Joe Sandbox Cloud Basic Analysis Report

Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
http://link.jschoenconsultingco.com/

Overview

General Information

Sample URL:http://link.jschoenconsultingco.com/
Analysis ID:1400707
Infos:

Detection

Score:0
Range:0 - 100
Whitelisted:false
Confidence:100%

Signatures

No high impact signatures.

Classification

Process Tree

  • System is w10x64
  • chrome.exe (PID: 1376 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
    • chrome.exe (PID: 5572 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2168,i,5198871792002701054,9817953159442565843,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
  • chrome.exe (PID: 6500 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "http://link.jschoenconsultingco.com/ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)
  • cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgS_YOPXGMbpgK8GIjDM0jzunVG3Pq9C8_p5lbtQgdoKMHDC-yIg0E9GZsoonqCTKFjaHWbLvRCdKXGn0-4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMHTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgS_YOPXGMbpgK8GIjDM0jzunVG3Pq9C8_p5lbtQgdoKMHDC-yIg0E9GZsoonqCTKFjaHWbLvRCdKXGn0-4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMHTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=1kRDYC3bfA-o6-tsWzIBvp7k&size=normal&s=SJMv6d_Y3rtpRU1dZxBWoLycSG3oTNhRUgLWbZXALt-npqYKQ-ZbbZwf7zIhBct_gKIax55iTMFgrLqb3Kp0UI25oxXgX_0tu2jWCkwg-yzJxFxTPF3fFBFr63ny_eeasrd2REhhMop-kacaKeULBBP4eI3cmpv4c70HhpI7Eky3z8R2OlGcOwKq3jaY5KHEicYv7Frh5xJSYHcVdbYW8Voup6KOqgkxcljh3Uods9K5LCrFAhhGYDH43c6z9mnkxwQLqH-W5v9w7Ws8e2LDjVfiIZBXiMI&cb=vfor8c80z1l5HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=1kRDYC3bfA-o6-tsWzIBvp7k&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bHTTP Parser: No favicon
Source: unknownHTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknownHTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknownTCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknownTCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknownTCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknownTCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknownTCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknownTCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknownTCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknownTCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknownTCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknownTCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknownTCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknownTCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknownTCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknownTCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknownTCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknownTCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknownTCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknownTCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknownTCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknownTCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknownTCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknownTCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknownUDP traffic detected without corresponding DNS query: 1.1.1.1
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global trafficHTTP traffic detected: GET /sorry/index?continue=https://www.google.com/&q=EgS_YOPXGMbpgK8GIjDM0jzunVG3Pq9C8_p5lbtQgdoKMHDC-yIg0E9GZsoonqCTKFjaHWbLvRCdKXGn0-4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk; 1P_JAR=2024-02-29-07; AEC=Ae3NU9ONhX9B7XLX981q957rojONvM6KssVw9cOsGpqQQbhrnqSLA01Im0g
Source: global trafficHTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgS_YOPXGMbpgK8GIjDM0jzunVG3Pq9C8_p5lbtQgdoKMHDC-yIg0E9GZsoonqCTKFjaHWbLvRCdKXGn0-4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk; 1P_JAR=2024-02-29-07; AEC=Ae3NU9ONhX9B7XLX981q957rojONvM6KssVw9cOsGpqQQbhrnqSLA01Im0g
Source: global trafficHTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=1kRDYC3bfA-o6-tsWzIBvp7k&size=normal&s=SJMv6d_Y3rtpRU1dZxBWoLycSG3oTNhRUgLWbZXALt-npqYKQ-ZbbZwf7zIhBct_gKIax55iTMFgrLqb3Kp0UI25oxXgX_0tu2jWCkwg-yzJxFxTPF3fFBFr63ny_eeasrd2REhhMop-kacaKeULBBP4eI3cmpv4c70HhpI7Eky3z8R2OlGcOwKq3jaY5KHEicYv7Frh5xJSYHcVdbYW8Voup6KOqgkxcljh3Uods9K5LCrFAhhGYDH43c6z9mnkxwQLqH-W5v9w7Ws8e2LDjVfiIZBXiMI&cb=vfor8c80z1l5 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgS_YOPXGMbpgK8GIjDM0jzunVG3Pq9C8_p5lbtQgdoKMHDC-yIg0E9GZsoonqCTKFjaHWbLvRCdKXGn0-4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk; 1P_JAR=2024-02-29-07; AEC=Ae3NU9ONhX9B7XLX981q957rojONvM6KssVw9cOsGpqQQbhrnqSLA01Im0g
Source: global trafficHTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global trafficHTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=1kRDYC3bfA-o6-tsWzIBvp7k HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=1kRDYC3bfA-o6-tsWzIBvp7k&size=normal&s=SJMv6d_Y3rtpRU1dZxBWoLycSG3oTNhRUgLWbZXALt-npqYKQ-ZbbZwf7zIhBct_gKIax55iTMFgrLqb3Kp0UI25oxXgX_0tu2jWCkwg-yzJxFxTPF3fFBFr63ny_eeasrd2REhhMop-kacaKeULBBP4eI3cmpv4c70HhpI7Eky3z8R2OlGcOwKq3jaY5KHEicYv7Frh5xJSYHcVdbYW8Voup6KOqgkxcljh3Uods9K5LCrFAhhGYDH43c6z9mnkxwQLqH-W5v9w7Ws8e2LDjVfiIZBXiMI&cb=vfor8c80z1l5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk; 1P_JAR=2024-02-29-07; AEC=Ae3NU9ONhX9B7XLX981q957rojONvM6KssVw9cOsGpqQQbhrnqSLA01Im0g
Source: global trafficHTTP traffic detected: GET /js/bg/722MIWu_TMZiQau3mAaarHtCk2pd6rTYw5oNsH4wR_g.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=1kRDYC3bfA-o6-tsWzIBvp7k&size=normal&s=SJMv6d_Y3rtpRU1dZxBWoLycSG3oTNhRUgLWbZXALt-npqYKQ-ZbbZwf7zIhBct_gKIax55iTMFgrLqb3Kp0UI25oxXgX_0tu2jWCkwg-yzJxFxTPF3fFBFr63ny_eeasrd2REhhMop-kacaKeULBBP4eI3cmpv4c70HhpI7Eky3z8R2OlGcOwKq3jaY5KHEicYv7Frh5xJSYHcVdbYW8Voup6KOqgkxcljh3Uods9K5LCrFAhhGYDH43c6z9mnkxwQLqH-W5v9w7Ws8e2LDjVfiIZBXiMI&cb=vfor8c80z1l5Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk; 1P_JAR=2024-02-29-07; AEC=Ae3NU9ONhX9B7XLX981q957rojONvM6KssVw9cOsGpqQQbhrnqSLA01Im0g
Source: global trafficHTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=1kRDYC3bfA-o6-tsWzIBvp7k&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgS_YOPXGMbpgK8GIjDM0jzunVG3Pq9C8_p5lbtQgdoKMHDC-yIg0E9GZsoonqCTKFjaHWbLvRCdKXGn0-4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk; 1P_JAR=2024-02-29-07; AEC=Ae3NU9ONhX9B7XLX981q957rojONvM6KssVw9cOsGpqQQbhrnqSLA01Im0g
Source: global trafficHTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgS_YOPXGMbpgK8GIjDM0jzunVG3Pq9C8_p5lbtQgdoKMHDC-yIg0E9GZsoonqCTKFjaHWbLvRCdKXGn0-4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk; 1P_JAR=2024-02-29-07; AEC=Ae3NU9ONhX9B7XLX981q957rojONvM6KssVw9cOsGpqQQbhrnqSLA01Im0g
Source: global trafficHTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk; 1P_JAR=2024-02-29-07; AEC=Ae3NU9ONhX9B7XLX981q957rojONvM6KssVw9cOsGpqQQbhrnqSLA01Im0g
Source: global trafficHTTP traffic detected: GET / HTTP/1.1Host: link.jschoenconsultingco.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: unknownDNS traffic detected: queries for: link.jschoenconsultingco.com
Source: chromecache_55.2.drString found in binary or memory: https://cloud.google.com/contact
Source: chromecache_55.2.drString found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_55.2.drString found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_55.2.drString found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_55.2.drString found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_55.2.drString found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_55.2.drString found in binary or memory: https://recaptcha.net
Source: chromecache_55.2.drString found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_55.2.drString found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_55.2.drString found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_55.2.drString found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_55.2.drString found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_55.2.dr, chromecache_53.2.drString found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_55.2.drString found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/1kRDYC3bfA-o6-tsWzIBvp7k/recaptcha__.
Source: chromecache_53.2.dr, chromecache_51.2.drString found in binary or memory: https://www.gstatic.com/recaptcha/releases/1kRDYC3bfA-o6-tsWzIBvp7k/recaptcha__en.js
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49743
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49742
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49740
Source: unknownNetwork traffic detected: HTTP traffic on port 49678 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49748 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49743 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49746 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49751 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49739
Source: unknownNetwork traffic detected: HTTP traffic on port 49736 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49759
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49736
Source: unknownNetwork traffic detected: HTTP traffic on port 49759 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49675 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49754
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49751
Source: unknownNetwork traffic detected: HTTP traffic on port 49740 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49742 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49749 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 49768 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49749
Source: unknownNetwork traffic detected: HTTP traffic on port 49754 -> 443
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49748
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49746
Source: unknownNetwork traffic detected: HTTP traffic on port 443 -> 49768
Source: unknownNetwork traffic detected: HTTP traffic on port 49739 -> 443
Source: unknownHTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknownHTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: classification engineClassification label: clean0.win@17/20@6/5
Source: unknownProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2168,i,5198871792002701054,9817953159442565843,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknownProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "http://link.jschoenconsultingco.com/
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2168,i,5198871792002701054,9817953159442565843,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exeProcess created: unknown unknownJump to behavior
Source: Window RecorderWindow detected: More than 3 window changes detected

