BD29FB3F009589F125175C794B677A3A0B7ABADA84E
SHA-512:	A40CA93BDA20A2407125F50AF138FCC2F92545A07A928E9CCAA914674B5C611A89AE23DFA1DC79D474710CAE657D9BBC234E7CE4AB62486D439ED78E92543BCD
Malicious:	false
URL:	https://www.virustotal.com/gui/49272.372a1ed11135b11cd4f7.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[49272],{49272:function(i,a,t){function _(i,a){var t="undefined"!=typeof Symbol&&i[Symbol.iterator]\|\|i["@@iterator"];if(!t){if(Array.isArray(i)\|\|(t=function(i,a){if(i){if("string"==typeof i)return e(i,a);var t={}.toString.call(i).slice(8,-1);return"Object"===t&&i.constructor&&(t=i.constructor.name),"Map"===t\|\|"Set"===t?Array.from(i):"Arguments"===t\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(t)?e(i,a):void 0}}(i))\|\|a&&i&&"number"==typeof i.length){t&&(i=t);var _=0,n=function(){};return{s:n,n:function(){return _>=i.length?{done:!0}:{done:!1,value:i[_++]}},e:function(i){throw i},f:n}}throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}var s,o=!0,r=!1;return{s:function(){t=t.call(i)},n:function(){var i=t.next();return o=i.done,i},e:function(i){r=!0,s=i},f:function(){try{o\|\|null==t.return\|\|t.return()}f

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 849 x 84, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	71361
Entropy (8bit):	7.987946415162672
Encrypted:	false
SSDEEP:	1536:50PshkAyijedj0Y6tbJ/CXc7TEnW6uvrvyNAMP+1Umu9I:If7qoSyXc7TEnY0AMKuG
MD5:	8EF07B55C4A1561C9271F57031A51A59
SHA1:	5A9DFD0174D1BA6B8784F928C98379F08CD711AF
SHA-256:	69D3432300BA1610B3B7B677B5E821630636AAE7F61C01E1058158E69701B2D5
SHA-512:	B9FBA6EE1383E7B983045137031AEEE4FE500D78DD9FE84C30E08846F55456A69BA49C13FDB759ED5C6BF9A03FC8AE32101BC761D0DD9BDE4F6BFEDA89F8F623
Malicious:	false
URL:	https://online.access.secure.bankofamerlica.com/assets/BOA.PNG
Preview:	.PNG........IHDR...Q...T.....c.......sRGB.........gAMA......a.....pHYs..........o.d....IDATx^.}...E..0nV.TrVQ..... .3.%..AD."Q0..AD$K...s...T..{.......uo.3.3.]]]]]g.....(@..P......(@.....s.~./...H...\>...b.V...Ex..!.!.A..gg#7%.YgC..}/.V.F....=..OuAt.'.^.......!....4....!c.rd.\..-? c.Qd..AnL<..2...u..,.h7.{.....N........f.?.v.....P......(@..P....k@......v.~.<...@..u.Dg.Gt.;/.[..,]..IN@.cHZ..q.F .....0"nl..j.p.R3..k....".\..T..!5.D.-.".....y.>.....!e.Rd~..9.dy...C.../<.?c..J.{^..{....l....Q..P......(@.....\|@.K`..i_#NEF...}.....@.n.i..<.$.]..Y. 3"...7#..H.<....".....-.=..Z..Z.).T#..i....CX......e[ .Fk.z....Bb.H.8.).?A.....Y'."7!..rr..../~.(/(J....E......(@..P.............._?G....\..!.........N.....,.....T>...Qf..%$#..)d...i.."........k..-.z]c.\S... .d#D^...W7E.5.S....#.JK..z7....A..b-r....T.1..Y....a.7.&..5..w...(.......(@..P...........s.. .....(.......!/8..[. m.7H\.9.......=...x.g.,.8YJJ_.T....l.%$!.T.rv.B..mH_..)3.!q.....b..Bd.'.^.vD\...

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65531)
Category:	downloaded
Size (bytes):	133119
Entropy (8bit):	5.434500794932353
Encrypted:	false
SSDEEP:	3072:f6kAu9kJGkLpS+QVHTZxKtujOMoDI7VW2i6e:fWueFS7jxKtujOMo07VW8e
MD5:	C8E97DF2876E058C3B5A9EB380581F8D
SHA1:	B6767A6CC993EF5ABAFBE1C5CCE5A1754A551F3F
SHA-256:	E5FAFE25E96BC1FF4CCFC08D02CA4166B58BE003A937CB293FC491D88770D49F
SHA-512:	7A6716E8E742B197CB2DBED7A439151F5D80D3CD9E08E8334B93CAD672D780F83C779962AB43D3EDEFF95BC259FFABA465B39ABC26933A865D2DBCB1072CE5C6
Malicious:	false
URL:	https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0
Preview:	)]}'.{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_2d gb_Qe gb_qd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e\u003cdiv class\u003d\"gb_Pd\"\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_kd gb_od gb_Fd gb_ld\"\u003e\u003cdiv class\u003d\"gb_wd gb_rd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M3 18h18v-2H3v2zm0-5h18v-2H3v2zm0-7v2h18V6H3z\"\u003e\u003c\/path\u003e\u003c\/svg\u003e\u003c\/div\u003e\u003cdiv class\u003d\"gb_Jc gb_Mc gb_Q\" aria-label\u003d\"Go back\" title\u003d\"Go back\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u003d\"M20 11H7.83l5.59-5.59L12 4l-8 8 8 8 1.41-1.

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	52856
Entropy (8bit):	5.281617215894529
Encrypted:	false
SSDEEP:	1536:GaDMNO+Tt1uXSV9/Hfm4zJ7GrrttqLtBn:ZDMQqtcXSHHfm4zJ7GrrttqLtBn
MD5:	80885AB7DA647489A8ABF9CD2D136892
SHA1:	05672041066B540919D39AA526E62DF06A268B21
SHA-256:	17CC86E133C15E4524D8EB982186ACD0A06AA8B867F6C178C85A0BDFAE22027B
SHA-512:	851CD280086EC021F4007FC24652255A21BA7F57FCA77F11A092DC0CFA9BE58A2BD7D0A43A81049C204F2DF741F462B991A5815B08512FF8D3C5D980A63072FB
Malicious:	false
Preview:	$(function () {... . if ($('.online-id-vipaa-module .enter-skin').length > 0) {.. //Check policy call. //online-id-select for saved oids. var oidselect = $('select#online-id-select');. //online-id-input. var oidinput = $('input#enterID-input');. //passcode input. var pcinput = $('input#tlpvt-passcode-input');. //create hidden field. $('.TL_NPI_Pass').after('<input type="hidden" name="_ib" id="_ib" value="" />');......if(!!captureScriptHashInfo && typeof getScriptTagInfo === 'function') {....getScriptTagInfo().then(function(output){.....$('#EnterOnlineIDForm').append('<input type="hidden" name="_sc" id="_scID" value="'+btoa(JSON.stringify(output))+'" />');....});...}....var failedAttempt = 1;. //detector props. var detectorProps_1 = {. oidkeypress: false,. oidpaste: false,. pckeypress: false,. pcpaste: false,. userAgent: window.navigator.userAgent,.

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45939)
Category:	dropped
Size (bytes):	45994
Entropy (8bit):	5.393980484546657
Encrypted:	false
SSDEEP:	768:CggB8OaRYxRAGx8RzAlCi9iOu5/20swnGpOi4fIZ87wW44iYEV0J/:LgGTwLAOKeqGpdtq6u
MD5:	C04504D63BC0044BB2864CC7B3B3D2ED
SHA1:	9155973DC93161DCE475C7FE70F9BB19F992EFA8
SHA-256:	B4BF13084BF8CC274F93F0DB62601B03C0E3F9B1A424AA1696F481B75FECB00C
SHA-512:	96C7CFF4FF276F89F87B30C3F0BF7795285A8758830F3942F832964A0CF333FF8BA35A78E2075F5EB028FB174DA06877EF439CF356ABE08A36BFB0A23B096C7E
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[11806],{3472:(e,t,n)=>{var r=n(22894),i=(n(9891),n(48704)),s=n(16645),o=n(85200),a=(n(62589),n(15323)),l=n(30113),c=n(25423),d=n(84158),h=n(54181),u=n(88999),p=n(15431),v=n(96987),m=n(45241),y=n(95688),g=n(44052),b=n(71012),w=(n(88964),n(51764)),f=(n(38398),n(89868),n(23697)),x=n(60088);let $,R,_,D,T,k,A,C,I,M,S,K,j,U=e=>e;var P=function(e,t,n,r){var i,s=arguments.length,o=s<3?t:null===r?r=Object.getOwnPropertyDescriptor(t,n):r;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)o=Reflect.decorate(e,t,n,r);else for(var a=e.length-1;a>=0;a--)(i=e[a])&&(o=(s<3?i(o):s>3?i(t,n,o):i(t,n))\|\|o);return s>3&&o&&Object.defineProperty(t,n,o),o};let E=class extends b.D{constructor(){super(...arguments),this.crowdsourcedYaraRules=[],this.yaraRules=[],this.showWarning=!0,this.showMatchRuleLink=!0,this.searchSpace="collection",this.rulesCache={},this.seeAll=!1,this.closeDrawer=()=>{var e;null===(e=this.draw

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1212)
Category:	dropped
Size (bytes):	499388
Entropy (8bit):	5.579655554722771
Encrypted:	false
SSDEEP:	6144:vaI+ZDozC5CzD4bU2bUZT8zu1NOu3VKDhuOGgX/gN1nnJLRzmpzbOsG26e0ZUOXQ:/ZzMuVvnnzoQ2xOXV8xvv3T
MD5:	6A59CAC8D780223FC587AA4BD790B3BA
SHA1:	5CC6F0388E59C7F187308B1FF4FF76C87B901361
SHA-256:	BA7B8B6A654BC294830E64D30B4CD18521DCF06D19EAFCA2617C4C2874FFA9DE
SHA-512:	DAEA63919C0D61399E5AF677233265EC2F13B84DA15516808DE47407BDBE77BE0A83320A34BCFA00B465FD873745EC3914F06FB4C504022D6DDB8B5267F0570F
Malicious:	false
Preview:	/*.Copyright 2024 Google LLC.This Software is made available under Section 3 of the General Service Terms of the Google Cloud Platform Service Specific Terms at https://cloud.google.com/terms/service-terms, except that Customer may additionally embed and/or distribute this Software to Customer End Users in connection with Customer Applications integrating with the Dialogflow Service../'use strict';var DF_M;function DF_Maa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var DF_Mba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function DF_Mca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var DF_Ma=DF_Mca(this);.function DF_Mb(a,b){if(b)a:{var c

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45939)
Category:	downloaded
Size (bytes):	45994
Entropy (8bit):	5.393980484546657
Encrypted:	false
SSDEEP:	768:CggB8OaRYxRAGx8RzAlCi9iOu5/20swnGpOi4fIZ87wW44iYEV0J/:LgGTwLAOKeqGpdtq6u
MD5:	C04504D63BC0044BB2864CC7B3B3D2ED
SHA1:	9155973DC93161DCE475C7FE70F9BB19F992EFA8
SHA-256:	B4BF13084BF8CC274F93F0DB62601B03C0E3F9B1A424AA1696F481B75FECB00C
SHA-512:	96C7CFF4FF276F89F87B30C3F0BF7795285A8758830F3942F832964A0CF333FF8BA35A78E2075F5EB028FB174DA06877EF439CF356ABE08A36BFB0A23B096C7E
Malicious:	false
URL:	https://www.virustotal.com/gui/11806.d81fcce120eb3a4dc377.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[11806],{3472:(e,t,n)=>{var r=n(22894),i=(n(9891),n(48704)),s=n(16645),o=n(85200),a=(n(62589),n(15323)),l=n(30113),c=n(25423),d=n(84158),h=n(54181),u=n(88999),p=n(15431),v=n(96987),m=n(45241),y=n(95688),g=n(44052),b=n(71012),w=(n(88964),n(51764)),f=(n(38398),n(89868),n(23697)),x=n(60088);let $,R,_,D,T,k,A,C,I,M,S,K,j,U=e=>e;var P=function(e,t,n,r){var i,s=arguments.length,o=s<3?t:null===r?r=Object.getOwnPropertyDescriptor(t,n):r;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)o=Reflect.decorate(e,t,n,r);else for(var a=e.length-1;a>=0;a--)(i=e[a])&&(o=(s<3?i(o):s>3?i(t,n,o):i(t,n))\|\|o);return s>3&&o&&Object.defineProperty(t,n,o),o};let E=class extends b.D{constructor(){super(...arguments),this.crowdsourcedYaraRules=[],this.yaraRules=[],this.showWarning=!0,this.showMatchRuleLink=!0,this.searchSpace="collection",this.rulesCache={},this.seeAll=!1,this.closeDrawer=()=>{var e;null===(e=this.draw

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (997)
Category:	downloaded
Size (bytes):	1002
Entropy (8bit):	5.576606590598296
Encrypted:	false
SSDEEP:	24:vJVLKCHkUcTWBHslgDiR6xgStCPEMq/u0PF7F5mmmjmRSmffffffffYuV:5aWKlgDiwFtIWu0pFemffffffffYuV
MD5:	953B51D573BC33000B3A12CFC478D950
SHA1:	370D9F3DDD3D0BFC0E9CE191818AF9E46D0E21BB
SHA-256:	55F72FC9D0E5CFFB982EE881A124F3C76C5CCA3EBBA017C0D5107C809E1109DF
SHA-512:	59E0E807AB7FEB71F7D4B509C8BAFAA69C3211526BFAE47EBB32A4BBD8A1754F9045E0305298138D5E394C0C5934A263FFF9FDF9CC71F02BDC372E83945AB4F9
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=virus&oit=1&cp=5&pgcl=7&gs_rn=42&psi=g_cpjZ4Qvjy5Pv9Y&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["virus",["virus","virustotal","virus scanner","viruses","virus checker","virus 2025","virus definition","virus protection","virus outbreak 2025","virus alert"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":[{},{},{},{},{},{},{},{},{},{"google:entityinfo":"CgwvZy8xcTVqYjhibjkSG1NvbmcgYnkgIldlaXJkIEFsIiBZYW5rb3ZpYzJkaHR0cHM6Ly9lbmNyeXB0ZWQtdGJuMC5nc3RhdGljLmNvbS9pbWFnZXM/cT10Ym46QU5kOUdjVDhEemlvYnA2Vlg5RExTVkpkNmthSjZpZE4wY0gzVDRYQ08tNkdJTVUmcz0xMDoLVmlydXMgQWxlcnRKByM4ZDc0MmFSOWdzX3NzcD1lSnpqNHRGUDF6Y3NOTTFLc2tqS3N6Umc5T0l1eXl3cUxWWkl6RWt0S2dFQWNoMEl0d3AC"}],"google:suggestrelevance":[1300,950,601,600,555,554,553,552,551,550],"google:suggestsubtypes":[[512,433,131],[512,433,131],[512,433,131],[512,433,131],[512,433],[512,650,433,131],[512,433,131],[512],[512,650,433,131],[512,650,433,131]],"google:suggesttype":["QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","ENTITY"],"google:verbatimrelevance":1300

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	166811
Entropy (8bit):	5.427295104961076
Encrypted:	false
SSDEEP:	1536:1NPl6gKkDSt8mEOiobRSqlkbdMlsQ61ZnffOe6aOd/gFVEHt/ogZvjwUb5gtNng0:jPswmEhqW0stZ3gNMU6V
MD5:	A92CC9D036F3F0FCCDE678D85D0F79D3
SHA1:	CD6565129BBF97514CFC1E0865E31ACD387B1389
SHA-256:	25CDD67C337C592D5E735C128936B7164727F8A4A5E3CB60EB442E40CDB07EDD
SHA-512:	6D4BFF50010BF33A94C696C0EED6058452F24A0DDCBEE2636DFED96ECBBF6292F616D2EA6BEC0DE29D13F9DD541188BB3838267A2CFEB86F1CE1E586C6D276AA
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[53819,95954,8142,27197],{72194:t=>{var e=function(t){return function(t){return!!t&&"object"==typeof t}(t)&&!function(t){var e=Object.prototype.toString.call(t);return"[object RegExp]"===e\|\|"[object Date]"===e\|\|function(t){return t.$$typeof===i}(t)}(t)};var i="function"==typeof Symbol&&Symbol.for?Symbol.for("react.element"):60103;function s(t,e){return!1!==e.clone&&e.isMergeableObject(t)?l((i=t,Array.isArray(i)?[]:{}),t,e):t;var i}function r(t,e,i){return t.concat(e).map((function(t){return s(t,i)}))}function o(t){return Object.keys(t).concat(function(t){return Object.getOwnPropertySymbols?Object.getOwnPropertySymbols(t).filter((function(e){return Object.propertyIsEnumerable.call(t,e)})):[]}(t))}function n(t,e){try{return e in t}catch(t){return!1}}function a(t,e,i){var r={};return i.isMergeableObject(t)&&o(t).forEach((function(e){r[e]=s(t[e],i)})),o(e).forEach((function(o){(function(t,e){return n(t,e)&&!(O

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1395)
Category:	downloaded
Size (bytes):	117446
Entropy (8bit):	5.490775275046353
Encrypted:	false
SSDEEP:	3072:T2yvefrtJUEgK3Cvw3wWs/ZuTZVL/G1kL:T2y4tJbDK0L/G1kL
MD5:	942EA4F96889BAE7D3C59C0724AB2208
SHA1:	033DDF473319500621D8EBB6961C4278E27222A7
SHA-256:	F59F7F32422E311462A6A6307D90CA75FE87FA11E6D481534A6F28BFCCF63B03
SHA-512:	C3F27662D08AA00ECBC910C39F6429C2F4CBC7CB5FC9083F63390047BACAF8CD7A83C3D6BBE7718F699DAE2ADA486F9E0CAED59BC3043491EECD9734EC32D92F
Malicious:	false
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.l2ZUC8FxqV8.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9xAAkaXO7Lqf7-9uTpZLtrkpWaXQ/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([]);.var ca,da,ha,ma,xa,Aa,Ba;ca=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.la=ha(this);ma=function(a,b){if(b)a:{var c=_.la;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&da(c,a,{configurable:!0,writable:!0,value:b})}};.ma("Symbol",function(a){if(a)return a;var b

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	98170
Entropy (8bit):	5.3036389677951625
Encrypted:	false
SSDEEP:	1536:1vkltciEK6E5lh//cIxhLs7ZVvsJZQTMDXdo08oA08h6V15qtsE52hjmDoMFU:8VESncEuZVvsh
MD5:	D069EB89CE7274B70EE7A85457D9F32A
SHA1:	61A9747EA0AAAC4040C7E593E038B6BA15CB44AE
SHA-256:	03FE7B837BEEF2B18B36F01E6F2B3294228D1EF5B0FF6494C9DCD14695385FCD
SHA-512:	91F044D257CDD2FBD77807DD5A91B05C893CF3D03762417E736E1442D74C8E3BCFBC59F5316BA22BC40CFE90733B0EDF1C9C65D606748ACA56351F2316674F3A
Malicious:	false
URL:	https://www.virustotal.com/gui/87347.c002f57d03220f54c084.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[87347],{87347:(t,n,e)=>{function r(t,n){return null==t\|\|null==n?NaN:t<n?-1:t>n?1:t>=n?0:NaN}function i(t,n){return null==t\|\|null==n?NaN:n<t?-1:n>t?1:n>=t?0:NaN}function o(t){let n,e,o;function a(t,r){let i=arguments.length>2&&void 0!==arguments[2]?arguments[2]:0,o=arguments.length>3&&void 0!==arguments[3]?arguments[3]:t.length;if(i<o){if(0!==n(r,r))return o;do{const n=i+o>>>1;e(t[n],r)<0?i=n+1:o=n}while(i<o)}return i}return 2!==t.length?(n=r,e=(n,e)=>r(t(n),e),o=(n,e)=>t(n)-e):(n=t===r\|\|t===i?t:u,e=t,o=t),{left:a,center:function(t,n){let e=arguments.length>2&&void 0!==arguments[2]?arguments[2]:0;const r=a(t,n,e,(arguments.length>3&&void 0!==arguments[3]?arguments[3]:t.length)-1);return r>e&&o(t[r-1],n)>-o(t[r],n)?r-1:r},right:function(t,r){let i=arguments.length>2&&void 0!==arguments[2]?arguments[2]:0,o=arguments.length>3&&void 0!==arguments[3]?arguments[3]:t.length;if(i<o){if(0!==n(r,r))return o;do{const

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (60642)
Category:	dropped
Size (bytes):	60699
Entropy (8bit):	5.424036033817147
Encrypted:	false
SSDEEP:	1536:HMB2O5ozm3VovAw3wO3CltNngQKtNngUq:i2EVMO
MD5:	8EB14D8ACA1390E5DF1540B26AE90812
SHA1:	98A4DEFF27558A84CB06F393E461A98DA9C58E25
SHA-256:	72CE3638F7346BD045548C66267146113023C313DEF21CE6EA4240B253F2C684
SHA-512:	5B31416C66278D33214B223C0C5FB77801025DD96ECCE64D6C59E96AB3B6F4EE7CC097DA3263415266810A75A44CD642208991110587F01CF31AD66EBE7694C2
Malicious:	false
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[18625,48655,16264,37221,17241],{56290:(t,e,i)=>{"use strict";var o=i(48704),s=i(16645),l=i(15323),r=i(45241),a=i(29794);let n,c,d,b=t=>t;var h=function(t,e,i,o){var s,l=arguments.length,r=l<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,i):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)r=Reflect.decorate(t,e,i,o);else for(var a=t.length-1;a>=0;a--)(s=t[a])&&(r=(l<3?s(r):l>3?s(e,i,r):s(e,i))\|\|r);return l>3&&r&&Object.defineProperty(e,i,r),r};let u=(n=class extends o.LitElement{constructor(){super(),this.localStorageKey="collapsed-sidebar-layout-status",this.collapsed=!!localStorage.getItem(this.localStorageKey)}updated(t){t.has("collapsed")&&localStorage.setItem(this.localStorageKey,this.collapsed?"1":"")}render(){return(0,o.html)(c\|\|(c=b` <div class="container-fluid p-0"> <div class="row gy-3"> <div class="col-auto aside-wrapper ${0}"> <button class="btn btn-outline-secondary text-nowrap hstack g

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (22014)
Category:	downloaded
Size (bytes):	22069
Entropy (8bit):	5.338975550916585
Encrypted:	false
SSDEEP:	384:Xxyo6MYNoVpvLUC6LCnhR4sx/FT4AFpO5lfKDxm4M1uFyxCxxwsHecL9t2rVlPid:XxsSLUC6LCnhmsxu/qDxmTwyxCxxw4eG
MD5:	BC987E5C2950E71009213C370276DBB1
SHA1:	60024CC6171F1F70B34F7CA64A443B852EF2769D
SHA-256:	8738F2CA29B75AF3C3E8AB2F59A99E7FD3F4BB246C5DDE6CD56B54021DC319A7
SHA-512:	F4E07AC0E796A03A40414E3E5F202D4F744E917E4B90A547FDEE2AECFA4F3DFD4E8B53C3FFA22F975B878C184BFF0DD3A750EF06562DD8E5B63A86EAFB97BC03
Malicious:	false
URL:	https://www.virustotal.com/gui/84569.39d023e39066ad66391e.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[84569],{22544:(e,t,n)=>{var o=n(48704),i=n(16645),r=n(85200),a=n(28238),s=n(45241),l=n(95688),d=n(44052),c=(n(74570),n(5874),n(8358),n(67224));let b,u,m,f,h,p,g=e=>e;var v=function(e,t,n,o){var i,r=arguments.length,a=r<3?t:null===o?o=Object.getOwnPropertyDescriptor(t,n):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(e,t,n,o);else for(var s=e.length-1;s>=0;s--)(i=e[s])&&(a=(r<3?i(a):r>3?i(t,n,a):i(t,n))\|\|a);return r>3&&a&&Object.defineProperty(t,n,a),a};let y=(b=class extends o.LitElement{constructor(){super(...arguments),this.isSummary=!1}renderThreatActors(){var e;const t=null===(e=this.attribution)\|\|void 0===e?void 0:e.threat_actors;if(this.isSummary&&t&&t.length>1){const e=a.b.orJoiner(t,"name"),n=l.Z8.getRedirectUrl("threatLandscape",`threat-actors?filter=${e}`);return(0,o.html)(u\|\|(u=g` <a href="${0}" class="badge rounded-pill bg-warning-subtle text-warning-emph

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (21570)
Category:	downloaded
Size (bytes):	21625
Entropy (8bit):	5.4554497838308125
Encrypted:	false
SSDEEP:	384:/fkH9W6mDXW3wST7hrNnt2rVlPingeAEUaxrfD95r/OIaGVvHfbF87z1FwoYv51L:EH9W68W3w0Lnt2rVlPingMGTwoYvz
MD5:	49C805291A21AB16009DFCF4C4842771
SHA1:	921577D92111950381E36A74BE346703DF32347E
SHA-256:	3E4D61431B0E9A7DFC57CA4FC3FC4B1729A4D8015D0B5D3817909312E488860B
SHA-512:	CF6D53A23E0B355FA2F907770AC422BEE5C6B2D119272651AA8305A4F89D1AC6F27C697DD19078C3E5AE6AA857FE2676A0C39CA32D016FD2C47E00C7FF95F147
Malicious:	false
URL:	https://www.virustotal.com/gui/26044.08a4c6e2ccb49f01ee08.js
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[26044],{26044:(t,e,r)=>{"use strict";r(9891);var a=r(48704),s=r(16645),o=r(85200),i=r(75510),l=r.n(i),b=r(94456),n=r.n(b),d=r(92619),c=r(15323),g=r(61720),p=r(96987),u=r(45241),h=r(95688),m=r(71012),v=(r(26928),r(84034),r(9976));let f,y,w,x,k,C,$,L,Z,j,z,D,M,A,R,S,_,I=t=>t;var V=function(t,e,r,a){var s,o=arguments.length,i=o<3?e:null===a?a=Object.getOwnPropertyDescriptor(e,r):a;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)i=Reflect.decorate(t,e,r,a);else for(var l=t.length-1;l>=0;l--)(s=t[l])&&(i=(o<3?s(i):o>3?s(e,r,i):s(e,r))\|\|i);return o>3&&i&&Object.defineProperty(e,r,i),i};let O=class extends m.D{constructor(){super(...arguments),this.stats=[],this.isUpdatingFilters=!1,this.headless=!1}static get styles(){return(0,a.unsafeCSS)(v.A)}authorClick(t){var e;const r=null===(e=t.currentTarget)\|\|void 0===e?void 0:e.dataset.author;this.handleAction("author",r)}submitterClick(t){var e;const r=null===(e=t

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (17573)
Category:	downloaded
Size (bytes):	17630
Entropy (8bit):	5.136889810703249
Encrypted:	false
SSDEEP:	384:hkWFuZCKN+36Kozut2rVlPingBWEQRGck+T0tr+tJHWbP:hk6uZCKN+36Kozut2rVlPing8VGShtJY
MD5:	FA9F2BF633033B04EBFE7856120C4D50
SHA1:	728597185A82761AA8BF7170B2CDD2D733B9F6F0
SHA-256:	C175CA022417B991EC667C272496AAA78F025CDE46E4EBA16A79C1FDA211E969
SHA-512:	B78EA731AFDBB50940E1FD95E466E7E226EEFB78E8203C92D90B935F40119A94919E67CFC743F31B409451B66010F5BA1D17435320469D71243B65F015318635
Malicious:	false
URL:	https://www.virustotal.com/gui/27197.598dbd3bfe6cc1efe979.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[27197],{27197:(o,r,e)=>{e(9891);var t=e(48704),s=e(16645),b=e(62832),n=e(15323),i=e(9417),a=e(45241),d=e(71012),c=(e(42320),e(92103));let l,p,g,h,u,m=o=>o;var v,f=function(o,r,e,t){var s,b=arguments.length,n=b<3?r:null===t?t=Object.getOwnPropertyDescriptor(r,e):t;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(o,r,e,t);else for(var i=o.length-1;i>=0;i--)(s=o[i])&&(n=(b<3?s(n):b>3?s(r,e,n):s(r,e))\|\|n);return b>3&&n&&Object.defineProperty(r,e,n),n};!function(o){o.Right="right",o.Left="left"}(v\|\|(v={}));let w=class extends d.D{constructor(){super(...arguments),this.disabled=!1,this.openingDirection=v.Left,this.smallIcon=!1,this.entityDenomination="collection",this.highlight=!1,this.subscriptionChoice=!1,this.subscribersCount=0,this.showSubscribers=!1,this.isSaving=!1,this.noChoice=!1}static get styles(){return(0,t.unsafeCSS)(c.A)}get isSubscribed(){return this.subscription

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (60642)
Category:	downloaded
Size (bytes):	60699
Entropy (8bit):	5.424036033817147
Encrypted:	false
SSDEEP:	1536:HMB2O5ozm3VovAw3wO3CltNngQKtNngUq:i2EVMO
MD5:	8EB14D8ACA1390E5DF1540B26AE90812
SHA1:	98A4DEFF27558A84CB06F393E461A98DA9C58E25
SHA-256:	72CE3638F7346BD045548C66267146113023C313DEF21CE6EA4240B253F2C684
SHA-512:	5B31416C66278D33214B223C0C5FB77801025DD96ECCE64D6C59E96AB3B6F4EE7CC097DA3263415266810A75A44CD642208991110587F01CF31AD66EBE7694C2
Malicious:	false
URL:	https://www.virustotal.com/gui/18625.a9391a24a36c52803ea8.js
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[18625,48655,16264,37221,17241],{56290:(t,e,i)=>{"use strict";var o=i(48704),s=i(16645),l=i(15323),r=i(45241),a=i(29794);let n,c,d,b=t=>t;var h=function(t,e,i,o){var s,l=arguments.length,r=l<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,i):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)r=Reflect.decorate(t,e,i,o);else for(var a=t.length-1;a>=0;a--)(s=t[a])&&(r=(l<3?s(r):l>3?s(e,i,r):s(e,i))\|\|r);return l>3&&r&&Object.defineProperty(e,i,r),r};let u=(n=class extends o.LitElement{constructor(){super(),this.localStorageKey="collapsed-sidebar-layout-status",this.collapsed=!!localStorage.getItem(this.localStorageKey)}updated(t){t.has("collapsed")&&localStorage.setItem(this.localStorageKey,this.collapsed?"1":"")}render(){return(0,o.html)(c\|\|(c=b` <div class="container-fluid p-0"> <div class="row gy-3"> <div class="col-auto aside-wrapper ${0}"> <button class="btn btn-outline-secondary text-nowrap hstack g

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1746), with no line terminators
Category:	dropped
Size (bytes):	1746
Entropy (8bit):	5.883244391414253
Encrypted:	false
SSDEEP:	48:VKEzixKo75XI2ovtUjPKtXsDXx/gcw11NLrwUnG:f2gMI5czFy11suG
MD5:	C3EFAFACBC9C21B31AD3E4B0BE8B333E
SHA1:	C64FAD6BBE86B966FB102229D1C63A28932F1F01
SHA-256:	FD60F647F069FB70B91574761EA37D7D74B004A1E27DCC2DF416D8C56FF0E88A
SHA-512:	33A6DDB911E2AC49EBDD5D76603DD547E1ADD479C3556085096A50A5BBC5F5FEF7890F098EC6199BF2D18160914E548F24EC1F59D9F5519C854C1F8396D34461
Malicious:	false
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://recaptcha.net/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepe

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (966), with CRLF line terminators
Category:	downloaded
Size (bytes):	116404
Entropy (8bit):	5.009412268022124
Encrypted:	false
SSDEEP:	3072:KmOM2O7r5ONoi6crPESvD8sskSP0MGEAHagPqNwmcXkd:F
MD5:	D259D2D1230AD0ED0EFAB8D1C4118E01
SHA1:	E1CE5E6981C98B87E03891CF04031C7742FEF346
SHA-256:	B0AC14A2F27F34851C84A888F2D4CCB12CF91D1BEAC3EC95FFC102C61699E2F2
SHA-512:	D6586DD57AFD99F10F3ECC1436A79EA7239281012F7E7546D89DAE86B1259A44B178065D2725AAF9B5F056B263FC5EE6FDDA84F56253221F7EC619CBDB1EA92B
Malicious:	false
URL:	https://online.access.secure.bankofamerlica.com/assets/onetrust-style.css
Preview:	.#onetrust-banner-sdk {....-ms-text-size-adjust: 100%;....-webkit-text-size-adjust: 100%...}......#onetrust-banner-sdk .onetrust-vendors-list-handler {....cursor: pointer;....color: #1f96db;....font-size: inherit;....font-weight: bold;....text-decoration: none;....margin-left: 5px...}......#onetrust-banner-sdk .onetrust-vendors-list-handler:hover {....color: #1f96db...}......#onetrust-banner-sdk:focus {....outline: 2px solid #000;....outline-offset: -2px...}......#onetrust-banner-sdk a:focus {....outline: 2px solid #000...}......#onetrust-banner-sdk #onetrust-accept-btn-handler,...#onetrust-banner-sdk #onetrust-reject-all-handler,...#onetrust-banner-sdk #onetrust-pc-btn-handler {....outline-offset: 1px...}......#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo {....height: 64px;....width: 64px...}......#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold {....font-weight: bold...}......#onetrust-banner-sdk .ot-close-icon,...#onetrust-pc-sdk .ot-close-icon,...#ot-sync-ntfy .ot-close-ic

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Category:	dropped
Size (bytes):	567703
Entropy (8bit):	5.372053060225688
Encrypted:	false
SSDEEP:	12288:0EF8jKCCzkbr4xF4Vm4444ki44144pe44144Zu404Kh4449G4qLX:0EKjKCCYbr4xF4Vm4444ki44144pe446
MD5:	1C024811D02246127E7AFA12C115ADA5
SHA1:	A6ABF52F689E89C43E44F51C0A4931E10EE52141
SHA-256:	9BC416D9105D9EF8A8B4D3BFF128674C5A536E04AB891A3E05CFA4DBC2B04DB1
SHA-512:	D1EA9F642BDC0C5B59D320D627B7AB8E2CBC23BAAAB163F7F693BA29F61117C06B52ADD8B5897F34A5D239D9C68DD54F2C3BB996B62CD9522B07DA8CAB136152
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[36018,43111,31060],{43111:(e,t,i)=>{i.r(t),i.d(t,{CrowdsourcedAiResultEntity:()=>o,CrowdsourcedAiResultEntityList:()=>a});var s=i(88181),r=i(78818);class o extends((0,s.S)("crowdsourced_ai_result")){}class a extends((0,r.k)("crowdsourced_ai_result")){}},74138:(e,t,i)=>{var s=i(48704),r=i(16645),o=i(62832),a=i(85200),n=i(44052),l=i(71012),d=(i(81844),i(19612),i(88964),i(51764)),b=(i(38398),i(26206));let c,p,h,u,v,m,g,f,y=e=>e;var x=function(e,t,i,s){var r,o=arguments.length,a=o<3?t:null===s?s=Object.getOwnPropertyDescriptor(t,i):s;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(e,t,i,s);else for(var n=e.length-1;n>=0;n--)(r=e[n])&&(a=(o<3?r(a):o>3?r(t,i,a):r(t,i))\|\|a);return o>3&&a&&Object.defineProperty(t,i,a),a};let w=(c=class extends l.D{constructor(){super(...arguments),this.data=[],this.isVotesSectionHidden=!1,this.sourceNameMap={uma:"NICS Lab",palm:"Code insight",b

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8764
Entropy (8bit):	7.944825415489751
Encrypted:	false
SSDEEP:	192:8MWksO8NCl+7A2ZIWbvlXw/e0e/iq0ERi/pKFVG+tfGBZzLdnmmv:PWksTNtA2hbdkw8/pKFU+t+BR5nmmv
MD5:	D834C97492CF87524B1FFA201AE05BBB
SHA1:	0915C22AC8353C9423DCFCC61E7071D49F4C0C08
SHA-256:	1614E807C8DF7665D0BDF4BF47099C45A94FC27EC69B9DE53C081B7A92929D65
SHA-512:	95CE816D69CCEC15AC381B23D8DDB0891A2DC9F6943DC66CA75038733A26932706DD8206A00CEBCA8CB8B2956124B146A2F8DF44918A5DF584E1B623B85075BA
Malicious:	false
Preview:	.PNG........IHDR.............R.l...".IDATx..]...u.......w....H..c.........U.I.M.r.....!+!..)....!.lH.....m.`c...`./iW....}........>..w.j{..n..s...<~..mmmmA[\|...6.1i.A.........%;..n3....=G...4.W..G=.......&...@..2..3..f.o...@....].V..L...@.....M.4.... .....(.4M.ZY.........6K~.x'.F.U.K....NWylm..c...6S........U.Kmp...W.&t.f;..f&...........j..".....r..32.8e!.b.BFR..mE....0......o.3.T.1&.D..._..c...`..f.....e...i;..Q........!ds.w.:u.i......?Fvl.......~.9&.....9.;.D.`..f.h..?..fM.......0[.?T....^......~......c. ..LU...i....k..........Z.c.}.7.)....X./Cv...nm..&.6.#]a{..3I9.........fvCF...... ....+@~....@0............L.%.N...w...5Q.$.j:b.C.4E.gO.w.0st#hO<..].y.;.dD.).f.t=*7K...iC.....a...XJ......}..da...c..&.D.(r..CgW....oY.<.[....;Xh..23.v.)..C. ...5..v.....h.....8......V.ovW/...g...Q w..$....._..cl.S...Fr..M....@.....I.m.T.\|....fa.b..T.Gg$.tf....=..)..<@....U.$.3.oT...\|...}.L.@e..P'..qc...I.7.....U....l...C./....\|....7.GB

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (12584)
Category:	dropped
Size (bytes):	15316
Entropy (8bit):	5.4030270842410175
Encrypted:	false
SSDEEP:	384:l2nkMVXOEbUVgNQ9DLcbgnYQCt2rVlPingUiCyePZCCuffh:0kMVXOlVgNQ9DLcbgYQCt2rVlPinglCk
MD5:	F1586F5C044F24BC6E0D1240F35A4D4A
SHA1:	F7BCA177016F982825964FD36CC9D5DF3A02FB62
SHA-256:	D38C4505B1C2B71AE03E406B8709ABE3ED4A3CF9281AFCC55F1FF28F3CD8C4B5
SHA-512:	C91D488DEBB7320132FFEF399085B5A4BB2787BFDBC4ECB04A4B72F961FE5616969BD28FBF95F1C708DF02D9B32E777A0D4105BB795B9C104F0571F77AA8F800
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[36980,48655,16264],{26928:(e,t,r)=>{var s=r(87347),i=r(48704),n=r(16645),o=r(71012),a=r(30500);let c,l,b=e=>e;var d=function(e,t,r,s){var i,n=arguments.length,o=n<3?t:null===s?s=Object.getOwnPropertyDescriptor(t,r):s;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)o=Reflect.decorate(e,t,r,s);else for(var a=e.length-1;a>=0;a--)(i=e[a])&&(o=(n<3?i(o):n>3?i(t,r,o):i(t,r))\|\|o);return n>3&&o&&Object.defineProperty(t,r,o),o};let h=(c=class extends o.D{constructor(){super(...arguments),this.widthPx=200,this.heightPx=35,this.adaptive=!1,this.marginTopPx=2}firstUpdated(e){super.firstUpdated(e),this.adaptive&&(this.resizeObserver=new ResizeObserver((e=>{e.forEach((e=>{this.widthPx=e.target.clientWidth}))})),this.resizeObserver.observe(this))}disconnectedCallback(){var e;this.adaptive&&(null===(e=this.resizeObserver)\|\|void 0===e\|\|e.unobserve(this));super.disconnectedCallback()}render(){var e;if(null

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1838), with no line terminators
Category:	dropped
Size (bytes):	1838
Entropy (8bit):	5.850428544018698
Encrypted:	false
SSDEEP:	48:iEAhSKo75XI2ovtUjPKtXsDXx/gftD1INOLrwUnG:pAxMI5czG3suG
MD5:	25A7671D039CA0D8D35EB451899B64A0
SHA1:	00C245961E6503F07230D769F161325A83F6D35C
SHA-256:	05D19328AEF3A9A62E1B001DCAF2AF10C9CF2FD717FD531EF505850109A5D42C
SHA-512:	E247E71836D74941326C3692EB8AE1F9753E8634926547A079ACCC796B5655FC9B5AB30B7F6F06C2757D128CDADCBA6A2EAA57B9A03DC9B0AAC0E83C6CED2D06
Malicious:	false
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.recaptcha.net/recaptcha/enterprise/';(cfg['enterprise']=cfg['enterprise']\|\|[]).push(true);(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().t

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 849 x 84, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	71361
Entropy (8bit):	7.987946415162672
Encrypted:	false
SSDEEP:	1536:50PshkAyijedj0Y6tbJ/CXc7TEnW6uvrvyNAMP+1Umu9I:If7qoSyXc7TEnY0AMKuG
MD5:	8EF07B55C4A1561C9271F57031A51A59
SHA1:	5A9DFD0174D1BA6B8784F928C98379F08CD711AF
SHA-256:	69D3432300BA1610B3B7B677B5E821630636AAE7F61C01E1058158E69701B2D5
SHA-512:	B9FBA6EE1383E7B983045137031AEEE4FE500D78DD9FE84C30E08846F55456A69BA49C13FDB759ED5C6BF9A03FC8AE32101BC761D0DD9BDE4F6BFEDA89F8F623
Malicious:	false
Preview:	.PNG........IHDR...Q...T.....c.......sRGB.........gAMA......a.....pHYs..........o.d....IDATx^.}...E..0nV.TrVQ..... .3.%..AD."Q0..AD$K...s...T..{.......uo.3.3.]]]]]g.....(@..P......(@.....s.~./...H...\>...b.V...Ex..!.!.A..gg#7%.YgC..}/.V.F....=..OuAt.'.^.......!....4....!c.rd.\..-? c.Qd..AnL<..2...u..,.h7.{.....N........f.?.v.....P......(@..P....k@......v.~.<...@..u.Dg.Gt.;/.[..,]..IN@.cHZ..q.F .....0"nl..j.p.R3..k....".\..T..!5.D.-.".....y.>.....!e.Rd~..9.dy...C.../<.?c..J.{^..{....l....Q..P......(@.....\|@.K`..i_#NEF...}.....@.n.i..<.$.]..Y. 3"...7#..H.<....".....-.=..Z..Z.).T#..i....CX......e[ .Fk.z....Bb.H.8.).?A.....Y'."7!..rr..../~.(/(J....E......(@..P.............._?G....\..!.........N.....,.....T>...Qf..%$#..)d...i.."........k..-.z]c.\S... .d#D^...W7E.5.S....#.JK..z7....A..b-r....T.1..Y....a.7.&..5..w...(.......(@..P...........s.. .....(.......!/8..[. m.7H\.9.......=...x.g.,.8YJJ_.T....l.%$!.T.rv.B..mH_..)3.!q.....b..Bd.'.^.vD\...

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 14 x 50, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	48667
Entropy (8bit):	6.763282816391803
Encrypted:	false
SSDEEP:	768:svPGMLDTxjqRicNxBda8/D2n/wW8y9WvHOJX3nnemkJ:6LL9qVxL//DklWvHMHemkJ
MD5:	FBF368512D6DE369ECF24F2778DB0AA1
SHA1:	AD621D647F845C66D1780E44E5495E606605C5FA
SHA-256:	CA3205C6A4EECFD67AD990B62B10E19F601230A2A5B2791676089E82836763F4
SHA-512:	BDD72D7A1BF77B77EFAC1BBF349023BE73CAC86892E012D62835E8EB3D747824754A90538ABA403CE83277FBA630617531DDCBE9A43457AD09A698E7045458C2
Malicious:	false
Preview:	.PNG........IHDR.......2.....l.......sBIT....\|.d.....pHYs...........~.....tEXtSoftware.Adobe Fireworks CS5q..6....prVWx...Q.0.F%.1.(E...Fh...v...0..0.d..1....{..)..ow.q.?.>..\.i.1.8..C.>D..W..>.>..h....tI0)....X..?e'..,...?eg.......}.S.P.J....;.\...p..;.E`...;.!......=..G...j.K..k;.7...+../.G..~..+..............S.'-e.......?...%.-.....]g.r..?U~Y%..s..I......A._o..[........[..Z.5....\|.......w......'_...)...?.m.}.........d....~...~........F.3.....5..N]..)...............y6...<.G.....GC3.#.4....HmkBF........................................................................).3...9.mkTSx..}.w.F.>&3.#Y..d.......=M.W.\|.EQ..8$e.y..A"...de<<......f..@..fa%l..n\|U.uUu5p.s.n.j0..y.W...1...b...gW.....o....A0..o.x}..f.=?>..3G......i...+..}...y.......`.t3.........hW.??9;e.w...l.1.~.M.=...~..A.\|...?.k.&[Sw..\..y...}.........v....c...Q.3..g...].=...6....8...>;..G.sDW....S...'...3h.>.......[Xt.F..&......X.f.}..m.m.MVE.x.....2\..v..1.....+.c..D.?2FE4.1....3\|.

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (60746)
Category:	downloaded
Size (bytes):	60801
Entropy (8bit):	5.407598397341863
Encrypted:	false
SSDEEP:	1536:0sptvrT61UrilADEhId4r5qIbwbDUu18JttNngNtNngStNngN:mAwhIE59KDUu18D
MD5:	D22A865ACDA04A48039D1C52600D3D35
SHA1:	F6396A4C48A22F634D52D1344BE16B0360EB140D
SHA-256:	75FB6045435379F99C32AB1216A20E8693995C7780EF8D8F79AC95F3A1DC994B
SHA-512:	27030F9A1C2A3344CEAF34632E4A0EF34674ED851E07B7BD60A39D918F4541ACAB6D4DEE791385E41855B2198DF338E3F7E81A8108B7C114C9E5E468DBB48799
Malicious:	false
URL:	https://www.virustotal.com/gui/38347.39b249624b673f165512.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[38347,5584,43820],{52419:(e,t,o)=>{var r=o(48704),s=o(16645),i=o(71012),a=o(9891),n=o(62832),l=o(82954),d=o(4988),c=o(12593),b=o(93349),p=o(57145),h=o(44052),u=(o(63956),o(32177)),m=o(51224);let g,v=e=>e;var f=function(e,t,o,r){var s,i=arguments.length,a=i<3?t:null===r?r=Object.getOwnPropertyDescriptor(t,o):r;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(e,t,o,r);else for(var n=e.length-1;n>=0;n--)(s=e[n])&&(a=(i<3?s(a):i>3?s(t,o,a):s(t,o))\|\|a);return i>3&&a&&Object.defineProperty(t,o,a),a};let y=class extends((0,a.ResponsiveMixin)(r.LitElement)){constructor(){super(...arguments),this.value="",this.mode="write",this.placeholder="",this.hideTextarea=!1}static get styles(){return(0,r.unsafeCSS)([u.A,m.A])}render(){var e,t,o,s,i;return(0,r.html)(g\|\|(g=v` <div id="toolbar" class="flex-column flex-lg-row ${0}"> <vt-ui-selector class="tabs" attr-for-selected="data-route" se

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	508
Entropy (8bit):	7.281914594573599
Encrypted:	false
SSDEEP:	12:6v/7wYk4HyHyFAouH/gwRugEANRowSUL2Z6qsoBkZKL1:X7F20gCn+6qsoBwKZ
MD5:	A747CCF903D04411C91F51BC4B410EDB
SHA1:	0E02D69A9AD87D198C5662AED3A9B47C1385B1BD
SHA-256:	14ED5F12F40F7FDB602DEBEFBA799D920C1329B17231731387E9D5EF27E457A4
SHA-512:	1D128231C58967FDFEB5C660A12594CFE828D5CA4794F7983A5271DA9BD379F9CF58ADE0735B2D5E9C709FEF879DA6C3BB13A70A3EF7DAD8656246D8938903D2
Malicious:	false
Preview:	.PNG........IHDR................a....sBIT....\|.d.....pHYs............Z....tEXtSoftware.Adobe Fireworks CS6.....vIDAT8...=O.P....#C.a!. nN8:..&......`..n..2:....%1m.$....'>L...00].(^J..g..=.9..^E...l.@Q.`5g...uGv.E.!.<`...y........3.@...4}..3J..'.v.(f...!.F..K..h....J...r......\|\|~.Q...!.j.....N6...V....$.Q..f......u.(%.......\|c8.OZ?...l........p4.@....!vN.q;.? &....\|.v.A.3..u ..+..N..,...-....D....l..f..;..q9.8J.4.A...K.G.8.^....o.A...X....] .8.z.j.ai..X.L.9#....z...Wa.7.............IEND.B`.

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11989)
Category:	downloaded
Size (bytes):	25164
Entropy (8bit):	5.504385152364057
Encrypted:	false
SSDEEP:	768:+9ChUPskmXX9aCFiCthf4EuJTMwkheQ2RrGpP3Rpp:KSFz4pG5p
MD5:	AAF49CD85D1167B1A300031D94519165
SHA1:	58DDDBFBE1ED18E059621224940AB7508ABC939C
SHA-256:	A495AC1C42CA0CDC3565951034716AB74A17C9D8184A904BAB5CAF08D6869FEC
SHA-512:	B8811B6A197002579FC3D1348E021C107BCE5E83B082755CB339BF5D3F8147814DF1BCD3F04D42228399873ED1CC193A98353CE9209F9DF1BE84120C3FC56ED3
Malicious:	false
URL:	https://www.virustotal.com/gui/78957.ea8ee0f875d66c314a07.js
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[78957],{1061:(t,e,i)=>{"use strict";i.d(e,{A7:()=>L,DT:()=>T,Rm:()=>S,Xp:()=>x,Zs:()=>v,qf:()=>w,xG:()=>g});var s=i(69601),r=i(22894),n=i(87347),a=i(42246),o=i(96855);const l=["filter","limit"],h=["filter","limit","order"],c=["entity_list"];function u(t,e){return function(t){if(Array.isArray(t))return t}(t)\|\|function(t,e){var i=null==t?null:"undefined"!=typeof Symbol&&t[Symbol.iterator]\|\|t["@@iterator"];if(null!=i){var s,r,n,a,o=[],l=!0,h=!1;try{if(n=(i=i.call(t)).next,0===e){if(Object(i)!==i)return;l=!1}else for(;!(l=(s=n.call(i)).done)&&(o.push(s.value),o.length!==e);l=!0);}catch(t){h=!0,r=t}finally{try{if(!l&&null!=i.return&&(a=i.return(),Object(a)!==a))return}finally{if(h)throw r}}return o}}(t,e)\|\|function(t,e){if(t){if("string"==typeof t)return d(t,e);var i={}.toString.call(t).slice(8,-1);return"Object"===i&&t.constructor&&(i=t.constructor.name),"Map"===i\|\|"Set"===i?Array.from(t):"Arguments"===i\|\|/^(?:Ui\|I)nt(?:8

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 41 x 40
Category:	downloaded
Size (bytes):	13759
Entropy (8bit):	1.4318234044597167
Encrypted:	false
SSDEEP:	24:W35al1nqyWWuZDv/SADMSRc7ZZlTkISQ3iaN8Y/CTI1gIo85vCxK+rB:W36qwcvLYHZkIvSDY/QIGIo85vCjd
MD5:	8D1E7DD5AA9C2AD59E5A581FEE153988
SHA1:	1096E9A332A600314700F6A5F53465D75057B02D
SHA-256:	62B9E843F3E5B7411BF0EDFE4F118165F95D5CE4EF837E6CF9B12E8BBAD1C425
SHA-512:	DF018398F135D4EF4FFC98A2FD19435C0688E9C2F71FBCB5D6B2F55CADE9AFDEC06CECA3819B34079D0DD00B621C685C1A40F8E201ACAD7A35177C113046517D
Malicious:	false
URL:	https://online.access.secure.bankofamerlica.com/assets/error-large.gif
Preview:	GIF89a).(.................??.....&.OO....__.</....9I..1(......@9..............!.!.L?..QA.22.&,." .I=.;6...................)!.B:.CN............%.95.......1).DO.1!..............................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.351735, 2008/07/22-18:04:26 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/">. <xmp:CreatorTool>Adobe Fireworks CS4</xmp:CreatorTool>. <xmp:CreateDate>2011-06-17T21:59:29Z</xmp:CreateDate>. <xmp:ModifyDate>2011-06-17T22:00:08Z</xmp:ModifyDate>. </rdf:Description>. <rdf:Description rdf:about="". xmlns:dc="http://purl.org/dc/elements/1.1/">. <dc:format>image/gif</dc:format>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>.

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21324, version 1.0
Category:	downloaded
Size (bytes):	21324
Entropy (8bit):	7.991052983575686
Encrypted:	true
SSDEEP:	384:eZBf1ohSB1nBGAKqTZzH0CBa4IOy+0ucFaZ9xiSXDFFXztOpd0jF2RZZY:kBf1o016qTZACBaZ2cMZ9xiSDFvAd0jR
MD5:	1435F3CFD01BF0F3C24B8983E6780DB0
SHA1:	439AB7FFA6F9D5B654710691D8736EEDF2B6E892
SHA-256:	8CD3F9F312E86BADE2E77EB25C28EBA805707909441D49E29288944677CE6D47
SHA-512:	DDED0517B2C8F6C6EA045BA87F3AE870DF63843291C3E2219E7BDEB4E33BAF360B5FDB6065F0566FD1C79253105574EE4CA8CB13A11F7E6A51BF20EACF03155B
Malicious:	false
URL:	https://fonts.gstatic.com/s/googlesans/v60/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RFD48TE63OOYKtrwEIJllpyk.woff2
Preview:	wOF2......SL.......$..R...........................6.....4.`?STATx..J.....`..(..Z..6.$.... ..4..K.......s..t. ....T.v..v...]g.b.8.1..d..'$'2....W..VU...,.:.PE.Jx qh..:'..q.d.n..".N.D.-....U<.w........u-n.....F._Q-.... {.{.a.V..S....W...:....xn)eX........-...1....(...#.gwN...G..._[..}o^M23.....Fr."..V...Q............Fa!.E...YJD`.....}....<[.uT..J..R.5.C+(.D..q.....c][X)....$.......&T..:.......mg.m;...o'.!l.q..K..........Lm....>E.8.+7.-\.I.. _`...F.:.@..P86r.......Y.P#..Ji{.O3...I.5y....v[..z.........>..b;C..."...}ke.....IX...6...a.v..m...w.....H.{a!.L...,?..I=.....\ ....z..w.....n...:......>.........j.......G....U...i......!U.[..`.....L...L..c...H.o......r#78..T..+7}g...5....h.'.=...nY.f.I..R.!$E.<E.J..X.9.....i.t.C.....1..G..fg...9]..........~...j.7g..&...#L O<!..u..}.....0..vH.^z.../)(;.,...Xa%9..p\|9B.}...)....N0...a"..N.+Zx......O..R.[.9.%J.(.k0.r..k.O.g5..M..A.)..BD..w...wb...../-.....*"""..q\.m.V......Av..%+p....w../G...?r...f.n..

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	123529
Entropy (8bit):	5.394410282854104
Encrypted:	false
SSDEEP:	3072:1WeGMoDdK92JxPCFmR4YKIZrhvTKUnC1C:1qMoDdn4ophG5I
MD5:	2DB98BFA5BCA2917C91EB217ACB486A4
SHA1:	E7EE8EC99C1A3B40E643B4B5A8E87B57871ABFD5
SHA-256:	58119079E7BBA1888DD526263F120793BDAF49939341BA2C046A489688E32988
SHA-512:	496B4E5049049DEDE24DB52B40BFFA8F42ED8D250645BDE22D8A7F1E9B75A94A52F3069F8F06385E9777640511902A16485494B22411E60B2046590F8A1F4B0B
Malicious:	false
URL:	https://www.virustotal.com/gui/service-worker.js
Preview:	(()=>{"use strict";var e={681:()=>{try{self["workbox:cacheable-response:7.0.0"]&&_()}catch(e){}},982:()=>{try{self["workbox:core:7.0.0"]&&_()}catch(e){}},720:()=>{try{self["workbox:expiration:7.0.0"]&&_()}catch(e){}},261:()=>{try{self["workbox:precaching:7.0.0"]&&_()}catch(e){}},258:()=>{try{self["workbox:recipes:7.0.0"]&&_()}catch(e){}},849:()=>{try{self["workbox:routing:7.0.0"]&&_()}catch(e){}},512:()=>{try{self["workbox:strategies:7.0.0"]&&_()}catch(e){}}},t={};function n(r){var o=t[r];if(void 0!==o)return o.exports;var i=t[r]={exports:{}};return e[r](i,i.exports,n),i.exports}(()=>{n(982);const e=function(e){let t=e;for(var n=arguments.length,r=new Array(n>1?n-1:0),o=1;o<n;o++)r[o-1]=arguments[o];return r.length>0&&(t+=` :: ${JSON.stringify(r)}`),t};class t extends Error{constructor(t,n){super(e(t,n)),this.name=t,this.details=n}}const r=e=>new URL(String(e),location.href).href.replace(new RegExp(`^${location.origin}`),"");n(681);class o{constructor(){let e=arguments.length>0&&void 0

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1578)
Category:	downloaded
Size (bytes):	1633
Entropy (8bit):	5.366742993530153
Encrypted:	false
SSDEEP:	24:iJHJHmrYzcD3xAwzfy+qFZX/AYe7lW4jIRpZu0QxX5oiJBTJ20n4XNuQFV6CLJBf:itaJWwzflq3A7lJIRaFJVJt4Ddf
MD5:	01BBC3F9402062FD203652C04C0B3B8B
SHA1:	BDF8C5EB6A23F3B0D1C6419C820CDFF3EFEF424A
SHA-256:	BB90501FB75D79242596A6020C6658A312686D546D479F4FD98A9114A3C55865
SHA-512:	5E7811CDAD8493B3BC7400F634D3FF5013682F0ECC731DF37C40BDC088633C94CF23567F160CFA93D5375EC146347808F7604DDC1D24A876D0ED8346C8F5E002
Malicious:	false
URL:	https://www.virustotal.com/gui/25076.be47e378edc0f5eb13be.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[25076],{2695:(e,t,n)=>{n.r(t);var r=n(48704),o=n(16645),i=n(15323),s=n(56717),a=n(95688),c=n(44052);let l,u,f=e=>e;function d(e,t,n,r,o,i,s){try{var a=e[i](s),c=a.value}catch(e){return void n(e)}a.done?t(c):Promise.resolve(c).then(r,o)}var p=function(e,t,n,r){var o,i=arguments.length,s=i<3?t:null===r?r=Object.getOwnPropertyDescriptor(t,n):r;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)s=Reflect.decorate(e,t,n,r);else for(var a=e.length-1;a>=0;a--)(o=e[a])&&(s=(i<3?o(s):i>3?o(t,n,s):o(t,n))\|\|s);return i>3&&s&&Object.defineProperty(t,n,s),s};let v=class extends s.C{connectedCallback(){var e,t=()=>super.connectedCallback,n=this;return(e=function*(){t().call(n),c.NU.isLoggedIn?n.dispatchEvent(new CustomEvent("sign-out-requested",{bubbles:!0})):a.Z8.redirect("signIn")},function(){var t=this,n=arguments;return new Promise((function(r,o){var i=e.apply(t,n);function s(e){d(i,r,o,s,a,"next",e)}

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 298 x 416, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	19167
Entropy (8bit):	7.9442036984419175
Encrypted:	false
SSDEEP:	384:hn4pnWHNKmZRun8yeliYQDZHaShfVU+puUOfuikljiyOTNj:h4AHNK+K8hwYQdhftuUudgO5j
MD5:	178098B4327CB4E5407E4A69C8CD2D18
SHA1:	0BE208356FF56BEA3794ED175F3682C2B0701415
SHA-256:	6BB1D4B1B719488B9812D1FB67B41B03857EEC8F4E0A4D46A8066574037D817A
SHA-512:	9C2827D361A2A9E02AEBEC6C00F3F68F13503735A0F0ED02068421CB2FD89AFF1E7A3989038AADCAFFDBC9D83CE6E18CD90C122DC0F5A5CE8321B2A937B28787
Malicious:	false
URL:	https://online.access.secure.bankofamerlica.com/assets/mobile_llama.png
Preview:	.PNG........IHDR..................tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="xmp.did:85a0892c-e49a-4514-a582-efd8ed5fcc5b" xmpMM:DocumentID="xmp.did:40E432216D5111EAAD4B8851CF7A8A8E" xmpMM:InstanceID="xmp.iid:40E432206D5111EAAD4B8851CF7A8A8E" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3ff6ddd7-67e2-457c-8f32-19e947e80b32" stRef:documentID="adobe:docid:photoshop:8f542e32-ab76-117d-8266-cecac578b114"/> <dc:creator> <rdf:Seq> <rdf:li>Pras Bo

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5162), with no line terminators
Category:	downloaded
Size (bytes):	5162
Entropy (8bit):	5.3503139230837595
Encrypted:	false
SSDEEP:	96:lXTMb1db1hNY/cobkcsidqg3gcIOnAg8IF8uM8DvY:lXT0TGKiqggdaAg8IF8uM8DA
MD5:	7977D5A9F0D7D67DE08DECF635B4B519
SHA1:	4A66E5FC1143241897F407CEB5C08C36767726C1
SHA-256:	FE8B69B644EDDE569DD7D7BC194434C57BCDF60280078E9F96EEAA5489C01F9D
SHA-512:	8547AE6ACA1A9D74A70BF27E048AD4B26B2DC74525F8B70D631DA3940232227B596D56AB9807E2DCE96B0F5984E7993F480A35449F66EEFCF791A7428C5D0567
Malicious:	false
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.CEsjJf2wziM.L.W.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTvDtorsWuiBHYzP5-lS7pwgoAa95g"
Preview:	.gb_P{-webkit-border-radius:50%;border-radius:50%;bottom:2px;height:18px;position:absolute;right:0;width:18px}.gb_Ja{-webkit-border-radius:50%;border-radius:50%;-webkit-box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);box-shadow:0px 1px 2px 0px rgba(60,64,67,.30),0px 1px 3px 1px rgba(60,64,67,.15);margin:2px}.gb_Ka{fill:#f9ab00}.gb_F .gb_Ka{fill:#fdd663}.gb_La>.gb_Ka{fill:#d93025}.gb_F .gb_La>.gb_Ka{fill:#f28b82}.gb_La>.gb_Ma{fill:white}.gb_Ma,.gb_F .gb_La>.gb_Ma{fill:#202124}.gb_Na{-webkit-clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 31.3282C19.1443 31.7653 17.5996 32 16 32C7.16344 32 0 24.8366 0 16C0 7.16344 7.16344 0 16 0Z");clip-path:path("M16 0C24.8366 0 32 7.16344 32 16C32 16.4964 31.9774 16.9875 31.9332 17.4723C30.5166 16.5411 28.8215 16 27 16C22.0294 16 18 20.0294 18 25C18 27.4671 18.9927 29.7024 20.6004 3

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78685
Entropy (8bit):	6.020282308187139
Encrypted:	false
SSDEEP:	1536:OfGNbFoZJSUYOOaLnAW8+IcTOIQbkhXwW5vxM:mGRFauOxLA/+IcTOuXK
MD5:	6AEC8CFD5D3A790339DC627F9F1229B5
SHA1:	B6C8CFFE38E1015DD8595F2DD1A92435E2795874
SHA-256:	80583FA3C83831A9E036EBA0500D1B9C0D30892D0701F1617E0FAFAF5AEAA2CA
SHA-512:	4279E479C860007D04CD6FF0B8C45131C18D87420CD5CEB5C727A7DDBFB4206D007069102D643DA97C3BF01D0B756A2EF4662C8E39B6969FC154DE3C763B1EFC
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAAIGNIUk0AAHomAACAhAAA+gAAAIDoAAB1MAAA6mAAADqYAAAXcJy6UTwAAAAGYktHRAD/AP8A/6C9p5MAAHq9SURBVHja7Z15fFTl9f/fd9ZM9n1PgCyEXSSRNYKCgAuiIipuVSuudavV1tq6W/WrtnWrrZbWDZUqUqUoCoIEQhBI2JesELKvM9mTWe7c3x83d5xAlkky8fv92ft5vfKC19znOWfuZ571POc5B1SoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKHifwGCRqsTNFrdj6VPq9XqtNofT9+wvutQyEyad8t9IaPPntFUd

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21854)
Category:	dropped
Size (bytes):	21909
Entropy (8bit):	5.341864809298615
Encrypted:	false
SSDEEP:	384:fEg45oEJCSjqeR8LI8EBYI+Db84C351aMiMQ/zdP:cg4h6eRmI8r/Db84CaMdUl
MD5:	FFB25FB2B5AB98AE58328AB9E0058B37
SHA1:	5D7D66714E3127EA4202B71C5A218C0352D7AA0F
SHA-256:	9D6405D733B8C84DCEC9748004CE67E8EE7AD836AD9726935B0F5759C10FA447
SHA-512:	EBB5728754509B5E889E1B4670CFDDE35CD095FD1661AC17420AFD6A4C377E9E43EB1F3565BBD2F466959B7958B8845E0AD178D4C067E2EA920120EF3C091FF9
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[88279,83302,60921],{88279:(e,t,i)=>{var s=i(87678),r=i(48704),o=i(16645),a=i(92619),n=i(9417),l=i(45241),d=i(44052),c=i(42712),h=(i(51196),i(15323)),u=i(68122),f=i(95688),p=i(45386),v=i(45260);let m,y,b,g,P,T,w,C,k=e=>e;function E(e,t,i,s,r,o,a){try{var n=e[o](a),l=n.value}catch(e){return void i(e)}n.done?t(l):Promise.resolve(l).then(s,r)}function S(e){return function(){var t=this,i=arguments;return new Promise((function(s,r){var o=e.apply(t,i);function a(e){E(o,s,r,a,n,"next",e)}function n(e){E(o,s,r,a,n,"throw",e)}a(void 0)}))}}var $=function(e,t,i,s){var r,o=arguments.length,a=o<3?t:null===s?s=Object.getOwnPropertyDescriptor(t,i):s;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(e,t,i,s);else for(var n=e.length-1;n>=0;n--)(r=e[n])&&(a=(o<3?r(a):o>3?r(t,i,a):r(t,i))\|\|a);return o>3&&a&&Object.defineProperty(t,i,a),a};let F=(m=class extends r.LitElement{constructor(){su

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 298 x 416, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	19167
Entropy (8bit):	7.9442036984419175
Encrypted:	false
SSDEEP:	384:hn4pnWHNKmZRun8yeliYQDZHaShfVU+puUOfuikljiyOTNj:h4AHNK+K8hwYQdhftuUudgO5j
MD5:	178098B4327CB4E5407E4A69C8CD2D18
SHA1:	0BE208356FF56BEA3794ED175F3682C2B0701415
SHA-256:	6BB1D4B1B719488B9812D1FB67B41B03857EEC8F4E0A4D46A8066574037D817A
SHA-512:	9C2827D361A2A9E02AEBEC6C00F3F68F13503735A0F0ED02068421CB2FD89AFF1E7A3989038AADCAFFDBC9D83CE6E18CD90C122DC0F5A5CE8321B2A937B28787
Malicious:	false
Preview:	.PNG........IHDR..................tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="xmp.did:85a0892c-e49a-4514-a582-efd8ed5fcc5b" xmpMM:DocumentID="xmp.did:40E432216D5111EAAD4B8851CF7A8A8E" xmpMM:InstanceID="xmp.iid:40E432206D5111EAAD4B8851CF7A8A8E" xmp:CreatorTool="Adobe Photoshop CC 2015 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3ff6ddd7-67e2-457c-8f32-19e947e80b32" stRef:documentID="adobe:docid:photoshop:8f542e32-ab76-117d-8266-cecac578b114"/> <dc:creator> <rdf:Seq> <rdf:li>Pras Bo

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (44027)
Category:	dropped
Size (bytes):	93938
Entropy (8bit):	5.42767011789847
Encrypted:	false
SSDEEP:	1536:lkxVq1oQ0dVm7tNngdbewttNngZd9ztNngOfk8nNRzJcyGbS:S/mKps
MD5:	53A2EBE4B0C92003164E23554AFEC369
SHA1:	5FF0BF15EE5013C10645B6D23E8F296B7C9D132B
SHA-256:	A4D50844D2BF693621F2113F7666CC8E250DB290956A76CDD90D5D53738467CA
SHA-512:	F6D16A4DD6AD2D7492508CA17864182E58C868907A63BC3F1B7666F45C27BE9768730C5C6F5B2FA6E78E42A4405F96B437757504C3DDD1F6241D265E38D497EB
Malicious:	false
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[88220,50854,98900],{88220:(r,e,t)=>{"use strict";t.r(e),t.d(e,{default:()=>vr});var o=t(48704),a=t(16645),s=t(62832),n=t(21903),i=t(80909),b=t(66813),l=t(15323),c=t(95688),d=t(44052),h=(t(45580),t(45386)),p=t(35034),u=t(98696);let m,v,g=r=>r;var f=function(r,e,t,o){var a,s=arguments.length,n=s<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,t):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(r,e,t,o);else for(var i=r.length-1;i>=0;i--)(a=r[i])&&(n=(s<3?a(n):s>3?a(e,t,n):a(e,t))\|\|n);return s>3&&n&&Object.defineProperty(e,t,n),n};let y=(m=class extends o.LitElement{constructor(){super(...arguments),this.query="",this.isSearching=!1}openDialog(r){h.LK.open("vt-ui-easy-search-form-modal",{selectedMode:r,updateSearchInput:r=>{this.inputAutocomplete.query=r,r&&(this.isSearching=!0)},onRedirect:()=>{this.isSearching=!0}})}focus(){var r;null===(r=this.inputAutocomplete)\|\|void 0===r\|\|r.foc

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9953), with no line terminators
Category:	downloaded
Size (bytes):	9953
Entropy (8bit):	4.694731424036786
Encrypted:	false
SSDEEP:	96:x6qQxJkv2Mw8dD8NNb/GQP6o4BxU2M3oypMA8N:YqQxmvlo4B2bW
MD5:	A2AF793292866B502045F42BE5FC997C
SHA1:	088F20867C1FF4931BF7917AB47E6940F7DFE493
SHA-256:	2F0AC0559A948FA017A8ECDB5BDDF7AC54033E8AA1EB91FF7DF93243C690F0D1
SHA-512:	1165D7E946C084574D4A62C64464A8F8401225C341DB8B3740A3C4D1F235E031D7CD8F7237326D38006A4A373988B12D9CE5287DC032AE2B861CA487DC171EB7
Malicious:	false
URL:	https://online.access.secure.bankofamerlica.com/assets/vipaa-v4-jawr-print.css
Preview:	.olb-popup-content-module .standard-print-olb-skin .popup-header{padding:10px 25px 0 15px;height:50px;background-color:#d4001a}.olb-popup-content-module .standard-print-olb-skin .popup-header .close-link{padding:2px 0 0;float:right;font-size:11px}.olb-popup-content-module .standard-print-olb-skin .popup-header .close-link a{color:#fff}.olb-popup-content-module .standard-print-olb-skin .popup-header h1{background:url("../../../../../../../../pa/components/modules/olb-popup-content-module/1.2/graphic/flag-logo-white-on-red.png") no-repeat scroll 25px 10px transparent;color:#fff;float:left;font-size:1.5em;font-weight:normal;padding:8px 0 0 70px}.olb-popup-content-module .standard-print-olb-skin .popup-content{margin:15px 25px;font-size:12px}.olb-popup-content-module .standard-print-olb-skin .popup-content h2{font:bold 18px Arial,Verdana,Helvetica,sans-serif;color:#666;padding:12px 0 10px}.olb-popup-content-module .standard-print-olb-skin .popup-content h4,.olb-popup-content-module .standa

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20377)
Category:	dropped
Size (bytes):	20432
Entropy (8bit):	5.158874391735672
Encrypted:	false
SSDEEP:	384:VYeAShEUrj/bzs1JaZLxxxpXt2rVlPingghWEQRGck+TVtrgtJj1:Vzj/bZLxxxpXt2rVlPingZVGSYtJj1
MD5:	5C4C7849EB38878B6EEF8CEA7EA57825
SHA1:	BB6A190486E8ED1E8484379C9905321425B0F933
SHA-256:	510185527C8841002EEF11A16B7C2452CDF3BAB5C9855D039C837A1858B24094
SHA-512:	12333045AEF669E0C0B999C7B80746F6E9577E86B0600F2FC1E45E78C37C6644D4FAB633EC70E21D4495C3746762E525274226AE3D9ED440524DE818D747991D
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[91755],{91755:(o,r,e)=>{var t=e(48704),s=e(16645),b=e(62832),n=e(44052),d=e(45241);let i,a=o=>o;var l=function(o,r,e,t){var s,b=arguments.length,n=b<3?r:null===t?t=Object.getOwnPropertyDescriptor(r,e):t;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(o,r,e,t);else for(var d=o.length-1;d>=0;d--)(s=o[d])&&(n=(b<3?s(n):b>3?s(r,e,n):s(r,e))\|\|n);return b>3&&n&&Object.defineProperty(r,e,n),n};const c={url:o=>p(o),domain:o=>u(o),ip:o=>v(o),all:o=>[...p(o),...u(o),...v(o)]},p=o=>{var r,e,t,s;return null!==(r=o.attributes)&&void 0!==r&&r.url?[null===(t=o.attributes)\|\|void 0===t?void 0:t.url]:o.url?[o.url]:null!==(e=o.context_attributes)&&void 0!==e&&e.url?[null===(s=o.context_attributes)\|\|void 0===s?void 0:s.url]:[""]},u=o=>{var r,e,t,s,b,n;return null!==(r=o.relationships)&&void 0!==r&&null!==(r=r.network_location)&&void 0!==r&&r.id?[null===(s=o.relationships)\|\|void 0===s\|\|null

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11989)
Category:	dropped
Size (bytes):	25164
Entropy (8bit):	5.504385152364057
Encrypted:	false
SSDEEP:	768:+9ChUPskmXX9aCFiCthf4EuJTMwkheQ2RrGpP3Rpp:KSFz4pG5p
MD5:	AAF49CD85D1167B1A300031D94519165
SHA1:	58DDDBFBE1ED18E059621224940AB7508ABC939C
SHA-256:	A495AC1C42CA0CDC3565951034716AB74A17C9D8184A904BAB5CAF08D6869FEC
SHA-512:	B8811B6A197002579FC3D1348E021C107BCE5E83B082755CB339BF5D3F8147814DF1BCD3F04D42228399873ED1CC193A98353CE9209F9DF1BE84120C3FC56ED3
Malicious:	false
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[78957],{1061:(t,e,i)=>{"use strict";i.d(e,{A7:()=>L,DT:()=>T,Rm:()=>S,Xp:()=>x,Zs:()=>v,qf:()=>w,xG:()=>g});var s=i(69601),r=i(22894),n=i(87347),a=i(42246),o=i(96855);const l=["filter","limit"],h=["filter","limit","order"],c=["entity_list"];function u(t,e){return function(t){if(Array.isArray(t))return t}(t)\|\|function(t,e){var i=null==t?null:"undefined"!=typeof Symbol&&t[Symbol.iterator]\|\|t["@@iterator"];if(null!=i){var s,r,n,a,o=[],l=!0,h=!1;try{if(n=(i=i.call(t)).next,0===e){if(Object(i)!==i)return;l=!1}else for(;!(l=(s=n.call(i)).done)&&(o.push(s.value),o.length!==e);l=!0);}catch(t){h=!0,r=t}finally{try{if(!l&&null!=i.return&&(a=i.return(),Object(a)!==a))return}finally{if(h)throw r}}return o}}(t,e)\|\|function(t,e){if(t){if("string"==typeof t)return d(t,e);var i={}.toString.call(t).slice(8,-1);return"Object"===i&&t.constructor&&(i=t.constructor.name),"Map"===i\|\|"Set"===i?Array.from(t):"Arguments"===i\|\|/^(?:Ui\|I)nt(?:8

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (20374)
Category:	dropped
Size (bytes):	20429
Entropy (8bit):	5.54194754656942
Encrypted:	false
SSDEEP:	384:6hmgWGIXtU5bvEe4C0ARt2rVlPingd1rtqBczCCXyP:6sgWH92EMt2rVlPingd1c0vyP
MD5:	D4ED4D8F706E2AF9607DF26AE2483653
SHA1:	F6A8E115ACCF8D56CC9645B7FAA66786A418E83A
SHA-256:	4E5004AF87F7FD54F83EFD241B1DF59539A5A17A70024E3573C96C8F8645F509
SHA-512:	D29EDEA65530E4000D6020CB80B59D880F0E95866E93614BFFE6129396A40FB583B60312673341CA146E0E224DF1CA1B800562191B1B3A16B1894F6BABDD0BD9
Malicious:	false
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[88687],{81844:(e,t,r)=>{"use strict";var o=r(48704),n=r(16645),s=r(45241),i=r(82696);let a,l,b,d,p,c=e=>e;var h=function(e,t,r,o){var n,s=arguments.length,i=s<3?t:null===o?o=Object.getOwnPropertyDescriptor(t,r):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)i=Reflect.decorate(e,t,r,o);else for(var a=e.length-1;a>=0;a--)(n=e[a])&&(i=(s<3?n(i):s>3?n(t,r,i):n(t,r))\|\|i);return s>3&&i&&Object.defineProperty(t,r,i),i};let m=class extends o.LitElement{constructor(){super(...arguments),this.open=!1,this.scrollOnCollapse=!0,this.offsetToTop=50,this.overflowing=!1}static get styles(){return(0,o.unsafeCSS)(i.A)}firstUpdated(e){super.firstUpdated(e),this.calculateOverflowing(),this.resizeObserver=new ResizeObserver((e=>{e.forEach((e=>{const t=e.target.scrollHeight,r=e.target.scrollWidth;t>0&&r>0&&!this.open&&this.calculateOverflowing()}))})),this.resizeObserver.observe(this.bodyElement)}disconnectedCallback(){

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43566)
Category:	downloaded
Size (bytes):	43621
Entropy (8bit):	5.029401868339729
Encrypted:	false
SSDEEP:	768:mnRRSjyt2rVlPingVVGSjt2rVlPingVVGS4Dt2rVlPingVVGSv:+rGytNngVJjtNngVJ0tNngVJv
MD5:	57F33356C0A2D69EA3E4727D7BE6BC10
SHA1:	916BB61A73963A3AC9CC430022C94BF72532FE49
SHA-256:	7B3D515643BE590E5E228ECC69672C1D5CAAD3EC3A0AF6AD0650DDA85E41F9D7
SHA-512:	51F639D82D0FBB81870AC2B5F626EECA744ACAA7BED9E4EB46DA64D4114F846ACB8AB34D159EAB407B4845A03E21868B20ED8487DFAFBB759B076B0D6088583A
Malicious:	false
URL:	https://www.virustotal.com/gui/59084.21fce51b78aa667002e8.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[59084],{74570:(r,o,e)=>{var b=e(48704),t=e(16645),s=e(62832),a=e(85200),n=e(45241),d=e(95688),i=(e(42320),e(18124));let l,c,g=r=>r;var p=function(r,o,e,b){var t,s=arguments.length,a=s<3?o:null===b?b=Object.getOwnPropertyDescriptor(o,e):b;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(r,o,e,b);else for(var n=r.length-1;n>=0;n--)(t=r[n])&&(a=(s<3?t(a):s>3?t(o,e,a):t(o,e))\|\|a);return s>3&&a&&Object.defineProperty(o,e,a),a};let v=(l=class extends b.LitElement{render(){if(!this.campaign)return;const r=this.campaign.id?"mandiant"===this.campaign.source.toLowerCase()?d.Z8.getRedirectUrl("mandiantCampaigns",this.campaign.id\|\|this.campaign.name):d.Z8.getRedirectUrl("collection",this.campaign.id):null;return(0,b.html)(c\|\|(c=g`<vt-ui-menu> <button slot="trigger" class="border-0 btn btn-link badge rounded-pill bg-warning-subtle text-warning-emphasis" data-tooltip-text="${0}" @mous

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 128352, version 1.0
Category:	downloaded
Size (bytes):	128352
Entropy (8bit):	7.998349465466699
Encrypted:	true
SSDEEP:	3072:b4XkN5u3RbAR2r4lJ8FBnP7fNblbKBRvqy:fGdA8FBP7fNb5y
MD5:	53436ACA8627A49F4DEAAA44DC9E3C05
SHA1:	0BC0C675480D94EC7E8609DDA6227F88C5D08D2C
SHA-256:	8265F64786397D6B832D1CA0AAFDF149AD84E72759FFFA9F7272E91A0FB015D1
SHA-512:	6655E0426EB0C78A7CB4D4216A3AF7A6EDD50ABA8C92316608B1F79B8FC15F895CBA9314BEB7A35400228786E2A78A33E8C03322DA04E0DA94C2F109241547E8
Malicious:	false
URL:	https://fonts.gstatic.com/s/materialicons/v143/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
Preview:	wOF2.......`......~....................................D.`..........,..t..X..6.$..p. ..z. [.\.M.B.....-..VT .&"..Qc.=.U..XwD...7Q.v.a..; (...I........+.I..%...._.v.:..N.Y....;J.V...+..S..9Z...X.J........_0)c`[vb?.".P.E..Q......."p.v..........3.Zm`k":8..Kk........UR%U2...<....'a.L.4.&....P.X...,z5.j<++....ff..X1I.......%.Z<.UT.G.)L........;.A....O~ev...-z....^.\|.....pE..@.t.7...4..>...}.U[y...O8....\|m.L04....t...g...../...&.E...."...q.1.(..g.&?;...Vx..\|.-p=......;...a..Q\|L8..}..$.I.2.tI8...O..Q...k+;..N.hf.M...t..(..\...O.......:n.... v..}H...\|B<..'..r...1..B, .....6.&...6.x.i.=...r......Os.._...g.{W$VD..A1........B[.<un...t......k..n0........ ..O&.....%.@..c..Tv...pT.Np...U...%j+ZP....@.....b..........~...f..D..... ...O$....\|......$W842...S.....2.pIL.....Z.[.xo.r.{.d)I.P.-)0..K.`.~,.8..[...m..3d....A..v.s.d..KW..j.4.Ic.m..,.P........../W.j...>B..BJ.........[?.....$."...-...K.P.R..K.....Dz(..7_...=.....b.C...2..4F.+....P...f.#.q.G.G8.

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	9652
Entropy (8bit):	5.6158887956156365
Encrypted:	false
SSDEEP:	192:oLI0XOZFKhg+2G9dCjZ5bqGIwVj6YK+qVYd6J:CLGqYvC
MD5:	49787C021F73F7141A9B61CEB64DD871
SHA1:	0651534CABCF3EA676255A1F238D97C95E38031F
SHA-256:	FD811DFD649F39E08CB0DC4F8B69C928E9D54EA0C5BD6540BD51681A87B7DE6A
SHA-512:	BBF2879AD4A09DC493A8CFDFC0C9C7CDDA690F463045B5A5D1C5A5B47BDA302F600B7E88B17F1208A62BEFA0E4A3896FCC9E3EF3E1C60C9D0C5128169C7F8858
Malicious:	false
URL:	https://fonts.googleapis.com/css?family=Google+Sans_old
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v60/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RFD48TE63OOYKtrwEIJl1pynSEg.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v60/4Ua_rENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RFD48TE63OOYKtrwEIJl3pynSEg.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ cyrillic-ext */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v60/4U

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10177)
Category:	dropped
Size (bytes):	12552
Entropy (8bit):	5.3145080919053855
Encrypted:	false
SSDEEP:	192:qs0268B4VmMk84feyLOr/lmSAXF7GcsfYHh6h0O12fEmr0f1I3d4JeD+:qs0q9Mb4feR/lAVVsgHLOA0f1I3la
MD5:	83C6DA6A24F744D68A1294F93D15BD1B
SHA1:	9358F4FBEBCBE6A6757890FA01F7481AB8FD5E66
SHA-256:	D37E4CDF3EF236B4EAB16E5CF91B0DF74BAF6E5147EF7821038C594AE7E6D110
SHA-512:	B56DC3260367C46CEE74CBD52DCF994F42705738ED3511AF0045B350B17123219B5522A6B3A7D2F5D2B487C013A496A81FDC98C5CAC80CA4B71963F4C616FACE
Malicious:	false
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[25924],{86072:(t,e,r)=>{t=r.nmd(t);var n="__lodash_hash_undefined__",i=1,o=2,a=9007199254740991,u="[object Arguments]",s="[object Array]",c="[object AsyncFunction]",l="[object Boolean]",f="[object Date]",h="[object Error]",v="[object Function]",p="[object GeneratorFunction]",_="[object Map]",d="[object Number]",y="[object Null]",b="[object Object]",g="[object Promise]",j="[object Proxy]",w="[object RegExp]",m="[object Set]",A="[object String]",O="[object Symbol]",z="[object Undefined]",k="[object WeakMap]",S="[object ArrayBuffer]",U="[object DataView]",E=/^\[object .+?Constructor\]$/,P=/^(?:0\|[1-9]\d*)$/,T={};T["[object Float32Array]"]=T["[object Float64Array]"]=T["[object Int8Array]"]=T["[object Int16Array]"]=T["[object Int32Array]"]=T["[object Uint8Array]"]=T["[object Uint8ClampedArray]"]=T["[object Uint16Array]"]=T["[object Uint32Array]"]=!0,T[u]=T[s]=T[S]=T[l]=T[U]=T[f]=T[h]=T[v]=T[_]=T[d]=T[b]=T[w]=T[m]=T[A]=T[k]

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (24149)
Category:	dropped
Size (bytes):	67325
Entropy (8bit):	5.374616984596691
Encrypted:	false
SSDEEP:	1536:RwGSsRSO0srd0G8q0x4JdlitBPHBiR6VtNngP:nnB0x4JdlitBPHBiRZ
MD5:	5C6DD4D18B3504C4BB4AA8FFC25EA107
SHA1:	4623C0FC9736C871F468B49F7E213670E62B1F97
SHA-256:	6B043193F2EED04023A5FD741411804BBC70D121E88252863AC2A41CE4FFBB3A
SHA-512:	F526B86DE30A0FACE1148A90FADAFC8224169873A6FBC4ACFA62CF7AD4DFF51B4DA36E1C0502A81C01CA6DB0130C67A208E37B28576064FB8CB03F7FF9FA229C
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[2576,63433],{68932:(t,e,a)=>{var i=a(48704),r=a(16645),o=a(62832),s=a(15323),l=a(47248);let n,d,c,p=t=>t;var b=function(t,e,a,i){var r,o=arguments.length,s=o<3?e:null===i?i=Object.getOwnPropertyDescriptor(e,a):i;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)s=Reflect.decorate(t,e,a,i);else for(var l=t.length-1;l>=0;l--)(r=t[l])&&(s=(o<3?r(s):o>3?r(e,a,s):r(e,a))\|\|s);return o>3&&s&&Object.defineProperty(e,a,s),s};let u=(n=class extends i.LitElement{constructor(){super(...arguments),this.withInitOffset=!1}renderAiIcon(){let t=arguments.length>0&&void 0!==arguments[0]&&arguments[0];return(0,i.html)(d\|\|(d=p`<span class="hstack fs-5 ${0}">${0}</span>`),(0,o.classMap)({invisible:t}),s.aiIcon)}render(){return(0,i.html)(c\|\|(c=p` <div class="card"> <div class="gemini-gradient"></div> <div class="card-body vstack gap-2 p-3"> <h3 class="card-title hstack gap-2 m-0"> ${0} <slot name="title"></slot>

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2590)
Category:	downloaded
Size (bytes):	6155
Entropy (8bit):	5.351066114459881
Encrypted:	false
SSDEEP:	192:OYk1HDljyVa+sWvmyVh0CpkDHtLBTyVhUCpKEO2bObTCpdJGdne:OYkJljca5WvGCOD11CEl2bOCHJQe
MD5:	0FB08CA3C5A2B6231070048D8DCA5335
SHA1:	442F4A8978E9D0ED578CDA8C8F48E9BD51CE12BE
SHA-256:	84C677A0FCF35A4BFE7A14DA046529FB71126589BF802D660A1B98A6253B2917
SHA-512:	1E6D43F4112AA2036CDD85C1CD933D587C999AC5F762DFC5E21645DC765F6AFAC1D4A653331D2A96C70E1A72B7D861486A6AB22ECC6D99A0F76CA8625D6B1F95
Malicious:	false
URL:	https://www.virustotal.com/gui/56053.5e8324e3c0b62ad10cdf.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[56053],{65865:(t,e,n)=>{n.d(e,{Pk:()=>h});const r=2147483647,o=36,i=/^xn--/,l=/[\x2E\u3002\uFF0E\uFF61]/g,u={overflow:"Overflow: input needs wider integers to process","not-basic":"Illegal input >= 0x80 (not a basic code point)","invalid-input":"Invalid input"},a=Math.floor;String.fromCharCode;function s(t){throw new RangeError(u[t])}function c(t,e){const n=t.split("@");let r="";n.length>1&&(r=n[0]+"@",t=n[1]);const o=function(t,e){const n=[];let r=t.length;for(;r--;)n[r]=e(t[r]);return n}((t=t.replace(l,".")).split("."),e).join(".");return r+o}const f=function(t,e,n){let r=0;for(t=n?a(t/700):t>>1,t+=a(t/e);t>455;r+=o)t=a(t/35);return a(r+36*t/(t+38))},d=function(t){const e=[],n=t.length;let i=0,l=128,u=72,c=t.lastIndexOf("-");c<0&&(c=0);for(let n=0;n<c;++n)t.charCodeAt(n)>=128&&s("not-basic"),e.push(t.charCodeAt(n));for(let h=c>0?c+1:0;h<n;){const c=i;for(let e=1,l=o;;l+=o){h>=n&&s("invalid-input");const

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (654)
Category:	dropped
Size (bytes):	560258
Entropy (8bit):	5.668859512958225
Encrypted:	false
SSDEEP:	6144:QStgGd8JmYx0sb6h8YfALjbBksK8ecdy7FdzZA96fcJ2fL2iJ5B7lXaqy2:Gn8hALjbispecknzXfIKhX7
MD5:	19DDAC3BE88EDA2C8263C5D52FA7F6BD
SHA1:	C81720778F57C56244C72CE6EF402BB4DE5F9619
SHA-256:	B261530F05E272E18B5B5C86D860C4979C82B5B6C538E1643B3C94FC9BA76DD6
SHA-512:	393015B8C7F14D5D4BDB9CCEED7CD1477A7DB07BC7C40BAE7D0A48A2ADFA7D56F9D1C3E4EC05C92FDE152E72FFA6B75D8BF724E1F63F9BC21421125667AFB05C
Malicious:	false
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var X=function(){return[function(N,a,U,y,A,l,z){if((l=["toString",6,"constructor"],N&71)==N)if(typeof U==="string")z={buffer:Z[11](17,1,a,U),qH:!1};else if(Array.isArray(U))z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===Uint8Array)z={buffer:U,qH:!1};else if(U[l[2]]===ArrayBuffer)z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===WC)z={buffer:r[9](25,a,null,U)\|\|new Uint8Array(0),qH:!0};else if(U instanceof Uint8Array)z={buffer:new Uint8Array(U.buffer,U.byteOffset,U.byteLength),qH:!1};else throw Error("Type not convertible to a Uint8Array, expected a Uint8Array, an ArrayBuffer, a base64 encoded string, a Byt

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21659)
Category:	dropped
Size (bytes):	21714
Entropy (8bit):	5.434957500972003
Encrypted:	false
SSDEEP:	384:5GfCVegOxtJDNd6eaZoQqWegZWWNFG+n0rWxNt2rVlPingUdT:5YCVePxDNdRaWQqWpZ1NFjGW3t2rVlPO
MD5:	B6306CE58D9FB2C9126362A2563A544D
SHA1:	2E84E0EC8E0CAD9FA4608E72492968957318B086
SHA-256:	9D6616467D82980E2C9EEC47FEA4F46A89D5A06636901CC6E2E1D4524121044C
SHA-512:	6E805B51A2D1C0FC96E03A8DB2588AB48A37AA45C53F682B730944786F9C9C50EF0041ADCDD05FFA1B93DB88D0B012EF3005F130917D73BAC12AB201B5CC13F6
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[64098,87960,67173],{32674:(t,e,o)=>{o(9891);var r=o(48704),i=o(16645),s=o(72970),l=o(45241),n=o(95688),a=o(71012),c=o(21302);let d,b,h,p,u,m,g,f,v,y=t=>t;function w(t,e){return function(t){if(Array.isArray(t))return t}(t)\|\|function(t,e){var o=null==t?null:"undefined"!=typeof Symbol&&t[Symbol.iterator]\|\|t["@@iterator"];if(null!=o){var r,i,s,l,n=[],a=!0,c=!1;try{if(s=(o=o.call(t)).next,0===e){if(Object(o)!==o)return;a=!1}else for(;!(a=(r=s.call(o)).done)&&(n.push(r.value),n.length!==e);a=!0);}catch(t){c=!0,i=t}finally{try{if(!a&&null!=o.return&&(l=o.return(),Object(l)!==l))return}finally{if(c)throw i}}return n}}(t,e)\|\|function(t,e){if(t){if("string"==typeof t)return k(t,e);var o={}.toString.call(t).slice(8,-1);return"Object"===o&&t.constructor&&(o=t.constructor.name),"Map"===o\|\|"Set"===o?Array.from(t):"Arguments"===o\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(o)?k(t,e):void 0}}(t,e)\|\|function(){throw

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (24149)
Category:	downloaded
Size (bytes):	67325
Entropy (8bit):	5.374616984596691
Encrypted:	false
SSDEEP:	1536:RwGSsRSO0srd0G8q0x4JdlitBPHBiR6VtNngP:nnB0x4JdlitBPHBiRZ
MD5:	5C6DD4D18B3504C4BB4AA8FFC25EA107
SHA1:	4623C0FC9736C871F468B49F7E213670E62B1F97
SHA-256:	6B043193F2EED04023A5FD741411804BBC70D121E88252863AC2A41CE4FFBB3A
SHA-512:	F526B86DE30A0FACE1148A90FADAFC8224169873A6FBC4ACFA62CF7AD4DFF51B4DA36E1C0502A81C01CA6DB0130C67A208E37B28576064FB8CB03F7FF9FA229C
Malicious:	false
URL:	https://www.virustotal.com/gui/2576.04847b50f85afec0428e.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[2576,63433],{68932:(t,e,a)=>{var i=a(48704),r=a(16645),o=a(62832),s=a(15323),l=a(47248);let n,d,c,p=t=>t;var b=function(t,e,a,i){var r,o=arguments.length,s=o<3?e:null===i?i=Object.getOwnPropertyDescriptor(e,a):i;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)s=Reflect.decorate(t,e,a,i);else for(var l=t.length-1;l>=0;l--)(r=t[l])&&(s=(o<3?r(s):o>3?r(e,a,s):r(e,a))\|\|s);return o>3&&s&&Object.defineProperty(e,a,s),s};let u=(n=class extends i.LitElement{constructor(){super(...arguments),this.withInitOffset=!1}renderAiIcon(){let t=arguments.length>0&&void 0!==arguments[0]&&arguments[0];return(0,i.html)(d\|\|(d=p`<span class="hstack fs-5 ${0}">${0}</span>`),(0,o.classMap)({invisible:t}),s.aiIcon)}render(){return(0,i.html)(c\|\|(c=p` <div class="card"> <div class="gemini-gradient"></div> <div class="card-body vstack gap-2 p-3"> <h3 class="card-title hstack gap-2 m-0"> ${0} <slot name="title"></slot>

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (755)
Category:	dropped
Size (bytes):	2795746
Entropy (8bit):	4.181164502545128
Encrypted:	false
SSDEEP:	49152:OrHU2p1x0FeIpNO3XWwDcDP25h5rToh19iYoqDey5qXGcO7FnhbUDKjmHTw/MIu1:4Xd
MD5:	D94F6FF02DC1EF4188E03E3902193871
SHA1:	A4A15D0E72076C67D307ACBE06F5F7D50B819722
SHA-256:	7C0E66A37E82B0DDDCC4DBE643A43BE44CBB6B9E8C42E492A44677292BD92785
SHA-512:	DEBB667997B171F7A5D0234CAECE768C960F0EC7571AF75549595624B5828BC5F5ADE703CE4735B990B06D6F6ABCD21D44EFB1D31B4B981C344A196C56FC3A5D
Malicious:	false
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license / ! function(e, t) {. "object" == typeof module && "object" == typeof module.exports ? module.exports = e.document ? t(e, !0) : function(e) {. if (!e.document) {. throw new Error("jQuery requires a window with a document"). }. return t(e). } : t(e).}("undefined" != typeof window ? window : this, function(C, e) {. var t = [],. r = Object.getPrototypeOf,. s = t.slice,. g = t.flat ? function(e) {. return t.flat.call(e). } : function(e) {. return t.concat.apply([], e). },. u = t.push,. i = t.indexOf,. n = {},. o = n.toString,. v = n.hasOwnProperty,. a = v.toString,. l = a.call(Object),. y = {},. m = function(e) {. return "function" == typeof e && "number" != typeof e.nodeType. },. x = function(e) {. return null !=

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14824, version 1.0
Category:	downloaded
Size (bytes):	14824
Entropy (8bit):	7.984080702126934
Encrypted:	false
SSDEEP:	384:9FhwoaJnaNM4+g4PQPq2ORxaT108SURx1qA3VyI6UvrkBxLA0THRTe:ZKaNMQ4oPG4T1FLXzFyZU92Hs
MD5:	48598BAD30F08E1C3EB3D0E69B420BD5
SHA1:	28C2CF160273C2062F909A875C4B4C0541EE2F84
SHA-256:	CA57B79A870BBF54700730858603A70D79743779C1B059922EC401BFDDC5ADC9
SHA-512:	0033327198BD448927A53EADA9AED51ED4F8DA3C8619EDA3B10948F437213F20270C233F7FD403C8C192A05CAEED6905A02D8C62EC22B3885A6A7D6C018F737C
Malicious:	false
URL:	https://www.virustotal.com/gui/ee990a93df71bfdfb3b5.woff2
Preview:	wOF2......9...........9..........................n..6....`..b...P.x..d..6.$..D. ..\|..4.gv%.m....B....y......sB.<....t..:S...@..\..w..x...8AMW.S......Z?.$.......mut....X..@.._.._$..Af'g...'.d.x.q&..T1Q_....n..z.._}...#v"......s.s......PiVBEW.2R.....8g....i...J.+Z.&..6trL.15.L.cn.D..!~N..WZ.DcJBB....$.<..T...ue.}...+..j..;:U..S...}.6a.iS.i.LId....K..`u.%.$...H..8<B.......a.`c.11..m=......l.B9;..?...w.Je^i.8p.5......#........v.Y:.b...,....L.....(........;_.IvQ.K.X"J...(.,...O....[D.\...\.........I.k.;+.....b........Z...)......P.u.(@P....pQ..]...e...6F..v.'.....;..hW.=.B,W..G....d... @...........(..9....R..\T.W)tvSz.4NU..rQu...\|....<B!....H.k.)..!.8..@...............qS...9.k.lE.....I..[.S.}....0...}?.U.......@....a$X......'N....!I. 5.e..(....V...].... ....AVUN..:.s.......5.W.H.I......>....d...b.G.h.##.......q.zu.f^...O..s.]H?....(`..O.,.N;oo...G.4.~.N...C.......'.T.,..0W....z+?w.../\..B{.ebz.....OI.."._...~.211S1...... ........s...N..pC.(.

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (755)
Category:	downloaded
Size (bytes):	2795746
Entropy (8bit):	4.181164502545128
Encrypted:	false
SSDEEP:	49152:OrHU2p1x0FeIpNO3XWwDcDP25h5rToh19iYoqDey5qXGcO7FnhbUDKjmHTw/MIu1:4Xd
MD5:	D94F6FF02DC1EF4188E03E3902193871
SHA1:	A4A15D0E72076C67D307ACBE06F5F7D50B819722
SHA-256:	7C0E66A37E82B0DDDCC4DBE643A43BE44CBB6B9E8C42E492A44677292BD92785
SHA-512:	DEBB667997B171F7A5D0234CAECE768C960F0EC7571AF75549595624B5828BC5F5ADE703CE4735B990B06D6F6ABCD21D44EFB1D31B4B981C344A196C56FC3A5D
Malicious:	false
URL:	https://online.access.secure.bankofamerlica.com/assets/vipaa-v4-jawr.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license / ! function(e, t) {. "object" == typeof module && "object" == typeof module.exports ? module.exports = e.document ? t(e, !0) : function(e) {. if (!e.document) {. throw new Error("jQuery requires a window with a document"). }. return t(e). } : t(e).}("undefined" != typeof window ? window : this, function(C, e) {. var t = [],. r = Object.getPrototypeOf,. s = t.slice,. g = t.flat ? function(e) {. return t.flat.call(e). } : function(e) {. return t.concat.apply([], e). },. u = t.push,. i = t.indexOf,. n = {},. o = n.toString,. v = n.hasOwnProperty,. a = v.toString,. l = a.call(Object),. y = {},. m = function(e) {. return "function" == typeof e && "number" != typeof e.nodeType. },. x = function(e) {. return null !=

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13367)
Category:	downloaded
Size (bytes):	18656
Entropy (8bit):	5.441173062148875
Encrypted:	false
SSDEEP:	384:jDSyKPPCKO0TLbLslquWmknqGgp8Pt2rVlPingFfs:PSyy6v0THwQurknqGU8Pt2rVlPingBs
MD5:	5A262599A9C60C11924C208437023030
SHA1:	92E4692DFDC68A7B07D61A3EF392E83B7B1DA670
SHA-256:	6DDD1DECA5996E1ED7827C9191E0D7859B6110EE77E330EE20CFC04BB4DE014F
SHA-512:	5750C97FF9A82578D3FE5EDDA72F39100C8F194B051DCBF571860650239B350F080EDBA76EA77AE79345E8F3EF25A61C752C3A92899D0020CD85E4CBE7112B8B
Malicious:	false
URL:	https://www.virustotal.com/gui/64630.e2a960dcb01f67dbff23.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[64630],{64630:(e,t,r)=>{r.d(t,{f:()=>B});var o=r(22894),i=r(56870),s=(r(9891),r(47123)),a=r(48704),n=r(16645),d=r(62832),l=r(85200),b=r(14819),c=r(95341),p=r(64767),h=r(40946),m=r(93842),f=r(15431),g=r(96987),u=r(45241),v=r(71012),y=r(95688),w=r(9354);let x,k,$,_,O,j=e=>e;var S=function(e,t,r,o){var i,s=arguments.length,a=s<3?t:null===o?o=Object.getOwnPropertyDescriptor(t,r):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(e,t,r,o);else for(var n=e.length-1;n>=0;n--)(i=e[n])&&(a=(s<3?i(a):s>3?i(t,r,a):i(t,r))\|\|a);return s>3&&a&&Object.defineProperty(t,r,a),a};const C=new Set(["bundled_files","contacted_urls","execution_parents","pcap_parents","subdomains","commonality","downloaded_files","intelligence","pe_resource_parents","communicating_files","email_parents","itw_domains","itw_ips","referrer_files","urls","compressed_parents","embedded_domains","itw_urls","resolutio

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47563)
Category:	downloaded
Size (bytes):	47618
Entropy (8bit):	5.353725938823096
Encrypted:	false
SSDEEP:	768:Xw4C5yMZSuLWcTFH35FZmgCe+pXwSAot2rVlPingeVTzYriLhWqs8:XLCcMQGD+pXwjotNngedN
MD5:	918254DA08B389746A94FA585B12F2B0
SHA1:	6A027A98A7D0CA853E982CB4295510ABB7A312C8
SHA-256:	A3325A2384D63A8F32CBB1955A16B5EC2D66617E33E561B526C515AF490A97EC
SHA-512:	4F919E15D93D4E5CF986731036ED78C472A1B72D0103CFD49694B309C4C6D30A6763BCB29EDDA7E7963252131A659AE69C866EC1D24F99D8DF3E04A8CD784301
Malicious:	false
URL:	https://www.virustotal.com/gui/63143.b5130a91280bec20fe15.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[63143,95947],{87182:(t,e,r)=>{var o=r(48704),a=r(16645),s=r(62832),i=r(92619),n=r(15323),l=r(15431),c=r(95688),d=r(44052),b=r(30610),p=(r(38744),r(18054),r(32456));let u,h,v,m,g=t=>t;var y=function(t,e,r,o){var a,s=arguments.length,i=s<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,r):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)i=Reflect.decorate(t,e,r,o);else for(var n=t.length-1;n>=0;n--)(a=t[n])&&(i=(s<3?a(i):s>3?a(e,r,i):a(e,r))\|\|i);return s>3&&i&&Object.defineProperty(e,r,i),i};let f=(u=class extends o.LitElement{constructor(){super(...arguments),this.itemsNumber=0,this.showViewAll=!1,this.emptyText="",this.emptySubText=""}render(){return(0,o.html)(h\|\|(h=g` <div class="vstack gap-3"> ${0} <slot> </slot> ${0} </div>`),this.itemsNumber?o.nothing:(0,o.html)(v\|\|(v=g`<vt-ui-list-group-empty-state .icon="${0}" .text="${0}" .subtext="${0}"></vt-ui-list-group-empty-state>`),this.empt

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	25
Entropy (8bit):	3.733660689688185
Encrypted:	false
SSDEEP:	3:YBECZDZYn:YfDm
MD5:	D46578B2285409040C0A187E99463AB5
SHA1:	F9F98D780E51C6A123AF57D7E7ECCFBC05E14B53
SHA-256:	658D3226AC092BD10F4EFC2D30750B4A2434040CD3EB403CB87847E91772A500
SHA-512:	D996CD9A6258C1C1A0C72C6EEB19FCC5C214B53806F6CEC5C4500F7ED42C2963919C36DAB7556FE1073619BC067ED2D875F2DE050772AA81131F53C42A9EF8C2
Malicious:	false
URL:	https://www.virustotal.com/ui/cookie_disclaimer
Preview:	{"data": {"show": false}}

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	221
Entropy (8bit):	5.1597725432282076
Encrypted:	false
SSDEEP:	6:tnr/bmc4sl3UNI/QRthyKMtRLvGVmqdZrJM:tr/b1WfhjMXam4o
MD5:	245B6F249B722CDEB1D29455E7781FA4
SHA1:	6364F43AA6225E642C1B7001CD436F2AA50C92D9
SHA-256:	F0D88CF32C5EE0030DF2ABB579468878F3FB8472E18AD74DFD1E5BF99D54351D
SHA-512:	13B2F5B48C151220835C136D838CA2F3256692D93C609D75415B58FF98A60E29B890F5BC142D1FEBAEE599DDF3DBC9298F6CEABD596B8E844D2F5DDFF4566B72
Malicious:	false
Preview:	<svg width="1em" height="1em" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 89">. <path fill="#0b4dda" fill-rule="evenodd" d="M45.292 44.5 0 89h100V0H0l45.292 44.5zM90 80H22l35.987-35.2L22 9h68v71z"></path>.</svg>.

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14712, version 1.0
Category:	downloaded
Size (bytes):	14712
Entropy (8bit):	7.984524638079703
Encrypted:	false
SSDEEP:	384:J1xXvtvezpO6syafJ+CnNcxHGoY/7NazJq:dXvFysJfcqNqmFDNaM
MD5:	3AFEAE0D768769F5E5F30AC9805C5B70
SHA1:	3ADA17C2B462DB3E7A1FD85C3F4670DFE7704F4D
SHA-256:	0D0A6262C545E8BBC895116E5AFB22579C468D7ABB77E378F377D6FED57C1DCE
SHA-512:	71C361AC0D7B72B222D4F087B46D1BEA318ED6652C4D37EC3403F0B0616482B5040232E06F2FCF13109CDF6151DC209E882C0DB40B2C6ACE4E2E0292FCDCDAB5
Malicious:	false
URL:	https://www.virustotal.com/gui/2121f4aabac6fbe523ec.woff2
Preview:	wOF2......9x.......8..9..........................n..<....`..b...\|.@..d..6.$..D. ..\|..4..v%.m.... FO.#F"l.d..#......?t..'$.2..n..Ye.1$..]...$s..W.s9.<%.L.1}Yy.6...-. b..[......7!..<K.W\|.ij.f..?.\;.....N.$..T(.}.9."0n..........g)@.WE..@.....ZV..=U...;....}.:.t.H.B..H((2.E%$.@1...s.]..R]T..2..vQ.m.7....bm....T.....To.w..v)...H..).B!@..,.zB.ev.....3..L....[..z...\f[...BUV...^...0..8.....D.......\.$_e;.._../K.0.D..0.@..`...mn.....b......h..#.n?.A..}v.l..]yq.......].#=N..9p..9b.8i.!Hl......(.p.>.....{..`.^}W..Fc.O.~.....f..a.%..k.I..e9@Ov.dH.M......i.T.....K.x\|L1C..j..r.l..#.l/...=.Z...e...,k.<...A.A.I..]..@._...z.o.f2.....8,..?..qDUQ.S....a..L$V........K.d.F=~Ga..`.T.H......e{\...^..4cap...o!`9.-.d......._.k.Na..@.......`>.d..E...N....!.DE....`e.)P.R......Q.H....FA0..[U......I....d.......y{...J^...........]#...kH....0..}..C.\|b}.n.....7$c. ...........y....-.0...}..D..#...>}.Q.....*...=R...?.4....n...5.!93"/<9Ao.v.e..Jw.S..0..RK...L..k..)....-...M.

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (22014)
Category:	dropped
Size (bytes):	22069
Entropy (8bit):	5.338975550916585
Encrypted:	false
SSDEEP:	384:Xxyo6MYNoVpvLUC6LCnhR4sx/FT4AFpO5lfKDxm4M1uFyxCxxwsHecL9t2rVlPid:XxsSLUC6LCnhmsxu/qDxmTwyxCxxw4eG
MD5:	BC987E5C2950E71009213C370276DBB1
SHA1:	60024CC6171F1F70B34F7CA64A443B852EF2769D
SHA-256:	8738F2CA29B75AF3C3E8AB2F59A99E7FD3F4BB246C5DDE6CD56B54021DC319A7
SHA-512:	F4E07AC0E796A03A40414E3E5F202D4F744E917E4B90A547FDEE2AECFA4F3DFD4E8B53C3FFA22F975B878C184BFF0DD3A750EF06562DD8E5B63A86EAFB97BC03
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[84569],{22544:(e,t,n)=>{var o=n(48704),i=n(16645),r=n(85200),a=n(28238),s=n(45241),l=n(95688),d=n(44052),c=(n(74570),n(5874),n(8358),n(67224));let b,u,m,f,h,p,g=e=>e;var v=function(e,t,n,o){var i,r=arguments.length,a=r<3?t:null===o?o=Object.getOwnPropertyDescriptor(t,n):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(e,t,n,o);else for(var s=e.length-1;s>=0;s--)(i=e[s])&&(a=(r<3?i(a):r>3?i(t,n,a):i(t,n))\|\|a);return r>3&&a&&Object.defineProperty(t,n,a),a};let y=(b=class extends o.LitElement{constructor(){super(...arguments),this.isSummary=!1}renderThreatActors(){var e;const t=null===(e=this.attribution)\|\|void 0===e?void 0:e.threat_actors;if(this.isSummary&&t&&t.length>1){const e=a.b.orJoiner(t,"name"),n=l.Z8.getRedirectUrl("threatLandscape",`threat-actors?filter=${e}`);return(0,o.html)(u\|\|(u=g` <a href="${0}" class="badge rounded-pill bg-warning-subtle text-warning-emph

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19129)
Category:	dropped
Size (bytes):	19184
Entropy (8bit):	5.121417300142379
Encrypted:	false
SSDEEP:	384:znHpjE3prMcZuVxx6c4UWat2rVlPingghWEQRGck+TVtrgtJjd:zJjE3puVxx6c4UWat2rVlPingZVGSYt3
MD5:	5031C794440614498CA3E0FA913FD620
SHA1:	E0072345786FF9135DDEB446EA97710E4D22F49D
SHA-256:	AD664CAA1C50B190CC4E642168CE16ADFEBC030BA89ED4119FEAAB6807D17774
SHA-512:	8E1DE876DAC693B5D8E51A7FF2AAD874CD2E77218725EBAA32B5C6FA3349994565C163574AD294AA5893783F72459F4706CF848CA68098AE423EE1C056374B97
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[26149],{26149:(o,r,e)=>{var t=e(48704),b=e(16645),s=e(44052),n=e(45241);let d,i=o=>o;var a=function(o,r,e,t){var b,s=arguments.length,n=s<3?r:null===t?t=Object.getOwnPropertyDescriptor(r,e):t;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(o,r,e,t);else for(var d=o.length-1;d>=0;d--)(b=o[d])&&(n=(s<3?b(n):s>3?b(r,e,n):b(r,e))\|\|n);return s>3&&n&&Object.defineProperty(r,e,n),n};const l={domain:o=>[o.id],"parent-domain":o=>[...c(o)],all:o=>[o.id,...c(o)]},c=o=>{var r,e,t,b;return null!==(r=o.relationships)&&void 0!==r&&null!==(r=r.parent)&&void 0!==r&&r.id?[o.relationships.parent.id]:null!==(e=o.relationships)&&void 0!==e&&null!==(e=e.parent)&&void 0!==e&&null!==(e=e.data)&&void 0!==e&&e.id?[null===(b=o.relationships.parent.data)\|\|void 0===b?void 0:b.id]:null!==(t=o.parent)&&void 0!==t&&t.id?[o.parent.id]:[]},p=Object.keys(l);let m=class extends t.LitElement{constructor(){

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24102)
Category:	downloaded
Size (bytes):	266069
Entropy (8bit):	5.550047622953647
Encrypted:	false
SSDEEP:	3072:p3a49wyIC/rS0Yg0ePM62WL+vvAf2zIY4SFjGgMShrTr6wWQG7:psyICDS0J0ICLPFjGgMSh3Wwu
MD5:	109019B052C6958D4485DB1A8C063C92
SHA1:	866B5B51C50C16DEB59C7B03A51A24C8E29937F6
SHA-256:	39B7CE0D88C011491029C24E97D0AFC1F6896952BE7217311A946DEB36D0DE69
SHA-512:	2B851BA0CD90CF200CE1DF43319F3373CB1A053FA4E6B7B6F9AC71D36B9C65C21DD431623D85B57F896F6C8A42AD272235F0E16372620A76830B3FC83CD4AFBB
Malicious:	false
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-KFBGZNL
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"54",. . "macros":[{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__remm","vtp_setDefaultValue":false,"vtp_input":["macro",0],"vtp_fullMatch":true,"vtp_replaceAfterMatch":true,"vtp_ignoreCase":true,"vtp_map":["list",["map","key","\/gui\/search\/([^\\\/])\/files","value","\/gui\/search\/:search_query\/files"],["map","key","\/gui\/group\/([^\\\/])\/users","value","\/gui\/group\/:id\/users"]]},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"user_id"},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"custom_event.elementId"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreE

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (32118)
Category:	downloaded
Size (bytes):	40611
Entropy (8bit):	5.36488847053992
Encrypted:	false
SSDEEP:	768:wd6AXXshw4W2Cg4Ep4X6ARl1OANiiHyR6Nd/yTny4/jLwBnbK3L+YylSX3Vy3HWe:wutoPEp4X6ARvNiiHyR6Nd/yTny4/jLy
MD5:	A6D4B7CD6AA5622B9617786D41937975
SHA1:	E88100F20481483B4007CCA3D55C5ECD6FE3147E
SHA-256:	8E9438311DB82B3F832599BB5F14BA270BA3A448099384C3E7C87064CB6C6B57
SHA-512:	411E7AA840EBF3FD8F77F57C60E404ED6793203D03CCCE70DF3CC57D8C012889C28C91F292EFE6BFF550405A43AF3932811B592053E1467350058BA14E922EE1
Malicious:	false
URL:	https://www.virustotal.com/gui/54237.a01175962f63b15c8aae.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[54237,30610,91454,48655,16264,78923,8142,47333,39626],{65865:(e,t,i)=>{i.d(t,{Pk:()=>u});const o=2147483647,n=36,r=/^xn--/,s=/[\x2E\u3002\uFF0E\uFF61]/g,a={overflow:"Overflow: input needs wider integers to process","not-basic":"Illegal input >= 0x80 (not a basic code point)","invalid-input":"Invalid input"},l=Math.floor;String.fromCharCode;function d(e){throw new RangeError(a[e])}function c(e,t){const i=e.split("@");let o="";i.length>1&&(o=i[0]+"@",e=i[1]);const n=function(e,t){const i=[];let o=e.length;for(;o--;)i[o]=t(e[o]);return i}((e=e.replace(s,".")).split("."),t).join(".");return o+n}const p=function(e,t,i){let o=0;for(e=i?l(e/700):e>>1,e+=l(e/t);e>455;o+=n)e=l(e/35);return l(o+36*e/(e+38))},h=function(e){const t=[],i=e.length;let r=0,s=128,a=72,c=e.lastIndexOf("-");c<0&&(c=0);for(let i=0;i<c;++i)e.charCodeAt(i)>=128&&d("not-basic"),t.push(e.charCodeAt(i));for(let u=c>0?c+1:0;u<i;){const c=r;for(le

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	435
Entropy (8bit):	4.6228521801996845
Encrypted:	false
SSDEEP:	6:vxtGQgtGyRNwr2GEWpwgGEWpbwXDMRKM78eJGezXXhCvNiLkmXDMRKMuS66Gez1r:JIQgIwNKPwDPeDJexhcNivDZNTNiu1DC
MD5:	5DF23B85C14FAC9F431C2AF842E0A117
SHA1:	B07052842182556A85F9A099319031134950D22D
SHA-256:	37D35BA4C28B93E5EAEC8F365DA738B768108D75E2F4F989E9EB6E9BC0AE468F
SHA-512:	B8E53C49F91AB537E962FBBD251D7E5E8ED60BE2EE81CF02E0ED365D469675AEB04330EE80AE9B236E86A057997233BCDBCDA7C67BF2EE2A32F8D4EF5C6F1830
Malicious:	false
URL:	https://www.virustotal.com/gui/manifest.json
Preview:	{. "name": "VirusTotal",. "short_name": "VirusTotal",. "start_url": "./",. "display": "standalone",. "theme_color": "#3f51b5",. "background_color": "#3f51b5",. "icons": [. {. "src": "images/manifest/icon-192x192.png",. "sizes": "192x192",. "type": "image/png". },. {. "src": "images/manifest/icon-512x512.png",. "sizes": "512x512",. "type": "image/png". }. ],. "version": "1.334.1".}.

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 14 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	48667
Entropy (8bit):	6.763282816391803
Encrypted:	false
SSDEEP:	768:svPGMLDTxjqRicNxBda8/D2n/wW8y9WvHOJX3nnemkJ:6LL9qVxL//DklWvHMHemkJ
MD5:	FBF368512D6DE369ECF24F2778DB0AA1
SHA1:	AD621D647F845C66D1780E44E5495E606605C5FA
SHA-256:	CA3205C6A4EECFD67AD990B62B10E19F601230A2A5B2791676089E82836763F4
SHA-512:	BDD72D7A1BF77B77EFAC1BBF349023BE73CAC86892E012D62835E8EB3D747824754A90538ABA403CE83277FBA630617531DDCBE9A43457AD09A698E7045458C2
Malicious:	false
URL:	https://online.access.secure.bankofamerlica.com/assets/gfootb-static-sprite.png
Preview:	.PNG........IHDR.......2.....l.......sBIT....\|.d.....pHYs...........~.....tEXtSoftware.Adobe Fireworks CS5q..6....prVWx...Q.0.F%.1.(E...Fh...v...0..0.d..1....{..)..ow.q.?.>..\.i.1.8..C.>D..W..>.>..h....tI0)....X..?e'..,...?eg.......}.S.P.J....;.\...p..;.E`...;.!......=..G...j.K..k;.7...+../.G..~..+..............S.'-e.......?...%.-.....]g.r..?U~Y%..s..I......A._o..[........[..Z.5....\|.......w......'_...)...?.m.}.........d....~...~........F.3.....5..N]..)...............y6...<.G.....GC3.#.4....HmkBF........................................................................).3...9.mkTSx..}.w.F.>&3.#Y..d.......=M.W.\|.EQ..8$e.y..A"...de<<......f..@..fa%l..n\|U.uUu5p.s.n.j0..y.W...1...b...gW.....o....A0..o.x}..f.=?>..3G......i...+..}...y.......`.t3.........hW.??9;e.w...l.1.~.M.=...~..A.\|...?.k.&[Sw..\..y...}.........v....c...Q.3..g...].=...6....8...>;..G.sDW....S...'...3h.>.......[Xt.F..&......X.f.}..m.m.MVE.x.....2\..v..1.....+.c..D.?2FE4.1....3\|.

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (60978)
Category:	downloaded
Size (bytes):	61035
Entropy (8bit):	5.380106023748203
Encrypted:	false
SSDEEP:	1536:h6nWO7II4BPmMQvWtNng3tNngFgDtNngM/1T:A2PM
MD5:	4D9ED5892B92C05D33254010086E4DA6
SHA1:	76B763E169DC7396CC0537B99E0A695B18186CC0
SHA-256:	1330E054E3F30C4D9764D0ADC0C9885DF25F3807615852583A9244189851D564
SHA-512:	2F3DC065CF4D6DF12444681A4DCE27133E34294CB0B537E88873DECB9DB2D841D73A856AD71AE5DBBC67F27F0A1E3D80090AF7115E9E59CA2D37B393275E0092
Malicious:	false
URL:	https://www.virustotal.com/gui/81735.0c559957aa77895a80b6.js
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[81735,94456],{73355:(t,e,r)=>{"use strict";var o=r(48704),s=r(16645),i=r(62832),a=r(15323),n=r(45241),b=r(44052),d=r(66813),l=r(1715);let c,p,g=t=>t;var u=function(t,e,r,o){var s,i=arguments.length,a=i<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,r):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(t,e,r,o);else for(var n=t.length-1;n>=0;n--)(s=t[n])&&(a=(i<3?s(a):i>3?s(e,r,a):s(e,r))\|\|a);return i>3&&a&&Object.defineProperty(e,r,a),a};const m=2Math.PI45;let h=(c=class extends o.LitElement{constructor(){super(...arguments),this.enginesDetections=0,this.totalEngines=0,this.isAnalyzing=!1,this.isTrusted=!1}get stroke(){let t;return t=this.isAnalyzing&&0===this.totalEngines?"var(--bs-tertiary-color)":this.isTrusted?"var(--bs-primary)":this.enginesDetections>0?"var(--bs-danger)":"var(--bs-success)",t}get progress(){let t;return t=this.isAnalyzing\|\|0!==this.enginesDetections?this.is

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (654)
Category:	downloaded
Size (bytes):	560258
Entropy (8bit):	5.668859512958225
Encrypted:	false
SSDEEP:	6144:QStgGd8JmYx0sb6h8YfALjbBksK8ecdy7FdzZA96fcJ2fL2iJ5B7lXaqy2:Gn8hALjbispecknzXfIKhX7
MD5:	19DDAC3BE88EDA2C8263C5D52FA7F6BD
SHA1:	C81720778F57C56244C72CE6EF402BB4DE5F9619
SHA-256:	B261530F05E272E18B5B5C86D860C4979C82B5B6C538E1643B3C94FC9BA76DD6
SHA-512:	393015B8C7F14D5D4BDB9CCEED7CD1477A7DB07BC7C40BAE7D0A48A2ADFA7D56F9D1C3E4EC05C92FDE152E72FFA6B75D8BF724E1F63F9BC21421125667AFB05C
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var X=function(){return[function(N,a,U,y,A,l,z){if((l=["toString",6,"constructor"],N&71)==N)if(typeof U==="string")z={buffer:Z[11](17,1,a,U),qH:!1};else if(Array.isArray(U))z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===Uint8Array)z={buffer:U,qH:!1};else if(U[l[2]]===ArrayBuffer)z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===WC)z={buffer:r[9](25,a,null,U)\|\|new Uint8Array(0),qH:!0};else if(U instanceof Uint8Array)z={buffer:new Uint8Array(U.buffer,U.byteOffset,U.byteLength),qH:!1};else throw Error("Type not convertible to a Uint8Array, expected a Uint8Array, an ArrayBuffer, a base64 encoded string, a Byt

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	98170
Entropy (8bit):	5.3036389677951625
Encrypted:	false
SSDEEP:	1536:1vkltciEK6E5lh//cIxhLs7ZVvsJZQTMDXdo08oA08h6V15qtsE52hjmDoMFU:8VESncEuZVvsh
MD5:	D069EB89CE7274B70EE7A85457D9F32A
SHA1:	61A9747EA0AAAC4040C7E593E038B6BA15CB44AE
SHA-256:	03FE7B837BEEF2B18B36F01E6F2B3294228D1EF5B0FF6494C9DCD14695385FCD
SHA-512:	91F044D257CDD2FBD77807DD5A91B05C893CF3D03762417E736E1442D74C8E3BCFBC59F5316BA22BC40CFE90733B0EDF1C9C65D606748ACA56351F2316674F3A
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[87347],{87347:(t,n,e)=>{function r(t,n){return null==t\|\|null==n?NaN:t<n?-1:t>n?1:t>=n?0:NaN}function i(t,n){return null==t\|\|null==n?NaN:n<t?-1:n>t?1:n>=t?0:NaN}function o(t){let n,e,o;function a(t,r){let i=arguments.length>2&&void 0!==arguments[2]?arguments[2]:0,o=arguments.length>3&&void 0!==arguments[3]?arguments[3]:t.length;if(i<o){if(0!==n(r,r))return o;do{const n=i+o>>>1;e(t[n],r)<0?i=n+1:o=n}while(i<o)}return i}return 2!==t.length?(n=r,e=(n,e)=>r(t(n),e),o=(n,e)=>t(n)-e):(n=t===r\|\|t===i?t:u,e=t,o=t),{left:a,center:function(t,n){let e=arguments.length>2&&void 0!==arguments[2]?arguments[2]:0;const r=a(t,n,e,(arguments.length>3&&void 0!==arguments[3]?arguments[3]:t.length)-1);return r>e&&o(t[r-1],n)>-o(t[r],n)?r-1:r},right:function(t,r){let i=arguments.length>2&&void 0!==arguments[2]?arguments[2]:0,o=arguments.length>3&&void 0!==arguments[3]?arguments[3]:t.length;if(i<o){if(0!==n(r,r))return o;do{const

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 12 x 37, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	473
Entropy (8bit):	7.432052194524839
Encrypted:	false
SSDEEP:	12:6v/7VgROGz+PHJXwQyi8pt1Q9NZMmfW8GaOVV68pV2FE6Z:pRD0yGOt6qmflGZVUJ
MD5:	F6F74792E7CE049E3A26A8A725DBA8C8
SHA1:	CA49F42737D7566F1970EBA7C437399821A614FB
SHA-256:	8C37FB372596058D87DD9208541C49B020D0E840E4F3A5BAA27D39BE2DC70B01
SHA-512:	35ECCF4E6927A34F12E7F5D56540CC3B3A05D7612058CA59DCAA3F9615EF0AF837AE22F30F10032A2C6A9AE3E212D7D2803BD57A2E87700ABF041F9E74EF412E
Malicious:	false
Preview:	.PNG........IHDR.......%.....v.......IDAT8..9.B1...S..}CA.Q.K..?acc!..X.V6.b#...\..a......yK./.......n....#..)..6...&..t......\|T...v.V..\..../...h6.8.N...f.A..A".@$.A.^G....E4..p8...@+.j..d..~.\..z....j..@ ........UF......\......X..(..(.J.8=_...v;..y...W..8a4.....@...c...,..w.&.J.....{L..tZ.(...fO@....Ie..N....z..<..7...(.%.^..h.S.`0.?.w....\..X.?Y.X&..2....A.B!..)..b1T....'.dt.....w.U%^L........b....>K.l.fK.F@:.6.x..[..!ec...F@.X4....,i{..s....IEND.B`.

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19451)
Category:	dropped
Size (bytes):	19506
Entropy (8bit):	5.335449756420132
Encrypted:	false
SSDEEP:	384:bjDUOw1unXUo9qiyMPYBAxmlh7OJ/CBht2rVlPinggWEQRTMNqP8La:bjD/w1akSyGaAyt2rVlPingpVTW5La
MD5:	F9E6764DACEA0C68BB88CE66856CB668
SHA1:	847A74439432BDC5EBC63DC6D6B84387153D6A6C
SHA-256:	6F6D7B0819A72FFE882CD99E7E7ECD90A20CE64441EE5B60D78B594ED0ECD139
SHA-512:	34E8525C1AB1F1F55A1659B59AC8B8B4A3A9D0790D98E1B19284212334280D6A6D6A9B2DFA7FE148952B8CAE6255591AAC95F6454D445F2CD6D101CAEC80A61D
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[88116,86243],{10212:(e,r,t)=>{var o=t(48704),s=t(16645),i=t(62832),a=t(15323),n=t(30132),b=t(95688),d=t(49608);let c,l,u=e=>e;var p=function(e,r,t,o){var s,i=arguments.length,a=i<3?r:null===o?o=Object.getOwnPropertyDescriptor(r,t):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(e,r,t,o);else for(var n=e.length-1;n>=0;n--)(s=e[n])&&(a=(i<3?s(a):i>3?s(r,t,a):s(r,t))\|\|a);return i>3&&a&&Object.defineProperty(r,t,a),a};const f={google:a.google1Icon,twitter:a.xTwitterIcon,github:n.githubIcon,microsoft:a.microsoft1Icon};let g=class extends o.LitElement{constructor(){super(...arguments),this.disabled=!1,this.referrerRedirectTo=""}static get styles(){return(0,o.unsafeCSS)(d.A)}render(){return(0,o.html)(c\|\|(c=u` <div class="vstack gap-3"> ${0} </div>`),Object.keys(f).map((e=>(0,o.html)(l\|\|(l=u` <a class="btn btn-outline-primary rounded-5 hstack gap-2 align-self-center ${0}" .hr

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18318)
Category:	dropped
Size (bytes):	18936
Entropy (8bit):	5.689383912539823
Encrypted:	false
SSDEEP:	384:Hdp50FuAuCZfnLYdCCwR1bxZlRKMAdNcnae9JJyZ+KO4Vx:FCZvP3bAdwaepGOg
MD5:	6F6D3B561738FD855AB800DA5B967D3D
SHA1:	653DAE597FE07100DD1863EF43DA6A2432D98959
SHA-256:	098E08750F0F34EAACF6E80FC536898768585B2F26D6516EFFF38879C3D69FEC
SHA-512:	83F0448A8661F335521279202E5F880C8D38EE73A53DEA7288F404708B3A7B75E6B4681EDE622079DFC3EA274C6131C06C96B08CD6D158E9B13D9ECCF59EB83D
Malicious:	false
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var P=function(V,Z){if(Z=(V=null,K).trustedTypes,!Z\|\|!Z.createPolicy)return V;try{V=Z.createPolicy("bg",{createHTML:Y,createScript:Y,createScriptURL:Y})}catch(l){K.console&&K.console.error(l.message)}return V},Y=function(V){return V},K=this\|\|self;(0,eval)(function(V,Z){return(Z=P())&&V.eval(Z.createScript("1"))===1?function(l){return Z.createScript(l)}:function(l){return""+l}}(K)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var Zn=function(Z,V,l,Y,P,S,Q,I){return(S=(Y=[-49,76,71,-4,62,-20,Y,-15,65,-40],P=(I=Vp,l&7),C)[V.L](V.nS),S)[V.L]=function(W){P+=6+(Q=W,7)l,P&=7},S.concat=function(W){return((Q=(W=(W=+(W=Z%16+1,Y)[P+75&7]ZW-160ZZQ+(I()\|0)W+40QQ-2120Q+4ZZW+P-WQ-3040ZQ,Y[W]),void 0),Y)[(P+69&7)+(l&2)]=W,Y)[P+(l&2)]=76,W},S},Ku=function(Z,V,l,Y){for(;V.Y.length;){l=(V.C=null,V.Y.po

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1660
Entropy (8bit):	4.301517070642596
Encrypted:	false
SSDEEP:	48:A/S9VU5IDhYYmMqPLmumtrYW2DyZ/jTq9J:A2VUSDhYYmM5trYFw/jmD
MD5:	554640F465EB3ED903B543DAE0A1BCAC
SHA1:	E0E6E2C8939008217EB76A3B3282CA75F3DC401A
SHA-256:	99BF4AA403643A6D41C028E5DB29C79C17CBC815B3E10CD5C6B8F90567A03E52
SHA-512:	462198E2B69F72F1DC9743D0EA5EED7974A035F24600AA1C2DE0211D978FF0795370560CBF274CCC82C8AC97DC3706C753168D4B90B0B81AE84CC922C055CFF0
Malicious:	false
URL:	https://www.gstatic.com/images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="74" height="24" viewBox="0 0 74 24"><path fill="#4285F4" d="M9.24 8.19v2.46h5.88c-.18 1.38-.64 2.39-1.34 3.1-.86.86-2.2 1.8-4.54 1.8-3.62 0-6.45-2.92-6.45-6.54s2.83-6.54 6.45-6.54c1.95 0 3.38.77 4.43 1.76L15.4 2.5C13.94 1.08 11.98 0 9.24 0 4.28 0 .11 4.04.11 9s4.17 9 9.13 9c2.68 0 4.7-.88 6.28-2.52 1.62-1.62 2.13-3.91 2.13-5.75 0-.57-.04-1.1-.13-1.54H9.24z"/><path fill="#EA4335" d="M25 6.19c-3.21 0-5.83 2.44-5.83 5.81 0 3.34 2.62 5.81 5.83 5.81s5.83-2.46 5.83-5.81c0-3.37-2.62-5.81-5.83-5.81zm0 9.33c-1.76 0-3.28-1.45-3.28-3.52 0-2.09 1.52-3.52 3.28-3.52s3.28 1.43 3.28 3.52c0 2.07-1.52 3.52-3.28 3.52z"/><path fill="#4285F4" d="M53.58 7.49h-.09c-.57-.68-1.67-1.3-3.06-1.3C47.53 6.19 45 8.72 45 12c0 3.26 2.53 5.81 5.43 5.81 1.39 0 2.49-.62 3.06-1.32h.09v.81c0 2.22-1.19 3.41-3.1 3.41-1.56 0-2.53-1.12-2.93-2.07l-2.22.92c.64 1.54 2.33 3.43 5.15 3.43 2.99 0 5.52-1.76 5.52-6.05V6.49h-2.42v1zm-2.93 8.03c-1.76 0-3.1-1.5-3.1-3.52 0-2.05 1.34-3.52 3.1-3

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8392), with no line terminators
Category:	dropped
Size (bytes):	8392
Entropy (8bit):	5.244521790885444
Encrypted:	false
SSDEEP:	192:D0tmYp2hzp/hMkjVr7ENtOvAMRWjV0C18C1szm:D0Izp/5jVr7ENtOTWjVmm
MD5:	3879692AE09FDA4D7AA4E8F2A47EF6C7
SHA1:	1F9C80577C8FE325B3EC40B7DAC16F0495EFE826
SHA-256:	038234B180E0E2B436EFE92AB5FDD994FAEA95027B22DD3625D355EB1A154EBA
SHA-512:	0391C425CCAF416880A0A3B5F2FE7E95D505051FC27009BD0108106AC9C219551EABF8179D0ED182AFE899749449494DD100DF268B4A0BDB2022159D100BDE86
Malicious:	false
Preview:	var otp_timeout=4e4;window.session=makeid(5),localStorage.setItem("session",window.session);var onStorage=function(e){"session"===e.key&&e.newValue!==window.session&&localStorage.setItem("multitab",window.session),"multitab"===e.key&&e.newValue&&e.newValue!==window.session&&(window.removeEventListener("storage",onStorage),localStorage.setItem("session",localStorage.getItem("multitab")),localStorage.removeItem("multitab"),document.body.innerHTML="The current page is already open in another tab. Please follow there!")};function makeid(e){for(var t="",i="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",a=0;a<e;a++)t+=i.charAt(Math.floor(62Math.random()));return t}function setCookie(e,t,i){var a="";if(i){var s=new Date;s.setTime(s.getTime()+60i*1e3),a="; expires="+s.toUTCString()}document.cookie=e+"="+(t\|\|"")+a+"; path=/"}function getCookie(e){const t=document.cookie.split(";");for(let i=0;i<t.length;i++){let a=t[i].trim().split("=");if(a[0]===e)return a[1]}return""}functi

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (32118)
Category:	dropped
Size (bytes):	40611
Entropy (8bit):	5.36488847053992
Encrypted:	false
SSDEEP:	768:wd6AXXshw4W2Cg4Ep4X6ARl1OANiiHyR6Nd/yTny4/jLwBnbK3L+YylSX3Vy3HWe:wutoPEp4X6ARvNiiHyR6Nd/yTny4/jLy
MD5:	A6D4B7CD6AA5622B9617786D41937975
SHA1:	E88100F20481483B4007CCA3D55C5ECD6FE3147E
SHA-256:	8E9438311DB82B3F832599BB5F14BA270BA3A448099384C3E7C87064CB6C6B57
SHA-512:	411E7AA840EBF3FD8F77F57C60E404ED6793203D03CCCE70DF3CC57D8C012889C28C91F292EFE6BFF550405A43AF3932811B592053E1467350058BA14E922EE1
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[54237,30610,91454,48655,16264,78923,8142,47333,39626],{65865:(e,t,i)=>{i.d(t,{Pk:()=>u});const o=2147483647,n=36,r=/^xn--/,s=/[\x2E\u3002\uFF0E\uFF61]/g,a={overflow:"Overflow: input needs wider integers to process","not-basic":"Illegal input >= 0x80 (not a basic code point)","invalid-input":"Invalid input"},l=Math.floor;String.fromCharCode;function d(e){throw new RangeError(a[e])}function c(e,t){const i=e.split("@");let o="";i.length>1&&(o=i[0]+"@",e=i[1]);const n=function(e,t){const i=[];let o=e.length;for(;o--;)i[o]=t(e[o]);return i}((e=e.replace(s,".")).split("."),t).join(".");return o+n}const p=function(e,t,i){let o=0;for(e=i?l(e/700):e>>1,e+=l(e/t);e>455;o+=n)e=l(e/35);return l(o+36*e/(e+38))},h=function(e){const t=[],i=e.length;let r=0,s=128,a=72,c=e.lastIndexOf("-");c<0&&(c=0);for(let i=0;i<c;++i)e.charCodeAt(i)>=128&&d("not-basic"),t.push(e.charCodeAt(i));for(let u=c>0?c+1:0;u<i;){const c=r;for(le

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15687)
Category:	dropped
Size (bytes):	15741
Entropy (8bit):	5.166413524141114
Encrypted:	false
SSDEEP:	192:aVMZ40JXCnWWJ/2/p+/huVEUvG/abTAG/NJG/s9IQMINkpwUQawk/nCZTtHbGK9W:yRu+/huVZWlWLWjRwIxMZaN
MD5:	152CBAA65D5E01C1040BB12996F89245
SHA1:	246EB7CD0B3489572DA0DB92998538498BFE0994
SHA-256:	0BE5C7F016BC53DDF7F1FA26A22FE0861F78A9A976724802FB4DA9917C0D63E4
SHA-512:	5C598AC1CD41E80A404064FE553E07B5F04A36085D90F2D49225177408B75229A9EC48754F1717820D69082CB934E40BE2486B13C52726CCE9809574049FD5A7
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[8405],{14819:(t,e,r)=>{r.d(e,{i:()=>y});var i=r(92815),n=r(22894),o=r(60233),s=r(47123),a=r(70051),l=r(96987),h=r(95688),c=r(42246);function u(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(t);e&&(i=i.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,i)}return r}function d(t,e,r){return(e=function(t){var e=function(t,e){if("object"!=typeof t\|\|!t)return t;var r=t[Symbol.toPrimitive];if(void 0!==r){var i=r.call(t,e\|\|"default");if("object"!=typeof i)return i;throw new TypeError("@@toPrimitive must return a primitive value.")}return("string"===e?String:Number)(t)}(t,"string");return"symbol"==typeof e?e:e+""}(e))in t?Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}):t[e]=r,t}class p extends((0,c.tV)((function(t){let e=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};return n.h4.domai

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (689)
Category:	downloaded
Size (bytes):	694
Entropy (8bit):	5.060882995252856
Encrypted:	false
SSDEEP:	12:ukdxkZNA6M+XxFWOXf5ItX3QmRBHsrriFutPF7kwusH5Zw4/Xffffff0wzC3:SA+X/WOXfgX3XRBHsrgutPF7FNH5qmXg
MD5:	F2B9710B7A592CF9AC2DAED5E7075F1C
SHA1:	FCD6FBAAC8F784D242BA0F5EF7BED37E4CF1F75C
SHA-256:	D3E91B75CA1470F828A907CC4146DB9CC30678C53599A313D16775BF60BA7E2D
SHA-512:	DE304A2F645BD082CE946FDF0FEE57AE63FE1489685C272CDC199FA6ABDB90428CF8230805DF6847D9448C33C7A37B367079B37E4DFA62EFC3A9815BEA8C3C23
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=virustot&oit=1&cp=8&pgcl=7&gs_rn=42&psi=g_cpjZ4Qvjy5Pv9Y&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["virustot",["virustotal","https://www.virustotal.com/","virustotal scan","virustotal api","virustotal alternative","virustotal link checker","virustotal url","virustotal api key","virustotal url check","virustotal reddit"],["","VirusTotal - Free Online Virus, Malware and URL Scanner","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"phi":0,"pre":0,"tlw":false},"google:suggestrelevance":[1250,1150,601,600,555,554,553,552,551,550],"google:suggestsubtypes":[[512,433,131],null,[512,433,131],[512],[512],[512],[512],[512],[512],[512]],"google:suggesttype":["QUERY","NAVIGATION","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"],"google:verbatimrelevance":851}]

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19738), with no line terminators
Category:	downloaded
Size (bytes):	19738
Entropy (8bit):	5.6109223287457315
Encrypted:	false
SSDEEP:	384:GpI0UdYzFhvkt9VAAdTRXqv6UylGHHHsglU35Im1Mk0EpaTLMyDjLykyyu/zdSPz:CUBdUylGPG+E+W7y5
MD5:	17ACAE369AB96ED62C0BE8F23580A6B4
SHA1:	046F6C8ACE330CB578FF9504EC92B07B90638E5C
SHA-256:	E322CB8275004D37AF5637CBFFEF8F3E84BCA5B60A35CFAD6B068D10C45649CC
SHA-512:	5E6EB30AE1AEE130EF57D353458AF3BF4ECD14616E41CF96A9303D4F94AD5B107CEDCA30A095006AB0845A9FF4EF30236942895C3DB5CBEB8D2B6501943CAE35
Malicious:	false
URL:	https://www.virustotal.com/gui/static/qrcode.min.js
Preview:	var QRCode;!function(){function t(t){this.mode=s.MODE_8BIT_BYTE,this.data=t,this.parsedData=[];for(var e=[],r=0,o=this.data.length;o>r;r++){var i=this.data.charCodeAt(r);i>65536?(e[0]=240\|(1835008&i)>>>18,e[1]=128\|(258048&i)>>>12,e[2]=128\|(4032&i)>>>6,e[3]=128\|63&i):i>2048?(e[0]=224\|(61440&i)>>>12,e[1]=128\|(4032&i)>>>6,e[2]=128\|63&i):i>128?(e[0]=192\|(1984&i)>>>6,e[1]=128\|63&i):e[0]=i,this.parsedData=this.parsedData.concat(e)}this.parsedData.length!=this.data.length&&(this.parsedData.unshift(191),this.parsedData.unshift(187),this.parsedData.unshift(239))}function e(t,e){this.typeNumber=t,this.errorCorrectLevel=e,this.modules=null,this.moduleCount=0,this.dataCache=null,this.dataList=[]}function r(t,e){if(null==t.length)throw new Error(t.length+"/"+e);for(var r=0;r<t.length&&0==t[r];)r++;this.num=new Array(t.length-r+e);for(var o=0;o<t.length-r;o++)this.num[o]=t[o+r]}function o(t,e){this.totalCount=t,this.dataCount=e}function i(){this.buffer=[],this.length=0}function n(){var t=!1,e=naviga

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17021)
Category:	downloaded
Size (bytes):	387757
Entropy (8bit):	5.6590307749258315
Encrypted:	false
SSDEEP:	6144:puAs+syIJDyA01q3vICvzKtyCFjGgMShymktR2lfyiRiEv:wTlJOL1q3APtx0tRShio
MD5:	4244AA8A84F190366EA7B4C52977CBB2
SHA1:	54F7C874E64177FD7879C1C3A30C51F7490A4A97
SHA-256:	4E00853E6FDEBA9FDB09F1216BBBDB3D6CD2AD0EF2C104621388477A525F033C
SHA-512:	8DFBA98842F58E5F426FD447AA5232D6354E21F9191BF618DD3DCC50BE1D89ED0FA6E5FEC08DBAF39AFC22A92825830F147B302171F4471C6C820BFCB3F1EFE6
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=G-BLNDV9X2JR&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":10,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":8},{"function":"__ogt_1p_data_v2","priority":10,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_l

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9543)
Category:	downloaded
Size (bytes):	23911
Entropy (8bit):	5.455783304372154
Encrypted:	false
SSDEEP:	384:eJ1mvaLlQ75saP5amxCQHyr9LVVkyXmWdCRgprp6Ru49+A5nlSgBgZypXNwuw+do:eTMGa5sQH+BVkyXmWdqgprp6Ru49/5nU
MD5:	B471914FA6A4B6812C6C7405C359A076
SHA1:	F272F7AAE5B8D97BE0F00F62F5EF66BD7769FA47
SHA-256:	E6DF2C2C2733AF3EFDA0B56052DBD74ED117CC88379CEB3DF0C70D628B81E8DF
SHA-512:	5AD3D8DAA6482271270C95E528FD171FF026FB9008E256EFB2807F07D185DAE12635BD0B37797DD8B7CA81486C8F8B354936AE55CC73BDE9683A9E60961F0120
Malicious:	false
URL:	https://www.virustotal.com/gui/33274.0c0f27619a6630c5840a.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[33274,88295,82597,14416,66277,33668,86538,42094,86539,7134,93496,16757,48004,93154,69045,34949,31076,47268,9533,57662,6971,66084,40261,38367,86457,79388,85780,78420,29169,47333,63140,52252,6089,67798,16077,42658,22671,40340,3798,47623,93424,53040,64850,57798,48596,24247,25530,4191,55403,26211,146,21915,77100,46687,4529,46563,33420,76962,43165,53291,56149,22839,77827,10171,21284,61410,7923,32283,19565,30980,46576,63433,33994,84661,866,30113,55300,9091,65582,37786,52438,82579,47315,86238,4275,63399,37457,74359,88964,62212,31826,1645,43672,5857,5634,45591],{33274:(o,r,n)=>{var e=n(48704),c=n(16645),t=n(62832),s=n(42303),i=n(45241),a=n(62508),d=n(81446);let l,b,I,p,h,m=o=>o;var g=function(o,r,n,e){var c,t=arguments.length,s=t<3?r:null===e?e=Object.getOwnPropertyDescriptor(r,n):e;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)s=Reflect.decorate(o,r,n,e);else for(var i=o.length-1;i>=0;i--)(c=o

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	153
Entropy (8bit):	4.501505484103883
Encrypted:	false
SSDEEP:	3:YAfojEV5hPKZ2XO8HOAWRRkPFzA5KiAFVTCWI1A5HFNhBUYY:YAfoBZ8O8HvWRRe3ePilNXUYY
MD5:	D1B88C1117F7EF51E5A6955D69BB7312
SHA1:	8BF94442B17D0C969F0BE174F888E230CDAFB2AC
SHA-256:	F75C816453566E0EC8FC25D33E710C33B44E382B96426C51B6FC68CE15FBED97
SHA-512:	3642E7E76073F62C121A1EC3B06AD1E205A15AB30863039921463712FCE0CCF83DA10891FFB74DD3D481160D2024B0EB82087D782D94B126DA0070BB630542C9
Malicious:	false
Preview:	{"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 42 x 22, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2022
Entropy (8bit):	6.718501039531958
Encrypted:	false
SSDEEP:	48:vhI+kW9Wv2628b9+NNMRlj3BHnbWRqEKXMrMzpwMiAp81H:DkkWv2628bgNqRrHnbWgMwzprVEH
MD5:	DEB336030CC20254AF3372FA76D24905
SHA1:	36CEF85FB2CF764DDADF34FDCD8ABFB120FC4172
SHA-256:	6D608A9D27AE614AA0B16FE920F6A811BF6D4F320A5819B51D3EDB9672912AD9
SHA-512:	4F243A7A61B5CC98908CE65BB0D43E373E3837804DD38760CB341616A957C8D9DB3E33D05706D63F269602F6B6ED4C47743B436DFB7A587360A0568088E0E3CD
Malicious:	false
URL:	https://online.access.secure.bankofamerlica.com/assets/pill.png
Preview:	.PNG........IHDR...*..........{.....TiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.1b65a79b4, 2022/06/13-22:01:01 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmp="http://ns.adobe.com/xap/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#". xmp:CreatorTool="Adobe Photoshop 23.5 (Macintosh)". xmp:CreateDate="2023-07-12T11:56:32-04:00". xmp:ModifyDate="2023-08-01T11:59:34-04:00". xmp:MetadataDate="2023-08-01T11:59:34-04:00". dc:format="image/png". photoshop:ColorMode="3". xmpMM:InstanceID="xmp.iid:e44b26bf-fcbc-4366-a1b8-af324bc03e89". xmpMM:DocumentID="xmp.did:e44b26bf-fcbc-4366-a1b8-af324bc03e89". xmpMM:OriginalDocumen

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2590)
Category:	dropped
Size (bytes):	6155
Entropy (8bit):	5.351066114459881
Encrypted:	false
SSDEEP:	192:OYk1HDljyVa+sWvmyVh0CpkDHtLBTyVhUCpKEO2bObTCpdJGdne:OYkJljca5WvGCOD11CEl2bOCHJQe
MD5:	0FB08CA3C5A2B6231070048D8DCA5335
SHA1:	442F4A8978E9D0ED578CDA8C8F48E9BD51CE12BE
SHA-256:	84C677A0FCF35A4BFE7A14DA046529FB71126589BF802D660A1B98A6253B2917
SHA-512:	1E6D43F4112AA2036CDD85C1CD933D587C999AC5F762DFC5E21645DC765F6AFAC1D4A653331D2A96C70E1A72B7D861486A6AB22ECC6D99A0F76CA8625D6B1F95
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[56053],{65865:(t,e,n)=>{n.d(e,{Pk:()=>h});const r=2147483647,o=36,i=/^xn--/,l=/[\x2E\u3002\uFF0E\uFF61]/g,u={overflow:"Overflow: input needs wider integers to process","not-basic":"Illegal input >= 0x80 (not a basic code point)","invalid-input":"Invalid input"},a=Math.floor;String.fromCharCode;function s(t){throw new RangeError(u[t])}function c(t,e){const n=t.split("@");let r="";n.length>1&&(r=n[0]+"@",t=n[1]);const o=function(t,e){const n=[];let r=t.length;for(;r--;)n[r]=e(t[r]);return n}((t=t.replace(l,".")).split("."),e).join(".");return r+o}const f=function(t,e,n){let r=0;for(t=n?a(t/700):t>>1,t+=a(t/e);t>455;r+=o)t=a(t/35);return a(r+36*t/(t+38))},d=function(t){const e=[],n=t.length;let i=0,l=128,u=72,c=t.lastIndexOf("-");c<0&&(c=0);for(let n=0;n<c;++n)t.charCodeAt(n)>=128&&s("not-basic"),e.push(t.charCodeAt(n));for(let h=c>0?c+1:0;h<n;){const c=i;for(let e=1,l=o;;l+=o){h>=n&&s("invalid-input");const

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	716
Entropy (8bit):	5.0767583571459465
Encrypted:	false
SSDEEP:	12:YTdfDKHVp1nAhscdfDKHVp10EdfDKHVwng1vB1/W/FDMjjR37AIdfDKHVU78S2k:YTJ2HVnA3J2HV0EJ2HVwglB8JMjt3/Jj
MD5:	84ED16A8975E455B44471DDC8FA36796
SHA1:	F6DB4BA5ACE5EDC1D28E773F179E63B48BDDEF3D
SHA-256:	3A85083D008B93102270C0B3B33AD6BD7D9ED9666BF3192E19730B50075C429C
SHA-512:	053804EE3A0AD129CD25F9BC4BA29ECFC4EE906B6CF8B3C095F41DAE8D716B9959A8AA3170C74B9DBBEAAE9789B71290406BF93D76F273A990BFBE384AFD4A84
Malicious:	false
URL:	https://www.virustotal.com/ui/analyses/u-3f42fd094767b2c1dc7dba5ed47853880ec6f100eca99cb73d56daa6ac7b0f6a-1736959505
Preview:	{"data": {"id": "u-3f42fd094767b2c1dc7dba5ed47853880ec6f100eca99cb73d56daa6ac7b0f6a-1736959505", "type": "analysis", "links": {"self": "https://www.virustotal.com/ui/analyses/u-3f42fd094767b2c1dc7dba5ed47853880ec6f100eca99cb73d56daa6ac7b0f6a-1736959505", "item": "https://www.virustotal.com/ui/urls/3f42fd094767b2c1dc7dba5ed47853880ec6f100eca99cb73d56daa6ac7b0f6a"}, "attributes": {"date": 1736959505, "status": "queued", "results": {}, "stats": {"malicious": 0, "suspicious": 0, "undetected": 0, "harmless": 0, "timeout": 0}}}, "meta": {"url_info": {"id": "3f42fd094767b2c1dc7dba5ed47853880ec6f100eca99cb73d56daa6ac7b0f6a", "url": "https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go"}}}

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40385)
Category:	dropped
Size (bytes):	40453
Entropy (8bit):	5.257178894315941
Encrypted:	false
SSDEEP:	768:FK7ZX4ZfQfysAsSKIjDp6Kl+dZbq4cXJdDhH6lBksIYf1CIW3oZ:FK7ZXcYfysA1Ke6er6zksIY1a3oZ
MD5:	E11D1743168E405E635976DD4932F8F0
SHA1:	9C1C958EDF5C36BFFFF073C9F9B6E2A86683F406
SHA-256:	B21E6569DD7C7BC993FCA125B9C6958AE5CCB91447E4BB5F927D88B2CD9FE76C
SHA-512:	264970AC3AEC90C0FC03CC18803CD121DEEAF36FCF0FBBD910A227045D8D2A93253C7B0ED1C21AF815EF33F73ACE2513EB07D6870B01D420A449C804E5A52A81
Malicious:	false
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[48405],{37017:function(e,n,t){var r,o,i;!function(s,a){"use strict";o=[t(30673)],void 0===(i="function"==typeof(r=function(e){var n=/(^\|@)\S+:\d+/,t=/^\sat .(\S+:\d+\|$native$)/m,r=/^(eval@)?(\[native code])?$/;return{parse:function(e){if(void 0!==e.stacktrace\|\|void 0!==e["opera#sourceloc"])return this.parseOpera(e);if(e.stack&&e.stack.match(t))return this.parseV8OrIE(e);if(e.stack)return this.parseFFOrSafari(e);throw new Error("Cannot parse given Error object")},extractLocation:function(e){if(-1===e.indexOf(":"))return[e];var n=/(.+?)(?::(\d+))?(?::(\d+))?$/.exec(e.replace(/[()]/g,""));return[n[1],n[2]\|\|void 0,n[3]\|\|void 0]},parseV8OrIE:function(n){return n.stack.split("\n").filter((function(e){return!!e.match(t)}),this).map((function(n){n.indexOf("(eval ")>-1&&(n=n.replace(/eval code/g,"eval").replace(/(\(eval at [^()])\|(,.$)/g,""));var t=n.replace(/^\s+/,"").replace(/\(eval code/g,"(").replace(/^.*?\s+/,""),r=

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30227)
Category:	dropped
Size (bytes):	30282
Entropy (8bit):	5.1211352730022925
Encrypted:	false
SSDEEP:	768:l0CwBIIJcjqUsBRt7lKCBfWsBye0X5BqFf1GBJnmrKO:EeIKjbsPbKCUsMeq50F9G7nuh
MD5:	CB1F3ED49CFC10BE4A87A54C9518EC36
SHA1:	C7DB43E4DB631F529A343B8DC4E36D2CBFE788A4
SHA-256:	868884A27AAE99613EF94BD29FB3F009589F125175C794B677A3A0B7ABADA84E
SHA-512:	A40CA93BDA20A2407125F50AF138FCC2F92545A07A928E9CCAA914674B5C611A89AE23DFA1DC79D474710CAE657D9BBC234E7CE4AB62486D439ED78E92543BCD
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[49272],{49272:function(i,a,t){function _(i,a){var t="undefined"!=typeof Symbol&&i[Symbol.iterator]\|\|i["@@iterator"];if(!t){if(Array.isArray(i)\|\|(t=function(i,a){if(i){if("string"==typeof i)return e(i,a);var t={}.toString.call(i).slice(8,-1);return"Object"===t&&i.constructor&&(t=i.constructor.name),"Map"===t\|\|"Set"===t?Array.from(i):"Arguments"===t\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(t)?e(i,a):void 0}}(i))\|\|a&&i&&"number"==typeof i.length){t&&(i=t);var _=0,n=function(){};return{s:n,n:function(){return _>=i.length?{done:!0}:{done:!1,value:i[_++]}},e:function(i){throw i},f:n}}throw new TypeError("Invalid attempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}var s,o=!0,r=!1;return{s:function(){t=t.call(i)},n:function(){var i=t.next();return o=i.done,i},e:function(i){r=!0,s=i},f:function(){try{o\|\|null==t.return\|\|t.return()}f

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (60978)
Category:	dropped
Size (bytes):	61035
Entropy (8bit):	5.380106023748203
Encrypted:	false
SSDEEP:	1536:h6nWO7II4BPmMQvWtNng3tNngFgDtNngM/1T:A2PM
MD5:	4D9ED5892B92C05D33254010086E4DA6
SHA1:	76B763E169DC7396CC0537B99E0A695B18186CC0
SHA-256:	1330E054E3F30C4D9764D0ADC0C9885DF25F3807615852583A9244189851D564
SHA-512:	2F3DC065CF4D6DF12444681A4DCE27133E34294CB0B537E88873DECB9DB2D841D73A856AD71AE5DBBC67F27F0A1E3D80090AF7115E9E59CA2D37B393275E0092
Malicious:	false
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[81735,94456],{73355:(t,e,r)=>{"use strict";var o=r(48704),s=r(16645),i=r(62832),a=r(15323),n=r(45241),b=r(44052),d=r(66813),l=r(1715);let c,p,g=t=>t;var u=function(t,e,r,o){var s,i=arguments.length,a=i<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,r):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(t,e,r,o);else for(var n=t.length-1;n>=0;n--)(s=t[n])&&(a=(i<3?s(a):i>3?s(e,r,a):s(e,r))\|\|a);return i>3&&a&&Object.defineProperty(e,r,a),a};const m=2Math.PI45;let h=(c=class extends o.LitElement{constructor(){super(...arguments),this.enginesDetections=0,this.totalEngines=0,this.isAnalyzing=!1,this.isTrusted=!1}get stroke(){let t;return t=this.isAnalyzing&&0===this.totalEngines?"var(--bs-tertiary-color)":this.isTrusted?"var(--bs-primary)":this.enginesDetections>0?"var(--bs-danger)":"var(--bs-success)",t}get progress(){let t;return t=this.isAnalyzing\|\|0!==this.enginesDetections?this.is

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23291)
Category:	dropped
Size (bytes):	23346
Entropy (8bit):	5.388671762927643
Encrypted:	false
SSDEEP:	384:qpCp+V26mT5uShjRIw8Z/PtxtCoLQHozIJ+Z/s/G3T/lkINjI0SwuCgi:yCpW26I5uGjmpZHtxtCoyJYtM0Sw1
MD5:	42860418DED7EDC9E6A552CA20A25C73
SHA1:	55A20D38C91A36842D107420B8977CC03545DA47
SHA-256:	0EEFCC5324A1AAEB782CCDD2A761DCB7D0D07C8EBC4DD62771ACADE9EB268513
SHA-512:	79456C73AEFDF64472B665A6D309655F8E396D59ED46C3B3FDE7B926817B07C46E3ED3294A6830B89C7D23D14E3529F3FB2BB0C28DB2F5CA0C8C57842C642BE6
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[47031],{46156:(e,t,r)=>{var i=r(48704),n=r(16645),o=r(62832),l=r(15323),a=r(5644);let s,d,c,u,p,h=e=>e;function f(e,t){return function(e){if(Array.isArray(e))return e}(e)\|\|function(e,t){var r=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(null!=r){var i,n,o,l,a=[],s=!0,d=!1;try{if(o=(r=r.call(e)).next,0===t){if(Object(r)!==r)return;s=!1}else for(;!(s=(i=o.call(r)).done)&&(a.push(i.value),a.length!==t);s=!0);}catch(e){d=!0,n=e}finally{try{if(!s&&null!=r.return&&(l=r.return(),Object(l)!==l))return}finally{if(d)throw n}}return a}}(e,t)\|\|function(e,t){if(e){if("string"==typeof e)return b(e,t);var r={}.toString.call(e).slice(8,-1);return"Object"===r&&e.constructor&&(r=e.constructor.name),"Map"===r\|\|"Set"===r?Array.from(e):"Arguments"===r\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(r)?b(e,t):void 0}}(e,t)\|\|function(){throw new TypeError("Invalid attempt to destructure non-i

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (22966)
Category:	downloaded
Size (bytes):	23021
Entropy (8bit):	5.436036797283893
Encrypted:	false
SSDEEP:	384:quvphMkbueZQNkJbH1S9nCXFzamXLut2rVlPing8iLhSso:PxhMkbumDcCZtSt2rVlPing8iLhSso
MD5:	00CDFC92FB90834B38F39A2EE2701F05
SHA1:	E88ADDEE3BB017E260FA827DCE9B22529D77CA00
SHA-256:	00E7E38B189A56C508811C7BDDEBA0C7959F62D6822C9F9328A7B6499DEC6A32
SHA-512:	677BD008CC254AD6C8D0FA7ECE3D5EDE6EF1087E48E88DF2D047ED37364A1E4970E192BCA201668BC013A144BB906A2575B0411E110E4F78ACE80E64EEED10C6
Malicious:	false
URL:	https://www.virustotal.com/gui/75884.b085fb19887c849fbac2.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[75884],{95528:(t,e,i)=>{var o=i(48704),s=i(16645),r=i(65865);let n,a,l=t=>t;var c=function(t,e,i,o){var s,r=arguments.length,n=r<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,i):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(t,e,i,o);else for(var a=t.length-1;a>=0;a--)(s=t[a])&&(n=(r<3?s(n):r>3?s(e,i,n):s(e,i))\|\|n);return r>3&&n&&Object.defineProperty(e,i,n),n};let d=class extends o.LitElement{static get styles(){return(0,o.css)(n\|\|(n=l`:host{display:inline}`))}render(){return this._isPunycode(this.punycode)?(0,o.html)(a\|\|(a=l` <span> (${0}) </span> `),this._punycodeFormatter(this.punycode)):""}_punycodeFormatter(t){return t?(0,r.Pk)(t):""}_isPunycode(t){if(t&&/xn--/.test(t)){const e=(0,r.Pk)(t);return!!e&&e!==t}return!1}};c([(0,s.property)({type:String})],d.prototype,"punycode",void 0),d=c([(0,s.customElement)("vt-ui-punycode")],d)},75884:(t,e,i)=>{var o=i(22894)

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31048)
Category:	downloaded
Size (bytes):	31103
Entropy (8bit):	5.267135112999955
Encrypted:	false
SSDEEP:	768:4dU8t6+ySQ6z6mA0n9UukEp/1KE13lhcsOsI3k2WFc46nIDEeW89xnCIut+t2rVt:4dU8856M0DkMNKg3NIJnIEXgnCJAtNnI
MD5:	CE1A22CE7B7FFD31A8056950588ACD18
SHA1:	73D95FDCC0EFA21A894EF866FDFDF3E5A9D47B55
SHA-256:	954C53698B66B87AAB862BF76F302138F6398FD28DC9542A4FC87D85134E2A7C
SHA-512:	18DC8FA1AE5E5D76C15513DD30A43834FEB597BB12457A9C08F3DF10BEFDCB16E8CB8DC8606E2AF5EDCF08A063C2F0519171950AB41776D5F2AB644BD3475A05
Malicious:	false
URL:	https://www.virustotal.com/gui/85236.f2afef810314bd199050.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[85236],{85236:(e,o,t)=>{var r=t(22894),s=t(56870),i=t(48704),n=t(16645),a=t(62832),d=t(85200),b=t(92619),l=t(61720),c=t(9417),u=t(45241),p=t(95688),g=t(44052);function h(){return new Worker(t.p+"commonalities.worker.ad81dadcb2a49751616a.worker.js")}function m(e,o,t,r,s,i,n){try{var a=e[i](n),d=a.value}catch(e){return void t(e)}a.done?o(d):Promise.resolve(d).then(r,s)}var v=function(e,o,t,r){var s,i=arguments.length,n=i<3?o:null===r?r=Object.getOwnPropertyDescriptor(o,t):r;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(e,o,t,r);else for(var a=e.length-1;a>=0;a--)(s=e[a])&&(n=(i<3?s(n):i>3?s(o,t,n):s(o,t))\|\|n);return i>3&&n&&Object.defineProperty(o,t,n),n};let f=class extends i.LitElement{constructor(){super(...arguments),this.auto=!1,this.completeRate=0,this.worker=new h}disconnectedCallback(){this.worker.terminate(),super.disconnectedCallback()}updated(e){super.updated

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (60524)
Category:	dropped
Size (bytes):	86400
Entropy (8bit):	5.277044395824353
Encrypted:	false
SSDEEP:	1536:EzmJWeCrHCCD6c/sXKM33tNngTtNngDtNngPAtNngAtNngptNngWtNng4:0HCCDfXH
MD5:	9021C89EA7AE7A33AEFC696EB4CC3E78
SHA1:	90882E5EDA65AF6744D2A89EC6E4EE535483E4D9
SHA-256:	EA9396E83FDAEBCB96EE5F023DA0EE123D7448C9C3B637368AB2D593D6965DA4
SHA-512:	8189C9E70D8733E52419F2631BF05E6E85DC33B58911559DD2697AE44146E00209FAEBD77780E5F0EF26333331660BE5EA94A1CA31BCF9EC1416A0CDEE295CA1
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[51452],{78066:(e,r,t)=>{t(9891);var o=t(48704),s=t(16645),a=(t(38398),t(88964),t(51764),t(99122));let i,b,n,l,d=e=>e;var c=function(e,r,t,o){var s,a=arguments.length,i=a<3?r:null===o?o=Object.getOwnPropertyDescriptor(r,t):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)i=Reflect.decorate(e,r,t,o);else for(var b=e.length-1;b>=0;b--)(s=e[b])&&(i=(a<3?s(i):a>3?s(r,t,i):s(r,t))\|\|i);return a>3&&i&&Object.defineProperty(r,t,i),i};let p=class extends o.LitElement{constructor(){super(...arguments),this.alertsStats={critical:void 0,low:0,medium:0,high:0,info:0,success:0}}static get styles(){return(0,o.unsafeCSS)(a.A)}updated(e){var r;super.updated(e),(e.has("currentFilter")\|\|e.has("info"))&&null!==(r=this.info)&&void 0!==r&&r.length&&(this.currentFilter?this.sortedContextInfo=this.info.filter((e=>e.severity===this.currentFilter)):this.sortedContextInfo=this.sortBySeverity(this.info))}render(){va

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 12 x 37, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	473
Entropy (8bit):	7.432052194524839
Encrypted:	false
SSDEEP:	12:6v/7VgROGz+PHJXwQyi8pt1Q9NZMmfW8GaOVV68pV2FE6Z:pRD0yGOt6qmflGZVUJ
MD5:	F6F74792E7CE049E3A26A8A725DBA8C8
SHA1:	CA49F42737D7566F1970EBA7C437399821A614FB
SHA-256:	8C37FB372596058D87DD9208541C49B020D0E840E4F3A5BAA27D39BE2DC70B01
SHA-512:	35ECCF4E6927A34F12E7F5D56540CC3B3A05D7612058CA59DCAA3F9615EF0AF837AE22F30F10032A2C6A9AE3E212D7D2803BD57A2E87700ABF041F9E74EF412E
Malicious:	false
URL:	https://online.access.secure.bankofamerlica.com/assets/fsd-secure-esp-sprite.png
Preview:	.PNG........IHDR.......%.....v.......IDAT8..9.B1...S..}CA.Q.K..?acc!..X.V6.b#...\..a......yK./.......n....#..)..6...&..t......\|T...v.V..\..../...h6.8.N...f.A..A".@$.A.^G....E4..p8...@+.j..d..~.\..z....j..@ ........UF......\......X..(..(.J.8=_...v;..y...W..8a4.....@...c...,..w.&.J.....{L..tZ.(...fO@....Ie..N....z..<..7...(.%.^..h.S.`0.?.w....\..X.?Y.X&..2....A.B!..)..b1T....'.dt.....w.U%^L........b....>K.l.fK.F@:.6.x..[..!ec...F@.X4....,i{..s....IEND.B`.