Mitre Att&ck Matrix

ReconnaissanceResource DevelopmentInitial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
Gather Victim Identity InformationAcquire InfrastructureValid AccountsWindows Management InstrumentationPath Interception1
Process Injection		1
Process Injection		OS Credential DumpingSystem Service DiscoveryRemote ServicesData from Local System1
Encrypted Channel		Exfiltration Over Other Network MediumAbuse Accessibility Features
CredentialsDomainsDefault AccountsScheduled Task/JobBoot or Logon Initialization ScriptsBoot or Logon Initialization ScriptsRootkitLSASS MemoryApplication Window DiscoveryRemote Desktop ProtocolData from Removable Media2
Non-Application Layer Protocol		Exfiltration Over BluetoothNetwork Denial of Service
Email AddressesDNS ServerDomain AccountsAtLogon Script (Windows)Logon Script (Windows)Obfuscated Files or InformationSecurity Account ManagerQuery RegistrySMB/Windows Admin SharesData from Network Shared Drive3
Application Layer Protocol		Automated ExfiltrationData Encrypted for Impact
Employee NamesVirtual Private ServerLocal AccountsCronLogin HookLogin HookBinary PaddingNTDSSystem Network Configuration DiscoveryDistributed Component Object ModelInput Capture1
Ingress Tool Transfer		Traffic DuplicationData Destruction

Behavior Graph

Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.


windows-stand

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

SourceDetectionScannerLabelLink
http://link.jschoenconsultingco.com/0%Avira URL Cloudsafe
http://link.jschoenconsultingco.com/1%VirustotalBrowse

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

SourceDetectionScannerLabelLink
link.jschoenconsultingco.com1%VirustotalBrowse
fp2e7a.wpc.phicdn.net0%VirustotalBrowse

URLs

SourceDetectionScannerLabelLink
https://recaptcha.net0%URL Reputationsafe
https://recaptcha.net0%URL Reputationsafe
https://www.gstatic.c..?/recaptcha/releases/1kRDYC3bfA-o6-tsWzIBvp7k/recaptcha__.0%URL Reputationsafe
about:blank0%Avira URL Cloudsafe

Domains and IPs

Contacted Domains

NameIPActiveMaliciousAntivirus DetectionReputation
www.google.com
142.251.32.100
truefalse
    		high
    custom.autoklose.com
    		35.222.146.56
    		truefalse
      		high
      fp2e7a.wpc.phicdn.net
      		192.229.211.108
      		truefalseunknown
      link.jschoenconsultingco.com
      		unknown
      		unknownfalseunknown

      Contacted URLs

      NameMaliciousAntivirus DetectionReputation
      https://www.google.com/recaptcha/api.jsfalse
        		high
        https://www.google.com/js/bg/722MIWu_TMZiQau3mAaarHtCk2pd6rTYw5oNsH4wR_g.jsfalse
          		high
          https://www.google.com/recaptcha/api2/bframe?hl=en&v=1kRDYC3bfA-o6-tsWzIBvp7k&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bfalse
            		high
            about:blankfalse
            • Avira URL Cloud: safe
            		low
            https://www.google.com/false
              		high
              http://link.jschoenconsultingco.com/false
                		unknown
                https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgS_YOPXGMbpgK8GIjDM0jzunVG3Pq9C8_p5lbtQgdoKMHDC-yIg0E9GZsoonqCTKFjaHWbLvRCdKXGn0-4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMfalse
                  		high
                  https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=1kRDYC3bfA-o6-tsWzIBvp7k&size=normal&s=SJMv6d_Y3rtpRU1dZxBWoLycSG3oTNhRUgLWbZXALt-npqYKQ-ZbbZwf7zIhBct_gKIax55iTMFgrLqb3Kp0UI25oxXgX_0tu2jWCkwg-yzJxFxTPF3fFBFr63ny_eeasrd2REhhMop-kacaKeULBBP4eI3cmpv4c70HhpI7Eky3z8R2OlGcOwKq3jaY5KHEicYv7Frh5xJSYHcVdbYW8Voup6KOqgkxcljh3Uods9K5LCrFAhhGYDH43c6z9mnkxwQLqH-W5v9w7Ws8e2LDjVfiIZBXiMI&cb=vfor8c80z1l5false
                    		high
                    https://www.google.com/favicon.icofalse
                      		high
                      https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=1kRDYC3bfA-o6-tsWzIBvp7kfalse
                        		high

                        URLs from Memory and Binaries

                        NameSourceMaliciousAntivirus DetectionReputation
                        https://play.google.com/log?format=json&hasfast=truechromecache_55.2.drfalse
                          		high
                          https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-recachromecache_55.2.drfalse
                            		high
                            https://developers.google.com/recaptcha/docs/faq#localhost_supportchromecache_55.2.drfalse
                              		high
                              https://support.google.com/recaptcha/#6175971chromecache_55.2.drfalse
                                		high
                                https://support.google.com/recaptcha#6262736chromecache_55.2.drfalse
                                  		high
                                  https://cloud.google.com/recaptcha-enterprise/billing-informationchromecache_55.2.drfalse
                                    		high
                                    https://recaptcha.netchromecache_55.2.drfalse
                                    • URL Reputation: safe
                                    • URL Reputation: safe
                                    		unknown
                                    https://www.google.com/log?format=json&hasfast=truechromecache_55.2.drfalse
                                      		high
                                      https://www.google.com/recaptcha/api2/chromecache_55.2.dr, chromecache_53.2.drfalse
                                        		high
                                        https://support.google.com/recaptcha/?hl=en#6223828chromecache_55.2.drfalse
                                          		high
                                          https://cloud.google.com/contactchromecache_55.2.drfalse
                                            		high
                                            https://support.google.com/recaptchachromecache_55.2.drfalse
                                              		high
                                              https://www.gstatic.c..?/recaptcha/releases/1kRDYC3bfA-o6-tsWzIBvp7k/recaptcha__.chromecache_55.2.drfalse
                                              • URL Reputation: safe
                                              		low
                                              https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-quechromecache_55.2.drfalse
                                                		high

                                                World Map of Contacted IPs

                                                • No. of IPs < 25%
                                                • 25% < No. of IPs < 50%
                                                • 50% < No. of IPs < 75%
                                                • 75% < No. of IPs

                                                Public IPs

                                                IPDomainCountryFlagASNASN NameMalicious
                                                142.251.40.100
                                                		unknownUnited States
                                                		15169GOOGLEUSfalse
                                                239.255.255.250
                                                		unknownReserved
                                                		unknownunknownfalse
                                                142.251.32.100
                                                		www.google.comUnited States
                                                		15169GOOGLEUSfalse
                                                35.222.146.56
                                                		custom.autoklose.comUnited States
                                                		15169GOOGLEUSfalse

                                                Private

                                                IP
                                                192.168.2.4

                                                General Information

                                                Joe Sandbox version:40.0.0 Tourmaline
                                                Analysis ID:1400707
                                                Start date and time:2024-02-29 08:38:57 +01:00
                                                Joe Sandbox product:CloudBasic
                                                Overall analysis duration:0h 3m 15s
                                                Hypervisor based Inspection enabled:false
                                                Report type:full
                                                Cookbook file name:browseurl.jbs
                                                Sample URL:http://link.jschoenconsultingco.com/
                                                Analysis system description:Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
                                                Number of analysed new started processes analysed:8
                                                Number of new started drivers analysed:0
                                                Number of existing processes analysed:0
                                                Number of existing drivers analysed:0
                                                Number of injected processes analysed:0
                                                Technologies:
                                                • HCA enabled
                                                • EGA enabled
                                                • AMSI enabled
                                                Analysis Mode:default
                                                Analysis stop reason:Timeout
                                                Detection:CLEAN
                                                Classification:clean0.win@17/20@6/5
                                                EGA Information:Failed
                                                HCA Information:
                                                • Successful, ratio: 100%
                                                • Number of executed functions: 0
                                                • Number of non-executed functions: 0

                                                Warnings

                                                • Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
                                                • Excluded IPs from analysis (whitelisted): 142.251.40.195, 142.251.40.142, 172.253.63.84, 34.104.35.123, 142.250.80.35, 142.250.65.170, 142.251.40.202, 142.250.65.234, 142.251.35.170, 142.250.81.234, 142.250.72.106, 142.250.176.202, 142.250.80.42, 142.251.32.106, 142.251.41.10, 142.250.80.10, 142.250.80.74, 142.250.65.202, 142.251.40.234, 142.250.64.106, 142.250.80.106, 142.250.80.67, 13.85.23.86, 72.21.81.240, 192.229.211.108, 13.85.23.206, 20.166.126.56, 142.250.176.195
                                                • Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
                                                • HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
                                                • Not all processes where analyzed, report is missing behavior information
                                                • Report size getting too big, too many NtSetInformationFile calls found.

                                                Simulations

                                                Behavior and APIs

                                                ⊘No simulations

                                                Joe Sandbox View / Context

                                                IPs

                                                ⊘No context

                                                Domains

                                                ⊘No context

                                                ASNs

                                                ⊘No context

                                                JA3 Fingerprints

                                                ⊘No context

                                                Dropped Files

                                                ⊘No context

                                                Created / dropped Files

                                                Chrome Cache Entry: 48

                                                Download File
                                                Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                File Type:ASCII text, with very long lines (17256), with no line terminators
                                                Category:downloaded
                                                Size (bytes):17256
                                                Entropy (8bit):5.53116771237722
                                                Encrypted:false
                                                SSDEEP:384:9NZkA7rPe5uwZBDXiKp56VhgQXdl5GpZbAvWzyUj:SAHZwl6rMpZUu5
                                                MD5:1D6072146DC8D80DC70FF94257474E51
                                                SHA1:42CBA58A012A23743FF4A338C390A56DFD49C4FD
                                                SHA-256:EF6D8C216BBF4CC66241ABB798069AAC7B42936A5DEAB4D8C39A0DB07E3047F8
                                                SHA-512:93D8618477D8B7AB37CE9127225CD278CC554645B32806106224641AB23A4898231D1C099C263BA69364CFAB76B8398E13CFE68C7AB5C0CA379F861F7310DCF3
                                                Malicious:false
                                                Reputation:low
                                                URL:https://www.google.com/js/bg/722MIWu_TMZiQau3mAaarHtCk2pd6rTYw5oNsH4wR_g.js
                                                Preview:/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var W=this||self,N=function(t,h){if(!(t=(h=W.trustedTypes,null),h)||!h.createPolicy)return t;try{t=h.createPolicy("bg",{createHTML:u,createScript:u,createScriptURL:u})}catch(I){W.console&&W.console.error(I.message)}return t},u=function(t){return t};(0,eval)(function(t,h){return(h=N())&&1===t.eval(h.createScript("1"))?function(I){return h.createScript(I)}:function(I){return""+I}}(W)(Array(7824*Math.random()|0).join("\n")+'(function(){var G=function(t,h,W){t[f(W,h,t),t6]=2796},je=function(t,h,W,u){X(h,(u=p((W=p(h),h)),u),F(t,E(h,W)))},A={passive:true,capture:true},h6=function(t,h){(h.push(t[0]<<24|t[1]<<16|t[2]<<8|t[3]),h.push(t[4]<<24|t[5]<<16|t[6]<<8|t[7]),h).push(t[8]<<24|t[9]<<16|t[10]<<8|t[11])},IZ=function(t,h){return h=0,function(){return h<t.length?{done:false,value:t[h++]}:{done:true}}},b=function(t,h){h.o=((h.o?h.o+"~":"E:")+t.message+":"+t.stack).slice(0,2048)},WH=function(t,h

                                                Chrome Cache Entry: 49

                                                Download File
                                                Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                File Type:MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
                                                Category:downloaded
                                                Size (bytes):5430
                                                Entropy (8bit):3.6534652184263736
                                                Encrypted:false
                                                SSDEEP:48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
                                                MD5:F3418A443E7D841097C714D69EC4BCB8
                                                SHA1:49263695F6B0CDD72F45CF1B775E660FDC36C606
                                                SHA-256:6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
                                                SHA-512:82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
                                                Malicious:false
                                                Reputation:low
                                                URL:https://www.google.com/favicon.ico
                                                Preview:............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

                                                Chrome Cache Entry: 50

                                                Download File
                                                Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                File Type:ASCII text, with very long lines (56398), with no line terminators
                                                Category:downloaded
                                                Size (bytes):56398
                                                Entropy (8bit):5.907604034780877
                                                Encrypted:false
                                                SSDEEP:768:+LUmmAWTe2uXYp8Mi+yKYlebyB5lxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0B5chXwW49z2
                                                MD5:EB4BC511F79F7A1573B45F5775B3A99B
                                                SHA1:D910FB51AD7316AA54F055079374574698E74B35
                                                SHA-256:7859A62E04B0ACB06516EB12454DE6673883ECFAEAED6C254659BCA7CD59C050
                                                SHA-512:EC9BDF1C91B6262B183FD23F640EAC22016D1F42DB631380676ED34B962E01BADDA91F9CBDFA189B42FE3182A992F1B95A7353AF41E41B2D6E1DAB17E87637A0
                                                Malicious:false
                                                Reputation:low
                                                URL:https://www.gstatic.com/recaptcha/releases/1kRDYC3bfA-o6-tsWzIBvp7k/styles__ltr.css
                                                Preview:.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