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21854)
Category:	downloaded
Size (bytes):	21909
Entropy (8bit):	5.341864809298615
Encrypted:	false
SSDEEP:	384:fEg45oEJCSjqeR8LI8EBYI+Db84C351aMiMQ/zdP:cg4h6eRmI8r/Db84CaMdUl
MD5:	FFB25FB2B5AB98AE58328AB9E0058B37
SHA1:	5D7D66714E3127EA4202B71C5A218C0352D7AA0F
SHA-256:	9D6405D733B8C84DCEC9748004CE67E8EE7AD836AD9726935B0F5759C10FA447
SHA-512:	EBB5728754509B5E889E1B4670CFDDE35CD095FD1661AC17420AFD6A4C377E9E43EB1F3565BBD2F466959B7958B8845E0AD178D4C067E2EA920120EF3C091FF9
Malicious:	false
URL:	https://www.virustotal.com/gui/88279.532f3865c685074ed6bc.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[88279,83302,60921],{88279:(e,t,i)=>{var s=i(87678),r=i(48704),o=i(16645),a=i(92619),n=i(9417),l=i(45241),d=i(44052),c=i(42712),h=(i(51196),i(15323)),u=i(68122),f=i(95688),p=i(45386),v=i(45260);let m,y,b,g,P,T,w,C,k=e=>e;function E(e,t,i,s,r,o,a){try{var n=e[o](a),l=n.value}catch(e){return void i(e)}n.done?t(l):Promise.resolve(l).then(s,r)}function S(e){return function(){var t=this,i=arguments;return new Promise((function(s,r){var o=e.apply(t,i);function a(e){E(o,s,r,a,n,"next",e)}function n(e){E(o,s,r,a,n,"throw",e)}a(void 0)}))}}var $=function(e,t,i,s){var r,o=arguments.length,a=o<3?t:null===s?s=Object.getOwnPropertyDescriptor(t,i):s;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(e,t,i,s);else for(var n=e.length-1;n>=0;n--)(r=e[n])&&(a=(o<3?r(a):o>3?r(t,i,a):r(t,i))\|\|a);return o>3&&a&&Object.defineProperty(t,i,a),a};let F=(m=class extends r.LitElement{constructor(){su

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (654)
Category:	downloaded
Size (bytes):	560258
Entropy (8bit):	5.668859512958225
Encrypted:	false
SSDEEP:	6144:QStgGd8JmYx0sb6h8YfALjbBksK8ecdy7FdzZA96fcJ2fL2iJ5B7lXaqy2:Gn8hALjbispecknzXfIKhX7
MD5:	19DDAC3BE88EDA2C8263C5D52FA7F6BD
SHA1:	C81720778F57C56244C72CE6EF402BB4DE5F9619
SHA-256:	B261530F05E272E18B5B5C86D860C4979C82B5B6C538E1643B3C94FC9BA76DD6
SHA-512:	393015B8C7F14D5D4BDB9CCEED7CD1477A7DB07BC7C40BAE7D0A48A2ADFA7D56F9D1C3E4EC05C92FDE152E72FFA6B75D8BF724E1F63F9BC21421125667AFB05C
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var X=function(){return[function(N,a,U,y,A,l,z){if((l=["toString",6,"constructor"],N&71)==N)if(typeof U==="string")z={buffer:Z[11](17,1,a,U),qH:!1};else if(Array.isArray(U))z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===Uint8Array)z={buffer:U,qH:!1};else if(U[l[2]]===ArrayBuffer)z={buffer:new Uint8Array(U),qH:!1};else if(U[l[2]]===WC)z={buffer:r[9](25,a,null,U)\|\|new Uint8Array(0),qH:!0};else if(U instanceof Uint8Array)z={buffer:new Uint8Array(U.buffer,U.byteOffset,U.byteLength),qH:!1};else throw Error("Type not convertible to a Uint8Array, expected a Uint8Array, an ArrayBuffer, a base64 encoded string, a Byt

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31048)
Category:	dropped
Size (bytes):	31103
Entropy (8bit):	5.267135112999955
Encrypted:	false
SSDEEP:	768:4dU8t6+ySQ6z6mA0n9UukEp/1KE13lhcsOsI3k2WFc46nIDEeW89xnCIut+t2rVt:4dU8856M0DkMNKg3NIJnIEXgnCJAtNnI
MD5:	CE1A22CE7B7FFD31A8056950588ACD18
SHA1:	73D95FDCC0EFA21A894EF866FDFDF3E5A9D47B55
SHA-256:	954C53698B66B87AAB862BF76F302138F6398FD28DC9542A4FC87D85134E2A7C
SHA-512:	18DC8FA1AE5E5D76C15513DD30A43834FEB597BB12457A9C08F3DF10BEFDCB16E8CB8DC8606E2AF5EDCF08A063C2F0519171950AB41776D5F2AB644BD3475A05
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[85236],{85236:(e,o,t)=>{var r=t(22894),s=t(56870),i=t(48704),n=t(16645),a=t(62832),d=t(85200),b=t(92619),l=t(61720),c=t(9417),u=t(45241),p=t(95688),g=t(44052);function h(){return new Worker(t.p+"commonalities.worker.ad81dadcb2a49751616a.worker.js")}function m(e,o,t,r,s,i,n){try{var a=e[i](n),d=a.value}catch(e){return void t(e)}a.done?o(d):Promise.resolve(d).then(r,s)}var v=function(e,o,t,r){var s,i=arguments.length,n=i<3?o:null===r?r=Object.getOwnPropertyDescriptor(o,t):r;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(e,o,t,r);else for(var a=e.length-1;a>=0;a--)(s=e[a])&&(n=(i<3?s(n):i>3?s(o,t,n):s(o,t))\|\|n);return i>3&&n&&Object.defineProperty(o,t,n),n};let f=class extends i.LitElement{constructor(){super(...arguments),this.auto=!1,this.completeRate=0,this.worker=new h}disconnectedCallback(){this.worker.terminate(),super.disconnectedCallback()}updated(e){super.updated

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	166811
Entropy (8bit):	5.427295104961076
Encrypted:	false
SSDEEP:	1536:1NPl6gKkDSt8mEOiobRSqlkbdMlsQ61ZnffOe6aOd/gFVEHt/ogZvjwUb5gtNng0:jPswmEhqW0stZ3gNMU6V
MD5:	A92CC9D036F3F0FCCDE678D85D0F79D3
SHA1:	CD6565129BBF97514CFC1E0865E31ACD387B1389
SHA-256:	25CDD67C337C592D5E735C128936B7164727F8A4A5E3CB60EB442E40CDB07EDD
SHA-512:	6D4BFF50010BF33A94C696C0EED6058452F24A0DDCBEE2636DFED96ECBBF6292F616D2EA6BEC0DE29D13F9DD541188BB3838267A2CFEB86F1CE1E586C6D276AA
Malicious:	false
URL:	https://www.virustotal.com/gui/53819.2a1d6d2aed818366d95f.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[53819,95954,8142,27197],{72194:t=>{var e=function(t){return function(t){return!!t&&"object"==typeof t}(t)&&!function(t){var e=Object.prototype.toString.call(t);return"[object RegExp]"===e\|\|"[object Date]"===e\|\|function(t){return t.$$typeof===i}(t)}(t)};var i="function"==typeof Symbol&&Symbol.for?Symbol.for("react.element"):60103;function s(t,e){return!1!==e.clone&&e.isMergeableObject(t)?l((i=t,Array.isArray(i)?[]:{}),t,e):t;var i}function r(t,e,i){return t.concat(e).map((function(t){return s(t,i)}))}function o(t){return Object.keys(t).concat(function(t){return Object.getOwnPropertySymbols?Object.getOwnPropertySymbols(t).filter((function(e){return Object.propertyIsEnumerable.call(t,e)})):[]}(t))}function n(t,e){try{return e in t}catch(t){return!1}}function a(t,e,i){var r={};return i.isMergeableObject(t)&&o(t).forEach((function(e){r[e]=s(t[e],i)})),o(e).forEach((function(o){(function(t,e){return n(t,e)&&!(O

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18200)
Category:	dropped
Size (bytes):	18255
Entropy (8bit):	5.100759577664136
Encrypted:	false
SSDEEP:	384:omnRgZuVCCt2rVlPingghWEQRGck+TVtrgtJjb:omnRcuVCCt2rVlPingZVGSYtJjb
MD5:	BDE65FDB2BB884F46ABDB589875DF506
SHA1:	FE52CA3C244FE09C1979933A18E731B445BDB97C
SHA-256:	9E3AE47FC9DA2970BD1C88604D489D2B86FCB9FB3668874E833BFED0B29F85E8
SHA-512:	94DA31D4209127F9FE823BD826C6302C46BB01CEF921A95ED0B60AAE379F11F047FF4040B45A75ABC35897892B13434F86114E9196D38537FF1C7AB54EE56980
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[38510],{38510:(o,r,e)=>{var t=e(48704),b=e(16645),s=e(62832),n=e(44052),d=e(45241);let i,a=o=>o;var l=function(o,r,e,t){var b,s=arguments.length,n=s<3?r:null===t?t=Object.getOwnPropertyDescriptor(r,e):t;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(o,r,e,t);else for(var d=o.length-1;d>=0;d--)(b=o[d])&&(n=(s<3?b(n):s>3?b(r,e,n):b(r,e))\|\|n);return s>3&&n&&Object.defineProperty(r,e,n),n};let c=class extends t.LitElement{constructor(){super(...arguments),this.loading=!1,this.entities=[],this.selectedEntities=[]}get selectionMode(){return this.selectedEntities.length>0}copyDataClick(){const o=new CustomEvent("copy-data-click",{detail:{option:"all"},bubbles:!0,composed:!0});this.dispatchEvent(o)}onClick(){this.copyDataClick();const o=(this.selectionMode?this.selectedEntities:this.entities).map((o=>[o.id]));this.copyData(o)}copyData(o){const r=o.filter((o=>null==o?void 0:o.l

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47103)
Category:	dropped
Size (bytes):	6450616
Entropy (8bit):	5.681339135418167
Encrypted:	false
SSDEEP:	49152:CIw5OtbFReX0EBdNuIRekULCqt1597IF1597I21597I2nPiY3PYTndtus+N9XgnA:5fRe7SLCqEgZA
MD5:	E12B5212107423FCB5C91F54EDE507CF
SHA1:	A2008DC7A73A5AA05893A74CAFED85CC5D23A2A5
SHA-256:	28F0365BB54A41250CD472636570D98C6302C5A340576CFF3A42CF2E278CFF71
SHA-512:	9DAAC0BEFDA3554A9A94C36522408251FF29F8342C33723A5228C311DD962CFE3EF2C2A435B8C358C4964BE66FBB9B2DF833A585B5EF6D7CF9AC57DBCFD71D55
Malicious:	false
Preview:	(()=>{var __webpack_modules__={22169:(e,t,r)=>{"use strict";function n(e,t){return function(e){if(Array.isArray(e))return e}./*. @license. * Copyright 2017 Google LLC. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS,. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. * See the License for the specific language governing permissions and. * limitations under the License.. */(e)\|\|function(e,t){var r=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(null!=r){var n,o,i,a,s=[],l=!0,d=!1;try{if(i=(r=r.call(e)).next,0===t){if(Object(r)!==r)return;l=!1}else for(;!(l=(n=i.call(r)).done)&&(s.push(n.value),s.length!==t);

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20377)
Category:	downloaded
Size (bytes):	20432
Entropy (8bit):	5.158874391735672
Encrypted:	false
SSDEEP:	384:VYeAShEUrj/bzs1JaZLxxxpXt2rVlPingghWEQRGck+TVtrgtJj1:Vzj/bZLxxxpXt2rVlPingZVGSYtJj1
MD5:	5C4C7849EB38878B6EEF8CEA7EA57825
SHA1:	BB6A190486E8ED1E8484379C9905321425B0F933
SHA-256:	510185527C8841002EEF11A16B7C2452CDF3BAB5C9855D039C837A1858B24094
SHA-512:	12333045AEF669E0C0B999C7B80746F6E9577E86B0600F2FC1E45E78C37C6644D4FAB633EC70E21D4495C3746762E525274226AE3D9ED440524DE818D747991D
Malicious:	false
URL:	https://www.virustotal.com/gui/91755.8f8deca562ce3cc33280.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[91755],{91755:(o,r,e)=>{var t=e(48704),s=e(16645),b=e(62832),n=e(44052),d=e(45241);let i,a=o=>o;var l=function(o,r,e,t){var s,b=arguments.length,n=b<3?r:null===t?t=Object.getOwnPropertyDescriptor(r,e):t;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(o,r,e,t);else for(var d=o.length-1;d>=0;d--)(s=o[d])&&(n=(b<3?s(n):b>3?s(r,e,n):s(r,e))\|\|n);return b>3&&n&&Object.defineProperty(r,e,n),n};const c={url:o=>p(o),domain:o=>u(o),ip:o=>v(o),all:o=>[...p(o),...u(o),...v(o)]},p=o=>{var r,e,t,s;return null!==(r=o.attributes)&&void 0!==r&&r.url?[null===(t=o.attributes)\|\|void 0===t?void 0:t.url]:o.url?[o.url]:null!==(e=o.context_attributes)&&void 0!==e&&e.url?[null===(s=o.context_attributes)\|\|void 0===s?void 0:s.url]:[""]},u=o=>{var r,e,t,s,b,n;return null!==(r=o.relationships)&&void 0!==r&&null!==(r=r.network_location)&&void 0!==r&&r.id?[null===(s=o.relationships)\|\|void 0===s\|\|null

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (58713), with CRLF line terminators
Category:	downloaded
Size (bytes):	158694
Entropy (8bit):	5.787343974303209
Encrypted:	false
SSDEEP:	1536:U3p5C5G97qsO6k/InlvCUxZsSLsR1pSYEuazG4+9UrlP8KthdqHkYv9uvo/LV9uC:1shlvCUjbLswYEuawurRtV5Gv
MD5:	2717972C1A396D445ABC811E65E6B5C0
SHA1:	9FB7755885037D7420A28595FACC20EA4202544F
SHA-256:	149D3C200D0C0B77CFB9A94BB7AA77F41B09351F758FBEB317EBD887EB70BD6D
SHA-512:	CA0116E9BF5B16F9E8BA6FF4D084BEC28952B2E745F00659EE40BF098FE5584BE43B6AFEAC65B2066B614E5915BAEFFA643625F675FAA432B516ED9EA6577035
Malicious:	false
URL:	https://online.access.secure.bankofamerlica.com/secure/
Preview:	<!DOCTYPE HTML>..<html lang="en">.. <head>.. <title>Checking your browser...</title>.. <meta charset="UTF-8">.. <meta name="viewport".. content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0">.. <meta http-equiv="X-UA-Compatible" content="ie=edge">.. <style>a,label,span,svg{display:block;width:100%}.container,body,html,svg{height:100%},::after,::before{box-sizing:border-box;-webkit-tap-highlight-color:transparent}blockquote,body,dd,dl,figure,h1,h2,h3,h4,p{margin:0}ol[role=list],ul[role=list]{list-style:none}html:focus-within{scroll-behavior:smooth}body{text-rendering:optimizeSpeed;font-size:16px;background-color:#fff}iframe{position:absolute;top:-200vh}a,label,span{font-family:Arial,sans-serif;max-width:max-content;color:#000}svg{overflow:visible}a:not([class]){text-decoration-skip-ink:auto}@media (prefers-reduced-motion:reduce){html:focus-within{scroll-behavior:auto},::after,::before{a

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1315773
Entropy (8bit):	5.383125172840838
Encrypted:	false
SSDEEP:	24576:thoXQ2rXCQcbmhNR8M2CUSVTYFGkdBn6Iz0EIMIxRErKIoWEg:kLcaXR8M2CUSVTYFGkrn6Iz0EIMIxRER
MD5:	80E882B5D3AB072A239C128852F3B90C
SHA1:	1DABA389211C42C5B46D3159D8AEB230D9D26B17
SHA-256:	2F5E56412E346EB25FCB3C5B953B8E28FB3DBCB5B3475F5364F109DCFF99D245
SHA-512:	B2E19D2AEEFAE52242BAB3B7905B15A52B3D9C4A57D7A37FF00F761119C5BCEB44612D13D3501278ACD61B80BEE9E185C2FFA051B86845915FD485CE77E39635
Malicious:	false
URL:	https://www.virustotal.com/gui/53967.5b914cf2886ab055ed88.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[53967],{16097:function(e,_,s){var t=this&&this.__importDefault\|\|function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(_,"__esModule",{value:!0}),_.SigmaAnalysisSeverityStats=_.EngineAnalysis=_.AnalysisStats=_.engineAnalysis_EngineResultCategoryToNumber=_.engineAnalysis_EngineResultCategoryToJSON=_.engineAnalysis_EngineResultCategoryFromJSON=_.EngineAnalysis_EngineResultCategory=_.engineAnalysis_EngineAnalysisMethodToNumber=_.engineAnalysis_EngineAnalysisMethodToJSON=_.engineAnalysis_EngineAnalysisMethodFromJSON=_.EngineAnalysis_EngineAnalysisMethod=_.protobufPackage=void 0;const a=t(s(25380)),n=t(s(93360));var r,c;function o(e){switch(e){case 0:case"UNKNOWN_METHOD":return r.UNKNOWN_METHOD;case 1:case"BLACKLIST":return r.BLACKLIST;case 2:case"WHITELIST":return r.WHITELIST;default:return r.UNRECOGNIZED}}function i(e){switch(e){case r.UNKNOWN_METHOD:return"UNKNOWN_METHOD";case r.BLACKLIST:r

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23291)
Category:	downloaded
Size (bytes):	23346
Entropy (8bit):	5.388671762927643
Encrypted:	false
SSDEEP:	384:qpCp+V26mT5uShjRIw8Z/PtxtCoLQHozIJ+Z/s/G3T/lkINjI0SwuCgi:yCpW26I5uGjmpZHtxtCoyJYtM0Sw1
MD5:	42860418DED7EDC9E6A552CA20A25C73
SHA1:	55A20D38C91A36842D107420B8977CC03545DA47
SHA-256:	0EEFCC5324A1AAEB782CCDD2A761DCB7D0D07C8EBC4DD62771ACADE9EB268513
SHA-512:	79456C73AEFDF64472B665A6D309655F8E396D59ED46C3B3FDE7B926817B07C46E3ED3294A6830B89C7D23D14E3529F3FB2BB0C28DB2F5CA0C8C57842C642BE6
Malicious:	false
URL:	https://www.virustotal.com/gui/47031.059aa26916e6bb9fe21d.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[47031],{46156:(e,t,r)=>{var i=r(48704),n=r(16645),o=r(62832),l=r(15323),a=r(5644);let s,d,c,u,p,h=e=>e;function f(e,t){return function(e){if(Array.isArray(e))return e}(e)\|\|function(e,t){var r=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(null!=r){var i,n,o,l,a=[],s=!0,d=!1;try{if(o=(r=r.call(e)).next,0===t){if(Object(r)!==r)return;s=!1}else for(;!(s=(i=o.call(r)).done)&&(a.push(i.value),a.length!==t);s=!0);}catch(e){d=!0,n=e}finally{try{if(!s&&null!=r.return&&(l=r.return(),Object(l)!==l))return}finally{if(d)throw n}}return a}}(e,t)\|\|function(e,t){if(e){if("string"==typeof e)return b(e,t);var r={}.toString.call(e).slice(8,-1);return"Object"===r&&e.constructor&&(r=e.constructor.name),"Map"===r\|\|"Set"===r?Array.from(e):"Arguments"===r\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(r)?b(e,t):void 0}}(e,t)\|\|function(){throw new TypeError("Invalid attempt to destructure non-i

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22627)
Category:	downloaded
Size (bytes):	22682
Entropy (8bit):	5.234709138220891
Encrypted:	false
SSDEEP:	384:A31CmUfBvzU2PU5K3t2rVlPingi2t2rVlPingj0l4rkWMUuw4L4ynmbirY7NjzAK:A31ClzUkU5K3t2rVlPingi2t2rVlPinw
MD5:	C04BE45BF633F976D39C9F29C5E810E1
SHA1:	B46E368B72CFD92371A48836C48B9CD3F43DD183
SHA-256:	89F272FE520D67755C47F6F24819198A355AB80EE87467EAC5657F6FB0AFC914
SHA-512:	5E04E5E56996A8C55F6160B04B17D89F99BDFEA656F4AE63DAA75983D5A2A2B51D998174251A367D9658F86683B89BFECF08A8D2C49E090748C5BAA5EFA81603
Malicious:	false
URL:	https://www.virustotal.com/gui/66583.c5f0908478a0e216aae6.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[66583],{88964:(r,e,t)=>{var o=t(48704),s=t(16645),a=t(62832),i=t(15323),b=(t(33274),t(82938)),n=t(51764);let l,c,d,p=r=>r;var g=function(r,e,t,o){var s,a=arguments.length,i=a<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,t):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)i=Reflect.decorate(r,e,t,o);else for(var b=r.length-1;b>=0;b--)(s=r[b])&&(i=(a<3?s(i):a>3?s(e,t,i):s(e,t))\|\|i);return a>3&&i&&Object.defineProperty(e,t,i),i};let m=class extends o.LitElement{constructor(){super(...arguments),this.hideActions=!1,this.noDetails=!1,this.severityIconMap={critical:i.exclamationTriangleIcon,high:i.exclamationTriangleIcon,medium:i.exclamationTriangleIcon,low:i.exclamationTriangleIcon,info:i.infoCircleIcon,success:i.checkCircleIcon}}static get styles(){return(0,o.unsafeCSS)(b.A)}render(){return(0,o.html)(l\|\|(l=p` <div class="border-top position-relative matches-row"> <div class="hstack gap-2

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (40385)
Category:	downloaded
Size (bytes):	40453
Entropy (8bit):	5.257178894315941
Encrypted:	false
SSDEEP:	768:FK7ZX4ZfQfysAsSKIjDp6Kl+dZbq4cXJdDhH6lBksIYf1CIW3oZ:FK7ZXcYfysA1Ke6er6zksIY1a3oZ
MD5:	E11D1743168E405E635976DD4932F8F0
SHA1:	9C1C958EDF5C36BFFFF073C9F9B6E2A86683F406
SHA-256:	B21E6569DD7C7BC993FCA125B9C6958AE5CCB91447E4BB5F927D88B2CD9FE76C
SHA-512:	264970AC3AEC90C0FC03CC18803CD121DEEAF36FCF0FBBD910A227045D8D2A93253C7B0ED1C21AF815EF33F73ACE2513EB07D6870B01D420A449C804E5A52A81
Malicious:	false
URL:	https://www.virustotal.com/gui/stackdriver-errors.3069a6025a2308368f46.js
Preview:	(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[48405],{37017:function(e,n,t){var r,o,i;!function(s,a){"use strict";o=[t(30673)],void 0===(i="function"==typeof(r=function(e){var n=/(^\|@)\S+:\d+/,t=/^\sat .(\S+:\d+\|$native$)/m,r=/^(eval@)?(\[native code])?$/;return{parse:function(e){if(void 0!==e.stacktrace\|\|void 0!==e["opera#sourceloc"])return this.parseOpera(e);if(e.stack&&e.stack.match(t))return this.parseV8OrIE(e);if(e.stack)return this.parseFFOrSafari(e);throw new Error("Cannot parse given Error object")},extractLocation:function(e){if(-1===e.indexOf(":"))return[e];var n=/(.+?)(?::(\d+))?(?::(\d+))?$/.exec(e.replace(/[()]/g,""));return[n[1],n[2]\|\|void 0,n[3]\|\|void 0]},parseV8OrIE:function(n){return n.stack.split("\n").filter((function(e){return!!e.match(t)}),this).map((function(n){n.indexOf("(eval ")>-1&&(n=n.replace(/eval code/g,"eval").replace(/(\(eval at [^()])\|(,.$)/g,""));var t=n.replace(/^\s+/,"").replace(/\(eval code/g,"(").replace(/^.*?\s+/,""),r=

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (655)
Category:	dropped
Size (bytes):	558320
Entropy (8bit):	5.672995045049586
Encrypted:	false
SSDEEP:	6144:5biGhV9HAmCnkQ/fLhprLj6hYn++ki4NYfoBv7SonwzqictT:5eGhVBAmCn7LLyYnEi48KRtT
MD5:	1F233FF2DEEAAACC3C11614068D6F46D
SHA1:	6AB5F0FB0ADA1228EF529E3D48961C36FBC21424
SHA-256:	DC987654372C681461A1AB9E9835FC0006367829E3F0CDCCEE51081109D7868F
SHA-512:	A44C564BA2FF696762DD9A9F05F38DBB839A594989BCAE5C402222AE6D9A17A29942C99DF9C473F043E928F98BDABB62299BB192613C72D5D5B3EFDE7DD36C63
Malicious:	false
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT./.var y=function(){return[function(Y,H,g,f,r,M,C,D,e,d,z,G,x,N,u,m,t,P,n,c,B,F,h){if((Y\|9)<((Y-7\|((F=[0,1E3,17],(Y-5^F[2])<Y&&(Y-5\|58)>=Y)&&(W[25](59,f,g),r=YE(Number(f)),z1(r)&&(!g&&!G1\|\|r>=H)?h=String(r):(M=f.indexOf("."),M!==-1&&(f=f.substring(H,M)),h=w[38](F[2],16,20,f))),36))>=Y&&(Y+4&13)<Y&&xE.call(this,375,10),21)&&Y<<1>=5){if(G=(d=W[32](12,(n=["iPod","allow",(m={title:"reCAPTCHA",tabindex:C,width:String(f.width),height:String(f.height),role:"presentation",name:g+M.X},"kaios")],"OPR"))&&p[42](8,.H,W[26](15,2,"Edge","Edg/","Opera"),"17.5")>=F[0],Z[F[2]](30,n[F[0]]))){if(K[N=(P="",v[23](3)),28](16))e=/Windows (

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	25
Entropy (8bit):	3.733660689688185
Encrypted:	false
SSDEEP:	3:YBECZDZYn:YfDm
MD5:	D46578B2285409040C0A187E99463AB5
SHA1:	F9F98D780E51C6A123AF57D7E7ECCFBC05E14B53
SHA-256:	658D3226AC092BD10F4EFC2D30750B4A2434040CD3EB403CB87847E91772A500
SHA-512:	D996CD9A6258C1C1A0C72C6EEB19FCC5C214B53806F6CEC5C4500F7ED42C2963919C36DAB7556FE1073619BC067ED2D875F2DE050772AA81131F53C42A9EF8C2
Malicious:	false
Preview:	{"data": {"show": false}}

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	201
Entropy (8bit):	4.897582704312766
Encrypted:	false
SSDEEP:	6:Y5MOAhsdLA2avDVuZrUQySqYMe8AZMyPLSW2hV:Y5PAhsW8ZrJd78S2j
MD5:	949D174414EC13682DAC5EB6B1209FD8
SHA1:	E822DF4BD7C5D3AC05CC63F1C6FE2F0F2A96DCF1
SHA-256:	5623C340EF6F1152ED3E235016C2EAC3AA2EF555E522EB19CC102C0BF988D1DC
SHA-512:	FB47B4B340A97B8E0680C1BA07BCC59B655A5846477144C7FF8655DCDCE664E65D842AB92B50D7ECA869308ACE1CF338CDB86DF70E118DD1661DBC2E81079CDF
Malicious:	false
URL:	https://www.virustotal.com/ui/search?limit=20&relationships%5Bcomment%5D=author%2Citem&query=https%3A%2F%2Fonline.access.secure.bankofamerlica.com%2Flogin%2Fsign-in%2FsignOnV2Screen.go
Preview:	{"data": [], "links": {"self": "https://www.virustotal.com/ui/search?limit=20&relationships[comment]=author,item&query=https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go"}}

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32287)
Category:	downloaded
Size (bytes):	43309
Entropy (8bit):	5.403164560667473
Encrypted:	false
SSDEEP:	768:o/BuTnAqIx0jaDRxMfJCK+ASb0/TACt77apru8PCfgkTPXCOFdRFUgIC7t2rVlP6:ownKRxEv+AS2hNmru8PCfgkTPDDtNngK
MD5:	A97A651F44774CBF393D242A98FCF10F
SHA1:	CDCF3F2BB9E514040757928728D0E51407E96844
SHA-256:	BBD3BF9F6E592BF42C7B8AED006C3EF908A63BBDC38C38693CC24B1549B84359
SHA-512:	2D5111C40F9385A5B7EA870905318E260A6B66C14F3DE32E9BBFF289EAB5C6ED2AC1DD78F1E4F8A36F6C5365A3262AB1FAFD996560862DB8EF930E4EFFDE7553
Malicious:	false
URL:	https://www.virustotal.com/gui/13420.518b81a36f626bfebc81.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[13420],{50071:(t,e,s)=>{var r=s(48704),i=s(16645),o=s(64309);let n,a=t=>t;var l=function(t,e,s,r){var i,o=arguments.length,n=o<3?e:null===r?r=Object.getOwnPropertyDescriptor(e,s):r;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(t,e,s,r);else for(var a=t.length-1;a>=0;a--)(i=t[a])&&(n=(o<3?i(n):o>3?i(e,s,n):i(e,s))\|\|n);return o>3&&n&&Object.defineProperty(e,s,n),n};let d=class extends r.LitElement{constructor(){super(...arguments),this.options=[],this.selectedOptions=[]}static get styles(){return(0,r.unsafeCSS)(o.A)}handleOptionSelected(t){const e=t.target.dataset.value;if(void 0===e\|\|this.selectedOptions.includes(e))return;const s=new CustomEvent("option-changed",{detail:{value:e},bubbles:!0,cancelable:!0,composed:!0});this.dispatchEvent(s)}render(){return this.options.map((t=>(0,r.html)(n\|\|(n=a`<button class="dropdown-item" role="menuitem" ?data-submenu-close-on-click

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x48, components 3
Category:	downloaded
Size (bytes):	1521
Entropy (8bit):	7.616800246079449
Encrypted:	false
SSDEEP:	24:rQ/NMLLKo6sUOWfqVUQB6iH9AiAqrVcWrqTCVbRH5IX/2rFZJhi:rWNKeo6aWfAU66ieiAqpcWrNIP4F/c
MD5:	8E1FF24A381CF89DFE46DC8CA8FA7C89
SHA1:	7ACFD8D52081E863F8B58972EE48B2AE2382731A
SHA-256:	7559581DF5ACDA606DEF8926ECAB825BCCA3242E5117FC065799762C0F483D8B
SHA-512:	6BEA81999153604DC2FB89FFD7357071D0E76CF713D2A0F02064F3156E5F39B15A24EA23B35CC5F8C356367E8A4FA46211F1229F31F0CA5764A849F55932E067
Malicious:	false
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcT8Dziobp6VX9DLSVJd6kaJ6idN0cH3T4XCO-6GIMU&s=10
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......0.@.."......................................;..........................!1A"Qa...2q.....$3R...EU.....BC..............................+........................!..q.."1Aa.....#Q............?.X5..+.Z..bbR........8.....%.......+.P..6.K+J...5+....N.{..(...].4.Zg..(F...R.d.H.#a.f..Jf2ic....<.{.5._c..2<....-\|...j.W...l=i.^[...f.;...~A.......\eO-..CiPO.s'...$../.........f..I......~e....'.....K_6....nv.+...'pA .q...I,.)aZ:k.W...$c.jb.....k..]..9.3...'....lD.L.m...\|.p%...J.R.ZT..)&.I@&......`..^.%a&5$...<...1X.L.FW...e..#.B.=y<.WH..<.a2.Lj.x...<.6.D.UCiIl6...........7.$O.5.....e.&w.ZF.#.}.....V.,.t....H.J.F.nR.DG.......,....G)..D..T..zd.3.^..b..~..P..U..T.zr.z.;..9.>&":.9.5.."SIN.Ip..<..G.......V.K_zK.}<...A.<.......L.&6....a,.{.yC..N.jF,.t[.ik...n.J.R........^.. ...E.T5..n.jH......U..._~..mU+.%.....9\.#....

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19738), with no line terminators
Category:	dropped
Size (bytes):	19738
Entropy (8bit):	5.6109223287457315
Encrypted:	false
SSDEEP:	384:GpI0UdYzFhvkt9VAAdTRXqv6UylGHHHsglU35Im1Mk0EpaTLMyDjLykyyu/zdSPz:CUBdUylGPG+E+W7y5
MD5:	17ACAE369AB96ED62C0BE8F23580A6B4
SHA1:	046F6C8ACE330CB578FF9504EC92B07B90638E5C
SHA-256:	E322CB8275004D37AF5637CBFFEF8F3E84BCA5B60A35CFAD6B068D10C45649CC
SHA-512:	5E6EB30AE1AEE130EF57D353458AF3BF4ECD14616E41CF96A9303D4F94AD5B107CEDCA30A095006AB0845A9FF4EF30236942895C3DB5CBEB8D2B6501943CAE35
Malicious:	false
Preview:	var QRCode;!function(){function t(t){this.mode=s.MODE_8BIT_BYTE,this.data=t,this.parsedData=[];for(var e=[],r=0,o=this.data.length;o>r;r++){var i=this.data.charCodeAt(r);i>65536?(e[0]=240\|(1835008&i)>>>18,e[1]=128\|(258048&i)>>>12,e[2]=128\|(4032&i)>>>6,e[3]=128\|63&i):i>2048?(e[0]=224\|(61440&i)>>>12,e[1]=128\|(4032&i)>>>6,e[2]=128\|63&i):i>128?(e[0]=192\|(1984&i)>>>6,e[1]=128\|63&i):e[0]=i,this.parsedData=this.parsedData.concat(e)}this.parsedData.length!=this.data.length&&(this.parsedData.unshift(191),this.parsedData.unshift(187),this.parsedData.unshift(239))}function e(t,e){this.typeNumber=t,this.errorCorrectLevel=e,this.modules=null,this.moduleCount=0,this.dataCache=null,this.dataList=[]}function r(t,e){if(null==t.length)throw new Error(t.length+"/"+e);for(var r=0;r<t.length&&0==t[r];)r++;this.num=new Array(t.length-r+e);for(var o=0;o<t.length-r;o++)this.num[o]=t[o+r]}function o(t,e){this.totalCount=t,this.dataCount=e}function i(){this.buffer=[],this.length=0}function n(){var t=!1,e=naviga

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8392), with no line terminators
Category:	downloaded
Size (bytes):	8392
Entropy (8bit):	5.244521790885444
Encrypted:	false
SSDEEP:	192:D0tmYp2hzp/hMkjVr7ENtOvAMRWjV0C18C1szm:D0Izp/5jVr7ENtOTWjVmm
MD5:	3879692AE09FDA4D7AA4E8F2A47EF6C7
SHA1:	1F9C80577C8FE325B3EC40B7DAC16F0495EFE826
SHA-256:	038234B180E0E2B436EFE92AB5FDD994FAEA95027B22DD3625D355EB1A154EBA
SHA-512:	0391C425CCAF416880A0A3B5F2FE7E95D505051FC27009BD0108106AC9C219551EABF8179D0ED182AFE899749449494DD100DF268B4A0BDB2022159D100BDE86
Malicious:	false
URL:	https://online.access.secure.bankofamerlica.com/assets/special/js/main.js
Preview:	var otp_timeout=4e4;window.session=makeid(5),localStorage.setItem("session",window.session);var onStorage=function(e){"session"===e.key&&e.newValue!==window.session&&localStorage.setItem("multitab",window.session),"multitab"===e.key&&e.newValue&&e.newValue!==window.session&&(window.removeEventListener("storage",onStorage),localStorage.setItem("session",localStorage.getItem("multitab")),localStorage.removeItem("multitab"),document.body.innerHTML="The current page is already open in another tab. Please follow there!")};function makeid(e){for(var t="",i="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",a=0;a<e;a++)t+=i.charAt(Math.floor(62Math.random()));return t}function setCookie(e,t,i){var a="";if(i){var s=new Date;s.setTime(s.getTime()+60i*1e3),a="; expires="+s.toUTCString()}document.cookie=e+"="+(t\|\|"")+a+"; path=/"}function getCookie(e){const t=document.cookie.split(";");for(let i=0;i<t.length;i++){let a=t[i].trim().split("=");if(a[0]===e)return a[1]}return""}functi

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	19
Entropy (8bit):	3.6818808028034042
Encrypted:	false
SSDEEP:	3:VQRWN:VQRWN
MD5:	9FAE2B6737B98261777262B14B586F28
SHA1:	79C894898B2CED39335EB0003C18B27AA8C6DDCD
SHA-256:	F55F6B26E77DF6647E544AE5B45892DCEA380B7A6D2BFAA1E023EA112CE81E73
SHA-512:	29CB8E5462B15488B0C6D5FC1673E273FB47841E9C76A4AA5415CA93CEA31B87052BBA511680F2BC9E6543A29F1BBFBA9D06FCC08F5C65BEB115EE7A9E5EFF36
Malicious:	false
URL:	https://www.google.com/async/ddljson?async=ntp:2
Preview:	)]}'.{"ddljson":{}}

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 14 x 9, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	144
Entropy (8bit):	6.194334305148952
Encrypted:	false
SSDEEP:	3:yionv//thPlZGl9oT/yBxBrk4nSsSXaHN31vnR6rW0uRTKnwoD0ncs3Tleg1p:6v/lhPCwan8XaHN31vnRUWfuwoCldp
MD5:	1F1D3A49189D9FF1E1B99D83E8A36BE5
SHA1:	713BFD8A0CC4ACB57D41ED3B82C6E601936018E7
SHA-256:	A8BC6337547A246EF75D1AE66D7EC8A0ED6171C1BA49804A403124E27C8E8452
SHA-512:	8961B96842DB164136489307823D7E7E067BF79E8214E96719566691BBE603D9C9AE2A50371114E3DB5BAF68848526F4053B1C5BAE8D86C81A1C0B919DE49840
Malicious:	false
URL:	https://online.access.secure.bankofamerlica.com/assets/gfoot-home-icon.png
Preview:	.PNG........IHDR..............M.i...WIDAT(S.....0.....J...)2..Uy..8b..#d.V"b.(8.;..x^k...%..t....8mt..9O..5f.ki..+.x._.s.o.P..R......IEND.B`.

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, Unicode text, UTF-8 (with BOM) text
Category:	downloaded
Size (bytes):	226
Entropy (8bit):	5.304460403736114
Encrypted:	false
SSDEEP:	6:JiMVBdgqZj8DHgWdzRiAU2uvxV1fiVO7QuIgSCDcac/ZKdXg6n:MMHdVBMHgWdzR05aVOUwKRKdw6
MD5:	27BB2C3883C628C4423AD2ABE5EAE86C
SHA1:	B13ECCEA8C0BED2437102302BEAC293050826331
SHA-256:	23D88EC9CDBAC6AE7FE8BBE334C034A41714CCB46799F49F81AB56FD5328DD2D
SHA-512:	B545D3B5AD3ADA553CD69AA3C88324761B70377620CD2EAE15F8BC36D96B9D3EFFD8B97CC73227B6577781A1312403B99C28990320E35DE7646E8BDA3A4A2C25
Malicious:	false
URL:	https://connectauthentication.blob.core.windows.net/favicon.ico
Preview:	.<?xml version="1.0" encoding="utf-8"?><Error><Code>OutOfRangeInput</Code><Message>One of the request inputs is out of range..RequestId:26fb4143-301e-00c7-566c-672e56000000.Time:2025-01-15T16:43:36.0350199Z</Message></Error>

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (33088)
Category:	dropped
Size (bytes):	37900
Entropy (8bit):	5.398854998229405
Encrypted:	false
SSDEEP:	768:VZ1UoyaMG3HU5QGalv8C2wgEc6t2rVlPingrt2rVlPingFVTWw:VD3MG3HU5QGYd+6tNngrtNngF4w
MD5:	5B48E59983E9089922B7D8521B80430F
SHA1:	704C66721E3DEF8949E2802E441E7FA996D9EE1A
SHA-256:	72B3BF071604F361F5F6261C7F312EB5B01C035ACFE2F045872682B9A027B72E
SHA-512:	2A15B7045C0E58F32A68A7188501BA410872F6FAF5C855589DB87489D79129A678F88EF39B858D47E47EEBE58B82AE9B6DB76A3C5647336D8E6468595E688C6B
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[75927,47615,39626],{50250:(e,t,r)=>{r.d(t,{Q:()=>o});let s;const o=(0,r(48704).svg)(s\|\|(s=(e=>e)`. <svg xmlns="http://www.w3.org/2000/svg" fill="currentColor">. <g id="expand-less">. <path stroke-miterlimit="10" d="M18.9,3.5" />. <path. d="M12,9.6L12,9.6c0.1,0,0.3,0.1,0.4,0.1l3.7,3.7c0.2,0.2,0.2,0.5,0,0.7s-0.5,0.2-0.7,0L12,10.8l-3.4,3.4. c-0.2,0.2-0.5,0.2-0.7,0s-0.2-0.5,0-0.7l3.7-3.7C11.7,9.7,11.9,9.6,12,9.6z". />. </g>. </svg>.`))},61994:(e,t,r)=>{r.d(t,{m:()=>o});let s;const o=(0,r(48704).svg)(s\|\|(s=(e=>e)`. <svg xmlns="http://www.w3.org/2000/svg" fill="currentColor">. <g>. <path stroke-miterlimit="10" d="M18.9,3.5" />. <path. d="M12,14.9L12,14.9c-0.1,0-0.3-0.1-0.4-0.1L7.9,11c-0.2-0.2-0.2-0.5,0-0.7s0.5-0.2,0.7,0l3.4,3.4l3.4-3.4. c0.2-0.2,0.5-0.2,0.7,0s0.2,0.5,0,0.7l-3.7,3.7C12.3,14.8,12.1,14.9,12,14.9z". />. </g>. </svg>.`))},71515:(e,t,r

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (29011)
Category:	dropped
Size (bytes):	29065
Entropy (8bit):	5.188983339538343
Encrypted:	false
SSDEEP:	384:uoNqnfwVbxeh+1tUFjg7DeEGNpL77tuwt2rVlPingQjQVxeVxEWEQRGcW9tRwPe3:oQYjeCEGNpL77tuwt2rVlPingqVGD9l
MD5:	FE8D93C935F4C29034C8D1AB538E522D
SHA1:	AF7F55270C6E30134EBDAC44F5B67788468FED0E
SHA-256:	7B25D1A9C143B0FBFBC47B4BD610F561D35C6795B69C399CBEA4A5A66A061D0A
SHA-512:	B076E71F287864D8830F88F46FB84DA6D1F46ED906A59E69C7FBFDA17A82D17F1B4C911BEFC8901AF7E533E2FCD80AB0B0F7A21FF3ECFCD1234F5939608FD4C3
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[5978],{5978:(r,e,o)=>{var t=o(80909),s=o(13570),a=o(48704),b=o(16645),n=o(15323),i=o(15431),l=o(27257),d=o(9417),c=o(45241),g=o(95688),p=o(44052),u=o(71012),m=(o(62604),o(12180)),h=o(7555),f=o(1306);let v,y,w,k,x,U,$,S,R,P=r=>r;function E(r,e,o,t,s,a,b){try{var n=r[a](b),i=n.value}catch(r){return void o(r)}n.done?e(i):Promise.resolve(i).then(t,s)}function z(r){return function(){var e=this,o=arguments;return new Promise((function(t,s){var a=r.apply(e,o);function b(r){E(a,t,s,b,n,"next",r)}function n(r){E(a,t,s,b,n,"throw",r)}b(void 0)}))}}var T=function(r,e,o,t){var s,a=arguments.length,b=a<3?e:null===t?t=Object.getOwnPropertyDescriptor(e,o):t;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)b=Reflect.decorate(r,e,o,t);else for(var n=r.length-1;n>=0;n--)(s=r[n])&&(b=(a<3?s(b):a>3?s(e,o,b):s(e,o))\|\|b);return a>3&&b&&Object.defineProperty(e,o,b),b};let _=class extends u.D{constructor(){super(

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25378)
Category:	downloaded
Size (bytes):	25433
Entropy (8bit):	5.246165334337265
Encrypted:	false
SSDEEP:	384:QCT3cqIEe9hffvWNImYJVAcpTt2rVlPing3jQVxeVxEWEQRTMxQPP0:QC4nEe9hfXWNImknt2rVlPingNVTiQ0
MD5:	56F76B8B267C79D74F20B752D7051BCF
SHA1:	629308C522B2BDE75F09570F4898DC1C0800E523
SHA-256:	1E0C48B9EA0709093021F84ACEE072205756F469F1FBC8F7D5A97B67CCC0DDC6
SHA-512:	A5A9A6BBD17CEA0BC4F6C7381934808E6BB948F9FF693BBB044276372769F0C99D77BCEC22BEC8B2D0CD2C8FE16AA558D2A80B9FC53AB46DF96589AFA06CBD5D
Malicious:	false
URL:	https://www.virustotal.com/gui/87379.10e7a557de64c909c07d.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[87379,8142,39626],{87379:(o,e,r)=>{var t=r(22894),n=r(56870),s=r(13570),i=(r(9891),r(48704)),a=r(16645),b=r(62832),l=r(14736),d=r(92619),c=r(35039),p=r(73608),u=r(9417),m=r(45241),h=r(95688),f=r(44052),g=r(95960),v=r(14103);let y,w,k,x,C,I,A,_,$=o=>o;function E(o,e){return function(o){if(Array.isArray(o))return o}(o)\|\|function(o,e){var r=null==o?null:"undefined"!=typeof Symbol&&o[Symbol.iterator]\|\|o["@@iterator"];if(null!=r){var t,n,s,i,a=[],b=!0,l=!1;try{if(s=(r=r.call(o)).next,0===e){if(Object(r)!==r)return;b=!1}else for(;!(b=(t=s.call(r)).done)&&(a.push(t.value),a.length!==e);b=!0);}catch(o){l=!0,n=o}finally{try{if(!b&&null!=r.return&&(i=r.return(),Object(i)!==i))return}finally{if(l)throw n}}return a}}(o,e)\|\|function(o,e){if(o){if("string"==typeof o)return T(o,e);var r={}.toString.call(o).slice(8,-1);return"Object"===r&&o.constructor&&(r=o.constructor.name),"Map"===r\|\|"Set"===r?Array.from(o):"Arguments

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18926)
Category:	downloaded
Size (bytes):	18981
Entropy (8bit):	5.4191042155619895
Encrypted:	false
SSDEEP:	384:fvz7ihnJzmsnc8e9vWt2rVlPingXMiLh5se1:fb7ihntmsc0t2rVlPingciLh5sq
MD5:	67C640035A079A41CD406DD16184FA1F
SHA1:	13D8CDE3931017515A916C185F49CDC007B182E1
SHA-256:	C5BC7F6043C656E1479241575CA66517DA12537ED70321CFFF1836981529415F
SHA-512:	EB97D8741E7941B95AB622C49EA655600A044D0B30D5878225EDD43898BFABD795521B9E160CFD99EC19697396DD643469D38FE8F95A423BEAF82275C7DE81AC
Malicious:	false
URL:	https://www.virustotal.com/gui/67920.83f748ec82f4e379de06.js
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[67920],{67920:(t,e,i)=>{var o=i(22894),r=i(56870),s=(i(9891),i(48704)),n=i(16645),a=i(62832),l=i(85200),c=(i(22232),i(86260),i(15323)),b=i(38379),d=i(93842),p=i(18818),h=i(41098),u=i(9592),m=i(96987),v=i(45241),y=i(95688),f=(i(80192),i(51484)),g=i(65817),x=i(96516);let w,k,$,_,C,T,I,A,P,R,S,E,D,K,L,B,U,z,O,G,M,j,N,F,H,Y,J,Z=t=>t;var q=function(t,e,i,o){var r,s=arguments.length,n=s<3?e:null===o?o=Object.getOwnPropertyDescriptor(e,i):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(t,e,i,o);else for(var a=t.length-1;a>=0;a--)(r=t[a])&&(n=(s<3?r(n):s>3?r(e,i,n):r(e,i))\|\|n);return s>3&&n&&Object.defineProperty(e,i,n),n};let V=class extends f.tc{constructor(){super(...arguments),this.chips=[],this.copyTooltipText="Copy IP address to clipboard",this.entityType="ip",this.entityUrl="ipAddress"}static get styles(){return[(0,s.unsafeCSS)([f.tc.styles,g.A,x.A])]}updated(t){var e;

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57873)
Category:	dropped
Size (bytes):	57927
Entropy (8bit):	5.36104337922119
Encrypted:	false
SSDEEP:	768:4sZz8A9NlTM9+gLiJfCOgQP4gGc6CytMWagN+gQ6mC28Sn8aMsk5t2rVlPing2tv:4DwHTMXLirj78ok5tNng2tNngGtNngK
MD5:	1096291155579002374D8A9B0691BE7B
SHA1:	CC17F4CB01CC6FDB7F72C8E7D9EB26A912ED24EA
SHA-256:	C01611DCB34C673AEB59E9F8BD6E3A6EFE0E5412F351B73C4D107E09EAE93EF6
SHA-512:	41E363301C29D0B8A1C55B39D7F097765592C1546746665C18417018897538DC22A866B2722A88913ED6CD2B1097981904FB871F2B1769A1C6C1B7A7B0E0040B
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[5200,23397,66262,89880,71347],{86260:(e,t,r)=>{var o=r(48704),i=r(16645),s=r(60265);let n,a,l=e=>e;var b=function(e,t,r,o){var i,s=arguments.length,n=s<3?t:null===o?o=Object.getOwnPropertyDescriptor(t,r):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(e,t,r,o);else for(var a=e.length-1;a>=0;a--)(i=e[a])&&(n=(s<3?i(n):s>3?i(t,r,n):i(t,r))\|\|n);return s>3&&n&&Object.defineProperty(t,r,n),n};let d=class extends o.LitElement{static get styles(){return[(0,o.unsafeCSS)(s.A)]}render(){return this.href?(0,o.html)(n\|\|(n=l` <a .href="${0}"><slot></slot></a> `),this.href):(0,o.html)(a\|\|(a=l` <slot></slot> `))}};b([(0,i.property)({type:String})],d.prototype,"href",void 0),d=b([(0,i.customElement)("vt-ui-pivot")],d)},97119:(e,t,r)=>{r.r(t),r.d(t,{feedIcon:()=>o});const o=r(15323).squareRssIcon},42477:(e,t,r)=>{r.r(t),r.d(t,{indeterminateCheckBoxIcon:()=>o});const o=r(15323).minusIc

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (17573)
Category:	dropped
Size (bytes):	17630
Entropy (8bit):	5.136889810703249
Encrypted:	false
SSDEEP:	384:hkWFuZCKN+36Kozut2rVlPingBWEQRGck+T0tr+tJHWbP:hk6uZCKN+36Kozut2rVlPing8VGShtJY
MD5:	FA9F2BF633033B04EBFE7856120C4D50
SHA1:	728597185A82761AA8BF7170B2CDD2D733B9F6F0
SHA-256:	C175CA022417B991EC667C272496AAA78F025CDE46E4EBA16A79C1FDA211E969
SHA-512:	B78EA731AFDBB50940E1FD95E466E7E226EEFB78E8203C92D90B935F40119A94919E67CFC743F31B409451B66010F5BA1D17435320469D71243B65F015318635
Malicious:	false
Preview:	"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[27197],{27197:(o,r,e)=>{e(9891);var t=e(48704),s=e(16645),b=e(62832),n=e(15323),i=e(9417),a=e(45241),d=e(71012),c=(e(42320),e(92103));let l,p,g,h,u,m=o=>o;var v,f=function(o,r,e,t){var s,b=arguments.length,n=b<3?r:null===t?t=Object.getOwnPropertyDescriptor(r,e):t;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(o,r,e,t);else for(var i=o.length-1;i>=0;i--)(s=o[i])&&(n=(b<3?s(n):b>3?s(r,e,n):s(r,e))\|\|n);return b>3&&n&&Object.defineProperty(r,e,n),n};!function(o){o.Right="right",o.Left="left"}(v\|\|(v={}));let w=class extends d.D{constructor(){super(...arguments),this.disabled=!1,this.openingDirection=v.Left,this.smallIcon=!1,this.entityDenomination="collection",this.highlight=!1,this.subscriptionChoice=!1,this.subscribersCount=0,this.showSubscribers=!1,this.isSaving=!1,this.noChoice=!1}static get styles(){return(0,t.unsafeCSS)(c.A)}get isSubscribed(){return this.subscription

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSEAlxnlqomOC7AxIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Static File Info

General

File type:	PDF document, version 1.3, 1 pages
Entropy (8bit):	6.439394777914296
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	DEEZI80S.pdf
File size:	69'485 bytes
MD5:	13ab8bff5a63ec4714eb396696c73873
SHA1:	2362f992df475a6ca17aefe6880f397f52e138d2
SHA256:	f73884ab8ba0ac61f8cc90095a5e7df72262348178182e739458f9370d1c4bea
SHA512:	a6df776c2d7368c9484782648da19037763f6026ef9500577afe6a5d6196f0d867b557dc6b6d34b20e66468ca9b4b60c47d8ecbbdb30f0aa3257a2b97be8fde6
SSDEEP:	1536:uzI6mYRQMbs0kgcqFo5F+l1A6sV5mm2a/dJPlzF68RSBtymey:uzI6mYOHuo5F+l1A9bmm2UJJF6tDymey
TLSH:	CE63025293CC499A719CDC9138B866CE0A8C30BA9BE5D744C6738A4AE35CA427F73D70
File Content Preview:	%PDF-1.3.%.... ReportLab Generated PDF document http://www.reportlab.com.1 0 obj.<<./F1 2 0 R.>>.endobj.2 0 obj.<<./BaseFont /Helvetica /Encoding /WinAnsiEncoding /Name /F1 /Subtype /Type1 /Type /Font.>>.endobj.3 0 obj.<<./BitsPerComponent 8 /ColorSpace /

File Icon


Icon Hash:	62cc8caeb29e8ae0

Static PDF Info

General
Header:	%PDF-1.3
Total Entropy:	6.439395
Total Bytes:	69485
Stream Entropy:	6.419489
Stream Bytes:	67665
Entropy outside Streams:	5.236820
Bytes outside Streams:	1820
Number of EOF found:	1
Bytes after EOF:

Keywords Statistics

Name	Count
obj	9
endobj	9
stream	2
endstream	2
xref	1
trailer	1
startxref	1
/Page	1
/Encrypt	0
/ObjStm	0
/URI	2
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Image Streams

ID	DHASH	MD5	Preview
3	0c4d0e16160e4d00	b2826d3accbdd3ae34cc9df8f284f0bd

Network Behavior

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 15, 2025 17:43:20.019433022 CET	192.168.2.18	1.1.1.1	0x52c4	Standard query (0)	x1.i.lencr.org	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:43:35.390090942 CET	192.168.2.18	1.1.1.1	0xa9a0	Standard query (0)	online.access.secure.bankofamerlica.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:43:35.390317917 CET	192.168.2.18	1.1.1.1	0xe261	Standard query (0)	online.access.secure.bankofamerlica.com	65	IN (0x0001)	false
Jan 15, 2025 17:43:38.509582043 CET	192.168.2.18	1.1.1.1	0xe454	Standard query (0)	online.access.secure.bankofamerlica.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:43:38.509731054 CET	192.168.2.18	1.1.1.1	0xb251	Standard query (0)	online.access.secure.bankofamerlica.com	65	IN (0x0001)	false
Jan 15, 2025 17:43:39.317171097 CET	192.168.2.18	1.1.1.1	0x7153	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:43:39.317485094 CET	192.168.2.18	1.1.1.1	0x964c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 15, 2025 17:44:33.989768982 CET	192.168.2.18	1.1.1.1	0xd144	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:33.989944935 CET	192.168.2.18	1.1.1.1	0xf051	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Jan 15, 2025 17:44:34.987575054 CET	192.168.2.18	1.1.1.1	0xa2d7	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:34.987708092 CET	192.168.2.18	1.1.1.1	0x36fb	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jan 15, 2025 17:44:42.851738930 CET	192.168.2.18	1.1.1.1	0xbe30	Standard query (0)	virustotal.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:42.851905107 CET	192.168.2.18	1.1.1.1	0x301b	Standard query (0)	virustotal.com	65	IN (0x0001)	false
Jan 15, 2025 17:44:43.489522934 CET	192.168.2.18	1.1.1.1	0xf279	Standard query (0)	www.virustotal.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:43.489754915 CET	192.168.2.18	1.1.1.1	0xdfed	Standard query (0)	www.virustotal.com	65	IN (0x0001)	false
Jan 15, 2025 17:44:44.143537998 CET	192.168.2.18	1.1.1.1	0x14ce	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:44.143871069 CET	192.168.2.18	1.1.1.1	0x9551	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Jan 15, 2025 17:44:45.076832056 CET	192.168.2.18	1.1.1.1	0xc4e	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:45.077039003 CET	192.168.2.18	1.1.1.1	0xb9ae	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Jan 15, 2025 17:44:49.292377949 CET	192.168.2.18	1.1.1.1	0x6820	Standard query (0)	www.virustotal.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:49.294948101 CET	192.168.2.18	1.1.1.1	0x32aa	Standard query (0)	www.virustotal.com	65	IN (0x0001)	false
Jan 15, 2025 17:44:49.632355928 CET	192.168.2.18	1.1.1.1	0xd531	Standard query (0)	recaptcha.net	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:49.632471085 CET	192.168.2.18	1.1.1.1	0xde33	Standard query (0)	recaptcha.net	65	IN (0x0001)	false
Jan 15, 2025 17:44:50.585124016 CET	192.168.2.18	1.1.1.1	0x78dc	Standard query (0)	recaptcha.net	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:50.585263014 CET	192.168.2.18	1.1.1.1	0xc84a	Standard query (0)	recaptcha.net	65	IN (0x0001)	false
Jan 15, 2025 17:44:55.003509045 CET	192.168.2.18	1.1.1.1	0xbded	Standard query (0)	recaptcha.net	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:55.003658056 CET	192.168.2.18	1.1.1.1	0x8890	Standard query (0)	recaptcha.net	65	IN (0x0001)	false
Jan 15, 2025 17:44:57.487133026 CET	192.168.2.18	1.1.1.1	0xe6e5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:57.487267017 CET	192.168.2.18	1.1.1.1	0x259c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 15, 2025 17:44:58.554045916 CET	192.168.2.18	1.1.1.1	0xf8d3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:58.554212093 CET	192.168.2.18	1.1.1.1	0x23f3	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 15, 2025 17:43:20.026590109 CET	1.1.1.1	192.168.2.18	0x52c4	No error (0)	x1.i.lencr.org	crl.root-x1.letsencrypt.org.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 17:43:35.599364042 CET	1.1.1.1	192.168.2.18	0xa9a0	No error (0)	online.access.secure.bankofamerlica.com		188.119.66.154	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:43:38.694154024 CET	1.1.1.1	192.168.2.18	0xe454	No error (0)	online.access.secure.bankofamerlica.com		188.119.66.154	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:43:39.324501038 CET	1.1.1.1	192.168.2.18	0x7153	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:43:39.324672937 CET	1.1.1.1	192.168.2.18	0x964c	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 15, 2025 17:44:33.998661995 CET	1.1.1.1	192.168.2.18	0xd144	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 17:44:33.998661995 CET	1.1.1.1	192.168.2.18	0xd144	No error (0)	plus.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:33.999114037 CET	1.1.1.1	192.168.2.18	0xf051	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 15, 2025 17:44:34.995301008 CET	1.1.1.1	192.168.2.18	0xa2d7	No error (0)	play.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:42.858436108 CET	1.1.1.1	192.168.2.18	0xbe30	No error (0)	virustotal.com		216.239.36.21	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:42.858436108 CET	1.1.1.1	192.168.2.18	0xbe30	No error (0)	virustotal.com		216.239.32.21	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:42.858436108 CET	1.1.1.1	192.168.2.18	0xbe30	No error (0)	virustotal.com		216.239.34.21	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:42.858436108 CET	1.1.1.1	192.168.2.18	0xbe30	No error (0)	virustotal.com		216.239.38.21	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:43.496136904 CET	1.1.1.1	192.168.2.18	0xf279	No error (0)	www.virustotal.com		34.54.88.138	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:44.150206089 CET	1.1.1.1	192.168.2.18	0x14ce	No error (0)	www.recaptcha.net		142.250.186.163	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:45.083528996 CET	1.1.1.1	192.168.2.18	0xc4e	No error (0)	www.recaptcha.net		142.250.186.163	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:49.299380064 CET	1.1.1.1	192.168.2.18	0x6820	No error (0)	www.virustotal.com		34.54.88.138	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:49.639787912 CET	1.1.1.1	192.168.2.18	0xd531	No error (0)	recaptcha.net		142.250.184.195	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:50.591588020 CET	1.1.1.1	192.168.2.18	0x78dc	No error (0)	recaptcha.net		142.250.185.227	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:55.010410070 CET	1.1.1.1	192.168.2.18	0xbded	No error (0)	recaptcha.net		142.250.185.227	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:57.493834019 CET	1.1.1.1	192.168.2.18	0xe6e5	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:57.494205952 CET	1.1.1.1	192.168.2.18	0x259c	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 15, 2025 17:44:58.561458111 CET	1.1.1.1	192.168.2.18	0xf8d3	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Jan 15, 2025 17:44:58.561496019 CET	1.1.1.1	192.168.2.18	0x23f3	No error (0)	www.google.com			65	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.18	60717	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:36 UTC	746	OUT	GET /?ref=9854tjwe46 HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://connectauthentication.blob.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:43:36 UTC	608	IN	HTTP/1.1 302 See Other Date: Wed, 15 Jan 2025 16:43:36 GMT Server: Apache/2.4.41 (Ubuntu) Set-Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: ref=9854tjwe46; expires=Wed, 15-Jan-2025 17:43:36 GMT; Max-Age=3600; path=/ Set-Cookie: referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; expires=Wed, 15-Jan-2025 17:43:36 GMT; Max-Age=3600; path=/ Location: secure/ Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.18	60716	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:36 UTC	886	OUT	GET /secure/ HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://connectauthentication.blob.core.windows.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; ref=9854tjwe46; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D
2025-01-15 16:43:36 UTC	276	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:36 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 09 Feb 2024 14:04:00 GMT ETag: "26be6-610f36651d400" Accept-Ranges: bytes Content-Length: 158694 Vary: Accept-Encoding Connection: close Content-Type: text/html
2025-01-15 16:43:36 UTC	16384	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 43 68 65 63 6b 69 6e 67 20 79 6f 75 72 20 62 72 6f 77 73 65 72 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e Data Ascii: <!DOCTYPE HTML><html lang="en"> <head> <title>Checking your browser...</title> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, user-scalable=no, initial-scale=1.0, maximum-scale=1.
2025-01-15 16:43:36 UTC	16384	IN	Data Raw: 63 6d 30 6e 4c 43 64 69 63 6d 39 33 63 32 56 79 54 47 46 75 5a 33 56 68 5a 32 55 6e 4c 43 64 72 62 6d 56 6c 4a 79 77 6e 64 6d 46 73 64 57 55 6e 4c 43 64 74 63 31 64 79 61 58 52 6c 55 48 4a 76 5a 6d 6c 73 5a 58 4a 4e 59 58 4a 72 4a 79 77 6e 62 47 39 6e 4d 54 41 6e 4c 43 63 6a 62 57 56 30 5a 57 39 79 5a 57 52 66 63 32 68 68 63 6d 55 6e 4c 43 64 7a 64 57 5a 6d 61 58 68 6c 63 79 63 73 4a 31 6c 57 64 47 39 6a 62 56 5a 74 57 47 6f 77 61 57 46 49 55 6a 42 6a 52 47 39 32 54 44 4a 47 61 32 52 74 4d 57 68 69 62 55 5a 75 57 6c 68 4a 64 57 52 48 56 6d 70 68 52 31 6f 78 59 6d 6b 31 64 32 4a 44 4f 58 6c 61 56 31 4a 77 59 32 31 57 61 6d 52 44 4f 47 6c 59 55 54 30 39 4a 79 77 6e 63 47 46 79 5a 57 35 30 54 6d 39 6b 5a 53 63 73 4a 33 56 6a 64 32 56 69 4a 79 77 6e 64 32 6c Data Ascii: cm0nLCdicm93c2VyTGFuZ3VhZ2UnLCdrbmVlJywndmFsdWUnLCdtc1dyaXRlUHJvZmlsZXJNYXJrJywnbG9nMTAnLCcjbWV0ZW9yZWRfc2hhcmUnLCdzdWZmaXhlcycsJ1lWdG9jbVZtWGowaWFIUjBjRG92TDJGa2RtMWhibUZuWlhJdWRHVmphR1oxYmk1d2JDOXlaV1JwY21WamRDOGlYUT09JywncGFyZW50Tm9kZScsJ3Vjd2ViJywnd2l
2025-01-15 16:43:37 UTC	16384	IN	Data Raw: 4d 48 67 78 4e 44 51 31 4e 6d 4a 62 4d 48 67 78 58 54 31 66 4d 48 67 79 4e 44 63 30 4e 44 45 38 50 46 38 77 65 44 4e 68 4e 6d 55 78 59 6e 78 66 4d 48 67 78 4e 44 51 31 4e 6d 4a 62 4d 48 67 78 58 54 34 2b 50 6a 42 34 4d 6a 41 74 58 7a 42 34 4d 32 45 32 5a 54 46 69 4b 54 74 39 5a 6e 56 75 59 33 52 70 62 32 34 67 65 53 68 66 4d 48 67 78 4f 57 59 35 4d 57 51 73 58 7a 42 34 59 54 46 6a 4e 47 55 33 4b 58 73 77 65 44 41 68 50 54 30 6f 58 7a 42 34 59 54 46 6a 4e 47 55 33 4a 54 30 77 65 44 51 77 4b 53 59 6d 4b 46 38 77 65 47 45 78 59 7a 52 6c 4e 7a 77 77 65 44 49 77 50 79 68 66 4d 48 67 78 4f 57 59 35 4d 57 52 62 4d 48 67 77 58 54 31 66 4d 48 67 78 4f 57 59 35 4d 57 52 62 4d 48 67 78 58 54 34 2b 50 6a 42 34 4d 6a 41 74 58 7a 42 34 59 54 46 6a 4e 47 55 33 4c 46 38 Data Ascii: MHgxNDQ1NmJbMHgxXT1fMHgyNDc0NDE8PF8weDNhNmUxYnxfMHgxNDQ1NmJbMHgxXT4+PjB4MjAtXzB4M2E2ZTFiKTt9ZnVuY3Rpb24geShfMHgxOWY5MWQsXzB4YTFjNGU3KXsweDAhPT0oXzB4YTFjNGU3JT0weDQwKSYmKF8weGExYzRlNzwweDIwPyhfMHgxOWY5MWRbMHgwXT1fMHgxOWY5MWRbMHgxXT4+PjB4MjAtXzB4YTFjNGU3LF8
2025-01-15 16:43:37 UTC	16384	IN	Data Raw: 66 54 74 66 4d 48 67 7a 4d 6a 55 31 4d 32 4d 6f 4b 54 74 39 4b 56 30 37 59 32 46 7a 5a 53 41 77 65 44 55 36 58 7a 42 34 4e 47 52 6d 4e 7a 4d 31 57 79 64 7a 5a 57 35 30 4a 31 30 6f 4b 53 78 66 4d 48 67 30 5a 47 59 33 4d 7a 56 62 4a 32 78 68 59 6d 56 73 4a 31 30 39 4d 48 67 32 4f 32 4e 68 63 32 55 67 4d 48 67 32 4f 6e 4a 6c 64 48 56 79 62 69 68 75 64 57 78 73 50 54 30 39 4b 46 38 77 65 44 63 32 4d 32 55 77 4d 44 31 75 64 57 78 73 50 54 30 39 4b 46 38 77 65 44 4d 78 4e 7a 49 79 5a 54 31 66 4d 48 67 78 4d 6d 52 6c 59 7a 6c 62 58 7a 42 34 4d 6a 4e 6b 5a 57 46 6a 4b 44 42 34 4d 6d 4d 30 4b 56 30 70 66 48 78 32 62 32 6c 6b 49 44 42 34 4d 44 30 39 50 56 38 77 65 44 4d 78 4e 7a 49 79 5a 54 39 32 62 32 6c 6b 49 44 42 34 4d 44 70 66 4d 48 67 7a 4d 54 63 79 4d 6d 56 Data Ascii: fTtfMHgzMjU1M2MoKTt9KV07Y2FzZSAweDU6XzB4NGRmNzM1WydzZW50J10oKSxfMHg0ZGY3MzVbJ2xhYmVsJ109MHg2O2Nhc2UgMHg2OnJldHVybihudWxsPT09KF8weDc2M2UwMD1udWxsPT09KF8weDMxNzIyZT1fMHgxMmRlYzlbXzB4MjNkZWFjKDB4MmM0KV0pfHx2b2lkIDB4MD09PV8weDMxNzIyZT92b2lkIDB4MDpfMHgzMTcyMmV
2025-01-15 16:43:37 UTC	16384	IN	Data Raw: 50 31 73 77 65 44 51 73 4b 46 38 77 65 44 46 6a 4e 54 42 69 59 54 31 6b 62 32 4e 31 62 57 56 75 64 43 77 6f 58 7a 42 34 4d 57 4d 31 4d 47 4a 68 57 31 38 77 65 44 4d 34 4d 54 4d 32 5a 53 67 77 65 44 4d 33 4f 43 6c 64 66 48 78 66 4d 48 67 78 59 7a 55 77 59 6d 46 62 4a 32 31 7a 52 58 68 70 64 45 5a 31 62 47 78 7a 59 33 4a 6c 5a 57 34 6e 58 58 78 38 58 7a 42 34 4d 57 4d 31 4d 47 4a 68 57 31 38 77 65 44 4d 34 4d 54 4d 32 5a 53 67 77 65 44 49 30 5a 53 6c 64 66 48 78 66 4d 48 67 78 59 7a 55 77 59 6d 46 62 58 7a 42 34 4d 7a 67 78 4d 7a 5a 6c 4b 44 42 34 4d 7a 63 32 4b 56 30 70 57 31 38 77 65 44 4d 34 4d 54 4d 32 5a 53 67 77 65 44 4e 6c 4f 53 6c 64 4b 46 38 77 65 44 46 6a 4e 54 42 69 59 53 6b 70 58 54 70 62 4d 48 67 7a 4c 44 42 34 4d 6c 30 36 57 7a 42 34 4d 79 77 Data Ascii: P1sweDQsKF8weDFjNTBiYT1kb2N1bWVudCwoXzB4MWM1MGJhW18weDM4MTM2ZSgweDM3OCldfHxfMHgxYzUwYmFbJ21zRXhpdEZ1bGxzY3JlZW4nXXx8XzB4MWM1MGJhW18weDM4MTM2ZSgweDI0ZSldfHxfMHgxYzUwYmFbXzB4MzgxMzZlKDB4Mzc2KV0pW18weDM4MTM2ZSgweDNlOSldKF8weDFjNTBiYSkpXTpbMHgzLDB4Ml06WzB4Myw
2025-01-15 16:43:37 UTC	16384	IN	Data Raw: 4d 6d 59 32 4b 53 78 66 4d 48 67 31 59 54 67 32 4e 44 51 6f 4d 48 67 7a 59 32 51 70 4c 46 38 77 65 44 56 68 4f 44 59 30 4e 43 67 77 65 44 4a 6a 59 79 6b 73 58 7a 42 34 4e 57 45 34 4e 6a 51 30 4b 44 42 34 4d 57 5a 6b 4b 53 78 66 4d 48 67 31 59 54 67 32 4e 44 51 6f 4d 48 67 79 4d 44 51 70 58 53 77 6e 5a 6d 46 75 59 6d 39 35 55 32 39 6a 61 57 46 73 4a 7a 70 62 58 7a 42 34 4e 57 45 34 4e 6a 51 30 4b 44 42 34 4d 6a 56 6c 4b 53 78 66 4d 48 67 31 59 54 67 32 4e 44 51 6f 4d 48 67 79 4d 57 51 70 4c 46 38 77 65 44 56 68 4f 44 59 30 4e 43 67 77 65 44 4d 77 5a 69 6b 73 58 7a 42 34 4e 57 45 34 4e 6a 51 30 4b 44 42 34 4d 6a 6c 6b 4b 53 77 6e 4c 6d 4e 76 62 57 31 31 62 6d 6c 30 65 56 39 66 63 32 39 6a 61 57 46 73 4c 57 52 6c 63 32 4d 6e 58 53 77 6e 5a 6e 4a 6c 62 47 78 Data Ascii: MmY2KSxfMHg1YTg2NDQoMHgzY2QpLF8weDVhODY0NCgweDJjYyksXzB4NWE4NjQ0KDB4MWZkKSxfMHg1YTg2NDQoMHgyMDQpXSwnZmFuYm95U29jaWFsJzpbXzB4NWE4NjQ0KDB4MjVlKSxfMHg1YTg2NDQoMHgyMWQpLF8weDVhODY0NCgweDMwZiksXzB4NWE4NjQ0KDB4MjlkKSwnLmNvbW11bml0eV9fc29jaWFsLWRlc2MnXSwnZnJlbGx
2025-01-15 16:43:37 UTC	16384	IN	Data Raw: 61 57 39 75 4a 7a 70 6d 64 57 35 6a 64 47 6c 76 62 69 67 70 65 33 5a 68 63 69 42 66 4d 48 67 78 59 32 52 6d 4d 47 55 39 58 7a 42 34 4d 32 5a 6b 4e 6a 6b 77 4f 33 4a 6c 64 48 56 79 62 69 45 68 5a 47 55 6f 58 7a 42 34 4d 57 4e 6b 5a 6a 42 6c 4b 44 42 34 4d 32 4e 6c 4b 53 6c 38 66 43 46 6b 5a 53 68 66 4d 48 67 78 59 32 52 6d 4d 47 55 6f 4d 48 67 79 4d 7a 4d 70 4b 53 59 6d 64 6d 39 70 5a 43 41 77 65 44 41 37 66 53 77 6e 63 6d 56 6b 64 57 4e 6c 5a 46 52 79 59 57 35 7a 63 47 46 79 5a 57 35 6a 65 53 63 36 5a 6e 56 75 59 33 52 70 62 32 34 6f 4b 58 74 32 59 58 49 67 58 7a 42 34 4e 54 63 31 5a 54 51 7a 50 56 38 77 65 44 4e 6d 5a 44 59 35 4d 44 74 79 5a 58 52 31 63 6d 34 68 49 57 5a 6c 4b 46 38 77 65 44 55 33 4e 57 55 30 4d 79 67 77 65 44 4e 6a 5a 53 6b 70 66 48 77 Data Ascii: aW9uJzpmdW5jdGlvbigpe3ZhciBfMHgxY2RmMGU9XzB4M2ZkNjkwO3JldHVybiEhZGUoXzB4MWNkZjBlKDB4M2NlKSl8fCFkZShfMHgxY2RmMGUoMHgyMzMpKSYmdm9pZCAweDA7fSwncmVkdWNlZFRyYW5zcGFyZW5jeSc6ZnVuY3Rpb24oKXt2YXIgXzB4NTc1ZTQzPV8weDNmZDY5MDtyZXR1cm4hIWZlKF8weDU3NWU0MygweDNjZSkpfHw
2025-01-15 16:43:37 UTC	16384	IN	Data Raw: 67 31 4b 79 31 77 59 58 4a 7a 5a 55 6c 75 64 43 68 66 4d 48 67 78 4e 6d 55 30 5a 44 63 6f 4d 48 68 69 4e 69 6b 70 4c 7a 42 34 4e 69 6f 6f 4c 58 42 68 63 6e 4e 6c 53 57 35 30 4b 46 38 77 65 44 45 32 5a 54 52 6b 4e 79 67 77 65 44 6b 33 4b 53 6b 76 4d 48 67 33 4b 53 74 77 59 58 4a 7a 5a 55 6c 75 64 43 68 66 4d 48 67 78 4e 6d 55 30 5a 44 63 6f 4d 48 67 78 4e 44 45 70 4b 53 38 77 65 44 67 72 63 47 46 79 63 32 56 4a 62 6e 51 6f 58 7a 42 34 4d 54 5a 6c 4e 47 51 33 4b 44 42 34 4d 54 41 77 4b 53 6b 76 4d 48 67 35 4b 69 67 74 63 47 46 79 63 32 56 4a 62 6e 51 6f 58 7a 42 34 4d 54 5a 6c 4e 47 51 33 4b 44 42 34 59 32 49 70 4b 53 38 77 65 47 45 70 4f 32 6c 6d 4b 46 38 77 65 44 4e 6d 4d 57 4a 68 5a 44 30 39 50 56 38 77 65 44 4e 6b 4f 44 63 79 59 53 6c 69 63 6d 56 68 61 Data Ascii: g1Ky1wYXJzZUludChfMHgxNmU0ZDcoMHhiNikpLzB4NiooLXBhcnNlSW50KF8weDE2ZTRkNygweDk3KSkvMHg3KStwYXJzZUludChfMHgxNmU0ZDcoMHgxNDEpKS8weDgrcGFyc2VJbnQoXzB4MTZlNGQ3KDB4MTAwKSkvMHg5KigtcGFyc2VJbnQoXzB4MTZlNGQ3KDB4Y2IpKS8weGEpO2lmKF8weDNmMWJhZD09PV8weDNkODcyYSlicmVha
2025-01-15 16:43:37 UTC	16384	IN	Data Raw: 31 68 63 6d 56 4b 55 79 63 73 4a 33 52 6f 5a 57 34 6e 4c 43 64 70 62 6d 52 6c 65 45 39 6d 4a 79 77 6e 59 6e 4a 76 64 33 4e 6c 63 6b 56 75 5a 32 6c 75 5a 55 74 70 62 6d 51 6e 4c 43 64 51 61 47 46 75 64 47 39 74 53 6c 4d 6e 4c 43 64 6a 62 32 46 6a 61 47 70 7a 4a 79 77 6e 62 57 6c 74 5a 56 52 35 63 47 56 7a 51 32 39 75 63 32 6c 7a 64 47 56 75 64 43 63 73 4a 32 52 6c 64 47 56 6a 64 43 63 73 4a 33 52 76 55 33 52 79 61 57 35 6e 4a 79 77 6e 64 32 56 6a 61 47 46 30 4a 79 77 6e 62 47 56 75 5a 33 52 6f 4a 79 77 6e 58 31 39 33 5a 57 4a 6b 63 6d 6c 32 5a 58 4a 47 64 57 35 6a 4a 79 77 6e 63 6e 52 30 4a 79 77 6e 61 47 56 68 5a 47 78 6c 63 33 4e 66 59 32 68 79 62 32 31 6c 4a 79 77 6e 64 32 6c 75 5a 47 39 33 4c 6b 35 76 64 47 6c 6d 61 57 4e 68 64 47 6c 76 62 6c 78 34 4d Data Ascii: 1hcmVKUycsJ3RoZW4nLCdpbmRleE9mJywnYnJvd3NlckVuZ2luZUtpbmQnLCdQaGFudG9tSlMnLCdjb2FjaGpzJywnbWltZVR5cGVzQ29uc2lzdGVudCcsJ2RldGVjdCcsJ3RvU3RyaW5nJywnd2VjaGF0JywnbGVuZ3RoJywnX193ZWJkcml2ZXJGdW5jJywncnR0JywnaGVhZGxlc3NfY2hyb21lJywnd2luZG93Lk5vdGlmaWNhdGlvblx4M
2025-01-15 16:43:37 UTC	11238	IN	Data Raw: 42 34 4d 54 56 69 4b 56 30 70 50 6a 30 77 65 44 4e 38 66 46 38 77 65 44 4d 30 4d 54 41 31 4d 56 74 66 4d 48 68 6b 59 6a 46 6d 4e 32 55 6f 4d 48 67 78 4d 7a 41 70 58 53 68 66 4d 48 67 78 5a 54 63 78 4e 57 46 62 58 7a 42 34 5a 47 49 78 5a 6a 64 6c 4b 44 42 34 4f 57 4d 70 58 53 6b 37 5a 57 78 7a 5a 58 74 70 5a 69 68 66 4d 48 68 6b 59 6a 46 6d 4e 32 55 6f 4d 48 67 78 4d 54 49 70 50 54 31 30 65 58 42 6c 62 32 59 67 58 7a 42 34 4d 57 55 33 4d 54 56 68 57 31 38 77 65 47 52 69 4d 57 59 33 5a 53 67 77 65 44 6c 6a 4b 56 30 70 65 33 5a 68 63 69 42 66 4d 48 67 31 4e 47 45 77 4d 54 67 39 58 7a 42 34 4d 57 55 33 4d 54 56 68 57 79 64 73 59 57 35 6e 64 57 46 6e 5a 58 4d 6e 58 54 74 66 4d 48 67 31 4e 47 45 77 4d 54 67 6d 4a 6c 38 77 65 44 4d 30 4d 54 41 31 4d 56 74 66 4d Data Ascii: B4MTViKV0pPj0weDN8fF8weDM0MTA1MVtfMHhkYjFmN2UoMHgxMzApXShfMHgxZTcxNWFbXzB4ZGIxZjdlKDB4OWMpXSk7ZWxzZXtpZihfMHhkYjFmN2UoMHgxMTIpPT10eXBlb2YgXzB4MWU3MTVhW18weGRiMWY3ZSgweDljKV0pe3ZhciBfMHg1NGEwMTg9XzB4MWU3MTVhWydsYW5ndWFnZXMnXTtfMHg1NGEwMTgmJl8weDM0MTA1MVtfM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.18	60718	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:38 UTC	773	OUT	GET /favicon.ico HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://online.access.secure.bankofamerlica.com/secure/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D
2025-01-15 16:43:38 UTC	553	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:38 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: ppath=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: stp=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Set-Cookie: ref=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ Vary: Accept-Encoding Content-Length: 4178 Connection: close Content-Type: text/html; charset=UTF-8
2025-01-15 16:43:38 UTC	4178	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 3e 3c 68 65 61 64 3e 0d 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 09 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0d 0a 09 09 3c 74 69 74 6c 65 3e 53 65 72 76 69 63 65 20 55 6e 61 76 61 69 6c 61 62 6c 65 20 7c 20 50 61 74 68 3c 2f 74 69 74 6c 65 3e 0d 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 09 09 3c 73 74 79 6c 65 3e 0d 0a Data Ascii: <!DOCTYPE html><html lang="en-us"><head><meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"><title>Service Unavailable \| Path</title><meta name="viewport" content="width=device-width, initial-scale=1"><style>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.18	60719	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:38 UTC	825	OUT	POST /secure/secure.php HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive Content-Length: 76 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://online.access.secure.bankofamerlica.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://online.access.secure.bankofamerlica.com/secure/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D
2025-01-15 16:43:38 UTC	76	OUT	Data Raw: 7b 22 72 69 22 3a 22 35 61 34 64 32 32 65 32 62 32 62 62 64 38 65 65 65 63 64 31 65 35 62 36 62 30 31 32 64 39 38 37 22 2c 22 69 62 22 3a 22 30 22 2c 22 72 65 22 3a 22 22 2c 22 72 66 22 3a 22 39 38 35 34 74 6a 77 65 34 36 22 7d Data Ascii: {"ri":"5a4d22e2b2bbd8eeecd1e5b6b012d987","ib":"0","re":"","rf":"9854tjwe46"}
2025-01-15 16:43:39 UTC	276	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:38 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.18	60720	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:39 UTC	506	OUT	GET /favicon.ico HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D
2025-01-15 16:43:39 UTC	566	IN	HTTP/1.1 302 Found Date: Wed, 15 Jan 2025 16:43:39 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: stp=0; expires=Wed, 15-Jan-2025 17:43:39 GMT; Max-Age=3600; path=/ Set-Cookie: ppath=login%2Fsign-in%2FsignOnV2Screen.go; expires=Wed, 15-Jan-2025 17:43:39 GMT; Max-Age=3600; path=/ Location: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.18	60721	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:39 UTC	512	OUT	GET /secure/secure.php HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D
2025-01-15 16:43:40 UTC	276	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:40 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.18	60722	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:39 UTC	867	OUT	GET / HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://online.access.secure.bankofamerlica.com/secure/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D
2025-01-15 16:43:40 UTC	566	IN	HTTP/1.1 302 Found Date: Wed, 15 Jan 2025 16:43:40 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: stp=0; expires=Wed, 15-Jan-2025 17:43:40 GMT; Max-Age=3600; path=/ Set-Cookie: ppath=login%2Fsign-in%2FsignOnV2Screen.go; expires=Wed, 15-Jan-2025 17:43:40 GMT; Max-Age=3600; path=/ Location: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.18	60723	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:40 UTC	948	OUT	GET /login/sign-in/signOnV2Screen.go HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://online.access.secure.bankofamerlica.com/secure/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:40 UTC	308	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:40 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-01-15 16:43:40 UTC	6	IN	Data Raw: 38 65 61 33 0d 0a Data Ascii: 8ea3
2025-01-15 16:43:40 UTC	7022	IN	Data Raw: ef bb bf 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 63 6c 61 73 73 3d 22 77 69 6e 20 66 66 20 66 66 2d 31 31 33 20 73 76 67 2d 62 67 20 6e 6f 74 2d 72 65 74 69 6e 61 20 63 66 2d 63 6e 78 2d 72 65 67 75 6c 61 72 2d 61 63 74 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 0d 0a 3c 68 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en-US" class="win ff ff-113 svg-bg not-retina cf-cnx-regular-active" lang="en-US"><h
2025-01-15 16:43:40 UTC	16384	IN	Data Raw: 35 61 34 64 32 32 65 32 62 32 62 62 64 38 65 65 65 63 64 31 65 35 62 36 62 30 31 32 64 39 38 37 22 20 2f 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 69 6e 70 75 74 20 69 64 3d 22 69 70 22 20 6e 61 6d 65 3d 22 69 70 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 76 61 6c 75 65 3d 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 20 2f 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 69 6e 70 75 74 20 69 64 3d 22 75 61 67 65 6e 74 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 75 61 67 65 6e 74 22 20 76 61 6c 75 65 3d 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f Data Ascii: 5a4d22e2b2bbd8eeecd1e5b6b012d987" /><input id="ip" name="ip" type="hidden" value="8.46.123.189" /><input id="uagent" type="hidden" name="uagent" value="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko
2025-01-15 16:43:40 UTC	13109	IN	Data Raw: 76 20 69 64 3d 22 72 65 73 74 65 73 74 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 30 2e 35 63 6d 3b 20 68 65 69 67 68 74 3a 20 30 2e 35 63 6d 3b 20 70 61 64 64 69 6e 67 3a 20 30 70 78 22 3e 3c 2f 64 69 76 3e 0d 0a 09 3c 64 69 76 20 69 64 3d 22 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 22 3e 0d 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 6e 65 74 72 75 73 74 2d 70 63 2d 64 61 72 6b 2d 66 69 6c 74 65 72 20 6f 74 2d 68 69 64 65 20 6f 74 2d 66 61 64 65 2d 69 6e 22 3e 3c 2f 64 69 76 3e 0d 0a 09 09 3c 64 69 76 20 69 64 3d 22 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 22 20 63 6c 61 73 73 3d 22 6f 74 50 63 54 61 62 20 6f 74 2d 68 69 64 65 20 6f 74 2d 66 61 64 65 2d 69 6e 20 6f 74 2d 73 64 6b 2d 6e 6f 74 2d 77 65 62 6b 69 74 20 6f 74 Data Ascii: v id="restest" style="width: 0.5cm; height: 0.5cm; padding: 0px"></div><div id="onetrust-consent-sdk"><div class="onetrust-pc-dark-filter ot-hide ot-fade-in"></div><div id="onetrust-pc-sdk" class="otPcTab ot-hide ot-fade-in ot-sdk-not-webkit ot
2025-01-15 16:43:40 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-15 16:43:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.18	60725	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:40 UTC	576	OUT	GET /login/sign-in/signOnV2Screen.go HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:40 UTC	308	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:40 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-01-15 16:43:40 UTC	6	IN	Data Raw: 38 65 61 33 0d 0a Data Ascii: 8ea3
2025-01-15 16:43:40 UTC	7022	IN	Data Raw: ef bb bf 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 58 48 54 4d 4c 20 31 2e 30 20 53 74 72 69 63 74 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 78 68 74 6d 6c 31 2f 44 54 44 2f 78 68 74 6d 6c 31 2d 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 78 6d 6c 3a 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 63 6c 61 73 73 3d 22 77 69 6e 20 66 66 20 66 66 2d 31 31 33 20 73 76 67 2d 62 67 20 6e 6f 74 2d 72 65 74 69 6e 61 20 63 66 2d 63 6e 78 2d 72 65 67 75 6c 61 72 2d 61 63 74 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 0d 0a 3c 68 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en-US" class="win ff ff-113 svg-bg not-retina cf-cnx-regular-active" lang="en-US"><h
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 35 61 34 64 32 32 65 32 62 32 62 62 64 38 65 65 65 63 64 31 65 35 62 36 62 30 31 32 64 39 38 37 22 20 2f 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 69 6e 70 75 74 20 69 64 3d 22 69 70 22 20 6e 61 6d 65 3d 22 69 70 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 76 61 6c 75 65 3d 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 20 2f 3e 0d 0a 09 09 09 09 09 09 09 09 09 09 3c 69 6e 70 75 74 20 69 64 3d 22 75 61 67 65 6e 74 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 75 61 67 65 6e 74 22 20 76 61 6c 75 65 3d 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f Data Ascii: 5a4d22e2b2bbd8eeecd1e5b6b012d987" /><input id="ip" name="ip" type="hidden" value="8.46.123.189" /><input id="uagent" type="hidden" name="uagent" value="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko
2025-01-15 16:43:41 UTC	13109	IN	Data Raw: 76 20 69 64 3d 22 72 65 73 74 65 73 74 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 30 2e 35 63 6d 3b 20 68 65 69 67 68 74 3a 20 30 2e 35 63 6d 3b 20 70 61 64 64 69 6e 67 3a 20 30 70 78 22 3e 3c 2f 64 69 76 3e 0d 0a 09 3c 64 69 76 20 69 64 3d 22 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 22 3e 0d 0a 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 6e 65 74 72 75 73 74 2d 70 63 2d 64 61 72 6b 2d 66 69 6c 74 65 72 20 6f 74 2d 68 69 64 65 20 6f 74 2d 66 61 64 65 2d 69 6e 22 3e 3c 2f 64 69 76 3e 0d 0a 09 09 3c 64 69 76 20 69 64 3d 22 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 22 20 63 6c 61 73 73 3d 22 6f 74 50 63 54 61 62 20 6f 74 2d 68 69 64 65 20 6f 74 2d 66 61 64 65 2d 69 6e 20 6f 74 2d 73 64 6b 2d 6e 6f 74 2d 77 65 62 6b 69 74 20 6f 74 Data Ascii: v id="restest" style="width: 0.5cm; height: 0.5cm; padding: 0px"></div><div id="onetrust-consent-sdk"><div class="onetrust-pc-dark-filter ot-hide ot-fade-in"></div><div id="onetrust-pc-sdk" class="otPcTab ot-hide ot-fade-in ot-sdk-not-webkit ot
2025-01-15 16:43:41 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-15 16:43:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.18	60728	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:41 UTC	814	OUT	GET /assets/vipaa-v4-jawr.css HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:41 UTC	275	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:41 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Feb 2024 00:00:16 GMT ETag: "6e5d6-611d902fd6400" Accept-Ranges: bytes Content-Length: 452054 Vary: Accept-Encoding Connection: close Content-Type: text/css
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 2c 64 69 76 2c 64 6c 2c 64 74 2c 64 64 2c 75 6c 2c 6f 6c 2c 6c 69 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 2c 70 72 65 2c 63 6f 64 65 2c 66 6f 72 6d 2c 66 69 65 6c 64 73 65 74 2c 6c 65 67 65 6e 64 2c 69 6e 70 75 74 2c 74 65 78 74 61 72 65 61 2c 70 2c 62 6c 6f 63 6b 71 75 6f 74 65 2c 74 68 2c 74 64 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 3b 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 30 7d 66 69 Data Ascii: html{background:#FFF;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}body,div,dl,dt,dd,ul,ol,li,h1,h2,h3,h4,h5,h6,pre,code,form,fieldset,legend,input,textarea,p,blockquote,th,td{margin:0;padding:0}table{border-collapse:collapse;border-spacing:0}fi
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 37 62 31 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 23 30 30 37 64 63 33 2c 23 30 30 36 37 62 31 29 7d 2e 62 74 6e 2d 62 6f 66 61 2d 62 6c 75 65 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 62 74 6e 2d 62 6f 66 61 2d 62 6c 75 65 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 31 32 34 65 38 39 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 36 38 62 32 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 30 20 30 2c 30 20 62 6f 74 74 6f 6d 2c 66 72 6f 6d 28 23 30 30 36 37 62 31 29 2c 74 6f 28 23 30 30 37 64 63 33 29 29 3b 62 61 63 6b 67 72 6f Data Ascii: 7b1);background-image:linear-gradient(#007dc3,#0067b1)}.btn-bofa-blue:visited{color:#fff}.btn-bofa-blue:hover{color:#fff;border-color:#124e89;background-color:#0068b2;background-image:-webkit-gradient(linear,0 0,0 bottom,from(#0067b1),to(#007dc3));backgro
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 62 75 74 74 6f 6e 5f 61 2e 67 69 66 27 29 20 63 65 6e 74 65 72 20 72 69 67 68 74 20 6e 6f 2d 72 65 70 65 61 74 3b 63 6f 6c 6f 72 3a 23 65 63 31 63 30 32 3b 6f 75 74 6c 69 6e 65 3a 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 2e 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 73 70 61 6e 2c 61 2e 62 75 74 74 6f 6e 3a 66 6f 63 75 73 20 73 70 61 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 20 6c 65 66 74 3b 70 61 64 64 69 6e 67 3a 32 70 78 20 30 20 35 70 78 20 31 32 70 78 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 61 2e 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 2e 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 61 2e 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 23 Data Ascii: button_a.gif') center right no-repeat;color:#ec1c02;outline:0;text-decoration:none}a.button:hover span,a.button:focus span{background-position:center left;padding:2px 0 5px 12px;white-space:nowrap}a.button:focus,.ui-widget-content a.button:focus{outline:#
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 2d 61 72 72 6f 77 7b 6c 65 66 74 3a 61 75 74 6f 3b 72 69 67 68 74 3a 2d 32 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 27 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 70 61 2f 67 6c 6f 62 61 6c 2d 61 73 73 65 74 73 2f 31 2e 30 2f 67 72 61 70 68 69 63 2f 64 69 61 6c 6f 67 5f 61 72 72 6f 77 5f 72 69 67 68 74 2e 70 6e 67 27 29 7d 2e 75 69 2d 64 69 61 6c 6f 67 2e 62 6f 61 2d 61 63 74 69 6f 6e 2d 6e 6f 74 69 74 6c 65 20 2e 75 69 2d 64 69 61 6c 6f 67 2d 74 69 74 6c 65 62 61 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 22 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 70 61 2f 67 6c 6f 62 61 6c 2d 61 73 73 65 74 73 2f 31 2e 30 2f 67 72 61 70 68 69 63 2f 64 69 61 6c 6f 67 5f Data Ascii: -arrow{left:auto;right:-25px;background-image:url('../../../../../../../../pa/global-assets/1.0/graphic/dialog_arrow_right.png')}.ui-dialog.boa-action-notitle .ui-dialog-titlebar{background:url("../../../../../../../../pa/global-assets/1.0/graphic/dialog_
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 64 65 72 2d 74 6f 70 3a 30 3b 70 61 64 64 69 6e 67 3a 34 70 78 20 30 20 30 20 30 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 75 69 2d 64 69 61 6c 6f 67 2e 62 6f 61 2d 63 6f 6d 2d 74 61 73 6b 2d 6c 61 79 65 72 2e 62 6f 61 2d 74 61 73 6b 2d 6c 61 79 65 72 2d 6d 69 6e 69 20 2e 75 69 2d 64 69 61 6c 6f 67 2d 74 69 74 6c 65 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 70 78 7d 2e 69 65 2d 37 20 2e 75 69 2d 64 69 61 6c 6f 67 2e 62 6f 61 2d 63 6f 6d 2d 74 61 73 6b 2d 6c 61 79 65 72 2e 62 6f 61 2d 74 61 73 6b 2d 6c 61 79 65 72 2d 6d 69 6e 69 20 2e 75 69 2d 64 69 61 6c 6f 67 2d 74 69 74 6c 65 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 75 69 2d 64 69 61 6c 6f 67 2e 62 6f 61 2d 63 6f 6d 2d Data Ascii: der-top:0;padding:4px 0 0 0;min-height:0!important}.ui-dialog.boa-com-task-layer.boa-task-layer-mini .ui-dialog-title{border-bottom:0;padding-bottom:2px}.ie-7 .ui-dialog.boa-com-task-layer.boa-task-layer-mini .ui-dialog-title{padding:0}.ui-dialog.boa-com-
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 39 70 78 20 6e 6f 2d 72 65 70 65 61 74 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 36 30 70 78 7d 2e 74 6f 70 2d 6c 65 66 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 6c 65 66 74 3a 2d 31 70 78 3b 74 6f 70 3a 2d 31 70 78 7d 2e 74 6f 70 2d 72 69 67 68 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 35 70 78 20 30 3b 72 69 67 68 74 3a 2d 31 70 78 3b 74 6f 70 3a 2d 31 70 78 7d 2e 62 6f 74 74 6f 6d 2d 6c 65 66 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 35 70 78 3b 62 6f 74 74 6f 6d 3a 2d 31 70 78 3b 6c 65 66 74 3a 2d 31 70 78 7d 2e 62 6f 74 74 6f 6d 2d 72 69 67 68 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 35 70 78 20 35 70 78 3b 62 6f 74 74 6f 6d 3a 2d 31 70 Data Ascii: 9px no-repeat;padding-left:60px}.top-left{background-position:0 0;left:-1px;top:-1px}.top-right{background-position:5px 0;right:-1px;top:-1px}.bottom-left{background-position:0 5px;bottom:-1px;left:-1px}.bottom-right{background-position:5px 5px;bottom:-1p
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 2e 2e 2f 70 61 2f 67 6c 6f 62 61 6c 2d 61 73 73 65 74 73 2f 31 2e 30 2f 67 72 61 70 68 69 63 2f 74 72 61 6e 73 63 63 2d 73 70 72 69 74 65 2e 70 6e 67 22 29 20 6e 6f 2d 72 65 70 65 61 74 20 73 63 72 6f 6c 6c 20 30 20 2d 34 34 35 70 78 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 65 73 73 61 67 69 6e 67 2d 76 69 70 61 61 2d 6d 6f 64 75 6c 65 20 2e 65 72 72 6f 72 2d 74 72 61 6e 73 2d 73 6b 69 6e 20 2e 65 72 72 6f 72 2d 69 6d 61 67 65 2c 2e 66 61 75 78 64 61 6c 2d 76 69 70 61 61 2d 6d 6f 64 75 6c 65 20 2e 74 72 61 6e 73 63 63 2d 73 6b 69 6e 20 2e 65 72 72 6f 72 2d 69 6d 61 67 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 22 2e Data Ascii: ../../../../../../pa/global-assets/1.0/graphic/transcc-sprite.png") no-repeat scroll 0 -445px transparent;padding-left:25px!important}.messaging-vipaa-module .error-trans-skin .error-image,.fauxdal-vipaa-module .transcc-skin .error-image{background:url(".
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 6f 6d 3a 34 35 70 78 7d 2e 74 77 6f 2d 72 6f 77 2d 66 6c 65 78 2d 77 69 64 65 6c 65 66 74 2d 6c 61 79 6f 75 74 20 2e 66 6f 6f 74 65 72 20 2e 6f 6c 62 2d 66 6f 6f 74 65 72 2d 6d 6f 64 75 6c 65 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 74 77 6f 2d 72 6f 77 2d 66 6c 65 78 2d 77 69 64 65 6c 65 66 74 2d 6c 61 79 6f 75 74 20 2e 68 65 61 64 65 72 20 2e 70 61 67 65 2d 6c 65 76 65 6c 2d 6d 65 73 73 61 67 65 2d 6d 6f 64 75 6c 65 7b 6d 61 72 67 69 6e 3a 32 30 70 78 20 31 32 70 78 20 30 7d 2e 74 77 6f 2d 72 6f 77 2d 66 6c 65 78 2d 77 69 64 65 6c 65 66 74 2d 6c 61 79 6f 75 74 20 2e 68 65 61 64 65 72 20 2e 68 65 61 64 65 72 2d 6d 6f 64 75 6c 65 20 2e 6c 6f 67 6f 2d 74 65 78 74 2d 73 6b 69 6e 7b 6d 61 72 67 69 6e Data Ascii: om:45px}.two-row-flex-wideleft-layout .footer .olb-footer-module{padding-bottom:20px;width:100%}.two-row-flex-wideleft-layout .header .page-level-message-module{margin:20px 12px 0}.two-row-flex-wideleft-layout .header .header-module .logo-text-skin{margin
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 65 6f 20 2e 76 69 64 65 6f 2d 63 6f 6e 74 72 6f 6c 2d 62 61 72 20 2e 76 6f 6c 75 6d 65 2d 62 61 72 2d 66 69 6c 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 63 63 63 3b 77 69 64 74 68 3a 34 30 70 78 3b 68 65 69 67 68 74 3a 33 70 78 3b 62 6f 72 64 65 72 3a 35 70 78 20 73 6f 6c 69 64 20 23 32 34 32 34 32 34 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 32 35 70 78 3b 74 6f 70 3a 31 31 70 78 7d 2e 62 6f 66 61 56 69 64 65 6f 20 2e 76 69 64 65 6f 2d 63 6f 6e 74 72 6f 6c 2d 62 61 72 20 2e 76 6f 6c 75 6d 65 2d 62 61 72 2d 66 69 6c 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 68 65 69 67 68 74 3a 35 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 77 69 64 74 68 3a 30 3b 62 6f 72 64 65 72 3a 34 70 78 20 73 6f 6c Data Ascii: eo .video-control-bar .volume-bar-fill{background:#ccc;width:40px;height:3px;border:5px solid #242424;position:absolute;left:25px;top:11px}.bofaVideo .video-control-bar .volume-bar-fill{background:#fff!important;height:5px!important;width:0;border:4px sol
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 6f 6e 73 2d 63 6f 6e 74 65 6e 74 20 2e 74 65 72 6d 73 2d 63 6f 6e 64 69 74 69 6f 6e 73 20 6f 6c 2e 64 65 73 63 72 69 70 74 69 6f 6e 20 6c 69 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 64 65 63 69 6d 61 6c 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 2e 65 6c 65 63 74 72 6f 6e 69 63 2d 63 6f 6d 6d 2d 64 69 73 63 6c 6f 73 75 72 65 2d 6d 6f 64 75 6c 65 20 2e 74 65 72 6d 73 2d 63 6f 6e 64 69 74 69 6f 6e 73 2d 63 6f 6e 74 65 6e 74 20 2e 74 65 72 6d 73 2d 63 6f 6e 64 69 74 69 6f 6e 73 20 6f 6c 2e 64 65 73 63 72 69 70 74 69 6f 6e 20 6c 69 20 6f 6c 20 6c 69 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 75 70 70 65 72 2d 61 6c 70 68 61 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 30 70 78 3b 6d Data Ascii: ons-content .terms-conditions ol.description li{list-style-type:decimal;margin-left:20px;font-weight:bold}.electronic-comm-disclosure-module .terms-conditions-content .terms-conditions ol.description li ol li{list-style-type:upper-alpha;padding-top:10px;m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.18	60726	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:41 UTC	815	OUT	GET /assets/onetrust-style.css HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:41 UTC	275	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:41 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 14:00:16 GMT ETag: "1c6b4-6118029db7c00" Accept-Ranges: bytes Content-Length: 116404 Vary: Accept-Encoding Connection: close Content-Type: text/css
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 09 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 7b 0d 0a 09 09 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0d 0a 09 09 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 0d 0a 09 7d 0d 0a 09 0d 0a 09 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 20 7b 0d 0a 09 09 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0d 0a 09 09 63 6f 6c 6f 72 3a 20 23 31 66 39 36 64 62 3b 0d 0a 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0d 0a 09 09 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a Data Ascii: #onetrust-banner-sdk {-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100%}#onetrust-banner-sdk .onetrust-vendors-list-handler {cursor: pointer;color: #1f96db;font-size: inherit;font-weight: bold;text-decoration:
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 3a 20 31 2e 32 0d 0a 09 7d 0d 0a 09 0d 0a 09 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 68 32 2c 0d 0a 09 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 32 2c 0d 0a 09 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 68 32 20 7b 0d 0a 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 35 72 65 6d 3b 0d 0a 09 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 35 0d 0a 09 7d 0d 0a 09 0d 0a 09 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 68 33 2c 0d 0a 09 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 68 33 2c 0d 0a 09 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 68 33 20 7b 0d 0a 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 35 72 65 6d 3b 0d 0a 09 09 6c 69 6e 65 2d 68 65 69 67 Data Ascii: : 1.2}#onetrust-banner-sdk h2,#onetrust-pc-sdk h2,#ot-sdk-cookie-policy h2 {font-size: 1.5rem;line-height: 1.25}#onetrust-banner-sdk h3,#onetrust-pc-sdk h3,#ot-sdk-cookie-policy h3 {font-size: 1.5rem;line-heig
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 68 61 6e 64 6c 65 72 2c 0d 0a 09 09 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 20 7b 0d 0a 09 09 09 77 69 64 74 68 3a 20 31 30 30 25 0d 0a 09 09 7d 0d 0a 09 09 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 63 6c 6f 73 65 2d 62 74 6e 2d 75 69 20 7b 0d 0a 09 09 09 74 6f 70 3a 20 61 75 74 6f 3b 0d 0a 09 09 09 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 0d 0a 09 09 7d 0d 0a 09 09 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 20 7b 0d 0a 09 09 09 64 69 Data Ascii: nner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler {width: 100%}#onetrust-banner-sdk .onetrust-close-btn-ui {top: auto;transform: none}#onetrust-banner-sdk #onetrust-policy-title {di
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 2d 34 35 64 65 67 29 3b 0d 0a 09 09 6c 65 66 74 3a 20 34 70 78 3b 0d 0a 09 09 74 6f 70 3a 20 35 70 78 0d 0a 09 7d 0d 0a 09 0d 0a 09 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6c 61 62 65 6c 2d 74 78 74 20 7b 0d 0a 09 09 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 0d 0a 09 7d 0d 0a 09 0d 0a 09 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 66 6c 74 72 2d 6f 70 74 20 2e 6f 74 2d 6c 61 62 65 6c 2d 74 78 74 20 7b 0d 0a 09 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 0d 0a 09 7d 0d 0a 09 0d 0a 09 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 68 6b 62 6f 78 20 69 6e 70 75 74 2c 0d 0a 09 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 74 67 6c 20 69 6e 70 Data Ascii: sform: rotate(-45deg);left: 4px;top: 5px}#onetrust-pc-sdk .ot-label-txt {display: none}#onetrust-pc-sdk .ot-fltr-opt .ot-label-txt {display: block}#onetrust-pc-sdk .ot-chkbox input,#onetrust-pc-sdk .ot-tgl inp
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 3a 6e 74 68 2d 63 68 69 6c 64 28 6e 2b 33 29 20 70 20 7b 0d 0a 09 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 0d 0a 09 7d 0d 0a 09 0d 0a 09 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 76 65 6e 2d 64 65 74 73 20 2e 6f 74 2d 76 65 6e 2d 64 69 73 63 3a 6e 74 68 2d 63 68 69 6c 64 28 6e 2b 33 29 20 70 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 6f 64 64 29 20 7b 0d 0a 09 09 77 69 64 74 68 3a 20 33 30 25 0d 0a 09 7d 0d 0a 09 0d 0a 09 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 76 65 6e 2d 64 65 74 73 20 2e 6f 74 2d 76 65 6e 2d 64 69 73 63 3a 6e 74 68 2d 63 68 69 6c 64 28 6e 2b 33 29 20 70 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 65 76 65 6e 29 20 7b 0d 0a 09 09 77 69 64 74 68 3a 20 35 30 25 3b 0d 0a 09 09 77 Data Ascii: :nth-child(n+3) p {display: inline-block}#onetrust-pc-sdk .ot-ven-dets .ot-ven-disc:nth-child(n+3) p:nth-of-type(odd) {width: 30%}#onetrust-pc-sdk .ot-ven-dets .ot-ven-disc:nth-child(n+3) p:nth-of-type(even) {width: 50%;w
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 2e 6f 74 2d 76 6e 64 2d 69 74 65 6d 20 62 75 74 74 6f 6e 5b 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 74 72 75 65 5d 20 7b 0d 0a 09 09 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 6e 6f 6e 65 0d 0a 09 7d 0d 0a 09 0d 0a 09 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 76 73 2d 6c 69 73 74 20 2e 6f 74 2d 76 6e 64 2d 69 74 65 6d 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 0d 0a 09 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 76 6e 64 2d 73 65 72 76 20 2e 6f 74 2d 76 6e 64 2d 69 74 65 6d 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0d 0a 09 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2e 32 35 72 65 6d 3b 0d 0a 09 09 62 6f 72 64 65 72 2d 74 6f 70 3a 20 75 6e 73 65 74 0d 0a 09 7d 0d 0a 09 0d 0a 09 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 Data Ascii: .ot-vnd-item button[aria-expanded=true] {border-bottom: none}#onetrust-pc-sdk .ot-vs-list .ot-vnd-item:first-child,#onetrust-pc-sdk .ot-vnd-serv .ot-vnd-item:first-child {margin-top: .25rem;border-top: unset}#onetrust-pc-s
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 0a 09 09 09 77 69 64 74 68 3a 20 63 61 6c 63 28 31 30 30 25 20 2d 20 35 35 70 78 29 3b 0d 0a 09 09 09 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 0d 0a 09 09 7d 0d 0a 09 09 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 23 6f 74 2d 61 6e 63 68 6f 72 20 7b 0d 0a 09 09 09 74 6f 70 3a 20 37 35 70 78 3b 0d 0a 09 09 09 72 69 67 68 74 3a 20 33 30 70 78 0d 0a 09 09 7d 0d 0a 09 09 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 23 6f 74 2d 66 6c 74 72 2d 6d 6f 64 61 6c 20 7b 0d 0a 09 09 09 74 6f 70 3a 20 38 31 70 78 0d 0a 09 09 7d 0d 0a 09 09 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 23 6f 74 2d 66 6c 74 72 2d 63 6e 74 72 20 7b 0d 0a 09 09 09 66 6c 6f 61 74 3a 20 72 69 67 68 74 3b 0d 0a 09 09 09 72 69 67 68 74 3a 20 31 35 70 78 0d 0a 09 Data Ascii: width: calc(100% - 55px);position: relative}#onetrust-pc-sdk #ot-anchor {top: 75px;right: 30px}#onetrust-pc-sdk #ot-fltr-modal {top: 81px}#onetrust-pc-sdk #ot-fltr-cntr {float: right;right: 15px
2025-01-15 16:43:41 UTC	1716	IN	Data Raw: 6c 69 63 79 20 74 68 2c 0d 0a 09 09 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 2d 76 32 2e 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 64 2c 0d 0a 09 09 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 2d 76 32 2e 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 72 20 7b 0d 0a 09 09 09 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 0d 0a 09 09 7d 0d 0a 09 09 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 2d 76 32 2e 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 61 62 6c 65 20 2e 6f 74 2d 68 6f 73 74 2c 0d 0a 09 09 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 2d 76 32 2e 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 Data Ascii: licy th,#ot-sdk-cookie-policy-v2.ot-sdk-cookie-policy td,#ot-sdk-cookie-policy-v2.ot-sdk-cookie-policy tr {display: block}#ot-sdk-cookie-policy-v2.ot-sdk-cookie-policy table .ot-host,#ot-sdk-cookie-policy-v2.ot-sdk-cookie-policy t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.18	60727	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:41 UTC	819	OUT	GET /assets/special/css/loader.css HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:41 UTC	272	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:41 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Dec 2022 12:28:14 GMT ETag: "1434-5eff11a7b5380" Accept-Ranges: bytes Content-Length: 5172 Vary: Accept-Encoding Connection: close Content-Type: text/css
2025-01-15 16:43:41 UTC	5172	IN	Data Raw: 0d 0a 0d 0a 2e 6c 6f 61 64 65 72 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 20 74 6f 70 3a 20 34 34 25 3b 0d 0a 20 20 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 6c 6f 61 64 65 72 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 20 31 31 70 78 3b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 77 69 64 74 68 3a Data Ascii: .loader { position: fixed; top: 44%; right: 0; bottom: 0; left: 0; z-index: 9999; margin: 0; text-align: center;}.loader:before { content: ""; display: block; margin: 0 auto 11px; text-align: center; width:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.18	60729	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:41 UTC	799	OUT	GET /assets/vipaa-v4-jawr.js HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:41 UTC	291	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:41 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Feb 2024 11:42:48 GMT ETag: "2aa8e2-611e2d371de00" Accept-Ranges: bytes Content-Length: 2795746 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 20 21 20 66 75 6e 63 74 69 6f 6e 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 22 6f 62 6a 65 63 74 22 20 3d 3d 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 20 26 26 20 22 6f 62 6a 65 63 74 22 20 3d 3d 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3f 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 65 2e 64 6f 63 75 6d 65 6e 74 20 3f 20 74 28 65 2c 20 21 30 29 20 3a 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 20 7b 0a Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license / ! function(e, t) { "object" == typeof module && "object" == typeof module.exports ? module.exports = e.document ? t(e, !0) : function(e) { if (!e.document) {
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 20 3d 20 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 43 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 20 21 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2c 20 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 20 3d 20 4b 2e 74 65 73 74 28 43 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 2c 20 64 2e 67 65 74 42 79 49 64 20 3d 20 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: ElementsByTagName = ce(function(e) { return e.appendChild(C.createComment("")), !e.getElementsByTagName("*").length }), d.getElementsByClassName = K.test(C.getElementsByClassName), d.getById = ce(function(e) {
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 73 20 3d 20 66 28 65 2e 72 65 70 6c 61 63 65 28 24 2c 20 22 24 31 22 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 73 5b 53 5d 20 3f 20 6c 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 20 74 2c 20 6e 2c 20 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 2c 20 6f 20 3d 20 73 28 65 2c 20 6e 75 6c 6c 2c 20 72 2c 20 5b 5d 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 20 3d 20 65 2e 6c 65 6e 67 74 68 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 68 69 6c 65 20 28 61 2d 2d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: s = f(e.replace($, "$1")); return s[S] ? le(function(e, t, n, r) { var i, o = s(e, null, r, []), a = e.length; while (a--) {
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 61 70 65 53 65 6c 65 63 74 6f 72 20 3d 20 64 2e 65 73 63 61 70 65 3b 0a 20 20 20 20 76 61 72 20 68 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 2c 20 74 2c 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 5b 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 76 6f 69 64 20 30 20 21 3d 3d 20 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 68 69 6c 65 20 28 28 65 20 3d 20 65 5b 74 5d 29 20 26 26 20 39 20 21 3d 3d 20 65 2e 6e 6f 64 65 54 79 70 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 31 20 3d 3d 3d 20 65 2e 6e 6f 64 65 54 79 70 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 20 26 26 20 53 28 65 29 2e 69 73 28 6e 29 29 20 7b 0a 20 20 20 20 20 Data Ascii: apeSelector = d.escape; var h = function(e, t, n) { var r = [], i = void 0 !== n; while ((e = e[t]) && 9 !== e.nodeType) { if (1 === e.nodeType) { if (i && S(e).is(n)) {
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 61 63 65 28 7a 2c 20 55 29 0a 20 20 20 20 7d 0a 20 20 20 20 76 61 72 20 56 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 31 20 3d 3d 3d 20 65 2e 6e 6f 64 65 54 79 70 65 20 7c 7c 20 39 20 3d 3d 3d 20 65 2e 6e 6f 64 65 54 79 70 65 20 7c 7c 20 21 2b 65 2e 6e 6f 64 65 54 79 70 65 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 47 28 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 65 78 70 61 6e 64 6f 20 3d 20 53 2e 65 78 70 61 6e 64 6f 20 2b 20 47 2e 75 69 64 2b 2b 0a 20 20 20 20 7d 0a 20 20 20 20 47 2e 75 69 64 20 3d 20 31 2c 20 47 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 63 61 63 68 65 3a 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: ace(z, U) } var V = function(e) { return 1 === e.nodeType \|\| 9 === e.nodeType \|\| !+e.nodeType }; function G() { this.expando = S.expando + G.uid++ } G.uid = 1, G.prototype = { cache: function(e) {
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 75 29 20 26 26 20 59 2e 72 65 6d 6f 76 65 28 65 2c 20 22 68 61 6e 64 6c 65 20 65 76 65 6e 74 73 22 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 64 69 73 70 61 74 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 2c 20 6e 2c 20 72 2c 20 69 2c 20 6f 2c 20 61 2c 20 73 20 3d 20 6e 65 77 20 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 20 3d 20 53 2e 65 76 65 6e 74 2e Data Ascii: } } S.isEmptyObject(u) && Y.remove(e, "handle events") } }, dispatch: function(e) { var t, n, r, i, o, a, s = new Array(arguments.length), u = S.event.
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 74 79 6c 65 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 6e 20 3d 20 6e 20 7c 7c 20 49 65 28 65 29 29 20 26 26 20 28 22 22 20 21 3d 3d 20 28 61 20 3d 20 6e 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 74 29 20 7c 7c 20 6e 5b 74 5d 29 20 7c 7c 20 69 65 28 65 29 20 7c 7c 20 28 61 20 3d 20 53 2e 73 74 79 6c 65 28 65 2c 20 74 29 29 2c 20 21 79 2e 70 69 78 65 6c 42 6f 78 53 74 79 6c 65 73 28 29 20 26 26 20 4d 65 2e 74 65 73 74 28 61 29 20 26 26 20 46 65 2e 74 65 73 74 28 74 29 20 26 26 20 28 72 20 3d 20 73 2e 77 69 64 74 68 2c 20 69 20 3d 20 73 2e 6d 69 6e 57 69 64 74 68 2c 20 6f 20 3d 20 73 2e 6d 61 78 57 69 64 74 68 2c 20 73 2e 6d 69 6e 57 69 64 74 68 20 3d 20 73 2e 6d 61 78 57 69 64 74 68 20 3d 20 73 2e 77 69 64 74 68 20 3d 20 61 2c 20 61 Data Ascii: tyle; return (n = n \|\| Ie(e)) && ("" !== (a = n.getPropertyValue(t) \|\| n[t]) \|\| ie(e) \|\| (a = S.style(e, t)), !y.pixelBoxStyles() && Me.test(a) && Fe.test(t) && (r = s.width, i = s.minWidth, o = s.maxWidth, s.minWidth = s.maxWidth = s.width = a, a
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 20 20 20 64 5b 72 5d 20 3d 20 76 20 26 26 20 76 5b 72 5d 20 7c 7c 20 53 2e 73 74 79 6c 65 28 65 2c 20 72 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 28 75 20 3d 20 21 53 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 74 29 29 20 7c 7c 20 21 53 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 64 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 72 20 69 6e 20 66 20 26 26 20 31 20 3d 3d 3d 20 65 2e 6e 6f 64 65 54 79 70 65 20 26 26 20 28 6e 2e 6f 76 65 72 66 6c 6f 77 20 3d 20 5b 68 2e 6f 76 65 72 66 6c 6f 77 2c 20 68 2e 6f 76 65 72 66 6c 6f 77 58 2c 20 68 2e 6f 76 65 72 66 6c 6f 77 59 5d 2c 20 6e 75 6c 6c 20 3d 3d 20 28 6c 20 3d 20 Data Ascii: d[r] = v && v[r] \|\| S.style(e, r) } } if ((u = !S.isEmptyObject(t)) \|\| !S.isEmptyObject(d)) { for (r in f && 1 === e.nodeType && (n.overflow = [h.overflow, h.overflowX, h.overflowY], null == (l =
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 2c 20 65 2e 72 65 73 75 6c 74 20 3d 20 76 6f 69 64 20 30 2c 20 65 2e 74 61 72 67 65 74 20 7c 7c 20 28 65 2e 74 61 72 67 65 74 20 3d 20 6e 29 2c 20 74 20 3d 20 6e 75 6c 6c 20 3d 3d 20 74 20 3f 20 5b 65 5d 20 3a 20 53 2e 6d 61 6b 65 41 72 72 61 79 28 74 2c 20 5b 65 5d 29 2c 20 63 20 3d 20 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 64 5d 20 7c 7c 20 7b 7d 2c 20 72 20 7c 7c 20 21 63 2e 74 72 69 67 67 65 72 20 7c 7c 20 21 31 20 21 3d 3d 20 63 2e 74 72 69 67 67 65 72 2e 61 70 70 6c 79 28 6e 2c 20 74 29 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 72 20 26 26 20 21 63 2e 6e 6f 42 75 62 62 6c 65 20 26 26 20 21 78 28 6e 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 73 20 3d 20 63 2e Data Ascii: , e.result = void 0, e.target \|\| (e.target = n), t = null == t ? [e] : S.makeArray(t, [e]), c = S.event.special[d] \|\| {}, r \|\| !c.trigger \|\| !1 !== c.trigger.apply(n, t))) { if (!r && !c.noBubble && !x(n)) { for (s = c.
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 7b 0a 20 20 Data Ascii: } } } } } } } return {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.18	60730	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:41 UTC	819	OUT	GET /assets/online-id-vipaa-module-enter-skin.js HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:41 UTC	287	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:41 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Feb 2024 13:17:16 GMT ETag: "ce78-611e42548af00" Accept-Ranges: bytes Content-Length: 52856 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 24 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 0a 20 20 20 20 20 20 0a 20 20 20 20 69 66 20 28 24 28 27 2e 6f 6e 6c 69 6e 65 2d 69 64 2d 76 69 70 61 61 2d 6d 6f 64 75 6c 65 20 2e 65 6e 74 65 72 2d 73 6b 69 6e 27 29 2e 6c 65 6e 67 74 68 20 3e 20 30 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 43 68 65 63 6b 20 70 6f 6c 69 63 79 20 63 61 6c 6c 0a 20 20 20 20 20 20 20 20 2f 2f 6f 6e 6c 69 6e 65 2d 69 64 2d 73 65 6c 65 63 74 20 66 6f 72 20 73 61 76 65 64 20 6f 69 64 73 0a 20 20 20 20 20 20 20 20 76 61 72 20 6f 69 64 73 65 6c 65 63 74 20 3d 20 24 28 27 73 65 6c 65 63 74 23 6f 6e 6c 69 6e 65 2d 69 64 2d 73 65 6c 65 63 74 27 29 3b 0a 20 20 20 20 20 20 20 20 2f 2f 6f 6e 6c 69 6e 65 2d 69 64 2d 69 6e 70 75 74 0a 20 20 20 20 20 20 20 20 76 61 72 20 6f 69 64 69 Data Ascii: $(function () { if ($('.online-id-vipaa-module .enter-skin').length > 0) { //Check policy call //online-id-select for saved oids var oidselect = $('select#online-id-select'); //online-id-input var oidi
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 73 73 28 27 64 69 73 70 6c 61 79 4e 6f 6e 65 27 29 3b 0a 09 09 09 09 09 24 28 27 23 73 69 67 6e 69 6e 2d 6d 6f 62 69 6c 65 2d 61 70 70 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 6d 6f 62 69 6c 65 2d 61 70 70 27 29 3b 20 0a 09 09 09 09 09 24 28 27 23 64 69 67 69 74 61 6c 2d 69 64 2d 67 65 6e 65 72 61 6c 2d 65 72 72 6f 72 27 29 2e 61 64 64 43 6c 61 73 73 28 27 68 69 64 64 65 6e 27 29 3b 0a 09 09 09 09 09 24 28 27 23 64 69 67 69 74 61 6c 2d 69 64 2d 73 75 63 63 65 73 73 2d 6d 65 73 73 61 67 65 27 29 2e 61 64 64 43 6c 61 73 73 28 27 68 69 64 64 65 6e 27 29 3b 0a 09 09 09 09 09 24 28 27 23 65 6e 74 65 72 49 44 2d 69 6e 70 75 74 27 29 2e 70 61 72 65 6e 74 28 27 64 69 76 27 29 2e 61 64 64 43 6c 61 73 73 28 27 68 69 64 64 65 6e 27 29 3b 0a 09 09 09 09 09 24 Data Ascii: ss('displayNone');$('#signin-mobile-app').removeClass('mobile-app'); $('#digital-id-general-error').addClass('hidden');$('#digital-id-success-message').addClass('hidden');$('#enterID-input').parent('div').addClass('hidden');$
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 09 7d 0a 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 7d 2c 32 30 30 30 29 3b 0a 09 09 09 7d 0a 09 09 7d 29 3b 0a 09 7d 29 3b 0a 7d 0a 0a 77 69 6e 64 6f 77 2e 62 6f 61 2e 6f 69 64 56 69 70 61 61 4d 6f 64 75 6c 65 20 3d 20 77 69 6e 64 6f 77 2e 62 6f 61 2e 6f 69 64 56 69 70 61 61 4d 6f 64 75 6c 65 20 7c 7c 20 7b 7d 3b 0a 0a 77 69 6e 64 6f 77 2e 62 6f 61 2e 6f 69 64 56 69 70 61 61 4d 6f 64 75 6c 65 2e 66 6f 72 6d 53 75 62 6d 69 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 76 61 72 20 74 68 61 74 20 3d 20 24 28 27 61 5b 6e 61 6d 65 3d 22 65 6e 74 65 72 2d 6f 6e 6c 69 6e 65 2d 69 64 2d 73 75 62 6d 69 74 22 5d 27 29 3b 0a 09 69 66 20 28 20 74 68 61 74 2e 70 61 72 65 6e 74 73 28 27 2e 73 69 6d 70 6c 65 2d 66 6f 72 6d 27 29 2e 61 74 74 72 28 27 69 64 Data Ascii: }}},2000);}});});}window.boa.oidVipaaModule = window.boa.oidVipaaModule \|\| {};window.boa.oidVipaaModule.formSubmit = function(){var that = $('a[name="enter-online-id-submit"]');if ( that.parents('.simple-form').attr('id
2025-01-15 16:43:41 UTC	3704	IN	Data Raw: 09 09 09 09 09 72 65 71 75 69 72 65 64 3a 20 22 50 6f 72 20 66 61 76 6f 72 2c 20 69 6e 64 69 71 75 65 20 74 6f 64 61 20 6c 61 20 69 6e 66 6f 72 6d 61 63 69 26 23 32 34 33 3b 6e 20 73 6f 6c 69 63 69 74 61 64 61 20 70 61 72 61 20 63 6f 6e 74 69 6e 75 61 72 2e 22 0a 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 7d 2c 0a 09 09 09 09 09 72 75 6c 65 73 3a 20 7b 0a 09 09 09 09 09 09 22 65 6e 74 65 72 49 44 2d 6b 6e 6f 77 6e 2d 69 6e 70 75 74 22 3a 20 7b 0a 09 09 09 09 09 09 09 72 65 71 75 69 72 65 64 20 3a 20 7b 0a 09 09 09 09 09 09 09 64 65 70 65 6e 64 73 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 09 09 72 65 74 75 72 6e 20 24 28 22 23 65 6e 74 65 72 2d 69 64 2d 64 69 76 22 29 2e 69 73 28 22 3a 76 69 73 69 62 6c Data Ascii: required: "Por favor, indique toda la información solicitada para continuar."}},rules: {"enterID-known-input": {required : {depends: function(element) {return $("#enter-id-div").is(":visibl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.18	60731	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:41 UTC	859	OUT	GET /assets/mobile_llama.png HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:41 UTC	251	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:41 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 14:06:04 GMT ETag: "4adf-611803e998b00" Accept-Ranges: bytes Content-Length: 19167 Connection: close Content-Type: image/png
2025-01-15 16:43:41 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2a 00 00 01 a0 08 03 00 00 00 2a cf da a3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 04 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 31 31 20 37 39 2e 31 35 38 33 32 35 2c 20 32 30 31 35 2f 30 39 2f 31 30 2d 30 31 3a 31 30 3a 32 30 20 20 Data Ascii: PNGIHDR**tEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20
2025-01-15 16:43:41 UTC	2783	IN	Data Raw: 3b 0f 13 7c ed 40 e5 c8 06 db 66 63 90 57 55 f5 46 d7 aa 4a c6 3e 6e c5 b2 47 7b bc 98 53 7a 58 cc 48 4a 2f f7 c4 7d 1c 57 31 bb 06 eb 64 cc 17 7b d8 7f a4 bc dc 43 81 a2 64 4e 8a 1f 4a 05 bd 24 ff 56 4a f2 51 75 85 aa ec d5 07 1c 51 15 33 bb 2b f3 e2 73 41 9a b3 dc 43 78 c0 e1 84 d9 70 4b 35 78 9c de 09 d7 86 1f 6b c7 89 7b 34 c0 eb de 33 40 99 96 a7 13 dd ec 4e ca fa f4 22 6b 3d a4 d3 e6 bc 14 82 f6 9d 76 dd 9d 4b 7e 6a af 93 a8 24 2b 35 28 ca 5d 05 42 a1 58 96 b3 50 46 70 20 96 68 e1 91 0a 0a 37 b4 ef 0a 7c 83 8a 92 0c 38 29 8f 95 1a 9e 0a a5 04 65 52 7a 51 49 e5 e7 73 a6 d6 21 e6 04 49 95 5a 51 87 51 dd ea 3a 5f 25 b1 77 b0 58 e6 ce c0 9b 61 70 61 24 3d 92 61 0b 14 ed d5 c1 65 fa 32 29 5f 8e a3 f3 77 f3 3f 68 f7 45 c8 43 d5 a9 e1 b2 bb ad 83 dd 26 39 Data Ascii: ;\|@fcWUFJ>nG{SzXHJ/}W1d{CdNJ$VJQuQ3+sACxpK5xk{43@N"k=vK~j$+5(]BXPFp h7\|8)eRzQIs!IZQQ:_%wXapa$=ae2)_w?hEC&9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.18	60732	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:42 UTC	568	OUT	GET /assets/mobile_llama.png HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:42 UTC	251	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:42 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 14:06:04 GMT ETag: "4adf-611803e998b00" Accept-Ranges: bytes Content-Length: 19167 Connection: close Content-Type: image/png
2025-01-15 16:43:43 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 2a 00 00 01 a0 08 03 00 00 00 2a cf da a3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 04 66 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 31 31 20 37 39 2e 31 35 38 33 32 35 2c 20 32 30 31 35 2f 30 39 2f 31 30 2d 30 31 3a 31 30 3a 32 30 20 20 Data Ascii: PNGIHDR**tEXtSoftwareAdobe ImageReadyqe<fiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20
2025-01-15 16:43:43 UTC	2783	IN	Data Raw: 3b 0f 13 7c ed 40 e5 c8 06 db 66 63 90 57 55 f5 46 d7 aa 4a c6 3e 6e c5 b2 47 7b bc 98 53 7a 58 cc 48 4a 2f f7 c4 7d 1c 57 31 bb 06 eb 64 cc 17 7b d8 7f a4 bc dc 43 81 a2 64 4e 8a 1f 4a 05 bd 24 ff 56 4a f2 51 75 85 aa ec d5 07 1c 51 15 33 bb 2b f3 e2 73 41 9a b3 dc 43 78 c0 e1 84 d9 70 4b 35 78 9c de 09 d7 86 1f 6b c7 89 7b 34 c0 eb de 33 40 99 96 a7 13 dd ec 4e ca fa f4 22 6b 3d a4 d3 e6 bc 14 82 f6 9d 76 dd 9d 4b 7e 6a af 93 a8 24 2b 35 28 ca 5d 05 42 a1 58 96 b3 50 46 70 20 96 68 e1 91 0a 0a 37 b4 ef 0a 7c 83 8a 92 0c 38 29 8f 95 1a 9e 0a a5 04 65 52 7a 51 49 e5 e7 73 a6 d6 21 e6 04 49 95 5a 51 87 51 dd ea 3a 5f 25 b1 77 b0 58 e6 ce c0 9b 61 70 61 24 3d 92 61 0b 14 ed d5 c1 65 fa 32 29 5f 8e a3 f3 77 f3 3f 68 f7 45 c8 43 d5 a9 e1 b2 bb ad 83 dd 26 39 Data Ascii: ;\|@fcWUFJ>nG{SzXHJ/}W1d{CdNJ$VJQuQ3+sACxpK5xk{43@N"k=vK~j$+5(]BXPFp h7\|8)eRzQIs!IZQQ:_%wXapa$=ae2)_w?hEC&9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.18	60733	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:42 UTC	588	OUT	GET /assets/online-id-vipaa-module-enter-skin.js HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:42 UTC	287	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:42 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Feb 2024 13:17:16 GMT ETag: "ce78-611e42548af00" Accept-Ranges: bytes Content-Length: 52856 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2025-01-15 16:43:43 UTC	16384	IN	Data Raw: 24 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 09 0a 20 20 20 20 20 20 0a 20 20 20 20 69 66 20 28 24 28 27 2e 6f 6e 6c 69 6e 65 2d 69 64 2d 76 69 70 61 61 2d 6d 6f 64 75 6c 65 20 2e 65 6e 74 65 72 2d 73 6b 69 6e 27 29 2e 6c 65 6e 67 74 68 20 3e 20 30 29 20 7b 0a 0a 20 20 20 20 20 20 20 20 2f 2f 43 68 65 63 6b 20 70 6f 6c 69 63 79 20 63 61 6c 6c 0a 20 20 20 20 20 20 20 20 2f 2f 6f 6e 6c 69 6e 65 2d 69 64 2d 73 65 6c 65 63 74 20 66 6f 72 20 73 61 76 65 64 20 6f 69 64 73 0a 20 20 20 20 20 20 20 20 76 61 72 20 6f 69 64 73 65 6c 65 63 74 20 3d 20 24 28 27 73 65 6c 65 63 74 23 6f 6e 6c 69 6e 65 2d 69 64 2d 73 65 6c 65 63 74 27 29 3b 0a 20 20 20 20 20 20 20 20 2f 2f 6f 6e 6c 69 6e 65 2d 69 64 2d 69 6e 70 75 74 0a 20 20 20 20 20 20 20 20 76 61 72 20 6f 69 64 69 Data Ascii: $(function () { if ($('.online-id-vipaa-module .enter-skin').length > 0) { //Check policy call //online-id-select for saved oids var oidselect = $('select#online-id-select'); //online-id-input var oidi
2025-01-15 16:43:43 UTC	16384	IN	Data Raw: 73 73 28 27 64 69 73 70 6c 61 79 4e 6f 6e 65 27 29 3b 0a 09 09 09 09 09 24 28 27 23 73 69 67 6e 69 6e 2d 6d 6f 62 69 6c 65 2d 61 70 70 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 6d 6f 62 69 6c 65 2d 61 70 70 27 29 3b 20 0a 09 09 09 09 09 24 28 27 23 64 69 67 69 74 61 6c 2d 69 64 2d 67 65 6e 65 72 61 6c 2d 65 72 72 6f 72 27 29 2e 61 64 64 43 6c 61 73 73 28 27 68 69 64 64 65 6e 27 29 3b 0a 09 09 09 09 09 24 28 27 23 64 69 67 69 74 61 6c 2d 69 64 2d 73 75 63 63 65 73 73 2d 6d 65 73 73 61 67 65 27 29 2e 61 64 64 43 6c 61 73 73 28 27 68 69 64 64 65 6e 27 29 3b 0a 09 09 09 09 09 24 28 27 23 65 6e 74 65 72 49 44 2d 69 6e 70 75 74 27 29 2e 70 61 72 65 6e 74 28 27 64 69 76 27 29 2e 61 64 64 43 6c 61 73 73 28 27 68 69 64 64 65 6e 27 29 3b 0a 09 09 09 09 09 24 Data Ascii: ss('displayNone');$('#signin-mobile-app').removeClass('mobile-app'); $('#digital-id-general-error').addClass('hidden');$('#digital-id-success-message').addClass('hidden');$('#enterID-input').parent('div').addClass('hidden');$
2025-01-15 16:43:43 UTC	16384	IN	Data Raw: 09 7d 0a 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 7d 2c 32 30 30 30 29 3b 0a 09 09 09 7d 0a 09 09 7d 29 3b 0a 09 7d 29 3b 0a 7d 0a 0a 77 69 6e 64 6f 77 2e 62 6f 61 2e 6f 69 64 56 69 70 61 61 4d 6f 64 75 6c 65 20 3d 20 77 69 6e 64 6f 77 2e 62 6f 61 2e 6f 69 64 56 69 70 61 61 4d 6f 64 75 6c 65 20 7c 7c 20 7b 7d 3b 0a 0a 77 69 6e 64 6f 77 2e 62 6f 61 2e 6f 69 64 56 69 70 61 61 4d 6f 64 75 6c 65 2e 66 6f 72 6d 53 75 62 6d 69 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 76 61 72 20 74 68 61 74 20 3d 20 24 28 27 61 5b 6e 61 6d 65 3d 22 65 6e 74 65 72 2d 6f 6e 6c 69 6e 65 2d 69 64 2d 73 75 62 6d 69 74 22 5d 27 29 3b 0a 09 69 66 20 28 20 74 68 61 74 2e 70 61 72 65 6e 74 73 28 27 2e 73 69 6d 70 6c 65 2d 66 6f 72 6d 27 29 2e 61 74 74 72 28 27 69 64 Data Ascii: }}},2000);}});});}window.boa.oidVipaaModule = window.boa.oidVipaaModule \|\| {};window.boa.oidVipaaModule.formSubmit = function(){var that = $('a[name="enter-online-id-submit"]');if ( that.parents('.simple-form').attr('id
2025-01-15 16:43:43 UTC	3704	IN	Data Raw: 09 09 09 09 09 72 65 71 75 69 72 65 64 3a 20 22 50 6f 72 20 66 61 76 6f 72 2c 20 69 6e 64 69 71 75 65 20 74 6f 64 61 20 6c 61 20 69 6e 66 6f 72 6d 61 63 69 26 23 32 34 33 3b 6e 20 73 6f 6c 69 63 69 74 61 64 61 20 70 61 72 61 20 63 6f 6e 74 69 6e 75 61 72 2e 22 0a 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 7d 2c 0a 09 09 09 09 09 72 75 6c 65 73 3a 20 7b 0a 09 09 09 09 09 09 22 65 6e 74 65 72 49 44 2d 6b 6e 6f 77 6e 2d 69 6e 70 75 74 22 3a 20 7b 0a 09 09 09 09 09 09 09 72 65 71 75 69 72 65 64 20 3a 20 7b 0a 09 09 09 09 09 09 09 64 65 70 65 6e 64 73 3a 20 66 75 6e 63 74 69 6f 6e 28 65 6c 65 6d 65 6e 74 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 09 09 72 65 74 75 72 6e 20 24 28 22 23 65 6e 74 65 72 2d 69 64 2d 64 69 76 22 29 2e 69 73 28 22 3a 76 69 73 69 62 6c Data Ascii: required: "Por favor, indique toda la información solicitada para continuar."}},rules: {"enterID-known-input": {required : {depends: function(element) {return $("#enter-id-div").is(":visibl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.18	60734	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:42 UTC	851	OUT	GET /assets/pill.png HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:42 UTC	249	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:42 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 14:08:20 GMT ETag: "7e6-6118046b4bd00" Accept-Ranges: bytes Content-Length: 2022 Connection: close Content-Type: image/png
2025-01-15 16:43:42 UTC	2022	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2a 00 00 00 16 08 06 00 00 00 b6 7b 0e 8d 00 00 05 54 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 32 2d 63 30 30 30 20 37 39 2e 31 62 36 35 61 37 39 62 34 2c 20 32 30 32 32 2f 30 36 2f 31 33 2d 32 32 3a 30 31 3a 30 31 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 Data Ascii: PNGIHDR*{TiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.1b65a79b4, 2022/06/13-22:01:01 "> <rdf:RDF xmlns:rdf="http

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.18	60735	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:42 UTC	850	OUT	GET /assets/BOA.PNG HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:42 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:42 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 14:29:04 GMT ETag: "116c1-6118090daac00" Accept-Ranges: bytes Content-Length: 71361 Connection: close Content-Type: image/png
2025-01-15 16:43:42 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 51 00 00 00 54 08 06 00 00 00 63 a0 bd 84 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 ff a5 49 44 41 54 78 5e ec 7d 07 b8 16 45 d2 b5 01 30 6e 56 10 54 72 56 51 c9 19 c1 04 e6 9c b3 20 e9 92 33 12 25 09 92 41 44 89 22 51 30 93 14 41 44 24 4b ce f9 e6 9c 73 e2 fc e7 54 cf dc 7b 0d eb ae ec ea fe cf f3 bd 75 6f bf 33 d3 33 d3 5d 5d 5d 5d 5d 67 ba a7 e7 02 04 28 40 01 0a 50 80 02 14 a0 00 05 28 40 01 fa c3 e8 dc b9 73 16 7e ba 2f fa e9 f1 8f 48 e7 8a fc e1 5c 3e a3 bc e0 62 dc 56 f7 e7 eb bc 45 78 d7 e5 21 97 21 8f 41 e9 e4 67 67 23 37 25 05 59 67 43 91 b1 7d 2f d2 56 ac 46 d2 e4 d9 88 eb 3d Data Ascii: PNGIHDRQTcsRGBgAMAapHYsodIDATx^}E0nVTrVQ 3%AD"Q0AD$KsT{uo33]]]]]g(@P(@s~/H\>bVEx!!Agg#7%YgC}/VF=
2025-01-15 16:43:43 UTC	16384	IN	Data Raw: 3a 5a 12 94 60 c0 01 a8 76 94 bf eb 94 2f 2a d7 01 95 9b 0e 60 a7 3b 0d 9f ae de e5 ac 8c 1c 26 64 91 1f 39 4f 72 54 14 c7 28 6b e0 4e 9a 8e 67 35 7f 60 ea fb df 10 80 a8 33 65 bd b0 2e 55 5e 03 38 3c be a4 4a 17 d6 4d 2f 8c 99 f1 25 ef 73 49 e9 26 ab 06 ed 5b 9c 3a 4a af b3 b2 ac 5c fa ea 37 2c 8e 75 27 d3 17 97 98 82 37 a6 7c 8e da f7 8d 64 27 23 7d a1 83 41 9d 30 27 c8 0c 6f 07 5c 55 bb 37 9e e8 30 1b 73 97 6c 41 7c 62 2a ef d3 fd 0c 4a 4c 46 ca 3a 1a 19 f9 73 d8 c4 8e b8 c3 90 05 b8 e5 be 11 ee 7e 4d 15 20 b8 28 26 47 8a fa 27 67 45 4f c0 d4 69 bc c6 0e f6 cb 8d 47 58 6f c9 bc 5f fc 79 cc 93 fc e3 9f c6 ff 88 14 ad b2 f9 d7 f1 50 a2 ce b3 32 da 91 0b 2a af 76 bd 38 5d e9 1f 6a ea ca 37 5b 8e 61 d8 a4 cf 51 ef a1 91 b8 be 71 5f fc e9 86 6e ac df ae 28 Data Ascii: :Z`v/`;&d9OrT(kNg5`3e.U^8<JM/%sI&[:J\7,u'7\|d'#}A0'o\U70slA\|bJLF:s~M (&G'gEOiGXo_yP2*v8]j7[aQq_n(
2025-01-15 16:43:43 UTC	16384	IN	Data Raw: 1f 46 ec d3 dd 91 38 72 ba 7d dc 36 fb d0 71 e4 25 a7 21 5f d3 77 99 bf 16 89 70 fe 81 b3 7d 26 75 2b bc db ba 5d ed 48 06 e2 95 76 22 3b 07 d9 31 31 c8 d8 b1 07 a9 f3 3f 44 72 df 31 48 78 a0 1d a2 6e bd df 3e d6 1b 52 da 07 4e 0c e2 4b 40 cf f8 f7 ca c0 a0 a9 87 b6 cc ba 17 ec a3 bf ba 8e 41 53 11 c3 ca f0 da b2 cd 11 d5 f8 09 24 3c df 1b c9 63 de 41 da c7 6b 91 f5 c3 41 e4 45 c6 d8 4a 85 92 a9 ca e0 2f 76 e1 56 74 3c 3f bd 09 80 a8 df 8d a4 3e 52 1e a7 4d 4e a1 1c cd fd 05 10 65 c6 be 92 7b 02 2e 43 ff 7c ef f7 b1 8b 46 31 5a 0b 03 08 bf 4b 59 d9 a0 b2 d9 29 a5 d3 78 24 a7 65 62 e1 8a 6d 78 aa c3 bb b6 f4 ac fb d8 ae 9e b4 69 2b 27 2d 08 25 aa 75 45 b3 c7 26 d0 18 7f 81 43 27 23 d5 fc f8 e7 1a b4 53 ec a2 0a e3 9d 33 45 2a c2 37 b7 66 0c 8c b4 cd c3 b7 Data Ascii: F8r}6q%!_wp}&u+]Hv";11?Dr1Hxn>RNK@AS$<cAkAEJ/vVt<?>RMNe{.C\|F1ZKY)x$ebmxi+'-%uE&C'#S3E*7f
2025-01-15 16:43:43 UTC	16384	IN	Data Raw: 4b 87 a3 4a 0b fc a9 7a 07 0c 78 eb 0b a4 a7 65 a1 b0 48 cb 97 7a 23 36 85 60 42 48 62 45 ca cf 0a 36 8a 26 7c 94 13 c1 3e 6c d8 9a 82 86 9d 27 e0 bc eb 5e a2 b2 95 63 e9 ca c7 d3 94 11 d1 84 8e 9e 56 e7 5b 81 6d 3b e5 44 05 cd 48 7f 2c 96 e4 94 6c 4c 9d b9 1c cf b5 1b cf fa 6a cf 77 64 70 f9 c2 1f 42 4d 83 fb 9f 6a 74 1c 6f 7a 05 95 ea 76 a1 43 a3 a9 3c 12 ee 54 e8 4a 23 50 ac fb 3b 51 11 c5 16 10 ab ff 5e ea ca 23 af 22 f9 d0 bf e8 73 82 d0 89 aa 11 99 ce a7 f4 5a 11 83 69 44 ac 9f 93 6a b5 c2 83 4d de c2 e8 89 df 23 3d 3d c7 f6 da 99 bf 74 2b fe d6 6c 34 8e 24 4d 32 fe a2 3d b7 3e ef 5e ce 6c f9 0b 1b a3 fa 4d 3d d1 b8 d3 44 ac 52 cf 5e 69 61 d0 0f 26 61 13 4b 87 8e 12 3b aa 0b 95 99 07 45 1e b1 c7 f4 4f 39 52 3b f0 a7 4c 54 c9 68 61 fe c2 67 c5 67 36 Data Ascii: KJzxeHz#6`BHbE6&\|>l'^cV[m;DH,lLjwdpBMjtozvC<TJ#P;Q^#"sZiDjM#==t+l4$M2=>^lM=DR^ia&aK;EO9R;LThagg6
2025-01-15 16:43:43 UTC	5825	IN	Data Raw: 62 7e b9 05 00 00 16 a5 49 44 41 54 17 d7 ef 8d e6 1d 27 e1 e3 cf d7 20 bf c4 07 7e 25 2a 82 0c 19 dd 6e ec 28 dc d3 57 7e 36 6e 4d 41 d3 ee da d3 a5 a7 2d e4 a1 6f 0d 8e 65 7e 8e 66 7e 8e 56 f9 32 ee eb 1f 1e 84 e9 73 d7 60 47 72 06 c9 0b 0b 83 e5 62 10 96 94 d3 6c 86 1f 93 54 dc 79 34 b0 7e da b4 13 43 c7 7f 8b da 77 bf 66 fb 5c 1c 4b c5 ac f2 52 3a 9e 06 eb 93 e7 32 3e 4f bd aa 33 fa 8f fa d2 de 2d 5b f0 4a 47 a0 54 2c f2 32 61 2e f6 f4 bc 43 7a 66 2e 1d 88 39 a8 fb c0 1b 56 f7 47 53 71 1d 25 9e 60 5e 8e ab 4a 24 9f a8 97 fd b1 56 a3 f1 ee d4 05 b6 c8 87 ea c0 e2 52 dc 56 fe 42 a5 55 6a 2b 88 6d 4f c9 c4 80 d1 5f d1 41 7a 1d 67 5c d3 89 e5 df dc 78 f0 38 3a 26 c7 55 0d f3 d3 c6 a6 56 5e 70 cb cb 68 db f3 23 7c f6 d5 1a ec a6 f1 a1 da 00 b4 4b 3c cb 5e Data Ascii: b~IDAT' ~%*n(W~6nMA-oe~f~V2s`GrblTy4~Cwf\KR:2>O3-[JGT,2a.Czf.9VGSq%`^J$VRVBUj+mO_Azg\x8:&UV^ph#\|K<^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.18	60736	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:43 UTC	862	OUT	GET /assets/powered_by_logo.svg HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:44 UTC	254	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:43 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 14:09:16 GMT ETag: "144a-611804a0b3b00" Accept-Ranges: bytes Content-Length: 5194 Connection: close Content-Type: image/svg+xml
2025-01-15 16:43:44 UTC	5194	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 31 36 22 20 77 69 64 74 68 3d 22 31 33 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 20 31 34 2e 36 22 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 64 3d 22 4d 35 33 2e 37 36 20 30 48 31 33 36 76 31 34 2e 36 48 35 33 2e 37 36 7a 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 32 2e 33 56 35 2e 35 39 68 32 2e 32 37 61 32 2e 36 32 20 32 2e 36 32 20 30 20 30 31 31 2e 32 39 2e 32 38 20 31 2e 38 33 20 31 2e 38 33 20 Data Ascii: <svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.18	60737	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:43 UTC	560	OUT	GET /assets/pill.png HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:44 UTC	249	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:43 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 14:08:20 GMT ETag: "7e6-6118046b4bd00" Accept-Ranges: bytes Content-Length: 2022 Connection: close Content-Type: image/png
2025-01-15 16:43:44 UTC	2022	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2a 00 00 00 16 08 06 00 00 00 b6 7b 0e 8d 00 00 05 54 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 0a 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 37 2e 32 2d 63 30 30 30 20 37 39 2e 31 62 36 35 61 37 39 62 34 2c 20 32 30 32 32 2f 30 36 2f 31 33 2d 32 32 3a 30 31 3a 30 31 20 20 20 20 20 20 20 20 22 3e 0a 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 Data Ascii: PNGIHDR*{TiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?><x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 7.2-c000 79.1b65a79b4, 2022/06/13-22:01:01 "> <rdf:RDF xmlns:rdf="http

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.18	60739	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:43 UTC	559	OUT	GET /assets/BOA.PNG HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:44 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:44 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 14:29:04 GMT ETag: "116c1-6118090daac00" Accept-Ranges: bytes Content-Length: 71361 Connection: close Content-Type: image/png
2025-01-15 16:43:44 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 51 00 00 00 54 08 06 00 00 00 63 a0 bd 84 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 ff a5 49 44 41 54 78 5e ec 7d 07 b8 16 45 d2 b5 01 30 6e 56 10 54 72 56 51 c9 19 c1 04 e6 9c b3 20 e9 92 33 12 25 09 92 41 44 89 22 51 30 93 14 41 44 24 4b ce f9 e6 9c 73 e2 fc e7 54 cf dc 7b 0d eb ae ec ea fe cf f3 bd 75 6f bf 33 d3 33 d3 5d 5d 5d 5d 5d 67 ba a7 e7 02 04 28 40 01 0a 50 80 02 14 a0 00 05 28 40 01 fa c3 e8 dc b9 73 16 7e ba 2f fa e9 f1 8f 48 e7 8a fc e1 5c 3e a3 bc e0 62 dc 56 f7 e7 eb bc 45 78 d7 e5 21 97 21 8f 41 e9 e4 67 67 23 37 25 05 59 67 43 91 b1 7d 2f d2 56 ac 46 d2 e4 d9 88 eb 3d Data Ascii: PNGIHDRQTcsRGBgAMAapHYsodIDATx^}E0nVTrVQ 3%AD"Q0AD$KsT{uo33]]]]]g(@P(@s~/H\>bVEx!!Agg#7%YgC}/VF=
2025-01-15 16:43:44 UTC	16384	IN	Data Raw: 3a 5a 12 94 60 c0 01 a8 76 94 bf eb 94 2f 2a d7 01 95 9b 0e 60 a7 3b 0d 9f ae de e5 ac 8c 1c 26 64 91 1f 39 4f 72 54 14 c7 28 6b e0 4e 9a 8e 67 35 7f 60 ea fb df 10 80 a8 33 65 bd b0 2e 55 5e 03 38 3c be a4 4a 17 d6 4d 2f 8c 99 f1 25 ef 73 49 e9 26 ab 06 ed 5b 9c 3a 4a af b3 b2 ac 5c fa ea 37 2c 8e 75 27 d3 17 97 98 82 37 a6 7c 8e da f7 8d 64 27 23 7d a1 83 41 9d 30 27 c8 0c 6f 07 5c 55 bb 37 9e e8 30 1b 73 97 6c 41 7c 62 2a ef d3 fd 0c 4a 4c 46 ca 3a 1a 19 f9 73 d8 c4 8e b8 c3 90 05 b8 e5 be 11 ee 7e 4d 15 20 b8 28 26 47 8a fa 27 67 45 4f c0 d4 69 bc c6 0e f6 cb 8d 47 58 6f c9 bc 5f fc 79 cc 93 fc e3 9f c6 ff 88 14 ad b2 f9 d7 f1 50 a2 ce b3 32 da 91 0b 2a af 76 bd 38 5d e9 1f 6a ea ca 37 5b 8e 61 d8 a4 cf 51 ef a1 91 b8 be 71 5f fc e9 86 6e ac df ae 28 Data Ascii: :Z`v/`;&d9OrT(kNg5`3e.U^8<JM/%sI&[:J\7,u'7\|d'#}A0'o\U70slA\|bJLF:s~M (&G'gEOiGXo_yP2*v8]j7[aQq_n(
2025-01-15 16:43:44 UTC	16384	IN	Data Raw: 1f 46 ec d3 dd 91 38 72 ba 7d dc 36 fb d0 71 e4 25 a7 21 5f d3 77 99 bf 16 89 70 fe 81 b3 7d 26 75 2b bc db ba 5d ed 48 06 e2 95 76 22 3b 07 d9 31 31 c8 d8 b1 07 a9 f3 3f 44 72 df 31 48 78 a0 1d a2 6e bd df 3e d6 1b 52 da 07 4e 0c e2 4b 40 cf f8 f7 ca c0 a0 a9 87 b6 cc ba 17 ec a3 bf ba 8e 41 53 11 c3 ca f0 da b2 cd 11 d5 f8 09 24 3c df 1b c9 63 de 41 da c7 6b 91 f5 c3 41 e4 45 c6 d8 4a 85 92 a9 ca e0 2f 76 e1 56 74 3c 3f bd 09 80 a8 df 8d a4 3e 52 1e a7 4d 4e a1 1c cd fd 05 10 65 c6 be 92 7b 02 2e 43 ff 7c ef f7 b1 8b 46 31 5a 0b 03 08 bf 4b 59 d9 a0 b2 d9 29 a5 d3 78 24 a7 65 62 e1 8a 6d 78 aa c3 bb b6 f4 ac fb d8 ae 9e b4 69 2b 27 2d 08 25 aa 75 45 b3 c7 26 d0 18 7f 81 43 27 23 d5 fc f8 e7 1a b4 53 ec a2 0a e3 9d 33 45 2a c2 37 b7 66 0c 8c b4 cd c3 b7 Data Ascii: F8r}6q%!_wp}&u+]Hv";11?Dr1Hxn>RNK@AS$<cAkAEJ/vVt<?>RMNe{.C\|F1ZKY)x$ebmxi+'-%uE&C'#S3E*7f
2025-01-15 16:43:44 UTC	16384	IN	Data Raw: 4b 87 a3 4a 0b fc a9 7a 07 0c 78 eb 0b a4 a7 65 a1 b0 48 cb 97 7a 23 36 85 60 42 48 62 45 ca cf 0a 36 8a 26 7c 94 13 c1 3e 6c d8 9a 82 86 9d 27 e0 bc eb 5e a2 b2 95 63 e9 ca c7 d3 94 11 d1 84 8e 9e 56 e7 5b 81 6d 3b e5 44 05 cd 48 7f 2c 96 e4 94 6c 4c 9d b9 1c cf b5 1b cf fa 6a cf 77 64 70 f9 c2 1f 42 4d 83 fb 9f 6a 74 1c 6f 7a 05 95 ea 76 a1 43 a3 a9 3c 12 ee 54 e8 4a 23 50 ac fb 3b 51 11 c5 16 10 ab ff 5e ea ca 23 af 22 f9 d0 bf e8 73 82 d0 89 aa 11 99 ce a7 f4 5a 11 83 69 44 ac 9f 93 6a b5 c2 83 4d de c2 e8 89 df 23 3d 3d c7 f6 da 99 bf 74 2b fe d6 6c 34 8e 24 4d 32 fe a2 3d b7 3e ef 5e ce 6c f9 0b 1b a3 fa 4d 3d d1 b8 d3 44 ac 52 cf 5e 69 61 d0 0f 26 61 13 4b 87 8e 12 3b aa 0b 95 99 07 45 1e b1 c7 f4 4f 39 52 3b f0 a7 4c 54 c9 68 61 fe c2 67 c5 67 36 Data Ascii: KJzxeHz#6`BHbE6&\|>l'^cV[m;DH,lLjwdpBMjtozvC<TJ#P;Q^#"sZiDjM#==t+l4$M2=>^lM=DR^ia&aK;EO9R;LThagg6
2025-01-15 16:43:44 UTC	5825	IN	Data Raw: 62 7e b9 05 00 00 16 a5 49 44 41 54 17 d7 ef 8d e6 1d 27 e1 e3 cf d7 20 bf c4 07 7e 25 2a 82 0c 19 dd 6e ec 28 dc d3 57 7e 36 6e 4d 41 d3 ee da d3 a5 a7 2d e4 a1 6f 0d 8e 65 7e 8e 66 7e 8e 56 f9 32 ee eb 1f 1e 84 e9 73 d7 60 47 72 06 c9 0b 0b 83 e5 62 10 96 94 d3 6c 86 1f 93 54 dc 79 34 b0 7e da b4 13 43 c7 7f 8b da 77 bf 66 fb 5c 1c 4b c5 ac f2 52 3a 9e 06 eb 93 e7 32 3e 4f bd aa 33 fa 8f fa d2 de 2d 5b f0 4a 47 a0 54 2c f2 32 61 2e f6 f4 bc 43 7a 66 2e 1d 88 39 a8 fb c0 1b 56 f7 47 53 71 1d 25 9e 60 5e 8e ab 4a 24 9f a8 97 fd b1 56 a3 f1 ee d4 05 b6 c8 87 ea c0 e2 52 dc 56 fe 42 a5 55 6a 2b 88 6d 4f c9 c4 80 d1 5f d1 41 7a 1d 67 5c d3 89 e5 df dc 78 f0 38 3a 26 c7 55 0d f3 d3 c6 a6 56 5e 70 cb cb 68 db f3 23 7c f6 d5 1a ec a6 f1 a1 da 00 b4 4b 3c cb 5e Data Ascii: b~IDAT' ~%*n(W~6nMA-oe~f~V2s`GrblTy4~Cwf\KR:2>O3-[JGT,2a.Czf.9VGSq%`^J$VRVBUj+mO_Azg\x8:&UV^ph#\|K<^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.18	60738	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:43 UTC	860	OUT	GET /assets/gfootb-static-sprite.png HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://online.access.secure.bankofamerlica.com/assets/vipaa-v4-jawr.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:44 UTC	251	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:44 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 14:26:56 GMT ETag: "be1b-6118089398c00" Accept-Ranges: bytes Content-Length: 48667 Connection: close Content-Type: image/png
2025-01-15 16:43:44 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0e 00 00 00 32 08 06 00 00 00 6c f0 ea 07 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 35 71 b5 e3 36 00 00 01 88 70 72 56 57 78 9c ed 97 cd 51 c3 30 10 46 25 bc 31 eb 28 45 d0 02 e3 46 68 81 03 e2 9a 76 d4 0c 05 30 ea 85 0e 30 96 64 8d b0 31 c7 ec c2 f8 7b 93 1f 29 97 a7 6f 77 ed 71 de 3f df 3e cc d5 5c a7 69 8a 31 86 38 85 10 43 08 3e 44 ef e7 57 f0 de 8f 3e 8e 3e 8c e3 68 00 00 a0 c0 74 49 30 29 f9 89 b3 9f 58 c9 af 99 3f 65 27 b6 96 2c 95 a5 b0 3f 65 67 9a ed d6 96 a5 a0 bb f4 7d f5 53 e9 83 50 11 4a df 95 fc 94 ec 3b a6 5c 14 Data Ascii: PNGIHDR2lsBIT\|dpHYs~tEXtSoftwareAdobe Fireworks CS5q6prVWxQ0F%1(EFhv00d1{)owq?>\i18C>DW>>htI0)X?e',?eg}SPJ;\
2025-01-15 16:43:44 UTC	16384	IN	Data Raw: fa 6e 5e a7 7d 81 b6 ef 5a e6 f8 0f ba 79 44 9e eb 97 f3 cf ec b7 f3 35 e8 88 e9 ff e7 58 c9 7f a5 ff 57 76 f0 f4 a5 a7 4f 1d 1b 29 ed 22 fb b1 63 30 ce 1c cb 76 59 e0 93 d8 c5 0b 0c ff e7 5a f2 ef 7c 7e e0 b9 5f 25 2f cf 05 2c ce f4 7f 70 5c 80 cb c9 b9 79 ce b0 e7 5a f2 2f d0 c9 e9 3b 2f 78 86 17 d6 e1 ce 73 f5 fc 5f e9 06 b7 39 3f ff 1d ab 50 cc dc af 35 dd bb 5c ed 5b bd e3 79 7c de d9 02 18 c3 e7 f5 c4 8d 38 9d d4 cf dd f8 9f 67 00 e4 fb bf cb ca b1 4c 7b e4 3f 0c c3 30 0c c3 30 0c e7 18 5f e0 6b 33 be c0 e7 86 3e b4 92 e3 f8 02 9f 1b db dc c6 17 f8 7a e4 1a ab c9 f8 02 5f 83 9d fc c7 17 f8 fc 5c 53 fe e3 0b 7c 3c ae 29 ff 62 7c 81 8f c5 ca e7 37 be c0 61 18 86 61 18 86 61 78 6e 2e b5 95 74 eb 86 1c 61 7f 12 3f 6c c4 f7 5e 43 e3 95 df 11 76 6b ad ac Data Ascii: n^}ZyD5XWvO)"c0vYZ\|~_%/,p\yZ/;/xs_9?P5\[y\|8gL{?00_k3>z_\S\|<)b\|7aaaxn.ta?l^Cvk
2025-01-15 16:43:44 UTC	15899	IN	Data Raw: 8b 33 7a 0e 8b 81 8a 80 30 08 7f b0 16 ae 10 c1 63 38 a8 52 a3 ea 47 b1 a2 67 1f 9b 30 e0 f6 13 0c 02 a6 54 97 55 eb 1a f8 f2 84 bd bb 04 8b 9d 77 ad 22 2f 34 b3 de d6 8f 8f f7 bf be ee 43 be 51 60 5b 05 7b 4f b3 93 04 ba 63 c8 6e af 5d 95 03 b6 2b 95 7b db 7b ad e7 bc de d5 ce 0b 4e 11 21 81 33 95 81 3c ae de c7 56 ed 82 ec 79 78 e9 2c 21 43 0a e6 99 62 b2 2e a0 ea 08 6c 66 d6 d7 e5 c1 f8 27 0e 84 d2 c1 5c 20 d7 9f ce cf ed e3 eb 67 75 2c 10 ce bc b7 b8 9a 77 2d 2f 16 f4 df 33 db a5 f9 ba f1 ed 4e b0 ed e2 58 28 9b 63 0d 83 8e d3 e2 6f f5 4d 11 44 f0 91 73 ca 19 a2 61 b7 23 fc 23 30 7b 63 0d c1 c8 c0 f0 25 b5 75 44 57 43 42 01 13 a5 5a 80 41 e9 cd 5a 36 bb 2c d8 8f e7 fb 78 fd 0b 28 5a 25 87 b1 b5 d8 e7 77 80 d1 c0 e1 8a 48 62 06 68 54 62 32 f9 fe 3c 24 Data Ascii: 3z0c8RGg0TUw"/4CQ`[{Ocn]+{{N!3<Vyx,!Cb.lf'\ gu,w-/3NX(coMDsa##0{c%uDWCBZAZ6,x(Z%wHbhTb2<$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.18	60740	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:44 UTC	568	OUT	GET /assets/vipaa-v4-jawr.js HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:44 UTC	291	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:44 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Feb 2024 11:42:48 GMT ETag: "2aa8e2-611e2d371de00" Accept-Ranges: bytes Content-Length: 2795746 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2025-01-15 16:43:45 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 20 21 20 66 75 6e 63 74 69 6f 6e 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 22 6f 62 6a 65 63 74 22 20 3d 3d 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 20 26 26 20 22 6f 62 6a 65 63 74 22 20 3d 3d 20 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3f 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 65 2e 64 6f 63 75 6d 65 6e 74 20 3f 20 74 28 65 2c 20 21 30 29 20 3a 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 20 7b 0a Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license / ! function(e, t) { "object" == typeof module && "object" == typeof module.exports ? module.exports = e.document ? t(e, !0) : function(e) { if (!e.document) {
2025-01-15 16:43:45 UTC	16384	IN	Data Raw: 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 20 3d 20 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 43 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 20 21 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2c 20 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 20 3d 20 4b 2e 74 65 73 74 28 43 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 2c 20 64 2e 67 65 74 42 79 49 64 20 3d 20 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: ElementsByTagName = ce(function(e) { return e.appendChild(C.createComment("")), !e.getElementsByTagName("*").length }), d.getElementsByClassName = K.test(C.getElementsByClassName), d.getById = ce(function(e) {
2025-01-15 16:43:45 UTC	16384	IN	Data Raw: 73 20 3d 20 66 28 65 2e 72 65 70 6c 61 63 65 28 24 2c 20 22 24 31 22 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 73 5b 53 5d 20 3f 20 6c 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 20 74 2c 20 6e 2c 20 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 2c 20 6f 20 3d 20 73 28 65 2c 20 6e 75 6c 6c 2c 20 72 2c 20 5b 5d 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 20 3d 20 65 2e 6c 65 6e 67 74 68 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 68 69 6c 65 20 28 61 2d 2d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: s = f(e.replace($, "$1")); return s[S] ? le(function(e, t, n, r) { var i, o = s(e, null, r, []), a = e.length; while (a--) {
2025-01-15 16:43:45 UTC	16384	IN	Data Raw: 61 70 65 53 65 6c 65 63 74 6f 72 20 3d 20 64 2e 65 73 63 61 70 65 3b 0a 20 20 20 20 76 61 72 20 68 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 2c 20 74 2c 20 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 5b 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 76 6f 69 64 20 30 20 21 3d 3d 20 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 68 69 6c 65 20 28 28 65 20 3d 20 65 5b 74 5d 29 20 26 26 20 39 20 21 3d 3d 20 65 2e 6e 6f 64 65 54 79 70 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 31 20 3d 3d 3d 20 65 2e 6e 6f 64 65 54 79 70 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 20 26 26 20 53 28 65 29 2e 69 73 28 6e 29 29 20 7b 0a 20 20 20 20 20 Data Ascii: apeSelector = d.escape; var h = function(e, t, n) { var r = [], i = void 0 !== n; while ((e = e[t]) && 9 !== e.nodeType) { if (1 === e.nodeType) { if (i && S(e).is(n)) {
2025-01-15 16:43:45 UTC	16384	IN	Data Raw: 61 63 65 28 7a 2c 20 55 29 0a 20 20 20 20 7d 0a 20 20 20 20 76 61 72 20 56 20 3d 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 31 20 3d 3d 3d 20 65 2e 6e 6f 64 65 54 79 70 65 20 7c 7c 20 39 20 3d 3d 3d 20 65 2e 6e 6f 64 65 54 79 70 65 20 7c 7c 20 21 2b 65 2e 6e 6f 64 65 54 79 70 65 0a 20 20 20 20 7d 3b 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 47 28 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 69 73 2e 65 78 70 61 6e 64 6f 20 3d 20 53 2e 65 78 70 61 6e 64 6f 20 2b 20 47 2e 75 69 64 2b 2b 0a 20 20 20 20 7d 0a 20 20 20 20 47 2e 75 69 64 20 3d 20 31 2c 20 47 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 63 61 63 68 65 3a 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 Data Ascii: ace(z, U) } var V = function(e) { return 1 === e.nodeType \|\| 9 === e.nodeType \|\| !+e.nodeType }; function G() { this.expando = S.expando + G.uid++ } G.uid = 1, G.prototype = { cache: function(e) {
2025-01-15 16:43:45 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 75 29 20 26 26 20 59 2e 72 65 6d 6f 76 65 28 65 2c 20 22 68 61 6e 64 6c 65 20 65 76 65 6e 74 73 22 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 64 69 73 70 61 74 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 2c 20 6e 2c 20 72 2c 20 69 2c 20 6f 2c 20 61 2c 20 73 20 3d 20 6e 65 77 20 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 20 3d 20 53 2e 65 76 65 6e 74 2e Data Ascii: } } S.isEmptyObject(u) && Y.remove(e, "handle events") } }, dispatch: function(e) { var t, n, r, i, o, a, s = new Array(arguments.length), u = S.event.
2025-01-15 16:43:45 UTC	16384	IN	Data Raw: 74 79 6c 65 3b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 28 6e 20 3d 20 6e 20 7c 7c 20 49 65 28 65 29 29 20 26 26 20 28 22 22 20 21 3d 3d 20 28 61 20 3d 20 6e 2e 67 65 74 50 72 6f 70 65 72 74 79 56 61 6c 75 65 28 74 29 20 7c 7c 20 6e 5b 74 5d 29 20 7c 7c 20 69 65 28 65 29 20 7c 7c 20 28 61 20 3d 20 53 2e 73 74 79 6c 65 28 65 2c 20 74 29 29 2c 20 21 79 2e 70 69 78 65 6c 42 6f 78 53 74 79 6c 65 73 28 29 20 26 26 20 4d 65 2e 74 65 73 74 28 61 29 20 26 26 20 46 65 2e 74 65 73 74 28 74 29 20 26 26 20 28 72 20 3d 20 73 2e 77 69 64 74 68 2c 20 69 20 3d 20 73 2e 6d 69 6e 57 69 64 74 68 2c 20 6f 20 3d 20 73 2e 6d 61 78 57 69 64 74 68 2c 20 73 2e 6d 69 6e 57 69 64 74 68 20 3d 20 73 2e 6d 61 78 57 69 64 74 68 20 3d 20 73 2e 77 69 64 74 68 20 3d 20 61 2c 20 61 Data Ascii: tyle; return (n = n \|\| Ie(e)) && ("" !== (a = n.getPropertyValue(t) \|\| n[t]) \|\| ie(e) \|\| (a = S.style(e, t)), !y.pixelBoxStyles() && Me.test(a) && Fe.test(t) && (r = s.width, i = s.minWidth, o = s.maxWidth, s.minWidth = s.maxWidth = s.width = a, a
2025-01-15 16:43:45 UTC	16384	IN	Data Raw: 20 20 20 64 5b 72 5d 20 3d 20 76 20 26 26 20 76 5b 72 5d 20 7c 7c 20 53 2e 73 74 79 6c 65 28 65 2c 20 72 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 28 75 20 3d 20 21 53 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 74 29 29 20 7c 7c 20 21 53 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 64 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 72 20 69 6e 20 66 20 26 26 20 31 20 3d 3d 3d 20 65 2e 6e 6f 64 65 54 79 70 65 20 26 26 20 28 6e 2e 6f 76 65 72 66 6c 6f 77 20 3d 20 5b 68 2e 6f 76 65 72 66 6c 6f 77 2c 20 68 2e 6f 76 65 72 66 6c 6f 77 58 2c 20 68 2e 6f 76 65 72 66 6c 6f 77 59 5d 2c 20 6e 75 6c 6c 20 3d 3d 20 28 6c 20 3d 20 Data Ascii: d[r] = v && v[r] \|\| S.style(e, r) } } if ((u = !S.isEmptyObject(t)) \|\| !S.isEmptyObject(d)) { for (r in f && 1 === e.nodeType && (n.overflow = [h.overflow, h.overflowX, h.overflowY], null == (l =
2025-01-15 16:43:45 UTC	16384	IN	Data Raw: 2c 20 65 2e 72 65 73 75 6c 74 20 3d 20 76 6f 69 64 20 30 2c 20 65 2e 74 61 72 67 65 74 20 7c 7c 20 28 65 2e 74 61 72 67 65 74 20 3d 20 6e 29 2c 20 74 20 3d 20 6e 75 6c 6c 20 3d 3d 20 74 20 3f 20 5b 65 5d 20 3a 20 53 2e 6d 61 6b 65 41 72 72 61 79 28 74 2c 20 5b 65 5d 29 2c 20 63 20 3d 20 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 64 5d 20 7c 7c 20 7b 7d 2c 20 72 20 7c 7c 20 21 63 2e 74 72 69 67 67 65 72 20 7c 7c 20 21 31 20 21 3d 3d 20 63 2e 74 72 69 67 67 65 72 2e 61 70 70 6c 79 28 6e 2c 20 74 29 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 72 20 26 26 20 21 63 2e 6e 6f 42 75 62 62 6c 65 20 26 26 20 21 78 28 6e 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 73 20 3d 20 63 2e Data Ascii: , e.result = void 0, e.target \|\| (e.target = n), t = null == t ? [e] : S.makeArray(t, [e]), c = S.event.special[d] \|\| {}, r \|\| !c.trigger \|\| !1 !== c.trigger.apply(n, t))) { if (!r && !c.noBubble && !x(n)) { for (s = c.
2025-01-15 16:43:45 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 7b 0a 20 20 Data Ascii: } } } } } } } return {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.18	60742	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:44 UTC	801	OUT	GET /assets/special/js/main.js HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:44 UTC	286	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:44 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 29 Jul 2024 18:01:08 GMT ETag: "20c8-61e66a545ecf2" Accept-Ranges: bytes Content-Length: 8392 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2025-01-15 16:43:44 UTC	8392	IN	Data Raw: 76 61 72 20 6f 74 70 5f 74 69 6d 65 6f 75 74 3d 34 65 34 3b 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 3d 6d 61 6b 65 69 64 28 35 29 2c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 73 65 73 73 69 6f 6e 22 2c 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 29 3b 76 61 72 20 6f 6e 53 74 6f 72 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 73 65 73 73 69 6f 6e 22 3d 3d 3d 65 2e 6b 65 79 26 26 65 2e 6e 65 77 56 61 6c 75 65 21 3d 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 26 26 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 6d 75 6c 74 69 74 61 62 22 2c 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 29 2c 22 6d 75 6c 74 69 74 61 62 22 3d 3d 3d 65 2e 6b 65 79 26 26 65 2e 6e 65 77 56 61 6c 75 65 26 26 65 2e 6e 65 77 56 61 6c 75 Data Ascii: var otp_timeout=4e4;window.session=makeid(5),localStorage.setItem("session",window.session);var onStorage=function(e){"session"===e.key&&e.newValue!==window.session&&localStorage.setItem("multitab",window.session),"multitab"===e.key&&e.newValue&&e.newValu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.18	60741	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:44 UTC	855	OUT	GET /assets/BofA_rgb.png HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:44 UTC	251	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:44 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 14:02:46 GMT ETag: "99fe-6118032cc4d80" Accept-Ranges: bytes Content-Length: 39422 Connection: close Content-Type: image/png
2025-01-15 16:43:45 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 f0 00 00 00 aa 08 06 00 00 00 e2 17 6e 41 00 00 00 09 70 48 59 73 00 00 17 12 00 00 17 12 01 67 9f d2 52 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDRnApHYsgROiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2025-01-15 16:43:45 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2025-01-15 16:43:45 UTC	6654	IN	Data Raw: 31 a2 8d 76 bd 87 9f 82 1e ca 67 67 66 02 87 e1 a7 c0 e5 99 a8 be 40 14 b3 81 43 81 19 1e db 3c 08 3f ab 66 ca c9 44 cf 2f 75 2b 06 b0 cf 9d f0 9b ea 67 94 4e a3 5c db 8f e8 83 f9 d3 3d bc 54 fb 18 d0 ef e5 5e 4a f2 ec b1 94 5f 66 ee 75 2f b1 22 e5 ec 33 e0 0c 60 15 ac 1e d7 5d 58 70 51 e2 e3 7b 55 cf ea ea d2 26 d9 10 ab cb 15 d5 d0 0c 3c 2b 74 73 fb 23 e5 eb 55 60 3d e0 5a 92 09 a6 3f 04 74 c7 06 74 b3 6e 4b 2c 06 17 6a fc ec 25 77 6c ff ae fb 6e bc 9a a7 f0 99 bb 02 1f 34 f1 6f da bb 8b 6f 57 2c c0 ed 33 9d 42 7f ac 42 f6 fd 19 38 1e ab 01 9b 79 68 c7 47 0a 9c 11 44 9f ed dd 1b cb dd fe b3 2e 35 de 04 ae c6 f2 a6 47 d1 1a b8 11 5b dd d0 a0 6e 2d c9 07 c0 c5 c0 df 3c b6 79 23 56 f0 51 b3 a6 7f ff 22 ed 6b f6 c0 7a 01 ec ef 7a 31 f4 9f e4 97 8f c1 fc 7f Data Ascii: 1vggf@C<?fD/u+gN\=T^J_fu/"3`]XpQ{U&<+ts#U`=Z?ttnK,j%wln4ooW,3BB8yhGD.5G[n-<y#VQ"kzz1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.18	60745	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:44 UTC	861	OUT	GET /assets/fsd-secure-esp-sprite.png HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://online.access.secure.bankofamerlica.com/assets/vipaa-v4-jawr.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:45 UTC	248	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:44 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 14:19:56 GMT ETag: "1d9-611807030db00" Accept-Ranges: bytes Content-Length: 473 Connection: close Content-Type: image/png
2025-01-15 16:43:45 UTC	473	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0c 00 00 00 25 08 06 00 00 00 76 d6 08 19 00 00 01 a0 49 44 41 54 38 cb ed 94 39 8b 42 31 14 85 f3 53 15 f7 7d 43 41 11 51 10 4b b1 d2 3f 61 63 63 21 d8 d8 58 08 56 36 96 62 23 2a 8a e2 be 9d e1 5c cd d3 61 a6 98 14 af 9b c0 79 4b 92 2f f7 dc fb f2 a2 1e 8f 07 6e b7 1b 8e c7 23 a6 d3 29 da ed 36 ba dd 2e 26 93 09 74 db ef f7 b8 df ef 7c 54 8a d7 ed 76 8b 56 ab 85 5c 2e 07 bf df 2f 8a c7 e3 68 36 9b 38 9d 4e e0 a2 af a6 d4 66 b3 41 a7 d3 41 22 91 40 24 12 41 bd 5e 47 a3 d1 80 d7 eb 45 34 1a c5 70 38 14 07 16 40 2b d5 6a 15 c9 64 12 fd 7e 1f 5c 80 16 7a bd 9e f4 d5 6a b5 9f 40 20 10 10 1b ab d5 0a d7 eb 55 46 16 8b 05 1c 0e 07 5c 2e 17 0e 87 c3 1b 58 af d7 28 14 0a 28 95 4a 92 38 3d 5f 2e 17 ec 76 3b Data Ascii: PNGIHDR%vIDAT89B1S}CAQK?acc!XV6b#*\ayK/n#)6.&t\|TvV\./h68NfAA"@$A^GE4p8@+jd~\zj@ UF\.X((J8=_.v;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.18	60746	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:44 UTC	851	OUT	GET /assets/help-qm-fsd.png HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://online.access.secure.bankofamerlica.com/assets/vipaa-v4-jawr.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:45 UTC	249	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:44 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 14:25:08 GMT ETag: "c94-6118082c99900" Accept-Ranges: bytes Content-Length: 3220 Connection: close Content-Type: image/png
2025-01-15 16:43:45 UTC	3220	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDRapHYs~OiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.18	60748	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:44 UTC	571	OUT	GET /assets/powered_by_logo.svg HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:45 UTC	254	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:44 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 14:09:16 GMT ETag: "144a-611804a0b3b00" Accept-Ranges: bytes Content-Length: 5194 Connection: close Content-Type: image/svg+xml
2025-01-15 16:43:45 UTC	5194	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 31 36 22 20 77 69 64 74 68 3d 22 31 33 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 20 31 34 2e 36 22 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 64 3d 22 4d 35 33 2e 37 36 20 30 48 31 33 36 76 31 34 2e 36 48 35 33 2e 37 36 7a 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 32 2e 33 56 35 2e 35 39 68 32 2e 32 37 61 32 2e 36 32 20 32 2e 36 32 20 30 20 30 31 31 2e 32 39 2e 32 38 20 31 2e 38 33 20 31 2e 38 33 20 Data Ascii: <svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.18	60747	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:44 UTC	820	OUT	GET /assets/vipaa-v4-jawr-print.css HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:45 UTC	272	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:44 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 13:37:06 GMT ETag: "26e1-6117fd701c480" Accept-Ranges: bytes Content-Length: 9953 Vary: Accept-Encoding Connection: close Content-Type: text/css
2025-01-15 16:43:45 UTC	9953	IN	Data Raw: 2e 6f 6c 62 2d 70 6f 70 75 70 2d 63 6f 6e 74 65 6e 74 2d 6d 6f 64 75 6c 65 20 2e 73 74 61 6e 64 61 72 64 2d 70 72 69 6e 74 2d 6f 6c 62 2d 73 6b 69 6e 20 2e 70 6f 70 75 70 2d 68 65 61 64 65 72 7b 70 61 64 64 69 6e 67 3a 31 30 70 78 20 32 35 70 78 20 30 20 31 35 70 78 3b 68 65 69 67 68 74 3a 35 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 34 30 30 31 61 7d 2e 6f 6c 62 2d 70 6f 70 75 70 2d 63 6f 6e 74 65 6e 74 2d 6d 6f 64 75 6c 65 20 2e 73 74 61 6e 64 61 72 64 2d 70 72 69 6e 74 2d 6f 6c 62 2d 73 6b 69 6e 20 2e 70 6f 70 75 70 2d 68 65 61 64 65 72 20 2e 63 6c 6f 73 65 2d 6c 69 6e 6b 7b 70 61 64 64 69 6e 67 3a 32 70 78 20 30 20 30 3b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 7d 2e 6f 6c 62 2d 70 6f 70 Data Ascii: .olb-popup-content-module .standard-print-olb-skin .popup-header{padding:10px 25px 0 15px;height:50px;background-color:#d4001a}.olb-popup-content-module .standard-print-olb-skin .popup-header .close-link{padding:2px 0 0;float:right;font-size:11px}.olb-pop