                                                Chrome Cache Entry: 51

                                                Download File
                                                Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                File Type:ASCII text, with no line terminators
                                                Category:downloaded
                                                Size (bytes):102
                                                Entropy (8bit):4.954234440752388
                                                Encrypted:false
                                                SSDEEP:3:JSbMqSL1cdXWKQKPMwmIknZSSZgWaee:PLKdXNQKss6gL
                                                MD5:7E005BC0107FE8DD6255D4253228EF02
                                                SHA1:718501672A9B00AFFE1D688D7B3F2F6202E3E96E
                                                SHA-256:80663B7D03F283B27D8D833CA725A43D5CD3D5B5A7DD6487970DCA9469F9C139
                                                SHA-512:3F17B8CCEF75B49E01343A33D14744D589C87EC2A574B529E7EC65ED921C47D6D4A6F768CA4229B4A0B9E87D6624D76E0B4241AD214014305A9AA8E766433156
                                                Malicious:false
                                                Reputation:low
                                                URL:https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=1kRDYC3bfA-o6-tsWzIBvp7k
                                                Preview:importScripts('https://www.gstatic.com/recaptcha/releases/1kRDYC3bfA-o6-tsWzIBvp7k/recaptcha__en.js');

                                                Chrome Cache Entry: 52

                                                Download File
                                                Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                File Type:MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
                                                Category:dropped
                                                Size (bytes):5430
                                                Entropy (8bit):3.6534652184263736
                                                Encrypted:false
                                                SSDEEP:48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
                                                MD5:F3418A443E7D841097C714D69EC4BCB8
                                                SHA1:49263695F6B0CDD72F45CF1B775E660FDC36C606
                                                SHA-256:6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
                                                SHA-512:82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
                                                Malicious:false
                                                Reputation:low
                                                Preview:............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

                                                Chrome Cache Entry: 53

                                                Download File
                                                Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                File Type:ASCII text, with very long lines (1222), with no line terminators
                                                Category:downloaded
                                                Size (bytes):1222
                                                Entropy (8bit):5.821461377873524
                                                Encrypted:false
                                                SSDEEP:24:2jkm94/zKPccAv+KVCLTLv138EgFB5vtTGJTlWtZ1v8IgsLqo40RWUnYN:VKEctKonR3evtTA871v8IhLrwUnG
                                                MD5:AF236E134BD0FB0FB4945E14343C4F72
                                                SHA1:4293C60ACE63C1685AB3218E8705E8338A3E1E0F
                                                SHA-256:9ED2048AF008ABE9739E5658331FA63F436F359C2085099E7636F191BC5D1A9D
                                                SHA-512:657F76AC4B5DED234C45C03DCB0F2B5B261848C1437A4C5FD6A7592285CFB67D743F7194DFB8D058FE79F26D1455747B83F4F15D543622512CD974052B010E24
                                                Malicious:false
                                                Reputation:low
                                                URL:https://www.google.com/recaptcha/api.js
                                                Preview:/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]||{},N='grecaptcha';var gr=w[N]=w[N]||{};gr.ready=gr.ready||function(f){(cfg['fns']=cfg['fns']||[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']||[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/1kRDYC3bfA-o6-tsWzIBvp7k/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-mOWLSQycXikmw9Z/tMAEHIuYe0wwJfLBh1efKEgK

                                                Chrome Cache Entry: 54

                                                Download File
                                                Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                File Type:PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
                                                Category:downloaded
                                                Size (bytes):2228
                                                Entropy (8bit):7.82817506159911
                                                Encrypted:false
                                                SSDEEP:48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
                                                MD5:EF9941290C50CD3866E2BA6B793F010D
                                                SHA1:4736508C795667DCEA21F8D864233031223B7832
                                                SHA-256:1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
                                                SHA-512:A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
                                                Malicious:false
                                                Reputation:low
                                                URL:https://www.gstatic.com/recaptcha/api2/logo_48.png
                                                Preview:.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6...*.Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6...*..,xz.._......B."#...L(n..f..Yb...*.8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o......*....x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.*....-.A.}.......I .P.....S....|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.*iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

                                                Chrome Cache Entry: 55

                                                Download File
                                                Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                File Type:ASCII text, with very long lines (568)
                                                Category:downloaded
                                                Size (bytes):503430
                                                Entropy (8bit):5.708119764112345
                                                Encrypted:false
                                                SSDEEP:6144:HEYt9e4UlnQyfZLsIB74RSHywNGte2fp0YROQVZT+DSUAZqH/:Hi9fpj140SwQz0YRO+ZSj/
                                                MD5:3E528C5BD4E8985F914F84BC5F86DF5F
                                                SHA1:34104EA645A6789DD9CB58C264E20ED6855EA1DE
                                                SHA-256:E51E616D124133B0FB24968469097A4D311B972F78455143D940703EA0639BA6
                                                SHA-512:C59A1D40F649446F33FF0FF3FA9A8E997D3CFF10F968D35226BA08BB91C9013AE937460CF2DAB0888848ABE1B693D4377FBD6904E3E03360B15035A8C3E9BC97
                                                Malicious:false
                                                Reputation:low
                                                URL:https://www.gstatic.com/recaptcha/releases/1kRDYC3bfA-o6-tsWzIBvp7k/recaptcha__en.js
                                                Preview:(function(){/*.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0.*/./*.. SPDX-License-Identifier: Apache-2.0.*/./*.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT.*/./*. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0.*/.var C=function(){return[function(f,q,S,Z,P,X,U){return(f|((X=[1,6,4],(f+X[1]&X[2])<X[0]&&3<=((f^17)&7))&&(this.X=S,this.N=q),X[1]))>>3||(P=0,P=void 0===P?0:P,U=I[16](14,q,L[13](26,Z,S),P)),U},function(f,q,S,Z,P,X,U,b,k,E,J,K,B,n,F,c){if(1<=((f|(F=(f-7>>3||(c=q instanceof qd&&q.constructor===qd?q.N:"type_error:SafeUrl"),["T","call",0]),72))==f&&(c=u[22](26,function(r,g,m){m=["could not contact reCAPTCHA.",15,(g=[2,3,6],"recaptcha::2fa")];switch(r.N){case 1:if(!U.C)throw Error(m[0]);if(!U.X)return r.return(I[19](72,.g[0]));if("string"!==typeof X||X.length!=g[2])return r.return(I[19](32,P));return u[10]((r.C=g[0],m[1]),P,U.C,r);case P:C[2

                                                Chrome Cache Entry: 56

                                                Download File
                                                Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                File Type:PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
                                                Category:dropped
                                                Size (bytes):2228
                                                Entropy (8bit):7.82817506159911
                                                Encrypted:false
                                                SSDEEP:48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
                                                MD5:EF9941290C50CD3866E2BA6B793F010D
                                                SHA1:4736508C795667DCEA21F8D864233031223B7832
                                                SHA-256:1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
                                                SHA-512:A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
                                                Malicious:false
                                                Reputation:low
                                                Preview:.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6...*.Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6...*..,xz.._......B."#...L(n..f..Yb...*.8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o......*....x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.*....-.A.}.......I .P.....S....|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.*iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

                                                Chrome Cache Entry: 57

                                                Download File
                                                Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                File Type:Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
                                                Category:downloaded
                                                Size (bytes):15344
                                                Entropy (8bit):7.984625225844861
                                                Encrypted:false
                                                SSDEEP:384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
                                                MD5:5D4AEB4E5F5EF754E307D7FFAEF688BD
                                                SHA1:06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
                                                SHA-256:3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
                                                SHA-512:7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
                                                Malicious:false
                                                Reputation:low
                                                URL:https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
                                                Preview:wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h|.l....A....b6........(......@e.]...*:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#*e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.*UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...*$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf*.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed.*.'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