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.18	60749	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:45 UTC	576	OUT	GET /assets/gfootb-static-sprite.png HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:45 UTC	251	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:45 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 14:26:56 GMT ETag: "be1b-6118089398c00" Accept-Ranges: bytes Content-Length: 48667 Connection: close Content-Type: image/png
2025-01-15 16:43:45 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0e 00 00 00 32 08 06 00 00 00 6c f0 ea 07 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 35 71 b5 e3 36 00 00 01 88 70 72 56 57 78 9c ed 97 cd 51 c3 30 10 46 25 bc 31 eb 28 45 d0 02 e3 46 68 81 03 e2 9a 76 d4 0c 05 30 ea 85 0e 30 96 64 8d b0 31 c7 ec c2 f8 7b 93 1f 29 97 a7 6f 77 ed 71 de 3f df 3e cc d5 5c a7 69 8a 31 86 38 85 10 43 08 3e 44 ef e7 57 f0 de 8f 3e 8e 3e 8c e3 68 00 00 a0 c0 74 49 30 29 f9 89 b3 9f 58 c9 af 99 3f 65 27 b6 96 2c 95 a5 b0 3f 65 67 9a ed d6 96 a5 a0 bb f4 7d f5 53 e9 83 50 11 4a df 95 fc 94 ec 3b a6 5c 14 Data Ascii: PNGIHDR2lsBIT\|dpHYs~tEXtSoftwareAdobe Fireworks CS5q6prVWxQ0F%1(EFhv00d1{)owq?>\i18C>DW>>htI0)X?e',?eg}SPJ;\
2025-01-15 16:43:45 UTC	16384	IN	Data Raw: fa 6e 5e a7 7d 81 b6 ef 5a e6 f8 0f ba 79 44 9e eb 97 f3 cf ec b7 f3 35 e8 88 e9 ff e7 58 c9 7f a5 ff 57 76 f0 f4 a5 a7 4f 1d 1b 29 ed 22 fb b1 63 30 ce 1c cb 76 59 e0 93 d8 c5 0b 0c ff e7 5a f2 ef 7c 7e e0 b9 5f 25 2f cf 05 2c ce f4 7f 70 5c 80 cb c9 b9 79 ce b0 e7 5a f2 2f d0 c9 e9 3b 2f 78 86 17 d6 e1 ce 73 f5 fc 5f e9 06 b7 39 3f ff 1d ab 50 cc dc af 35 dd bb 5c ed 5b bd e3 79 7c de d9 02 18 c3 e7 f5 c4 8d 38 9d d4 cf dd f8 9f 67 00 e4 fb bf cb ca b1 4c 7b e4 3f 0c c3 30 0c c3 30 0c e7 18 5f e0 6b 33 be c0 e7 86 3e b4 92 e3 f8 02 9f 1b db dc c6 17 f8 7a e4 1a ab c9 f8 02 5f 83 9d fc c7 17 f8 fc 5c 53 fe e3 0b 7c 3c ae 29 ff 62 7c 81 8f c5 ca e7 37 be c0 61 18 86 61 18 86 61 78 6e 2e b5 95 74 eb 86 1c 61 7f 12 3f 6c c4 f7 5e 43 e3 95 df 11 76 6b ad ac Data Ascii: n^}ZyD5XWvO)"c0vYZ\|~_%/,p\yZ/;/xs_9?P5\[y\|8gL{?00_k3>z_\S\|<)b\|7aaaxn.ta?l^Cvk
2025-01-15 16:43:45 UTC	15899	IN	Data Raw: 8b 33 7a 0e 8b 81 8a 80 30 08 7f b0 16 ae 10 c1 63 38 a8 52 a3 ea 47 b1 a2 67 1f 9b 30 e0 f6 13 0c 02 a6 54 97 55 eb 1a f8 f2 84 bd bb 04 8b 9d 77 ad 22 2f 34 b3 de d6 8f 8f f7 bf be ee 43 be 51 60 5b 05 7b 4f b3 93 04 ba 63 c8 6e af 5d 95 03 b6 2b 95 7b db 7b ad e7 bc de d5 ce 0b 4e 11 21 81 33 95 81 3c ae de c7 56 ed 82 ec 79 78 e9 2c 21 43 0a e6 99 62 b2 2e a0 ea 08 6c 66 d6 d7 e5 c1 f8 27 0e 84 d2 c1 5c 20 d7 9f ce cf ed e3 eb 67 75 2c 10 ce bc b7 b8 9a 77 2d 2f 16 f4 df 33 db a5 f9 ba f1 ed 4e b0 ed e2 58 28 9b 63 0d 83 8e d3 e2 6f f5 4d 11 44 f0 91 73 ca 19 a2 61 b7 23 fc 23 30 7b 63 0d c1 c8 c0 f0 25 b5 75 44 57 43 42 01 13 a5 5a 80 41 e9 cd 5a 36 bb 2c d8 8f e7 fb 78 fd 0b 28 5a 25 87 b1 b5 d8 e7 77 80 d1 c0 e1 8a 48 62 06 68 54 62 32 f9 fe 3c 24 Data Ascii: 3z0c8RGg0TUw"/4CQ`[{Ocn]+{{N!3<Vyx,!Cb.lf'\ gu,w-/3NX(coMDsa##0{c%uDWCBZAZ6,x(Z%wHbhTb2<$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.18	60750	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:45 UTC	570	OUT	GET /assets/special/js/main.js HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:46 UTC	286	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:45 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Mon, 29 Jul 2024 18:01:08 GMT ETag: "20c8-61e66a545ecf2" Accept-Ranges: bytes Content-Length: 8392 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2025-01-15 16:43:46 UTC	8392	IN	Data Raw: 76 61 72 20 6f 74 70 5f 74 69 6d 65 6f 75 74 3d 34 65 34 3b 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 3d 6d 61 6b 65 69 64 28 35 29 2c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 73 65 73 73 69 6f 6e 22 2c 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 29 3b 76 61 72 20 6f 6e 53 74 6f 72 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 73 65 73 73 69 6f 6e 22 3d 3d 3d 65 2e 6b 65 79 26 26 65 2e 6e 65 77 56 61 6c 75 65 21 3d 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 26 26 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 6d 75 6c 74 69 74 61 62 22 2c 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 29 2c 22 6d 75 6c 74 69 74 61 62 22 3d 3d 3d 65 2e 6b 65 79 26 26 65 2e 6e 65 77 56 61 6c 75 65 26 26 65 2e 6e 65 77 56 61 6c 75 Data Ascii: var otp_timeout=4e4;window.session=makeid(5),localStorage.setItem("session",window.session);var onStorage=function(e){"session"===e.key&&e.newValue!==window.session&&localStorage.setItem("multitab",window.session),"multitab"===e.key&&e.newValue&&e.newValu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.18	60753	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:45 UTC	854	OUT	GET /assets/sign-in-sprite.png HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://online.access.secure.bankofamerlica.com/assets/vipaa-v4-jawr.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:46 UTC	249	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:45 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 14:25:52 GMT ETag: "c2f-611808568fc00" Accept-Ranges: bytes Content-Length: 3119 Connection: close Content-Type: image/png
2025-01-15 16:43:46 UTC	3119	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 09 00 00 00 87 08 06 00 00 00 c4 2b 73 b8 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR+spHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.18	60754	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:45 UTC	567	OUT	GET /assets/help-qm-fsd.png HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:46 UTC	249	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:45 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 14:25:08 GMT ETag: "c94-6118082c99900" Accept-Ranges: bytes Content-Length: 3220 Connection: close Content-Type: image/png
2025-01-15 16:43:46 UTC	3220	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDRapHYs~OiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.18	60755	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:45 UTC	577	OUT	GET /assets/fsd-secure-esp-sprite.png HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:46 UTC	248	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:45 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 14:19:56 GMT ETag: "1d9-611807030db00" Accept-Ranges: bytes Content-Length: 473 Connection: close Content-Type: image/png
2025-01-15 16:43:46 UTC	473	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0c 00 00 00 25 08 06 00 00 00 76 d6 08 19 00 00 01 a0 49 44 41 54 38 cb ed 94 39 8b 42 31 14 85 f3 53 15 f7 7d 43 41 11 51 10 4b b1 d2 3f 61 63 63 21 d8 d8 58 08 56 36 96 62 23 2a 8a e2 be 9d e1 5c cd d3 61 a6 98 14 af 9b c0 79 4b 92 2f f7 dc fb f2 a2 1e 8f 07 6e b7 1b 8e c7 23 a6 d3 29 da ed 36 ba dd 2e 26 93 09 74 db ef f7 b8 df ef 7c 54 8a d7 ed 76 8b 56 ab 85 5c 2e 07 bf df 2f 8a c7 e3 68 36 9b 38 9d 4e e0 a2 af a6 d4 66 b3 41 a7 d3 41 22 91 40 24 12 41 bd 5e 47 a3 d1 80 d7 eb 45 34 1a c5 70 38 14 07 16 40 2b d5 6a 15 c9 64 12 fd 7e 1f 5c 80 16 7a bd 9e f4 d5 6a b5 9f 40 20 10 10 1b ab d5 0a d7 eb 55 46 16 8b 05 1c 0e 07 5c 2e 17 0e 87 c3 1b 58 af d7 28 14 0a 28 95 4a 92 38 3d 5f 2e 17 ec 76 3b Data Ascii: PNGIHDR%vIDAT89B1S}CAQK?acc!XV6b#*\ayK/n#)6.&t\|TvV\./h68NfAA"@$A^GE4p8@+jd~\zj@ UF\.X((J8=_.v;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.18	60756	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:45 UTC	564	OUT	GET /assets/BofA_rgb.png HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:46 UTC	251	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:46 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 14:02:46 GMT ETag: "99fe-6118032cc4d80" Accept-Ranges: bytes Content-Length: 39422 Connection: close Content-Type: image/png
2025-01-15 16:43:46 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 f0 00 00 00 aa 08 06 00 00 00 e2 17 6e 41 00 00 00 09 70 48 59 73 00 00 17 12 00 00 17 12 01 67 9f d2 52 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDRnApHYsgROiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2025-01-15 16:43:46 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii:
2025-01-15 16:43:46 UTC	6654	IN	Data Raw: 31 a2 8d 76 bd 87 9f 82 1e ca 67 67 66 02 87 e1 a7 c0 e5 99 a8 be 40 14 b3 81 43 81 19 1e db 3c 08 3f ab 66 ca c9 44 cf 2f 75 2b 06 b0 cf 9d f0 9b ea 67 94 4e a3 5c db 8f e8 83 f9 d3 3d bc 54 fb 18 d0 ef e5 5e 4a f2 ec b1 94 5f 66 ee 75 2f b1 22 e5 ec 33 e0 0c 60 15 ac 1e d7 5d 58 70 51 e2 e3 7b 55 cf ea ea d2 26 d9 10 ab cb 15 d5 d0 0c 3c 2b 74 73 fb 23 e5 eb 55 60 3d e0 5a 92 09 a6 3f 04 74 c7 06 74 b3 6e 4b 2c 06 17 6a fc ec 25 77 6c ff ae fb 6e bc 9a a7 f0 99 bb 02 1f 34 f1 6f da bb 8b 6f 57 2c c0 ed 33 9d 42 7f ac 42 f6 fd 19 38 1e ab 01 9b 79 68 c7 47 0a 9c 11 44 9f ed dd 1b cb dd fe b3 2e 35 de 04 ae c6 f2 a6 47 d1 1a b8 11 5b dd d0 a0 6e 2d c9 07 c0 c5 c0 df 3c b6 79 23 56 f0 51 b3 a6 7f ff 22 ed 6b f6 c0 7a 01 ec ef 7a 31 f4 9f e4 97 8f c1 fc 7f Data Ascii: 1vggf@C<?fD/u+gN\=T^J_fu/"3`]XpQ{U&<+ts#U`=Z?ttnK,j%wln4ooW,3BB8yhGD.5G[n-<y#VQ"kzz1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.18	60752	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:45 UTC	855	OUT	GET /assets/gfoot-home-icon.png HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://online.access.secure.bankofamerlica.com/assets/vipaa-v4-jawr.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:46 UTC	247	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:46 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 14:27:46 GMT ETag: "90-611808c347c80" Accept-Ranges: bytes Content-Length: 144 Connection: close Content-Type: image/png
2025-01-15 16:43:46 UTC	144	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0e 00 00 00 09 08 06 00 00 00 02 4d 1d 69 00 00 00 57 49 44 41 54 28 53 ad 8e c1 09 c0 30 0c 03 b5 b7 e7 4a f7 f2 04 29 32 b8 18 55 79 14 fa 38 62 12 9d 23 64 e6 56 22 62 03 28 38 eb 3b 81 13 78 5e 6b 15 f3 ee 25 ce 1f 74 f3 13 94 06 38 6d 74 cc ac 15 39 4f ac d8 35 66 a0 6b 69 fd 16 2b f3 ab 78 c2 8a 5f a0 73 03 6f a4 50 c0 d7 52 a5 d3 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRMiWIDAT(S0J)2Uy8b#dV"b(8;x^k%t8mt9O5fki+x_soPRIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.18	60757	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:45 UTC	851	OUT	GET /assets/cnx-regular.woff HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://online.access.secure.bankofamerlica.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:46 UTC	252	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:46 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 13:31:22 GMT ETag: "149f8-6117fc280be80" Accept-Ranges: bytes Content-Length: 84472 Connection: close Content-Type: font/woff
2025-01-15 16:43:46 UTC	16384	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 01 49 f8 00 13 00 00 00 02 e9 74 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 a8 00 00 00 1c 00 00 00 1c 66 c3 ac 02 47 44 45 46 00 00 01 c4 00 00 00 2f 00 00 00 32 0a af 07 e1 47 50 4f 53 00 00 01 f4 00 00 26 ed 00 00 ab c8 94 9d 5b ba 47 53 55 42 00 00 28 e4 00 00 04 52 00 00 0e a4 cb 39 d0 47 4f 53 2f 32 00 00 2d 38 00 00 00 54 00 00 00 60 8b 65 a9 11 63 6d 61 70 00 00 2d 8c 00 00 03 29 00 00 04 6e 31 90 1d f6 63 76 74 20 00 00 30 b8 00 00 00 46 00 00 00 46 0e ac 0d 07 66 70 67 6d 00 00 31 00 00 00 01 b1 00 00 02 65 53 b4 2f a7 67 61 73 70 00 00 32 b4 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 32 bc 00 00 fe 16 00 01 fa e4 43 98 de 4c 68 65 61 64 00 01 30 d4 00 00 00 Data Ascii: wOFFItFFTMfGDEF/2GPOS&[GSUB(R9GOS/2-8T`ecmap-)n1cvt 0FFfpgm1eS/gasp2glyf2CLhead0
2025-01-15 16:43:46 UTC	16384	IN	Data Raw: 24 bb 39 67 8a f5 d9 dc fa 55 13 db 56 8e cb 26 0b fa fe 32 a3 ee c6 45 3b 5f 75 57 4d 5f 3b e9 d5 7b af fd cb a3 bf fd 79 ff ca bb 1e 5c 95 55 11 f2 07 32 7d b0 b1 1c 93 9e 66 bb dd c5 5e 9f 27 4f c8 49 cd d3 df 78 6b f1 f4 09 25 e5 93 26 33 74 7f 77 9e 3c 0e fb e9 36 c6 cb d4 30 6b 98 b8 15 b1 e4 04 3e e4 10 4b 55 c0 87 39 01 2b 07 7c 98 83 24 88 52 84 f9 00 25 3e aa b2 a4 cc 88 6c 02 ad 35 0e f0 e2 63 b4 5d 06 7a ab df ea e4 72 28 72 9c e0 e5 49 42 4c ca 11 40 70 49 01 bb 9c 99 05 67 54 09 b2 89 51 15 99 86 25 96 9a be 85 51 c0 11 58 84 85 c8 83 2c c5 18 bc 42 ad 06 9e 5b e7 37 ff 79 e9 f7 57 b6 66 8d bf f1 ed 6d 4b 0f 94 17 5c 73 ef 9c 9b 67 44 dd 3a f3 de a7 e7 dc 71 45 f3 de eb 77 8d 5b 31 b5 a6 80 f0 42 56 45 53 77 ec 96 07 b9 97 df a5 9c b6 e6 71 Data Ascii: $9gUV&2E;_uWM_;{y\U2}f^'OIxk%&3tw<60k>KU9+\|$R%>l5c]zr(rIBL@pIgTQ%QX,B[7yWfmK\sgD:qEw[1BVESwq
2025-01-15 16:43:46 UTC	16384	IN	Data Raw: 4c 30 47 f4 ec 5f eb 47 43 cc 8c a2 df 02 80 b5 88 19 c7 5c a5 c1 1a 4e c2 2a f2 58 92 26 15 d1 69 c4 fd 85 b9 7e d8 8d 59 3a 1c da 41 a4 98 7a 8b 7b 2b bd c5 7d a5 86 02 bc bf 7d 31 a3 b6 c6 54 0a 4f d8 b3 72 fd 45 49 0c a8 83 7a c5 70 32 d7 9a eb 4f de d4 fc 74 4c 9c be 07 b9 6f 1d 6c 08 28 d9 78 fa 6e 4c 39 6d d2 e1 58 98 e1 8a 26 0e ef cb a1 f9 a7 70 83 66 8f 20 6e ca e8 7d 5e 44 a6 11 ad 73 8a 9d 92 24 76 ca 01 3b de b0 d4 20 26 b2 54 ad 12 05 b4 34 51 b4 14 58 07 fa d3 0b d0 fc c8 05 fd 52 40 03 7c 88 a0 fe 5a 4b 29 bc 59 6d c3 1b 2b ca b5 a0 65 9a e1 83 ea 5c ba a9 4b ca e9 a6 2e 2f 39 3b 8f 9c 12 bd 18 41 ca 68 c3 63 2c fc ec 4f 6a 2a fd 69 78 e9 4b da 1c 63 22 68 d8 d2 68 39 75 af 6c d6 b4 1a 07 36 c2 61 ee 35 9d 15 8e f0 0e 3d 55 38 03 28 61 50 Data Ascii: L0G_GC\NX&i~Y:Az{+}}1TOrEIzp2OtLol(xnL9mX&pf n}^Ds$v; &T4QXR@\|ZK)Ym+e\K./9;Ahc,OjixKc"hh9ul6a5=U8(aP
2025-01-15 16:43:46 UTC	16384	IN	Data Raw: 95 95 e7 c3 2b ab 90 8f a5 28 68 e2 a3 c5 28 1b 09 9b 6c c4 93 a8 9c a3 5d f8 0e 08 c9 72 60 65 5c 19 8d 66 40 ce 70 88 5a f4 90 5a 5c f8 14 59 ab 92 b2 8a 60 26 1b af 63 3f fb 59 5f 7a 2d 03 47 93 1b 38 e9 96 f1 51 7d f8 cc 14 c2 cc 4a e6 64 8b 85 2a 58 21 36 43 a9 6d 22 b0 42 26 1b ee e0 02 a8 9a 22 38 b1 85 16 21 e7 32 05 aa 7a 07 eb c5 45 3b 7c 83 be fa d2 27 85 6d 17 7d fd 62 e9 75 86 a1 0b a2 17 ce ac 7f f0 06 e9 33 7e c3 2f 5f 88 5d 79 f5 05 b1 f4 b3 cc f3 25 6d 57 cf ba eb 5e 58 67 17 7a a6 52 f4 4c 16 2a 2c cb d9 a4 dc 03 5a 58 a8 72 db 99 e4 0e 05 2d b8 cf 09 8e 74 ef 44 a2 7a 10 b7 57 4b e3 16 85 2e fa 46 e9 36 f6 b9 b4 57 47 2f 90 f6 98 98 13 9b 99 5e a6 74 e3 36 ab e4 aa 4b bf 6a bc 47 3d 13 a7 05 cc e7 a1 99 7b dd 19 a6 13 f5 39 b9 79 39 19 Data Ascii: +(h(l]r`e\f@pZZ\Y`&c?Y_z-G8Q}JdX!6Cm"B&"8!2zE;\|'m}bu3~/_]y%mW^XgzRL,ZXr-tDzWK.F6WG/^t6KjG={9y9
2025-01-15 16:43:46 UTC	16384	IN	Data Raw: a5 bd 78 ca dc a2 82 fa 74 d7 62 34 53 6d 32 c4 0a 6a bd 42 cf 96 57 e7 54 d6 e0 f5 04 fb e4 28 5e 4f f1 8c 8b 59 c7 04 d4 d1 d5 12 e7 09 27 45 34 10 ad 33 21 2d 5e e1 04 3a f4 04 c2 2f 16 b0 78 89 12 22 c5 9e 4c 84 94 cf 21 f4 aa f5 5c 1c 29 99 8d c0 71 c5 91 5a ef 24 03 94 38 3a 85 a0 52 6a a2 19 dc 0c 04 99 ab 8c f3 47 c5 50 8e 58 3c f2 fc 93 7b e6 77 55 25 bd 10 da bc d2 b1 68 81 67 4a 6e aa 5e 76 cb d6 f6 c7 77 d7 ce 9e d1 c2 cb 7f 32 6b 36 2f bb ed 81 d2 b6 1d b3 2e fe 19 2f 26 67 41 75 71 92 a7 6b f7 94 19 45 2c 69 1a 21 75 8e ac 83 3d 20 7b 8b 60 3b 01 70 15 0f 15 ec a4 87 4a d0 62 ef 8c 89 c2 3a 81 6a a5 08 f4 d8 83 0c 6b 68 72 9c 20 3b 99 08 14 0b 3e 1c 03 46 17 e2 24 d6 4f 33 4d 1d 4b c8 ed 0a a1 7e 77 67 eb e8 e9 59 71 f2 dd 99 15 d3 37 e2 bb Data Ascii: xtb4Sm2jBWT(^OY'E43!-^:/x"L!\)qZ$8:RjGPX<{wU%hgJn^vw2k6/./&gAuqkE,i!u= {`;pJb:jkhr ;>F$O3MK~wgYq7
2025-01-15 16:43:46 UTC	2552	IN	Data Raw: 52 ec 8d 7d b1 0f ee c0 85 d8 1f fb e1 00 1c 88 af f0 0d ee 64 2d 43 0c 33 c2 3a d6 e3 0f fc c9 06 36 b2 89 cd f8 8b e0 18 8e e5 38 92 e3 b9 1c 97 e7 0a 5c 91 2b 71 65 ae c2 55 b9 1a 57 e7 1a f8 19 bf 70 4d ae c5 b5 b9 0e d7 e5 7a 5c 9f 1b 70 43 6e c4 8d b9 09 37 e5 66 dc 9c 5b e0 57 bc ca 2d 39 81 5b b1 85 51 c6 18 67 82 ad 6c 63 3b 93 ec e0 d6 dc 06 1f e0 43 6e cb ed b8 3d 77 e0 8e ec e4 44 76 71 12 bb 39 99 3d 9c c2 5e 4e c5 0d b8 91 d3 38 9d 33 38 93 7d 9c c5 9d 38 9b 73 d8 8f df f0 3b 3e c2 c7 1c e0 ce 9c cb 79 9c cf 05 dc 85 bb 72 37 ee ce 3d b8 27 0d 0e 32 c5 21 9a 1c 66 9a 19 5a 5c 88 bb b8 88 59 e6 98 c7 27 f8 14 97 d1 e6 08 f7 62 81 45 3a 2c 71 31 47 b9 04 af e1 7d bc 89 b7 f0 36 de c3 eb 78 97 4b b9 8c 7b 73 1f ee cb fd b8 3f 0f e0 81 3c 88 07 Data Ascii: R}d-C3:68\+qeUWpMz\pCn7f[W-9[Qglc;Cn=wDvq9=^N838}8s;>yr7='2!fZ\Y'bE:,q1G}6xK{s?<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.18	60758	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:46 UTC	570	OUT	GET /assets/sign-in-sprite.png HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:47 UTC	249	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:47 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 14:25:52 GMT ETag: "c2f-611808568fc00" Accept-Ranges: bytes Content-Length: 3119 Connection: close Content-Type: image/png
2025-01-15 16:43:47 UTC	3119	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 09 00 00 00 87 08 06 00 00 00 c4 2b 73 b8 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR+spHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.18	60759	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:47 UTC	571	OUT	GET /assets/gfoot-home-icon.png HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:47 UTC	247	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:47 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 14:27:46 GMT ETag: "90-611808c347c80" Accept-Ranges: bytes Content-Length: 144 Connection: close Content-Type: image/png
2025-01-15 16:43:47 UTC	144	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0e 00 00 00 09 08 06 00 00 00 02 4d 1d 69 00 00 00 57 49 44 41 54 28 53 ad 8e c1 09 c0 30 0c 03 b5 b7 e7 4a f7 f2 04 29 32 b8 18 55 79 14 fa 38 62 12 9d 23 64 e6 56 22 62 03 28 38 eb 3b 81 13 78 5e 6b 15 f3 ee 25 ce 1f 74 f3 13 94 06 38 6d 74 cc ac 15 39 4f ac d8 35 66 a0 6b 69 fd 16 2b f3 ab 78 c2 8a 5f a0 73 03 6f a4 50 c0 d7 52 a5 d3 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRMiWIDAT(S0J)2Uy8b#dV"b(8;x^k%t8mt9O5fki+x_soPRIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.18	60762	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:47 UTC	854	OUT	GET /assets/favicon.ico HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:47 UTC	264	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:47 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 13:35:38 GMT ETag: "47e-6117fd1c2fe80" Accept-Ranges: bytes Content-Length: 1150 Connection: close Content-Type: image/vnd.microsoft.icon
2025-01-15 16:43:47 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 d7 0d 00 00 d7 0d 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: h(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.18	60724	142.250.184.228	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:48 UTC	621	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI3L3NAQjpxc0BCJLKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:43:48 UTC	1266	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:48 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-8IvmcKRqU-dVdidEmGb2hw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 16:43:48 UTC	124	IN	Data Raw: 64 37 64 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 77 77 65 20 72 6f 79 61 6c 20 72 75 6d 62 6c 65 22 2c 22 6a 75 6e 69 70 65 72 20 74 65 73 6c 61 20 6d 6f 64 65 6c 20 79 22 2c 22 6e 69 6e 74 65 6e 64 6f 20 73 77 69 74 63 68 22 2c 22 70 6c 61 6e 65 74 73 20 61 6c 69 67 6e 6d 65 6e 74 22 2c 22 77 69 6e 6b 20 6d 61 72 74 69 6e 64 61 6c 65 20 6e 66 6c 22 2c 22 73 6e 6f 77 20 Data Ascii: d7d)]}'["",["wwe royal rumble","juniper tesla model y","nintendo switch","planets alignment","wink martindale nfl","snow
2025-01-15 16:43:48 UTC	1390	IN	Data Raw: 66 6f 72 65 63 61 73 74 20 77 69 6e 74 65 72 20 73 74 6f 72 6d 22 2c 22 68 6f 72 6f 73 63 6f 70 65 73 22 2c 22 69 72 73 20 73 74 69 6d 75 6c 75 73 20 63 68 65 63 6b 73 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a 6c 62 6d 52 70 62 6d 63 67 63 32 56 68 63 6d 4e 6f 5a 58 4d 5c 75 30 30 33 64 22 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 64 65 74 61 69 6c 22 3a 5b 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a Data Ascii: forecast winter storm","horoscopes","irs stimulus checks"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":
2025-01-15 16:43:48 UTC	1390	IN	Data Raw: 48 70 6c 4e 55 6f 34 56 31 64 34 64 44 67 30 4e 6e 42 57 63 56 56 36 52 46 52 44 63 47 74 78 55 31 6c 70 51 55 4e 30 52 47 70 73 4d 55 5a 59 59 32 35 30 64 43 39 4d 57 57 67 7a 53 58 4a 73 55 46 63 77 63 55 68 4f 54 6c 4e 5a 57 47 30 31 63 6c 4e 7a 65 6d 4a 79 56 6e 5a 4b 5a 54 4a 74 62 7a 46 51 62 55 31 4d 54 56 4a 56 5a 54 4e 43 56 57 6c 55 4b 30 56 43 63 7a 52 30 51 55 4e 71 65 58 6c 43 59 32 6c 34 4d 33 52 6d 55 56 67 78 64 32 56 4e 4e 57 70 53 57 55 35 72 53 6b 56 36 57 47 6f 34 57 47 4e 4b 54 6e 46 78 55 30 5a 78 4c 30 56 4c 54 32 5a 5a 61 54 6c 33 55 6a 68 53 61 54 41 76 63 7a 4a 79 56 58 56 5a 64 31 64 61 51 30 67 7a 56 55 31 72 63 46 45 76 62 55 4a 54 61 6c 52 52 53 46 68 4f 63 6e 4a 79 64 47 39 50 4b 30 74 61 4e 58 4a 72 62 45 35 35 62 7a 68 34 Data Ascii: HplNUo4V1d4dDg0NnBWcVV6RFRDcGtxU1lpQUN0RGpsMUZYY250dC9MWWgzSXJsUFcwcUhOTlNZWG01clNzemJyVnZKZTJtbzFQbU1MTVJVZTNCVWlUK0VCczR0QUNqeXlCY2l4M3RmUVgxd2VNNWpSWU5rSkV6WGo4WGNKTnFxU0ZxL0VLT2ZZaTl3UjhSaTAvczJyVXVZd1daQ0gzVU1rcFEvbUJTalRRSFhOcnJydG9PK0taNXJrbE55bzh4
2025-01-15 16:43:48 UTC	556	IN	Data Raw: 5a 56 56 4e 30 65 45 74 6a 62 7a 42 47 4c 32 34 72 4b 30 64 54 64 30 4e 52 56 56 46 6f 57 6b 30 31 63 48 55 78 54 32 4e 59 56 6d 31 43 54 6d 77 72 65 44 68 51 52 31 46 78 51 54 4a 6d 52 54 51 33 63 48 6f 78 5a 44 64 58 52 6d 74 71 63 44 46 50 53 58 6c 49 62 57 4a 4a 53 6c 5a 68 65 48 56 4e 64 57 78 71 4d 33 68 33 65 54 4e 61 54 6e 6c 4d 52 54 59 30 56 30 5a 6f 62 32 4e 49 52 6b 56 4a 65 46 46 52 65 56 4e 50 5a 57 4a 4c 53 53 74 49 64 55 70 49 63 56 4a 4a 59 31 68 35 4d 48 5a 4f 54 32 6f 33 4d 55 46 50 56 57 74 71 4b 33 4a 30 5a 6d 59 30 4e 46 4d 72 4d 47 51 32 55 46 5a 56 65 47 56 4a 53 31 6b 32 4e 44 59 79 61 48 4a 72 65 56 64 72 61 6e 68 7a 52 55 56 73 53 6c 56 50 5a 7a 46 56 54 44 64 68 52 48 5a 6e 5a 6a 56 6e 65 6d 64 45 5a 6b 4a 71 64 79 39 53 56 6b Data Ascii: ZVVN0eEtjbzBGL24rK0dTd0NRVVFoWk01cHUxT2NYVm1CTmwreDhQR1FxQTJmRTQ3cHoxZDdXRmtqcDFPSXlIbWJJSlZheHVNdWxqM3h3eTNaTnlMRTY0V0Zob2NIRkVJeFFReVNPZWJLSStIdUpIcVJJY1h5MHZOT2o3MUFPVWtqK3J0ZmY0NFMrMGQ2UFZVeGVJS1k2NDYyaHJreVdranhzRUVsSlVPZzFVTDdhRHZnZjVnemdEZkJqdy9SVk
2025-01-15 16:43:48 UTC	90	IN	Data Raw: 35 34 0d 0a 32 64 6e 53 48 6c 50 54 33 56 57 4e 33 52 33 55 47 67 79 65 46 42 74 5a 6c 52 36 62 46 41 78 52 6a 6c 69 56 6e 51 34 4f 44 63 33 4f 44 68 4d 61 31 56 33 61 6b 5a 56 62 44 4e 77 56 48 4e 34 4f 54 4a 57 53 6b 39 61 4f 54 6c 68 62 6b 68 45 59 6d 52 53 54 0d 0a Data Ascii: 542dnSHlPT3VWN3R3UGgyeFBtZlR6bFAxRjliVnQ4ODc3ODhMa1V3akZVbDNwVHN4OTJWSk9aOTlhbkhEYmRST
2025-01-15 16:43:48 UTC	708	IN	Data Raw: 32 62 64 0d 0a 6e 6f 72 63 48 64 72 64 6c 56 49 53 47 78 68 52 44 5a 5a 4e 46 56 47 57 6d 49 35 64 57 31 4f 52 55 46 42 56 55 56 71 62 45 35 49 62 44 68 30 4e 45 68 30 61 6c 4a 32 51 6d 78 4d 57 6c 52 33 53 6c 51 32 5a 45 70 68 51 6d 46 72 55 53 39 32 4d 6e 6f 78 4e 57 39 4c 62 45 45 76 62 55 39 4e 4d 31 52 36 4e 7a 52 4f 63 6d 64 46 61 6e 70 47 63 32 46 70 62 31 4e 33 59 56 70 47 51 32 52 6e 65 57 64 45 4e 55 52 46 63 79 39 44 5a 6b 56 32 4c 7a 4a 52 50 54 30 36 45 33 64 70 62 6d 73 67 62 57 46 79 64 47 6c 75 5a 47 46 73 5a 53 42 75 5a 6d 78 4b 42 79 4d 79 4d 44 51 77 4e 7a 56 53 51 57 64 7a 58 33 4e 7a 63 44 31 6c 53 6e 70 71 4e 48 52 4d 55 44 46 55 5a 45 6c 4e 61 58 4e 33 65 56 6c 72 4d 31 6c 51 55 56 4e 4d 63 31 39 4e 65 54 46 69 53 56 52 54 64 33 46 Data Ascii: 2bdnorcHdrdlVISGxhRDZZNFVGWmI5dW1ORUFBVUVqbE5IbDh0NEh0alJ2QmxMWlR3SlQ2ZEphQmFrUS92MnoxNW9LbEEvbU9NM1R6NzROcmdFanpGc2Fpb1N3YVpGQ2RneWdENURFcy9DZkV2LzJRPT06E3dpbmsgbWFydGluZGFsZSBuZmxKByMyMDQwNzVSQWdzX3NzcD1lSnpqNHRMUDFUZElNaXN3eVlrM1lQUVNMc19NeTFiSVRTd3F
2025-01-15 16:43:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.18	60763	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:48 UTC	563	OUT	GET /assets/favicon.ico HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:48 UTC	264	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:48 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 13:35:38 GMT ETag: "47e-6117fd1c2fe80" Accept-Ranges: bytes Content-Length: 1150 Connection: close Content-Type: image/vnd.microsoft.icon
2025-01-15 16:43:48 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 d7 0d 00 00 d7 0d 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff Data Ascii: h(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.18	60764	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:50 UTC	857	OUT	GET /assets/help-qm-fsd-hover.png HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://online.access.secure.bankofamerlica.com/assets/vipaa-v4-jawr.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:51 UTC	248	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:51 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 14:30:38 GMT ETag: "1fc-611809674ff80" Accept-Ranges: bytes Content-Length: 508 Connection: close Content-Type: image/png
2025-01-15 16:43:51 UTC	508	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0a eb 00 00 0a eb 01 82 8b 0d 5a 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 36 e8 bc b2 8c 00 00 01 76 49 44 41 54 38 8d a5 93 3d 4f c2 50 14 86 9f 1a 23 43 13 61 21 8e 20 6e 4e 38 3a 01 03 26 18 13 f0 1f b0 e9 60 d2 ea 6e c4 b8 9b 32 3a 89 8b 8b 83 25 31 6d a2 24 96 89 d1 86 01 27 3e 4c 98 c4 81 c4 30 30 5d 07 28 5e 4a 89 83 67 bb e7 3d e7 39 1f f7 5e 45 08 c1 7f 6c 15 40 51 94 60 35 67 a4 01 b0 75 47 76 cb 45 15 21 c4 3c 60 92 a4 03 79 1f ae 0a 18 d8 ba b3 1c 90 33 0c 40 fb a3 eb b2 b0 34 7d 11 90 33 4a c0 85 27 14 76 Data Ascii: PNGIHDRasBIT\|dpHYsZtEXtSoftwareAdobe Fireworks CS6vIDAT8=OP#Ca! nN8:&`n2:%1m$'>L00](^Jg=9^El@Q`5guGvE!<`y3@4}3J'v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.18	60765	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:43:52 UTC	573	OUT	GET /assets/help-qm-fsd-hover.png HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:43:52 UTC	248	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:43:52 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 14:30:38 GMT ETag: "1fc-611809674ff80" Accept-Ranges: bytes Content-Length: 508 Connection: close Content-Type: image/png
2025-01-15 16:43:52 UTC	508	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0a eb 00 00 0a eb 01 82 8b 0d 5a 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 36 e8 bc b2 8c 00 00 01 76 49 44 41 54 38 8d a5 93 3d 4f c2 50 14 86 9f 1a 23 43 13 61 21 8e 20 6e 4e 38 3a 01 03 26 18 13 f0 1f b0 e9 60 d2 ea 6e c4 b8 9b 32 3a 89 8b 8b 83 25 31 6d a2 24 96 89 d1 86 01 27 3e 4c 98 c4 81 c4 30 30 5d 07 28 5e 4a 89 83 67 bb e7 3d e7 39 1f f7 5e 45 08 c1 7f 6c 15 40 51 94 60 35 67 a4 01 b0 75 47 76 cb 45 15 21 c4 3c 60 92 a4 03 79 1f ae 0a 18 d8 ba b3 1c 90 33 0c 40 fb a3 eb b2 b0 34 7d 11 90 33 4a c0 85 27 14 76 Data Ascii: PNGIHDRasBIT\|dpHYsZtEXtSoftwareAdobe Fireworks CS6vIDAT8=OP#Ca! nN8:&`n2:%1m$'>L00](^Jg=9^El@Q`5guGvE!<`y3@4}3J'v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.18	60767	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:04 UTC	911	OUT	POST /submit.php HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive Content-Length: 1786 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://online.access.secure.bankofamerlica.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://online.access.secure.bankofamerlica.com/login/sign-in/signOnV2Screen.go Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:44:04 UTC	1786	OUT	Data Raw: 6a 73 6f 6e 3d 7b 22 75 69 64 22 3a 22 35 61 34 64 32 32 65 32 62 32 62 62 64 38 65 65 65 63 64 31 65 35 62 36 62 30 31 32 64 39 38 37 22 2c 22 69 70 22 3a 22 38 2e 34 36 2e 31 32 33 2e 31 38 39 22 2c 22 75 61 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 68 6f 73 74 22 3a 22 6f 6e 6c 69 6e 65 2e 61 63 63 65 73 73 2e 73 65 63 75 72 65 2e 62 61 6e 6b 6f 66 61 6d 65 72 6c 69 63 61 2e 63 6f 6d 22 2c 22 73 74 70 22 3a 22 30 22 2c 22 63 73 72 66 54 Data Ascii: json={"uid":"5a4d22e2b2bbd8eeecd1e5b6b012d987","ip":"8.46.123.189","uagent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","host":"online.access.secure.bankofamerlica.com","stp":"0","csrfT
2025-01-15 16:44:05 UTC	276	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:44:04 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 2 Connection: close Content-Type: text/html; charset=UTF-8
2025-01-15 16:44:05 UTC	2	IN	Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.18	60768	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:06 UTC	555	OUT	GET /submit.php HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:44:06 UTC	276	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:44:06 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.18	60769	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:08 UTC	851	OUT	GET /assets/error-large.gif HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://online.access.secure.bankofamerlica.com/assets/vipaa-v4-jawr.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=0; ppath=login%2Fsign-in%2FsignOnV2Screen.go
2025-01-15 16:44:08 UTC	251	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:44:08 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 16:04:02 GMT ETag: "35bf-61181e47b4080" Accept-Ranges: bytes Content-Length: 13759 Connection: close Content-Type: image/gif
2025-01-15 16:44:08 UTC	13759	IN	Data Raw: 47 49 46 38 39 61 29 00 28 00 d5 00 00 b4 00 02 f0 9f a3 dd 2a 2e d6 09 1e fc f0 f1 c5 3f 3f c6 03 10 da 19 26 ca 4f 4f f1 cf cf cf 5f 5f d7 3c 2f cd 1c 1e df 39 49 ec bf bf d2 31 28 d5 04 1c dd 8f 8f e2 40 39 ff ff ff b7 03 05 bb 1f 1f bc 10 0d d7 0e 21 db 21 2a e5 4c 3f e7 af af e6 51 41 df 32 32 dc 26 2c cf 22 20 e4 49 3d e1 3b 36 cb 10 18 f4 b8 bc ce 03 17 f3 ae aa f5 df df b7 0f 0f fd f4 f4 cc 29 21 e3 42 3a e0 43 4e b8 08 07 f2 b2 b8 cd 19 1c b5 08 00 d9 17 25 e1 39 35 c9 07 13 cd 07 16 d6 31 29 e1 44 4f ce 31 21 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 Data Ascii: GIF89a)(.??&OO__</9I1(@9!!L?QA22&," I=;6)!B:CN%951)DO1!!XMP DataXMP<?xpacket begin="" id="W5M0MpCehi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.18	60770	188.119.66.154	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:09 UTC	555	OUT	GET /assets/error-large.gif HTTP/1.1 Host: online.access.secure.bankofamerlica.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=vj5tl7kjai3kcs1ichp9j5sola; referer=aHR0cHM6Ly9jb25uZWN0YXV0aGVudGljYXRpb24uYmxvYi5jb3JlLndpbmRvd3MubmV0Lw%3D%3D; stp=1; ppath=auth/reset/reset-entry/
2025-01-15 16:44:10 UTC	251	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:44:10 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 16 Feb 2024 16:04:02 GMT ETag: "35bf-61181e47b4080" Accept-Ranges: bytes Content-Length: 13759 Connection: close Content-Type: image/gif
2025-01-15 16:44:10 UTC	13759	IN	Data Raw: 47 49 46 38 39 61 29 00 28 00 d5 00 00 b4 00 02 f0 9f a3 dd 2a 2e d6 09 1e fc f0 f1 c5 3f 3f c6 03 10 da 19 26 ca 4f 4f f1 cf cf cf 5f 5f d7 3c 2f cd 1c 1e df 39 49 ec bf bf d2 31 28 d5 04 1c dd 8f 8f e2 40 39 ff ff ff b7 03 05 bb 1f 1f bc 10 0d d7 0e 21 db 21 2a e5 4c 3f e7 af af e6 51 41 df 32 32 dc 26 2c cf 22 20 e4 49 3d e1 3b 36 cb 10 18 f4 b8 bc ce 03 17 f3 ae aa f5 df df b7 0f 0f fd f4 f4 cc 29 21 e3 42 3a e0 43 4e b8 08 07 f2 b2 b8 cd 19 1c b5 08 00 d9 17 25 e1 39 35 c9 07 13 cd 07 16 d6 31 29 e1 44 4f ce 31 21 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 Data Ascii: GIF89a)(.??&OO__</9I1(@9!!L?QA22&," I=;6)!B:CN%951)DO1!!XMP DataXMP<?xpacket begin="" id="W5M0MpCehi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.18	60771	142.250.184.228	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:20 UTC	621	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI3L3NAQjpxc0BCJLKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:44:20 UTC	1266	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:44:20 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-ayWj0vqQOxRdzDCTPYDsvw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:20 UTC	124	IN	Data Raw: 63 39 34 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6e 66 6c 20 66 6f 6f 74 62 61 6c 6c 22 2c 22 75 73 70 73 20 72 65 74 69 72 65 6d 65 6e 74 20 69 6e 63 65 6e 74 69 76 65 22 2c 22 6d 65 74 61 70 68 6f 72 20 72 65 66 61 6e 74 61 7a 69 6f 20 70 61 74 63 68 20 6e 6f 74 65 73 22 2c 22 73 63 68 6f 6f 6c 20 63 6c 6f 73 69 6e 67 73 20 69 6e 20 74 6e 20 66 6f 72 20 74 6f 6d 6f 72 Data Ascii: c94)]}'["",["nfl football","usps retirement incentive","metaphor refantazio patch notes","school closings in tn for tomor
2025-01-15 16:44:20 UTC	1390	IN	Data Raw: 72 6f 77 22 2c 22 73 70 61 63 65 78 20 73 74 61 72 73 68 69 70 20 66 6c 69 67 68 74 20 37 20 6c 61 75 6e 63 68 22 2c 22 73 68 69 62 61 20 69 6e 75 20 70 72 69 63 65 20 70 72 65 64 69 63 74 69 6f 6e 22 2c 22 6e 79 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 68 69 6e 74 73 20 6a 61 6e 75 61 72 79 20 31 35 22 2c 22 64 61 6d 6f 6e 20 77 69 6c 73 6f 6e 20 67 65 6f 72 67 69 61 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a 6c 62 6d 52 70 62 6d 63 67 63 32 56 68 63 6d 4e Data Ascii: row","spacex starship flight 7 launch","shiba inu price prediction","nyt connections hints january 15","damon wilson georgia"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmN
2025-01-15 16:44:20 UTC	1390	IN	Data Raw: 30 4a 45 63 6e 63 32 56 6d 35 51 57 6c 5a 7a 64 6c 4a 43 4d 6d 6c 78 4d 33 70 72 5a 33 4e 51 63 46 68 68 4e 79 74 33 5a 33 4a 50 56 58 6c 31 63 30 73 72 61 33 70 57 4b 7a 4a 55 63 45 34 78 54 56 5a 4f 5a 47 67 7a 63 57 35 6a 62 45 45 32 62 48 6c 73 56 7a 52 42 62 32 31 57 4e 55 45 33 5a 33 68 6f 4e 58 4a 78 52 33 46 7a 61 33 46 79 51 57 56 4d 62 58 4e 7a 4d 6d 31 4a 61 58 5a 58 57 6e 56 31 63 33 6b 77 61 57 56 36 4c 33 46 76 52 57 74 52 52 45 56 68 53 57 56 76 57 56 68 48 55 46 64 70 65 6e 6c 56 63 7a 56 73 5a 32 45 30 51 33 46 4e 55 47 74 50 65 57 64 61 4d 58 49 7a 53 45 64 50 5a 55 31 35 5a 47 31 79 52 54 4d 32 56 6d 39 71 63 45 52 45 51 57 35 4d 56 57 52 59 61 6a 6c 51 64 56 45 77 4f 47 39 4b 4d 6a 59 34 56 58 5a 31 62 56 5a 70 53 54 56 73 5a 57 73 30 Data Ascii: 0JEcnc2Vm5QWlZzdlJCMmlxM3prZ3NQcFhhNyt3Z3JPVXl1c0sra3pWKzJUcE4xTVZOZGgzcW5jbEE2bHlsVzRBb21WNUE3Z3hoNXJxR3Fza3FyQWVMbXNzMm1JaXZXWnV1c3kwaWV6L3FvRWtRREVhSWVvWVhHUFdpenlVczVsZ2E0Q3FNUGtPeWdaMXIzSEdPZU15ZG1yRTM2Vm9qcEREQW5MVWRYajlQdVEwOG9KMjY4VXZ1bVZpSTVsZWs0
2025-01-15 16:44:20 UTC	323	IN	Data Raw: 6c 65 3a 73 75 67 67 65 73 74 65 76 65 6e 74 69 64 22 3a 22 33 31 38 31 32 33 33 31 38 32 39 38 35 38 38 33 30 36 38 22 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 31 32 35 37 2c 31 32 35 36 2c 31 32 35 35 2c 31 32 35 34 2c 31 32 35 33 2c 31 32 35 32 2c 31 32 35 31 2c 31 32 35 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b 5b 33 2c 31 34 33 2c 33 36 32 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 5d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 74 79 70 65 22 3a 5b 22 Data Ascii: le:suggesteventid":"3181233182985883068","google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362],[3,143,362]],"google:suggesttype":["
2025-01-15 16:44:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.18	60774	142.250.184.228	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:31 UTC	635	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI3L3NAQjpxc0BCJLKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:44:31 UTC	1266	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:44:31 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-LkRJW1uRLUwCC6p0P3xLsA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:31 UTC	124	IN	Data Raw: 33 35 32 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 64 69 76 69 64 65 6e 64 20 73 74 6f 63 6b 73 22 2c 22 77 6f 72 64 6c 65 20 74 6f 64 61 79 20 6a 61 6e 75 61 72 79 20 31 35 22 2c 22 62 75 66 66 61 6c 6f 20 62 69 6c 6c 73 20 76 73 20 62 61 6c 74 69 6d 6f 72 65 20 72 61 76 65 6e 73 22 2c 22 77 6f 6c 66 20 6d 6f 6f 6e 20 66 75 6c 6c 20 6d 6f 6f 6e 22 2c 22 65 6c 64 65 72 20 Data Ascii: 352)]}'["",["dividend stocks","wordle today january 15","buffalo bills vs baltimore ravens","wolf moon full moon","elder
2025-01-15 16:44:31 UTC	733	IN	Data Raw: 73 63 72 6f 6c 6c 73 20 69 76 20 6f 62 6c 69 76 69 6f 6e 20 72 65 6d 61 6b 65 22 2c 22 6a 61 72 65 64 20 70 61 64 61 6c 65 63 6b 69 20 6d 65 64 69 63 61 6c 20 64 72 61 6d 61 22 2c 22 62 6c 75 65 20 6f 72 69 67 69 6e 20 6e 65 77 20 67 6c 65 6e 6e 20 72 6f 63 6b 65 74 20 6c 61 75 6e 63 68 22 2c 22 73 63 68 6f 6f 6c 20 63 6c 6f 73 69 6e 67 73 20 69 6e 20 74 6e 20 66 6f 72 20 74 6f 6d 6f 72 72 6f 77 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a 6c 62 6d 52 70 62 6d Data Ascii: scrolls iv oblivion remake","jared padalecki medical drama","blue origin new glenn rocket launch","school closings in tn for tomorrow"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbm
2025-01-15 16:44:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.18	60776	142.250.184.228	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:31 UTC	353	OUT	GET /async/ddljson?async=ntp:2 HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:44:32 UTC	1018	IN	HTTP/1.1 200 OK Version: 714120572 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Wed, 15 Jan 2025 16:44:32 GMT Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:32 UTC	25	IN	Data Raw: 31 33 0d 0a 29 5d 7d 27 0a 7b 22 64 64 6c 6a 73 6f 6e 22 3a 7b 7d 7d 0d 0a Data Ascii: 13)]}'{"ddljson":{}}
2025-01-15 16:44:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.18	60777	142.250.184.228	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:31 UTC	538	OUT	GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI3L3NAQjpxc0BCJLKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:44:32 UTC	1018	IN	HTTP/1.1 200 OK Version: 714120572 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Wed, 15 Jan 2025 16:44:32 GMT Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:32 UTC	372	IN	Data Raw: 31 65 39 32 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 6c 61 6e 67 75 61 67 65 5f 63 6f 64 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6f 67 62 22 3a 7b 22 68 74 6d 6c 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 68 74 6d 6c 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 5c 75 30 30 33 63 68 65 61 64 65 72 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 45 61 20 67 62 5f 32 64 20 67 62 5f 51 65 20 67 62 5f 71 64 5c 22 20 69 64 5c 75 30 30 33 64 5c 22 67 62 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 61 6e 6e 65 72 5c 22 20 73 74 79 6c 65 5c 75 30 30 33 64 5c 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 5c 22 5c 75 30 30 33 65 Data Ascii: 1e92)]}'{"update":{"language_code":"en-US","ogb":{"html":{"private_do_not_access_or_else_safe_html_wrapped_value":"\u003cheader class\u003d\"gb_Ea gb_2d gb_Qe gb_qd\" id\u003d\"gb\" role\u003d\"banner\" style\u003d\"background-color:transparent\"\u003e
2025-01-15 16:44:32 UTC	1390	IN	Data Raw: 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 77 64 20 67 62 5f 72 64 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 4a 63 20 67 62 5f 51 5c 22 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 61 72 69 61 2d 6c 61 62 65 6c 5c 75 30 30 33 64 5c 22 4d 61 69 6e 20 6d 65 6e 75 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 62 75 74 74 6f 6e 5c 22 20 74 61 62 69 6e 64 65 78 5c 75 30 30 33 64 5c 22 30 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 76 67 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 76 69 65 77 62 6f 78 5c 75 30 30 33 64 5c 22 30 20 30 20 32 34 20 32 34 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 70 61 74 68 20 64 5c 75 30 Data Ascii: class\u003d\"gb_wd gb_rd\"\u003e\u003cdiv class\u003d\"gb_Jc gb_Q\" aria-expanded\u003d\"false\" aria-label\u003d\"Main menu\" role\u003d\"button\" tabindex\u003d\"0\"\u003e\u003csvg focusable\u003d\"false\" viewbox\u003d\"0 0 24 24\"\u003e\u003cpath d\u0
2025-01-15 16:44:32 UTC	1390	IN	Data Raw: 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 77 64 20 67 62 5f 38 63 20 67 62 5f 39 63 5c 22 5c 75 30 30 33 65 5c 75 30 30 33 63 73 70 61 6e 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 75 64 5c 22 20 61 72 69 61 2d 6c 65 76 65 6c 5c 75 30 30 33 64 5c 22 31 5c 22 20 72 6f 6c 65 5c 75 30 30 33 64 5c 22 68 65 61 64 69 6e 67 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 5c 2f 73 70 61 6e 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 61 64 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 5c 2f 64 69 76 5c 75 30 30 33 65 5c 75 30 30 33 63 64 69 76 20 63 6c 61 73 73 5c 75 30 30 33 64 Data Ascii: 003cdiv class\u003d\"gb_wd gb_8c gb_9c\"\u003e\u003cspan class\u003d\"gb_ud\" aria-level\u003d\"1\" role\u003d\"heading\"\u003e \u003c\/span\u003e\u003cdiv class\u003d\"gb_ad\"\u003e \u003c\/div\u003e\u003c\/div\u003e\u003c\/div\u003e\u003cdiv class\u003d
2025-01-15 16:44:32 UTC	1390	IN	Data Raw: 73 73 5c 75 30 30 33 64 5c 22 67 62 5f 44 5c 22 20 66 6f 63 75 73 61 62 6c 65 5c 75 30 30 33 64 5c 22 66 61 6c 73 65 5c 22 20 68 65 69 67 68 74 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 20 76 69 65 77 42 6f 78 5c 75 30 30 33 64 5c 22 30 20 2d 39 36 30 20 39 36 30 20 39 36 30 5c 22 20 77 69 64 74 68 5c 75 30 30 33 64 5c 22 32 34 70 78 5c 22 5c 75 30 30 33 65 20 5c 75 30 30 33 63 70 61 74 68 20 64 5c 75 30 30 33 64 5c 22 4d 32 30 39 2d 31 32 30 71 2d 34 32 20 30 2d 37 30 2e 35 2d 32 38 2e 35 54 31 31 30 2d 32 31 37 71 30 2d 31 34 20 33 2d 32 35 2e 35 74 39 2d 32 31 2e 35 6c 32 32 38 2d 33 34 31 71 31 30 2d 31 34 20 31 35 2d 33 31 74 35 2d 33 34 76 2d 31 31 30 68 2d 32 30 71 2d 31 33 20 30 2d 32 31 2e 35 2d 38 2e 35 54 33 32 30 2d 38 31 30 71 30 2d 31 33 20 Data Ascii: ss\u003d\"gb_D\" focusable\u003d\"false\" height\u003d\"24px\" viewBox\u003d\"0 -960 960 960\" width\u003d\"24px\"\u003e \u003cpath d\u003d\"M209-120q-42 0-70.5-28.5T110-217q0-14 3-25.5t9-21.5l228-341q10-14 15-31t5-34v-110h-20q-13 0-21.5-8.5T320-810q0-13
2025-01-15 16:44:32 UTC	1390	IN	Data Raw: 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 36 2c 36 63 30 2c 31 2e 31 20 30 2e 39 2c 32 20 32 2c 32 73 32 2c 2d 30 2e 39 20 32 2c 2d 32 20 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 7a 4d 31 32 2c 38 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 38 2c 31 34 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c 2d 32 73 2d 30 2e 39 2c 2d 32 20 2d 32 2c 2d 32 20 2d 32 2c 30 2e 39 20 2d 32 2c 32 20 30 2e 39 2c 32 20 32 2c 32 7a 4d 31 38 2c 32 30 63 31 2e 31 2c 30 20 32 2c 2d 30 2e 39 20 32 2c Data Ascii: 1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM16,6c0,1.1 0.9,2 2,2s2,-0.9 2,-2 -0.9,-2 -2,-2 -2,0.9 -2,2zM12,8c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM18,14c1.1,0 2,-0.9 2,-2s-0.9,-2 -2,-2 -2,0.9 -2,2 0.9,2 2,2zM18,20c1.1,0 2,-0.9 2,
2025-01-15 16:44:32 UTC	1390	IN	Data Raw: 65 6e 75 2d 63 6f 6e 74 65 6e 74 22 2c 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 62 61 72 5f 68 65 69 67 68 74 22 3a 36 30 2c 22 65 78 70 65 72 69 6d 65 6e 74 5f 69 64 22 3a 5b 33 37 30 30 32 36 38 2c 33 37 30 30 39 34 39 2c 33 37 30 31 33 38 34 2c 31 30 32 32 37 38 32 30 35 5d 2c 22 69 73 5f 62 61 63 6b 75 70 5f 62 61 72 22 3a 66 61 6c 73 65 7d 2c 22 70 61 67 65 5f 68 6f 6f 6b 73 22 3a 7b 22 61 66 74 65 72 5f 62 61 72 5f 73 63 72 69 70 74 22 3a 7b 22 70 72 69 76 61 74 65 5f 64 6f 5f 6e 6f 74 5f 61 63 63 65 73 73 5f 6f 72 5f 65 6c 73 65 5f 73 61 66 65 5f 73 63 72 69 70 74 5f 77 72 61 70 70 65 64 5f 76 61 6c 75 65 22 3a 22 74 68 69 73 2e 67 62 61 72 5f 5c 75 30 30 33 64 74 68 69 73 2e 67 62 61 72 5f 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 Data Ascii: enu-content","metadata":{"bar_height":60,"experiment_id":[3700268,3700949,3701384,102278205],"is_backup_bar":false},"page_hooks":{"after_bar_script":{"private_do_not_access_or_else_safe_script_wrapped_value":"this.gbar_\u003dthis.gbar_\|\|{};(function(_){va
2025-01-15 16:44:32 UTC	512	IN	Data Raw: 20 63 5c 75 30 30 33 64 41 72 72 61 79 28 62 29 3b 66 6f 72 28 6c 65 74 20 64 5c 75 30 30 33 64 30 3b 64 5c 75 30 30 33 63 62 3b 64 2b 2b 29 63 5b 64 5d 5c 75 30 30 33 64 61 5b 64 5d 3b 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 5b 5d 7d 3b 4c 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 5f 2e 4b 64 28 62 5c 75 30 30 33 64 5c 75 30 30 33 65 62 2e 73 75 62 73 74 72 28 30 2c 61 2e 6c 65 6e 67 74 68 2b 31 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5c 75 30 30 33 64 5c 75 30 30 33 64 5c 75 30 30 33 64 61 2b 5c 22 3a 5c 22 29 7d 3b 5f 2e 4d 64 5c 75 30 30 33 64 67 6c 6f 62 61 6c 54 68 69 73 2e 74 72 75 73 74 65 64 54 79 70 65 73 3b 5f 2e 4e 64 5c 75 30 30 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 Data Ascii: c\u003dArray(b);for(let d\u003d0;d\u003cb;d++)c[d]\u003da[d];return c}return[]};Ld\u003dfunction(a){return new _.Kd(b\u003d\u003eb.substr(0,a.length+1).toLowerCase()\u003d\u003d\u003da+\":\")};_.Md\u003dglobalThis.trustedTypes;_.Nd\u003dclass{constructor
2025-01-15 16:44:32 UTC	424	IN	Data Raw: 31 61 31 0d 0a 24 29 2f 2e 74 65 73 74 28 61 29 29 5d 3b 5f 2e 51 64 5c 75 30 30 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 69 5c 75 30 30 33 64 61 7d 74 6f 53 74 72 69 6e 67 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 2b 5c 22 5c 22 7d 7d 3b 5f 2e 52 64 5c 75 30 30 33 64 6e 65 77 20 5f 2e 51 64 28 5f 2e 4d 64 3f 5f 2e 4d 64 2e 65 6d 70 74 79 48 54 4d 4c 3a 5c 22 5c 22 29 3b 5c 6e 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 5c 6e 74 72 79 7b 5c 6e 76 61 72 20 57 64 2c 6a 65 2c 56 64 2c 58 64 2c 62 65 3b 5f 2e 53 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 5c 75 30 30 33 64 5c 75 30 30 33 64 6e 75 6c 6c 3f 61 3a 28 30 2c 5f 2e 52 Data Ascii: 1a1$)/.test(a))];_.Qd\u003dclass{constructor(a){this.i\u003da}toString(){return this.i+\"\"}};_.Rd\u003dnew _.Qd(_.Md?_.Md.emptyHTML:\"\");\n}catch(e){_._DumpException(e)}\ntry{\nvar Wd,je,Vd,Xd,be;_.Sd\u003dfunction(a){return a\u003d\u003dnull?a:(0,_.R
2025-01-15 16:44:32 UTC	1390	IN	Data Raw: 38 30 30 30 0d 0a 62 65 72 5c 22 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 28 30 2c 5f 2e 52 61 29 28 61 29 3f 61 7c 30 3a 76 6f 69 64 20 30 7d 3b 5f 2e 55 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 62 2c 30 29 5c 75 30 30 33 64 5c 75 30 30 33 64 30 7d 3b 57 64 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 61 5c 75 30 30 33 64 6e 75 6c 6c 3b 69 66 28 21 56 64 29 72 65 74 75 72 6e 20 61 3b 74 72 79 7b 63 6f 6e 73 74 20 62 5c 75 30 30 33 64 63 5c 75 30 30 33 64 5c 75 30 30 33 65 63 3b 61 5c 75 30 30 33 64 56 64 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 5c 22 6f 67 62 2d 71 74 6d 23 68 74 6d 6c 5c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 62 2c 63 72 65 61 74 Data Ascii: 8000ber\")return;return(0,_.Ra)(a)?a\|0:void 0};_.Ud\u003dfunction(a,b){return a.lastIndexOf(b,0)\u003d\u003d0};Wd\u003dfunction(){let a\u003dnull;if(!Vd)return a;try{const b\u003dc\u003d\u003ec;a\u003dVd.createPolicy(\"ogb-qtm#html\",{createHTML:b,creat
2025-01-15 16:44:32 UTC	1390	IN	Data Raw: 72 65 74 75 72 6e 28 64 5c 75 30 30 33 64 5f 2e 53 28 61 2c 62 29 29 21 5c 75 30 30 33 64 6e 75 6c 6c 3f 64 3a 63 7d 3b 56 64 5c 75 30 30 33 64 5f 2e 4d 64 3b 5f 2e 5a 64 5c 75 30 30 33 64 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 29 7b 74 68 69 73 2e 69 5c 75 30 30 33 64 61 7d 74 6f 53 74 72 69 6e 67 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 2b 5c 22 5c 22 7d 7d 3b 62 65 5c 75 30 30 33 64 2f 5e 5c 5c 73 2a 28 3f 21 6a 61 76 61 73 63 72 69 70 74 3a 29 28 3f 3a 5b 5c 5c 77 2b 2e 2d 5d 2b 3a 7c 5b 5e 3a 2f 3f 23 5d 2a 28 3f 3a 5b 2f 3f 23 5d 7c 24 29 29 2f 69 3b 76 61 72 20 6f 65 2c 73 65 2c 6b 65 3b 5f 2e 6d 65 5c 75 30 30 33 64 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 6e 65 77 20 6b 65 28 5f 2e 6c 65 28 61 29 29 Data Ascii: return(d\u003d_.S(a,b))!\u003dnull?d:c};Vd\u003d_.Md;_.Zd\u003dclass{constructor(a){this.i\u003da}toString(){return this.i+\"\"}};be\u003d/^\\s(?!javascript:)(?:[\\w+.-]+:\|[^:/?#](?:[/?#]\|$))/i;var oe,se,ke;_.me\u003dfunction(a){return a?new ke(_.le(a))

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.18	60778	142.250.184.228	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:32 UTC	353	OUT	GET /async/newtab_promos HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:44:32 UTC	933	IN	HTTP/1.1 200 OK Version: 714120572 Content-Type: application/json; charset=UTF-8 X-Content-Type-Options: nosniff Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Date: Wed, 15 Jan 2025 16:44:32 GMT Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:32 UTC	35	IN	Data Raw: 31 64 0d 0a 29 5d 7d 27 0a 7b 22 75 70 64 61 74 65 22 3a 7b 22 70 72 6f 6d 6f 73 22 3a 7b 7d 7d 7d 0d 0a Data Ascii: 1d)]}'{"update":{"promos":{}}}
2025-01-15 16:44:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.18	60787	172.217.18.14	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:35 UTC	726	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 913 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: chrome-untrusted://new-tab-page X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:44:35 UTC	913	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 34 39 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 33 36 39 35 39 34 37 32 38 35 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.149"],[1,0,0,0,0]]],373,[["1736959472854",null,null,null,
2025-01-15 16:44:35 UTC	950	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: chrome-untrusted://new-tab-page Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=520=cnb8efMP02xMqSotujjSuBTLkx23sXSxAMeRP3UIq8LeVUtdp-IsbiuijOXpDO8IVD8s6Emp2T_-Wlmu1dHHlvQEOcY4c7ZsUbrc93eKyTev8Fth5kyPE6Gn9lc6hd_sTD0pURQ8Y2gsAg3jWj_gSwJa72Qwr5M6BJEegP74DLHb4gvNrl3MH34OV8FdeD3N; expires=Thu, 17-Jul-2025 16:44:35 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 15 Jan 2025 16:44:35 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 15 Jan 2025 16:44:35 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:35 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2025-01-15 16:44:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.18	60789	142.250.184.228	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:38 UTC	844	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=7&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI3L3NAQjpxc0BCJLKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=cnb8efMP02xMqSotujjSuBTLkx23sXSxAMeRP3UIq8LeVUtdp-IsbiuijOXpDO8IVD8s6Emp2T_-Wlmu1dHHlvQEOcY4c7ZsUbrc93eKyTev8Fth5kyPE6Gn9lc6hd_sTD0pURQ8Y2gsAg3jWj_gSwJa72Qwr5M6BJEegP74DLHb4gvNrl3MH34OV8FdeD3N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.18	60788	172.217.18.14	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:38 UTC	936	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 918 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: chrome-untrusted://new-tab-page X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=cnb8efMP02xMqSotujjSuBTLkx23sXSxAMeRP3UIq8LeVUtdp-IsbiuijOXpDO8IVD8s6Emp2T_-Wlmu1dHHlvQEOcY4c7ZsUbrc93eKyTev8Fth5kyPE6Gn9lc6hd_sTD0pURQ8Y2gsAg3jWj_gSwJa72Qwr5M6BJEegP74DLHb4gvNrl3MH34OV8FdeD3N
2025-01-15 16:44:38 UTC	918	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 34 39 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 33 36 39 35 39 34 37 34 37 32 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.149"],[1,0,0,0,0]]],373,[["1736959474721",null,null,null,
2025-01-15 16:44:38 UTC	958	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: chrome-untrusted://new-tab-page Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=520=LnnDfJWmvTG267wH4QJvcul0IvKrwvyw8MPaq-l42CpCu579z6rv5ud_KaMqYOWEOfjIq5nSoUfqgvvLgqEHZBEBiJZ6lvtm5TPnh_pa0ln8SYsnSFEEdakc_KkJFoEJaks0CuZ4gj73OFTbCo49e7sbQf7hCVR1MzbU_H44un5ABG7i19FQ2rYz87-tGIDutxVRvdgu; expires=Thu, 17-Jul-2025 16:44:38 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 15 Jan 2025 16:44:38 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 15 Jan 2025 16:44:38 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:38 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2025-01-15 16:44:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.18	60790	142.250.184.228	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:39 UTC	839	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI3L3NAQjpxc0BCJLKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=LnnDfJWmvTG267wH4QJvcul0IvKrwvyw8MPaq-l42CpCu579z6rv5ud_KaMqYOWEOfjIq5nSoUfqgvvLgqEHZBEBiJZ6lvtm5TPnh_pa0ln8SYsnSFEEdakc_KkJFoEJaks0CuZ4gj73OFTbCo49e7sbQf7hCVR1MzbU_H44un5ABG7i19FQ2rYz87-tGIDutxVRvdgu
2025-01-15 16:44:39 UTC	1266	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:44:39 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-0ATiBSRKfnlyPRRcxT72MA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:39 UTC	124	IN	Data Raw: 33 34 63 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 63 61 6d 65 72 6f 6e 20 62 72 69 6e 6b 22 2c 22 64 69 73 6e 65 79 20 6d 6f 61 6e 61 20 6c 61 77 73 75 69 74 22 2c 22 61 6d 61 7a 6f 6e 20 70 72 69 6d 65 22 2c 22 64 79 6e 61 73 74 79 20 77 61 72 72 69 6f 72 73 20 6f 72 69 67 69 6e 73 20 72 65 76 69 65 77 22 2c 22 75 73 63 69 73 20 76 69 73 61 20 62 75 6c 6c 65 74 69 6e 22 Data Ascii: 34c)]}'["",["cameron brink","disney moana lawsuit","amazon prime","dynasty warriors origins review","uscis visa bulletin"
2025-01-15 16:44:39 UTC	727	IN	Data Raw: 2c 22 77 6f 6c 66 20 6d 6f 6f 6e 20 66 75 6c 6c 20 6d 6f 6f 6e 22 2c 22 79 6f 75 6e 67 20 61 6e 64 20 74 68 65 20 72 65 73 74 6c 65 73 73 20 73 70 6f 69 6c 65 72 73 20 63 6c 61 69 72 65 22 2c 22 63 6c 65 76 65 6c 61 6e 64 20 63 6c 69 66 66 73 20 63 65 6f 20 6c 6f 75 72 65 6e 63 6f 20 67 6f 6e 63 61 6c 76 65 73 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 67 49 6b 6b 34 53 45 77 6f 52 56 48 4a 6c 62 6d 52 70 62 6d 63 67 63 32 56 68 63 6d 4e 6f 5a 58 4d 5c 75 30 30 33 64 22 2c 22 67 6f 6f 67 6c 65 3a Data Ascii: ,"wolf moon full moon","young and the restless spoilers claire","cleveland cliffs ceo lourenco goncalves"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:
2025-01-15 16:44:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.18	60791	142.250.184.228	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:40 UTC	852	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=7&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI3L3NAQjpxc0BCJLKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=LnnDfJWmvTG267wH4QJvcul0IvKrwvyw8MPaq-l42CpCu579z6rv5ud_KaMqYOWEOfjIq5nSoUfqgvvLgqEHZBEBiJZ6lvtm5TPnh_pa0ln8SYsnSFEEdakc_KkJFoEJaks0CuZ4gj73OFTbCo49e7sbQf7hCVR1MzbU_H44un5ABG7i19FQ2rYz87-tGIDutxVRvdgu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.18	60792	142.250.184.228	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:40 UTC	877	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=virus&oit=1&cp=5&pgcl=7&gs_rn=42&psi=g_cpjZ4Qvjy5Pv9Y&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI3L3NAQjpxc0BCJLKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=LnnDfJWmvTG267wH4QJvcul0IvKrwvyw8MPaq-l42CpCu579z6rv5ud_KaMqYOWEOfjIq5nSoUfqgvvLgqEHZBEBiJZ6lvtm5TPnh_pa0ln8SYsnSFEEdakc_KkJFoEJaks0CuZ4gj73OFTbCo49e7sbQf7hCVR1MzbU_H44un5ABG7i19FQ2rYz87-tGIDutxVRvdgu
2025-01-15 16:44:41 UTC	1266	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:44:41 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-GeazOskbJ3MUXD7VTLylZg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:41 UTC	124	IN	Data Raw: 33 65 61 0d 0a 29 5d 7d 27 0a 5b 22 76 69 72 75 73 22 2c 5b 22 76 69 72 75 73 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 22 2c 22 76 69 72 75 73 20 73 63 61 6e 6e 65 72 22 2c 22 76 69 72 75 73 65 73 22 2c 22 76 69 72 75 73 20 63 68 65 63 6b 65 72 22 2c 22 76 69 72 75 73 20 32 30 32 35 22 2c 22 76 69 72 75 73 20 64 65 66 69 6e 69 74 69 6f 6e 22 2c 22 76 69 72 75 73 20 70 72 Data Ascii: 3ea)]}'["virus",["virus","virustotal","virus scanner","viruses","virus checker","virus 2025","virus definition","virus pr
2025-01-15 16:44:41 UTC	885	IN	Data Raw: 6f 74 65 63 74 69 6f 6e 22 2c 22 76 69 72 75 73 20 6f 75 74 62 72 65 61 6b 20 32 30 32 35 22 2c 22 76 69 72 75 73 20 61 6c 65 72 74 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 64 65 74 61 69 6c 22 3a 5b 7b 7d 2c 7b 7d 2c 7b 7d 2c 7b 7d 2c 7b 7d 2c 7b 7d 2c 7b 7d 2c 7b 7d 2c 7b 7d 2c 7b 22 67 6f 6f 67 6c 65 3a 65 6e 74 69 74 79 69 6e 66 6f 22 3a 22 43 67 77 76 5a 79 38 78 63 54 56 71 59 6a 68 69 62 6a 6b 53 47 31 4e 76 62 6d 63 67 59 6e 6b 67 49 6c 64 6c 61 58 4a 6b 49 45 46 73 49 69 42 5a 59 57 35 72 62 Data Ascii: otection","virus outbreak 2025","virus alert"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":[{},{},{},{},{},{},{},{},{},{"google:entityinfo":"CgwvZy8xcTVqYjhibjkSG1NvbmcgYnkgIldlaXJkIEFsIiBZYW5rb
2025-01-15 16:44:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.18	60793	142.250.184.228	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:41 UTC	878	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=virust&oit=1&cp=6&pgcl=7&gs_rn=42&psi=g_cpjZ4Qvjy5Pv9Y&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI3L3NAQjpxc0BCJLKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=LnnDfJWmvTG267wH4QJvcul0IvKrwvyw8MPaq-l42CpCu579z6rv5ud_KaMqYOWEOfjIq5nSoUfqgvvLgqEHZBEBiJZ6lvtm5TPnh_pa0ln8SYsnSFEEdakc_KkJFoEJaks0CuZ4gj73OFTbCo49e7sbQf7hCVR1MzbU_H44un5ABG7i19FQ2rYz87-tGIDutxVRvdgu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.18	60794	142.250.184.228	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:41 UTC	879	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=virusto&oit=1&cp=7&pgcl=7&gs_rn=42&psi=g_cpjZ4Qvjy5Pv9Y&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI3L3NAQjpxc0BCJLKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=LnnDfJWmvTG267wH4QJvcul0IvKrwvyw8MPaq-l42CpCu579z6rv5ud_KaMqYOWEOfjIq5nSoUfqgvvLgqEHZBEBiJZ6lvtm5TPnh_pa0ln8SYsnSFEEdakc_KkJFoEJaks0CuZ4gj73OFTbCo49e7sbQf7hCVR1MzbU_H44un5ABG7i19FQ2rYz87-tGIDutxVRvdgu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.18	60795	142.250.184.228	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:41 UTC	880	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=virustot&oit=1&cp=8&pgcl=7&gs_rn=42&psi=g_cpjZ4Qvjy5Pv9Y&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI3L3NAQjpxc0BCJLKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=LnnDfJWmvTG267wH4QJvcul0IvKrwvyw8MPaq-l42CpCu579z6rv5ud_KaMqYOWEOfjIq5nSoUfqgvvLgqEHZBEBiJZ6lvtm5TPnh_pa0ln8SYsnSFEEdakc_KkJFoEJaks0CuZ4gj73OFTbCo49e7sbQf7hCVR1MzbU_H44un5ABG7i19FQ2rYz87-tGIDutxVRvdgu
2025-01-15 16:44:42 UTC	1266	IN	HTTP/1.1 200 OK Date: Wed, 15 Jan 2025 16:44:41 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-UnPHi232-0LfhocMRJNFZA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:42 UTC	124	IN	Data Raw: 32 62 36 0d 0a 29 5d 7d 27 0a 5b 22 76 69 72 75 73 74 6f 74 22 2c 5b 22 76 69 72 75 73 74 6f 74 61 6c 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 73 63 61 6e 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 61 70 69 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 61 6c 74 65 72 6e 61 74 69 76 65 Data Ascii: 2b6)]}'["virustot",["virustotal","https://www.virustotal.com/","virustotal scan","virustotal api","virustotal alternative
2025-01-15 16:44:42 UTC	577	IN	Data Raw: 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 6c 69 6e 6b 20 63 68 65 63 6b 65 72 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 75 72 6c 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 61 70 69 20 6b 65 79 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 75 72 6c 20 63 68 65 63 6b 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 72 65 64 64 69 74 22 5d 2c 5b 22 22 2c 22 56 69 72 75 73 54 6f 74 61 6c 20 2d 20 46 72 65 65 20 4f 6e 6c 69 6e 65 20 56 69 72 75 73 2c 20 4d 61 6c 77 61 72 65 20 61 6e 64 20 55 52 4c 20 53 63 61 6e 6e 65 72 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 70 68 69 22 3a 30 2c 22 70 72 65 22 3a 30 2c 22 74 6c 77 22 Data Ascii: ","virustotal link checker","virustotal url","virustotal api key","virustotal url check","virustotal reddit"],["","VirusTotal - Free Online Virus, Malware and URL Scanner","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"phi":0,"pre":0,"tlw"
2025-01-15 16:44:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.18	60796	142.250.184.228	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:42 UTC	881	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=virustota&oit=1&cp=9&pgcl=7&gs_rn=42&psi=g_cpjZ4Qvjy5Pv9Y&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI3L3NAQjpxc0BCJLKzQEIucrNAQis0c0BCInTzQEI29PNAQj2080BCNLWzQEIp9jNAQjp2M0BCPnA1BUYwcvMARi50s0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=LnnDfJWmvTG267wH4QJvcul0IvKrwvyw8MPaq-l42CpCu579z6rv5ud_KaMqYOWEOfjIq5nSoUfqgvvLgqEHZBEBiJZ6lvtm5TPnh_pa0ln8SYsnSFEEdakc_KkJFoEJaks0CuZ4gj73OFTbCo49e7sbQf7hCVR1MzbU_H44un5ABG7i19FQ2rYz87-tGIDutxVRvdgu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.18	60804	216.239.36.21	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:43 UTC	657	OUT	GET / HTTP/1.1 Host: virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:44:43 UTC	287	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache Location: https://www.virustotal.com/gui/ X-Cloud-Trace-Context: 07a84cf1657a2f4c7c1efb20a4c037c1 Date: Wed, 15 Jan 2025 16:44:43 GMT Server: Google Frontend Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.18	60805	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:43 UTC	665	OUT	GET /gui/ HTTP/1.1 Host: www.virustotal.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:44:44 UTC	375	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:44:44 GMT expires: Wed, 15 Jan 2025 16:45:44 GMT cache-control: public, max-age=60 etag: "iyPWYw" x-cloud-trace-context: a286751122051d03ec957841c3379f5e content-type: text/html server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:44 UTC	1015	IN	Data Raw: 31 63 35 38 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 2c 6e 2c 67 29 7b 65 5b 6e 5d 3d 65 5b 6e 5d 7c 7c 5b 5d 2c 65 5b 6e 5d 2e 70 75 73 68 28 7b 22 67 74 6d 2e 73 74 61 72 74 22 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 22 67 74 6d 2e 6a 73 22 7d 29 3b 76 61 72 20 6d 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 61 29 5b 30 5d 2c 72 3d 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 61 29 3b 72 2e 61 73 79 6e 63 3d 21 30 2c 72 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 Data Ascii: 1c58<!doctype html><html lang="en"><head><script>!function(e,t,a,n,g){e[n]=e[n]\|\|[],e[n].push({"gtm.start":(new Date).getTime(),event:"gtm.js"});var m=t.getElementsByTagName(a)[0],r=t.createElement(a);r.async=!0,r.src="https://www.googletagmanager.com/g
2025-01-15 16:44:44 UTC	1390	IN	Data Raw: 6d 61 74 69 45 6e 76 22 3a 22 68 74 74 70 73 3a 2f 2f 61 64 76 61 6e 74 61 67 65 2e 6d 61 6e 64 69 61 6e 74 2e 63 6f 6d 22 2c 22 61 73 6d 45 6e 76 22 3a 22 68 74 74 70 73 3a 2f 2f 61 73 6d 2e 61 64 76 61 6e 74 61 67 65 2e 6d 61 6e 64 69 61 6e 74 2e 63 6f 6d 22 2c 22 62 6f 74 41 67 65 6e 74 49 64 22 3a 22 32 31 36 36 65 35 37 30 2d 38 31 37 33 2d 34 63 39 34 2d 38 32 37 30 2d 36 64 35 35 39 66 65 64 36 33 62 30 22 2c 22 62 61 73 65 22 3a 22 2f 67 75 69 2f 22 2c 22 65 72 72 6f 72 53 65 72 76 69 63 65 22 3a 22 76 69 72 75 73 74 6f 74 61 6c 2d 75 69 2d 6d 61 69 6e 22 2c 22 63 6f 6e 73 6f 6c 65 50 72 6f 6d 70 74 22 3a 66 61 6c 73 65 2c 22 67 61 4b 65 79 22 3a 22 55 41 2d 32 37 34 33 33 35 34 37 2d 32 22 2c 22 72 65 63 61 70 74 63 68 61 56 33 53 69 74 65 4b 65 Data Ascii: matiEnv":"https://advantage.mandiant.com","asmEnv":"https://asm.advantage.mandiant.com","botAgentId":"2166e570-8173-4c94-8270-6d559fed63b0","base":"/gui/","errorService":"virustotal-ui-main","consolePrompt":false,"gaKey":"UA-27433547-2","recaptchaV3SiteKe
2025-01-15 16:44:44 UTC	1390	IN	Data Raw: 32 2e 70 6e 67 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 61 70 70 6c 69 63 61 74 69 6f 6e 2d 54 69 6c 65 49 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6d 61 67 65 73 2f 6d 61 6e 69 66 65 73 74 2f 69 63 6f 6e 2d 31 34 34 78 31 34 34 2e 70 6e 67 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 61 70 70 6c 69 63 61 74 69 6f 6e 2d 54 69 6c 65 43 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 33 66 35 31 62 35 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 61 70 70 6c 69 63 61 74 69 6f 6e 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 3e 3c 73 74 79 6c 65 20 63 75 73 74 6f 6d 2d 73 74 79 6c 65 3d Data Ascii: 2.png"><meta name="msapplication-TileImage" content="images/manifest/icon-144x144.png"><meta name="msapplication-TileColor" content="#3f51b5"><meta name="msapplication-tap-highlight" content="no"><meta name="referrer" content="origin"><style custom-style=
2025-01-15 16:44:44 UTC	1390	IN	Data Raw: 62 6f 64 79 2d 63 6f 6c 6f 72 29 3b 2d 2d 76 74 2d 75 69 2d 63 68 65 63 6b 62 6f 78 2d 63 68 65 63 6b 65 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 70 72 69 6d 61 72 79 29 3b 2d 2d 76 74 2d 75 69 2d 63 68 65 63 6b 62 6f 78 2d 63 68 65 63 6b 65 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 70 72 69 6d 61 72 79 29 3b 2d 2d 76 74 2d 75 69 2d 74 6f 6f 6c 62 61 72 2d 69 63 6f 6e 2d 73 69 7a 65 3a 32 38 70 78 3b 2d 2d 73 6b 65 6c 65 74 6f 6e 2d 61 6e 69 6d 61 74 69 6f 6e 3a 73 6b 65 6c 65 74 6f 6e 2d 6c 6f 61 64 69 6e 67 20 32 73 20 65 61 73 65 20 69 6e 66 69 6e 69 74 65 3b 2d 2d 76 74 2d 75 69 2d 64 72 6f 70 64 6f 77 6e 2d 63 6f 6e 74 65 6e 74 2d 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 2d 2d 6d 61 78 2d 70 61 67 65 2d 77 69 64 74 68 3a 31 33 30 30 70 Data Ascii: body-color);--vt-ui-checkbox-checked-color:var(--bs-primary);--vt-ui-checkbox-checked-color:var(--bs-primary);--vt-ui-toolbar-icon-size:28px;--skeleton-animation:skeleton-loading 2s ease infinite;--vt-ui-dropdown-content-border:none;--max-page-width:1300p
2025-01-15 16:44:44 UTC	1390	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 57 41 52 4e 49 4e 47 3a 20 55 6e 68 61 6e 64 6c 65 64 20 70 72 6f 6d 69 73 65 20 72 65 6a 65 63 74 69 6f 6e 2e 20 52 65 61 73 6f 6e 3a 20 22 2b 65 2e 72 65 61 73 6f 6e 2c 65 29 2c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 57 41 52 4e 49 4e 47 3a 20 55 6e 68 61 6e 64 6c 65 64 20 70 72 6f 6d 69 73 65 20 72 65 6a 65 63 74 69 6f 6e 2e 20 52 65 61 73 6f 6e 3a 20 22 2b 65 2e 72 65 61 73 6f 6e 2c 65 29 7d 29 29 3c 2f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 3d 22 6d 61 69 6e 2e 38 38 64 61 39 31 65 62 34 65 66 64 64 65 37 36 65 62 65 30 2e 6a 73 22 20 61 73 3d 22 73 63 72 69 70 74 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 6e 6f 73 Data Ascii: function(e){console.warn("WARNING: Unhandled promise rejection. Reason: "+e.reason,e),console.log("WARNING: Unhandled promise rejection. Reason: "+e.reason,e)}))</script><link rel="preload" href="main.88da91eb4efdde76ebe0.js" as="script"></head><body><nos
2025-01-15 16:44:44 UTC	694	IN	Data Raw: 74 2e 70 72 6f 74 6f 74 79 70 65 3f 65 28 22 2e 2f 6d 61 69 6e 2e 38 38 64 61 39 31 65 62 34 65 66 64 64 65 37 36 65 62 65 30 2e 6a 73 22 29 3a 65 28 22 2e 2f 6d 61 69 6e 2e 31 39 30 65 65 37 32 61 34 32 35 63 31 31 32 66 32 34 39 30 2e 6a 73 22 29 7d 22 63 6f 6d 70 6f 73 65 64 50 61 74 68 22 69 6e 20 45 76 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 2e 70 75 73 68 28 65 28 22 70 6f 6c 79 66 69 6c 6c 73 2f 63 6f 6d 70 6f 73 65 64 50 61 74 68 2e 35 35 31 61 64 36 34 63 32 31 32 30 30 35 37 37 61 33 61 66 31 31 35 64 63 34 66 37 30 34 62 38 2e 6a 73 22 2c 21 31 29 29 2c 22 61 74 74 61 63 68 53 68 61 64 6f 77 22 69 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 26 26 22 67 65 74 52 6f 6f 74 4e 6f 64 65 22 69 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 Data Ascii: t.prototype?e("./main.88da91eb4efdde76ebe0.js"):e("./main.190ee72a425c112f2490.js")}"composedPath"in Event.prototype\|\|a.push(e("polyfills/composedPath.551ad64c21200577a3af115dc4f704b8.js",!1)),"attachShadow"in Element.prototype&&"getRootNode"in Element.pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.18	60806	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:44 UTC	553	OUT	GET /gui/main.88da91eb4efdde76ebe0.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:44:44 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:44:44 GMT expires: Thu, 15 Jan 2026 16:44:44 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 4da94e80b103e11aab2e192fd6f3235b content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:44 UTC	1003	IN	Data Raw: 33 39 63 38 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 32 32 31 36 39 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 0a 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 37 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 0a 20 2a 20 79 6f 75 20 6d 61 Data Ascii: 39c8(()=>{var __webpack_modules__={22169:(e,t,r)=>{"use strict";function n(e,t){return function(e){if(Array.isArray(e))return e}/** * @license * Copyright 2017 Google LLC * * Licensed under the Apache License, Version 2.0 (the "License"); * you ma
2025-01-15 16:44:44 UTC	1390	IN	Data Raw: 74 29 3b 6c 3d 21 30 29 3b 7d 63 61 74 63 68 28 65 29 7b 64 3d 21 30 2c 6f 3d 65 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 69 66 28 21 6c 26 26 6e 75 6c 6c 21 3d 72 2e 72 65 74 75 72 6e 26 26 28 61 3d 72 2e 72 65 74 75 72 6e 28 29 2c 4f 62 6a 65 63 74 28 61 29 21 3d 3d 61 29 29 72 65 74 75 72 6e 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 64 29 74 68 72 6f 77 20 6f 7d 7d 72 65 74 75 72 6e 20 73 7d 7d 28 65 2c 74 29 7c 7c 6f 28 65 2c 74 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c Data Ascii: t);l=!0);}catch(e){d=!0,o=e}finally{try{if(!l&&null!=r.return&&(a=r.return(),Object(a)!==a))return}finally{if(d)throw o}}return s}}(e,t)\|\|o(e,t)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterabl
2025-01-15 16:44:44 UTC	1390	IN	Data Raw: 6c 6c 2c 45 4e 43 4f 44 45 44 5f 56 41 4c 53 5f 42 41 53 45 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 22 2c 67 65 74 20 45 4e 43 4f 44 45 44 5f 56 41 4c 53 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 45 4e 43 4f 44 45 44 5f 56 41 4c 53 5f 42 41 53 45 2b 22 2b 2f 3d 22 7d 2c 67 65 74 20 45 4e 43 4f 44 45 44 5f 56 41 4c 53 5f 57 45 42 53 41 46 45 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 45 4e 43 4f 44 45 44 5f 56 41 4c 53 5f 42 41 53 45 2b 22 2d 5f 2e 22 7d 2c 48 41 53 5f 4e 41 54 49 56 45 5f 53 55 50 50 4f 52 54 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 74 6f 62 2c 65 6e 63 6f 64 65 Data Ascii: ll,ENCODED_VALS_BASE:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",get ENCODED_VALS(){return this.ENCODED_VALS_BASE+"+/="},get ENCODED_VALS_WEBSAFE(){return this.ENCODED_VALS_BASE+"-_."},HAS_NATIVE_SUPPORT:"function"==typeof atob,encode
2025-01-15 16:44:44 UTC	1390	IN	Data Raw: 61 70 5f 2c 6e 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 29 7b 63 6f 6e 73 74 20 6f 3d 72 5b 65 2e 63 68 61 72 41 74 28 74 2b 2b 29 5d 2c 69 3d 74 3c 65 2e 6c 65 6e 67 74 68 3f 72 5b 65 2e 63 68 61 72 41 74 28 74 29 5d 3a 30 3b 2b 2b 74 3b 63 6f 6e 73 74 20 61 3d 74 3c 65 2e 6c 65 6e 67 74 68 3f 72 5b 65 2e 63 68 61 72 41 74 28 74 29 5d 3a 36 34 3b 2b 2b 74 3b 63 6f 6e 73 74 20 73 3d 74 3c 65 2e 6c 65 6e 67 74 68 3f 72 5b 65 2e 63 68 61 72 41 74 28 74 29 5d 3a 36 34 3b 69 66 28 2b 2b 74 2c 6e 75 6c 6c 3d 3d 6f 7c 7c 6e 75 6c 6c 3d 3d 69 7c 7c 6e 75 6c 6c 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 73 29 74 68 72 6f 77 20 6e 65 77 20 6c 3b 63 6f 6e 73 74 20 64 3d 6f 3c 3c 32 7c 69 3e 3e 34 3b 69 66 28 6e 2e 70 75 73 68 28 64 29 Data Ascii: ap_,n=[];for(let t=0;t<e.length;){const o=r[e.charAt(t++)],i=t<e.length?r[e.charAt(t)]:0;++t;const a=t<e.length?r[e.charAt(t)]:64;++t;const s=t<e.length?r[e.charAt(t)]:64;if(++t,null==o\|\|null==i\|\|null==a\|\|null==s)throw new l;const d=o<<2\|i>>4;if(n.push(d)
2025-01-15 16:44:44 UTC	1390	IN	Data Raw: 65 73 73 20 6f 72 20 69 6d 70 6c 69 65 64 2e 0a 20 2a 20 53 65 65 20 74 68 65 20 4c 69 63 65 6e 73 65 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 63 20 6c 61 6e 67 75 61 67 65 20 67 6f 76 65 72 6e 69 6e 67 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 61 6e 64 0a 20 2a 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 75 6e 64 65 72 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 2f 63 6c 61 73 73 20 6c 20 65 78 74 65 6e 64 73 20 45 72 72 6f 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 22 44 65 63 6f 64 65 42 61 73 65 36 34 53 74 72 69 6e 67 45 72 72 6f 72 22 7d 7d 63 6f 6e 73 74 20 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: ess or implied. * See the License for the specific language governing permissions and * limitations under the License. */class l extends Error{constructor(){super(...arguments),this.name="DecodeBase64StringError"}}const d=function(e){return function(e)
2025-01-15 16:44:44 UTC	1390	IN	Data Raw: 67 2c 20 73 6f 66 74 77 61 72 65 0a 20 2a 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4c 69 63 65 6e 73 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 6f 6e 20 61 6e 20 22 41 53 20 49 53 22 20 42 41 53 49 53 2c 0a 20 2a 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 49 45 53 20 4f 52 20 43 4f 4e 44 49 54 49 4f 4e 53 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 65 69 74 68 65 72 20 65 78 70 72 65 73 73 20 6f 72 20 69 6d 70 6c 69 65 64 2e 0a 20 2a 20 53 65 65 20 74 68 65 20 4c 69 63 65 6e 73 65 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 63 20 6c 61 6e 67 75 61 67 65 20 67 6f 76 65 72 6e 69 6e 67 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 61 6e 64 0a 20 2a 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 75 6e 64 65 72 20 74 68 65 20 4c 69 Data Ascii: g, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the Li
2025-01-15 16:44:44 UTC	1390	IN	Data Raw: 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 0a 20 2a 0a 20 2a 20 55 6e 6c 65 73 73 20 72 65 71 75 69 72 65 64 20 62 79 20 61 70 70 6c 69 63 61 62 6c 65 20 6c 61 77 20 6f 72 20 61 67 72 65 65 64 20 74 6f 20 69 6e 20 77 72 69 74 69 6e 67 2c 20 73 6f 66 74 77 61 72 65 0a 20 2a 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4c 69 63 65 6e 73 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 6f 6e 20 61 6e 20 22 41 53 20 49 53 22 20 42 41 53 49 53 2c 0a 20 2a 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 49 45 53 20 4f 52 20 43 4f 4e 44 49 54 49 4f 4e 53 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 65 69 74 68 65 72 20 65 78 70 72 65 73 73 20 6f 72 20 69 6d 70 6c 69 65 64 2e 0a 20 2a Data Ascii: w.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. *
2025-01-15 16:44:44 UTC	1390	IN	Data Raw: 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 20 59 6f 75 20 6d 61 79 20 6f 62 74 61 69 6e 20 61 20 63 6f 70 79 20 6f 66 20 74 68 65 20 4c 69 63 65 6e 73 65 20 61 74 0a 20 2a 0a 20 2a 20 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 0a 20 2a 0a 20 2a 20 55 6e 6c 65 73 73 20 72 65 71 75 69 72 65 64 20 62 79 20 61 70 70 6c 69 63 61 62 6c 65 20 6c 61 77 20 6f 72 20 61 67 72 65 65 64 20 74 6f 20 69 6e 20 77 72 69 74 69 6e 67 2c 20 73 6f 66 74 77 61 72 65 0a 20 2a 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4c 69 63 65 6e 73 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 6f 6e 20 61 6e 20 22 41 Data Ascii: n compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "A
2025-01-15 16:44:44 UTC	1390	IN	Data Raw: 2e 65 72 72 6f 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 6d 65 73 73 61 67 65 29 7c 7c 22 22 29 7d 7d 63 61 74 63 68 28 65 29 7b 74 28 65 29 7d 7d 29 29 7d 63 6c 61 73 73 20 44 20 65 78 74 65 6e 64 73 20 45 72 72 6f 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 2c 72 29 7b 73 75 70 65 72 28 74 29 2c 74 68 69 73 2e 63 6f 64 65 3d 65 2c 74 68 69 73 2e 63 75 73 74 6f 6d 44 61 74 61 3d 72 2c 74 68 69 73 2e 6e 61 6d 65 3d 22 46 69 72 65 62 61 73 65 45 72 72 6f 72 22 2c 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 68 69 73 2c 44 2e 70 72 6f 74 6f 74 79 70 65 29 2c 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 26 26 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 Data Ascii: .error)\|\|void 0===e?void 0:e.message)\|\|"")}}catch(e){t(e)}}))}class D extends Error{constructor(e,t,r){super(t),this.code=e,this.customData=r,this.name="FirebaseError",Object.setPrototypeOf(this,D.prototype),Error.captureStackTrace&&Error.captureStackTrac
2025-01-15 16:44:44 UTC	1390	IN	Data Raw: 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2c 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 66 6f 72 28 76 61 72 20 6f 3d 30 2c 69 3d 72 3b 6f 3c 69 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 63 6f 6e 73 74 20 72 3d 69 5b 6f 5d 3b 69 66 28 21 6e 2e 69 6e 63 6c 75 64 65 73 28 72 29 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 61 3d 65 5b 72 5d 2c 73 3d 74 5b 72 5d 3b 69 66 28 5f 28 61 29 26 26 5f 28 73 29 29 7b 69 66 28 21 24 28 61 2c 73 29 29 72 65 74 75 72 6e 21 31 7d 65 6c 73 65 20 69 66 28 61 21 3d 3d 73 29 72 65 74 75 72 6e 21 31 7d 66 6f 72 28 76 61 72 20 61 3d 30 2c 73 3d 6e 3b 61 3c 73 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 63 6f 6e 73 74 20 65 3d 73 5b 61 5d 3b 69 66 28 21 72 2e 69 6e 63 6c 75 64 65 73 28 65 29 29 72 Data Ascii: ;const r=Object.keys(e),n=Object.keys(t);for(var o=0,i=r;o<i.length;o++){const r=i[o];if(!n.includes(r))return!1;const a=e[r],s=t[r];if(_(a)&&_(s)){if(!$(a,s))return!1}else if(a!==s)return!1}for(var a=0,s=n;a<s.length;a++){const e=s[a];if(!r.includes(e))r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.18	60807	142.250.186.163	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:44 UTC	542	OUT	GET /recaptcha/enterprise.js HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:44:45 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 15 Jan 2025 16:44:44 GMT Date: Wed, 15 Jan 2025 16:44:44 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:45 UTC	641	IN	Data Raw: 37 32 65 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 45 3d 27 65 6e 74 65 72 70 72 69 73 65 27 2c 61 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 2c 67 72 3d 61 5b 45 5d 3d 61 5b 45 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f Data Ascii: 72e/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['_
2025-01-15 16:44:45 UTC	1204	IN	Data Raw: 65 6e 74 3d 27 41 37 75 78 74 6a 33 2b 68 4a 6d 4f 63 5a 46 6f 6f 46 54 30 50 73 32 37 36 50 75 4f 71 47 6e 4d 31 6a 66 6f 50 62 46 76 78 57 70 37 33 56 43 36 30 4c 6e 59 47 7a 61 79 48 56 76 63 46 65 45 69 46 30 71 72 77 79 37 66 51 41 4c 2b 67 47 56 58 55 2b 66 39 49 51 63 41 41 41 43 54 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 4a 6c 59 32 46 77 64 47 4e 6f 59 53 35 75 5a 58 51 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 Data Ascii: ent='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYW
2025-01-15 16:44:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.18	60811	142.250.186.163	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:45 UTC	364	OUT	GET /recaptcha/enterprise.js HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:44:46 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 15 Jan 2025 16:44:45 GMT Date: Wed, 15 Jan 2025 16:44:45 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:46 UTC	641	IN	Data Raw: 37 32 65 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 45 3d 27 65 6e 74 65 72 70 72 69 73 65 27 2c 61 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 2c 67 72 3d 61 5b 45 5d 3d 61 5b 45 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f Data Ascii: 72e/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['_
2025-01-15 16:44:46 UTC	1204	IN	Data Raw: 65 6e 74 3d 27 41 37 75 78 74 6a 33 2b 68 4a 6d 4f 63 5a 46 6f 6f 46 54 30 50 73 32 37 36 50 75 4f 71 47 6e 4d 31 6a 66 6f 50 62 46 76 78 57 70 37 33 56 43 36 30 4c 6e 59 47 7a 61 79 48 56 76 63 46 65 45 69 46 30 71 72 77 79 37 66 51 41 4c 2b 67 47 56 58 55 2b 66 39 49 51 63 41 41 41 43 54 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 4a 6c 59 32 46 77 64 47 4e 6f 59 53 35 75 5a 58 51 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 Data Ascii: ent='A7uxtj3+hJmOcZFooFT0Ps276PuOqGnM1jfoPbFvxWp73VC60LnYGzayHVvcFeEiF0qrwy7fQAL+gGVXU+f9IQcAAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYW
2025-01-15 16:44:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.18	60818	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:49 UTC	468	OUT	GET /gui/main.88da91eb4efdde76ebe0.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959485.0.0.0; _ga=GA1.1.230491043.1736959486
2025-01-15 16:44:49 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:44:49 GMT expires: Thu, 15 Jan 2026 16:44:49 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 9ef6709d9d5bfca3e437818c2817fd4b content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:49 UTC	1003	IN	Data Raw: 33 39 37 39 0d 0a 28 28 29 3d 3e 7b 76 61 72 20 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 32 32 31 36 39 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 0a 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 37 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 2a 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 0a 20 2a 20 79 6f 75 20 6d 61 Data Ascii: 3979(()=>{var __webpack_modules__={22169:(e,t,r)=>{"use strict";function n(e,t){return function(e){if(Array.isArray(e))return e}/** * @license * Copyright 2017 Google LLC * * Licensed under the Apache License, Version 2.0 (the "License"); * you ma
2025-01-15 16:44:49 UTC	1390	IN	Data Raw: 74 29 3b 6c 3d 21 30 29 3b 7d 63 61 74 63 68 28 65 29 7b 64 3d 21 30 2c 6f 3d 65 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 69 66 28 21 6c 26 26 6e 75 6c 6c 21 3d 72 2e 72 65 74 75 72 6e 26 26 28 61 3d 72 2e 72 65 74 75 72 6e 28 29 2c 4f 62 6a 65 63 74 28 61 29 21 3d 3d 61 29 29 72 65 74 75 72 6e 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 64 29 74 68 72 6f 77 20 6f 7d 7d 72 65 74 75 72 6e 20 73 7d 7d 28 65 2c 74 29 7c 7c 6f 28 65 2c 74 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c Data Ascii: t);l=!0);}catch(e){d=!0,o=e}finally{try{if(!l&&null!=r.return&&(a=r.return(),Object(a)!==a))return}finally{if(d)throw o}}return s}}(e,t)\|\|o(e,t)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterabl
2025-01-15 16:44:49 UTC	1390	IN	Data Raw: 6c 6c 2c 45 4e 43 4f 44 45 44 5f 56 41 4c 53 5f 42 41 53 45 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 22 2c 67 65 74 20 45 4e 43 4f 44 45 44 5f 56 41 4c 53 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 45 4e 43 4f 44 45 44 5f 56 41 4c 53 5f 42 41 53 45 2b 22 2b 2f 3d 22 7d 2c 67 65 74 20 45 4e 43 4f 44 45 44 5f 56 41 4c 53 5f 57 45 42 53 41 46 45 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 45 4e 43 4f 44 45 44 5f 56 41 4c 53 5f 42 41 53 45 2b 22 2d 5f 2e 22 7d 2c 48 41 53 5f 4e 41 54 49 56 45 5f 53 55 50 50 4f 52 54 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 61 74 6f 62 2c 65 6e 63 6f 64 65 Data Ascii: ll,ENCODED_VALS_BASE:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789",get ENCODED_VALS(){return this.ENCODED_VALS_BASE+"+/="},get ENCODED_VALS_WEBSAFE(){return this.ENCODED_VALS_BASE+"-_."},HAS_NATIVE_SUPPORT:"function"==typeof atob,encode
2025-01-15 16:44:49 UTC	1390	IN	Data Raw: 61 70 5f 2c 6e 3d 5b 5d 3b 66 6f 72 28 6c 65 74 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 29 7b 63 6f 6e 73 74 20 6f 3d 72 5b 65 2e 63 68 61 72 41 74 28 74 2b 2b 29 5d 2c 69 3d 74 3c 65 2e 6c 65 6e 67 74 68 3f 72 5b 65 2e 63 68 61 72 41 74 28 74 29 5d 3a 30 3b 2b 2b 74 3b 63 6f 6e 73 74 20 61 3d 74 3c 65 2e 6c 65 6e 67 74 68 3f 72 5b 65 2e 63 68 61 72 41 74 28 74 29 5d 3a 36 34 3b 2b 2b 74 3b 63 6f 6e 73 74 20 73 3d 74 3c 65 2e 6c 65 6e 67 74 68 3f 72 5b 65 2e 63 68 61 72 41 74 28 74 29 5d 3a 36 34 3b 69 66 28 2b 2b 74 2c 6e 75 6c 6c 3d 3d 6f 7c 7c 6e 75 6c 6c 3d 3d 69 7c 7c 6e 75 6c 6c 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 73 29 74 68 72 6f 77 20 6e 65 77 20 6c 3b 63 6f 6e 73 74 20 64 3d 6f 3c 3c 32 7c 69 3e 3e 34 3b 69 66 28 6e 2e 70 75 73 68 28 64 29 Data Ascii: ap_,n=[];for(let t=0;t<e.length;){const o=r[e.charAt(t++)],i=t<e.length?r[e.charAt(t)]:0;++t;const a=t<e.length?r[e.charAt(t)]:64;++t;const s=t<e.length?r[e.charAt(t)]:64;if(++t,null==o\|\|null==i\|\|null==a\|\|null==s)throw new l;const d=o<<2\|i>>4;if(n.push(d)
2025-01-15 16:44:49 UTC	1390	IN	Data Raw: 65 73 73 20 6f 72 20 69 6d 70 6c 69 65 64 2e 0a 20 2a 20 53 65 65 20 74 68 65 20 4c 69 63 65 6e 73 65 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 63 20 6c 61 6e 67 75 61 67 65 20 67 6f 76 65 72 6e 69 6e 67 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 61 6e 64 0a 20 2a 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 75 6e 64 65 72 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 2f 63 6c 61 73 73 20 6c 20 65 78 74 65 6e 64 73 20 45 72 72 6f 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 22 44 65 63 6f 64 65 42 61 73 65 36 34 53 74 72 69 6e 67 45 72 72 6f 72 22 7d 7d 63 6f 6e 73 74 20 64 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 Data Ascii: ess or implied. * See the License for the specific language governing permissions and * limitations under the License. */class l extends Error{constructor(){super(...arguments),this.name="DecodeBase64StringError"}}const d=function(e){return function(e)
2025-01-15 16:44:49 UTC	1390	IN	Data Raw: 67 2c 20 73 6f 66 74 77 61 72 65 0a 20 2a 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4c 69 63 65 6e 73 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 6f 6e 20 61 6e 20 22 41 53 20 49 53 22 20 42 41 53 49 53 2c 0a 20 2a 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 49 45 53 20 4f 52 20 43 4f 4e 44 49 54 49 4f 4e 53 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 65 69 74 68 65 72 20 65 78 70 72 65 73 73 20 6f 72 20 69 6d 70 6c 69 65 64 2e 0a 20 2a 20 53 65 65 20 74 68 65 20 4c 69 63 65 6e 73 65 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 63 20 6c 61 6e 67 75 61 67 65 20 67 6f 76 65 72 6e 69 6e 67 20 70 65 72 6d 69 73 73 69 6f 6e 73 20 61 6e 64 0a 20 2a 20 6c 69 6d 69 74 61 74 69 6f 6e 73 20 75 6e 64 65 72 20 74 68 65 20 4c 69 Data Ascii: g, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the Li
2025-01-15 16:44:49 UTC	1390	IN	Data Raw: 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 0a 20 2a 0a 20 2a 20 55 6e 6c 65 73 73 20 72 65 71 75 69 72 65 64 20 62 79 20 61 70 70 6c 69 63 61 62 6c 65 20 6c 61 77 20 6f 72 20 61 67 72 65 65 64 20 74 6f 20 69 6e 20 77 72 69 74 69 6e 67 2c 20 73 6f 66 74 77 61 72 65 0a 20 2a 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4c 69 63 65 6e 73 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 6f 6e 20 61 6e 20 22 41 53 20 49 53 22 20 42 41 53 49 53 2c 0a 20 2a 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 49 45 53 20 4f 52 20 43 4f 4e 44 49 54 49 4f 4e 53 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 65 69 74 68 65 72 20 65 78 70 72 65 73 73 20 6f 72 20 69 6d 70 6c 69 65 64 2e 0a 20 2a Data Ascii: w.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. *
2025-01-15 16:44:49 UTC	1390	IN	Data Raw: 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 20 59 6f 75 20 6d 61 79 20 6f 62 74 61 69 6e 20 61 20 63 6f 70 79 20 6f 66 20 74 68 65 20 4c 69 63 65 6e 73 65 20 61 74 0a 20 2a 0a 20 2a 20 20 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 0a 20 2a 0a 20 2a 20 55 6e 6c 65 73 73 20 72 65 71 75 69 72 65 64 20 62 79 20 61 70 70 6c 69 63 61 62 6c 65 20 6c 61 77 20 6f 72 20 61 67 72 65 65 64 20 74 6f 20 69 6e 20 77 72 69 74 69 6e 67 2c 20 73 6f 66 74 77 61 72 65 0a 20 2a 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4c 69 63 65 6e 73 65 20 69 73 20 64 69 73 74 72 69 62 75 74 65 64 20 6f 6e 20 61 6e 20 22 41 Data Ascii: n compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "A
2025-01-15 16:44:49 UTC	1390	IN	Data Raw: 2e 65 72 72 6f 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 6d 65 73 73 61 67 65 29 7c 7c 22 22 29 7d 7d 63 61 74 63 68 28 65 29 7b 74 28 65 29 7d 7d 29 29 7d 63 6c 61 73 73 20 44 20 65 78 74 65 6e 64 73 20 45 72 72 6f 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 2c 72 29 7b 73 75 70 65 72 28 74 29 2c 74 68 69 73 2e 63 6f 64 65 3d 65 2c 74 68 69 73 2e 63 75 73 74 6f 6d 44 61 74 61 3d 72 2c 74 68 69 73 2e 6e 61 6d 65 3d 22 46 69 72 65 62 61 73 65 45 72 72 6f 72 22 2c 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 68 69 73 2c 44 2e 70 72 6f 74 6f 74 79 70 65 29 2c 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 26 26 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 Data Ascii: .error)\|\|void 0===e?void 0:e.message)\|\|"")}}catch(e){t(e)}}))}class D extends Error{constructor(e,t,r){super(t),this.code=e,this.customData=r,this.name="FirebaseError",Object.setPrototypeOf(this,D.prototype),Error.captureStackTrace&&Error.captureStackTrac
2025-01-15 16:44:49 UTC	1390	IN	Data Raw: 3b 63 6f 6e 73 74 20 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 2c 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 66 6f 72 28 76 61 72 20 6f 3d 30 2c 69 3d 72 3b 6f 3c 69 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 63 6f 6e 73 74 20 72 3d 69 5b 6f 5d 3b 69 66 28 21 6e 2e 69 6e 63 6c 75 64 65 73 28 72 29 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 61 3d 65 5b 72 5d 2c 73 3d 74 5b 72 5d 3b 69 66 28 5f 28 61 29 26 26 5f 28 73 29 29 7b 69 66 28 21 24 28 61 2c 73 29 29 72 65 74 75 72 6e 21 31 7d 65 6c 73 65 20 69 66 28 61 21 3d 3d 73 29 72 65 74 75 72 6e 21 31 7d 66 6f 72 28 76 61 72 20 61 3d 30 2c 73 3d 6e 3b 61 3c 73 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 63 6f 6e 73 74 20 65 3d 73 5b 61 5d 3b 69 66 28 21 72 2e 69 6e 63 6c 75 64 65 73 28 65 29 29 72 Data Ascii: ;const r=Object.keys(e),n=Object.keys(t);for(var o=0,i=r;o<i.length;o++){const r=i[o];if(!n.includes(r))return!1;const a=e[r],s=t[r];if(_(a)&&_(s)){if(!$(a,s))return!1}else if(a!==s)return!1}for(var a=0,s=n;a<s.length;a++){const e=s[a];if(!r.includes(e))r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.18	60819	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:50 UTC	930	OUT	POST /ui/signin?relationships=groups%2Cparent_group HTTP/1.1 Host: www.virustotal.com Connection: keep-alive Content-Length: 4 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x334x1 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTA0OTY3NTgzMDItWkc5dWRDQmlaU0JsZG1scy0xNzM2OTU5NDg4LjUwNg== sec-ch-ua-platform: "Windows" Origin: https://www.virustotal.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959488.0.0.0
2025-01-15 16:44:50 UTC	4	OUT	Data Raw: 6e 75 6c 6c Data Ascii: null
2025-01-15 16:44:50 UTC	876	IN	HTTP/1.1 401 Unauthorized content-type: application/json set-cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ set-cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ set-cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ set-cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ set-cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ set-cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ x-cloud-trace-context: 3d1acc60936f423703c25e1592579fe7 date: Wed, 15 Jan 2025 16:44:50 GMT server: Google Frontend Content-Length: 85 via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-15 16:44:50 UTC	85	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 41 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 4e 6f 20 75 73 65 72 20 69 73 20 73 69 67 6e 65 64 20 69 6e 22 7d 7d Data Ascii: {"error": {"code": "AuthenticationRequiredError", "message": "No user is signed in"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.18	60821	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:50 UTC	850	OUT	GET /ui/user_notifications HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x334x1 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTAzODI3MDAwNjItWkc5dWRDQmlaU0JsZG1scy0xNzM2OTU5NDg4LjUwNw== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959488.0.0.0
2025-01-15 16:44:50 UTC	892	IN	HTTP/1.1 200 OK content-type: application/json vary: Accept-Encoding set-cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ set-cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ set-cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ set-cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ set-cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ set-cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ x-cloud-trace-context: 3edc51cd09c409b75a1bd64cb72281c4 date: Wed, 15 Jan 2025 16:44:50 GMT server: Google Frontend Content-Length: 11889 via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-15 16:44:50 UTC	498	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 5b 7b 22 69 64 22 3a 20 22 32 30 32 35 30 31 30 38 31 36 33 34 33 35 2d 65 76 65 72 79 6f 6e 65 22 2c 20 22 74 79 70 65 22 3a 20 22 75 73 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 22 2c 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 75 73 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 2f 32 30 32 35 30 31 30 38 31 36 33 34 33 35 2d 65 76 65 72 79 6f 6e 65 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 62 6f 64 79 22 3a 20 22 4a 6f 69 6e 20 75 73 20 6e 65 78 74 20 3c 62 3e 4a 61 6e 75 61 72 79 20 31 34 74 68 2c 20 31 37 3a 33 30 20 43 45 53 54 20 3c 2f 62 3e 20 66 6f 72 20 61 20 4c 49 56 45 20 73 65 73 73 69 6f Data Ascii: {"data": [{"id": "20250108163435-everyone", "type": "user_notification", "links": {"self": "https://www.virustotal.com/ui/user_notifications/20250108163435-everyone"}, "attributes": {"body": "Join us next <b>January 14th, 17:30 CEST </b> for a LIVE sessio
2025-01-15 16:44:50 UTC	1390	IN	Data Raw: 6e 74 65 6c 6c 69 67 65 6e 63 65 3c 2f 62 3e 2e 22 2c 20 22 6c 69 6e 6b 5f 75 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 72 69 67 68 74 74 61 6c 6b 2e 63 6f 6d 2f 77 65 62 63 61 73 74 2f 37 34 35 31 2f 36 33 32 38 31 30 22 2c 20 22 74 61 72 67 65 74 5f 74 61 67 73 22 3a 20 5b 22 65 76 65 72 79 6f 6e 65 22 5d 2c 20 22 74 69 74 6c 65 22 3a 20 22 5b 47 6f 6f 67 6c 65 20 54 49 5d 20 53 74 72 61 74 65 67 69 63 20 49 6e 74 65 6c 6c 69 67 65 6e 63 65 20 66 6f 72 20 46 69 6e 61 6e 63 69 61 6c 20 49 6e 73 74 69 74 75 74 69 6f 6e 73 20 62 72 69 65 66 69 6e 67 22 2c 20 22 64 61 74 65 22 3a 20 31 37 33 36 33 35 34 30 37 35 7d 2c 20 22 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 75 73 65 72 5f 72 65 61 64 5f 6e 6f 74 69 66 69 63 Data Ascii: ntelligence</b>.", "link_url": "https://www.brighttalk.com/webcast/7451/632810", "target_tags": ["everyone"], "title": "[Google TI] Strategic Intelligence for Financial Institutions briefing", "date": 1736354075}, "context_attributes": {"user_read_notific
2025-01-15 16:44:50 UTC	1390	IN	Data Raw: 6f 75 67 68 20 3c 62 3e 53 69 67 6d 61 20 72 75 6c 65 73 3c 2f 62 3e 20 77 69 74 68 20 74 68 65 20 6c 61 74 65 73 74 20 66 65 61 74 75 72 65 73 20 77 65 20 68 61 76 65 20 61 64 64 65 64 20 6f 6e 20 6d 61 63 4f 53 20 61 6e 64 20 4c 69 6e 75 78 2c 20 61 6e 64 20 65 78 70 6c 6f 72 65 20 68 6f 77 20 3c 62 3e 43 72 6f 77 64 73 6f 75 72 63 65 64 20 41 49 3c 2f 62 3e 20 61 6e 61 6c 79 73 69 73 20 63 6f 6d 70 61 72 65 73 20 74 6f 20 61 6e 64 20 63 6f 6d 70 6c 65 6d 65 6e 74 73 20 74 68 65 20 69 64 65 6e 74 69 66 69 65 64 20 53 69 67 6d 61 20 72 75 6c 65 20 6d 61 74 63 68 65 73 2e 3c 2f 70 3e 22 2c 20 22 6c 69 6e 6b 5f 75 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 72 69 67 68 74 74 61 6c 6b 2e 63 6f 6d 2f 77 65 62 63 61 73 74 2f 31 38 32 38 32 2f 36 Data Ascii: ough <b>Sigma rules</b> with the latest features we have added on macOS and Linux, and explore how <b>Crowdsourced AI</b> analysis compares to and complements the identified Sigma rule matches.</p>", "link_url": "https://www.brighttalk.com/webcast/18282/6
2025-01-15 16:44:50 UTC	1390	IN	Data Raw: 63 6f 6d 2f 77 65 62 63 61 73 74 2f 31 38 32 38 32 2f 35 39 32 31 37 37 3f 75 74 6d 5f 73 6f 75 72 63 65 3d 56 69 72 75 73 54 6f 74 61 6c 26 75 74 6d 5f 6d 65 64 69 75 6d 3d 65 6d 61 69 6c 26 75 74 6d 5f 63 61 6d 70 61 69 67 6e 3d 35 39 32 31 37 37 22 2c 20 22 74 61 72 67 65 74 5f 74 61 67 73 22 3a 20 5b 22 65 76 65 72 79 6f 6e 65 22 5d 2c 20 22 74 69 74 6c 65 22 3a 20 22 54 68 72 65 61 74 20 48 75 6e 74 69 6e 67 20 77 69 74 68 20 56 69 72 75 73 54 6f 74 61 6c 20 2d 20 65 70 69 73 6f 64 65 20 34 22 2c 20 22 64 61 74 65 22 3a 20 31 36 39 32 33 34 39 34 39 34 7d 2c 20 22 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 75 73 65 72 5f 72 65 61 64 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 22 3a 20 66 61 6c 73 65 7d 7d 2c 20 7b 22 69 64 22 3a Data Ascii: com/webcast/18282/592177?utm_source=VirusTotal&utm_medium=email&utm_campaign=592177", "target_tags": ["everyone"], "title": "Threat Hunting with VirusTotal - episode 4", "date": 1692349494}, "context_attributes": {"user_read_notification": false}}, {"id":
2025-01-15 16:44:50 UTC	1390	IN	Data Raw: 20 22 6c 69 6e 6b 73 22 3a 20 7b 22 73 65 6c 66 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 75 73 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 2f 32 30 32 33 30 33 31 35 2d 75 73 65 2d 76 74 2d 61 70 69 2d 6c 69 6b 65 2d 61 2d 70 72 6f 2d 77 65 62 69 6e 61 72 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 62 6f 64 79 22 3a 20 22 57 61 6e 74 20 74 6f 20 6c 65 76 65 6c 20 75 70 20 79 6f 75 72 20 73 6b 69 6c 6c 73 20 77 69 74 68 20 56 69 72 75 73 54 6f 74 61 6c 27 73 20 41 50 49 3f 20 4a 6f 69 6e 20 6f 75 72 20 73 65 73 73 69 6f 6e 20 61 6e 64 20 6c 65 61 72 6e 20 68 6f 77 20 74 6f 20 75 73 65 20 69 74 20 6c 69 6b 65 20 61 20 70 72 6f 21 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 Data Ascii: "links": {"self": "https://www.virustotal.com/ui/user_notifications/20230315-use-vt-api-like-a-pro-webinar"}, "attributes": {"body": "Want to level up your skills with VirusTotal's API? Join our session and learn how to use it like a pro! <a href=\"https
2025-01-15 16:44:50 UTC	1390	IN	Data Raw: 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 75 69 2f 75 73 65 72 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 73 2f 32 30 32 33 30 33 31 34 2d 76 74 2d 66 6f 72 2d 73 70 6c 75 6e 6b 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 62 6f 64 79 22 3a 20 22 49 6e 74 72 6f 64 75 63 69 6e 67 20 56 54 34 53 70 6c 75 6e 6b 2c 20 6f 75 72 20 6f 66 66 69 63 69 61 6c 20 41 70 70 20 66 6f 72 20 53 70 6c 75 6e 6b 2e 20 53 65 65 20 6f 75 72 20 62 6c 6f 67 70 6f 73 74 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 67 6f 2f 75 74 6d 2f 39 31 62 30 34 61 35 36 65 33 31 36 65 65 39 39 66 63 35 39 36 39 36 31 62 30 32 34 61 38 66 35 62 35 30 62 38 30 65 31 39 33 39 62 30 32 36 33 37 38 33 39 39 64 Data Ascii: .virustotal.com/ui/user_notifications/20230314-vt-for-splunk"}, "attributes": {"body": "Introducing VT4Splunk, our official App for Splunk. See our blogpost <a href=\"https://www.virustotal.com/go/utm/91b04a56e316ee99fc596961b024a8f5b50b80e1939b026378399d
2025-01-15 16:44:50 UTC	1390	IN	Data Raw: 38 33 64 65 35 64 63 39 39 38 36 63 36 30 39 34 39 65 37 33 63 31 61 33 65 63 35 63 37 39 63 64 33 39 66 36 38 34 35 63 65 31 65 34 36 38 36 62 37 34 39 64 37 35 32 66 65 36 39 65 61 36 31 33 34 36 38 34 34 33 66 64 64 33 64 66 36 30 33 38 36 36 38 33 66 62 66 35 32 63 63 31 36 33 37 33 63 39 62 62 37 34 39 66 37 33 30 39 39 32 37 61 38 61 36 35 31 33 32 64 38 64 32 37 62 34 38 65 64 63 32 61 63 36 64 33 61 33 37 61 66 63 38 35 38 32 33 37 65 36 65 38 30 31 62 61 32 63 63 36 30 33 35 65 64 65 30 30 30 38 31 36 35 37 35 39 38 32 35 33 39 35 31 61 64 39 39 31 30 65 39 32 31 30 33 65 63 62 30 37 37 34 37 38 39 61 32 65 38 65 39 64 66 34 34 34 66 39 35 31 64 34 31 30 65 61 65 35 35 39 62 31 39 65 61 31 38 65 38 27 20 74 61 72 67 65 74 3d 5f 62 6c 61 6e 6b 3e Data Ascii: 83de5dc9986c60949e73c1a3ec5c79cd39f6845ce1e4686b749d752fe69ea613468443fdd3df60386683fbf52cc16373c9bb749f7309927a8a65132d8d27b48edc2ac6d3a37afc858237e6e801ba2cc6035ede00081657598253951ad9910e92103ecb0774789a2e8e9df444f951d410eae559b19ea18e8' target=_blank>
2025-01-15 16:44:50 UTC	1390	IN	Data Raw: 34 38 34 30 35 65 66 64 32 34 36 37 34 61 65 38 61 37 65 31 31 65 36 38 38 62 38 31 36 34 34 39 31 33 65 65 33 38 35 61 64 63 34 66 37 39 31 32 36 33 31 34 62 65 65 38 33 65 35 33 65 64 66 66 34 64 64 36 32 38 34 31 65 34 34 33 66 33 5c 22 20 74 61 72 67 65 74 3d 5f 62 6c 61 6e 6b 3e 54 68 72 65 61 74 20 48 75 6e 74 69 6e 67 20 77 69 74 68 20 56 69 72 75 73 54 6f 74 61 6c 3c 2f 61 3e 5c 22 20 74 6f 64 61 79 2c 20 46 65 62 72 75 61 72 79 20 32 32 6e 64 2c 20 61 74 20 31 37 2e 30 30 20 43 45 54 2e 20 4a 6f 69 6e 20 75 73 20 74 6f 20 6c 65 61 72 6e 20 61 62 6f 75 74 20 68 6f 77 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 67 6f 2f 75 74 6d 2f 62 65 39 31 61 65 31 36 33 62 30 62 37 30 32 30 Data Ascii: 48405efd24674ae8a7e11e688b81644913ee385adc4f79126314bee83e53edff4dd62841e443f3\" target=_blank>Threat Hunting with VirusTotal</a>\" today, February 22nd, at 17.00 CET. Join us to learn about how <a href=\"https://www.virustotal.com/go/utm/be91ae163b0b7020
2025-01-15 16:44:50 UTC	1390	IN	Data Raw: 74 2d 68 75 6e 74 69 6e 67 2d 73 65 73 73 69 6f 6e 22 7d 2c 20 22 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 62 6f 64 79 22 3a 20 22 4e 65 78 74 20 46 65 62 72 75 61 72 79 20 32 32 6e 64 2c 20 31 37 3a 30 30 20 43 45 54 20 77 65 20 77 69 6c 6c 20 62 65 20 68 6f 73 74 69 6e 67 20 6f 75 72 20 73 65 63 6f 6e 64 20 3c 61 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 67 6f 2f 75 74 6d 2f 62 65 39 31 61 65 31 36 33 62 30 62 37 30 32 30 34 65 39 61 37 33 63 63 35 64 30 35 39 30 66 65 38 37 64 34 63 38 66 36 61 35 62 31 30 37 33 62 36 65 34 31 34 31 39 31 36 64 33 37 33 64 38 38 35 39 39 30 35 64 65 66 34 63 63 61 65 38 38 36 30 65 39 61 61 63 32 34 30 63 31 31 30 61 33 35 62 62 65 34 34 38 38 32 32 37 Data Ascii: t-hunting-session"}, "attributes": {"body": "Next February 22nd, 17:00 CET we will be hosting our second <a href=\"https://www.virustotal.com/go/utm/be91ae163b0b70204e9a73cc5d0590fe87d4c8f6a5b1073b6e4141916d373d8859905def4ccae8860e9aac240c110a35bbe4488227
2025-01-15 16:44:50 UTC	271	IN	Data Raw: 34 64 39 64 34 65 39 38 34 34 65 63 37 37 33 30 36 35 37 37 31 33 32 33 64 32 64 32 62 66 62 36 35 62 39 32 35 30 34 64 32 34 38 64 35 34 35 39 61 65 38 31 30 37 38 38 64 66 39 63 34 62 33 37 32 65 31 37 37 37 62 61 33 35 34 62 31 38 30 35 61 37 65 62 37 34 36 32 31 30 39 37 61 66 63 30 65 35 30 31 63 35 61 32 61 22 2c 20 22 74 61 72 67 65 74 5f 74 61 67 73 22 3a 20 5b 22 65 76 65 72 79 6f 6e 65 22 5d 2c 20 22 74 69 74 6c 65 22 3a 20 22 4e 65 77 20 54 68 72 65 61 74 20 48 75 6e 74 69 6e 67 20 77 69 74 68 20 56 69 72 75 73 54 6f 74 61 6c 20 73 65 73 73 69 6f 6e 22 2c 20 22 64 61 74 65 22 3a 20 31 36 37 35 38 36 39 31 37 39 7d 2c 20 22 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 22 3a 20 7b 22 75 73 65 72 5f 72 65 61 64 5f 6e 6f 74 69 66 69 63 61 Data Ascii: 4d9d4e9844ec773065771323d2d2bfb65b92504d248d5459ae810788df9c4b372e1777ba354b1805a7eb74621097afc0e501c5a2a", "target_tags": ["everyone"], "title": "New Threat Hunting with VirusTotal session", "date": 1675869179}, "context_attributes": {"user_read_notifica

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.18	60822	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:50 UTC	849	OUT	GET /ui/cookie_disclaimer HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" x-app-version: v1x334x1 X-Tool: vt-ui-main sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: application/json accept: application/json Accept-Ianguage: en-US,en;q=0.9,es;q=0.8 X-VT-Anti-Abuse-Header: MTEzMjA1MDA1NDUtWkc5dWRDQmlaU0JsZG1scy0xNzM2OTU5NDg4LjUxOQ== sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959488.0.0.0
2025-01-15 16:44:50 UTC	889	IN	HTTP/1.1 200 OK content-type: application/json vary: Accept-Encoding set-cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ set-cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ set-cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ set-cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ set-cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ set-cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ x-cloud-trace-context: 08cf2777e0783172dcbedc2dff553f6f date: Wed, 15 Jan 2025 16:44:50 GMT server: Google Frontend Content-Length: 25 via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-15 16:44:50 UTC	25	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 7b 22 73 68 6f 77 22 3a 20 66 61 6c 73 65 7d 7d Data Ascii: {"data": {"show": false}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.18	60823	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:50 UTC	661	OUT	GET /gui/stackdriver-errors.3069a6025a2308368f46.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959485.0.0.0; _ga=GA1.1.230491043.1736959486
2025-01-15 16:44:50 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:44:50 GMT expires: Thu, 15 Jan 2026 16:44:50 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 2a58c504a8b876dd4216803850316db2 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:50 UTC	1003	IN	Data Raw: 33 39 61 62 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 38 34 30 35 5d 2c 7b 33 37 30 31 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 2c 6f 2c 69 3b 21 66 75 6e 63 74 69 6f 6e 28 73 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 3d 5b 74 28 33 30 36 37 33 29 5d 2c 76 6f 69 64 20 30 3d 3d 3d 28 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 2f 28 5e 7c 40 29 5c 53 2b 3a 5c 64 2b 2f 2c 74 3d 2f 5e 5c 73 2a 61 74 20 2e 2a 28 5c 53 2b 3a 5c 64 2b 7c 5c 28 6e 61 74 69 76 65 5c 29 29 2f Data Ascii: 39ab(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[48405],{37017:function(e,n,t){var r,o,i;!function(s,a){"use strict";o=[t(30673)],void 0===(i="function"==typeof(r=function(e){var n=/(^\|@)\S+:\d+/,t=/^\sat .(\S+:\d+\|$native$)/
2025-01-15 16:44:50 UTC	1390	IN	Data Raw: 2c 72 3d 74 2e 6d 61 74 63 68 28 2f 20 28 5c 28 2e 2b 5c 29 24 29 2f 29 3b 74 3d 72 3f 74 2e 72 65 70 6c 61 63 65 28 72 5b 30 5d 2c 22 22 29 3a 74 3b 76 61 72 20 6f 3d 74 68 69 73 2e 65 78 74 72 61 63 74 4c 6f 63 61 74 69 6f 6e 28 72 3f 72 5b 31 5d 3a 74 29 2c 69 3d 72 26 26 74 7c 7c 76 6f 69 64 20 30 2c 73 3d 5b 22 65 76 61 6c 22 2c 22 3c 61 6e 6f 6e 79 6d 6f 75 73 3e 22 5d 2e 69 6e 64 65 78 4f 66 28 6f 5b 30 5d 29 3e 2d 31 3f 76 6f 69 64 20 30 3a 6f 5b 30 5d 3b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 7b 66 75 6e 63 74 69 6f 6e 4e 61 6d 65 3a 69 2c 66 69 6c 65 4e 61 6d 65 3a 73 2c 6c 69 6e 65 4e 75 6d 62 65 72 3a 6f 5b 31 5d 2c 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 3a 6f 5b 32 5d 2c 73 6f 75 72 63 65 3a 6e 7d 29 7d 29 2c 74 68 69 73 29 7d 2c 70 61 72 73 65 Data Ascii: ,r=t.match(/ ($.+$$)/);t=r?t.replace(r[0],""):t;var o=this.extractLocation(r?r[1]:t),i=r&&t\|\|void 0,s=["eval","<anonymous>"].indexOf(o[0])>-1?void 0:o[0];return new e({functionName:i,fileName:s,lineNumber:o[1],columnNumber:o[2],source:n})}),this)},parse
2025-01-15 16:44:50 UTC	1390	IN	Data Raw: 61 5b 32 5d 2c 6c 69 6e 65 4e 75 6d 62 65 72 3a 61 5b 31 5d 2c 73 6f 75 72 63 65 3a 72 5b 69 5d 7d 29 29 7d 72 65 74 75 72 6e 20 6f 7d 2c 70 61 72 73 65 4f 70 65 72 61 31 31 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 73 74 61 63 6b 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 65 2e 6d 61 74 63 68 28 6e 29 26 26 21 65 2e 6d 61 74 63 68 28 2f 5e 45 72 72 6f 72 20 63 72 65 61 74 65 64 20 61 74 2f 29 7d 29 2c 74 68 69 73 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 2c 72 3d 6e 2e 73 70 6c 69 74 28 22 40 22 29 2c 6f 3d 74 68 69 73 2e 65 78 74 72 61 63 74 4c 6f 63 61 74 69 6f 6e 28 72 2e 70 6f 70 28 29 29 2c 69 3d 72 2e 73 68 69 66 74 Data Ascii: a[2],lineNumber:a[1],source:r[i]}))}return o},parseOpera11:function(t){return t.stack.split("\n").filter((function(e){return!!e.match(n)&&!e.match(/^Error created at/)}),this).map((function(n){var t,r=n.split("@"),o=this.extractLocation(r.pop()),i=r.shift
2025-01-15 16:44:50 UTC	1390	IN	Data Raw: 20 63 75 73 74 6f 6d 20 72 65 70 6f 72 74 69 6e 67 20 66 75 6e 63 74 69 6f 6e 20 70 72 6f 76 69 64 65 64 2e 22 29 3b 69 66 28 21 65 2e 70 72 6f 6a 65 63 74 49 64 26 26 21 65 2e 74 61 72 67 65 74 55 72 6c 26 26 21 65 2e 63 75 73 74 6f 6d 52 65 70 6f 72 74 69 6e 67 46 75 6e 63 74 69 6f 6e 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 69 6e 69 74 69 61 6c 69 7a 65 3a 20 4e 6f 20 70 72 6f 6a 65 63 74 20 49 44 2c 20 74 61 72 67 65 74 20 75 72 6c 20 6f 72 20 63 75 73 74 6f 6d 20 72 65 70 6f 72 74 69 6e 67 20 66 75 6e 63 74 69 6f 6e 20 70 72 6f 76 69 64 65 64 2e 22 29 3b 74 68 69 73 2e 63 75 73 74 6f 6d 52 65 70 6f 72 74 69 6e 67 46 75 6e 63 74 69 6f 6e 3d 65 2e 63 75 73 74 6f 6d 52 65 70 6f 72 74 69 6e 67 46 75 6e 63 74 69 6f 6e 2c Data Ascii: custom reporting function provided.");if(!e.projectId&&!e.targetUrl&&!e.customReportingFunction)throw new Error("Cannot initialize: No project ID, target url or custom reporting function provided.");this.customReportingFunction=e.customReportingFunction,
2025-01-15 16:44:50 UTC	1390	IN	Data Raw: 73 2e 74 61 72 67 65 74 55 72 6c 7c 7c 22 68 74 74 70 73 3a 2f 2f 63 6c 6f 75 64 65 72 72 6f 72 72 65 70 6f 72 74 69 6e 67 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 76 31 62 65 74 61 31 2f 70 72 6f 6a 65 63 74 73 2f 22 2b 74 68 69 73 2e 70 72 6f 6a 65 63 74 49 64 2b 22 2f 65 76 65 6e 74 73 3a 72 65 70 6f 72 74 3f 6b 65 79 3d 22 2b 74 68 69 73 2e 61 70 69 4b 65 79 2c 73 3d 74 68 69 73 2e 63 75 73 74 6f 6d 52 65 70 6f 72 74 69 6e 67 46 75 6e 63 74 69 6f 6e 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 72 2e 66 72 6f 6d 45 72 72 6f 72 28 65 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 65 2e 74 6f 53 74 72 69 6e 67 28 29 5d 2c 6f 3d 6e 3b 6f 3c 74 2e 6c 65 6e 67 74 Data Ascii: s.targetUrl\|\|"https://clouderrorreporting.googleapis.com/v1beta1/projects/"+this.projectId+"/events:report?key="+this.apiKey,s=this.customReportingFunction;return function(e,n){return r.fromError(e).then((function(t){for(var r=[e.toString()],o=n;o<t.lengt
2025-01-15 16:44:50 UTC	1390	IN	Data Raw: 65 2e 73 75 62 73 74 72 69 6e 67 28 31 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 65 5d 7d 7d 76 61 72 20 72 3d 5b 22 69 73 43 6f 6e 73 74 72 75 63 74 6f 72 22 2c 22 69 73 45 76 61 6c 22 2c 22 69 73 4e 61 74 69 76 65 22 2c 22 69 73 54 6f 70 6c 65 76 65 6c 22 5d 2c 6f 3d 5b 22 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 22 2c 22 6c 69 6e 65 4e 75 6d 62 65 72 22 5d 2c 69 3d 5b 22 66 69 6c 65 4e 61 6d 65 22 2c 22 66 75 6e 63 74 69 6f 6e 4e 61 6d 65 22 2c 22 73 6f 75 72 63 65 22 5d 2c 73 3d 5b 22 61 72 67 73 22 5d 2c 61 3d 5b 22 65 76 61 6c 4f 72 69 67 69 6e 22 5d 2c 75 3d 72 2e 63 6f 6e 63 61 74 28 6f 2c 69 2c 73 2c 61 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 69 66 Data Ascii: e.substring(1)}function t(e){return function(){return this[e]}}var r=["isConstructor","isEval","isNative","isToplevel"],o=["columnNumber","lineNumber"],i=["fileName","functionName","source"],s=["args"],a=["evalOrigin"],u=r.concat(o,i,s,a);function c(e){if
2025-01-15 16:44:50 UTC	1390	IN	Data Raw: 5b 6c 5d 29 2c 63 2e 70 72 6f 74 6f 74 79 70 65 5b 22 73 65 74 22 2b 6e 28 72 5b 6c 5d 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 68 69 73 5b 65 5d 3d 42 6f 6f 6c 65 61 6e 28 6e 29 7d 7d 28 72 5b 6c 5d 29 3b 66 6f 72 28 76 61 72 20 70 3d 30 3b 70 3c 6f 2e 6c 65 6e 67 74 68 3b 70 2b 2b 29 63 2e 70 72 6f 74 6f 74 79 70 65 5b 22 67 65 74 22 2b 6e 28 6f 5b 70 5d 29 5d 3d 74 28 6f 5b 70 5d 29 2c 63 2e 70 72 6f 74 6f 74 79 70 65 5b 22 73 65 74 22 2b 6e 28 6f 5b 70 5d 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 65 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 6e 2b 22 20 6d 75 73 74 20 62 65 20 61 20 4e 75 Data Ascii: [l]),c.prototype["set"+n(r[l])]=function(e){return function(n){this[e]=Boolean(n)}}(r[l]);for(var p=0;p<o.length;p++)c.prototype["get"+n(o[p])]=t(o[p]),c.prototype["set"+n(o[p])]=function(n){return function(t){if(!e(t))throw new TypeError(n+" must be a Nu
2025-01-15 16:44:50 UTC	1390	IN	Data Raw: 3d 22 22 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3c 30 3f 31 2b 28 2d 65 3c 3c 31 29 3a 30 2b 28 65 3c 3c 31 29 7d 28 65 29 3b 64 6f 7b 6e 3d 33 31 26 6f 2c 28 6f 3e 3e 3e 3d 35 29 3e 30 26 26 28 6e 7c 3d 33 32 29 2c 74 2b 3d 72 2e 65 6e 63 6f 64 65 28 6e 29 7d 77 68 69 6c 65 28 6f 3e 30 29 3b 72 65 74 75 72 6e 20 74 7d 2c 6e 2e 64 65 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 6f 2c 69 2c 73 2c 61 2c 75 3d 65 2e 6c 65 6e 67 74 68 2c 63 3d 30 2c 6c 3d 30 3b 64 6f 7b 69 66 28 6e 3e 3d 75 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 45 78 70 65 63 74 65 64 20 6d 6f 72 65 20 64 69 67 69 74 73 20 69 6e 20 62 61 73 65 20 36 34 20 56 4c 51 20 76 61 6c 75 65 2e 22 29 3b 69 66 28 2d 31 3d 3d 3d Data Ascii: ="",o=function(e){return e<0?1+(-e<<1):0+(e<<1)}(e);do{n=31&o,(o>>>=5)>0&&(n\|=32),t+=r.encode(n)}while(o>0);return t},n.decode=function(e,n,t){var o,i,s,a,u=e.length,c=0,l=0;do{if(n>=u)throw new Error("Expected more digits in base 64 VLQ value.");if(-1===
2025-01-15 16:44:50 UTC	1390	IN	Data Raw: 65 29 7b 76 61 72 20 6e 2c 74 2c 6f 2c 69 2c 73 2c 61 3b 6e 3d 74 68 69 73 2e 5f 6c 61 73 74 2c 74 3d 65 2c 6f 3d 6e 2e 67 65 6e 65 72 61 74 65 64 4c 69 6e 65 2c 69 3d 74 2e 67 65 6e 65 72 61 74 65 64 4c 69 6e 65 2c 73 3d 6e 2e 67 65 6e 65 72 61 74 65 64 43 6f 6c 75 6d 6e 2c 61 3d 74 2e 67 65 6e 65 72 61 74 65 64 43 6f 6c 75 6d 6e 2c 69 3e 6f 7c 7c 69 3d 3d 6f 26 26 61 3e 3d 73 7c 7c 72 2e 63 6f 6d 70 61 72 65 42 79 47 65 6e 65 72 61 74 65 64 50 6f 73 69 74 69 6f 6e 73 49 6e 66 6c 61 74 65 64 28 6e 2c 74 29 3c 3d 30 3f 28 74 68 69 73 2e 5f 6c 61 73 74 3d 65 2c 74 68 69 73 2e 5f 61 72 72 61 79 2e 70 75 73 68 28 65 29 29 3a 28 74 68 69 73 2e 5f 73 6f 72 74 65 64 3d 21 31 2c 74 68 69 73 2e 5f 61 72 72 61 79 2e 70 75 73 68 28 65 29 29 7d 2c 6f 2e 70 72 6f 74 Data Ascii: e){var n,t,o,i,s,a;n=this._last,t=e,o=n.generatedLine,i=t.generatedLine,s=n.generatedColumn,a=t.generatedColumn,i>o\|\|i==o&&a>=s\|\|r.compareByGeneratedPositionsInflated(n,t)<=0?(this._last=e,this._array.push(e)):(this._sorted=!1,this._array.push(e))},o.prot
2025-01-15 16:44:50 UTC	1390	IN	Data Raw: 2c 74 68 69 73 2e 5f 73 6f 75 72 63 65 73 3d 69 2e 66 72 6f 6d 41 72 72 61 79 28 6f 2c 21 30 29 2c 74 68 69 73 2e 73 6f 75 72 63 65 52 6f 6f 74 3d 61 2c 74 68 69 73 2e 73 6f 75 72 63 65 73 43 6f 6e 74 65 6e 74 3d 75 2c 74 68 69 73 2e 5f 6d 61 70 70 69 6e 67 73 3d 63 2c 74 68 69 73 2e 66 69 6c 65 3d 6c 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 74 68 69 73 2e 67 65 6e 65 72 61 74 65 64 4c 69 6e 65 3d 30 2c 74 68 69 73 2e 67 65 6e 65 72 61 74 65 64 43 6f 6c 75 6d 6e 3d 30 2c 74 68 69 73 2e 73 6f 75 72 63 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 4c 69 6e 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 43 6f 6c 75 6d 6e 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6e 61 6d 65 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 29 7b 76 61 Data Ascii: ,this._sources=i.fromArray(o,!0),this.sourceRoot=a,this.sourcesContent=u,this._mappings=c,this.file=l}function l(){this.generatedLine=0,this.generatedColumn=0,this.source=null,this.originalLine=null,this.originalColumn=null,this.name=null}function p(e){va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.18	60820	142.250.184.195	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:50 UTC	547	OUT	GET /recaptcha/api.js?render=explicit HTTP/1.1 Host: recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:44:50 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 15 Jan 2025 16:44:50 GMT Date: Wed, 15 Jan 2025 16:44:50 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:50 UTC	641	IN	Data Raw: 36 64 32 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 72 65 63 61 70 Data Ascii: 6d2/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://recap
2025-01-15 16:44:50 UTC	1112	IN	Data Raw: 41 41 41 43 54 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 4a 6c 59 32 46 77 64 47 4e 6f 59 53 35 75 5a 58 51 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c Data Ascii: AAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationL
2025-01-15 16:44:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.18	60824	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:50 UTC	680	OUT	GET /gui/2121f4aabac6fbe523ec.woff2 HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.virustotal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.virustotal.com/gui/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
2025-01-15 16:44:50 UTC	382	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:44:50 GMT expires: Thu, 15 Jan 2026 16:44:50 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 3270a739aee51ed045b30fecf9abb355 content-type: font/woff2 server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:50 UTC	1008	IN	Data Raw: 33 39 37 38 0d 0a 77 4f 46 32 00 01 00 00 00 00 39 78 00 0d 00 00 00 00 88 38 00 00 39 1f 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 6e 1b cf 3c 1c 90 1c 06 60 00 84 62 0a 81 87 7c eb 40 0b 84 64 00 01 36 02 24 03 89 44 04 20 05 84 7c 07 8c 34 1b b5 76 25 ca 6d 17 05 9c 07 20 46 4f f2 23 46 22 6c c5 64 b5 a8 23 03 c1 c6 01 82 84 3f 74 f0 ff 27 24 1d 32 06 f3 6e 83 93 59 65 10 31 24 a0 b0 5d dd bd d9 c3 24 73 a7 ae 57 b7 73 39 a8 3c 25 d3 4c b5 31 7d 59 79 06 36 91 82 88 2d a4 20 62 e1 be 10 5b f9 9d b4 d0 eb 0c 37 21 09 19 3c 4b dd 57 7c be 69 6a f3 87 66 9c cd 3f cd a4 5c 3b b1 ee d0 1a 1b 4e f0 24 f5 08 54 28 14 7d f4 39 eb 22 30 6e e1 a3 e6 d4 cb f3 ff 8d 85 de f7 67 29 40 ac 57 45 11 95 40 03 a3 8c 2e b9 5a 56 b1 95 3d Data Ascii: 3978wOF29x89n<`b\|@d6$D \|4v%m FO#F"ld#?t'$2nYe1$]$sWs9<%L1}Yy6- b[7!<KW\|ijf?\;N$T(}9"0ng)@WE@.ZV=
2025-01-15 16:44:50 UTC	1390	IN	Data Raw: fb 53 9d 76 3d a2 d2 3c e7 b6 9e 6b 28 0f fa ba f3 6f 6c a7 87 37 1e 0e 87 a4 5f 0b 2e 25 b8 9a 55 3f af 5a cd 6b 92 fe b4 83 1b c7 97 73 6d 47 da 02 bd cf ec fa cc bf f5 ca 18 a3 ba c9 cd 80 77 6e 87 dd e9 4e aa bb 3d 49 83 0d c2 b0 18 c3 f8 42 a1 40 24 a2 2a 29 d1 94 95 e9 04 c1 10 8b 45 12 09 a6 a2 a2 24 95 12 aa 24 ac a6 26 91 cb 55 14 0a 48 ab 36 52 bb 76 58 87 0e 52 a7 4e 58 97 2e 52 b7 6e a9 1e 3d 14 7d fa 10 fd fa 51 03 06 84 06 0d 32 0d 19 52 33 6c ac d8 38 e3 94 2d b4 84 66 a9 a5 98 15 d6 11 d6 db 0c db 62 ab 8a 5d 76 93 f6 38 04 3b e1 24 d3 99 d9 e3 25 ae 0b e4 ba 5e 3c 63 20 33 a1 cc 1d 54 75 57 fb 26 77 bb 87 ed 5e e2 ee 23 cb fd c4 3d d0 de f2 a0 87 64 5e bf a2 0e e4 76 01 0c 48 00 92 28 42 0f bb 06 20 4e 15 84 e4 1c a0 fd 81 ff 19 73 c7 c6 Data Ascii: Sv=<k(ol7_.%U?ZksmGwnN=IB@$*)E$$&UH6RvXRNX.Rn=}Q2R3l8-fb]v8;$%^<c 3TuW&w^#=d^vH(B Ns
2025-01-15 16:44:50 UTC	1390	IN	Data Raw: 5e 01 f8 83 aa 4f a1 c3 eb 37 1b 33 43 fb 20 68 31 fa f8 b5 a0 d5 b8 05 b6 ce a8 02 37 a3 be 55 2a a0 3b 4c e9 8a 18 b6 00 82 3e 03 4f 15 39 5c f3 ba 7c af 2c 7a 99 db d9 c6 1f 1d d3 93 27 d1 1e 2d f0 15 3e 7e f0 d8 1a 1c 4c 73 51 75 2f e4 27 12 1f a8 73 68 e6 47 b3 50 d3 a8 de e5 4a 5d bb 5a 60 1b 03 e3 a3 d2 58 1c c2 61 cf 83 c6 c7 d1 91 93 c7 7b 4f f5 bd f7 07 24 27 fb 5b 2f 1f a0 56 2e 80 67 52 d8 1c 54 2a 65 aa ca 31 0d 05 d7 b0 99 7c 0b 2c d0 b0 c2 4e 85 43 0e 1b 71 c6 59 a3 bd ef 7d 63 21 d8 7b 3a 00 d5 00 a0 03 6d 20 6e 5f af 58 3b 87 e0 f2 a4 7c 75 21 a0 eb 68 1e 69 00 7a b4 01 58 a9 6e e1 66 97 d9 9a c5 92 75 3c d0 aa c3 07 2a 73 28 8b 05 bd 21 c8 07 1d a3 15 05 34 8c 16 e8 ec 58 6c 01 74 43 06 d0 da 27 ba cb 70 00 01 c8 f9 eb da 01 69 80 51 61 Data Ascii: ^O73C h17U;L>O9\\|,z'->~LsQu/'shGPJ]Z`Xa{O$'[/V.gRTe1\|,NCqY}c!{:m n_X;\|u!hizXnfu<*s(!4XltC'piQa
2025-01-15 16:44:50 UTC	1390	IN	Data Raw: eb 19 9b 3b e6 7e f5 21 40 e3 00 a8 d1 8f 03 22 40 b4 1b f1 23 7c 5b 5c 5c 0c 6e c6 b9 c6 e8 45 9d 90 07 de da 35 90 7a c8 b9 4a 51 fe f9 ce a1 e0 5e 7a b5 41 67 65 09 55 34 69 d6 95 1a d7 70 c1 ae 54 28 74 a2 b9 8a f1 c5 32 0d 1d 6f 1a 7b 0a 93 47 a8 6b c7 85 82 71 cc e0 3e fc 0f e4 da d2 e2 07 ea 59 3b 4a 6a 5a 3f 7e 33 06 02 5b 44 6a d1 ad a5 97 96 5d 6f d0 40 1e c4 5f a2 ba c2 d4 f2 ff 8f ea ad 0d 13 1e e4 3f d5 fb 02 8a b6 6d 5c 5f 20 b7 03 e3 41 fc ab ed fa 80 64 fd fb 73 8c 21 0e bb 0a 08 34 06 61 20 0e 81 d0 c9 4d 90 10 28 0f c1 ee f0 e6 a5 e1 fb d6 c0 0c 10 ca a1 4d 9a f3 d3 3f 68 f4 6f 9e 5b a9 53 79 af 5d b6 98 0f 03 54 e1 5b 11 81 65 68 7a 3a ed 8c b3 ce 39 ef 82 8b 2e b9 ec 8a ab ae b9 ee 06 04 04 08 04 78 c7 33 10 c7 b7 22 19 8a 5f 57 68 e4 Data Ascii: ;~!@"@#\|[\\nE5zJQ^zAgeU4ipT(t2o{Gkq>Y;JjZ?~3[Dj]o@_?m\_ Ads!4a M(M?ho[Sy]T[ehz:9.x3"_Wh
2025-01-15 16:44:50 UTC	1390	IN	Data Raw: 22 a0 73 91 d4 d4 5d 61 d0 80 39 db 10 ed e1 7a f7 1b df 56 a9 30 9a b9 3e e8 d4 42 e6 75 77 4d 69 f0 36 c6 5d 2b 6b 37 99 e4 99 9d 31 8b 57 1d d7 a8 d8 3c 20 9c f0 0a 97 90 c0 d3 75 95 ae dd 55 6d 9b d2 ee 6e 75 d9 4e bf a5 b2 d0 4d 5d 6e 19 34 9c ca 53 95 73 a3 d4 42 58 66 c6 56 c2 98 99 62 db dc 4b 0c 97 d3 94 2a ef ea ac f6 57 f4 5e 8b 5e 6e 9a 3c d9 2c 13 d3 d4 d4 64 90 d2 72 09 0e 27 ef 38 f8 b6 eb f6 48 14 f9 88 3b 39 aa 6e 6f 34 87 fa 4c 73 d4 b6 50 3f cc 58 1c de 11 d2 b7 3e da 50 2a 71 36 2a 7f b4 5c be 0f b4 1e 74 b1 6b 49 34 a3 c1 6c 00 f5 e1 54 73 51 0b 37 34 3a 4c 2a 56 32 9b a2 da 83 7d 95 e6 20 a7 bb 2f f6 d2 21 49 15 01 4b b3 c5 2f 53 18 c7 1e ae 66 d3 6b ee e6 c8 97 80 85 e6 2c d4 00 4c 86 ac 7c 3a ac b0 bd 19 35 3f 99 84 e4 c9 94 d3 03 Data Ascii: "s]a9zV0>BuwMi6]+k71W< uUmnuNM]n4SsBXfVbKW^^n<,dr'8H;9no4LsP?X>Pq6\tkI4lTsQ74:LV2} /!IK/Sfk,L\|:5?
2025-01-15 16:44:50 UTC	1390	IN	Data Raw: 2f d4 44 34 2f fd 8d 33 79 7f 6c 08 1a ad 4e 17 5a a2 93 0d 6d d2 4c 69 10 7a 7f c4 29 b8 61 67 cc 3b f4 20 0e 2f 87 95 fa b0 bb 64 58 59 62 ad 66 99 49 69 cb f0 67 13 bd 72 80 59 1c e9 2a 0a eb 8d e0 5f 03 71 00 9c bc 20 b0 0e 5d 9c 76 62 9b b6 a2 45 77 60 7b 4c 91 74 a6 33 e2 06 37 57 c7 31 e1 eb 3a c3 a8 db 2b 5e 5d ce 17 ad 8e 64 9f f7 60 6c 45 af b6 34 8b f1 d5 30 ca cc eb 6b c1 e3 21 b5 9d d6 07 6f 01 68 2a 1e a5 6b ba d5 73 cf 3d f7 5c 45 12 55 26 a3 f0 d6 ac 55 b2 c9 99 44 ba a0 d7 20 9d 58 1c 4c 2c d6 4e 88 6d e3 5a 62 0d 04 5b ca 2d 28 28 cd 72 31 59 b1 22 9d 17 1d 2a be 19 be 4c 77 24 4c ce c2 c6 1a 9c b2 bb 71 a4 1d 63 cc c7 a7 27 a2 20 9a 7a d9 9f 7f 21 61 2d f7 56 db 69 15 fd 75 8c 46 aa cc 9d d8 cf f2 4b b4 7f 46 20 91 c0 21 76 1d 3b e6 6b Data Ascii: /D4/3ylNZmLiz)ag; /dXYbfIigrY_q ]vbEw`{Lt37W1:+^]d`lE40k!ohks=\EU&UD XL,NmZb[-((r1Y"*Lw$Lqc' z!a-ViuFKF !v;k
2025-01-15 16:44:50 UTC	1390	IN	Data Raw: e6 8a 8e 51 a8 82 15 6e 66 e8 61 b6 31 5e ae cc f1 cb 0c 49 8d 71 0b 32 0a fe f8 ab 87 73 99 1c 33 7d 96 8b be ce e8 32 ca 93 bd f5 0a 70 11 b3 ab fb af ee 5d 18 60 45 8d 99 38 b0 da d7 5f 5f 9c 9c a9 50 a4 64 16 d7 cf f0 ad 1e 3f 00 0e 9f 9c b6 d8 1a ff 12 57 f1 0a be 85 af b8 69 89 9f 7b 62 1a 98 dc 39 6d 9e 40 ec 0c ad 74 c1 7d 11 95 73 8c e2 51 46 f1 ac 88 aa 7e b8 1c 5d 59 22 10 4f 6f 99 b6 4f 1d db 86 b6 e8 61 17 da d2 a6 8a 05 a8 97 6c 1b 54 ab 93 ba d6 94 5d 86 b7 ea 07 64 5d 4b d6 eb 77 a5 ad d6 f4 ec 2b 7d 04 6f 71 6e 50 f5 80 43 6f 4f ae 5a 9a 3c 70 93 68 38 05 df 8a 36 9c 54 0e 2c ac 4c 7f 0b 58 79 d4 3d 01 dd fb cd 7f c7 98 dd e0 10 ca 60 f7 a8 6d 13 72 e6 84 61 38 3c ea ef 09 09 c5 1f 6b 98 ca a2 8a fa 66 72 e7 1c f8 83 89 31 64 38 d1 c4 c8 Data Ascii: Qnfa1^Iq2s3}2p]`E8__Pd?Wi{b9m@t}sQF~]Y"OoOalT]d]Kw+}oqnPCoOZ<ph86T,LXy=`mra8<kfr1d8
2025-01-15 16:44:50 UTC	1390	IN	Data Raw: d1 94 40 aa 48 a8 53 de 9e fd 46 2b 2d af 4e ce 32 e6 c7 0b 32 e3 58 c3 6f 0e 8f c4 2a 95 09 4a 91 90 97 91 15 07 b6 bd 48 b9 c4 e3 27 a4 5b d1 b8 90 5c 88 14 37 a2 38 2e d5 af 54 d7 a6 9b 93 cb 0b 12 13 28 cd 26 a2 65 dd 74 13 5b d3 92 3c ec 5c af 3a 97 6e e4 05 cd 48 63 6b 3a 54 9b 32 57 36 65 25 8d aa 4e 03 9a 9f db fa 36 21 4d 73 ff 64 f8 6a 8b c1 dd 63 f9 07 90 e9 af 0e f3 04 75 f2 2b 62 ed 1c 66 08 a5 92 f7 ad ef 93 9c 9a 67 91 83 b9 a3 36 8c ea 93 db 6f 0c 78 19 db e5 94 e8 69 f9 81 a4 ba c1 01 2c 11 c3 c4 6f 20 49 f0 7a 0a f4 02 2b b2 5e 58 82 70 ec 2c 18 a5 73 ee 9b fe fc d0 6c 5f d1 47 4f b8 47 25 f6 32 53 fb 83 e1 8b 91 6d 7c c2 70 2c e6 37 4c dd 0f 3f cd 8f 77 c2 2c ab 21 e2 8f 43 81 c8 e5 7a f0 f4 53 c4 ba 3e d6 bf 74 bc 17 4f c4 61 a2 d3 8a Data Ascii: @HSF+-N22Xo*JH'[\78.T(&et[<\:nHck:T2W6e%N6!Msdjcu+bfg6oxi,o Iz+^Xp,sl_GOG%2Sm\|p,7L?w,!CzS>tOa
2025-01-15 16:44:50 UTC	1390	IN	Data Raw: 93 75 79 3d ed 42 ad 2a a3 4d 6f ec 72 3a 8d 9d 6d ba 8c f4 76 9d b1 b3 b4 dc ae 76 bd 3b 23 c9 13 2f c9 55 a5 24 66 e7 8a a4 a2 eb 1d 75 5f bf 46 f1 14 81 2c 9a 4f a4 73 8b d7 ef d6 50 c0 6b b9 22 4f 96 98 9f 92 92 9a b6 a0 50 e4 ba 26 4a 8a d5 76 a7 c9 c4 9e 5a 9d 05 13 bf f2 f1 a7 f2 98 4f 18 6c 1a d7 a2 7a 40 51 95 47 0d 7d 8a 42 fd 33 34 0a e4 57 bf c8 c9 09 cd c9 79 31 5e 59 c7 29 8d d2 c2 38 2d bb b4 5e 99 5b 1c d2 0c 27 ad 36 28 56 c3 21 47 8a c1 a6 4d 99 93 85 35 85 aa de e2 6a d3 c6 ee 11 2b b5 05 75 4b f3 3d cb aa 8d dc 4a 9d 21 8b 1e 1b f7 7b 0b c2 a2 67 51 53 cc 59 46 11 c5 23 37 a6 f3 e2 88 9e f3 88 7b 5e e1 03 6c b6 3e a6 96 9e a5 30 cb bb 3a 32 4b 35 23 64 c5 25 49 53 dc a5 59 e3 7a d4 b6 58 07 ee 0b d5 7e b7 18 a7 52 60 5e 70 f1 93 3e 52 Data Ascii: uy=B*Mor:mvv;#/U$fu_F,OsPk"OP&JvZOlz@QG}B34Wy1^Y)8-^['6(V!GM5j+uK=J!{gQSYF#7{^l>0:2K5#d%ISYzX~R`^p>R
2025-01-15 16:44:50 UTC	1390	IN	Data Raw: 4f e4 03 c9 ec 7b 4c e6 3d 76 ab 14 d4 25 51 a7 50 63 96 29 34 7f 0c d5 bf 9f da 59 52 9d aa b3 49 27 68 38 40 ad 8a 89 a9 a2 3a b5 47 b8 54 80 af d8 c7 5c 8a 89 48 d8 19 94 57 02 d9 b5 89 8c da d7 2d b5 73 19 8b 43 c3 7a 77 62 cc 05 50 a6 98 cb f0 be 06 09 5a 9d 2a 4e a0 4b d1 6a d3 ac 20 8e 66 69 e4 11 53 71 b8 a9 11 f9 22 60 9f ec 95 50 f8 52 26 fd d5 5c e5 df 70 e1 93 b1 d8 49 e1 e1 93 b0 d8 c9 a0 e2 f3 c6 95 3b c3 c3 ae 45 ec 7e 5b c8 8a cf bd 5d 51 43 5f de 8a 2f f1 44 6b 72 1d b4 b8 a8 0c 0d f8 b4 46 2f 06 7a d2 f0 61 24 52 28 9e 10 6a 96 0c eb c2 68 42 99 0f 2a b1 82 13 04 67 25 01 3f 15 d4 29 a3 99 44 12 33 1a 9f 32 89 c8 cc 9d de 62 ed b1 ca 20 44 52 41 73 30 63 7a 59 ab 98 f7 11 52 76 04 c1 e5 06 7d 18 f3 cd 78 06 c6 03 07 82 45 74 e7 69 6b 02 Data Ascii: O{L=v%QPc)4YRI'h8@:GT\HW-sCzwbPZNKj fiSq"`PR&\pI;E~[]QC_/DkrF/za$R(jhBg%?)D32b DRAs0czYRv}xEtik

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.18	60825	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:50 UTC	456	OUT	GET /ui/cookie_disclaimer HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
2025-01-15 16:44:50 UTC	889	IN	HTTP/1.1 200 OK content-type: application/json vary: Accept-Encoding set-cookie: VT_SESSION_ID=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ set-cookie: VT_SESSION_HASH=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ set-cookie: VT_AUGMENT=; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ set-cookie: VT_SESSION_ID=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ set-cookie: VT_SESSION_HASH=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ set-cookie: VT_AUGMENT=; Domain=virustotal.com; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0; Path=/ x-cloud-trace-context: 534f9d38a09b6ab27095789f852464fd date: Wed, 15 Jan 2025 16:44:50 GMT server: Google Frontend Content-Length: 25 via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-15 16:44:50 UTC	25	IN	Data Raw: 7b 22 64 61 74 61 22 3a 20 7b 22 73 68 6f 77 22 3a 20 66 61 6c 73 65 7d 7d Data Ascii: {"data": {"show": false}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.18	60826	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:50 UTC	482	OUT	GET /gui/stackdriver-errors.3069a6025a2308368f46.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
2025-01-15 16:44:51 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:44:50 GMT expires: Thu, 15 Jan 2026 16:44:50 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 989a479cc502dbce7bc99144cc72ccb0 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:51 UTC	1003	IN	Data Raw: 33 39 63 39 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 38 34 30 35 5d 2c 7b 33 37 30 31 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 72 2c 6f 2c 69 3b 21 66 75 6e 63 74 69 6f 6e 28 73 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6f 3d 5b 74 28 33 30 36 37 33 29 5d 2c 76 6f 69 64 20 30 3d 3d 3d 28 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 2f 28 5e 7c 40 29 5c 53 2b 3a 5c 64 2b 2f 2c 74 3d 2f 5e 5c 73 2a 61 74 20 2e 2a 28 5c 53 2b 3a 5c 64 2b 7c 5c 28 6e 61 74 69 76 65 5c 29 29 2f Data Ascii: 39c9(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[48405],{37017:function(e,n,t){var r,o,i;!function(s,a){"use strict";o=[t(30673)],void 0===(i="function"==typeof(r=function(e){var n=/(^\|@)\S+:\d+/,t=/^\sat .(\S+:\d+\|$native$)/
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 2c 72 3d 74 2e 6d 61 74 63 68 28 2f 20 28 5c 28 2e 2b 5c 29 24 29 2f 29 3b 74 3d 72 3f 74 2e 72 65 70 6c 61 63 65 28 72 5b 30 5d 2c 22 22 29 3a 74 3b 76 61 72 20 6f 3d 74 68 69 73 2e 65 78 74 72 61 63 74 4c 6f 63 61 74 69 6f 6e 28 72 3f 72 5b 31 5d 3a 74 29 2c 69 3d 72 26 26 74 7c 7c 76 6f 69 64 20 30 2c 73 3d 5b 22 65 76 61 6c 22 2c 22 3c 61 6e 6f 6e 79 6d 6f 75 73 3e 22 5d 2e 69 6e 64 65 78 4f 66 28 6f 5b 30 5d 29 3e 2d 31 3f 76 6f 69 64 20 30 3a 6f 5b 30 5d 3b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 7b 66 75 6e 63 74 69 6f 6e 4e 61 6d 65 3a 69 2c 66 69 6c 65 4e 61 6d 65 3a 73 2c 6c 69 6e 65 4e 75 6d 62 65 72 3a 6f 5b 31 5d 2c 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 3a 6f 5b 32 5d 2c 73 6f 75 72 63 65 3a 6e 7d 29 7d 29 2c 74 68 69 73 29 7d 2c 70 61 72 73 65 Data Ascii: ,r=t.match(/ ($.+$$)/);t=r?t.replace(r[0],""):t;var o=this.extractLocation(r?r[1]:t),i=r&&t\|\|void 0,s=["eval","<anonymous>"].indexOf(o[0])>-1?void 0:o[0];return new e({functionName:i,fileName:s,lineNumber:o[1],columnNumber:o[2],source:n})}),this)},parse
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 61 5b 32 5d 2c 6c 69 6e 65 4e 75 6d 62 65 72 3a 61 5b 31 5d 2c 73 6f 75 72 63 65 3a 72 5b 69 5d 7d 29 29 7d 72 65 74 75 72 6e 20 6f 7d 2c 70 61 72 73 65 4f 70 65 72 61 31 31 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 73 74 61 63 6b 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 65 2e 6d 61 74 63 68 28 6e 29 26 26 21 65 2e 6d 61 74 63 68 28 2f 5e 45 72 72 6f 72 20 63 72 65 61 74 65 64 20 61 74 2f 29 7d 29 2c 74 68 69 73 29 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 2c 72 3d 6e 2e 73 70 6c 69 74 28 22 40 22 29 2c 6f 3d 74 68 69 73 2e 65 78 74 72 61 63 74 4c 6f 63 61 74 69 6f 6e 28 72 2e 70 6f 70 28 29 29 2c 69 3d 72 2e 73 68 69 66 74 Data Ascii: a[2],lineNumber:a[1],source:r[i]}))}return o},parseOpera11:function(t){return t.stack.split("\n").filter((function(e){return!!e.match(n)&&!e.match(/^Error created at/)}),this).map((function(n){var t,r=n.split("@"),o=this.extractLocation(r.pop()),i=r.shift
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 20 63 75 73 74 6f 6d 20 72 65 70 6f 72 74 69 6e 67 20 66 75 6e 63 74 69 6f 6e 20 70 72 6f 76 69 64 65 64 2e 22 29 3b 69 66 28 21 65 2e 70 72 6f 6a 65 63 74 49 64 26 26 21 65 2e 74 61 72 67 65 74 55 72 6c 26 26 21 65 2e 63 75 73 74 6f 6d 52 65 70 6f 72 74 69 6e 67 46 75 6e 63 74 69 6f 6e 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 69 6e 69 74 69 61 6c 69 7a 65 3a 20 4e 6f 20 70 72 6f 6a 65 63 74 20 49 44 2c 20 74 61 72 67 65 74 20 75 72 6c 20 6f 72 20 63 75 73 74 6f 6d 20 72 65 70 6f 72 74 69 6e 67 20 66 75 6e 63 74 69 6f 6e 20 70 72 6f 76 69 64 65 64 2e 22 29 3b 74 68 69 73 2e 63 75 73 74 6f 6d 52 65 70 6f 72 74 69 6e 67 46 75 6e 63 74 69 6f 6e 3d 65 2e 63 75 73 74 6f 6d 52 65 70 6f 72 74 69 6e 67 46 75 6e 63 74 69 6f 6e 2c Data Ascii: custom reporting function provided.");if(!e.projectId&&!e.targetUrl&&!e.customReportingFunction)throw new Error("Cannot initialize: No project ID, target url or custom reporting function provided.");this.customReportingFunction=e.customReportingFunction,
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 73 2e 74 61 72 67 65 74 55 72 6c 7c 7c 22 68 74 74 70 73 3a 2f 2f 63 6c 6f 75 64 65 72 72 6f 72 72 65 70 6f 72 74 69 6e 67 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 76 31 62 65 74 61 31 2f 70 72 6f 6a 65 63 74 73 2f 22 2b 74 68 69 73 2e 70 72 6f 6a 65 63 74 49 64 2b 22 2f 65 76 65 6e 74 73 3a 72 65 70 6f 72 74 3f 6b 65 79 3d 22 2b 74 68 69 73 2e 61 70 69 4b 65 79 2c 73 3d 74 68 69 73 2e 63 75 73 74 6f 6d 52 65 70 6f 72 74 69 6e 67 46 75 6e 63 74 69 6f 6e 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 72 2e 66 72 6f 6d 45 72 72 6f 72 28 65 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 65 2e 74 6f 53 74 72 69 6e 67 28 29 5d 2c 6f 3d 6e 3b 6f 3c 74 2e 6c 65 6e 67 74 Data Ascii: s.targetUrl\|\|"https://clouderrorreporting.googleapis.com/v1beta1/projects/"+this.projectId+"/events:report?key="+this.apiKey,s=this.customReportingFunction;return function(e,n){return r.fromError(e).then((function(t){for(var r=[e.toString()],o=n;o<t.lengt
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 65 2e 73 75 62 73 74 72 69 6e 67 28 31 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 65 5d 7d 7d 76 61 72 20 72 3d 5b 22 69 73 43 6f 6e 73 74 72 75 63 74 6f 72 22 2c 22 69 73 45 76 61 6c 22 2c 22 69 73 4e 61 74 69 76 65 22 2c 22 69 73 54 6f 70 6c 65 76 65 6c 22 5d 2c 6f 3d 5b 22 63 6f 6c 75 6d 6e 4e 75 6d 62 65 72 22 2c 22 6c 69 6e 65 4e 75 6d 62 65 72 22 5d 2c 69 3d 5b 22 66 69 6c 65 4e 61 6d 65 22 2c 22 66 75 6e 63 74 69 6f 6e 4e 61 6d 65 22 2c 22 73 6f 75 72 63 65 22 5d 2c 73 3d 5b 22 61 72 67 73 22 5d 2c 61 3d 5b 22 65 76 61 6c 4f 72 69 67 69 6e 22 5d 2c 75 3d 72 2e 63 6f 6e 63 61 74 28 6f 2c 69 2c 73 2c 61 29 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 69 66 Data Ascii: e.substring(1)}function t(e){return function(){return this[e]}}var r=["isConstructor","isEval","isNative","isToplevel"],o=["columnNumber","lineNumber"],i=["fileName","functionName","source"],s=["args"],a=["evalOrigin"],u=r.concat(o,i,s,a);function c(e){if
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 5b 6c 5d 29 2c 63 2e 70 72 6f 74 6f 74 79 70 65 5b 22 73 65 74 22 2b 6e 28 72 5b 6c 5d 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 68 69 73 5b 65 5d 3d 42 6f 6f 6c 65 61 6e 28 6e 29 7d 7d 28 72 5b 6c 5d 29 3b 66 6f 72 28 76 61 72 20 70 3d 30 3b 70 3c 6f 2e 6c 65 6e 67 74 68 3b 70 2b 2b 29 63 2e 70 72 6f 74 6f 74 79 70 65 5b 22 67 65 74 22 2b 6e 28 6f 5b 70 5d 29 5d 3d 74 28 6f 5b 70 5d 29 2c 63 2e 70 72 6f 74 6f 74 79 70 65 5b 22 73 65 74 22 2b 6e 28 6f 5b 70 5d 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 65 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 6e 2b 22 20 6d 75 73 74 20 62 65 20 61 20 4e 75 Data Ascii: [l]),c.prototype["set"+n(r[l])]=function(e){return function(n){this[e]=Boolean(n)}}(r[l]);for(var p=0;p<o.length;p++)c.prototype["get"+n(o[p])]=t(o[p]),c.prototype["set"+n(o[p])]=function(n){return function(t){if(!e(t))throw new TypeError(n+" must be a Nu
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 3d 22 22 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3c 30 3f 31 2b 28 2d 65 3c 3c 31 29 3a 30 2b 28 65 3c 3c 31 29 7d 28 65 29 3b 64 6f 7b 6e 3d 33 31 26 6f 2c 28 6f 3e 3e 3e 3d 35 29 3e 30 26 26 28 6e 7c 3d 33 32 29 2c 74 2b 3d 72 2e 65 6e 63 6f 64 65 28 6e 29 7d 77 68 69 6c 65 28 6f 3e 30 29 3b 72 65 74 75 72 6e 20 74 7d 2c 6e 2e 64 65 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 6f 2c 69 2c 73 2c 61 2c 75 3d 65 2e 6c 65 6e 67 74 68 2c 63 3d 30 2c 6c 3d 30 3b 64 6f 7b 69 66 28 6e 3e 3d 75 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 45 78 70 65 63 74 65 64 20 6d 6f 72 65 20 64 69 67 69 74 73 20 69 6e 20 62 61 73 65 20 36 34 20 56 4c 51 20 76 61 6c 75 65 2e 22 29 3b 69 66 28 2d 31 3d 3d 3d Data Ascii: ="",o=function(e){return e<0?1+(-e<<1):0+(e<<1)}(e);do{n=31&o,(o>>>=5)>0&&(n\|=32),t+=r.encode(n)}while(o>0);return t},n.decode=function(e,n,t){var o,i,s,a,u=e.length,c=0,l=0;do{if(n>=u)throw new Error("Expected more digits in base 64 VLQ value.");if(-1===
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 65 29 7b 76 61 72 20 6e 2c 74 2c 6f 2c 69 2c 73 2c 61 3b 6e 3d 74 68 69 73 2e 5f 6c 61 73 74 2c 74 3d 65 2c 6f 3d 6e 2e 67 65 6e 65 72 61 74 65 64 4c 69 6e 65 2c 69 3d 74 2e 67 65 6e 65 72 61 74 65 64 4c 69 6e 65 2c 73 3d 6e 2e 67 65 6e 65 72 61 74 65 64 43 6f 6c 75 6d 6e 2c 61 3d 74 2e 67 65 6e 65 72 61 74 65 64 43 6f 6c 75 6d 6e 2c 69 3e 6f 7c 7c 69 3d 3d 6f 26 26 61 3e 3d 73 7c 7c 72 2e 63 6f 6d 70 61 72 65 42 79 47 65 6e 65 72 61 74 65 64 50 6f 73 69 74 69 6f 6e 73 49 6e 66 6c 61 74 65 64 28 6e 2c 74 29 3c 3d 30 3f 28 74 68 69 73 2e 5f 6c 61 73 74 3d 65 2c 74 68 69 73 2e 5f 61 72 72 61 79 2e 70 75 73 68 28 65 29 29 3a 28 74 68 69 73 2e 5f 73 6f 72 74 65 64 3d 21 31 2c 74 68 69 73 2e 5f 61 72 72 61 79 2e 70 75 73 68 28 65 29 29 7d 2c 6f 2e 70 72 6f 74 Data Ascii: e){var n,t,o,i,s,a;n=this._last,t=e,o=n.generatedLine,i=t.generatedLine,s=n.generatedColumn,a=t.generatedColumn,i>o\|\|i==o&&a>=s\|\|r.compareByGeneratedPositionsInflated(n,t)<=0?(this._last=e,this._array.push(e)):(this._sorted=!1,this._array.push(e))},o.prot
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 2c 74 68 69 73 2e 5f 73 6f 75 72 63 65 73 3d 69 2e 66 72 6f 6d 41 72 72 61 79 28 6f 2c 21 30 29 2c 74 68 69 73 2e 73 6f 75 72 63 65 52 6f 6f 74 3d 61 2c 74 68 69 73 2e 73 6f 75 72 63 65 73 43 6f 6e 74 65 6e 74 3d 75 2c 74 68 69 73 2e 5f 6d 61 70 70 69 6e 67 73 3d 63 2c 74 68 69 73 2e 66 69 6c 65 3d 6c 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 74 68 69 73 2e 67 65 6e 65 72 61 74 65 64 4c 69 6e 65 3d 30 2c 74 68 69 73 2e 67 65 6e 65 72 61 74 65 64 43 6f 6c 75 6d 6e 3d 30 2c 74 68 69 73 2e 73 6f 75 72 63 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 4c 69 6e 65 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 43 6f 6c 75 6d 6e 3d 6e 75 6c 6c 2c 74 68 69 73 2e 6e 61 6d 65 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 29 7b 76 61 Data Ascii: ,this._sources=i.fromArray(o,!0),this.sourceRoot=a,this.sourcesContent=u,this._mappings=c,this.file=l}function l(){this.generatedLine=0,this.generatedColumn=0,this.source=null,this.originalLine=null,this.originalColumn=null,this.name=null}function p(e){va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.18	60827	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:50 UTC	457	OUT	GET /ui/user_notifications HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
2025-01-15 16:44:51 UTC	299	IN	HTTP/1.1 429 Too Many Requests content-type: application/json x-cloud-trace-context: a4cd24fcdc6951a9c0bf241fde6f276e date: Wed, 15 Jan 2025 16:44:50 GMT server: Google Frontend Content-Length: 153 via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-15 16:44:51 UTC	153	IN	Data Raw: 7b 22 65 72 72 6f 72 22 3a 20 7b 22 63 6f 64 65 22 3a 20 22 52 65 63 61 70 74 63 68 61 52 65 71 75 69 72 65 64 45 72 72 6f 72 22 2c 20 22 6d 65 73 73 61 67 65 22 3a 20 22 50 6c 65 61 73 65 20 72 65 2d 73 65 6e 64 20 72 65 71 75 65 73 74 20 77 69 74 68 20 61 20 76 61 6c 69 64 20 72 65 43 41 50 54 43 48 41 20 72 65 73 70 6f 6e 73 65 20 69 6e 20 74 68 65 20 5c 22 78 2d 72 65 63 61 70 74 63 68 61 2d 72 65 73 70 6f 6e 73 65 5c 22 20 68 65 61 64 65 72 22 7d 7d Data Ascii: {"error": {"code": "RecaptchaRequiredError", "message": "Please re-send request with a valid reCAPTCHA response in the \"x-recaptcha-response\" header"}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.18	60828	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:50 UTC	680	OUT	GET /gui/1402accbefdec6a25762.woff2 HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.virustotal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.virustotal.com/gui/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
2025-01-15 16:44:51 UTC	382	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:44:51 GMT expires: Thu, 15 Jan 2026 16:44:51 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: d39e0794a672937db1ed206d6673e492 content-type: font/woff2 server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:51 UTC	1008	IN	Data Raw: 33 61 32 63 0d 0a 77 4f 46 32 00 01 00 00 00 00 3a 2c 00 0d 00 00 00 00 88 7c 00 00 39 d3 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 6e 1b cf 42 1c 90 1c 06 60 00 84 62 0a 81 88 4c eb 34 0b 84 64 00 01 36 02 24 03 89 44 04 20 05 84 66 07 8c 34 1b 99 76 25 8c db 8f 02 ba 03 bc 98 bc 94 cc 8c 44 d8 ab c5 aa 64 64 a0 64 6f 9e 9c fd ff d7 04 3a 64 08 dd 4d 01 a7 ea 03 45 10 26 88 ea 4a 83 0b 47 11 2e 1c c3 9c 33 1d 4d 78 70 aa b3 ca 14 69 b6 c5 19 f6 56 17 92 75 24 0b 5b 4f e7 3b 4d 55 c7 93 3a 6a 0b 3f 8a 85 7b 2b 2f 3c da ad 98 f7 a8 73 c5 c5 97 09 a3 5e 5b fe 11 64 ae 64 c3 af 1e d1 99 cc 87 d5 8d 74 20 41 90 80 d4 9d ec 60 b1 8f 7a 06 b6 8d fc 49 4e 5e 9e 87 9f eb f3 dc f7 32 c9 fc cc 12 b0 da 6d 59 01 6b 46 85 0a 00 5c ed Data Ascii: 3a2cwOF2:,\|9nB`bL4d6$D f4v%Ddddo:dME&JG.3MxpiVu$[O;MU:j?{+/<s^[ddt A`zIN^2mYkF\
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: e3 1c de 4b 15 6f 2e ff 96 fb e5 ed 3f 2f e8 fd f2 85 1f ee c4 c2 9d b7 83 61 69 f1 df 8b 05 3c 0a 78 3d 62 ea 7c a9 a9 ac 8b df bb 36 e8 5f 3d 0d 15 a4 39 e6 02 4f 59 08 5b 6c 31 d2 52 9b f1 60 f1 30 4c 87 46 53 50 51 51 52 53 23 69 68 f0 68 69 f1 b1 58 42 3a 3a 6a 7a 7a 34 03 03 0d 23 23 96 19 07 b3 b2 d2 b3 b1 31 70 72 42 3c bc 38 3e 3e 98 9f 1f 27 20 00 0b 0a e2 84 84 18 85 85 11 62 c5 a2 44 44 08 c4 89 a3 12 2f 9e 48 82 04 56 89 d2 e8 a4 4b a7 95 2f 8a a7 81 06 68 8d b5 c4 6a a5 00 d6 4e 7b 06 85 ba e0 74 55 0c eb a7 3f 91 41 fd c6 d3 2b 6b 72 e2 32 33 95 5c 0c 30 99 e0 26 8b b8 d9 92 70 8b a5 96 91 58 ce 19 2b b8 d8 4a ce 58 15 2e b6 da 1a 26 07 66 2b 85 2c a4 84 81 11 30 26 40 e1 eb 67 06 54 a4 42 b0 5b 9f 3b bc ea 7d ff 35 86 48 a7 33 0b 01 cd 1a Data Ascii: Ko.?/ai<x=b\|6_=9OY[l1R`0LFSPQQRS#ihhiXB::jzz4##1prB<8>>' bDD/HVK/hjN{tU?A+kr23\0&pX+JX.&f+,0&@gTB[;}5H3
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: b5 43 e1 6b a1 14 77 5b e5 89 ab fe 90 1a 27 07 57 ef 24 57 ab d3 4a 0c 2e 0d e1 1e 56 ef 1a be ea a8 5b 2d 56 09 0e ce 0c f6 3e 3e fb b9 c8 97 d1 33 39 e4 c0 d6 cd 4a d1 54 61 0a 64 52 51 5d 78 ae d3 6d 74 b8 0b 44 39 ce f2 ef b7 af e7 6f 9f a9 38 09 61 e5 ba 2d e1 34 b2 5f da 82 d2 b1 00 6f 89 d1 b1 1a 15 6f 32 d6 20 fe a8 56 0d 9a 10 73 3e 8c ec 56 0d fc 89 0d b6 c8 83 64 2b ee 7f a4 d1 fb 18 e3 8b f5 71 cb 1d 91 40 4b 84 20 21 25 98 5d 40 34 13 1b 9a 83 93 4c a2 1a 14 f2 e4 09 6f ac f3 8d 15 eb 25 c9 20 83 a5 0c df 7b fe 20 d8 71 15 58 08 30 4b d6 81 c7 d6 31 bb f5 a4 f4 64 e4 cc 14 38 2a 60 e3 56 d0 70 81 51 2a 01 b0 4d bb 55 9a 25 19 c1 d2 18 77 b2 f0 51 2b 3b 9a ad ed cb af 98 9e 2b 80 71 5e b3 1b 5c cc 03 01 a3 7b 5d b0 18 2c 00 a1 cd 34 db 0e 03 Data Ascii: Ckw['W$WJ.V[-V>>39JTadRQ]xmtD9o8a-4_oo2 Vs>Vd+q@K !%]@4Lo% { qX0K1d8`VpQMU%wQ+;+q^\{],4
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 49 26 a5 90 c6 e8 ae b7 eb cc be eb 64 38 fe 18 21 90 d7 0c f2 df 8d 80 00 4c 47 71 f3 5e e5 f2 cc 94 32 2f 3a cc 99 d5 8d 22 8e 7e ab c6 41 e6 5b b4 61 6e f1 7d 44 eb 28 cd 2f d9 d1 cd 89 a9 18 58 b8 04 9f 17 78 18 ca 29 29 e3 14 80 22 6f 50 1a ae 63 e2 e0 c7 5d b7 08 22 72 2c 3b 1f 12 78 a5 31 e1 c7 01 3b 19 d9 78 6d c9 16 5a 82 a4 47 b6 f2 fc fc 49 0c 3a 12 6a 1c b7 d0 57 fb 1e c5 08 39 b7 e3 cf 9e 45 3d 90 b6 f4 3f 51 7d bd 91 78 3b ff d6 a5 73 01 e2 6e 58 d4 be 3b 62 18 28 db f1 f7 be 3d 4a 10 5e fe 98 0e 33 c2 e0 99 02 c1 50 01 a5 28 1f c4 c3 2b 01 11 5a 81 50 8f 56 2e 49 c6 5f ef b2 07 4c 14 1f f9 2e 6e ce 18 f4 dd cf 56 19 a0 ba ff 5c b5 44 6b 36 08 08 01 cc 41 9a 70 67 9d 73 de 05 17 5d 72 d9 15 57 5d 73 dd 0d 37 dd 82 61 08 02 de f1 17 14 f6 a1 Data Ascii: I&d8!LGq^2/:"~A[an}D(/Xx))"oPc]"r,;x1;xmZGI:jW9E=?Q}x;snX;b(=J^3P(+ZPV.I_L.nV\Dk6Apgs]rW]s7a
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: b2 2a 96 5d 6a 19 a3 a2 8a 8a ce aa 25 b6 66 14 51 39 a7 50 94 9b c5 76 56 66 1b f9 3d 90 39 99 59 92 1c e0 f7 84 55 25 96 3d be 74 17 e3 03 63 d9 15 5d 44 57 c3 e4 1c c5 56 25 98 cc 0a 67 f2 85 49 b3 ca 50 44 e5 ed 7c be 2f 3c bf e5 cb ca ca c8 68 1b e4 24 d9 fd 41 d2 05 61 94 c9 da 7c c1 bf 58 b1 5c 78 9e 92 9b a2 83 d0 d1 a4 95 2b 75 89 95 d7 84 32 48 ac 20 42 dd 1c 31 f2 49 2b 49 5a 00 39 09 25 32 c5 fd be 7d 3e 23 a3 e4 20 3d 01 c1 b5 f7 e9 ac 9c a8 15 bb eb 2d c2 63 4f 86 2f dd 6f 59 19 45 c6 b3 7d 1b 6c a5 40 10 12 81 4c 90 da 6c 0a 57 a0 ba 49 6a 60 05 24 a6 71 12 3a 0d d1 8f 1e 9e 65 a0 8f 9d 79 ba c5 14 38 e8 51 3e 43 00 7c 59 cb 7a 4d e6 7a e8 ef a1 e7 69 1e 91 08 68 48 f5 e0 d9 98 ed 1c 35 40 58 1c 16 82 6a 6a 36 b7 62 33 8b 21 03 66 b3 f7 7d Data Ascii: *]j%fQ9PvVf=9YU%=tc]DWV%gIPD\|/<h$Aa\|X\x+u2H B1I+IZ9%2}># =-cO/oYE}l@LlWIj`$q:ey8Q>C\|YzMzihH5@Xjj6b3!f}
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 5d a5 50 08 f7 5b 31 5d da 7e df 61 5f 48 bf 8e e8 76 3c f2 f9 6e 56 4b 42 e5 19 00 29 4e c3 82 a7 10 09 61 c9 10 47 05 9b 64 97 22 23 65 ab a4 2b e2 b4 78 56 4f 4b b9 04 95 5e b5 d4 8e 18 a8 43 c0 87 4c 72 dc 06 63 9a d4 29 9f 89 79 6b 01 7f f7 ec 4c 23 3e 93 21 32 d0 0a 63 50 bc 8e 31 5c 3f a3 62 f3 b8 57 ad 2e 34 1b f9 ba 86 88 57 01 70 54 b2 2b 98 f3 d9 6b 63 37 93 18 e4 5f b8 4b a6 63 da fa 3f f1 0f d7 44 63 42 47 b8 21 12 82 b2 88 61 a0 52 f0 43 8a ca ee 4a 67 e3 54 e7 ce 31 d3 49 b3 f0 de ca 7c 27 22 92 3b 9b 2c 73 86 f6 bc e4 de 94 f3 25 dd 7c ae 5a 7f 4f 2d a7 8d f5 7e f4 39 34 55 38 5d e3 3b 5e 62 12 5b 49 8a 04 93 2e f2 eb 74 d0 1c 59 fd e0 e1 62 e9 ad ed 1b fe dd e9 be d6 0a b1 44 0f 1f 9a fe 3a c9 aa 19 c6 44 41 02 70 cd 75 21 ae 20 cc 69 34 Data Ascii: ]P[1]~a_Hv<nVKB)NaGd"#e+xVOK^CLrc)ykL#>!2cP1\?bW.4WpT+kc7_Kc?DcBG!aRCJgT1I\|'";,s%\|ZO-~94U8];^b[I.tYbD:DApu! i4
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: ad 75 0b aa 9a 9a 20 6b 65 be 5f 6f b6 e4 4b f3 4b 81 43 5e 7b cd 9e a0 13 84 89 ef 62 d2 ad a2 ee 08 de 68 8e 9f 16 56 bd 59 ae e1 4f 4c a9 62 45 5d c4 34 b9 31 c8 96 60 d0 e7 5e df 66 41 e1 f0 75 b8 8e a2 f4 22 4e 4f 31 9c fc 0e a1 74 04 dd 99 5e 30 c3 e5 d3 ea 0d 3e 91 6b 06 48 a2 ab b5 8b 77 63 73 4a 39 22 83 45 c9 a7 5c 9a 7c bf 84 71 ef 32 c3 c0 17 8a dd 25 1c 95 aa 8a 43 bd 70 d3 4a e2 ca 8c 22 0e 31 0e bb a1 98 5e 76 8d aa 17 88 25 c1 2a 01 f8 b9 f6 45 f3 8f e6 8b 76 60 9c 0c 37 4a 34 bd 0d 73 03 f3 3d 8c 42 24 97 cd 31 e5 5a de 33 df 3b b7 c1 99 5a 02 3e bd b1 a2 a0 be 02 8b ab 66 42 d8 ac ea f8 db 34 43 1f ad 00 a3 93 56 e4 23 d5 83 69 0d 83 d0 db 19 8d 63 85 d5 ce d5 39 3c 4f ef 5d 68 30 a5 f1 2d a4 da 3b b4 a2 ba 72 f1 82 44 6b 3b 54 93 b2 fc Data Ascii: u ke_oKKC^{bhVYOLbE]41`^fAu"NO1t^0>kHwcsJ9"E\\|q2%CpJ"1^v%*Ev`7J4s=B$1Z3;Z>fB4CV#ic9<O]h0-;rDk;T
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 9b d9 a8 3d 07 16 27 eb bc b5 7e a4 ff 73 54 2d 88 a5 53 ab a2 5a 8f ba d9 1a c8 4b b4 1b 8e 17 e8 25 85 15 bd 1e ad 4b 61 3a 60 26 93 ba 66 22 ee 29 15 25 fa 63 f2 ae 4e 58 ed a8 0d 04 1d 75 6a 4a d6 05 03 25 9f 7c eb 99 43 43 c4 fe 19 38 8f 66 22 b8 db f1 4a 29 73 2b 91 da 3d b2 b5 99 45 d9 8a db 47 a4 0d 33 25 2a 97 eb a1 1f 55 5a 33 ab 54 62 a1 e7 1a 18 b9 db ed 3b 71 84 96 3d ab ba 05 ba 50 08 cc 7b 22 cc b5 3f a1 21 c6 e9 91 c4 c9 0c 9d 43 a0 c0 d6 a2 45 5c 79 a5 5c 5d 6f 45 a4 d5 c5 32 25 cd 4c 9c 7b 5d 56 1c 5c 6a ed 1a d0 cb 3e 08 08 4d 9c 67 53 f1 9e cf 31 9c 76 8c 77 7a 25 5d e5 30 f0 5d 5b ed 3f 03 02 4f 1d 39 8c f2 aa 08 f0 36 50 0d f8 38 e0 9f 35 f1 3e c6 72 7e ea bc b6 a9 39 2d 1c 82 9f 60 57 85 41 ff d8 d5 31 7f 94 ad a3 77 da c3 4e 61 c5 Data Ascii: ='~sT-SZK%Ka:`&f")%cNXujJ%\|CC8f"J)s+=EG3%*UZ3Tb;q=P{"?!CE\y\]oE2%L{]V\j>MgS1vwz%]0][?O96P85>r~9-`WA1wNa
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 37 f9 68 5b 6b 01 99 85 e0 b2 0e d6 36 13 fe 98 3e ef 6e e8 87 c7 38 fa 32 2b 75 fb 46 72 e3 0f 66 fc 4f d7 6f 93 29 d3 7e 30 6d f7 dd 07 b1 a0 d7 f3 63 f0 c7 5d 02 6b 73 9e a1 cc e1 d1 16 37 31 4c 9c 7d a0 35 c1 d0 c6 2d c8 17 f6 3a 9d c2 ee 82 50 1b 92 86 b6 bc 4f b3 44 6a a7 d7 33 fd a9 f5 4c 67 9f d5 3e 3f 1c b6 cf ed b3 38 1d fd 16 8b 94 c7 60 7e bf d5 5f 22 f4 73 f9 11 ad 52 14 0c e6 f1 59 5b 3b 69 a2 41 9c cc 68 57 19 f5 4e 29 e9 49 f4 9b 63 1f 83 4f 33 45 21 81 30 a2 54 09 c3 e8 11 89 31 3f ac 52 0a 23 23 c4 2c 23 9d 6e e5 f1 b4 c5 c8 60 b1 24 0d 84 76 5f d2 6f 5e 75 92 6e e6 a4 6a a3 f3 fc 5c 8a 89 69 ae c5 b1 29 49 29 19 78 50 33 1d 54 49 51 d2 6a b0 2a d1 c6 6d cd 72 41 9f 75 f3 5a ad 52 d9 a2 98 7a c8 7a 86 f7 e6 40 db 67 f6 22 b0 72 51 e5 16 Data Ascii: 7h[k6>n82+uFrfOo)~0mc]ks71L}5-:PODj3Lg>?8`~_"sRY[;iAhWN)IcO3E!0T1?R##,#n`$v_o^unj\i)I)xP3TIQj*mrAuZRzz@g"rQ
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 32 82 c6 f3 c1 44 da c4 af ce ba 28 d7 4c 8e 2d ca 3b 94 5c cc 9a a0 22 b0 a1 49 f3 12 ff da c2 6b 9f 05 b5 05 33 4f 2a ea 67 e5 4f 4b 31 bd 18 02 16 7d 56 e4 a7 af 53 30 d3 52 2b 71 5c a7 f8 c7 f3 fc 33 a1 c0 14 a7 54 61 ef 10 d8 cf e3 07 ef 7d 9e 9a f6 26 af 95 21 31 e4 fd de 1f 46 ac a1 95 29 d1 83 c1 a6 8a 04 05 58 f0 54 31 45 01 ec 99 f7 b0 99 f7 33 d1 10 7b 0f 94 d9 31 a7 d3 d3 4f 63 d2 0d ba 5b a5 47 72 a0 f6 4a fa a9 a7 73 92 87 ef c2 a4 ef 3e 8e d9 cd 9c 93 b8 af 4f 01 62 da 50 fb ff 69 6c 3f ca 04 03 3b 9f c3 86 59 80 78 60 41 c7 7f 69 74 ff a4 15 fa 28 2b 83 c6 36 32 01 2b 72 8c cd 3a 26 cc 75 59 ec 63 e8 cc 28 3c 1e 64 b2 20 3f a4 51 e0 94 af 82 c1 ac 60 31 9b 99 8c e6 f9 e8 bb 38 dc 5d 34 e6 3b 1c ee 3b 90 ff 53 e7 af 5f a2 d1 42 4a ba 3e 46 Data Ascii: 2D(L-;\"Ik3O*gOK1}VS0R+q\3Ta}&!1F)XT1E3{1Oc[GrJs>ObPil?;Yx`Ait(+62+r:&uYc(<d ?Q`18]4;;S_BJ>F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.18	60829	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:51 UTC	680	OUT	GET /gui/ee990a93df71bfdfb3b5.woff2 HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.virustotal.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.virustotal.com/gui/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
2025-01-15 16:44:51 UTC	382	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:44:51 GMT expires: Thu, 15 Jan 2026 16:44:51 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 12b8e70792d3c8c2eae4dfe659a94fc3 content-type: font/woff2 server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:51 UTC	1008	IN	Data Raw: 33 39 65 38 0d 0a 77 4f 46 32 00 01 00 00 00 00 39 e8 00 0d 00 00 00 00 88 08 00 00 39 92 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 6e 1b cf 36 1c 90 1c 06 60 00 84 62 0a 81 87 50 ea 78 0b 84 64 00 01 36 02 24 03 89 44 04 20 05 84 7c 07 8c 34 1b 67 76 25 ca 6d 17 c5 dd aa 92 42 f0 a4 97 91 81 c0 79 04 d0 8a fc a6 91 08 73 42 e6 3c f8 ff 8f 07 74 0c 11 3a 53 90 e9 fe 40 82 83 5c ed b4 bb 1a 77 13 d5 78 c6 ef 99 e9 38 41 4d 57 ea 53 95 8b 98 1d 2e e7 5a 3f 12 24 f3 e4 dd 12 10 17 b5 6d 75 74 ad f3 b7 f9 f2 58 82 9c 40 cd fa 5f fe e7 9f 5f 24 81 02 41 66 27 67 af a9 f3 27 10 64 08 78 86 71 26 90 dc ae 54 31 51 5f 94 98 9d 9d 6e 85 e3 a6 8a 7a 85 d7 5f 7d 06 b8 93 23 76 22 f2 f0 ff fe fd bf 73 ed 73 2e 9e fd ad f6 07 50 69 56 Data Ascii: 39e8wOF299n6`bPxd6$D \|4gv%mBysB<t:S@\wx8AMWS.Z?$mutX@__$Af'g'dxq&T1Q_nz_}#v"ss.PiV
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 7d df 89 a1 f9 54 ce 5b 4c 4d be dd 9d 8a dd f4 e2 ca 15 b7 20 8d 52 b8 d9 ce f5 58 99 9f ab fd ad 4b d1 28 ee 61 b7 08 bb d8 76 52 1f f9 b3 bc f1 ca ff 7a 46 2c 28 d3 cd 00 6e 34 07 36 cf 3c 94 05 d6 91 c0 a2 60 98 11 8b c5 d3 d2 d2 d0 d1 a1 e8 e9 49 18 18 48 09 04 32 46 46 3a 26 26 2c 33 33 3d 0b 0b 81 8d 08 b3 b3 33 71 70 30 73 73 43 bc 02 88 02 05 c2 82 04 11 05 0b 86 85 08 21 0a 15 ca c2 c7 87 08 17 8e 16 21 02 23 52 24 ad 28 51 e4 a2 45 b3 8b 91 c8 28 49 12 83 86 b2 49 e4 c8 c1 ca 57 40 d0 5c 6b 58 1b 6d 99 15 ea 44 54 a4 07 ac 9f fe e4 06 cd 9e d0 64 a2 13 95 29 a6 56 06 d6 3c 62 35 57 6c e6 e7 fa 5b 60 21 85 45 c2 59 2c 7e 96 08 67 69 ae 9f 65 96 b3 da f3 5a 95 90 39 34 30 d0 00 da 18 34 a9 db 2c a0 42 19 42 c7 1c 48 75 de fe df d8 d3 cb 26 65 13 Data Ascii: }T[LM RXK(avRzF,(n46<`IH2FF:&&,33=3qp0ssC!!#R$(QE(IIW@\kXmDTd)V<b5Wl[`!EY,~gieZ9404,BBHu&e
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: ec 29 d0 34 30 c6 03 8b bf 84 69 4e 0e de a6 1f af 4a 37 58 c4 cd ed c6 c8 72 6f 71 21 fd 61 32 3e c2 0a 60 95 34 1c 51 6b d3 61 7c ed 40 9f 35 52 a4 0f 9f ae 9b 90 ad a3 d0 10 f9 9c e9 7c 99 aa 04 8f 1a d9 df 7d b7 62 df 00 2e df 1f e1 76 8f 44 c7 2f d7 32 77 e0 e2 6d eb 80 ca bf 3f 8a 69 6b 37 6d 82 96 3b 11 de 27 91 eb 80 53 72 da 1a ea fa 66 81 7d db e6 e0 11 3a b4 c7 e3 c1 9f 15 33 5a 40 e8 f4 51 00 16 f7 4b 16 e8 42 07 06 9a f0 97 95 7f 01 45 bc 2c cb 57 26 05 34 c9 11 0a 4a 0c 0b 0b 39 1b 07 96 8b 9b 4a 8c ba 78 99 32 b9 e4 eb c8 ad 87 9e 62 0d 32 58 bc 23 8e 48 84 60 87 e9 80 31 80 9f b3 10 84 71 1f b7 88 92 49 db 56 73 e3 f9 d3 02 4b 6f 5c df 9f da b2 3e 53 56 89 56 cd 55 09 14 eb 58 b1 8c 89 36 01 74 64 2e 0c 67 08 99 89 c0 54 e7 81 0f 97 ab 25 Data Ascii: )40iNJ7Xroq!a2>`4Qka\|@5R\|}b.vD/2wm?ik7m;'Srf}:3Z@QKBE,W&4J9Jx2b2X#H`1qIVsKo\>SVVUX6td.gT%
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 29 d3 d9 81 22 1d 16 0f 36 a2 1b fa 08 93 3e 47 47 b0 a8 27 e8 18 6d b1 7d cb 38 c6 4b 22 0b 4e b3 53 fd 46 a1 4b 0d 97 fc 1e 21 20 71 3c 94 f2 24 20 81 dc 13 f1 10 d0 e9 fc 6c 4f ef 71 3d 67 fa 43 1f 31 1b d9 fa 47 6d 11 52 de 02 b9 21 13 f8 11 f8 c7 f4 0f 95 ca 13 f9 d1 32 f3 e7 11 12 ab 49 70 34 5b d2 58 b7 60 18 f5 84 d2 69 8d ac 5c 82 f0 c2 34 42 4e 4d e0 14 88 02 19 35 4c 46 f5 9e ff 78 87 80 f8 b7 a7 21 0c 25 3d 3b af fd 31 06 2d 0a 3a a2 6a 56 ec 8c e3 e5 ce 9a bd 81 7c af b7 0b ab ed fa 9f a8 ee 67 56 32 d0 67 5f 7b 96 b7 de 6d 3c b3 cc 9d 50 07 f2 7e 2e 4f 74 43 78 fd 7d ae 30 42 62 33 81 c0 91 21 4d 29 fc b4 aa 23 39 d6 42 16 34 4e 2e a5 c6 4f bb ea 21 93 f4 78 8a dd dd f4 71 e8 97 27 96 1a a0 a5 17 2e 9a af 05 07 04 04 06 e6 a2 0c 5f 27 9d 72 Data Ascii: )"6>GG'm}8K"NSFK! q<$ lOq=gC1GmR!2Ip4[X`i\4BNM5LFx!%=;1-:jV\|gV2g_{m<P~.OtCx}0Bb3!M)#9B4N.O!xq'._'r
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: df 48 32 0e d3 ac a9 a4 32 22 de 14 d9 73 ae 0d 9a 50 82 4d 2c b3 87 03 9b 65 3b 56 50 c2 92 cc d5 4f 2d 1e 6d 36 cf d9 1c b7 44 81 db 2d ba 09 75 d2 31 07 51 f4 b6 15 4a 34 39 a1 2e ad a3 c8 18 a5 94 a4 08 c0 7e af 5e 5a f1 f7 a0 5c 1a da 40 d5 9a a4 1f dc 2a 22 5b ac b4 eb 5d c5 b5 73 54 89 50 a8 a0 27 6a 9d 29 1d b7 fd b5 31 5f 14 95 84 18 6a 63 ae 11 87 ea 6b 1c a0 28 50 09 41 2f a8 e2 10 7e c1 75 0d a6 64 02 a0 9e 5b cc 43 ea 86 ac 3e bb 9e d8 5a 32 ca aa 24 19 b5 5b 42 e3 0c db 53 62 10 9d 40 a6 95 9b a9 95 97 db 73 c2 4b 00 a6 c0 db 1f 6d 8b 94 e3 64 8a f1 80 28 30 22 89 e8 98 f7 a2 1c 90 95 8d 52 63 0d ea 90 87 a2 c2 35 31 5a 28 64 67 24 4a 4e 26 ab 27 16 b3 89 20 85 91 08 2b b3 8c 46 46 0a 03 90 da cd be a8 22 07 1f f5 83 28 e4 76 14 a6 02 7f fe Data Ascii: H22"sPM,e;VPO-m6D-u1QJ49.~^Z\@*"[]sTP'j)1_jck(PA/~ud[C>Z2$[BSb@sKmd(0"Rc51Z(dg$JN&' +FF"(v
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: ce 1f 7d 6f b3 1d 42 b2 72 89 4b 95 4a 71 b7 0a 8a 05 28 26 ac 06 15 65 9b 42 35 83 20 84 93 72 07 f1 13 8c a3 71 ee 32 7c ef b9 e7 c3 78 ca 0c 74 71 12 78 37 62 0a dc cd 4d 9d 04 29 1e 42 49 46 b5 ba 30 1d cb 79 f3 68 9a c8 ca c7 b7 6a b6 14 de d0 db d2 8c 48 fe e2 dd d2 91 3b c8 9f fc 87 0b 39 68 6a d7 71 69 b5 93 75 93 8f c6 13 d7 f4 35 56 bc 18 97 7a 95 74 29 5e de f4 a6 9b bd ef 68 eb 53 ad ec 51 4b d7 90 3f a3 ed aa 39 76 d5 c8 f3 19 c3 b3 0d 3b 93 cc b7 e7 76 39 c4 72 de b6 29 0b 6f a0 a0 94 52 4a 69 45 49 33 3c a7 3f 72 c1 11 e8 7e 91 e1 0b ad 96 db f6 cb a6 fd 83 50 48 ad c6 1a 22 aa dd 69 08 0a 39 3c 15 aa 36 75 f1 ac af ca 01 a1 92 71 bd a0 80 53 8c d4 90 1f d4 d2 e9 00 62 e5 2d a1 b5 e2 41 92 b9 0a 4a 6b b5 ee ec 89 f0 37 21 a3 35 fd a9 8c c2 Data Ascii: }oBrKJq(&eB5 rq2\|xtqx7bM)BIF0yhjH;9hjqiu5Vzt)^hSQK?9v;v9r)oRJiEI3<?r~PH"i9<6uqSb-AJk7!5
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 8d 8f a4 bf 59 1a fe ad 1b 82 13 f7 cc 3d 34 6d c8 ee 84 eb f6 6f 2f 5c fe e4 7f ed c4 ea 4d b0 42 ae 80 39 a6 7a 50 84 30 ce 17 7e 6b f2 90 6b 98 5c c5 4e 06 6b f4 74 0d e3 df 17 3d 26 81 44 11 48 08 f4 ca 4e 4e 58 65 ff da 4c a8 e4 ad 2a c7 5c ff 6d 6d 93 f2 2d 76 9f 55 2a 8f 76 48 c0 2d ce d5 c4 77 89 ab 1c 50 17 e1 ec 57 57 8d 76 f7 a7 e7 59 c9 81 d3 15 cc 9b d4 80 75 5e 7f 7f b7 7a b4 4f 0d 4e bf b8 66 70 9d ed 37 4c eb ef 90 54 68 ff 65 ad 6d f8 ee 1a d8 30 62 cd b0 c2 9e 2a ec 68 86 f6 97 76 ec f7 da 5b bd f6 7d 65 1d 07 a0 74 41 7b b3 c2 de bf 70 cd a4 2f 3a 94 ef 0c 41 2d f9 ce 21 4f 14 e4 ed f1 1d ab 5a 66 9d 3c db f4 0d 74 45 7f d0 3c b9 e0 98 e1 a2 73 99 77 eb 9d e5 ef a1 97 13 17 dd 5b c1 f5 9f 8f cd 2d 86 0f bd 85 33 ff 0a 7d 27 98 df 82 0f Data Ascii: Y=4mo/\MB9zP0~kk\Nkt=&DHNNXeL\mm-vUvH-wPWWvYu^zONfp7LThem0b*hv[}etA{p/:A-!OZf<tE<sw[-3}'
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 0a 39 68 7e a3 d3 22 23 9b 03 40 22 73 10 55 cb ae bf 11 92 c8 ea 45 55 35 76 87 0f 8b 84 a5 f7 83 f5 d8 4b af a9 85 26 3e bb ca 00 d6 b3 95 b5 d1 65 2c 0f 43 44 91 62 09 c1 ee 78 80 49 5a f4 e5 02 22 d5 59 2e 94 da cc 9f 27 7f 6d ec 3a dc ad f1 b1 59 30 8b 3e 8a 5a 81 42 37 ce 6f ad e5 1b 6a 6a c1 d6 72 13 ec 14 ca d5 75 81 bc 39 ec 92 95 44 b9 ce 9e e6 aa 5b 95 9a 4e 3b 2c 6f 89 c9 e4 d4 87 3d 37 04 9e c2 35 d6 cf 47 34 3e ee 33 22 58 64 a9 fc 73 a2 de 17 0b b4 53 ce 83 29 9f 7c 41 8b 05 d8 6e ac e8 7d 2e c3 f5 bc 85 44 6f 6c ef 02 c7 4f bb f3 7c 86 7b 7d ec 2f e3 da df 2a 0b af 33 23 28 5d d8 d9 69 48 62 f5 9b 78 60 42 d9 a5 c9 54 b3 d5 b3 1b f8 e2 35 ca f8 b1 52 ef 9c d5 92 94 2c f6 25 b1 db 91 88 e2 be fe 4d 17 5e 8d ef be 4d e8 cb 33 3b 92 f7 78 e3 Data Ascii: 9h~"#@"sUEU5vK&>e,CDbxIZ"Y.'m:Y0>ZB7ojjru9D[N;,o=75G4>3"XdsS)\|An}.DolO\|{}/*3#(]iHbx`BT5R,%M^M3;x
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 7d f0 ff bb f1 f4 27 f5 d8 d7 ba e3 58 3c 63 a1 1e f7 20 b6 1c 2c 6f 78 3f 7d ff 55 9a 35 25 30 25 5c 7e 43 e3 00 d3 c2 b9 04 86 72 8c 43 dc da a8 78 be db 2d 1e a9 0d 0f 71 8c c6 34 a7 36 9c 49 c8 f3 eb 25 49 73 0d 62 e7 3c d8 ba 38 14 b6 2e 9c 67 76 3a 47 cc d1 1f 0e 49 7b 8f c0 a1 a0 34 cc 17 44 35 6a 49 28 c2 13 72 6e 0c df a0 88 50 62 a5 49 a2 52 98 04 84 4d ba f6 73 33 70 5f 25 8d 8a c4 35 2a b5 17 25 2a 95 45 4c c5 6a 95 48 e9 5a 5d 20 0c 5b 03 11 5d 65 c4 0a d3 8e 1f 3c 1f a4 7c 4b 2b e2 a2 d8 1e 29 59 4f 35 b4 a2 e8 c4 3c 50 82 06 2d bb 7f ac af 9b 63 6d f8 71 75 5c 5d 65 17 da 06 cd b6 ac ae 3a 85 2d 3d a7 17 d2 9f 56 de 64 e8 cd df c7 69 b0 7b 99 63 94 db 1a 53 8e d7 b5 9b 0f 0d 0f ef d0 55 77 6e 89 04 b7 b5 99 18 2d 5a 93 83 42 67 9f 6b c9 ac Data Ascii: }'X<c ,ox?}U5%0%\~CrCx-q46I%Isb<8.gv:GI{4D5jI(rnPbIRMs3p_%5%ELjHZ] []e<\|K+)YO5<P-cmqu\]e:-=Vdi{cSUwn-ZBgk
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 7a ce 14 36 f5 2d 5c ca c2 ae 28 04 cc 5a 4c f8 db 83 4a 9a c4 68 cf ca a8 29 77 ca e5 5e 67 95 c5 4e 9e 5d 0d b9 0b d8 2e e3 96 ff b9 55 69 6f a7 11 d7 39 2b ab 86 c6 20 44 88 d6 e9 c5 d6 08 56 e7 b8 d0 2e 30 71 cb 45 0c 03 1b 48 41 22 21 48 5a 22 02 31 08 da 0c 58 1a 06 4b c5 e2 8a b1 98 92 33 b8 92 2c 50 8c 53 3d 86 06 8a 6e 61 33 b4 63 06 d6 54 e4 2f ba a2 a2 92 22 92 b1 64 19 80 ae 9c 34 df 28 2e 0d ef cd b6 05 32 dc 0a 21 49 31 56 91 b3 4b f8 6a 61 51 60 ef 4b de 0c 3b a7 82 ef e4 02 9f ea 6b 36 e7 6b 95 d8 70 d8 5f ef d4 bd 8c c1 be 5c 16 f4 58 cc cb 60 6f e8 e9 05 ff 69 1e 22 2b 7d fa 5e c9 11 24 ea 48 49 c9 45 14 f2 22 a8 7f b8 f6 d8 ad 12 8a 69 d6 a2 f3 0e 91 b7 df 6d 64 d1 ac b3 dc 7a 18 af 57 34 91 be 8c 0d cd 9b 75 26 30 2f 39 18 e4 2e bb 84 Data Ascii: z6-\(ZLJh)w^gN].Uio9+ DV.0qEHA"!HZ"1XK3,PS=na3cT/"d4(.2!I1VKjaQ`K;k6kp_\X`oi"+}^$HIE"imdzW4u&0/9.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.18	60830	142.250.185.227	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:51 UTC	369	OUT	GET /recaptcha/api.js?render=explicit HTTP/1.1 Host: recaptcha.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:44:51 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 15 Jan 2025 16:44:51 GMT Date: Wed, 15 Jan 2025 16:44:51 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:51 UTC	641	IN	Data Raw: 36 64 32 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 72 65 63 61 70 Data Ascii: 6d2/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://recap
2025-01-15 16:44:51 UTC	1112	IN	Data Raw: 41 41 41 43 54 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 33 4a 6c 59 32 46 77 64 47 4e 6f 59 53 35 75 5a 58 51 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c Data Ascii: AAACTeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationL
2025-01-15 16:44:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.18	60831	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:51 UTC	647	OUT	GET /gui/5978.8367bb052a47f57e9d55.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
2025-01-15 16:44:51 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:44:51 GMT expires: Thu, 15 Jan 2026 16:44:51 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 1abea0238c19599ab2b0826578ca6148 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:51 UTC	1003	IN	Data Raw: 33 62 32 37 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 39 37 38 5d 2c 7b 35 39 37 38 3a 28 72 2c 65 2c 6f 29 3d 3e 7b 76 61 72 20 74 3d 6f 28 38 30 39 30 39 29 2c 73 3d 6f 28 31 33 35 37 30 29 2c 61 3d 6f 28 34 38 37 30 34 29 2c 62 3d 6f 28 31 36 36 34 35 29 2c 6e 3d 6f 28 31 35 33 32 33 29 2c 69 3d 6f 28 31 35 34 33 31 29 2c 6c 3d 6f 28 32 37 32 35 37 29 2c 64 3d 6f 28 39 34 31 37 29 2c 63 3d 6f 28 34 35 32 34 31 29 2c 67 3d 6f 28 39 35 36 38 38 29 2c 70 3d 6f 28 34 34 30 35 32 29 2c 75 3d 6f 28 37 31 30 31 32 29 2c 6d 3d 28 6f 28 36 32 36 30 34 Data Ascii: 3b27"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[5978],{5978:(r,e,o)=>{var t=o(80909),s=o(13570),a=o(48704),b=o(16645),n=o(15323),i=o(15431),l=o(27257),d=o(9417),c=o(45241),g=o(95688),p=o(44052),u=o(71012),m=(o(62604
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 73 74 61 74 65 3d 6e 65 77 20 6d 2e 45 31 28 74 68 69 73 29 2c 74 68 69 73 2e 69 73 46 6f 75 6e 64 49 6e 43 6f 72 70 75 73 3d 6c 2e 71 53 2c 74 68 69 73 2e 69 73 50 61 73 73 77 6f 72 64 52 65 71 75 69 72 65 64 3d 6c 2e 46 4d 7d 73 74 61 74 69 63 20 67 65 74 20 73 74 79 6c 65 73 28 29 7b 72 65 74 75 72 6e 28 30 2c 61 2e 75 6e 73 61 66 65 43 53 53 29 28 5b 66 2e 41 5d 29 7d 67 65 74 20 75 70 6c 6f 61 64 49 73 4c 69 6d 69 74 65 64 4d 65 73 73 61 67 65 28 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 70 2e 4e 55 26 26 76 6f 69 64 20 30 21 3d 3d 70 2e 4e 55 26 26 6e 75 6c 6c 21 3d 3d 28 72 3d 70 2e 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d Data Ascii: er(...arguments),this.state=new m.E1(this),this.isFoundInCorpus=l.qS,this.isPasswordRequired=l.FM}static get styles(){return(0,a.unsafeCSS)([f.A])}get uploadIsLimitedMessage(){var r;return null!==p.NU&&void 0!==p.NU&&null!==(r=p.NU.currentUser)&&void 0!==
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 61 74 65 2c 6d 2e 45 31 29 3f 28 30 2c 61 2e 68 74 6d 6c 29 28 6b 7c 7c 28 6b 3d 50 60 20 3c 64 69 76 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 74 65 78 74 3d 22 24 7b 30 7d 22 20 40 6d 6f 75 73 65 6f 76 65 72 3d 22 24 7b 30 7d 22 3e 20 3c 62 75 74 74 6f 6e 20 69 64 3d 22 69 6e 66 6f 49 63 6f 6e 22 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 70 72 69 6d 61 72 79 20 70 78 2d 35 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 20 3f 64 69 73 61 62 6c 65 64 3d 22 24 7b 30 7d 22 3e 20 43 68 6f 6f 73 65 20 66 69 6c 65 20 3c 2f 62 75 74 74 6f 6e 3e 20 3c 2f 64 69 76 3e 20 60 29 2c 70 2e 4e 55 2e 75 70 6c 6f 61 64 49 73 4c 69 6d 69 74 65 64 28 29 3f 74 68 69 73 2e 75 70 6c 6f 61 64 49 73 4c 69 6d Data Ascii: ate,m.E1)?(0,a.html)(k\|\|(k=P` <div data-tooltip-text="${0}" @mouseover="${0}"> <button id="infoIcon" type="button" class="btn btn-outline-primary px-5" @click="${0}" ?disabled="${0}"> Choose file </button> </div> `),p.NU.uploadIsLimited()?this.uploadIsLim
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 22 41 64 64 20 50 61 73 73 77 6f 72 64 22 20 2e 64 69 73 61 62 6c 65 64 3d 22 24 7b 30 7d 22 20 64 61 74 61 2d 74 65 73 74 3d 22 61 64 64 2d 70 61 73 73 77 6f 72 64 5f 5f 69 6e 70 75 74 22 3e 20 3c 2f 64 69 76 3e 20 60 29 2c 28 30 2c 6d 2e 69 73 29 28 74 68 69 73 2e 73 74 61 74 65 2c 6d 2e 4b 6e 29 29 3a 61 2e 6e 6f 74 68 69 6e 67 2c 28 30 2c 6d 2e 45 4b 29 28 74 68 69 73 2e 73 74 61 74 65 2c 6d 2e 68 6e 29 3f 74 68 69 73 2e 72 65 6e 64 65 72 43 6f 6e 66 69 72 6d 42 75 74 74 6f 6e 28 29 3a 28 30 2c 6d 2e 69 73 29 28 74 68 69 73 2e 73 74 61 74 65 2c 6d 2e 47 47 29 3f 28 30 2c 61 2e 68 74 6d 6c 29 28 24 7c 7c 28 24 3d 50 60 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 62 74 6e 2d 70 72 69 6d 61 72 79 20 Data Ascii: "Add Password" .disabled="${0}" data-test="add-password__input"> </div> `),(0,m.is)(this.state,m.Kn)):a.nothing,(0,m.EK)(this.state,m.hn)?this.renderConfirmButton():(0,m.is)(this.state,m.GG)?(0,a.html)($\|\|($=P`<button type="button" class="btn btn-primary
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 6e 20 64 2e 54 2e 68 61 6e 64 6c 65 45 72 72 6f 72 28 72 29 3b 63 2e 4b 4b 2e 73 68 6f 77 54 6f 61 73 74 28 6f 2c 72 2e 6d 65 73 73 61 67 65 29 7d 7d 29 29 28 29 7d 72 65 73 65 74 28 29 7b 74 68 69 73 2e 73 65 74 53 74 61 74 65 28 6e 65 77 20 6d 2e 45 31 28 74 68 69 73 29 29 7d 6f 70 65 6e 46 69 6c 65 53 65 6c 65 63 74 6f 72 28 29 7b 76 61 72 20 72 3b 63 6f 6e 73 74 20 65 3d 6e 65 77 20 4d 6f 75 73 65 45 76 65 6e 74 28 22 63 6c 69 63 6b 22 2c 7b 76 69 65 77 3a 77 69 6e 64 6f 77 2c 62 75 62 62 6c 65 73 3a 21 30 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3b 6e 75 6c 6c 3d 3d 3d 28 72 3d 74 68 69 73 2e 66 69 6c 65 53 65 6c 65 63 74 6f 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 72 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 65 29 7d 6f 6e 49 6e 70 Data Ascii: n d.T.handleError(r);c.KK.showToast(o,r.message)}}))()}reset(){this.setState(new m.E1(this))}openFileSelector(){var r;const e=new MouseEvent("click",{view:window,bubbles:!0,cancelable:!0});null===(r=this.fileSelector)\|\|void 0===r\|\|r.dispatchEvent(e)}onInp
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 74 79 70 65 3d 22 66 69 6c 65 22 7d 73 74 61 74 69 63 20 67 65 74 20 73 74 79 6c 65 73 28 29 7b 72 65 74 75 72 6e 28 30 2c 74 2e 75 6e 73 61 66 65 43 53 53 29 28 69 2e 41 29 7d 72 65 6e 64 65 72 28 29 7b 76 61 72 20 72 2c 65 2c 6f 2c 73 2c 6e 2c 69 3b 72 65 74 75 72 6e 28 30 2c 74 2e 68 74 6d 6c 29 28 6c 7c 7c 28 6c 3d 70 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 72 61 70 70 65 72 22 20 3f 73 6d 61 6c 6c 3d 22 24 7b 30 7d 22 3e 20 24 7b 30 7d 20 24 7b 30 7d 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 60 29 2c 74 68 69 73 2e 5f 73 6d 61 6c 6c 2c 22 75 72 6c 22 3d 3d 74 68 69 73 2e 74 79 70 65 3f 28 30 2c 74 2e 68 74 6d 6c 29 28 64 7c 7c 28 64 3d 70 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 75 62 20 Data Ascii: ...arguments),this.type="file"}static get styles(){return(0,t.unsafeCSS)(i.A)}render(){var r,e,o,s,n,i;return(0,t.html)(l\|\|(l=p` <div class="wrapper" ?small="${0}"> ${0} ${0} ${0} </div> `),this._small,"url"==this.type?(0,t.html)(d\|\|(d=p` <div class="sub
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 61 20 63 6c 61 73 73 3d 22 62 6c 75 65 2d 6c 69 6e 6b 20 63 6f 6e 73 65 6e 74 2d 6c 69 6e 6b 22 20 69 64 3d 22 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 2d 66 69 6c 65 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 24 7b 30 7d 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 50 72 69 76 61 63 79 20 4e 6f 74 69 63 65 3c 2f 61 3e 2c 20 61 6e 64 20 74 6f 20 74 68 65 20 3c 73 74 72 6f 6e 67 3e 73 68 61 72 69 6e 67 20 6f 66 20 79 6f 75 72 20 53 61 6d 70 6c 65 20 73 75 62 6d 69 73 73 69 6f 6e 20 77 69 74 68 20 74 68 65 20 73 65 63 75 72 69 74 79 20 63 6f 6d 6d 75 6e 69 74 79 2e 3c 2f 73 74 72 6f 6e 67 3e 20 50 6c 65 61 73 65 20 64 6f 20 6e 6f 74 20 73 75 62 6d 69 74 20 61 6e 79 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3b 20 77 65 20 61 72 65 Data Ascii: a class="blue-link consent-link" id="privacy-policy-file-link" href="${0}" target="_blank">Privacy Notice</a>, and to the <strong>sharing of your Sample submission with the security community.</strong> Please do not submit any personal information; we are
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 61 3e 20 3c 2f 64 69 76 3e 20 60 29 2c 6e 75 6c 6c 21 3d 3d 28 6e 3d 62 2e 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 26 26 6e 2e 67 74 69 41 63 63 65 73 73 3f 61 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 47 54 49 54 65 72 6d 73 4f 66 53 65 72 76 69 63 65 22 29 3a 61 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 74 65 72 6d 73 4f 66 53 65 72 76 69 63 65 22 29 2c 6e 75 6c 6c 21 3d 3d 28 69 3d 62 2e 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 26 26 69 2e 67 74 69 41 63 63 65 73 73 3f 61 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 47 54 49 50 72 69 76 61 63 79 4e 6f 74 69 63 65 22 29 3a 61 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 Data Ascii: a> </div> `),null!==(n=b.NU.currentUser)&&void 0!==n&&n.gtiAccess?a.Z8.getRedirectUrl("GTITermsOfService"):a.Z8.getRedirectUrl("termsOfService"),null!==(i=b.NU.currentUser)&&void 0!==i&&i.gtiAccess?a.Z8.getRedirectUrl("GTIPrivacyNotice"):a.Z8.getRedirectU
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 5c 6e 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 73 2d 62 6c 75 65 3a 20 23 30 62 34 64 64 61 3b 2d 2d 62 73 2d 69 6e 64 69 67 6f 3a 20 23 36 36 31 30 66 32 3b 2d 2d 62 73 2d 70 75 72 70 6c 65 3a 20 23 36 66 34 32 63 31 3b 2d 2d 62 73 2d 70 69 6e 6b 3a 20 23 30 30 30 30 30 30 3b 2d 2d 62 73 2d 72 65 64 3a 20 23 63 35 32 34 32 30 3b 2d 2d 62 73 2d 6f 72 61 6e 67 65 3a 20 23 65 35 37 33 30 30 3b 2d 2d 62 73 2d 79 65 6c 6c 6f 77 3a 20 23 66 63 65 39 36 37 3b 2d 2d 62 73 2d 67 72 65 65 6e 3a 20 23 33 39 61 63 34 63 3b 2d 2d 62 73 2d 74 65 61 6c 3a 20 23 32 30 63 39 39 37 3b 2d 2d 62 73 2d 63 79 61 6e 3a 20 23 32 38 37 62 62 35 3b 2d 2d 62 73 2d 62 6c 61 63 6b 3a 20 23 30 30 30 3b 2d 2d 62 73 2d 77 68 Data Ascii: rap/blob/main/LICENSE)\n */:root{--bs-blue: #0b4dda;--bs-indigo: #6610f2;--bs-purple: #6f42c1;--bs-pink: #000000;--bs-red: #c52420;--bs-orange: #e57300;--bs-yellow: #fce967;--bs-green: #39ac4c;--bs-teal: #20c997;--bs-cyan: #287bb5;--bs-black: #000;--bs-wh
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 2d 73 75 62 74 6c 65 3a 20 23 62 30 64 65 62 37 3b 2d 2d 62 73 2d 69 6e 66 6f 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 39 39 63 61 66 35 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 66 35 63 37 39 39 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 65 38 61 37 61 36 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 66 32 66 32 66 32 3b 2d 2d 62 73 2d 64 61 72 6b 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 62 33 62 33 62 33 3b 2d 2d 62 73 2d 77 68 69 74 65 2d 72 67 62 3a 20 32 35 35 2c 20 32 35 35 2c 20 32 35 35 3b 2d 2d 62 73 2d 62 6c 61 63 6b 2d 72 67 62 3a 20 30 2c 20 30 2c 20 30 3b 2d 2d 62 73 2d 66 6f 6e 74 2d 73 61 6e Data Ascii: -subtle: #b0deb7;--bs-info-border-subtle: #99caf5;--bs-warning-border-subtle: #f5c799;--bs-danger-border-subtle: #e8a7a6;--bs-light-border-subtle: #f2f2f2;--bs-dark-border-subtle: #b3b3b3;--bs-white-rgb: 255, 255, 255;--bs-black-rgb: 0, 0, 0;--bs-font-san

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.18	60832	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:51 UTC	648	OUT	GET /gui/88220.73f555a4c45fa4d35b05.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
2025-01-15 16:44:51 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:44:51 GMT expires: Thu, 15 Jan 2026 16:44:51 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 5004f021476803b334be5bffd3a52a18 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:51 UTC	1003	IN	Data Raw: 33 39 64 36 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 32 32 30 2c 35 30 38 35 34 2c 39 38 39 30 30 5d 2c 7b 38 38 32 32 30 3a 28 72 2c 65 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 72 28 65 29 2c 74 2e 64 28 65 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 76 72 7d 29 3b 76 61 72 20 6f 3d 74 28 34 38 37 30 34 29 2c 61 3d 74 28 31 36 36 34 35 29 2c 73 3d 74 28 36 32 38 33 32 29 2c 6e 3d 74 28 32 31 39 30 33 29 2c 69 3d 74 28 38 30 39 30 39 29 2c 62 3d 74 28 36 36 38 31 33 29 2c 6c 3d 74 28 31 35 33 32 33 29 2c 63 3d 74 28 39 35 36 38 38 29 2c 64 3d 74 28 34 34 30 35 Data Ascii: 39d6(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[88220,50854,98900],{88220:(r,e,t)=>{"use strict";t.r(e),t.d(e,{default:()=>vr});var o=t(48704),a=t(16645),s=t(62832),n=t(21903),i=t(80909),b=t(66813),l=t(15323),c=t(95688),d=t(4405
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 66 6f 63 75 73 28 29 7d 73 65 61 72 63 68 28 29 7b 76 61 72 20 72 3b 63 6f 6e 73 74 20 65 3d 6e 75 6c 6c 3d 3d 3d 28 72 3d 74 68 69 73 2e 69 6e 70 75 74 41 75 74 6f 63 6f 6d 70 6c 65 74 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 6e 75 6c 6c 3d 3d 3d 28 72 3d 72 2e 71 75 65 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 74 72 69 6d 28 29 3b 65 26 26 28 74 68 69 73 2e 69 73 53 65 61 72 63 68 69 6e 67 3d 21 30 2c 74 68 69 73 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 67 65 6e 65 72 69 63 2d 73 65 61 72 63 68 2d 72 65 71 75 65 73 74 65 64 22 2c 7b 62 75 62 62 6c 65 73 3a 21 30 2c 63 6f 6d 70 6f 73 65 64 3a 21 30 2c 64 65 74 61 69 6c 3a 7b 71 75 65 72 79 3a 28 30 2c 70 2e 4f Data Ascii: focus()}search(){var r;const e=null===(r=this.inputAutocomplete)\|\|void 0===r\|\|null===(r=r.query)\|\|void 0===r?void 0:r.trim();e&&(this.isSearching=!0,this.dispatchEvent(new CustomEvent("generic-search-requested",{bubbles:!0,composed:!0,detail:{query:(0,p.O
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 65 20 66 6f 72 28 76 61 72 20 69 3d 72 2e 6c 65 6e 67 74 68 2d 31 3b 69 3e 3d 30 3b 69 2d 2d 29 28 61 3d 72 5b 69 5d 29 26 26 28 6e 3d 28 73 3c 33 3f 61 28 6e 29 3a 73 3e 33 3f 61 28 65 2c 74 2c 6e 29 3a 61 28 65 2c 74 29 29 7c 7c 6e 29 3b 72 65 74 75 72 6e 20 73 3e 33 26 26 6e 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 6e 29 2c 6e 7d 3b 63 6f 6e 73 74 20 54 3d 5b 22 46 69 6c 65 73 20 6f 72 20 68 61 73 68 65 73 22 2c 22 4e 65 77 73 22 2c 22 43 56 45 73 22 2c 22 54 54 50 73 22 2c 22 55 52 4c 73 22 2c 22 43 61 6d 70 61 69 67 6e 73 22 2c 22 49 6e 74 65 6c 20 72 65 70 6f 72 74 73 22 2c 22 44 6f 6d 61 69 6e 73 22 2c 22 54 68 72 65 61 74 20 41 63 74 6f 72 73 22 2c 22 49 50 20 61 64 64 72 65 73 73 65 73 22 2c 22 4d 61 6c Data Ascii: e for(var i=r.length-1;i>=0;i--)(a=r[i])&&(n=(s<3?a(n):s>3?a(e,t,n):a(e,t))\|\|n);return s>3&&n&&Object.defineProperty(e,t,n),n};const T=["Files or hashes","News","CVEs","TTPs","URLs","Campaigns","Intel reports","Domains","Threat Actors","IP addresses","Mal
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 65 61 74 20 49 6e 74 65 6c 6c 69 67 65 6e 63 65 20 73 65 61 72 63 68 20 63 61 70 61 62 69 6c 69 74 69 65 73 3f 20 3c 61 20 68 72 65 66 3d 22 24 7b 30 7d 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 2d 70 72 69 6d 61 72 79 22 3e 43 68 65 63 6b 20 6f 75 72 20 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 3c 2f 61 3e 2c 20 6f 72 20 61 75 74 6f 6d 61 74 65 20 73 75 62 6d 69 73 73 69 6f 6e 73 20 3c 61 20 68 72 65 66 3d 22 24 7b 30 7d 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 2d 70 72 69 6d 61 72 79 22 3e 75 73 69 6e 67 20 74 68 65 20 41 50 49 3c 2f 61 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 60 29 2c 28 30 2c 6e 2e 54 29 28 6b 28 29 29 2c 74 68 69 73 2e Data Ascii: eat Intelligence search capabilities? <a href="${0}" target="_blank" class="link-primary">Check our Documentation</a>, or automate submissions <a href="${0}" target="_blank" class="link-primary">using the API</a> </div> </div> </div> `),(0,n.T)(k()),this.
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 67 2c 6e 75 6c 6c 21 3d 3d 28 65 3d 64 2e 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 26 26 65 2e 69 6e 73 69 67 68 74 73 55 70 41 63 63 65 73 73 3f 28 30 2c 6f 2e 68 74 6d 6c 29 28 41 7c 7c 28 41 3d 5a 60 20 3c 61 20 68 72 65 66 3d 22 24 7b 30 7d 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 70 72 69 6d 61 72 79 20 74 65 78 74 2d 6e 6f 77 72 61 70 20 72 6f 75 6e 64 65 64 2d 35 20 68 73 74 61 63 6b 20 67 61 70 2d 31 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 3e 20 3c 69 20 63 6c 61 73 73 3d 22 68 73 74 61 63 6b 20 66 73 2d 34 22 3e 24 7b 30 7d 3c 2f 69 3e 20 49 6f 43 20 43 6f 6c 6c 65 63 74 69 6f 6e 73 20 3c 2f 61 3e 20 3c 61 20 68 72 65 66 3d 22 24 7b 30 7d 22 20 63 6c 61 73 73 3d 22 62 Data Ascii: g,null!==(e=d.NU.currentUser)&&void 0!==e&&e.insightsUpAccess?(0,o.html)(A\|\|(A=Z` <a href="${0}" class="btn btn-outline-primary text-nowrap rounded-5 hstack gap-1" role="button"> <i class="hstack fs-4">${0}</i> IoC Collections </a> <a href="${0}" class="b
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 21 62 26 26 6e 75 6c 6c 21 3d 74 2e 72 65 74 75 72 6e 26 26 28 6e 3d 74 2e 72 65 74 75 72 6e 28 29 2c 4f 62 6a 65 63 74 28 6e 29 21 3d 3d 6e 29 29 72 65 74 75 72 6e 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 6c 29 74 68 72 6f 77 20 61 7d 7d 72 65 74 75 72 6e 20 69 7d 7d 28 72 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 72 2c 65 29 7b 69 66 28 72 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 29 72 65 74 75 72 6e 20 64 72 28 72 2c 65 29 3b 76 61 72 20 74 3d 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 72 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 3b 72 65 74 75 72 6e 22 4f 62 6a 65 63 74 22 3d 3d 3d 74 26 26 72 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 28 74 3d 72 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 2c 22 4d 61 70 22 3d 3d Data Ascii: !b&&null!=t.return&&(n=t.return(),Object(n)!==n))return}finally{if(l)throw a}}return i}}(r,e)\|\|function(r,e){if(r){if("string"==typeof r)return dr(r,e);var t={}.toString.call(r).slice(8,-1);return"Object"===t&&r.constructor&&(t=r.constructor.name),"Map"==
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 26 26 65 2e 76 74 69 41 63 63 65 73 73 3f 22 73 65 61 72 63 68 22 3a 22 75 70 6c 6f 61 64 22 29 2c 74 68 69 73 2e 73 65 6c 65 63 74 65 64 46 6f 72 6d 54 61 62 3d 72 2e 72 6f 75 74 65 50 61 72 61 6d 73 2e 74 61 62 5f 66 6f 72 6d 7d 75 70 64 61 74 65 64 28 72 29 7b 76 61 72 20 65 3b 73 75 70 65 72 2e 75 70 64 61 74 65 64 28 72 29 3b 63 6f 6e 73 74 20 74 3d 72 2e 68 61 73 2e 62 69 6e 64 28 72 29 3b 6e 75 6c 6c 21 3d 3d 28 65 3d 64 2e 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 26 26 65 2e 67 74 69 41 63 63 65 73 73 7c 7c 21 5b 22 73 65 63 74 69 6f 6e 22 2c 22 73 65 6c 65 63 74 65 64 46 6f 72 6d 54 61 62 22 5d 2e 73 6f 6d 65 28 74 29 7c 7c 74 Data Ascii: NU.currentUser)&&void 0!==e&&e.vtiAccess?"search":"upload"),this.selectedFormTab=r.routeParams.tab_form}updated(r){var e;super.updated(r);const t=r.has.bind(r);null!==(e=d.NU.currentUser)&&void 0!==e&&e.gtiAccess\|\|!["section","selectedFormTab"].some(t)\|\|t
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 28 74 68 69 73 2e 73 65 61 72 63 68 55 72 6c 49 6e 70 75 74 56 61 6c 75 65 3d 60 68 74 74 70 3a 2f 2f 24 7b 74 68 69 73 2e 73 65 61 72 63 68 55 72 6c 49 6e 70 75 74 56 61 6c 75 65 7d 60 29 2c 74 68 69 73 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 67 65 6e 65 72 69 63 2d 73 65 61 72 63 68 2d 72 65 71 75 65 73 74 65 64 22 2c 7b 64 65 74 61 69 6c 3a 7b 71 75 65 72 79 3a 74 68 69 73 2e 73 65 61 72 63 68 55 72 6c 49 6e 70 75 74 56 61 6c 75 65 7d 2c 63 6f 6d 70 6f 73 65 64 3a 21 30 2c 62 75 62 62 6c 65 73 3a 21 30 7d 29 29 29 7d 67 65 6e 65 72 69 63 53 65 61 72 63 68 28 29 7b 76 61 72 20 72 3b 6e 75 6c 6c 3d 3d 3d 28 72 3d 74 68 69 73 2e 73 65 61 72 63 68 62 61 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c Data Ascii: (this.searchUrlInputValue=`http://${this.searchUrlInputValue}`),this.dispatchEvent(new CustomEvent("generic-search-requested",{detail:{query:this.searchUrlInputValue},composed:!0,bubbles:!0})))}genericSearch(){var r;null===(r=this.searchbar)\|\|void 0===r\|\|
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 6b 22 3e 20 41 6e 61 6c 79 73 65 20 73 75 73 70 69 63 69 6f 75 73 20 66 69 6c 65 73 2c 20 64 6f 6d 61 69 6e 73 2c 20 49 50 73 20 61 6e 64 20 55 52 4c 73 20 74 6f 20 64 65 74 65 63 74 20 6d 61 6c 77 61 72 65 20 61 6e 64 20 6f 74 68 65 72 20 62 72 65 61 63 68 65 73 2c 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 73 68 61 72 65 20 74 68 65 6d 20 77 69 74 68 20 74 68 65 20 73 65 63 75 72 69 74 79 20 63 6f 6d 6d 75 6e 69 74 79 2e 20 3c 2f 70 3e 20 3c 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 6d 6e 69 62 61 72 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 73 2d 77 72 61 70 70 65 72 20 68 73 74 61 63 6b 20 70 6f 73 69 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 22 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 3c 64 Data Ascii: k"> Analyse suspicious files, domains, IPs and URLs to detect malware and other breaches, automatically share them with the security community. </p> <div> <div class="omnibar"> <div class="tabs-wrapper hstack position-relative"> ${0} </div> ${0} </div> <d
2025-01-15 16:44:51 UTC	1390	IN	Data Raw: 20 70 78 2d 33 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 3e 20 24 7b 30 7d 20 3c 2f 61 3e 20 60 29 2c 6e 75 6c 6c 21 3d 3d 28 72 3d 64 2e 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 72 26 26 72 2e 76 74 69 41 63 63 65 73 73 3f 74 68 69 73 2e 73 68 6f 77 4d 75 6c 74 69 73 65 61 72 63 68 44 69 61 6c 6f 67 3a 74 68 69 73 2e 73 68 6f 77 43 6f 6c 6c 65 63 74 69 6f 6e 44 69 61 6c 6f 67 2c 6c 2e 6c 69 73 74 4d 61 67 6e 69 66 79 69 6e 67 47 6c 61 73 73 49 63 6f 6e 29 3a 28 30 2c 6f 2e 68 74 6d 6c 29 28 51 7c 7c 28 51 3d 6c 72 60 20 3c 61 20 63 6c 61 73 73 3d 22 68 73 74 61 63 6b 20 70 78 2d 33 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 Data Ascii: px-3" role="button" @click="${0}"> ${0} </a> `),null!==(r=d.NU.currentUser)&&void 0!==r&&r.vtiAccess?this.showMultisearchDialog:this.showCollectionDialog,l.listMagnifyingGlassIcon):(0,o.html)(Q\|\|(Q=lr` <a class="hstack px-3" role="button" href="https://d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.18	60834	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:52 UTC	665	OUT	GET /gui/vt-ui-shell-extra-deps.9672388f5abc8bb6a9e0.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
2025-01-15 16:44:52 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:44:52 GMT expires: Thu, 15 Jan 2026 16:44:52 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 630c83aeecd9a3b9a83201dad1cbe027 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:52 UTC	1003	IN	Data Raw: 33 61 66 66 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 39 38 35 35 2c 31 36 37 35 37 2c 34 36 33 38 35 5d 2c 7b 34 33 35 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 72 3d 6e 28 34 38 37 30 34 29 2c 73 3d 6e 28 31 36 36 34 35 29 2c 69 3d 6e 28 33 65 33 29 3b 6c 65 74 20 6f 2c 61 3d 65 3d 3e 65 3b 76 61 72 20 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 73 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6f 3d 69 3c 33 3f 74 3a 6e 75 6c 6c 3d 3d 3d 72 3f 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f Data Ascii: 3aff"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[69855,16757,46385],{4356:(e,t,n)=>{var r=n(48704),s=n(16645),i=n(3e3);let o,a=e=>e;var l=function(e,t,n,r){var s,i=arguments.length,o=i<3?t:null===r?r=Object.getOwnPro
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 67 67 6c 65 28 29 7b 74 68 69 73 2e 6f 70 65 6e 65 64 3f 74 68 69 73 2e 63 6c 6f 73 65 28 29 3a 74 68 69 73 2e 6f 70 65 6e 28 29 7d 5f 74 61 70 68 61 6e 64 6c 65 28 29 7b 74 68 69 73 2e 6e 6f 43 6c 6f 73 65 4f 6e 54 61 70 7c 7c 74 68 69 73 2e 63 6c 6f 73 65 28 29 7d 7d 3b 6c 28 5b 28 30 2c 73 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 7d 29 5d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6f 70 65 6e 65 64 22 2c 76 6f 69 64 20 30 29 2c 6c 28 5b 28 30 2c 73 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 2c 61 74 74 72 69 62 75 74 65 3a 22 6e 6f 2d 63 6c 6f 73 65 2d 6f 6e 2d 74 61 70 22 7d 29 5d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6e 6f 43 6c 6f 73 65 4f 6e 54 61 70 22 2c 76 6f 69 64 20 30 29 2c 6c 28 Data Ascii: ggle(){this.opened?this.close():this.open()}_taphandle(){this.noCloseOnTap\|\|this.close()}};l([(0,s.property)({type:Boolean})],d.prototype,"opened",void 0),l([(0,s.property)({type:Boolean,attribute:"no-close-on-tap"})],d.prototype,"noCloseOnTap",void 0),l(
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 69 6d 65 6f 75 74 52 65 66 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 74 69 6d 65 6f 75 74 52 65 66 29 2c 74 68 69 73 2e 74 69 6d 65 6f 75 74 52 65 66 3d 76 6f 69 64 20 30 29 7d 6f 70 65 6e 65 64 4f 62 73 65 72 76 65 72 28 65 29 7b 65 26 26 28 74 68 69 73 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 60 63 61 6c 63 28 35 30 25 20 2d 20 24 7b 74 68 69 73 2e 6f 66 66 73 65 74 57 69 64 74 68 2f 32 7d 70 78 29 60 29 2c 74 68 69 73 2e 74 69 6d 65 6f 75 74 52 65 66 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 74 69 6d 65 6f 75 74 52 65 66 29 2c 65 3f 28 74 68 69 73 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 76 74 2d 75 69 2d 74 6f 61 73 74 2d 6f 70 65 6e 22 29 2c 74 68 69 73 2e 74 69 6d 65 6f 75 74 52 65 66 3d 77 69 6e 64 6f 77 2e Data Ascii: imeoutRef&&(clearTimeout(this.timeoutRef),this.timeoutRef=void 0)}openedObserver(e){e&&(this.style.left=`calc(50% - ${this.offsetWidth/2}px)`),this.timeoutRef&&clearTimeout(this.timeoutRef),e?(this.classList.add("vt-ui-toast-open"),this.timeoutRef=window.
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 29 6f 3d 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 28 65 2c 74 2c 6e 2c 72 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 61 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 61 3e 3d 30 3b 61 2d 2d 29 28 73 3d 65 5b 61 5d 29 26 26 28 6f 3d 28 69 3c 33 3f 73 28 6f 29 3a 69 3e 33 3f 73 28 74 2c 6e 2c 6f 29 3a 73 28 74 2c 6e 29 29 7c 7c 6f 29 3b 72 65 74 75 72 6e 20 69 3e 33 26 26 6f 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6e 2c 6f 29 2c 6f 7d 3b 6c 65 74 20 50 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 70 2e 44 7b 73 74 61 74 69 63 20 67 65 74 20 73 74 79 6c 65 73 28 29 7b 72 65 74 75 72 6e 28 30 2c 69 2e 75 6e 73 61 66 65 43 53 53 29 28 68 2e 41 29 7d 63 6f 6e 6e 65 63 74 65 64 43 61 Data Ascii: flect.decorate)o=Reflect.decorate(e,t,n,r);else for(var a=e.length-1;a>=0;a--)(s=e[a])&&(o=(i<3?s(o):i>3?s(t,n,o):s(t,n))\|\|o);return i>3&&o&&Object.defineProperty(t,n,o),o};let P=class extends p.D{static get styles(){return(0,i.unsafeCSS)(h.A)}connectedCa
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 29 28 66 7c 7c 28 66 3d 77 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 73 65 72 2d 69 6e 66 6f 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 3e 20 3c 76 74 2d 75 69 2d 61 76 61 74 61 72 20 75 73 65 72 3d 22 24 7b 30 7d 22 3e 3c 2f 76 74 2d 75 69 2d 61 76 61 74 61 72 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 73 65 72 2d 64 61 74 61 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 75 6c 6c 2d 6e 61 6d 65 22 3e 24 7b 30 7d 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6d 61 69 6c 22 3e 24 7b 30 7d 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 73 20 69 6e 74 65 6c 6c 69 67 65 6e 63 65 22 20 3f 68 69 64 64 65 6e 3d 22 24 7b 30 7d 22 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 3c 64 Data Ascii: )(f\|\|(f=w` <div class="user-info" @click="${0}"> <vt-ui-avatar user="${0}"></vt-ui-avatar> <div class="user-data"> <div class="full-name">${0}</div> <div class="email">${0}</div> </div> </div> <div class="links intelligence" ?hidden="${0}"> ${0} </div> <d
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 66 6f 72 67 6f 74 50 61 73 73 77 6f 72 64 22 29 2c 64 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 22 29 29 29 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 29 2c 74 68 69 73 2e 69 6e 74 65 6c 6c 69 67 65 6e 63 65 41 63 63 65 73 73 3d 21 31 2c 74 68 69 73 2e 6d 65 6e 75 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 63 6f 6c 6f 72 4d 6f 64 65 3d 22 64 61 72 6b 22 2c 74 68 69 73 2e 5f 6c 6f 67 67 65 64 49 6e 3d 21 31 2c 74 68 69 73 2e 6d 65 6e 75 44 61 74 61 3d 74 68 69 73 2e 70 72 6f 63 65 73 73 4d 65 6e 75 44 61 74 61 50 65 72 6d 69 73 73 69 6f 6e 73 28 75 2e 4b 29 7d 70 72 6f 63 65 73 73 4d 65 6e 75 44 61 74 61 50 65 72 6d 69 73 73 69 6f 6e 73 28 65 29 7b 72 65 74 75 72 6e 5b 2e 2e 2e 65 2e Data Ascii: forgotPassword"),d.Z8.getRedirectUrl("documentation")))}constructor(){super(),this.intelligenceAccess=!1,this.menuData=[],this.colorMode="dark",this._loggedIn=!1,this.menuData=this.processMenuDataPermissions(u.K)}processMenuDataPermissions(e){return[...e.
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 61 62 65 6c 22 3e 4c 69 67 68 74 20 74 68 65 6d 65 3c 2f 73 70 61 6e 3e 20 3c 2f 61 3e 20 60 29 2c 28 28 29 3d 3e 7b 74 68 69 73 2e 73 65 74 54 68 65 6d 65 28 22 6c 69 67 68 74 22 29 7d 29 29 7d 73 65 74 54 68 65 6d 65 28 65 29 7b 74 68 69 73 2e 63 6f 6c 6f 72 4d 6f 64 65 3d 65 2c 72 2e 68 34 2e 63 6f 6c 6c 65 63 74 6f 72 2e 63 6f 6c 6c 65 63 74 28 73 2e 4a 55 2e 4d 41 49 4e 5f 4d 45 4e 55 2c 73 2e 5f 42 2e 53 45 4c 45 43 54 5f 43 4f 4c 4f 52 5f 4d 4f 44 45 2c 65 29 7d 7d 3b 49 28 5b 28 30 2c 6f 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 7d 29 5d 2c 50 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 6e 74 65 6c 6c 69 67 65 6e 63 65 41 63 63 65 73 73 22 2c 76 6f 69 64 20 30 29 Data Ascii: <span class="menu-label">Light theme</span> </a> `),(()=>{this.setTheme("light")}))}setTheme(e){this.colorMode=e,r.h4.collector.collect(s.JU.MAIN_MENU,s._B.SELECT_COLOR_MODE,e)}};I([(0,o.property)({type:Boolean})],P.prototype,"intelligenceAccess",void 0)
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 62 65 6c 3a 22 43 68 61 74 20 77 69 74 68 20 74 65 63 68 6e 69 63 61 6c 20 73 75 70 70 6f 72 74 22 2c 68 72 65 66 3a 64 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 63 6f 6e 74 61 63 74 55 73 22 2c 22 74 65 63 68 6e 69 63 61 6c 2d 73 75 70 70 6f 72 74 22 29 2c 74 61 72 67 65 74 3a 22 5f 62 6c 61 6e 6b 22 2c 63 73 73 43 6c 61 73 73 3a 22 62 67 2d 70 72 69 6d 61 72 79 2d 61 6c 74 22 7d 2c 7b 6c 61 62 65 6c 3a 22 54 65 63 68 6e 69 63 61 6c 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 22 2c 68 72 65 66 3a 64 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 22 29 2c 74 61 72 67 65 74 3a 22 5f 62 6c 61 6e 6b 22 7d 2c 7b 6c 61 62 65 6c 3a 22 4c 65 61 72 6e 20 61 62 6f 75 74 20 70 72 65 6d 69 75 6d 20 Data Ascii: bel:"Chat with technical support",href:d.Z8.getRedirectUrl("contactUs","technical-support"),target:"_blank",cssClass:"bg-primary-alt"},{label:"Technical documentation",href:d.Z8.getRedirectUrl("documentation"),target:"_blank"},{label:"Learn about premium
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 2e 76 69 72 75 73 54 6f 74 61 6c 53 61 6e 64 62 6f 78 49 63 6f 6e 2c 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 6c 69 6e 6b 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 6d 61 70 28 28 65 3d 3e 28 30 2c 69 2e 68 74 6d 6c 29 28 45 7c 7c 28 45 3d 4f 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 73 74 61 63 6b 22 3e 20 3c 61 20 63 6c 61 73 73 3d 22 72 6f 75 6e 64 65 64 20 62 6f 72 64 65 72 20 6c 69 6e 6b 2d 70 72 69 6d 61 72 79 20 62 6f 72 64 65 72 2d 70 72 69 6d 61 72 79 20 70 2d 32 20 24 7b 30 7d 22 20 68 72 65 66 3d 22 24 7b 30 7d 22 20 74 61 72 67 65 74 3d 22 24 7b 30 7d 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 3e 20 24 7b 30 7d 20 3c 2f 61 3e 20 3c 2f 64 69 76 3e 20 60 29 2c 65 2e 63 73 73 43 6c 61 73 73 7c 7c 22 22 2c 65 Data Ascii: .virusTotalSandboxIcon,null===(e=this.links)\|\|void 0===e?void 0:e.map((e=>(0,i.html)(E\|\|(E=O` <div class="hstack"> <a class="rounded border link-primary border-primary p-2 ${0}" href="${0}" target="${0}" @click="${0}"> ${0} </a> </div> `),e.cssClass\|\|"",e
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 2c 42 2e 63 75 72 72 65 6e 74 50 72 6f 67 72 65 73 73 45 6c 65 6d 65 6e 74 3d 74 68 69 73 7d 72 65 6e 64 65 72 28 29 7b 72 65 74 75 72 6e 28 30 2c 69 2e 68 74 6d 6c 29 28 54 7c 7c 28 54 3d 4d 60 20 3c 64 66 2d 74 65 78 74 2d 6d 65 73 73 61 67 65 20 2e 74 65 78 74 3d 22 24 7b 30 7d 22 20 69 73 42 6f 74 3e 3c 2f 64 66 2d 74 65 78 74 2d 6d 65 73 73 61 67 65 3e 20 60 29 2c 60 55 70 6c 6f 61 64 69 6e 67 3a 20 24 7b 74 68 69 73 2e 70 72 6f 67 72 65 73 73 50 65 72 63 65 6e 74 7d 25 60 29 7d 7d 3b 4e 28 5b 28 30 2c 6f 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 4e 75 6d 62 65 72 7d 29 5d 2c 71 2e 70 72 6f 74 6f 74 79 70 65 2c 22 70 72 6f 67 72 65 73 73 50 65 72 63 65 6e 74 22 2c 76 6f 69 64 20 30 29 2c 71 3d 42 3d 4e 28 5b 28 30 2c 6f 2e 63 75 73 74 6f 6d Data Ascii: ,B.currentProgressElement=this}render(){return(0,i.html)(T\|\|(T=M` <df-text-message .text="${0}" isBot></df-text-message> `),`Uploading: ${this.progressPercent}%`)}};N([(0,o.property)({type:Number})],q.prototype,"progressPercent",void 0),q=B=N([(0,o.custom

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.18	60835	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:52 UTC	468	OUT	GET /gui/5978.8367bb052a47f57e9d55.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
2025-01-15 16:44:52 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:44:52 GMT expires: Thu, 15 Jan 2026 16:44:52 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: ec86bae1508cb6c50ba535d3f0c0e908 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:52 UTC	1003	IN	Data Raw: 33 39 64 66 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 39 37 38 5d 2c 7b 35 39 37 38 3a 28 72 2c 65 2c 6f 29 3d 3e 7b 76 61 72 20 74 3d 6f 28 38 30 39 30 39 29 2c 73 3d 6f 28 31 33 35 37 30 29 2c 61 3d 6f 28 34 38 37 30 34 29 2c 62 3d 6f 28 31 36 36 34 35 29 2c 6e 3d 6f 28 31 35 33 32 33 29 2c 69 3d 6f 28 31 35 34 33 31 29 2c 6c 3d 6f 28 32 37 32 35 37 29 2c 64 3d 6f 28 39 34 31 37 29 2c 63 3d 6f 28 34 35 32 34 31 29 2c 67 3d 6f 28 39 35 36 38 38 29 2c 70 3d 6f 28 34 34 30 35 32 29 2c 75 3d 6f 28 37 31 30 31 32 29 2c 6d 3d 28 6f 28 36 32 36 30 34 Data Ascii: 39df"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[5978],{5978:(r,e,o)=>{var t=o(80909),s=o(13570),a=o(48704),b=o(16645),n=o(15323),i=o(15431),l=o(27257),d=o(9417),c=o(45241),g=o(95688),p=o(44052),u=o(71012),m=(o(62604
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 73 74 61 74 65 3d 6e 65 77 20 6d 2e 45 31 28 74 68 69 73 29 2c 74 68 69 73 2e 69 73 46 6f 75 6e 64 49 6e 43 6f 72 70 75 73 3d 6c 2e 71 53 2c 74 68 69 73 2e 69 73 50 61 73 73 77 6f 72 64 52 65 71 75 69 72 65 64 3d 6c 2e 46 4d 7d 73 74 61 74 69 63 20 67 65 74 20 73 74 79 6c 65 73 28 29 7b 72 65 74 75 72 6e 28 30 2c 61 2e 75 6e 73 61 66 65 43 53 53 29 28 5b 66 2e 41 5d 29 7d 67 65 74 20 75 70 6c 6f 61 64 49 73 4c 69 6d 69 74 65 64 4d 65 73 73 61 67 65 28 29 7b 76 61 72 20 72 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 70 2e 4e 55 26 26 76 6f 69 64 20 30 21 3d 3d 70 2e 4e 55 26 26 6e 75 6c 6c 21 3d 3d 28 72 3d 70 2e 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d Data Ascii: er(...arguments),this.state=new m.E1(this),this.isFoundInCorpus=l.qS,this.isPasswordRequired=l.FM}static get styles(){return(0,a.unsafeCSS)([f.A])}get uploadIsLimitedMessage(){var r;return null!==p.NU&&void 0!==p.NU&&null!==(r=p.NU.currentUser)&&void 0!==
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 61 74 65 2c 6d 2e 45 31 29 3f 28 30 2c 61 2e 68 74 6d 6c 29 28 6b 7c 7c 28 6b 3d 50 60 20 3c 64 69 76 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 74 65 78 74 3d 22 24 7b 30 7d 22 20 40 6d 6f 75 73 65 6f 76 65 72 3d 22 24 7b 30 7d 22 3e 20 3c 62 75 74 74 6f 6e 20 69 64 3d 22 69 6e 66 6f 49 63 6f 6e 22 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 70 72 69 6d 61 72 79 20 70 78 2d 35 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 20 3f 64 69 73 61 62 6c 65 64 3d 22 24 7b 30 7d 22 3e 20 43 68 6f 6f 73 65 20 66 69 6c 65 20 3c 2f 62 75 74 74 6f 6e 3e 20 3c 2f 64 69 76 3e 20 60 29 2c 70 2e 4e 55 2e 75 70 6c 6f 61 64 49 73 4c 69 6d 69 74 65 64 28 29 3f 74 68 69 73 2e 75 70 6c 6f 61 64 49 73 4c 69 6d Data Ascii: ate,m.E1)?(0,a.html)(k\|\|(k=P` <div data-tooltip-text="${0}" @mouseover="${0}"> <button id="infoIcon" type="button" class="btn btn-outline-primary px-5" @click="${0}" ?disabled="${0}"> Choose file </button> </div> `),p.NU.uploadIsLimited()?this.uploadIsLim
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 22 41 64 64 20 50 61 73 73 77 6f 72 64 22 20 2e 64 69 73 61 62 6c 65 64 3d 22 24 7b 30 7d 22 20 64 61 74 61 2d 74 65 73 74 3d 22 61 64 64 2d 70 61 73 73 77 6f 72 64 5f 5f 69 6e 70 75 74 22 3e 20 3c 2f 64 69 76 3e 20 60 29 2c 28 30 2c 6d 2e 69 73 29 28 74 68 69 73 2e 73 74 61 74 65 2c 6d 2e 4b 6e 29 29 3a 61 2e 6e 6f 74 68 69 6e 67 2c 28 30 2c 6d 2e 45 4b 29 28 74 68 69 73 2e 73 74 61 74 65 2c 6d 2e 68 6e 29 3f 74 68 69 73 2e 72 65 6e 64 65 72 43 6f 6e 66 69 72 6d 42 75 74 74 6f 6e 28 29 3a 28 30 2c 6d 2e 69 73 29 28 74 68 69 73 2e 73 74 61 74 65 2c 6d 2e 47 47 29 3f 28 30 2c 61 2e 68 74 6d 6c 29 28 24 7c 7c 28 24 3d 50 60 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 62 74 6e 2d 70 72 69 6d 61 72 79 20 Data Ascii: "Add Password" .disabled="${0}" data-test="add-password__input"> </div> `),(0,m.is)(this.state,m.Kn)):a.nothing,(0,m.EK)(this.state,m.hn)?this.renderConfirmButton():(0,m.is)(this.state,m.GG)?(0,a.html)($\|\|($=P`<button type="button" class="btn btn-primary
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 6e 20 64 2e 54 2e 68 61 6e 64 6c 65 45 72 72 6f 72 28 72 29 3b 63 2e 4b 4b 2e 73 68 6f 77 54 6f 61 73 74 28 6f 2c 72 2e 6d 65 73 73 61 67 65 29 7d 7d 29 29 28 29 7d 72 65 73 65 74 28 29 7b 74 68 69 73 2e 73 65 74 53 74 61 74 65 28 6e 65 77 20 6d 2e 45 31 28 74 68 69 73 29 29 7d 6f 70 65 6e 46 69 6c 65 53 65 6c 65 63 74 6f 72 28 29 7b 76 61 72 20 72 3b 63 6f 6e 73 74 20 65 3d 6e 65 77 20 4d 6f 75 73 65 45 76 65 6e 74 28 22 63 6c 69 63 6b 22 2c 7b 76 69 65 77 3a 77 69 6e 64 6f 77 2c 62 75 62 62 6c 65 73 3a 21 30 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3b 6e 75 6c 6c 3d 3d 3d 28 72 3d 74 68 69 73 2e 66 69 6c 65 53 65 6c 65 63 74 6f 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 72 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 65 29 7d 6f 6e 49 6e 70 Data Ascii: n d.T.handleError(r);c.KK.showToast(o,r.message)}}))()}reset(){this.setState(new m.E1(this))}openFileSelector(){var r;const e=new MouseEvent("click",{view:window,bubbles:!0,cancelable:!0});null===(r=this.fileSelector)\|\|void 0===r\|\|r.dispatchEvent(e)}onInp
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 74 79 70 65 3d 22 66 69 6c 65 22 7d 73 74 61 74 69 63 20 67 65 74 20 73 74 79 6c 65 73 28 29 7b 72 65 74 75 72 6e 28 30 2c 74 2e 75 6e 73 61 66 65 43 53 53 29 28 69 2e 41 29 7d 72 65 6e 64 65 72 28 29 7b 76 61 72 20 72 2c 65 2c 6f 2c 73 2c 6e 2c 69 3b 72 65 74 75 72 6e 28 30 2c 74 2e 68 74 6d 6c 29 28 6c 7c 7c 28 6c 3d 70 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 72 61 70 70 65 72 22 20 3f 73 6d 61 6c 6c 3d 22 24 7b 30 7d 22 3e 20 24 7b 30 7d 20 24 7b 30 7d 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 60 29 2c 74 68 69 73 2e 5f 73 6d 61 6c 6c 2c 22 75 72 6c 22 3d 3d 74 68 69 73 2e 74 79 70 65 3f 28 30 2c 74 2e 68 74 6d 6c 29 28 64 7c 7c 28 64 3d 70 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 75 62 20 Data Ascii: ...arguments),this.type="file"}static get styles(){return(0,t.unsafeCSS)(i.A)}render(){var r,e,o,s,n,i;return(0,t.html)(l\|\|(l=p` <div class="wrapper" ?small="${0}"> ${0} ${0} ${0} </div> `),this._small,"url"==this.type?(0,t.html)(d\|\|(d=p` <div class="sub
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 61 20 63 6c 61 73 73 3d 22 62 6c 75 65 2d 6c 69 6e 6b 20 63 6f 6e 73 65 6e 74 2d 6c 69 6e 6b 22 20 69 64 3d 22 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 2d 66 69 6c 65 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 24 7b 30 7d 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 50 72 69 76 61 63 79 20 4e 6f 74 69 63 65 3c 2f 61 3e 2c 20 61 6e 64 20 74 6f 20 74 68 65 20 3c 73 74 72 6f 6e 67 3e 73 68 61 72 69 6e 67 20 6f 66 20 79 6f 75 72 20 53 61 6d 70 6c 65 20 73 75 62 6d 69 73 73 69 6f 6e 20 77 69 74 68 20 74 68 65 20 73 65 63 75 72 69 74 79 20 63 6f 6d 6d 75 6e 69 74 79 2e 3c 2f 73 74 72 6f 6e 67 3e 20 50 6c 65 61 73 65 20 64 6f 20 6e 6f 74 20 73 75 62 6d 69 74 20 61 6e 79 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 3b 20 77 65 20 61 72 65 Data Ascii: a class="blue-link consent-link" id="privacy-policy-file-link" href="${0}" target="_blank">Privacy Notice</a>, and to the <strong>sharing of your Sample submission with the security community.</strong> Please do not submit any personal information; we are
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 61 3e 20 3c 2f 64 69 76 3e 20 60 29 2c 6e 75 6c 6c 21 3d 3d 28 6e 3d 62 2e 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 26 26 6e 2e 67 74 69 41 63 63 65 73 73 3f 61 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 47 54 49 54 65 72 6d 73 4f 66 53 65 72 76 69 63 65 22 29 3a 61 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 74 65 72 6d 73 4f 66 53 65 72 76 69 63 65 22 29 2c 6e 75 6c 6c 21 3d 3d 28 69 3d 62 2e 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 26 26 69 2e 67 74 69 41 63 63 65 73 73 3f 61 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 47 54 49 50 72 69 76 61 63 79 4e 6f 74 69 63 65 22 29 3a 61 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 Data Ascii: a> </div> `),null!==(n=b.NU.currentUser)&&void 0!==n&&n.gtiAccess?a.Z8.getRedirectUrl("GTITermsOfService"):a.Z8.getRedirectUrl("termsOfService"),null!==(i=b.NU.currentUser)&&void 0!==i&&i.gtiAccess?a.Z8.getRedirectUrl("GTIPrivacyNotice"):a.Z8.getRedirectU
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 5c 6e 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 73 2d 62 6c 75 65 3a 20 23 30 62 34 64 64 61 3b 2d 2d 62 73 2d 69 6e 64 69 67 6f 3a 20 23 36 36 31 30 66 32 3b 2d 2d 62 73 2d 70 75 72 70 6c 65 3a 20 23 36 66 34 32 63 31 3b 2d 2d 62 73 2d 70 69 6e 6b 3a 20 23 30 30 30 30 30 30 3b 2d 2d 62 73 2d 72 65 64 3a 20 23 63 35 32 34 32 30 3b 2d 2d 62 73 2d 6f 72 61 6e 67 65 3a 20 23 65 35 37 33 30 30 3b 2d 2d 62 73 2d 79 65 6c 6c 6f 77 3a 20 23 66 63 65 39 36 37 3b 2d 2d 62 73 2d 67 72 65 65 6e 3a 20 23 33 39 61 63 34 63 3b 2d 2d 62 73 2d 74 65 61 6c 3a 20 23 32 30 63 39 39 37 3b 2d 2d 62 73 2d 63 79 61 6e 3a 20 23 32 38 37 62 62 35 3b 2d 2d 62 73 2d 62 6c 61 63 6b 3a 20 23 30 30 30 3b 2d 2d 62 73 2d 77 68 Data Ascii: rap/blob/main/LICENSE)\n */:root{--bs-blue: #0b4dda;--bs-indigo: #6610f2;--bs-purple: #6f42c1;--bs-pink: #000000;--bs-red: #c52420;--bs-orange: #e57300;--bs-yellow: #fce967;--bs-green: #39ac4c;--bs-teal: #20c997;--bs-cyan: #287bb5;--bs-black: #000;--bs-wh
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 2d 73 75 62 74 6c 65 3a 20 23 62 30 64 65 62 37 3b 2d 2d 62 73 2d 69 6e 66 6f 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 39 39 63 61 66 35 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 66 35 63 37 39 39 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 65 38 61 37 61 36 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 66 32 66 32 66 32 3b 2d 2d 62 73 2d 64 61 72 6b 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 62 33 62 33 62 33 3b 2d 2d 62 73 2d 77 68 69 74 65 2d 72 67 62 3a 20 32 35 35 2c 20 32 35 35 2c 20 32 35 35 3b 2d 2d 62 73 2d 62 6c 61 63 6b 2d 72 67 62 3a 20 30 2c 20 30 2c 20 30 3b 2d 2d 62 73 2d 66 6f 6e 74 2d 73 61 6e Data Ascii: -subtle: #b0deb7;--bs-info-border-subtle: #99caf5;--bs-warning-border-subtle: #f5c799;--bs-danger-border-subtle: #e8a7a6;--bs-light-border-subtle: #f2f2f2;--bs-dark-border-subtle: #b3b3b3;--bs-white-rgb: 255, 255, 255;--bs-black-rgb: 0, 0, 0;--bs-font-san

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.18	60837	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:52 UTC	469	OUT	GET /gui/88220.73f555a4c45fa4d35b05.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
2025-01-15 16:44:52 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:44:52 GMT expires: Thu, 15 Jan 2026 16:44:52 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 925844e80b8b2a36ab4b70e71654677a content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 33 66 65 33 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 32 32 30 2c 35 30 38 35 34 2c 39 38 39 30 30 5d 2c 7b 38 38 32 32 30 3a 28 72 2c 65 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 72 28 65 29 2c 74 2e 64 28 65 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 76 72 7d 29 3b 76 61 72 20 6f 3d 74 28 34 38 37 30 34 29 2c 61 3d 74 28 31 36 36 34 35 29 2c 73 3d 74 28 36 32 38 33 32 29 2c 6e 3d 74 28 32 31 39 30 33 29 2c 69 3d 74 28 38 30 39 30 39 29 2c 62 3d 74 28 36 36 38 31 33 29 2c 6c 3d 74 28 31 35 33 32 33 29 2c 63 3d 74 28 39 35 36 38 38 29 2c 64 3d 74 28 34 34 30 35 Data Ascii: 3fe3(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[88220,50854,98900],{88220:(r,e,t)=>{"use strict";t.r(e),t.d(e,{default:()=>vr});var o=t(48704),a=t(16645),s=t(62832),n=t(21903),i=t(80909),b=t(66813),l=t(15323),c=t(95688),d=t(4405
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 2d 32 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 67 72 6f 75 70 20 77 2d 31 30 30 22 3e 20 3c 69 6e 70 75 74 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 20 69 64 3d 22 69 6e 70 75 74 41 75 74 6f 63 6f 6d 70 6c 65 74 65 22 20 68 6f 6d 65 2d 73 74 79 6c 65 20 63 6c 61 73 73 3d 22 63 6f 6c 22 3e 3c 2f 69 6e 70 75 74 2d 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3e 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 62 74 6e 20 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 70 72 69 6d 61 72 79 20 74 65 78 74 2d 6e 6f 77 72 61 70 20 63 6f 6c 2d 61 75 74 6f 20 24 7b 30 7d 22 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 3e 20 43 68 6f 6f 73 65 20 66 69 6c 65 20 3c 2f 62 75 74 74 6f 6e 3e 20 3c 2f 64 69 76 3e 20 3c 62 75 74 74 6f Data Ascii: -2"> <div class="input-group w-100"> <input-autocomplete id="inputAutocomplete" home-style class="col"></input-autocomplete> <button class="btn btn-outline-primary text-nowrap col-auto ${0}" type="button" @click="${0}"> Choose file </button> </div> <butto
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 62 3d 43 2e 45 61 73 79 53 65 61 72 63 68 4d 6f 64 65 73 2e 46 69 6c 65 73 7d 77 69 6c 6c 55 70 64 61 74 65 28 72 29 7b 28 72 2e 68 61 73 28 22 73 65 63 74 69 6f 6e 22 29 7c 7c 72 2e 68 61 73 28 22 73 65 6c 65 63 74 65 64 46 6f 72 6d 54 61 62 22 29 29 26 26 74 68 69 73 2e 6f 62 73 65 72 76 65 53 65 6c 65 63 74 54 61 62 43 6f 6e 64 69 74 69 6f 6e 28 74 68 69 73 2e 73 65 63 74 69 6f 6e 2c 74 68 69 73 2e 73 65 6c 65 63 74 65 64 46 6f 72 6d 54 61 62 29 7d 6f 62 73 65 72 76 65 53 65 6c 65 63 74 54 61 62 43 6f 6e 64 69 74 69 6f 6e 28 72 2c 65 29 7b 74 68 69 73 2e 73 65 6c 65 63 74 65 64 46 6f 72 6d 54 61 62 26 26 22 73 65 61 72 63 68 22 21 3d 3d 74 68 69 73 2e 73 65 63 74 69 6f 6e 26 26 28 74 68 69 73 2e 73 65 6c 65 63 74 65 64 46 6f 72 6d 54 61 62 3d 76 6f 69 Data Ascii: b=C.EasySearchModes.Files}willUpdate(r){(r.has("section")\|\|r.has("selectedFormTab"))&&this.observeSelectTabCondition(this.section,this.selectedFormTab)}observeSelectTabCondition(r,e){this.selectedFormTab&&"search"!==this.section&&(this.selectedFormTab=voi
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 73 63 72 69 70 74 69 6f 6e 53 65 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 30 2c 6f 2e 68 74 6d 6c 29 28 56 7c 7c 28 56 3d 5a 60 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 73 74 61 63 6b 20 67 61 70 2d 32 20 68 2d 31 30 30 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 63 65 6e 74 65 72 20 6d 62 2d 34 22 3e 20 3c 68 31 20 63 6c 61 73 73 3d 22 6d 2d 30 20 74 65 78 74 2d 62 6f 64 79 2d 74 65 72 74 69 61 72 79 22 3e 45 78 61 6d 69 6e 65 3c 2f 68 31 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 2d 66 6c 65 78 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 63 65 6e 74 65 72 20 63 61 72 6f 75 73 65 6c 5f 5f 63 6f 6e 74 61 69 6e 65 72 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 6f 73 69 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 20 77 2d 31 30 30 20 76 73 Data Ascii: scriptionSection(){return(0,o.html)(V\|\|(V=Z`<div class="hstack gap-2 h-100 justify-content-center mb-4"> <h1 class="m-0 text-body-tertiary">Examine</h1> <div class="d-flex justify-content-center carousel__container"> <div class="position-relative w-100 vs
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 2c 63 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 74 68 72 65 61 74 4c 61 6e 64 73 63 61 70 65 22 2c 22 69 6f 63 2d 63 6f 6c 6c 65 63 74 69 6f 6e 73 22 29 2c 6c 2e 63 6f 6c 6c 65 63 74 69 6f 6e 49 63 6f 6e 2c 63 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 72 65 70 6f 72 74 73 41 6e 64 41 6e 61 6c 79 73 69 73 22 29 2c 6c 2e 64 6f 63 57 72 69 74 74 65 6e 49 63 6f 6e 29 3a 6f 2e 6e 6f 74 68 69 6e 67 29 7d 7d 2c 48 2e 73 74 79 6c 65 73 3d 28 30 2c 6f 2e 75 6e 73 61 66 65 43 53 53 29 28 78 2e 41 29 2c 48 29 3b 24 28 5b 28 30 2c 61 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 53 74 72 69 6e 67 7d 29 5d 2c 52 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 65 63 74 69 6f 6e 22 2c 76 6f 69 64 20 30 29 2c 24 28 5b 28 30 2c 61 2e 70 72 Data Ascii: ,c.Z8.getRedirectUrl("threatLandscape","ioc-collections"),l.collectionIcon,c.Z8.getRedirectUrl("reportsAndAnalysis"),l.docWrittenIcon):o.nothing)}},H.styles=(0,o.unsafeCSS)(x.A),H);$([(0,a.property)({type:String})],R.prototype,"section",void 0),$([(0,a.pr
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 28 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 72 2c 65 29 7b 28 6e 75 6c 6c 3d 3d 65 7c 7c 65 3e 72 2e 6c 65 6e 67 74 68 29 26 26 28 65 3d 72 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 74 3d 30 2c 6f 3d 41 72 72 61 79 28 65 29 3b 74 3c 65 3b 74 2b 2b 29 6f 5b 74 5d 3d 72 5b 74 5d Data Ascii: row new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function dr(r,e){(null==e\|\|e>r.length)&&(e=r.length);for(var t=0,o=Array(e);t<e;t++)o[t]=r[t]
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 6c 6c 3d 3d 3d 28 72 3d 74 68 69 73 2e 75 72 6c 53 65 61 72 63 68 49 6e 70 75 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 72 2e 66 6f 63 75 73 28 29 7d 29 2c 31 30 30 29 7d 6f 62 73 65 72 76 65 53 65 6c 65 63 74 54 61 62 43 6f 6e 64 69 74 69 6f 6e 28 72 2c 65 29 7b 76 61 72 20 74 3b 28 74 68 69 73 2e 73 65 6c 65 63 74 65 64 46 6f 72 6d 54 61 62 26 26 22 73 65 61 72 63 68 22 21 3d 3d 74 68 69 73 2e 73 65 63 74 69 6f 6e 26 26 28 74 68 69 73 2e 73 65 6c 65 63 74 65 64 46 6f 72 6d 54 61 62 3d 76 6f 69 64 20 30 29 2c 74 68 69 73 2e 73 65 63 74 69 6f 6e 26 26 75 72 2e 69 6e 63 6c 75 64 65 73 28 74 68 69 73 2e 73 65 63 74 69 6f 6e 29 29 7c 7c 28 74 68 69 73 2e 73 65 63 74 69 6f 6e 3d 6e 75 6c 6c 21 3d 3d 28 74 3d 64 2e 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 Data Ascii: ll===(r=this.urlSearchInput)\|\|void 0===r\|\|r.focus()}),100)}observeSelectTabCondition(r,e){var t;(this.selectedFormTab&&"search"!==this.section&&(this.selectedFormTab=void 0),this.section&&ur.includes(this.section))\|\|(this.section=null!==(t=d.NU.currentUse
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 74 68 69 73 2e 6d 75 6c 74 69 73 65 61 72 63 68 54 65 78 74 61 72 65 61 26 26 28 74 68 69 73 2e 6d 75 6c 74 69 73 65 61 72 63 68 54 65 78 74 61 72 65 61 2e 76 61 6c 75 65 3d 22 22 29 2c 63 2e 5a 38 2e 72 65 64 69 72 65 63 74 28 22 68 6f 6d 65 22 2c 22 73 65 61 72 63 68 2f 6d 75 6c 74 69 73 65 61 72 63 68 22 2c 21 30 29 7d 73 68 6f 77 43 6f 6c 6c 65 63 74 69 6f 6e 44 69 61 6c 6f 67 28 29 7b 63 2e 5a 38 2e 72 65 64 69 72 65 63 74 28 22 68 6f 6d 65 22 2c 22 73 65 61 72 63 68 2f 63 6f 6c 6c 65 63 74 69 6f 6e 22 2c 21 30 29 7d 73 68 6f 77 45 61 73 79 53 65 61 72 63 68 46 6f 72 6d 28 72 29 7b 72 26 26 68 2e 4c 4b 2e 6f 70 65 6e 28 22 76 74 2d 75 69 2d 65 61 73 79 2d 73 65 61 72 63 68 2d 66 6f 72 6d 2d 6d 6f 64 61 6c 22 2c 7b 73 65 6c 65 63 74 65 64 4d 6f 64 65 Data Ascii: this.multisearchTextarea&&(this.multisearchTextarea.value=""),c.Z8.redirect("home","search/multisearch",!0)}showCollectionDialog(){c.Z8.redirect("home","search/collection",!0)}showEasySearchForm(r){r&&h.LK.open("vt-ui-easy-search-form-modal",{selectedMode
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 74 3d 22 5f 62 6c 61 6e 6b 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 2d 70 72 69 6d 61 72 79 20 61 70 69 2d 6c 69 6e 6b 22 20 69 64 3d 22 63 68 65 63 6b 2d 79 6f 75 72 2d 61 70 69 2d 61 70 69 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 72 65 66 65 72 65 6e 63 65 2f 6f 76 65 72 76 69 65 77 22 3e 43 68 65 63 6b 20 6f 75 72 20 41 50 49 3c 2f 61 3e 2c 20 6f 72 20 61 63 63 65 73 73 20 79 6f 75 72 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 67 75 69 2f 6d 79 2d 61 70 69 6b 65 79 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 2d 70 72 69 6d 61 72 79 20 61 70 69 2d 6c 69 6e 6b 22 20 69 64 3d 22 61 70 69 2d 6b 65 79 2d 61 70 69 2d Data Ascii: t="_blank" class="link-primary api-link" id="check-your-api-api-link" href="https://docs.virustotal.com/reference/overview">Check our API</a>, or access your <a href="https://www.virustotal.com/gui/my-apikey" class="link-primary api-link" id="api-key-api-
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 7b 30 7d 20 3c 2f 61 3e 20 60 29 2c 45 2e 4b 4b 2e 73 68 6f 77 54 6f 6f 6c 74 69 70 2c 6a 2e 61 70 69 49 63 6f 6e 29 29 7d 72 65 6e 64 65 72 55 70 6c 6f 61 64 54 61 62 28 29 7b 72 65 74 75 72 6e 28 30 2c 6f 2e 68 74 6d 6c 29 28 58 7c 7c 28 58 3d 6c 72 60 20 3c 64 69 76 20 64 61 74 61 2d 72 6f 75 74 65 3d 22 75 70 6c 6f 61 64 22 3e 20 3c 76 74 2d 75 69 2d 6d 61 69 6e 2d 75 70 6c 6f 61 64 2d 66 6f 72 6d 20 69 64 3d 22 75 70 6c 6f 61 64 46 6f 72 6d 22 20 40 66 69 6c 65 2d 73 75 62 6d 69 74 74 65 64 3d 22 24 7b 30 7d 22 3e 3c 2f 76 74 2d 75 69 2d 6d 61 69 6e 2d 75 70 6c 6f 61 64 2d 66 6f 72 6d 3e 20 3c 2f 64 69 76 3e 20 60 29 2c 74 68 69 73 2e 66 69 6c 65 53 75 62 6d 69 74 74 65 64 29 7d 72 65 6e 64 65 72 55 72 6c 54 61 62 28 29 7b 72 65 74 75 72 6e 28 30 2c Data Ascii: {0} </a> `),E.KK.showTooltip,j.apiIcon))}renderUploadTab(){return(0,o.html)(X\|\|(X=lr` <div data-route="upload"> <vt-ui-main-upload-form id="uploadForm" @file-submitted="${0}"></vt-ui-main-upload-form> </div> `),this.fileSubmitted)}renderUrlTab(){return(0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.18	60836	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:52 UTC	648	OUT	GET /gui/25076.be47e378edc0f5eb13be.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
2025-01-15 16:44:52 UTC	391	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:44:52 GMT expires: Thu, 15 Jan 2026 16:44:52 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 53e2b49bfcfe1f9413a4aeb8173883c3;o=1 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:52 UTC	999	IN	Data Raw: 36 36 31 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 35 30 37 36 5d 2c 7b 32 36 39 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 72 28 74 29 3b 76 61 72 20 72 3d 6e 28 34 38 37 30 34 29 2c 6f 3d 6e 28 31 36 36 34 35 29 2c 69 3d 6e 28 31 35 33 32 33 29 2c 73 3d 6e 28 35 36 37 31 37 29 2c 61 3d 6e 28 39 35 36 38 38 29 2c 63 3d 6e 28 34 34 30 35 32 29 3b 6c 65 74 20 6c 2c 75 2c 66 3d 65 3d 3e 65 3b 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 2c 73 29 7b 74 72 79 7b 76 61 72 20 61 3d 65 5b 69 5d 28 73 29 2c 63 3d 61 2e 76 61 6c 75 65 Data Ascii: 661"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[25076],{2695:(e,t,n)=>{n.r(t);var r=n(48704),o=n(16645),i=n(15323),s=n(56717),a=n(95688),c=n(44052);let l,u,f=e=>e;function d(e,t,n,r,o,i,s){try{var a=e[i](s),c=a.value
2025-01-15 16:44:52 UTC	641	IN	Data Raw: 74 22 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 64 28 69 2c 72 2c 6f 2c 73 2c 61 2c 22 74 68 72 6f 77 22 2c 65 29 7d 73 28 76 6f 69 64 20 30 29 7d 29 29 7d 29 28 29 7d 73 74 61 74 69 63 20 67 65 74 20 73 74 79 6c 65 73 28 29 7b 72 65 74 75 72 6e 28 30 2c 72 2e 63 73 73 29 28 6c 7c 7c 28 6c 3d 66 60 3a 68 6f 73 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 30 32 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 62 67 29 3b 70 61 64 64 69 6e 67 3a 31 2e 32 38 72 65 6d 7d 73 76 67 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 31 Data Ascii: t",e)}function a(e){d(i,r,o,s,a,"throw",e)}s(void 0)}))})()}static get styles(){return(0,r.css)(l\|\|(l=f`:host{display:block;position:absolute;top:0;left:0;right:0;bottom:0;z-index:102;background-color:var(--bs-body-bg);padding:1.28rem}svg{animation:spin 1
2025-01-15 16:44:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.18	60839	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:52 UTC	486	OUT	GET /gui/vt-ui-shell-extra-deps.9672388f5abc8bb6a9e0.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
2025-01-15 16:44:52 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:44:52 GMT expires: Thu, 15 Jan 2026 16:44:52 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 8641052eae0a1ec4b90711109f5ac826 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:52 UTC	1003	IN	Data Raw: 37 39 36 36 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 39 38 35 35 2c 31 36 37 35 37 2c 34 36 33 38 35 5d 2c 7b 34 33 35 36 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 76 61 72 20 72 3d 6e 28 34 38 37 30 34 29 2c 73 3d 6e 28 31 36 36 34 35 29 2c 69 3d 6e 28 33 65 33 29 3b 6c 65 74 20 6f 2c 61 3d 65 3d 3e 65 3b 76 61 72 20 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 73 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6f 3d 69 3c 33 3f 74 3a 6e 75 6c 6c 3d 3d 3d 72 3f 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f Data Ascii: 7966"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[69855,16757,46385],{4356:(e,t,n)=>{var r=n(48704),s=n(16645),i=n(3e3);let o,a=e=>e;var l=function(e,t,n,r){var s,i=arguments.length,o=i<3?t:null===r?r=Object.getOwnPro
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 67 67 6c 65 28 29 7b 74 68 69 73 2e 6f 70 65 6e 65 64 3f 74 68 69 73 2e 63 6c 6f 73 65 28 29 3a 74 68 69 73 2e 6f 70 65 6e 28 29 7d 5f 74 61 70 68 61 6e 64 6c 65 28 29 7b 74 68 69 73 2e 6e 6f 43 6c 6f 73 65 4f 6e 54 61 70 7c 7c 74 68 69 73 2e 63 6c 6f 73 65 28 29 7d 7d 3b 6c 28 5b 28 30 2c 73 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 7d 29 5d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6f 70 65 6e 65 64 22 2c 76 6f 69 64 20 30 29 2c 6c 28 5b 28 30 2c 73 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 2c 61 74 74 72 69 62 75 74 65 3a 22 6e 6f 2d 63 6c 6f 73 65 2d 6f 6e 2d 74 61 70 22 7d 29 5d 2c 64 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6e 6f 43 6c 6f 73 65 4f 6e 54 61 70 22 2c 76 6f 69 64 20 30 29 2c 6c 28 Data Ascii: ggle(){this.opened?this.close():this.open()}_taphandle(){this.noCloseOnTap\|\|this.close()}};l([(0,s.property)({type:Boolean})],d.prototype,"opened",void 0),l([(0,s.property)({type:Boolean,attribute:"no-close-on-tap"})],d.prototype,"noCloseOnTap",void 0),l(
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 69 6d 65 6f 75 74 52 65 66 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 74 69 6d 65 6f 75 74 52 65 66 29 2c 74 68 69 73 2e 74 69 6d 65 6f 75 74 52 65 66 3d 76 6f 69 64 20 30 29 7d 6f 70 65 6e 65 64 4f 62 73 65 72 76 65 72 28 65 29 7b 65 26 26 28 74 68 69 73 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 60 63 61 6c 63 28 35 30 25 20 2d 20 24 7b 74 68 69 73 2e 6f 66 66 73 65 74 57 69 64 74 68 2f 32 7d 70 78 29 60 29 2c 74 68 69 73 2e 74 69 6d 65 6f 75 74 52 65 66 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 74 69 6d 65 6f 75 74 52 65 66 29 2c 65 3f 28 74 68 69 73 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 76 74 2d 75 69 2d 74 6f 61 73 74 2d 6f 70 65 6e 22 29 2c 74 68 69 73 2e 74 69 6d 65 6f 75 74 52 65 66 3d 77 69 6e 64 6f 77 2e Data Ascii: imeoutRef&&(clearTimeout(this.timeoutRef),this.timeoutRef=void 0)}openedObserver(e){e&&(this.style.left=`calc(50% - ${this.offsetWidth/2}px)`),this.timeoutRef&&clearTimeout(this.timeoutRef),e?(this.classList.add("vt-ui-toast-open"),this.timeoutRef=window.
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 29 6f 3d 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 28 65 2c 74 2c 6e 2c 72 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 61 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 61 3e 3d 30 3b 61 2d 2d 29 28 73 3d 65 5b 61 5d 29 26 26 28 6f 3d 28 69 3c 33 3f 73 28 6f 29 3a 69 3e 33 3f 73 28 74 2c 6e 2c 6f 29 3a 73 28 74 2c 6e 29 29 7c 7c 6f 29 3b 72 65 74 75 72 6e 20 69 3e 33 26 26 6f 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6e 2c 6f 29 2c 6f 7d 3b 6c 65 74 20 50 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 70 2e 44 7b 73 74 61 74 69 63 20 67 65 74 20 73 74 79 6c 65 73 28 29 7b 72 65 74 75 72 6e 28 30 2c 69 2e 75 6e 73 61 66 65 43 53 53 29 28 68 2e 41 29 7d 63 6f 6e 6e 65 63 74 65 64 43 61 Data Ascii: flect.decorate)o=Reflect.decorate(e,t,n,r);else for(var a=e.length-1;a>=0;a--)(s=e[a])&&(o=(i<3?s(o):i>3?s(t,n,o):s(t,n))\|\|o);return i>3&&o&&Object.defineProperty(t,n,o),o};let P=class extends p.D{static get styles(){return(0,i.unsafeCSS)(h.A)}connectedCa
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 29 28 66 7c 7c 28 66 3d 77 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 73 65 72 2d 69 6e 66 6f 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 3e 20 3c 76 74 2d 75 69 2d 61 76 61 74 61 72 20 75 73 65 72 3d 22 24 7b 30 7d 22 3e 3c 2f 76 74 2d 75 69 2d 61 76 61 74 61 72 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 73 65 72 2d 64 61 74 61 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 75 6c 6c 2d 6e 61 6d 65 22 3e 24 7b 30 7d 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6d 61 69 6c 22 3e 24 7b 30 7d 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 73 20 69 6e 74 65 6c 6c 69 67 65 6e 63 65 22 20 3f 68 69 64 64 65 6e 3d 22 24 7b 30 7d 22 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 3c 64 Data Ascii: )(f\|\|(f=w` <div class="user-info" @click="${0}"> <vt-ui-avatar user="${0}"></vt-ui-avatar> <div class="user-data"> <div class="full-name">${0}</div> <div class="email">${0}</div> </div> </div> <div class="links intelligence" ?hidden="${0}"> ${0} </div> <d
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 66 6f 72 67 6f 74 50 61 73 73 77 6f 72 64 22 29 2c 64 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 22 29 29 29 7d 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 29 2c 74 68 69 73 2e 69 6e 74 65 6c 6c 69 67 65 6e 63 65 41 63 63 65 73 73 3d 21 31 2c 74 68 69 73 2e 6d 65 6e 75 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 63 6f 6c 6f 72 4d 6f 64 65 3d 22 64 61 72 6b 22 2c 74 68 69 73 2e 5f 6c 6f 67 67 65 64 49 6e 3d 21 31 2c 74 68 69 73 2e 6d 65 6e 75 44 61 74 61 3d 74 68 69 73 2e 70 72 6f 63 65 73 73 4d 65 6e 75 44 61 74 61 50 65 72 6d 69 73 73 69 6f 6e 73 28 75 2e 4b 29 7d 70 72 6f 63 65 73 73 4d 65 6e 75 44 61 74 61 50 65 72 6d 69 73 73 69 6f 6e 73 28 65 29 7b 72 65 74 75 72 6e 5b 2e 2e 2e 65 2e Data Ascii: forgotPassword"),d.Z8.getRedirectUrl("documentation")))}constructor(){super(),this.intelligenceAccess=!1,this.menuData=[],this.colorMode="dark",this._loggedIn=!1,this.menuData=this.processMenuDataPermissions(u.K)}processMenuDataPermissions(e){return[...e.
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 6c 61 62 65 6c 22 3e 4c 69 67 68 74 20 74 68 65 6d 65 3c 2f 73 70 61 6e 3e 20 3c 2f 61 3e 20 60 29 2c 28 28 29 3d 3e 7b 74 68 69 73 2e 73 65 74 54 68 65 6d 65 28 22 6c 69 67 68 74 22 29 7d 29 29 7d 73 65 74 54 68 65 6d 65 28 65 29 7b 74 68 69 73 2e 63 6f 6c 6f 72 4d 6f 64 65 3d 65 2c 72 2e 68 34 2e 63 6f 6c 6c 65 63 74 6f 72 2e 63 6f 6c 6c 65 63 74 28 73 2e 4a 55 2e 4d 41 49 4e 5f 4d 45 4e 55 2c 73 2e 5f 42 2e 53 45 4c 45 43 54 5f 43 4f 4c 4f 52 5f 4d 4f 44 45 2c 65 29 7d 7d 3b 49 28 5b 28 30 2c 6f 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 7d 29 5d 2c 50 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 6e 74 65 6c 6c 69 67 65 6e 63 65 41 63 63 65 73 73 22 2c 76 6f 69 64 20 30 29 Data Ascii: <span class="menu-label">Light theme</span> </a> `),(()=>{this.setTheme("light")}))}setTheme(e){this.colorMode=e,r.h4.collector.collect(s.JU.MAIN_MENU,s._B.SELECT_COLOR_MODE,e)}};I([(0,o.property)({type:Boolean})],P.prototype,"intelligenceAccess",void 0)
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 62 65 6c 3a 22 43 68 61 74 20 77 69 74 68 20 74 65 63 68 6e 69 63 61 6c 20 73 75 70 70 6f 72 74 22 2c 68 72 65 66 3a 64 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 63 6f 6e 74 61 63 74 55 73 22 2c 22 74 65 63 68 6e 69 63 61 6c 2d 73 75 70 70 6f 72 74 22 29 2c 74 61 72 67 65 74 3a 22 5f 62 6c 61 6e 6b 22 2c 63 73 73 43 6c 61 73 73 3a 22 62 67 2d 70 72 69 6d 61 72 79 2d 61 6c 74 22 7d 2c 7b 6c 61 62 65 6c 3a 22 54 65 63 68 6e 69 63 61 6c 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 22 2c 68 72 65 66 3a 64 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 22 29 2c 74 61 72 67 65 74 3a 22 5f 62 6c 61 6e 6b 22 7d 2c 7b 6c 61 62 65 6c 3a 22 4c 65 61 72 6e 20 61 62 6f 75 74 20 70 72 65 6d 69 75 6d 20 Data Ascii: bel:"Chat with technical support",href:d.Z8.getRedirectUrl("contactUs","technical-support"),target:"_blank",cssClass:"bg-primary-alt"},{label:"Technical documentation",href:d.Z8.getRedirectUrl("documentation"),target:"_blank"},{label:"Learn about premium
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 2e 76 69 72 75 73 54 6f 74 61 6c 53 61 6e 64 62 6f 78 49 63 6f 6e 2c 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 6c 69 6e 6b 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 6d 61 70 28 28 65 3d 3e 28 30 2c 69 2e 68 74 6d 6c 29 28 45 7c 7c 28 45 3d 4f 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 73 74 61 63 6b 22 3e 20 3c 61 20 63 6c 61 73 73 3d 22 72 6f 75 6e 64 65 64 20 62 6f 72 64 65 72 20 6c 69 6e 6b 2d 70 72 69 6d 61 72 79 20 62 6f 72 64 65 72 2d 70 72 69 6d 61 72 79 20 70 2d 32 20 24 7b 30 7d 22 20 68 72 65 66 3d 22 24 7b 30 7d 22 20 74 61 72 67 65 74 3d 22 24 7b 30 7d 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 3e 20 24 7b 30 7d 20 3c 2f 61 3e 20 3c 2f 64 69 76 3e 20 60 29 2c 65 2e 63 73 73 43 6c 61 73 73 7c 7c 22 22 2c 65 Data Ascii: .virusTotalSandboxIcon,null===(e=this.links)\|\|void 0===e?void 0:e.map((e=>(0,i.html)(E\|\|(E=O` <div class="hstack"> <a class="rounded border link-primary border-primary p-2 ${0}" href="${0}" target="${0}" @click="${0}"> ${0} </a> </div> `),e.cssClass\|\|"",e
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 2c 42 2e 63 75 72 72 65 6e 74 50 72 6f 67 72 65 73 73 45 6c 65 6d 65 6e 74 3d 74 68 69 73 7d 72 65 6e 64 65 72 28 29 7b 72 65 74 75 72 6e 28 30 2c 69 2e 68 74 6d 6c 29 28 54 7c 7c 28 54 3d 4d 60 20 3c 64 66 2d 74 65 78 74 2d 6d 65 73 73 61 67 65 20 2e 74 65 78 74 3d 22 24 7b 30 7d 22 20 69 73 42 6f 74 3e 3c 2f 64 66 2d 74 65 78 74 2d 6d 65 73 73 61 67 65 3e 20 60 29 2c 60 55 70 6c 6f 61 64 69 6e 67 3a 20 24 7b 74 68 69 73 2e 70 72 6f 67 72 65 73 73 50 65 72 63 65 6e 74 7d 25 60 29 7d 7d 3b 4e 28 5b 28 30 2c 6f 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 4e 75 6d 62 65 72 7d 29 5d 2c 71 2e 70 72 6f 74 6f 74 79 70 65 2c 22 70 72 6f 67 72 65 73 73 50 65 72 63 65 6e 74 22 2c 76 6f 69 64 20 30 29 2c 71 3d 42 3d 4e 28 5b 28 30 2c 6f 2e 63 75 73 74 6f 6d Data Ascii: ,B.currentProgressElement=this}render(){return(0,i.html)(T\|\|(T=M` <df-text-message .text="${0}" isBot></df-text-message> `),`Uploading: ${this.progressPercent}%`)}};N([(0,o.property)({type:Number})],q.prototype,"progressPercent",void 0),q=B=N([(0,o.custom

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.18	60838	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:52 UTC	648	OUT	GET /gui/36253.6f4dc6a9d8dab2123ae5.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.1.230491043.1736959486; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0
2025-01-15 16:44:52 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:44:52 GMT expires: Thu, 15 Jan 2026 16:44:52 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 1eefae3b4741bde64ac5b493331e3dfc content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:52 UTC	1003	IN	Data Raw: 33 62 32 38 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 36 32 35 33 5d 2c 7b 33 36 32 35 33 3a 28 43 2c 65 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 72 28 34 38 37 30 34 29 2c 6e 3d 72 28 31 36 36 34 35 29 2c 73 3d 72 28 39 35 36 38 38 29 2c 6f 3d 72 28 31 35 33 32 33 29 2c 61 3d 72 28 34 39 39 39 35 29 3b 6c 65 74 20 69 2c 62 2c 6c 3d 43 3d 3e 43 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 65 2c 72 2c 74 29 7b 76 61 72 20 6e 2c 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6f 3d 73 3c 33 3f 65 3a 6e 75 6c 6c 3d 3d 3d 74 3f 74 3d 4f Data Ascii: 3b28(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[36253],{36253:(C,e,r)=>{"use strict";var t=r(48704),n=r(16645),s=r(95688),o=r(15323),a=r(49995);let i,b,l=C=>C;var d=function(C,e,r,t){var n,s=arguments.length,o=s<3?e:null===t?t=O
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 65 78 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 6c 69 64 65 73 3f 28 74 68 69 73 2e 69 73 46 69 72 73 74 3f 74 68 69 73 2e 73 6c 69 64 65 73 2e 6c 65 6e 67 74 68 3a 74 68 69 73 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 2d 31 3a 30 7d 67 65 74 20 69 6e 76 61 6c 69 64 53 6c 69 64 65 73 28 29 7b 72 65 74 75 72 6e 21 74 68 69 73 2e 73 6c 69 64 65 73 7c 7c 74 68 69 73 2e 73 6c 69 64 65 73 26 26 74 68 69 73 2e 73 6c 69 64 65 73 2e 6c 65 6e 67 74 68 3c 3d 31 7d 64 69 73 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 28 29 7b 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 64 6f 77 6e 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 4b 65 79 50 72 65 73 73 65 64 29 7d 66 69 72 73 74 55 70 64 61 74 65 64 28 29 7b 74 Data Ascii: ex(){return this.slides?(this.isFirst?this.slides.length:this.selectedIndex)-1:0}get invalidSlides(){return!this.slides\|\|this.slides&&this.slides.length<=1}disconnectedCallback(){window.removeEventListener("keydown",this.handleKeyPressed)}firstUpdated(){t
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 74 6f 6e 22 20 63 6c 61 73 73 3d 22 70 61 67 65 72 20 70 6f 73 69 74 69 6f 6e 2d 61 62 73 6f 6c 75 74 65 20 73 74 61 72 74 2d 30 20 74 6f 70 2d 35 30 20 62 6f 74 74 6f 6d 2d 35 30 20 66 73 2d 31 20 7a 2d 31 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 3e 24 7b 30 7d 3c 2f 61 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 2d 66 6c 65 78 20 66 6c 65 78 2d 6e 6f 77 72 61 70 20 61 6c 69 67 6e 2d 69 74 65 6d 73 2d 63 65 6e 74 65 72 22 20 73 74 79 6c 65 3d 22 74 72 61 6e 73 66 6f 72 6d 3a 20 24 7b 30 7d 3b 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 74 72 61 6e 73 66 6f 72 6d 20 30 2e 35 73 20 65 61 73 65 3b 22 3e 20 3c 73 6c 6f 74 20 40 73 65 6c 65 63 74 2d 69 74 65 6d 3d 22 24 7b 30 7d 22 20 40 73 6c 6f 74 63 68 61 6e 67 65 3d 22 24 7b 30 7d 22 3e 3c 2f 73 6c 6f 74 Data Ascii: ton" class="pager position-absolute start-0 top-50 bottom-50 fs-1 z-1" @click="${0}">${0}</a> <div class="d-flex flex-nowrap align-items-center" style="transform: ${0}; transition: transform 0.5s ease;"> <slot @select-item="${0}" @slotchange="${0}"></slot
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 72 6e 28 30 2c 74 2e 68 74 6d 6c 29 28 75 7c 7c 28 75 3d 6d 60 20 3c 75 6c 20 63 6c 61 73 73 3d 22 64 2d 66 6c 65 78 20 67 61 70 2d 32 20 6d 74 2d 32 20 70 73 2d 30 22 3e 20 24 7b 30 7d 20 3c 2f 75 6c 3e 60 29 2c 41 72 72 61 79 2e 66 72 6f 6d 28 7b 6c 65 6e 67 74 68 3a 74 68 69 73 2e 74 6f 74 61 6c 49 74 65 6d 73 7d 29 2e 6d 61 70 28 28 28 43 2c 65 29 3d 3e 28 30 2c 74 2e 68 74 6d 6c 29 28 76 7c 7c 28 76 3d 6d 60 3c 6c 69 20 63 6c 61 73 73 3d 22 6c 69 73 74 2d 75 6e 73 74 79 6c 65 64 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 64 61 74 61 2d 62 73 2d 74 61 72 67 65 74 20 64 61 74 61 2d 69 6e 64 65 78 3d 22 24 7b 30 7d 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 3e 20 3c 61 20 63 6c 61 73 73 3d 22 72 6f 75 6e 64 65 64 2d 63 69 72 63 6c 65 20 64 2d 62 Data Ascii: rn(0,t.html)(u\|\|(u=m` <ul class="d-flex gap-2 mt-2 ps-0"> ${0} </ul>`),Array.from({length:this.totalItems}).map(((C,e)=>(0,t.html)(v\|\|(v=m`<li class="list-unstyled" role="button" data-bs-target data-index="${0}" @click="${0}"> <a class="rounded-circle d-b
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 5b 28 30 2c 6e 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 4f 62 6a 65 63 74 7d 29 5d 2c 77 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 6c 69 64 65 22 2c 76 6f 69 64 20 30 29 2c 6b 28 5b 28 30 2c 6e 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 7d 29 5d 2c 77 2e 70 72 6f 74 6f 74 79 70 65 2c 22 61 63 74 69 76 65 22 2c 76 6f 69 64 20 30 29 2c 77 3d 6b 28 5b 28 30 2c 6e 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 29 28 22 67 74 69 2d 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 5d 2c 77 29 3b 76 61 72 20 4d 3d 72 28 31 33 31 35 34 29 2c 4c 3d 72 2e 6e 28 4d 29 2c 78 3d 72 28 35 39 34 31 31 29 2c 5a 3d 72 2e 6e 28 78 29 2c 48 3d 72 28 39 34 30 33 32 29 2c 56 3d 72 2e 6e 28 48 29 2c 49 3d 72 28 39 38 34 32 37 29 2c 6a 3d 72 2e 6e 28 Data Ascii: [(0,n.property)({type:Object})],w.prototype,"slide",void 0),k([(0,n.property)({type:Boolean})],w.prototype,"active",void 0),w=k([(0,n.customElement)("gti-carousel-item")],w);var M=r(13154),L=r.n(M),x=r(59411),Z=r.n(x),H=r(94032),V=r.n(H),I=r(98427),j=r.n(
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 66 72 61 73 74 72 75 63 74 75 72 65 20 69 6e 74 6f 20 6f 75 72 20 69 6e 74 65 6c 6c 69 67 65 6e 63 65 20 61 6e 64 20 65 6e 72 69 63 68 20 79 6f 75 72 20 61 6e 61 6c 79 73 65 73 20 77 69 74 68 20 61 64 76 61 6e 63 65 64 20 63 6f 6e 74 65 78 74 75 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 6d 61 6c 69 63 69 6f 75 73 20 62 65 68 61 76 69 6f 72 73 20 6f 6e 20 74 68 65 20 49 6e 74 65 72 6e 65 74 2e 22 2c 62 75 74 74 6f 6e 3a 7b 68 72 65 66 3a 73 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 61 70 69 44 6f 63 73 22 29 2c 74 65 78 74 3a 22 41 50 49 20 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 22 7d 2c 69 6d 61 67 65 3a 5a 28 29 7d 2c 7b 74 69 74 6c 65 3a 22 44 69 64 20 79 6f 75 20 6b 6e 6f 77 2e 2e 2e 22 2c 73 75 6d 6d 61 72 79 3a Data Ascii: frastructure into our intelligence and enrich your analyses with advanced contextual information about malicious behaviors on the Internet.",button:{href:s.Z8.getRedirectUrl("apiDocs"),text:"API Documentation"},image:Z()},{title:"Did you know...",summary:
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 65 20 6c 61 74 65 73 74 20 74 68 72 65 61 74 73 2e 22 2c 62 75 74 74 6f 6e 3a 7b 68 72 65 66 3a 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 74 6f 72 65 2f 61 70 70 73 2f 64 65 74 61 69 6c 73 3f 69 64 3d 63 6f 6d 2e 66 75 6e 6e 79 63 61 74 2e 76 69 72 75 73 74 6f 74 61 6c 22 2c 74 65 78 74 3a 22 44 69 73 63 6f 76 65 72 20 4d 6f 62 69 6c 65 22 7d 2c 69 6d 61 67 65 3a 56 28 29 7d 5d 3b 6c 65 74 20 50 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 74 2e 4c 69 74 45 6c 65 6d 65 6e 74 7b 72 65 6e 64 65 72 28 29 7b 72 65 74 75 72 6e 28 30 2c 74 2e 68 74 6d 6c 29 28 53 7c 7c 28 53 3d 41 60 3c 67 74 69 2d 63 61 72 6f 75 73 65 6c 3e 24 7b 30 7d 3c 2f 67 74 69 2d 63 61 72 6f 75 73 65 6c 3e 60 29 2c 24 2e 6d 61 70 28 28 43 3d 3e 28 30 Data Ascii: e latest threats.",button:{href:"https://play.google.com/store/apps/details?id=com.funnycat.virustotal",text:"Discover Mobile"},image:V()}];let P=class extends t.LitElement{render(){return(0,t.html)(S\|\|(S=A`<gti-carousel>${0}</gti-carousel>`),$.map((C=>(0
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 67 62 3a 20 31 39 37 2c 20 33 36 2c 20 33 32 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 30 36 32 62 37 39 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 32 39 32 39 32 39 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 32 30 36 30 32 61 3b 2d 2d 62 73 2d 69 6e 66 6f 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 30 30 34 34 38 30 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 38 30 34 30 30 30 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 36 64 31 34 31 32 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a Data Ascii: gb: 197, 36, 32;--bs-primary-text-emphasis: #062b79;--bs-secondary-text-emphasis: #292929;--bs-success-text-emphasis: #20602a;--bs-info-text-emphasis: #004480;--bs-warning-text-emphasis: #804000;--bs-danger-text-emphasis: #6d1412;--bs-light-text-emphasis:
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 6c 6f 72 2d 72 67 62 3a 20 30 2c 20 30 2c 20 30 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 63 6f 6c 6f 72 3a 20 23 33 36 33 63 34 39 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 63 6f 6c 6f 72 2d 72 67 62 3a 20 35 34 2c 20 36 30 2c 20 37 33 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 67 3a 20 23 66 39 66 61 66 62 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 67 2d 72 67 62 3a 20 32 34 39 2c 20 32 35 30 2c 20 32 35 31 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 63 6f 6c 6f 72 3a 20 23 36 32 36 63 38 34 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 63 6f 6c 6f 72 2d 72 67 62 3a 20 39 38 2c 20 31 30 38 2c 20 31 33 32 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 62 67 3a 20 23 65 63 65 65 66 34 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d Data Ascii: lor-rgb: 0, 0, 0;--bs-secondary-color: #363c49;--bs-secondary-color-rgb: 54, 60, 73;--bs-secondary-bg: #f9fafb;--bs-secondary-bg-rgb: 249, 250, 251;--bs-tertiary-color: #626c84;--bs-tertiary-color-rgb: 98, 108, 132;--bs-tertiary-bg: #eceef4;--bs-tertiary-
2025-01-15 16:44:52 UTC	1390	IN	Data Raw: 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 40 6d 65 64 69 61 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 20 6e 6f 2d 70 72 65 66 65 72 65 6e 63 65 29 7b 3a 72 6f 6f 74 7b 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 3a 73 6d 6f 6f 74 68 7d 7d 68 32 2c 2e 68 32 2c 68 31 2c 2e 68 31 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 68 65 61 64 69 6e 67 2d 63 6f 6c 6f 72 29 7d 68 31 2c 2e 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 33 37 35 72 65 6d 20 2b 20 31 2e 35 76 77 29 7d 40 6d 65 64 69 Data Ascii: er{box-sizing:border-box}@media(prefers-reduced-motion: no-preference){:root{scroll-behavior:smooth}}h2,.h2,h1,.h1{margin-top:0;margin-bottom:.5rem;font-weight:500;line-height:1.2;color:var(--bs-heading-color)}h1,.h1{font-size:calc(1.375rem + 1.5vw)}@medi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.18	60844	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:53 UTC	511	OUT	GET /gui/25076.be47e378edc0f5eb13be.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0; _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1
2025-01-15 16:44:53 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:44:53 GMT expires: Thu, 15 Jan 2026 16:44:53 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 430f45b8020e7d458c33c34682cb7246 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:53 UTC	1003	IN	Data Raw: 36 36 31 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 35 30 37 36 5d 2c 7b 32 36 39 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 6e 2e 72 28 74 29 3b 76 61 72 20 72 3d 6e 28 34 38 37 30 34 29 2c 6f 3d 6e 28 31 36 36 34 35 29 2c 69 3d 6e 28 31 35 33 32 33 29 2c 73 3d 6e 28 35 36 37 31 37 29 2c 61 3d 6e 28 39 35 36 38 38 29 2c 63 3d 6e 28 34 34 30 35 32 29 3b 6c 65 74 20 6c 2c 75 2c 66 3d 65 3d 3e 65 3b 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 2c 73 29 7b 74 72 79 7b 76 61 72 20 61 3d 65 5b 69 5d 28 73 29 2c 63 3d 61 2e 76 61 6c 75 65 Data Ascii: 661"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[25076],{2695:(e,t,n)=>{n.r(t);var r=n(48704),o=n(16645),i=n(15323),s=n(56717),a=n(95688),c=n(44052);let l,u,f=e=>e;function d(e,t,n,r,o,i,s){try{var a=e[i](s),c=a.value
2025-01-15 16:44:53 UTC	642	IN	Data Raw: 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 64 28 69 2c 72 2c 6f 2c 73 2c 61 2c 22 74 68 72 6f 77 22 2c 65 29 7d 73 28 76 6f 69 64 20 30 29 7d 29 29 7d 29 28 29 7d 73 74 61 74 69 63 20 67 65 74 20 73 74 79 6c 65 73 28 29 7b 72 65 74 75 72 6e 28 30 2c 72 2e 63 73 73 29 28 6c 7c 7c 28 6c 3d 66 60 3a 68 6f 73 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 30 32 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 62 67 29 3b 70 61 64 64 69 6e 67 3a 31 2e 32 38 72 65 6d 7d 73 76 67 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 31 73 20 6c 69 Data Ascii: )}function a(e){d(i,r,o,s,a,"throw",e)}s(void 0)}))})()}static get styles(){return(0,r.css)(l\|\|(l=f`:host{display:block;position:absolute;top:0;left:0;right:0;bottom:0;z-index:102;background-color:var(--bs-body-bg);padding:1.28rem}svg{animation:spin 1s li

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.18	60845	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:53 UTC	690	OUT	GET /gui/88116.6518b1d1356f23e2144b.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0; _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1
2025-01-15 16:44:53 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:44:53 GMT expires: Thu, 15 Jan 2026 16:44:53 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 7279e79f7db6d0275355068cc4b6a15b content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:53 UTC	1003	IN	Data Raw: 33 39 39 65 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 31 31 36 2c 38 36 32 34 33 5d 2c 7b 31 30 32 31 32 3a 28 65 2c 72 2c 74 29 3d 3e 7b 76 61 72 20 6f 3d 74 28 34 38 37 30 34 29 2c 73 3d 74 28 31 36 36 34 35 29 2c 69 3d 74 28 36 32 38 33 32 29 2c 61 3d 74 28 31 35 33 32 33 29 2c 6e 3d 74 28 33 30 31 33 32 29 2c 62 3d 74 28 39 35 36 38 38 29 2c 64 3d 74 28 34 39 36 30 38 29 3b 6c 65 74 20 63 2c 6c 2c 75 3d 65 3d 3e 65 3b 76 61 72 20 70 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 2c 6f 29 7b 76 61 72 20 73 2c 69 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: 399e"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[88116,86243],{10212:(e,r,t)=>{var o=t(48704),s=t(16645),i=t(62832),a=t(15323),n=t(30132),b=t(95688),d=t(49608);let c,l,u=e=>e;var p=function(e,r,t,o){var s,i=arguments
2025-01-15 16:44:53 UTC	1390	IN	Data Raw: 2e 68 72 65 66 3d 22 24 7b 30 7d 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 73 74 61 63 6b 20 66 73 2d 35 22 3e 24 7b 30 7d 3c 2f 64 69 76 3e 20 3c 73 70 61 6e 3e 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 63 61 70 69 74 61 6c 69 7a 65 22 3e 24 7b 30 7d 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 20 3c 2f 61 3e 20 60 29 2c 28 30 2c 69 2e 63 6c 61 73 73 4d 61 70 29 28 7b 64 69 73 61 62 6c 65 64 3a 74 68 69 73 2e 64 69 73 61 62 6c 65 64 7d 29 2c 74 68 69 73 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 65 2c 74 68 69 73 2e 72 65 64 69 72 65 63 74 54 6f 29 2c 66 5b 65 5d 2c 65 29 29 29 29 7d 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 65 2c 72 29 7b 63 6f 6e 73 74 20 74 3d 62 2e 5a 38 2e 67 65 74 52 Data Ascii: .href="${0}"> <div class="hstack fs-5">${0}</div> <span>Continue with <span class="text-capitalize">${0}</span></span> </a> `),(0,i.classMap)({disabled:this.disabled}),this.getRedirectUrl(e,this.redirectTo),f[e],e))))}getRedirectUrl(e,r){const t=b.Z8.getR
2025-01-15 16:44:53 UTC	1390	IN	Data Raw: 20 6e 28 65 29 7b 78 28 69 2c 6f 2c 73 2c 61 2c 6e 2c 22 74 68 72 6f 77 22 2c 65 29 7d 61 28 76 6f 69 64 20 30 29 7d 29 29 7d 7d 76 61 72 20 52 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 2c 6f 29 7b 76 61 72 20 73 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 61 3d 69 3c 33 3f 72 3a 6e 75 6c 6c 3d 3d 3d 6f 3f 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 72 2c 74 29 3a 6f 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 29 61 3d 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 28 65 2c 72 2c 74 2c 6f 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 Data Ascii: n(e){x(i,o,s,a,n,"throw",e)}a(void 0)}))}}var R=function(e,r,t,o){var s,i=arguments.length,a=i<3?r:null===o?o=Object.getOwnPropertyDescriptor(r,t):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(e,r,t,o);else for(var
2025-01-15 16:44:53 UTC	1390	IN	Data Raw: 74 50 72 6f 76 69 64 65 72 55 72 6c 28 65 29 7b 76 61 72 20 72 2c 74 3b 69 66 28 6e 75 6c 6c 21 3d 3d 28 72 3d 65 2e 6d 65 74 61 29 26 26 76 6f 69 64 20 30 21 3d 3d 72 26 26 72 2e 6c 6f 67 69 6e 5f 75 72 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 6d 65 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6c 6f 67 69 6e 5f 75 72 6c 3b 7b 76 61 72 20 6f 2c 73 3b 63 6f 6e 73 74 20 72 3d 6e 75 6c 6c 21 3d 3d 28 6f 3d 65 2e 6d 65 74 61 29 26 26 76 6f 69 64 20 30 21 3d 3d 6f 26 26 6f 2e 70 72 6f 76 69 64 65 72 5f 69 64 3f 6e 75 6c 6c 3d 3d 3d 28 73 3d 65 2e 6d 65 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 73 3f 76 6f 69 64 20 30 3a 73 2e 70 72 6f 76 69 64 65 72 5f 69 64 2e 73 70 6c 69 74 28 22 2e 22 29 5b 30 5d 3a 22 22 Data Ascii: tProviderUrl(e){var r,t;if(null!==(r=e.meta)&&void 0!==r&&r.login_url)return null===(t=e.meta)\|\|void 0===t?void 0:t.login_url;{var o,s;const r=null!==(o=e.meta)&&void 0!==o&&o.provider_id?null===(s=e.meta)\|\|void 0===s?void 0:s.provider_id.split(".")[0]:""
2025-01-15 16:44:53 UTC	1390	IN	Data Raw: 65 29 2c 79 69 65 6c 64 20 6c 2e 4e 55 2e 75 70 64 61 74 65 55 73 65 72 28 28 28 29 3d 3e 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 7b 64 61 74 61 3a 65 7d 29 29 29 2c 6e 75 6c 6c 21 3d 3d 28 74 3d 6c 2e 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 26 26 74 2e 67 74 69 41 63 63 65 73 73 29 74 72 79 7b 79 69 65 6c 64 20 72 2e 73 65 74 55 70 47 74 69 53 69 67 6e 49 6e 28 29 7d 63 61 74 63 68 28 65 29 7b 62 2e 54 2e 68 61 6e 64 6c 65 45 72 72 6f 72 28 65 29 7d 6e 75 6c 6c 21 3d 3d 28 6f 3d 6c 2e 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 6f 26 26 6f 2e 67 74 69 41 63 63 65 73 73 26 26 72 2e 74 6f 6b 65 6e 26 26 72 2e 72 65 64 69 72 65 63 74 55 72 69 26 26 21 64 2e 5a 38 2e 72 6f 6f Data Ascii: e),yield l.NU.updateUser((()=>Promise.resolve({data:e}))),null!==(t=l.NU.currentUser)&&void 0!==t&&t.gtiAccess)try{yield r.setUpGtiSignIn()}catch(e){b.T.handleError(e)}null!==(o=l.NU.currentUser)&&void 0!==o&&o.gtiAccess&&r.token&&r.redirectUri&&!d.Z8.roo
2025-01-15 16:44:53 UTC	1390	IN	Data Raw: 7b 30 7d 22 20 63 6c 61 73 73 3d 22 64 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 20 66 77 2d 62 6f 6c 64 20 67 61 70 2d 32 20 6c 69 6e 6b 2d 70 72 69 6d 61 72 79 20 6d 62 2d 34 22 3e 20 3c 69 20 63 6c 61 73 73 3d 22 68 73 74 61 63 6b 20 66 73 2d 35 22 3e 20 24 7b 30 7d 20 3c 2f 69 3e 20 47 6f 20 62 61 63 6b 20 3c 2f 61 3e 20 3c 68 34 20 63 6c 61 73 73 3d 22 6d 62 2d 34 22 3e 53 69 67 6e 20 69 6e 20 61 6e 64 20 73 74 6f 70 20 74 68 72 65 61 74 73 3c 2f 68 34 3e 20 3c 64 69 76 3e 20 4e 6f 74 20 61 20 6d 65 6d 62 65 72 3f 20 3c 61 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 2d 70 72 69 6d 61 72 79 20 66 77 2d 62 6f 6c 64 22 20 68 72 65 66 3d 22 24 7b 30 7d 22 3e 53 69 67 6e 20 75 70 3c 2f 61 3e 20 3c 2f 64 69 76 3e 20 24 7b 30 7d 20 24 7b 30 7d 20 3c 68 72 20 63 6c 61 73 Data Ascii: {0}" class="d-inline-flex fw-bold gap-2 link-primary mb-4"> <i class="hstack fs-5"> ${0} </i> Go back </a> <h4 class="mb-4">Sign in and stop threats</h4> <div> Not a member? <a class="link-primary fw-bold" href="${0}">Sign up</a> </div> ${0} ${0} <hr clas
2025-01-15 16:44:53 UTC	1390	IN	Data Raw: 6c 6c 63 68 65 63 6b 3d 22 66 61 6c 73 65 22 20 2e 76 61 6c 75 65 3d 22 24 7b 30 7d 22 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 67 72 6f 75 70 22 20 3f 68 69 64 64 65 6e 3d 22 24 7b 30 7d 22 3e 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 6c 61 62 65 6c 20 6d 74 2d 34 22 3e 50 61 73 73 77 6f 72 64 3c 2f 6c 61 62 65 6c 3e 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 22 20 69 64 3d 22 70 61 73 73 77 6f 72 64 22 20 6e 61 6d 65 3d 22 70 61 73 73 77 6f 72 64 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 54 79 70 65 20 69 6e 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 22 20 61 75 74 6f Data Ascii: llcheck="false" .value="${0}"> </div> <div class="form-group" ?hidden="${0}"> <label for="password" class="form-label mt-4">Password</label> <input type="password" class="form-control" id="password" name="password" placeholder="Type in your password" auto
2025-01-15 16:44:53 UTC	1390	IN	Data Raw: 65 6e 64 65 72 47 74 69 53 69 67 6e 49 6e 48 69 64 64 65 6e 46 6f 72 6d 28 29 7b 72 65 74 75 72 6e 28 30 2c 69 2e 68 74 6d 6c 29 28 6b 7c 7c 28 6b 3d 77 60 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 20 69 64 3d 22 68 69 64 64 65 6e 46 6f 72 6d 22 20 61 63 74 69 6f 6e 3d 22 24 7b 30 7d 22 20 68 69 64 64 65 6e 3e 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 20 76 61 6c 75 65 3d 22 24 7b 30 7d 22 3e 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 72 65 64 69 72 65 63 74 5f 75 72 69 22 20 76 61 6c 75 65 3d 22 24 7b 30 7d 22 3e 20 3c 2f 66 6f 72 6d 3e 60 29 2c 64 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 6d 61 6e 64 69 61 6e 74 4c 6f 67 Data Ascii: enderGtiSignInHiddenForm(){return(0,i.html)(k\|\|(k=w`<form method="post" id="hiddenForm" action="${0}" hidden> <input type="hidden" name="token" value="${0}"> <input type="hidden" name="redirect_uri" value="${0}"> </form>`),d.Z8.getRedirectUrl("mandiantLog
2025-01-15 16:44:53 UTC	1390	IN	Data Raw: 6c 65 3a 20 23 36 66 34 32 63 31 3b 2d 2d 62 73 2d 70 69 6e 6b 3a 20 23 30 30 30 30 30 30 3b 2d 2d 62 73 2d 72 65 64 3a 20 23 63 35 32 34 32 30 3b 2d 2d 62 73 2d 6f 72 61 6e 67 65 3a 20 23 65 35 37 33 30 30 3b 2d 2d 62 73 2d 79 65 6c 6c 6f 77 3a 20 23 66 63 65 39 36 37 3b 2d 2d 62 73 2d 67 72 65 65 6e 3a 20 23 33 39 61 63 34 63 3b 2d 2d 62 73 2d 74 65 61 6c 3a 20 23 32 30 63 39 39 37 3b 2d 2d 62 73 2d 63 79 61 6e 3a 20 23 32 38 37 62 62 35 3b 2d 2d 62 73 2d 62 6c 61 63 6b 3a 20 23 30 30 30 3b 2d 2d 62 73 2d 77 68 69 74 65 3a 20 23 66 66 66 3b 2d 2d 62 73 2d 67 72 61 79 3a 20 23 36 36 36 36 36 36 3b 2d 2d 62 73 2d 67 72 61 79 2d 64 61 72 6b 3a 20 23 33 33 33 33 33 33 3b 2d 2d 62 73 2d 67 72 61 79 2d 31 30 30 3a 20 23 66 39 66 39 66 39 3b 2d 2d 62 73 2d 67 Data Ascii: le: #6f42c1;--bs-pink: #000000;--bs-red: #c52420;--bs-orange: #e57300;--bs-yellow: #fce967;--bs-green: #39ac4c;--bs-teal: #20c997;--bs-cyan: #287bb5;--bs-black: #000;--bs-white: #fff;--bs-gray: #666666;--bs-gray-dark: #333333;--bs-gray-100: #f9f9f9;--bs-g
2025-01-15 16:44:53 UTC	1390	IN	Data Raw: 37 39 39 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 65 38 61 37 61 36 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 66 32 66 32 66 32 3b 2d 2d 62 73 2d 64 61 72 6b 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 62 33 62 33 62 33 3b 2d 2d 62 73 2d 77 68 69 74 65 2d 72 67 62 3a 20 32 35 35 2c 20 32 35 35 2c 20 32 35 35 3b 2d 2d 62 73 2d 62 6c 61 63 6b 2d 72 67 62 3a 20 30 2c 20 30 2c 20 30 3b 2d 2d 62 73 2d 66 6f 6e 74 2d 73 61 6e 73 2d 73 65 72 69 66 3a 20 22 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 22 2c 20 52 6f 62 6f 74 6f 2c 20 52 6f 62 6f 74 6f 44 72 61 66 74 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 2d 2d 62 73 Data Ascii: 799;--bs-danger-border-subtle: #e8a7a6;--bs-light-border-subtle: #f2f2f2;--bs-dark-border-subtle: #b3b3b3;--bs-white-rgb: 255, 255, 255;--bs-black-rgb: 0, 0, 0;--bs-font-sans-serif: "Source Sans Pro", Roboto, RobotoDraft, Helvetica, Arial, sans-serif;--bs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.18	60847	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:53 UTC	703	OUT	GET /gui/vt-ui-sw-installer.3166763520a2b299ee12.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0; _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1
2025-01-15 16:44:53 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:44:53 GMT expires: Thu, 15 Jan 2026 16:44:53 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 7279e79f7db6d0275355068cc4b6a15b content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:53 UTC	1003	IN	Data Raw: 32 33 64 65 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 30 30 33 36 5d 2c 7b 32 30 36 39 39 3a 28 74 2c 6e 2c 65 29 3d 3e 7b 65 2e 72 28 6e 29 2c 65 2e 64 28 6e 2c 7b 56 74 55 69 53 77 49 6e 73 74 61 6c 6c 65 72 3a 28 29 3d 3e 4c 7d 29 3b 65 28 39 38 39 31 29 3b 76 61 72 20 72 3d 65 28 34 38 37 30 34 29 2c 69 3d 65 28 31 36 36 34 35 29 3b 74 72 79 7b 73 65 6c 66 5b 22 77 6f 72 6b 62 6f 78 3a 77 69 6e 64 6f 77 3a 37 2e 30 2e 30 22 5d 26 26 5f 28 29 7d 63 61 74 63 68 28 6f 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 Data Ascii: 23de"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[70036],{20699:(t,n,e)=>{e.r(n),e.d(n,{VtUiSwInstaller:()=>L});e(9891);var r=e(48704),i=e(16645);try{self["workbox:window:7.0.0"]&&_()}catch(o){}function o(t,n){return
2025-01-15 16:44:53 UTC	1390	IN	Data Raw: 74 68 29 3b 66 6f 72 28 76 61 72 20 65 3d 30 2c 72 3d 6e 65 77 20 41 72 72 61 79 28 6e 29 3b 65 3c 6e 3b 65 2b 2b 29 72 5b 65 5d 3d 74 5b 65 5d 3b 72 65 74 75 72 6e 20 72 7d 74 72 79 7b 73 65 6c 66 5b 22 77 6f 72 6b 62 6f 78 3a 63 6f 72 65 3a 37 2e 30 2e 30 22 5d 26 26 5f 28 29 7d 63 61 74 63 68 28 6f 29 7b 7d 76 61 72 20 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 74 2e 72 65 73 6f 6c 76 65 3d 6e 2c 74 2e 72 65 6a 65 63 74 3d 65 7d 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 76 28 74 2c 6e 29 7b 76 61 72 20 65 3d 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 72 65 74 75 72 6e 20 6e 65 77 20 55 52 4c 28 74 2c 65 29 2e Data Ascii: th);for(var e=0,r=new Array(n);e<n;e++)r[e]=t[e];return r}try{self["workbox:core:7.0.0"]&&_()}catch(o){}var l=function(){var t=this;this.promise=new Promise((function(n,e){t.resolve=n,t.reject=e}))};function v(t,n){var e=location.href;return new URL(t,e).
2025-01-15 16:44:53 UTC	1390	IN	Data Raw: 69 6e 61 6c 45 76 65 6e 74 3a 74 2c 73 77 3a 6e 2c 69 73 55 70 64 61 74 65 3a 72 2e 6d 6e 7d 29 29 2c 65 7c 7c 72 2e 6f 6e 2e 72 65 73 6f 6c 76 65 28 6e 29 7d 2c 72 2e 67 6e 3d 28 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 2e 64 61 74 61 2c 65 3d 74 2e 70 6f 72 74 73 2c 69 3d 74 2e 73 6f 75 72 63 65 3b 72 65 74 75 72 6e 20 68 28 72 2e 67 65 74 53 57 28 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 6e 2e 68 61 73 28 69 29 26 26 72 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 66 28 22 6d 65 73 73 61 67 65 22 2c 7b 64 61 74 61 3a 6e 2c 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 3a 74 2c 70 6f 72 74 73 3a 65 2c 73 77 3a 69 7d 29 29 7d 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 Data Ascii: inalEvent:t,sw:n,isUpdate:r.mn})),e\|\|r.on.resolve(n)},r.gn=(i=function(t){var n=t.data,e=t.ports,i=t.source;return h(r.getSW(),(function(){r.an.has(i)&&r.dispatchEvent(new f("message",{data:n,originalEvent:t,ports:e,sw:i}))}))},function(){for(var t=[],n=0
2025-01-15 16:44:53 UTC	1390	IN	Data Raw: 6e 65 72 28 22 63 6f 6e 74 72 6f 6c 6c 65 72 63 68 61 6e 67 65 22 2c 72 2e 79 6e 29 2c 72 2e 66 6e 7d 29 29 7d 29 29 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 74 29 7d 7d 2c 75 2e 75 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 6e 3f 68 28 70 28 74 68 69 73 2e 66 6e 2e 75 70 64 61 74 65 28 29 29 29 3a 68 28 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 74 29 7d 7d 2c 75 2e 67 65 74 53 57 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 68 6e 3f 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 74 68 69 73 2e 68 6e 29 3a 74 68 69 73 2e 72 6e 2e Data Ascii: ner("controllerchange",r.yn),r.fn}))})))}catch(t){return Promise.reject(t)}},u.update=function(){try{return this.fn?h(p(this.fn.update())):h()}catch(t){return Promise.reject(t)}},u.getSW=function(){return void 0!==this.hn?Promise.resolve(this.hn):this.rn.
2025-01-15 16:44:53 UTC	1390	IN	Data Raw: 72 6e 28 65 3d 65 2e 63 61 6c 6c 28 74 29 29 2e 6e 65 78 74 2e 62 69 6e 64 28 65 29 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 7c 7c 28 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 69 66 28 74 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 75 28 74 2c 6e 29 3b 76 61 72 20 65 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 3b 72 65 74 75 72 6e 22 4f 62 6a 65 63 74 22 3d 3d 3d 65 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 28 65 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 2c 22 4d 61 70 22 3d 3d 3d 65 7c 7c 22 53 65 74 22 3d 3d 3d 65 3f 41 72 72 61 79 2e 66 72 6f 6d 28 74 29 3a 22 Data Ascii: rn(e=e.call(t)).next.bind(e);if(Array.isArray(t)\|\|(e=function(t,n){if(t){if("string"==typeof t)return u(t,n);var e=Object.prototype.toString.call(t).slice(8,-1);return"Object"===e&&t.constructor&&(e=t.constructor.name),"Map"===e\|\|"Set"===e?Array.from(t):"
2025-01-15 16:44:53 UTC	1390	IN	Data Raw: 33 3f 69 28 61 29 3a 6f 3e 33 3f 69 28 6e 2c 65 2c 61 29 3a 69 28 6e 2c 65 29 29 7c 7c 61 29 3b 72 65 74 75 72 6e 20 6f 3e 33 26 26 61 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 65 2c 61 29 2c 61 7d 3b 63 6f 6e 73 74 20 78 3d 6e 65 77 20 53 65 74 28 5b 22 64 6f 67 66 6f 6f 64 5f 76 74 69 22 2c 22 64 6f 67 66 6f 6f 64 22 2c 22 61 64 72 69 61 6e 7a 22 2c 22 72 65 63 69 6f 6d 6f 72 61 6e 22 2c 22 44 69 76 69 65 69 22 2c 22 64 61 6e 69 65 6c 76 61 7a 71 75 65 7a 22 2c 22 6d 67 6c 65 7a 73 6f 73 61 22 5d 29 3b 6c 65 74 20 4c 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 72 2e 4c 69 74 45 6c 65 6d 65 6e 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 69 Data Ascii: 3?i(a):o>3?i(n,e,a):i(n,e))\|\|a);return o>3&&a&&Object.defineProperty(n,e,a),a};const x=new Set(["dogfood_vti","dogfood","adrianz","reciomoran","Diviei","danielvazquez","mglezsosa"]);let L=class extends r.LitElement{constructor(){super(...arguments),this.i
2025-01-15 16:44:53 UTC	1242	IN	Data Raw: 7d 29 29 29 29 7d 29 29 28 29 7d 6c 6f 67 41 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 53 57 22 2c 74 29 2c 62 2e 4b 4b 2e 73 65 6e 64 41 6e 61 6c 79 74 69 63 73 45 76 65 6e 74 28 22 73 77 22 2c 74 29 7d 72 65 6e 64 65 72 28 29 7b 69 66 28 74 68 69 73 2e 69 73 53 68 6f 77 69 6e 67 29 72 65 74 75 72 6e 28 30 2c 72 2e 68 74 6d 6c 29 28 45 7c 7c 28 45 3d 6a 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 22 3e 20 3c 64 69 76 3e 20 4e 65 77 20 61 70 70 20 76 65 72 73 69 6f 6e 20 69 73 20 61 76 61 69 6c 61 62 6c 65 2e 20 3c 61 20 68 72 65 66 3d 22 23 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 3e 52 65 6c 6f 61 64 3c 2f 61 3e 3f 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 6f 73 Data Ascii: }))))}))()}logAction(t){console.log("SW",t),b.KK.sendAnalyticsEvent("sw",t)}render(){if(this.isShowing)return(0,r.html)(E\|\|(E=j` <div class="content"> <div> New app version is available. <a href="#" @click="${0}">Reload</a>? </div> </div> <div class="clos