                                                Chrome Cache Entry: 58

                                                Download File
                                                Process:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                File Type:ASCII text, with no line terminators
                                                Category:downloaded
                                                Size (bytes):16
                                                Entropy (8bit):3.75
                                                Encrypted:false
                                                SSDEEP:3:H0hCkY:UUkY
                                                MD5:AFB69DF47958EB78B4E941270772BD6A
                                                SHA1:D9FE9A625E906FF25C1F165E7872B1D9C731E78E
                                                SHA-256:874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
                                                SHA-512:FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
                                                Malicious:false
                                                Reputation:low
                                                URL:https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAk8dqZYMe7mkRIFDVNaR8U=?alt=proto
                                                Preview:CgkKBw1TWkfFGgA=

                                                Static File Info

                                                ⊘No static file info

                                                Network Behavior

                                                Network Port Distribution

                                                TCP Packets

                                                TimestampSource PortDest PortSource IPDest IP
                                                Feb 29, 2024 08:39:39.597486973 CET49678443192.168.2.4104.46.162.224
                                                Feb 29, 2024 08:39:41.238322020 CET49675443192.168.2.4173.222.162.32
                                                Feb 29, 2024 08:39:49.868393898 CET4973480192.168.2.435.222.146.56
                                                Feb 29, 2024 08:39:49.869128942 CET4973580192.168.2.435.222.146.56
                                                Feb 29, 2024 08:39:49.984452009 CET804973435.222.146.56192.168.2.4
                                                Feb 29, 2024 08:39:49.984539986 CET4973480192.168.2.435.222.146.56
                                                Feb 29, 2024 08:39:49.984733105 CET4973480192.168.2.435.222.146.56
                                                Feb 29, 2024 08:39:49.985043049 CET804973535.222.146.56192.168.2.4
                                                Feb 29, 2024 08:39:49.985121965 CET4973580192.168.2.435.222.146.56
                                                Feb 29, 2024 08:39:50.099013090 CET804973435.222.146.56192.168.2.4
                                                Feb 29, 2024 08:39:50.114965916 CET804973435.222.146.56192.168.2.4
                                                Feb 29, 2024 08:39:50.115014076 CET804973435.222.146.56192.168.2.4
                                                Feb 29, 2024 08:39:50.115082026 CET4973480192.168.2.435.222.146.56
                                                Feb 29, 2024 08:39:50.210946083 CET49736443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:50.210973978 CET44349736142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:50.211040974 CET49736443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:50.211654902 CET49736443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:50.211678982 CET44349736142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:50.402690887 CET44349736142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:50.403157949 CET49736443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:50.403177023 CET44349736142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:50.404174089 CET44349736142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:50.404257059 CET49736443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:50.405375957 CET49736443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:50.405447960 CET44349736142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:50.405575037 CET49736443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:50.405581951 CET44349736142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:50.457973003 CET49736443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:50.847434044 CET49675443192.168.2.4173.222.162.32
                                                Feb 29, 2024 08:39:50.932271004 CET44349736142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:50.932338953 CET49736443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:50.932351112 CET44349736142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:50.932379961 CET44349736142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:50.932430029 CET49736443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:50.937838078 CET49736443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:50.937851906 CET44349736142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:50.948515892 CET49739443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:50.948559046 CET44349739142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:50.948649883 CET49739443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:50.949753046 CET49739443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:50.949779034 CET44349739142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:51.136454105 CET44349739142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:51.154604912 CET49739443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:51.154628038 CET44349739142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:51.155019999 CET44349739142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:51.156188965 CET49739443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:51.156251907 CET44349739142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:51.156572104 CET49739443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:51.197907925 CET44349739142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:51.322866917 CET44349739142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:51.322899103 CET44349739142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:51.322935104 CET44349739142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:51.322952032 CET49739443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:51.322987080 CET44349739142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:51.323014021 CET44349739142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:51.323034048 CET49739443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:51.323079109 CET49739443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:51.324949026 CET49739443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:51.324980974 CET44349739142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:51.481379986 CET49740443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:51.481410980 CET44349740142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:51.481486082 CET49740443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:51.482445002 CET49740443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:51.482460976 CET44349740142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:51.668884039 CET44349740142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:51.669203043 CET49740443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:51.669222116 CET44349740142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:51.669508934 CET44349740142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:51.670991898 CET49740443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:51.671047926 CET44349740142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:51.671535015 CET49740443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:51.717912912 CET44349740142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:51.872546911 CET44349740142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:51.872649908 CET44349740142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:51.872708082 CET49740443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:51.877928019 CET49740443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:51.877945900 CET44349740142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.070045948 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.070092916 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.070163012 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.071258068 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.071280003 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.201839924 CET49743443192.168.2.423.51.58.94
                                                Feb 29, 2024 08:39:53.201958895 CET4434974323.51.58.94192.168.2.4
                                                Feb 29, 2024 08:39:53.202047110 CET49743443192.168.2.423.51.58.94
                                                Feb 29, 2024 08:39:53.206763029 CET49743443192.168.2.423.51.58.94
                                                Feb 29, 2024 08:39:53.206796885 CET4434974323.51.58.94192.168.2.4
                                                Feb 29, 2024 08:39:53.258352041 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.292864084 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.292891026 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.293277979 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.294183969 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.294250965 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.294660091 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.294688940 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.405193090 CET4434974323.51.58.94192.168.2.4
                                                Feb 29, 2024 08:39:53.405316114 CET49743443192.168.2.423.51.58.94
                                                Feb 29, 2024 08:39:53.410325050 CET49743443192.168.2.423.51.58.94
                                                Feb 29, 2024 08:39:53.410367966 CET4434974323.51.58.94192.168.2.4
                                                Feb 29, 2024 08:39:53.410792112 CET4434974323.51.58.94192.168.2.4
                                                Feb 29, 2024 08:39:53.457046986 CET49743443192.168.2.423.51.58.94
                                                Feb 29, 2024 08:39:53.475975990 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.476043940 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.476083040 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.476094007 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.476125002 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.476164103 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.476197958 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.476201057 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.476217031 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.476248980 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.481743097 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.481838942 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.481848001 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.487926960 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.487977028 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.487984896 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.492386103 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.492434978 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.492444992 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.538835049 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.538878918 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.563711882 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.563777924 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.563812017 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.566701889 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.566838026 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.566847086 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.572861910 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.572951078 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.572959900 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.585110903 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.585144043 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.585200071 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.585211039 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.585227013 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.585258007 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.591159105 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.591224909 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.591233969 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.597660065 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.597826004 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.597839117 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.603167057 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.603315115 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.603337049 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.608627081 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.608716011 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.608725071 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.614677906 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.614892006 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.614900112 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.620174885 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.620250940 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.620260954 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.625550032 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.625581980 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.625608921 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.625619888 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.625660896 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.631079912 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.633799076 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.633963108 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.633969069 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.634011984 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.634517908 CET49742443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:53.634543896 CET44349742142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:53.680301905 CET49743443192.168.2.423.51.58.94
                                                Feb 29, 2024 08:39:53.721910000 CET4434974323.51.58.94192.168.2.4
                                                Feb 29, 2024 08:39:53.770827055 CET4434974323.51.58.94192.168.2.4
                                                Feb 29, 2024 08:39:53.770988941 CET4434974323.51.58.94192.168.2.4
                                                Feb 29, 2024 08:39:53.771111965 CET49743443192.168.2.423.51.58.94
                                                Feb 29, 2024 08:39:53.771186113 CET4434974323.51.58.94192.168.2.4
                                                Feb 29, 2024 08:39:53.771225929 CET49743443192.168.2.423.51.58.94
                                                Feb 29, 2024 08:39:53.771225929 CET49743443192.168.2.423.51.58.94
                                                Feb 29, 2024 08:39:53.771260023 CET4434974323.51.58.94192.168.2.4
                                                Feb 29, 2024 08:39:53.771267891 CET4434974323.51.58.94192.168.2.4
                                                Feb 29, 2024 08:39:53.801836967 CET49746443192.168.2.423.51.58.94
                                                Feb 29, 2024 08:39:53.801899910 CET4434974623.51.58.94192.168.2.4
                                                Feb 29, 2024 08:39:53.801969051 CET49746443192.168.2.423.51.58.94
                                                Feb 29, 2024 08:39:53.802238941 CET49746443192.168.2.423.51.58.94
                                                Feb 29, 2024 08:39:53.802256107 CET4434974623.51.58.94192.168.2.4