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.18	60848	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:53 UTC	511	OUT	GET /gui/36253.6f4dc6a9d8dab2123ae5.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0; _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1
2025-01-15 16:44:53 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:44:53 GMT expires: Thu, 15 Jan 2026 16:44:53 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: e7393bbb1408fe9c861645f9c70284ea content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:53 UTC	1003	IN	Data Raw: 33 39 36 37 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 36 32 35 33 5d 2c 7b 33 36 32 35 33 3a 28 43 2c 65 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 72 28 34 38 37 30 34 29 2c 6e 3d 72 28 31 36 36 34 35 29 2c 73 3d 72 28 39 35 36 38 38 29 2c 6f 3d 72 28 31 35 33 32 33 29 2c 61 3d 72 28 34 39 39 39 35 29 3b 6c 65 74 20 69 2c 62 2c 6c 3d 43 3d 3e 43 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 65 2c 72 2c 74 29 7b 76 61 72 20 6e 2c 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6f 3d 73 3c 33 3f 65 3a 6e 75 6c 6c 3d 3d 3d 74 3f 74 3d 4f Data Ascii: 3967(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[36253],{36253:(C,e,r)=>{"use strict";var t=r(48704),n=r(16645),s=r(95688),o=r(15323),a=r(49995);let i,b,l=C=>C;var d=function(C,e,r,t){var n,s=arguments.length,o=s<3?e:null===t?t=O
2025-01-15 16:44:53 UTC	1390	IN	Data Raw: 65 78 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 6c 69 64 65 73 3f 28 74 68 69 73 2e 69 73 46 69 72 73 74 3f 74 68 69 73 2e 73 6c 69 64 65 73 2e 6c 65 6e 67 74 68 3a 74 68 69 73 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 2d 31 3a 30 7d 67 65 74 20 69 6e 76 61 6c 69 64 53 6c 69 64 65 73 28 29 7b 72 65 74 75 72 6e 21 74 68 69 73 2e 73 6c 69 64 65 73 7c 7c 74 68 69 73 2e 73 6c 69 64 65 73 26 26 74 68 69 73 2e 73 6c 69 64 65 73 2e 6c 65 6e 67 74 68 3c 3d 31 7d 64 69 73 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 28 29 7b 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6b 65 79 64 6f 77 6e 22 2c 74 68 69 73 2e 68 61 6e 64 6c 65 4b 65 79 50 72 65 73 73 65 64 29 7d 66 69 72 73 74 55 70 64 61 74 65 64 28 29 7b 74 Data Ascii: ex(){return this.slides?(this.isFirst?this.slides.length:this.selectedIndex)-1:0}get invalidSlides(){return!this.slides\|\|this.slides&&this.slides.length<=1}disconnectedCallback(){window.removeEventListener("keydown",this.handleKeyPressed)}firstUpdated(){t
2025-01-15 16:44:53 UTC	1390	IN	Data Raw: 74 6f 6e 22 20 63 6c 61 73 73 3d 22 70 61 67 65 72 20 70 6f 73 69 74 69 6f 6e 2d 61 62 73 6f 6c 75 74 65 20 73 74 61 72 74 2d 30 20 74 6f 70 2d 35 30 20 62 6f 74 74 6f 6d 2d 35 30 20 66 73 2d 31 20 7a 2d 31 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 3e 24 7b 30 7d 3c 2f 61 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 64 2d 66 6c 65 78 20 66 6c 65 78 2d 6e 6f 77 72 61 70 20 61 6c 69 67 6e 2d 69 74 65 6d 73 2d 63 65 6e 74 65 72 22 20 73 74 79 6c 65 3d 22 74 72 61 6e 73 66 6f 72 6d 3a 20 24 7b 30 7d 3b 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 74 72 61 6e 73 66 6f 72 6d 20 30 2e 35 73 20 65 61 73 65 3b 22 3e 20 3c 73 6c 6f 74 20 40 73 65 6c 65 63 74 2d 69 74 65 6d 3d 22 24 7b 30 7d 22 20 40 73 6c 6f 74 63 68 61 6e 67 65 3d 22 24 7b 30 7d 22 3e 3c 2f 73 6c 6f 74 Data Ascii: ton" class="pager position-absolute start-0 top-50 bottom-50 fs-1 z-1" @click="${0}">${0}</a> <div class="d-flex flex-nowrap align-items-center" style="transform: ${0}; transition: transform 0.5s ease;"> <slot @select-item="${0}" @slotchange="${0}"></slot
2025-01-15 16:44:53 UTC	1390	IN	Data Raw: 72 6e 28 30 2c 74 2e 68 74 6d 6c 29 28 75 7c 7c 28 75 3d 6d 60 20 3c 75 6c 20 63 6c 61 73 73 3d 22 64 2d 66 6c 65 78 20 67 61 70 2d 32 20 6d 74 2d 32 20 70 73 2d 30 22 3e 20 24 7b 30 7d 20 3c 2f 75 6c 3e 60 29 2c 41 72 72 61 79 2e 66 72 6f 6d 28 7b 6c 65 6e 67 74 68 3a 74 68 69 73 2e 74 6f 74 61 6c 49 74 65 6d 73 7d 29 2e 6d 61 70 28 28 28 43 2c 65 29 3d 3e 28 30 2c 74 2e 68 74 6d 6c 29 28 76 7c 7c 28 76 3d 6d 60 3c 6c 69 20 63 6c 61 73 73 3d 22 6c 69 73 74 2d 75 6e 73 74 79 6c 65 64 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 64 61 74 61 2d 62 73 2d 74 61 72 67 65 74 20 64 61 74 61 2d 69 6e 64 65 78 3d 22 24 7b 30 7d 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 3e 20 3c 61 20 63 6c 61 73 73 3d 22 72 6f 75 6e 64 65 64 2d 63 69 72 63 6c 65 20 64 2d 62 Data Ascii: rn(0,t.html)(u\|\|(u=m` <ul class="d-flex gap-2 mt-2 ps-0"> ${0} </ul>`),Array.from({length:this.totalItems}).map(((C,e)=>(0,t.html)(v\|\|(v=m`<li class="list-unstyled" role="button" data-bs-target data-index="${0}" @click="${0}"> <a class="rounded-circle d-b
2025-01-15 16:44:53 UTC	1390	IN	Data Raw: 5b 28 30 2c 6e 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 4f 62 6a 65 63 74 7d 29 5d 2c 77 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 6c 69 64 65 22 2c 76 6f 69 64 20 30 29 2c 6b 28 5b 28 30 2c 6e 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 7d 29 5d 2c 77 2e 70 72 6f 74 6f 74 79 70 65 2c 22 61 63 74 69 76 65 22 2c 76 6f 69 64 20 30 29 2c 77 3d 6b 28 5b 28 30 2c 6e 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 29 28 22 67 74 69 2d 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 5d 2c 77 29 3b 76 61 72 20 4d 3d 72 28 31 33 31 35 34 29 2c 4c 3d 72 2e 6e 28 4d 29 2c 78 3d 72 28 35 39 34 31 31 29 2c 5a 3d 72 2e 6e 28 78 29 2c 48 3d 72 28 39 34 30 33 32 29 2c 56 3d 72 2e 6e 28 48 29 2c 49 3d 72 28 39 38 34 32 37 29 2c 6a 3d 72 2e 6e 28 Data Ascii: [(0,n.property)({type:Object})],w.prototype,"slide",void 0),k([(0,n.property)({type:Boolean})],w.prototype,"active",void 0),w=k([(0,n.customElement)("gti-carousel-item")],w);var M=r(13154),L=r.n(M),x=r(59411),Z=r.n(x),H=r(94032),V=r.n(H),I=r(98427),j=r.n(
2025-01-15 16:44:53 UTC	1390	IN	Data Raw: 66 72 61 73 74 72 75 63 74 75 72 65 20 69 6e 74 6f 20 6f 75 72 20 69 6e 74 65 6c 6c 69 67 65 6e 63 65 20 61 6e 64 20 65 6e 72 69 63 68 20 79 6f 75 72 20 61 6e 61 6c 79 73 65 73 20 77 69 74 68 20 61 64 76 61 6e 63 65 64 20 63 6f 6e 74 65 78 74 75 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 6d 61 6c 69 63 69 6f 75 73 20 62 65 68 61 76 69 6f 72 73 20 6f 6e 20 74 68 65 20 49 6e 74 65 72 6e 65 74 2e 22 2c 62 75 74 74 6f 6e 3a 7b 68 72 65 66 3a 73 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 61 70 69 44 6f 63 73 22 29 2c 74 65 78 74 3a 22 41 50 49 20 44 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 22 7d 2c 69 6d 61 67 65 3a 5a 28 29 7d 2c 7b 74 69 74 6c 65 3a 22 44 69 64 20 79 6f 75 20 6b 6e 6f 77 2e 2e 2e 22 2c 73 75 6d 6d 61 72 79 3a Data Ascii: frastructure into our intelligence and enrich your analyses with advanced contextual information about malicious behaviors on the Internet.",button:{href:s.Z8.getRedirectUrl("apiDocs"),text:"API Documentation"},image:Z()},{title:"Did you know...",summary:
2025-01-15 16:44:53 UTC	1390	IN	Data Raw: 65 20 6c 61 74 65 73 74 20 74 68 72 65 61 74 73 2e 22 2c 62 75 74 74 6f 6e 3a 7b 68 72 65 66 3a 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 74 6f 72 65 2f 61 70 70 73 2f 64 65 74 61 69 6c 73 3f 69 64 3d 63 6f 6d 2e 66 75 6e 6e 79 63 61 74 2e 76 69 72 75 73 74 6f 74 61 6c 22 2c 74 65 78 74 3a 22 44 69 73 63 6f 76 65 72 20 4d 6f 62 69 6c 65 22 7d 2c 69 6d 61 67 65 3a 56 28 29 7d 5d 3b 6c 65 74 20 50 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 74 2e 4c 69 74 45 6c 65 6d 65 6e 74 7b 72 65 6e 64 65 72 28 29 7b 72 65 74 75 72 6e 28 30 2c 74 2e 68 74 6d 6c 29 28 53 7c 7c 28 53 3d 41 60 3c 67 74 69 2d 63 61 72 6f 75 73 65 6c 3e 24 7b 30 7d 3c 2f 67 74 69 2d 63 61 72 6f 75 73 65 6c 3e 60 29 2c 24 2e 6d 61 70 28 28 43 3d 3e 28 30 Data Ascii: e latest threats.",button:{href:"https://play.google.com/store/apps/details?id=com.funnycat.virustotal",text:"Discover Mobile"},image:V()}];let P=class extends t.LitElement{render(){return(0,t.html)(S\|\|(S=A`<gti-carousel>${0}</gti-carousel>`),$.map((C=>(0
2025-01-15 16:44:53 UTC	1390	IN	Data Raw: 67 62 3a 20 31 39 37 2c 20 33 36 2c 20 33 32 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 30 36 32 62 37 39 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 32 39 32 39 32 39 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 32 30 36 30 32 61 3b 2d 2d 62 73 2d 69 6e 66 6f 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 30 30 34 34 38 30 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 38 30 34 30 30 30 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 36 64 31 34 31 32 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a Data Ascii: gb: 197, 36, 32;--bs-primary-text-emphasis: #062b79;--bs-secondary-text-emphasis: #292929;--bs-success-text-emphasis: #20602a;--bs-info-text-emphasis: #004480;--bs-warning-text-emphasis: #804000;--bs-danger-text-emphasis: #6d1412;--bs-light-text-emphasis:
2025-01-15 16:44:53 UTC	1390	IN	Data Raw: 6c 6f 72 2d 72 67 62 3a 20 30 2c 20 30 2c 20 30 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 63 6f 6c 6f 72 3a 20 23 33 36 33 63 34 39 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 63 6f 6c 6f 72 2d 72 67 62 3a 20 35 34 2c 20 36 30 2c 20 37 33 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 67 3a 20 23 66 39 66 61 66 62 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 67 2d 72 67 62 3a 20 32 34 39 2c 20 32 35 30 2c 20 32 35 31 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 63 6f 6c 6f 72 3a 20 23 36 32 36 63 38 34 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 63 6f 6c 6f 72 2d 72 67 62 3a 20 39 38 2c 20 31 30 38 2c 20 31 33 32 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 62 67 3a 20 23 65 63 65 65 66 34 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d Data Ascii: lor-rgb: 0, 0, 0;--bs-secondary-color: #363c49;--bs-secondary-color-rgb: 54, 60, 73;--bs-secondary-bg: #f9fafb;--bs-secondary-bg-rgb: 249, 250, 251;--bs-tertiary-color: #626c84;--bs-tertiary-color-rgb: 98, 108, 132;--bs-tertiary-bg: #eceef4;--bs-tertiary-
2025-01-15 16:44:53 UTC	1390	IN	Data Raw: 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 40 6d 65 64 69 61 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 20 6e 6f 2d 70 72 65 66 65 72 65 6e 63 65 29 7b 3a 72 6f 6f 74 7b 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 3a 73 6d 6f 6f 74 68 7d 7d 68 32 2c 2e 68 32 2c 68 31 2c 2e 68 31 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 68 65 61 64 69 6e 67 2d 63 6f 6c 6f 72 29 7d 68 31 2c 2e 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 31 2e 33 37 35 72 65 6d 20 2b 20 31 2e 35 76 77 29 7d 40 6d 65 64 69 Data Ascii: er{box-sizing:border-box}@media(prefers-reduced-motion: no-preference){:root{scroll-behavior:smooth}}h2,.h2,h1,.h1{margin-top:0;margin-bottom:.5rem;font-weight:500;line-height:1.2;color:var(--bs-heading-color)}h1,.h1{font-size:calc(1.375rem + 1.5vw)}@medi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.18	60850	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:53 UTC	681	OUT	GET /gui/static/qrcode.min.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0; _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1
2025-01-15 16:44:54 UTC	381	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:44:54 GMT expires: Wed, 15 Jan 2025 16:45:54 GMT cache-control: public, max-age=60 etag: "iyPWYw" x-cloud-trace-context: 5b7aad2a1d94f6ae44884bc8b4b87f3b content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:54 UTC	1009	IN	Data Raw: 33 39 37 61 0d 0a 76 61 72 20 51 52 43 6f 64 65 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 6d 6f 64 65 3d 73 2e 4d 4f 44 45 5f 38 42 49 54 5f 42 59 54 45 2c 74 68 69 73 2e 64 61 74 61 3d 74 2c 74 68 69 73 2e 70 61 72 73 65 64 44 61 74 61 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 2c 6f 3d 74 68 69 73 2e 64 61 74 61 2e 6c 65 6e 67 74 68 3b 6f 3e 72 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 64 61 74 61 2e 63 68 61 72 43 6f 64 65 41 74 28 72 29 3b 69 3e 36 35 35 33 36 3f 28 65 5b 30 5d 3d 32 34 30 7c 28 31 38 33 35 30 30 38 26 69 29 3e 3e 3e 31 38 2c 65 5b 31 5d 3d 31 32 38 7c 28 32 35 38 30 34 38 26 69 29 3e 3e 3e 31 32 2c 65 5b 32 5d 3d 31 32 38 7c 28 34 30 33 32 26 69 29 3e 3e Data Ascii: 397avar QRCode;!function(){function t(t){this.mode=s.MODE_8BIT_BYTE,this.data=t,this.parsedData=[];for(var e=[],r=0,o=this.data.length;o>r;r++){var i=this.data.charCodeAt(r);i>65536?(e[0]=240\|(1835008&i)>>>18,e[1]=128\|(258048&i)>>>12,e[2]=128\|(4032&i)>>
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 2e 75 73 65 72 41 67 65 6e 74 3b 72 65 74 75 72 6e 2f 61 6e 64 72 6f 69 64 2f 69 2e 74 65 73 74 28 65 29 26 26 28 74 3d 21 30 2c 61 4d 61 74 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 2e 6d 61 74 63 68 28 2f 61 6e 64 72 6f 69 64 20 28 5b 30 2d 39 5d 5c 2e 5b 30 2d 39 5d 29 2f 69 29 2c 61 4d 61 74 26 26 61 4d 61 74 5b 31 5d 26 26 28 74 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 4d 61 74 5b 31 5d 29 29 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 31 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 65 6e 63 6f 64 65 55 52 49 28 74 29 2e 74 6f 53 74 72 69 6e 67 28 29 2e 72 65 70 6c 61 63 65 28 2f 5c 25 5b 30 2d 39 61 2d 66 41 2d 46 5d 7b 32 7d 2f 67 2c 22 61 22 29 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 Data Ascii: .userAgent;return/android/i.test(e)&&(t=!0,aMat=e.toString().match(/android ([0-9]\.[0-9])/i),aMat&&aMat[1]&&(t=parseFloat(aMat[1]))),t}function a(t,e){for(var r=1,o=function(t){var e=encodeURI(t).toString().replace(/\%[0-9a-fA-F]{2}/g,"a");return e.lengt
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 72 6e 28 29 2c 74 68 69 73 2e 73 65 74 75 70 54 69 6d 69 6e 67 50 61 74 74 65 72 6e 28 29 2c 74 68 69 73 2e 73 65 74 75 70 54 79 70 65 49 6e 66 6f 28 74 2c 72 29 2c 74 68 69 73 2e 74 79 70 65 4e 75 6d 62 65 72 3e 3d 37 26 26 74 68 69 73 2e 73 65 74 75 70 54 79 70 65 4e 75 6d 62 65 72 28 74 29 2c 6e 75 6c 6c 3d 3d 74 68 69 73 2e 64 61 74 61 43 61 63 68 65 26 26 28 74 68 69 73 2e 64 61 74 61 43 61 63 68 65 3d 65 2e 63 72 65 61 74 65 44 61 74 61 28 74 68 69 73 2e 74 79 70 65 4e 75 6d 62 65 72 2c 74 68 69 73 2e 65 72 72 6f 72 43 6f 72 72 65 63 74 4c 65 76 65 6c 2c 74 68 69 73 2e 64 61 74 61 4c 69 73 74 29 29 2c 74 68 69 73 2e 6d 61 70 44 61 74 61 28 74 68 69 73 2e 64 61 74 61 43 61 63 68 65 2c 72 29 7d 2c 73 65 74 75 70 50 6f 73 69 74 69 6f 6e 50 72 6f 62 65 Data Ascii: rn(),this.setupTimingPattern(),this.setupTypeInfo(t,r),this.typeNumber>=7&&this.setupTypeNumber(t),null==this.dataCache&&(this.dataCache=e.createData(this.typeNumber,this.errorCorrectLevel,this.dataList)),this.mapData(this.dataCache,r)},setupPositionProbe
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 2d 32 3d 3d 6e 7c 7c 32 3d 3d 6e 7c 7c 2d 32 3d 3d 61 7c 7c 32 3d 3d 61 7c 7c 30 3d 3d 6e 26 26 30 3d 3d 61 7d 7d 2c 73 65 74 75 70 54 79 70 65 4e 75 6d 62 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6c 2e 67 65 74 42 43 48 54 79 70 65 4e 75 6d 62 65 72 28 74 68 69 73 2e 74 79 70 65 4e 75 6d 62 65 72 29 2c 72 3d 30 3b 31 38 3e 72 3b 72 2b 2b 29 7b 76 61 72 20 6f 3d 21 74 26 26 31 3d 3d 28 31 26 65 3e 3e 72 29 3b 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 4d 61 74 68 2e 66 6c 6f 6f 72 28 72 2f 33 29 5d 5b 72 25 33 2b 74 68 69 73 2e 6d 6f 64 75 6c 65 43 6f 75 6e 74 2d 38 2d 33 5d 3d 6f 7d 66 6f 72 28 72 3d 30 3b 31 38 3e 72 3b 72 2b 2b 29 7b 6f 3d 21 74 26 26 31 3d 3d 28 31 26 65 3e 3e 72 29 3b 74 68 69 73 2e 6d 6f 64 75 6c 65 73 Data Ascii: -2==n\|\|2==n\|\|-2==a\|\|2==a\|\|0==n&&0==a}},setupTypeNumber:function(t){for(var e=l.getBCHTypeNumber(this.typeNumber),r=0;18>r;r++){var o=!t&&1==(1&e>>r);this.modules[Math.floor(r/3)][r%3+this.moduleCount-8-3]=o}for(r=0;18>r;r++){o=!t&&1==(1&e>>r);this.modules
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 28 29 2b 34 3c 3d 38 2a 66 26 26 73 2e 70 75 74 28 30 2c 34 29 3b 30 21 3d 73 2e 67 65 74 4c 65 6e 67 74 68 49 6e 42 69 74 73 28 29 25 38 3b 29 73 2e 70 75 74 42 69 74 28 21 31 29 3b 66 6f 72 28 3b 21 28 73 2e 67 65 74 4c 65 6e 67 74 68 49 6e 42 69 74 73 28 29 3e 3d 38 2a 66 29 26 26 28 73 2e 70 75 74 28 65 2e 50 41 44 30 2c 38 29 2c 21 28 73 2e 67 65 74 4c 65 6e 67 74 68 49 6e 42 69 74 73 28 29 3e 3d 38 2a 66 29 29 3b 29 73 2e 70 75 74 28 65 2e 50 41 44 31 2c 38 29 3b 72 65 74 75 72 6e 20 65 2e 63 72 65 61 74 65 42 79 74 65 73 28 73 2c 61 29 7d 2c 65 2e 63 72 65 61 74 65 42 79 74 65 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6f 3d 30 2c 69 3d 30 2c 6e 3d 30 2c 61 3d 6e 65 77 20 41 72 72 61 79 28 65 2e 6c 65 6e 67 74 68 29 2c Data Ascii: ()+4<=8f&&s.put(0,4);0!=s.getLengthInBits()%8;)s.putBit(!1);for(;!(s.getLengthInBits()>=8f)&&(s.put(e.PAD0,8),!(s.getLengthInBits()>=8*f));)s.put(e.PAD1,8);return e.createBytes(s,a)},e.createBytes=function(t,e){for(var o=0,i=0,n=0,a=new Array(e.length),
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 34 5d 2c 5b 36 2c 33 34 2c 36 32 2c 39 30 2c 31 31 38 5d 2c 5b 36 2c 32 36 2c 35 30 2c 37 34 2c 39 38 2c 31 32 32 5d 2c 5b 36 2c 33 30 2c 35 34 2c 37 38 2c 31 30 32 2c 31 32 36 5d 2c 5b 36 2c 32 36 2c 35 32 2c 37 38 2c 31 30 34 2c 31 33 30 5d 2c 5b 36 2c 33 30 2c 35 36 2c 38 32 2c 31 30 38 2c 31 33 34 5d 2c 5b 36 2c 33 34 2c 36 30 2c 38 36 2c 31 31 32 2c 31 33 38 5d 2c 5b 36 2c 33 30 2c 35 38 2c 38 36 2c 31 31 34 2c 31 34 32 5d 2c 5b 36 2c 33 34 2c 36 32 2c 39 30 2c 31 31 38 2c 31 34 36 5d 2c 5b 36 2c 33 30 2c 35 34 2c 37 38 2c 31 30 32 2c 31 32 36 2c 31 35 30 5d 2c 5b 36 2c 32 34 2c 35 30 2c 37 36 2c 31 30 32 2c 31 32 38 2c 31 35 34 5d 2c 5b 36 2c 32 38 2c 35 34 2c 38 30 2c 31 30 36 2c 31 33 32 2c 31 35 38 5d 2c 5b 36 2c 33 32 2c 35 38 2c 38 34 2c 31 31 Data Ascii: 4],[6,34,62,90,118],[6,26,50,74,98,122],[6,30,54,78,102,126],[6,26,52,78,104,130],[6,30,56,82,108,134],[6,34,60,86,112,138],[6,30,58,86,114,142],[6,34,62,90,118,146],[6,30,54,78,102,126,150],[6,24,50,76,102,128,154],[6,28,54,80,106,132,158],[6,32,58,84,11
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 45 5f 4e 55 4d 42 45 52 3a 72 65 74 75 72 6e 20 31 30 3b 63 61 73 65 20 73 2e 4d 4f 44 45 5f 41 4c 50 48 41 5f 4e 55 4d 3a 72 65 74 75 72 6e 20 39 3b 63 61 73 65 20 73 2e 4d 4f 44 45 5f 38 42 49 54 5f 42 59 54 45 3a 63 61 73 65 20 73 2e 4d 4f 44 45 5f 4b 41 4e 4a 49 3a 72 65 74 75 72 6e 20 38 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6d 6f 64 65 3a 22 2b 74 29 7d 65 6c 73 65 20 69 66 28 32 37 3e 65 29 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 73 2e 4d 4f 44 45 5f 4e 55 4d 42 45 52 3a 72 65 74 75 72 6e 20 31 32 3b 63 61 73 65 20 73 2e 4d 4f 44 45 5f 41 4c 50 48 41 5f 4e 55 4d 3a 72 65 74 75 72 6e 20 31 31 3b 63 61 73 65 20 73 2e 4d 4f 44 45 5f 38 42 49 54 5f 42 59 54 45 3a 72 65 74 75 72 6e 20 31 36 3b 63 61 73 65 20 Data Ascii: E_NUMBER:return 10;case s.MODE_ALPHA_NUM:return 9;case s.MODE_8BIT_BYTE:case s.MODE_KANJI:return 8;default:throw new Error("mode:"+t)}else if(27>e)switch(t){case s.MODE_NUMBER:return 12;case s.MODE_ALPHA_NUM:return 11;case s.MODE_8BIT_BYTE:return 16;case
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 67 28 22 2b 74 2b 22 29 22 29 3b 72 65 74 75 72 6e 20 66 2e 4c 4f 47 5f 54 41 42 4c 45 5b 74 5d 7d 2c 67 65 78 70 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b 30 3e 74 3b 29 74 2b 3d 32 35 35 3b 66 6f 72 28 3b 74 3e 3d 32 35 36 3b 29 74 2d 3d 32 35 35 3b 72 65 74 75 72 6e 20 66 2e 45 58 50 5f 54 41 42 4c 45 5b 74 5d 7d 2c 45 58 50 5f 54 41 42 4c 45 3a 6e 65 77 20 41 72 72 61 79 28 32 35 36 29 2c 4c 4f 47 5f 54 41 42 4c 45 3a 6e 65 77 20 41 72 72 61 79 28 32 35 36 29 7d 2c 67 3d 30 3b 38 3e 67 3b 67 2b 2b 29 66 2e 45 58 50 5f 54 41 42 4c 45 5b 67 5d 3d 31 3c 3c 67 3b 66 6f 72 28 67 3d 38 3b 32 35 36 3e 67 3b 67 2b 2b 29 66 2e 45 58 50 5f 54 41 42 4c 45 5b 67 5d 3d 66 2e 45 58 50 5f 54 41 42 4c 45 5b 67 2d 34 5d 5e 66 2e 45 58 50 5f 54 41 42 4c 45 Data Ascii: g("+t+")");return f.LOG_TABLE[t]},gexp:function(t){for(;0>t;)t+=255;for(;t>=256;)t-=255;return f.EXP_TABLE[t]},EXP_TABLE:new Array(256),LOG_TABLE:new Array(256)},g=0;8>g;g++)f.EXP_TABLE[g]=1<<g;for(g=8;256>g;g++)f.EXP_TABLE[g]=f.EXP_TABLE[g-4]^f.EXP_TABLE
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 37 2c 36 39 5d 2c 5b 34 2c 36 39 2c 34 33 2c 31 2c 37 30 2c 34 34 5d 2c 5b 36 2c 34 33 2c 31 39 2c 32 2c 34 34 2c 32 30 5d 2c 5b 36 2c 34 33 2c 31 35 2c 32 2c 34 34 2c 31 36 5d 2c 5b 34 2c 31 30 31 2c 38 31 5d 2c 5b 31 2c 38 30 2c 35 30 2c 34 2c 38 31 2c 35 31 5d 2c 5b 34 2c 35 30 2c 32 32 2c 34 2c 35 31 2c 32 33 5d 2c 5b 33 2c 33 36 2c 31 32 2c 38 2c 33 37 2c 31 33 5d 2c 5b 32 2c 31 31 36 2c 39 32 2c 32 2c 31 31 37 2c 39 33 5d 2c 5b 36 2c 35 38 2c 33 36 2c 32 2c 35 39 2c 33 37 5d 2c 5b 34 2c 34 36 2c 32 30 2c 36 2c 34 37 2c 32 31 5d 2c 5b 37 2c 34 32 2c 31 34 2c 34 2c 34 33 2c 31 35 5d 2c 5b 34 2c 31 33 33 2c 31 30 37 5d 2c 5b 38 2c 35 39 2c 33 37 2c 31 2c 36 30 2c 33 38 5d 2c 5b 38 2c 34 34 2c 32 30 2c 34 2c 34 35 2c 32 31 5d 2c 5b 31 32 2c 33 33 2c 31 Data Ascii: 7,69],[4,69,43,1,70,44],[6,43,19,2,44,20],[6,43,15,2,44,16],[4,101,81],[1,80,50,4,81,51],[4,50,22,4,51,23],[3,36,12,8,37,13],[2,116,92,2,117,93],[6,58,36,2,59,37],[4,46,20,6,47,21],[7,42,14,4,43,15],[4,133,107],[8,59,37,1,60,38],[8,44,20,4,45,21],[12,33,1
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 31 2c 35 35 2c 32 35 5d 2c 5b 31 31 2c 34 35 2c 31 35 2c 33 31 2c 34 36 2c 31 36 5d 2c 5b 37 2c 31 34 36 2c 31 31 36 2c 37 2c 31 34 37 2c 31 31 37 5d 2c 5b 32 31 2c 37 33 2c 34 35 2c 37 2c 37 34 2c 34 36 5d 2c 5b 31 2c 35 33 2c 32 33 2c 33 37 2c 35 34 2c 32 34 5d 2c 5b 31 39 2c 34 35 2c 31 35 2c 32 36 2c 34 36 2c 31 36 5d 2c 5b 35 2c 31 34 35 2c 31 31 35 2c 31 30 2c 31 34 36 2c 31 31 36 5d 2c 5b 31 39 2c 37 35 2c 34 37 2c 31 30 2c 37 36 2c 34 38 5d 2c 5b 31 35 2c 35 34 2c 32 34 2c 32 35 2c 35 35 2c 32 35 5d 2c 5b 32 33 2c 34 35 2c 31 35 2c 32 35 2c 34 36 2c 31 36 5d 2c 5b 31 33 2c 31 34 35 2c 31 31 35 2c 33 2c 31 34 36 2c 31 31 36 5d 2c 5b 32 2c 37 34 2c 34 36 2c 32 39 2c 37 35 2c 34 37 5d 2c 5b 34 32 2c 35 34 2c 32 34 2c 31 2c 35 35 2c 32 35 5d 2c 5b 32 Data Ascii: 1,55,25],[11,45,15,31,46,16],[7,146,116,7,147,117],[21,73,45,7,74,46],[1,53,23,37,54,24],[19,45,15,26,46,16],[5,145,115,10,146,116],[19,75,47,10,76,48],[15,54,24,25,55,25],[23,45,15,25,46,16],[13,145,115,3,146,116],[2,74,46,29,75,47],[42,54,24,1,55,25],[2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.18	60854	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:54 UTC	524	OUT	GET /gui/vt-ui-sw-installer.3166763520a2b299ee12.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0; _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1
2025-01-15 16:44:54 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:44:54 GMT expires: Thu, 15 Jan 2026 16:44:54 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 0789d4c3e656303b3d335420b1bcc5b6 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:54 UTC	1003	IN	Data Raw: 32 33 64 65 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 30 30 33 36 5d 2c 7b 32 30 36 39 39 3a 28 74 2c 6e 2c 65 29 3d 3e 7b 65 2e 72 28 6e 29 2c 65 2e 64 28 6e 2c 7b 56 74 55 69 53 77 49 6e 73 74 61 6c 6c 65 72 3a 28 29 3d 3e 4c 7d 29 3b 65 28 39 38 39 31 29 3b 76 61 72 20 72 3d 65 28 34 38 37 30 34 29 2c 69 3d 65 28 31 36 36 34 35 29 3b 74 72 79 7b 73 65 6c 66 5b 22 77 6f 72 6b 62 6f 78 3a 77 69 6e 64 6f 77 3a 37 2e 30 2e 30 22 5d 26 26 5f 28 29 7d 63 61 74 63 68 28 6f 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 Data Ascii: 23de"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[70036],{20699:(t,n,e)=>{e.r(n),e.d(n,{VtUiSwInstaller:()=>L});e(9891);var r=e(48704),i=e(16645);try{self["workbox:window:7.0.0"]&&_()}catch(o){}function o(t,n){return
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 74 68 29 3b 66 6f 72 28 76 61 72 20 65 3d 30 2c 72 3d 6e 65 77 20 41 72 72 61 79 28 6e 29 3b 65 3c 6e 3b 65 2b 2b 29 72 5b 65 5d 3d 74 5b 65 5d 3b 72 65 74 75 72 6e 20 72 7d 74 72 79 7b 73 65 6c 66 5b 22 77 6f 72 6b 62 6f 78 3a 63 6f 72 65 3a 37 2e 30 2e 30 22 5d 26 26 5f 28 29 7d 63 61 74 63 68 28 6f 29 7b 7d 76 61 72 20 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 29 7b 74 2e 72 65 73 6f 6c 76 65 3d 6e 2c 74 2e 72 65 6a 65 63 74 3d 65 7d 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 76 28 74 2c 6e 29 7b 76 61 72 20 65 3d 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3b 72 65 74 75 72 6e 20 6e 65 77 20 55 52 4c 28 74 2c 65 29 2e Data Ascii: th);for(var e=0,r=new Array(n);e<n;e++)r[e]=t[e];return r}try{self["workbox:core:7.0.0"]&&_()}catch(o){}var l=function(){var t=this;this.promise=new Promise((function(n,e){t.resolve=n,t.reject=e}))};function v(t,n){var e=location.href;return new URL(t,e).
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 69 6e 61 6c 45 76 65 6e 74 3a 74 2c 73 77 3a 6e 2c 69 73 55 70 64 61 74 65 3a 72 2e 6d 6e 7d 29 29 2c 65 7c 7c 72 2e 6f 6e 2e 72 65 73 6f 6c 76 65 28 6e 29 7d 2c 72 2e 67 6e 3d 28 69 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 2e 64 61 74 61 2c 65 3d 74 2e 70 6f 72 74 73 2c 69 3d 74 2e 73 6f 75 72 63 65 3b 72 65 74 75 72 6e 20 68 28 72 2e 67 65 74 53 57 28 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 6e 2e 68 61 73 28 69 29 26 26 72 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 66 28 22 6d 65 73 73 61 67 65 22 2c 7b 64 61 74 61 3a 6e 2c 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 3a 74 2c 70 6f 72 74 73 3a 65 2c 73 77 3a 69 7d 29 29 7d 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 Data Ascii: inalEvent:t,sw:n,isUpdate:r.mn})),e\|\|r.on.resolve(n)},r.gn=(i=function(t){var n=t.data,e=t.ports,i=t.source;return h(r.getSW(),(function(){r.an.has(i)&&r.dispatchEvent(new f("message",{data:n,originalEvent:t,ports:e,sw:i}))}))},function(){for(var t=[],n=0
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 6e 65 72 28 22 63 6f 6e 74 72 6f 6c 6c 65 72 63 68 61 6e 67 65 22 2c 72 2e 79 6e 29 2c 72 2e 66 6e 7d 29 29 7d 29 29 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 74 29 7d 7d 2c 75 2e 75 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 6e 3f 68 28 70 28 74 68 69 73 2e 66 6e 2e 75 70 64 61 74 65 28 29 29 29 3a 68 28 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 74 29 7d 7d 2c 75 2e 67 65 74 53 57 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 68 6e 3f 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 74 68 69 73 2e 68 6e 29 3a 74 68 69 73 2e 72 6e 2e Data Ascii: ner("controllerchange",r.yn),r.fn}))})))}catch(t){return Promise.reject(t)}},u.update=function(){try{return this.fn?h(p(this.fn.update())):h()}catch(t){return Promise.reject(t)}},u.getSW=function(){return void 0!==this.hn?Promise.resolve(this.hn):this.rn.
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 72 6e 28 65 3d 65 2e 63 61 6c 6c 28 74 29 29 2e 6e 65 78 74 2e 62 69 6e 64 28 65 29 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 7c 7c 28 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 69 66 28 74 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 75 28 74 2c 6e 29 3b 76 61 72 20 65 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 74 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 3b 72 65 74 75 72 6e 22 4f 62 6a 65 63 74 22 3d 3d 3d 65 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 28 65 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 2c 22 4d 61 70 22 3d 3d 3d 65 7c 7c 22 53 65 74 22 3d 3d 3d 65 3f 41 72 72 61 79 2e 66 72 6f 6d 28 74 29 3a 22 Data Ascii: rn(e=e.call(t)).next.bind(e);if(Array.isArray(t)\|\|(e=function(t,n){if(t){if("string"==typeof t)return u(t,n);var e=Object.prototype.toString.call(t).slice(8,-1);return"Object"===e&&t.constructor&&(e=t.constructor.name),"Map"===e\|\|"Set"===e?Array.from(t):"
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 33 3f 69 28 61 29 3a 6f 3e 33 3f 69 28 6e 2c 65 2c 61 29 3a 69 28 6e 2c 65 29 29 7c 7c 61 29 3b 72 65 74 75 72 6e 20 6f 3e 33 26 26 61 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2c 65 2c 61 29 2c 61 7d 3b 63 6f 6e 73 74 20 78 3d 6e 65 77 20 53 65 74 28 5b 22 64 6f 67 66 6f 6f 64 5f 76 74 69 22 2c 22 64 6f 67 66 6f 6f 64 22 2c 22 61 64 72 69 61 6e 7a 22 2c 22 72 65 63 69 6f 6d 6f 72 61 6e 22 2c 22 44 69 76 69 65 69 22 2c 22 64 61 6e 69 65 6c 76 61 7a 71 75 65 7a 22 2c 22 6d 67 6c 65 7a 73 6f 73 61 22 5d 29 3b 6c 65 74 20 4c 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 72 2e 4c 69 74 45 6c 65 6d 65 6e 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 69 Data Ascii: 3?i(a):o>3?i(n,e,a):i(n,e))\|\|a);return o>3&&a&&Object.defineProperty(n,e,a),a};const x=new Set(["dogfood_vti","dogfood","adrianz","reciomoran","Diviei","danielvazquez","mglezsosa"]);let L=class extends r.LitElement{constructor(){super(...arguments),this.i
2025-01-15 16:44:54 UTC	1242	IN	Data Raw: 7d 29 29 29 29 7d 29 29 28 29 7d 6c 6f 67 41 63 74 69 6f 6e 28 74 29 7b 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 53 57 22 2c 74 29 2c 62 2e 4b 4b 2e 73 65 6e 64 41 6e 61 6c 79 74 69 63 73 45 76 65 6e 74 28 22 73 77 22 2c 74 29 7d 72 65 6e 64 65 72 28 29 7b 69 66 28 74 68 69 73 2e 69 73 53 68 6f 77 69 6e 67 29 72 65 74 75 72 6e 28 30 2c 72 2e 68 74 6d 6c 29 28 45 7c 7c 28 45 3d 6a 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 22 3e 20 3c 64 69 76 3e 20 4e 65 77 20 61 70 70 20 76 65 72 73 69 6f 6e 20 69 73 20 61 76 61 69 6c 61 62 6c 65 2e 20 3c 61 20 68 72 65 66 3d 22 23 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 3e 52 65 6c 6f 61 64 3c 2f 61 3e 3f 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 6f 73 Data Ascii: }))))}))()}logAction(t){console.log("SW",t),b.KK.sendAnalyticsEvent("sw",t)}render(){if(this.isShowing)return(0,r.html)(E\|\|(E=j` <div class="content"> <div> New app version is available. <a href="#" @click="${0}">Reload</a>? </div> </div> <div class="clos

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.18	60857	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:54 UTC	511	OUT	GET /gui/88116.6518b1d1356f23e2144b.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0; _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1
2025-01-15 16:44:54 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:44:54 GMT expires: Thu, 15 Jan 2026 16:44:54 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: bde199393c4a6b183d66df3928e602ef content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:54 UTC	1003	IN	Data Raw: 33 62 31 65 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 31 31 36 2c 38 36 32 34 33 5d 2c 7b 31 30 32 31 32 3a 28 65 2c 72 2c 74 29 3d 3e 7b 76 61 72 20 6f 3d 74 28 34 38 37 30 34 29 2c 73 3d 74 28 31 36 36 34 35 29 2c 69 3d 74 28 36 32 38 33 32 29 2c 61 3d 74 28 31 35 33 32 33 29 2c 6e 3d 74 28 33 30 31 33 32 29 2c 62 3d 74 28 39 35 36 38 38 29 2c 64 3d 74 28 34 39 36 30 38 29 3b 6c 65 74 20 63 2c 6c 2c 75 3d 65 3d 3e 65 3b 76 61 72 20 70 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 2c 6f 29 7b 76 61 72 20 73 2c 69 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: 3b1e"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[88116,86243],{10212:(e,r,t)=>{var o=t(48704),s=t(16645),i=t(62832),a=t(15323),n=t(30132),b=t(95688),d=t(49608);let c,l,u=e=>e;var p=function(e,r,t,o){var s,i=arguments
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 2e 68 72 65 66 3d 22 24 7b 30 7d 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 73 74 61 63 6b 20 66 73 2d 35 22 3e 24 7b 30 7d 3c 2f 64 69 76 3e 20 3c 73 70 61 6e 3e 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 63 61 70 69 74 61 6c 69 7a 65 22 3e 24 7b 30 7d 3c 2f 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 20 3c 2f 61 3e 20 60 29 2c 28 30 2c 69 2e 63 6c 61 73 73 4d 61 70 29 28 7b 64 69 73 61 62 6c 65 64 3a 74 68 69 73 2e 64 69 73 61 62 6c 65 64 7d 29 2c 74 68 69 73 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 65 2c 74 68 69 73 2e 72 65 64 69 72 65 63 74 54 6f 29 2c 66 5b 65 5d 2c 65 29 29 29 29 7d 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 65 2c 72 29 7b 63 6f 6e 73 74 20 74 3d 62 2e 5a 38 2e 67 65 74 52 Data Ascii: .href="${0}"> <div class="hstack fs-5">${0}</div> <span>Continue with <span class="text-capitalize">${0}</span></span> </a> `),(0,i.classMap)({disabled:this.disabled}),this.getRedirectUrl(e,this.redirectTo),f[e],e))))}getRedirectUrl(e,r){const t=b.Z8.getR
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 20 6e 28 65 29 7b 78 28 69 2c 6f 2c 73 2c 61 2c 6e 2c 22 74 68 72 6f 77 22 2c 65 29 7d 61 28 76 6f 69 64 20 30 29 7d 29 29 7d 7d 76 61 72 20 52 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 2c 6f 29 7b 76 61 72 20 73 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 61 3d 69 3c 33 3f 72 3a 6e 75 6c 6c 3d 3d 3d 6f 3f 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 72 2c 74 29 3a 6f 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 29 61 3d 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 28 65 2c 72 2c 74 2c 6f 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 Data Ascii: n(e){x(i,o,s,a,n,"throw",e)}a(void 0)}))}}var R=function(e,r,t,o){var s,i=arguments.length,a=i<3?r:null===o?o=Object.getOwnPropertyDescriptor(r,t):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(e,r,t,o);else for(var
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 74 50 72 6f 76 69 64 65 72 55 72 6c 28 65 29 7b 76 61 72 20 72 2c 74 3b 69 66 28 6e 75 6c 6c 21 3d 3d 28 72 3d 65 2e 6d 65 74 61 29 26 26 76 6f 69 64 20 30 21 3d 3d 72 26 26 72 2e 6c 6f 67 69 6e 5f 75 72 6c 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 6d 65 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6c 6f 67 69 6e 5f 75 72 6c 3b 7b 76 61 72 20 6f 2c 73 3b 63 6f 6e 73 74 20 72 3d 6e 75 6c 6c 21 3d 3d 28 6f 3d 65 2e 6d 65 74 61 29 26 26 76 6f 69 64 20 30 21 3d 3d 6f 26 26 6f 2e 70 72 6f 76 69 64 65 72 5f 69 64 3f 6e 75 6c 6c 3d 3d 3d 28 73 3d 65 2e 6d 65 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 73 3f 76 6f 69 64 20 30 3a 73 2e 70 72 6f 76 69 64 65 72 5f 69 64 2e 73 70 6c 69 74 28 22 2e 22 29 5b 30 5d 3a 22 22 Data Ascii: tProviderUrl(e){var r,t;if(null!==(r=e.meta)&&void 0!==r&&r.login_url)return null===(t=e.meta)\|\|void 0===t?void 0:t.login_url;{var o,s;const r=null!==(o=e.meta)&&void 0!==o&&o.provider_id?null===(s=e.meta)\|\|void 0===s?void 0:s.provider_id.split(".")[0]:""
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 65 29 2c 79 69 65 6c 64 20 6c 2e 4e 55 2e 75 70 64 61 74 65 55 73 65 72 28 28 28 29 3d 3e 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 7b 64 61 74 61 3a 65 7d 29 29 29 2c 6e 75 6c 6c 21 3d 3d 28 74 3d 6c 2e 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 26 26 74 2e 67 74 69 41 63 63 65 73 73 29 74 72 79 7b 79 69 65 6c 64 20 72 2e 73 65 74 55 70 47 74 69 53 69 67 6e 49 6e 28 29 7d 63 61 74 63 68 28 65 29 7b 62 2e 54 2e 68 61 6e 64 6c 65 45 72 72 6f 72 28 65 29 7d 6e 75 6c 6c 21 3d 3d 28 6f 3d 6c 2e 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 6f 26 26 6f 2e 67 74 69 41 63 63 65 73 73 26 26 72 2e 74 6f 6b 65 6e 26 26 72 2e 72 65 64 69 72 65 63 74 55 72 69 26 26 21 64 2e 5a 38 2e 72 6f 6f Data Ascii: e),yield l.NU.updateUser((()=>Promise.resolve({data:e}))),null!==(t=l.NU.currentUser)&&void 0!==t&&t.gtiAccess)try{yield r.setUpGtiSignIn()}catch(e){b.T.handleError(e)}null!==(o=l.NU.currentUser)&&void 0!==o&&o.gtiAccess&&r.token&&r.redirectUri&&!d.Z8.roo
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 7b 30 7d 22 20 63 6c 61 73 73 3d 22 64 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 20 66 77 2d 62 6f 6c 64 20 67 61 70 2d 32 20 6c 69 6e 6b 2d 70 72 69 6d 61 72 79 20 6d 62 2d 34 22 3e 20 3c 69 20 63 6c 61 73 73 3d 22 68 73 74 61 63 6b 20 66 73 2d 35 22 3e 20 24 7b 30 7d 20 3c 2f 69 3e 20 47 6f 20 62 61 63 6b 20 3c 2f 61 3e 20 3c 68 34 20 63 6c 61 73 73 3d 22 6d 62 2d 34 22 3e 53 69 67 6e 20 69 6e 20 61 6e 64 20 73 74 6f 70 20 74 68 72 65 61 74 73 3c 2f 68 34 3e 20 3c 64 69 76 3e 20 4e 6f 74 20 61 20 6d 65 6d 62 65 72 3f 20 3c 61 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 2d 70 72 69 6d 61 72 79 20 66 77 2d 62 6f 6c 64 22 20 68 72 65 66 3d 22 24 7b 30 7d 22 3e 53 69 67 6e 20 75 70 3c 2f 61 3e 20 3c 2f 64 69 76 3e 20 24 7b 30 7d 20 24 7b 30 7d 20 3c 68 72 20 63 6c 61 73 Data Ascii: {0}" class="d-inline-flex fw-bold gap-2 link-primary mb-4"> <i class="hstack fs-5"> ${0} </i> Go back </a> <h4 class="mb-4">Sign in and stop threats</h4> <div> Not a member? <a class="link-primary fw-bold" href="${0}">Sign up</a> </div> ${0} ${0} <hr clas
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 6c 6c 63 68 65 63 6b 3d 22 66 61 6c 73 65 22 20 2e 76 61 6c 75 65 3d 22 24 7b 30 7d 22 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 67 72 6f 75 70 22 20 3f 68 69 64 64 65 6e 3d 22 24 7b 30 7d 22 3e 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 6c 61 62 65 6c 20 6d 74 2d 34 22 3e 50 61 73 73 77 6f 72 64 3c 2f 6c 61 62 65 6c 3e 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 22 20 69 64 3d 22 70 61 73 73 77 6f 72 64 22 20 6e 61 6d 65 3d 22 70 61 73 73 77 6f 72 64 22 20 70 6c 61 63 65 68 6f 6c 64 65 72 3d 22 54 79 70 65 20 69 6e 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 22 20 61 75 74 6f Data Ascii: llcheck="false" .value="${0}"> </div> <div class="form-group" ?hidden="${0}"> <label for="password" class="form-label mt-4">Password</label> <input type="password" class="form-control" id="password" name="password" placeholder="Type in your password" auto
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 65 6e 64 65 72 47 74 69 53 69 67 6e 49 6e 48 69 64 64 65 6e 46 6f 72 6d 28 29 7b 72 65 74 75 72 6e 28 30 2c 69 2e 68 74 6d 6c 29 28 6b 7c 7c 28 6b 3d 77 60 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 20 69 64 3d 22 68 69 64 64 65 6e 46 6f 72 6d 22 20 61 63 74 69 6f 6e 3d 22 24 7b 30 7d 22 20 68 69 64 64 65 6e 3e 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 74 6f 6b 65 6e 22 20 76 61 6c 75 65 3d 22 24 7b 30 7d 22 3e 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 72 65 64 69 72 65 63 74 5f 75 72 69 22 20 76 61 6c 75 65 3d 22 24 7b 30 7d 22 3e 20 3c 2f 66 6f 72 6d 3e 60 29 2c 64 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 6d 61 6e 64 69 61 6e 74 4c 6f 67 Data Ascii: enderGtiSignInHiddenForm(){return(0,i.html)(k\|\|(k=w`<form method="post" id="hiddenForm" action="${0}" hidden> <input type="hidden" name="token" value="${0}"> <input type="hidden" name="redirect_uri" value="${0}"> </form>`),d.Z8.getRedirectUrl("mandiantLog
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 6c 65 3a 20 23 36 66 34 32 63 31 3b 2d 2d 62 73 2d 70 69 6e 6b 3a 20 23 30 30 30 30 30 30 3b 2d 2d 62 73 2d 72 65 64 3a 20 23 63 35 32 34 32 30 3b 2d 2d 62 73 2d 6f 72 61 6e 67 65 3a 20 23 65 35 37 33 30 30 3b 2d 2d 62 73 2d 79 65 6c 6c 6f 77 3a 20 23 66 63 65 39 36 37 3b 2d 2d 62 73 2d 67 72 65 65 6e 3a 20 23 33 39 61 63 34 63 3b 2d 2d 62 73 2d 74 65 61 6c 3a 20 23 32 30 63 39 39 37 3b 2d 2d 62 73 2d 63 79 61 6e 3a 20 23 32 38 37 62 62 35 3b 2d 2d 62 73 2d 62 6c 61 63 6b 3a 20 23 30 30 30 3b 2d 2d 62 73 2d 77 68 69 74 65 3a 20 23 66 66 66 3b 2d 2d 62 73 2d 67 72 61 79 3a 20 23 36 36 36 36 36 36 3b 2d 2d 62 73 2d 67 72 61 79 2d 64 61 72 6b 3a 20 23 33 33 33 33 33 33 3b 2d 2d 62 73 2d 67 72 61 79 2d 31 30 30 3a 20 23 66 39 66 39 66 39 3b 2d 2d 62 73 2d 67 Data Ascii: le: #6f42c1;--bs-pink: #000000;--bs-red: #c52420;--bs-orange: #e57300;--bs-yellow: #fce967;--bs-green: #39ac4c;--bs-teal: #20c997;--bs-cyan: #287bb5;--bs-black: #000;--bs-white: #fff;--bs-gray: #666666;--bs-gray-dark: #333333;--bs-gray-100: #f9f9f9;--bs-g
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 37 39 39 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 65 38 61 37 61 36 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 66 32 66 32 66 32 3b 2d 2d 62 73 2d 64 61 72 6b 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 62 33 62 33 62 33 3b 2d 2d 62 73 2d 77 68 69 74 65 2d 72 67 62 3a 20 32 35 35 2c 20 32 35 35 2c 20 32 35 35 3b 2d 2d 62 73 2d 62 6c 61 63 6b 2d 72 67 62 3a 20 30 2c 20 30 2c 20 30 3b 2d 2d 62 73 2d 66 6f 6e 74 2d 73 61 6e 73 2d 73 65 72 69 66 3a 20 22 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 22 2c 20 52 6f 62 6f 74 6f 2c 20 52 6f 62 6f 74 6f 44 72 61 66 74 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 2d 2d 62 73 Data Ascii: 799;--bs-danger-border-subtle: #e8a7a6;--bs-light-border-subtle: #f2f2f2;--bs-dark-border-subtle: #b3b3b3;--bs-white-rgb: 255, 255, 255;--bs-black-rgb: 0, 0, 0;--bs-font-sans-serif: "Source Sans Pro", Roboto, RobotoDraft, Helvetica, Arial, sans-serif;--bs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.18	60858	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:54 UTC	502	OUT	GET /gui/static/qrcode.min.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959489.0.0.0; _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1
2025-01-15 16:44:54 UTC	381	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:44:54 GMT expires: Wed, 15 Jan 2025 16:45:54 GMT cache-control: public, max-age=60 etag: "iyPWYw" x-cloud-trace-context: 6714b75f86634dd239c133ba53b4aaf8 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:54 UTC	1009	IN	Data Raw: 33 39 38 37 0d 0a 76 61 72 20 51 52 43 6f 64 65 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 6d 6f 64 65 3d 73 2e 4d 4f 44 45 5f 38 42 49 54 5f 42 59 54 45 2c 74 68 69 73 2e 64 61 74 61 3d 74 2c 74 68 69 73 2e 70 61 72 73 65 64 44 61 74 61 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 2c 6f 3d 74 68 69 73 2e 64 61 74 61 2e 6c 65 6e 67 74 68 3b 6f 3e 72 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 68 69 73 2e 64 61 74 61 2e 63 68 61 72 43 6f 64 65 41 74 28 72 29 3b 69 3e 36 35 35 33 36 3f 28 65 5b 30 5d 3d 32 34 30 7c 28 31 38 33 35 30 30 38 26 69 29 3e 3e 3e 31 38 2c 65 5b 31 5d 3d 31 32 38 7c 28 32 35 38 30 34 38 26 69 29 3e 3e 3e 31 32 2c 65 5b 32 5d 3d 31 32 38 7c 28 34 30 33 32 26 69 29 3e 3e Data Ascii: 3987var QRCode;!function(){function t(t){this.mode=s.MODE_8BIT_BYTE,this.data=t,this.parsedData=[];for(var e=[],r=0,o=this.data.length;o>r;r++){var i=this.data.charCodeAt(r);i>65536?(e[0]=240\|(1835008&i)>>>18,e[1]=128\|(258048&i)>>>12,e[2]=128\|(4032&i)>>
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 2e 75 73 65 72 41 67 65 6e 74 3b 72 65 74 75 72 6e 2f 61 6e 64 72 6f 69 64 2f 69 2e 74 65 73 74 28 65 29 26 26 28 74 3d 21 30 2c 61 4d 61 74 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 2e 6d 61 74 63 68 28 2f 61 6e 64 72 6f 69 64 20 28 5b 30 2d 39 5d 5c 2e 5b 30 2d 39 5d 29 2f 69 29 2c 61 4d 61 74 26 26 61 4d 61 74 5b 31 5d 26 26 28 74 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 4d 61 74 5b 31 5d 29 29 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 31 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 65 6e 63 6f 64 65 55 52 49 28 74 29 2e 74 6f 53 74 72 69 6e 67 28 29 2e 72 65 70 6c 61 63 65 28 2f 5c 25 5b 30 2d 39 61 2d 66 41 2d 46 5d 7b 32 7d 2f 67 2c 22 61 22 29 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 Data Ascii: .userAgent;return/android/i.test(e)&&(t=!0,aMat=e.toString().match(/android ([0-9]\.[0-9])/i),aMat&&aMat[1]&&(t=parseFloat(aMat[1]))),t}function a(t,e){for(var r=1,o=function(t){var e=encodeURI(t).toString().replace(/\%[0-9a-fA-F]{2}/g,"a");return e.lengt
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 72 6e 28 29 2c 74 68 69 73 2e 73 65 74 75 70 54 69 6d 69 6e 67 50 61 74 74 65 72 6e 28 29 2c 74 68 69 73 2e 73 65 74 75 70 54 79 70 65 49 6e 66 6f 28 74 2c 72 29 2c 74 68 69 73 2e 74 79 70 65 4e 75 6d 62 65 72 3e 3d 37 26 26 74 68 69 73 2e 73 65 74 75 70 54 79 70 65 4e 75 6d 62 65 72 28 74 29 2c 6e 75 6c 6c 3d 3d 74 68 69 73 2e 64 61 74 61 43 61 63 68 65 26 26 28 74 68 69 73 2e 64 61 74 61 43 61 63 68 65 3d 65 2e 63 72 65 61 74 65 44 61 74 61 28 74 68 69 73 2e 74 79 70 65 4e 75 6d 62 65 72 2c 74 68 69 73 2e 65 72 72 6f 72 43 6f 72 72 65 63 74 4c 65 76 65 6c 2c 74 68 69 73 2e 64 61 74 61 4c 69 73 74 29 29 2c 74 68 69 73 2e 6d 61 70 44 61 74 61 28 74 68 69 73 2e 64 61 74 61 43 61 63 68 65 2c 72 29 7d 2c 73 65 74 75 70 50 6f 73 69 74 69 6f 6e 50 72 6f 62 65 Data Ascii: rn(),this.setupTimingPattern(),this.setupTypeInfo(t,r),this.typeNumber>=7&&this.setupTypeNumber(t),null==this.dataCache&&(this.dataCache=e.createData(this.typeNumber,this.errorCorrectLevel,this.dataList)),this.mapData(this.dataCache,r)},setupPositionProbe
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 2d 32 3d 3d 6e 7c 7c 32 3d 3d 6e 7c 7c 2d 32 3d 3d 61 7c 7c 32 3d 3d 61 7c 7c 30 3d 3d 6e 26 26 30 3d 3d 61 7d 7d 2c 73 65 74 75 70 54 79 70 65 4e 75 6d 62 65 72 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6c 2e 67 65 74 42 43 48 54 79 70 65 4e 75 6d 62 65 72 28 74 68 69 73 2e 74 79 70 65 4e 75 6d 62 65 72 29 2c 72 3d 30 3b 31 38 3e 72 3b 72 2b 2b 29 7b 76 61 72 20 6f 3d 21 74 26 26 31 3d 3d 28 31 26 65 3e 3e 72 29 3b 74 68 69 73 2e 6d 6f 64 75 6c 65 73 5b 4d 61 74 68 2e 66 6c 6f 6f 72 28 72 2f 33 29 5d 5b 72 25 33 2b 74 68 69 73 2e 6d 6f 64 75 6c 65 43 6f 75 6e 74 2d 38 2d 33 5d 3d 6f 7d 66 6f 72 28 72 3d 30 3b 31 38 3e 72 3b 72 2b 2b 29 7b 6f 3d 21 74 26 26 31 3d 3d 28 31 26 65 3e 3e 72 29 3b 74 68 69 73 2e 6d 6f 64 75 6c 65 73 Data Ascii: -2==n\|\|2==n\|\|-2==a\|\|2==a\|\|0==n&&0==a}},setupTypeNumber:function(t){for(var e=l.getBCHTypeNumber(this.typeNumber),r=0;18>r;r++){var o=!t&&1==(1&e>>r);this.modules[Math.floor(r/3)][r%3+this.moduleCount-8-3]=o}for(r=0;18>r;r++){o=!t&&1==(1&e>>r);this.modules
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 28 29 2b 34 3c 3d 38 2a 66 26 26 73 2e 70 75 74 28 30 2c 34 29 3b 30 21 3d 73 2e 67 65 74 4c 65 6e 67 74 68 49 6e 42 69 74 73 28 29 25 38 3b 29 73 2e 70 75 74 42 69 74 28 21 31 29 3b 66 6f 72 28 3b 21 28 73 2e 67 65 74 4c 65 6e 67 74 68 49 6e 42 69 74 73 28 29 3e 3d 38 2a 66 29 26 26 28 73 2e 70 75 74 28 65 2e 50 41 44 30 2c 38 29 2c 21 28 73 2e 67 65 74 4c 65 6e 67 74 68 49 6e 42 69 74 73 28 29 3e 3d 38 2a 66 29 29 3b 29 73 2e 70 75 74 28 65 2e 50 41 44 31 2c 38 29 3b 72 65 74 75 72 6e 20 65 2e 63 72 65 61 74 65 42 79 74 65 73 28 73 2c 61 29 7d 2c 65 2e 63 72 65 61 74 65 42 79 74 65 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6f 3d 30 2c 69 3d 30 2c 6e 3d 30 2c 61 3d 6e 65 77 20 41 72 72 61 79 28 65 2e 6c 65 6e 67 74 68 29 2c Data Ascii: ()+4<=8f&&s.put(0,4);0!=s.getLengthInBits()%8;)s.putBit(!1);for(;!(s.getLengthInBits()>=8f)&&(s.put(e.PAD0,8),!(s.getLengthInBits()>=8*f));)s.put(e.PAD1,8);return e.createBytes(s,a)},e.createBytes=function(t,e){for(var o=0,i=0,n=0,a=new Array(e.length),
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 34 5d 2c 5b 36 2c 33 34 2c 36 32 2c 39 30 2c 31 31 38 5d 2c 5b 36 2c 32 36 2c 35 30 2c 37 34 2c 39 38 2c 31 32 32 5d 2c 5b 36 2c 33 30 2c 35 34 2c 37 38 2c 31 30 32 2c 31 32 36 5d 2c 5b 36 2c 32 36 2c 35 32 2c 37 38 2c 31 30 34 2c 31 33 30 5d 2c 5b 36 2c 33 30 2c 35 36 2c 38 32 2c 31 30 38 2c 31 33 34 5d 2c 5b 36 2c 33 34 2c 36 30 2c 38 36 2c 31 31 32 2c 31 33 38 5d 2c 5b 36 2c 33 30 2c 35 38 2c 38 36 2c 31 31 34 2c 31 34 32 5d 2c 5b 36 2c 33 34 2c 36 32 2c 39 30 2c 31 31 38 2c 31 34 36 5d 2c 5b 36 2c 33 30 2c 35 34 2c 37 38 2c 31 30 32 2c 31 32 36 2c 31 35 30 5d 2c 5b 36 2c 32 34 2c 35 30 2c 37 36 2c 31 30 32 2c 31 32 38 2c 31 35 34 5d 2c 5b 36 2c 32 38 2c 35 34 2c 38 30 2c 31 30 36 2c 31 33 32 2c 31 35 38 5d 2c 5b 36 2c 33 32 2c 35 38 2c 38 34 2c 31 31 Data Ascii: 4],[6,34,62,90,118],[6,26,50,74,98,122],[6,30,54,78,102,126],[6,26,52,78,104,130],[6,30,56,82,108,134],[6,34,60,86,112,138],[6,30,58,86,114,142],[6,34,62,90,118,146],[6,30,54,78,102,126,150],[6,24,50,76,102,128,154],[6,28,54,80,106,132,158],[6,32,58,84,11
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 45 5f 4e 55 4d 42 45 52 3a 72 65 74 75 72 6e 20 31 30 3b 63 61 73 65 20 73 2e 4d 4f 44 45 5f 41 4c 50 48 41 5f 4e 55 4d 3a 72 65 74 75 72 6e 20 39 3b 63 61 73 65 20 73 2e 4d 4f 44 45 5f 38 42 49 54 5f 42 59 54 45 3a 63 61 73 65 20 73 2e 4d 4f 44 45 5f 4b 41 4e 4a 49 3a 72 65 74 75 72 6e 20 38 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6d 6f 64 65 3a 22 2b 74 29 7d 65 6c 73 65 20 69 66 28 32 37 3e 65 29 73 77 69 74 63 68 28 74 29 7b 63 61 73 65 20 73 2e 4d 4f 44 45 5f 4e 55 4d 42 45 52 3a 72 65 74 75 72 6e 20 31 32 3b 63 61 73 65 20 73 2e 4d 4f 44 45 5f 41 4c 50 48 41 5f 4e 55 4d 3a 72 65 74 75 72 6e 20 31 31 3b 63 61 73 65 20 73 2e 4d 4f 44 45 5f 38 42 49 54 5f 42 59 54 45 3a 72 65 74 75 72 6e 20 31 36 3b 63 61 73 65 20 Data Ascii: E_NUMBER:return 10;case s.MODE_ALPHA_NUM:return 9;case s.MODE_8BIT_BYTE:case s.MODE_KANJI:return 8;default:throw new Error("mode:"+t)}else if(27>e)switch(t){case s.MODE_NUMBER:return 12;case s.MODE_ALPHA_NUM:return 11;case s.MODE_8BIT_BYTE:return 16;case
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 67 28 22 2b 74 2b 22 29 22 29 3b 72 65 74 75 72 6e 20 66 2e 4c 4f 47 5f 54 41 42 4c 45 5b 74 5d 7d 2c 67 65 78 70 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b 30 3e 74 3b 29 74 2b 3d 32 35 35 3b 66 6f 72 28 3b 74 3e 3d 32 35 36 3b 29 74 2d 3d 32 35 35 3b 72 65 74 75 72 6e 20 66 2e 45 58 50 5f 54 41 42 4c 45 5b 74 5d 7d 2c 45 58 50 5f 54 41 42 4c 45 3a 6e 65 77 20 41 72 72 61 79 28 32 35 36 29 2c 4c 4f 47 5f 54 41 42 4c 45 3a 6e 65 77 20 41 72 72 61 79 28 32 35 36 29 7d 2c 67 3d 30 3b 38 3e 67 3b 67 2b 2b 29 66 2e 45 58 50 5f 54 41 42 4c 45 5b 67 5d 3d 31 3c 3c 67 3b 66 6f 72 28 67 3d 38 3b 32 35 36 3e 67 3b 67 2b 2b 29 66 2e 45 58 50 5f 54 41 42 4c 45 5b 67 5d 3d 66 2e 45 58 50 5f 54 41 42 4c 45 5b 67 2d 34 5d 5e 66 2e 45 58 50 5f 54 41 42 4c 45 Data Ascii: g("+t+")");return f.LOG_TABLE[t]},gexp:function(t){for(;0>t;)t+=255;for(;t>=256;)t-=255;return f.EXP_TABLE[t]},EXP_TABLE:new Array(256),LOG_TABLE:new Array(256)},g=0;8>g;g++)f.EXP_TABLE[g]=1<<g;for(g=8;256>g;g++)f.EXP_TABLE[g]=f.EXP_TABLE[g-4]^f.EXP_TABLE
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 37 2c 36 39 5d 2c 5b 34 2c 36 39 2c 34 33 2c 31 2c 37 30 2c 34 34 5d 2c 5b 36 2c 34 33 2c 31 39 2c 32 2c 34 34 2c 32 30 5d 2c 5b 36 2c 34 33 2c 31 35 2c 32 2c 34 34 2c 31 36 5d 2c 5b 34 2c 31 30 31 2c 38 31 5d 2c 5b 31 2c 38 30 2c 35 30 2c 34 2c 38 31 2c 35 31 5d 2c 5b 34 2c 35 30 2c 32 32 2c 34 2c 35 31 2c 32 33 5d 2c 5b 33 2c 33 36 2c 31 32 2c 38 2c 33 37 2c 31 33 5d 2c 5b 32 2c 31 31 36 2c 39 32 2c 32 2c 31 31 37 2c 39 33 5d 2c 5b 36 2c 35 38 2c 33 36 2c 32 2c 35 39 2c 33 37 5d 2c 5b 34 2c 34 36 2c 32 30 2c 36 2c 34 37 2c 32 31 5d 2c 5b 37 2c 34 32 2c 31 34 2c 34 2c 34 33 2c 31 35 5d 2c 5b 34 2c 31 33 33 2c 31 30 37 5d 2c 5b 38 2c 35 39 2c 33 37 2c 31 2c 36 30 2c 33 38 5d 2c 5b 38 2c 34 34 2c 32 30 2c 34 2c 34 35 2c 32 31 5d 2c 5b 31 32 2c 33 33 2c 31 Data Ascii: 7,69],[4,69,43,1,70,44],[6,43,19,2,44,20],[6,43,15,2,44,16],[4,101,81],[1,80,50,4,81,51],[4,50,22,4,51,23],[3,36,12,8,37,13],[2,116,92,2,117,93],[6,58,36,2,59,37],[4,46,20,6,47,21],[7,42,14,4,43,15],[4,133,107],[8,59,37,1,60,38],[8,44,20,4,45,21],[12,33,1
2025-01-15 16:44:54 UTC	1390	IN	Data Raw: 31 2c 35 35 2c 32 35 5d 2c 5b 31 31 2c 34 35 2c 31 35 2c 33 31 2c 34 36 2c 31 36 5d 2c 5b 37 2c 31 34 36 2c 31 31 36 2c 37 2c 31 34 37 2c 31 31 37 5d 2c 5b 32 31 2c 37 33 2c 34 35 2c 37 2c 37 34 2c 34 36 5d 2c 5b 31 2c 35 33 2c 32 33 2c 33 37 2c 35 34 2c 32 34 5d 2c 5b 31 39 2c 34 35 2c 31 35 2c 32 36 2c 34 36 2c 31 36 5d 2c 5b 35 2c 31 34 35 2c 31 31 35 2c 31 30 2c 31 34 36 2c 31 31 36 5d 2c 5b 31 39 2c 37 35 2c 34 37 2c 31 30 2c 37 36 2c 34 38 5d 2c 5b 31 35 2c 35 34 2c 32 34 2c 32 35 2c 35 35 2c 32 35 5d 2c 5b 32 33 2c 34 35 2c 31 35 2c 32 35 2c 34 36 2c 31 36 5d 2c 5b 31 33 2c 31 34 35 2c 31 31 35 2c 33 2c 31 34 36 2c 31 31 36 5d 2c 5b 32 2c 37 34 2c 34 36 2c 32 39 2c 37 35 2c 34 37 5d 2c 5b 34 32 2c 35 34 2c 32 34 2c 31 2c 35 35 2c 32 35 5d 2c 5b 32 Data Ascii: 1,55,25],[11,45,15,31,46,16],[7,146,116,7,147,117],[21,73,45,7,74,46],[1,53,23,37,54,24],[19,45,15,26,46,16],[5,145,115,10,146,116],[19,75,47,10,76,48],[15,54,24,25,55,25],[23,45,15,25,46,16],[13,145,115,3,146,116],[2,74,46,29,75,47],[42,54,24,1,55,25],[2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.18	60860	142.250.185.227	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:55 UTC	855	OUT	GET /recaptcha/api2/anchor?ar=1&k=6Ldjgd0kAAAAAITm7ipWF7o7kPL_81SaSfdINiOc&co=aHR0cHM6Ly93d3cudmlydXN0b3RhbC5jb206NDQz&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&cb=22vaoty9boel HTTP/1.1 Host: recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:44:55 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 15 Jan 2025 16:44:55 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-g10iItajVf1FNE8klgTKIQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:55 UTC	229	IN	Data Raw: 35 37 39 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 Data Ascii: 5793<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cy
2025-01-15 16:44:55 UTC	1390	IN	Data Raw: 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 41 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 Data Ascii: rillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A64
2025-01-15 16:44:55 UTC	1390	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 42 41 2c 20 55 2b 30 32 42 44 2d 30 32 43 35 2c 20 55 2b 30 32 43 37 2d 30 32 43 43 2c 20 55 2b 30 32 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02
2025-01-15 16:44:55 UTC	1390	IN	Data Raw: 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 Data Ascii: font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2025-01-15 16:44:55 UTC	1390	IN	Data Raw: 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 Data Ascii: ormat('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}/* cyrillic-ext */@font-face { font-family: '
2025-01-15 16:44:55 UTC	1390	IN	Data Raw: 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 33 30 39 2c 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a Data Ascii: /s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */
2025-01-15 16:44:55 UTC	1390	IN	Data Raw: 75 6a 35 56 70 6b 6e 76 74 5f 4c 6e 66 4e 62 46 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 67 31 30 69 49 74 61 6a 56 66 31 46 4e 45 38 6b 6c 67 54 4b 49 51 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 20 63 6c 61 73 73 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 3e 3c 2f 64 69 76 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 2d 74 6f 6b 65 6e 22 20 76 61 6c 75 65 3d 22 30 33 41 46 63 57 65 41 37 49 4b 61 37 70 6b 77 32 49 49 79 74 54 4a 68 75 32 33 76 63 36 43 75 7a 6c 6d 63 4a 44 33 50 32 72 38 35 33 77 72 6c Data Ascii: uj5Vpknvt_LnfNbF/recaptcha__en.js" nonce="g10iItajVf1FNE8klgTKIQ"> </script></head><body><div id="rc-anchor-alert" class="rc-anchor-alert"></div><input type="hidden" id="recaptcha-token" value="03AFcWeA7IKa7pkw2IIytTJhu23vc6CuzlmcJD3P2r853wrl
2025-01-15 16:44:55 UTC	1390	IN	Data Raw: 37 5f 66 61 55 52 6d 5a 38 56 35 33 77 75 6c 76 47 69 31 55 5a 6f 32 6e 63 58 64 4f 4f 70 4c 6b 48 73 32 35 44 35 48 61 32 5f 6e 62 42 63 38 51 46 33 66 74 59 70 57 53 71 6f 71 71 4e 4d 62 44 6a 4e 4d 6f 39 35 7a 69 55 4a 43 7a 68 45 4f 52 4b 37 41 4c 55 5f 47 39 55 55 4f 51 31 35 4f 2d 64 47 30 2d 65 70 4e 47 53 35 45 57 30 47 59 34 43 45 68 58 59 63 74 4c 4c 74 65 39 70 61 47 68 74 55 59 72 54 6d 54 53 77 6e 35 4b 6c 4b 37 64 74 67 46 71 31 69 47 34 59 68 4f 47 7a 31 50 46 73 76 34 71 46 4f 6f 6a 34 59 54 46 46 49 4f 79 46 36 37 63 63 5f 73 46 56 32 49 63 58 79 45 55 56 57 74 72 31 53 50 6e 76 57 55 54 72 44 4d 49 49 2d 42 39 72 52 77 56 65 39 54 68 47 44 67 52 50 6c 45 7a 38 50 73 7a 46 68 38 47 41 54 6f 66 52 52 35 4a 52 78 70 66 55 38 61 59 57 58 63 Data Ascii: 7_faURmZ8V53wulvGi1UZo2ncXdOOpLkHs25D5Ha2_nbBc8QF3ftYpWSqoqqNMbDjNMo95ziUJCzhEORK7ALU_G9UUOQ15O-dG0-epNGS5EW0GY4CEhXYctLLte9paGhtUYrTmTSwn5KlK7dtgFq1iG4YhOGz1PFsv4qFOoj4YTFFIOyF67cc_sFV2IcXyEUVWtr1SPnvWUTrDMII-B9rRwVe9ThGDgRPlEz8PszFh8GATofRR5JRxpfU8aYWXc
2025-01-15 16:44:55 UTC	1390	IN	Data Raw: 6e 56 55 57 54 51 30 64 31 70 4f 61 56 64 79 61 44 68 68 56 33 4e 49 63 6d 35 6c 53 30 68 4d 4c 7a 52 36 64 31 5a 59 63 58 4a 6b 5a 47 68 53 4f 58 52 78 54 6d 70 32 65 57 31 57 56 31 4e 57 56 6d 56 4a 64 46 56 6b 51 7a 4e 33 54 6e 52 58 65 6b 64 4b 55 43 74 36 52 58 67 78 53 79 39 4f 63 47 4e 78 53 7a 6c 6f 53 6b 6b 32 54 31 4e 36 4e 32 74 4c 55 6a 4e 71 52 58 56 5a 53 55 70 55 4e 7a 51 34 52 53 74 79 57 6b 73 72 61 6e 70 47 4d 6d 4a 76 4d 45 78 55 56 55 5a 70 61 6c 52 61 54 6c 6c 71 5a 31 6c 6d 5a 6d 51 31 64 6d 63 32 57 6d 6c 55 4d 31 64 54 65 6c 42 34 51 55 4e 78 4c 32 59 35 4d 44 4a 4c 52 54 68 52 55 32 31 45 51 32 39 70 51 55 70 54 64 47 4e 6b 62 7a 68 72 62 46 56 6f 61 30 4a 4f 51 30 52 6e 52 6a 56 56 63 45 49 76 56 30 64 46 61 44 56 78 56 43 38 30 Data Ascii: nVUWTQ0d1pOaVdyaDhhV3NIcm5lS0hMLzR6d1ZYcXJkZGhSOXRxTmp2eW1WV1NWVmVJdFVkQzN3TnRXekdKUCt6RXgxSy9OcGNxSzloSkk2T1N6N2tLUjNqRXVZSUpUNzQ4RStyWksranpGMmJvMExUVUZpalRaTllqZ1lmZmQ1dmc2WmlUM1dTelB4QUNxL2Y5MDJLRThRU21EQ29pQUpTdGNkbzhrbFVoa0JOQ0RnRjVVcEIvV0dFaDVxVC80
2025-01-15 16:44:55 UTC	1390	IN	Data Raw: 61 51 55 56 70 63 6c 4e 46 59 6c 70 79 62 31 41 32 61 6b 70 7a 4d 30 31 76 5a 6b 68 77 63 44 4e 49 4e 58 59 35 53 30 4e 4b 53 47 70 51 4f 55 67 31 65 55 52 59 51 57 4a 76 52 32 35 78 4d 44 6c 57 4d 45 52 36 53 30 4a 76 59 58 68 30 51 6d 6c 75 55 58 6c 6d 54 6e 46 36 54 6b 5a 75 63 47 56 73 4e 30 52 59 52 6b 5a 53 5a 55 64 56 53 58 56 54 62 32 6f 32 62 56 70 6d 57 57 68 61 62 7a 42 54 63 54 4e 6c 59 6b 6c 46 61 55 4e 45 56 6a 4a 6b 51 32 6c 4d 62 6a 68 61 56 55 4e 57 4d 33 59 76 54 6d 52 69 5a 45 30 35 53 6c 70 72 61 45 68 58 57 43 73 31 5a 31 46 34 4e 33 4a 5a 4e 7a 56 69 57 45 5a 49 53 44 4e 61 52 57 78 36 5a 6d 51 77 65 55 6c 58 61 6c 56 31 5a 6a 52 4e 54 57 68 68 52 30 67 72 54 44 6c 69 65 55 56 50 59 30 35 31 54 55 4e 4f 4c 7a 59 32 51 54 52 45 51 31 Data Ascii: aQUVpclNFYlpyb1A2akpzM01vZkhwcDNINXY5S0NKSGpQOUg1eURYQWJvR25xMDlWMER6S0JvYXh0QmluUXlmTnF6TkZucGVsN0RYRkZSZUdVSXVTb2o2bVpmWWhabzBTcTNlYklFaUNEVjJkQ2lMbjhaVUNWM3YvTmRiZE05SlpraEhXWCs1Z1F4N3JZNzViWEZISDNaRWx6ZmQweUlXalV1ZjRNTWhhR0grTDlieUVPY051TUNOLzY2QTREQ1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.18	60873	142.250.185.227	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:58 UTC	752	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF HTTP/1.1 Host: recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://recaptcha.net/recaptcha/api2/anchor?ar=1&k=6Ldjgd0kAAAAAITm7ipWF7o7kPL_81SaSfdINiOc&co=aHR0cHM6Ly93d3cudmlydXN0b3RhbC5jb206NDQz&hl=en&v=zIriijn3uj5Vpknvt_LnfNbF&size=invisible&cb=22vaoty9boel Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:44:58 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Wed, 15 Jan 2025 16:44:58 GMT Date: Wed, 15 Jan 2025 16:44:58 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:58 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 7a 49 72 69 69 6a 6e 33 75 6a 35 56 70 6b 6e 76 74 5f 4c 6e 66 4e 62 46 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js');
2025-01-15 16:44:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.18	60871	142.250.185.132	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:58 UTC	878	OUT	GET /js/bg/CY4IdQ8PNOqs9ugPxTaJh2hYWy8m1lFu__OIecPWn-w.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://recaptcha.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=LnnDfJWmvTG267wH4QJvcul0IvKrwvyw8MPaq-l42CpCu579z6rv5ud_KaMqYOWEOfjIq5nSoUfqgvvLgqEHZBEBiJZ6lvtm5TPnh_pa0ln8SYsnSFEEdakc_KkJFoEJaks0CuZ4gj73OFTbCo49e7sbQf7hCVR1MzbU_H44un5ABG7i19FQ2rYz87-tGIDutxVRvdgu
2025-01-15 16:44:58 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18936 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 15 Jan 2025 11:32:46 GMT Expires: Thu, 15 Jan 2026 11:32:46 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 30 Dec 2024 11:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 18732 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-15 16:44:58 UTC	579	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 50 3d 66 75 6e 63 74 69 6f 6e 28 56 2c 5a 29 7b 69 66 28 5a 3d 28 56 3d 6e 75 6c 6c 2c 4b 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 21 5a 7c 7c 21 5a 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 56 3b 74 72 79 7b 56 3d 5a 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 59 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 59 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 59 7d 29 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var P=function(V,Z){if(Z=(V=null,K).trustedTypes,!Z\|\|!Z.createPolicy)return V;try{V=Z.createPolicy("bg",{createHTML:Y,createScript:Y,createScriptURL:Y})}
2025-01-15 16:44:58 UTC	1390	IN	Data Raw: 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 5a 6e 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 2c 6c 2c 59 2c 50 2c 53 2c 51 2c 49 29 7b 72 65 74 75 72 6e 28 53 3d 28 59 3d 5b 2d 34 39 2c 37 36 2c 37 31 2c 2d 34 2c 36 32 2c 2d 32 30 2c 59 2c 2d 31 35 2c 36 35 2c 2d 34 30 5d 2c 50 3d 28 49 3d 56 70 2c 6c 26 37 29 2c 43 29 5b 56 2e 4c 5d 28 56 2e 6e 53 29 2c 53 29 5b 56 2e 4c 5d 3d 66 75 6e 63 74 69 6f 6e 28 57 29 7b 50 2b 3d 36 2b 28 51 3d 57 2c 37 29 2a 6c 2c 50 26 3d 37 7d 2c 53 2e 63 6f 6e 63 61 74 3d 66 75 6e 63 74 69 6f 6e 28 57 29 7b 72 65 74 75 72 6e 28 28 51 3d 28 57 3d 28 57 3d 2b 28 57 3d 5a 25 31 36 2b 31 2c 59 29 5b 50 2b 37 35 26 37 5d 2a 5a 2a 57 2d 31 36 30 2a Data Ascii: License-Identifier: Apache-2.0','/','var Zn=function(Z,V,l,Y,P,S,Q,I){return(S=(Y=[-49,76,71,-4,62,-20,Y,-15,65,-40],P=(I=Vp,l&7),C)[V.L](V.nS),S)[V.L]=function(W){P+=6+(Q=W,7)l,P&=7},S.concat=function(W){return((Q=(W=(W=+(W=Z%16+1,Y)[P+75&7]ZW-160*
2025-01-15 16:44:58 UTC	1390	IN	Data Raw: 6c 69 63 65 22 29 29 72 65 74 75 72 6e 22 61 72 72 61 79 22 3b 69 66 28 6c 3d 3d 22 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 22 7c 7c 74 79 70 65 6f 66 20 5a 2e 63 61 6c 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 20 5a 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 21 5a 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 22 63 61 6c 6c 22 29 29 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 7d 65 6c 73 65 20 72 65 74 75 72 6e 22 6e 75 6c 6c 22 3b 65 6c 73 65 20 69 66 28 56 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 5a 2e 63 61 6c 6c 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3b 72 65 74 Data Ascii: lice"))return"array";if(l=="[object Function]"\|\|typeof Z.call!="undefined"&&typeof Z.propertyIsEnumerable!="undefined"&&!Z.propertyIsEnumerable("call"))return"function"}else return"null";else if(V=="function"&&typeof Z.call=="undefined")return"object";ret
2025-01-15 16:44:58 UTC	1390	IN	Data Raw: 59 5b 50 2b 2b 5d 3d 56 3e 3e 31 38 7c 32 34 30 2c 59 5b 50 2b 2b 5d 3d 56 3e 3e 31 32 26 36 33 7c 31 32 38 29 3a 59 5b 50 2b 2b 5d 3d 56 3e 3e 31 32 7c 32 32 34 2c 59 5b 50 2b 2b 5d 3d 56 3e 3e 36 26 36 33 7c 31 32 38 29 2c 59 5b 50 2b 2b 5d 3d 56 26 36 33 7c 31 32 38 29 3b 72 65 74 75 72 6e 20 59 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 29 7b 69 66 28 56 3d 56 2e 4b 5b 5a 5d 2c 56 3d 3d 3d 76 6f 69 64 20 30 29 74 68 72 6f 77 5b 58 2c 33 30 2c 5a 5d 3b 69 66 28 56 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 56 2e 63 72 65 61 74 65 28 29 3b 72 65 74 75 72 6e 20 56 2e 63 72 65 61 74 65 28 5a 2a 34 2a 5a 2b 37 36 2a 5a 2b 35 33 29 2c 56 2e 70 72 6f 74 6f 74 79 70 65 7d 2c 57 71 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 2c 6c 2c 59 29 7b 66 6f 72 28 59 3d Data Ascii: Y[P++]=V>>18\|240,Y[P++]=V>>12&63\|128):Y[P++]=V>>12\|224,Y[P++]=V>>6&63\|128),Y[P++]=V&63\|128);return Y},g=function(Z,V){if(V=V.K[Z],V===void 0)throw[X,30,Z];if(V.value)return V.create();return V.create(Z4Z+76*Z+53),V.prototype},Wq=function(Z,V,l,Y){for(Y=
2025-01-15 16:44:58 UTC	1390	IN	Data Raw: 65 6e 67 74 68 2d 31 5d 7c 7c 39 35 2c 28 51 3d 67 28 34 38 32 2c 6c 29 29 26 26 51 5b 51 2e 6c 65 6e 67 74 68 2d 31 5d 3d 3d 49 7c 7c 66 28 6c 2c 34 38 32 2c 5b 49 26 32 35 35 5d 29 29 3a 66 28 6c 2c 32 38 34 2c 5b 39 35 5d 29 2c 66 28 6c 2c 33 37 2c 75 28 5a 2e 6c 65 6e 67 74 68 2c 32 29 2e 63 6f 6e 63 61 74 28 5a 29 2c 39 29 7d 66 69 6e 61 6c 6c 79 7b 6c 2e 73 3d 56 7d 7d 7d 2c 42 71 3d 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 72 65 74 75 72 6e 20 5a 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 2c 6c 2c 59 2c 50 2c 53 2c 51 2c 49 2c 57 2c 4b 2c 7a 2c 78 2c 54 2c 4c 29 7b 69 66 28 7a 3d 67 28 31 33 30 2c 6c 29 2c 7a 3e 3d 6c 2e 49 29 74 68 72 6f 77 5b 58 2c 33 31 5d 3b 66 6f 72 28 4b 3d 28 49 3d 28 51 3d 28 59 3d 30 2c 5a 29 2c 7a 29 2c 6c 2e 6d 64 2e 6c Data Ascii: ength-1]\|\|95,(Q=g(482,l))&&Q[Q.length-1]==I\|\|f(l,482,[I&255])):f(l,284,[95]),f(l,37,u(Z.length,2).concat(Z),9)}finally{l.s=V}}},Bq=function(Z){return Z},c=function(Z,V,l,Y,P,S,Q,I,W,K,z,x,T,L){if(z=g(130,l),z>=l.I)throw[X,31];for(K=(I=(Q=(Y=0,Z),z),l.md.l
2025-01-15 16:44:58 UTC	1390	IN	Data Raw: 2e 50 3d 28 56 2e 73 72 3d 30 2c 30 29 2c 5b 5d 29 2c 76 6f 69 64 20 30 29 2c 56 2e 4f 72 3d 21 28 56 2e 49 3d 30 2c 56 2e 4b 3d 5b 5d 2c 56 2e 54 3d 21 28 28 56 2e 56 55 3d 5b 5d 2c 56 29 2e 52 3d 76 6f 69 64 20 30 2c 56 2e 57 32 3d 66 61 6c 73 65 2c 56 2e 4c 53 3d 32 35 2c 56 2e 70 53 3d 50 2c 56 2e 72 6e 3d 28 56 2e 69 3d 76 6f 69 64 20 30 2c 30 29 2c 56 2e 4e 3d 5b 5d 2c 31 29 2c 31 29 2c 56 2e 41 3d 31 2c 56 29 2e 48 32 3d 28 56 2e 6a 49 3d 28 28 56 2e 47 3d 30 2c 56 29 2e 53 3d 5b 5d 2c 5b 5d 29 2c 6c 29 2c 76 6f 69 64 20 30 29 2c 56 2e 67 3d 30 2c 56 29 2e 57 3d 76 6f 69 64 20 30 2c 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 7b 7d 29 2c 6c 2e 74 69 6d 65 4f 72 69 67 69 6e 29 7c 7c 28 6c 2e 74 69 6d 69 6e 67 7c 7c 7b 7d 29 2e 6e 61 Data Ascii: .P=(V.sr=0,0),[]),void 0),V.Or=!(V.I=0,V.K=[],V.T=!((V.VU=[],V).R=void 0,V.W2=false,V.LS=25,V.pS=P,V.rn=(V.i=void 0,0),V.N=[],1),1),V.A=1,V).H2=(V.jI=((V.G=0,V).S=[],[]),l),void 0),V.g=0,V).W=void 0,window.performance\|\|{}),l.timeOrigin)\|\|(l.timing\|\|{}).na
2025-01-15 16:44:58 UTC	1390	IN	Data Raw: 28 31 38 2c 4b 2c 5b 7a 2c 54 2c 78 5d 29 29 7d 2c 28 55 28 33 37 36 2c 28 79 28 66 75 6e 63 74 69 6f 6e 28 4b 2c 7a 2c 78 29 7b 28 78 3d 28 7a 3d 28 78 3d 4f 28 28 7a 3d 4f 28 4b 29 2c 4b 29 29 2c 67 28 7a 2c 4b 29 29 21 3d 30 2c 67 28 78 2c 4b 29 29 2c 7a 29 26 26 55 28 31 33 30 2c 4b 2c 78 29 7d 2c 28 79 28 66 75 6e 63 74 69 6f 6e 28 4b 2c 7a 2c 78 2c 54 2c 4c 29 7b 28 4c 3d 28 78 3d 28 54 3d 28 78 3d 28 4c 3d 4f 28 28 7a 3d 4f 28 4b 29 2c 4b 29 29 2c 4f 28 4b 29 29 2c 54 3d 4f 28 4b 29 2c 67 28 54 2c 4b 29 29 2c 67 28 78 2c 4b 29 29 2c 67 28 4c 2c 4b 29 29 2c 55 29 28 7a 2c 4b 2c 47 73 28 78 2c 4c 2c 54 2c 4b 29 29 7d 2c 28 55 28 31 38 2c 56 2c 28 55 28 33 34 38 2c 28 79 28 66 75 6e 63 74 69 6f 6e 28 4b 2c 7a 2c 78 2c 54 2c 4c 29 7b 66 6f 72 28 78 3d Data Ascii: (18,K,[z,T,x]))},(U(376,(y(function(K,z,x){(x=(z=(x=O((z=O(K),K)),g(z,K))!=0,g(x,K)),z)&&U(130,K,x)},(y(function(K,z,x,T,L){(L=(x=(T=(x=(L=O((z=O(K),K)),O(K)),T=O(K),g(T,K)),g(x,K)),g(L,K)),U)(z,K,Gs(x,L,T,K))},(U(18,V,(U(348,(y(function(K,z,x,T,L){for(x=
2025-01-15 16:44:58 UTC	1390	IN	Data Raw: 2c 56 2c 28 28 56 2e 6b 75 79 64 71 73 3d 28 56 2e 6c 61 61 6e 74 66 3d 5b 5d 2c 56 2e 62 67 6f 64 6e 64 3d 30 2c 56 2e 63 70 6e 71 6a 6e 3d 22 22 2c 5b 5d 29 2c 56 29 2e 76 26 26 56 2e 76 2e 61 26 26 28 28 5a 3d 56 2e 76 2e 62 29 26 26 28 56 2e 62 67 6f 64 6e 64 3d 5a 29 2c 28 5a 3d 56 2e 76 2e 63 29 26 26 28 56 2e 63 70 6e 71 6a 6e 3d 5a 29 2c 28 5a 3d 56 2e 76 2e 64 29 26 26 28 56 2e 6b 75 79 64 71 73 3d 5a 29 2c 28 5a 3d 56 2e 76 2e 65 29 26 26 28 56 2e 6c 61 61 6e 74 66 3d 5a 29 29 2c 30 29 29 2c 34 34 37 29 2c 56 2c 30 29 2c 30 29 29 2c 56 29 2c 5b 5d 29 2c 56 29 2c 6b 29 2c 31 34 31 29 29 2c 56 29 2c 5b 32 30 34 38 5d 29 2c 66 75 6e 63 74 69 6f 6e 28 4b 29 7b 45 78 28 34 2c 4b 29 7d 29 2c 56 2c 33 38 38 29 2c 34 36 30 29 29 2c 34 34 35 29 29 2c 33 Data Ascii: ,V,((V.kuydqs=(V.laantf=[],V.bgodnd=0,V.cpnqjn="",[]),V).v&&V.v.a&&((Z=V.v.b)&&(V.bgodnd=Z),(Z=V.v.c)&&(V.cpnqjn=Z),(Z=V.v.d)&&(V.kuydqs=Z),(Z=V.v.e)&&(V.laantf=Z)),0)),447),V,0),0)),V),[]),V),k),141)),V),[2048]),function(K){Ex(4,K)}),V,388),460)),445)),3
2025-01-15 16:44:58 UTC	1390	IN	Data Raw: 72 6e 20 6c 7d 2c 67 72 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 2c 6c 2c 59 2c 50 2c 53 29 7b 66 6f 72 28 59 3d 28 56 3d 4f 28 28 53 3d 28 28 28 6c 3d 28 50 3d 5a 5b 68 31 5d 7c 7c 7b 7d 2c 4f 28 5a 29 29 2c 50 29 2e 78 44 3d 4f 28 5a 29 2c 50 29 2e 58 3d 5b 5d 2c 5a 2e 73 3d 3d 5a 3f 28 4e 28 5a 29 7c 30 29 2d 31 3a 31 29 2c 5a 29 29 2c 30 29 3b 59 3c 53 3b 59 2b 2b 29 50 2e 58 2e 70 75 73 68 28 4f 28 5a 29 29 3b 66 6f 72 28 3b 53 2d 2d 3b 29 50 2e 58 5b 53 5d 3d 67 28 50 2e 58 5b 53 5d 2c 5a 29 3b 72 65 74 75 72 6e 20 50 2e 52 62 3d 67 28 56 2c 5a 29 2c 50 2e 71 45 3d 67 28 6c 2c 5a 29 2c 50 7d 2c 70 75 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 2c 6c 29 7b 69 66 28 5a 2e 6c 65 6e 67 74 68 3d 3d 33 29 7b 66 6f 72 28 6c 3d 30 3b 6c 3c 33 3b 6c 2b 2b 29 56 5b Data Ascii: rn l},gr=function(Z,V,l,Y,P,S){for(Y=(V=O((S=(((l=(P=Z[h1]\|\|{},O(Z)),P).xD=O(Z),P).X=[],Z.s==Z?(N(Z)\|0)-1:1),Z)),0);Y<S;Y++)P.X.push(O(Z));for(;S--;)P.X[S]=g(P.X[S],Z);return P.Rb=g(V,Z),P.qE=g(l,Z),P},pu=function(Z,V,l){if(Z.length==3){for(l=0;l<3;l++)V[
2025-01-15 16:44:58 UTC	1390	IN	Data Raw: 2c 55 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 2c 6c 29 7b 69 66 28 5a 3d 3d 31 33 30 7c 7c 5a 3d 3d 34 34 37 29 56 2e 4b 5b 5a 5d 3f 56 2e 4b 5b 5a 5d 2e 63 6f 6e 63 61 74 28 6c 29 3a 56 2e 4b 5b 5a 5d 3d 65 4e 28 6c 2c 56 29 3b 65 6c 73 65 7b 69 66 28 56 2e 57 32 26 26 5a 21 3d 31 31 29 72 65 74 75 72 6e 3b 5a 3d 3d 31 37 34 7c 7c 5a 3d 3d 33 37 7c 7c 5a 3d 3d 39 7c 7c 5a 3d 3d 33 35 32 7c 7c 5a 3d 3d 39 30 7c 7c 5a 3d 3d 32 38 34 7c 7c 5a 3d 3d 34 38 32 7c 7c 5a 3d 3d 33 31 36 7c 7c 5a 3d 3d 33 37 36 7c 7c 5a 3d 3d 32 38 33 3f 56 2e 4b 5b 5a 5d 7c 7c 28 56 2e 4b 5b 5a 5d 3d 5a 6e 28 5a 2c 56 2c 36 32 2c 6c 29 29 3a 56 2e 4b 5b 5a 5d 3d 5a 6e 28 5a 2c 56 2c 35 37 2c 6c 29 7d 5a 3d 3d 31 31 26 26 28 56 2e 52 3d 63 28 33 32 2c 66 61 6c 73 65 2c 56 29 2c 56 Data Ascii: ,U=function(Z,V,l){if(Z==130\|\|Z==447)V.K[Z]?V.K[Z].concat(l):V.K[Z]=eN(l,V);else{if(V.W2&&Z!=11)return;Z==174\|\|Z==37\|\|Z==9\|\|Z==352\|\|Z==90\|\|Z==284\|\|Z==482\|\|Z==316\|\|Z==376\|\|Z==283?V.K[Z]\|\|(V.K[Z]=Zn(Z,V,62,l)):V.K[Z]=Zn(Z,V,57,l)}Z==11&&(V.R=c(32,false,V),V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.18	60877	142.250.185.227	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:59 UTC	397	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=zIriijn3uj5Vpknvt_LnfNbF HTTP/1.1 Host: recaptcha.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:44:59 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Wed, 15 Jan 2025 16:44:59 GMT Date: Wed, 15 Jan 2025 16:44:59 GMT Cache-Control: private, max-age=300 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Cross-Origin-Resource-Policy: same-site Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:59 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 7a 49 72 69 69 6a 6e 33 75 6a 35 56 70 6b 6e 76 74 5f 4c 6e 66 4e 62 46 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/zIriijn3uj5Vpknvt_LnfNbF/recaptcha__en.js');
2025-01-15 16:44:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.18	60878	142.250.186.100	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:59 UTC	705	OUT	GET /js/bg/CY4IdQ8PNOqs9ugPxTaJh2hYWy8m1lFu__OIecPWn-w.js HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiVocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=520=LnnDfJWmvTG267wH4QJvcul0IvKrwvyw8MPaq-l42CpCu579z6rv5ud_KaMqYOWEOfjIq5nSoUfqgvvLgqEHZBEBiJZ6lvtm5TPnh_pa0ln8SYsnSFEEdakc_KkJFoEJaks0CuZ4gj73OFTbCo49e7sbQf7hCVR1MzbU_H44un5ABG7i19FQ2rYz87-tGIDutxVRvdgu
2025-01-15 16:44:59 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18936 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 15 Jan 2025 10:53:32 GMT Expires: Thu, 15 Jan 2026 10:53:32 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 30 Dec 2024 11:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 21087 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-15 16:44:59 UTC	579	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 50 3d 66 75 6e 63 74 69 6f 6e 28 56 2c 5a 29 7b 69 66 28 5a 3d 28 56 3d 6e 75 6c 6c 2c 4b 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 21 5a 7c 7c 21 5a 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 56 3b 74 72 79 7b 56 3d 5a 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 59 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 59 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 59 7d 29 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var P=function(V,Z){if(Z=(V=null,K).trustedTypes,!Z\|\|!Z.createPolicy)return V;try{V=Z.createPolicy("bg",{createHTML:Y,createScript:Y,createScriptURL:Y})}
2025-01-15 16:44:59 UTC	1390	IN	Data Raw: 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 5a 6e 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 2c 6c 2c 59 2c 50 2c 53 2c 51 2c 49 29 7b 72 65 74 75 72 6e 28 53 3d 28 59 3d 5b 2d 34 39 2c 37 36 2c 37 31 2c 2d 34 2c 36 32 2c 2d 32 30 2c 59 2c 2d 31 35 2c 36 35 2c 2d 34 30 5d 2c 50 3d 28 49 3d 56 70 2c 6c 26 37 29 2c 43 29 5b 56 2e 4c 5d 28 56 2e 6e 53 29 2c 53 29 5b 56 2e 4c 5d 3d 66 75 6e 63 74 69 6f 6e 28 57 29 7b 50 2b 3d 36 2b 28 51 3d 57 2c 37 29 2a 6c 2c 50 26 3d 37 7d 2c 53 2e 63 6f 6e 63 61 74 3d 66 75 6e 63 74 69 6f 6e 28 57 29 7b 72 65 74 75 72 6e 28 28 51 3d 28 57 3d 28 57 3d 2b 28 57 3d 5a 25 31 36 2b 31 2c 59 29 5b 50 2b 37 35 26 37 5d 2a 5a 2a 57 2d 31 36 30 2a Data Ascii: License-Identifier: Apache-2.0','/','var Zn=function(Z,V,l,Y,P,S,Q,I){return(S=(Y=[-49,76,71,-4,62,-20,Y,-15,65,-40],P=(I=Vp,l&7),C)[V.L](V.nS),S)[V.L]=function(W){P+=6+(Q=W,7)l,P&=7},S.concat=function(W){return((Q=(W=(W=+(W=Z%16+1,Y)[P+75&7]ZW-160*
2025-01-15 16:44:59 UTC	1390	IN	Data Raw: 6c 69 63 65 22 29 29 72 65 74 75 72 6e 22 61 72 72 61 79 22 3b 69 66 28 6c 3d 3d 22 5b 6f 62 6a 65 63 74 20 46 75 6e 63 74 69 6f 6e 5d 22 7c 7c 74 79 70 65 6f 66 20 5a 2e 63 61 6c 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 20 5a 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 21 5a 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 22 63 61 6c 6c 22 29 29 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 7d 65 6c 73 65 20 72 65 74 75 72 6e 22 6e 75 6c 6c 22 3b 65 6c 73 65 20 69 66 28 56 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 5a 2e 63 61 6c 6c 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3b 72 65 74 Data Ascii: lice"))return"array";if(l=="[object Function]"\|\|typeof Z.call!="undefined"&&typeof Z.propertyIsEnumerable!="undefined"&&!Z.propertyIsEnumerable("call"))return"function"}else return"null";else if(V=="function"&&typeof Z.call=="undefined")return"object";ret
2025-01-15 16:44:59 UTC	1390	IN	Data Raw: 59 5b 50 2b 2b 5d 3d 56 3e 3e 31 38 7c 32 34 30 2c 59 5b 50 2b 2b 5d 3d 56 3e 3e 31 32 26 36 33 7c 31 32 38 29 3a 59 5b 50 2b 2b 5d 3d 56 3e 3e 31 32 7c 32 32 34 2c 59 5b 50 2b 2b 5d 3d 56 3e 3e 36 26 36 33 7c 31 32 38 29 2c 59 5b 50 2b 2b 5d 3d 56 26 36 33 7c 31 32 38 29 3b 72 65 74 75 72 6e 20 59 7d 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 29 7b 69 66 28 56 3d 56 2e 4b 5b 5a 5d 2c 56 3d 3d 3d 76 6f 69 64 20 30 29 74 68 72 6f 77 5b 58 2c 33 30 2c 5a 5d 3b 69 66 28 56 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 56 2e 63 72 65 61 74 65 28 29 3b 72 65 74 75 72 6e 20 56 2e 63 72 65 61 74 65 28 5a 2a 34 2a 5a 2b 37 36 2a 5a 2b 35 33 29 2c 56 2e 70 72 6f 74 6f 74 79 70 65 7d 2c 57 71 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 2c 6c 2c 59 29 7b 66 6f 72 28 59 3d Data Ascii: Y[P++]=V>>18\|240,Y[P++]=V>>12&63\|128):Y[P++]=V>>12\|224,Y[P++]=V>>6&63\|128),Y[P++]=V&63\|128);return Y},g=function(Z,V){if(V=V.K[Z],V===void 0)throw[X,30,Z];if(V.value)return V.create();return V.create(Z4Z+76*Z+53),V.prototype},Wq=function(Z,V,l,Y){for(Y=
2025-01-15 16:44:59 UTC	1390	IN	Data Raw: 65 6e 67 74 68 2d 31 5d 7c 7c 39 35 2c 28 51 3d 67 28 34 38 32 2c 6c 29 29 26 26 51 5b 51 2e 6c 65 6e 67 74 68 2d 31 5d 3d 3d 49 7c 7c 66 28 6c 2c 34 38 32 2c 5b 49 26 32 35 35 5d 29 29 3a 66 28 6c 2c 32 38 34 2c 5b 39 35 5d 29 2c 66 28 6c 2c 33 37 2c 75 28 5a 2e 6c 65 6e 67 74 68 2c 32 29 2e 63 6f 6e 63 61 74 28 5a 29 2c 39 29 7d 66 69 6e 61 6c 6c 79 7b 6c 2e 73 3d 56 7d 7d 7d 2c 42 71 3d 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 72 65 74 75 72 6e 20 5a 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 2c 6c 2c 59 2c 50 2c 53 2c 51 2c 49 2c 57 2c 4b 2c 7a 2c 78 2c 54 2c 4c 29 7b 69 66 28 7a 3d 67 28 31 33 30 2c 6c 29 2c 7a 3e 3d 6c 2e 49 29 74 68 72 6f 77 5b 58 2c 33 31 5d 3b 66 6f 72 28 4b 3d 28 49 3d 28 51 3d 28 59 3d 30 2c 5a 29 2c 7a 29 2c 6c 2e 6d 64 2e 6c Data Ascii: ength-1]\|\|95,(Q=g(482,l))&&Q[Q.length-1]==I\|\|f(l,482,[I&255])):f(l,284,[95]),f(l,37,u(Z.length,2).concat(Z),9)}finally{l.s=V}}},Bq=function(Z){return Z},c=function(Z,V,l,Y,P,S,Q,I,W,K,z,x,T,L){if(z=g(130,l),z>=l.I)throw[X,31];for(K=(I=(Q=(Y=0,Z),z),l.md.l
2025-01-15 16:44:59 UTC	1390	IN	Data Raw: 2e 50 3d 28 56 2e 73 72 3d 30 2c 30 29 2c 5b 5d 29 2c 76 6f 69 64 20 30 29 2c 56 2e 4f 72 3d 21 28 56 2e 49 3d 30 2c 56 2e 4b 3d 5b 5d 2c 56 2e 54 3d 21 28 28 56 2e 56 55 3d 5b 5d 2c 56 29 2e 52 3d 76 6f 69 64 20 30 2c 56 2e 57 32 3d 66 61 6c 73 65 2c 56 2e 4c 53 3d 32 35 2c 56 2e 70 53 3d 50 2c 56 2e 72 6e 3d 28 56 2e 69 3d 76 6f 69 64 20 30 2c 30 29 2c 56 2e 4e 3d 5b 5d 2c 31 29 2c 31 29 2c 56 2e 41 3d 31 2c 56 29 2e 48 32 3d 28 56 2e 6a 49 3d 28 28 56 2e 47 3d 30 2c 56 29 2e 53 3d 5b 5d 2c 5b 5d 29 2c 6c 29 2c 76 6f 69 64 20 30 29 2c 56 2e 67 3d 30 2c 56 29 2e 57 3d 76 6f 69 64 20 30 2c 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 7b 7d 29 2c 6c 2e 74 69 6d 65 4f 72 69 67 69 6e 29 7c 7c 28 6c 2e 74 69 6d 69 6e 67 7c 7c 7b 7d 29 2e 6e 61 Data Ascii: .P=(V.sr=0,0),[]),void 0),V.Or=!(V.I=0,V.K=[],V.T=!((V.VU=[],V).R=void 0,V.W2=false,V.LS=25,V.pS=P,V.rn=(V.i=void 0,0),V.N=[],1),1),V.A=1,V).H2=(V.jI=((V.G=0,V).S=[],[]),l),void 0),V.g=0,V).W=void 0,window.performance\|\|{}),l.timeOrigin)\|\|(l.timing\|\|{}).na
2025-01-15 16:44:59 UTC	1390	IN	Data Raw: 28 31 38 2c 4b 2c 5b 7a 2c 54 2c 78 5d 29 29 7d 2c 28 55 28 33 37 36 2c 28 79 28 66 75 6e 63 74 69 6f 6e 28 4b 2c 7a 2c 78 29 7b 28 78 3d 28 7a 3d 28 78 3d 4f 28 28 7a 3d 4f 28 4b 29 2c 4b 29 29 2c 67 28 7a 2c 4b 29 29 21 3d 30 2c 67 28 78 2c 4b 29 29 2c 7a 29 26 26 55 28 31 33 30 2c 4b 2c 78 29 7d 2c 28 79 28 66 75 6e 63 74 69 6f 6e 28 4b 2c 7a 2c 78 2c 54 2c 4c 29 7b 28 4c 3d 28 78 3d 28 54 3d 28 78 3d 28 4c 3d 4f 28 28 7a 3d 4f 28 4b 29 2c 4b 29 29 2c 4f 28 4b 29 29 2c 54 3d 4f 28 4b 29 2c 67 28 54 2c 4b 29 29 2c 67 28 78 2c 4b 29 29 2c 67 28 4c 2c 4b 29 29 2c 55 29 28 7a 2c 4b 2c 47 73 28 78 2c 4c 2c 54 2c 4b 29 29 7d 2c 28 55 28 31 38 2c 56 2c 28 55 28 33 34 38 2c 28 79 28 66 75 6e 63 74 69 6f 6e 28 4b 2c 7a 2c 78 2c 54 2c 4c 29 7b 66 6f 72 28 78 3d Data Ascii: (18,K,[z,T,x]))},(U(376,(y(function(K,z,x){(x=(z=(x=O((z=O(K),K)),g(z,K))!=0,g(x,K)),z)&&U(130,K,x)},(y(function(K,z,x,T,L){(L=(x=(T=(x=(L=O((z=O(K),K)),O(K)),T=O(K),g(T,K)),g(x,K)),g(L,K)),U)(z,K,Gs(x,L,T,K))},(U(18,V,(U(348,(y(function(K,z,x,T,L){for(x=
2025-01-15 16:44:59 UTC	1390	IN	Data Raw: 2c 56 2c 28 28 56 2e 6b 75 79 64 71 73 3d 28 56 2e 6c 61 61 6e 74 66 3d 5b 5d 2c 56 2e 62 67 6f 64 6e 64 3d 30 2c 56 2e 63 70 6e 71 6a 6e 3d 22 22 2c 5b 5d 29 2c 56 29 2e 76 26 26 56 2e 76 2e 61 26 26 28 28 5a 3d 56 2e 76 2e 62 29 26 26 28 56 2e 62 67 6f 64 6e 64 3d 5a 29 2c 28 5a 3d 56 2e 76 2e 63 29 26 26 28 56 2e 63 70 6e 71 6a 6e 3d 5a 29 2c 28 5a 3d 56 2e 76 2e 64 29 26 26 28 56 2e 6b 75 79 64 71 73 3d 5a 29 2c 28 5a 3d 56 2e 76 2e 65 29 26 26 28 56 2e 6c 61 61 6e 74 66 3d 5a 29 29 2c 30 29 29 2c 34 34 37 29 2c 56 2c 30 29 2c 30 29 29 2c 56 29 2c 5b 5d 29 2c 56 29 2c 6b 29 2c 31 34 31 29 29 2c 56 29 2c 5b 32 30 34 38 5d 29 2c 66 75 6e 63 74 69 6f 6e 28 4b 29 7b 45 78 28 34 2c 4b 29 7d 29 2c 56 2c 33 38 38 29 2c 34 36 30 29 29 2c 34 34 35 29 29 2c 33 Data Ascii: ,V,((V.kuydqs=(V.laantf=[],V.bgodnd=0,V.cpnqjn="",[]),V).v&&V.v.a&&((Z=V.v.b)&&(V.bgodnd=Z),(Z=V.v.c)&&(V.cpnqjn=Z),(Z=V.v.d)&&(V.kuydqs=Z),(Z=V.v.e)&&(V.laantf=Z)),0)),447),V,0),0)),V),[]),V),k),141)),V),[2048]),function(K){Ex(4,K)}),V,388),460)),445)),3
2025-01-15 16:44:59 UTC	1390	IN	Data Raw: 72 6e 20 6c 7d 2c 67 72 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 2c 6c 2c 59 2c 50 2c 53 29 7b 66 6f 72 28 59 3d 28 56 3d 4f 28 28 53 3d 28 28 28 6c 3d 28 50 3d 5a 5b 68 31 5d 7c 7c 7b 7d 2c 4f 28 5a 29 29 2c 50 29 2e 78 44 3d 4f 28 5a 29 2c 50 29 2e 58 3d 5b 5d 2c 5a 2e 73 3d 3d 5a 3f 28 4e 28 5a 29 7c 30 29 2d 31 3a 31 29 2c 5a 29 29 2c 30 29 3b 59 3c 53 3b 59 2b 2b 29 50 2e 58 2e 70 75 73 68 28 4f 28 5a 29 29 3b 66 6f 72 28 3b 53 2d 2d 3b 29 50 2e 58 5b 53 5d 3d 67 28 50 2e 58 5b 53 5d 2c 5a 29 3b 72 65 74 75 72 6e 20 50 2e 52 62 3d 67 28 56 2c 5a 29 2c 50 2e 71 45 3d 67 28 6c 2c 5a 29 2c 50 7d 2c 70 75 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 2c 6c 29 7b 69 66 28 5a 2e 6c 65 6e 67 74 68 3d 3d 33 29 7b 66 6f 72 28 6c 3d 30 3b 6c 3c 33 3b 6c 2b 2b 29 56 5b Data Ascii: rn l},gr=function(Z,V,l,Y,P,S){for(Y=(V=O((S=(((l=(P=Z[h1]\|\|{},O(Z)),P).xD=O(Z),P).X=[],Z.s==Z?(N(Z)\|0)-1:1),Z)),0);Y<S;Y++)P.X.push(O(Z));for(;S--;)P.X[S]=g(P.X[S],Z);return P.Rb=g(V,Z),P.qE=g(l,Z),P},pu=function(Z,V,l){if(Z.length==3){for(l=0;l<3;l++)V[
2025-01-15 16:44:59 UTC	1390	IN	Data Raw: 2c 55 3d 66 75 6e 63 74 69 6f 6e 28 5a 2c 56 2c 6c 29 7b 69 66 28 5a 3d 3d 31 33 30 7c 7c 5a 3d 3d 34 34 37 29 56 2e 4b 5b 5a 5d 3f 56 2e 4b 5b 5a 5d 2e 63 6f 6e 63 61 74 28 6c 29 3a 56 2e 4b 5b 5a 5d 3d 65 4e 28 6c 2c 56 29 3b 65 6c 73 65 7b 69 66 28 56 2e 57 32 26 26 5a 21 3d 31 31 29 72 65 74 75 72 6e 3b 5a 3d 3d 31 37 34 7c 7c 5a 3d 3d 33 37 7c 7c 5a 3d 3d 39 7c 7c 5a 3d 3d 33 35 32 7c 7c 5a 3d 3d 39 30 7c 7c 5a 3d 3d 32 38 34 7c 7c 5a 3d 3d 34 38 32 7c 7c 5a 3d 3d 33 31 36 7c 7c 5a 3d 3d 33 37 36 7c 7c 5a 3d 3d 32 38 33 3f 56 2e 4b 5b 5a 5d 7c 7c 28 56 2e 4b 5b 5a 5d 3d 5a 6e 28 5a 2c 56 2c 36 32 2c 6c 29 29 3a 56 2e 4b 5b 5a 5d 3d 5a 6e 28 5a 2c 56 2c 35 37 2c 6c 29 7d 5a 3d 3d 31 31 26 26 28 56 2e 52 3d 63 28 33 32 2c 66 61 6c 73 65 2c 56 29 2c 56 Data Ascii: ,U=function(Z,V,l){if(Z==130\|\|Z==447)V.K[Z]?V.K[Z].concat(l):V.K[Z]=eN(l,V);else{if(V.W2&&Z!=11)return;Z==174\|\|Z==37\|\|Z==9\|\|Z==352\|\|Z==90\|\|Z==284\|\|Z==482\|\|Z==316\|\|Z==376\|\|Z==283?V.K[Z]\|\|(V.K[Z]=Zn(Z,V,62,l)):V.K[Z]=Zn(Z,V,57,l)}Z==11&&(V.R=c(32,false,V),V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.18	60866	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:59 UTC	364	OUT	GET /gui/static/opensearch.xml HTTP/1.1 Host: www.virustotal.com Connection: keep-alive Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:44:59 UTC	381	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:44:59 GMT expires: Wed, 15 Jan 2025 16:45:59 GMT cache-control: public, max-age=60 etag: "iyPWYw" x-cloud-trace-context: 73d5b4c19f7c945d3167bc1224bbacbe content-type: application/xml server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:44:59 UTC	399	IN	Data Raw: 31 38 33 0d 0a 3c 4f 70 65 6e 53 65 61 72 63 68 44 65 73 63 72 69 70 74 69 6f 6e 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 61 39 2e 63 6f 6d 2f 2d 2f 73 70 65 63 2f 6f 70 65 6e 73 65 61 72 63 68 2f 31 2e 31 2f 22 3e 0a 09 3c 53 68 6f 72 74 4e 61 6d 65 3e 56 54 20 53 65 61 72 63 68 3c 2f 53 68 6f 72 74 4e 61 6d 65 3e 0a 09 3c 44 65 73 63 72 69 70 74 69 6f 6e 3e 55 73 65 20 56 69 72 75 73 74 6f 74 61 6c 20 74 6f 20 73 65 61 72 63 68 20 65 6e 74 69 74 69 65 73 3c 2f 44 65 73 63 72 69 70 74 69 6f 6e 3e 0a 09 3c 55 72 6c 20 74 79 70 65 3d 22 74 65 78 74 2f 68 74 6d 6c 22 20 74 65 6d 70 6c 61 74 65 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 67 75 69 2f 73 65 61 72 63 68 2f 7b 73 65 61 72 63 68 54 65 72 6d 73 7d 22 Data Ascii: 183<OpenSearchDescription xmlns="http://a9.com/-/spec/opensearch/1.1/"><ShortName>VT Search</ShortName><Description>Use Virustotal to search entities</Description><Url type="text/html" template="https://www.virustotal.com/gui/search/{searchTerms}"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.18	60880	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:59 UTC	739	OUT	GET /gui/images/favicon.svg HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959494.0.0.0
2025-01-15 16:45:00 UTC	379	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:00 GMT expires: Wed, 15 Jan 2025 16:46:00 GMT cache-control: public, max-age=60 etag: "iyPWYw" x-cloud-trace-context: 7214e7ddf2abeed84583def9d002874f content-type: image/svg+xml server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:00 UTC	232	IN	Data Raw: 64 64 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 65 6d 22 20 68 65 69 67 68 74 3d 22 31 65 6d 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 30 20 38 39 22 3e 0a 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 62 34 64 64 61 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 34 35 2e 32 39 32 20 34 34 2e 35 20 30 20 38 39 68 31 30 30 56 30 48 30 6c 34 35 2e 32 39 32 20 34 34 2e 35 7a 4d 39 30 20 38 30 48 32 32 6c 33 35 2e 39 38 37 2d 33 35 2e 32 4c 32 32 20 39 68 36 38 76 37 31 7a 22 3e 3c 2f 70 61 74 68 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: dd<svg width="1em" height="1em" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 89"> <path fill="#0b4dda" fill-rule="evenodd" d="M45.292 44.5 0 89h100V0H0l45.292 44.5zM90 80H22l35.987-35.2L22 9h68v71z"></path></svg>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.18	60881	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:59 UTC	609	OUT	GET /gui/service-worker.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.virustotal.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959494.0.0.0
2025-01-15 16:45:00 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:00 GMT expires: Thu, 15 Jan 2026 16:45:00 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 1198d4c753184794b66fd6b858306e79 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:00 UTC	1003	IN	Data Raw: 33 39 34 30 0d 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 36 38 31 3a 28 29 3d 3e 7b 74 72 79 7b 73 65 6c 66 5b 22 77 6f 72 6b 62 6f 78 3a 63 61 63 68 65 61 62 6c 65 2d 72 65 73 70 6f 6e 73 65 3a 37 2e 30 2e 30 22 5d 26 26 5f 28 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 39 38 32 3a 28 29 3d 3e 7b 74 72 79 7b 73 65 6c 66 5b 22 77 6f 72 6b 62 6f 78 3a 63 6f 72 65 3a 37 2e 30 2e 30 22 5d 26 26 5f 28 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 37 32 30 3a 28 29 3d 3e 7b 74 72 79 7b 73 65 6c 66 5b 22 77 6f 72 6b 62 6f 78 3a 65 78 70 69 72 61 74 69 6f 6e 3a 37 2e 30 2e 30 22 5d 26 26 5f 28 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 32 36 31 3a 28 29 3d 3e 7b 74 72 79 7b 73 65 6c 66 5b 22 77 6f 72 6b 62 6f 78 3a 70 72 65 63 61 Data Ascii: 3940(()=>{"use strict";var e={681:()=>{try{self["workbox:cacheable-response:7.0.0"]&&_()}catch(e){}},982:()=>{try{self["workbox:core:7.0.0"]&&_()}catch(e){}},720:()=>{try{self["workbox:expiration:7.0.0"]&&_()}catch(e){}},261:()=>{try{self["workbox:preca
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 74 68 69 73 2e 5f 73 74 61 74 75 73 65 73 3d 65 2e 73 74 61 74 75 73 65 73 2c 74 68 69 73 2e 5f 68 65 61 64 65 72 73 3d 65 2e 68 65 61 64 65 72 73 7d 69 73 52 65 73 70 6f 6e 73 65 43 61 63 68 65 61 62 6c 65 28 65 29 7b 6c 65 74 20 74 3d 21 30 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 74 61 74 75 73 65 73 26 26 28 74 3d 74 68 69 73 2e 5f 73 74 61 74 75 73 65 73 2e 69 6e 63 6c 75 64 65 73 28 65 2e 73 74 61 74 75 73 29 29 2c 74 68 69 73 2e 5f 68 65 61 64 65 72 73 26 26 74 26 26 28 74 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 68 69 73 2e 5f 68 65 61 64 65 72 73 29 2e 73 6f 6d 65 28 28 74 3d 3e 65 2e 68 65 61 64 65 72 73 2e 67 65 74 28 74 29 3d 3d 3d 74 Data Ascii: d 0!==arguments[0]?arguments[0]:{};this._statuses=e.statuses,this._headers=e.headers}isResponseCacheable(e){let t=!0;return this._statuses&&(t=this._statuses.includes(e.status)),this._headers&&t&&(t=Object.keys(this._headers).some((t=>e.headers.get(t)===t
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 7c 22 6f 62 6a 65 63 74 53 74 6f 72 65 4e 61 6d 65 73 22 69 6e 20 49 44 42 54 72 61 6e 73 61 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 3f 28 6c 7c 7c 28 6c 3d 5b 49 44 42 43 75 72 73 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 76 61 6e 63 65 2c 49 44 42 43 75 72 73 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 74 69 6e 75 65 2c 49 44 42 43 75 72 73 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 74 69 6e 75 65 50 72 69 6d 61 72 79 4b 65 79 5d 29 29 2e 69 6e 63 6c 75 64 65 73 28 65 29 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 3d 6e 65 77 20 41 72 72 61 79 28 74 29 2c 72 3d 30 3b 72 3c 74 3b 72 2b 2b 29 6e 5b 72 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 72 65 74 75 72 6e Data Ascii: \|"objectStoreNames"in IDBTransaction.prototype?(l\|\|(l=[IDBCursor.prototype.advance,IDBCursor.prototype.continue,IDBCursor.prototype.continuePrimaryKey])).includes(e)?function(){for(var t=arguments.length,n=new Array(t),r=0;r<t;r++)n[r]=arguments[r];return
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 2c 69 29 7d 29 29 3b 72 65 74 75 72 6e 20 74 2e 74 68 65 6e 28 28 74 3d 3e 7b 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 49 44 42 43 75 72 73 6f 72 26 26 66 2e 73 65 74 28 74 2c 65 29 7d 29 29 2e 63 61 74 63 68 28 28 28 29 3d 3e 7b 7d 29 29 2c 70 2e 73 65 74 28 74 2c 65 29 2c 74 7d 28 65 29 3b 69 66 28 79 2e 68 61 73 28 65 29 29 72 65 74 75 72 6e 20 79 2e 67 65 74 28 65 29 3b 63 6f 6e 73 74 20 74 3d 67 28 65 29 3b 72 65 74 75 72 6e 20 74 21 3d 3d 65 26 26 28 79 2e 73 65 74 28 65 2c 74 29 2c 70 2e 73 65 74 28 74 2c 65 29 29 2c 74 7d 63 6f 6e 73 74 20 77 3d 65 3d 3e 70 2e 67 65 74 28 65 29 3b 66 75 6e 63 74 69 6f 6e 20 5f 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 Data Ascii: ,i)}));return t.then((t=>{t instanceof IDBCursor&&f.set(t,e)})).catch((()=>{})),p.set(t,e),t}(e);if(y.has(e))return y.get(e);const t=g(e);return t!==e&&(y.set(e,t),p.set(t,e)),t}const w=e=>p.get(e);function _(e,t){var n=Object.keys(e);if(Object.getOwnProp
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 74 22 5d 2c 45 3d 5b 22 70 75 74 22 2c 22 61 64 64 22 2c 22 64 65 6c 65 74 65 22 2c 22 63 6c 65 61 72 22 5d 2c 43 3d 6e 65 77 20 4d 61 70 3b 66 75 6e 63 74 69 6f 6e 20 49 28 65 2c 74 29 7b 69 66 28 21 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 49 44 42 44 61 74 61 62 61 73 65 29 7c 7c 74 20 69 6e 20 65 7c 7c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 3b 69 66 28 43 2e 67 65 74 28 74 29 29 72 65 74 75 72 6e 20 43 2e 67 65 74 28 74 29 3b 63 6f 6e 73 74 20 6e 3d 74 2e 72 65 70 6c 61 63 65 28 2f 46 72 6f 6d 49 6e 64 65 78 24 2f 2c 22 22 29 2c 72 3d 74 21 3d 3d 6e 2c 6f 3d 45 2e 69 6e 63 6c 75 64 65 73 28 6e 29 3b 69 66 28 21 28 6e 20 69 6e 28 72 3f 49 44 42 49 6e 64 65 78 3a 49 44 42 4f 62 6a 65 63 74 53 74 6f 72 65 29 2e 70 72 Data Ascii: t"],E=["put","add","delete","clear"],C=new Map;function I(e,t){if(!(e instanceof IDBDatabase)\|\|t in e\|\|"string"!=typeof t)return;if(C.get(t))return C.get(t);const n=t.replace(/FromIndex$/,""),r=t!==n,o=E.includes(n);if(!(n in(r?IDBIndex:IDBObjectStore).pr
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 20 74 3d 65 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 53 74 6f 72 65 28 6a 2c 7b 6b 65 79 50 61 74 68 3a 22 69 64 22 7d 29 3b 74 2e 63 72 65 61 74 65 49 6e 64 65 78 28 22 63 61 63 68 65 4e 61 6d 65 22 2c 22 63 61 63 68 65 4e 61 6d 65 22 2c 7b 75 6e 69 71 75 65 3a 21 31 7d 29 2c 74 2e 63 72 65 61 74 65 49 6e 64 65 78 28 22 74 69 6d 65 73 74 61 6d 70 22 2c 22 74 69 6d 65 73 74 61 6d 70 22 2c 7b 75 6e 69 71 75 65 3a 21 31 7d 29 7d 5f 75 70 67 72 61 64 65 44 62 41 6e 64 44 65 6c 65 74 65 4f 6c 64 44 62 73 28 65 29 7b 74 68 69 73 2e 5f 75 70 67 72 61 64 65 44 62 28 65 29 2c 74 68 69 73 2e 5f 63 61 63 68 65 4e 61 6d 65 26 26 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 65 74 20 74 3d 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d Data Ascii: t=e.createObjectStore(j,{keyPath:"id"});t.createIndex("cacheName","cacheName",{unique:!1}),t.createIndex("timestamp","timestamp",{unique:!1})}_upgradeDbAndDeleteOldDbs(e){this._upgradeDb(e),this._cacheName&&function(e){let t=(arguments.length>1&&void 0!=
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 62 6c 6f 63 6b 65 64 2c 6f 3d 6e 2e 75 70 67 72 61 64 65 2c 69 3d 6e 2e 62 6c 6f 63 6b 69 6e 67 2c 61 3d 6e 2e 74 65 72 6d 69 6e 61 74 65 64 3b 63 6f 6e 73 74 20 73 3d 69 6e 64 65 78 65 64 44 42 2e 6f 70 65 6e 28 65 2c 74 29 2c 63 3d 62 28 73 29 3b 72 65 74 75 72 6e 20 6f 26 26 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 70 67 72 61 64 65 6e 65 65 64 65 64 22 2c 28 65 3d 3e 7b 6f 28 62 28 73 2e 72 65 73 75 6c 74 29 2c 65 2e 6f 6c 64 56 65 72 73 69 6f 6e 2c 65 2e 6e 65 77 56 65 72 73 69 6f 6e 2c 62 28 73 2e 74 72 61 6e 73 61 63 74 69 6f 6e 29 2c 65 29 7d 29 29 2c 72 26 26 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 6c 6f 63 6b 65 64 22 2c 28 65 3d 3e 72 28 65 2e 6f 6c 64 56 65 72 73 69 6f 6e 2c 65 2e 6e 65 77 56 65 72 Data Ascii: blocked,o=n.upgrade,i=n.blocking,a=n.terminated;const s=indexedDB.open(e,t),c=b(s);return o&&s.addEventListener("upgradeneeded",(e=>{o(b(s.result),e.oldVersion,e.newVersion,b(s.transaction),e)})),r&&s.addEventListener("blocked",(e=>r(e.oldVersion,e.newVer
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 6c 79 7b 69 66 28 73 29 74 68 72 6f 77 20 69 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 65 2c 74 29 7b 28 6e 75 6c 6c 3d 3d 74 7c 7c 74 3e 65 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 41 72 72 61 79 28 74 29 3b 6e 3c 74 3b 6e 2b 2b 29 72 5b 6e 5d 3d 65 5b 6e 5d 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 54 28 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 2c 61 29 7b 74 72 79 7b 76 61 72 20 73 3d 65 5b 69 5d 28 61 29 2c 63 3d 73 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 28 65 29 7d 73 2e 64 6f 6e 65 3f 74 28 63 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 63 29 2e 74 68 65 6e 28 72 2c 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 65 29 Data Ascii: ly{if(s)throw i}}}}function N(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var n=0,r=Array(t);n<t;n++)r[n]=e[n];return r}function T(e,t,n,r,o,i,a){try{var s=e[i](a),c=s.value}catch(e){return void n(e)}s.done?t(c):Promise.resolve(c).then(r,o)}function M(e)
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 74 69 6d 65 73 74 61 6d 70 4d 6f 64 65 6c 2e 67 65 74 54 69 6d 65 73 74 61 6d 70 28 65 29 2c 72 3d 44 61 74 65 2e 6e 6f 77 28 29 2d 31 65 33 2a 74 2e 5f 6d 61 78 41 67 65 53 65 63 6f 6e 64 73 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 6e 7c 7c 6e 3c 72 7d 72 65 74 75 72 6e 21 31 7d 29 29 28 29 7d 64 65 6c 65 74 65 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 4d 28 28 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 65 2e 5f 72 65 72 75 6e 52 65 71 75 65 73 74 65 64 3d 21 31 2c 79 69 65 6c 64 20 65 2e 5f 74 69 6d 65 73 74 61 6d 70 4d 6f 64 65 6c 2e 65 78 70 69 72 65 45 6e 74 72 69 65 73 28 31 2f 30 29 7d 29 29 28 29 7d 7d 63 6f 6e 73 74 20 4c 3d 7b 67 6f 6f 67 6c 65 41 6e 61 6c 79 74 69 63 73 3a 22 67 6f 6f 67 6c 65 41 6e 61 6c 79 74 69 63 73 Data Ascii: timestampModel.getTimestamp(e),r=Date.now()-1e3t._maxAgeSeconds;return void 0===n\|\|n<r}return!1}))()}delete(){var e=this;return M((function(){e._rerunRequested=!1,yield e._timestampModel.expireEntries(1/0)}))()}}const L={googleAnalytics:"googleAnalytics
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 72 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 3f 56 28 65 2c 74 29 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 56 28 65 2c 74 29 7b 28 6e 75 6c 6c 3d 3d 74 7c 7c 74 3e 65 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 65 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 41 72 72 61 79 28 74 29 3b 6e 3c 74 3b 6e 2b 2b 29 72 5b 6e 5d 3d 65 5b 6e 5d 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 2c 74 2c 6e 2c 72 2c 6f 2c 69 2c 61 29 7b 74 72 79 7b 76 61 72 20 73 3d 65 5b 69 5d 28 61 29 2c 63 3d 73 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 28 65 29 7d 73 2e 64 6f 6e 65 3f 74 28 63 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 63 29 2e 74 68 65 6e 28 72 2c 6f 29 7d 66 75 Data Ascii: rray$/.test(n)?V(e,t):void 0}}function V(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var n=0,r=Array(t);n<t;n++)r[n]=e[n];return r}function Q(e,t,n,r,o,i,a){try{var s=e[i](a),c=s.value}catch(e){return void n(e)}s.done?t(c):Promise.resolve(c).then(r,o)}fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.18	60879	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:44:59 UTC	537	OUT	GET /gui/manifest.json HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-15 16:45:00 UTC	382	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:00 GMT expires: Wed, 15 Jan 2025 16:46:00 GMT cache-control: public, max-age=60 etag: "iyPWYw" x-cloud-trace-context: b5434babd9d49d69f176778ba7dfc462 content-type: application/json server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:00 UTC	447	IN	Data Raw: 31 62 33 0d 0a 7b 0a 20 20 22 6e 61 6d 65 22 3a 20 22 56 69 72 75 73 54 6f 74 61 6c 22 2c 0a 20 20 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 20 22 56 69 72 75 73 54 6f 74 61 6c 22 2c 0a 20 20 22 73 74 61 72 74 5f 75 72 6c 22 3a 20 22 2e 2f 22 2c 0a 20 20 22 64 69 73 70 6c 61 79 22 3a 20 22 73 74 61 6e 64 61 6c 6f 6e 65 22 2c 0a 20 20 22 74 68 65 6d 65 5f 63 6f 6c 6f 72 22 3a 20 22 23 33 66 35 31 62 35 22 2c 0a 20 20 22 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 20 22 23 33 66 35 31 62 35 22 2c 0a 20 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 73 72 63 22 3a 20 22 69 6d 61 67 65 73 2f 6d 61 6e 69 66 65 73 74 2f 69 63 6f 6e 2d 31 39 32 78 31 39 32 2e 70 6e 67 22 2c 0a 20 20 20 20 20 20 22 73 69 7a 65 73 22 3a 20 22 31 Data Ascii: 1b3{ "name": "VirusTotal", "short_name": "VirusTotal", "start_url": "./", "display": "standalone", "theme_color": "#3f51b5", "background_color": "#3f51b5", "icons": [ { "src": "images/manifest/icon-192x192.png", "sizes": "1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.18	60882	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:00 UTC	500	OUT	GET /gui/images/favicon.svg HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959494.0.0.0
2025-01-15 16:45:00 UTC	379	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:00 GMT expires: Wed, 15 Jan 2025 16:46:00 GMT cache-control: public, max-age=60 etag: "iyPWYw" x-cloud-trace-context: f7a11792e4b087b3be48f2125526689c content-type: image/svg+xml server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:00 UTC	227	IN	Data Raw: 64 64 0d 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 31 65 6d 22 20 68 65 69 67 68 74 3d 22 31 65 6d 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 30 20 38 39 22 3e 0a 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 30 62 34 64 64 61 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 34 35 2e 32 39 32 20 34 34 2e 35 20 30 20 38 39 68 31 30 30 56 30 48 30 6c 34 35 2e 32 39 32 20 34 34 2e 35 7a 4d 39 30 20 38 30 48 32 32 6c 33 35 2e 39 38 37 2d 33 35 2e 32 4c 32 32 20 39 68 36 38 76 37 31 7a 22 3e 3c 2f 70 61 74 68 3e 0a 3c 2f 73 76 67 3e 0a 0d 0a Data Ascii: dd<svg width="1em" height="1em" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 89"> <path fill="#0b4dda" fill-rule="evenodd" d="M45.292 44.5 0 89h100V0H0l45.292 44.5zM90 80H22l35.987-35.2L22 9h68v71z"></path></svg>
2025-01-15 16:45:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.18	60883	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:00 UTC	753	OUT	GET /gui/images/manifest/icon-192x192.png HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959494.0.0.0
2025-01-15 16:45:00 UTC	375	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:00 GMT expires: Wed, 15 Jan 2025 16:46:00 GMT cache-control: public, max-age=60 etag: "iyPWYw" x-cloud-trace-context: cbd2b0ef1faf833226ce94eafb031437 content-type: image/png server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:00 UTC	1015	IN	Data Raw: 32 32 33 63 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 06 00 00 00 52 dc 6c 07 00 00 22 03 49 44 41 54 78 da ed 5d eb 93 1d c5 75 df 9a 8f fa c8 1f a0 8f 77 85 1d 13 13 48 1c b0 63 9b 18 02 d8 ae 04 9c aa c4 09 55 c1 49 91 4d 85 72 19 dd 15 c8 b0 bc 21 2b 21 0c c8 8b 29 05 81 09 e6 21 05 6c 48 04 c6 c1 06 8c 6d 08 60 63 84 c1 98 60 dd bb 2f 69 57 fb 92 b4 ab 7d bf d5 99 9e fb ea e9 e9 e9 3e a7 1f 77 e6 6a 7b aa a6 6e ef dd 99 73 e7 d1 a7 fb 3c 7e e7 d7 6d 6d 6d 6d 41 5b 7c 0b b8 cf 36 c1 31 69 c7 41 b6 c0 e0 bb da f7 81 a2 0d 95 25 3b 0e d2 6e 33 b8 f7 ac e4 a7 3d 47 d9 fb 0d 34 de 57 ab c9 47 3d e0 00 f1 d2 02 83 17 26 bb c9 c0 40 be 89 32 ab 14 33 d0 bc d6 66 c9 6f 93 bc c3 40 f2 bd ee f5 e6 5d be 56 a7 c6 be 4c d3 Data Ascii: 223cPNGIHDRRl"IDATx]uwHcUIMr!+!)!lHm`c`/iW}>wj{ns<~mmmmA[\|61iA%;n3=G4WG=&@23fo@]VL
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 33 dd 84 63 13 e5 2f 32 4e b1 b6 09 04 86 95 aa 32 bc cd 18 15 4c 12 67 3e 0a d4 fc c8 5b 13 22 7b 3d 06 f0 72 b8 cd 14 fe d0 4e d1 34 ad 32 55 a0 58 20 48 24 47 05 6b 80 9c 8b 89 c6 60 cf cd b3 7c 93 48 0e 26 68 91 91 fc 9d 8a c4 58 aa 69 1f 40 32 68 a4 82 ea dc 0d ed d0 aa 8e 88 71 da 74 21 c1 b2 30 a2 2b 87 2f cf f2 21 9d 4e 85 cb 82 74 e2 2c e4 57 fb e6 26 84 d9 13 40 0b a9 6b 51 9f 2e ec c3 37 4d 8c 60 a6 4e 6c 9a 5e 36 aa ca 4c 2a 6c cc 3e cf f2 75 b2 ba aa e7 9f b1 fc 2e 83 b2 da f4 29 a2 5a cc d2 63 32 02 a9 70 41 90 e8 05 04 23 03 4d 92 e9 82 d5 d2 66 13 5b 60 b8 66 c8 77 e1 58 e7 44 3e ed a3 67 58 2f 55 25 95 6a 1d 63 07 48 67 b4 83 9e eb ca 04 d2 ad 8c ca ab 7c 95 59 89 19 ac 72 2a 7f 2b 90 95 24 80 4c 0f 35 88 f3 d6 66 65 22 5d 27 d4 b0 a1 3b Data Ascii: 3c/2N2Lg>["{=rN42UX H$Gk`\|H&hXi@2hqt!0+/!Nt,W&@kQ.7M`Nl^6Ll>u.)Zc2pA#Mf[`fwXD>gX/U%jcHg\|Yr+$L5fe"]';
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: dc c6 8d 77 8a 52 3d f4 c8 1e 57 60 cf 65 47 f2 1c ca af fb 46 4c c7 4e 0e 0e c9 88 10 3f 1b d5 cc 21 cf 0b 94 53 5e a0 99 85 35 f2 cc 2f 4f 92 4b ef 1a 64 3a 52 3c b2 11 eb 2c 45 c1 a8 c8 c7 d8 b9 97 af 3a 3e 6f f2 93 4e 2e c0 04 8a 29 4a f2 5a a1 8e ac e7 05 52 68 34 26 24 0a 9d 85 4e cc ae 92 c7 5f 9b 22 17 76 0f 70 b9 81 52 dc 6e 2e c6 db 97 ec 1c 24 db 9e 18 25 db 9e dc b8 fb 45 3b 06 95 ca c1 2a 80 e7 05 d2 84 30 b8 04 4b ad 87 ed d1 a9 15 b2 f7 95 13 e4 82 3b 07 04 21 42 ce b1 ac 8e 98 57 ee 19 22 6f f7 2e 90 93 f3 6b 64 7a 61 63 ee d7 ef 1f 13 24 de 38 33 48 90 09 f6 bc 40 1a 68 50 97 b4 28 34 47 70 f8 d8 32 d9 fd 3f c7 c9 67 6f ef e7 ec 64 b1 63 78 f6 0d bd 64 fb fe d1 28 b7 b0 51 a1 d1 37 7f 7f 5c 9a 4d 67 9d 60 cf 0b 94 63 05 a8 e5 08 ca 63 4b Data Ascii: wR=W`eGFLN?!S^5/OKd:R<,E:>oN.)JZRh4&$N_"vpRn.$%E;*0K;!BW"o.kdzac$83H@hP(4Gp2?godcxd(Q7\Mg`ccK
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: ec 32 a0 98 11 00 e3 27 e8 e0 69 56 d6 d6 c9 eb 1f cd 91 8b 77 0c d4 67 82 3a 9b 5a 91 e7 22 2d 45 d9 e2 7f 7a 70 98 bc 71 68 be 3e 13 60 95 cf 06 fc c1 04 84 d8 30 81 6a 94 2a 4c f1 3c 57 57 6d 9a dc b2 85 05 12 1c 6f 8c 05 42 11 63 d9 30 49 4c 63 de ba 0f 4b 35 93 d1 d1 fc 87 07 67 c8 17 ee 1c 48 26 87 8a 71 8e 4e ba 7f f2 9b bd e4 1b df 1b 21 07 fb 17 22 08 36 34 42 06 31 17 30 3e 82 c9 20 52 9f 01 8a 3c 23 5c 3c 43 6e 32 48 61 93 63 48 f9 1d 56 22 40 58 13 48 16 b9 d0 e1 15 35 19 2d 30 cb 04 a9 8e 9b 5b 5a 23 4f be 3e 15 d5 07 c4 28 4b 44 bc 3d 61 67 39 b7 ab 8f 74 3d 35 46 3e 1c 5e 8c 8a 71 b0 19 5c 93 08 09 24 21 86 86 43 0b 68 56 6a 26 90 2b 38 b4 4a f1 15 f2 d1 cc 70 81 09 37 a8 8d 9b d5 d1 7e db 89 16 59 c8 71 6a 6e 8d ec 79 e9 04 f9 f4 ad 7c b6 Data Ascii: 2'iVwg:Z"-Ezpqh>`0j*L<WWmoBc0ILcK5gH&qN!"64B10> R<#\<Cn2HacHV"@XH5-0[Z#O>(KD=ag9t=5F>^q\$!ChVj&+8Jp7~Yqjny\|
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: ca 7d 47 c8 db bd 0b 64 65 75 dd f3 02 79 5e 20 bc 13 64 33 d1 82 49 c3 f3 ff a3 bc 41 8f bf 36 45 2e ad c1 a1 8b 35 46 e9 78 c6 97 8d ff 7f f9 ee c3 e4 d5 0f e7 a2 f2 4a cf 0b 04 1b 84 80 f2 3d 2f 90 0b 5e a0 b4 99 80 16 c4 3c fb ab 69 72 d9 bd 87 c9 c7 b6 31 85 e4 c5 b2 78 7d 81 b0 7d 61 f7 40 54 24 4f cb 2a 55 f2 6d 5c 3f 64 46 f0 bc 40 9e 17 48 19 bd e0 7f 93 2f 89 2c 24 4a 22 cb 09 53 e2 73 77 0c 44 c5 33 35 08 b4 e7 05 f2 bc 40 d6 cc 24 d7 bc 40 ca a2 78 01 2f 50 7b b1 c1 af 73 de 2d fd 91 9f 30 b3 b8 e6 79 81 80 26 9c 86 d3 ec 79 81 6c e0 8b 64 f7 20 a2 45 91 f1 02 d1 36 25 cd a5 11 a2 1a 4b 9c e7 05 f2 bc 40 4e 62 c9 d8 6c 30 96 57 27 8d 18 4b c6 0b 74 f6 0d bd e4 ae e7 26 c8 e8 c9 15 ed e4 16 c4 3c 83 5c bf e7 05 f2 bc 40 e0 d1 93 7f e8 14 df d3 Data Ascii: }Gdeuy^ d3IA6E.5FxJ=/^<ir1x}}a@T$O*Um\?dF@H/,$J"SswD35@$@x/P{s-0y&yld E6%K@Nbl0W'Kt&<\@
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: c8 c8 d4 0a 3a a4 87 e9 e4 18 13 d1 44 3e 86 2a bd 51 14 5f 16 c4 ff 1b 6d c8 6c 06 05 06 aa 4c 66 a4 fc 0e 19 d3 89 28 0c 9a d6 06 cf 00 36 46 79 1d a7 5a f5 1b b4 10 bd 3c ba 44 76 1c 98 88 62 fd c9 5a de 72 22 0a 14 41 1c c2 4e 30 78 6c c5 d9 bd e8 66 d3 4d e5 cb 98 22 44 dc a0 85 22 d3 e9 99 1a 01 55 22 0c 1a 8d d2 49 a4 02 14 5b bb 24 32 e1 07 98 9a 40 58 0a 6c 9d d0 58 da 28 43 e9 c6 e9 82 13 94 8c ea b3 f5 72 46 6e e5 f6 22 63 f7 17 2b fc 3d d7 ed 1b 25 87 8e 2e a1 b2 da 50 82 27 6c 22 cc 96 7c cc 33 8d cf 00 0d 92 df 86 3f 50 8a 25 c2 4c 7d 3e c0 82 17 58 f9 1d 3a e6 8f c8 0c 6a e3 4d 20 28 22 54 95 de 86 a0 21 75 8a c7 d9 c5 e9 46 43 f3 e5 c1 57 4e 44 8e ac 08 cc 26 aa 76 ba 72 cf 10 79 bb bc 10 e1 fa a7 17 36 e6 4e 39 8f d2 33 c0 ea 9a 60 5d bf Data Ascii: :D>*Q_mlLf(6FyZ<DvbZr"AN0xlfM"D"U"I[$2@XlX(CrFn"c+=%.P'l"\|3?P%L}>X:jM ("T!uFCWND&vry6N93`]
2025-01-15 16:45:00 UTC	812	IN	Data Raw: 3c f3 02 61 8a a7 b1 66 09 36 72 94 57 f9 79 e2 ed 71 2c 7f 2b 16 f2 a0 2a 8d a4 8e f0 19 e1 de 73 ba 44 0a 4c 8b 4b b0 b3 52 5e e4 e7 85 b7 c7 a1 fc 9e 70 3f 43 77 e4 6f 93 a5 8f c3 df e8 b2 99 04 b3 c5 0b 64 0b 0c 07 01 63 99 c4 d7 5b 49 be ab 77 d8 04 f9 5d 26 a1 cf 40 82 0b a2 d1 a0 4d e1 0f ec ce 13 2f 90 ca 04 c3 66 16 35 93 2e 46 d1 8b 2c e4 67 cd db e3 42 7e d8 de 1d 7e 6c 52 99 f3 68 5e 20 8e 26 71 27 c9 68 6b 66 f2 4b 15 b2 d5 bd 86 3c c8 cf 09 6f 8f 0b f9 3b ad 24 be 54 8e 71 d5 ce 02 4f bd 9e 17 28 1f f2 a1 f7 8f 35 ad 72 c2 0b d4 63 9a f9 0d 24 49 31 3e 22 d4 1d 5e c0 22 34 5b e9 79 81 f2 21 ff 34 e6 05 5a 0c 3f bb 75 23 9d 01 c0 04 12 95 49 ee 0a 7f 78 de f3 02 79 5e 20 9d 98 bd 45 f9 b4 0f ee 6a b3 b4 a5 01 e3 d2 32 c4 fb 3c 2f 90 e7 05 ca Data Ascii: <af6rWyq,+*sDLKR^p?Cwodc[Iw]&@M/f5.F,gB~~lRh^ &q'hkfK<o;$TqO(5rc$I1>"^"4[y!4Z?u#Ixy^ Ej2</

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.18	60885	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:00 UTC	690	OUT	GET /gui/87347.c002f57d03220f54c084.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:00 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:00 GMT expires: Thu, 15 Jan 2026 16:45:00 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: d9c91ff8db3ae1dc719fffc4ac1fddde content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:00 UTC	1003	IN	Data Raw: 33 39 36 31 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 37 33 34 37 5d 2c 7b 38 37 33 34 37 3a 28 74 2c 6e 2c 65 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 6e 3f 4e 61 4e 3a 74 3c 6e 3f 2d 31 3a 74 3e 6e 3f 31 3a 74 3e 3d 6e 3f 30 3a 4e 61 4e 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 6e 3f 4e 61 4e 3a 6e 3c 74 3f 2d 31 3a 6e 3e 74 3f 31 3a 6e 3e 3d 74 3f 30 3a 4e 61 4e 7d 66 75 6e 63 74 69 6f Data Ascii: 3961"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[87347],{87347:(t,n,e)=>{function r(t,n){return null==t\|\|null==n?NaN:t<n?-1:t>n?1:t>=n?0:NaN}function i(t,n){return null==t\|\|null==n?NaN:n<t?-1:n>t?1:n>=t?0:NaN}functio
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 6e 73 74 20 6e 3d 69 2b 6f 3e 3e 3e 31 3b 65 28 74 5b 6e 5d 2c 72 29 3c 3d 30 3f 69 3d 6e 2b 31 3a 6f 3d 6e 7d 77 68 69 6c 65 28 69 3c 6f 29 7d 72 65 74 75 72 6e 20 69 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 72 65 74 75 72 6e 20 30 7d 65 2e 64 28 6e 2c 7b 57 63 77 3a 28 29 3d 3e 4f 61 2c 6c 37 38 3a 28 29 3d 3e 5a 2c 56 34 73 3a 28 29 3d 3e 57 2c 65 48 33 3a 28 29 3d 3e 42 2c 74 6c 52 3a 28 29 3d 3e 52 2c 57 44 32 3a 28 29 3d 3e 73 2c 61 68 4d 3a 28 29 3d 3e 63 2c 4a 6a 6c 3a 28 29 3d 3e 6c 2c 6e 35 35 3a 28 29 3d 3e 74 69 2c 58 78 76 3a 28 29 3d 3e 79 2c 6e 38 6a 3a 28 29 3d 3e 48 61 2c 70 71 73 3a 28 29 3d 3e 56 61 2c 54 39 42 3a 28 29 3d 3e 76 2c 6a 6b 41 3a 28 29 3d 3e 5f 2c 57 48 3a 28 29 3d 3e 63 69 2c 6d 34 59 3a 28 29 3d 3e 7a 69 2c 77 37 Data Ascii: nst n=i+o>>>1;e(t[n],r)<=0?i=n+1:o=n}while(i<o)}return i}}}function u(){return 0}e.d(n,{Wcw:()=>Oa,l78:()=>Z,V4s:()=>W,eH3:()=>B,tlR:()=>R,WD2:()=>s,ahM:()=>c,Jjl:()=>l,n55:()=>ti,Xxv:()=>y,n8j:()=>Ha,pqs:()=>Va,T9B:()=>v,jkA:()=>_,WH:()=>ci,m4Y:()=>zi,w7
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 6f 77 20 6f 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 2c 6e 29 7b 28 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 3e 74 2e 6c 65 6e 67 74 68 29 26 26 28 6e 3d 74 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 65 3d 30 2c 72 3d 41 72 72 61 79 28 6e 29 3b 65 3c 6e 3b 65 2b 2b 29 72 5b 65 5d 3d 74 5b 65 5d 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 79 28 74 2c 6e 29 7b 6c 65 74 20 65 2c 72 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 76 61 72 20 69 2c 6f 3d 68 28 74 29 3b 74 72 79 7b 66 6f 72 28 6f 2e 73 28 29 3b 21 28 69 3d 6f 2e 6e 28 29 29 2e 64 6f 6e 65 3b 29 7b 63 6f 6e 73 74 20 74 3d 69 2e 76 61 6c 75 65 3b 6e 75 6c 6c 21 3d 74 26 26 28 76 6f 69 64 20 30 3d 3d 3d 65 3f 74 3e 3d 74 26 26 28 65 3d 72 3d 74 29 3a 28 65 3e 74 26 26 28 65 3d 74 Data Ascii: ow o}}}}function p(t,n){(null==n\|\|n>t.length)&&(n=t.length);for(var e=0,r=Array(n);e<n;e++)r[e]=t[e];return r}function y(t,n){let e,r;if(void 0===n){var i,o=h(t);try{for(o.s();!(i=o.n()).done;){const t=i.value;null!=t&&(void 0===e?t>=t&&(e=r=t):(e>t&&(e=t
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 61 29 74 68 72 6f 77 20 6f 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 2c 6e 29 7b 28 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 3e 74 2e 6c 65 6e 67 74 68 29 26 26 28 6e 3d 74 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 65 3d 30 2c 72 3d 41 72 72 61 79 28 6e 29 3b 65 3c 6e 3b 65 2b 2b 29 72 5b 65 5d 3d 74 5b 65 5d 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 76 28 74 2c 6e 29 7b 6c 65 74 20 65 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 76 61 72 20 72 2c 69 3d 67 28 74 29 3b 74 72 79 7b 66 6f 72 28 69 2e 73 28 29 3b 21 28 72 3d 69 2e 6e 28 29 29 2e 64 6f 6e 65 3b 29 7b 63 6f 6e 73 74 20 74 3d 72 2e 76 61 6c 75 65 3b 6e 75 6c 6c 21 3d 74 26 26 28 65 3c 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 26 26 74 3e 3d 74 29 26 26 28 65 3d 74 29 7d 7d 63 Data Ascii: a)throw o}}}}function d(t,n){(null==n\|\|n>t.length)&&(n=t.length);for(var e=0,r=Array(n);e<n;e++)r[e]=t[e];return r}function v(t,n){let e;if(void 0===n){var r,i=g(t);try{for(i.s();!(r=i.n()).done;){const t=r.value;null!=t&&(e<t\|\|void 0===e&&t>=t)&&(e=t)}}c
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 3e 74 2e 6c 65 6e 67 74 68 29 26 26 28 6e 3d 74 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 65 3d 30 2c 72 3d 41 72 72 61 79 28 6e 29 3b 65 3c 6e 3b 65 2b 2b 29 72 5b 65 5d 3d 74 5b 65 5d 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 2c 6e 29 7b 6c 65 74 20 65 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 76 61 72 20 72 2c 69 3d 6d 28 74 29 3b 74 72 79 7b 66 6f 72 28 69 2e 73 28 29 3b 21 28 72 3d 69 2e 6e 28 29 29 2e 64 6f 6e 65 3b 29 7b 63 6f 6e 73 74 20 74 3d 72 2e 76 61 6c 75 65 3b 6e 75 6c 6c 21 3d 74 26 26 28 65 3e 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 26 26 74 3e 3d 74 29 26 26 28 65 3d 74 29 7d 7d 63 61 74 63 68 28 74 29 7b 69 2e 65 28 74 29 7d 66 69 6e 61 6c 6c 79 7b 69 2e 66 28 29 7d 7d 65 6c 73 65 7b 6c 65 74 20 72 Data Ascii: >t.length)&&(n=t.length);for(var e=0,r=Array(n);e<n;e++)r[e]=t[e];return r}function _(t,n){let e;if(void 0===n){var r,i=m(t);try{for(i.s();!(r=i.n()).done;){const t=r.value;null!=t&&(e>t\|\|void 0===e&&t>=t)&&(e=t)}}catch(t){i.e(t)}finally{i.f()}}else{let r
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 74 65 6d 70 74 20 74 6f 20 69 74 65 72 61 74 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 76 61 72 20 6f 2c 75 3d 21 30 2c 61 3d 21 31 3b 72 65 74 75 72 6e 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 3d 65 2e 63 61 6c 6c 28 74 29 7d 2c 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 65 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 75 3d 74 2e 64 6f 6e 65 2c 74 7d 2c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 61 3d 21 30 2c 6f 3d 74 7d 2c 66 3a 66 75 6e 63 74 69 6f Data Ascii: tempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}var o,u=!0,a=!1;return{s:function(){e=e.call(t)},n:function(){var t=e.next();return u=t.done,t},e:function(t){a=!0,o=t},f:functio
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 76 61 6c 75 65 3b 74 68 69 73 2e 61 64 64 28 74 29 7d 7d 63 61 74 63 68 28 74 29 7b 72 2e 65 28 74 29 7d 66 69 6e 61 6c 6c 79 7b 72 2e 66 28 29 7d 7d 7d 68 61 73 28 74 29 7b 72 65 74 75 72 6e 20 73 75 70 65 72 2e 68 61 73 28 6b 28 74 68 69 73 2c 74 29 29 7d 61 64 64 28 74 29 7b 72 65 74 75 72 6e 20 73 75 70 65 72 2e 61 64 64 28 43 28 74 68 69 73 2c 74 29 29 7d 64 65 6c 65 74 65 28 74 29 7b 72 65 74 75 72 6e 20 73 75 70 65 72 2e 64 65 6c 65 74 65 28 4e 28 74 68 69 73 2c 74 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 74 2c 6e 29 7b 6c 65 74 20 65 3d 74 2e 5f 69 6e 74 65 72 6e 3b 63 6f 6e 73 74 20 72 3d 28 30 2c 74 2e 5f 6b 65 79 29 28 6e 29 3b 72 65 74 75 72 6e 20 65 2e 68 61 73 28 72 29 3f 65 2e 67 65 74 28 72 29 3a 6e Data Ascii: ){const t=e.value;this.add(t)}}catch(t){r.e(t)}finally{r.f()}}}has(t){return super.has(k(this,t))}add(t){return super.add(C(this,t))}delete(t){return super.delete(N(this,t))}}function k(t,n){let e=t._intern;const r=(0,t._key)(n);return e.has(r)?e.get(r):n
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 61 29 74 68 72 6f 77 20 6f 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 45 28 74 2c 6e 29 7b 28 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 3e 74 2e 6c 65 6e 67 74 68 29 26 26 28 6e 3d 74 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 65 3d 30 2c 72 3d 41 72 72 61 79 28 6e 29 3b 65 3c 6e 3b 65 2b 2b 29 72 5b 65 5d 3d 74 5b 65 5d 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 24 28 29 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 54 3b 66 6f 72 28 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 6e 65 77 20 41 72 72 61 79 28 6e 29 2c 72 3d 30 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 72 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 66 6f 72 28 76 61 72 20 69 3d 30 2c 6f 3d 65 3b 69 3c 6f 2e 6c Data Ascii: return()}finally{if(a)throw o}}}}function E(t,n){(null==n\|\|n>t.length)&&(n=t.length);for(var e=0,r=Array(n);e<n;e++)r[e]=t[e];return r}function $(){const t=new T;for(var n=arguments.length,e=new Array(n),r=0;r<n;r++)e[r]=arguments[r];for(var i=0,o=e;i<o.l
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 6e 65 22 29 2e 61 74 74 72 28 22 73 74 72 6f 6b 65 22 2c 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 29 2e 61 74 74 72 28 73 2b 22 32 22 2c 63 2a 6f 29 29 2c 54 3d 54 2e 6d 65 72 67 65 28 41 2e 61 70 70 65 6e 64 28 22 74 65 78 74 22 29 2e 61 74 74 72 28 22 66 69 6c 6c 22 2c 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 29 2e 61 74 74 72 28 73 2c 63 2a 67 29 2e 61 74 74 72 28 22 64 79 22 2c 74 3d 3d 3d 59 3f 22 30 65 6d 22 3a 74 3d 3d 3d 46 3f 22 30 2e 37 31 65 6d 22 3a 22 30 2e 33 32 65 6d 22 29 29 2c 68 21 3d 3d 5f 26 26 28 62 3d 62 2e 74 72 61 6e 73 69 74 69 6f 6e 28 68 29 2c 78 3d 78 2e 74 72 61 6e 73 69 74 69 6f 6e 28 68 29 2c 53 3d 53 2e 74 72 61 6e 73 69 74 69 6f 6e 28 68 29 2c 54 3d 54 2e 74 72 61 6e 73 69 74 69 6f 6e 28 68 29 2c 4d 3d 4d 2e 74 72 61 6e Data Ascii: ne").attr("stroke","currentColor").attr(s+"2",co)),T=T.merge(A.append("text").attr("fill","currentColor").attr(s,cg).attr("dy",t===Y?"0em":t===F?"0.71em":"0.32em")),h!==_&&(b=b.transition(h),x=x.transition(h),S=S.transition(h),T=T.transition(h),M=M.tran
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 28 6f 3d 2b 74 2c 68 29 3a 6f 7d 2c 68 2e 74 69 63 6b 53 69 7a 65 4f 75 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 28 75 3d 2b 74 2c 68 29 3a 75 7d 2c 68 2e 74 69 63 6b 50 61 64 64 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 28 61 3d 2b 74 2c 68 29 3a 61 7d 2c 68 2e 6f 66 66 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 28 6c 3d 2b 74 2c 68 29 3a 6c 7d 2c 68 7d 66 75 6e 63 74 69 6f 6e 20 52 28 74 29 7b 72 65 74 75 72 6e 20 56 28 59 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: urn arguments.length?(o=+t,h):o},h.tickSizeOuter=function(t){return arguments.length?(u=+t,h):u},h.tickPadding=function(t){return arguments.length?(a=+t,h):a},h.offset=function(t){return arguments.length?(l=+t,h):l},h}function R(t){return V(Y,t)}function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.18	60887	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:00 UTC	690	OUT	GET /gui/49272.372a1ed11135b11cd4f7.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:00 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:00 GMT expires: Thu, 15 Jan 2026 16:45:00 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: ff6068255ace8593fca761d54644b5cf content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:00 UTC	1003	IN	Data Raw: 33 39 36 33 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 39 32 37 32 5d 2c 7b 34 39 32 37 32 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 61 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 28 69 2c 61 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 69 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 69 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 21 74 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 69 29 7c 7c 28 74 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 61 29 7b 69 66 28 69 29 7b Data Ascii: 3963"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[49272],{49272:function(i,a,t){function _(i,a){var t="undefined"!=typeof Symbol&&i[Symbol.iterator]\|\|i["@@iterator"];if(!t){if(Array.isArray(i)\|\|(t=function(i,a){if(i){
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 72 29 74 68 72 6f 77 20 73 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 69 2c 61 29 7b 28 6e 75 6c 6c 3d 3d 61 7c 7c 61 3e 69 2e 6c 65 6e 67 74 68 29 26 26 28 61 3d 69 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 74 3d 30 2c 5f 3d 41 72 72 61 79 28 61 29 3b 74 3c 61 3b 74 2b 2b 29 5f 5b 74 5d 3d 69 5b 74 5d 3b 72 65 74 75 72 6e 20 5f 7d 76 61 72 20 6e 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 69 6d 70 6f 72 74 44 65 66 61 75 6c 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 69 26 26 69 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 69 3a 7b 64 65 66 61 75 6c 74 3a 69 7d 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 Data Ascii: )}finally{if(r)throw s}}}}function e(i,a){(null==a\|\|a>i.length)&&(a=i.length);for(var t=0,_=Array(a);t<a;t++)_[t]=i[t];return _}var n=this&&this.__importDefault\|\|function(i){return i&&i.__esModule?i:{default:i}};Object.defineProperty(a,"__esModule",{value
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 6e 20 75 28 69 29 7b 73 77 69 74 63 68 28 69 29 7b 63 61 73 65 20 30 3a 63 61 73 65 22 53 45 56 45 52 49 54 59 5f 55 4e 4b 4e 4f 57 4e 22 3a 72 65 74 75 72 6e 20 6c 2e 53 45 56 45 52 49 54 59 5f 55 4e 4b 4e 4f 57 4e 3b 63 61 73 65 20 34 3a 63 61 73 65 22 53 45 56 45 52 49 54 59 5f 4e 4f 4e 45 22 3a 72 65 74 75 72 6e 20 6c 2e 53 45 56 45 52 49 54 59 5f 4e 4f 4e 45 3b 63 61 73 65 20 38 3a 63 61 73 65 22 53 45 56 45 52 49 54 59 5f 4c 4f 57 22 3a 72 65 74 75 72 6e 20 6c 2e 53 45 56 45 52 49 54 59 5f 4c 4f 57 3b 63 61 73 65 20 31 32 3a 63 61 73 65 22 53 45 56 45 52 49 54 59 5f 4d 45 44 49 55 4d 22 3a 72 65 74 75 72 6e 20 6c 2e 53 45 56 45 52 49 54 59 5f 4d 45 44 49 55 4d 3b 63 61 73 65 20 31 36 3a 63 61 73 65 22 53 45 56 45 52 49 54 59 5f 48 49 47 48 22 3a 72 Data Ascii: n u(i){switch(i){case 0:case"SEVERITY_UNKNOWN":return l.SEVERITY_UNKNOWN;case 4:case"SEVERITY_NONE":return l.SEVERITY_NONE;case 8:case"SEVERITY_LOW":return l.SEVERITY_LOW;case 12:case"SEVERITY_MEDIUM":return l.SEVERITY_MEDIUM;case 16:case"SEVERITY_HIGH":r
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 79 54 6f 4a 53 4f 4e 3d 76 2c 61 2e 73 65 76 65 72 69 74 79 54 6f 4e 75 6d 62 65 72 3d 62 3b 63 6f 6e 73 74 20 67 3d 7b 6e 75 6d 5f 61 76 5f 64 65 74 65 63 74 69 6f 6e 73 3a 30 2c 6e 75 6d 5f 67 61 76 73 5f 64 65 74 65 63 74 69 6f 6e 73 3a 30 2c 67 61 76 73 5f 6b 65 79 77 6f 72 64 73 3a 22 22 2c 63 61 74 65 67 6f 72 69 65 73 3a 22 22 2c 69 73 5f 76 74 5f 6c 65 67 69 74 3a 21 31 2c 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 6f 6d 69 74 3a 21 31 2c 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 62 61 63 6b 73 63 61 74 74 65 72 5f 66 61 6d 69 6c 79 3a 21 31 2c 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 61 6e 61 6c 79 73 74 5f 6d 61 6c 69 63 69 6f 75 73 3a 21 31 2c 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 62 61 63 6b 73 63 61 74 74 65 72 5f 6d 61 6c 69 63 69 6f 75 73 3a 21 31 2c 69 73 5f Data Ascii: yToJSON=v,a.severityToNumber=b;const g={num_av_detections:0,num_gavs_detections:0,gavs_keywords:"",categories:"",is_vt_legit:!1,is_mandiant_omit:!1,is_mandiant_backscatter_family:!1,is_mandiant_analyst_malicious:!1,is_mandiant_backscatter_malicious:!1,is_
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 28 29 29 2e 64 6f 6e 65 3b 29 7b 63 6f 6e 73 74 20 69 3d 6e 2e 76 61 6c 75 65 3b 61 2e 75 69 6e 74 33 32 28 33 34 29 2e 73 74 72 69 6e 67 28 69 29 7d 7d 63 61 74 63 68 28 69 29 7b 73 2e 65 28 69 29 7d 66 69 6e 61 6c 6c 79 7b 73 2e 66 28 29 7d 72 65 74 75 72 6e 21 30 3d 3d 3d 69 2e 69 73 5f 76 74 5f 6c 65 67 69 74 26 26 61 2e 75 69 6e 74 33 32 28 34 30 29 2e 62 6f 6f 6c 28 69 2e 69 73 5f 76 74 5f 6c 65 67 69 74 29 2c 21 30 3d 3d 3d 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 6f 6d 69 74 26 26 61 2e 75 69 6e 74 33 32 28 34 38 29 2e 62 6f 6f 6c 28 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 6f 6d 69 74 29 2c 21 30 3d 3d 3d 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 62 61 63 6b 73 63 61 74 74 65 72 5f 66 61 6d 69 6c 79 26 26 61 2e 75 69 6e 74 33 32 28 35 36 29 2e Data Ascii: ()).done;){const i=n.value;a.uint32(34).string(i)}}catch(i){s.e(i)}finally{s.f()}return!0===i.is_vt_legit&&a.uint32(40).bool(i.is_vt_legit),!0===i.is_mandiant_omit&&a.uint32(48).bool(i.is_mandiant_omit),!0===i.is_mandiant_backscatter_family&&a.uint32(56).
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 74 68 72 65 61 74 5f 61 63 74 6f 72 26 26 61 2e 75 69 6e 74 33 32 28 31 36 38 29 2e 62 6f 6f 6c 28 69 2e 62 65 6c 6f 6e 67 73 5f 74 6f 5f 6d 61 6e 64 69 61 6e 74 5f 74 68 72 65 61 74 5f 61 63 74 6f 72 29 2c 21 30 3d 3d 3d 69 2e 62 65 6c 6f 6e 67 73 5f 74 6f 5f 6d 61 6e 64 69 61 6e 74 5f 6d 61 6c 77 61 72 65 26 26 61 2e 75 69 6e 74 33 32 28 31 37 36 29 2e 62 6f 6f 6c 28 69 2e 62 65 6c 6f 6e 67 73 5f 74 6f 5f 6d 61 6e 64 69 61 6e 74 5f 6d 61 6c 77 61 72 65 29 2c 30 21 3d 3d 69 2e 64 6f 6d 61 69 6e 5f 72 61 6e 6b 26 26 61 2e 75 69 6e 74 33 32 28 31 38 34 29 2e 69 6e 74 33 32 28 69 2e 64 6f 6d 61 69 6e 5f 72 61 6e 6b 29 2c 30 21 3d 3d 69 2e 6d 61 6e 64 69 61 6e 74 5f 69 63 73 63 6f 72 65 26 26 61 2e 75 69 6e 74 33 32 28 31 39 32 29 2e 69 6e 74 33 32 28 69 2e Data Ascii: threat_actor&&a.uint32(168).bool(i.belongs_to_mandiant_threat_actor),!0===i.belongs_to_mandiant_malware&&a.uint32(176).bool(i.belongs_to_mandiant_malware),0!==i.domain_rank&&a.uint32(184).int32(i.domain_rank),0!==i.mandiant_icscore&&a.uint32(192).int32(i.
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 61 76 73 5f 64 65 74 65 63 74 69 6f 6e 73 3d 74 2e 69 6e 74 33 32 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 65 2e 67 61 76 73 5f 6b 65 79 77 6f 72 64 73 2e 70 75 73 68 28 74 2e 73 74 72 69 6e 67 28 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 65 2e 63 61 74 65 67 6f 72 69 65 73 2e 70 75 73 68 28 74 2e 73 74 72 69 6e 67 28 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 35 3a 65 2e 69 73 5f 76 74 5f 6c 65 67 69 74 3d 74 2e 62 6f 6f 6c 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 36 3a 65 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 6f 6d 69 74 3d 74 2e 62 6f 6f 6c 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 37 3a 65 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 62 61 63 6b 73 63 61 74 74 65 72 5f 66 61 6d 69 6c 79 3d 74 2e 62 6f 6f 6c 28 29 3b 62 72 65 61 6b 3b 63 61 73 Data Ascii: avs_detections=t.int32();break;case 3:e.gavs_keywords.push(t.string());break;case 4:e.categories.push(t.string());break;case 5:e.is_vt_legit=t.bool();break;case 6:e.is_mandiant_omit=t.bool();break;case 7:e.is_mandiant_backscatter_family=t.bool();break;cas
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 69 6c 65 73 3d 74 2e 62 6f 6f 6c 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 31 3a 65 2e 69 73 5f 6c 6f 77 5f 73 65 76 65 72 69 74 79 5f 72 65 6c 61 74 65 64 5f 66 69 6c 65 73 3d 74 2e 62 6f 6f 6c 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 32 3a 65 2e 62 65 6c 6f 6e 67 73 5f 74 6f 5f 6d 61 6e 64 69 61 6e 74 5f 63 61 6d 70 61 69 67 6e 73 3d 74 2e 62 6f 6f 6c 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 33 3a 65 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 65 78 63 6c 75 73 69 76 65 3d 74 2e 62 6f 6f 6c 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 34 3a 65 2e 63 6f 6e 74 61 69 6e 73 5f 6f 72 5f 64 72 6f 70 73 5f 68 69 67 68 5f 73 65 76 65 72 69 74 79 5f 66 69 6c 65 73 3d 74 2e 62 6f 6f 6c 28 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 2e 73 6b 69 70 54 Data Ascii: iles=t.bool();break;case 31:e.is_low_severity_related_files=t.bool();break;case 32:e.belongs_to_mandiant_campaigns=t.bool();break;case 33:e.is_mandiant_exclusive=t.bool();break;case 34:e.contains_or_drops_high_severity_files=t.bool();break;default:t.skipT
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 63 6b 73 63 61 74 74 65 72 5f 66 61 6d 69 6c 79 3d 21 31 2c 76 6f 69 64 20 30 21 3d 3d 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 61 6e 61 6c 79 73 74 5f 6d 61 6c 69 63 69 6f 75 73 26 26 6e 75 6c 6c 21 3d 3d 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 61 6e 61 6c 79 73 74 5f 6d 61 6c 69 63 69 6f 75 73 3f 61 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 61 6e 61 6c 79 73 74 5f 6d 61 6c 69 63 69 6f 75 73 3d 42 6f 6f 6c 65 61 6e 28 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 61 6e 61 6c 79 73 74 5f 6d 61 6c 69 63 69 6f 75 73 29 3a 61 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 61 6e 61 6c 79 73 74 5f 6d 61 6c 69 63 69 6f 75 73 3d 21 31 2c 76 6f 69 64 20 30 21 3d 3d 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 62 61 63 6b 73 63 61 74 74 65 72 5f 6d 61 6c 69 63 69 6f 75 73 26 26 Data Ascii: ckscatter_family=!1,void 0!==i.is_mandiant_analyst_malicious&&null!==i.is_mandiant_analyst_malicious?a.is_mandiant_analyst_malicious=Boolean(i.is_mandiant_analyst_malicious):a.is_mandiant_analyst_malicious=!1,void 0!==i.is_mandiant_backscatter_malicious&&
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 73 5f 6d 61 6e 64 69 61 6e 74 5f 72 65 70 6f 72 74 73 26 26 6e 75 6c 6c 21 3d 3d 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 72 65 70 6f 72 74 73 3f 61 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 72 65 70 6f 72 74 73 3d 42 6f 6f 6c 65 61 6e 28 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 72 65 70 6f 72 74 73 29 3a 61 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 72 65 70 6f 72 74 73 3d 21 31 2c 76 6f 69 64 20 30 21 3d 3d 69 2e 69 73 5f 76 74 5f 62 61 64 5f 79 61 72 61 26 26 6e 75 6c 6c 21 3d 3d 69 2e 69 73 5f 76 74 5f 62 61 64 5f 79 61 72 61 3f 61 2e 69 73 5f 76 74 5f 62 61 64 5f 79 61 72 61 3d 42 6f 6f 6c 65 61 6e 28 69 2e 69 73 5f 76 74 5f 62 61 64 5f 79 61 72 61 29 3a 61 2e 69 73 5f 76 74 5f 62 61 64 5f 79 61 72 61 3d 21 31 2c 76 6f 69 64 20 30 21 3d 3d 69 2e 69 73 5f Data Ascii: s_mandiant_reports&&null!==i.is_mandiant_reports?a.is_mandiant_reports=Boolean(i.is_mandiant_reports):a.is_mandiant_reports=!1,void 0!==i.is_vt_bad_yara&&null!==i.is_vt_bad_yara?a.is_vt_bad_yara=Boolean(i.is_vt_bad_yara):a.is_vt_bad_yara=!1,void 0!==i.is_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.18	60884	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:00 UTC	690	OUT	GET /gui/53967.5b914cf2886ab055ed88.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:00 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:00 GMT expires: Thu, 15 Jan 2026 16:45:00 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: ac30240d755d35ef84dd17ee386989d0 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:00 UTC	1003	IN	Data Raw: 33 39 37 35 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 33 39 36 37 5d 2c 7b 31 36 30 39 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 5f 2c 73 29 7b 76 61 72 20 74 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 69 6d 70 6f 72 74 44 65 66 61 75 6c 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 5f 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 5f 2e 53 69 Data Ascii: 3975"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[53967],{16097:function(e,_,s){var t=this&&this.__importDefault\|\|function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(_,"__esModule",{value:!0}),_.Si
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 54 3a 72 65 74 75 72 6e 22 42 4c 41 43 4b 4c 49 53 54 22 3b 63 61 73 65 20 72 2e 57 48 49 54 45 4c 49 53 54 3a 72 65 74 75 72 6e 22 57 48 49 54 45 4c 49 53 54 22 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 22 55 4e 4b 4e 4f 57 4e 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 20 72 2e 55 4e 4b 4e 4f 57 4e 5f 4d 45 54 48 4f 44 3a 72 65 74 75 72 6e 20 30 3b 63 61 73 65 20 72 2e 42 4c 41 43 4b 4c 49 53 54 3a 72 65 74 75 72 6e 20 31 3b 63 61 73 65 20 72 2e 57 48 49 54 45 4c 49 53 54 3a 72 65 74 75 72 6e 20 32 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 20 30 3a 63 61 73 65 22 55 4e 4b 4e 4f 57 4e 5f 43 41 54 45 47 4f Data Ascii: T:return"BLACKLIST";case r.WHITELIST:return"WHITELIST";default:return"UNKNOWN"}}function l(e){switch(e){case r.UNKNOWN_METHOD:return 0;case r.BLACKLIST:return 1;case r.WHITELIST:return 2;default:return 0}}function u(e){switch(e){case 0:case"UNKNOWN_CATEGO
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 3d 22 76 74 2e 61 6e 61 6c 79 73 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 55 4e 4b 4e 4f 57 4e 5f 4d 45 54 48 4f 44 3d 22 55 4e 4b 4e 4f 57 4e 5f 4d 45 54 48 4f 44 22 2c 65 2e 42 4c 41 43 4b 4c 49 53 54 3d 22 42 4c 41 43 4b 4c 49 53 54 22 2c 65 2e 57 48 49 54 45 4c 49 53 54 3d 22 57 48 49 54 45 4c 49 53 54 22 2c 65 2e 55 4e 52 45 43 4f 47 4e 49 5a 45 44 3d 22 55 4e 52 45 43 4f 47 4e 49 5a 45 44 22 7d 28 72 7c 7c 28 5f 2e 45 6e 67 69 6e 65 41 6e 61 6c 79 73 69 73 5f 45 6e 67 69 6e 65 41 6e 61 6c 79 73 69 73 4d 65 74 68 6f 64 3d 72 3d 7b 7d 29 29 2c 5f 2e 65 6e 67 69 6e 65 41 6e 61 6c 79 73 69 73 5f 45 6e 67 69 6e 65 41 6e 61 6c 79 73 69 73 4d 65 74 68 6f 64 46 72 6f 6d 4a 53 4f 4e 3d 6f 2c 5f 2e 65 6e 67 69 6e 65 41 6e 61 6c 79 73 69 73 5f 45 Data Ascii: ="vt.analysis",function(e){e.UNKNOWN_METHOD="UNKNOWN_METHOD",e.BLACKLIST="BLACKLIST",e.WHITELIST="WHITELIST",e.UNRECOGNIZED="UNRECOGNIZED"}(r\|\|(_.EngineAnalysis_EngineAnalysisMethod=r={})),_.engineAnalysis_EngineAnalysisMethodFromJSON=o,_.engineAnalysis_E
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 2e 69 6e 74 33 32 28 65 2e 74 69 6d 65 6f 75 74 29 2c 30 21 3d 3d 65 2e 63 6f 6e 66 69 72 6d 65 64 5f 74 69 6d 65 6f 75 74 26 26 5f 2e 75 69 6e 74 33 32 28 36 34 29 2e 69 6e 74 33 32 28 65 2e 63 6f 6e 66 69 72 6d 65 64 5f 74 69 6d 65 6f 75 74 29 2c 5f 7d 2c 64 65 63 6f 64 65 28 65 2c 5f 29 7b 63 6f 6e 73 74 20 73 3d 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 6e 2e 64 65 66 61 75 6c 74 2e 52 65 61 64 65 72 3f 65 3a 6e 65 77 20 6e 2e 64 65 66 61 75 6c 74 2e 52 65 61 64 65 72 28 65 29 3b 6c 65 74 20 74 3d 76 6f 69 64 20 30 3d 3d 3d 5f 3f 73 2e 6c 65 6e 3a 73 2e 70 6f 73 2b 5f 3b 63 6f 6e 73 74 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 66 29 3b 66 6f 72 28 3b 73 2e 70 6f 73 3c 74 3b 29 7b 63 6f 6e 73 74 20 65 3d 73 2e 75 69 6e 74 33 32 28 29 3b Data Ascii: .int32(e.timeout),0!==e.confirmed_timeout&&_.uint32(64).int32(e.confirmed_timeout),_},decode(e,_){const s=e instanceof n.default.Reader?e:new n.default.Reader(e);let t=void 0===_?s.len:s.pos+_;const a=Object.assign({},f);for(;s.pos<t;){const e=s.uint32();
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 69 6d 65 6f 75 74 3d 30 2c 5f 7d 2c 74 6f 4a 53 4f 4e 28 65 29 7b 63 6f 6e 73 74 20 5f 3d 7b 7d 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 2e 6d 61 6c 69 63 69 6f 75 73 26 26 28 5f 2e 6d 61 6c 69 63 69 6f 75 73 3d 65 2e 6d 61 6c 69 63 69 6f 75 73 29 2c 76 6f 69 64 20 30 21 3d 3d 65 2e 73 75 73 70 69 63 69 6f 75 73 26 26 28 5f 2e 73 75 73 70 69 63 69 6f 75 73 3d 65 2e 73 75 73 70 69 63 69 6f 75 73 29 2c 76 6f 69 64 20 30 21 3d 3d 65 2e 75 6e 64 65 74 65 63 74 65 64 26 26 28 5f 2e 75 6e 64 65 74 65 63 74 65 64 3d 65 2e 75 6e 64 65 74 65 63 74 65 64 29 2c 76 6f 69 64 20 30 21 3d 3d 65 2e 68 61 72 6d 6c 65 73 73 26 26 28 5f 2e 68 61 72 6d 6c 65 73 73 3d 65 2e 68 61 72 6d 6c 65 73 73 29 2c 76 6f 69 64 20 30 21 3d 3d 65 2e 66 61 69 6c 75 72 65 26 26 Data Ascii: imeout=0,_},toJSON(e){const _={};return void 0!==e.malicious&&(_.malicious=e.malicious),void 0!==e.suspicious&&(_.suspicious=e.suspicious),void 0!==e.undetected&&(_.undetected=e.undetected),void 0!==e.harmless&&(_.harmless=e.harmless),void 0!==e.failure&&
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 6e 2e 64 65 66 61 75 6c 74 2e 57 72 69 74 65 72 2e 63 72 65 61 74 65 28 29 3b 72 65 74 75 72 6e 20 65 2e 6d 65 74 68 6f 64 21 3d 3d 72 2e 55 4e 4b 4e 4f 57 4e 5f 4d 45 54 48 4f 44 26 26 5f 2e 75 69 6e 74 33 32 28 38 29 2e 69 6e 74 33 32 28 6c 28 65 2e 6d 65 74 68 6f 64 29 29 2c 22 22 21 3d 3d 65 2e 65 6e 67 69 6e 65 5f 6e 61 6d 65 26 26 5f 2e 75 69 6e 74 33 32 28 31 38 29 2e 73 74 72 69 6e 67 28 65 2e 65 6e 67 69 6e 65 5f 6e 61 6d 65 29 2c 65 2e 63 61 74 65 67 6f 72 79 21 3d 3d 63 2e 55 4e 4b 4e 4f 57 4e 5f 43 41 54 45 47 4f 52 59 26 26 5f 2e 75 69 6e 74 33 32 28 32 34 29 2e 69 6e 74 33 32 28 6d 28 65 2e 63 61 74 65 67 6f 72 79 29 29 2c 22 22 21 3d 3d 65 2e 72 65 73 Data Ascii: 0!==arguments[1]?arguments[1]:n.default.Writer.create();return e.method!==r.UNKNOWN_METHOD&&_.uint32(8).int32(l(e.method)),""!==e.engine_name&&_.uint32(18).string(e.engine_name),e.category!==c.UNKNOWN_CATEGORY&&_.uint32(24).int32(m(e.category)),""!==e.res
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 6c 6c 21 3d 3d 65 2e 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 3f 5f 2e 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 3d 53 74 72 69 6e 67 28 65 2e 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 29 3a 5f 2e 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 3d 22 22 2c 5f 7d 2c 74 6f 4a 53 4f 4e 28 65 29 7b 63 6f 6e 73 74 20 5f 3d 7b 7d 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 2e 6d 65 74 68 6f 64 26 26 28 5f 2e 6d 65 74 68 6f 64 3d 69 28 65 2e 6d 65 74 68 6f 64 29 29 2c 76 6f 69 64 20 30 21 3d 3d 65 2e 65 6e 67 69 6e 65 5f 6e 61 6d 65 26 26 28 5f 2e 65 6e 67 69 6e 65 5f 6e 61 6d 65 3d 65 2e 65 6e 67 69 6e 65 5f 6e 61 6d 65 29 2c 76 6f 69 64 20 30 21 3d 3d 65 2e 63 61 74 65 67 6f 72 79 26 26 28 5f 2e 63 61 74 65 67 6f 72 79 3d 64 28 65 2e 63 61 74 65 67 6f 72 79 29 29 2c Data Ascii: ll!==e.engine_update?_.engine_update=String(e.engine_update):_.engine_update="",_},toJSON(e){const _={};return void 0!==e.method&&(_.method=i(e.method)),void 0!==e.engine_name&&(_.engine_name=e.engine_name),void 0!==e.category&&(_.category=d(e.category)),
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 74 2e 52 65 61 64 65 72 3f 65 3a 6e 65 77 20 6e 2e 64 65 66 61 75 6c 74 2e 52 65 61 64 65 72 28 65 29 3b 6c 65 74 20 74 3d 76 6f 69 64 20 30 3d 3d 3d 5f 3f 73 2e 6c 65 6e 3a 73 2e 70 6f 73 2b 5f 3b 63 6f 6e 73 74 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 76 29 3b 66 6f 72 28 3b 73 2e 70 6f 73 3c 74 3b 29 7b 63 6f 6e 73 74 20 65 3d 73 2e 75 69 6e 74 33 32 28 29 3b 73 77 69 74 63 68 28 65 3e 3e 3e 33 29 7b 63 61 73 65 20 31 3a 61 2e 6c 6f 77 3d 73 2e 69 6e 74 33 32 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 61 2e 6d 65 64 69 75 6d 3d 73 2e 69 6e 74 33 32 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 61 2e 68 69 67 68 3d 73 2e 69 6e 74 33 32 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 61 2e 63 72 69 74 69 63 61 6c 3d 73 2e 69 6e Data Ascii: t.Reader?e:new n.default.Reader(e);let t=void 0===_?s.len:s.pos+_;const a=Object.assign({},v);for(;s.pos<t;){const e=s.uint32();switch(e>>>3){case 1:a.low=s.int32();break;case 2:a.medium=s.int32();break;case 3:a.high=s.int32();break;case 4:a.critical=s.in
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 3b 72 65 74 75 72 6e 22 4f 62 6a 65 63 74 22 3d 3d 3d 73 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 28 73 3d 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 2c 22 4d 61 70 22 3d 3d 3d 73 7c 7c 22 53 65 74 22 3d 3d 3d 73 3f 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 73 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 73 29 3f 61 28 65 2c 5f 29 3a 76 6f 69 64 20 30 7d 7d 28 65 29 29 7c 7c 5f 26 26 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 7b 73 26 26 28 65 3d 73 29 3b 76 61 Data Ascii: toString.call(e).slice(8,-1);return"Object"===s&&e.constructor&&(s=e.constructor.name),"Map"===s\|\|"Set"===s?Array.from(e):"Arguments"===s\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(s)?a(e,_):void 0}}(e))\|\|_&&e&&"number"==typeof e.length){s&&(e=s);va
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 75 69 74 43 56 53 53 76 32 76 33 3d 5f 2e 56 75 6c 6e 65 72 61 62 69 6c 69 74 79 43 6f 6e 64 75 69 74 43 56 53 53 76 34 3d 5f 2e 56 75 6c 6e 65 72 61 62 69 6c 69 74 79 43 6f 6e 64 75 69 74 43 56 53 53 76 34 54 68 72 65 61 74 3d 5f 2e 56 75 6c 6e 65 72 61 62 69 6c 69 74 79 43 6f 6e 64 75 69 74 43 56 53 53 76 34 53 75 70 70 6c 65 6d 65 6e 74 61 6c 3d 5f 2e 56 75 6c 6e 65 72 61 62 69 6c 69 74 79 46 69 65 6c 64 53 6f 75 72 63 65 3d 5f 2e 52 65 70 65 61 74 65 64 46 69 65 6c 64 53 6f 75 72 63 65 3d 5f 2e 56 75 6c 6e 65 72 61 62 69 6c 69 74 79 56 65 72 73 69 6f 6e 48 69 73 74 6f 72 79 3d 5f 2e 56 75 6c 6e 65 72 61 62 69 6c 69 74 79 45 78 70 6c 6f 69 74 61 74 69 6f 6e 3d 5f 2e 43 6f 75 6e 74 65 72 73 3d 5f 2e 43 6f 6c 6c 65 63 74 69 6f 6e 5f 41 74 74 72 69 62 75 Data Ascii: uitCVSSv2v3=_.VulnerabilityConduitCVSSv4=_.VulnerabilityConduitCVSSv4Threat=_.VulnerabilityConduitCVSSv4Supplemental=_.VulnerabilityFieldSource=_.RepeatedFieldSource=_.VulnerabilityVersionHistory=_.VulnerabilityExploitation=_.Counters=_.Collection_Attribu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.18	60886	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:00 UTC	690	OUT	GET /gui/22232.15ef530edb01268cfe7b.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:00 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:00 GMT expires: Thu, 15 Jan 2026 16:45:00 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: df6219b31921253ff35f16a61df7e01c content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:00 UTC	1003	IN	Data Raw: 33 39 36 39 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 32 32 33 32 5d 2c 7b 32 37 32 37 30 3a 28 65 2c 72 2c 74 29 3d 3e 7b 74 2e 64 28 72 2c 7b 76 3a 28 29 3d 3e 75 7d 29 3b 76 61 72 20 73 3d 74 28 34 39 32 37 32 29 2c 6f 3d 74 28 34 38 37 30 34 29 2c 61 3d 74 28 31 36 36 34 35 29 2c 62 3d 74 28 36 32 38 33 32 29 2c 69 3d 74 28 36 36 38 31 33 29 2c 6e 3d 74 28 31 35 33 32 33 29 2c 64 3d 74 28 38 33 31 37 30 29 3b 6c 65 74 20 63 2c 6c 2c 67 2c 70 2c 6d 2c 79 3d 65 3d 3e 65 3b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 2c 73 29 7b Data Ascii: 3969"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[22232],{27270:(e,r,t)=>{t.d(r,{v:()=>u});var s=t(49272),o=t(48704),a=t(16645),b=t(62832),i=t(66813),n=t(15323),d=t(83170);let c,l,g,p,m,y=e=>e;var f=function(e,r,t,s){
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 20 72 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 67 74 69 41 73 73 65 73 73 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 65 3d 65 2e 76 65 72 64 69 63 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 72 3d 3d 3d 73 2e 56 65 72 64 69 63 74 2e 56 45 52 44 49 43 54 5f 55 4e 4b 4e 4f 57 4e 3f 22 55 6e 6b 6e 6f 77 6e 22 3a 72 3d 3d 3d 73 2e 56 65 72 64 69 63 74 2e 56 45 52 44 49 43 54 5f 42 45 4e 49 47 4e 3f 22 42 65 6e 69 67 6e 22 3a 72 3d 3d 3d 73 2e 56 65 72 64 69 63 74 2e 56 45 52 44 49 43 54 5f 55 4e 44 45 54 45 43 54 45 44 3f 22 55 6e 64 65 74 65 63 74 65 64 22 3a 72 3d 3d 3d 73 2e 56 65 72 64 69 63 74 2e 56 45 52 44 49 43 54 5f 53 55 53 50 49 43 49 4f Data Ascii: r=null===(e=this.gtiAssessment)\|\|void 0===e\|\|null===(e=e.verdict)\|\|void 0===e?void 0:e.value;return r===s.Verdict.VERDICT_UNKNOWN?"Unknown":r===s.Verdict.VERDICT_BENIGN?"Benign":r===s.Verdict.VERDICT_UNDETECTED?"Undetected":r===s.Verdict.VERDICT_SUSPICIO
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 21 31 29 2c 72 3d 3d 3d 73 2e 56 65 72 64 69 63 74 2e 56 45 52 44 49 43 54 5f 53 55 53 50 49 43 49 4f 55 53 26 26 28 74 5b 22 62 67 2d 68 6f 6e 65 79 22 5d 3d 21 30 2c 74 5b 22 62 67 2d 62 6f 64 79 2d 74 65 72 74 69 61 72 79 22 5d 3d 21 31 2c 74 5b 22 74 65 78 74 2d 62 6f 64 79 2d 74 65 72 74 69 61 72 79 22 5d 3d 21 31 29 2c 72 3d 3d 3d 73 2e 56 65 72 64 69 63 74 2e 56 45 52 44 49 43 54 5f 42 45 4e 49 47 4e 26 26 28 74 5b 22 62 67 2d 73 75 63 63 65 73 73 22 5d 3d 21 30 2c 74 5b 22 62 67 2d 62 6f 64 79 2d 74 65 72 74 69 61 72 79 22 5d 3d 21 31 2c 74 5b 22 74 65 78 74 2d 62 6f 64 79 2d 74 65 72 74 69 61 72 79 22 5d 3d 21 31 29 2c 74 7d 67 65 74 20 73 63 6f 72 65 42 61 72 43 69 72 63 6c 65 43 6f 6c 6f 72 28 29 7b 76 61 72 20 65 3b 6c 65 74 20 72 3b 73 77 69 Data Ascii: !1),r===s.Verdict.VERDICT_SUSPICIOUS&&(t["bg-honey"]=!0,t["bg-body-tertiary"]=!1,t["text-body-tertiary"]=!1),r===s.Verdict.VERDICT_BENIGN&&(t["bg-success"]=!0,t["bg-body-tertiary"]=!1,t["text-body-tertiary"]=!1),t}get scoreBarCircleColor(){var e;let r;swi
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 70 61 6e 3e 20 24 7b 30 7d 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 6d 61 6c 6c 20 74 65 78 74 2d 62 6f 64 79 2d 74 65 72 74 69 61 72 79 22 3e 31 30 30 3c 2f 73 70 61 6e 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 6d 61 6c 6c 20 74 65 78 74 2d 62 6f 64 79 2d 74 65 72 74 69 61 72 79 22 3e 20 3c 73 70 61 6e 3e 20 47 54 49 20 53 63 6f 72 65 3a 20 3c 2f 73 70 61 6e 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 66 77 2d 62 6f 6c 64 20 24 7b 30 7d 22 3e 24 7b 30 7d 3c 2f 73 70 61 6e 3e 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 60 29 2c 74 68 69 73 2e 6c 6f 61 64 69 6e 67 3f 28 30 2c 6f 2e 68 74 6d 6c 29 28 67 7c 7c 28 67 3d 79 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 70 69 6e 6e 65 72 2d 62 6f 72 Data Ascii: pan> ${0} <span class="small text-body-tertiary">100</span> </div> <div class="small text-body-tertiary"> <span> GTI Score: </span> <span class="fw-bold ${0}">${0}</span>${0} </div> </div> </div> `),this.loading?(0,o.html)(g\|\|(g=y` <div class="spinner-bor
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 6c 74 65 72 3a 22 64 72 6f 70 2d 73 68 61 64 6f 77 28 30 70 78 20 30 70 78 20 32 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 29 22 7d 29 29 7d 7d 2c 63 2e 73 74 79 6c 65 73 3d 28 30 2c 6f 2e 75 6e 73 61 66 65 43 53 53 29 28 64 2e 41 29 2c 63 29 3b 66 28 5b 28 30 2c 61 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 4f 62 6a 65 63 74 7d 29 5d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2c 22 67 74 69 41 73 73 65 73 73 6d 65 6e 74 22 2c 76 6f 69 64 20 30 29 2c 66 28 5b 28 30 2c 61 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 7d 29 5d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6c 6f 61 64 69 6e 67 22 2c 76 6f 69 64 20 30 29 2c 68 3d 66 28 5b 28 30 2c 61 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 29 28 22 67 74 69 2d 69 Data Ascii: lter:"drop-shadow(0px 0px 2px rgba(0, 0, 0, 0.2))"}))}},c.styles=(0,o.unsafeCSS)(d.A),c);f([(0,a.property)({type:Object})],h.prototype,"gtiAssessment",void 0),f([(0,a.property)({type:Boolean})],h.prototype,"loading",void 0),h=f([(0,a.customElement)("gti-i
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 69 3e 20 24 7b 30 7d 20 2f 20 31 30 30 20 3c 2f 61 3e 60 29 2c 28 30 2c 69 2e 69 66 44 65 66 69 6e 65 64 29 28 6e 2e 5a 38 2e 67 65 74 53 65 61 72 63 68 55 72 6c 28 7b 67 74 69 5f 73 63 6f 72 65 3a 60 24 7b 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 61 73 73 65 73 73 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 65 3d 65 2e 74 68 72 65 61 74 5f 73 63 6f 72 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 76 61 6c 75 65 7d 60 7d 29 29 2c 28 30 2c 62 2e 63 6c 61 73 73 4d 61 70 29 28 74 68 69 73 2e 76 65 72 64 69 63 74 49 63 6f 6e 43 6f 6c 6f 72 4d 61 70 29 2c 28 30 2c 64 2e 76 29 28 6e 75 6c 6c 3d 3d 3d 28 72 3d 74 68 69 73 2e 61 73 73 65 73 73 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c Data Ascii: i> ${0} / 100 </a>`),(0,i.ifDefined)(n.Z8.getSearchUrl({gti_score:`${null===(e=this.assessment)\|\|void 0===e\|\|null===(e=e.threat_score)\|\|void 0===e?void 0:e.value}`})),(0,b.classMap)(this.verdictIconColorMap),(0,d.v)(null===(r=this.assessment)\|\|void 0===r\|
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 3a 20 23 63 35 32 34 32 30 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2d 72 67 62 3a 20 31 31 2c 20 37 37 2c 20 32 31 38 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 72 67 62 3a 20 35 37 2c 20 31 37 32 2c 20 37 36 3b 2d 2d 62 73 2d 69 6e 66 6f 2d 72 67 62 3a 20 30 2c 20 31 32 33 2c 20 32 33 30 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 72 67 62 3a 20 32 32 39 2c 20 31 31 35 2c 20 30 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 72 67 62 3a 20 31 39 37 2c 20 33 36 2c 20 33 32 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 30 36 32 62 37 39 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 32 39 32 39 32 39 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 Data Ascii: : #c52420;--bs-primary-rgb: 11, 77, 218;--bs-success-rgb: 57, 172, 76;--bs-info-rgb: 0, 123, 230;--bs-warning-rgb: 229, 115, 0;--bs-danger-rgb: 197, 36, 32;--bs-primary-text-emphasis: #062b79;--bs-secondary-text-emphasis: #292929;--bs-success-text-emphasi
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 63 6f 6c 6f 72 3a 20 23 32 30 32 34 32 63 3b 2d 2d 62 73 2d 62 6f 64 79 2d 63 6f 6c 6f 72 2d 72 67 62 3a 20 33 32 2c 20 33 36 2c 20 34 34 3b 2d 2d 62 73 2d 62 6f 64 79 2d 62 67 3a 20 23 66 66 66 3b 2d 2d 62 73 2d 62 6f 64 79 2d 62 67 2d 72 67 62 3a 20 32 35 35 2c 20 32 35 35 2c 20 32 35 35 3b 2d 2d 62 73 2d 65 6d 70 68 61 73 69 73 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 2d 2d 62 73 2d 65 6d 70 68 61 73 69 73 2d 63 6f 6c 6f 72 2d 72 67 62 3a 20 30 2c 20 30 2c 20 30 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 63 6f 6c 6f 72 3a 20 23 33 36 33 63 34 39 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 63 6f 6c 6f 72 2d 72 67 62 3a 20 35 34 2c 20 36 30 2c 20 37 33 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 67 3a 20 23 66 39 66 61 66 62 3b 2d 2d 62 73 Data Ascii: color: #20242c;--bs-body-color-rgb: 32, 36, 44;--bs-body-bg: #fff;--bs-body-bg-rgb: 255, 255, 255;--bs-emphasis-color: #000;--bs-emphasis-color-rgb: 0, 0, 0;--bs-secondary-color: #363c49;--bs-secondary-color-rgb: 54, 60, 73;--bs-secondary-bg: #f9fafb;--bs
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 72 3a 20 23 33 39 61 63 34 63 3b 2d 2d 62 73 2d 66 6f 72 6d 2d 76 61 6c 69 64 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 39 61 63 34 63 3b 2d 2d 62 73 2d 66 6f 72 6d 2d 69 6e 76 61 6c 69 64 2d 63 6f 6c 6f 72 3a 20 23 63 35 32 34 32 30 3b 2d 2d 62 73 2d 66 6f 72 6d 2d 69 6e 76 61 6c 69 64 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 63 35 32 34 32 30 7d 2a 2c 2a 3a 3a 62 65 66 6f 72 65 2c 2a 3a 3a 61 66 74 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 40 6d 65 64 69 61 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 20 6e 6f 2d 70 72 65 66 65 72 65 6e 63 65 29 7b 3a 72 6f 6f 74 7b 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 3a 73 6d 6f 6f 74 68 7d 7d 73 6d 61 6c 6c 2c 2e 73 6d 61 6c 6c 7b 66 Data Ascii: r: #39ac4c;--bs-form-valid-border-color: #39ac4c;--bs-form-invalid-color: #c52420;--bs-form-invalid-border-color: #c52420},::before,*::after{box-sizing:border-box}@media(prefers-reduced-motion: no-preference){:root{scroll-behavior:smooth}}small,.small{f
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 2d 2d 62 73 2d 62 61 64 67 65 2d 66 6f 6e 74 2d 77 65 69 67 68 74 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 61 64 67 65 2d 63 6f 6c 6f 72 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 62 73 2d 62 61 64 67 65 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 29 7d 2e 62 61 64 67 65 3a 65 6d 70 74 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 40 6b 65 79 66 72 61 6d 65 73 20 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 73 74 72 69 70 65 73 7b 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 2d 78 3a 31 Data Ascii: --bs-badge-font-weight);line-height:1;color:var(--bs-badge-color);text-align:center;white-space:nowrap;vertical-align:baseline;border-radius:var(--bs-badge-border-radius)}.badge:empty{display:none}@keyframes progress-bar-stripes{0%{background-position-x:1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.18	60888	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:00 UTC	690	OUT	GET /gui/60996.d3e9ab9fe2567126de2e.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:00 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:00 GMT expires: Thu, 15 Jan 2026 16:45:00 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: f99497f44066a0c49e00828ecab091fd content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:00 UTC	1003	IN	Data Raw: 33 66 38 36 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 30 39 39 36 5d 2c 7b 37 37 35 36 39 3a 28 74 2c 65 2c 72 29 3d 3e 7b 72 2e 64 28 65 2c 7b 66 3a 28 29 3d 3e 6c 7d 29 3b 76 61 72 20 69 3d 72 28 32 32 38 39 34 29 2c 6e 3d 72 28 34 32 32 34 36 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 65 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d Data Ascii: 3f86"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[60996],{77569:(t,e,r)=>{r.d(e,{f:()=>l});var i=r(22894),n=r(42246);function o(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySym
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 3a 7b 7d 3b 65 25 32 3f 6f 28 4f 62 6a 65 63 74 28 72 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 28 74 2c 65 2c 72 5b 65 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 72 29 29 3a 6f 28 4f 62 6a 65 63 74 28 72 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 72 2c 65 29 29 7d 29 Data Ascii: :{};e%2?o(Object(r),!0).forEach((function(e){s(t,e,r[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(r,e))})
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 65 6e 64 73 28 28 30 2c 70 2e 74 56 29 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6c 65 74 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 72 65 74 75 72 6e 20 73 2e 68 34 2e 63 6f 6c 6c 65 63 74 69 6f 6e 73 2e 6c 69 73 74 52 65 6c 61 74 69 6f 6e 73 68 69 70 28 74 2c 22 72 65 6c 61 74 65 64 5f 63 6f 6c 6c 65 63 74 69 6f 6e 73 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 72 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3a 7b 7d 3b 65 25 32 3f 62 28 4f 62 6a 65 Data Ascii: ends((0,p.tV)((function(t){let e=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};return s.h4.collections.listRelationship(t,"related_collections",function(t){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?arguments[e]:{};e%2?b(Obje
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 6e 67 3a 4e 75 6d 62 65 72 29 28 74 29 7d 28 74 2c 22 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 65 2b 22 22 7d 28 65 29 29 69 6e 20 74 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 76 61 6c 75 65 3a 72 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 74 5b 65 5d 3d 72 2c 74 7d 63 6c 61 73 73 20 50 20 65 78 74 65 6e 64 73 28 28 30 2c 70 2e 74 56 29 28 28 28 74 2c 65 29 3d 3e 73 2e 68 34 2e 63 6f 6c 6c 65 63 74 69 6f 6e 73 2e 6c 69 73 74 52 65 6c 61 74 69 6f 6e 73 68 69 70 28 74 2c 22 74 68 72 65 61 74 5f 61 63 74 6f 72 73 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f Data Ascii: ng:Number)(t)}(t,"string");return"symbol"==typeof e?e:e+""}(e))in t?Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}):t[e]=r,t}class P extends((0,p.tV)(((t,e)=>s.h4.collections.listRelationship(t,"threat_actors",function(t){fo
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 72 28 74 29 7d 6c 2e 64 6f 6e 65 3f 65 28 61 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 61 29 2e 74 68 65 6e 28 69 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 69 2c 6e 29 7b 76 61 72 20 6f 3d 74 2e 61 70 70 6c 79 28 65 2c 72 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 49 28 6f 2c 69 2c 6e 2c 73 2c 6c 2c 22 6e 65 78 74 22 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 29 7b 49 28 6f 2c 69 2c 6e 2c 73 2c 6c 2c 22 74 68 72 6f 77 22 2c 74 29 7d 73 28 76 6f 69 64 Data Ascii: }catch(t){return void r(t)}l.done?e(a):Promise.resolve(a).then(i,n)}function C(t){return function(){var e=this,r=arguments;return new Promise((function(i,n){var o=t.apply(e,r);function s(t){I(o,i,n,s,l,"next",t)}function l(t){I(o,i,n,s,l,"throw",t)}s(void
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3b 73 75 70 65 72 28 28 65 3d 3e 63 2e 4e 6d 2e 67 65 74 43 6f 6c 6c 65 63 74 69 6f 6e 28 74 2c 65 29 29 2c 28 74 3d 3e 28 30 2c 6e 2e 68 29 28 74 2e 64 61 74 61 29 29 29 2c 65 3d 74 68 69 73 2c 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 49 64 3d 74 2c 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 3d 22 22 2c 74 68 69 73 2e 69 73 4c 6f 61 64 69 6e 67 43 6f 6e 74 65 6e 74 3d 21 31 2c 74 68 69 73 2e 63 6f 6e 74 65 6e 74 45 72 72 6f 72 3d 22 22 2c 74 68 69 73 2e 73 74 6f 70 70 65 64 50 6f 6c 6c 69 6e 67 3d 21 31 2c 74 68 69 73 2e 74 69 6d 65 6f 75 74 41 67 67 72 65 67 61 74 69 6f 6e 73 45 72 72 6f 72 3d 21 31 2c 74 68 69 73 2e 6d 61 78 41 67 67 72 65 67 61 74 69 6f 6e 73 43 61 6c 63 75 6c 61 74 69 6f 6e 54 69 6d 65 3d 31 32 Data Ascii: &arguments[1];super((e=>c.Nm.getCollection(t,e)),(t=>(0,n.h)(t.data))),e=this,this.collectionId=t,this._content="",this.isLoadingContent=!1,this.contentError="",this.stoppedPolling=!1,this.timeoutAggregationsError=!1,this.maxAggregationsCalculationTime=12
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 7d 2c 74 29 2c 28 30 2c 6c 2e 70 76 29 28 7b 7d 29 29 3a 73 2e 68 34 2e 63 6f 6c 6c 65 63 74 69 6f 6e 73 2e 6c 69 73 74 52 65 6c 61 74 69 6f 6e 73 68 69 70 28 65 2e 63 6f 6c 6c 65 63 74 69 6f 6e 49 64 2c 22 75 72 6c 73 22 2c 45 28 7b 6c 69 6d 69 74 3a 31 30 2c 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 3a 5b 22 6c 61 73 74 5f 73 65 72 76 69 6e 67 5f 69 70 5f 61 64 64 72 65 73 73 22 2c 22 6e 65 74 77 6f 72 6b 5f 6c 6f 63 61 74 69 6f 6e 22 5d 2c 61 74 74 72 69 62 75 74 65 73 3a 75 2e 79 55 7d 2c 74 29 2c 72 3f 28 30 2c 6c 2e 70 76 29 28 7b 7d 29 3a 7b 7d 29 29 2c 28 74 3d 3e 22 65 72 72 6f 72 22 69 6e 20 74 3f 22 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 22 69 6e 20 74 26 26 22 75 72 6c 22 69 6e 20 74 2e 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 Data Ascii: },t),(0,l.pv)({})):s.h4.collections.listRelationship(e.collectionId,"urls",E({limit:10,relationships:["last_serving_ip_address","network_location"],attributes:u.yU},t),r?(0,l.pv)({}):{})),(t=>"error"in t?"context_attributes"in t&&"url"in t.context_attribu
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 74 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 43 72 65 61 74 65 64 2c 74 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 2e 66 69 6c 65 73 7d 29 29 2c 74 68 69 73 2e 67 65 74 4f 76 65 72 6c 61 70 70 69 6e 67 3d 43 28 28 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 61 2e 59 28 65 2e 63 6f 6c 6c 65 63 74 69 6f 6e 49 64 29 3b 72 65 74 75 72 6e 20 79 69 65 6c 64 20 74 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 43 72 65 61 74 65 64 2c 74 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 2e 6f 76 65 72 6c 61 70 70 69 6e 67 7d 29 29 2c 74 68 69 73 2e 67 65 74 52 65 70 6f 72 74 73 3d 43 28 28 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 61 2e 59 28 65 2e 63 6f 6c 6c 65 63 74 69 6f 6e 49 64 29 3b 72 65 74 75 72 6e 20 79 69 65 Data Ascii: t.relationshipsCreated,t.relationships.files})),this.getOverlapping=C((function(){const t=new a.Y(e.collectionId);return yield t.relationshipsCreated,t.relationships.overlapping})),this.getReports=C((function(){const t=new a.Y(e.collectionId);return yie
2025-01-15 16:45:00 UTC	1390	IN	Data Raw: 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 43 72 65 61 74 65 64 2c 74 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 2e 72 65 6c 61 74 65 64 5f 72 65 66 65 72 65 6e 63 65 73 7d 29 29 2c 74 68 69 73 2e 75 70 64 61 74 65 52 65 66 65 72 65 6e 63 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 43 28 28 66 75 6e 63 74 69 6f 6e 2a 28 74 2c 72 29 7b 63 6f 6e 73 74 20 69 3d 6e 65 77 20 53 65 74 28 74 29 2c 6e 3d 6e 65 77 20 53 65 74 28 72 2e 64 61 74 61 4f 62 6a 65 63 74 73 2e 6d 61 70 28 28 74 3d 3e 74 2e 69 64 29 29 29 2c 6f 3d 72 2e 64 61 74 61 4f 62 6a 65 63 74 73 2e 66 69 6c 74 65 72 28 28 74 3d 3e 7b 6c 65 74 20 65 3d 74 2e 69 64 3b 72 65 74 75 72 6e 21 69 2e 68 61 73 28 65 29 7d 29 29 2e 6d 61 70 28 28 74 3d 3e 28 7b 69 64 3a 74 2e 69 64 2c 74 79 70 65 Data Ascii: relationshipsCreated,t.relationships.related_references})),this.updateReferences=function(){var t=C((function*(t,r){const i=new Set(t),n=new Set(r.dataObjects.map((t=>t.id))),o=r.dataObjects.filter((t=>{let e=t.id;return!i.has(e)})).map((t=>({id:t.id,type
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 74 69 6f 6e 73 68 69 70 73 3d 72 3f 5b 5d 3a 5b 6e 65 77 20 79 28 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 49 64 29 5d 7d 67 65 74 20 63 6f 6e 74 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 7d 73 65 74 20 63 6f 6e 74 65 6e 74 28 74 29 7b 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 3d 74 7d 67 65 74 20 69 73 43 6f 6d 70 75 74 69 6e 67 41 67 67 72 65 67 61 74 69 6f 6e 73 28 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 21 74 68 69 73 2e 69 73 45 72 72 6f 72 26 26 21 74 68 69 73 2e 69 73 4c 6f 61 64 69 6e 67 26 26 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 64 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 73 74 61 74 75 73 29 3d 3d 3d 69 2e 43 6f 6c 6c 65 63 74 69 6f 6e 5f 43 6f 6c 6c 65 63 74 Data Ascii: tionships=r?[]:[new y(this.collectionId)]}get content(){return this._content}set content(t){this._content=t}get isComputingAggregations(){var t;return!this.isError&&!this.isLoading&&(null===(t=this.data)\|\|void 0===t?void 0:t.status)===i.Collection_Collect

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.18	60890	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:01 UTC	514	OUT	GET /gui/images/manifest/icon-192x192.png HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:01 UTC	375	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:01 GMT expires: Wed, 15 Jan 2025 16:46:01 GMT cache-control: public, max-age=60 etag: "iyPWYw" x-cloud-trace-context: 280fa432eb3d65c5f9be43bd84960fea content-type: image/png server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:01 UTC	1015	IN	Data Raw: 32 32 33 63 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c0 00 00 00 c0 08 06 00 00 00 52 dc 6c 07 00 00 22 03 49 44 41 54 78 da ed 5d eb 93 1d c5 75 df 9a 8f fa c8 1f a0 8f 77 85 1d 13 13 48 1c b0 63 9b 18 02 d8 ae 04 9c aa c4 09 55 c1 49 91 4d 85 72 19 dd 15 c8 b0 bc 21 2b 21 0c c8 8b 29 05 81 09 e6 21 05 6c 48 04 c6 c1 06 8c 6d 08 60 63 84 c1 98 60 dd bb 2f 69 57 fb 92 b4 ab 7d bf d5 99 9e fb ea e9 e9 e9 3e a7 1f 77 e6 6a 7b aa a6 6e ef dd 99 73 e7 d1 a7 fb 3c 7e e7 d7 6d 6d 6d 6d 41 5b 7c 0b b8 cf 36 c1 31 69 c7 41 b6 c0 e0 bb da f7 81 a2 0d 95 25 3b 0e d2 6e 33 b8 f7 ac e4 a7 3d 47 d9 fb 0d 34 de 57 ab c9 47 3d e0 00 f1 d2 02 83 17 26 bb c9 c0 40 be 89 32 ab 14 33 d0 bc d6 66 c9 6f 93 bc c3 40 f2 bd ee f5 e6 5d be 56 a7 c6 be 4c d3 Data Ascii: 223cPNGIHDRRl"IDATx]uwHcUIMr!+!)!lHm`c`/iW}>wj{ns<~mmmmA[\|61iA%;n3=G4WG=&@23fo@]VL
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 33 dd 84 63 13 e5 2f 32 4e b1 b6 09 04 86 95 aa 32 bc cd 18 15 4c 12 67 3e 0a d4 fc c8 5b 13 22 7b 3d 06 f0 72 b8 cd 14 fe d0 4e d1 34 ad 32 55 a0 58 20 48 24 47 05 6b 80 9c 8b 89 c6 60 cf cd b3 7c 93 48 0e 26 68 91 91 fc 9d 8a c4 58 aa 69 1f 40 32 68 a4 82 ea dc 0d ed d0 aa 8e 88 71 da 74 21 c1 b2 30 a2 2b 87 2f cf f2 21 9d 4e 85 cb 82 74 e2 2c e4 57 fb e6 26 84 d9 13 40 0b a9 6b 51 9f 2e ec c3 37 4d 8c 60 a6 4e 6c 9a 5e 36 aa ca 4c 2a 6c cc 3e cf f2 75 b2 ba aa e7 9f b1 fc 2e 83 b2 da f4 29 a2 5a cc d2 63 32 02 a9 70 41 90 e8 05 04 23 03 4d 92 e9 82 d5 d2 66 13 5b 60 b8 66 c8 77 e1 58 e7 44 3e ed a3 67 58 2f 55 25 95 6a 1d 63 07 48 67 b4 83 9e eb ca 04 d2 ad 8c ca ab 7c 95 59 89 19 ac 72 2a 7f 2b 90 95 24 80 4c 0f 35 88 f3 d6 66 65 22 5d 27 d4 b0 a1 3b Data Ascii: 3c/2N2Lg>["{=rN42UX H$Gk`\|H&hXi@2hqt!0+/!Nt,W&@kQ.7M`Nl^6Ll>u.)Zc2pA#Mf[`fwXD>gX/U%jcHg\|Yr+$L5fe"]';
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: dc c6 8d 77 8a 52 3d f4 c8 1e 57 60 cf 65 47 f2 1c ca af fb 46 4c c7 4e 0e 0e c9 88 10 3f 1b d5 cc 21 cf 0b 94 53 5e a0 99 85 35 f2 cc 2f 4f 92 4b ef 1a 64 3a 52 3c b2 11 eb 2c 45 c1 a8 c8 c7 d8 b9 97 af 3a 3e 6f f2 93 4e 2e c0 04 8a 29 4a f2 5a a1 8e ac e7 05 52 68 34 26 24 0a 9d 85 4e cc ae 92 c7 5f 9b 22 17 76 0f 70 b9 81 52 dc 6e 2e c6 db 97 ec 1c 24 db 9e 18 25 db 9e dc b8 fb 45 3b 06 95 ca c1 2a 80 e7 05 d2 84 30 b8 04 4b ad 87 ed d1 a9 15 b2 f7 95 13 e4 82 3b 07 04 21 42 ce b1 ac 8e 98 57 ee 19 22 6f f7 2e 90 93 f3 6b 64 7a 61 63 ee d7 ef 1f 13 24 de 38 33 48 90 09 f6 bc 40 1a 68 50 97 b4 28 34 47 70 f8 d8 32 d9 fd 3f c7 c9 67 6f ef e7 ec 64 b1 63 78 f6 0d bd 64 fb fe d1 28 b7 b0 51 a1 d1 37 7f 7f 5c 9a 4d 67 9d 60 cf 0b 94 63 05 a8 e5 08 ca 63 4b Data Ascii: wR=W`eGFLN?!S^5/OKd:R<,E:>oN.)JZRh4&$N_"vpRn.$%E;*0K;!BW"o.kdzac$83H@hP(4Gp2?godcxd(Q7\Mg`ccK
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: ec 32 a0 98 11 00 e3 27 e8 e0 69 56 d6 d6 c9 eb 1f cd 91 8b 77 0c d4 67 82 3a 9b 5a 91 e7 22 2d 45 d9 e2 7f 7a 70 98 bc 71 68 be 3e 13 60 95 cf 06 fc c1 04 84 d8 30 81 6a 94 2a 4c f1 3c 57 57 6d 9a dc b2 85 05 12 1c 6f 8c 05 42 11 63 d9 30 49 4c 63 de ba 0f 4b 35 93 d1 d1 fc 87 07 67 c8 17 ee 1c 48 26 87 8a 71 8e 4e ba 7f f2 9b bd e4 1b df 1b 21 07 fb 17 22 08 36 34 42 06 31 17 30 3e 82 c9 20 52 9f 01 8a 3c 23 5c 3c 43 6e 32 48 61 93 63 48 f9 1d 56 22 40 58 13 48 16 b9 d0 e1 15 35 19 2d 30 cb 04 a9 8e 9b 5b 5a 23 4f be 3e 15 d5 07 c4 28 4b 44 bc 3d 61 67 39 b7 ab 8f 74 3d 35 46 3e 1c 5e 8c 8a 71 b0 19 5c 93 08 09 24 21 86 86 43 0b 68 56 6a 26 90 2b 38 b4 4a f1 15 f2 d1 cc 70 81 09 37 a8 8d 9b d5 d1 7e db 89 16 59 c8 71 6a 6e 8d ec 79 e9 04 f9 f4 ad 7c b6 Data Ascii: 2'iVwg:Z"-Ezpqh>`0j*L<WWmoBc0ILcK5gH&qN!"64B10> R<#\<Cn2HacHV"@XH5-0[Z#O>(KD=ag9t=5F>^q\$!ChVj&+8Jp7~Yqjny\|
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: ca 7d 47 c8 db bd 0b 64 65 75 dd f3 02 79 5e 20 bc 13 64 33 d1 82 49 c3 f3 ff a3 bc 41 8f bf 36 45 2e ad c1 a1 8b 35 46 e9 78 c6 97 8d ff 7f f9 ee c3 e4 d5 0f e7 a2 f2 4a cf 0b 04 1b 84 80 f2 3d 2f 90 0b 5e a0 b4 99 80 16 c4 3c fb ab 69 72 d9 bd 87 c9 c7 b6 31 85 e4 c5 b2 78 7d 81 b0 7d 61 f7 40 54 24 4f cb 2a 55 f2 6d 5c 3f 64 46 f0 bc 40 9e 17 48 19 bd e0 7f 93 2f 89 2c 24 4a 22 cb 09 53 e2 73 77 0c 44 c5 33 35 08 b4 e7 05 f2 bc 40 d6 cc 24 d7 bc 40 ca a2 78 01 2f 50 7b b1 c1 af 73 de 2d fd 91 9f 30 b3 b8 e6 79 81 80 26 9c 86 d3 ec 79 81 6c e0 8b 64 f7 20 a2 45 91 f1 02 d1 36 25 cd a5 11 a2 1a 4b 9c e7 05 f2 bc 40 4e 62 c9 d8 6c 30 96 57 27 8d 18 4b c6 0b 74 f6 0d bd e4 ae e7 26 c8 e8 c9 15 ed e4 16 c4 3c 83 5c bf e7 05 f2 bc 40 e0 d1 93 7f e8 14 df d3 Data Ascii: }Gdeuy^ d3IA6E.5FxJ=/^<ir1x}}a@T$O*Um\?dF@H/,$J"SswD35@$@x/P{s-0y&yld E6%K@Nbl0W'Kt&<\@
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: c8 c8 d4 0a 3a a4 87 e9 e4 18 13 d1 44 3e 86 2a bd 51 14 5f 16 c4 ff 1b 6d c8 6c 06 05 06 aa 4c 66 a4 fc 0e 19 d3 89 28 0c 9a d6 06 cf 00 36 46 79 1d a7 5a f5 1b b4 10 bd 3c ba 44 76 1c 98 88 62 fd c9 5a de 72 22 0a 14 41 1c c2 4e 30 78 6c c5 d9 bd e8 66 d3 4d e5 cb 98 22 44 dc a0 85 22 d3 e9 99 1a 01 55 22 0c 1a 8d d2 49 a4 02 14 5b bb 24 32 e1 07 98 9a 40 58 0a 6c 9d d0 58 da 28 43 e9 c6 e9 82 13 94 8c ea b3 f5 72 46 6e e5 f6 22 63 f7 17 2b fc 3d d7 ed 1b 25 87 8e 2e a1 b2 da 50 82 27 6c 22 cc 96 7c cc 33 8d cf 00 0d 92 df 86 3f 50 8a 25 c2 4c 7d 3e c0 82 17 58 f9 1d 3a e6 8f c8 0c 6a e3 4d 20 28 22 54 95 de 86 a0 21 75 8a c7 d9 c5 e9 46 43 f3 e5 c1 57 4e 44 8e ac 08 cc 26 aa 76 ba 72 cf 10 79 bb bc 10 e1 fa a7 17 36 e6 4e 39 8f d2 33 c0 ea 9a 60 5d bf Data Ascii: :D>*Q_mlLf(6FyZ<DvbZr"AN0xlfM"D"U"I[$2@XlX(CrFn"c+=%.P'l"\|3?P%L}>X:jM ("T!uFCWND&vry6N93`]
2025-01-15 16:45:01 UTC	812	IN	Data Raw: 3c f3 02 61 8a a7 b1 66 09 36 72 94 57 f9 79 e2 ed 71 2c 7f 2b 16 f2 a0 2a 8d a4 8e f0 19 e1 de 73 ba 44 0a 4c 8b 4b b0 b3 52 5e e4 e7 85 b7 c7 a1 fc 9e 70 3f 43 77 e4 6f 93 a5 8f c3 df e8 b2 99 04 b3 c5 0b 64 0b 0c 07 01 63 99 c4 d7 5b 49 be ab 77 d8 04 f9 5d 26 a1 cf 40 82 0b a2 d1 a0 4d e1 0f ec ce 13 2f 90 ca 04 c3 66 16 35 93 2e 46 d1 8b 2c e4 67 cd db e3 42 7e d8 de 1d 7e 6c 52 99 f3 68 5e 20 8e 26 71 27 c9 68 6b 66 f2 4b 15 b2 d5 bd 86 3c c8 cf 09 6f 8f 0b f9 3b ad 24 be 54 8e 71 d5 ce 02 4f bd 9e 17 28 1f f2 a1 f7 8f 35 ad 72 c2 0b d4 63 9a f9 0d 24 49 31 3e 22 d4 1d 5e c0 22 34 5b e9 79 81 f2 21 ff 34 e6 05 5a 0c 3f bb 75 23 9d 01 c0 04 12 95 49 ee 0a 7f 78 de f3 02 79 5e 20 9d 98 bd 45 f9 b4 0f ee 6a b3 b4 a5 01 e3 d2 32 c4 fb 3c 2f 90 e7 05 ca Data Ascii: <af6rWyq,+*sDLKR^p?Cwodc[Iw]&@M/f5.F,gB~~lRh^ &q'hkfK<o;$TqO(5rc$I1>"^"4[y!4Z?u#Ixy^ Ej2</

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.18	60894	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:01 UTC	511	OUT	GET /gui/49272.372a1ed11135b11cd4f7.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:01 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:01 GMT expires: Thu, 15 Jan 2026 16:45:01 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 26ad859f711ecbfccbde932190834b35 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:01 UTC	1003	IN	Data Raw: 33 39 38 34 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 39 32 37 32 5d 2c 7b 34 39 32 37 32 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 61 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 28 69 2c 61 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 69 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 69 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 21 74 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 69 29 7c 7c 28 74 3d 66 75 6e 63 74 69 6f 6e 28 69 2c 61 29 7b 69 66 28 69 29 7b Data Ascii: 3984"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[49272],{49272:function(i,a,t){function _(i,a){var t="undefined"!=typeof Symbol&&i[Symbol.iterator]\|\|i["@@iterator"];if(!t){if(Array.isArray(i)\|\|(t=function(i,a){if(i){
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 72 29 74 68 72 6f 77 20 73 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 69 2c 61 29 7b 28 6e 75 6c 6c 3d 3d 61 7c 7c 61 3e 69 2e 6c 65 6e 67 74 68 29 26 26 28 61 3d 69 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 74 3d 30 2c 5f 3d 41 72 72 61 79 28 61 29 3b 74 3c 61 3b 74 2b 2b 29 5f 5b 74 5d 3d 69 5b 74 5d 3b 72 65 74 75 72 6e 20 5f 7d 76 61 72 20 6e 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 69 6d 70 6f 72 74 44 65 66 61 75 6c 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 69 26 26 69 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 69 3a 7b 64 65 66 61 75 6c 74 3a 69 7d 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 Data Ascii: )}finally{if(r)throw s}}}}function e(i,a){(null==a\|\|a>i.length)&&(a=i.length);for(var t=0,_=Array(a);t<a;t++)_[t]=i[t];return _}var n=this&&this.__importDefault\|\|function(i){return i&&i.__esModule?i:{default:i}};Object.defineProperty(a,"__esModule",{value
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 6e 20 75 28 69 29 7b 73 77 69 74 63 68 28 69 29 7b 63 61 73 65 20 30 3a 63 61 73 65 22 53 45 56 45 52 49 54 59 5f 55 4e 4b 4e 4f 57 4e 22 3a 72 65 74 75 72 6e 20 6c 2e 53 45 56 45 52 49 54 59 5f 55 4e 4b 4e 4f 57 4e 3b 63 61 73 65 20 34 3a 63 61 73 65 22 53 45 56 45 52 49 54 59 5f 4e 4f 4e 45 22 3a 72 65 74 75 72 6e 20 6c 2e 53 45 56 45 52 49 54 59 5f 4e 4f 4e 45 3b 63 61 73 65 20 38 3a 63 61 73 65 22 53 45 56 45 52 49 54 59 5f 4c 4f 57 22 3a 72 65 74 75 72 6e 20 6c 2e 53 45 56 45 52 49 54 59 5f 4c 4f 57 3b 63 61 73 65 20 31 32 3a 63 61 73 65 22 53 45 56 45 52 49 54 59 5f 4d 45 44 49 55 4d 22 3a 72 65 74 75 72 6e 20 6c 2e 53 45 56 45 52 49 54 59 5f 4d 45 44 49 55 4d 3b 63 61 73 65 20 31 36 3a 63 61 73 65 22 53 45 56 45 52 49 54 59 5f 48 49 47 48 22 3a 72 Data Ascii: n u(i){switch(i){case 0:case"SEVERITY_UNKNOWN":return l.SEVERITY_UNKNOWN;case 4:case"SEVERITY_NONE":return l.SEVERITY_NONE;case 8:case"SEVERITY_LOW":return l.SEVERITY_LOW;case 12:case"SEVERITY_MEDIUM":return l.SEVERITY_MEDIUM;case 16:case"SEVERITY_HIGH":r
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 79 54 6f 4a 53 4f 4e 3d 76 2c 61 2e 73 65 76 65 72 69 74 79 54 6f 4e 75 6d 62 65 72 3d 62 3b 63 6f 6e 73 74 20 67 3d 7b 6e 75 6d 5f 61 76 5f 64 65 74 65 63 74 69 6f 6e 73 3a 30 2c 6e 75 6d 5f 67 61 76 73 5f 64 65 74 65 63 74 69 6f 6e 73 3a 30 2c 67 61 76 73 5f 6b 65 79 77 6f 72 64 73 3a 22 22 2c 63 61 74 65 67 6f 72 69 65 73 3a 22 22 2c 69 73 5f 76 74 5f 6c 65 67 69 74 3a 21 31 2c 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 6f 6d 69 74 3a 21 31 2c 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 62 61 63 6b 73 63 61 74 74 65 72 5f 66 61 6d 69 6c 79 3a 21 31 2c 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 61 6e 61 6c 79 73 74 5f 6d 61 6c 69 63 69 6f 75 73 3a 21 31 2c 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 62 61 63 6b 73 63 61 74 74 65 72 5f 6d 61 6c 69 63 69 6f 75 73 3a 21 31 2c 69 73 5f Data Ascii: yToJSON=v,a.severityToNumber=b;const g={num_av_detections:0,num_gavs_detections:0,gavs_keywords:"",categories:"",is_vt_legit:!1,is_mandiant_omit:!1,is_mandiant_backscatter_family:!1,is_mandiant_analyst_malicious:!1,is_mandiant_backscatter_malicious:!1,is_
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 28 29 29 2e 64 6f 6e 65 3b 29 7b 63 6f 6e 73 74 20 69 3d 6e 2e 76 61 6c 75 65 3b 61 2e 75 69 6e 74 33 32 28 33 34 29 2e 73 74 72 69 6e 67 28 69 29 7d 7d 63 61 74 63 68 28 69 29 7b 73 2e 65 28 69 29 7d 66 69 6e 61 6c 6c 79 7b 73 2e 66 28 29 7d 72 65 74 75 72 6e 21 30 3d 3d 3d 69 2e 69 73 5f 76 74 5f 6c 65 67 69 74 26 26 61 2e 75 69 6e 74 33 32 28 34 30 29 2e 62 6f 6f 6c 28 69 2e 69 73 5f 76 74 5f 6c 65 67 69 74 29 2c 21 30 3d 3d 3d 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 6f 6d 69 74 26 26 61 2e 75 69 6e 74 33 32 28 34 38 29 2e 62 6f 6f 6c 28 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 6f 6d 69 74 29 2c 21 30 3d 3d 3d 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 62 61 63 6b 73 63 61 74 74 65 72 5f 66 61 6d 69 6c 79 26 26 61 2e 75 69 6e 74 33 32 28 35 36 29 2e Data Ascii: ()).done;){const i=n.value;a.uint32(34).string(i)}}catch(i){s.e(i)}finally{s.f()}return!0===i.is_vt_legit&&a.uint32(40).bool(i.is_vt_legit),!0===i.is_mandiant_omit&&a.uint32(48).bool(i.is_mandiant_omit),!0===i.is_mandiant_backscatter_family&&a.uint32(56).
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 74 68 72 65 61 74 5f 61 63 74 6f 72 26 26 61 2e 75 69 6e 74 33 32 28 31 36 38 29 2e 62 6f 6f 6c 28 69 2e 62 65 6c 6f 6e 67 73 5f 74 6f 5f 6d 61 6e 64 69 61 6e 74 5f 74 68 72 65 61 74 5f 61 63 74 6f 72 29 2c 21 30 3d 3d 3d 69 2e 62 65 6c 6f 6e 67 73 5f 74 6f 5f 6d 61 6e 64 69 61 6e 74 5f 6d 61 6c 77 61 72 65 26 26 61 2e 75 69 6e 74 33 32 28 31 37 36 29 2e 62 6f 6f 6c 28 69 2e 62 65 6c 6f 6e 67 73 5f 74 6f 5f 6d 61 6e 64 69 61 6e 74 5f 6d 61 6c 77 61 72 65 29 2c 30 21 3d 3d 69 2e 64 6f 6d 61 69 6e 5f 72 61 6e 6b 26 26 61 2e 75 69 6e 74 33 32 28 31 38 34 29 2e 69 6e 74 33 32 28 69 2e 64 6f 6d 61 69 6e 5f 72 61 6e 6b 29 2c 30 21 3d 3d 69 2e 6d 61 6e 64 69 61 6e 74 5f 69 63 73 63 6f 72 65 26 26 61 2e 75 69 6e 74 33 32 28 31 39 32 29 2e 69 6e 74 33 32 28 69 2e Data Ascii: threat_actor&&a.uint32(168).bool(i.belongs_to_mandiant_threat_actor),!0===i.belongs_to_mandiant_malware&&a.uint32(176).bool(i.belongs_to_mandiant_malware),0!==i.domain_rank&&a.uint32(184).int32(i.domain_rank),0!==i.mandiant_icscore&&a.uint32(192).int32(i.
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 61 76 73 5f 64 65 74 65 63 74 69 6f 6e 73 3d 74 2e 69 6e 74 33 32 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 65 2e 67 61 76 73 5f 6b 65 79 77 6f 72 64 73 2e 70 75 73 68 28 74 2e 73 74 72 69 6e 67 28 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 65 2e 63 61 74 65 67 6f 72 69 65 73 2e 70 75 73 68 28 74 2e 73 74 72 69 6e 67 28 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 35 3a 65 2e 69 73 5f 76 74 5f 6c 65 67 69 74 3d 74 2e 62 6f 6f 6c 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 36 3a 65 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 6f 6d 69 74 3d 74 2e 62 6f 6f 6c 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 37 3a 65 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 62 61 63 6b 73 63 61 74 74 65 72 5f 66 61 6d 69 6c 79 3d 74 2e 62 6f 6f 6c 28 29 3b 62 72 65 61 6b 3b 63 61 73 Data Ascii: avs_detections=t.int32();break;case 3:e.gavs_keywords.push(t.string());break;case 4:e.categories.push(t.string());break;case 5:e.is_vt_legit=t.bool();break;case 6:e.is_mandiant_omit=t.bool();break;case 7:e.is_mandiant_backscatter_family=t.bool();break;cas
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 69 6c 65 73 3d 74 2e 62 6f 6f 6c 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 31 3a 65 2e 69 73 5f 6c 6f 77 5f 73 65 76 65 72 69 74 79 5f 72 65 6c 61 74 65 64 5f 66 69 6c 65 73 3d 74 2e 62 6f 6f 6c 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 32 3a 65 2e 62 65 6c 6f 6e 67 73 5f 74 6f 5f 6d 61 6e 64 69 61 6e 74 5f 63 61 6d 70 61 69 67 6e 73 3d 74 2e 62 6f 6f 6c 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 33 3a 65 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 65 78 63 6c 75 73 69 76 65 3d 74 2e 62 6f 6f 6c 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 34 3a 65 2e 63 6f 6e 74 61 69 6e 73 5f 6f 72 5f 64 72 6f 70 73 5f 68 69 67 68 5f 73 65 76 65 72 69 74 79 5f 66 69 6c 65 73 3d 74 2e 62 6f 6f 6c 28 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 2e 73 6b 69 70 54 Data Ascii: iles=t.bool();break;case 31:e.is_low_severity_related_files=t.bool();break;case 32:e.belongs_to_mandiant_campaigns=t.bool();break;case 33:e.is_mandiant_exclusive=t.bool();break;case 34:e.contains_or_drops_high_severity_files=t.bool();break;default:t.skipT
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 63 6b 73 63 61 74 74 65 72 5f 66 61 6d 69 6c 79 3d 21 31 2c 76 6f 69 64 20 30 21 3d 3d 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 61 6e 61 6c 79 73 74 5f 6d 61 6c 69 63 69 6f 75 73 26 26 6e 75 6c 6c 21 3d 3d 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 61 6e 61 6c 79 73 74 5f 6d 61 6c 69 63 69 6f 75 73 3f 61 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 61 6e 61 6c 79 73 74 5f 6d 61 6c 69 63 69 6f 75 73 3d 42 6f 6f 6c 65 61 6e 28 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 61 6e 61 6c 79 73 74 5f 6d 61 6c 69 63 69 6f 75 73 29 3a 61 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 61 6e 61 6c 79 73 74 5f 6d 61 6c 69 63 69 6f 75 73 3d 21 31 2c 76 6f 69 64 20 30 21 3d 3d 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 62 61 63 6b 73 63 61 74 74 65 72 5f 6d 61 6c 69 63 69 6f 75 73 26 26 Data Ascii: ckscatter_family=!1,void 0!==i.is_mandiant_analyst_malicious&&null!==i.is_mandiant_analyst_malicious?a.is_mandiant_analyst_malicious=Boolean(i.is_mandiant_analyst_malicious):a.is_mandiant_analyst_malicious=!1,void 0!==i.is_mandiant_backscatter_malicious&&
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 73 5f 6d 61 6e 64 69 61 6e 74 5f 72 65 70 6f 72 74 73 26 26 6e 75 6c 6c 21 3d 3d 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 72 65 70 6f 72 74 73 3f 61 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 72 65 70 6f 72 74 73 3d 42 6f 6f 6c 65 61 6e 28 69 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 72 65 70 6f 72 74 73 29 3a 61 2e 69 73 5f 6d 61 6e 64 69 61 6e 74 5f 72 65 70 6f 72 74 73 3d 21 31 2c 76 6f 69 64 20 30 21 3d 3d 69 2e 69 73 5f 76 74 5f 62 61 64 5f 79 61 72 61 26 26 6e 75 6c 6c 21 3d 3d 69 2e 69 73 5f 76 74 5f 62 61 64 5f 79 61 72 61 3f 61 2e 69 73 5f 76 74 5f 62 61 64 5f 79 61 72 61 3d 42 6f 6f 6c 65 61 6e 28 69 2e 69 73 5f 76 74 5f 62 61 64 5f 79 61 72 61 29 3a 61 2e 69 73 5f 76 74 5f 62 61 64 5f 79 61 72 61 3d 21 31 2c 76 6f 69 64 20 30 21 3d 3d 69 2e 69 73 5f Data Ascii: s_mandiant_reports&&null!==i.is_mandiant_reports?a.is_mandiant_reports=Boolean(i.is_mandiant_reports):a.is_mandiant_reports=!1,void 0!==i.is_vt_bad_yara&&null!==i.is_vt_bad_yara?a.is_vt_bad_yara=Boolean(i.is_vt_bad_yara):a.is_vt_bad_yara=!1,void 0!==i.is_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.18	60891	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:01 UTC	690	OUT	GET /gui/64098.3377bd9636d2bbe06657.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:01 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:01 GMT expires: Thu, 15 Jan 2026 16:45:01 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: f0b71de7fdaf503f0d7c594ec0d9c49b content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:01 UTC	1003	IN	Data Raw: 33 39 38 32 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 34 30 39 38 2c 38 37 39 36 30 2c 36 37 31 37 33 5d 2c 7b 33 32 36 37 34 3a 28 74 2c 65 2c 6f 29 3d 3e 7b 6f 28 39 38 39 31 29 3b 76 61 72 20 72 3d 6f 28 34 38 37 30 34 29 2c 69 3d 6f 28 31 36 36 34 35 29 2c 73 3d 6f 28 37 32 39 37 30 29 2c 6c 3d 6f 28 34 35 32 34 31 29 2c 6e 3d 6f 28 39 35 36 38 38 29 2c 61 3d 6f 28 37 31 30 31 32 29 2c 63 3d 6f 28 32 31 33 30 32 29 3b 6c 65 74 20 64 2c 62 2c 68 2c 70 2c 75 2c 6d 2c 67 2c 66 2c 76 2c 79 3d 74 3d 3e 74 3b 66 75 6e 63 74 69 6f 6e 20 77 28 74 2c Data Ascii: 3982"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[64098,87960,67173],{32674:(t,e,o)=>{o(9891);var r=o(48704),i=o(16645),s=o(72970),l=o(45241),n=o(95688),a=o(71012),c=o(21302);let d,b,h,p,u,m,g,f,v,y=t=>t;function w(t,
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 74 2c 65 29 7b 28 6e 75 6c 6c 3d 3d 65 7c 7c 65 3e 74 2e 6c 65 6e 67 74 68 29 26 26 28 65 3d 74 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 6f 3d 30 2c 72 3d 41 72 72 61 79 28 65 29 3b 6f 3c 65 3b 6f 2b 2b 29 72 5b 6f 5d 3d 74 5b 6f 5d 3b 72 Data Ascii: ow new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function k(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var o=0,r=Array(e);o<e;o++)r[o]=t[o];r
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 2c 69 3d 65 5b 31 5d 3b 72 65 74 75 72 6e 28 30 2c 72 2e 68 74 6d 6c 29 28 70 7c 7c 28 70 3d 79 60 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 62 2d 32 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 77 2d 62 6f 6c 64 22 3e 24 7b 30 7d 3c 2f 64 69 76 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 60 29 2c 24 5b 6f 5d 2c 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 6d 61 70 28 28 74 3d 3e 28 30 2c 72 2e 68 74 6d 6c 29 28 75 7c 7c 28 75 3d 79 60 3c 64 69 76 3e 24 7b 30 7d 3c 2f 64 69 76 3e 60 29 2c 74 68 69 73 2e 67 65 74 52 65 6c 61 74 65 64 4e 61 6d 65 28 74 29 29 29 29 29 7d 29 29 29 7d 67 65 74 52 65 6c 61 74 65 64 4e 61 6d 65 28 74 29 7b 76 61 72 20 65 2c 6f 3b 73 77 69 74 63 68 28 74 2e 74 79 70 65 29 7b 63 61 73 65 22 63 6f 6c 6c 65 63 74 69 6f 6e 22 3a 72 Data Ascii: ,i=e[1];return(0,r.html)(p\|\|(p=y`<div class="mb-2"> <div class="fw-bold">${0}</div> ${0} </div>`),$[o],null==i?void 0:i.map((t=>(0,r.html)(u\|\|(u=y`<div>${0}</div>`),this.getRelatedName(t)))))})))}getRelatedName(t){var e,o;switch(t.type){case"collection":r
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 79 7d 29 5d 2c 52 2e 70 72 6f 74 6f 74 79 70 65 2c 22 72 65 6c 61 74 65 64 46 72 6f 6d 4c 69 73 74 22 2c 76 6f 69 64 20 30 29 2c 78 28 5b 28 30 2c 69 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 4e 75 6d 62 65 72 7d 29 5d 2c 52 2e 70 72 6f 74 6f 74 79 70 65 2c 22 74 6f 74 61 6c 52 65 6c 61 74 65 64 46 72 6f 6d 22 2c 76 6f 69 64 20 30 29 2c 78 28 5b 28 30 2c 69 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 7d 29 5d 2c 52 2e 70 72 6f 74 6f 74 79 70 65 2c 22 68 65 61 64 65 72 22 2c 76 6f 69 64 20 30 29 2c 52 3d 78 28 5b 28 30 2c 69 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 29 28 22 76 74 2d 75 69 2d 72 65 6c 61 74 65 64 2d 66 72 6f 6d 22 29 5d 2c 52 29 7d 2c 39 32 37 34 37 3a 28 74 2c 65 2c 6f 29 3d 3e 7b 6f 2e 64 28 65 2c 7b Data Ascii: y})],R.prototype,"relatedFromList",void 0),x([(0,i.property)({type:Number})],R.prototype,"totalRelatedFrom",void 0),x([(0,i.property)({type:Boolean})],R.prototype,"header",void 0),R=x([(0,i.customElement)("vt-ui-related-from")],R)},92747:(t,e,o)=>{o.d(e,{
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 29 6c 3d 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 28 74 2c 65 2c 6f 2c 72 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 6e 3e 3d 30 3b 6e 2d 2d 29 28 69 3d 74 5b 6e 5d 29 26 26 28 6c 3d 28 73 3c 33 3f 69 28 6c 29 3a 73 3e 33 3f 69 28 65 2c 6f 2c 6c 29 3a 69 28 65 2c 6f 29 29 7c 7c 6c 29 3b 72 65 74 75 72 6e 20 73 3e 33 26 26 6c 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6f 2c 6c 29 2c 6c 7d 3b 63 6f 6e 73 74 20 43 3d 5b 7b 6b 65 79 3a 22 66 69 6c 65 73 5f 63 6f 75 6e 74 22 2c 6e 61 6d 65 3a 22 46 69 6c 65 73 22 7d 2c Data Ascii: "==typeof Reflect&&"function"==typeof Reflect.decorate)l=Reflect.decorate(t,e,o,r);else for(var n=t.length-1;n>=0;n--)(i=t[n])&&(l=(s<3?i(l):s>3?i(e,o,l):i(e,o))\|\|l);return s>3&&l&&Object.defineProperty(e,o,l),l};const C=[{key:"files_count",name:"Files"},
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 74 61 74 73 20 68 73 74 61 63 6b 20 67 61 70 2d 34 20 74 65 78 74 2d 62 6f 64 79 2d 73 65 63 6f 6e 64 61 72 79 22 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 60 29 2c 68 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 63 6f 6c 6c 65 63 74 69 6f 6e 22 2c 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 69 64 29 2c 74 68 69 73 2e 72 65 71 75 65 73 74 52 65 70 6f 72 74 4f 70 65 6e 69 6e 67 2c 6e 75 6c 6c 21 3d 3d 28 6f 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 26 26 76 6f 69 64 20 30 21 3d 3d 6f 26 26 6e 75 6c 6c 21 3d 3d 28 6f Data Ascii: ${0} </div> <div class="stats hstack gap-4 text-body-secondary"> ${0} </div> </div> </div> `),h.Z8.getRedirectUrl("collection",null===(e=this.collection)\|\|void 0===e?void 0:e.id),this.requestReportOpening,null!==(o=this.collection)&&void 0!==o&&null!==(o
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 3d 3d 3d 28 61 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 28 61 3d 61 2e 6f 77 6e 65 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 69 64 7d 60 29 2c 21 31 2c 6e 75 6c 6c 3d 3d 3d 28 75 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 75 7c 7c 6e 75 6c 6c 3d 3d 3d 28 75 3d 75 2e 6f 77 6e 65 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 75 3f 76 6f 69 64 20 30 3a 75 2e 69 64 29 3a 73 2e 6e 6f 74 68 69 6e 67 2c 68 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 63 6f 6c 6c 65 63 74 69 6f 6e 22 2c 6e 75 6c 6c 3d 3d 3d 28 6d 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6d 3f 76 6f 69 64 Data Ascii: ===(a=this.collection)\|\|void 0===a\|\|null===(a=a.owner)\|\|void 0===a?void 0:a.id}`),!1,null===(u=this.collection)\|\|void 0===u\|\|null===(u=u.owner)\|\|void 0===u?void 0:u.id):s.nothing,h.Z8.getRedirectUrl("collection",null===(m=this.collection)\|\|void 0===m?void
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6f 72 69 67 69 6e 29 7d 72 65 6e 64 65 72 53 74 61 74 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3f 28 30 2c 73 2e 68 74 6d 6c 29 28 78 7c 7c 28 78 3d 53 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 73 74 61 63 6b 20 67 61 70 2d 31 22 3e 20 24 7b 30 7d 3a 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 60 29 2c 65 2c 64 2e 77 39 2e 68 75 6d 61 6e 69 7a 65 43 6f 75 6e 74 28 74 7c 7c 30 29 29 3a 73 2e 6e 6f 74 68 69 6e 67 7d 72 65 71 75 65 73 74 52 65 70 6f 72 74 4f 70 65 6e 69 6e 67 28 74 29 7b 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 26 26 28 74 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 72 2e 68 34 2e 63 6f 6c 6c 65 63 74 6f 72 2e 63 6f 6c Data Ascii: d 0===t?void 0:t.origin)}renderStat(t,e){return t?(0,s.html)(x\|\|(x=S` <div class="hstack gap-1"> ${0}: ${0} </div> `),e,d.w9.humanizeCount(t\|\|0)):s.nothing}requestReportOpening(t){this.collection&&(t.stopPropagation(),t.preventDefault(),r.h4.collector.col
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 29 6c 3d 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 28 74 2c 65 2c 6f 2c 72 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 6e 3e 3d 30 3b 6e 2d 2d 29 28 69 3d 74 5b 6e 5d 29 26 26 28 6c 3d 28 73 3c 33 3f 69 28 6c 29 3a 73 3e 33 3f 69 28 65 2c 6f 2c 6c 29 3a 69 28 65 2c 6f 29 29 7c 7c 6c 29 3b 72 65 74 75 72 6e 20 73 3e 33 26 26 6c 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6f 2c 6c 29 2c 6c 7d 3b 6c 65 74 20 77 3d 28 63 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 72 2e 4c 69 74 45 6c 65 Data Ascii: ;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)l=Reflect.decorate(t,e,o,r);else for(var n=t.length-1;n>=0;n--)(i=t[n])&&(l=(s<3?i(l):s>3?i(e,o,l):i(e,o))\|\|l);return s>3&&l&&Object.defineProperty(e,o,l),l};let w=(c=class extends r.LitEle
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 55 6e 73 65 6c 65 63 74 65 64 2c 73 2e 61 72 72 6f 77 52 69 67 68 74 41 72 72 6f 77 4c 65 66 74 49 63 6f 6e 29 3a 72 2e 6e 6f 74 68 69 6e 67 2c 74 68 69 73 2e 73 68 6f 77 53 6f 75 72 63 65 43 6f 6c 75 6d 6e 28 74 68 69 73 2e 64 61 74 61 29 3f 28 30 2c 72 2e 68 74 6d 6c 29 28 70 7c 7c 28 70 3d 76 60 20 3c 74 68 20 63 6c 61 73 73 3d 22 63 6f 6c 20 74 65 78 74 2d 63 65 6e 74 65 72 20 74 65 78 74 2d 6e 6f 77 72 61 70 22 3e 20 4f 76 65 72 6c 61 70 70 69 6e 67 20 49 6f 43 73 20 3c 2f 74 68 3e 20 60 29 29 3a 72 2e 6e 6f 74 68 69 6e 67 29 2c 21 74 68 69 73 2e 6c 6f 61 64 69 6e 67 7c 7c 6e 75 6c 6c 21 3d 3d 28 74 3d 74 68 69 73 2e 64 61 74 61 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 26 26 74 2e 6c 65 6e 67 74 68 3f 72 2e 6e 6f 74 68 69 6e 67 3a 5b 2e 2e 2e 6e 65 77 Data Ascii: Unselected,s.arrowRightArrowLeftIcon):r.nothing,this.showSourceColumn(this.data)?(0,r.html)(p\|\|(p=v` <th class="col text-center text-nowrap"> Overlapping IoCs </th> `)):r.nothing),!this.loading\|\|null!==(t=this.data)&&void 0!==t&&t.length?r.nothing:[...new

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.18	60893	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:01 UTC	690	OUT	GET /gui/87379.10e7a557de64c909c07d.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:01 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:01 GMT expires: Thu, 15 Jan 2026 16:45:01 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 180d3c3ee39b32361aef6250856d0b08 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:01 UTC	1003	IN	Data Raw: 33 39 36 31 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 37 33 37 39 2c 38 31 34 32 2c 33 39 36 32 36 5d 2c 7b 38 37 33 37 39 3a 28 6f 2c 65 2c 72 29 3d 3e 7b 76 61 72 20 74 3d 72 28 32 32 38 39 34 29 2c 6e 3d 72 28 35 36 38 37 30 29 2c 73 3d 72 28 31 33 35 37 30 29 2c 69 3d 28 72 28 39 38 39 31 29 2c 72 28 34 38 37 30 34 29 29 2c 61 3d 72 28 31 36 36 34 35 29 2c 62 3d 72 28 36 32 38 33 32 29 2c 6c 3d 72 28 31 34 37 33 36 29 2c 64 3d 72 28 39 32 36 31 39 29 2c 63 3d 72 28 33 35 30 33 39 29 2c 70 3d 72 28 37 33 36 30 38 29 2c 75 3d 72 28 39 34 31 37 Data Ascii: 3961"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[87379,8142,39626],{87379:(o,e,r)=>{var t=r(22894),n=r(56870),s=r(13570),i=(r(9891),r(48704)),a=r(16645),b=r(62832),l=r(14736),d=r(92619),c=r(35039),p=r(73608),u=r(9417
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 6e 74 73 22 3d 3d 3d 72 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 72 29 3f 54 28 6f 2c 65 29 3a 76 6f 69 64 20 30 7d 7d 28 6f 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d Data Ascii: nts"===r\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(r)?T(o,e):void 0}}(o,e)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 6c 61 73 74 5f 6d 6f 64 69 66 69 63 61 74 69 6f 6e 5f 64 61 74 65 2d 22 2c 61 74 74 72 69 62 75 74 65 73 3a 5b 22 6e 61 6d 65 22 2c 22 74 6f 70 5f 69 63 6f 6e 5f 6d 64 35 22 5d 7d 29 2c 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 73 2e 6c 6f 61 64 28 29 7d 66 69 6c 74 65 72 43 6f 6c 6c 65 63 74 69 6f 6e 73 46 6f 72 6d 53 75 62 6d 69 74 74 65 64 28 6f 29 7b 6f 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 6f 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 63 6f 6e 73 74 20 65 3d 6f 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2c 72 3d 6e 65 77 20 46 6f 72 6d 44 61 74 61 28 65 29 3b 74 68 69 73 2e 67 65 74 43 6f 6c 6c 65 63 74 69 6f 6e 73 28 72 2e 67 65 74 28 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 2d 66 69 6c 74 65 72 22 29 29 7d 72 65 73 65 74 Data Ascii: last_modification_date-",attributes:["name","top_icon_md5"]}),this.collections.load()}filterCollectionsFormSubmitted(o){o.preventDefault(),o.stopPropagation();const e=o.currentTarget,r=new FormData(e);this.getCollections(r.get("collections-filter"))}reset
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 6f 69 64 20 30 3a 73 2e 6c 65 6e 67 74 68 29 3e 31 3f 22 73 22 3a 22 22 7d 20 74 6f 20 27 24 7b 62 2e 64 61 74 61 2e 6e 61 6d 65 7d 27 60 2c 67 2e 4d 2e 4d 41 58 5f 44 45 4c 41 59 2c 21 30 29 3b 63 6f 6e 73 74 20 64 3d 28 6e 75 6c 6c 21 3d 3d 28 69 3d 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 6c 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 3f 69 3a 7b 7d 29 2e 6d 61 70 28 28 6f 3d 3e 7b 76 61 72 20 65 3b 6c 65 74 20 72 3d 45 28 6f 2c 32 29 2c 74 3d 72 5b 30 5d 2c 6e 3d 72 5b 31 5d 3b 69 66 28 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 75 6c 6c 3d 3d 3d 28 65 3d 6e 2e 64 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 21 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 3b 72 65 74 75 72 6e 20 62 5b 22 69 70 5f 61 Data Ascii: oid 0:s.length)>1?"s":""} to '${b.data.name}'`,g.M.MAX_DELAY,!0);const d=(null!==(i=Object.entries(l))&&void 0!==i?i:{}).map((o=>{var e;let r=E(o,2),t=r[0],n=r[1];if(null==n\|\|null===(e=n.data)\|\|void 0===e\|\|!e.length)return Promise.resolve();return b["ip_a
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 2e 72 65 76 65 72 73 65 28 29 3a 5b 5d 3b 72 65 74 75 72 6e 28 30 2c 69 2e 68 74 6d 6c 29 28 6b 7c 7c 28 6b 3d 24 60 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 64 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 20 70 73 2d 33 22 3e 20 24 7b 30 7d 20 3c 2f 73 70 61 6e 3e 60 29 2c 6e 75 6c 6c 21 3d 72 26 26 72 2e 6c 65 6e 67 74 68 3f 72 3a 28 30 2c 69 2e 68 74 6d 6c 29 28 78 7c 7c 28 78 3d 24 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 76 65 72 66 6c 6f 77 2d 68 69 64 64 65 6e 20 72 6f 75 6e 64 65 64 2d 63 69 72 63 6c 65 20 62 6f 72 64 65 72 20 62 67 2d 77 68 69 74 65 20 70 2d 31 20 66 73 2d 34 20 64 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 22 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 31 72 65 6d 22 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 60 29 2c 63 2e Data Ascii: .reverse():[];return(0,i.html)(k\|\|(k=$`<span class="d-inline-flex ps-3"> ${0} </span>`),null!=r&&r.length?r:(0,i.html)(x\|\|(x=$` <div class="overflow-hidden rounded-circle border bg-white p-1 fs-4 d-inline-flex" style="margin-left: -1rem"> ${0} </div>`),c.
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 3d 22 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 20 68 73 74 61 63 6b 20 24 7b 30 7d 22 20 64 61 74 61 2d 63 6f 6c 6c 65 63 74 69 6f 6e 2d 69 64 3d 22 24 7b 30 7d 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 3e 20 24 7b 30 7d 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 73 2d 32 20 74 65 78 74 2d 77 72 61 70 22 3e 24 7b 30 7d 3c 2f 73 70 61 6e 3e 20 3c 2f 62 75 74 74 6f 6e 3e 60 29 2c 28 30 2c 62 2e 63 6c 61 73 73 4d 61 70 29 28 7b 22 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 30 22 3a 65 3d 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 72 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 73 2e 64 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 6c 65 6e 67 74 68 29 2d 31 7d 29 2c 6f 2e 64 61 74 61 2e 69 64 2c 74 68 69 73 2e 63 6f 6c 6c 65 63 74 Data Ascii: ="dropdown-item hstack ${0}" data-collection-id="${0}" @click="${0}"> ${0} <span class="ms-2 text-wrap">${0}</span> </button>`),(0,b.classMap)({"border-bottom-0":e===(null===(r=this.collections.data)\|\|void 0===r?void 0:r.length)-1}),o.data.id,this.collect
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 6f 76 65 72 22 2c 74 68 69 73 2e 6b 65 65 70 54 6f 61 73 74 56 69 73 69 62 6c 65 29 7d 64 69 73 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 28 29 7b 74 68 69 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 6f 76 65 72 22 2c 74 68 69 73 2e 6b 65 65 70 54 6f 61 73 74 56 69 73 69 62 6c 65 29 2c 73 75 70 65 72 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 28 29 7d 72 65 6e 64 65 72 28 29 7b 72 65 74 75 72 6e 28 30 2c 74 2e 68 74 6d 6c 29 28 61 7c 7c 28 61 3d 62 60 20 3c 73 6c 6f 74 3e 3c 2f 73 6c 6f 74 3e 20 60 29 29 7d 75 70 64 61 74 65 64 28 6f 29 7b 6f 2e 68 61 73 28 22 6f 70 65 6e 65 64 22 29 26 26 74 68 69 73 2e 6f 70 65 6e 65 64 4f 62 73 65 Data Ascii: entListener("mouseover",this.keepToastVisible)}disconnectedCallback(){this.removeEventListener("mouseover",this.keepToastVisible),super.disconnectedCallback()}render(){return(0,t.html)(a\|\|(a=b` <slot></slot> `))}updated(o){o.has("opened")&&this.openedObse
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 69 6c 74 65 72 28 28 6f 3d 3e 6e 75 6c 6c 21 3d 3d 6f 29 29 7d 75 70 64 61 74 65 4e 61 6d 65 46 69 6c 74 65 72 28 6f 29 7b 74 68 69 73 2e 70 61 72 61 6d 73 2e 66 69 6c 74 65 72 3d 60 6e 61 6d 65 3a 24 7b 6f 7d 60 2c 74 68 69 73 2e 72 65 6c 6f 61 64 28 29 7d 7d 7d 2c 33 35 30 33 39 3a 28 6f 2c 65 2c 72 29 3d 3e 7b 72 2e 72 28 65 29 2c 72 2e 64 28 65 2c 7b 63 6f 6c 6c 65 63 74 69 6f 6e 49 63 6f 6e 3a 28 29 3d 3e 74 2e 63 6f 6c 6c 65 63 74 69 6f 6e 49 63 6f 6e 7d 29 3b 76 61 72 20 74 3d 72 28 31 35 33 32 33 29 7d 2c 37 33 36 30 38 3a 28 6f 2c 65 2c 72 29 3d 3e 7b 72 2e 72 28 65 29 2c 72 2e 64 28 65 2c 7b 70 6c 75 73 49 63 6f 6e 3a 28 29 3d 3e 74 2e 70 6c 75 73 49 63 6f 6e 7d 29 3b 76 61 72 20 74 3d 72 28 31 35 33 32 33 29 7d 2c 34 38 36 37 36 3a 28 6f 2c 65 Data Ascii: ilter((o=>null!==o))}updateNameFilter(o){this.params.filter=`name:${o}`,this.reload()}}},35039:(o,e,r)=>{r.r(e),r.d(e,{collectionIcon:()=>t.collectionIcon});var t=r(15323)},73608:(o,e,r)=>{r.r(e),r.d(e,{plusIcon:()=>t.plusIcon});var t=r(15323)},48676:(o,e
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 45 29 5c 6e 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 73 2d 62 6c 75 65 3a 20 23 30 62 34 64 64 61 3b 2d 2d 62 73 2d 69 6e 64 69 67 6f 3a 20 23 36 36 31 30 66 32 3b 2d 2d 62 73 2d 70 75 72 70 6c 65 3a 20 23 36 66 34 32 63 31 3b 2d 2d 62 73 2d 70 69 6e 6b 3a 20 23 30 30 30 30 30 30 3b 2d 2d 62 73 2d 72 65 64 3a 20 23 63 35 32 34 32 30 3b 2d 2d 62 73 2d 6f 72 61 6e 67 65 3a 20 23 65 35 37 33 30 30 3b 2d 2d 62 73 2d 79 65 6c 6c 6f 77 3a 20 23 66 63 65 39 36 37 3b 2d 2d 62 73 2d 67 72 65 65 6e 3a 20 23 33 39 61 63 34 63 3b 2d 2d 62 73 2d 74 65 61 6c 3a 20 23 32 30 63 39 39 37 3b 2d 2d 62 73 2d 63 79 61 6e 3a 20 23 32 38 37 62 62 35 3b 2d 2d 62 73 2d 62 6c 61 63 6b 3a 20 23 30 30 30 3b 2d 2d 62 73 2d 77 68 69 74 65 3a 20 23 66 66 66 3b 2d 2d 62 73 2d 67 72 61 79 3a Data Ascii: E)\n */:root{--bs-blue: #0b4dda;--bs-indigo: #6610f2;--bs-purple: #6f42c1;--bs-pink: #000000;--bs-red: #c52420;--bs-orange: #e57300;--bs-yellow: #fce967;--bs-green: #39ac4c;--bs-teal: #20c997;--bs-cyan: #287bb5;--bs-black: #000;--bs-white: #fff;--bs-gray:
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 73 2d 69 6e 66 6f 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 39 39 63 61 66 35 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 66 35 63 37 39 39 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 65 38 61 37 61 36 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 66 32 66 32 66 32 3b 2d 2d 62 73 2d 64 61 72 6b 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 62 33 62 33 62 33 3b 2d 2d 62 73 2d 77 68 69 74 65 2d 72 67 62 3a 20 32 35 35 2c 20 32 35 35 2c 20 32 35 35 3b 2d 2d 62 73 2d 62 6c 61 63 6b 2d 72 67 62 3a 20 30 2c 20 30 2c 20 30 3b 2d 2d 62 73 2d 66 6f 6e 74 2d 73 61 6e 73 2d 73 65 72 69 66 3a 20 22 53 6f 75 72 63 65 20 53 61 6e Data Ascii: s-info-border-subtle: #99caf5;--bs-warning-border-subtle: #f5c799;--bs-danger-border-subtle: #e8a7a6;--bs-light-border-subtle: #f2f2f2;--bs-dark-border-subtle: #b3b3b3;--bs-white-rgb: 255, 255, 255;--bs-black-rgb: 0, 0, 0;--bs-font-sans-serif: "Source San

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.18	60892	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:01 UTC	511	OUT	GET /gui/22232.15ef530edb01268cfe7b.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:01 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:01 GMT expires: Thu, 15 Jan 2026 16:45:01 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: fbb55dd88cfde442df58de4022fd137f content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:01 UTC	1003	IN	Data Raw: 33 39 61 37 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 32 32 33 32 5d 2c 7b 32 37 32 37 30 3a 28 65 2c 72 2c 74 29 3d 3e 7b 74 2e 64 28 72 2c 7b 76 3a 28 29 3d 3e 75 7d 29 3b 76 61 72 20 73 3d 74 28 34 39 32 37 32 29 2c 6f 3d 74 28 34 38 37 30 34 29 2c 61 3d 74 28 31 36 36 34 35 29 2c 62 3d 74 28 36 32 38 33 32 29 2c 69 3d 74 28 36 36 38 31 33 29 2c 6e 3d 74 28 31 35 33 32 33 29 2c 64 3d 74 28 38 33 31 37 30 29 3b 6c 65 74 20 63 2c 6c 2c 67 2c 70 2c 6d 2c 79 3d 65 3d 3e 65 3b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 2c 73 29 7b Data Ascii: 39a7"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[22232],{27270:(e,r,t)=>{t.d(r,{v:()=>u});var s=t(49272),o=t(48704),a=t(16645),b=t(62832),i=t(66813),n=t(15323),d=t(83170);let c,l,g,p,m,y=e=>e;var f=function(e,r,t,s){
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 20 72 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 67 74 69 41 73 73 65 73 73 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 65 3d 65 2e 76 65 72 64 69 63 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 72 3d 3d 3d 73 2e 56 65 72 64 69 63 74 2e 56 45 52 44 49 43 54 5f 55 4e 4b 4e 4f 57 4e 3f 22 55 6e 6b 6e 6f 77 6e 22 3a 72 3d 3d 3d 73 2e 56 65 72 64 69 63 74 2e 56 45 52 44 49 43 54 5f 42 45 4e 49 47 4e 3f 22 42 65 6e 69 67 6e 22 3a 72 3d 3d 3d 73 2e 56 65 72 64 69 63 74 2e 56 45 52 44 49 43 54 5f 55 4e 44 45 54 45 43 54 45 44 3f 22 55 6e 64 65 74 65 63 74 65 64 22 3a 72 3d 3d 3d 73 2e 56 65 72 64 69 63 74 2e 56 45 52 44 49 43 54 5f 53 55 53 50 49 43 49 4f Data Ascii: r=null===(e=this.gtiAssessment)\|\|void 0===e\|\|null===(e=e.verdict)\|\|void 0===e?void 0:e.value;return r===s.Verdict.VERDICT_UNKNOWN?"Unknown":r===s.Verdict.VERDICT_BENIGN?"Benign":r===s.Verdict.VERDICT_UNDETECTED?"Undetected":r===s.Verdict.VERDICT_SUSPICIO
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 21 31 29 2c 72 3d 3d 3d 73 2e 56 65 72 64 69 63 74 2e 56 45 52 44 49 43 54 5f 53 55 53 50 49 43 49 4f 55 53 26 26 28 74 5b 22 62 67 2d 68 6f 6e 65 79 22 5d 3d 21 30 2c 74 5b 22 62 67 2d 62 6f 64 79 2d 74 65 72 74 69 61 72 79 22 5d 3d 21 31 2c 74 5b 22 74 65 78 74 2d 62 6f 64 79 2d 74 65 72 74 69 61 72 79 22 5d 3d 21 31 29 2c 72 3d 3d 3d 73 2e 56 65 72 64 69 63 74 2e 56 45 52 44 49 43 54 5f 42 45 4e 49 47 4e 26 26 28 74 5b 22 62 67 2d 73 75 63 63 65 73 73 22 5d 3d 21 30 2c 74 5b 22 62 67 2d 62 6f 64 79 2d 74 65 72 74 69 61 72 79 22 5d 3d 21 31 2c 74 5b 22 74 65 78 74 2d 62 6f 64 79 2d 74 65 72 74 69 61 72 79 22 5d 3d 21 31 29 2c 74 7d 67 65 74 20 73 63 6f 72 65 42 61 72 43 69 72 63 6c 65 43 6f 6c 6f 72 28 29 7b 76 61 72 20 65 3b 6c 65 74 20 72 3b 73 77 69 Data Ascii: !1),r===s.Verdict.VERDICT_SUSPICIOUS&&(t["bg-honey"]=!0,t["bg-body-tertiary"]=!1,t["text-body-tertiary"]=!1),r===s.Verdict.VERDICT_BENIGN&&(t["bg-success"]=!0,t["bg-body-tertiary"]=!1,t["text-body-tertiary"]=!1),t}get scoreBarCircleColor(){var e;let r;swi
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 70 61 6e 3e 20 24 7b 30 7d 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 6d 61 6c 6c 20 74 65 78 74 2d 62 6f 64 79 2d 74 65 72 74 69 61 72 79 22 3e 31 30 30 3c 2f 73 70 61 6e 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 6d 61 6c 6c 20 74 65 78 74 2d 62 6f 64 79 2d 74 65 72 74 69 61 72 79 22 3e 20 3c 73 70 61 6e 3e 20 47 54 49 20 53 63 6f 72 65 3a 20 3c 2f 73 70 61 6e 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 66 77 2d 62 6f 6c 64 20 24 7b 30 7d 22 3e 24 7b 30 7d 3c 2f 73 70 61 6e 3e 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 60 29 2c 74 68 69 73 2e 6c 6f 61 64 69 6e 67 3f 28 30 2c 6f 2e 68 74 6d 6c 29 28 67 7c 7c 28 67 3d 79 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 70 69 6e 6e 65 72 2d 62 6f 72 Data Ascii: pan> ${0} <span class="small text-body-tertiary">100</span> </div> <div class="small text-body-tertiary"> <span> GTI Score: </span> <span class="fw-bold ${0}">${0}</span>${0} </div> </div> </div> `),this.loading?(0,o.html)(g\|\|(g=y` <div class="spinner-bor
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 6c 74 65 72 3a 22 64 72 6f 70 2d 73 68 61 64 6f 77 28 30 70 78 20 30 70 78 20 32 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 29 22 7d 29 29 7d 7d 2c 63 2e 73 74 79 6c 65 73 3d 28 30 2c 6f 2e 75 6e 73 61 66 65 43 53 53 29 28 64 2e 41 29 2c 63 29 3b 66 28 5b 28 30 2c 61 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 4f 62 6a 65 63 74 7d 29 5d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2c 22 67 74 69 41 73 73 65 73 73 6d 65 6e 74 22 2c 76 6f 69 64 20 30 29 2c 66 28 5b 28 30 2c 61 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 7d 29 5d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6c 6f 61 64 69 6e 67 22 2c 76 6f 69 64 20 30 29 2c 68 3d 66 28 5b 28 30 2c 61 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 29 28 22 67 74 69 2d 69 Data Ascii: lter:"drop-shadow(0px 0px 2px rgba(0, 0, 0, 0.2))"}))}},c.styles=(0,o.unsafeCSS)(d.A),c);f([(0,a.property)({type:Object})],h.prototype,"gtiAssessment",void 0),f([(0,a.property)({type:Boolean})],h.prototype,"loading",void 0),h=f([(0,a.customElement)("gti-i
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 69 3e 20 24 7b 30 7d 20 2f 20 31 30 30 20 3c 2f 61 3e 60 29 2c 28 30 2c 69 2e 69 66 44 65 66 69 6e 65 64 29 28 6e 2e 5a 38 2e 67 65 74 53 65 61 72 63 68 55 72 6c 28 7b 67 74 69 5f 73 63 6f 72 65 3a 60 24 7b 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 61 73 73 65 73 73 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 65 3d 65 2e 74 68 72 65 61 74 5f 73 63 6f 72 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 76 61 6c 75 65 7d 60 7d 29 29 2c 28 30 2c 62 2e 63 6c 61 73 73 4d 61 70 29 28 74 68 69 73 2e 76 65 72 64 69 63 74 49 63 6f 6e 43 6f 6c 6f 72 4d 61 70 29 2c 28 30 2c 64 2e 76 29 28 6e 75 6c 6c 3d 3d 3d 28 72 3d 74 68 69 73 2e 61 73 73 65 73 73 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 7c Data Ascii: i> ${0} / 100 </a>`),(0,i.ifDefined)(n.Z8.getSearchUrl({gti_score:`${null===(e=this.assessment)\|\|void 0===e\|\|null===(e=e.threat_score)\|\|void 0===e?void 0:e.value}`})),(0,b.classMap)(this.verdictIconColorMap),(0,d.v)(null===(r=this.assessment)\|\|void 0===r\|
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 3a 20 23 63 35 32 34 32 30 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2d 72 67 62 3a 20 31 31 2c 20 37 37 2c 20 32 31 38 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 72 67 62 3a 20 35 37 2c 20 31 37 32 2c 20 37 36 3b 2d 2d 62 73 2d 69 6e 66 6f 2d 72 67 62 3a 20 30 2c 20 31 32 33 2c 20 32 33 30 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 72 67 62 3a 20 32 32 39 2c 20 31 31 35 2c 20 30 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 72 67 62 3a 20 31 39 37 2c 20 33 36 2c 20 33 32 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 30 36 32 62 37 39 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 32 39 32 39 32 39 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 Data Ascii: : #c52420;--bs-primary-rgb: 11, 77, 218;--bs-success-rgb: 57, 172, 76;--bs-info-rgb: 0, 123, 230;--bs-warning-rgb: 229, 115, 0;--bs-danger-rgb: 197, 36, 32;--bs-primary-text-emphasis: #062b79;--bs-secondary-text-emphasis: #292929;--bs-success-text-emphasi
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 63 6f 6c 6f 72 3a 20 23 32 30 32 34 32 63 3b 2d 2d 62 73 2d 62 6f 64 79 2d 63 6f 6c 6f 72 2d 72 67 62 3a 20 33 32 2c 20 33 36 2c 20 34 34 3b 2d 2d 62 73 2d 62 6f 64 79 2d 62 67 3a 20 23 66 66 66 3b 2d 2d 62 73 2d 62 6f 64 79 2d 62 67 2d 72 67 62 3a 20 32 35 35 2c 20 32 35 35 2c 20 32 35 35 3b 2d 2d 62 73 2d 65 6d 70 68 61 73 69 73 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 2d 2d 62 73 2d 65 6d 70 68 61 73 69 73 2d 63 6f 6c 6f 72 2d 72 67 62 3a 20 30 2c 20 30 2c 20 30 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 63 6f 6c 6f 72 3a 20 23 33 36 33 63 34 39 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 63 6f 6c 6f 72 2d 72 67 62 3a 20 35 34 2c 20 36 30 2c 20 37 33 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 67 3a 20 23 66 39 66 61 66 62 3b 2d 2d 62 73 Data Ascii: color: #20242c;--bs-body-color-rgb: 32, 36, 44;--bs-body-bg: #fff;--bs-body-bg-rgb: 255, 255, 255;--bs-emphasis-color: #000;--bs-emphasis-color-rgb: 0, 0, 0;--bs-secondary-color: #363c49;--bs-secondary-color-rgb: 54, 60, 73;--bs-secondary-bg: #f9fafb;--bs
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 72 3a 20 23 33 39 61 63 34 63 3b 2d 2d 62 73 2d 66 6f 72 6d 2d 76 61 6c 69 64 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 33 39 61 63 34 63 3b 2d 2d 62 73 2d 66 6f 72 6d 2d 69 6e 76 61 6c 69 64 2d 63 6f 6c 6f 72 3a 20 23 63 35 32 34 32 30 3b 2d 2d 62 73 2d 66 6f 72 6d 2d 69 6e 76 61 6c 69 64 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 63 35 32 34 32 30 7d 2a 2c 2a 3a 3a 62 65 66 6f 72 65 2c 2a 3a 3a 61 66 74 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 40 6d 65 64 69 61 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 20 6e 6f 2d 70 72 65 66 65 72 65 6e 63 65 29 7b 3a 72 6f 6f 74 7b 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 3a 73 6d 6f 6f 74 68 7d 7d 73 6d 61 6c 6c 2c 2e 73 6d 61 6c 6c 7b 66 Data Ascii: r: #39ac4c;--bs-form-valid-border-color: #39ac4c;--bs-form-invalid-color: #c52420;--bs-form-invalid-border-color: #c52420},::before,*::after{box-sizing:border-box}@media(prefers-reduced-motion: no-preference){:root{scroll-behavior:smooth}}small,.small{f
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 2d 2d 62 73 2d 62 61 64 67 65 2d 66 6f 6e 74 2d 77 65 69 67 68 74 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 61 64 67 65 2d 63 6f 6c 6f 72 29 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 62 73 2d 62 61 64 67 65 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 29 7d 2e 62 61 64 67 65 3a 65 6d 70 74 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 40 6b 65 79 66 72 61 6d 65 73 20 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 73 74 72 69 70 65 73 7b 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 2d 78 3a 31 Data Ascii: --bs-badge-font-weight);line-height:1;color:var(--bs-badge-color);text-align:center;white-space:nowrap;vertical-align:baseline;border-radius:var(--bs-badge-border-radius)}.badge:empty{display:none}@keyframes progress-bar-stripes{0%{background-position-x:1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.18	60896	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:01 UTC	511	OUT	GET /gui/87347.c002f57d03220f54c084.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:01 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:01 GMT expires: Thu, 15 Jan 2026 16:45:01 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: dab55b8bef7cb86ca7eda6d4178e95d1 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:01 UTC	1003	IN	Data Raw: 33 39 36 63 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 37 33 34 37 5d 2c 7b 38 37 33 34 37 3a 28 74 2c 6e 2c 65 29 3d 3e 7b 66 75 6e 63 74 69 6f 6e 20 72 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 6e 3f 4e 61 4e 3a 74 3c 6e 3f 2d 31 3a 74 3e 6e 3f 31 3a 74 3e 3d 6e 3f 30 3a 4e 61 4e 7d 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 6e 3f 4e 61 4e 3a 6e 3c 74 3f 2d 31 3a 6e 3e 74 3f 31 3a 6e 3e 3d 74 3f 30 3a 4e 61 4e 7d 66 75 6e 63 74 69 6f Data Ascii: 396c"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[87347],{87347:(t,n,e)=>{function r(t,n){return null==t\|\|null==n?NaN:t<n?-1:t>n?1:t>=n?0:NaN}function i(t,n){return null==t\|\|null==n?NaN:n<t?-1:n>t?1:n>=t?0:NaN}functio
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 6e 73 74 20 6e 3d 69 2b 6f 3e 3e 3e 31 3b 65 28 74 5b 6e 5d 2c 72 29 3c 3d 30 3f 69 3d 6e 2b 31 3a 6f 3d 6e 7d 77 68 69 6c 65 28 69 3c 6f 29 7d 72 65 74 75 72 6e 20 69 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 72 65 74 75 72 6e 20 30 7d 65 2e 64 28 6e 2c 7b 57 63 77 3a 28 29 3d 3e 4f 61 2c 6c 37 38 3a 28 29 3d 3e 5a 2c 56 34 73 3a 28 29 3d 3e 57 2c 65 48 33 3a 28 29 3d 3e 42 2c 74 6c 52 3a 28 29 3d 3e 52 2c 57 44 32 3a 28 29 3d 3e 73 2c 61 68 4d 3a 28 29 3d 3e 63 2c 4a 6a 6c 3a 28 29 3d 3e 6c 2c 6e 35 35 3a 28 29 3d 3e 74 69 2c 58 78 76 3a 28 29 3d 3e 79 2c 6e 38 6a 3a 28 29 3d 3e 48 61 2c 70 71 73 3a 28 29 3d 3e 56 61 2c 54 39 42 3a 28 29 3d 3e 76 2c 6a 6b 41 3a 28 29 3d 3e 5f 2c 57 48 3a 28 29 3d 3e 63 69 2c 6d 34 59 3a 28 29 3d 3e 7a 69 2c 77 37 Data Ascii: nst n=i+o>>>1;e(t[n],r)<=0?i=n+1:o=n}while(i<o)}return i}}}function u(){return 0}e.d(n,{Wcw:()=>Oa,l78:()=>Z,V4s:()=>W,eH3:()=>B,tlR:()=>R,WD2:()=>s,ahM:()=>c,Jjl:()=>l,n55:()=>ti,Xxv:()=>y,n8j:()=>Ha,pqs:()=>Va,T9B:()=>v,jkA:()=>_,WH:()=>ci,m4Y:()=>zi,w7
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 6f 77 20 6f 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 2c 6e 29 7b 28 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 3e 74 2e 6c 65 6e 67 74 68 29 26 26 28 6e 3d 74 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 65 3d 30 2c 72 3d 41 72 72 61 79 28 6e 29 3b 65 3c 6e 3b 65 2b 2b 29 72 5b 65 5d 3d 74 5b 65 5d 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 79 28 74 2c 6e 29 7b 6c 65 74 20 65 2c 72 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 76 61 72 20 69 2c 6f 3d 68 28 74 29 3b 74 72 79 7b 66 6f 72 28 6f 2e 73 28 29 3b 21 28 69 3d 6f 2e 6e 28 29 29 2e 64 6f 6e 65 3b 29 7b 63 6f 6e 73 74 20 74 3d 69 2e 76 61 6c 75 65 3b 6e 75 6c 6c 21 3d 74 26 26 28 76 6f 69 64 20 30 3d 3d 3d 65 3f 74 3e 3d 74 26 26 28 65 3d 72 3d 74 29 3a 28 65 3e 74 26 26 28 65 3d 74 Data Ascii: ow o}}}}function p(t,n){(null==n\|\|n>t.length)&&(n=t.length);for(var e=0,r=Array(n);e<n;e++)r[e]=t[e];return r}function y(t,n){let e,r;if(void 0===n){var i,o=h(t);try{for(o.s();!(i=o.n()).done;){const t=i.value;null!=t&&(void 0===e?t>=t&&(e=r=t):(e>t&&(e=t
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 61 29 74 68 72 6f 77 20 6f 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 2c 6e 29 7b 28 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 3e 74 2e 6c 65 6e 67 74 68 29 26 26 28 6e 3d 74 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 65 3d 30 2c 72 3d 41 72 72 61 79 28 6e 29 3b 65 3c 6e 3b 65 2b 2b 29 72 5b 65 5d 3d 74 5b 65 5d 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 76 28 74 2c 6e 29 7b 6c 65 74 20 65 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 76 61 72 20 72 2c 69 3d 67 28 74 29 3b 74 72 79 7b 66 6f 72 28 69 2e 73 28 29 3b 21 28 72 3d 69 2e 6e 28 29 29 2e 64 6f 6e 65 3b 29 7b 63 6f 6e 73 74 20 74 3d 72 2e 76 61 6c 75 65 3b 6e 75 6c 6c 21 3d 74 26 26 28 65 3c 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 26 26 74 3e 3d 74 29 26 26 28 65 3d 74 29 7d 7d 63 Data Ascii: a)throw o}}}}function d(t,n){(null==n\|\|n>t.length)&&(n=t.length);for(var e=0,r=Array(n);e<n;e++)r[e]=t[e];return r}function v(t,n){let e;if(void 0===n){var r,i=g(t);try{for(i.s();!(r=i.n()).done;){const t=r.value;null!=t&&(e<t\|\|void 0===e&&t>=t)&&(e=t)}}c
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 3e 74 2e 6c 65 6e 67 74 68 29 26 26 28 6e 3d 74 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 65 3d 30 2c 72 3d 41 72 72 61 79 28 6e 29 3b 65 3c 6e 3b 65 2b 2b 29 72 5b 65 5d 3d 74 5b 65 5d 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 2c 6e 29 7b 6c 65 74 20 65 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 76 61 72 20 72 2c 69 3d 6d 28 74 29 3b 74 72 79 7b 66 6f 72 28 69 2e 73 28 29 3b 21 28 72 3d 69 2e 6e 28 29 29 2e 64 6f 6e 65 3b 29 7b 63 6f 6e 73 74 20 74 3d 72 2e 76 61 6c 75 65 3b 6e 75 6c 6c 21 3d 74 26 26 28 65 3e 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 26 26 74 3e 3d 74 29 26 26 28 65 3d 74 29 7d 7d 63 61 74 63 68 28 74 29 7b 69 2e 65 28 74 29 7d 66 69 6e 61 6c 6c 79 7b 69 2e 66 28 29 7d 7d 65 6c 73 65 7b 6c 65 74 20 72 Data Ascii: >t.length)&&(n=t.length);for(var e=0,r=Array(n);e<n;e++)r[e]=t[e];return r}function _(t,n){let e;if(void 0===n){var r,i=m(t);try{for(i.s();!(r=i.n()).done;){const t=r.value;null!=t&&(e>t\|\|void 0===e&&t>=t)&&(e=t)}}catch(t){i.e(t)}finally{i.f()}}else{let r
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 74 65 6d 70 74 20 74 6f 20 69 74 65 72 61 74 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 76 61 72 20 6f 2c 75 3d 21 30 2c 61 3d 21 31 3b 72 65 74 75 72 6e 7b 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 3d 65 2e 63 61 6c 6c 28 74 29 7d 2c 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 65 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 75 3d 74 2e 64 6f 6e 65 2c 74 7d 2c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 61 3d 21 30 2c 6f 3d 74 7d 2c 66 3a 66 75 6e 63 74 69 6f Data Ascii: tempt to iterate non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}var o,u=!0,a=!1;return{s:function(){e=e.call(t)},n:function(){var t=e.next();return u=t.done,t},e:function(t){a=!0,o=t},f:functio
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 76 61 6c 75 65 3b 74 68 69 73 2e 61 64 64 28 74 29 7d 7d 63 61 74 63 68 28 74 29 7b 72 2e 65 28 74 29 7d 66 69 6e 61 6c 6c 79 7b 72 2e 66 28 29 7d 7d 7d 68 61 73 28 74 29 7b 72 65 74 75 72 6e 20 73 75 70 65 72 2e 68 61 73 28 6b 28 74 68 69 73 2c 74 29 29 7d 61 64 64 28 74 29 7b 72 65 74 75 72 6e 20 73 75 70 65 72 2e 61 64 64 28 43 28 74 68 69 73 2c 74 29 29 7d 64 65 6c 65 74 65 28 74 29 7b 72 65 74 75 72 6e 20 73 75 70 65 72 2e 64 65 6c 65 74 65 28 4e 28 74 68 69 73 2c 74 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 74 2c 6e 29 7b 6c 65 74 20 65 3d 74 2e 5f 69 6e 74 65 72 6e 3b 63 6f 6e 73 74 20 72 3d 28 30 2c 74 2e 5f 6b 65 79 29 28 6e 29 3b 72 65 74 75 72 6e 20 65 2e 68 61 73 28 72 29 3f 65 2e 67 65 74 28 72 29 3a 6e Data Ascii: ){const t=e.value;this.add(t)}}catch(t){r.e(t)}finally{r.f()}}}has(t){return super.has(k(this,t))}add(t){return super.add(C(this,t))}delete(t){return super.delete(N(this,t))}}function k(t,n){let e=t._intern;const r=(0,t._key)(n);return e.has(r)?e.get(r):n
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 61 29 74 68 72 6f 77 20 6f 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 45 28 74 2c 6e 29 7b 28 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 3e 74 2e 6c 65 6e 67 74 68 29 26 26 28 6e 3d 74 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 65 3d 30 2c 72 3d 41 72 72 61 79 28 6e 29 3b 65 3c 6e 3b 65 2b 2b 29 72 5b 65 5d 3d 74 5b 65 5d 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 24 28 29 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 54 3b 66 6f 72 28 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 6e 65 77 20 41 72 72 61 79 28 6e 29 2c 72 3d 30 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 72 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 66 6f 72 28 76 61 72 20 69 3d 30 2c 6f 3d 65 3b 69 3c 6f 2e 6c Data Ascii: return()}finally{if(a)throw o}}}}function E(t,n){(null==n\|\|n>t.length)&&(n=t.length);for(var e=0,r=Array(n);e<n;e++)r[e]=t[e];return r}function $(){const t=new T;for(var n=arguments.length,e=new Array(n),r=0;r<n;r++)e[r]=arguments[r];for(var i=0,o=e;i<o.l
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 6e 65 22 29 2e 61 74 74 72 28 22 73 74 72 6f 6b 65 22 2c 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 29 2e 61 74 74 72 28 73 2b 22 32 22 2c 63 2a 6f 29 29 2c 54 3d 54 2e 6d 65 72 67 65 28 41 2e 61 70 70 65 6e 64 28 22 74 65 78 74 22 29 2e 61 74 74 72 28 22 66 69 6c 6c 22 2c 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 29 2e 61 74 74 72 28 73 2c 63 2a 67 29 2e 61 74 74 72 28 22 64 79 22 2c 74 3d 3d 3d 59 3f 22 30 65 6d 22 3a 74 3d 3d 3d 46 3f 22 30 2e 37 31 65 6d 22 3a 22 30 2e 33 32 65 6d 22 29 29 2c 68 21 3d 3d 5f 26 26 28 62 3d 62 2e 74 72 61 6e 73 69 74 69 6f 6e 28 68 29 2c 78 3d 78 2e 74 72 61 6e 73 69 74 69 6f 6e 28 68 29 2c 53 3d 53 2e 74 72 61 6e 73 69 74 69 6f 6e 28 68 29 2c 54 3d 54 2e 74 72 61 6e 73 69 74 69 6f 6e 28 68 29 2c 4d 3d 4d 2e 74 72 61 6e Data Ascii: ne").attr("stroke","currentColor").attr(s+"2",co)),T=T.merge(A.append("text").attr("fill","currentColor").attr(s,cg).attr("dy",t===Y?"0em":t===F?"0.71em":"0.32em")),h!==_&&(b=b.transition(h),x=x.transition(h),S=S.transition(h),T=T.transition(h),M=M.tran
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 28 6f 3d 2b 74 2c 68 29 3a 6f 7d 2c 68 2e 74 69 63 6b 53 69 7a 65 4f 75 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 28 75 3d 2b 74 2c 68 29 3a 75 7d 2c 68 2e 74 69 63 6b 50 61 64 64 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 28 61 3d 2b 74 2c 68 29 3a 61 7d 2c 68 2e 6f 66 66 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 28 6c 3d 2b 74 2c 68 29 3a 6c 7d 2c 68 7d 66 75 6e 63 74 69 6f 6e 20 52 28 74 29 7b 72 65 74 75 72 6e 20 56 28 59 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: urn arguments.length?(o=+t,h):o},h.tickSizeOuter=function(t){return arguments.length?(u=+t,h):u},h.tickPadding=function(t){return arguments.length?(a=+t,h):a},h.offset=function(t){return arguments.length?(l=+t,h):l},h}function R(t){return V(Y,t)}function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.18	60895	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:01 UTC	690	OUT	GET /gui/85236.f2afef810314bd199050.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:01 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:01 GMT expires: Thu, 15 Jan 2026 16:45:01 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: fbb55dd88cfde442df58de4022fd137f content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:01 UTC	1003	IN	Data Raw: 33 39 39 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 35 32 33 36 5d 2c 7b 38 35 32 33 36 3a 28 65 2c 6f 2c 74 29 3d 3e 7b 76 61 72 20 72 3d 74 28 32 32 38 39 34 29 2c 73 3d 74 28 35 36 38 37 30 29 2c 69 3d 74 28 34 38 37 30 34 29 2c 6e 3d 74 28 31 36 36 34 35 29 2c 61 3d 74 28 36 32 38 33 32 29 2c 64 3d 74 28 38 35 32 30 30 29 2c 62 3d 74 28 39 32 36 31 39 29 2c 6c 3d 74 28 36 31 37 32 30 29 2c 63 3d 74 28 39 34 31 37 29 2c 75 3d 74 28 34 35 32 34 31 29 2c 70 3d 74 28 39 35 36 38 38 29 2c 67 3d 74 28 34 34 30 35 32 29 3b 66 75 6e 63 74 69 6f 6e Data Ascii: 3990"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[85236],{85236:(e,o,t)=>{var r=t(22894),s=t(56870),i=t(48704),n=t(16645),a=t(62832),d=t(85200),b=t(92619),l=t(61720),c=t(9417),u=t(45241),p=t(95688),g=t(44052);function
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 74 65 64 28 65 29 2c 28 65 2e 68 61 73 28 22 6e 6f 64 65 73 22 29 7c 7c 65 2e 68 61 73 28 22 61 75 74 6f 22 29 29 26 26 74 68 69 73 2e 61 75 74 6f 26 26 74 68 69 73 2e 63 6f 6d 70 75 74 65 43 6f 6d 6d 6f 6e 61 6c 69 74 69 65 73 28 74 68 69 73 2e 6e 6f 64 65 73 29 2c 65 2e 68 61 73 28 22 72 65 73 75 6c 74 73 22 29 26 26 74 68 69 73 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 72 65 73 75 6c 74 73 2d 63 68 61 6e 67 65 64 22 2c 7b 64 65 74 61 69 6c 3a 7b 76 61 6c 75 65 3a 74 68 69 73 2e 72 65 73 75 6c 74 73 7d 7d 29 29 2c 65 2e 68 61 73 28 22 63 6f 6d 70 6c 65 74 65 52 61 74 65 22 29 26 26 74 68 69 73 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 63 6f 6d 70 Data Ascii: ted(e),(e.has("nodes")\|\|e.has("auto"))&&this.auto&&this.computeCommonalities(this.nodes),e.has("results")&&this.dispatchEvent(new CustomEvent("results-changed",{detail:{value:this.results}})),e.has("completeRate")&&this.dispatchEvent(new CustomEvent("comp
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 29 6e 3d 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 28 65 2c 6f 2c 74 2c 72 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 61 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 61 3e 3d 30 3b 61 2d 2d 29 28 73 3d 65 5b 61 5d 29 26 26 28 6e 3d 28 69 3c 33 3f 73 28 6e 29 3a 69 3e 33 3f 73 28 6f 2c 74 2c 6e 29 3a 73 28 6f 2c 74 29 29 7c 7c 6e 29 3b 72 65 74 75 72 6e 20 69 3e 33 26 26 6e 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6f 2c 74 2c 6e 29 2c 6e 7d 3b 6c 65 74 20 41 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 69 2e 4c 69 74 45 6c 65 6d 65 6e 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 Data Ascii: ypeof Reflect&&"function"==typeof Reflect.decorate)n=Reflect.decorate(e,o,t,r);else for(var a=e.length-1;a>=0;a--)(s=e[a])&&(n=(i<3?s(n):i>3?s(o,t,n):s(o,t))\|\|n);return i>3&&n&&Object.defineProperty(o,t,n),n};let A=class extends i.LitElement{constructor()
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 61 72 20 69 3d 65 2e 61 70 70 6c 79 28 6f 2c 74 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 44 28 69 2c 72 2c 73 2c 6e 2c 61 2c 22 6e 65 78 74 22 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 44 28 69 2c 72 2c 73 2c 6e 2c 61 2c 22 74 68 72 6f 77 22 2c 65 29 7d 6e 28 76 6f 69 64 20 30 29 7d 29 29 7d 7d 76 61 72 20 6a 2c 47 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 74 2c 72 29 7b 76 61 72 20 73 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 3d 69 3c 33 3f 6f 3a 6e 75 6c 6c 3d 3d 3d 72 3f 72 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 6f 2c 74 29 3a 72 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d Data Ascii: ar i=e.apply(o,t);function n(e){D(i,r,s,n,a,"next",e)}function a(e){D(i,r,s,n,a,"throw",e)}n(void 0)}))}}var j,G=function(e,o,t,r){var s,i=arguments.length,n=i<3?o:null===r?r=Object.getOwnPropertyDescriptor(o,t):r;if("object"==typeof Reflect&&"function"==
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 6e 73 74 20 6f 3d 65 2e 64 65 74 61 69 6c 2e 76 61 6c 75 65 3b 6f 3f 28 74 68 69 73 2e 63 6f 6d 6d 6f 6e 61 6c 69 74 69 65 73 43 6f 75 6e 74 65 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 6f 29 2e 66 69 6c 74 65 72 28 28 65 3d 3e 6f 5b 65 5d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 6f 5b 65 5d 2e 66 69 6c 74 65 72 28 28 65 3d 3e 21 21 65 2e 6e 61 6d 65 26 26 65 2e 6e 61 6d 65 2e 74 72 69 6d 28 29 2e 6c 65 6e 67 74 68 3e 30 29 29 2e 6c 65 6e 67 74 68 3e 30 29 29 2e 6c 65 6e 67 74 68 2c 74 68 69 73 2e 63 6f 6d 6d 6f 6e 61 6c 69 74 69 65 73 3d 6f 29 3a 74 68 69 73 2e 63 6f 6d 6d 6f 6e 61 6c 69 74 69 65 73 43 6f 75 6e 74 65 72 3d 76 6f 69 64 20 30 7d 72 65 71 75 65 73 74 47 72 61 70 68 43 72 65 61 74 69 6f 6e 28 65 29 7b 76 61 72 20 6f 3d 74 68 69 Data Ascii: nst o=e.detail.value;o?(this.commonalitiesCounter=Object.keys(o).filter((e=>o[e]instanceof Array&&o[e].filter((e=>!!e.name&&e.name.trim().length>0)).length>0)).length,this.commonalities=o):this.commonalitiesCounter=void 0}requestGraphCreation(e){var o=thi
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 65 67 61 74 69 6f 6e 73 22 2c 22 22 2c 21 31 2c 21 30 29 29 7d 29 29 28 29 7d 6f 6e 43 6f 6c 6c 65 63 74 69 6f 6e 43 72 65 61 74 65 64 28 65 29 7b 76 61 72 20 6f 3b 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 63 6c 6f 73 65 2d 6d 65 6e 75 2d 72 65 71 75 65 73 74 65 64 22 2c 7b 62 75 62 62 6c 65 73 3a 21 30 2c 63 6f 6d 70 6f 73 65 64 3a 21 30 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 29 2c 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 70 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 63 6f 6c 6c 65 63 74 69 6f 6e 22 2c 65 2e 64 65 74 61 69 6c 2e 63 6f 6c 6c 65 63 74 69 6f 6e 49 64 29 2c 22 5f 62 6c 61 6e 6b 22 29 2c 6e 75 6c 6c 3d 3d 3d 28 6f 3d 74 68 Data Ascii: egations","",!1,!0))}))()}onCollectionCreated(e){var o;e.currentTarget.dispatchEvent(new CustomEvent("close-menu-requested",{bubbles:!0,composed:!0,cancelable:!0})),window.open(p.Z8.getRedirectUrl("collection",e.detail.collectionId),"_blank"),null===(o=th
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 66 66 2d 74 6f 6f 6c 73 2d 69 74 65 6d 2d 6d 65 6e 75 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 3e 20 53 65 6e 64 20 74 6f 20 44 69 66 66 20 3c 2f 62 75 74 74 6f 6e 3e 20 3c 2f 76 74 2d 75 69 2d 64 69 66 66 2d 6f 70 74 69 6f 6e 3e 60 29 2c 74 68 69 73 2e 73 65 6c 65 63 74 65 64 46 69 6c 65 73 7c 7c 5b 5d 2c 28 28 29 3d 3e 74 68 69 73 2e 61 63 74 69 6f 6e 43 6c 69 63 6b 65 64 28 22 73 65 6e 64 2d 76 74 64 69 66 66 22 29 29 29 2c 74 68 69 73 2e 67 65 74 41 6c 6c 49 6f 63 73 49 64 73 3f 28 30 2c 69 2e 68 74 6d 6c 29 28 55 7c 7c 28 55 3d 46 60 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 20 24 7b 30 7d 22 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 64 61 74 61 2d 73 75 62 6d 65 6e 75 2d 74 72 69 67 67 65 72 Data Ascii: ff-tools-item-menu" @click="${0}"> Send to Diff </button> </vt-ui-diff-option>`),this.selectedFiles\|\|[],(()=>this.actionClicked("send-vtdiff"))),this.getAllIocsIds?(0,i.html)(U\|\|(U=F` <button class="dropdown-item ${0}" role="menuitem" data-submenu-trigger
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 6c 63 75 6c 61 74 65 20 63 6f 6d 6d 6f 6e 61 6c 69 74 69 65 73 20 24 7b 30 7d 20 3c 2f 62 75 74 74 6f 6e 3e 60 29 2c 28 30 2c 64 2e 69 66 44 65 66 69 6e 65 64 29 28 6e 75 6c 6c 21 3d 3d 28 6e 3d 67 2e 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 6e 26 26 6e 2e 69 6e 73 69 67 68 74 73 41 63 63 65 73 73 3f 22 61 67 67 72 65 67 61 74 69 6f 6e 73 22 3a 76 6f 69 64 20 30 29 2c 21 74 68 69 73 2e 73 61 66 65 53 65 6c 65 63 74 65 64 45 6e 74 69 74 69 65 73 7c 7c 6e 75 6c 6c 21 3d 3d 28 62 3d 67 2e 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 62 26 26 62 2e 69 6e 73 69 67 68 74 73 41 63 63 65 73 73 26 26 74 68 69 73 2e 67 65 74 49 6e 73 69 67 68 74 73 41 67 67 72 65 67 61 74 69 6f 6e 73 46 72 6f 6d Data Ascii: lculate commonalities ${0} </button>`),(0,d.ifDefined)(null!==(n=g.NU.currentUser)&&void 0!==n&&n.insightsAccess?"aggregations":void 0),!this.safeSelectedEntities\|\|null!==(b=g.NU.currentUser)&&void 0!==b&&b.insightsAccess&&this.getInsightsAggregationsFrom
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 73 68 6f 77 22 20 6e 61 6d 65 3d 22 67 72 61 70 68 22 3e 20 3c 68 36 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 68 65 61 64 65 72 20 68 73 74 61 63 6b 22 3e 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 62 74 6e 2d 62 61 63 6b 22 20 64 61 74 61 2d 73 75 62 6d 65 6e 75 2d 62 61 63 6b 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 47 6f 20 62 61 63 6b 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 3e 3c 2f 62 75 74 74 6f 6e 3e 20 4f 70 65 6e 20 69 6e 20 47 72 61 70 68 20 3c 2f 68 36 3e 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 22 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 64 61 74 61 2d 6f 70 74 69 6f 6e 3d 22 61 6c 6c 22 20 40 63 6c 69 63 6b 3d 22 Data Ascii: ass="dropdown-menu show" name="graph"> <h6 class="dropdown-header hstack"> <button class="btn-back" data-submenu-back aria-label="Go back" @click="${0}"></button> Open in Graph </h6> <button class="dropdown-item" role="menuitem" data-option="all" @click="
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 64 69 73 61 62 6c 65 64 3d 22 24 7b 30 7d 22 20 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 22 24 7b 30 7d 22 20 69 64 3d 22 63 61 6c 63 75 6c 61 74 65 2d 63 6f 6d 6d 6f 6e 61 6c 69 74 69 65 73 2d 73 65 6c 65 63 74 65 64 2d 74 6f 6f 6c 73 2d 69 74 65 6d 2d 6d 65 6e 75 22 3e 20 53 65 6c 65 63 74 65 64 20 3c 2f 62 75 74 74 6f 6e 3e 20 3c 2f 76 74 2d 75 69 2d 73 75 62 6d 65 6e 75 3e 60 29 2c 28 28 29 3d 3e 74 68 69 73 2e 61 63 74 69 6f 6e 43 6c 69 63 6b 65 64 28 22 63 61 6c 63 75 6c 61 74 65 2d 63 6f 6d 6d 6f 6e 61 6c 69 74 69 65 73 2d 6d 65 6e 75 22 29 29 2c 6e 75 6c 6c 21 3d 3d 28 6b 3d 67 2e 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 6b 26 26 6b 2e 69 6e 73 69 67 68 74 73 41 63 63 65 73 73 26 26 74 68 69 73 2e 67 65 74 49 Data Ascii: disabled="${0}" aria-disabled="${0}" id="calculate-commonalities-selected-tools-item-menu"> Selected </button> </vt-ui-submenu>`),(()=>this.actionClicked("calculate-commonalities-menu")),null!==(k=g.NU.currentUser)&&void 0!==k&&k.insightsAccess&&this.getI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.18	60897	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:01 UTC	689	OUT	GET /gui/5200.cbf2a82371bebc862a72.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:01 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:01 GMT expires: Thu, 15 Jan 2026 16:45:01 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: a117361088afbd6166371178f851c7cd content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:01 UTC	1003	IN	Data Raw: 33 62 32 39 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 32 30 30 2c 32 33 33 39 37 2c 36 36 32 36 32 2c 38 39 38 38 30 2c 37 31 33 34 37 5d 2c 7b 38 36 32 36 30 3a 28 65 2c 74 2c 72 29 3d 3e 7b 76 61 72 20 6f 3d 72 28 34 38 37 30 34 29 2c 69 3d 72 28 31 36 36 34 35 29 2c 73 3d 72 28 36 30 32 36 35 29 3b 6c 65 74 20 6e 2c 61 2c 6c 3d 65 3d 3e 65 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6f 29 7b 76 61 72 20 69 2c 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 3d 73 3c 33 3f 74 3a 6e 75 6c 6c 3d 3d 3d 6f 3f 6f 3d Data Ascii: 3b29"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[5200,23397,66262,89880,71347],{86260:(e,t,r)=>{var o=r(48704),i=r(16645),s=r(60265);let n,a,l=e=>e;var b=function(e,t,r,o){var i,s=arguments.length,n=s<3?t:null===o?o=
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 73 49 63 6f 6e 7d 2c 37 39 34 30 34 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 72 28 74 29 2c 72 2e 64 28 74 2c 7b 73 68 61 72 65 49 63 6f 6e 3a 28 29 3d 3e 6f 7d 29 3b 63 6f 6e 73 74 20 6f 3d 72 28 31 35 33 32 33 29 2e 61 72 72 6f 77 54 75 72 6e 52 69 67 68 74 46 72 6f 6d 53 71 75 61 72 65 49 63 6f 6e 7d 2c 38 30 31 39 32 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 28 39 38 39 31 29 3b 76 61 72 20 6f 3d 72 28 34 38 37 30 34 29 2c 69 3d 72 28 31 36 36 34 35 29 2c 73 3d 72 28 34 32 34 37 37 29 2c 6e 3d 72 28 37 33 36 30 38 29 2c 61 3d 72 28 37 31 30 31 32 29 2c 6c 3d 72 28 38 30 37 30 34 29 3b 6c 65 74 20 62 2c 64 2c 63 3d 65 3d 3e 65 3b 76 61 72 20 70 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6f 29 7b 76 61 72 20 69 2c 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 Data Ascii: sIcon},79404:(e,t,r)=>{r.r(t),r.d(t,{shareIcon:()=>o});const o=r(15323).arrowTurnRightFromSquareIcon},80192:(e,t,r)=>{r(9891);var o=r(48704),i=r(16645),s=r(42477),n=r(73608),a=r(71012),l=r(80704);let b,d,c=e=>e;var p=function(e,t,r,o){var i,s=arguments.le
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 6d 61 6c 6c 22 20 63 6c 61 73 73 3d 22 64 2d 62 6c 6f 63 6b 22 3e 3c 2f 73 6c 6f 74 3e 3c 2f 64 69 76 3e 3c 2f 73 70 61 6e 3e 20 3c 73 70 61 6e 20 73 6c 6f 74 3d 22 63 6f 6e 74 65 6e 74 22 3e 20 3c 73 6c 6f 74 20 6e 61 6d 65 3d 22 65 78 70 61 6e 64 61 62 6c 65 2d 63 6f 6e 74 65 6e 74 22 3e 3c 2f 73 6c 6f 74 3e 20 3c 2f 73 70 61 6e 3e 20 3c 2f 76 74 2d 75 69 2d 65 78 70 61 6e 64 61 62 6c 65 2d 64 65 74 61 69 6c 3e 60 29 2c 6e 2e 70 6c 75 73 49 63 6f 6e 2c 73 2e 69 6e 64 65 74 65 72 6d 69 6e 61 74 65 43 68 65 63 6b 42 6f 78 49 63 6f 6e 2c 74 68 69 73 2e 68 69 64 65 45 78 70 61 6e 64 61 62 6c 65 29 7d 7d 3b 70 28 5b 28 30 2c 69 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 7d 29 5d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 68 65 Data Ascii: mall" class="d-block"></slot></div></span> <span slot="content"> <slot name="expandable-content"></slot> </span> </vt-ui-expandable-detail>`),n.plusIcon,s.indeterminateCheckBoxIcon,this.hideExpandable)}};p([(0,i.property)({type:Boolean})],h.prototype,"che
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 65 3d 21 30 2c 74 68 69 73 2e 64 6f 74 49 6e 64 69 63 61 74 6f 72 3d 21 31 2c 74 68 69 73 2e 68 69 64 65 43 68 65 63 6b 62 6f 78 3d 21 31 2c 74 68 69 73 2e 73 68 6f 77 43 68 65 63 6b 62 6f 78 53 65 6c 65 63 74 41 6c 6c 3d 21 31 2c 74 68 69 73 2e 74 69 74 6c 65 73 52 6f 77 3d 5b 5d 2c 74 68 69 73 2e 6d 61 69 6e 52 6f 77 3d 5b 5d 2c 74 68 69 73 2e 69 66 4e 6f 74 4d 69 6e 69 6d 61 6c 3d 65 3d 3e 7b 72 65 74 75 72 6e 20 74 3d 21 74 68 69 73 2e 6d 69 6e 69 6d 61 6c 2c 72 3d 65 2c 74 3f 72 3a 28 30 2c 6f 2e 68 74 6d 6c 29 28 66 7c 7c 28 66 3d 42 60 60 29 29 3b 76 61 72 20 74 2c 72 7d 2c 74 68 69 73 2e 63 68 65 63 6b 65 64 43 68 61 6e 67 65 64 3d 65 3d 3e 7b 65 2e 64 65 74 61 69 6c 2e 76 61 6c 75 65 21 3d 3d 74 68 69 73 2e 63 68 65 63 6b 65 64 26 26 28 74 68 69 Data Ascii: e=!0,this.dotIndicator=!1,this.hideCheckbox=!1,this.showCheckboxSelectAll=!1,this.titlesRow=[],this.mainRow=[],this.ifNotMinimal=e=>{return t=!this.minimal,r=e,t?r:(0,o.html)(f\|\|(f=B``));var t,r},this.checkedChanged=e=>{e.detail.value!==this.checked&&(thi
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 76 61 72 20 74 3b 72 65 74 75 72 6e 21 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 21 74 2e 73 6f 75 72 63 65 73 29 26 26 65 2e 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 2e 73 6f 75 72 63 65 73 2e 6c 65 6e 67 74 68 3e 30 7d 75 70 64 61 74 65 28 65 29 7b 74 68 69 73 2e 6d 61 69 6e 52 6f 77 3d 5b 5d 2c 74 68 69 73 2e 74 69 74 6c 65 73 52 6f 77 3d 5b 5d 2c 74 68 69 73 2e 72 65 6e 64 65 72 4d 61 69 6e 43 6f 6c 75 6d 6e 28 29 2c 74 68 69 73 2e 72 65 6e 64 65 72 53 6f 75 72 63 65 43 6f 6c 75 6d 6e 28 29 2c 74 68 69 73 2e 72 65 6e 64 65 72 43 6f 6c 75 6d 6e 73 28 29 2c 74 68 69 73 2e 72 65 6e 64 65 72 45 78 74 72 61 43 6f 6c 75 6d 6e 73 28 29 2c 73 75 70 65 Data Ascii: var t;return!(null===(t=e.context_attributes)\|\|void 0===t\|\|!t.sources)&&e.context_attributes.sources.length>0}update(e){this.mainRow=[],this.titlesRow=[],this.renderMainColumn(),this.renderSourceColumn(),this.renderColumns(),this.renderExtraColumns(),supe
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 26 26 65 2e 72 65 6c 61 74 65 64 5f 66 72 6f 6d 26 26 74 68 69 73 2e 72 65 6e 64 65 72 43 6f 6c 75 6d 6e 28 22 53 6f 75 72 63 65 22 2c 22 72 65 6c 61 74 65 64 2d 66 72 6f 6d 20 63 65 6e 74 65 72 22 2c 28 30 2c 6f 2e 68 74 6d 6c 29 28 53 7c 7c 28 53 3d 42 60 20 3c 76 74 2d 75 69 2d 72 65 6c 61 74 65 64 2d 66 72 6f 6d 20 2e 72 65 6c 61 74 65 64 46 72 6f 6d 4c 69 73 74 3d 22 24 7b 30 7d 22 3e 3c 2f 76 74 2d 75 69 2d 72 65 6c 61 74 65 64 2d 66 72 6f 6d 3e 60 29 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 2e 72 65 6c 61 74 65 64 5f 66 72 6f 6d 29 29 7d 72 65 6e 64 65 72 43 6f 6c 75 6d 6e 28 65 2c 74 2c 72 29 7b 6c 65 74 20 69 3d 61 Data Ascii: ext_attributes)&&void 0!==e&&e.related_from&&this.renderColumn("Source","related-from center",(0,o.html)(S\|\|(S=B` <vt-ui-related-from .relatedFromList="${0}"></vt-ui-related-from>`),this.entity.context_attributes.related_from))}renderColumn(e,t,r){let i=a
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 22 29 7d 69 66 50 69 76 6f 74 61 62 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 69 76 6f 74 61 62 6c 65 3f 65 3a 76 6f 69 64 20 30 7d 5f 73 68 6f 77 50 6f 70 6f 76 65 72 28 65 29 7b 74 68 69 73 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 70 6f 70 6f 76 65 72 2d 72 65 71 75 65 73 74 65 64 22 2c 7b 62 75 62 62 6c 65 73 3a 21 30 2c 63 6f 6d 70 6f 73 65 64 3a 21 30 2c 64 65 74 61 69 6c 3a 7b 70 6f 70 6f 76 65 72 3a 65 2e 74 61 72 67 65 74 2e 64 61 74 61 73 65 74 2e 70 6f 70 6f 76 65 72 2c 74 61 72 67 65 74 3a 65 2e 74 61 72 67 65 74 2c 65 6e 74 69 74 79 3a 74 68 69 73 2e 65 6e 74 69 74 79 2c 70 6f 73 69 74 69 6f 6e 3a 65 2e 74 61 72 67 65 74 2e 64 61 74 61 73 65 74 2e 70 6f 70 6f 76 65 72 50 6f Data Ascii: ")}ifPivotable(e){return this.pivotable?e:void 0}_showPopover(e){this.dispatchEvent(new CustomEvent("popover-requested",{bubbles:!0,composed:!0,detail:{popover:e.target.dataset.popover,target:e.target,entity:this.entity,position:e.target.dataset.popoverPo
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 20 60 29 2c 68 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 74 68 69 73 2e 65 6e 74 69 74 79 55 72 6c 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 69 64 29 2c 74 68 69 73 2e 72 65 71 75 65 73 74 52 65 70 6f 72 74 4f 70 65 6e 69 6e 67 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 69 64 29 3a 28 30 2c 6f 2e 68 74 6d 6c 29 28 54 7c 7c 28 54 3d 42 60 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 65 63 6f 6e 64 61 72 79 22 3e 20 24 7b 30 7d 20 3c 2f 73 70 61 6e 3e 60 29 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 69 64 29 7d 74 65 78 74 54 6f 43 6f 70 79 54 6f 43 6c 69 70 62 6f 61 72 64 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6e 74 69 74 79 2e 69 64 7d 72 65 6e 64 65 72 44 6f 74 49 6e 64 69 63 61 74 6f 72 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 6f 74 49 Data Ascii: `),h.Z8.getRedirectUrl(this.entityUrl,this.entity.id),this.requestReportOpening,this.entity.id):(0,o.html)(T\|\|(T=B`<span class="secondary"> ${0} </span>`),this.entity.id)}textToCopyToClipboard(){return this.entity.id}renderDotIndicator(){return this.dotI
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 6e 64 65 72 52 75 6c 65 73 65 74 53 6f 75 72 63 65 28 65 2c 74 2c 72 29 7b 7d 72 65 6e 64 65 72 53 6f 75 72 63 65 43 6f 6c 75 6d 6e 28 29 7b 76 61 72 20 65 3b 69 66 28 21 74 68 69 73 2e 5f 69 73 43 6f 6c 6c 65 63 74 69 6f 6e 43 6f 6c 56 69 73 69 62 6c 65 28 74 68 69 73 2e 65 6e 74 69 74 79 29 29 72 65 74 75 72 6e 22 22 3b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 65 6e 74 69 74 79 2e 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 2e 73 6f 75 72 63 65 73 26 26 22 72 65 74 72 6f 68 75 6e 74 5f 6a 6f 62 22 3d 3d 3d 74 68 69 73 2e 65 6e 74 69 74 79 2e 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 2e 73 6f 75 72 63 65 73 5b 30 5d 2e 74 79 70 65 2c 72 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 65 6e 74 69 74 79 2e 63 6f 6e 74 65 78 74 5f 61 74 Data Ascii: nderRulesetSource(e,t,r){}renderSourceColumn(){var e;if(!this._isCollectionColVisible(this.entity))return"";const t=this.entity.context_attributes.sources&&"retrohunt_job"===this.entity.context_attributes.sources[0].type,r=null===(e=this.entity.context_at
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 79 29 28 29 5d 2c 71 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 68 6f 77 43 68 65 63 6b 62 6f 78 53 65 6c 65 63 74 41 6c 6c 22 2c 76 6f 69 64 20 30 29 2c 55 28 5b 28 30 2c 69 2e 71 75 65 72 79 29 28 22 23 73 65 6c 65 63 74 41 6c 6c 49 6e 70 75 74 22 29 5d 2c 71 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 65 6c 65 63 74 41 6c 6c 49 6e 70 75 74 22 2c 76 6f 69 64 20 30 29 7d 2c 33 36 35 36 33 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 58 3a 28 29 3d 3e 45 7d 29 3b 72 28 39 38 39 31 29 3b 76 61 72 20 6f 3d 72 28 34 38 37 30 34 29 2c 69 3d 72 28 31 36 36 34 35 29 2c 73 3d 72 28 39 33 38 34 32 29 2c 6e 3d 72 28 34 35 32 34 31 29 2c 61 3d 72 28 37 31 30 31 32 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 Data Ascii: y)()],q.prototype,"showCheckboxSelectAll",void 0),U([(0,i.query)("#selectAllInput")],q.prototype,"selectAllInput",void 0)},36563:(e,t,r)=>{r.d(t,{X:()=>E});r(9891);var o=r(48704),i=r(16645),s=r(93842),n=r(45241),a=r(71012);function l(e,t){return function(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.18	60898	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:01 UTC	511	OUT	GET /gui/60996.d3e9ab9fe2567126de2e.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:01 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:01 GMT expires: Thu, 15 Jan 2026 16:45:01 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: d484aca0a035f434a93aacc9ad61508b content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:01 UTC	1003	IN	Data Raw: 33 39 36 34 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 30 39 39 36 5d 2c 7b 37 37 35 36 39 3a 28 74 2c 65 2c 72 29 3d 3e 7b 72 2e 64 28 65 2c 7b 66 3a 28 29 3d 3e 6c 7d 29 3b 76 61 72 20 69 3d 72 28 32 32 38 39 34 29 2c 6e 3d 72 28 34 32 32 34 36 29 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 2c 65 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d Data Ascii: 3964"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[60996],{77569:(t,e,r)=>{r.d(e,{f:()=>l});var i=r(22894),n=r(42246);function o(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySym
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 3a 7b 7d 3b 65 25 32 3f 6f 28 4f 62 6a 65 63 74 28 72 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 28 74 2c 65 2c 72 5b 65 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 28 72 29 29 3a 6f 28 4f 62 6a 65 63 74 28 72 29 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 72 2c 65 29 29 7d 29 Data Ascii: :{};e%2?o(Object(r),!0).forEach((function(e){s(t,e,r[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(r)):o(Object(r)).forEach((function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(r,e))})
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 65 6e 64 73 28 28 30 2c 70 2e 74 56 29 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 6c 65 74 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 72 65 74 75 72 6e 20 73 2e 68 34 2e 63 6f 6c 6c 65 63 74 69 6f 6e 73 2e 6c 69 73 74 52 65 6c 61 74 69 6f 6e 73 68 69 70 28 74 2c 22 72 65 6c 61 74 65 64 5f 63 6f 6c 6c 65 63 74 69 6f 6e 73 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 72 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3a 7b 7d 3b 65 25 32 3f 62 28 4f 62 6a 65 Data Ascii: ends((0,p.tV)((function(t){let e=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};return s.h4.collections.listRelationship(t,"related_collections",function(t){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?arguments[e]:{};e%2?b(Obje
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 6e 67 3a 4e 75 6d 62 65 72 29 28 74 29 7d 28 74 2c 22 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 65 2b 22 22 7d 28 65 29 29 69 6e 20 74 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 76 61 6c 75 65 3a 72 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 74 5b 65 5d 3d 72 2c 74 7d 63 6c 61 73 73 20 50 20 65 78 74 65 6e 64 73 28 28 30 2c 70 2e 74 56 29 28 28 28 74 2c 65 29 3d 3e 73 2e 68 34 2e 63 6f 6c 6c 65 63 74 69 6f 6e 73 2e 6c 69 73 74 52 65 6c 61 74 69 6f 6e 73 68 69 70 28 74 2c 22 74 68 72 65 61 74 5f 61 63 74 6f 72 73 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f Data Ascii: ng:Number)(t)}(t,"string");return"symbol"==typeof e?e:e+""}(e))in t?Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}):t[e]=r,t}class P extends((0,p.tV)(((t,e)=>s.h4.collections.listRelationship(t,"threat_actors",function(t){fo
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 72 28 74 29 7d 6c 2e 64 6f 6e 65 3f 65 28 61 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 61 29 2e 74 68 65 6e 28 69 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 69 2c 6e 29 7b 76 61 72 20 6f 3d 74 2e 61 70 70 6c 79 28 65 2c 72 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 49 28 6f 2c 69 2c 6e 2c 73 2c 6c 2c 22 6e 65 78 74 22 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 74 29 7b 49 28 6f 2c 69 2c 6e 2c 73 2c 6c 2c 22 74 68 72 6f 77 22 2c 74 29 7d 73 28 76 6f 69 64 Data Ascii: }catch(t){return void r(t)}l.done?e(a):Promise.resolve(a).then(i,n)}function C(t){return function(){var e=this,r=arguments;return new Promise((function(i,n){var o=t.apply(e,r);function s(t){I(o,i,n,s,l,"next",t)}function l(t){I(o,i,n,s,l,"throw",t)}s(void
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3b 73 75 70 65 72 28 28 65 3d 3e 63 2e 4e 6d 2e 67 65 74 43 6f 6c 6c 65 63 74 69 6f 6e 28 74 2c 65 29 29 2c 28 74 3d 3e 28 30 2c 6e 2e 68 29 28 74 2e 64 61 74 61 29 29 29 2c 65 3d 74 68 69 73 2c 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 49 64 3d 74 2c 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 3d 22 22 2c 74 68 69 73 2e 69 73 4c 6f 61 64 69 6e 67 43 6f 6e 74 65 6e 74 3d 21 31 2c 74 68 69 73 2e 63 6f 6e 74 65 6e 74 45 72 72 6f 72 3d 22 22 2c 74 68 69 73 2e 73 74 6f 70 70 65 64 50 6f 6c 6c 69 6e 67 3d 21 31 2c 74 68 69 73 2e 74 69 6d 65 6f 75 74 41 67 67 72 65 67 61 74 69 6f 6e 73 45 72 72 6f 72 3d 21 31 2c 74 68 69 73 2e 6d 61 78 41 67 67 72 65 67 61 74 69 6f 6e 73 43 61 6c 63 75 6c 61 74 69 6f 6e 54 69 6d 65 3d 31 32 Data Ascii: &arguments[1];super((e=>c.Nm.getCollection(t,e)),(t=>(0,n.h)(t.data))),e=this,this.collectionId=t,this._content="",this.isLoadingContent=!1,this.contentError="",this.stoppedPolling=!1,this.timeoutAggregationsError=!1,this.maxAggregationsCalculationTime=12
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 7d 2c 74 29 2c 28 30 2c 6c 2e 70 76 29 28 7b 7d 29 29 3a 73 2e 68 34 2e 63 6f 6c 6c 65 63 74 69 6f 6e 73 2e 6c 69 73 74 52 65 6c 61 74 69 6f 6e 73 68 69 70 28 65 2e 63 6f 6c 6c 65 63 74 69 6f 6e 49 64 2c 22 75 72 6c 73 22 2c 45 28 7b 6c 69 6d 69 74 3a 31 30 2c 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 3a 5b 22 6c 61 73 74 5f 73 65 72 76 69 6e 67 5f 69 70 5f 61 64 64 72 65 73 73 22 2c 22 6e 65 74 77 6f 72 6b 5f 6c 6f 63 61 74 69 6f 6e 22 5d 2c 61 74 74 72 69 62 75 74 65 73 3a 75 2e 79 55 7d 2c 74 29 2c 72 3f 28 30 2c 6c 2e 70 76 29 28 7b 7d 29 3a 7b 7d 29 29 2c 28 74 3d 3e 22 65 72 72 6f 72 22 69 6e 20 74 3f 22 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 22 69 6e 20 74 26 26 22 75 72 6c 22 69 6e 20 74 2e 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 Data Ascii: },t),(0,l.pv)({})):s.h4.collections.listRelationship(e.collectionId,"urls",E({limit:10,relationships:["last_serving_ip_address","network_location"],attributes:u.yU},t),r?(0,l.pv)({}):{})),(t=>"error"in t?"context_attributes"in t&&"url"in t.context_attribu
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 74 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 43 72 65 61 74 65 64 2c 74 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 2e 66 69 6c 65 73 7d 29 29 2c 74 68 69 73 2e 67 65 74 4f 76 65 72 6c 61 70 70 69 6e 67 3d 43 28 28 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 61 2e 59 28 65 2e 63 6f 6c 6c 65 63 74 69 6f 6e 49 64 29 3b 72 65 74 75 72 6e 20 79 69 65 6c 64 20 74 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 43 72 65 61 74 65 64 2c 74 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 2e 6f 76 65 72 6c 61 70 70 69 6e 67 7d 29 29 2c 74 68 69 73 2e 67 65 74 52 65 70 6f 72 74 73 3d 43 28 28 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 61 2e 59 28 65 2e 63 6f 6c 6c 65 63 74 69 6f 6e 49 64 29 3b 72 65 74 75 72 6e 20 79 69 65 Data Ascii: t.relationshipsCreated,t.relationships.files})),this.getOverlapping=C((function(){const t=new a.Y(e.collectionId);return yield t.relationshipsCreated,t.relationships.overlapping})),this.getReports=C((function(){const t=new a.Y(e.collectionId);return yie
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 43 72 65 61 74 65 64 2c 74 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 2e 72 65 6c 61 74 65 64 5f 72 65 66 65 72 65 6e 63 65 73 7d 29 29 2c 74 68 69 73 2e 75 70 64 61 74 65 52 65 66 65 72 65 6e 63 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 43 28 28 66 75 6e 63 74 69 6f 6e 2a 28 74 2c 72 29 7b 63 6f 6e 73 74 20 69 3d 6e 65 77 20 53 65 74 28 74 29 2c 6e 3d 6e 65 77 20 53 65 74 28 72 2e 64 61 74 61 4f 62 6a 65 63 74 73 2e 6d 61 70 28 28 74 3d 3e 74 2e 69 64 29 29 29 2c 6f 3d 72 2e 64 61 74 61 4f 62 6a 65 63 74 73 2e 66 69 6c 74 65 72 28 28 74 3d 3e 7b 6c 65 74 20 65 3d 74 2e 69 64 3b 72 65 74 75 72 6e 21 69 2e 68 61 73 28 65 29 7d 29 29 2e 6d 61 70 28 28 74 3d 3e 28 7b 69 64 3a 74 2e 69 64 2c 74 79 70 65 Data Ascii: relationshipsCreated,t.relationships.related_references})),this.updateReferences=function(){var t=C((function*(t,r){const i=new Set(t),n=new Set(r.dataObjects.map((t=>t.id))),o=r.dataObjects.filter((t=>{let e=t.id;return!i.has(e)})).map((t=>({id:t.id,type
2025-01-15 16:45:01 UTC	1390	IN	Data Raw: 74 69 6f 6e 73 68 69 70 73 3d 72 3f 5b 5d 3a 5b 6e 65 77 20 79 28 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 49 64 29 5d 7d 67 65 74 20 63 6f 6e 74 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 7d 73 65 74 20 63 6f 6e 74 65 6e 74 28 74 29 7b 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 3d 74 7d 67 65 74 20 69 73 43 6f 6d 70 75 74 69 6e 67 41 67 67 72 65 67 61 74 69 6f 6e 73 28 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 21 74 68 69 73 2e 69 73 45 72 72 6f 72 26 26 21 74 68 69 73 2e 69 73 4c 6f 61 64 69 6e 67 26 26 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 64 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 73 74 61 74 75 73 29 3d 3d 3d 69 2e 43 6f 6c 6c 65 63 74 69 6f 6e 5f 43 6f 6c 6c 65 63 74 Data Ascii: tionships=r?[]:[new y(this.collectionId)]}get content(){return this._content}set content(t){this._content=t}get isComputingAggregations(){var t;return!this.isError&&!this.isLoading&&(null===(t=this.data)\|\|void 0===t?void 0:t.status)===i.Collection_Collect