                                                Feb 29, 2024 08:39:53.986979961 CET4434974623.51.58.94192.168.2.4
                                                Feb 29, 2024 08:39:53.987065077 CET49746443192.168.2.423.51.58.94
                                                Feb 29, 2024 08:39:53.988393068 CET49746443192.168.2.423.51.58.94
                                                Feb 29, 2024 08:39:53.988404989 CET4434974623.51.58.94192.168.2.4
                                                Feb 29, 2024 08:39:53.988744974 CET4434974623.51.58.94192.168.2.4
                                                Feb 29, 2024 08:39:53.990022898 CET49746443192.168.2.423.51.58.94
                                                Feb 29, 2024 08:39:54.033901930 CET4434974623.51.58.94192.168.2.4
                                                Feb 29, 2024 08:39:54.168158054 CET4434974623.51.58.94192.168.2.4
                                                Feb 29, 2024 08:39:54.168253899 CET4434974623.51.58.94192.168.2.4
                                                Feb 29, 2024 08:39:54.168320894 CET49746443192.168.2.423.51.58.94
                                                Feb 29, 2024 08:39:54.257334948 CET49748443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:54.257396936 CET44349748142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.257469893 CET49748443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:54.260916948 CET49748443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:54.260945082 CET44349748142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.443747044 CET49749443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:54.443821907 CET44349749142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.443906069 CET49749443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:54.447010040 CET49749443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:54.447029114 CET44349749142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.453279972 CET49746443192.168.2.423.51.58.94
                                                Feb 29, 2024 08:39:54.453279972 CET49746443192.168.2.423.51.58.94
                                                Feb 29, 2024 08:39:54.453324080 CET4434974623.51.58.94192.168.2.4
                                                Feb 29, 2024 08:39:54.453342915 CET4434974623.51.58.94192.168.2.4
                                                Feb 29, 2024 08:39:54.478331089 CET44349748142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.479912043 CET49748443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:54.479928970 CET44349748142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.480401993 CET44349748142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.486960888 CET49748443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:54.487128973 CET44349748142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.487970114 CET49748443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:54.487991095 CET44349748142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.663299084 CET44349749142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.663726091 CET49749443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:54.663737059 CET44349749142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.664215088 CET44349749142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.665354967 CET49749443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:54.665446043 CET44349749142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.665905952 CET49749443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:54.682593107 CET44349748142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.682924032 CET44349748142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.682995081 CET49748443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:54.687949896 CET49748443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:54.687973976 CET44349748142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.713905096 CET44349749142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.845094919 CET44349749142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.845240116 CET44349749142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.845315933 CET49749443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:54.845328093 CET44349749142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.845357895 CET44349749142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.845421076 CET49749443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:54.845462084 CET44349749142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.845588923 CET44349749142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.845691919 CET49749443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:54.845709085 CET44349749142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.850636005 CET44349749142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.850713968 CET49749443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:54.850729942 CET44349749142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.856723070 CET44349749142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.856800079 CET49749443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:54.856807947 CET44349749142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.862910986 CET44349749142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.862957954 CET49749443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:54.862967014 CET44349749142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.910274982 CET49749443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:54.910294056 CET44349749142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.932391882 CET44349749142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.932466984 CET49749443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:54.932481050 CET44349749142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.932504892 CET44349749142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:54.932555914 CET49749443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:55.271416903 CET49749443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:55.271456957 CET44349749142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:55.672316074 CET49751443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:55.672372103 CET44349751142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:55.672446966 CET49751443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:55.673132896 CET49751443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:55.673151016 CET44349751142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:55.861736059 CET44349751142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:55.865690947 CET49751443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:55.865711927 CET44349751142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:55.866198063 CET44349751142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:55.866961956 CET49751443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:55.867047071 CET44349751142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:55.867522955 CET49751443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:55.909946918 CET44349751142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:56.062716007 CET44349751142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:56.062773943 CET44349751142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:56.062815905 CET44349751142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:56.062871933 CET49751443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:56.062886953 CET44349751142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:56.062925100 CET44349751142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:56.062936068 CET49751443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:56.062942982 CET44349751142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:56.062994957 CET49751443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:56.068566084 CET44349751142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:56.070607901 CET44349751142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:56.070700884 CET49751443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:56.079493046 CET49751443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:56.079514980 CET44349751142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:56.345628977 CET49754443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:56.345670938 CET44349754142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:56.345736980 CET49754443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:56.350464106 CET49754443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:56.350492001 CET44349754142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:56.550919056 CET44349754142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:56.551189899 CET49754443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:56.551250935 CET44349754142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:56.552484989 CET44349754142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:56.552896976 CET49754443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:56.553097963 CET44349754142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:56.553178072 CET49754443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:56.597904921 CET44349754142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:56.734698057 CET44349754142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:56.734833002 CET44349754142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:56.734891891 CET49754443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:56.734915972 CET44349754142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:56.735004902 CET44349754142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:56.735055923 CET49754443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:56.735063076 CET44349754142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:56.737132072 CET44349754142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:56.737196922 CET49754443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:56.738027096 CET49754443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:39:56.738039017 CET44349754142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:39:56.838643074 CET49759443192.168.2.4142.251.40.100
                                                Feb 29, 2024 08:39:56.838691950 CET44349759142.251.40.100192.168.2.4
                                                Feb 29, 2024 08:39:56.838767052 CET49759443192.168.2.4142.251.40.100
                                                Feb 29, 2024 08:39:56.839225054 CET49759443192.168.2.4142.251.40.100
                                                Feb 29, 2024 08:39:56.839246035 CET44349759142.251.40.100192.168.2.4
                                                Feb 29, 2024 08:39:57.108654976 CET44349759142.251.40.100192.168.2.4
                                                Feb 29, 2024 08:39:57.108956099 CET49759443192.168.2.4142.251.40.100
                                                Feb 29, 2024 08:39:57.108975887 CET44349759142.251.40.100192.168.2.4
                                                Feb 29, 2024 08:39:57.110423088 CET44349759142.251.40.100192.168.2.4
                                                Feb 29, 2024 08:39:57.110481024 CET49759443192.168.2.4142.251.40.100
                                                Feb 29, 2024 08:39:57.111010075 CET49759443192.168.2.4142.251.40.100
                                                Feb 29, 2024 08:39:57.111063957 CET49759443192.168.2.4142.251.40.100
                                                Feb 29, 2024 08:39:57.111068964 CET44349759142.251.40.100192.168.2.4
                                                Feb 29, 2024 08:39:57.111089945 CET44349759142.251.40.100192.168.2.4
                                                Feb 29, 2024 08:39:57.158847094 CET49759443192.168.2.4142.251.40.100
                                                Feb 29, 2024 08:39:57.158884048 CET44349759142.251.40.100192.168.2.4
                                                Feb 29, 2024 08:39:57.205671072 CET49759443192.168.2.4142.251.40.100
                                                Feb 29, 2024 08:39:57.364553928 CET44349759142.251.40.100192.168.2.4
                                                Feb 29, 2024 08:39:57.364622116 CET44349759142.251.40.100192.168.2.4
                                                Feb 29, 2024 08:39:57.364659071 CET44349759142.251.40.100192.168.2.4
                                                Feb 29, 2024 08:39:57.364676952 CET49759443192.168.2.4142.251.40.100
                                                Feb 29, 2024 08:39:57.364697933 CET44349759142.251.40.100192.168.2.4
                                                Feb 29, 2024 08:39:57.364729881 CET44349759142.251.40.100192.168.2.4
                                                Feb 29, 2024 08:39:57.364831924 CET49759443192.168.2.4142.251.40.100
                                                Feb 29, 2024 08:39:57.364837885 CET44349759142.251.40.100192.168.2.4
                                                Feb 29, 2024 08:39:57.364917040 CET49759443192.168.2.4142.251.40.100
                                                Feb 29, 2024 08:39:57.365852118 CET49759443192.168.2.4142.251.40.100
                                                Feb 29, 2024 08:39:57.365895987 CET44349759142.251.40.100192.168.2.4
                                                Feb 29, 2024 08:39:57.365992069 CET49759443192.168.2.4142.251.40.100
                                                Feb 29, 2024 08:40:34.987015963 CET4973580192.168.2.435.222.146.56
                                                Feb 29, 2024 08:40:35.103167057 CET804973535.222.146.56192.168.2.4
                                                Feb 29, 2024 08:40:35.127620935 CET4973480192.168.2.435.222.146.56
                                                Feb 29, 2024 08:40:35.243684053 CET804973435.222.146.56192.168.2.4
                                                Feb 29, 2024 08:40:50.111006021 CET804973535.222.146.56192.168.2.4
                                                Feb 29, 2024 08:40:50.111089945 CET4973580192.168.2.435.222.146.56
                                                Feb 29, 2024 08:40:50.317559958 CET4973580192.168.2.435.222.146.56
                                                Feb 29, 2024 08:40:50.435049057 CET804973535.222.146.56192.168.2.4
                                                Feb 29, 2024 08:40:51.895622969 CET49768443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:40:51.895663977 CET44349768142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:40:51.895725965 CET49768443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:40:51.896229029 CET49768443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:40:51.896243095 CET44349768142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:40:52.082377911 CET44349768142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:40:52.082722902 CET49768443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:40:52.082751989 CET44349768142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:40:52.083050966 CET44349768142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:40:52.083455086 CET49768443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:40:52.083534002 CET44349768142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:40:52.127424002 CET49768443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:40:55.115432024 CET804973435.222.146.56192.168.2.4
                                                Feb 29, 2024 08:40:55.115782022 CET4973480192.168.2.435.222.146.56
                                                Feb 29, 2024 08:40:56.288882017 CET4973480192.168.2.435.222.146.56
                                                Feb 29, 2024 08:40:56.403386116 CET804973435.222.146.56192.168.2.4
                                                Feb 29, 2024 08:41:02.115797043 CET44349768142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:41:02.115870953 CET44349768142.251.32.100192.168.2.4
                                                Feb 29, 2024 08:41:02.116033077 CET49768443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:41:02.286019087 CET49768443192.168.2.4142.251.32.100
                                                Feb 29, 2024 08:41:02.286062956 CET44349768142.251.32.100192.168.2.4