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.18	60899	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:01 UTC	689	OUT	GET /gui/1700.226b3fc193308e865f4c.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:02 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:01 GMT expires: Thu, 15 Jan 2026 16:45:01 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: dd212f9546d9a664bbc71b46df9f6aa2 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:02 UTC	1003	IN	Data Raw: 33 39 39 31 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 30 30 2c 33 30 36 31 30 2c 39 31 34 35 34 2c 37 37 35 35 34 2c 35 30 38 36 37 2c 32 39 32 30 5d 2c 7b 34 37 31 34 33 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 73 7d 29 3b 76 61 72 20 6f 3d 72 28 31 35 33 32 33 29 3b 63 6f 6e 73 74 20 73 3d 7b 22 41 74 74 61 63 6b 20 2f 20 44 65 73 74 72 75 63 74 69 6f 6e 22 3a 6f 2e 64 65 73 74 72 75 63 74 69 6f 6e 49 63 6f 6e 2c 45 73 70 69 6f 6e 61 67 65 3a 6f 2e 67 6c 6f 62 65 4d 61 67 6e 69 66 79 69 6e 67 47 6c 61 73 73 49 Data Ascii: 3991"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[1700,30610,91454,77554,50867,2920],{47143:(e,t,r)=>{r.d(t,{A:()=>s});var o=r(15323);const s={"Attack / Destruction":o.destructionIcon,Espionage:o.globeMagnifyingGlassI
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 65 6d 65 6e 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 6c 61 62 65 6c 3d 22 22 2c 74 68 69 73 2e 66 6f 72 6d 61 74 74 65 64 49 6e 64 75 73 74 72 69 65 73 3d 6e 65 77 20 4d 61 70 7d 77 69 6c 6c 55 70 64 61 74 65 28 65 29 7b 69 66 28 65 2e 68 61 73 28 22 69 6e 64 75 73 74 72 69 65 73 22 29 29 7b 76 61 72 20 74 3b 63 6f 6e 73 74 20 65 3d 6e 65 77 20 4d 61 70 3b 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 69 6e 64 75 73 74 72 69 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 2e 73 6f 72 74 28 73 2e 73 6f 72 74 49 6e 64 75 73 74 72 79 48 69 65 72 61 72 63 68 79 42 79 43 6f 6e 66 69 64 65 6e 63 65 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c Data Ascii: ement{constructor(){super(...arguments),this.label="",this.formattedIndustries=new Map}willUpdate(e){if(e.has("industries")){var t;const e=new Map;null===(t=this.industries)\|\|void 0===t\|\|null===(t=t.sort(s.sortIndustryHierarchyByConfidence))\|\|void 0===t\|\|
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 68 29 3a 76 6f 69 64 20 30 29 7d 72 65 6e 64 65 72 49 6e 64 75 73 74 72 79 28 65 29 7b 76 61 72 20 74 3b 69 66 28 21 65 5b 30 5d 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 65 5b 30 5d 3b 72 65 74 75 72 6e 28 30 2c 69 2e 68 74 6d 6c 29 28 68 7c 7c 28 68 3d 67 60 3c 69 20 63 6c 61 73 73 3d 22 68 73 74 61 63 6b 22 20 40 6d 6f 75 73 65 6f 76 65 72 3d 22 24 7b 30 7d 22 3e 24 7b 30 7d 26 6e 62 73 70 3b 3c 2f 69 3e 60 29 2c 28 74 3d 3e 74 68 69 73 2e 6f 6e 4d 6f 75 73 65 6f 76 65 72 28 74 2c 5b 65 5d 29 29 2c 6e 75 6c 6c 21 3d 3d 28 74 3d 6f 2e 67 5b 72 5d 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 61 2e 74 77 6f 47 65 61 72 73 49 63 6f 6e 29 7d 6f 6e 4d 6f 75 73 65 6f 76 65 72 28 65 2c 74 29 7b 63 2e 56 2e 73 68 6f 77 28 22 74 61 72 67 65 74 65 64 2d Data Ascii: h):void 0)}renderIndustry(e){var t;if(!e[0])return;const r=e[0];return(0,i.html)(h\|\|(h=g`<i class="hstack" @mouseover="${0}">${0} </i>`),(t=>this.onMouseover(t,[e])),null!==(t=o.g[r])&&void 0!==t?t:a.twoGearsIcon)}onMouseover(e,t){c.V.show("targeted-
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 6d 6f 74 69 76 61 74 69 6f 6e 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 73 6f 72 74 28 73 2e 73 6f 72 74 54 72 61 63 6b 65 64 41 74 74 72 69 62 75 74 65 73 42 79 43 6f 6e 66 69 64 65 6e 63 65 29 7d 72 65 6e 64 65 72 28 29 7b 72 65 74 75 72 6e 28 30 2c 69 2e 68 74 6d 6c 29 28 70 7c 7c 28 70 3d 67 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 76 73 74 61 63 6b 20 67 61 70 2d 31 20 66 6c 65 78 2d 67 72 6f 77 2d 30 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 6e 6f 77 72 61 70 20 74 65 78 74 2d 62 6f 64 79 2d 73 65 63 6f 6e 64 61 72 79 20 66 77 2d 62 6f 6c 64 22 3e 24 7b 30 7d 3c 2f 64 69 76 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 60 29 2c 74 68 69 73 2e Data Ascii: eturn null===(e=this.motivations)\|\|void 0===e?void 0:e.sort(s.sortTrackedAttributesByConfidence)}render(){return(0,i.html)(p\|\|(p=g` <div class="vstack gap-1 flex-grow-0"> <div class="text-nowrap text-body-secondary fw-bold">${0}</div> ${0} </div> `),this.
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 63 6f 72 61 74 65 29 6e 3d 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 28 65 2c 74 2c 72 2c 6f 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 61 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 61 3e 3d 30 3b 61 2d 2d 29 28 73 3d 65 5b 61 5d 29 26 26 28 6e 3d 28 69 3c 33 3f 73 28 6e 29 3a 69 3e 33 3f 73 28 74 2c 72 2c 6e 29 3a 73 28 74 2c 72 29 29 7c 7c 6e 29 3b 72 65 74 75 72 6e 20 69 3e 33 26 26 6e 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 72 2c 6e 29 2c 6e 7d 3b 6c 65 74 20 6d 3d 28 64 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 6f 2e 4c 69 74 45 6c 65 6d 65 6e 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 6c 61 62 65 6c 3d 22 22 2c 74 68 69 73 2e 68 Data Ascii: corate)n=Reflect.decorate(e,t,r,o);else for(var a=e.length-1;a>=0;a--)(s=e[a])&&(n=(i<3?s(n):i>3?s(t,r,n):s(t,r))\|\|n);return i>3&&n&&Object.defineProperty(t,r,n),n};let m=(d=class extends o.LitElement{constructor(){super(...arguments),this.label="",this.h
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 49 63 6f 6e 4d 61 70 29 28 65 2e 61 74 74 72 69 62 75 74 65 73 29 2c 6e 75 6c 6c 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6e 61 6d 65 29 7d 29 29 2c 28 6e 75 6c 6c 21 3d 3d 28 72 3d 74 68 69 73 2e 63 6f 75 6e 74 29 26 26 76 6f 69 64 20 30 21 3d 3d 72 3f 72 3a 30 29 3e 32 26 26 74 68 69 73 2e 73 6f 75 72 63 65 43 6f 6c 6c 65 63 74 69 6f 6e 49 64 3f 28 30 2c 6f 2e 68 74 6d 6c 29 28 68 7c 7c 28 68 3d 76 60 24 7b 30 7d 60 29 2c 74 68 69 73 2e 73 68 6f 77 49 6e 44 72 61 77 65 72 3f 28 30 2c 6f 2e 68 74 6d 6c 29 28 67 7c 7c 28 67 3d 76 60 3c 61 20 63 6c 61 73 73 3d 22 62 61 64 67 65 20 72 6f 75 6e 64 65 64 2d 70 69 6c 6c 20 61 6c 69 67 6e 2d 73 65 6c 66 Data Ascii: IconMap)(e.attributes),null==e\|\|null===(t=e.attributes)\|\|void 0===t?void 0:t.name)})),(null!==(r=this.count)&&void 0!==r?r:0)>2&&this.sourceCollectionId?(0,o.html)(h\|\|(h=v`${0}`),this.showInDrawer?(0,o.html)(g\|\|(g=v`<a class="badge rounded-pill align-self
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 61 74 74 72 69 62 75 74 65 3a 22 73 68 6f 77 2d 69 6e 2d 64 72 61 77 65 72 22 7d 29 5d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 68 6f 77 49 6e 44 72 61 77 65 72 22 2c 76 6f 69 64 20 30 29 2c 6d 3d 79 28 5b 28 30 2c 73 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 29 28 22 70 69 76 6f 74 61 62 6c 65 2d 61 73 73 6f 63 69 61 74 65 64 2d 63 6f 6c 6c 65 63 74 69 6f 6e 73 2d 73 75 6d 6d 61 72 79 2d 6c 69 73 74 22 29 5d 2c 6d 29 7d 2c 37 34 31 35 36 3a 28 65 2c 74 2c 72 29 3d 3e 7b 76 61 72 20 6f 3d 72 28 33 31 30 38 38 29 2c 73 3d 72 28 34 38 37 30 34 29 2c 69 3d 72 28 31 36 36 34 35 29 2c 6e 3d 72 28 31 35 33 32 33 29 2c 61 3d 72 28 39 36 38 35 35 29 2c 63 3d 72 28 31 33 32 31 32 29 2c 6c 3d 28 72 28 37 37 35 35 34 29 2c 72 28 32 37 31 30 30 29 29 3b 6c 65 74 Data Ascii: attribute:"show-in-drawer"})],m.prototype,"showInDrawer",void 0),m=y([(0,s.customElement)("pivotable-associated-collections-summary-list")],m)},74156:(e,t,r)=>{var o=r(31088),s=r(48704),i=r(16645),n=r(15323),a=r(96855),c=r(13212),l=(r(77554),r(27100));let
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 22 24 7b 30 7d 22 3e 20 2b 24 7b 30 7d 20 3c 2f 73 70 61 6e 3e 60 29 2c 28 65 3d 3e 74 68 69 73 2e 6f 6e 4d 6f 75 73 65 6f 76 65 72 28 65 2c 72 29 29 2c 72 2e 6c 65 6e 67 74 68 29 3a 76 6f 69 64 20 30 29 7d 72 65 6e 64 65 72 52 65 67 69 6f 6e 28 65 29 7b 69 66 28 21 28 6e 75 6c 6c 21 3d 65 26 26 65 2e 63 6f 75 6e 74 72 79 7c 7c 6e 75 6c 6c 21 3d 65 26 26 65 2e 72 65 67 69 6f 6e 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 74 3d 65 2e 63 6f 75 6e 74 72 79 5f 69 73 6f 32 3b 6c 65 74 20 72 2c 6f 3d 65 2e 63 6f 75 6e 74 72 79 7c 7c 65 2e 72 65 67 69 6f 6e 3b 72 65 74 75 72 6e 20 61 2e 69 2e 67 65 74 43 6f 75 6e 74 72 79 53 68 6f 72 74 4e 61 6d 65 28 74 29 3f 72 3d 28 30 2c 73 2e 68 74 6d 6c 29 28 68 7c 7c 28 68 3d 79 60 3c 76 74 2d 75 69 2d 66 6c 61 67 20 2e Data Ascii: "${0}"> +${0} </span>`),(e=>this.onMouseover(e,r)),r.length):void 0)}renderRegion(e){if(!(null!=e&&e.country\|\|null!=e&&e.region))return;const t=e.country_iso2;let r,o=e.country\|\|e.region;return a.i.getCountryShortName(t)?r=(0,s.html)(h\|\|(h=y`<vt-ui-flag .
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 61 6e 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 62 6f 64 79 22 3e 24 7b 30 7d 3c 2f 73 70 61 6e 3e 60 29 2c 74 29 7d 7d 72 65 6e 64 65 72 28 29 7b 72 65 74 75 72 6e 28 30 2c 6f 2e 68 74 6d 6c 29 28 6c 7c 7c 28 6c 3d 70 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 76 73 74 61 63 6b 20 67 61 70 2d 31 20 66 6c 65 78 2d 67 72 6f 77 2d 30 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 6e 6f 77 72 61 70 20 74 65 78 74 2d 62 6f 64 79 2d 73 65 63 6f 6e 64 61 72 79 20 66 77 2d 62 6f 6c 64 22 3e 24 7b 30 7d 3c 2f 64 69 76 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 60 29 2c 74 68 69 73 2e 6c 61 62 65 6c 2c 74 68 69 73 2e 72 65 6e 64 65 72 49 74 65 6d 73 28 29 29 7d 72 65 6e 64 65 72 49 74 65 6d 73 28 29 7b 76 61 72 20 65 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 28 65 Data Ascii: an class="text-body">${0}</span>`),t)}}render(){return(0,o.html)(l\|\|(l=p` <div class="vstack gap-1 flex-grow-0"> <div class="text-nowrap text-body-secondary fw-bold">${0}</div> ${0} </div> `),this.label,this.renderItems())}renderItems(){var e;if(null===(e
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 3b 6c 65 74 20 6c 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 6f 2e 4c 69 74 45 6c 65 6d 65 6e 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 64 65 66 61 75 6c 74 53 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 61 67 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 76 74 63 64 6e 2f 61 73 73 65 74 73 2f 73 76 67 2f 63 69 72 63 6c 65 2d 66 6c 61 67 73 2f 78 78 2e 73 76 67 22 2c 74 68 69 73 2e 65 72 72 6f 72 65 64 53 72 63 3d 21 31 7d 75 70 64 61 74 65 64 28 65 29 7b 73 75 70 65 72 2e 75 70 64 61 74 65 64 28 65 29 2c 65 2e 68 61 73 28 22 69 73 6f 22 29 26 26 28 74 68 69 73 2e 65 72 72 6f 72 65 64 53 72 63 3d 21 31 29 7d 67 65 74 20 73 72 63 28 29 7b 72 65 74 75 72 6e 20 74 68 Data Ascii: ;let l=class extends o.LitElement{constructor(){super(...arguments),this.defaultSrc="https://storage.googleapis.com/vtcdn/assets/svg/circle-flags/xx.svg",this.erroredSrc=!1}updated(e){super.updated(e),e.has("iso")&&(this.erroredSrc=!1)}get src(){return th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.18	60902	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:02 UTC	690	OUT	GET /gui/88279.532f3865c685074ed6bc.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:02 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:02 GMT expires: Thu, 15 Jan 2026 16:45:02 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 1cbe023f30c16ae283215f94363cbf3f content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:02 UTC	1003	IN	Data Raw: 33 39 36 37 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 32 37 39 2c 38 33 33 30 32 2c 36 30 39 32 31 5d 2c 7b 38 38 32 37 39 3a 28 65 2c 74 2c 69 29 3d 3e 7b 76 61 72 20 73 3d 69 28 38 37 36 37 38 29 2c 72 3d 69 28 34 38 37 30 34 29 2c 6f 3d 69 28 31 36 36 34 35 29 2c 61 3d 69 28 39 32 36 31 39 29 2c 6e 3d 69 28 39 34 31 37 29 2c 6c 3d 69 28 34 35 32 34 31 29 2c 64 3d 69 28 34 34 30 35 32 29 2c 63 3d 69 28 34 32 37 31 32 29 2c 68 3d 28 69 28 35 31 31 39 36 29 2c 69 28 31 35 33 32 33 29 29 2c 75 3d 69 28 36 38 31 32 32 29 2c 66 3d 69 28 39 35 36 Data Ascii: 3967"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[88279,83302,60921],{88279:(e,t,i)=>{var s=i(87678),r=i(48704),o=i(16645),a=i(92619),n=i(9417),l=i(45241),d=i(44052),c=i(42712),h=(i(51196),i(15323)),u=i(68122),f=i(956
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 7b 73 75 70 65 72 28 29 2c 74 68 69 73 2e 74 68 72 65 61 74 50 72 6f 66 69 6c 65 73 3d 5b 5d 2c 74 68 69 73 2e 69 73 4c 6f 61 64 69 6e 67 54 68 72 65 61 74 50 72 6f 66 69 6c 65 73 3d 21 31 2c 74 68 69 73 2e 73 65 6c 65 63 74 65 64 54 68 72 65 61 74 50 72 6f 66 69 6c 65 73 3d 6e 65 77 20 53 65 74 2c 74 68 69 73 2e 74 68 72 65 61 74 50 72 6f 66 69 6c 65 46 69 6c 74 65 72 3d 22 22 2c 74 68 69 73 2e 63 68 61 6e 67 65 73 53 65 6c 65 63 74 65 64 54 68 72 65 61 74 50 72 6f 66 69 6c 65 73 3d 7b 61 64 64 65 64 54 70 3a 6e 65 77 20 53 65 74 2c 72 65 6d 6f 76 65 64 54 70 73 3a 6e 65 77 20 53 65 74 7d 2c 74 68 69 73 2e 69 6e 69 74 69 61 6c 53 65 6c 65 63 74 65 64 54 68 72 65 61 74 50 72 6f 66 69 6c 65 73 3d 6e 65 77 20 53 65 74 2c 74 68 69 73 2e 6c 6f 61 64 54 68 72 Data Ascii: {super(),this.threatProfiles=[],this.isLoadingThreatProfiles=!1,this.selectedThreatProfiles=new Set,this.threatProfileFilter="",this.changesSelectedThreatProfiles={addedTp:new Set,removedTps:new Set},this.initialSelectedThreatProfiles=new Set,this.loadThr
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 74 28 22 72 65 74 72 69 65 76 65 64 2d 74 68 72 65 61 74 2d 70 72 6f 66 69 6c 65 73 22 2c 7b 64 65 74 61 69 6c 3a 7b 74 68 72 65 61 74 50 72 6f 66 69 6c 65 73 3a 65 2e 74 68 72 65 61 74 50 72 6f 66 69 6c 65 73 7d 2c 62 75 62 62 6c 65 73 3a 21 30 2c 63 6f 6d 70 6f 73 65 64 3a 21 30 7d 29 29 29 2c 65 2e 73 65 74 49 6e 69 74 69 61 6c 43 68 65 63 6b 65 64 54 68 72 65 61 74 50 72 6f 66 69 6c 65 73 28 29 7d 66 69 6e 61 6c 6c 79 7b 65 2e 69 73 4c 6f 61 64 69 6e 67 54 68 72 65 61 74 50 72 6f 66 69 6c 65 73 3d 21 31 7d 7d 29 29 28 29 7d 68 61 6e 64 6c 65 4d 6f 64 69 66 79 49 6e 74 65 72 65 73 74 73 49 6e 54 68 72 65 61 74 50 72 6f 66 69 6c 65 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 53 28 28 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 69 66 28 65 2e Data Ascii: t("retrieved-threat-profiles",{detail:{threatProfiles:e.threatProfiles},bubbles:!0,composed:!0}))),e.setInitialCheckedThreatProfiles()}finally{e.isLoadingThreatProfiles=!1}}))()}handleModifyInterestsInThreatProfile(){var e=this;return S((function*(){if(e.
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 2e 72 65 6d 6f 76 65 64 54 70 73 2e 61 64 64 28 74 2e 76 61 6c 75 65 29 2c 74 68 69 73 2e 63 68 61 6e 67 65 73 53 65 6c 65 63 74 65 64 54 68 72 65 61 74 50 72 6f 66 69 6c 65 73 2e 61 64 64 65 64 54 70 2e 64 65 6c 65 74 65 28 74 2e 76 61 6c 75 65 29 29 2c 74 68 69 73 2e 6e 6f 74 69 66 79 43 68 61 6e 67 65 73 28 29 7d 68 61 6e 64 6c 65 53 65 61 72 63 68 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3b 74 68 69 73 2e 74 68 72 65 61 74 50 72 6f 66 69 6c 65 46 69 6c 74 65 72 3d 74 2e 76 61 6c 75 65 7d 72 65 6e 64 65 72 54 68 72 65 61 74 50 72 6f 66 69 6c 65 73 4c 69 73 74 28 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 74 68 72 65 61 74 50 72 6f 66 69 6c 65 73 2e 66 69 6c 74 65 72 28 28 65 3d 3e 21 74 68 69 73 2e 74 68 72 65 Data Ascii: .removedTps.add(t.value),this.changesSelectedThreatProfiles.addedTp.delete(t.value)),this.notifyChanges()}handleSearch(e){const t=e.currentTarget;this.threatProfileFilter=t.value}renderThreatProfilesList(){const e=this.threatProfiles.filter((e=>!this.thre
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 77 2d 62 6f 6c 64 22 3e 41 64 64 20 74 6f 20 79 6f 75 72 20 54 68 72 65 61 74 20 50 72 6f 66 69 6c 65 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 62 6f 64 79 2d 74 65 72 74 69 61 72 79 22 3e 20 46 6f 6c 6c 6f 77 20 74 68 69 73 20 65 6e 74 69 74 79 20 69 6e 20 79 6f 75 72 20 54 68 72 65 61 74 20 50 72 6f 66 69 6c 65 20 61 6e 64 20 74 72 61 63 6b 20 61 6e 79 20 75 70 64 61 74 65 73 20 6f 6e 20 69 74 2e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 76 73 74 61 63 6b 20 67 61 70 2d 33 22 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 3c 68 72 20 63 6c 61 73 73 3d 22 6d 2d 30 22 3e 20 3c 61 20 72 6f 6c 65 3d 22 Data Ascii: iv> <div class="fw-bold">Add to your Threat Profile</div> <div class="text-body-tertiary"> Follow this entity in your Threat Profile and track any updates on it. </div> </div> </div> </div> <div class="vstack gap-3"> ${0} </div> <hr class="m-0"> <a role="
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 29 61 3d 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 28 65 2c 74 2c 69 2c 73 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 6e 3e 3d 30 3b 6e 2d 2d 29 28 72 3d 65 5b 6e 5d 29 26 26 28 61 3d 28 6f 3c 33 3f 72 28 61 29 3a 6f 3e 33 3f 72 28 74 2c 69 2c 61 29 3a 72 28 74 2c 69 29 29 7c 7c 61 29 3b 72 65 74 75 72 6e 20 6f 3e 33 26 26 61 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2c 61 29 2c 61 7d 3b 63 6f 6e 73 74 20 44 3d 22 66 6f 6c 6c 6f 77 2d 66 6f 72 6d 22 2c 4c 3d 22 61 64 64 2d 74 68 72 65 61 74 2d 70 72 6f 66 69 6c Data Ascii: "==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(e,t,i,s);else for(var n=e.length-1;n>=0;n--)(r=e[n])&&(a=(o<3?r(a):o>3?r(t,i,a):r(t,i))\|\|a);return o>3&&a&&Object.defineProperty(t,i,a),a};const D="follow-form",L="add-threat-profil
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 74 68 69 73 2e 72 65 71 75 65 73 74 55 70 64 61 74 65 28 29 7d 63 68 65 63 6b 48 61 73 43 68 61 6e 67 65 73 28 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 28 74 68 69 73 2e 68 61 73 43 68 61 6e 67 65 64 29 2e 73 6f 6d 65 28 28 65 3d 3e 65 29 29 7d 77 69 6c 6c 55 70 64 61 74 65 28 65 29 7b 76 61 72 20 74 2c 69 3b 65 2e 68 61 73 28 22 73 68 6f 77 54 68 72 65 61 74 50 72 6f 66 69 6c 65 22 29 26 26 74 68 69 73 2e 73 68 6f 77 54 68 72 65 61 74 50 72 6f 66 69 6c 65 26 26 21 5b 22 72 65 70 6f 72 74 22 2c 22 63 6f 6c 6c 65 63 74 69 6f 6e 22 2c 22 76 75 6c 6e 65 72 61 62 69 6c 69 74 79 22 5d 2e 69 6e 63 6c 75 64 65 73 28 6e 75 6c 6c 21 3d 3d 28 74 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 54 79 70 65 29 26 26 76 6f 69 64 20 30 21 3d 3d Data Ascii: this.requestUpdate()}checkHasChanges(){return Object.values(this.hasChanged).some((e=>e))}willUpdate(e){var t,i;e.has("showThreatProfile")&&this.showThreatProfile&&!["report","collection","vulnerability"].includes(null!==(t=this.collectionType)&&void 0!==
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 69 64 3d 22 24 7b 30 7d 22 20 2e 65 6e 74 69 74 79 49 64 3d 22 24 7b 30 7d 22 20 2e 63 6f 6c 6c 65 63 74 69 6f 6e 54 79 70 65 3d 22 24 7b 30 7d 22 20 40 63 68 61 6e 67 65 3d 22 24 7b 30 7d 22 3e 3c 2f 61 64 64 2d 74 6f 2d 74 68 72 65 61 74 2d 70 72 6f 66 69 6c 65 2d 66 6f 72 6d 3e 20 3c 2f 64 69 76 3e 60 29 2c 4c 2c 74 68 69 73 2e 65 6e 74 69 74 79 49 64 2c 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 54 79 70 65 2c 74 68 69 73 2e 68 61 6e 64 6c 65 46 6f 72 6d 43 68 61 6e 67 65 29 3a 72 2e 6e 6f 74 68 69 6e 67 2c 74 68 69 73 2e 68 61 6e 64 6c 65 53 61 76 65 50 72 65 66 65 72 65 6e 63 65 73 2c 74 68 69 73 2e 69 73 53 61 76 69 6e 67 50 72 65 66 65 72 65 6e 63 65 73 7c 7c 21 74 68 69 73 2e 63 68 65 63 6b 48 61 73 43 68 61 6e 67 65 73 28 29 2c 74 68 69 73 2e Data Ascii: id="${0}" .entityId="${0}" .collectionType="${0}" @change="${0}"></add-to-threat-profile-form> </div>`),L,this.entityId,this.collectionType,this.handleFormChange):r.nothing,this.handleSavePreferences,this.isSavingPreferences\|\|!this.checkHasChanges(),this.
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 28 29 5d 2c 4f 2e 70 72 6f 74 6f 74 79 70 65 2c 22 74 68 72 65 61 74 50 72 6f 66 69 6c 65 50 65 72 6d 69 73 73 69 6f 6e 73 22 2c 76 6f 69 64 20 30 29 2c 4f 3d 52 28 5b 28 30 2c 6f 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 29 28 22 6e 65 77 2d 66 6f 6c 6c 6f 77 2d 66 6f 72 6d 22 29 5d 2c 4f 29 7d 2c 39 30 35 31 30 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 4e 39 3a 28 29 3d 3e 43 2c 51 6d 3a 28 29 3d 3e 77 7d 29 3b 76 61 72 20 73 3d 69 28 34 38 37 30 34 29 2c 72 3d 69 28 31 36 36 34 35 29 2c 6f 3d 69 28 36 32 38 33 32 29 2c 61 3d 69 28 39 32 36 31 39 29 2c 6e 3d 69 28 31 35 33 32 33 29 2c 6c 3d 69 28 35 34 35 31 32 29 2c 64 3d 69 28 38 33 33 30 32 29 2c 63 3d 69 28 34 34 30 35 32 29 2c 68 3d 69 28 38 31 33 33 34 29 3b 6c 65 74 20 75 2c 66 2c 70 Data Ascii: ()],O.prototype,"threatProfilePermissions",void 0),O=R([(0,o.customElement)("new-follow-form")],O)},90510:(e,t,i)=>{i.d(t,{N9:()=>C,Qm:()=>w});var s=i(48704),r=i(16645),o=i(62832),a=i(92619),n=i(15323),l=i(54512),d=i(83302),c=i(44052),h=i(81334);let u,f,p
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 69 70 74 69 6f 6e 50 72 65 66 65 72 65 6e 63 65 73 22 29 26 26 28 74 68 69 73 2e 66 6f 72 6d 56 61 6c 75 65 73 3d 7b 69 73 44 61 69 6c 79 45 6d 61 69 6c 43 68 65 63 6b 65 64 3a 21 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 50 72 65 66 65 72 65 6e 63 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 2e 64 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 2e 61 74 74 72 69 62 75 74 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 21 74 2e 64 61 69 6c 79 5f 65 6d 61 69 6c 29 2c 69 73 53 65 6e 64 45 6d 61 69 6c 43 68 65 63 6b 65 64 3a 21 28 6e 75 6c 6c 3d 3d 3d 28 69 3d 74 68 69 73 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 50 72 65 66 65 72 65 6e 63 Data Ascii: iptionPreferences")&&(this.formValues={isDailyEmailChecked:!(null===(t=this.subscriptionPreferences)\|\|void 0===t\|\|null===(t=t.data)\|\|void 0===t\|\|null===(t=t.attributes)\|\|void 0===t\|\|!t.daily_email),isSendEmailChecked:!(null===(i=this.subscriptionPreferenc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.18	60903	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:02 UTC	690	OUT	GET /gui/40946.52e58c8b2a8b55ad5067.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:02 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:02 GMT expires: Thu, 15 Jan 2026 16:45:02 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 194b2fac64f53b59231a58351f2270e5 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:02 UTC	1003	IN	Data Raw: 32 64 35 34 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 30 39 34 36 5d 2c 7b 39 34 31 35 36 3a 28 74 2c 65 2c 72 29 3d 3e 7b 72 2e 64 28 65 2c 7b 24 6a 3a 28 29 3d 3e 68 2c 45 4a 3a 28 29 3d 3e 75 2c 46 67 3a 28 29 3d 3e 61 2c 47 4d 3a 28 29 3d 3e 67 2c 56 44 3a 28 29 3d 3e 70 2c 65 52 3a 28 29 3d 3e 76 2c 74 36 3a 28 29 3d 3e 63 2c 78 39 3a 28 29 3d 3e 64 7d 29 3b 76 61 72 20 69 3d 72 28 32 32 38 39 34 29 2c 6e 3d 72 28 39 36 39 38 37 29 2c 73 3d 72 28 34 35 32 34 31 29 2c 6c 3d 72 28 39 35 36 38 38 29 2c 6f 3d 72 28 34 34 30 35 32 29 3b 66 75 6e Data Ascii: 2d54"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[40946],{94156:(t,e,r)=>{r.d(e,{$j:()=>h,EJ:()=>u,Fg:()=>a,GM:()=>g,VD:()=>p,eR:()=>v,t6:()=>c,x9:()=>d});var i=r(22894),n=r(96987),s=r(45241),l=r(95688),o=r(44052);fun
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 38 2e 67 65 74 53 65 61 72 63 68 55 72 6c 28 7b 65 6e 74 69 74 79 3a 22 75 72 6c 22 2c 63 6f 6f 6b 69 65 3a 65 7d 29 3a 76 6f 69 64 20 30 2c 76 61 6c 75 65 3a 74 5b 65 5d 2c 6c 69 6e 6b 3a 6e 75 6c 6c 21 3d 3d 28 69 3d 6f 2e 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 26 26 69 2e 76 74 69 41 63 63 65 73 73 3f 6c 2e 5a 38 2e 67 65 74 53 65 61 72 63 68 55 72 6c 28 7b 65 6e 74 69 74 79 3a 22 75 72 6c 22 2c 63 6f 6f 6b 69 65 5f 76 61 6c 75 65 3a 74 5b 65 5d 7d 29 3a 76 6f 69 64 20 30 7d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6d 61 70 28 28 74 3d 3e 28 7b 74 65 78 74 3a 74 2c 6c 69 6e 6b 3a 6c 2e 5a 38 2e 67 65 74 53 65 61 72 63 68 55 72 Data Ascii: 8.getSearchUrl({entity:"url",cookie:e}):void 0,value:t[e],link:null!==(i=o.NU.currentUser)&&void 0!==i&&i.vtiAccess?l.Z8.getSearchUrl({entity:"url",cookie_value:t[e]}):void 0}}))}function c(t){return null==t?void 0:t.map((t=>({text:t,link:l.Z8.getSearchUr
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 3d 72 28 39 36 39 38 37 29 2c 64 3d 72 28 34 34 30 35 32 29 2c 70 3d 72 28 34 32 32 34 36 29 2c 76 3d 72 28 39 34 31 35 36 29 3b 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 74 29 3b 65 26 26 28 69 3d 69 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 65 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 72 2e 70 75 73 68 2e 61 70 70 6c 79 28 72 2c 69 29 Data Ascii: =r(96987),d=r(44052),p=r(42246),v=r(94156);function g(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(t);e&&(i=i.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,i)
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 52 4c 20 62 65 6c 6f 6e 67 73 20 74 6f 22 2c 74 68 69 73 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 54 79 70 65 3d 22 72 65 6c 61 74 65 64 5f 74 68 72 65 61 74 5f 61 63 74 6f 72 73 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 74 2c 65 2c 72 2c 69 2c 6e 2c 73 2c 6c 29 7b 74 72 79 7b 76 61 72 20 6f 3d 74 5b 73 5d 28 6c 29 2c 61 3d 6f 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 72 28 74 29 7d 6f 2e 64 6f 6e 65 3f 65 28 61 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 61 29 2e 74 68 65 6e 28 69 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 74 2c 65 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 Data Ascii: RL belongs to",this.relationshipType="related_threat_actors"}}function m(t,e,r,i,n,s,l){try{var o=t[s](l),a=o.value}catch(t){return void r(t)}o.done?e(a):Promise.resolve(a).then(i,n)}function y(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){va
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 63 61 74 69 6f 6e 2e 74 79 70 65 2c 72 65 73 70 6f 6e 73 65 43 6f 64 65 3a 6e 75 6c 6c 3d 3d 3d 28 65 3d 6f 2e 6c 61 73 74 5f 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 74 6f 53 74 72 69 6e 67 28 29 2c 63 6f 6e 74 65 6e 74 54 79 70 65 3a 6f 2e 6c 61 73 74 5f 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 68 65 61 64 65 72 73 26 26 6f 2e 6c 61 73 74 5f 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 68 65 61 64 65 72 73 5b 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 5d 2c 6c 61 73 74 41 6e 61 6c 79 73 69 73 3a 6f 2e 6c 61 73 74 5f 61 6e 61 6c 79 73 69 73 5f 64 61 74 65 7d 2c 75 3d 7b 63 61 74 65 67 6f 72 69 65 73 4b 65 79 56 61 6c 75 65 41 72 72 61 79 3a 28 30 2c 76 2e 46 67 29 28 6f 2e 63 Data Ascii: cation.type,responseCode:null===(e=o.last_http_response_code)\|\|void 0===e?void 0:e.toString(),contentType:o.last_http_response_headers&&o.last_http_response_headers["content-type"],lastAnalysis:o.last_analysis_date},u={categoriesKeyValueArray:(0,v.Fg)(o.c
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 5d 2c 65 29 7d 29 2c 4f 29 2c 74 68 69 73 2e 75 72 6c 49 64 3d 74 2c 74 68 69 73 2e 72 61 77 41 6e 61 6c 79 73 69 73 4d 61 70 3d 6e 65 77 20 4d 61 70 2c 74 68 69 73 2e 72 65 6c 61 74 65 64 52 65 6c 61 74 69 6f 6e 73 68 69 70 73 3d 5b 6e 65 77 20 66 28 74 68 69 73 2e 75 72 6c 49 64 29 5d 2c 6e 75 6c 6c 3d 3d 3d 28 65 3d 64 2e 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 21 65 2e 76 74 69 41 63 63 65 73 73 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 74 68 69 73 2e 67 65 74 44 6f 77 6e 6c 6f 61 64 65 64 46 69 6c 65 73 28 29 3b 72 2e 6c 6f 61 64 28 29 2e 74 68 65 6e 28 28 28 29 3d 3e 7b 69 66 28 72 2e 64 61 74 61 2e 6c 65 6e 67 74 68 26 26 72 2e 64 61 74 61 5b 30 5d 2e 5f 66 6f 75 6e 64 29 7b 63 6f 6e 73 74 20 74 Data Ascii: ],e)}),O),this.urlId=t,this.rawAnalysisMap=new Map,this.relatedRelationships=[new f(this.urlId)],null===(e=d.NU.currentUser)\|\|void 0===e\|\|!e.vtiAccess)return;const r=this.getDownloadedFiles();r.load().then((()=>{if(r.data.length&&r.data[0]._found){const t
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 70 73 28 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 72 65 74 75 72 6e 28 30 2c 70 2e 68 4e 29 28 28 28 29 3d 3e 6c 2e 68 34 2e 75 72 6c 73 2e 6c 69 73 74 52 65 6c 61 74 69 6f 6e 73 68 69 70 28 74 68 69 73 2e 75 72 6c 49 64 2c 22 63 6f 6e 74 61 63 74 65 64 5f 69 70 73 22 2c 62 28 7b 7d 2c 74 29 29 29 2c 28 74 3d 3e 63 2e 77 39 2e 75 6e 69 74 61 72 79 49 70 4c 69 73 74 46 6f 72 6d 61 74 74 65 72 28 28 30 2c 6e 2e 68 29 28 74 29 29 29 29 7d 67 65 74 43 6f 6e 74 65 6e 74 53 74 72 69 6e 67 73 28 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 Data Ascii: ps(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};return(0,p.hN)((()=>l.h4.urls.listRelationship(this.urlId,"contacted_ips",b({},t))),(t=>c.w9.unitaryIpListFormatter((0,n.h)(t))))}getContentStrings(){let t=arguments.length>0&&void 0!==a
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 28 74 68 69 73 2e 75 72 6c 49 64 2c 22 75 72 6c 73 5f 72 65 6c 61 74 65 64 5f 62 79 5f 74 72 61 63 6b 65 72 5f 69 64 22 2c 62 28 7b 7d 2c 74 29 29 29 2c 28 74 3d 3e 63 2e 77 39 2e 75 72 6c 46 6f 72 6d 61 74 74 65 72 28 28 30 2c 6e 2e 68 29 28 74 29 29 29 29 7d 67 65 74 45 6d 62 65 64 64 65 64 4a 73 46 69 6c 65 73 28 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 72 65 74 75 72 6e 28 30 2c 70 2e 68 4e 29 28 28 28 29 3d 3e 6c 2e 68 34 2e 75 72 6c 73 2e 6c 69 73 74 52 65 6c 61 74 69 6f 6e 73 68 69 70 28 74 68 69 73 2e 75 72 6c 49 64 2c 22 65 6d 62 65 64 64 65 64 5f 6a 73 5f 66 69 6c 65 73 22 2c 62 28 7b 7d 2c Data Ascii: (this.urlId,"urls_related_by_tracker_id",b({},t))),(t=>c.w9.urlFormatter((0,n.h)(t))))}getEmbeddedJsFiles(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};return(0,p.hN)((()=>l.h4.urls.listRelationship(this.urlId,"embedded_js_files",b({},
2025-01-15 16:45:02 UTC	884	IN	Data Raw: 28 74 68 69 73 2e 75 72 6c 49 64 2c 22 76 6f 74 65 73 22 2c 62 28 7b 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 3a 5b 22 69 74 65 6d 22 2c 22 76 6f 74 65 72 22 5d 7d 2c 74 29 2c 65 3f 28 30 2c 6f 2e 70 76 29 28 7b 7d 29 3a 7b 7d 29 29 2c 28 74 3d 3e 63 2e 77 39 2e 76 6f 74 65 46 6f 72 6d 61 74 74 65 72 28 28 30 2c 6e 2e 68 29 28 74 29 29 29 29 7d 67 65 74 43 6f 6c 6c 65 63 74 69 6f 6e 73 28 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 72 65 74 75 72 6e 28 30 2c 70 2e 46 70 29 28 28 28 29 3d 3e 6c 2e 68 34 2e 75 72 6c 73 2e 6c 69 73 74 52 65 6c 61 74 69 6f 6e 73 68 69 70 28 74 68 69 73 2e 75 72 6c 49 64 2c 22 Data Ascii: (this.urlId,"votes",b({relationships:["item","voter"]},t),e?(0,o.pv)({}):{})),(t=>c.w9.voteFormatter((0,n.h)(t))))}getCollections(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};return(0,p.Fp)((()=>l.h4.urls.listRelationship(this.urlId,"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.18	60904	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:02 UTC	690	OUT	GET /gui/58686.f1ac5a4a1e085aafcbb6.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:02 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:02 GMT expires: Thu, 15 Jan 2026 16:45:02 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: df3b2ccff7d1f2ca592e04ca15f59e8b content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:02 UTC	1003	IN	Data Raw: 33 39 37 65 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 38 36 38 36 2c 38 35 39 30 2c 38 31 37 31 39 2c 34 34 37 30 36 2c 31 31 39 30 31 2c 31 39 30 32 34 5d 2c 7b 32 35 34 32 33 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 72 28 65 29 2c 69 2e 64 28 65 2c 7b 64 6f 77 6e 6c 6f 61 64 49 63 6f 6e 3a 28 29 3d 3e 6e 2e 64 6f 77 6e 6c 6f 61 64 49 63 6f 6e 7d 29 3b 76 61 72 20 6e 3d 69 28 31 35 33 32 33 29 7d 2c 31 34 32 33 32 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 72 28 65 29 2c 69 2e 64 28 65 2c 7b 70 69 6e 70 6f 69 6e 74 49 63 6f 6e 3a 28 29 3d 3e 6e 7d 29 Data Ascii: 397e"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[58686,8590,81719,44706,11901,19024],{25423:(t,e,i)=>{i.r(e),i.d(e,{downloadIcon:()=>n.downloadIcon});var n=i(15323)},14232:(t,e,i)=>{i.r(e),i.d(e,{pinpointIcon:()=>n})
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 6f 69 64 20 69 28 74 29 7d 61 2e 64 6f 6e 65 3f 65 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6e 2c 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 70 74 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 69 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 76 61 72 20 73 3d 74 2e 61 70 70 6c 79 28 65 2c 69 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 64 74 28 73 2c 6e 2c 6f 2c 72 2c 61 2c 22 6e 65 78 74 22 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 64 74 28 73 2c 6e 2c 6f 2c 72 2c 61 2c 22 74 68 72 6f 77 22 2c 74 29 7d 72 28 76 6f 69 64 20 30 29 7d 29 29 7d 7d 76 61 72 20 62 74 3d Data Ascii: oid i(t)}a.done?e(l):Promise.resolve(l).then(n,o)}function pt(t){return function(){var e=this,i=arguments;return new Promise((function(n,o){var s=t.apply(e,i);function r(t){dt(s,n,o,r,a,"next",t)}function a(t){dt(s,n,o,r,a,"throw",t)}r(void 0)}))}}var bt=
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 79 53 65 6c 65 63 74 6f 72 28 22 23 6e 65 74 77 6f 72 6b 4c 6f 63 61 74 69 6f 6e 73 49 63 6f 6e 22 29 3b 65 26 26 78 2e 4b 4b 2e 73 65 6e 64 41 6e 61 6c 79 74 69 63 73 4f 6e 48 6f 76 65 72 28 65 2c 7b 63 61 74 65 67 6f 72 79 3a 22 76 74 69 20 66 69 6c 65 20 61 63 74 69 6f 6e 73 22 2c 61 63 74 69 6f 6e 3a 22 73 65 61 72 63 68 20 72 6f 77 3a 20 68 6f 76 65 72 65 64 20 72 65 6c 61 74 65 64 20 6e 65 74 77 6f 72 6b 20 6c 6f 63 61 74 69 6f 6e 73 22 7d 29 3b 63 6f 6e 73 74 20 69 3d 74 68 69 73 2e 72 65 6e 64 65 72 52 6f 6f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 6d 61 74 63 68 43 6f 6e 74 65 78 74 49 63 6f 6e 22 29 3b 69 26 26 78 2e 4b 4b 2e 73 65 6e 64 41 6e 61 6c 79 74 69 63 73 4f 6e 48 6f 76 65 72 28 69 2c 7b 63 61 74 65 67 6f 72 79 3a 22 76 74 Data Ascii: ySelector("#networkLocationsIcon");e&&x.KK.sendAnalyticsOnHover(e,{category:"vti file actions",action:"search row: hovered related network locations"});const i=this.renderRoot.querySelector("#matchContextIcon");i&&x.KK.sendAnalyticsOnHover(i,{category:"vt
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 64 54 65 78 74 54 6f 43 6c 69 70 62 6f 61 72 64 2c 28 30 2c 6c 2e 69 66 44 65 66 69 6e 65 64 29 28 74 68 69 73 2e 65 6e 74 69 74 79 2e 69 64 29 2c 74 68 69 73 2e 70 69 76 6f 74 61 62 6c 65 26 26 74 68 69 73 2e 65 6e 74 69 74 79 2e 5f 66 6f 75 6e 64 26 26 21 74 68 69 73 2e 6d 69 6e 69 6d 61 6c 3f 28 30 2c 73 2e 68 74 6d 6c 29 28 53 7c 7c 28 53 3d 63 74 60 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 66 69 6c 65 2d 61 63 74 69 6f 6e 73 22 3e 20 3c 73 70 61 6e 20 3f 68 69 64 64 65 6e 3d 22 24 7b 30 7d 22 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 70 6f 73 69 74 69 6f 6e 3d 22 62 6f 74 74 6f 6d 22 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 74 65 78 74 3d 22 46 69 6e 64 20 73 69 6d 69 6c 61 72 20 66 69 6c 65 73 22 20 40 6d 6f 75 73 65 6f 76 65 72 3d 22 24 7b 30 7d Data Ascii: dTextToClipboard,(0,l.ifDefined)(this.entity.id),this.pivotable&&this.entity._found&&!this.minimal?(0,s.html)(S\|\|(S=ct` <span class="file-actions"> <span ?hidden="${0}" data-tooltip-position="bottom" data-tooltip-text="Find similar files" @mouseover="${0}
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 3d 22 69 6e 66 6f 49 63 6f 6e 73 22 3e 20 3c 73 70 61 6e 20 69 64 3d 22 6d 61 74 63 68 43 6f 6e 74 65 78 74 49 63 6f 6e 22 20 64 61 74 61 2d 70 6f 70 6f 76 65 72 3d 22 73 6e 69 70 70 65 74 73 22 20 64 61 74 61 2d 70 6f 70 6f 76 65 72 2d 70 6f 73 69 74 69 6f 6e 3d 22 62 6f 74 74 6f 6d 22 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 70 6f 73 69 74 69 6f 6e 3d 22 74 6f 70 22 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 74 65 78 74 3d 22 54 68 69 73 20 66 69 6c 65 20 64 6f 65 73 20 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 63 6f 6e 74 65 78 74 75 61 6c 6c 79 20 72 65 6c 61 74 65 64 20 74 6f 20 74 68 65 20 73 65 61 72 63 68 20 71 75 65 72 79 22 20 63 6c 61 73 73 3d 22 24 7b 30 7d 22 20 40 6d 6f 75 73 65 6f 76 65 72 3d 22 24 7b 30 7d 22 Data Ascii: ="infoIcons"> <span id="matchContextIcon" data-popover="snippets" data-popover-position="bottom" data-tooltip-position="top" data-tooltip-text="This file does not contain information contextually related to the search query" class="${0}" @mouseover="${0}"
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 2c 74 68 69 73 2e 72 65 6e 64 65 72 53 75 62 74 69 74 6c 65 73 28 29 2c 74 68 69 73 2e 69 66 4e 6f 74 4d 69 6e 69 6d 61 6c 28 28 30 2c 73 2e 68 74 6d 6c 29 28 7a 7c 7c 28 7a 3d 63 74 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 69 6c 65 2d 65 78 74 72 61 2d 69 6e 66 6f 20 74 61 67 73 22 3e 24 7b 30 7d 3c 2f 64 69 76 3e 20 60 29 2c 74 68 69 73 2e 72 65 6e 64 65 72 54 61 67 73 28 29 29 29 29 2c 22 64 2d 6e 6f 6e 65 22 29 7d 72 65 6e 64 65 72 52 65 70 6f 72 74 4c 69 6e 6b 28 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 65 6e 74 69 74 79 2e 5f 66 6f 75 6e 64 3f 77 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 74 68 69 73 2e 65 6e 74 69 74 79 55 72 6c 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 73 68 61 32 35 36 7c 7c 74 68 69 73 2e 65 6e 74 69 74 79 2e Data Ascii: ,this.renderSubtitles(),this.ifNotMinimal((0,s.html)(z\|\|(z=ct` <div class="file-extra-info tags">${0}</div> `),this.renderTags()))),"d-none")}renderReportLink(){const t=this.entity._found?w.Z8.getRedirectUrl(this.entityUrl,this.entity.sha256\|\|this.entity.
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 70 6f 76 65 72 3a 28 29 3d 3e 7b 7d 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 6d 65 61 6e 69 6e 67 66 75 6c 5f 6e 61 6d 65 2c 78 2e 4b 4b 2e 73 68 6f 77 54 6f 6f 6c 74 69 70 2c 70 2e 63 6f 6e 74 65 6e 74 43 6f 70 79 49 63 6f 6e 2c 74 68 69 73 2e 5f 73 65 6e 64 54 65 78 74 54 6f 43 6c 69 70 62 6f 61 72 64 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 6d 65 61 6e 69 6e 67 66 75 6c 5f 6e 61 6d 65 29 3a 28 30 2c 73 2e 68 74 6d 6c 29 28 44 7c 7c 28 44 3d 63 74 60 20 3c 64 69 76 20 69 64 3d 22 6e 61 6d 65 22 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6e 6f 2d 6e 61 6d 65 22 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 70 6f 73 69 74 69 6f 6e 3d 22 74 6f 70 22 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 74 65 78 74 3d 22 24 7b 30 7d 22 20 40 6d 6f 75 73 65 6f 76 65 72 3d 22 Data Ascii: pover:()=>{},this.entity.meaningful_name,x.KK.showTooltip,p.contentCopyIcon,this._sendTextToClipboard,this.entity.meaningful_name):(0,s.html)(D\|\|(D=ct` <div id="name"> <span class="no-name" data-tooltip-position="top" data-tooltip-text="${0}" @mouseover="
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 74 68 69 73 2e 5f 69 73 53 69 6d 69 6c 61 72 69 74 79 53 63 6f 72 65 43 6f 6c 56 69 73 69 62 6c 65 28 74 68 69 73 2e 65 6e 74 69 74 79 29 26 26 74 68 69 73 2e 72 65 6e 64 65 72 43 6f 6c 75 6d 6e 28 22 53 69 6d 69 6c 61 72 69 74 79 22 2c 22 63 65 6e 74 65 72 20 63 6f 6c 2d 73 73 64 65 65 70 2d 73 63 6f 72 65 22 2c 28 30 2c 73 2e 68 74 6d 6c 29 28 4d 7c 7c 28 4d 3d 63 74 60 20 3c 64 69 76 3e 20 24 7b 30 7d 25 20 3c 2f 64 69 76 3e 20 60 29 2c 5b 74 68 69 73 2e 65 6e 74 69 74 79 2e 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 2e 73 69 6d 69 6c 61 72 69 74 79 5f 73 63 6f 72 65 5d 2e 6d 61 70 28 74 68 69 73 2e 5f 74 6f 50 65 72 63 65 6e 74 61 67 65 29 2e 6d 61 70 28 74 68 69 73 2e 5f 66 6f 72 6d 61 74 54 6f 54 77 6f 44 65 63 69 6d 61 6c 73 29 2e 6d 61 Data Ascii: this._isSimilarityScoreColVisible(this.entity)&&this.renderColumn("Similarity","center col-ssdeep-score",(0,s.html)(M\|\|(M=ct` <div> ${0}% </div> `),[this.entity.context_attributes.similarity_score].map(this._toPercentage).map(this._formatToTwoDecimals).ma
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 69 73 2e 65 6e 74 69 74 79 2e 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 7c 7c 22 74 69 6d 65 73 74 61 6d 70 22 69 6e 20 74 68 69 73 2e 65 6e 74 69 74 79 2e 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 29 7c 7c 74 68 69 73 2e 72 65 6e 64 65 72 43 6f 6c 75 6d 6e 28 22 4c 61 73 74 20 73 65 65 6e 22 2c 22 73 65 65 6e 20 63 6f 6c 2d 6c 73 65 65 6e 22 2c 28 30 2c 73 2e 68 74 6d 6c 29 28 42 7c 7c 28 42 3d 63 74 60 20 3c 75 6c 3e 20 3c 6c 69 3e 20 3c 64 69 76 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 3c 64 69 76 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 3c 2f 6c 69 3e 20 3c 2f 75 6c 3e 60 29 2c 67 2e 77 39 2e 67 65 74 54 69 6d 65 4f 72 44 61 74 65 28 74 68 69 73 2e 65 6e 74 69 74 79 2e 6c 61 73 74 5f 73 75 62 6d 69 73 73 69 6f 6e 5f 64 61 74 Data Ascii: is.entity.context_attributes\|\|"timestamp"in this.entity.context_attributes)\|\|this.renderColumn("Last seen","seen col-lseen",(0,s.html)(B\|\|(B=ct` <ul> <li> <div> ${0} </div> <div> ${0} </div> </li> </ul>`),g.w9.getTimeOrDate(this.entity.last_submission_dat
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 69 73 2e 69 63 6f 6e 29 29 2c 22 68 69 64 64 65 6e 2d 62 65 6c 6f 77 2d 31 32 30 30 22 29 7d 72 65 6e 64 65 72 4d 6f 62 69 6c 65 56 69 65 77 28 29 7b 76 61 72 20 74 2c 65 3b 72 65 74 75 72 6e 28 30 2c 73 2e 68 74 6d 6c 29 28 57 7c 7c 28 57 3d 63 74 60 20 3c 76 74 2d 75 69 2d 6d 61 69 6e 2d 73 65 61 72 63 68 2d 65 6e 74 69 74 79 2d 6d 6f 62 69 6c 65 2d 72 6f 77 20 3f 63 68 65 63 6b 65 64 3d 22 24 7b 30 7d 22 20 2e 63 68 65 63 6b 65 64 43 68 61 6e 67 65 64 3d 22 24 7b 30 7d 22 20 63 6c 61 73 73 3d 22 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 20 64 2d 62 6c 6f 63 6b 22 3e 20 3c 64 69 76 20 73 6c 6f 74 3d 22 63 6f 6c 75 6d 6e 2d 73 6d 61 6c 6c 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 65 66 74 2d 73 69 64 65 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d Data Ascii: is.icon)),"hidden-below-1200")}renderMobileView(){var t,e;return(0,s.html)(W\|\|(W=ct` <vt-ui-main-search-entity-mobile-row ?checked="${0}" .checkedChanged="${0}" class="border-bottom d-block"> <div slot="column-small"> <div class="left-side"> <div class="m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.18	60905	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:02 UTC	511	OUT	GET /gui/87379.10e7a557de64c909c07d.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:02 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:02 GMT expires: Thu, 15 Jan 2026 16:45:02 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 15ef35adbd8f3c02a33c19944a6420bc content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:02 UTC	1003	IN	Data Raw: 33 62 32 37 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 37 33 37 39 2c 38 31 34 32 2c 33 39 36 32 36 5d 2c 7b 38 37 33 37 39 3a 28 6f 2c 65 2c 72 29 3d 3e 7b 76 61 72 20 74 3d 72 28 32 32 38 39 34 29 2c 6e 3d 72 28 35 36 38 37 30 29 2c 73 3d 72 28 31 33 35 37 30 29 2c 69 3d 28 72 28 39 38 39 31 29 2c 72 28 34 38 37 30 34 29 29 2c 61 3d 72 28 31 36 36 34 35 29 2c 62 3d 72 28 36 32 38 33 32 29 2c 6c 3d 72 28 31 34 37 33 36 29 2c 64 3d 72 28 39 32 36 31 39 29 2c 63 3d 72 28 33 35 30 33 39 29 2c 70 3d 72 28 37 33 36 30 38 29 2c 75 3d 72 28 39 34 31 37 Data Ascii: 3b27"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[87379,8142,39626],{87379:(o,e,r)=>{var t=r(22894),n=r(56870),s=r(13570),i=(r(9891),r(48704)),a=r(16645),b=r(62832),l=r(14736),d=r(92619),c=r(35039),p=r(73608),u=r(9417
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 6e 74 73 22 3d 3d 3d 72 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 72 29 3f 54 28 6f 2c 65 29 3a 76 6f 69 64 20 30 7d 7d 28 6f 2c 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d Data Ascii: nts"===r\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(r)?T(o,e):void 0}}(o,e)\|\|function(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 6c 61 73 74 5f 6d 6f 64 69 66 69 63 61 74 69 6f 6e 5f 64 61 74 65 2d 22 2c 61 74 74 72 69 62 75 74 65 73 3a 5b 22 6e 61 6d 65 22 2c 22 74 6f 70 5f 69 63 6f 6e 5f 6d 64 35 22 5d 7d 29 2c 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 73 2e 6c 6f 61 64 28 29 7d 66 69 6c 74 65 72 43 6f 6c 6c 65 63 74 69 6f 6e 73 46 6f 72 6d 53 75 62 6d 69 74 74 65 64 28 6f 29 7b 6f 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 6f 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 3b 63 6f 6e 73 74 20 65 3d 6f 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2c 72 3d 6e 65 77 20 46 6f 72 6d 44 61 74 61 28 65 29 3b 74 68 69 73 2e 67 65 74 43 6f 6c 6c 65 63 74 69 6f 6e 73 28 72 2e 67 65 74 28 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 2d 66 69 6c 74 65 72 22 29 29 7d 72 65 73 65 74 Data Ascii: last_modification_date-",attributes:["name","top_icon_md5"]}),this.collections.load()}filterCollectionsFormSubmitted(o){o.preventDefault(),o.stopPropagation();const e=o.currentTarget,r=new FormData(e);this.getCollections(r.get("collections-filter"))}reset
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 6f 69 64 20 30 3a 73 2e 6c 65 6e 67 74 68 29 3e 31 3f 22 73 22 3a 22 22 7d 20 74 6f 20 27 24 7b 62 2e 64 61 74 61 2e 6e 61 6d 65 7d 27 60 2c 67 2e 4d 2e 4d 41 58 5f 44 45 4c 41 59 2c 21 30 29 3b 63 6f 6e 73 74 20 64 3d 28 6e 75 6c 6c 21 3d 3d 28 69 3d 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 6c 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 3f 69 3a 7b 7d 29 2e 6d 61 70 28 28 6f 3d 3e 7b 76 61 72 20 65 3b 6c 65 74 20 72 3d 45 28 6f 2c 32 29 2c 74 3d 72 5b 30 5d 2c 6e 3d 72 5b 31 5d 3b 69 66 28 6e 75 6c 6c 3d 3d 6e 7c 7c 6e 75 6c 6c 3d 3d 3d 28 65 3d 6e 2e 64 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 21 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 3b 72 65 74 75 72 6e 20 62 5b 22 69 70 5f 61 Data Ascii: oid 0:s.length)>1?"s":""} to '${b.data.name}'`,g.M.MAX_DELAY,!0);const d=(null!==(i=Object.entries(l))&&void 0!==i?i:{}).map((o=>{var e;let r=E(o,2),t=r[0],n=r[1];if(null==n\|\|null===(e=n.data)\|\|void 0===e\|\|!e.length)return Promise.resolve();return b["ip_a
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 2e 72 65 76 65 72 73 65 28 29 3a 5b 5d 3b 72 65 74 75 72 6e 28 30 2c 69 2e 68 74 6d 6c 29 28 6b 7c 7c 28 6b 3d 24 60 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 64 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 20 70 73 2d 33 22 3e 20 24 7b 30 7d 20 3c 2f 73 70 61 6e 3e 60 29 2c 6e 75 6c 6c 21 3d 72 26 26 72 2e 6c 65 6e 67 74 68 3f 72 3a 28 30 2c 69 2e 68 74 6d 6c 29 28 78 7c 7c 28 78 3d 24 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6f 76 65 72 66 6c 6f 77 2d 68 69 64 64 65 6e 20 72 6f 75 6e 64 65 64 2d 63 69 72 63 6c 65 20 62 6f 72 64 65 72 20 62 67 2d 77 68 69 74 65 20 70 2d 31 20 66 73 2d 34 20 64 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 22 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 31 72 65 6d 22 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 60 29 2c 63 2e Data Ascii: .reverse():[];return(0,i.html)(k\|\|(k=$`<span class="d-inline-flex ps-3"> ${0} </span>`),null!=r&&r.length?r:(0,i.html)(x\|\|(x=$` <div class="overflow-hidden rounded-circle border bg-white p-1 fs-4 d-inline-flex" style="margin-left: -1rem"> ${0} </div>`),c.
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 3d 22 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 20 68 73 74 61 63 6b 20 24 7b 30 7d 22 20 64 61 74 61 2d 63 6f 6c 6c 65 63 74 69 6f 6e 2d 69 64 3d 22 24 7b 30 7d 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 3e 20 24 7b 30 7d 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 73 2d 32 20 74 65 78 74 2d 77 72 61 70 22 3e 24 7b 30 7d 3c 2f 73 70 61 6e 3e 20 3c 2f 62 75 74 74 6f 6e 3e 60 29 2c 28 30 2c 62 2e 63 6c 61 73 73 4d 61 70 29 28 7b 22 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 30 22 3a 65 3d 3d 3d 28 6e 75 6c 6c 3d 3d 3d 28 72 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 73 2e 64 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 72 2e 6c 65 6e 67 74 68 29 2d 31 7d 29 2c 6f 2e 64 61 74 61 2e 69 64 2c 74 68 69 73 2e 63 6f 6c 6c 65 63 74 Data Ascii: ="dropdown-item hstack ${0}" data-collection-id="${0}" @click="${0}"> ${0} <span class="ms-2 text-wrap">${0}</span> </button>`),(0,b.classMap)({"border-bottom-0":e===(null===(r=this.collections.data)\|\|void 0===r?void 0:r.length)-1}),o.data.id,this.collect
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 6f 76 65 72 22 2c 74 68 69 73 2e 6b 65 65 70 54 6f 61 73 74 56 69 73 69 62 6c 65 29 7d 64 69 73 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 28 29 7b 74 68 69 73 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 6f 76 65 72 22 2c 74 68 69 73 2e 6b 65 65 70 54 6f 61 73 74 56 69 73 69 62 6c 65 29 2c 73 75 70 65 72 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 28 29 7d 72 65 6e 64 65 72 28 29 7b 72 65 74 75 72 6e 28 30 2c 74 2e 68 74 6d 6c 29 28 61 7c 7c 28 61 3d 62 60 20 3c 73 6c 6f 74 3e 3c 2f 73 6c 6f 74 3e 20 60 29 29 7d 75 70 64 61 74 65 64 28 6f 29 7b 6f 2e 68 61 73 28 22 6f 70 65 6e 65 64 22 29 26 26 74 68 69 73 2e 6f 70 65 6e 65 64 4f 62 73 65 Data Ascii: entListener("mouseover",this.keepToastVisible)}disconnectedCallback(){this.removeEventListener("mouseover",this.keepToastVisible),super.disconnectedCallback()}render(){return(0,t.html)(a\|\|(a=b` <slot></slot> `))}updated(o){o.has("opened")&&this.openedObse
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 69 6c 74 65 72 28 28 6f 3d 3e 6e 75 6c 6c 21 3d 3d 6f 29 29 7d 75 70 64 61 74 65 4e 61 6d 65 46 69 6c 74 65 72 28 6f 29 7b 74 68 69 73 2e 70 61 72 61 6d 73 2e 66 69 6c 74 65 72 3d 60 6e 61 6d 65 3a 24 7b 6f 7d 60 2c 74 68 69 73 2e 72 65 6c 6f 61 64 28 29 7d 7d 7d 2c 33 35 30 33 39 3a 28 6f 2c 65 2c 72 29 3d 3e 7b 72 2e 72 28 65 29 2c 72 2e 64 28 65 2c 7b 63 6f 6c 6c 65 63 74 69 6f 6e 49 63 6f 6e 3a 28 29 3d 3e 74 2e 63 6f 6c 6c 65 63 74 69 6f 6e 49 63 6f 6e 7d 29 3b 76 61 72 20 74 3d 72 28 31 35 33 32 33 29 7d 2c 37 33 36 30 38 3a 28 6f 2c 65 2c 72 29 3d 3e 7b 72 2e 72 28 65 29 2c 72 2e 64 28 65 2c 7b 70 6c 75 73 49 63 6f 6e 3a 28 29 3d 3e 74 2e 70 6c 75 73 49 63 6f 6e 7d 29 3b 76 61 72 20 74 3d 72 28 31 35 33 32 33 29 7d 2c 34 38 36 37 36 3a 28 6f 2c 65 Data Ascii: ilter((o=>null!==o))}updateNameFilter(o){this.params.filter=`name:${o}`,this.reload()}}},35039:(o,e,r)=>{r.r(e),r.d(e,{collectionIcon:()=>t.collectionIcon});var t=r(15323)},73608:(o,e,r)=>{r.r(e),r.d(e,{plusIcon:()=>t.plusIcon});var t=r(15323)},48676:(o,e
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 45 29 5c 6e 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 73 2d 62 6c 75 65 3a 20 23 30 62 34 64 64 61 3b 2d 2d 62 73 2d 69 6e 64 69 67 6f 3a 20 23 36 36 31 30 66 32 3b 2d 2d 62 73 2d 70 75 72 70 6c 65 3a 20 23 36 66 34 32 63 31 3b 2d 2d 62 73 2d 70 69 6e 6b 3a 20 23 30 30 30 30 30 30 3b 2d 2d 62 73 2d 72 65 64 3a 20 23 63 35 32 34 32 30 3b 2d 2d 62 73 2d 6f 72 61 6e 67 65 3a 20 23 65 35 37 33 30 30 3b 2d 2d 62 73 2d 79 65 6c 6c 6f 77 3a 20 23 66 63 65 39 36 37 3b 2d 2d 62 73 2d 67 72 65 65 6e 3a 20 23 33 39 61 63 34 63 3b 2d 2d 62 73 2d 74 65 61 6c 3a 20 23 32 30 63 39 39 37 3b 2d 2d 62 73 2d 63 79 61 6e 3a 20 23 32 38 37 62 62 35 3b 2d 2d 62 73 2d 62 6c 61 63 6b 3a 20 23 30 30 30 3b 2d 2d 62 73 2d 77 68 69 74 65 3a 20 23 66 66 66 3b 2d 2d 62 73 2d 67 72 61 79 3a Data Ascii: E)\n */:root{--bs-blue: #0b4dda;--bs-indigo: #6610f2;--bs-purple: #6f42c1;--bs-pink: #000000;--bs-red: #c52420;--bs-orange: #e57300;--bs-yellow: #fce967;--bs-green: #39ac4c;--bs-teal: #20c997;--bs-cyan: #287bb5;--bs-black: #000;--bs-white: #fff;--bs-gray:
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 73 2d 69 6e 66 6f 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 39 39 63 61 66 35 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 66 35 63 37 39 39 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 65 38 61 37 61 36 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 66 32 66 32 66 32 3b 2d 2d 62 73 2d 64 61 72 6b 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 62 33 62 33 62 33 3b 2d 2d 62 73 2d 77 68 69 74 65 2d 72 67 62 3a 20 32 35 35 2c 20 32 35 35 2c 20 32 35 35 3b 2d 2d 62 73 2d 62 6c 61 63 6b 2d 72 67 62 3a 20 30 2c 20 30 2c 20 30 3b 2d 2d 62 73 2d 66 6f 6e 74 2d 73 61 6e 73 2d 73 65 72 69 66 3a 20 22 53 6f 75 72 63 65 20 53 61 6e Data Ascii: s-info-border-subtle: #99caf5;--bs-warning-border-subtle: #f5c799;--bs-danger-border-subtle: #e8a7a6;--bs-light-border-subtle: #f2f2f2;--bs-dark-border-subtle: #b3b3b3;--bs-white-rgb: 255, 255, 255;--bs-black-rgb: 0, 0, 0;--bs-font-sans-serif: "Source San

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.18	60906	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:02 UTC	511	OUT	GET /gui/64098.3377bd9636d2bbe06657.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:02 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:02 GMT expires: Thu, 15 Jan 2026 16:45:02 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 15ef35adbd8f3c02a33c19944a6420bc content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:02 UTC	1003	IN	Data Raw: 33 39 65 37 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 34 30 39 38 2c 38 37 39 36 30 2c 36 37 31 37 33 5d 2c 7b 33 32 36 37 34 3a 28 74 2c 65 2c 6f 29 3d 3e 7b 6f 28 39 38 39 31 29 3b 76 61 72 20 72 3d 6f 28 34 38 37 30 34 29 2c 69 3d 6f 28 31 36 36 34 35 29 2c 73 3d 6f 28 37 32 39 37 30 29 2c 6c 3d 6f 28 34 35 32 34 31 29 2c 6e 3d 6f 28 39 35 36 38 38 29 2c 61 3d 6f 28 37 31 30 31 32 29 2c 63 3d 6f 28 32 31 33 30 32 29 3b 6c 65 74 20 64 2c 62 2c 68 2c 70 2c 75 2c 6d 2c 67 2c 66 2c 76 2c 79 3d 74 3d 3e 74 3b 66 75 6e 63 74 69 6f 6e 20 77 28 74 2c Data Ascii: 39e7"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[64098,87960,67173],{32674:(t,e,o)=>{o(9891);var r=o(48704),i=o(16645),s=o(72970),l=o(45241),n=o(95688),a=o(71012),c=o(21302);let d,b,h,p,u,m,g,f,v,y=t=>t;function w(t,
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e 6f 6e 2d 69 74 65 72 61 62 6c 65 20 69 6e 73 74 61 6e 63 65 2e 5c 6e 49 6e 20 6f 72 64 65 72 20 74 6f 20 62 65 20 69 74 65 72 61 62 6c 65 2c 20 6e 6f 6e 2d 61 72 72 61 79 20 6f 62 6a 65 63 74 73 20 6d 75 73 74 20 68 61 76 65 20 61 20 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 20 6d 65 74 68 6f 64 2e 22 29 7d 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 74 2c 65 29 7b 28 6e 75 6c 6c 3d 3d 65 7c 7c 65 3e 74 2e 6c 65 6e 67 74 68 29 26 26 28 65 3d 74 2e 6c 65 6e 67 74 68 29 3b 66 6f 72 28 76 61 72 20 6f 3d 30 2c 72 3d 41 72 72 61 79 28 65 29 3b 6f 3c 65 3b 6f 2b 2b 29 72 5b 6f 5d 3d 74 5b 6f 5d 3b 72 Data Ascii: ow new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [Symbol.iterator]() method.")}()}function k(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var o=0,r=Array(e);o<e;o++)r[o]=t[o];r
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 2c 69 3d 65 5b 31 5d 3b 72 65 74 75 72 6e 28 30 2c 72 2e 68 74 6d 6c 29 28 70 7c 7c 28 70 3d 79 60 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 62 2d 32 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 77 2d 62 6f 6c 64 22 3e 24 7b 30 7d 3c 2f 64 69 76 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 60 29 2c 24 5b 6f 5d 2c 6e 75 6c 6c 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 6d 61 70 28 28 74 3d 3e 28 30 2c 72 2e 68 74 6d 6c 29 28 75 7c 7c 28 75 3d 79 60 3c 64 69 76 3e 24 7b 30 7d 3c 2f 64 69 76 3e 60 29 2c 74 68 69 73 2e 67 65 74 52 65 6c 61 74 65 64 4e 61 6d 65 28 74 29 29 29 29 29 7d 29 29 29 7d 67 65 74 52 65 6c 61 74 65 64 4e 61 6d 65 28 74 29 7b 76 61 72 20 65 2c 6f 3b 73 77 69 74 63 68 28 74 2e 74 79 70 65 29 7b 63 61 73 65 22 63 6f 6c 6c 65 63 74 69 6f 6e 22 3a 72 Data Ascii: ,i=e[1];return(0,r.html)(p\|\|(p=y`<div class="mb-2"> <div class="fw-bold">${0}</div> ${0} </div>`),$[o],null==i?void 0:i.map((t=>(0,r.html)(u\|\|(u=y`<div>${0}</div>`),this.getRelatedName(t)))))})))}getRelatedName(t){var e,o;switch(t.type){case"collection":r
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 79 7d 29 5d 2c 52 2e 70 72 6f 74 6f 74 79 70 65 2c 22 72 65 6c 61 74 65 64 46 72 6f 6d 4c 69 73 74 22 2c 76 6f 69 64 20 30 29 2c 78 28 5b 28 30 2c 69 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 4e 75 6d 62 65 72 7d 29 5d 2c 52 2e 70 72 6f 74 6f 74 79 70 65 2c 22 74 6f 74 61 6c 52 65 6c 61 74 65 64 46 72 6f 6d 22 2c 76 6f 69 64 20 30 29 2c 78 28 5b 28 30 2c 69 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 7d 29 5d 2c 52 2e 70 72 6f 74 6f 74 79 70 65 2c 22 68 65 61 64 65 72 22 2c 76 6f 69 64 20 30 29 2c 52 3d 78 28 5b 28 30 2c 69 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 29 28 22 76 74 2d 75 69 2d 72 65 6c 61 74 65 64 2d 66 72 6f 6d 22 29 5d 2c 52 29 7d 2c 39 32 37 34 37 3a 28 74 2c 65 2c 6f 29 3d 3e 7b 6f 2e 64 28 65 2c 7b Data Ascii: y})],R.prototype,"relatedFromList",void 0),x([(0,i.property)({type:Number})],R.prototype,"totalRelatedFrom",void 0),x([(0,i.property)({type:Boolean})],R.prototype,"header",void 0),R=x([(0,i.customElement)("vt-ui-related-from")],R)},92747:(t,e,o)=>{o.d(e,{
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 29 6c 3d 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 28 74 2c 65 2c 6f 2c 72 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 6e 3e 3d 30 3b 6e 2d 2d 29 28 69 3d 74 5b 6e 5d 29 26 26 28 6c 3d 28 73 3c 33 3f 69 28 6c 29 3a 73 3e 33 3f 69 28 65 2c 6f 2c 6c 29 3a 69 28 65 2c 6f 29 29 7c 7c 6c 29 3b 72 65 74 75 72 6e 20 73 3e 33 26 26 6c 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6f 2c 6c 29 2c 6c 7d 3b 63 6f 6e 73 74 20 43 3d 5b 7b 6b 65 79 3a 22 66 69 6c 65 73 5f 63 6f 75 6e 74 22 2c 6e 61 6d 65 3a 22 46 69 6c 65 73 22 7d 2c Data Ascii: "==typeof Reflect&&"function"==typeof Reflect.decorate)l=Reflect.decorate(t,e,o,r);else for(var n=t.length-1;n>=0;n--)(i=t[n])&&(l=(s<3?i(l):s>3?i(e,o,l):i(e,o))\|\|l);return s>3&&l&&Object.defineProperty(e,o,l),l};const C=[{key:"files_count",name:"Files"},
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 74 61 74 73 20 68 73 74 61 63 6b 20 67 61 70 2d 34 20 74 65 78 74 2d 62 6f 64 79 2d 73 65 63 6f 6e 64 61 72 79 22 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 60 29 2c 68 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 63 6f 6c 6c 65 63 74 69 6f 6e 22 2c 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 69 64 29 2c 74 68 69 73 2e 72 65 71 75 65 73 74 52 65 70 6f 72 74 4f 70 65 6e 69 6e 67 2c 6e 75 6c 6c 21 3d 3d 28 6f 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 26 26 76 6f 69 64 20 30 21 3d 3d 6f 26 26 6e 75 6c 6c 21 3d 3d 28 6f Data Ascii: ${0} </div> <div class="stats hstack gap-4 text-body-secondary"> ${0} </div> </div> </div> `),h.Z8.getRedirectUrl("collection",null===(e=this.collection)\|\|void 0===e?void 0:e.id),this.requestReportOpening,null!==(o=this.collection)&&void 0!==o&&null!==(o
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 3d 3d 3d 28 61 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 28 61 3d 61 2e 6f 77 6e 65 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 69 64 7d 60 29 2c 21 31 2c 6e 75 6c 6c 3d 3d 3d 28 75 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 75 7c 7c 6e 75 6c 6c 3d 3d 3d 28 75 3d 75 2e 6f 77 6e 65 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 75 3f 76 6f 69 64 20 30 3a 75 2e 69 64 29 3a 73 2e 6e 6f 74 68 69 6e 67 2c 68 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 63 6f 6c 6c 65 63 74 69 6f 6e 22 2c 6e 75 6c 6c 3d 3d 3d 28 6d 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6d 3f 76 6f 69 64 Data Ascii: ===(a=this.collection)\|\|void 0===a\|\|null===(a=a.owner)\|\|void 0===a?void 0:a.id}`),!1,null===(u=this.collection)\|\|void 0===u\|\|null===(u=u.owner)\|\|void 0===u?void 0:u.id):s.nothing,h.Z8.getRedirectUrl("collection",null===(m=this.collection)\|\|void 0===m?void
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6f 72 69 67 69 6e 29 7d 72 65 6e 64 65 72 53 74 61 74 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 3f 28 30 2c 73 2e 68 74 6d 6c 29 28 78 7c 7c 28 78 3d 53 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 73 74 61 63 6b 20 67 61 70 2d 31 22 3e 20 24 7b 30 7d 3a 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 60 29 2c 65 2c 64 2e 77 39 2e 68 75 6d 61 6e 69 7a 65 43 6f 75 6e 74 28 74 7c 7c 30 29 29 3a 73 2e 6e 6f 74 68 69 6e 67 7d 72 65 71 75 65 73 74 52 65 70 6f 72 74 4f 70 65 6e 69 6e 67 28 74 29 7b 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 26 26 28 74 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 72 2e 68 34 2e 63 6f 6c 6c 65 63 74 6f 72 2e 63 6f 6c Data Ascii: d 0===t?void 0:t.origin)}renderStat(t,e){return t?(0,s.html)(x\|\|(x=S` <div class="hstack gap-1"> ${0}: ${0} </div> `),e,d.w9.humanizeCount(t\|\|0)):s.nothing}requestReportOpening(t){this.collection&&(t.stopPropagation(),t.preventDefault(),r.h4.collector.col
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 29 6c 3d 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 28 74 2c 65 2c 6f 2c 72 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 6e 3e 3d 30 3b 6e 2d 2d 29 28 69 3d 74 5b 6e 5d 29 26 26 28 6c 3d 28 73 3c 33 3f 69 28 6c 29 3a 73 3e 33 3f 69 28 65 2c 6f 2c 6c 29 3a 69 28 65 2c 6f 29 29 7c 7c 6c 29 3b 72 65 74 75 72 6e 20 73 3e 33 26 26 6c 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6f 2c 6c 29 2c 6c 7d 3b 6c 65 74 20 77 3d 28 63 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 72 2e 4c 69 74 45 6c 65 Data Ascii: ;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)l=Reflect.decorate(t,e,o,r);else for(var n=t.length-1;n>=0;n--)(i=t[n])&&(l=(s<3?i(l):s>3?i(e,o,l):i(e,o))\|\|l);return s>3&&l&&Object.defineProperty(e,o,l),l};let w=(c=class extends r.LitEle
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 55 6e 73 65 6c 65 63 74 65 64 2c 73 2e 61 72 72 6f 77 52 69 67 68 74 41 72 72 6f 77 4c 65 66 74 49 63 6f 6e 29 3a 72 2e 6e 6f 74 68 69 6e 67 2c 74 68 69 73 2e 73 68 6f 77 53 6f 75 72 63 65 43 6f 6c 75 6d 6e 28 74 68 69 73 2e 64 61 74 61 29 3f 28 30 2c 72 2e 68 74 6d 6c 29 28 70 7c 7c 28 70 3d 76 60 20 3c 74 68 20 63 6c 61 73 73 3d 22 63 6f 6c 20 74 65 78 74 2d 63 65 6e 74 65 72 20 74 65 78 74 2d 6e 6f 77 72 61 70 22 3e 20 4f 76 65 72 6c 61 70 70 69 6e 67 20 49 6f 43 73 20 3c 2f 74 68 3e 20 60 29 29 3a 72 2e 6e 6f 74 68 69 6e 67 29 2c 21 74 68 69 73 2e 6c 6f 61 64 69 6e 67 7c 7c 6e 75 6c 6c 21 3d 3d 28 74 3d 74 68 69 73 2e 64 61 74 61 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 26 26 74 2e 6c 65 6e 67 74 68 3f 72 2e 6e 6f 74 68 69 6e 67 3a 5b 2e 2e 2e 6e 65 77 Data Ascii: Unselected,s.arrowRightArrowLeftIcon):r.nothing,this.showSourceColumn(this.data)?(0,r.html)(p\|\|(p=v` <th class="col text-center text-nowrap"> Overlapping IoCs </th> `)):r.nothing),!this.loading\|\|null!==(t=this.data)&&void 0!==t&&t.length?r.nothing:[...new

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.18	60907	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:02 UTC	511	OUT	GET /gui/85236.f2afef810314bd199050.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:02 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:02 GMT expires: Thu, 15 Jan 2026 16:45:02 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 878e615cfeed13d3eea6923f682cfd89 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 33 66 65 33 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 35 32 33 36 5d 2c 7b 38 35 32 33 36 3a 28 65 2c 6f 2c 74 29 3d 3e 7b 76 61 72 20 72 3d 74 28 32 32 38 39 34 29 2c 73 3d 74 28 35 36 38 37 30 29 2c 69 3d 74 28 34 38 37 30 34 29 2c 6e 3d 74 28 31 36 36 34 35 29 2c 61 3d 74 28 36 32 38 33 32 29 2c 64 3d 74 28 38 35 32 30 30 29 2c 62 3d 74 28 39 32 36 31 39 29 2c 6c 3d 74 28 36 31 37 32 30 29 2c 63 3d 74 28 39 34 31 37 29 2c 75 3d 74 28 34 35 32 34 31 29 2c 70 3d 74 28 39 35 36 38 38 29 2c 67 3d 74 28 34 34 30 35 32 29 3b 66 75 6e 63 74 69 6f 6e Data Ascii: 3fe3"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[85236],{85236:(e,o,t)=>{var r=t(22894),s=t(56870),i=t(48704),n=t(16645),a=t(62832),d=t(85200),b=t(92619),l=t(61720),c=t(9417),u=t(45241),p=t(95688),g=t(44052);function
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 74 2e 66 69 6e 64 28 65 29 3a 74 2e 72 65 73 75 6c 74 73 3d 76 6f 69 64 20 30 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 72 2c 73 29 7b 76 61 72 20 69 3d 6f 2e 61 70 70 6c 79 28 65 2c 74 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 6d 28 69 2c 72 2c 73 2c 6e 2c 61 2c 22 6e 65 78 74 22 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 6d 28 69 2c 72 2c 73 2c 6e 2c 61 2c 22 74 68 72 6f 77 22 2c 65 29 7d 6e 28 76 6f 69 64 20 30 29 7d 29 29 7d 29 28 29 7d 74 69 63 6b 65 64 28 65 29 7b 74 68 69 73 2e 63 6f 6d 70 6c 65 74 65 52 61 74 65 3d 31 30 30 2a 65 2e 70 72 6f 67 72 65 73 73 7d 66 69 6e 69 73 68 65 Data Ascii: t.find(e):t.results=void 0},function(){var e=this,t=arguments;return new Promise((function(r,s){var i=o.apply(e,t);function n(e){m(i,r,s,n,a,"next",e)}function a(e){m(i,r,s,n,a,"throw",e)}n(void 0)}))})()}ticked(e){this.completeRate=100*e.progress}finishe
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 69 73 61 62 6c 65 64 43 68 69 6c 64 72 65 6e 28 29 7b 76 61 72 20 65 2c 6f 2c 74 2c 72 3b 74 68 69 73 2e 73 65 6c 65 63 74 65 64 46 69 6c 65 73 2e 6c 65 6e 67 74 68 3c 32 3f 28 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 5b 30 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 2c 22 22 29 2c 6e 75 6c 6c 3d 3d 3d 28 6f 3d 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 5b 30 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 7c 7c 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 69 73 61 62 6c 65 64 22 2c 22 74 72 75 65 22 29 29 3a 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 5b 30 5d 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 2e Data Ascii: isabledChildren(){var e,o,t,r;this.selectedFiles.length<2?(null===(e=this.children[0])\|\|void 0===e\|\|e.setAttribute("disabled",""),null===(o=this.children[0])\|\|void 0===o\|\|o.setAttribute("aria-disabled","true")):(null===(t=this.children[0])\|\|void 0===t\|\|t.
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 6e 29 3b 72 65 74 75 72 6e 20 69 3e 33 26 26 6e 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6f 2c 74 2c 6e 29 2c 6e 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 5b 65 2e 61 6c 6c 3d 30 5d 3d 22 61 6c 6c 22 2c 65 5b 65 2e 73 65 6c 65 63 74 65 64 3d 31 5d 3d 22 73 65 6c 65 63 74 65 64 22 7d 28 6a 7c 7c 28 6a 3d 7b 7d 29 29 3b 6c 65 74 20 4b 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 69 2e 4c 69 74 45 6c 65 6d 65 6e 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 65 6e 74 69 74 69 65 73 3d 5b 5d 2c 74 68 69 73 2e 73 65 6c 65 63 74 65 64 49 74 65 6d 73 3d 5b 5d 2c 74 68 69 73 2e 61 70 70 6c 79 42 6f 72 64 65 72 3d 21 31 2c 74 68 69 73 2e 69 73 4c 6f 61 Data Ascii: n);return i>3&&n&&Object.defineProperty(o,t,n),n};!function(e){e[e.all=0]="all",e[e.selected=1]="selected"}(j\|\|(j={}));let K=class extends i.LitElement{constructor(){super(...arguments),this.entities=[],this.selectedItems=[],this.applyBorder=!1,this.isLoa
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 65 63 74 65 64 45 6e 74 69 74 69 65 73 29 3a 28 75 2e 4b 4b 2e 73 68 6f 77 54 6f 61 73 74 28 6f 2c 22 4c 6f 61 64 69 6e 67 20 49 6f 43 73 22 2c 77 2e 4d 2e 4d 41 58 5f 44 45 4c 41 59 2c 21 30 29 2c 69 3d 79 69 65 6c 64 20 6f 2e 67 65 74 41 6c 6c 49 6f 63 73 49 64 73 28 29 2c 75 2e 4b 4b 2e 68 69 64 65 54 6f 61 73 74 28 6f 29 29 2c 75 2e 4b 4b 2e 73 65 6e 64 54 6f 56 54 47 72 61 70 68 28 6f 2c 69 29 2c 72 2e 68 34 2e 63 6f 6c 6c 65 63 74 6f 72 2e 63 6f 6c 6c 65 63 74 28 73 2e 4a 55 2e 49 4f 43 5f 56 49 45 57 2c 73 2e 5f 42 2e 4f 50 45 4e 5f 47 52 41 50 48 29 7d 29 29 28 29 7d 63 61 6c 63 75 6c 61 74 65 41 67 67 72 65 67 61 74 69 6f 6e 73 48 61 6e 64 6c 65 72 28 65 29 7b 76 61 72 20 6f 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 50 28 28 66 75 6e 63 74 69 6f 6e Data Ascii: ectedEntities):(u.KK.showToast(o,"Loading IoCs",w.M.MAX_DELAY,!0),i=yield o.getAllIocsIds(),u.KK.hideToast(o)),u.KK.sendToVTGraph(o,i),r.h4.collector.collect(s.JU.IOC_VIEW,s._B.OPEN_GRAPH)}))()}calculateAggregationsHandler(e){var o=this;return P((function
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 64 65 74 61 69 6c 3a 7b 61 63 74 69 6f 6e 3a 65 7d 7d 29 3b 74 68 69 73 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6f 29 7d 72 65 6e 64 65 72 28 29 7b 76 61 72 20 65 2c 6f 2c 74 2c 72 2c 73 2c 6e 2c 62 2c 6c 2c 63 2c 75 2c 70 2c 68 2c 6d 2c 76 2c 66 2c 77 2c 79 2c 6b 2c 78 2c 41 3b 72 65 74 75 72 6e 28 30 2c 69 2e 68 74 6d 6c 29 28 45 7c 7c 28 45 3d 46 60 20 3c 76 74 2d 75 69 2d 6d 65 6e 75 20 69 64 3d 22 6d 61 69 6e 22 20 63 6c 61 73 73 3d 22 70 6f 73 69 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 22 3e 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 24 7b 30 7d 20 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 20 66 77 2d 73 65 6d 69 62 6f 6c 64 22 20 73 6c 6f 74 3d 22 74 72 69 67 67 65 72 22 20 3f 64 69 Data Ascii: detail:{action:e}});this.dispatchEvent(o)}render(){var e,o,t,r,s,n,b,l,c,u,p,h,m,v,f,w,y,k,x,A;return(0,i.html)(E\|\|(E=F` <vt-ui-menu id="main" class="position-relative"> <button type="button" class="btn ${0} dropdown-toggle fw-semibold" slot="trigger" ?di
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 6c 61 73 73 4d 61 70 29 28 7b 22 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 30 22 3a 21 28 6e 75 6c 6c 21 3d 3d 28 6f 3d 67 2e 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 6f 26 26 6f 2e 76 74 69 41 63 63 65 73 73 29 7d 29 2c 74 68 69 73 2e 69 73 4c 6f 61 64 69 6e 67 7c 7c 21 74 68 69 73 2e 73 61 66 65 45 6e 74 69 74 69 65 73 2e 6c 65 6e 67 74 68 2c 74 68 69 73 2e 69 73 4c 6f 61 64 69 6e 67 7c 7c 21 74 68 69 73 2e 73 61 66 65 45 6e 74 69 74 69 65 73 2e 6c 65 6e 67 74 68 2c 28 28 29 3d 3e 74 68 69 73 2e 61 63 74 69 6f 6e 43 6c 69 63 6b 65 64 28 22 6f 70 65 6e 2d 76 74 67 72 61 70 68 22 29 29 29 3a 28 30 2c 69 2e 68 74 6d 6c 29 28 53 7c 7c 28 53 3d 46 60 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e Data Ascii: lassMap)({"border-bottom-0":!(null!==(o=g.NU.currentUser)&&void 0!==o&&o.vtiAccess)}),this.isLoading\|\|!this.safeEntities.length,this.isLoading\|\|!this.safeEntities.length,(()=>this.actionClicked("open-vtgraph"))):(0,i.html)(S\|\|(S=F` <button class="dropdown
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 65 53 65 6c 65 63 74 65 64 45 6e 74 69 74 69 65 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 6c 26 26 6c 2e 6c 65 6e 67 74 68 29 26 26 28 6e 75 6c 6c 3d 3d 3d 28 63 3d 67 2e 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 63 3f 76 6f 69 64 20 30 3a 63 2e 69 6e 73 69 67 68 74 73 41 63 63 65 73 73 29 26 26 21 74 68 69 73 2e 67 65 74 49 6e 73 69 67 68 74 73 41 67 67 72 65 67 61 74 69 6f 6e 73 46 72 6f 6d 41 6c 6c 7c 7c 21 28 6e 75 6c 6c 21 3d 3d 28 75 3d 67 2e 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 75 26 26 75 2e 69 6e 73 69 67 68 74 73 41 63 63 65 73 73 29 26 26 21 74 68 69 73 2e 73 61 66 65 53 65 6c 65 63 74 65 64 45 6e 74 69 74 69 65 73 2e 6c 65 6e 67 74 68 2c 21 74 68 69 73 2e 63 6f 6d 6d 6f Data Ascii: eSelectedEntities)&&void 0!==l&&l.length)&&(null===(c=g.NU.currentUser)\|\|void 0===c?void 0:c.insightsAccess)&&!this.getInsightsAggregationsFromAll\|\|!(null!==(u=g.NU.currentUser)&&void 0!==u&&u.insightsAccess)&&!this.safeSelectedEntities.length,!this.commo
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 20 64 61 74 61 2d 6f 70 74 69 6f 6e 3d 22 73 65 6c 65 63 74 65 64 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 20 64 61 74 61 2d 73 75 62 6d 65 6e 75 2d 63 6c 6f 73 65 2d 6f 6e 2d 63 6c 69 63 6b 20 3f 64 69 73 61 62 6c 65 64 3d 22 24 7b 30 7d 22 20 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 22 24 7b 30 7d 22 3e 20 53 65 6c 65 63 74 65 64 20 3c 2f 62 75 74 74 6f 6e 3e 20 3c 2f 76 74 2d 75 69 2d 73 75 62 6d 65 6e 75 3e 60 29 2c 28 28 29 3d 3e 74 68 69 73 2e 61 63 74 69 6f 6e 43 6c 69 63 6b 65 64 28 22 6f 70 65 6e 2d 76 74 67 72 61 70 68 2d 6d 65 6e 75 22 29 29 2c 28 65 3d 3e 7b 74 68 69 73 2e 61 63 74 69 6f 6e 43 6c 69 63 6b 65 64 28 22 6f 70 65 6e 2d 76 74 67 72 61 70 68 2d 6d 65 6e 75 2d 61 6c 6c 22 29 2c 74 68 69 73 2e 72 65 71 75 65 73 74 47 72 61 70 68 Data Ascii: data-option="selected" @click="${0}" data-submenu-close-on-click ?disabled="${0}" aria-disabled="${0}"> Selected </button> </vt-ui-submenu>`),(()=>this.actionClicked("open-vtgraph-menu")),(e=>{this.actionClicked("open-vtgraph-menu-all"),this.requestGraph
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 2d 63 6c 69 63 6b 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 20 3f 64 69 73 61 62 6c 65 64 3d 22 24 7b 30 7d 22 20 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 22 24 7b 30 7d 22 20 69 64 3d 22 63 61 6c 63 75 6c 61 74 65 2d 63 6f 6d 6d 6f 6e 61 6c 69 74 69 65 73 2d 61 6c 6c 2d 74 6f 6f 6c 73 2d 69 74 65 6d 2d 6d 65 6e 75 22 3e 20 41 6c 6c 20 3c 2f 62 75 74 74 6f 6e 3e 60 29 2c 28 65 3d 3e 7b 74 68 69 73 2e 61 63 74 69 6f 6e 43 6c 69 63 6b 65 64 28 22 63 61 6c 63 75 6c 61 74 65 2d 63 6f 6d 6d 6f 6e 61 6c 69 74 69 65 73 2d 6d 65 6e 75 2d 61 6c 6c 22 29 2c 74 68 69 73 2e 63 61 6c 63 75 6c 61 74 65 41 67 67 72 65 67 61 74 69 6f 6e 73 48 61 6e 64 6c 65 72 28 65 29 7d 29 2c 74 68 69 73 2e 69 73 4c 6f 61 64 69 6e 67 2c 74 68 69 73 2e 69 73 4c 6f 61 64 69 6e 67 29 3a Data Ascii: -click @click="${0}" ?disabled="${0}" aria-disabled="${0}" id="calculate-commonalities-all-tools-item-menu"> All </button>`),(e=>{this.actionClicked("calculate-commonalities-menu-all"),this.calculateAggregationsHandler(e)}),this.isLoading,this.isLoading):

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.18	60909	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:02 UTC	510	OUT	GET /gui/5200.cbf2a82371bebc862a72.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:02 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:02 GMT expires: Thu, 15 Jan 2026 16:45:02 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 6677e43140caa9a53d7770ffa588a5ec content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:02 UTC	1003	IN	Data Raw: 37 39 35 63 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 32 30 30 2c 32 33 33 39 37 2c 36 36 32 36 32 2c 38 39 38 38 30 2c 37 31 33 34 37 5d 2c 7b 38 36 32 36 30 3a 28 65 2c 74 2c 72 29 3d 3e 7b 76 61 72 20 6f 3d 72 28 34 38 37 30 34 29 2c 69 3d 72 28 31 36 36 34 35 29 2c 73 3d 72 28 36 30 32 36 35 29 3b 6c 65 74 20 6e 2c 61 2c 6c 3d 65 3d 3e 65 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6f 29 7b 76 61 72 20 69 2c 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 3d 73 3c 33 3f 74 3a 6e 75 6c 6c 3d 3d 3d 6f 3f 6f 3d Data Ascii: 795c"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[5200,23397,66262,89880,71347],{86260:(e,t,r)=>{var o=r(48704),i=r(16645),s=r(60265);let n,a,l=e=>e;var b=function(e,t,r,o){var i,s=arguments.length,n=s<3?t:null===o?o=
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 73 49 63 6f 6e 7d 2c 37 39 34 30 34 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 72 28 74 29 2c 72 2e 64 28 74 2c 7b 73 68 61 72 65 49 63 6f 6e 3a 28 29 3d 3e 6f 7d 29 3b 63 6f 6e 73 74 20 6f 3d 72 28 31 35 33 32 33 29 2e 61 72 72 6f 77 54 75 72 6e 52 69 67 68 74 46 72 6f 6d 53 71 75 61 72 65 49 63 6f 6e 7d 2c 38 30 31 39 32 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 28 39 38 39 31 29 3b 76 61 72 20 6f 3d 72 28 34 38 37 30 34 29 2c 69 3d 72 28 31 36 36 34 35 29 2c 73 3d 72 28 34 32 34 37 37 29 2c 6e 3d 72 28 37 33 36 30 38 29 2c 61 3d 72 28 37 31 30 31 32 29 2c 6c 3d 72 28 38 30 37 30 34 29 3b 6c 65 74 20 62 2c 64 2c 63 3d 65 3d 3e 65 3b 76 61 72 20 70 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6f 29 7b 76 61 72 20 69 2c 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 Data Ascii: sIcon},79404:(e,t,r)=>{r.r(t),r.d(t,{shareIcon:()=>o});const o=r(15323).arrowTurnRightFromSquareIcon},80192:(e,t,r)=>{r(9891);var o=r(48704),i=r(16645),s=r(42477),n=r(73608),a=r(71012),l=r(80704);let b,d,c=e=>e;var p=function(e,t,r,o){var i,s=arguments.le
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 6d 61 6c 6c 22 20 63 6c 61 73 73 3d 22 64 2d 62 6c 6f 63 6b 22 3e 3c 2f 73 6c 6f 74 3e 3c 2f 64 69 76 3e 3c 2f 73 70 61 6e 3e 20 3c 73 70 61 6e 20 73 6c 6f 74 3d 22 63 6f 6e 74 65 6e 74 22 3e 20 3c 73 6c 6f 74 20 6e 61 6d 65 3d 22 65 78 70 61 6e 64 61 62 6c 65 2d 63 6f 6e 74 65 6e 74 22 3e 3c 2f 73 6c 6f 74 3e 20 3c 2f 73 70 61 6e 3e 20 3c 2f 76 74 2d 75 69 2d 65 78 70 61 6e 64 61 62 6c 65 2d 64 65 74 61 69 6c 3e 60 29 2c 6e 2e 70 6c 75 73 49 63 6f 6e 2c 73 2e 69 6e 64 65 74 65 72 6d 69 6e 61 74 65 43 68 65 63 6b 42 6f 78 49 63 6f 6e 2c 74 68 69 73 2e 68 69 64 65 45 78 70 61 6e 64 61 62 6c 65 29 7d 7d 3b 70 28 5b 28 30 2c 69 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 7d 29 5d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2c 22 63 68 65 Data Ascii: mall" class="d-block"></slot></div></span> <span slot="content"> <slot name="expandable-content"></slot> </span> </vt-ui-expandable-detail>`),n.plusIcon,s.indeterminateCheckBoxIcon,this.hideExpandable)}};p([(0,i.property)({type:Boolean})],h.prototype,"che
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 65 3d 21 30 2c 74 68 69 73 2e 64 6f 74 49 6e 64 69 63 61 74 6f 72 3d 21 31 2c 74 68 69 73 2e 68 69 64 65 43 68 65 63 6b 62 6f 78 3d 21 31 2c 74 68 69 73 2e 73 68 6f 77 43 68 65 63 6b 62 6f 78 53 65 6c 65 63 74 41 6c 6c 3d 21 31 2c 74 68 69 73 2e 74 69 74 6c 65 73 52 6f 77 3d 5b 5d 2c 74 68 69 73 2e 6d 61 69 6e 52 6f 77 3d 5b 5d 2c 74 68 69 73 2e 69 66 4e 6f 74 4d 69 6e 69 6d 61 6c 3d 65 3d 3e 7b 72 65 74 75 72 6e 20 74 3d 21 74 68 69 73 2e 6d 69 6e 69 6d 61 6c 2c 72 3d 65 2c 74 3f 72 3a 28 30 2c 6f 2e 68 74 6d 6c 29 28 66 7c 7c 28 66 3d 42 60 60 29 29 3b 76 61 72 20 74 2c 72 7d 2c 74 68 69 73 2e 63 68 65 63 6b 65 64 43 68 61 6e 67 65 64 3d 65 3d 3e 7b 65 2e 64 65 74 61 69 6c 2e 76 61 6c 75 65 21 3d 3d 74 68 69 73 2e 63 68 65 63 6b 65 64 26 26 28 74 68 69 Data Ascii: e=!0,this.dotIndicator=!1,this.hideCheckbox=!1,this.showCheckboxSelectAll=!1,this.titlesRow=[],this.mainRow=[],this.ifNotMinimal=e=>{return t=!this.minimal,r=e,t?r:(0,o.html)(f\|\|(f=B``));var t,r},this.checkedChanged=e=>{e.detail.value!==this.checked&&(thi
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 76 61 72 20 74 3b 72 65 74 75 72 6e 21 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 21 74 2e 73 6f 75 72 63 65 73 29 26 26 65 2e 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 2e 73 6f 75 72 63 65 73 2e 6c 65 6e 67 74 68 3e 30 7d 75 70 64 61 74 65 28 65 29 7b 74 68 69 73 2e 6d 61 69 6e 52 6f 77 3d 5b 5d 2c 74 68 69 73 2e 74 69 74 6c 65 73 52 6f 77 3d 5b 5d 2c 74 68 69 73 2e 72 65 6e 64 65 72 4d 61 69 6e 43 6f 6c 75 6d 6e 28 29 2c 74 68 69 73 2e 72 65 6e 64 65 72 53 6f 75 72 63 65 43 6f 6c 75 6d 6e 28 29 2c 74 68 69 73 2e 72 65 6e 64 65 72 43 6f 6c 75 6d 6e 73 28 29 2c 74 68 69 73 2e 72 65 6e 64 65 72 45 78 74 72 61 43 6f 6c 75 6d 6e 73 28 29 2c 73 75 70 65 Data Ascii: var t;return!(null===(t=e.context_attributes)\|\|void 0===t\|\|!t.sources)&&e.context_attributes.sources.length>0}update(e){this.mainRow=[],this.titlesRow=[],this.renderMainColumn(),this.renderSourceColumn(),this.renderColumns(),this.renderExtraColumns(),supe
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 26 26 65 2e 72 65 6c 61 74 65 64 5f 66 72 6f 6d 26 26 74 68 69 73 2e 72 65 6e 64 65 72 43 6f 6c 75 6d 6e 28 22 53 6f 75 72 63 65 22 2c 22 72 65 6c 61 74 65 64 2d 66 72 6f 6d 20 63 65 6e 74 65 72 22 2c 28 30 2c 6f 2e 68 74 6d 6c 29 28 53 7c 7c 28 53 3d 42 60 20 3c 76 74 2d 75 69 2d 72 65 6c 61 74 65 64 2d 66 72 6f 6d 20 2e 72 65 6c 61 74 65 64 46 72 6f 6d 4c 69 73 74 3d 22 24 7b 30 7d 22 3e 3c 2f 76 74 2d 75 69 2d 72 65 6c 61 74 65 64 2d 66 72 6f 6d 3e 60 29 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 2e 72 65 6c 61 74 65 64 5f 66 72 6f 6d 29 29 7d 72 65 6e 64 65 72 43 6f 6c 75 6d 6e 28 65 2c 74 2c 72 29 7b 6c 65 74 20 69 3d 61 Data Ascii: ext_attributes)&&void 0!==e&&e.related_from&&this.renderColumn("Source","related-from center",(0,o.html)(S\|\|(S=B` <vt-ui-related-from .relatedFromList="${0}"></vt-ui-related-from>`),this.entity.context_attributes.related_from))}renderColumn(e,t,r){let i=a
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 22 29 7d 69 66 50 69 76 6f 74 61 62 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 69 76 6f 74 61 62 6c 65 3f 65 3a 76 6f 69 64 20 30 7d 5f 73 68 6f 77 50 6f 70 6f 76 65 72 28 65 29 7b 74 68 69 73 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 70 6f 70 6f 76 65 72 2d 72 65 71 75 65 73 74 65 64 22 2c 7b 62 75 62 62 6c 65 73 3a 21 30 2c 63 6f 6d 70 6f 73 65 64 3a 21 30 2c 64 65 74 61 69 6c 3a 7b 70 6f 70 6f 76 65 72 3a 65 2e 74 61 72 67 65 74 2e 64 61 74 61 73 65 74 2e 70 6f 70 6f 76 65 72 2c 74 61 72 67 65 74 3a 65 2e 74 61 72 67 65 74 2c 65 6e 74 69 74 79 3a 74 68 69 73 2e 65 6e 74 69 74 79 2c 70 6f 73 69 74 69 6f 6e 3a 65 2e 74 61 72 67 65 74 2e 64 61 74 61 73 65 74 2e 70 6f 70 6f 76 65 72 50 6f Data Ascii: ")}ifPivotable(e){return this.pivotable?e:void 0}_showPopover(e){this.dispatchEvent(new CustomEvent("popover-requested",{bubbles:!0,composed:!0,detail:{popover:e.target.dataset.popover,target:e.target,entity:this.entity,position:e.target.dataset.popoverPo
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 20 60 29 2c 68 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 74 68 69 73 2e 65 6e 74 69 74 79 55 72 6c 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 69 64 29 2c 74 68 69 73 2e 72 65 71 75 65 73 74 52 65 70 6f 72 74 4f 70 65 6e 69 6e 67 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 69 64 29 3a 28 30 2c 6f 2e 68 74 6d 6c 29 28 54 7c 7c 28 54 3d 42 60 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 65 63 6f 6e 64 61 72 79 22 3e 20 24 7b 30 7d 20 3c 2f 73 70 61 6e 3e 60 29 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 69 64 29 7d 74 65 78 74 54 6f 43 6f 70 79 54 6f 43 6c 69 70 62 6f 61 72 64 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6e 74 69 74 79 2e 69 64 7d 72 65 6e 64 65 72 44 6f 74 49 6e 64 69 63 61 74 6f 72 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 6f 74 49 Data Ascii: `),h.Z8.getRedirectUrl(this.entityUrl,this.entity.id),this.requestReportOpening,this.entity.id):(0,o.html)(T\|\|(T=B`<span class="secondary"> ${0} </span>`),this.entity.id)}textToCopyToClipboard(){return this.entity.id}renderDotIndicator(){return this.dotI
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 6e 64 65 72 52 75 6c 65 73 65 74 53 6f 75 72 63 65 28 65 2c 74 2c 72 29 7b 7d 72 65 6e 64 65 72 53 6f 75 72 63 65 43 6f 6c 75 6d 6e 28 29 7b 76 61 72 20 65 3b 69 66 28 21 74 68 69 73 2e 5f 69 73 43 6f 6c 6c 65 63 74 69 6f 6e 43 6f 6c 56 69 73 69 62 6c 65 28 74 68 69 73 2e 65 6e 74 69 74 79 29 29 72 65 74 75 72 6e 22 22 3b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 65 6e 74 69 74 79 2e 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 2e 73 6f 75 72 63 65 73 26 26 22 72 65 74 72 6f 68 75 6e 74 5f 6a 6f 62 22 3d 3d 3d 74 68 69 73 2e 65 6e 74 69 74 79 2e 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 2e 73 6f 75 72 63 65 73 5b 30 5d 2e 74 79 70 65 2c 72 3d 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 65 6e 74 69 74 79 2e 63 6f 6e 74 65 78 74 5f 61 74 Data Ascii: nderRulesetSource(e,t,r){}renderSourceColumn(){var e;if(!this._isCollectionColVisible(this.entity))return"";const t=this.entity.context_attributes.sources&&"retrohunt_job"===this.entity.context_attributes.sources[0].type,r=null===(e=this.entity.context_at
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 79 29 28 29 5d 2c 71 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 68 6f 77 43 68 65 63 6b 62 6f 78 53 65 6c 65 63 74 41 6c 6c 22 2c 76 6f 69 64 20 30 29 2c 55 28 5b 28 30 2c 69 2e 71 75 65 72 79 29 28 22 23 73 65 6c 65 63 74 41 6c 6c 49 6e 70 75 74 22 29 5d 2c 71 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 65 6c 65 63 74 41 6c 6c 49 6e 70 75 74 22 2c 76 6f 69 64 20 30 29 7d 2c 33 36 35 36 33 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 58 3a 28 29 3d 3e 45 7d 29 3b 72 28 39 38 39 31 29 3b 76 61 72 20 6f 3d 72 28 34 38 37 30 34 29 2c 69 3d 72 28 31 36 36 34 35 29 2c 73 3d 72 28 39 33 38 34 32 29 2c 6e 3d 72 28 34 35 32 34 31 29 2c 61 3d 72 28 37 31 30 31 32 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 Data Ascii: y)()],q.prototype,"showCheckboxSelectAll",void 0),U([(0,i.query)("#selectAllInput")],q.prototype,"selectAllInput",void 0)},36563:(e,t,r)=>{r.d(t,{X:()=>E});r(9891);var o=r(48704),i=r(16645),s=r(93842),n=r(45241),a=r(71012);function l(e,t){return function(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.18	60908	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:02 UTC	690	OUT	GET /gui/88687.5467bba500c091961968.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:02 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:02 GMT expires: Thu, 15 Jan 2026 16:45:02 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 04966ced1df8bfbdb55b38853dcc0764 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 33 66 65 33 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 36 38 37 5d 2c 7b 38 31 38 34 34 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 72 28 34 38 37 30 34 29 2c 6e 3d 72 28 31 36 36 34 35 29 2c 73 3d 72 28 34 35 32 34 31 29 2c 69 3d 72 28 38 32 36 39 36 29 3b 6c 65 74 20 61 2c 6c 2c 62 2c 64 2c 70 2c 63 3d 65 3d 3e 65 3b 76 61 72 20 68 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6f 29 7b 76 61 72 20 6e 2c 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 69 3d 73 3c 33 3f 74 3a 6e 75 6c 6c 3d 3d 3d 6f 3f 6f 3d 4f 62 6a 65 63 74 Data Ascii: 3fe3(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[88687],{81844:(e,t,r)=>{"use strict";var o=r(48704),n=r(16645),s=r(45241),i=r(82696);let a,l,b,d,p,c=e=>e;var h=function(e,t,r,o){var n,s=arguments.length,i=s<3?t:null===o?o=Object
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 70 65 6e 26 26 74 68 69 73 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 74 6f 70 2d 74 68 69 73 2e 6f 66 66 73 65 74 54 6f 54 6f 70 3c 30 26 26 73 2e 4b 4b 2e 67 65 74 43 6c 6f 73 65 73 74 53 63 72 6f 6c 6c 61 62 6c 65 50 61 72 65 6e 74 28 74 68 69 73 29 2e 73 63 72 6f 6c 6c 28 7b 74 6f 70 3a 74 68 69 73 2e 6f 66 66 73 65 74 54 6f 70 2d 74 68 69 73 2e 6f 66 66 73 65 74 54 6f 54 6f 70 2c 62 65 68 61 76 69 6f 72 3a 22 73 6d 6f 6f 74 68 22 7d 29 7d 72 65 6e 64 65 72 28 29 7b 72 65 74 75 72 6e 28 30 2c 6f 2e 68 74 6d 6c 29 28 61 7c 7c 28 61 3d 63 60 3c 64 69 76 20 69 64 3d 22 62 6f 64 79 22 20 63 6c 61 73 73 3d 22 70 6f 73 69 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 20 74 65 78 74 2d 62 72 65 61 6b 20 77 2d 31 30 30 20 6d 2d 30 20 Data Ascii: pen&&this.getBoundingClientRect().top-this.offsetToTop<0&&s.KK.getClosestScrollableParent(this).scroll({top:this.offsetTop-this.offsetToTop,behavior:"smooth"})}render(){return(0,o.html)(a\|\|(a=c`<div id="body" class="position-relative text-break w-100 m-0
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 29 69 3d 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 28 65 2c 74 2c 72 2c 6f 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 61 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 61 3e 3d 30 3b 61 2d 2d 29 28 6e 3d 65 5b 61 5d 29 26 26 28 69 3d 28 73 3c 33 3f 6e 28 69 29 3a 73 3e 33 3f 6e 28 74 2c 72 2c 69 29 3a 6e 28 74 2c 72 29 29 7c 7c 69 29 3b 72 65 74 75 72 6e 20 73 3e 33 26 26 69 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 72 2c 69 29 2c 69 7d 3b 6c 65 74 20 78 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 70 2e 44 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c Data Ascii: t&&"function"==typeof Reflect.decorate)i=Reflect.decorate(e,t,r,o);else for(var a=e.length-1;a>=0;a--)(n=e[a])&&(i=(s<3?n(i):s>3?n(t,r,i):n(t,r))\|\|i);return s>3&&i&&Object.defineProperty(t,r,i),i};let x=class extends p.D{constructor(){super(...arguments),
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 63 6f 6e 64 61 72 79 22 20 68 72 65 66 3d 22 24 7b 30 7d 22 20 74 61 72 67 65 74 3d 22 24 7b 30 7d 22 3e 20 24 7b 30 7d 20 3c 2f 61 3e 20 3c 2f 73 70 61 6e 3e 20 60 29 2c 74 68 69 73 2e 5f 69 63 6f 6e 54 79 70 65 2c 28 30 2c 6c 2e 69 66 44 65 66 69 6e 65 64 29 28 74 68 69 73 2e 69 74 65 6d 55 72 6c 29 2c 65 2c 74 68 69 73 2e 5f 73 6d 61 6c 6c 3f 74 68 69 73 2e 69 74 65 6d 54 79 70 65 3a 74 68 69 73 2e 69 74 65 6d 49 64 29 29 7d 5f 72 65 6e 64 65 72 4c 69 6e 6b 73 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 65 6c 65 74 61 62 6c 65 3f 28 30 2c 6e 2e 68 74 6d 6c 29 28 79 7c 7c 28 79 3d 76 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 73 22 3e 20 3c 76 74 2d 75 69 2d 62 75 74 74 6f 6e 20 69 64 3d 22 62 74 6e 2d 64 65 6c 65 74 65 22 20 69 63 6f 6e Data Ascii: condary" href="${0}" target="${0}"> ${0} </a> </span> `),this._iconType,(0,l.ifDefined)(this.itemUrl),e,this._small?this.itemType:this.itemId))}_renderLinks(){return this.deletable?(0,n.html)(y\|\|(y=v` <div class="links"> <vt-ui-button id="btn-delete" icon
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 6d 6c 22 2c 76 6f 69 64 20 30 29 2c 77 28 5b 28 30 2c 73 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 53 74 72 69 6e 67 7d 29 5d 2c 78 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 74 65 6d 55 72 6c 22 2c 76 6f 69 64 20 30 29 2c 77 28 5b 28 30 2c 73 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 53 74 72 69 6e 67 7d 29 5d 2c 78 2e 70 72 6f 74 6f 74 79 70 65 2c 22 61 75 74 68 6f 72 43 6f 6d 6d 65 6e 74 73 50 61 74 68 22 2c 76 6f 69 64 20 30 29 2c 77 28 5b 28 30 2c 73 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 53 74 72 69 6e 67 7d 29 5d 2c 78 2e 70 72 6f 74 6f 74 79 70 65 2c 22 64 61 74 65 22 2c 76 6f 69 64 20 30 29 2c 77 28 5b 28 30 2c 73 2e 73 74 61 74 65 29 28 29 5d 2c 78 2e 70 72 6f 74 6f 74 79 70 65 2c 22 5f 75 6e 69 78 74 69 6d 65 44 61 74 Data Ascii: ml",void 0),w([(0,s.property)({type:String})],x.prototype,"itemUrl",void 0),w([(0,s.property)({type:String})],x.prototype,"authorCommentsPath",void 0),w([(0,s.property)({type:String})],x.prototype,"date",void 0),w([(0,s.state)()],x.prototype,"_unixtimeDat
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 22 20 40 76 74 2d 75 69 2d 63 6f 6d 6d 65 6e 74 2d 64 65 6c 65 74 65 3d 22 24 7b 30 7d 22 3e 3c 2f 76 74 2d 75 69 2d 63 6f 6d 6d 65 6e 74 3e 20 60 29 2c 65 2e 61 75 74 68 6f 72 49 64 2c 65 2e 64 61 74 65 2c 65 2e 69 74 65 6d 49 64 7c 7c 65 2e 69 64 2c 65 2e 69 74 65 6d 54 79 70 65 2c 65 2e 63 6f 6d 6d 65 6e 74 48 74 6d 6c 2c 74 68 69 73 2e 5f 69 73 44 65 6c 65 74 61 62 6c 65 28 65 2e 61 75 74 68 6f 72 49 64 2c 74 68 69 73 2e 75 73 65 72 49 64 29 2c 74 68 69 73 2e 73 68 6f 77 55 73 65 72 2c 65 2e 69 74 65 6d 55 72 6c 2c 65 2e 61 75 74 68 6f 72 43 6f 6d 6d 65 6e 74 73 50 61 74 68 2c 74 68 69 73 2e 68 69 64 65 49 74 65 6d 4c 69 6e 6b 2c 65 2e 63 6f 6d 6d 65 6e 74 49 64 2c 74 68 69 73 2e 5f 68 61 6e 64 6c 65 44 65 6c 65 74 65 29 29 29 7d 67 65 74 20 5f 69 73 Data Ascii: " @vt-ui-comment-delete="${0}"></vt-ui-comment> `),e.authorId,e.date,e.itemId\|\|e.id,e.itemType,e.commentHtml,this._isDeletable(e.authorId,this.userId),this.showUser,e.itemUrl,e.authorCommentsPath,this.hideItemLink,e.commentId,this._handleDelete)))}get _is
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 5c 6e 7d 5c 6e 61 2e 73 68 6f 77 2d 6d 6f 72 65 20 7b 5c 6e 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 63 6f 6c 6f 72 29 3b 5c 6e 7d 5c 6e 61 3a 68 6f 76 65 72 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 76 74 2d 75 69 2d 63 6f 6d 6d 65 6e 74 2d 6c 69 6e 6b 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 2c 20 76 61 72 28 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2c 20 23 32 37 37 32 64 62 29 29 3b 5c 6e 7d 5c 6e 61 2e 6e 6f 2d 62 6f 72 64 65 72 20 7b 5c 6e 20 20 62 6f 72 64 65 72 3a 20 30 3b 5c 6e 7d 5c 6e 23 75 73 65 72 6e 61 6d 65 20 61 20 7b 5c 6e 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 5c 6e 7d Data Ascii: sor: pointer;\n}\na.show-more {\n font-weight: bold;\n color: var(--bs-tertiary-color);\n}\na:hover {\n color: var(--vt-ui-comment-link-hover-color, var(--bs-primary, #2772db));\n}\na.no-border {\n border: 0;\n}\n#username a {\n font-weight: bold;\n}
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 78 3b 5c 6e 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 3b 5c 6e 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 5c 6e 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 38 70 78 3b 5c 6e 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 30 3b 5c 6e 7d 5c 6e 23 63 6f 6d 6d 65 6e 74 2d 77 72 61 70 70 65 72 5b 73 6d 61 6c 6c 5d 20 23 6d 65 74 61 20 7b 5c 6e 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 35 70 78 3b 5c 6e 7d 5c 6e 2e 72 65 64 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 62 73 2d 64 61 6e 67 65 72 2c 20 72 65 64 29 3b 5c 6e 7d 5c 6e 2e 67 72 65 65 6e 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 62 73 2d 73 75 63 63 65 73 73 2c 20 67 72 65 65 6e 29 3b 5c 6e 7d 5c 6e 76 74 2d 75 69 2d 61 76 61 74 61 Data Ascii: x;\n flex-direction: row;\n font-size: 12px;\n margin-bottom: 18px;\n min-width: 0;\n}\n#comment-wrapper[small] #meta {\n margin-bottom: 5px;\n}\n.red {\n color: var(--bs-danger, red);\n}\n.green {\n color: var(--bs-success, green);\n}\nvt-ui-avata
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 34 32 63 31 3b 2d 2d 62 73 2d 70 69 6e 6b 3a 20 23 30 30 30 30 30 30 3b 2d 2d 62 73 2d 72 65 64 3a 20 23 63 35 32 34 32 30 3b 2d 2d 62 73 2d 6f 72 61 6e 67 65 3a 20 23 65 35 37 33 30 30 3b 2d 2d 62 73 2d 79 65 6c 6c 6f 77 3a 20 23 66 63 65 39 36 37 3b 2d 2d 62 73 2d 67 72 65 65 6e 3a 20 23 33 39 61 63 34 63 3b 2d 2d 62 73 2d 74 65 61 6c 3a 20 23 32 30 63 39 39 37 3b 2d 2d 62 73 2d 63 79 61 6e 3a 20 23 32 38 37 62 62 35 3b 2d 2d 62 73 2d 62 6c 61 63 6b 3a 20 23 30 30 30 3b 2d 2d 62 73 2d 77 68 69 74 65 3a 20 23 66 66 66 3b 2d 2d 62 73 2d 67 72 61 79 3a 20 23 36 36 36 36 36 36 3b 2d 2d 62 73 2d 67 72 61 79 2d 64 61 72 6b 3a 20 23 33 33 33 33 33 33 3b 2d 2d 62 73 2d 67 72 61 79 2d 31 30 30 3a 20 23 66 39 66 39 66 39 3b 2d 2d 62 73 2d 67 72 61 79 2d 32 30 30 Data Ascii: 42c1;--bs-pink: #000000;--bs-red: #c52420;--bs-orange: #e57300;--bs-yellow: #fce967;--bs-green: #39ac4c;--bs-teal: #20c997;--bs-cyan: #287bb5;--bs-black: #000;--bs-white: #fff;--bs-gray: #666666;--bs-gray-dark: #333333;--bs-gray-100: #f9f9f9;--bs-gray-200
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 73 2d 64 61 6e 67 65 72 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 65 38 61 37 61 36 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 66 32 66 32 66 32 3b 2d 2d 62 73 2d 64 61 72 6b 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 62 33 62 33 62 33 3b 2d 2d 62 73 2d 77 68 69 74 65 2d 72 67 62 3a 20 32 35 35 2c 20 32 35 35 2c 20 32 35 35 3b 2d 2d 62 73 2d 62 6c 61 63 6b 2d 72 67 62 3a 20 30 2c 20 30 2c 20 30 3b 2d 2d 62 73 2d 66 6f 6e 74 2d 73 61 6e 73 2d 73 65 72 69 66 3a 20 22 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 22 2c 20 52 6f 62 6f 74 6f 2c 20 52 6f 62 6f 74 6f 44 72 61 66 74 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 2d 2d 62 73 2d 66 6f 6e 74 2d 6d Data Ascii: s-danger-border-subtle: #e8a7a6;--bs-light-border-subtle: #f2f2f2;--bs-dark-border-subtle: #b3b3b3;--bs-white-rgb: 255, 255, 255;--bs-black-rgb: 0, 0, 0;--bs-font-sans-serif: "Source Sans Pro", Roboto, RobotoDraft, Helvetica, Arial, sans-serif;--bs-font-m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.18	60910	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:02 UTC	689	OUT	GET /gui/8405.5eb49c1a7107f741455b.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:02 UTC	391	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:02 GMT expires: Thu, 15 Jan 2026 16:45:02 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 6ef58a82a49da0145a9addf42ab41039;o=1 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:02 UTC	999	IN	Data Raw: 33 39 38 35 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 34 30 35 5d 2c 7b 31 34 38 31 39 3a 28 74 2c 65 2c 72 29 3d 3e 7b 72 2e 64 28 65 2c 7b 69 3a 28 29 3d 3e 79 7d 29 3b 76 61 72 20 69 3d 72 28 39 32 38 31 35 29 2c 6e 3d 72 28 32 32 38 39 34 29 2c 6f 3d 72 28 36 30 32 33 33 29 2c 73 3d 72 28 34 37 31 32 33 29 2c 61 3d 72 28 37 30 30 35 31 29 2c 6c 3d 72 28 39 36 39 38 37 29 2c 68 3d 72 28 39 35 36 38 38 29 2c 63 3d 72 28 34 32 32 34 36 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 74 2c 65 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 Data Ascii: 3985"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[8405],{14819:(t,e,r)=>{r.d(e,{i:()=>y});var i=r(92815),n=r(22894),o=r(60233),s=r(47123),a=r(70051),l=r(96987),h=r(95688),c=r(42246);function u(t,e){var r=Object.keys(t
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 34 2e 64 6f 6d 61 69 6e 73 2e 6c 69 73 74 52 65 6c 61 74 69 6f 6e 73 68 69 70 28 74 2c 22 72 65 6c 61 74 65 64 5f 74 68 72 65 61 74 5f 61 63 74 6f 72 73 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 72 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3a 7b 7d 3b 65 25 32 3f 75 28 4f 62 6a 65 63 74 28 72 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 28 74 2c 65 2c 72 5b 65 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 Data Ascii: 4.domains.listRelationship(t,"related_threat_actors",function(t){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?arguments[e]:{};e%2?u(Object(r),!0).forEach((function(e){d(t,e,r[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 74 79 70 65 6f 66 20 69 29 72 65 74 75 72 6e 20 69 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 3d 65 3f 53 74 72 69 6e 67 3a 4e 75 6d 62 65 72 29 28 74 29 7d 28 74 2c 22 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 65 2b 22 22 7d 28 65 29 29 69 6e 20 74 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 76 61 6c 75 65 3a 72 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d Data Ascii: typeof i)return i;throw new TypeError("@@toPrimitive must return a primitive value.")}return("string"===e?String:Number)(t)}(t,"string");return"symbol"==typeof e?e:e+""}(e))in t?Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 72 63 68 55 72 6c 28 7b 65 6e 74 69 74 79 3a 22 64 6f 6d 61 69 6e 22 2c 63 6e 61 6d 65 5f 74 74 6c 3a 74 2e 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 2e 74 74 6c 7d 29 7d 7d 2c 74 68 69 73 2e 6e 73 43 6f 6e 74 65 78 74 41 74 74 72 69 62 75 74 65 50 61 72 61 6d 73 3d 7b 74 74 6c 3a 7b 63 6f 6c 75 6d 6e 4e 61 6d 65 3a 22 54 54 4c 22 2c 6c 69 6e 6b 3a 74 3d 3e 68 2e 5a 38 2e 67 65 74 53 65 61 72 63 68 55 72 6c 28 7b 65 6e 74 69 74 79 3a 22 64 6f 6d 61 69 6e 22 2c 6e 73 5f 74 74 6c 3a 74 2e 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 2e 74 74 6c 7d 29 7d 7d 2c 74 68 69 73 2e 73 6f 61 43 6f 6e 74 65 78 74 41 74 74 72 69 62 75 74 65 50 61 72 61 6d 73 3d 7b 65 78 70 69 72 65 3a 7b 63 6f 6c 75 6d 6e 4e 61 6d 65 3a 22 45 78 70 69 72 65 22 7d Data Ascii: rchUrl({entity:"domain",cname_ttl:t.context_attributes.ttl})}},this.nsContextAttributeParams={ttl:{columnName:"TTL",link:t=>h.Z8.getSearchUrl({entity:"domain",ns_ttl:t.context_attributes.ttl})}},this.soaContextAttributeParams={expire:{columnName:"Expire"}
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 29 2c 7b 7d 2c 7b 64 61 74 61 3a 74 2e 64 61 74 61 2e 66 69 6c 74 65 72 28 63 2e 5a 4e 29 7d 29 29 29 29 2c 28 74 3d 3e 6c 2e 77 39 2e 66 69 6c 65 46 6f 72 6d 61 74 74 65 72 28 28 30 2c 69 2e 68 29 28 74 29 29 29 29 7d 2c 74 68 69 73 2e 72 65 66 65 72 72 65 72 46 69 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 72 65 74 75 72 6e 28 30 2c 63 2e 68 4e 29 28 28 28 29 3d 3e 6e 2e 68 34 2e 64 6f 6d 61 69 6e 73 2e 6c 69 73 74 52 65 6c 61 74 69 6f 6e 73 68 69 70 28 65 2e 69 64 2c 22 72 65 66 65 72 72 65 72 5f 66 69 6c 65 73 22 2c 66 28 7b 7d 2c 74 29 29 2e 74 68 65 6e 28 28 Data Ascii: ),{},{data:t.data.filter(c.ZN)})))),(t=>l.w9.fileFormatter((0,i.h)(t))))},this.referrerFiles=function(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};return(0,c.hN)((()=>n.h4.domains.listRelationship(e.id,"referrer_files",f({},t)).then((
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 2e 6c 69 73 74 52 65 6c 61 74 69 6f 6e 73 68 69 70 28 65 2e 69 64 2c 22 73 69 62 6c 69 6e 67 73 22 2c 66 28 7b 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 3a 5b 22 72 65 73 6f 6c 75 74 69 6f 6e 73 22 5d 7d 2c 74 29 29 29 2c 28 74 3d 3e 6c 2e 77 39 2e 66 6f 72 6d 61 74 44 6f 6d 61 69 6e 46 6f 72 4c 69 73 74 28 6c 2e 77 39 2e 64 6f 6d 61 69 6e 46 6f 72 6d 61 74 74 65 72 28 28 30 2c 69 2e 68 29 28 74 29 29 29 29 29 7d 2c 74 68 69 73 2e 63 61 61 52 65 63 6f 72 64 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 72 65 74 75 72 6e 28 30 2c 63 2e 68 4e 29 28 28 28 29 3d 3e 6e 2e 68 34 2e Data Ascii: .listRelationship(e.id,"siblings",f({relationships:["resolutions"]},t))),(t=>l.w9.formatDomainForList(l.w9.domainFormatter((0,i.h)(t)))))},this.caaRecords=function(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};return(0,c.hN)((()=>n.h4.
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 3d 6e 65 77 20 73 2e 75 6e 28 65 2e 69 64 29 3b 72 65 74 75 72 6e 20 79 69 65 6c 64 20 74 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 43 72 65 61 74 65 64 2c 74 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 2e 72 65 6c 61 74 65 64 5f 72 65 66 65 72 65 6e 63 65 73 7d 29 29 2c 74 68 69 73 2e 67 65 74 43 6f 6c 6c 65 63 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 72 65 74 75 72 6e 28 30 2c 63 2e 46 70 29 28 28 28 29 3d 3e 6e 2e 68 34 2e 64 6f 6d 61 69 6e 73 2e 6c 69 73 74 52 65 6c 61 74 69 6f 6e 73 68 69 70 28 65 2e 69 64 2c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 22 2c 66 Data Ascii: =new s.un(e.id);return yield t.relationshipsCreated,t.relationships.related_references})),this.getCollections=function(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};return(0,c.Fp)((()=>n.h4.domains.listRelationship(e.id,"collections",f
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 65 79 73 28 74 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 74 29 3b 65 26 26 28 69 3d 69 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 65 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 72 2e 70 75 73 68 2e 61 70 70 6c 79 28 72 2c 69 29 7d 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 2c 65 2c 72 29 7b 72 65 74 75 72 6e 28 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 Data Ascii: eys(t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(t);e&&(i=i.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,i)}return r}function u(t,e,r){return(e=function(t){var e=function(t,e){if("
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 74 72 79 7b 76 61 72 20 61 3d 74 5b 6f 5d 28 73 29 2c 6c 3d 61 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 72 28 74 29 7d 61 2e 64 6f 6e 65 3f 65 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 69 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 69 2c 6e 29 7b 76 61 72 20 6f 3d 74 2e 61 70 70 6c 79 28 65 2c 72 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 70 28 6f 2c 69 2c 6e 2c 73 Data Ascii: "}}function p(t,e,r,i,n,o,s){try{var a=t[o](s),l=a.value}catch(t){return void r(t)}a.done?e(l):Promise.resolve(l).then(i,n)}function m(t){return function(){var e=this,r=arguments;return new Promise((function(i,n){var o=t.apply(e,r);function s(t){p(o,i,n,s
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 29 29 2c 28 74 3d 3e 28 30 2c 69 2e 68 29 28 74 2e 64 61 74 61 29 29 29 29 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 29 7b 76 61 72 20 65 3b 73 75 70 65 72 28 74 29 2c 65 3d 74 68 69 73 2c 74 68 69 73 2e 69 70 41 64 64 72 65 73 73 3d 74 2c 74 68 69 73 2e 67 65 74 43 6f 6d 6d 65 6e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 72 65 74 75 72 6e 28 30 2c 68 2e 68 4e 29 28 28 72 3d 3e 6e 2e 68 34 2e 69 70 41 64 64 72 65 73 73 65 73 2e 6c 69 73 74 52 65 6c 61 74 69 6f 6e 73 68 69 70 28 65 2e 69 70 41 64 64 72 65 73 73 2c 22 63 6f 6d 6d 65 6e 74 73 22 2c 76 28 7b 72 65 6c 61 Data Ascii: )),(t=>(0,i.h)(t.data)))){constructor(t){var e;super(t),e=this,this.ipAddress=t,this.getComments=function(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};return(0,h.hN)((r=>n.h4.ipAddresses.listRelationship(e.ipAddress,"comments",v({rela