                                                UDP Packets

                                                TimestampSource PortDest PortSource IPDest IP
                                                Feb 29, 2024 08:39:47.975641966 CET53530401.1.1.1192.168.2.4
                                                Feb 29, 2024 08:39:48.019260883 CET53646801.1.1.1192.168.2.4
                                                Feb 29, 2024 08:39:48.709408045 CET53553621.1.1.1192.168.2.4
                                                Feb 29, 2024 08:39:49.486093044 CET6036753192.168.2.41.1.1.1
                                                Feb 29, 2024 08:39:49.486399889 CET5987853192.168.2.41.1.1.1
                                                Feb 29, 2024 08:39:49.751461029 CET53598781.1.1.1192.168.2.4
                                                Feb 29, 2024 08:39:49.867130041 CET53603671.1.1.1192.168.2.4
                                                Feb 29, 2024 08:39:50.119218111 CET6551453192.168.2.41.1.1.1
                                                Feb 29, 2024 08:39:50.119573116 CET5360853192.168.2.41.1.1.1
                                                Feb 29, 2024 08:39:50.208758116 CET53655141.1.1.1192.168.2.4
                                                Feb 29, 2024 08:39:50.209983110 CET53536081.1.1.1192.168.2.4
                                                Feb 29, 2024 08:39:52.002919912 CET53630591.1.1.1192.168.2.4
                                                Feb 29, 2024 08:39:53.220463037 CET53602301.1.1.1192.168.2.4
                                                Feb 29, 2024 08:39:54.547789097 CET53579601.1.1.1192.168.2.4
                                                Feb 29, 2024 08:39:55.828419924 CET53614081.1.1.1192.168.2.4
                                                Feb 29, 2024 08:39:56.748756886 CET6518653192.168.2.41.1.1.1
                                                Feb 29, 2024 08:39:56.749463081 CET5753953192.168.2.41.1.1.1
                                                Feb 29, 2024 08:39:56.836888075 CET53651861.1.1.1192.168.2.4
                                                Feb 29, 2024 08:39:56.837611914 CET53575391.1.1.1192.168.2.4
                                                Feb 29, 2024 08:40:06.000442982 CET53573421.1.1.1192.168.2.4
                                                Feb 29, 2024 08:40:10.138386011 CET138138192.168.2.4192.168.2.255
                                                Feb 29, 2024 08:40:25.049850941 CET53635851.1.1.1192.168.2.4
                                                Feb 29, 2024 08:40:47.460072041 CET53508061.1.1.1192.168.2.4
                                                Feb 29, 2024 08:40:48.142477989 CET53535921.1.1.1192.168.2.4

                                                DNS Queries

                                                TimestampSource IPDest IPTrans IDOP CodeNameTypeClassDNS over HTTPS
                                                Feb 29, 2024 08:39:49.486093044 CET192.168.2.41.1.1.10xfc0cStandard query (0)link.jschoenconsultingco.comA (IP address)IN (0x0001)false
                                                Feb 29, 2024 08:39:49.486399889 CET192.168.2.41.1.1.10xcfecStandard query (0)link.jschoenconsultingco.com65IN (0x0001)false
                                                Feb 29, 2024 08:39:50.119218111 CET192.168.2.41.1.1.10x36ceStandard query (0)www.google.comA (IP address)IN (0x0001)false
                                                Feb 29, 2024 08:39:50.119573116 CET192.168.2.41.1.1.10xe78dStandard query (0)www.google.com65IN (0x0001)false
                                                Feb 29, 2024 08:39:56.748756886 CET192.168.2.41.1.1.10x556bStandard query (0)www.google.comA (IP address)IN (0x0001)false
                                                Feb 29, 2024 08:39:56.749463081 CET192.168.2.41.1.1.10xce9fStandard query (0)www.google.com65IN (0x0001)false