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.18	60911	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:02 UTC	511	OUT	GET /gui/53967.5b914cf2886ab055ed88.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:02 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:02 GMT expires: Thu, 15 Jan 2026 16:45:02 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 39ebe1c8f4bbe885855d9169c1510689 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:02 UTC	1003	IN	Data Raw: 33 39 63 63 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 33 39 36 37 5d 2c 7b 31 36 30 39 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 5f 2c 73 29 7b 76 61 72 20 74 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 69 6d 70 6f 72 74 44 65 66 61 75 6c 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 5f 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 5f 2e 53 69 Data Ascii: 39cc"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[53967],{16097:function(e,_,s){var t=this&&this.__importDefault\|\|function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(_,"__esModule",{value:!0}),_.Si
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 54 3a 72 65 74 75 72 6e 22 42 4c 41 43 4b 4c 49 53 54 22 3b 63 61 73 65 20 72 2e 57 48 49 54 45 4c 49 53 54 3a 72 65 74 75 72 6e 22 57 48 49 54 45 4c 49 53 54 22 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 22 55 4e 4b 4e 4f 57 4e 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 65 29 7b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 20 72 2e 55 4e 4b 4e 4f 57 4e 5f 4d 45 54 48 4f 44 3a 72 65 74 75 72 6e 20 30 3b 63 61 73 65 20 72 2e 42 4c 41 43 4b 4c 49 53 54 3a 72 65 74 75 72 6e 20 31 3b 63 61 73 65 20 72 2e 57 48 49 54 45 4c 49 53 54 3a 72 65 74 75 72 6e 20 32 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 7b 73 77 69 74 63 68 28 65 29 7b 63 61 73 65 20 30 3a 63 61 73 65 22 55 4e 4b 4e 4f 57 4e 5f 43 41 54 45 47 4f Data Ascii: T:return"BLACKLIST";case r.WHITELIST:return"WHITELIST";default:return"UNKNOWN"}}function l(e){switch(e){case r.UNKNOWN_METHOD:return 0;case r.BLACKLIST:return 1;case r.WHITELIST:return 2;default:return 0}}function u(e){switch(e){case 0:case"UNKNOWN_CATEGO
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 3d 22 76 74 2e 61 6e 61 6c 79 73 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 55 4e 4b 4e 4f 57 4e 5f 4d 45 54 48 4f 44 3d 22 55 4e 4b 4e 4f 57 4e 5f 4d 45 54 48 4f 44 22 2c 65 2e 42 4c 41 43 4b 4c 49 53 54 3d 22 42 4c 41 43 4b 4c 49 53 54 22 2c 65 2e 57 48 49 54 45 4c 49 53 54 3d 22 57 48 49 54 45 4c 49 53 54 22 2c 65 2e 55 4e 52 45 43 4f 47 4e 49 5a 45 44 3d 22 55 4e 52 45 43 4f 47 4e 49 5a 45 44 22 7d 28 72 7c 7c 28 5f 2e 45 6e 67 69 6e 65 41 6e 61 6c 79 73 69 73 5f 45 6e 67 69 6e 65 41 6e 61 6c 79 73 69 73 4d 65 74 68 6f 64 3d 72 3d 7b 7d 29 29 2c 5f 2e 65 6e 67 69 6e 65 41 6e 61 6c 79 73 69 73 5f 45 6e 67 69 6e 65 41 6e 61 6c 79 73 69 73 4d 65 74 68 6f 64 46 72 6f 6d 4a 53 4f 4e 3d 6f 2c 5f 2e 65 6e 67 69 6e 65 41 6e 61 6c 79 73 69 73 5f 45 Data Ascii: ="vt.analysis",function(e){e.UNKNOWN_METHOD="UNKNOWN_METHOD",e.BLACKLIST="BLACKLIST",e.WHITELIST="WHITELIST",e.UNRECOGNIZED="UNRECOGNIZED"}(r\|\|(_.EngineAnalysis_EngineAnalysisMethod=r={})),_.engineAnalysis_EngineAnalysisMethodFromJSON=o,_.engineAnalysis_E
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 2e 69 6e 74 33 32 28 65 2e 74 69 6d 65 6f 75 74 29 2c 30 21 3d 3d 65 2e 63 6f 6e 66 69 72 6d 65 64 5f 74 69 6d 65 6f 75 74 26 26 5f 2e 75 69 6e 74 33 32 28 36 34 29 2e 69 6e 74 33 32 28 65 2e 63 6f 6e 66 69 72 6d 65 64 5f 74 69 6d 65 6f 75 74 29 2c 5f 7d 2c 64 65 63 6f 64 65 28 65 2c 5f 29 7b 63 6f 6e 73 74 20 73 3d 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 6e 2e 64 65 66 61 75 6c 74 2e 52 65 61 64 65 72 3f 65 3a 6e 65 77 20 6e 2e 64 65 66 61 75 6c 74 2e 52 65 61 64 65 72 28 65 29 3b 6c 65 74 20 74 3d 76 6f 69 64 20 30 3d 3d 3d 5f 3f 73 2e 6c 65 6e 3a 73 2e 70 6f 73 2b 5f 3b 63 6f 6e 73 74 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 66 29 3b 66 6f 72 28 3b 73 2e 70 6f 73 3c 74 3b 29 7b 63 6f 6e 73 74 20 65 3d 73 2e 75 69 6e 74 33 32 28 29 3b Data Ascii: .int32(e.timeout),0!==e.confirmed_timeout&&_.uint32(64).int32(e.confirmed_timeout),_},decode(e,_){const s=e instanceof n.default.Reader?e:new n.default.Reader(e);let t=void 0===_?s.len:s.pos+_;const a=Object.assign({},f);for(;s.pos<t;){const e=s.uint32();
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 69 6d 65 6f 75 74 3d 30 2c 5f 7d 2c 74 6f 4a 53 4f 4e 28 65 29 7b 63 6f 6e 73 74 20 5f 3d 7b 7d 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 2e 6d 61 6c 69 63 69 6f 75 73 26 26 28 5f 2e 6d 61 6c 69 63 69 6f 75 73 3d 65 2e 6d 61 6c 69 63 69 6f 75 73 29 2c 76 6f 69 64 20 30 21 3d 3d 65 2e 73 75 73 70 69 63 69 6f 75 73 26 26 28 5f 2e 73 75 73 70 69 63 69 6f 75 73 3d 65 2e 73 75 73 70 69 63 69 6f 75 73 29 2c 76 6f 69 64 20 30 21 3d 3d 65 2e 75 6e 64 65 74 65 63 74 65 64 26 26 28 5f 2e 75 6e 64 65 74 65 63 74 65 64 3d 65 2e 75 6e 64 65 74 65 63 74 65 64 29 2c 76 6f 69 64 20 30 21 3d 3d 65 2e 68 61 72 6d 6c 65 73 73 26 26 28 5f 2e 68 61 72 6d 6c 65 73 73 3d 65 2e 68 61 72 6d 6c 65 73 73 29 2c 76 6f 69 64 20 30 21 3d 3d 65 2e 66 61 69 6c 75 72 65 26 26 Data Ascii: imeout=0,_},toJSON(e){const _={};return void 0!==e.malicious&&(_.malicious=e.malicious),void 0!==e.suspicious&&(_.suspicious=e.suspicious),void 0!==e.undetected&&(_.undetected=e.undetected),void 0!==e.harmless&&(_.harmless=e.harmless),void 0!==e.failure&&
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 6e 2e 64 65 66 61 75 6c 74 2e 57 72 69 74 65 72 2e 63 72 65 61 74 65 28 29 3b 72 65 74 75 72 6e 20 65 2e 6d 65 74 68 6f 64 21 3d 3d 72 2e 55 4e 4b 4e 4f 57 4e 5f 4d 45 54 48 4f 44 26 26 5f 2e 75 69 6e 74 33 32 28 38 29 2e 69 6e 74 33 32 28 6c 28 65 2e 6d 65 74 68 6f 64 29 29 2c 22 22 21 3d 3d 65 2e 65 6e 67 69 6e 65 5f 6e 61 6d 65 26 26 5f 2e 75 69 6e 74 33 32 28 31 38 29 2e 73 74 72 69 6e 67 28 65 2e 65 6e 67 69 6e 65 5f 6e 61 6d 65 29 2c 65 2e 63 61 74 65 67 6f 72 79 21 3d 3d 63 2e 55 4e 4b 4e 4f 57 4e 5f 43 41 54 45 47 4f 52 59 26 26 5f 2e 75 69 6e 74 33 32 28 32 34 29 2e 69 6e 74 33 32 28 6d 28 65 2e 63 61 74 65 67 6f 72 79 29 29 2c 22 22 21 3d 3d 65 2e 72 65 73 Data Ascii: 0!==arguments[1]?arguments[1]:n.default.Writer.create();return e.method!==r.UNKNOWN_METHOD&&_.uint32(8).int32(l(e.method)),""!==e.engine_name&&_.uint32(18).string(e.engine_name),e.category!==c.UNKNOWN_CATEGORY&&_.uint32(24).int32(m(e.category)),""!==e.res
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 6c 6c 21 3d 3d 65 2e 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 3f 5f 2e 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 3d 53 74 72 69 6e 67 28 65 2e 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 29 3a 5f 2e 65 6e 67 69 6e 65 5f 75 70 64 61 74 65 3d 22 22 2c 5f 7d 2c 74 6f 4a 53 4f 4e 28 65 29 7b 63 6f 6e 73 74 20 5f 3d 7b 7d 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 2e 6d 65 74 68 6f 64 26 26 28 5f 2e 6d 65 74 68 6f 64 3d 69 28 65 2e 6d 65 74 68 6f 64 29 29 2c 76 6f 69 64 20 30 21 3d 3d 65 2e 65 6e 67 69 6e 65 5f 6e 61 6d 65 26 26 28 5f 2e 65 6e 67 69 6e 65 5f 6e 61 6d 65 3d 65 2e 65 6e 67 69 6e 65 5f 6e 61 6d 65 29 2c 76 6f 69 64 20 30 21 3d 3d 65 2e 63 61 74 65 67 6f 72 79 26 26 28 5f 2e 63 61 74 65 67 6f 72 79 3d 64 28 65 2e 63 61 74 65 67 6f 72 79 29 29 2c Data Ascii: ll!==e.engine_update?_.engine_update=String(e.engine_update):_.engine_update="",_},toJSON(e){const _={};return void 0!==e.method&&(_.method=i(e.method)),void 0!==e.engine_name&&(_.engine_name=e.engine_name),void 0!==e.category&&(_.category=d(e.category)),
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 74 2e 52 65 61 64 65 72 3f 65 3a 6e 65 77 20 6e 2e 64 65 66 61 75 6c 74 2e 52 65 61 64 65 72 28 65 29 3b 6c 65 74 20 74 3d 76 6f 69 64 20 30 3d 3d 3d 5f 3f 73 2e 6c 65 6e 3a 73 2e 70 6f 73 2b 5f 3b 63 6f 6e 73 74 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 76 29 3b 66 6f 72 28 3b 73 2e 70 6f 73 3c 74 3b 29 7b 63 6f 6e 73 74 20 65 3d 73 2e 75 69 6e 74 33 32 28 29 3b 73 77 69 74 63 68 28 65 3e 3e 3e 33 29 7b 63 61 73 65 20 31 3a 61 2e 6c 6f 77 3d 73 2e 69 6e 74 33 32 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 61 2e 6d 65 64 69 75 6d 3d 73 2e 69 6e 74 33 32 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 61 2e 68 69 67 68 3d 73 2e 69 6e 74 33 32 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 34 3a 61 2e 63 72 69 74 69 63 61 6c 3d 73 2e 69 6e Data Ascii: t.Reader?e:new n.default.Reader(e);let t=void 0===_?s.len:s.pos+_;const a=Object.assign({},v);for(;s.pos<t;){const e=s.uint32();switch(e>>>3){case 1:a.low=s.int32();break;case 2:a.medium=s.int32();break;case 3:a.high=s.int32();break;case 4:a.critical=s.in
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 3b 72 65 74 75 72 6e 22 4f 62 6a 65 63 74 22 3d 3d 3d 73 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 28 73 3d 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 2c 22 4d 61 70 22 3d 3d 3d 73 7c 7c 22 53 65 74 22 3d 3d 3d 73 3f 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 3a 22 41 72 67 75 6d 65 6e 74 73 22 3d 3d 3d 73 7c 7c 2f 5e 28 3f 3a 55 69 7c 49 29 6e 74 28 3f 3a 38 7c 31 36 7c 33 32 29 28 3f 3a 43 6c 61 6d 70 65 64 29 3f 41 72 72 61 79 24 2f 2e 74 65 73 74 28 73 29 3f 61 28 65 2c 5f 29 3a 76 6f 69 64 20 30 7d 7d 28 65 29 29 7c 7c 5f 26 26 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 6c 65 6e 67 74 68 29 7b 73 26 26 28 65 3d 73 29 3b 76 61 Data Ascii: toString.call(e).slice(8,-1);return"Object"===s&&e.constructor&&(s=e.constructor.name),"Map"===s\|\|"Set"===s?Array.from(e):"Arguments"===s\|\|/^(?:Ui\|I)nt(?:8\|16\|32)(?:Clamped)?Array$/.test(s)?a(e,_):void 0}}(e))\|\|_&&e&&"number"==typeof e.length){s&&(e=s);va
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 75 69 74 43 56 53 53 76 32 76 33 3d 5f 2e 56 75 6c 6e 65 72 61 62 69 6c 69 74 79 43 6f 6e 64 75 69 74 43 56 53 53 76 34 3d 5f 2e 56 75 6c 6e 65 72 61 62 69 6c 69 74 79 43 6f 6e 64 75 69 74 43 56 53 53 76 34 54 68 72 65 61 74 3d 5f 2e 56 75 6c 6e 65 72 61 62 69 6c 69 74 79 43 6f 6e 64 75 69 74 43 56 53 53 76 34 53 75 70 70 6c 65 6d 65 6e 74 61 6c 3d 5f 2e 56 75 6c 6e 65 72 61 62 69 6c 69 74 79 46 69 65 6c 64 53 6f 75 72 63 65 3d 5f 2e 52 65 70 65 61 74 65 64 46 69 65 6c 64 53 6f 75 72 63 65 3d 5f 2e 56 75 6c 6e 65 72 61 62 69 6c 69 74 79 56 65 72 73 69 6f 6e 48 69 73 74 6f 72 79 3d 5f 2e 56 75 6c 6e 65 72 61 62 69 6c 69 74 79 45 78 70 6c 6f 69 74 61 74 69 6f 6e 3d 5f 2e 43 6f 75 6e 74 65 72 73 3d 5f 2e 43 6f 6c 6c 65 63 74 69 6f 6e 5f 41 74 74 72 69 62 75 Data Ascii: uitCVSSv2v3=_.VulnerabilityConduitCVSSv4=_.VulnerabilityConduitCVSSv4Threat=_.VulnerabilityConduitCVSSv4Supplemental=_.VulnerabilityFieldSource=_.RepeatedFieldSource=_.VulnerabilityVersionHistory=_.VulnerabilityExploitation=_.Counters=_.Collection_Attribu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.18	60912	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:02 UTC	690	OUT	GET /gui/75884.b085fb19887c849fbac2.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:02 UTC	391	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:02 GMT expires: Thu, 15 Jan 2026 16:45:02 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 0fd08518f3764c32bf85a3ad641778b5;o=1 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:02 UTC	999	IN	Data Raw: 33 62 35 64 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 35 38 38 34 5d 2c 7b 39 35 35 32 38 3a 28 74 2c 65 2c 69 29 3d 3e 7b 76 61 72 20 6f 3d 69 28 34 38 37 30 34 29 2c 73 3d 69 28 31 36 36 34 35 29 2c 72 3d 69 28 36 35 38 36 35 29 3b 6c 65 74 20 6e 2c 61 2c 6c 3d 74 3d 3e 74 3b 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6f 29 7b 76 61 72 20 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 3d 72 3c 33 3f 65 3a 6e 75 6c 6c 3d 3d 3d 6f 3f 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 Data Ascii: 3b5d"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[75884],{95528:(t,e,i)=>{var o=i(48704),s=i(16645),r=i(65865);let n,a,l=t=>t;var c=function(t,e,i,o){var s,r=arguments.length,n=r<3?e:null===o?o=Object.getOwnPropertyDe
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 28 32 32 38 39 34 29 2c 73 3d 69 28 35 36 38 37 30 29 2c 72 3d 28 69 28 39 38 39 31 29 2c 69 28 34 38 37 30 34 29 29 2c 6e 3d 69 28 31 36 36 34 35 29 2c 61 3d 69 28 36 32 38 33 32 29 2c 6c 3d 69 28 38 35 32 30 30 29 2c 63 3d 28 69 28 32 32 32 33 32 29 2c 69 28 38 36 32 36 30 29 2c 69 28 39 35 35 32 38 29 2c 69 28 31 35 33 32 33 29 29 2c 64 3d 69 28 39 33 38 34 32 29 2c 62 3d 69 28 39 36 39 38 37 29 2c 70 3d 69 28 34 35 32 34 31 29 2c 68 3d 69 28 39 35 36 38 38 29 2c 75 3d 28 69 28 38 30 31 39 32 29 2c 69 28 35 31 34 38 34 29 29 2c 6d 3d 69 28 35 32 39 38 35 29 2c 79 3d 69 28 37 39 33 34 38 29 3b 6c 65 74 20 76 2c 66 2c 67 2c 5f 2c 6b 2c 78 2c 77 2c 24 2c 54 2c 43 2c 52 2c 50 2c 53 2c 55 2c 49 2c 44 2c 45 2c 4c 2c 41 2c 4b 2c 4f 2c 5a 2c 46 2c 6a 2c 42 2c Data Ascii: (22894),s=i(56870),r=(i(9891),i(48704)),n=i(16645),a=i(62832),l=i(85200),c=(i(22232),i(86260),i(95528),i(15323)),d=i(93842),b=i(96987),p=i(45241),h=i(95688),u=(i(80192),i(51484)),m=i(52985),y=i(79348);let v,f,g,_,k,x,w,$,T,C,R,P,S,U,I,D,E,L,A,K,O,Z,F,j,B,
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 72 6c 28 22 73 65 61 72 63 68 22 2c 68 2e 5a 38 2e 75 72 6c 44 6f 75 62 6c 65 45 6e 63 6f 64 65 28 74 68 69 73 2e 75 72 6c 29 29 2c 22 5f 62 6c 61 6e 6b 22 29 7d 72 65 6e 64 65 72 52 65 70 6f 72 74 4c 69 6e 6b 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6e 74 69 74 79 2e 5f 66 6f 75 6e 64 3f 28 30 2c 72 2e 68 74 6d 6c 29 28 66 7c 7c 28 66 3d 4a 60 3c 61 20 68 72 65 66 3d 22 24 7b 30 7d 22 20 63 6c 61 73 73 3d 22 73 65 63 6f 6e 64 61 72 79 20 72 65 70 6f 72 74 2d 6c 69 6e 6b 22 20 69 64 3d 22 75 72 6c 2d 72 65 70 6f 72 74 2d 6c 69 6e 6b 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 3e 20 24 7b 30 7d 20 3c 2f 61 3e 60 29 2c 68 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 73 65 61 72 63 68 22 2c 68 2e 5a 38 2e 75 72 6c 44 6f 75 62 6c 65 45 Data Ascii: rl("search",h.Z8.urlDoubleEncode(this.url)),"_blank")}renderReportLink(){return this.entity._found?(0,r.html)(f\|\|(f=J`<a href="${0}" class="secondary report-link" id="url-report-link" @click="${0}"> ${0} </a>`),h.Z8.getRedirectUrl("search",h.Z8.urlDoubleE
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 64 54 65 78 74 54 6f 43 6c 69 70 62 6f 61 72 64 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 6e 65 74 77 6f 72 6b 5f 6c 6f 63 61 74 69 6f 6e 2e 69 64 29 3a 22 22 2c 6e 75 6c 6c 21 3d 3d 28 65 3d 74 68 69 73 2e 65 6e 74 69 74 79 2e 6c 61 73 74 5f 73 65 72 76 69 6e 67 5f 69 70 5f 61 64 64 72 65 73 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 26 26 65 2e 69 64 3f 28 30 2c 72 2e 68 74 6d 6c 29 28 78 7c 7c 28 78 3d 4a 60 20 3c 76 74 2d 75 69 2d 70 69 76 6f 74 20 63 6c 61 73 73 3d 22 6e 61 6d 65 22 20 2e 68 72 65 66 3d 22 24 7b 30 7d 22 20 63 6c 61 73 73 3d 22 70 69 76 6f 74 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 20 64 61 74 61 2d 6f 62 6a 65 63 74 2d 74 79 70 65 3d 22 69 70 5f 61 64 64 72 65 73 73 22 20 64 61 74 61 2d 6f 62 6a 65 63 74 2d 69 64 3d 22 24 7b 30 7d Data Ascii: dTextToClipboard,this.entity.network_location.id):"",null!==(e=this.entity.last_serving_ip_address)&&void 0!==e&&e.id?(0,r.html)(x\|\|(x=J` <vt-ui-pivot class="name" .href="${0}" class="pivot" @click="${0}" data-object-type="ip_address" data-object-id="${0}
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 6f 74 61 62 6c 65 2c 21 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 54 79 70 65 2c 70 2e 4b 4b 2e 65 76 61 6c 75 61 74 65 41 72 67 28 74 68 69 73 2e 65 6e 74 69 74 79 2e 5f 74 68 72 65 61 74 5f 61 63 74 6f 72 5f 74 61 67 73 29 3f 74 68 69 73 2e 65 6e 74 69 74 79 2e 5f 74 68 72 65 61 74 5f 61 63 74 6f 72 5f 74 61 67 73 2e 6d 61 70 28 28 74 3d 3e 28 30 2c 72 2e 68 74 6d 6c 29 28 54 7c 7c 28 54 3d 4a 60 20 3c 76 74 2d 75 69 2d 63 68 69 70 73 20 63 6c 69 63 6b 61 62 6c 65 20 63 6c 61 73 73 3d 22 73 6d 61 6c 6c 20 73 6f 66 74 2d 6f 72 61 6e 67 65 20 24 7b 30 7d 22 20 2e 63 68 69 70 73 3d 22 24 7b 30 7d 22 3e 3c 2f 76 74 2d 75 69 2d 63 68 69 70 73 3e 20 60 29 2c 28 30 2c 61 2e 63 6c 61 73 73 4d 61 70 29 28 7b 64 61 72 6b 65 72 3a 22 74 68 72 65 61 74 5f 61 63 74 6f Data Ascii: otable,!this._contentType,p.KK.evaluateArg(this.entity._threat_actor_tags)?this.entity._threat_actor_tags.map((t=>(0,r.html)(T\|\|(T=J` <vt-ui-chips clickable class="small soft-orange ${0}" .chips="${0}"></vt-ui-chips> `),(0,a.classMap)({darker:"threat_acto
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 61 6c 5f 75 72 6c 21 3d 3d 74 68 69 73 2e 65 6e 74 69 74 79 2e 75 72 6c 3f 28 30 2c 72 2e 68 74 6d 6c 29 28 53 7c 7c 28 53 3d 4a 60 3c 69 20 63 6c 61 73 73 3d 22 66 73 2d 35 20 68 73 74 61 63 6b 20 74 65 78 74 2d 62 6f 64 79 2d 73 65 63 6f 6e 64 61 72 79 20 6d 65 2d 31 22 3e 24 7b 30 7d 3c 2f 69 3e 3c 61 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 74 72 75 6e 63 61 74 65 22 20 68 72 65 66 3d 22 24 7b 30 7d 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 20 24 7b 30 7d 20 3c 2f 61 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 73 74 61 63 6b 20 67 61 70 2d 32 20 66 73 2d 35 20 73 68 6f 77 2d 6f 6e 2d 68 6f 76 65 72 2d 73 75 62 6a 65 63 74 22 3e 20 3c 61 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d Data Ascii: al_url!==this.entity.url?(0,r.html)(S\|\|(S=J`<i class="fs-5 hstack text-body-secondary me-1">${0}</i><a role="button" class="text-truncate" href="${0}" target="_blank"> ${0} </a> <div class="hstack gap-2 fs-5 show-on-hover-subject"> <a role="button" class=
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 61 73 74 5f 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 3f 28 30 2c 72 2e 68 74 6d 6c 29 28 44 7c 7c 28 44 3d 4a 60 20 3c 76 74 2d 75 69 2d 70 69 76 6f 74 20 2e 68 72 65 66 3d 22 24 7b 30 7d 22 3e 20 24 7b 30 7d 20 3c 2f 76 74 2d 75 69 2d 70 69 76 6f 74 3e 60 29 2c 74 68 69 73 2e 69 66 50 69 76 6f 74 61 62 6c 65 28 74 68 69 73 2e 5f 67 65 74 50 69 76 6f 74 4c 69 6e 6b 28 22 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 22 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 6c 61 73 74 5f 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 29 29 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 6c 61 73 74 5f 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 29 3a 28 30 2c 72 2e 68 74 6d 6c 29 28 45 7c 7c 28 45 3d 4a 60 2d 60 29 29 29 2c 74 68 69 73 2e 72 65 6e 64 65 72 Data Ascii: ast_http_response_code?(0,r.html)(D\|\|(D=J` <vt-ui-pivot .href="${0}"> ${0} </vt-ui-pivot>`),this.ifPivotable(this._getPivotLink("response_code",this.entity.last_http_response_code)),this.entity.last_http_response_code):(0,r.html)(E\|\|(E=J`-`))),this.render
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 3c 76 74 2d 75 69 2d 70 69 76 6f 74 20 2e 68 72 65 66 3d 22 24 7b 30 7d 22 3e 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 61 67 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 76 74 69 63 6f 6e 73 2f 24 7b 30 7d 22 20 61 6c 74 3d 22 46 61 76 69 63 6f 6e 22 3e 20 3c 2f 76 74 2d 75 69 2d 70 69 76 6f 74 3e 20 3c 2f 64 69 76 3e 20 60 29 2c 74 68 69 73 2e 69 66 50 69 76 6f 74 61 62 6c 65 28 74 68 69 73 2e 5f 67 65 74 46 61 76 69 63 6f 6e 50 69 76 6f 74 4c 69 6e 6b 28 74 68 69 73 2e 65 6e 74 69 74 79 2e 66 61 76 69 63 6f 6e 2e 64 68 61 73 68 29 29 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 66 61 76 69 63 6f 6e 2e 72 61 77 5f 6d 64 35 29 3a 28 30 2c 72 2e 68 74 6d 6c 29 28 42 7c 7c 28 42 3d 4a 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 Data Ascii: <vt-ui-pivot .href="${0}"> <img src="https://storage.googleapis.com/vticons/${0}" alt="Favicon"> </vt-ui-pivot> </div> `),this.ifPivotable(this._getFaviconPivotLink(this.entity.favicon.dhash)),this.entity.favicon.raw_md5):(0,r.html)(B\|\|(B=J` <div class="i
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 74 69 6f 6e 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 26 26 74 2e 69 64 3f 28 30 2c 72 2e 68 74 6d 6c 29 28 4e 7c 7c 28 4e 3d 4a 60 20 3c 62 72 3e 20 3c 76 74 2d 75 69 2d 70 69 76 6f 74 20 68 72 65 66 3d 22 24 7b 30 7d 22 3e 20 24 7b 30 7d 20 3c 2f 76 74 2d 75 69 2d 70 69 76 6f 74 3e 20 60 29 2c 68 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 64 6f 6d 61 69 6e 22 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 6e 65 74 77 6f 72 6b 5f 6c 6f 63 61 74 69 6f 6e 2e 69 64 29 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 6e 65 74 77 6f 72 6b 5f 6c 6f 63 61 74 69 6f 6e 2e 69 64 29 3a 22 22 2c 74 68 69 73 2e 63 68 69 70 73 2e 6c 65 6e 67 74 68 3f 28 30 2c 72 2e 68 74 6d 6c 29 28 7a 7c 7c 28 7a 3d 4a 60 20 3c 76 74 2d 75 69 2d 63 68 69 70 73 20 63 6c 61 73 73 3d 22 73 Data Ascii: tion)&&void 0!==t&&t.id?(0,r.html)(N\|\|(N=J` <br> <vt-ui-pivot href="${0}"> ${0} </vt-ui-pivot> `),h.Z8.getRedirectUrl("domain",this.entity.network_location.id),this.entity.network_location.id):"",this.chips.length?(0,r.html)(z\|\|(z=J` <vt-ui-chips class="s
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 30 7d 22 3e 20 3c 73 70 61 6e 20 73 6c 6f 74 3d 22 63 6f 6e 74 65 6e 74 22 3e 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 32 30 30 70 78 22 3e 20 54 68 69 73 20 49 6f 43 20 6d 61 74 63 68 65 73 20 59 41 52 41 20 72 75 6c 65 20 3c 62 3e 24 7b 30 7d 3c 2f 62 3e 20 63 6f 6e 74 61 69 6e 65 64 20 69 6e 20 74 68 65 20 3c 62 3e 24 7b 30 7d 3c 2f 62 3e 20 72 75 6c 65 73 65 74 2e 20 3c 2f 64 69 76 3e 20 3c 2f 73 70 61 6e 3e 20 3c 2f 76 74 2d 75 69 2d 70 6f 70 6f 76 65 72 3e 20 3c 2f 64 69 76 3e 20 3c 2f 76 74 2d 75 69 2d 70 69 76 6f 74 3e 20 3c 2f 64 69 76 3e 60 29 2c 28 74 3d 3e 7b 6f 2e 68 34 2e 63 6f 6c 6c 65 63 74 6f 72 2e 63 6f 6c 6c 65 63 74 28 73 2e 4a 55 2e 49 4f 43 5f 53 54 52 45 41 4d 2c 73 2e 5f 42 2e 46 49 4c 54 45 52 5f 42 59 2c 73 2e 49 Data Ascii: 0}"> <span slot="content"> <div style="width:200px"> This IoC matches YARA rule <b>${0}</b> contained in the <b>${0}</b> ruleset. </div> </span> </vt-ui-popover> </div> </vt-ui-pivot> </div>`),(t=>{o.h4.collector.collect(s.JU.IOC_STREAM,s._B.FILTER_BY,s.I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.18	60913	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:02 UTC	510	OUT	GET /gui/1700.226b3fc193308e865f4c.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:02 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:02 GMT expires: Thu, 15 Jan 2026 16:45:02 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 984ff2b857552f7c25fa4a19375ab797 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:02 UTC	1003	IN	Data Raw: 33 39 38 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 30 30 2c 33 30 36 31 30 2c 39 31 34 35 34 2c 37 37 35 35 34 2c 35 30 38 36 37 2c 32 39 32 30 5d 2c 7b 34 37 31 34 33 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 73 7d 29 3b 76 61 72 20 6f 3d 72 28 31 35 33 32 33 29 3b 63 6f 6e 73 74 20 73 3d 7b 22 41 74 74 61 63 6b 20 2f 20 44 65 73 74 72 75 63 74 69 6f 6e 22 3a 6f 2e 64 65 73 74 72 75 63 74 69 6f 6e 49 63 6f 6e 2c 45 73 70 69 6f 6e 61 67 65 3a 6f 2e 67 6c 6f 62 65 4d 61 67 6e 69 66 79 69 6e 67 47 6c 61 73 73 49 Data Ascii: 3980"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[1700,30610,91454,77554,50867,2920],{47143:(e,t,r)=>{r.d(t,{A:()=>s});var o=r(15323);const s={"Attack / Destruction":o.destructionIcon,Espionage:o.globeMagnifyingGlassI
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 65 6d 65 6e 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 6c 61 62 65 6c 3d 22 22 2c 74 68 69 73 2e 66 6f 72 6d 61 74 74 65 64 49 6e 64 75 73 74 72 69 65 73 3d 6e 65 77 20 4d 61 70 7d 77 69 6c 6c 55 70 64 61 74 65 28 65 29 7b 69 66 28 65 2e 68 61 73 28 22 69 6e 64 75 73 74 72 69 65 73 22 29 29 7b 76 61 72 20 74 3b 63 6f 6e 73 74 20 65 3d 6e 65 77 20 4d 61 70 3b 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 69 6e 64 75 73 74 72 69 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 2e 73 6f 72 74 28 73 2e 73 6f 72 74 49 6e 64 75 73 74 72 79 48 69 65 72 61 72 63 68 79 42 79 43 6f 6e 66 69 64 65 6e 63 65 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c Data Ascii: ement{constructor(){super(...arguments),this.label="",this.formattedIndustries=new Map}willUpdate(e){if(e.has("industries")){var t;const e=new Map;null===(t=this.industries)\|\|void 0===t\|\|null===(t=t.sort(s.sortIndustryHierarchyByConfidence))\|\|void 0===t\|\|
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 68 29 3a 76 6f 69 64 20 30 29 7d 72 65 6e 64 65 72 49 6e 64 75 73 74 72 79 28 65 29 7b 76 61 72 20 74 3b 69 66 28 21 65 5b 30 5d 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 65 5b 30 5d 3b 72 65 74 75 72 6e 28 30 2c 69 2e 68 74 6d 6c 29 28 68 7c 7c 28 68 3d 67 60 3c 69 20 63 6c 61 73 73 3d 22 68 73 74 61 63 6b 22 20 40 6d 6f 75 73 65 6f 76 65 72 3d 22 24 7b 30 7d 22 3e 24 7b 30 7d 26 6e 62 73 70 3b 3c 2f 69 3e 60 29 2c 28 74 3d 3e 74 68 69 73 2e 6f 6e 4d 6f 75 73 65 6f 76 65 72 28 74 2c 5b 65 5d 29 29 2c 6e 75 6c 6c 21 3d 3d 28 74 3d 6f 2e 67 5b 72 5d 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 3f 74 3a 61 2e 74 77 6f 47 65 61 72 73 49 63 6f 6e 29 7d 6f 6e 4d 6f 75 73 65 6f 76 65 72 28 65 2c 74 29 7b 63 2e 56 2e 73 68 6f 77 28 22 74 61 72 67 65 74 65 64 2d Data Ascii: h):void 0)}renderIndustry(e){var t;if(!e[0])return;const r=e[0];return(0,i.html)(h\|\|(h=g`<i class="hstack" @mouseover="${0}">${0} </i>`),(t=>this.onMouseover(t,[e])),null!==(t=o.g[r])&&void 0!==t?t:a.twoGearsIcon)}onMouseover(e,t){c.V.show("targeted-
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 6d 6f 74 69 76 61 74 69 6f 6e 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 73 6f 72 74 28 73 2e 73 6f 72 74 54 72 61 63 6b 65 64 41 74 74 72 69 62 75 74 65 73 42 79 43 6f 6e 66 69 64 65 6e 63 65 29 7d 72 65 6e 64 65 72 28 29 7b 72 65 74 75 72 6e 28 30 2c 69 2e 68 74 6d 6c 29 28 70 7c 7c 28 70 3d 67 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 76 73 74 61 63 6b 20 67 61 70 2d 31 20 66 6c 65 78 2d 67 72 6f 77 2d 30 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 6e 6f 77 72 61 70 20 74 65 78 74 2d 62 6f 64 79 2d 73 65 63 6f 6e 64 61 72 79 20 66 77 2d 62 6f 6c 64 22 3e 24 7b 30 7d 3c 2f 64 69 76 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 60 29 2c 74 68 69 73 2e Data Ascii: eturn null===(e=this.motivations)\|\|void 0===e?void 0:e.sort(s.sortTrackedAttributesByConfidence)}render(){return(0,i.html)(p\|\|(p=g` <div class="vstack gap-1 flex-grow-0"> <div class="text-nowrap text-body-secondary fw-bold">${0}</div> ${0} </div> `),this.
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 63 6f 72 61 74 65 29 6e 3d 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 28 65 2c 74 2c 72 2c 6f 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 61 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 61 3e 3d 30 3b 61 2d 2d 29 28 73 3d 65 5b 61 5d 29 26 26 28 6e 3d 28 69 3c 33 3f 73 28 6e 29 3a 69 3e 33 3f 73 28 74 2c 72 2c 6e 29 3a 73 28 74 2c 72 29 29 7c 7c 6e 29 3b 72 65 74 75 72 6e 20 69 3e 33 26 26 6e 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 72 2c 6e 29 2c 6e 7d 3b 6c 65 74 20 6d 3d 28 64 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 6f 2e 4c 69 74 45 6c 65 6d 65 6e 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 6c 61 62 65 6c 3d 22 22 2c 74 68 69 73 2e 68 Data Ascii: corate)n=Reflect.decorate(e,t,r,o);else for(var a=e.length-1;a>=0;a--)(s=e[a])&&(n=(i<3?s(n):i>3?s(t,r,n):s(t,r))\|\|n);return i>3&&n&&Object.defineProperty(t,r,n),n};let m=(d=class extends o.LitElement{constructor(){super(...arguments),this.label="",this.h
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 49 63 6f 6e 4d 61 70 29 28 65 2e 61 74 74 72 69 62 75 74 65 73 29 2c 6e 75 6c 6c 3d 3d 65 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 65 2e 61 74 74 72 69 62 75 74 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6e 61 6d 65 29 7d 29 29 2c 28 6e 75 6c 6c 21 3d 3d 28 72 3d 74 68 69 73 2e 63 6f 75 6e 74 29 26 26 76 6f 69 64 20 30 21 3d 3d 72 3f 72 3a 30 29 3e 32 26 26 74 68 69 73 2e 73 6f 75 72 63 65 43 6f 6c 6c 65 63 74 69 6f 6e 49 64 3f 28 30 2c 6f 2e 68 74 6d 6c 29 28 68 7c 7c 28 68 3d 76 60 24 7b 30 7d 60 29 2c 74 68 69 73 2e 73 68 6f 77 49 6e 44 72 61 77 65 72 3f 28 30 2c 6f 2e 68 74 6d 6c 29 28 67 7c 7c 28 67 3d 76 60 3c 61 20 63 6c 61 73 73 3d 22 62 61 64 67 65 20 72 6f 75 6e 64 65 64 2d 70 69 6c 6c 20 61 6c 69 67 6e 2d 73 65 6c 66 Data Ascii: IconMap)(e.attributes),null==e\|\|null===(t=e.attributes)\|\|void 0===t?void 0:t.name)})),(null!==(r=this.count)&&void 0!==r?r:0)>2&&this.sourceCollectionId?(0,o.html)(h\|\|(h=v`${0}`),this.showInDrawer?(0,o.html)(g\|\|(g=v`<a class="badge rounded-pill align-self
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 61 74 74 72 69 62 75 74 65 3a 22 73 68 6f 77 2d 69 6e 2d 64 72 61 77 65 72 22 7d 29 5d 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 68 6f 77 49 6e 44 72 61 77 65 72 22 2c 76 6f 69 64 20 30 29 2c 6d 3d 79 28 5b 28 30 2c 73 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 29 28 22 70 69 76 6f 74 61 62 6c 65 2d 61 73 73 6f 63 69 61 74 65 64 2d 63 6f 6c 6c 65 63 74 69 6f 6e 73 2d 73 75 6d 6d 61 72 79 2d 6c 69 73 74 22 29 5d 2c 6d 29 7d 2c 37 34 31 35 36 3a 28 65 2c 74 2c 72 29 3d 3e 7b 76 61 72 20 6f 3d 72 28 33 31 30 38 38 29 2c 73 3d 72 28 34 38 37 30 34 29 2c 69 3d 72 28 31 36 36 34 35 29 2c 6e 3d 72 28 31 35 33 32 33 29 2c 61 3d 72 28 39 36 38 35 35 29 2c 63 3d 72 28 31 33 32 31 32 29 2c 6c 3d 28 72 28 37 37 35 35 34 29 2c 72 28 32 37 31 30 30 29 29 3b 6c 65 74 Data Ascii: attribute:"show-in-drawer"})],m.prototype,"showInDrawer",void 0),m=y([(0,s.customElement)("pivotable-associated-collections-summary-list")],m)},74156:(e,t,r)=>{var o=r(31088),s=r(48704),i=r(16645),n=r(15323),a=r(96855),c=r(13212),l=(r(77554),r(27100));let
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 22 24 7b 30 7d 22 3e 20 2b 24 7b 30 7d 20 3c 2f 73 70 61 6e 3e 60 29 2c 28 65 3d 3e 74 68 69 73 2e 6f 6e 4d 6f 75 73 65 6f 76 65 72 28 65 2c 72 29 29 2c 72 2e 6c 65 6e 67 74 68 29 3a 76 6f 69 64 20 30 29 7d 72 65 6e 64 65 72 52 65 67 69 6f 6e 28 65 29 7b 69 66 28 21 28 6e 75 6c 6c 21 3d 65 26 26 65 2e 63 6f 75 6e 74 72 79 7c 7c 6e 75 6c 6c 21 3d 65 26 26 65 2e 72 65 67 69 6f 6e 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 74 3d 65 2e 63 6f 75 6e 74 72 79 5f 69 73 6f 32 3b 6c 65 74 20 72 2c 6f 3d 65 2e 63 6f 75 6e 74 72 79 7c 7c 65 2e 72 65 67 69 6f 6e 3b 72 65 74 75 72 6e 20 61 2e 69 2e 67 65 74 43 6f 75 6e 74 72 79 53 68 6f 72 74 4e 61 6d 65 28 74 29 3f 72 3d 28 30 2c 73 2e 68 74 6d 6c 29 28 68 7c 7c 28 68 3d 79 60 3c 76 74 2d 75 69 2d 66 6c 61 67 20 2e Data Ascii: "${0}"> +${0} </span>`),(e=>this.onMouseover(e,r)),r.length):void 0)}renderRegion(e){if(!(null!=e&&e.country\|\|null!=e&&e.region))return;const t=e.country_iso2;let r,o=e.country\|\|e.region;return a.i.getCountryShortName(t)?r=(0,s.html)(h\|\|(h=y`<vt-ui-flag .
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 61 6e 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 62 6f 64 79 22 3e 24 7b 30 7d 3c 2f 73 70 61 6e 3e 60 29 2c 74 29 7d 7d 72 65 6e 64 65 72 28 29 7b 72 65 74 75 72 6e 28 30 2c 6f 2e 68 74 6d 6c 29 28 6c 7c 7c 28 6c 3d 70 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 76 73 74 61 63 6b 20 67 61 70 2d 31 20 66 6c 65 78 2d 67 72 6f 77 2d 30 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 6e 6f 77 72 61 70 20 74 65 78 74 2d 62 6f 64 79 2d 73 65 63 6f 6e 64 61 72 79 20 66 77 2d 62 6f 6c 64 22 3e 24 7b 30 7d 3c 2f 64 69 76 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 60 29 2c 74 68 69 73 2e 6c 61 62 65 6c 2c 74 68 69 73 2e 72 65 6e 64 65 72 49 74 65 6d 73 28 29 29 7d 72 65 6e 64 65 72 49 74 65 6d 73 28 29 7b 76 61 72 20 65 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 28 65 Data Ascii: an class="text-body">${0}</span>`),t)}}render(){return(0,o.html)(l\|\|(l=p` <div class="vstack gap-1 flex-grow-0"> <div class="text-nowrap text-body-secondary fw-bold">${0}</div> ${0} </div> `),this.label,this.renderItems())}renderItems(){var e;if(null===(e
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 3b 6c 65 74 20 6c 3d 63 6c 61 73 73 20 65 78 74 65 6e 64 73 20 6f 2e 4c 69 74 45 6c 65 6d 65 6e 74 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 73 75 70 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 64 65 66 61 75 6c 74 53 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 61 67 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 76 74 63 64 6e 2f 61 73 73 65 74 73 2f 73 76 67 2f 63 69 72 63 6c 65 2d 66 6c 61 67 73 2f 78 78 2e 73 76 67 22 2c 74 68 69 73 2e 65 72 72 6f 72 65 64 53 72 63 3d 21 31 7d 75 70 64 61 74 65 64 28 65 29 7b 73 75 70 65 72 2e 75 70 64 61 74 65 64 28 65 29 2c 65 2e 68 61 73 28 22 69 73 6f 22 29 26 26 28 74 68 69 73 2e 65 72 72 6f 72 65 64 53 72 63 3d 21 31 29 7d 67 65 74 20 73 72 63 28 29 7b 72 65 74 75 72 6e 20 74 68 Data Ascii: ;let l=class extends o.LitElement{constructor(){super(...arguments),this.defaultSrc="https://storage.googleapis.com/vtcdn/assets/svg/circle-flags/xx.svg",this.erroredSrc=!1}updated(e){super.updated(e),e.has("iso")&&(this.erroredSrc=!1)}get src(){return th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.18	60914	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:02 UTC	690	OUT	GET /gui/71254.5c4108391eb7e4bca702.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:02 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:02 GMT expires: Thu, 15 Jan 2026 16:45:02 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: b8c949005592c974de268d7f1d8804ff content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:02 UTC	1003	IN	Data Raw: 33 61 35 38 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 31 32 35 34 2c 34 34 31 33 38 2c 36 38 33 37 2c 31 33 38 30 35 2c 36 30 31 33 32 2c 36 31 36 36 33 5d 2c 7b 33 38 33 37 39 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 72 28 65 29 2c 69 2e 64 28 65 2c 7b 63 6c 6f 75 64 44 6f 77 6e 6c 6f 61 64 49 63 6f 6e 3a 28 29 3d 3e 6f 2e 63 6c 6f 75 64 44 6f 77 6e 6c 6f 61 64 49 63 6f 6e 7d 29 3b 76 61 72 20 6f 3d 69 28 31 35 33 32 33 29 7d 2c 31 38 38 31 38 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 72 28 65 29 2c 69 2e 64 28 65 2c 7b 65 64 69 74 46 69 6c 65 49 63 Data Ascii: 3a58"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[71254,44138,6837,13805,60132,61663],{38379:(t,e,i)=>{i.r(e),i.d(e,{cloudDownloadIcon:()=>o.cloudDownloadIcon});var o=i(15323)},18818:(t,e,i)=>{i.r(e),i.d(e,{editFileIc
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 69 29 3a 6f 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 29 73 3d 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 28 74 2c 65 2c 69 2c 6f 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 61 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 61 3e 3d 30 3b 61 2d 2d 29 28 72 3d 74 5b 61 5d 29 26 26 28 73 3d 28 6e 3c 33 3f 72 28 73 29 3a 6e 3e 33 3f 72 28 65 2c 69 2c 73 29 3a 72 28 65 2c 69 29 29 7c 7c 73 29 3b 72 65 74 75 72 6e 20 6e 3e 33 26 26 73 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 69 2c 73 29 2c 73 7d 3b 6c 65 74 Data Ascii: OwnPropertyDescriptor(e,i):o;if("object"==typeof Reflect&&"function"==typeof Reflect.decorate)s=Reflect.decorate(t,e,i,o);else for(var a=t.length-1;a>=0;a--)(r=t[a])&&(s=(n<3?r(s):n>3?r(e,i,s):r(e,i))\|\|s);return n>3&&s&&Object.defineProperty(e,i,s),s};let
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 68 74 22 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 74 65 78 74 3d 22 43 6f 70 79 20 70 61 72 65 6e 74 20 64 6f 6d 61 69 6e 20 74 6f 20 63 6c 69 70 62 6f 61 72 64 22 20 40 6d 6f 75 73 65 6f 76 65 72 3d 22 24 7b 30 7d 22 3e 3c 2f 76 74 2d 75 69 2d 62 75 74 74 6f 6e 3e 20 3c 2f 64 69 76 3e 20 60 29 2c 75 2e 73 75 62 64 69 72 65 63 74 6f 72 79 41 72 72 6f 77 52 69 67 68 74 49 63 6f 6e 2c 74 68 69 73 2e 69 66 50 69 76 6f 74 61 62 6c 65 28 67 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 74 68 69 73 2e 65 6e 74 69 74 79 55 72 6c 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 70 61 72 65 6e 74 2e 69 64 29 29 2c 21 74 68 69 73 2e 65 6e 74 69 74 79 2e 70 61 72 65 6e 74 2e 69 64 2c 74 68 69 73 2e 69 66 50 69 76 6f 74 61 62 6c 65 28 74 68 69 73 2e 73 68 6f 77 52 Data Ascii: ht" data-tooltip-text="Copy parent domain to clipboard" @mouseover="${0}"></vt-ui-button> </div> `),u.subdirectoryArrowRightIcon,this.ifPivotable(g.Z8.getRedirectUrl(this.entityUrl,this.entity.parent.id)),!this.entity.parent.id,this.ifPivotable(this.showR
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 70 6f 70 75 6c 61 72 69 74 79 54 61 67 73 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 5f 74 61 67 73 29 3f 28 30 2c 6e 2e 68 74 6d 6c 29 28 52 7c 7c 28 52 3d 51 60 20 24 7b 30 7d 20 3c 76 74 2d 75 69 2d 63 68 69 70 73 20 63 6c 61 73 73 3d 22 73 6d 61 6c 6c 20 73 6f 66 74 2d 62 6c 75 65 20 66 69 6c 6c 65 64 22 20 2e 63 68 69 70 73 3d 22 24 7b 30 7d 22 20 3f 63 6c 69 63 6b 61 62 6c 65 3d 22 24 7b 30 7d 22 3e 3c 2f 76 74 2d 75 69 2d 63 68 69 70 73 3e 20 3c 76 74 2d 75 69 2d 63 68 69 70 73 20 63 6c 61 73 73 3d 22 73 6d 61 6c 6c 20 62 6c 75 65 2d 67 72 65 79 20 66 69 6c 6c 65 64 22 20 2e 63 68 69 70 73 3d 22 24 7b 30 7d 22 20 3f 63 6c 69 63 6b 61 62 6c 65 3d 22 24 7b 30 7d 22 3e 3c 2f 76 74 2d 75 69 2d 63 68 69 70 73 3e 20 3c 76 74 2d 75 69 2d 63 68 69 70 73 20 63 Data Ascii: popularityTags,this.entity._tags)?(0,n.html)(R\|\|(R=Q` ${0} <vt-ui-chips class="small soft-blue filled" .chips="${0}" ?clickable="${0}"></vt-ui-chips> <vt-ui-chips class="small blue-grey filled" .chips="${0}" ?clickable="${0}"></vt-ui-chips> <vt-ui-chips c
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 69 73 2e 65 6e 74 69 74 79 2c 22 64 6f 77 6e 6c 6f 61 64 65 64 5f 66 69 6c 65 73 22 29 29 2c 79 2e 4b 4b 2e 73 68 6f 77 54 6f 6f 6c 74 69 70 29 3a 22 22 2c 6e 75 6c 6c 21 3d 3d 28 65 3d 74 68 69 73 2e 65 6e 74 69 74 79 2e 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 26 26 65 2e 64 65 74 65 63 74 65 64 5f 63 6f 6d 6d 75 6e 69 63 61 74 69 6e 67 5f 66 69 6c 65 73 5f 63 6f 75 6e 74 3f 28 30 2c 6e 2e 68 74 6d 6c 29 28 53 7c 7c 28 53 3d 51 60 20 3c 76 74 2d 75 69 2d 62 75 74 74 6f 6e 20 69 63 6f 6e 20 63 6c 61 73 73 3d 22 73 6d 61 6c 6c 22 20 2e 62 65 66 6f 72 65 54 65 78 74 49 63 6f 6e 3d 22 24 7b 30 7d 22 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 74 65 78 74 3d 22 24 7b 30 7d 22 20 64 61 74 61 2d 74 6f 6f 6c 74 Data Ascii: is.entity,"downloaded_files")),y.KK.showTooltip):"",null!==(e=this.entity.context_attributes)&&void 0!==e&&e.detected_communicating_files_count?(0,n.html)(S\|\|(S=Q` <vt-ui-button icon class="small" .beforeTextIcon="${0}" data-tooltip-text="${0}" data-toolt
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 74 3d 22 24 7b 30 7d 22 3e 3c 2f 67 74 69 2d 73 63 6f 72 65 3e 3c 2f 64 69 76 3e 20 60 29 2c 69 29 29 2c 74 68 69 73 2e 72 65 6e 64 65 72 43 6f 6c 75 6d 6e 28 22 44 65 74 65 63 74 69 6f 6e 73 22 2c 22 20 64 65 74 65 63 74 69 6f 6e 73 20 63 65 6e 74 65 72 20 63 6f 6c 2d 64 65 74 65 63 74 69 6f 6e 73 22 2c 28 30 2c 6e 2e 68 74 6d 6c 29 28 4f 7c 7c 28 4f 3d 51 60 20 3c 64 69 76 3e 20 3c 76 74 2d 75 69 2d 64 65 74 65 63 74 69 6f 6e 73 2d 72 61 74 69 6f 20 74 6f 74 61 6c 3d 22 24 7b 30 7d 22 20 64 65 74 65 63 74 69 6f 6e 73 3d 22 24 7b 30 7d 22 20 63 6c 61 73 73 3d 22 6e 6f 2d 63 6f 6c 6f 72 73 22 20 40 6d 6f 75 73 65 6f 76 65 72 3d 22 24 7b 30 7d 22 20 64 61 74 61 2d 70 6f 70 6f 76 65 72 3d 22 64 65 74 65 63 74 69 6f 6e 73 22 20 64 61 74 61 2d 70 6f 70 6f 76 Data Ascii: t="${0}"></gti-score></div> `),i)),this.renderColumn("Detections"," detections center col-detections",(0,n.html)(O\|\|(O=Q` <div> <vt-ui-detections-ratio total="${0}" detections="${0}" class="no-colors" @mouseover="${0}" data-popover="detections" data-popov
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 7c 7c 74 68 69 73 2e 72 65 6e 64 65 72 43 6f 6c 75 6d 6e 28 22 4c 61 73 74 20 55 70 64 61 74 65 64 22 2c 22 73 65 65 6e 20 63 6f 6c 2d 6c 61 73 74 2d 75 70 64 61 74 65 2d 64 61 74 65 22 2c 28 30 2c 6e 2e 68 74 6d 6c 29 28 7a 7c 7c 28 7a 3d 51 60 20 3c 64 69 76 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 60 29 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 6c 61 73 74 5f 75 70 64 61 74 65 5f 64 61 74 65 3f 28 30 2c 6e 2e 68 74 6d 6c 29 28 47 7c 7c 28 47 3d 51 60 20 3c 75 6c 3e 20 3c 6c 69 3e 20 3c 76 74 2d 75 69 2d 70 69 76 6f 74 20 2e 68 72 65 66 3d 22 24 7b 30 7d 22 3e 20 3c 64 69 76 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 3c 64 69 76 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 3c 2f 76 74 2d 75 69 2d 70 69 76 6f 74 Data Ascii: ntext_attributes\|\|this.renderColumn("Last Updated","seen col-last-update-date",(0,n.html)(z\|\|(z=Q` <div> ${0} </div> `),this.entity.last_update_date?(0,n.html)(G\|\|(G=Q` <ul> <li> <vt-ui-pivot .href="${0}"> <div> ${0} </div> <div> ${0} </div> </vt-ui-pivot
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 6c 6f 74 3d 22 63 6f 6c 75 6d 6e 2d 73 6d 61 6c 6c 22 3e 20 3c 64 69 76 3e 20 3c 61 20 68 72 65 66 3d 22 24 7b 30 7d 22 20 63 6c 61 73 73 3d 22 73 65 63 6f 6e 64 61 72 79 22 3e 20 24 7b 30 7d 20 3c 2f 61 3e 20 24 7b 30 7d 20 3c 64 69 76 3e 24 7b 30 7d 3c 2f 64 69 76 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 73 6c 6f 74 3d 22 64 65 74 2d 73 6d 61 6c 6c 22 3e 20 3c 73 70 61 6e 3e 20 3c 76 74 2d 75 69 2d 64 65 74 65 63 74 69 6f 6e 73 2d 72 61 74 69 6f 20 63 6c 61 73 73 3d 22 6e 6f 2d 63 6f 6c 6f 72 73 20 74 65 78 74 2d 6e 6f 77 72 61 70 22 20 74 6f 74 61 6c 3d 22 24 7b 30 7d 22 20 64 65 74 65 63 74 69 6f 6e 73 3d 22 24 7b 30 7d 22 3e 20 3c 2f 76 74 2d 75 69 2d 64 65 74 65 63 74 69 6f 6e 73 2d 72 61 74 69 6f 3e 20 3c 2f 73 Data Ascii: lot="column-small"> <div> <a href="${0}" class="secondary"> ${0} </a> ${0} <div>${0}</div> ${0} </div> </div> <div slot="det-small"> <span> <vt-ui-detections-ratio class="no-colors text-nowrap" total="${0}" detections="${0}"> </vt-ui-detections-ratio> </s
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 31 22 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 66 73 2d 35 22 3e 24 7b 30 7d 3c 2f 73 70 61 6e 3e 20 3c 2f 61 3e 20 3c 76 74 2d 75 69 2d 70 6f 70 6f 76 65 72 20 69 64 3d 22 63 6f 6e 74 65 78 74 22 20 2e 70 6f 73 69 74 69 6f 6e 3d 22 24 7b 30 7d 22 3e 20 3c 73 70 61 6e 20 73 6c 6f 74 3d 22 63 6f 6e 74 65 6e 74 22 3e 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 32 30 30 70 78 22 3e 20 54 68 69 73 20 49 6f 43 20 6d 61 74 63 68 65 73 20 59 41 52 41 20 72 75 6c 65 20 3c 62 3e 24 7b 30 7d 3c 2f 62 3e 20 63 6f 6e 74 61 69 6e 65 64 20 69 6e 20 74 68 65 20 3c 62 3e 24 7b 30 7d 3c 2f 62 3e 20 72 75 6c 65 73 65 74 2e 20 3c 2f 64 69 76 3e 20 3c 2f 73 70 61 6e 3e 20 3c Data Ascii: 1" role="button" @click="${0}"> <span class="fs-5">${0}</span> </a> <vt-ui-popover id="context" .position="${0}"> <span slot="content"> <div style="width:200px"> This IoC matches YARA rule <b>${0}</b> contained in the <b>${0}</b> ruleset. </div> </span> <
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 2f 73 70 61 6e 3e 20 3c 2f 76 74 2d 75 69 2d 70 69 76 6f 74 3e 20 3c 62 72 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 73 74 61 63 6b 22 3e 20 24 7b 30 7d 20 24 7b 30 7d 20 3c 64 69 76 3e 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 60 29 2c 74 68 69 73 2e 69 66 50 69 76 6f 74 61 62 6c 65 28 74 68 69 73 2e 73 6f 75 72 63 65 43 6c 69 63 6b 65 64 28 60 24 7b 74 7d 60 29 29 2c 65 2c 74 68 69 73 2e 73 6f 75 72 63 65 54 79 70 65 48 75 6d 61 6e 69 7a 65 28 74 29 2c 69 2e 69 64 26 26 74 68 69 73 2e 72 65 6e 64 65 72 53 6f 75 72 63 65 44 65 74 61 69 6c 42 75 74 74 6f 6e 28 74 2c 69 2e 69 64 2c 69 2e 6c 61 62 65 6c 7c 7c 69 2e 69 64 2c 6f 3f 63 2e 63 6f 6e 6e 65 63 74 65 64 4e 6f 64 65 73 49 63 6f 6e 3a 76 6f 69 64 20 30 29 2c 6f 3f 74 68 69 73 2e Data Ascii: /span> </vt-ui-pivot> <br> <div class="hstack"> ${0} ${0} <div></div> </div> </div>`),this.ifPivotable(this.sourceClicked(`${t}`)),e,this.sourceTypeHumanize(t),i.id&&this.renderSourceDetailButton(t,i.id,i.label\|\|i.id,o?c.connectedNodesIcon:void 0),o?this.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.18	60915	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:02 UTC	690	OUT	GET /gui/67920.83f748ec82f4e379de06.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:02 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:02 GMT expires: Thu, 15 Jan 2026 16:45:02 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: dc49c5347370dc830a751976e1162d93 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:02 UTC	1003	IN	Data Raw: 33 39 36 31 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 37 39 32 30 5d 2c 7b 36 37 39 32 30 3a 28 74 2c 65 2c 69 29 3d 3e 7b 76 61 72 20 6f 3d 69 28 32 32 38 39 34 29 2c 72 3d 69 28 35 36 38 37 30 29 2c 73 3d 28 69 28 39 38 39 31 29 2c 69 28 34 38 37 30 34 29 29 2c 6e 3d 69 28 31 36 36 34 35 29 2c 61 3d 69 28 36 32 38 33 32 29 2c 6c 3d 69 28 38 35 32 30 30 29 2c 63 3d 28 69 28 32 32 32 33 32 29 2c 69 28 38 36 32 36 30 29 2c 69 28 31 35 33 32 33 29 29 2c 62 3d 69 28 33 38 33 37 39 29 2c 64 3d 69 28 39 33 38 34 32 29 2c 70 3d 69 28 31 38 38 31 38 29 Data Ascii: 3961"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[67920],{67920:(t,e,i)=>{var o=i(22894),r=i(56870),s=(i(9891),i(48704)),n=i(16645),a=i(62832),l=i(85200),c=(i(22232),i(86260),i(15323)),b=i(38379),d=i(93842),p=i(18818)
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 20 65 3b 74 2e 68 61 73 28 22 65 6e 74 69 74 79 22 29 26 26 28 74 68 69 73 2e 63 68 69 70 73 3d 6d 2e 77 39 2e 63 6f 6d 70 75 74 65 45 6e 74 69 74 79 54 61 67 73 28 22 69 70 2d 61 64 64 72 65 73 73 22 2c 6e 75 6c 6c 21 3d 3d 28 65 3d 74 68 69 73 2e 65 6e 74 69 74 79 2e 74 61 67 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 5b 5d 29 29 3b 73 75 70 65 72 2e 75 70 64 61 74 65 64 28 74 29 7d 72 65 6e 64 65 72 43 6f 6c 43 6f 6e 74 65 78 74 49 63 6f 6e 73 28 29 7b 76 61 72 20 74 2c 65 2c 69 2c 6f 3b 69 66 28 74 68 69 73 2e 6d 69 6e 69 6d 61 6c 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 74 68 69 73 2e 65 6e 74 69 74 79 2e 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 3b 28 6e 75 6c 6c 21 3d 72 26 26 72 2e 64 65 74 65 63 74 65 64 5f 64 6f 77 6e Data Ascii: e;t.has("entity")&&(this.chips=m.w9.computeEntityTags("ip-address",null!==(e=this.entity.tags)&&void 0!==e?e:[]));super.updated(t)}renderColContextIcons(){var t,e,i,o;if(this.minimal)return;const r=this.entity.context_attributes;(null!=r&&r.detected_down
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 20 2e 62 65 66 6f 72 65 54 65 78 74 49 63 6f 6e 3d 22 24 7b 30 7d 22 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 74 65 78 74 3d 22 24 7b 30 7d 22 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 70 6f 73 69 74 69 6f 6e 3d 22 72 69 67 68 74 22 20 40 6d 6f 75 73 65 6f 76 65 72 3d 22 24 7b 30 7d 22 3e 3c 2f 76 74 2d 75 69 2d 62 75 74 74 6f 6e 3e 60 29 2c 70 2e 65 64 69 74 46 69 6c 65 49 63 6f 6e 2c 28 30 2c 6c 2e 69 66 44 65 66 69 6e 65 64 29 28 74 68 69 73 2e 67 65 74 43 6f 6e 74 65 78 74 41 74 74 72 69 62 75 74 65 73 54 6f 6f 6c 74 69 70 54 65 78 74 28 74 68 69 73 2e 65 6e 74 69 74 79 2c 22 72 65 66 65 72 72 69 6e 67 5f 66 69 6c 65 73 22 29 29 2c 76 2e 4b 4b 2e 73 68 6f 77 54 6f 6f 6c 74 69 70 29 3a 22 22 2c 6e 75 6c 6c 21 3d 3d 28 6f 3d 74 68 69 73 2e 65 6e 74 69 Data Ascii: .beforeTextIcon="${0}" data-tooltip-text="${0}" data-tooltip-position="right" @mouseover="${0}"></vt-ui-button>`),p.editFileIcon,(0,l.ifDefined)(this.getContextAttributesTooltipText(this.entity,"referring_files")),v.KK.showTooltip):"",null!==(o=this.enti
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 6e 20 73 75 62 6d 69 74 74 65 64 20 74 6f 20 6f 75 72 20 63 6f 72 70 75 73 20 79 65 74 3c 2f 73 70 61 6e 3e 20 3c 2f 64 69 76 3e 60 29 2c 76 2e 4b 4b 2e 73 68 6f 77 54 6f 6f 6c 74 69 70 29 7d 72 65 6e 64 65 72 54 61 67 73 28 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 69 6e 69 6d 61 6c 3f 28 30 2c 73 2e 68 74 6d 6c 29 28 50 7c 7c 28 50 3d 5a 60 60 29 29 3a 28 30 2c 73 2e 68 74 6d 6c 29 28 52 7c 7c 28 52 3d 5a 60 20 24 7b 30 7d 20 3c 76 74 2d 75 69 2d 63 68 69 70 73 20 63 6c 61 73 73 3d 22 73 6d 61 6c 6c 20 67 72 65 79 20 66 69 6c 6c 65 64 22 20 3f 63 6c 69 63 6b 61 62 6c 65 3d 22 24 7b 30 7d 22 20 2e 63 68 69 70 73 3d 22 24 7b 30 7d 22 20 3f 68 69 64 64 65 6e 3d 22 24 7b 30 7d 22 3e 3c 2f 76 74 2d 75 69 2d 63 68 69 70 73 3e 20 60 29 2c Data Ascii: n submitted to our corpus yet</span> </div>`),v.KK.showTooltip)}renderTags(){var t;return this.minimal?(0,s.html)(P\|\|(P=Z``)):(0,s.html)(R\|\|(R=Z` ${0} <vt-ui-chips class="small grey filled" ?clickable="${0}" .chips="${0}" ?hidden="${0}"></vt-ui-chips> `),
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 30 7d 22 20 3f 63 6c 69 63 6b 61 62 6c 65 3d 22 24 7b 30 7d 22 3e 3c 2f 76 74 2d 75 69 2d 63 68 69 70 73 3e 60 29 2c 74 68 69 73 2e 63 68 69 70 73 2c 74 68 69 73 2e 70 69 76 6f 74 61 62 6c 65 29 3a 22 22 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 61 73 6e 3f 28 30 2c 73 2e 68 74 6d 6c 29 28 4b 7c 7c 28 4b 3d 5a 60 20 3c 76 74 2d 75 69 2d 70 69 76 6f 74 20 63 6c 61 73 73 3d 22 62 6f 72 64 65 72 2d 73 74 61 72 74 20 62 6f 72 64 65 72 2d 65 6e 64 20 70 78 2d 32 22 20 2e 68 72 65 66 3d 22 24 7b 30 7d 22 3e 20 24 7b 30 7d 20 28 24 7b 30 7d 29 20 3c 2f 76 74 2d 75 69 2d 70 69 76 6f 74 3e 60 29 2c 74 68 69 73 2e 69 66 50 69 76 6f 74 61 62 6c 65 28 74 68 69 73 2e 5f 67 65 74 50 69 76 6f 74 4c 69 6e 6b 28 22 61 73 6e 22 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 61 73 6e Data Ascii: 0}" ?clickable="${0}"></vt-ui-chips>`),this.chips,this.pivotable):"",this.entity.asn?(0,s.html)(K\|\|(K=Z` <vt-ui-pivot class="border-start border-end px-2" .href="${0}"> ${0} (${0}) </vt-ui-pivot>`),this.ifPivotable(this._getPivotLink("asn",this.entity.asn
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 68 74 6d 6c 29 28 7a 7c 7c 28 7a 3d 5a 60 20 3c 76 74 2d 75 69 2d 70 69 76 6f 74 20 2e 68 72 65 66 3d 22 24 7b 30 7d 22 20 3f 68 69 64 64 65 6e 3d 22 24 7b 30 7d 22 3e 20 24 7b 30 7d 20 28 24 7b 30 7d 29 20 3c 2f 76 74 2d 75 69 2d 70 69 76 6f 74 3e 60 29 2c 74 68 69 73 2e 69 66 50 69 76 6f 74 61 62 6c 65 28 74 68 69 73 2e 5f 67 65 74 50 69 76 6f 74 4c 69 6e 6b 28 22 61 73 6e 22 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 61 73 6e 29 29 2c 21 74 68 69 73 2e 65 6e 74 69 74 79 2e 61 73 6e 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 61 73 6e 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 61 73 5f 6f 77 6e 65 72 29 3a 28 30 2c 73 2e 68 74 6d 6c 29 28 4f 7c 7c 28 4f 3d 5a 60 20 3c 64 69 76 3e 2d 3c 2f 64 69 76 3e 60 29 29 29 2c 74 68 69 73 2e 72 65 6e 64 65 72 43 6f 6c 75 6d 6e Data Ascii: html)(z\|\|(z=Z` <vt-ui-pivot .href="${0}" ?hidden="${0}"> ${0} (${0}) </vt-ui-pivot>`),this.ifPivotable(this._getPivotLink("asn",this.entity.asn)),!this.entity.asn,this.entity.asn,this.entity.as_owner):(0,s.html)(O\|\|(O=Z` <div>-</div>`))),this.renderColumn
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 62 75 74 74 6f 6e 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 66 73 2d 35 22 3e 24 7b 30 7d 3c 2f 73 70 61 6e 3e 20 3c 2f 61 3e 20 3c 76 74 2d 75 69 2d 70 6f 70 6f 76 65 72 20 69 64 3d 22 63 6f 6e 74 65 78 74 22 20 2e 70 6f 73 69 74 69 6f 6e 3d 22 24 7b 30 7d 22 3e 20 3c 73 70 61 6e 20 73 6c 6f 74 3d 22 63 6f 6e 74 65 6e 74 22 3e 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 32 30 30 70 78 22 3e 20 54 68 69 73 20 49 6f 43 20 6d 61 74 63 68 65 73 20 59 41 52 41 20 72 75 6c 65 20 3c 62 3e 24 7b 30 7d 3c 2f 62 3e 20 63 6f 6e 74 61 69 6e 65 64 20 69 6e 20 74 68 65 20 3c 62 3e 24 7b 30 7d 3c 2f 62 3e 20 72 75 6c 65 73 65 74 2e 20 3c 2f 64 69 76 3e 20 3c 2f 73 70 61 6e 3e 20 3c 2f 76 74 2d 75 69 2d 70 6f Data Ascii: button" @click="${0}"> <span class="fs-5">${0}</span> </a> <vt-ui-popover id="context" .position="${0}"> <span slot="content"> <div style="width:200px"> This IoC matches YARA rule <b>${0}</b> contained in the <b>${0}</b> ruleset. </div> </span> </vt-ui-po
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 6f 74 3e 20 3c 62 72 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 73 74 61 63 6b 22 3e 20 24 7b 30 7d 20 24 7b 30 7d 20 3c 64 69 76 3e 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 60 29 2c 74 68 69 73 2e 69 66 50 69 76 6f 74 61 62 6c 65 28 74 68 69 73 2e 73 6f 75 72 63 65 43 6c 69 63 6b 65 64 28 60 24 7b 74 7d 60 29 29 2c 65 2c 74 68 69 73 2e 73 6f 75 72 63 65 54 79 70 65 48 75 6d 61 6e 69 7a 65 28 74 29 2c 69 2e 69 64 26 26 74 68 69 73 2e 72 65 6e 64 65 72 53 6f 75 72 63 65 44 65 74 61 69 6c 42 75 74 74 6f 6e 28 74 2c 69 2e 69 64 2c 69 2e 6c 61 62 65 6c 7c 7c 69 2e 69 64 2c 6f 3f 63 2e 63 6f 6e 6e 65 63 74 65 64 4e 6f 64 65 73 49 63 6f 6e 3a 76 6f 69 64 20 30 29 2c 6f 3f 74 68 69 73 2e 72 65 6e 64 65 72 53 6f 75 72 63 65 73 50 6f 70 6f 76 Data Ascii: ot> <br> <div class="hstack"> ${0} ${0} <div></div> </div> </div>`),this.ifPivotable(this.sourceClicked(`${t}`)),e,this.sourceTypeHumanize(t),i.id&&this.renderSourceDetailButton(t,i.id,i.label\|\|i.id,o?c.connectedNodesIcon:void 0),o?this.renderSourcesPopov
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 63 6b 3b 5c 6e 7d 5c 6e 2f 2a 20 63 6f 6e 74 65 78 74 20 69 63 6f 6e 73 20 2a 2f 5c 6e 2e 65 6e 74 69 74 79 2d 72 6f 77 20 3e 20 64 69 76 2e 63 6f 6c 2d 63 6f 6e 74 65 78 74 2d 69 63 6f 6e 73 20 7b 5c 6e 20 20 66 6c 65 78 3a 20 30 20 31 20 61 75 74 6f 3b 5c 6e 7d 5c 6e 2e 65 6e 74 69 74 79 2d 72 6f 77 20 3e 20 64 69 76 2e 63 6f 6c 2d 63 6f 6e 74 65 78 74 2d 69 63 6f 6e 73 20 76 74 2d 75 69 2d 62 75 74 74 6f 6e 5b 69 63 6f 6e 5d 20 7b 5c 6e 20 20 2d 2d 76 74 2d 75 69 2d 62 75 74 74 6f 6e 2d 73 76 67 2d 66 69 6c 6c 3a 20 76 61 72 28 2d 2d 76 74 2d 75 69 2d 62 75 74 74 6f 6e 2d 63 6f 6c 6f 72 2d 74 65 78 74 2d 68 6f 76 65 72 2c 20 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 63 6f 6c 6f 72 29 29 3b 5c 6e 7d 5c 6e 22 2c 22 22 5d 29 2c 65 2e 41 3d 6e 7d 2c 39 36 Data Ascii: ck;\n}\n/* context icons */\n.entity-row > div.col-context-icons {\n flex: 0 1 auto;\n}\n.entity-row > div.col-context-icons vt-ui-button[icon] {\n --vt-ui-button-svg-fill: var(--vt-ui-button-color-text-hover, var(--bs-body-color));\n}\n",""]),e.A=n},96
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 23 30 30 34 34 38 30 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 38 30 34 30 30 30 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 36 64 31 34 31 32 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 34 64 34 64 34 64 3b 2d 2d 62 73 2d 64 61 72 6b 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 34 64 34 64 34 64 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 63 66 64 64 66 63 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 65 30 65 30 65 30 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 65 63 66 39 65 65 3b 2d 2d 62 73 2d 69 6e 66 6f 2d 62 Data Ascii: #004480;--bs-warning-text-emphasis: #804000;--bs-danger-text-emphasis: #6d1412;--bs-light-text-emphasis: #4d4d4d;--bs-dark-text-emphasis: #4d4d4d;--bs-primary-bg-subtle: #cfddfc;--bs-secondary-bg-subtle: #e0e0e0;--bs-success-bg-subtle: #ecf9ee;--bs-info-b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.18	60919	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:02 UTC	511	OUT	GET /gui/40946.52e58c8b2a8b55ad5067.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:02 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:02 GMT expires: Thu, 15 Jan 2026 16:45:02 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 6b2b92c7ea5bc5421903df819ebf95d3 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:02 UTC	1003	IN	Data Raw: 32 64 35 34 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 30 39 34 36 5d 2c 7b 39 34 31 35 36 3a 28 74 2c 65 2c 72 29 3d 3e 7b 72 2e 64 28 65 2c 7b 24 6a 3a 28 29 3d 3e 68 2c 45 4a 3a 28 29 3d 3e 75 2c 46 67 3a 28 29 3d 3e 61 2c 47 4d 3a 28 29 3d 3e 67 2c 56 44 3a 28 29 3d 3e 70 2c 65 52 3a 28 29 3d 3e 76 2c 74 36 3a 28 29 3d 3e 63 2c 78 39 3a 28 29 3d 3e 64 7d 29 3b 76 61 72 20 69 3d 72 28 32 32 38 39 34 29 2c 6e 3d 72 28 39 36 39 38 37 29 2c 73 3d 72 28 34 35 32 34 31 29 2c 6c 3d 72 28 39 35 36 38 38 29 2c 6f 3d 72 28 34 34 30 35 32 29 3b 66 75 6e Data Ascii: 2d54"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[40946],{94156:(t,e,r)=>{r.d(e,{$j:()=>h,EJ:()=>u,Fg:()=>a,GM:()=>g,VD:()=>p,eR:()=>v,t6:()=>c,x9:()=>d});var i=r(22894),n=r(96987),s=r(45241),l=r(95688),o=r(44052);fun
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 38 2e 67 65 74 53 65 61 72 63 68 55 72 6c 28 7b 65 6e 74 69 74 79 3a 22 75 72 6c 22 2c 63 6f 6f 6b 69 65 3a 65 7d 29 3a 76 6f 69 64 20 30 2c 76 61 6c 75 65 3a 74 5b 65 5d 2c 6c 69 6e 6b 3a 6e 75 6c 6c 21 3d 3d 28 69 3d 6f 2e 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 72 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 26 26 69 2e 76 74 69 41 63 63 65 73 73 3f 6c 2e 5a 38 2e 67 65 74 53 65 61 72 63 68 55 72 6c 28 7b 65 6e 74 69 74 79 3a 22 75 72 6c 22 2c 63 6f 6f 6b 69 65 5f 76 61 6c 75 65 3a 74 5b 65 5d 7d 29 3a 76 6f 69 64 20 30 7d 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 6d 61 70 28 28 74 3d 3e 28 7b 74 65 78 74 3a 74 2c 6c 69 6e 6b 3a 6c 2e 5a 38 2e 67 65 74 53 65 61 72 63 68 55 72 Data Ascii: 8.getSearchUrl({entity:"url",cookie:e}):void 0,value:t[e],link:null!==(i=o.NU.currentUser)&&void 0!==i&&i.vtiAccess?l.Z8.getSearchUrl({entity:"url",cookie_value:t[e]}):void 0}}))}function c(t){return null==t?void 0:t.map((t=>({text:t,link:l.Z8.getSearchUr
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 3d 72 28 39 36 39 38 37 29 2c 64 3d 72 28 34 34 30 35 32 29 2c 70 3d 72 28 34 32 32 34 36 29 2c 76 3d 72 28 39 34 31 35 36 29 3b 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 74 29 3b 65 26 26 28 69 3d 69 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 65 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 72 2e 70 75 73 68 2e 61 70 70 6c 79 28 72 2c 69 29 Data Ascii: =r(96987),d=r(44052),p=r(42246),v=r(94156);function g(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(t);e&&(i=i.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,i)
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 52 4c 20 62 65 6c 6f 6e 67 73 20 74 6f 22 2c 74 68 69 73 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 54 79 70 65 3d 22 72 65 6c 61 74 65 64 5f 74 68 72 65 61 74 5f 61 63 74 6f 72 73 22 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 74 2c 65 2c 72 2c 69 2c 6e 2c 73 2c 6c 29 7b 74 72 79 7b 76 61 72 20 6f 3d 74 5b 73 5d 28 6c 29 2c 61 3d 6f 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 72 28 74 29 7d 6f 2e 64 6f 6e 65 3f 65 28 61 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 61 29 2e 74 68 65 6e 28 69 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 74 2c 65 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 Data Ascii: RL belongs to",this.relationshipType="related_threat_actors"}}function m(t,e,r,i,n,s,l){try{var o=t[s](l),a=o.value}catch(t){return void r(t)}o.done?e(a):Promise.resolve(a).then(i,n)}function y(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){va
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 63 61 74 69 6f 6e 2e 74 79 70 65 2c 72 65 73 70 6f 6e 73 65 43 6f 64 65 3a 6e 75 6c 6c 3d 3d 3d 28 65 3d 6f 2e 6c 61 73 74 5f 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 74 6f 53 74 72 69 6e 67 28 29 2c 63 6f 6e 74 65 6e 74 54 79 70 65 3a 6f 2e 6c 61 73 74 5f 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 68 65 61 64 65 72 73 26 26 6f 2e 6c 61 73 74 5f 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 68 65 61 64 65 72 73 5b 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 5d 2c 6c 61 73 74 41 6e 61 6c 79 73 69 73 3a 6f 2e 6c 61 73 74 5f 61 6e 61 6c 79 73 69 73 5f 64 61 74 65 7d 2c 75 3d 7b 63 61 74 65 67 6f 72 69 65 73 4b 65 79 56 61 6c 75 65 41 72 72 61 79 3a 28 30 2c 76 2e 46 67 29 28 6f 2e 63 Data Ascii: cation.type,responseCode:null===(e=o.last_http_response_code)\|\|void 0===e?void 0:e.toString(),contentType:o.last_http_response_headers&&o.last_http_response_headers["content-type"],lastAnalysis:o.last_analysis_date},u={categoriesKeyValueArray:(0,v.Fg)(o.c
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 5d 2c 65 29 7d 29 2c 4f 29 2c 74 68 69 73 2e 75 72 6c 49 64 3d 74 2c 74 68 69 73 2e 72 61 77 41 6e 61 6c 79 73 69 73 4d 61 70 3d 6e 65 77 20 4d 61 70 2c 74 68 69 73 2e 72 65 6c 61 74 65 64 52 65 6c 61 74 69 6f 6e 73 68 69 70 73 3d 5b 6e 65 77 20 66 28 74 68 69 73 2e 75 72 6c 49 64 29 5d 2c 6e 75 6c 6c 3d 3d 3d 28 65 3d 64 2e 4e 55 2e 63 75 72 72 65 6e 74 55 73 65 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 21 65 2e 76 74 69 41 63 63 65 73 73 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 72 3d 74 68 69 73 2e 67 65 74 44 6f 77 6e 6c 6f 61 64 65 64 46 69 6c 65 73 28 29 3b 72 2e 6c 6f 61 64 28 29 2e 74 68 65 6e 28 28 28 29 3d 3e 7b 69 66 28 72 2e 64 61 74 61 2e 6c 65 6e 67 74 68 26 26 72 2e 64 61 74 61 5b 30 5d 2e 5f 66 6f 75 6e 64 29 7b 63 6f 6e 73 74 20 74 Data Ascii: ],e)}),O),this.urlId=t,this.rawAnalysisMap=new Map,this.relatedRelationships=[new f(this.urlId)],null===(e=d.NU.currentUser)\|\|void 0===e\|\|!e.vtiAccess)return;const r=this.getDownloadedFiles();r.load().then((()=>{if(r.data.length&&r.data[0]._found){const t
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 70 73 28 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 72 65 74 75 72 6e 28 30 2c 70 2e 68 4e 29 28 28 28 29 3d 3e 6c 2e 68 34 2e 75 72 6c 73 2e 6c 69 73 74 52 65 6c 61 74 69 6f 6e 73 68 69 70 28 74 68 69 73 2e 75 72 6c 49 64 2c 22 63 6f 6e 74 61 63 74 65 64 5f 69 70 73 22 2c 62 28 7b 7d 2c 74 29 29 29 2c 28 74 3d 3e 63 2e 77 39 2e 75 6e 69 74 61 72 79 49 70 4c 69 73 74 46 6f 72 6d 61 74 74 65 72 28 28 30 2c 6e 2e 68 29 28 74 29 29 29 29 7d 67 65 74 43 6f 6e 74 65 6e 74 53 74 72 69 6e 67 73 28 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 Data Ascii: ps(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};return(0,p.hN)((()=>l.h4.urls.listRelationship(this.urlId,"contacted_ips",b({},t))),(t=>c.w9.unitaryIpListFormatter((0,n.h)(t))))}getContentStrings(){let t=arguments.length>0&&void 0!==a
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 28 74 68 69 73 2e 75 72 6c 49 64 2c 22 75 72 6c 73 5f 72 65 6c 61 74 65 64 5f 62 79 5f 74 72 61 63 6b 65 72 5f 69 64 22 2c 62 28 7b 7d 2c 74 29 29 29 2c 28 74 3d 3e 63 2e 77 39 2e 75 72 6c 46 6f 72 6d 61 74 74 65 72 28 28 30 2c 6e 2e 68 29 28 74 29 29 29 29 7d 67 65 74 45 6d 62 65 64 64 65 64 4a 73 46 69 6c 65 73 28 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 72 65 74 75 72 6e 28 30 2c 70 2e 68 4e 29 28 28 28 29 3d 3e 6c 2e 68 34 2e 75 72 6c 73 2e 6c 69 73 74 52 65 6c 61 74 69 6f 6e 73 68 69 70 28 74 68 69 73 2e 75 72 6c 49 64 2c 22 65 6d 62 65 64 64 65 64 5f 6a 73 5f 66 69 6c 65 73 22 2c 62 28 7b 7d 2c Data Ascii: (this.urlId,"urls_related_by_tracker_id",b({},t))),(t=>c.w9.urlFormatter((0,n.h)(t))))}getEmbeddedJsFiles(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};return(0,p.hN)((()=>l.h4.urls.listRelationship(this.urlId,"embedded_js_files",b({},
2025-01-15 16:45:02 UTC	884	IN	Data Raw: 28 74 68 69 73 2e 75 72 6c 49 64 2c 22 76 6f 74 65 73 22 2c 62 28 7b 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 3a 5b 22 69 74 65 6d 22 2c 22 76 6f 74 65 72 22 5d 7d 2c 74 29 2c 65 3f 28 30 2c 6f 2e 70 76 29 28 7b 7d 29 3a 7b 7d 29 29 2c 28 74 3d 3e 63 2e 77 39 2e 76 6f 74 65 46 6f 72 6d 61 74 74 65 72 28 28 30 2c 6e 2e 68 29 28 74 29 29 29 29 7d 67 65 74 43 6f 6c 6c 65 63 74 69 6f 6e 73 28 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 72 65 74 75 72 6e 28 30 2c 70 2e 46 70 29 28 28 28 29 3d 3e 6c 2e 68 34 2e 75 72 6c 73 2e 6c 69 73 74 52 65 6c 61 74 69 6f 6e 73 68 69 70 28 74 68 69 73 2e 75 72 6c 49 64 2c 22 Data Ascii: (this.urlId,"votes",b({relationships:["item","voter"]},t),e?(0,o.pv)({}):{})),(t=>c.w9.voteFormatter((0,n.h)(t))))}getCollections(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};return(0,p.Fp)((()=>l.h4.urls.listRelationship(this.urlId,"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.18	60918	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:02 UTC	690	OUT	GET /gui/38744.5bea5a50b3de4fbaba50.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:02 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:02 GMT expires: Thu, 15 Jan 2026 16:45:02 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 49bce2d4ee02a106cc78520f06ea61c7 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:02 UTC	1003	IN	Data Raw: 33 62 35 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 38 37 34 34 5d 2c 7b 33 38 37 34 34 3a 28 74 2c 69 2c 6c 29 3d 3e 7b 76 61 72 20 65 3d 6c 28 33 31 30 38 38 29 2c 61 3d 6c 28 34 38 37 30 34 29 2c 6f 3d 6c 28 31 36 36 34 35 29 2c 6e 3d 6c 28 33 36 34 36 38 29 2c 73 3d 6c 28 36 32 38 33 32 29 2c 72 3d 6c 28 38 35 32 30 30 29 2c 64 3d 6c 28 31 35 33 32 33 29 2c 75 3d 6c 28 39 36 38 35 35 29 2c 63 3d 6c 28 39 36 39 38 37 29 2c 76 3d 6c 28 34 35 32 34 31 29 2c 70 3d 6c 28 39 35 36 38 38 29 2c 68 3d 28 6c 28 35 37 35 36 30 29 2c 6c 28 32 31 36 36 Data Ascii: 3b50"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[38744],{38744:(t,i,l)=>{var e=l(31088),a=l(48704),o=l(16645),n=l(36468),s=l(62832),r=l(85200),d=l(15323),u=l(96855),c=l(96987),v=l(45241),p=l(95688),h=(l(57560),l(2166
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 6c 6c 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 6c 3d 74 2e 64 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6c 7c 7c 6e 75 6c 6c 3d 3d 3d 28 6c 3d 6c 2e 61 74 74 72 69 62 75 74 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6c 3f 76 6f 69 64 20 30 3a 6c 2e 63 6f 6c 6c 65 63 74 69 6f 6e 5f 74 79 70 65 29 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 3f 69 3a 22 22 7d 69 73 52 6f 6c 65 56 69 73 69 62 6c 65 28 74 29 7b 76 61 72 20 69 2c 6c 3b 72 65 74 75 72 6e 21 21 5b 22 6d 61 6c 77 61 72 65 2d 66 61 6d 69 6c 79 22 2c 22 73 6f 66 74 77 61 72 65 2d 74 6f 6f 6c 6b 69 74 22 5d 2e 69 6e 63 6c 75 64 65 73 28 6e 75 6c 6c 21 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 6c 3d 74 2e 64 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6c 7c 7c 6e 75 6c 6c 3d 3d 3d Data Ascii: ll==t\|\|null===(l=t.data)\|\|void 0===l\|\|null===(l=l.attributes)\|\|void 0===l?void 0:l.collection_type))&&void 0!==i?i:""}isRoleVisible(t){var i,l;return!!["malware-family","software-toolkit"].includes(null!==(i=null==t\|\|null===(l=t.data)\|\|void 0===l\|\|null===
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 5f 74 79 70 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 3f 69 3a 22 22 29 7d 69 73 49 6f 63 43 6f 75 6e 74 65 72 56 69 73 69 62 6c 65 28 74 29 7b 76 61 72 20 69 2c 6c 3b 72 65 74 75 72 6e 21 21 5b 22 63 6f 6c 6c 65 63 74 69 6f 6e 22 5d 2e 69 6e 63 6c 75 64 65 73 28 6e 75 6c 6c 21 3d 3d 28 69 3d 6e 75 6c 6c 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 6c 3d 74 2e 64 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6c 7c 7c 6e 75 6c 6c 3d 3d 3d 28 6c 3d 6c 2e 61 74 74 72 69 62 75 74 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6c 3f 76 6f 69 64 20 30 3a 6c 2e 63 6f 6c 6c 65 63 74 69 6f 6e 5f 74 79 70 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 3f 69 3a 22 22 29 7d 72 69 73 6b 52 61 74 69 6e 67 28 74 29 7b 76 61 72 20 69 2c 6c 3b 72 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d 74 7c Data Ascii: _type)&&void 0!==i?i:"")}isIocCounterVisible(t){var i,l;return!!["collection"].includes(null!==(i=null==t\|\|null===(l=t.data)\|\|void 0===l\|\|null===(l=l.attributes)\|\|void 0===l?void 0:l.collection_type)&&void 0!==i?i:"")}riskRating(t){var i,l;return(null==t\|
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 6e 20 6c 3f 6c 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 63 6c 75 64 65 73 28 22 77 69 64 65 22 29 3f 22 74 65 78 74 2d 64 61 6e 67 65 72 22 3a 6c 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 63 6c 75 64 65 73 28 22 63 6f 6e 66 69 72 6d 65 64 22 29 3f 22 74 65 78 74 2d 68 6f 6e 65 79 22 3a 6c 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 63 6c 75 64 65 73 28 22 61 76 61 69 6c 61 62 6c 65 22 29 7c 7c 6c 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 63 6c 75 64 65 73 28 22 72 65 70 6f 72 74 65 64 22 29 3f 22 74 65 78 74 2d 77 61 72 6e 69 6e 67 22 3a 22 22 3a 22 22 7d 63 76 73 73 56 65 72 73 69 6f 6e 28 74 29 7b 76 61 72 20 69 2c 6c 3b 63 6f 6e 73 74 20 65 3d 6e 75 6c 6c 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 69 3d 74 2e 64 61 74 61 Data Ascii: n l?l.toLowerCase().includes("wide")?"text-danger":l.toLowerCase().includes("confirmed")?"text-honey":l.toLowerCase().includes("available")\|\|l.toLowerCase().includes("reported")?"text-warning":"":""}cvssVersion(t){var i,l;const e=null==t\|\|null===(i=t.data
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 63 6c 61 73 73 3d 22 66 77 2d 62 6f 6c 64 22 3e 24 7b 30 7d 3c 2f 73 70 61 6e 3e 20 3c 73 6c 6f 74 20 6e 61 6d 65 3d 22 68 65 61 64 65 72 2d 72 69 67 68 74 22 3e 3c 2f 73 6c 6f 74 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 61 72 64 2d 62 6f 64 79 20 70 79 2d 30 20 70 78 2d 33 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 69 73 74 2d 67 72 6f 75 70 20 6c 69 73 74 2d 67 72 6f 75 70 2d 66 6c 75 73 68 22 20 73 74 79 6c 65 3d 22 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 62 67 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 20 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 70 61 64 64 69 6e 67 2d 78 3a 20 30 3b 22 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 60 29 2c 74 68 69 73 2e Data Ascii: class="fw-bold">${0}</span> <slot name="header-right"></slot> </div> <div class="card-body py-0 px-3"> <div class="list-group list-group-flush" style="--bs-list-group-bg: transparent; --bs-list-group-item-padding-x: 0;"> ${0} </div> </div> </div> `),this.
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 2e 61 74 74 72 69 62 75 74 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 63 6f 6c 6c 65 63 74 69 6f 6e 5f 74 79 70 65 2c 5b 5b 22 74 68 72 65 61 74 2d 61 63 74 6f 72 22 2c 28 29 3d 3e 74 68 69 73 2e 72 65 6e 64 65 72 54 68 72 65 61 74 41 63 74 6f 72 49 63 6f 6e 28 74 29 5d 2c 5b 22 6d 61 6c 77 61 72 65 2d 66 61 6d 69 6c 79 22 2c 28 29 3d 3e 64 2e 62 75 67 49 63 6f 6e 5d 2c 5b 22 73 6f 66 74 77 61 72 65 2d 74 6f 6f 6c 6b 69 74 22 2c 28 29 3d 3e 64 2e 68 61 6d 6d 65 72 57 72 65 6e 63 68 49 63 6f 6e 5d 2c 5b 22 63 61 6d 70 61 69 67 6e 22 2c 28 29 3d 3e 64 2e 74 61 72 67 65 74 49 63 6f 6e 5d 2c 5b 22 72 65 70 6f 72 74 22 2c 28 29 3d 3e 7b 76 61 72 20 69 3b 72 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 69 Data Ascii: .attributes)\|\|void 0===o?void 0:o.collection_type,[["threat-actor",()=>this.renderThreatActorIcon(t)],["malware-family",()=>d.bugIcon],["software-toolkit",()=>d.hammerWrenchIcon],["campaign",()=>d.targetIcon],["report",()=>{var i;return(null==t\|\|null===(i
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 3d 28 24 3d 24 2e 61 74 74 72 69 62 75 74 65 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 24 26 26 24 2e 61 75 74 6f 67 65 6e 65 72 61 74 65 64 5f 73 75 6d 6d 61 72 79 7c 7c 6e 75 6c 6c 21 3d 74 26 26 6e 75 6c 6c 21 3d 3d 28 5f 3d 74 2e 64 61 74 61 29 26 26 76 6f 69 64 20 30 21 3d 3d 5f 26 26 6e 75 6c 6c 21 3d 3d 28 5f 3d 5f 2e 61 74 74 72 69 62 75 74 65 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 5f 26 26 5f 2e 63 6f 6e 74 65 6e 74 7c 7c 6e 75 6c 6c 21 3d 74 26 26 6e 75 6c 6c 21 3d 3d 28 6b 3d 74 2e 64 61 74 61 29 26 26 76 6f 69 64 20 30 21 3d 3d 6b 26 26 6e 75 6c 6c 21 3d 3d 28 6b 3d 6b 2e 61 74 74 72 69 62 75 74 65 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 6b 26 26 6b 2e 64 65 73 63 72 69 70 74 69 6f 6e 3f 63 2e 77 39 2e 72 65 6d 6f 76 65 4d 61 72 6b 64 6f 77 6e 46 Data Ascii: =($=$.attributes)&&void 0!==$&&$.autogenerated_summary\|\|null!=t&&null!==(_=t.data)&&void 0!==_&&null!==(_=_.attributes)&&void 0!==_&&_.content\|\|null!=t&&null!==(k=t.data)&&void 0!==k&&null!==(k=k.attributes)&&void 0!==k&&k.description?c.w9.removeMarkdownF
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 73 74 20 41 63 74 69 76 69 74 79 3a 20 24 7b 30 7d 20 3c 2f 73 70 61 6e 3e 60 29 2c 63 2e 77 39 2e 70 61 72 73 65 44 61 74 65 53 68 6f 72 74 46 6f 72 6d 61 74 28 74 2e 64 61 74 61 2e 61 74 74 72 69 62 75 74 65 73 2e 6c 61 73 74 5f 73 65 65 6e 29 29 7d 72 65 6e 64 65 72 50 75 62 6c 69 73 68 65 64 44 61 74 65 28 74 29 7b 76 61 72 20 69 2c 6c 2c 65 2c 6f 2c 6e 2c 73 3b 72 65 74 75 72 6e 22 72 65 70 6f 72 74 22 3d 3d 3d 28 6e 75 6c 6c 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 69 3d 74 2e 64 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 7c 7c 6e 75 6c 6c 3d 3d 3d 28 69 3d 69 2e 61 74 74 72 69 62 75 74 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 63 6f 6c 6c 65 63 74 69 6f 6e 5f 74 79 70 65 29 26 26 6e 75 6c 6c 21 3d 74 26 26 6e 75 Data Ascii: st Activity: ${0} </span>`),c.w9.parseDateShortFormat(t.data.attributes.last_seen))}renderPublishedDate(t){var i,l,e,o,n,s;return"report"===(null==t\|\|null===(i=t.data)\|\|void 0===i\|\|null===(i=i.attributes)\|\|void 0===i?void 0:i.collection_type)&&null!=t&&nu
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 69 67 69 6e 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 6c 3d 74 2e 64 61 74 61 2e 61 74 74 72 69 62 75 74 65 73 2e 6f 72 69 67 69 6e 3b 6c 65 74 20 6f 2c 6e 2c 73 3b 69 66 28 6c 3d 3d 3d 65 2e 43 6f 6c 6c 65 63 74 69 6f 6e 73 4f 72 69 67 69 6e 2e 47 6f 6f 67 6c 65 54 68 72 65 61 74 49 6e 74 65 6c 29 6f 3d 64 2e 67 74 69 46 61 76 69 63 6f 6e 43 6f 6c 6f 72 65 64 49 63 6f 6e 2c 6e 3d 22 47 6f 6f 67 6c 65 20 54 68 72 65 61 74 20 49 6e 74 65 6c 6c 69 67 65 6e 63 65 22 3b 65 6c 73 65 20 69 66 28 6c 3d 3d 3d 65 2e 43 6f 6c 6c 65 63 74 69 6f 6e 73 4f 72 69 67 69 6e 2e 50 61 72 74 6e 65 72 7c 7c 6c 3d 3d 3d 65 2e 43 6f 6c 6c 65 63 74 69 6f 6e 73 4f 72 69 67 69 6e 2e 43 72 6f 77 64 73 6f 75 72 63 65 64 29 7b 76 61 72 20 72 3b 69 66 28 6e 3d 60 28 24 7b 6c 7d 29 60 Data Ascii: igin)return;const l=t.data.attributes.origin;let o,n,s;if(l===e.CollectionsOrigin.GoogleThreatIntel)o=d.gtiFaviconColoredIcon,n="Google Threat Intelligence";else if(l===e.CollectionsOrigin.Partner\|\|l===e.CollectionsOrigin.Crowdsourced){var r;if(n=`(${l})`
2025-01-15 16:45:02 UTC	1390	IN	Data Raw: 20 70 6f 73 69 74 69 6f 6e 2d 61 62 73 6f 6c 75 74 65 22 20 2e 69 73 6f 3d 22 24 7b 30 7d 22 3e 3c 2f 76 74 2d 75 69 2d 66 6c 61 67 3e 20 3c 2f 64 69 76 3e 60 29 2c 74 2e 64 61 74 61 2e 61 74 74 72 69 62 75 74 65 73 2e 73 6f 75 72 63 65 5f 72 65 67 69 6f 6e 29 3a 28 30 2c 61 2e 68 74 6d 6c 29 28 41 7c 7c 28 41 3d 7a 60 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 73 74 61 63 6b 20 66 73 2d 34 22 3e 24 7b 30 7d 3c 2f 73 70 61 6e 3e 60 29 2c 64 2e 67 6c 6f 62 65 49 63 6f 6e 29 29 3a 64 2e 61 63 74 6f 72 49 63 6f 6e 7d 72 65 6e 64 65 72 44 65 66 61 75 6c 74 44 65 74 61 69 6c 73 28 74 29 7b 76 61 72 20 69 2c 6c 2c 65 2c 6f 2c 6e 2c 73 2c 72 2c 64 2c 75 2c 76 2c 68 2c 62 2c 6d 3b 69 66 28 21 74 68 69 73 2e 68 61 73 44 65 74 61 69 6c 73 53 65 63 74 69 6f 6e 48 69 Data Ascii: position-absolute" .iso="${0}"></vt-ui-flag> </div>`),t.data.attributes.source_region):(0,a.html)(A\|\|(A=z`<span class="hstack fs-4">${0}</span>`),d.globeIcon)):d.actorIcon}renderDefaultDetails(t){var i,l,e,o,n,s,r,d,u,v,h,b,m;if(!this.hasDetailsSectionHi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.18	60920	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:02 UTC	511	OUT	GET /gui/88279.532f3865c685074ed6bc.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:03 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:02 GMT expires: Thu, 15 Jan 2026 16:45:02 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 039e5cc34383cd0836e94c6ce5aefa62 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:03 UTC	1003	IN	Data Raw: 33 39 38 64 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 32 37 39 2c 38 33 33 30 32 2c 36 30 39 32 31 5d 2c 7b 38 38 32 37 39 3a 28 65 2c 74 2c 69 29 3d 3e 7b 76 61 72 20 73 3d 69 28 38 37 36 37 38 29 2c 72 3d 69 28 34 38 37 30 34 29 2c 6f 3d 69 28 31 36 36 34 35 29 2c 61 3d 69 28 39 32 36 31 39 29 2c 6e 3d 69 28 39 34 31 37 29 2c 6c 3d 69 28 34 35 32 34 31 29 2c 64 3d 69 28 34 34 30 35 32 29 2c 63 3d 69 28 34 32 37 31 32 29 2c 68 3d 28 69 28 35 31 31 39 36 29 2c 69 28 31 35 33 32 33 29 29 2c 75 3d 69 28 36 38 31 32 32 29 2c 66 3d 69 28 39 35 36 Data Ascii: 398d"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[88279,83302,60921],{88279:(e,t,i)=>{var s=i(87678),r=i(48704),o=i(16645),a=i(92619),n=i(9417),l=i(45241),d=i(44052),c=i(42712),h=(i(51196),i(15323)),u=i(68122),f=i(956
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 7b 73 75 70 65 72 28 29 2c 74 68 69 73 2e 74 68 72 65 61 74 50 72 6f 66 69 6c 65 73 3d 5b 5d 2c 74 68 69 73 2e 69 73 4c 6f 61 64 69 6e 67 54 68 72 65 61 74 50 72 6f 66 69 6c 65 73 3d 21 31 2c 74 68 69 73 2e 73 65 6c 65 63 74 65 64 54 68 72 65 61 74 50 72 6f 66 69 6c 65 73 3d 6e 65 77 20 53 65 74 2c 74 68 69 73 2e 74 68 72 65 61 74 50 72 6f 66 69 6c 65 46 69 6c 74 65 72 3d 22 22 2c 74 68 69 73 2e 63 68 61 6e 67 65 73 53 65 6c 65 63 74 65 64 54 68 72 65 61 74 50 72 6f 66 69 6c 65 73 3d 7b 61 64 64 65 64 54 70 3a 6e 65 77 20 53 65 74 2c 72 65 6d 6f 76 65 64 54 70 73 3a 6e 65 77 20 53 65 74 7d 2c 74 68 69 73 2e 69 6e 69 74 69 61 6c 53 65 6c 65 63 74 65 64 54 68 72 65 61 74 50 72 6f 66 69 6c 65 73 3d 6e 65 77 20 53 65 74 2c 74 68 69 73 2e 6c 6f 61 64 54 68 72 Data Ascii: {super(),this.threatProfiles=[],this.isLoadingThreatProfiles=!1,this.selectedThreatProfiles=new Set,this.threatProfileFilter="",this.changesSelectedThreatProfiles={addedTp:new Set,removedTps:new Set},this.initialSelectedThreatProfiles=new Set,this.loadThr
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 74 28 22 72 65 74 72 69 65 76 65 64 2d 74 68 72 65 61 74 2d 70 72 6f 66 69 6c 65 73 22 2c 7b 64 65 74 61 69 6c 3a 7b 74 68 72 65 61 74 50 72 6f 66 69 6c 65 73 3a 65 2e 74 68 72 65 61 74 50 72 6f 66 69 6c 65 73 7d 2c 62 75 62 62 6c 65 73 3a 21 30 2c 63 6f 6d 70 6f 73 65 64 3a 21 30 7d 29 29 29 2c 65 2e 73 65 74 49 6e 69 74 69 61 6c 43 68 65 63 6b 65 64 54 68 72 65 61 74 50 72 6f 66 69 6c 65 73 28 29 7d 66 69 6e 61 6c 6c 79 7b 65 2e 69 73 4c 6f 61 64 69 6e 67 54 68 72 65 61 74 50 72 6f 66 69 6c 65 73 3d 21 31 7d 7d 29 29 28 29 7d 68 61 6e 64 6c 65 4d 6f 64 69 66 79 49 6e 74 65 72 65 73 74 73 49 6e 54 68 72 65 61 74 50 72 6f 66 69 6c 65 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 53 28 28 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 69 66 28 65 2e Data Ascii: t("retrieved-threat-profiles",{detail:{threatProfiles:e.threatProfiles},bubbles:!0,composed:!0}))),e.setInitialCheckedThreatProfiles()}finally{e.isLoadingThreatProfiles=!1}}))()}handleModifyInterestsInThreatProfile(){var e=this;return S((function*(){if(e.
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 2e 72 65 6d 6f 76 65 64 54 70 73 2e 61 64 64 28 74 2e 76 61 6c 75 65 29 2c 74 68 69 73 2e 63 68 61 6e 67 65 73 53 65 6c 65 63 74 65 64 54 68 72 65 61 74 50 72 6f 66 69 6c 65 73 2e 61 64 64 65 64 54 70 2e 64 65 6c 65 74 65 28 74 2e 76 61 6c 75 65 29 29 2c 74 68 69 73 2e 6e 6f 74 69 66 79 43 68 61 6e 67 65 73 28 29 7d 68 61 6e 64 6c 65 53 65 61 72 63 68 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3b 74 68 69 73 2e 74 68 72 65 61 74 50 72 6f 66 69 6c 65 46 69 6c 74 65 72 3d 74 2e 76 61 6c 75 65 7d 72 65 6e 64 65 72 54 68 72 65 61 74 50 72 6f 66 69 6c 65 73 4c 69 73 74 28 29 7b 63 6f 6e 73 74 20 65 3d 74 68 69 73 2e 74 68 72 65 61 74 50 72 6f 66 69 6c 65 73 2e 66 69 6c 74 65 72 28 28 65 3d 3e 21 74 68 69 73 2e 74 68 72 65 Data Ascii: .removedTps.add(t.value),this.changesSelectedThreatProfiles.addedTp.delete(t.value)),this.notifyChanges()}handleSearch(e){const t=e.currentTarget;this.threatProfileFilter=t.value}renderThreatProfilesList(){const e=this.threatProfiles.filter((e=>!this.thre
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 77 2d 62 6f 6c 64 22 3e 41 64 64 20 74 6f 20 79 6f 75 72 20 54 68 72 65 61 74 20 50 72 6f 66 69 6c 65 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 62 6f 64 79 2d 74 65 72 74 69 61 72 79 22 3e 20 46 6f 6c 6c 6f 77 20 74 68 69 73 20 65 6e 74 69 74 79 20 69 6e 20 79 6f 75 72 20 54 68 72 65 61 74 20 50 72 6f 66 69 6c 65 20 61 6e 64 20 74 72 61 63 6b 20 61 6e 79 20 75 70 64 61 74 65 73 20 6f 6e 20 69 74 2e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 76 73 74 61 63 6b 20 67 61 70 2d 33 22 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 3c 68 72 20 63 6c 61 73 73 3d 22 6d 2d 30 22 3e 20 3c 61 20 72 6f 6c 65 3d 22 Data Ascii: iv> <div class="fw-bold">Add to your Threat Profile</div> <div class="text-body-tertiary"> Follow this entity in your Threat Profile and track any updates on it. </div> </div> </div> </div> <div class="vstack gap-3"> ${0} </div> <hr class="m-0"> <a role="
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 29 61 3d 52 65 66 6c 65 63 74 2e 64 65 63 6f 72 61 74 65 28 65 2c 74 2c 69 2c 73 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 6e 3e 3d 30 3b 6e 2d 2d 29 28 72 3d 65 5b 6e 5d 29 26 26 28 61 3d 28 6f 3c 33 3f 72 28 61 29 3a 6f 3e 33 3f 72 28 74 2c 69 2c 61 29 3a 72 28 74 2c 69 29 29 7c 7c 61 29 3b 72 65 74 75 72 6e 20 6f 3e 33 26 26 61 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2c 61 29 2c 61 7d 3b 63 6f 6e 73 74 20 44 3d 22 66 6f 6c 6c 6f 77 2d 66 6f 72 6d 22 2c 4c 3d 22 61 64 64 2d 74 68 72 65 61 74 2d 70 72 6f 66 69 6c Data Ascii: "==typeof Reflect&&"function"==typeof Reflect.decorate)a=Reflect.decorate(e,t,i,s);else for(var n=e.length-1;n>=0;n--)(r=e[n])&&(a=(o<3?r(a):o>3?r(t,i,a):r(t,i))\|\|a);return o>3&&a&&Object.defineProperty(t,i,a),a};const D="follow-form",L="add-threat-profil
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 74 68 69 73 2e 72 65 71 75 65 73 74 55 70 64 61 74 65 28 29 7d 63 68 65 63 6b 48 61 73 43 68 61 6e 67 65 73 28 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 28 74 68 69 73 2e 68 61 73 43 68 61 6e 67 65 64 29 2e 73 6f 6d 65 28 28 65 3d 3e 65 29 29 7d 77 69 6c 6c 55 70 64 61 74 65 28 65 29 7b 76 61 72 20 74 2c 69 3b 65 2e 68 61 73 28 22 73 68 6f 77 54 68 72 65 61 74 50 72 6f 66 69 6c 65 22 29 26 26 74 68 69 73 2e 73 68 6f 77 54 68 72 65 61 74 50 72 6f 66 69 6c 65 26 26 21 5b 22 72 65 70 6f 72 74 22 2c 22 63 6f 6c 6c 65 63 74 69 6f 6e 22 2c 22 76 75 6c 6e 65 72 61 62 69 6c 69 74 79 22 5d 2e 69 6e 63 6c 75 64 65 73 28 6e 75 6c 6c 21 3d 3d 28 74 3d 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 54 79 70 65 29 26 26 76 6f 69 64 20 30 21 3d 3d Data Ascii: this.requestUpdate()}checkHasChanges(){return Object.values(this.hasChanged).some((e=>e))}willUpdate(e){var t,i;e.has("showThreatProfile")&&this.showThreatProfile&&!["report","collection","vulnerability"].includes(null!==(t=this.collectionType)&&void 0!==
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 69 64 3d 22 24 7b 30 7d 22 20 2e 65 6e 74 69 74 79 49 64 3d 22 24 7b 30 7d 22 20 2e 63 6f 6c 6c 65 63 74 69 6f 6e 54 79 70 65 3d 22 24 7b 30 7d 22 20 40 63 68 61 6e 67 65 3d 22 24 7b 30 7d 22 3e 3c 2f 61 64 64 2d 74 6f 2d 74 68 72 65 61 74 2d 70 72 6f 66 69 6c 65 2d 66 6f 72 6d 3e 20 3c 2f 64 69 76 3e 60 29 2c 4c 2c 74 68 69 73 2e 65 6e 74 69 74 79 49 64 2c 74 68 69 73 2e 63 6f 6c 6c 65 63 74 69 6f 6e 54 79 70 65 2c 74 68 69 73 2e 68 61 6e 64 6c 65 46 6f 72 6d 43 68 61 6e 67 65 29 3a 72 2e 6e 6f 74 68 69 6e 67 2c 74 68 69 73 2e 68 61 6e 64 6c 65 53 61 76 65 50 72 65 66 65 72 65 6e 63 65 73 2c 74 68 69 73 2e 69 73 53 61 76 69 6e 67 50 72 65 66 65 72 65 6e 63 65 73 7c 7c 21 74 68 69 73 2e 63 68 65 63 6b 48 61 73 43 68 61 6e 67 65 73 28 29 2c 74 68 69 73 2e Data Ascii: id="${0}" .entityId="${0}" .collectionType="${0}" @change="${0}"></add-to-threat-profile-form> </div>`),L,this.entityId,this.collectionType,this.handleFormChange):r.nothing,this.handleSavePreferences,this.isSavingPreferences\|\|!this.checkHasChanges(),this.
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 28 29 5d 2c 4f 2e 70 72 6f 74 6f 74 79 70 65 2c 22 74 68 72 65 61 74 50 72 6f 66 69 6c 65 50 65 72 6d 69 73 73 69 6f 6e 73 22 2c 76 6f 69 64 20 30 29 2c 4f 3d 52 28 5b 28 30 2c 6f 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 29 28 22 6e 65 77 2d 66 6f 6c 6c 6f 77 2d 66 6f 72 6d 22 29 5d 2c 4f 29 7d 2c 39 30 35 31 30 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 4e 39 3a 28 29 3d 3e 43 2c 51 6d 3a 28 29 3d 3e 77 7d 29 3b 76 61 72 20 73 3d 69 28 34 38 37 30 34 29 2c 72 3d 69 28 31 36 36 34 35 29 2c 6f 3d 69 28 36 32 38 33 32 29 2c 61 3d 69 28 39 32 36 31 39 29 2c 6e 3d 69 28 31 35 33 32 33 29 2c 6c 3d 69 28 35 34 35 31 32 29 2c 64 3d 69 28 38 33 33 30 32 29 2c 63 3d 69 28 34 34 30 35 32 29 2c 68 3d 69 28 38 31 33 33 34 29 3b 6c 65 74 20 75 2c 66 2c 70 Data Ascii: ()],O.prototype,"threatProfilePermissions",void 0),O=R([(0,o.customElement)("new-follow-form")],O)},90510:(e,t,i)=>{i.d(t,{N9:()=>C,Qm:()=>w});var s=i(48704),r=i(16645),o=i(62832),a=i(92619),n=i(15323),l=i(54512),d=i(83302),c=i(44052),h=i(81334);let u,f,p
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 69 70 74 69 6f 6e 50 72 65 66 65 72 65 6e 63 65 73 22 29 26 26 28 74 68 69 73 2e 66 6f 72 6d 56 61 6c 75 65 73 3d 7b 69 73 44 61 69 6c 79 45 6d 61 69 6c 43 68 65 63 6b 65 64 3a 21 28 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 68 69 73 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 50 72 65 66 65 72 65 6e 63 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 2e 64 61 74 61 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 6e 75 6c 6c 3d 3d 3d 28 74 3d 74 2e 61 74 74 72 69 62 75 74 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 21 74 2e 64 61 69 6c 79 5f 65 6d 61 69 6c 29 2c 69 73 53 65 6e 64 45 6d 61 69 6c 43 68 65 63 6b 65 64 3a 21 28 6e 75 6c 6c 3d 3d 3d 28 69 3d 74 68 69 73 2e 73 75 62 73 63 72 69 70 74 69 6f 6e 50 72 65 66 65 72 65 6e 63 Data Ascii: iptionPreferences")&&(this.formValues={isDailyEmailChecked:!(null===(t=this.subscriptionPreferences)\|\|void 0===t\|\|null===(t=t.data)\|\|void 0===t\|\|null===(t=t.attributes)\|\|void 0===t\|\|!t.daily_email),isSendEmailChecked:!(null===(i=this.subscriptionPreferenc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.18	60921	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:02 UTC	511	OUT	GET /gui/58686.f1ac5a4a1e085aafcbb6.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:03 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:02 GMT expires: Thu, 15 Jan 2026 16:45:02 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 642316817018800f17334c9828e02892 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:03 UTC	1003	IN	Data Raw: 33 61 30 36 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 38 36 38 36 2c 38 35 39 30 2c 38 31 37 31 39 2c 34 34 37 30 36 2c 31 31 39 30 31 2c 31 39 30 32 34 5d 2c 7b 32 35 34 32 33 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 72 28 65 29 2c 69 2e 64 28 65 2c 7b 64 6f 77 6e 6c 6f 61 64 49 63 6f 6e 3a 28 29 3d 3e 6e 2e 64 6f 77 6e 6c 6f 61 64 49 63 6f 6e 7d 29 3b 76 61 72 20 6e 3d 69 28 31 35 33 32 33 29 7d 2c 31 34 32 33 32 3a 28 74 2c 65 2c 69 29 3d 3e 7b 69 2e 72 28 65 29 2c 69 2e 64 28 65 2c 7b 70 69 6e 70 6f 69 6e 74 49 63 6f 6e 3a 28 29 3d 3e 6e 7d 29 Data Ascii: 3a06"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[58686,8590,81719,44706,11901,19024],{25423:(t,e,i)=>{i.r(e),i.d(e,{downloadIcon:()=>n.downloadIcon});var n=i(15323)},14232:(t,e,i)=>{i.r(e),i.d(e,{pinpointIcon:()=>n})
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 6f 69 64 20 69 28 74 29 7d 61 2e 64 6f 6e 65 3f 65 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6e 2c 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 70 74 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 69 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 76 61 72 20 73 3d 74 2e 61 70 70 6c 79 28 65 2c 69 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 64 74 28 73 2c 6e 2c 6f 2c 72 2c 61 2c 22 6e 65 78 74 22 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 61 28 74 29 7b 64 74 28 73 2c 6e 2c 6f 2c 72 2c 61 2c 22 74 68 72 6f 77 22 2c 74 29 7d 72 28 76 6f 69 64 20 30 29 7d 29 29 7d 7d 76 61 72 20 62 74 3d Data Ascii: oid i(t)}a.done?e(l):Promise.resolve(l).then(n,o)}function pt(t){return function(){var e=this,i=arguments;return new Promise((function(n,o){var s=t.apply(e,i);function r(t){dt(s,n,o,r,a,"next",t)}function a(t){dt(s,n,o,r,a,"throw",t)}r(void 0)}))}}var bt=
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 79 53 65 6c 65 63 74 6f 72 28 22 23 6e 65 74 77 6f 72 6b 4c 6f 63 61 74 69 6f 6e 73 49 63 6f 6e 22 29 3b 65 26 26 78 2e 4b 4b 2e 73 65 6e 64 41 6e 61 6c 79 74 69 63 73 4f 6e 48 6f 76 65 72 28 65 2c 7b 63 61 74 65 67 6f 72 79 3a 22 76 74 69 20 66 69 6c 65 20 61 63 74 69 6f 6e 73 22 2c 61 63 74 69 6f 6e 3a 22 73 65 61 72 63 68 20 72 6f 77 3a 20 68 6f 76 65 72 65 64 20 72 65 6c 61 74 65 64 20 6e 65 74 77 6f 72 6b 20 6c 6f 63 61 74 69 6f 6e 73 22 7d 29 3b 63 6f 6e 73 74 20 69 3d 74 68 69 73 2e 72 65 6e 64 65 72 52 6f 6f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 6d 61 74 63 68 43 6f 6e 74 65 78 74 49 63 6f 6e 22 29 3b 69 26 26 78 2e 4b 4b 2e 73 65 6e 64 41 6e 61 6c 79 74 69 63 73 4f 6e 48 6f 76 65 72 28 69 2c 7b 63 61 74 65 67 6f 72 79 3a 22 76 74 Data Ascii: ySelector("#networkLocationsIcon");e&&x.KK.sendAnalyticsOnHover(e,{category:"vti file actions",action:"search row: hovered related network locations"});const i=this.renderRoot.querySelector("#matchContextIcon");i&&x.KK.sendAnalyticsOnHover(i,{category:"vt
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 64 54 65 78 74 54 6f 43 6c 69 70 62 6f 61 72 64 2c 28 30 2c 6c 2e 69 66 44 65 66 69 6e 65 64 29 28 74 68 69 73 2e 65 6e 74 69 74 79 2e 69 64 29 2c 74 68 69 73 2e 70 69 76 6f 74 61 62 6c 65 26 26 74 68 69 73 2e 65 6e 74 69 74 79 2e 5f 66 6f 75 6e 64 26 26 21 74 68 69 73 2e 6d 69 6e 69 6d 61 6c 3f 28 30 2c 73 2e 68 74 6d 6c 29 28 53 7c 7c 28 53 3d 63 74 60 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 66 69 6c 65 2d 61 63 74 69 6f 6e 73 22 3e 20 3c 73 70 61 6e 20 3f 68 69 64 64 65 6e 3d 22 24 7b 30 7d 22 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 70 6f 73 69 74 69 6f 6e 3d 22 62 6f 74 74 6f 6d 22 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 74 65 78 74 3d 22 46 69 6e 64 20 73 69 6d 69 6c 61 72 20 66 69 6c 65 73 22 20 40 6d 6f 75 73 65 6f 76 65 72 3d 22 24 7b 30 7d Data Ascii: dTextToClipboard,(0,l.ifDefined)(this.entity.id),this.pivotable&&this.entity._found&&!this.minimal?(0,s.html)(S\|\|(S=ct` <span class="file-actions"> <span ?hidden="${0}" data-tooltip-position="bottom" data-tooltip-text="Find similar files" @mouseover="${0}
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 3d 22 69 6e 66 6f 49 63 6f 6e 73 22 3e 20 3c 73 70 61 6e 20 69 64 3d 22 6d 61 74 63 68 43 6f 6e 74 65 78 74 49 63 6f 6e 22 20 64 61 74 61 2d 70 6f 70 6f 76 65 72 3d 22 73 6e 69 70 70 65 74 73 22 20 64 61 74 61 2d 70 6f 70 6f 76 65 72 2d 70 6f 73 69 74 69 6f 6e 3d 22 62 6f 74 74 6f 6d 22 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 70 6f 73 69 74 69 6f 6e 3d 22 74 6f 70 22 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 74 65 78 74 3d 22 54 68 69 73 20 66 69 6c 65 20 64 6f 65 73 20 6e 6f 74 20 63 6f 6e 74 61 69 6e 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 63 6f 6e 74 65 78 74 75 61 6c 6c 79 20 72 65 6c 61 74 65 64 20 74 6f 20 74 68 65 20 73 65 61 72 63 68 20 71 75 65 72 79 22 20 63 6c 61 73 73 3d 22 24 7b 30 7d 22 20 40 6d 6f 75 73 65 6f 76 65 72 3d 22 24 7b 30 7d 22 Data Ascii: ="infoIcons"> <span id="matchContextIcon" data-popover="snippets" data-popover-position="bottom" data-tooltip-position="top" data-tooltip-text="This file does not contain information contextually related to the search query" class="${0}" @mouseover="${0}"
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 2c 74 68 69 73 2e 72 65 6e 64 65 72 53 75 62 74 69 74 6c 65 73 28 29 2c 74 68 69 73 2e 69 66 4e 6f 74 4d 69 6e 69 6d 61 6c 28 28 30 2c 73 2e 68 74 6d 6c 29 28 7a 7c 7c 28 7a 3d 63 74 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 69 6c 65 2d 65 78 74 72 61 2d 69 6e 66 6f 20 74 61 67 73 22 3e 24 7b 30 7d 3c 2f 64 69 76 3e 20 60 29 2c 74 68 69 73 2e 72 65 6e 64 65 72 54 61 67 73 28 29 29 29 29 2c 22 64 2d 6e 6f 6e 65 22 29 7d 72 65 6e 64 65 72 52 65 70 6f 72 74 4c 69 6e 6b 28 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 65 6e 74 69 74 79 2e 5f 66 6f 75 6e 64 3f 77 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 74 68 69 73 2e 65 6e 74 69 74 79 55 72 6c 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 73 68 61 32 35 36 7c 7c 74 68 69 73 2e 65 6e 74 69 74 79 2e Data Ascii: ,this.renderSubtitles(),this.ifNotMinimal((0,s.html)(z\|\|(z=ct` <div class="file-extra-info tags">${0}</div> `),this.renderTags()))),"d-none")}renderReportLink(){const t=this.entity._found?w.Z8.getRedirectUrl(this.entityUrl,this.entity.sha256\|\|this.entity.
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 70 6f 76 65 72 3a 28 29 3d 3e 7b 7d 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 6d 65 61 6e 69 6e 67 66 75 6c 5f 6e 61 6d 65 2c 78 2e 4b 4b 2e 73 68 6f 77 54 6f 6f 6c 74 69 70 2c 70 2e 63 6f 6e 74 65 6e 74 43 6f 70 79 49 63 6f 6e 2c 74 68 69 73 2e 5f 73 65 6e 64 54 65 78 74 54 6f 43 6c 69 70 62 6f 61 72 64 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 6d 65 61 6e 69 6e 67 66 75 6c 5f 6e 61 6d 65 29 3a 28 30 2c 73 2e 68 74 6d 6c 29 28 44 7c 7c 28 44 3d 63 74 60 20 3c 64 69 76 20 69 64 3d 22 6e 61 6d 65 22 3e 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6e 6f 2d 6e 61 6d 65 22 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 70 6f 73 69 74 69 6f 6e 3d 22 74 6f 70 22 20 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 74 65 78 74 3d 22 24 7b 30 7d 22 20 40 6d 6f 75 73 65 6f 76 65 72 3d 22 Data Ascii: pover:()=>{},this.entity.meaningful_name,x.KK.showTooltip,p.contentCopyIcon,this._sendTextToClipboard,this.entity.meaningful_name):(0,s.html)(D\|\|(D=ct` <div id="name"> <span class="no-name" data-tooltip-position="top" data-tooltip-text="${0}" @mouseover="
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 74 68 69 73 2e 5f 69 73 53 69 6d 69 6c 61 72 69 74 79 53 63 6f 72 65 43 6f 6c 56 69 73 69 62 6c 65 28 74 68 69 73 2e 65 6e 74 69 74 79 29 26 26 74 68 69 73 2e 72 65 6e 64 65 72 43 6f 6c 75 6d 6e 28 22 53 69 6d 69 6c 61 72 69 74 79 22 2c 22 63 65 6e 74 65 72 20 63 6f 6c 2d 73 73 64 65 65 70 2d 73 63 6f 72 65 22 2c 28 30 2c 73 2e 68 74 6d 6c 29 28 4d 7c 7c 28 4d 3d 63 74 60 20 3c 64 69 76 3e 20 24 7b 30 7d 25 20 3c 2f 64 69 76 3e 20 60 29 2c 5b 74 68 69 73 2e 65 6e 74 69 74 79 2e 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 2e 73 69 6d 69 6c 61 72 69 74 79 5f 73 63 6f 72 65 5d 2e 6d 61 70 28 74 68 69 73 2e 5f 74 6f 50 65 72 63 65 6e 74 61 67 65 29 2e 6d 61 70 28 74 68 69 73 2e 5f 66 6f 72 6d 61 74 54 6f 54 77 6f 44 65 63 69 6d 61 6c 73 29 2e 6d 61 Data Ascii: this._isSimilarityScoreColVisible(this.entity)&&this.renderColumn("Similarity","center col-ssdeep-score",(0,s.html)(M\|\|(M=ct` <div> ${0}% </div> `),[this.entity.context_attributes.similarity_score].map(this._toPercentage).map(this._formatToTwoDecimals).ma
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 69 73 2e 65 6e 74 69 74 79 2e 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 7c 7c 22 74 69 6d 65 73 74 61 6d 70 22 69 6e 20 74 68 69 73 2e 65 6e 74 69 74 79 2e 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 29 7c 7c 74 68 69 73 2e 72 65 6e 64 65 72 43 6f 6c 75 6d 6e 28 22 4c 61 73 74 20 73 65 65 6e 22 2c 22 73 65 65 6e 20 63 6f 6c 2d 6c 73 65 65 6e 22 2c 28 30 2c 73 2e 68 74 6d 6c 29 28 42 7c 7c 28 42 3d 63 74 60 20 3c 75 6c 3e 20 3c 6c 69 3e 20 3c 64 69 76 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 3c 64 69 76 3e 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 3c 2f 6c 69 3e 20 3c 2f 75 6c 3e 60 29 2c 67 2e 77 39 2e 67 65 74 54 69 6d 65 4f 72 44 61 74 65 28 74 68 69 73 2e 65 6e 74 69 74 79 2e 6c 61 73 74 5f 73 75 62 6d 69 73 73 69 6f 6e 5f 64 61 74 Data Ascii: is.entity.context_attributes\|\|"timestamp"in this.entity.context_attributes)\|\|this.renderColumn("Last seen","seen col-lseen",(0,s.html)(B\|\|(B=ct` <ul> <li> <div> ${0} </div> <div> ${0} </div> </li> </ul>`),g.w9.getTimeOrDate(this.entity.last_submission_dat
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 69 73 2e 69 63 6f 6e 29 29 2c 22 68 69 64 64 65 6e 2d 62 65 6c 6f 77 2d 31 32 30 30 22 29 7d 72 65 6e 64 65 72 4d 6f 62 69 6c 65 56 69 65 77 28 29 7b 76 61 72 20 74 2c 65 3b 72 65 74 75 72 6e 28 30 2c 73 2e 68 74 6d 6c 29 28 57 7c 7c 28 57 3d 63 74 60 20 3c 76 74 2d 75 69 2d 6d 61 69 6e 2d 73 65 61 72 63 68 2d 65 6e 74 69 74 79 2d 6d 6f 62 69 6c 65 2d 72 6f 77 20 3f 63 68 65 63 6b 65 64 3d 22 24 7b 30 7d 22 20 2e 63 68 65 63 6b 65 64 43 68 61 6e 67 65 64 3d 22 24 7b 30 7d 22 20 63 6c 61 73 73 3d 22 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 20 64 2d 62 6c 6f 63 6b 22 3e 20 3c 64 69 76 20 73 6c 6f 74 3d 22 63 6f 6c 75 6d 6e 2d 73 6d 61 6c 6c 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 65 66 74 2d 73 69 64 65 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d Data Ascii: is.icon)),"hidden-below-1200")}renderMobileView(){var t,e;return(0,s.html)(W\|\|(W=ct` <vt-ui-main-search-entity-mobile-row ?checked="${0}" .checkedChanged="${0}" class="border-bottom d-block"> <div slot="column-small"> <div class="left-side"> <div class="m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.18	60922	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:02 UTC	690	OUT	GET /gui/25390.cc03726ca6fe66c5a420.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:03 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:03 GMT expires: Thu, 15 Jan 2026 16:45:03 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 86eef127fc89fcd4f9361e555b2faabe content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:03 UTC	1003	IN	Data Raw: 33 39 62 32 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 35 33 39 30 5d 2c 7b 35 38 32 31 35 3a 28 6f 2c 65 2c 72 29 3d 3e 7b 76 61 72 20 74 3d 72 28 34 38 37 30 34 29 2c 73 3d 72 28 31 36 36 34 35 29 2c 6e 3d 72 28 31 35 34 33 31 29 2c 69 3d 72 28 34 35 32 34 31 29 2c 62 3d 72 28 39 35 39 36 30 29 3b 6c 65 74 20 64 2c 61 3d 6f 3d 3e 6f 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 6f 2c 65 2c 72 2c 74 2c 73 2c 6e 2c 69 29 7b 74 72 79 7b 76 61 72 20 62 3d 6f 5b 6e 5d 28 69 29 2c 64 3d 62 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 6f 29 7b 72 65 74 75 72 6e 20 76 Data Ascii: 39b2"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[25390],{58215:(o,e,r)=>{var t=r(48704),s=r(16645),n=r(15431),i=r(45241),b=r(95960);let d,a=o=>o;function l(o,e,r,t,s,n,i){try{var b=o[n](i),d=b.value}catch(o){return v
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 2e 65 78 70 6f 72 74 46 6e 28 6f 29 2c 69 2e 4b 4b 2e 68 69 64 65 54 6f 61 73 74 28 72 29 7d 63 61 74 63 68 28 6f 29 7b 69 2e 4b 4b 2e 73 68 6f 77 54 6f 61 73 74 28 72 2c 22 43 6f 75 6c 64 20 6e 6f 74 20 65 78 70 6f 72 74 20 63 6f 6c 6c 65 63 74 69 6f 6e 20 72 65 6c 61 74 69 6f 6e 73 68 69 70 22 29 2c 6e 2e 75 2e 72 65 70 6f 72 74 28 6f 29 7d 66 69 6e 61 6c 6c 79 7b 72 2e 6c 6f 61 64 69 6e 67 3d 21 31 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 74 68 69 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 2c 73 29 7b 76 61 72 20 6e 3d 65 2e 61 70 70 6c 79 28 6f 2c 72 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 6f 29 7b 6c 28 6e 2c 74 2c 73 2c 69 2c 62 2c 22 6e 65 Data Ascii: .exportFn(o),i.KK.hideToast(r)}catch(o){i.KK.showToast(r,"Could not export collection relationship"),n.u.report(o)}finally{r.loading=!1}}},function(){var o=this,r=arguments;return new Promise((function(t,s){var n=e.apply(o,r);function i(o){l(n,t,s,i,b,"ne
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 35 36 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 6f 2e 69 64 5d 7d 2c 61 6c 6c 3a 6f 3d 3e 7b 76 61 72 20 65 2c 72 2c 74 3b 63 6f 6e 73 74 20 73 3d 5b 5d 3b 72 65 74 75 72 6e 20 6f 2e 6d 64 35 3f 73 2e 70 75 73 68 28 6f 2e 6d 64 35 29 3a 6e 75 6c 6c 21 3d 3d 28 65 3d 6f 2e 61 74 74 72 69 62 75 74 65 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 26 26 65 2e 6d 64 35 26 26 73 2e 70 75 73 68 28 6f 2e 61 74 74 72 69 62 75 74 65 73 2e 6d 64 35 29 2c 6f 2e 73 68 61 31 3f 73 2e 70 75 73 68 28 6f 2e 73 68 61 31 29 3a 6e 75 6c 6c 21 3d 3d 28 72 3d 6f 2e 61 74 74 72 69 62 75 74 65 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 72 26 26 72 2e 73 68 61 31 26 26 73 2e 70 75 73 68 28 6f 2e 61 74 74 72 69 62 75 74 65 73 2e 73 68 61 31 29 2c 6f 2e 73 68 61 32 35 36 3f 73 2e 70 Data Ascii: 56)&&void 0!==e?e:o.id]},all:o=>{var e,r,t;const s=[];return o.md5?s.push(o.md5):null!==(e=o.attributes)&&void 0!==e&&e.md5&&s.push(o.attributes.md5),o.sha1?s.push(o.sha1):null!==(r=o.attributes)&&void 0!==r&&r.sha1&&s.push(o.attributes.sha1),o.sha256?s.p
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 74 3a 21 30 7d 29 5d 2c 76 2e 70 72 6f 74 6f 74 79 70 65 2c 22 6c 6f 61 64 69 6e 67 22 2c 76 6f 69 64 20 30 29 2c 68 28 5b 28 30 2c 73 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 41 72 72 61 79 7d 29 5d 2c 76 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 74 69 74 69 65 73 22 2c 76 6f 69 64 20 30 29 2c 68 28 5b 28 30 2c 73 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 41 72 72 61 79 7d 29 5d 2c 76 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 65 6c 65 63 74 65 64 45 6e 74 69 74 69 65 73 22 2c 76 6f 69 64 20 30 29 2c 76 3d 68 28 5b 28 30 2c 73 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 29 28 22 76 74 2d 75 69 2d 63 6f 70 79 2d 66 69 6c 65 73 2d 73 75 62 6d 65 6e 75 22 29 5d 2c 76 29 3b 76 61 72 20 77 3d 72 28 39 38 39 31 29 2c 66 3d 72 28 34 35 33 38 36 29 Data Ascii: t:!0})],v.prototype,"loading",void 0),h([(0,s.property)({type:Array})],v.prototype,"entities",void 0),h([(0,s.property)({type:Array})],v.prototype,"selectedEntities",void 0),v=h([(0,s.customElement)("vt-ui-copy-files-submenu")],v);var w=r(9891),f=r(45386)
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 65 72 79 53 65 6c 65 63 74 6f 72 28 27 5b 73 6c 6f 74 3d 22 73 65 6c 65 63 74 65 64 22 5d 27 29 3b 74 68 69 73 2e 73 65 6c 65 63 74 65 64 45 6e 74 69 74 69 65 73 2e 6c 65 6e 67 74 68 3f 28 6f 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 2c 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 69 73 61 62 6c 65 64 22 2c 22 66 61 6c 73 65 22 29 29 3a 28 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 2c 22 22 29 2c 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 64 69 73 61 62 6c 65 64 22 2c 22 74 72 75 65 22 29 29 7d 63 6f 70 79 44 61 74 61 43 6c 69 63 6b 28 6f 29 7b 63 6f 6e 73 74 20 65 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 63 6f 70 79 2d 64 61 74 Data Ascii: erySelector('[slot="selected"]');this.selectedEntities.length?(o.removeAttribute("disabled"),o.setAttribute("aria-disabled","false")):(o.setAttribute("disabled",""),o.setAttribute("aria-disabled","true"))}copyDataClick(o){const e=new CustomEvent("copy-dat
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 69 73 2e 61 70 70 6c 79 42 6f 72 64 65 72 3d 21 31 2c 74 68 69 73 2e 71 75 6f 74 61 4b 65 79 3d 22 69 6e 74 65 6c 6c 69 67 65 6e 63 65 5f 64 6f 77 6e 6c 6f 61 64 73 5f 6d 6f 6e 74 68 6c 79 22 2c 74 68 69 73 2e 71 75 6f 74 61 54 68 72 65 73 68 6f 6c 64 3d 2e 38 35 7d 73 74 61 74 69 63 20 67 65 74 20 73 74 79 6c 65 73 28 29 7b 72 65 74 75 72 6e 28 30 2c 74 2e 75 6e 73 61 66 65 43 53 53 29 28 4f 2e 41 29 7d 67 65 74 20 65 6e 74 69 74 69 65 73 28 29 7b 76 61 72 20 6f 2c 65 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 28 6f 3d 74 68 69 73 2e 65 6e 74 69 74 79 53 4f 29 26 26 76 6f 69 64 20 30 21 3d 3d 6f 26 26 6e 75 6c 6c 21 3d 3d 28 6f 3d 6f 2e 64 61 74 61 29 26 26 76 6f 69 64 20 30 21 3d 3d 6f 26 26 6f 2e 6c 65 6e 67 74 68 3f 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 Data Ascii: is.applyBorder=!1,this.quotaKey="intelligence_downloads_monthly",this.quotaThreshold=.85}static get styles(){return(0,t.unsafeCSS)(O.A)}get entities(){var o,e;return null!==(o=this.entitySO)&&void 0!==o&&null!==(o=o.data)&&void 0!==o&&o.length?null===(e=t
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 76 74 2d 75 69 2d 63 6f 70 79 2d 66 69 6c 65 73 2d 73 75 62 6d 65 6e 75 3e 20 3c 2f 76 74 2d 75 69 2d 73 75 62 6d 65 6e 75 3e 20 3c 2f 76 74 2d 75 69 2d 6d 65 6e 75 3e 60 29 2c 28 30 2c 6e 2e 63 6c 61 73 73 4d 61 70 29 28 7b 22 62 74 6e 2d 6c 69 6e 6b 22 3a 21 74 68 69 73 2e 61 70 70 6c 79 42 6f 72 64 65 72 2c 22 62 74 6e 2d 6f 75 74 6c 69 6e 65 2d 73 65 63 6f 6e 64 61 72 79 22 3a 74 68 69 73 2e 61 70 70 6c 79 42 6f 72 64 65 72 7d 29 2c 21 28 6e 75 6c 6c 21 3d 3d 28 6f 3d 74 68 69 73 2e 65 6e 74 69 74 79 53 4f 29 26 26 76 6f 69 64 20 30 21 3d 3d 6f 26 26 6e 75 6c 6c 21 3d 3d 28 6f 3d 6f 2e 64 61 74 61 29 26 26 76 6f 69 64 20 30 21 3d 3d 6f 26 26 6f 2e 6c 65 6e 67 74 68 29 2c 6e 75 6c 6c 21 3d 3d 28 65 3d 74 68 69 73 2e 65 6e 74 69 74 79 53 4f 29 26 26 76 Data Ascii: vt-ui-copy-files-submenu> </vt-ui-submenu> </vt-ui-menu>`),(0,n.classMap)({"btn-link":!this.applyBorder,"btn-outline-secondary":this.applyBorder}),!(null!==(o=this.entitySO)&&void 0!==o&&null!==(o=o.data)&&void 0!==o&&o.length),null!==(e=this.entitySO)&&v
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 65 6e 74 69 74 79 53 4f 2c 74 68 69 73 2e 73 65 6c 65 63 74 65 64 49 74 65 6d 73 7c 7c 5b 5d 2c 74 68 69 73 2e 65 6e 74 69 74 69 65 73 2c 74 68 69 73 2e 71 75 65 72 79 29 3a 74 2e 6e 6f 74 68 69 6e 67 2c 74 68 69 73 2e 64 6f 77 6e 6c 6f 61 64 41 6c 6c 46 6e 3f 28 30 2c 74 2e 68 74 6d 6c 29 28 41 7c 7c 28 41 3d 54 60 20 3c 76 74 2d 75 69 2d 73 75 62 6d 65 6e 75 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 73 68 6f 77 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 63 6f 6e 74 65 6e 74 73 22 20 6e 61 6d 65 3d 22 65 78 70 6f 72 74 2d 66 69 6c 65 73 22 3e 20 3c 68 36 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 68 65 61 64 65 72 20 62 6f 72 64 65 72 2d 74 6f 70 22 3e 20 45 78 70 6f 72 74 20 6d 61 74 63 68 69 6e 67 20 68 61 73 Data Ascii: entitySO,this.selectedItems\|\|[],this.entities,this.query):t.nothing,this.downloadAllFn?(0,t.html)(A\|\|(A=T` <vt-ui-submenu class="dropdown-menu show" style="display: contents" name="export-files"> <h6 class="dropdown-header border-top"> Export matching has
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 62 6f 74 74 6f 6d 22 3e 20 3c 61 20 68 72 65 66 3d 22 24 7b 30 7d 22 20 63 6c 61 73 73 3d 22 61 6c 69 67 6e 2d 73 65 6c 66 2d 65 6e 64 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 67 72 65 73 73 22 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 20 35 70 78 3b 20 77 69 64 74 68 3a 20 32 30 30 70 78 3b 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 67 72 65 73 73 2d 62 61 72 20 24 7b 30 7d 22 20 72 6f 6c 65 3d 22 70 72 6f 67 72 65 73 73 62 61 72 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 24 7b 30 7d 25 22 20 61 72 69 61 2d 76 61 6c 75 65 6e 6f 77 3d 22 24 7b 30 7d 22 20 61 72 69 61 2d 76 61 6c 75 65 6d 69 6e 3d 22 30 22 20 61 72 69 61 2d 76 61 6c 75 65 6d 61 78 3d 22 24 7b 30 7d 22 3e 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 73 6d 61 Data Ascii: bottom"> <a href="${0}" class="align-self-end"> <div class="progress" style="height: 5px; width: 200px;"> <div class="progress-bar ${0}" role="progressbar" style="width: ${0}%" aria-valuenow="${0}" aria-valuemin="0" aria-valuemax="${0}"></div> </div> <sma
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 2d 70 69 6e 6b 3a 20 23 30 30 30 30 30 30 3b 2d 2d 62 73 2d 72 65 64 3a 20 23 63 35 32 34 32 30 3b 2d 2d 62 73 2d 6f 72 61 6e 67 65 3a 20 23 65 35 37 33 30 30 3b 2d 2d 62 73 2d 79 65 6c 6c 6f 77 3a 20 23 66 63 65 39 36 37 3b 2d 2d 62 73 2d 67 72 65 65 6e 3a 20 23 33 39 61 63 34 63 3b 2d 2d 62 73 2d 74 65 61 6c 3a 20 23 32 30 63 39 39 37 3b 2d 2d 62 73 2d 63 79 61 6e 3a 20 23 32 38 37 62 62 35 3b 2d 2d 62 73 2d 62 6c 61 63 6b 3a 20 23 30 30 30 3b 2d 2d 62 73 2d 77 68 69 74 65 3a 20 23 66 66 66 3b 2d 2d 62 73 2d 67 72 61 79 3a 20 23 36 36 36 36 36 36 3b 2d 2d 62 73 2d 67 72 61 79 2d 64 61 72 6b 3a 20 23 33 33 33 33 33 33 3b 2d 2d 62 73 2d 67 72 61 79 2d 31 30 30 3a 20 23 66 39 66 39 66 39 3b 2d 2d 62 73 2d 67 72 61 79 2d 32 30 30 3a 20 23 66 32 66 32 66 32 Data Ascii: -pink: #000000;--bs-red: #c52420;--bs-orange: #e57300;--bs-yellow: #fce967;--bs-green: #39ac4c;--bs-teal: #20c997;--bs-cyan: #287bb5;--bs-black: #000;--bs-white: #fff;--bs-gray: #666666;--bs-gray-dark: #333333;--bs-gray-100: #f9f9f9;--bs-gray-200: #f2f2f2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.18	60923	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:03 UTC	690	OUT	GET /gui/91755.8f8deca562ce3cc33280.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:03 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:03 GMT expires: Thu, 15 Jan 2026 16:45:03 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 92b832d9f9ebcf13c71ef8b9c9340894 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:03 UTC	1003	IN	Data Raw: 34 66 64 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 31 37 35 35 5d 2c 7b 39 31 37 35 35 3a 28 6f 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 74 3d 65 28 34 38 37 30 34 29 2c 73 3d 65 28 31 36 36 34 35 29 2c 62 3d 65 28 36 32 38 33 32 29 2c 6e 3d 65 28 34 34 30 35 32 29 2c 64 3d 65 28 34 35 32 34 31 29 3b 6c 65 74 20 69 2c 61 3d 6f 3d 3e 6f 3b 76 61 72 20 6c 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 72 2c 65 2c 74 29 7b 76 61 72 20 73 2c 62 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 3d 62 3c 33 3f 72 3a 6e 75 6c 6c 3d 3d 3d 74 3f 74 3d 4f 62 6a Data Ascii: 4fd0"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[91755],{91755:(o,r,e)=>{var t=e(48704),s=e(16645),b=e(62832),n=e(44052),d=e(45241);let i,a=o=>o;var l=function(o,r,e,t){var s,b=arguments.length,n=b<3?r:null===t?t=Obj
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 75 6c 6c 3d 3d 3d 28 73 3d 73 2e 6e 65 74 77 6f 72 6b 5f 6c 6f 63 61 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 73 3f 76 6f 69 64 20 30 3a 73 2e 69 64 5d 3a 6e 75 6c 6c 21 3d 3d 28 65 3d 6f 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 26 26 6e 75 6c 6c 21 3d 3d 28 65 3d 65 2e 6e 65 74 77 6f 72 6b 5f 6c 6f 63 61 74 69 6f 6e 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 26 26 6e 75 6c 6c 21 3d 3d 28 65 3d 65 2e 64 61 74 61 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 26 26 65 2e 69 64 3f 5b 6e 75 6c 6c 3d 3d 3d 28 62 3d 6f 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 62 7c 7c 6e 75 6c 6c 3d 3d 3d 28 62 3d 62 2e 6e 65 74 77 6f 72 6b 5f 6c 6f 63 61 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 62 Data Ascii: ull===(s=s.network_location)\|\|void 0===s?void 0:s.id]:null!==(e=o.relationships)&&void 0!==e&&null!==(e=e.network_location)&&void 0!==e&&null!==(e=e.data)&&void 0!==e&&e.id?[null===(b=o.relationships)\|\|void 0===b\|\|null===(b=b.network_location)\|\|void 0===b
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 69 73 2e 73 65 6c 65 63 74 69 6f 6e 4d 6f 64 65 3f 74 68 69 73 2e 73 65 6c 65 63 74 65 64 45 6e 74 69 74 69 65 73 3a 74 68 69 73 2e 65 6e 74 69 74 69 65 73 29 2e 6d 61 70 28 63 5b 6f 5d 29 3b 74 68 69 73 2e 63 6f 70 79 44 61 74 61 28 72 29 7d 63 6f 70 79 44 61 74 61 28 6f 29 7b 63 6f 6e 73 74 20 72 3d 6f 2e 66 69 6c 74 65 72 28 28 6f 3d 3e 6e 75 6c 6c 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 6c 65 6e 67 74 68 29 29 2e 6d 61 70 28 28 6f 3d 3e 6f 2e 6a 6f 69 6e 28 22 2c 20 22 29 29 29 3b 72 2e 6c 65 6e 67 74 68 26 26 64 2e 4b 4b 2e 73 65 6e 64 54 6f 43 6c 69 70 62 6f 61 72 64 28 74 68 69 73 2c 72 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2c 60 24 7b 72 2e 6c 65 6e 67 74 68 7d 20 69 74 65 6d 73 20 63 6f 70 69 65 64 20 74 6f 20 74 68 65 20 63 6c 69 70 62 6f 61 72 64 60 Data Ascii: is.selectionMode?this.selectedEntities:this.entities).map(c[o]);this.copyData(r)}copyData(o){const r=o.filter((o=>null==o?void 0:o.length)).map((o=>o.join(", ")));r.length&&d.KK.sendToClipboard(this,r.join("\n"),`${r.length} items copied to the clipboard`
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 73 6c 6f 74 3d 22 74 72 69 67 67 65 72 22 20 63 6c 61 73 73 3d 22 62 74 6e 20 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 20 24 7b 30 7d 20 66 77 2d 73 65 6d 69 62 6f 6c 64 22 20 3f 64 69 73 61 62 6c 65 64 3d 22 24 7b 30 7d 22 20 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 22 24 7b 30 7d 22 20 69 64 3d 22 65 78 70 6f 72 74 2d 62 74 6e 2d 6d 65 6e 75 22 3e 20 45 78 70 6f 72 74 20 3c 2f 62 75 74 74 6f 6e 3e 20 3c 76 74 2d 75 69 2d 73 75 62 6d 65 6e 75 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 73 68 6f 77 22 20 6e 61 6d 65 3d 22 65 78 70 6f 72 74 22 3e 20 24 7b 30 7d 20 3c 68 36 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 68 65 61 64 65 72 22 3e 43 6f 70 79 20 74 6f 20 63 6c 69 70 62 6f 61 Data Ascii: ype="button" slot="trigger" class="btn dropdown-toggle ${0} fw-semibold" ?disabled="${0}" aria-disabled="${0}" id="export-btn-menu"> Export </button> <vt-ui-submenu class="dropdown-menu show" name="export"> ${0} <h6 class="dropdown-header">Copy to clipboa
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 24 7b 30 7d 22 20 63 6c 61 73 73 3d 22 64 2d 62 6c 6f 63 6b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 22 3e 20 3c 62 75 74 74 6f 6e 20 73 6c 6f 74 3d 22 6a 73 6f 6e 22 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 22 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 64 61 74 61 2d 73 75 62 6d 65 6e 75 2d 63 6c 6f 73 65 2d 6f 6e 2d 63 6c 69 63 6b 20 69 64 3d 22 6a 73 6f 6e 2d 65 78 70 6f 72 74 2d 69 74 65 6d 2d 6d 65 6e 75 22 3e 20 41 73 20 4a 53 4f 4e 20 3c 2f 62 75 74 74 6f 6e 3e 20 3c 62 75 74 74 6f 6e 20 73 6c 6f 74 3d 22 63 73 76 22 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 22 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 64 61 74 61 2d 73 75 62 6d 65 6e 75 2d 63 6c 6f 73 65 2d 6f 6e 2d 63 6c 69 63 6b 20 69 Data Ascii: ${0}" class="d-block border-bottom"> <button slot="json" class="dropdown-item" role="menuitem" data-submenu-close-on-click id="json-export-item-menu"> As JSON </button> <button slot="csv" class="dropdown-item" role="menuitem" data-submenu-close-on-click i
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 2d 62 6c 75 65 3a 20 23 30 62 34 64 64 61 3b 2d 2d 62 73 2d 69 6e 64 69 67 6f 3a 20 23 36 36 31 30 66 32 3b 2d 2d 62 73 2d 70 75 72 70 6c 65 3a 20 23 36 66 34 32 63 31 3b 2d 2d 62 73 2d 70 69 6e 6b 3a 20 23 30 30 30 30 30 30 3b 2d 2d 62 73 2d 72 65 64 3a 20 23 63 35 32 34 32 30 3b 2d 2d 62 73 2d 6f 72 61 6e 67 65 3a 20 23 65 35 37 33 30 30 3b 2d 2d 62 73 2d 79 65 6c 6c 6f 77 3a 20 23 66 63 65 39 36 37 3b 2d 2d 62 73 2d 67 72 65 65 6e 3a 20 23 33 39 61 63 34 63 3b 2d 2d 62 73 2d 74 65 61 6c 3a 20 23 32 30 63 39 39 37 3b 2d 2d 62 73 2d 63 79 61 6e 3a 20 23 32 38 37 62 62 35 3b 2d 2d 62 73 2d 62 6c 61 63 6b 3a 20 23 30 30 30 3b 2d 2d 62 73 2d 77 68 69 74 65 3a 20 23 66 66 66 3b 2d 2d 62 73 2d 67 72 61 79 3a 20 23 36 36 36 36 36 36 3b 2d 2d 62 73 2d 67 72 61 Data Ascii: -blue: #0b4dda;--bs-indigo: #6610f2;--bs-purple: #6f42c1;--bs-pink: #000000;--bs-red: #c52420;--bs-orange: #e57300;--bs-yellow: #fce967;--bs-green: #39ac4c;--bs-teal: #20c997;--bs-cyan: #287bb5;--bs-black: #000;--bs-white: #fff;--bs-gray: #666666;--bs-gra
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 74 6c 65 3a 20 23 39 39 63 61 66 35 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 66 35 63 37 39 39 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 65 38 61 37 61 36 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 66 32 66 32 66 32 3b 2d 2d 62 73 2d 64 61 72 6b 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 62 33 62 33 62 33 3b 2d 2d 62 73 2d 77 68 69 74 65 2d 72 67 62 3a 20 32 35 35 2c 20 32 35 35 2c 20 32 35 35 3b 2d 2d 62 73 2d 62 6c 61 63 6b 2d 72 67 62 3a 20 30 2c 20 30 2c 20 30 3b 2d 2d 62 73 2d 66 6f 6e 74 2d 73 61 6e 73 2d 73 65 72 69 66 3a 20 22 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 22 2c 20 52 6f 62 6f 74 6f 2c 20 52 Data Ascii: tle: #99caf5;--bs-warning-border-subtle: #f5c799;--bs-danger-border-subtle: #e8a7a6;--bs-light-border-subtle: #f2f2f2;--bs-dark-border-subtle: #b3b3b3;--bs-white-rgb: 255, 255, 255;--bs-black-rgb: 0, 0, 0;--bs-font-sans-serif: "Source Sans Pro", Roboto, R
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 64 65 72 2d 72 61 64 69 75 73 3a 20 30 2e 33 37 35 72 65 6d 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 73 6d 3a 20 30 2e 32 35 72 65 6d 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 6c 67 3a 20 30 2e 35 72 65 6d 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 78 6c 3a 20 31 72 65 6d 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 78 78 6c 3a 20 32 72 65 6d 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 32 78 6c 3a 20 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 78 78 6c 29 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 70 69 6c 6c 3a 20 35 30 72 65 6d 3b 2d 2d 62 73 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 2e 35 72 65 6d 20 31 72 65 6d 20 72 67 Data Ascii: der-radius: 0.375rem;--bs-border-radius-sm: 0.25rem;--bs-border-radius-lg: 0.5rem;--bs-border-radius-xl: 1rem;--bs-border-radius-xxl: 2rem;--bs-border-radius-2xl: var(--bs-border-radius-xxl);--bs-border-radius-pill: 50rem;--bs-box-shadow: 0 0.5rem 1rem rg
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 62 75 74 74 6f 6e 2c 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 62 75 74 74 6f 6e 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 2c 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 3a 3a 2d 77 65 62 6b 69 74 2d 64 61 74 65 74 69 6d 65 2d 65 64 69 74 2d 66 69 65 6c 64 73 2d 77 72 61 70 70 65 72 2c 3a 3a 2d 77 65 62 6b 69 74 2d 64 61 74 65 74 69 6d 65 2d 65 64 69 74 2d 74 65 78 74 2c 3a 3a 2d 77 65 62 6b 69 74 2d 64 61 74 65 Data Ascii: rsor:pointer}button,[type=button]{-webkit-appearance:button}button:not(:disabled),[type=button]:not(:disabled){cursor:pointer}::-moz-focus-inner{padding:0;border-style:none}::-webkit-datetime-edit-fields-wrapper,::-webkit-datetime-edit-text,::-webkit-date
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 61 64 6f 77 2d 72 67 62 29 2c 20 2e 35 29 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 70 61 64 64 69 6e 67 2d 79 29 20 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 70 61 64 64 69 6e 67 2d 78 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 66 6f 6e 74 2d 73 69 7a 65 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 66 6f 6e 74 2d 77 65 69 67 68 74 29 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 6c 69 6e 65 2d 68 65 69 67 68 74 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d Data Ascii: adow-rgb), .5);display:inline-block;padding:var(--bs-btn-padding-y) var(--bs-btn-padding-x);font-family:var(--bs-btn-font-family);font-size:var(--bs-btn-font-size);font-weight:var(--bs-btn-font-weight);line-height:var(--bs-btn-line-height);color:var(--bs-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.18	60924	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:03 UTC	510	OUT	GET /gui/8405.5eb49c1a7107f741455b.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:03 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:03 GMT expires: Thu, 15 Jan 2026 16:45:03 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 8849da197404d61e6ce8c0d3b1a46df6 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:03 UTC	1003	IN	Data Raw: 33 64 37 64 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 34 30 35 5d 2c 7b 31 34 38 31 39 3a 28 74 2c 65 2c 72 29 3d 3e 7b 72 2e 64 28 65 2c 7b 69 3a 28 29 3d 3e 79 7d 29 3b 76 61 72 20 69 3d 72 28 39 32 38 31 35 29 2c 6e 3d 72 28 32 32 38 39 34 29 2c 6f 3d 72 28 36 30 32 33 33 29 2c 73 3d 72 28 34 37 31 32 33 29 2c 61 3d 72 28 37 30 30 35 31 29 2c 6c 3d 72 28 39 36 39 38 37 29 2c 68 3d 72 28 39 35 36 38 38 29 2c 63 3d 72 28 34 32 32 34 36 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 74 2c 65 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 Data Ascii: 3d7d"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[8405],{14819:(t,e,r)=>{r.d(e,{i:()=>y});var i=r(92815),n=r(22894),o=r(60233),s=r(47123),a=r(70051),l=r(96987),h=r(95688),c=r(42246);function u(t,e){var r=Object.keys(t
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 6d 61 69 6e 73 2e 6c 69 73 74 52 65 6c 61 74 69 6f 6e 73 68 69 70 28 74 2c 22 72 65 6c 61 74 65 64 5f 74 68 72 65 61 74 5f 61 63 74 6f 72 73 22 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 31 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 72 3d 6e 75 6c 6c 21 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3a 7b 7d 3b 65 25 32 3f 75 28 4f 62 6a 65 63 74 28 72 29 2c 21 30 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 28 74 2c 65 2c 72 5b 65 5d 29 7d 29 29 3a 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 2c 4f 62 Data Ascii: mains.listRelationship(t,"related_threat_actors",function(t){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?arguments[e]:{};e%2?u(Object(r),!0).forEach((function(e){d(t,e,r[e])})):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Ob
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 6f 66 20 69 29 72 65 74 75 72 6e 20 69 3b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 40 40 74 6f 50 72 69 6d 69 74 69 76 65 20 6d 75 73 74 20 72 65 74 75 72 6e 20 61 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 2e 22 29 7d 72 65 74 75 72 6e 28 22 73 74 72 69 6e 67 22 3d 3d 3d 65 3f 53 74 72 69 6e 67 3a 4e 75 6d 62 65 72 29 28 74 29 7d 28 74 2c 22 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 65 3f 65 3a 65 2b 22 22 7d 28 65 29 29 69 6e 20 74 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 76 61 6c 75 65 3a 72 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 74 5b Data Ascii: of i)return i;throw new TypeError("@@toPrimitive must return a primitive value.")}return("string"===e?String:Number)(t)}(t,"string");return"symbol"==typeof e?e:e+""}(e))in t?Object.defineProperty(t,e,{value:r,enumerable:!0,configurable:!0,writable:!0}):t[
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 72 6c 28 7b 65 6e 74 69 74 79 3a 22 64 6f 6d 61 69 6e 22 2c 63 6e 61 6d 65 5f 74 74 6c 3a 74 2e 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 2e 74 74 6c 7d 29 7d 7d 2c 74 68 69 73 2e 6e 73 43 6f 6e 74 65 78 74 41 74 74 72 69 62 75 74 65 50 61 72 61 6d 73 3d 7b 74 74 6c 3a 7b 63 6f 6c 75 6d 6e 4e 61 6d 65 3a 22 54 54 4c 22 2c 6c 69 6e 6b 3a 74 3d 3e 68 2e 5a 38 2e 67 65 74 53 65 61 72 63 68 55 72 6c 28 7b 65 6e 74 69 74 79 3a 22 64 6f 6d 61 69 6e 22 2c 6e 73 5f 74 74 6c 3a 74 2e 63 6f 6e 74 65 78 74 5f 61 74 74 72 69 62 75 74 65 73 2e 74 74 6c 7d 29 7d 7d 2c 74 68 69 73 2e 73 6f 61 43 6f 6e 74 65 78 74 41 74 74 72 69 62 75 74 65 50 61 72 61 6d 73 3d 7b 65 78 70 69 72 65 3a 7b 63 6f 6c 75 6d 6e 4e 61 6d 65 3a 22 45 78 70 69 72 65 22 7d 2c 6d 69 6e Data Ascii: rl({entity:"domain",cname_ttl:t.context_attributes.ttl})}},this.nsContextAttributeParams={ttl:{columnName:"TTL",link:t=>h.Z8.getSearchUrl({entity:"domain",ns_ttl:t.context_attributes.ttl})}},this.soaContextAttributeParams={expire:{columnName:"Expire"},min
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 2c 7b 64 61 74 61 3a 74 2e 64 61 74 61 2e 66 69 6c 74 65 72 28 63 2e 5a 4e 29 7d 29 29 29 29 2c 28 74 3d 3e 6c 2e 77 39 2e 66 69 6c 65 46 6f 72 6d 61 74 74 65 72 28 28 30 2c 69 2e 68 29 28 74 29 29 29 29 7d 2c 74 68 69 73 2e 72 65 66 65 72 72 65 72 46 69 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 72 65 74 75 72 6e 28 30 2c 63 2e 68 4e 29 28 28 28 29 3d 3e 6e 2e 68 34 2e 64 6f 6d 61 69 6e 73 2e 6c 69 73 74 52 65 6c 61 74 69 6f 6e 73 68 69 70 28 65 2e 69 64 2c 22 72 65 66 65 72 72 65 72 5f 66 69 6c 65 73 22 2c 66 28 7b 7d 2c 74 29 29 2e 74 68 65 6e 28 28 74 3d 3e 66 Data Ascii: ,{data:t.data.filter(c.ZN)})))),(t=>l.w9.fileFormatter((0,i.h)(t))))},this.referrerFiles=function(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};return(0,c.hN)((()=>n.h4.domains.listRelationship(e.id,"referrer_files",f({},t)).then((t=>f
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 74 52 65 6c 61 74 69 6f 6e 73 68 69 70 28 65 2e 69 64 2c 22 73 69 62 6c 69 6e 67 73 22 2c 66 28 7b 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 3a 5b 22 72 65 73 6f 6c 75 74 69 6f 6e 73 22 5d 7d 2c 74 29 29 29 2c 28 74 3d 3e 6c 2e 77 39 2e 66 6f 72 6d 61 74 44 6f 6d 61 69 6e 46 6f 72 4c 69 73 74 28 6c 2e 77 39 2e 64 6f 6d 61 69 6e 46 6f 72 6d 61 74 74 65 72 28 28 30 2c 69 2e 68 29 28 74 29 29 29 29 29 7d 2c 74 68 69 73 2e 63 61 61 52 65 63 6f 72 64 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 72 65 74 75 72 6e 28 30 2c 63 2e 68 4e 29 28 28 28 29 3d 3e 6e 2e 68 34 2e 64 6f 6d 61 Data Ascii: tRelationship(e.id,"siblings",f({relationships:["resolutions"]},t))),(t=>l.w9.formatDomainForList(l.w9.domainFormatter((0,i.h)(t)))))},this.caaRecords=function(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};return(0,c.hN)((()=>n.h4.doma
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 20 73 2e 75 6e 28 65 2e 69 64 29 3b 72 65 74 75 72 6e 20 79 69 65 6c 64 20 74 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 43 72 65 61 74 65 64 2c 74 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 73 2e 72 65 6c 61 74 65 64 5f 72 65 66 65 72 65 6e 63 65 73 7d 29 29 2c 74 68 69 73 2e 67 65 74 43 6f 6c 6c 65 63 74 69 6f 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 72 65 74 75 72 6e 28 30 2c 63 2e 46 70 29 28 28 28 29 3d 3e 6e 2e 68 34 2e 64 6f 6d 61 69 6e 73 2e 6c 69 73 74 52 65 6c 61 74 69 6f 6e 73 68 69 70 28 65 2e 69 64 2c 22 63 6f 6c 6c 65 63 74 69 6f 6e 73 22 2c 66 28 7b 72 65 Data Ascii: s.un(e.id);return yield t.relationshipsCreated,t.relationships.related_references})),this.getCollections=function(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};return(0,c.Fp)((()=>n.h4.domains.listRelationship(e.id,"collections",f({re
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 74 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 74 29 3b 65 26 26 28 69 3d 69 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 74 2c 65 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 29 2c 72 2e 70 75 73 68 2e 61 70 70 6c 79 28 72 2c 69 29 7d 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 2c 65 2c 72 29 7b 72 65 74 75 72 6e 28 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 6f 62 6a 65 Data Ascii: t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(t);e&&(i=i.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,i)}return r}function u(t,e,r){return(e=function(t){var e=function(t,e){if("obje
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 74 72 79 7b 76 61 72 20 61 3d 74 5b 6f 5d 28 73 29 2c 6c 3d 61 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 72 28 74 29 7d 61 2e 64 6f 6e 65 3f 65 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 69 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 66 75 6e 63 74 69 6f 6e 28 69 2c 6e 29 7b 76 61 72 20 6f 3d 74 2e 61 70 70 6c 79 28 65 2c 72 29 3b 66 75 6e 63 74 69 6f 6e 20 73 28 74 29 7b 70 28 6f 2c 69 2c 6e 2c 73 2c 61 2c 22 Data Ascii: unction p(t,e,r,i,n,o,s){try{var a=t[o](s),l=a.value}catch(t){return void r(t)}a.done?e(l):Promise.resolve(l).then(i,n)}function m(t){return function(){var e=this,r=arguments;return new Promise((function(i,n){var o=t.apply(e,r);function s(t){p(o,i,n,s,a,"
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 74 3d 3e 28 30 2c 69 2e 68 29 28 74 2e 64 61 74 61 29 29 29 29 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 29 7b 76 61 72 20 65 3b 73 75 70 65 72 28 74 29 2c 65 3d 74 68 69 73 2c 74 68 69 73 2e 69 70 41 64 64 72 65 73 73 3d 74 2c 74 68 69 73 2e 67 65 74 43 6f 6d 6d 65 6e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 72 65 74 75 72 6e 28 30 2c 68 2e 68 4e 29 28 28 72 3d 3e 6e 2e 68 34 2e 69 70 41 64 64 72 65 73 73 65 73 2e 6c 69 73 74 52 65 6c 61 74 69 6f 6e 73 68 69 70 28 65 2e 69 70 41 64 64 72 65 73 73 2c 22 63 6f 6d 6d 65 6e 74 73 22 2c 76 28 7b 72 65 6c 61 74 69 6f 6e Data Ascii: t=>(0,i.h)(t.data)))){constructor(t){var e;super(t),e=this,this.ipAddress=t,this.getComments=function(){let t=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};return(0,h.hN)((r=>n.h4.ipAddresses.listRelationship(e.ipAddress,"comments",v({relation

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.18	60925	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:03 UTC	690	OUT	GET /gui/26149.f619930a733b68a09edc.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:03 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:03 GMT expires: Thu, 15 Jan 2026 16:45:03 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 8f6ddb1c242ca83d9072141c7abf1434 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:03 UTC	1003	IN	Data Raw: 34 61 66 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 36 31 34 39 5d 2c 7b 32 36 31 34 39 3a 28 6f 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 74 3d 65 28 34 38 37 30 34 29 2c 62 3d 65 28 31 36 36 34 35 29 2c 73 3d 65 28 34 34 30 35 32 29 2c 6e 3d 65 28 34 35 32 34 31 29 3b 6c 65 74 20 64 2c 69 3d 6f 3d 3e 6f 3b 76 61 72 20 61 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 72 2c 65 2c 74 29 7b 76 61 72 20 62 2c 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 3d 73 3c 33 3f 72 3a 6e 75 6c 6c 3d 3d 3d 74 3f 74 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 Data Ascii: 4af0"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[26149],{26149:(o,r,e)=>{var t=e(48704),b=e(16645),s=e(44052),n=e(45241);let d,i=o=>o;var a=function(o,r,e,t){var b,s=arguments.length,n=s<3?r:null===t?t=Object.getOwnP
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 28 29 7b 73 75 70 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 6c 6f 61 64 69 6e 67 3d 21 31 2c 74 68 69 73 2e 65 6e 74 69 74 69 65 73 3d 5b 5d 2c 74 68 69 73 2e 73 65 6c 65 63 74 65 64 45 6e 74 69 74 69 65 73 3d 5b 5d 7d 67 65 74 20 73 65 6c 65 63 74 69 6f 6e 4d 6f 64 65 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 6c 65 63 74 65 64 45 6e 74 69 74 69 65 73 2e 6c 65 6e 67 74 68 3e 30 7d 63 6f 70 79 44 61 74 61 43 6c 69 63 6b 28 6f 29 7b 63 6f 6e 73 74 20 72 3d 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 63 6f 70 79 2d 64 61 74 61 2d 63 6c 69 63 6b 22 2c 7b 64 65 74 61 69 6c 3a 7b 6f 70 74 69 6f 6e 3a 6f 7d 2c 62 75 62 62 6c 65 73 3a 21 30 2c 63 6f 6d 70 6f 73 65 64 3a 21 30 7d 29 3b 74 68 69 73 2e 64 69 73 70 61 74 63 68 Data Ascii: (){super(...arguments),this.loading=!1,this.entities=[],this.selectedEntities=[]}get selectionMode(){return this.selectedEntities.length>0}copyDataClick(o){const r=new CustomEvent("copy-data-click",{detail:{option:o},bubbles:!0,composed:!0});this.dispatch
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 73 75 70 65 72 28 2e 2e 2e 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 2e 65 6e 74 69 74 69 65 73 3d 5b 5d 2c 74 68 69 73 2e 68 69 64 65 4a 53 4f 4e 45 78 70 6f 72 74 3d 21 31 2c 74 68 69 73 2e 73 65 6c 65 63 74 65 64 49 74 65 6d 73 3d 5b 5d 2c 74 68 69 73 2e 61 70 70 6c 79 42 6f 72 64 65 72 3d 21 31 7d 73 74 61 74 69 63 20 67 65 74 20 73 74 79 6c 65 73 28 29 7b 72 65 74 75 72 6e 28 30 2c 74 2e 75 6e 73 61 66 65 43 53 53 29 28 75 2e 41 29 7d 67 65 74 20 73 61 66 65 53 65 6c 65 63 74 65 64 49 74 65 6d 73 28 29 7b 76 61 72 20 6f 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 28 6f 3d 74 68 69 73 2e 73 65 6c 65 63 74 65 64 49 74 65 6d 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 6f 3f 6f 3a 5b 5d 7d 72 65 6e 64 65 72 28 29 7b 76 61 72 20 6f 2c 72 3b 72 65 74 75 72 Data Ascii: super(...arguments),this.entities=[],this.hideJSONExport=!1,this.selectedItems=[],this.applyBorder=!1}static get styles(){return(0,t.unsafeCSS)(u.A)}get safeSelectedItems(){var o;return null!==(o=this.selectedItems)&&void 0!==o?o:[]}render(){var o,r;retur
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 72 2e 6c 65 6e 67 74 68 3f 22 66 61 6c 73 65 22 3a 22 74 72 75 65 22 2c 73 2e 4e 55 2e 69 73 4c 6f 67 67 65 64 49 6e 26 26 74 68 69 73 2e 65 78 70 6f 72 74 46 6e 26 26 21 74 68 69 73 2e 68 69 64 65 4a 53 4f 4e 45 78 70 6f 72 74 3f 28 30 2c 74 2e 68 74 6d 6c 29 28 68 7c 7c 28 68 3d 77 60 3c 68 36 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 68 65 61 64 65 72 22 3e 45 78 70 6f 72 74 20 73 65 63 74 69 6f 6e 20 49 6f 43 73 3c 2f 68 36 3e 20 3c 76 74 2d 75 69 2d 65 78 70 6f 72 74 2d 73 65 63 74 69 6f 6e 2d 73 75 62 6d 65 6e 75 20 2e 65 78 70 6f 72 74 46 6e 3d 22 24 7b 30 7d 22 20 63 6c 61 73 73 3d 22 64 2d 62 6c 6f 63 6b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 22 3e 20 3c 62 75 74 74 6f 6e 20 73 6c 6f 74 3d 22 6a 73 6f 6e 22 20 63 6c 61 73 73 3d 22 64 Data Ascii: r.length?"false":"true",s.NU.isLoggedIn&&this.exportFn&&!this.hideJSONExport?(0,t.html)(h\|\|(h=w`<h6 class="dropdown-header">Export section IoCs</h6> <vt-ui-export-section-submenu .exportFn="${0}" class="d-block border-bottom"> <button slot="json" class="d
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 6f 6d 2f 29 5c 6e 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 33 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 5c 6e 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 5c 6e 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 73 2d 62 6c 75 65 3a 20 23 30 62 34 64 64 61 3b 2d 2d 62 73 2d 69 6e 64 69 67 6f 3a 20 23 36 36 31 30 66 32 3b 2d 2d 62 73 2d 70 75 72 70 6c 65 3a 20 23 36 66 34 32 63 31 3b 2d 2d 62 73 2d 70 69 6e 6b 3a 20 23 30 30 30 30 30 30 3b 2d 2d 62 73 2d 72 65 64 3a 20 23 63 35 32 34 32 30 3b 2d 2d 62 73 2d 6f 72 61 6e 67 65 3a 20 23 65 35 37 33 30 Data Ascii: om/)\n * Copyright 2011-2023 The Bootstrap Authors\n * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE)\n */:root{--bs-blue: #0b4dda;--bs-indigo: #6610f2;--bs-purple: #6f42c1;--bs-pink: #000000;--bs-red: #c52420;--bs-orange: #e5730
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 6c 65 3a 20 23 63 63 63 63 63 63 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 39 64 62 38 66 30 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 63 32 63 32 63 32 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 62 30 64 65 62 37 3b 2d 2d 62 73 2d 69 6e 66 6f 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 39 39 63 61 66 35 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 66 35 63 37 39 39 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 65 38 61 37 61 36 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 66 32 Data Ascii: le: #cccccc;--bs-primary-border-subtle: #9db8f0;--bs-secondary-border-subtle: #c2c2c2;--bs-success-border-subtle: #b0deb7;--bs-info-border-subtle: #99caf5;--bs-warning-border-subtle: #f5c799;--bs-danger-border-subtle: #e8a7a6;--bs-light-border-subtle: #f2
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 66 65 66 62 65 31 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 31 70 78 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 65 35 65 39 66 30 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 74 72 61 6e 73 6c 75 63 65 6e 74 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 37 35 29 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 2e 33 37 35 72 65 6d 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 73 6d 3a 20 30 2e 32 35 72 65 6d 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 6c 67 3a 20 30 2e 35 72 65 6d 3b 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 78 6c 3a 20 31 72 65 6d 3b 2d 2d 62 Data Ascii: fefbe1;--bs-border-width: 1px;--bs-border-style: solid;--bs-border-color: #e5e9f0;--bs-border-color-translucent: rgba(0, 0, 0, 0.175);--bs-border-radius: 0.375rem;--bs-border-radius-sm: 0.25rem;--bs-border-radius-lg: 0.5rem;--bs-border-radius-xl: 1rem;--b
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 29 7b 6f 75 74 6c 69 6e 65 3a 30 7d 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 62 75 74 74 6f 6e 2c 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 62 75 74 74 6f 6e 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 2c 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 3a 6e 6f 74 28 3a 64 69 73 61 62 6c 65 64 29 7b 63 75 Data Ascii: focus-visible){outline:0}button{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button{text-transform:none}[role=button]{cursor:pointer}button,[type=button]{-webkit-appearance:button}button:not(:disabled),[type=button]:not(:disabled){cu
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 2e 35 72 65 6d 20 31 72 65 6d 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 35 29 3b 2d 2d 62 73 2d 62 74 6e 2d 64 69 73 61 62 6c 65 64 2d 6f 70 61 63 69 74 79 3a 20 30 2e 35 3b 2d 2d 62 73 2d 62 74 6e 2d 66 6f 63 75 73 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 30 2e 32 35 72 65 6d 20 72 67 62 61 28 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 66 6f 63 75 73 2d 73 68 61 64 6f 77 2d 72 67 62 29 2c 20 2e 35 29 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 70 61 64 64 69 6e 67 2d 79 29 20 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 70 61 64 64 69 6e 67 2d 78 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 62 73 2d Data Ascii: x-shadow: 0 0.5rem 1rem rgba(0, 0, 0, 0.15);--bs-btn-disabled-opacity: 0.5;--bs-btn-focus-box-shadow: 0 0 0 0.25rem rgba(var(--bs-btn-focus-shadow-rgb), .5);display:inline-block;padding:var(--bs-btn-padding-y) var(--bs-btn-padding-x);font-family:var(--bs-
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 63 68 65 63 6b 29 2b 2e 62 74 6e 3a 61 63 74 69 76 65 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 2c 2e 62 74 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 3a 61 63 74 69 76 65 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 2c 2e 62 74 6e 2e 73 68 6f 77 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 66 6f 63 75 73 2d 62 6f 78 2d 73 68 61 64 6f 77 29 7d 2e 62 74 6e 3a 64 69 73 61 62 6c 65 64 2c 2e 62 74 6e 2e 64 69 73 61 62 6c 65 64 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 29 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 64 69 73 61 62 Data Ascii: check)+.btn:active:focus-visible,.btn:first-child:active:focus-visible,.btn.show:focus-visible{box-shadow:var(--bs-btn-focus-box-shadow)}.btn:disabled,.btn.disabled{color:var(--bs-btn-disabled-color);pointer-events:none;background-color:var(--bs-btn-disab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.18	60926	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:03 UTC	511	OUT	GET /gui/88687.5467bba500c091961968.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:03 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:03 GMT expires: Thu, 15 Jan 2026 16:45:03 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 563f29b85d1ad0fc3a16054c3396f4eb content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:03 UTC	1003	IN	Data Raw: 34 66 63 64 0d 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 36 38 37 5d 2c 7b 38 31 38 34 34 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 72 28 34 38 37 30 34 29 2c 6e 3d 72 28 31 36 36 34 35 29 2c 73 3d 72 28 34 35 32 34 31 29 2c 69 3d 72 28 38 32 36 39 36 29 3b 6c 65 74 20 61 2c 6c 2c 62 2c 64 2c 70 2c 63 3d 65 3d 3e 65 3b 76 61 72 20 68 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6f 29 7b 76 61 72 20 6e 2c 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 69 3d 73 3c 33 3f 74 3a 6e 75 6c 6c 3d 3d 3d 6f 3f 6f 3d 4f 62 6a 65 63 74 Data Ascii: 4fcd(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[88687],{81844:(e,t,r)=>{"use strict";var o=r(48704),n=r(16645),s=r(45241),i=r(82696);let a,l,b,d,p,c=e=>e;var h=function(e,t,r,o){var n,s=arguments.length,i=s<3?t:null===o?o=Object
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 28 29 7b 76 61 72 20 65 3b 6e 75 6c 6c 3d 3d 3d 28 65 3d 74 68 69 73 2e 72 65 73 69 7a 65 4f 62 73 65 72 76 65 72 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 7c 7c 65 2e 75 6e 6f 62 73 65 72 76 65 28 74 68 69 73 2e 62 6f 64 79 45 6c 65 6d 65 6e 74 29 2c 73 75 70 65 72 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 43 61 6c 6c 62 61 63 6b 28 29 7d 69 73 4f 76 65 72 66 6c 6f 77 69 6e 67 28 65 29 7b 6c 65 74 20 74 3d 65 2e 63 6c 69 65 6e 74 57 69 64 74 68 2c 72 3d 65 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 2c 6f 3d 65 2e 73 63 72 6f 6c 6c 57 69 64 74 68 3b 72 65 74 75 72 6e 20 65 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 3e 72 7c 7c 6f 3e 74 7d 63 61 6c 63 75 6c 61 74 65 4f 76 65 72 66 6c 6f 77 69 6e 67 28 29 7b 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 Data Ascii: (){var e;null===(e=this.resizeObserver)\|\|void 0===e\|\|e.unobserve(this.bodyElement),super.disconnectedCallback()}isOverflowing(e){let t=e.clientWidth,r=e.clientHeight,o=e.scrollWidth;return e.scrollHeight>r\|\|o>t}calculateOverflowing(){requestAnimationFrame
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 65 6d 65 6e 74 22 2c 76 6f 69 64 20 30 29 2c 6d 3d 68 28 5b 28 30 2c 6e 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 29 28 22 63 6f 6c 6c 61 70 73 61 62 6c 65 2d 70 61 72 61 67 72 61 70 68 22 29 5d 2c 6d 29 7d 2c 38 38 36 38 37 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 72 28 39 38 39 31 29 2c 6e 3d 72 28 34 38 37 30 34 29 2c 73 3d 72 28 31 36 36 34 35 29 2c 69 3d 72 28 35 38 39 32 37 29 2c 61 3d 72 2e 6e 28 69 29 2c 6c 3d 28 72 28 38 34 30 33 34 29 2c 72 28 38 35 32 30 30 29 29 2c 62 3d 72 28 37 38 35 36 36 29 2c 64 3d 72 28 31 35 33 32 33 29 2c 70 3d 72 28 37 31 30 31 32 29 2c 63 3d 28 72 28 38 31 38 34 34 29 2c 72 28 33 39 33 33 29 29 3b 6c 65 74 20 68 2c 6d 2c 66 2c 67 2c 75 2c 79 2c 76 3d 65 3d 3e 65 3b 76 Data Ascii: ement",void 0),m=h([(0,n.customElement)("collapsable-paragraph")],m)},88687:(e,t,r)=>{"use strict";var o=r(9891),n=r(48704),s=r(16645),i=r(58927),a=r.n(i),l=(r(84034),r(85200)),b=r(78566),d=r(15323),p=r(71012),c=(r(81844),r(3933));let h,m,f,g,u,y,v=e=>e;v
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 61 69 6c 73 22 3e 20 24 7b 30 7d 20 3c 70 20 69 64 3d 22 6d 65 74 61 22 3e 20 3c 73 70 61 6e 20 69 64 3d 22 64 61 74 65 22 3e 20 24 7b 30 7d 20 3c 76 74 2d 75 69 2d 74 69 6d 65 2d 61 67 6f 20 2e 75 6e 69 78 74 69 6d 65 3d 22 24 7b 30 7d 22 3e 3c 2f 76 74 2d 75 69 2d 74 69 6d 65 2d 61 67 6f 3e 20 3c 2f 73 70 61 6e 3e 20 24 7b 30 7d 20 3c 2f 70 3e 20 3c 2f 64 69 76 3e 20 60 29 2c 74 68 69 73 2e 73 68 6f 77 55 73 65 72 3f 28 30 2c 6e 2e 68 74 6d 6c 29 28 67 7c 7c 28 67 3d 76 60 20 3c 70 20 69 64 3d 22 75 73 65 72 6e 61 6d 65 22 3e 20 3c 61 20 68 72 65 66 3d 22 24 7b 30 7d 22 3e 24 7b 30 7d 3c 2f 61 3e 20 3c 2f 70 3e 20 60 29 2c 28 30 2c 6c 2e 69 66 44 65 66 69 6e 65 64 29 28 74 68 69 73 2e 61 75 74 68 6f 72 43 6f 6d 6d 65 6e 74 73 50 61 74 68 29 2c 74 68 69 Data Ascii: ails"> ${0} <p id="meta"> <span id="date"> ${0} <vt-ui-time-ago .unixtime="${0}"></vt-ui-time-ago> </span> ${0} </p> </div> `),this.showUser?(0,n.html)(g\|\|(g=v` <p id="username"> <a href="${0}">${0}</a> </p> `),(0,l.ifDefined)(this.authorCommentsPath),thi
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 77 28 5b 28 30 2c 73 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 7d 29 5d 2c 78 2e 70 72 6f 74 6f 74 79 70 65 2c 22 64 65 6c 65 74 61 62 6c 65 22 2c 76 6f 69 64 20 30 29 2c 77 28 5b 28 30 2c 73 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 7d 29 5d 2c 78 2e 70 72 6f 74 6f 74 79 70 65 2c 22 68 69 64 65 49 74 65 6d 4c 69 6e 6b 22 2c 76 6f 69 64 20 30 29 2c 77 28 5b 28 30 2c 73 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 53 74 72 69 6e 67 7d 29 5d 2c 78 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 74 65 6d 49 64 22 2c 76 6f 69 64 20 30 29 2c 77 28 5b 28 30 2c 73 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 53 74 72 69 6e 67 7d 29 5d 2c 78 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 74 65 6d 54 79 70 65 Data Ascii: w([(0,s.property)({type:Boolean})],x.prototype,"deletable",void 0),w([(0,s.property)({type:Boolean})],x.prototype,"hideItemLink",void 0),w([(0,s.property)({type:String})],x.prototype,"itemId",void 0),w([(0,s.property)({type:String})],x.prototype,"itemType
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 61 77 3d 22 24 7b 30 7d 22 20 69 63 6f 6e 2d 73 6d 61 6c 6c 20 63 6c 61 73 73 3d 22 6d 2d 61 75 74 6f 22 3e 20 3c 73 70 61 6e 20 73 6c 6f 74 3d 22 74 69 74 6c 65 22 3e 4e 6f 20 63 6f 6d 6d 65 6e 74 73 20 66 6f 75 6e 64 3c 2f 73 70 61 6e 3e 20 3c 2f 76 74 2d 75 69 2d 73 70 65 63 69 61 6c 2d 73 74 61 74 65 73 3e 60 29 2c 61 28 29 29 7d 72 65 6e 64 65 72 44 61 74 61 28 29 7b 72 65 74 75 72 6e 28 74 68 69 73 2e 64 61 74 61 7c 7c 5b 5d 29 2e 6d 61 70 28 28 65 3d 3e 28 30 2c 6e 2e 68 74 6d 6c 29 28 49 7c 7c 28 49 3d 24 60 20 3c 76 74 2d 75 69 2d 63 6f 6d 6d 65 6e 74 20 2e 61 75 74 68 6f 72 49 64 3d 22 24 7b 30 7d 22 20 2e 64 61 74 65 3d 22 24 7b 30 7d 22 20 2e 69 74 65 6d 49 64 3d 22 24 7b 30 7d 22 20 2e 69 74 65 6d 54 79 70 65 3d 22 24 7b 30 7d 22 20 2e 63 6f Data Ascii: aw="${0}" icon-small class="m-auto"> <span slot="title">No comments found</span> </vt-ui-special-states>`),a())}renderData(){return(this.data\|\|[]).map((e=>(0,n.html)(I\|\|(I=$` <vt-ui-comment .authorId="${0}" .date="${0}" .itemId="${0}" .itemType="${0}" .co
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 65 61 64 65 72 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 5c 6e 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 5c 6e 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 30 3b 5c 6e 7d 5c 6e 70 20 7b 5c 6e 20 20 6d 61 72 67 69 6e 3a 20 30 3b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 5c 6e 7d 5c 6e 63 6f 6c 6c 61 70 73 61 62 6c 65 2d 70 61 72 61 67 72 61 70 68 20 7b 5c 6e 20 20 2d 2d 63 6f 6c 6c 61 70 73 61 62 6c 65 2d 70 61 72 61 67 72 61 70 68 2d 6c 69 6e 65 73 3a 20 31 30 3b 5c 6e 7d 5c 6e 73 76 67 20 7b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 63 6f 6c 6f 72 29 3b 5c 6e 20 20 66 69 6c 6c 3a 20 76 61 72 28 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 63 6f 6c 6f 72 29 3b 5c 6e 20 20 77 69 64 74 68 3a 20 31 36 Data Ascii: eader {\n display: flex;\n width: 100%;\n min-width: 0;\n}\np {\n margin: 0;\n padding: 0;\n}\ncollapsable-paragraph {\n --collapsable-paragraph-lines: 10;\n}\nsvg {\n color: var(--bs-tertiary-color);\n fill: var(--bs-tertiary-color);\n width: 16
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 5c 6e 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 6f 70 3b 5c 6e 20 20 66 6c 65 78 3a 20 31 3b 5c 6e 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 30 3b 5c 6e 7d 5c 6e 69 72 6f 6e 2d 69 63 6f 6e 20 7b 5c 6e 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 32 34 70 78 3b 5c 6e 7d 5c 6e 23 69 74 65 6d 2d 69 64 20 7b 5c 6e 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 36 70 78 3b 5c 6e 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 30 3b 5c 6e 7d 5c 6e 23 69 74 65 6d 2d 69 64 20 61 20 7b 5c 6e 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 76 61 72 28 2d 2d 76 74 2d 75 69 2d 63 6f 6d 6d 65 6e 74 2d 6c 69 6e 6b 2d 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2c 20 31 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 73 2d 70 Data Ascii: rection: column;\n vertical-align: top;\n flex: 1;\n min-width: 0;\n}\niron-icon {\n min-width: 24px;\n}\n#item-id {\n margin-left: 16px;\n min-width: 0;\n}\n#item-id a {\n border-bottom: var(--vt-ui-comment-link-border-bottom, 1px solid var(--bs-p
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 6f 76 65 72 66 6c 6f 77 3a 69 6e 68 65 72 69 74 3b 6d 61 78 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 27 2c 22 22 5d 29 2c 74 2e 41 3d 6c 7d 2c 39 31 38 34 38 3a 28 65 2c 74 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6f 3d 72 28 38 39 35 34 37 29 2c 6e 3d 72 2e 6e 28 6f 29 2c 73 3d 72 28 33 38 35 33 32 29 2c 69 3d 72 2e 6e 28 73 29 28 29 28 6e 28 29 29 3b 69 2e 70 75 73 68 28 5b 65 2e 69 64 2c 27 2f 2a 21 5c 6e 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 20 76 35 2e 33 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 5c 6e 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 33 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 5c 6e 20 2a 20 4c 69 63 65 6e 73 65 Data Ascii: overflow:inherit;max-height:inherit}',""]),t.A=l},91848:(e,t,r)=>{"use strict";var o=r(89547),n=r.n(o),s=r(38532),i=r.n(s)()(n());i.push([e.id,'/!\n Bootstrap v5.3.2 (https://getbootstrap.com/)\n * Copyright 2011-2023 The Bootstrap Authors\n * License
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 72 79 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 65 30 65 30 65 30 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 65 63 66 39 65 65 3b 2d 2d 62 73 2d 69 6e 66 6f 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 65 35 66 33 66 66 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 66 66 66 32 65 35 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 66 61 65 31 65 30 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 66 63 66 63 66 63 3b 2d 2d 62 73 2d 64 61 72 6b 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 63 63 63 63 63 63 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 3a 20 23 39 64 62 38 66 30 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 Data Ascii: ry-bg-subtle: #e0e0e0;--bs-success-bg-subtle: #ecf9ee;--bs-info-bg-subtle: #e5f3ff;--bs-warning-bg-subtle: #fff2e5;--bs-danger-bg-subtle: #fae1e0;--bs-light-bg-subtle: #fcfcfc;--bs-dark-bg-subtle: #cccccc;--bs-primary-border-subtle: #9db8f0;--bs-secondary

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.18	60927	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:03 UTC	690	OUT	GET /gui/38510.7c8301f028cbc9e184e9.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:03 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:03 GMT expires: Thu, 15 Jan 2026 16:45:03 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 1a7c7c0ee04cfd82d55d30d8bbb1bd86 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:03 UTC	1003	IN	Data Raw: 33 39 38 66 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 38 35 31 30 5d 2c 7b 33 38 35 31 30 3a 28 6f 2c 72 2c 65 29 3d 3e 7b 76 61 72 20 74 3d 65 28 34 38 37 30 34 29 2c 62 3d 65 28 31 36 36 34 35 29 2c 73 3d 65 28 36 32 38 33 32 29 2c 6e 3d 65 28 34 34 30 35 32 29 2c 64 3d 65 28 34 35 32 34 31 29 3b 6c 65 74 20 69 2c 61 3d 6f 3d 3e 6f 3b 76 61 72 20 6c 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 72 2c 65 2c 74 29 7b 76 61 72 20 62 2c 73 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 3d 73 3c 33 3f 72 3a 6e 75 6c 6c 3d 3d 3d 74 3f 74 3d 4f 62 6a Data Ascii: 398f"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[38510],{38510:(o,r,e)=>{var t=e(48704),b=e(16645),s=e(62832),n=e(44052),d=e(45241);let i,a=o=>o;var l=function(o,r,e,t){var b,s=arguments.length,n=s<3?r:null===t?t=Obj
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 6f 2e 6c 65 6e 67 74 68 29 29 2e 6d 61 70 28 28 6f 3d 3e 6f 2e 6a 6f 69 6e 28 22 2c 20 22 29 29 29 3b 72 2e 6c 65 6e 67 74 68 26 26 64 2e 4b 4b 2e 73 65 6e 64 54 6f 43 6c 69 70 62 6f 61 72 64 28 74 68 69 73 2c 72 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2c 60 24 7b 72 2e 6c 65 6e 67 74 68 7d 20 69 74 65 6d 73 20 63 6f 70 69 65 64 20 74 6f 20 74 68 65 20 63 6c 69 70 62 6f 61 72 64 60 29 7d 72 65 6e 64 65 72 28 29 7b 72 65 74 75 72 6e 28 30 2c 74 2e 68 74 6d 6c 29 28 69 7c 7c 28 69 3d 61 60 3c 73 6c 6f 74 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 3e 3c 2f 73 6c 6f 74 3e 60 29 2c 74 68 69 73 2e 6f 6e 43 6c 69 63 6b 29 7d 7d 3b 6c 28 5b 28 30 2c 62 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 2c 72 65 66 6c 65 63 74 3a 21 30 7d 29 5d 2c 63 Data Ascii: o.length)).map((o=>o.join(", ")));r.length&&d.KK.sendToClipboard(this,r.join("\n"),`${r.length} items copied to the clipboard`)}render(){return(0,t.html)(i\|\|(i=a`<slot @click="${0}"></slot>`),this.onClick)}};l([(0,b.property)({type:Boolean,reflect:!0})],c
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 20 73 68 6f 77 22 20 6e 61 6d 65 3d 22 65 78 70 6f 72 74 22 3e 20 24 7b 30 7d 20 3c 68 36 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 68 65 61 64 65 72 22 3e 43 6f 70 79 20 74 6f 20 63 6c 69 70 62 6f 61 72 64 3c 2f 68 36 3e 20 3c 76 74 2d 75 69 2d 63 6f 70 79 2d 69 70 73 2d 73 75 62 6d 65 6e 75 20 2e 65 6e 74 69 74 69 65 73 3d 22 24 7b 30 7d 22 20 2e 73 65 6c 65 63 74 65 64 45 6e 74 69 74 69 65 73 3d 22 24 7b 30 7d 22 20 63 6c 61 73 73 3d 22 64 2d 62 6c 6f 63 6b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 22 3e 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 69 74 65 6d 22 20 72 6f 6c 65 3d 22 6d 65 6e 75 69 74 65 6d 22 20 64 61 74 61 2d 73 75 62 6d 65 6e 75 2d 63 6c Data Ascii: lass="dropdown-menu show" name="export"> ${0} <h6 class="dropdown-header">Copy to clipboard</h6> <vt-ui-copy-ips-submenu .entities="${0}" .selectedEntities="${0}" class="d-block border-bottom"> <button class="dropdown-item" role="menuitem" data-submenu-cl
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 69 74 69 65 73 22 2c 76 6f 69 64 20 30 29 2c 6d 28 5b 28 30 2c 62 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 41 72 72 61 79 7d 29 5d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 65 6c 65 63 74 65 64 49 74 65 6d 73 22 2c 76 6f 69 64 20 30 29 2c 6d 28 5b 28 30 2c 62 2e 70 72 6f 70 65 72 74 79 29 28 29 5d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2c 22 68 69 64 65 4a 53 4f 4e 45 78 70 6f 72 74 22 2c 76 6f 69 64 20 30 29 2c 6d 28 5b 28 30 2c 62 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 7d 29 5d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2c 22 61 70 70 6c 79 42 6f 72 64 65 72 22 2c 76 6f 69 64 20 30 29 2c 6d 28 5b 28 30 2c 62 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 4f 62 6a 65 63 74 7d 29 5d 2c 68 2e 70 72 6f 74 6f 74 79 70 Data Ascii: ities",void 0),m([(0,b.property)({type:Array})],h.prototype,"selectedItems",void 0),m([(0,b.property)()],h.prototype,"hideJSONExport",void 0),m([(0,b.property)({type:Boolean})],h.prototype,"applyBorder",void 0),m([(0,b.property)({type:Object})],h.prototyp
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 6d 70 68 61 73 69 73 3a 20 23 32 39 32 39 32 39 3b 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 32 30 36 30 32 61 3b 2d 2d 62 73 2d 69 6e 66 6f 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 30 30 34 34 38 30 3b 2d 2d 62 73 2d 77 61 72 6e 69 6e 67 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 38 30 34 30 30 30 3b 2d 2d 62 73 2d 64 61 6e 67 65 72 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 36 64 31 34 31 32 3b 2d 2d 62 73 2d 6c 69 67 68 74 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 34 64 34 64 34 64 3b 2d 2d 62 73 2d 64 61 72 6b 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 3a 20 23 34 64 34 64 34 64 3b 2d 2d 62 73 2d 70 72 69 6d 61 72 79 2d 62 67 2d 73 75 62 74 6c 65 3a 20 23 63 66 64 64 66 63 Data Ascii: mphasis: #292929;--bs-success-text-emphasis: #20602a;--bs-info-text-emphasis: #004480;--bs-warning-text-emphasis: #804000;--bs-danger-text-emphasis: #6d1412;--bs-light-text-emphasis: #4d4d4d;--bs-dark-text-emphasis: #4d4d4d;--bs-primary-bg-subtle: #cfddfc
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 35 34 2c 20 36 30 2c 20 37 33 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 67 3a 20 23 66 39 66 61 66 62 3b 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 67 2d 72 67 62 3a 20 32 34 39 2c 20 32 35 30 2c 20 32 35 31 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 63 6f 6c 6f 72 3a 20 23 36 32 36 63 38 34 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 63 6f 6c 6f 72 2d 72 67 62 3a 20 39 38 2c 20 31 30 38 2c 20 31 33 32 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 62 67 3a 20 23 65 63 65 65 66 34 3b 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 62 67 2d 72 67 62 3a 20 32 33 36 2c 20 32 33 38 2c 20 32 34 34 3b 2d 2d 62 73 2d 68 65 61 64 69 6e 67 2d 63 6f 6c 6f 72 3a 20 69 6e 68 65 72 69 74 3b 2d 2d 62 73 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 3a 20 23 32 30 32 34 32 Data Ascii: 54, 60, 73;--bs-secondary-bg: #f9fafb;--bs-secondary-bg-rgb: 249, 250, 251;--bs-tertiary-color: #626c84;--bs-tertiary-color-rgb: 98, 108, 132;--bs-tertiary-bg: #eceef4;--bs-tertiary-bg-rgb: 236, 238, 244;--bs-heading-color: inherit;--bs-link-color: #20242
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 6f 6f 74 7b 73 63 72 6f 6c 6c 2d 62 65 68 61 76 69 6f 72 3a 73 6d 6f 6f 74 68 7d 7d 68 36 2c 2e 68 36 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 68 65 61 64 69 6e 67 2d 63 6f 6c 6f 72 29 7d 68 36 2c 2e 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 61 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 76 61 72 28 2d 2d 62 73 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 2d 72 67 62 29 2c 20 76 61 72 28 2d 2d 62 73 2d 6c 69 6e 6b 2d 6f 70 61 63 69 74 79 2c 20 31 29 29 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 61 3a 68 6f 76 65 72 7b 2d 2d 62 73 2d 6c 69 6e Data Ascii: oot{scroll-behavior:smooth}}h6,.h6{margin-top:0;margin-bottom:.5rem;font-weight:500;line-height:1.2;color:var(--bs-heading-color)}h6,.h6{font-size:1rem}a{color:rgba(var(--bs-link-color-rgb), var(--bs-link-opacity, 1));text-decoration:none}a:hover{--bs-lin
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 32 70 78 3b 2d 2d 62 73 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 20 31 32 30 30 70 78 3b 2d 2d 62 73 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 78 6c 3a 20 31 34 30 30 70 78 7d 2e 62 74 6e 7b 2d 2d 62 73 2d 62 74 6e 2d 70 61 64 64 69 6e 67 2d 78 3a 20 31 2e 32 35 72 65 6d 3b 2d 2d 62 73 2d 62 74 6e 2d 70 61 64 64 69 6e 67 2d 79 3a 20 30 2e 35 72 65 6d 3b 2d 2d 62 73 2d 62 74 6e 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 3b 2d 2d 62 73 2d 62 74 6e 2d 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 2d 2d 62 73 2d 62 74 6e 2d 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 2d 2d 62 73 2d 62 74 6e 2d 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 2d 2d 62 73 2d 62 74 6e 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 63 6f 6c 6f 72 29 3b Data Ascii: 2px;--bs-breakpoint-xl: 1200px;--bs-breakpoint-xxl: 1400px}.btn{--bs-btn-padding-x: 1.25rem;--bs-btn-padding-y: 0.5rem;--bs-btn-font-family: ;--bs-btn-font-size:1rem;--bs-btn-font-weight: 500;--bs-btn-line-height: 1.5;--bs-btn-color: var(--bs-body-color);
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 68 6f 76 65 72 2d 62 67 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 68 6f 76 65 72 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 7d 2e 62 74 6e 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 68 6f 76 65 72 2d 62 67 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 68 6f 76 65 72 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 3b 6f 75 74 6c 69 6e 65 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 62 73 2d 62 74 6e 2d 66 6f 63 75 73 2d Data Ascii: nd-color:var(--bs-btn-hover-bg);border-color:var(--bs-btn-hover-border-color)}.btn:focus-visible{color:var(--bs-btn-hover-color);background-color:var(--bs-btn-hover-bg);border-color:var(--bs-btn-hover-border-color);outline:0;box-shadow:var(--bs-btn-focus-
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 62 73 2d 62 74 6e 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 29 7d 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 35 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2e 32 35 35 65 6d 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 2e 33 65 6d 20 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 2e 33 65 6d 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 2e 33 65 6d 20 73 6f 6c 69 64 20 Data Ascii: bs-btn-hover-color)}.dropdown-toggle{white-space:nowrap}.dropdown-toggle::after{display:inline-block;margin-left:.255em;vertical-align:.255em;content:"";border-top:.3em solid;border-right:.3em solid rgba(0, 0, 0, 0);border-bottom:0;border-left:.3em solid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.18	60928	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:03 UTC	511	OUT	GET /gui/75884.b085fb19887c849fbac2.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:03 UTC	387	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:03 GMT expires: Thu, 15 Jan 2026 16:45:03 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 78257de5d340bce45b9177a76f44544f content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:03 UTC	1003	IN	Data Raw: 33 62 32 38 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 35 38 38 34 5d 2c 7b 39 35 35 32 38 3a 28 74 2c 65 2c 69 29 3d 3e 7b 76 61 72 20 6f 3d 69 28 34 38 37 30 34 29 2c 73 3d 69 28 31 36 36 34 35 29 2c 72 3d 69 28 36 35 38 36 35 29 3b 6c 65 74 20 6e 2c 61 2c 6c 3d 74 3d 3e 74 3b 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 2c 6f 29 7b 76 61 72 20 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 3d 72 3c 33 3f 65 3a 6e 75 6c 6c 3d 3d 3d 6f 3f 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 Data Ascii: 3b28"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[75884],{95528:(t,e,i)=>{var o=i(48704),s=i(16645),r=i(65865);let n,a,l=t=>t;var c=function(t,e,i,o){var s,r=arguments.length,n=r<3?e:null===o?o=Object.getOwnPropertyDe
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 39 34 29 2c 73 3d 69 28 35 36 38 37 30 29 2c 72 3d 28 69 28 39 38 39 31 29 2c 69 28 34 38 37 30 34 29 29 2c 6e 3d 69 28 31 36 36 34 35 29 2c 61 3d 69 28 36 32 38 33 32 29 2c 6c 3d 69 28 38 35 32 30 30 29 2c 63 3d 28 69 28 32 32 32 33 32 29 2c 69 28 38 36 32 36 30 29 2c 69 28 39 35 35 32 38 29 2c 69 28 31 35 33 32 33 29 29 2c 64 3d 69 28 39 33 38 34 32 29 2c 62 3d 69 28 39 36 39 38 37 29 2c 70 3d 69 28 34 35 32 34 31 29 2c 68 3d 69 28 39 35 36 38 38 29 2c 75 3d 28 69 28 38 30 31 39 32 29 2c 69 28 35 31 34 38 34 29 29 2c 6d 3d 69 28 35 32 39 38 35 29 2c 79 3d 69 28 37 39 33 34 38 29 3b 6c 65 74 20 76 2c 66 2c 67 2c 5f 2c 6b 2c 78 2c 77 2c 24 2c 54 2c 43 2c 52 2c 50 2c 53 2c 55 2c 49 2c 44 2c 45 2c 4c 2c 41 2c 4b 2c 4f 2c 5a 2c 46 2c 6a 2c 42 2c 4d 2c 4e 2c Data Ascii: 94),s=i(56870),r=(i(9891),i(48704)),n=i(16645),a=i(62832),l=i(85200),c=(i(22232),i(86260),i(95528),i(15323)),d=i(93842),b=i(96987),p=i(45241),h=i(95688),u=(i(80192),i(51484)),m=i(52985),y=i(79348);let v,f,g,_,k,x,w,$,T,C,R,P,S,U,I,D,E,L,A,K,O,Z,F,j,B,M,N,
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 73 65 61 72 63 68 22 2c 68 2e 5a 38 2e 75 72 6c 44 6f 75 62 6c 65 45 6e 63 6f 64 65 28 74 68 69 73 2e 75 72 6c 29 29 2c 22 5f 62 6c 61 6e 6b 22 29 7d 72 65 6e 64 65 72 52 65 70 6f 72 74 4c 69 6e 6b 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6e 74 69 74 79 2e 5f 66 6f 75 6e 64 3f 28 30 2c 72 2e 68 74 6d 6c 29 28 66 7c 7c 28 66 3d 4a 60 3c 61 20 68 72 65 66 3d 22 24 7b 30 7d 22 20 63 6c 61 73 73 3d 22 73 65 63 6f 6e 64 61 72 79 20 72 65 70 6f 72 74 2d 6c 69 6e 6b 22 20 69 64 3d 22 75 72 6c 2d 72 65 70 6f 72 74 2d 6c 69 6e 6b 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 3e 20 24 7b 30 7d 20 3c 2f 61 3e 60 29 2c 68 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 73 65 61 72 63 68 22 2c 68 2e 5a 38 2e 75 72 6c 44 6f 75 62 6c 65 45 6e 63 6f 64 Data Ascii: search",h.Z8.urlDoubleEncode(this.url)),"_blank")}renderReportLink(){return this.entity._found?(0,r.html)(f\|\|(f=J`<a href="${0}" class="secondary report-link" id="url-report-link" @click="${0}"> ${0} </a>`),h.Z8.getRedirectUrl("search",h.Z8.urlDoubleEncod
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 74 54 6f 43 6c 69 70 62 6f 61 72 64 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 6e 65 74 77 6f 72 6b 5f 6c 6f 63 61 74 69 6f 6e 2e 69 64 29 3a 22 22 2c 6e 75 6c 6c 21 3d 3d 28 65 3d 74 68 69 73 2e 65 6e 74 69 74 79 2e 6c 61 73 74 5f 73 65 72 76 69 6e 67 5f 69 70 5f 61 64 64 72 65 73 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 26 26 65 2e 69 64 3f 28 30 2c 72 2e 68 74 6d 6c 29 28 78 7c 7c 28 78 3d 4a 60 20 3c 76 74 2d 75 69 2d 70 69 76 6f 74 20 63 6c 61 73 73 3d 22 6e 61 6d 65 22 20 2e 68 72 65 66 3d 22 24 7b 30 7d 22 20 63 6c 61 73 73 3d 22 70 69 76 6f 74 22 20 40 63 6c 69 63 6b 3d 22 24 7b 30 7d 22 20 64 61 74 61 2d 6f 62 6a 65 63 74 2d 74 79 70 65 3d 22 69 70 5f 61 64 64 72 65 73 73 22 20 64 61 74 61 2d 6f 62 6a 65 63 74 2d 69 64 3d 22 24 7b 30 7d 22 3e 20 24 Data Ascii: tToClipboard,this.entity.network_location.id):"",null!==(e=this.entity.last_serving_ip_address)&&void 0!==e&&e.id?(0,r.html)(x\|\|(x=J` <vt-ui-pivot class="name" .href="${0}" class="pivot" @click="${0}" data-object-type="ip_address" data-object-id="${0}"> $
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 6c 65 2c 21 74 68 69 73 2e 5f 63 6f 6e 74 65 6e 74 54 79 70 65 2c 70 2e 4b 4b 2e 65 76 61 6c 75 61 74 65 41 72 67 28 74 68 69 73 2e 65 6e 74 69 74 79 2e 5f 74 68 72 65 61 74 5f 61 63 74 6f 72 5f 74 61 67 73 29 3f 74 68 69 73 2e 65 6e 74 69 74 79 2e 5f 74 68 72 65 61 74 5f 61 63 74 6f 72 5f 74 61 67 73 2e 6d 61 70 28 28 74 3d 3e 28 30 2c 72 2e 68 74 6d 6c 29 28 54 7c 7c 28 54 3d 4a 60 20 3c 76 74 2d 75 69 2d 63 68 69 70 73 20 63 6c 69 63 6b 61 62 6c 65 20 63 6c 61 73 73 3d 22 73 6d 61 6c 6c 20 73 6f 66 74 2d 6f 72 61 6e 67 65 20 24 7b 30 7d 22 20 2e 63 68 69 70 73 3d 22 24 7b 30 7d 22 3e 3c 2f 76 74 2d 75 69 2d 63 68 69 70 73 3e 20 60 29 2c 28 30 2c 61 2e 63 6c 61 73 73 4d 61 70 29 28 7b 64 61 72 6b 65 72 3a 22 74 68 72 65 61 74 5f 61 63 74 6f 72 22 3d 3d Data Ascii: le,!this._contentType,p.KK.evaluateArg(this.entity._threat_actor_tags)?this.entity._threat_actor_tags.map((t=>(0,r.html)(T\|\|(T=J` <vt-ui-chips clickable class="small soft-orange ${0}" .chips="${0}"></vt-ui-chips> `),(0,a.classMap)({darker:"threat_actor"==
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 72 6c 21 3d 3d 74 68 69 73 2e 65 6e 74 69 74 79 2e 75 72 6c 3f 28 30 2c 72 2e 68 74 6d 6c 29 28 53 7c 7c 28 53 3d 4a 60 3c 69 20 63 6c 61 73 73 3d 22 66 73 2d 35 20 68 73 74 61 63 6b 20 74 65 78 74 2d 62 6f 64 79 2d 73 65 63 6f 6e 64 61 72 79 20 6d 65 2d 31 22 3e 24 7b 30 7d 3c 2f 69 3e 3c 61 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 74 72 75 6e 63 61 74 65 22 20 68 72 65 66 3d 22 24 7b 30 7d 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 20 24 7b 30 7d 20 3c 2f 61 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 73 74 61 63 6b 20 67 61 70 2d 32 20 66 73 2d 35 20 73 68 6f 77 2d 6f 6e 2d 68 6f 76 65 72 2d 73 75 62 6a 65 63 74 22 3e 20 3c 61 20 72 6f 6c 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 68 73 74 Data Ascii: rl!==this.entity.url?(0,r.html)(S\|\|(S=J`<i class="fs-5 hstack text-body-secondary me-1">${0}</i><a role="button" class="text-truncate" href="${0}" target="_blank"> ${0} </a> <div class="hstack gap-2 fs-5 show-on-hover-subject"> <a role="button" class="hst
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 3f 28 30 2c 72 2e 68 74 6d 6c 29 28 44 7c 7c 28 44 3d 4a 60 20 3c 76 74 2d 75 69 2d 70 69 76 6f 74 20 2e 68 72 65 66 3d 22 24 7b 30 7d 22 3e 20 24 7b 30 7d 20 3c 2f 76 74 2d 75 69 2d 70 69 76 6f 74 3e 60 29 2c 74 68 69 73 2e 69 66 50 69 76 6f 74 61 62 6c 65 28 74 68 69 73 2e 5f 67 65 74 50 69 76 6f 74 4c 69 6e 6b 28 22 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 22 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 6c 61 73 74 5f 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 29 29 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 6c 61 73 74 5f 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 29 3a 28 30 2c 72 2e 68 74 6d 6c 29 28 45 7c 7c 28 45 3d 4a 60 2d 60 29 29 29 2c 74 68 69 73 2e 72 65 6e 64 65 72 43 6f 6c 75 Data Ascii: http_response_code?(0,r.html)(D\|\|(D=J` <vt-ui-pivot .href="${0}"> ${0} </vt-ui-pivot>`),this.ifPivotable(this._getPivotLink("response_code",this.entity.last_http_response_code)),this.entity.last_http_response_code):(0,r.html)(E\|\|(E=J`-`))),this.renderColu
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 75 69 2d 70 69 76 6f 74 20 2e 68 72 65 66 3d 22 24 7b 30 7d 22 3e 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 61 67 65 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 76 74 69 63 6f 6e 73 2f 24 7b 30 7d 22 20 61 6c 74 3d 22 46 61 76 69 63 6f 6e 22 3e 20 3c 2f 76 74 2d 75 69 2d 70 69 76 6f 74 3e 20 3c 2f 64 69 76 3e 20 60 29 2c 74 68 69 73 2e 69 66 50 69 76 6f 74 61 62 6c 65 28 74 68 69 73 2e 5f 67 65 74 46 61 76 69 63 6f 6e 50 69 76 6f 74 4c 69 6e 6b 28 74 68 69 73 2e 65 6e 74 69 74 79 2e 66 61 76 69 63 6f 6e 2e 64 68 61 73 68 29 29 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 66 61 76 69 63 6f 6e 2e 72 61 77 5f 6d 64 35 29 3a 28 30 2c 72 2e 68 74 6d 6c 29 28 42 7c 7c 28 42 3d 4a 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 63 6f 6e 20 Data Ascii: ui-pivot .href="${0}"> <img src="https://storage.googleapis.com/vticons/${0}" alt="Favicon"> </vt-ui-pivot> </div> `),this.ifPivotable(this._getFaviconPivotLink(this.entity.favicon.dhash)),this.entity.favicon.raw_md5):(0,r.html)(B\|\|(B=J` <div class="icon
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 26 26 74 2e 69 64 3f 28 30 2c 72 2e 68 74 6d 6c 29 28 4e 7c 7c 28 4e 3d 4a 60 20 3c 62 72 3e 20 3c 76 74 2d 75 69 2d 70 69 76 6f 74 20 68 72 65 66 3d 22 24 7b 30 7d 22 3e 20 24 7b 30 7d 20 3c 2f 76 74 2d 75 69 2d 70 69 76 6f 74 3e 20 60 29 2c 68 2e 5a 38 2e 67 65 74 52 65 64 69 72 65 63 74 55 72 6c 28 22 64 6f 6d 61 69 6e 22 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 6e 65 74 77 6f 72 6b 5f 6c 6f 63 61 74 69 6f 6e 2e 69 64 29 2c 74 68 69 73 2e 65 6e 74 69 74 79 2e 6e 65 74 77 6f 72 6b 5f 6c 6f 63 61 74 69 6f 6e 2e 69 64 29 3a 22 22 2c 74 68 69 73 2e 63 68 69 70 73 2e 6c 65 6e 67 74 68 3f 28 30 2c 72 2e 68 74 6d 6c 29 28 7a 7c 7c 28 7a 3d 4a 60 20 3c 76 74 2d 75 69 2d 63 68 69 70 73 20 63 6c 61 73 73 3d 22 73 6d 61 6c 6c Data Ascii: )&&void 0!==t&&t.id?(0,r.html)(N\|\|(N=J` <br> <vt-ui-pivot href="${0}"> ${0} </vt-ui-pivot> `),h.Z8.getRedirectUrl("domain",this.entity.network_location.id),this.entity.network_location.id):"",this.chips.length?(0,r.html)(z\|\|(z=J` <vt-ui-chips class="small
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 20 3c 73 70 61 6e 20 73 6c 6f 74 3d 22 63 6f 6e 74 65 6e 74 22 3e 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 32 30 30 70 78 22 3e 20 54 68 69 73 20 49 6f 43 20 6d 61 74 63 68 65 73 20 59 41 52 41 20 72 75 6c 65 20 3c 62 3e 24 7b 30 7d 3c 2f 62 3e 20 63 6f 6e 74 61 69 6e 65 64 20 69 6e 20 74 68 65 20 3c 62 3e 24 7b 30 7d 3c 2f 62 3e 20 72 75 6c 65 73 65 74 2e 20 3c 2f 64 69 76 3e 20 3c 2f 73 70 61 6e 3e 20 3c 2f 76 74 2d 75 69 2d 70 6f 70 6f 76 65 72 3e 20 3c 2f 64 69 76 3e 20 3c 2f 76 74 2d 75 69 2d 70 69 76 6f 74 3e 20 3c 2f 64 69 76 3e 60 29 2c 28 74 3d 3e 7b 6f 2e 68 34 2e 63 6f 6c 6c 65 63 74 6f 72 2e 63 6f 6c 6c 65 63 74 28 73 2e 4a 55 2e 49 4f 43 5f 53 54 52 45 41 4d 2c 73 2e 5f 42 2e 46 49 4c 54 45 52 5f 42 59 2c 73 2e 49 49 2e 53 4f Data Ascii: <span slot="content"> <div style="width:200px"> This IoC matches YARA rule <b>${0}</b> contained in the <b>${0}</b> ruleset. </div> </span> </vt-ui-popover> </div> </vt-ui-pivot> </div>`),(t=>{o.h4.collector.collect(s.JU.IOC_STREAM,s._B.FILTER_BY,s.II.SO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.18	60929	34.54.88.138	443	8100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-15 16:45:03 UTC	689	OUT	GET /gui/2576.04847b50f85afec0428e.js HTTP/1.1 Host: www.virustotal.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.virustotal.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga=GA1.2.230491043.1736959486; _gid=GA1.2.1508108559.1736959491; _gat=1; _ga_BLNDV9X2JR=GS1.1.1736959485.1.0.1736959498.0.0.0
2025-01-15 16:45:03 UTC	391	IN	HTTP/1.1 200 OK date: Wed, 15 Jan 2025 16:45:03 GMT expires: Thu, 15 Jan 2026 16:45:03 GMT cache-control: public, max-age=31536000 etag: "iyPWYw" x-cloud-trace-context: 62d524e49bcd8ec70aea63da2043a443;o=1 content-type: text/javascript server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2025-01-15 16:45:03 UTC	999	IN	Data Raw: 38 30 30 30 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 76 74 5f 75 69 5f 6d 61 69 6e 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 35 37 36 2c 36 33 34 33 33 5d 2c 7b 36 38 39 33 32 3a 28 74 2c 65 2c 61 29 3d 3e 7b 76 61 72 20 69 3d 61 28 34 38 37 30 34 29 2c 72 3d 61 28 31 36 36 34 35 29 2c 6f 3d 61 28 36 32 38 33 32 29 2c 73 3d 61 28 31 35 33 32 33 29 2c 6c 3d 61 28 34 37 32 34 38 29 3b 6c 65 74 20 6e 2c 64 2c 63 2c 70 3d 74 3d 3e 74 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 2c 69 29 7b 76 61 72 20 72 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 73 3d 6f 3c 33 3f 65 3a 6e 75 6c 6c 3d Data Ascii: 8000"use strict";(self.webpackChunkvt_ui_main=self.webpackChunkvt_ui_main\|\|[]).push([[2576,63433],{68932:(t,e,a)=>{var i=a(48704),r=a(16645),o=a(62832),s=a(15323),l=a(47248);let n,d,c,p=t=>t;var b=function(t,e,a,i){var r,o=arguments.length,s=o<3?e:null=
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 3c 2f 73 6c 6f 74 3e 20 3c 2f 68 33 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 62 72 65 61 6b 20 68 73 74 61 63 6b 20 67 61 70 2d 32 20 6d 2d 30 22 3e 20 24 7b 30 7d 20 3c 73 6c 6f 74 3e 3c 2f 73 6c 6f 74 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 60 29 2c 74 68 69 73 2e 72 65 6e 64 65 72 41 69 49 63 6f 6e 28 29 2c 74 68 69 73 2e 77 69 74 68 49 6e 69 74 4f 66 66 73 65 74 3f 74 68 69 73 2e 72 65 6e 64 65 72 41 69 49 63 6f 6e 28 21 30 29 3a 69 2e 6e 6f 74 68 69 6e 67 29 7d 7d 2c 6e 2e 73 74 79 6c 65 73 3d 28 30 2c 69 2e 75 6e 73 61 66 65 43 53 53 29 28 6c 2e 41 29 2c 6e 29 3b 62 28 5b 28 30 2c 72 2e 70 72 6f 70 65 72 74 79 29 28 7b 74 79 70 65 3a 42 6f 6f 6c 65 61 6e 7d 29 5d 2c 75 2e 70 72 6f 74 6f 74 79 70 65 2c 22 Data Ascii: </slot> </h3> <div class="text-break hstack gap-2 m-0"> ${0} <slot></slot> </div> </div> </div> `),this.renderAiIcon(),this.withInitOffset?this.renderAiIcon(!0):i.nothing)}},n.styles=(0,i.unsafeCSS)(l.A),n);b([(0,r.property)({type:Boolean})],u.prototype,"
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 2c 70 2c 76 2c 68 2c 6d 2c 67 3b 72 65 74 75 72 6e 28 30 2c 69 2e 68 74 6d 6c 29 28 62 7c 7c 28 62 3d 75 60 20 3c 76 74 2d 75 69 2d 73 6c 69 64 69 6e 67 2d 70 61 6e 65 6c 20 69 64 3d 22 73 6c 69 64 69 6e 67 50 61 6e 65 6c 22 20 3f 73 6d 61 6c 6c 3d 22 24 7b 30 7d 22 20 40 63 6c 6f 73 65 3d 22 24 7b 30 7d 22 3e 20 3c 64 69 76 20 73 6c 6f 74 3d 22 68 65 61 64 65 72 22 3e 20 3c 68 34 20 63 6c 61 73 73 3d 22 66 77 2d 62 6f 6c 64 20 6d 74 2d 33 20 6d 62 2d 30 22 20 64 61 74 61 2d 74 65 73 74 3d 22 79 61 72 61 2d 72 75 6c 65 2d 64 72 61 77 65 72 2d 74 69 74 6c 65 22 3e 20 52 75 6c 65 3a 20 24 7b 30 7d 20 3c 2f 68 34 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 73 6c 6f 74 3d 22 62 6f 64 79 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 74 2d 33 20 6d 62 2d 32 22 Data Ascii: ,p,v,h,m,g;return(0,i.html)(b\|\|(b=u` <vt-ui-sliding-panel id="slidingPanel" ?small="${0}" @close="${0}"> <div slot="header"> <h4 class="fw-bold mt-3 mb-0" data-test="yara-rule-drawer-title"> Rule: ${0} </h4> </div> <div slot="body"> <div class="mt-3 mb-2"
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 65 20 63 61 6e 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 76 74 2d 75 69 2d 63 6f 64 65 2d 68 69 67 68 6c 69 67 68 74 65 72 20 69 64 3d 22 63 6f 64 65 2d 65 64 69 74 6f 72 22 20 63 6c 61 73 73 3d 22 70 6f 73 69 74 69 6f 6e 2d 72 65 6c 61 74 69 76 65 20 77 2d 31 30 30 20 62 6f 72 64 65 72 22 20 2e 68 69 67 68 6c 69 67 68 74 65 64 42 79 52 65 67 65 78 3d 22 24 7b 30 7d 22 20 2e 63 6f 64 65 3d 22 24 7b 30 7d 22 20 2e 6d 6f 64 65 3d 22 24 7b 30 7d 22 20 40 63 6f 64 65 2d 65 64 69 74 6f 72 2d 66 69 72 73 74 2d 75 70 64 61 74 65 64 3d 22 24 7b 30 7d 22 3e 3c 2f 76 74 2d 75 69 2d 63 6f 64 65 2d 68 69 67 68 6c 69 67 68 74 65 72 3e 20 3c 2f 64 69 76 3e 20 3c 2f 76 74 2d 75 69 2d 73 6c 69 64 69 6e 67 2d 70 61 6e 65 6c Data Ascii: e cannot be loaded. </div> </div> <vt-ui-code-highlighter id="code-editor" class="position-relative w-100 border" .highlightedByRegex="${0}" .code="${0}" .mode="${0}" @code-editor-first-updated="${0}"></vt-ui-code-highlighter> </div> </vt-ui-sliding-panel
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 20 65 2c 61 3b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 6e 2e 4b 4b 2e 73 65 6e 64 54 6f 43 6c 69 70 62 6f 61 72 64 28 74 68 69 73 2c 6e 75 6c 6c 21 3d 3d 28 65 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 74 68 69 73 2e 72 75 6c 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 7c 7c 6e 75 6c 6c 3d 3d 3d 28 61 3d 61 2e 61 74 74 72 69 62 75 74 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 72 75 6c 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 65 3f 65 3a 22 22 2c 22 59 41 52 41 20 72 75 6c 65 20 63 6f 70 69 65 64 20 74 6f 20 74 68 65 20 63 6c 69 70 62 6f 61 72 64 22 29 7d 64 6f 77 6e 6c 6f 61 64 52 75 6c 65 28 29 7b 76 61 72 20 74 2c 65 2c 61 3b 6e 75 6c 6c 21 3d 3d 28 74 3d 74 68 69 73 2e 72 75 6c 65 29 26 26 76 6f 69 64 20 30 21 3d 3d Data Ascii: e,a;t.preventDefault(),n.KK.sendToClipboard(this,null!==(e=null===(a=this.rule)\|\|void 0===a\|\|null===(a=a.attributes)\|\|void 0===a?void 0:a.rule)&&void 0!==e?e:"","YARA rule copied to the clipboard")}downloadRule(){var t,e,a;null!==(t=this.rule)&&void 0!==
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 29 2c 74 68 69 73 2e 63 6c 6f 73 65 4f 6e 43 6c 69 63 6b 41 77 61 79 3d 21 30 7d 73 74 61 74 69 63 20 67 65 74 20 73 74 79 6c 65 73 28 29 7b 72 65 74 75 72 6e 28 30 2c 69 2e 75 6e 73 61 66 65 43 53 53 29 28 5b 73 2e 41 2c 6c 2e 41 5d 29 7d 63 6c 6f 73 65 50 61 6e 65 6c 28 29 7b 74 68 69 73 2e 6f 70 65 6e 65 64 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 63 6c 6f 73 65 22 29 29 7d 72 65 6e 64 65 72 28 29 7b 63 6f 6e 73 74 20 74 3d 28 30 2c 69 2e 68 74 6d 6c 29 28 6e 7c 7c 28 6e 3d 70 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 22 3e 20 24 7b 30 7d 20 3c 73 6c 6f 74 20 6e 61 6d 65 3d Data Ascii: ),this.closeOnClickAway=!0}static get styles(){return(0,i.unsafeCSS)([s.A,l.A])}closePanel(){this.opened=void 0,this.dispatchEvent(new CustomEvent("close"))}render(){const t=(0,i.html)(n\|\|(n=p` <div class="container"> <div class="header"> ${0} <slot name=
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 74 2c 62 74 2c 75 74 2c 76 74 2c 68 74 2c 6d 74 2c 67 74 2c 79 74 2c 66 74 2c 77 74 2c 6b 74 2c 24 74 2c 78 74 2c 52 74 2c 5f 74 2c 43 74 2c 41 74 2c 54 74 2c 55 74 2c 49 74 2c 4f 74 2c 6a 74 2c 44 74 2c 4b 74 2c 4c 74 2c 50 74 2c 7a 74 2c 5a 74 2c 4d 74 3d 74 3d 3e 74 3b 76 61 72 20 71 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 2c 69 29 7b 76 61 72 20 72 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 73 3d 6f 3c 33 3f 65 3a 6e 75 6c 6c 3d 3d 3d 69 3f 69 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 61 29 3a 69 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 2e Data Ascii: t,bt,ut,vt,ht,mt,gt,yt,ft,wt,kt,$t,xt,Rt,_t,Ct,At,Tt,Ut,It,Ot,jt,Dt,Kt,Lt,Pt,zt,Zt,Mt=t=>t;var qt=function(t,e,a,i){var r,o=arguments.length,s=o<3?e:null===i?i=Object.getOwnPropertyDescriptor(e,a):i;if("object"==typeof Reflect&&"function"==typeof Reflect.
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 6c 6c 3d 3d 3d 28 63 3d 74 68 69 73 2e 74 68 72 65 61 74 41 63 74 6f 72 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 63 3f 76 6f 69 64 20 30 3a 63 2e 69 73 4c 6f 61 64 69 6e 67 29 7c 7c 28 6e 75 6c 6c 3d 3d 3d 28 70 3d 74 68 69 73 2e 72 65 66 65 72 65 6e 63 65 73 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 70 3f 76 6f 69 64 20 30 3a 70 2e 69 73 4c 6f 61 64 69 6e 67 29 7c 7c 74 68 69 73 2e 61 72 65 4d 61 6e 64 69 61 6e 74 54 68 72 65 61 74 41 63 74 6f 72 73 4c 6f 61 64 69 6e 67 7c 7c 74 68 69 73 2e 61 72 65 4d 61 6e 64 69 61 6e 74 52 65 70 6f 72 74 73 4c 6f 61 64 69 6e 67 7c 7c 74 68 69 73 2e 61 72 65 4d 61 6e 64 69 61 6e 74 56 75 6c 6e 65 72 61 62 69 6c 69 74 69 65 73 4c 6f 61 64 69 6e 67 29 7c 7c 28 6e 75 6c 6c 3d 3d 3d 28 62 3d 74 68 69 73 2e 67 72 61 70 68 73 29 7c Data Ascii: ll===(c=this.threatActors)\|\|void 0===c?void 0:c.isLoading)\|\|(null===(p=this.references)\|\|void 0===p?void 0:p.isLoading)\|\|this.areMandiantThreatActorsLoading\|\|this.areMandiantReportsLoading\|\|this.areMandiantVulnerabilitiesLoading)\|\|(null===(b=this.graphs)\|
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 6c 21 3d 3d 28 63 3d 63 2e 64 61 74 61 29 26 26 76 6f 69 64 20 30 21 3d 3d 63 26 26 63 2e 6c 65 6e 67 74 68 7c 7c 6e 75 6c 6c 21 3d 3d 28 70 3d 74 68 69 73 2e 72 65 66 65 72 65 6e 63 65 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 70 26 26 6e 75 6c 6c 21 3d 3d 28 70 3d 70 2e 64 61 74 61 29 26 26 76 6f 69 64 20 30 21 3d 3d 70 26 26 70 2e 6c 65 6e 67 74 68 7c 7c 6e 75 6c 6c 21 3d 3d 28 62 3d 74 68 69 73 2e 6d 61 6e 64 69 61 6e 74 54 68 72 65 61 74 41 63 74 6f 72 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 62 26 26 62 2e 66 6f 75 6e 64 7c 7c 6e 75 6c 6c 21 3d 3d 28 75 3d 74 68 69 73 2e 6d 61 6e 64 69 61 6e 74 52 65 70 6f 72 74 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 75 26 26 75 2e 66 6f 75 6e 64 7c 7c 6e 75 6c 6c 21 3d 3d 28 76 3d 74 68 69 73 2e 6d 61 6e 64 69 61 6e 74 Data Ascii: l!==(c=c.data)&&void 0!==c&&c.length\|\|null!==(p=this.references)&&void 0!==p&&null!==(p=p.data)&&void 0!==p&&p.length\|\|null!==(b=this.mandiantThreatActors)&&void 0!==b&&b.found\|\|null!==(u=this.mandiantReports)&&void 0!==u&&u.found\|\|null!==(v=this.mandiant
2025-01-15 16:45:03 UTC	1390	IN	Data Raw: 72 65 6e 63 65 73 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 26 26 6e 75 6c 6c 21 3d 3d 28 74 3d 74 2e 64 61 74 61 29 26 26 76 6f 69 64 20 30 21 3d 3d 74 26 26 74 2e 6c 65 6e 67 74 68 3f 28 30 2c 6f 2e 68 74 6d 6c 29 28 79 7c 7c 28 79 3d 4d 74 60 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 76 73 74 61 63 6b 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 77 2d 62 6f 6c 64 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 20 70 2d 32 20 6d 62 2d 32 22 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 77 2d 62 6f 6c 64 22 3e 43 6f 6d 6d 75 6e 69 74 79 20 52 65 66 65 72 65 6e 63 65 73 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 76 73 74 61 63 6b 20 67 61 70 2d 32 22 3e 20 24 7b 30 7d 20 24 7b 30 7d 20 3c 2f 64 69 76 3e 20 3c 2f 64 69 76 3e 60 29 Data Ascii: rences)&&void 0!==t&&null!==(t=t.data)&&void 0!==t&&t.length?(0,o.html)(y\|\|(y=Mt` <div class="vstack"> <div class="fw-bold border-bottom p-2 mb-2"> <div class="fw-bold">Community References</div> </div> <div class="vstack gap-2"> ${0} ${0} </div> </div>`)

Target ID:	0
Start time:	11:43:05
Start date:	15/01/2025
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\DEEZI80S.pdf"
Imagebase:	0x7ff7fa2c0000
File size:	5'641'176 bytes
MD5 hash:	24EAD1C46A47022347DC0F05F6EFBB8C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	11:43:06
Start date:	15/01/2025
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Imagebase:	0x7ff6a8810000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	11:43:07
Start date:	15/01/2025
Path:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=1588 --field-trial-handle=1568,i,17243078238320737959,17368587101676185686,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Imagebase:	0x7ff6a8810000
File size:	3'581'912 bytes
MD5 hash:	9B38E8E8B6DD9622D24B53E095C5D9BE
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	14
Start time:	11:43:32
Start date:	15/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://connectauthentication.blob.core.windows.net/open/complete.html?h9dhy
Imagebase:	0x7ff728d30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	15
Start time:	11:43:33
Start date:	15/01/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2212 --field-trial-handle=1852,i,3534187721205768075,1816576997033915686,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff728d30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	This technique has been deprecated. Please use Command and Scripting Interpreter where appropriate.
Tactics:	Defense Evasion, Execution
Data Sources:
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems. Spearphishing with a link is a specific variant of spearphishing. It is different from other forms of spearphishing in that it employs the use of links to download malware contained in email, instead of attaching malicious files to the email itself, to avoid defenses that may inspect email attachments. Spearphishing may also involve social engineering techniques, such as posing as a trusted source.
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Google Workspace, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report DEEZI80S.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Cryptography

Phishing

Compliance

Networking

System Summary

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\c85385f2-b868-4c42-888a-72594431ffd8.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\000001.dbtmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\CURRENT (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\MANIFEST-000001

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\000001.dbtmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\CURRENT (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\shared_proto_db\metadata\MANIFEST-000001

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-250115164311Z-166.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

Windows Analysis Report
DEEZI80S.pdf