                                                DNS Answers

                                                TimestampSource IPDest IPTrans IDReply CodeNameCNameAddressTypeClassDNS over HTTPS
                                                Feb 29, 2024 08:39:49.751461029 CET1.1.1.1192.168.2.40xcfecNo error (0)link.jschoenconsultingco.comcustom.autoklose.comCNAME (Canonical name)IN (0x0001)false
                                                Feb 29, 2024 08:39:49.867130041 CET1.1.1.1192.168.2.40xfc0cNo error (0)link.jschoenconsultingco.comcustom.autoklose.comCNAME (Canonical name)IN (0x0001)false
                                                Feb 29, 2024 08:39:49.867130041 CET1.1.1.1192.168.2.40xfc0cNo error (0)custom.autoklose.com35.222.146.56A (IP address)IN (0x0001)false
                                                Feb 29, 2024 08:39:50.208758116 CET1.1.1.1192.168.2.40x36ceNo error (0)www.google.com142.251.32.100A (IP address)IN (0x0001)false
                                                Feb 29, 2024 08:39:50.209983110 CET1.1.1.1192.168.2.40xe78dNo error (0)www.google.com65IN (0x0001)false
                                                Feb 29, 2024 08:39:56.836888075 CET1.1.1.1192.168.2.40x556bNo error (0)www.google.com142.251.40.100A (IP address)IN (0x0001)false
                                                Feb 29, 2024 08:39:56.837611914 CET1.1.1.1192.168.2.40xce9fNo error (0)www.google.com65IN (0x0001)false
                                                Feb 29, 2024 08:40:04.545690060 CET1.1.1.1192.168.2.40xd162No error (0)fp2e7a.wpc.2be4.phicdn.netfp2e7a.wpc.phicdn.netCNAME (Canonical name)IN (0x0001)false
                                                Feb 29, 2024 08:40:04.545690060 CET1.1.1.1192.168.2.40xd162No error (0)fp2e7a.wpc.phicdn.net192.229.211.108A (IP address)IN (0x0001)false
                                                Feb 29, 2024 08:40:17.607615948 CET1.1.1.1192.168.2.40x3d01No error (0)fp2e7a.wpc.2be4.phicdn.netfp2e7a.wpc.phicdn.netCNAME (Canonical name)IN (0x0001)false
                                                Feb 29, 2024 08:40:17.607615948 CET1.1.1.1192.168.2.40x3d01No error (0)fp2e7a.wpc.phicdn.net192.229.211.108A (IP address)IN (0x0001)false
                                                Feb 29, 2024 08:40:40.140090942 CET1.1.1.1192.168.2.40x651aNo error (0)fp2e7a.wpc.2be4.phicdn.netfp2e7a.wpc.phicdn.netCNAME (Canonical name)IN (0x0001)false
                                                Feb 29, 2024 08:40:40.140090942 CET1.1.1.1192.168.2.40x651aNo error (0)fp2e7a.wpc.phicdn.net192.229.211.108A (IP address)IN (0x0001)false
                                                Feb 29, 2024 08:41:00.520751953 CET1.1.1.1192.168.2.40x5fddNo error (0)fp2e7a.wpc.2be4.phicdn.netfp2e7a.wpc.phicdn.netCNAME (Canonical name)IN (0x0001)false
                                                Feb 29, 2024 08:41:00.520751953 CET1.1.1.1192.168.2.40x5fddNo error (0)fp2e7a.wpc.phicdn.net192.229.211.108A (IP address)IN (0x0001)false

                                                HTTP Request Dependency Graph

                                                • www.google.com
                                                • https:
                                                • fs.microsoft.com
                                                • link.jschoenconsultingco.com

                                                HTTP Packets

                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                0192.168.2.44973435.222.146.56805572C:\Program Files\Google\Chrome\Application\chrome.exe
                                                TimestampBytes transferredDirectionData
                                                Feb 29, 2024 08:39:49.984733105 CET443OUTGET / HTTP/1.1
                                                Host: link.jschoenconsultingco.com
                                                Connection: keep-alive
                                                Upgrade-Insecure-Requests: 1
                                                User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
                                                Accept-Encoding: gzip, deflate
                                                Accept-Language: en-US,en;q=0.9
                                                Feb 29, 2024 08:39:50.114965916 CET1286INHTTP/1.1 302 Found
                                                Server: nginx/1.24.0
                                                Content-Type: text/html; charset=UTF-8
                                                Transfer-Encoding: chunked
                                                Connection: keep-alive
                                                Cache-Control: no-cache, private
                                                Date: Thu, 29 Feb 2024 07:39:50 GMT
                                                Location: https://www.google.com
                                                Set-Cookie: XSRF-TOKEN=eyJpdiI6InFTajFnM2grb0xEV2liQmVRcS85WWc9PSIsInZhbHVlIjoieDQvOWJaKzFyMHFzNmtkcUlpODJjZUNVMmROblJiUjdPMy9ieHJFSm1wSnpVVFhsK1JmUytQVkhyRHBWRjBBZkoyM1llL2tvbU9ZQldHMEdENmJxRm9NVkI5aVZ6RnNmWGliSy9pTnFYcG1pRUF6MG8zTjU0M2ZBL2pFU3RzankiLCJtYWMiOiJkYzFiM2JhZGRjNGE1YjhkMDUyNWQ0YmUzZTE2YjgzNDg5NDQ5ODAwNzdmMWRjOWM3NTIxNzI0ZWYzNjcyMzBkIiwidGFnIjoiIn0%3D; expires=Thu, 29 Feb 2024 09:39:50 GMT; Max-Age=7200; path=/; secure; samesite=none
                                                Set-Cookie: laravel_session=eyJpdiI6IjZ1R2JiUXpidExUMkFHalkrVVV2bGc9PSIsInZhbHVlIjoiLys5NHZhYzBIallOT3hTK0Izcmx4VWxhSWptbVBqVko3SGdlSzRyTVNDU2VmSzY1Z2l2emVPQ0pwNENSSW5UVTY0YU1Kc3k2dVhLdXQyTmg3U2FwUGZYQ2hJSmtGWkpGLzQ4bzdkaFFWYktrMlUrMS90QWJQdUlRMVJaYVNMaTIiLCJtYWMiOiIzMGY5ZDBkZDA3ZGQ3NjdiNWMwNTJjNjE5M2E1ZWFhNTUwMTFjMjA2YTIyYzlhZjk2MzhlNWY1ZDZlNjUwNmQyIiwidGFnIjoiIn0%3D; path=/; secure; httponly; samesite=none
                                                Data Raw: 31 34 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f
                                                Data Ascii: 14e<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://www.google.com'" /> <title>Redirecting to
                                                Feb 29, 2024 08:39:50.115014076 CET165INData Raw: 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68
                                                Data Ascii: https://www.google.com</title> </head> <body> Redirecting to <a href="https://www.google.com">https://www.google.com</a>. </body></html>0
                                                Feb 29, 2024 08:40:35.127620935 CET6OUTData Raw: 00
                                                Data Ascii:


                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                1192.168.2.44973535.222.146.56805572C:\Program Files\Google\Chrome\Application\chrome.exe
                                                TimestampBytes transferredDirectionData
                                                Feb 29, 2024 08:40:34.987015963 CET6OUTData Raw: 00
                                                Data Ascii:


                                                HTTPS Proxied Packets

                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                0192.168.2.449736142.251.32.1004435572C:\Program Files\Google\Chrome\Application\chrome.exe
                                                TimestampBytes transferredDirectionData
                                                2024-02-29 07:39:50 UTC846OUTGET / HTTP/1.1
                                                Host: www.google.com
                                                Connection: keep-alive
                                                Upgrade-Insecure-Requests: 1
                                                User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
                                                Sec-Fetch-Site: none
                                                Sec-Fetch-Mode: navigate
                                                Sec-Fetch-User: ?1
                                                Sec-Fetch-Dest: document
                                                sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                sec-ch-ua-mobile: ?0
                                                sec-ch-ua-platform: "Windows"
                                                Accept-Encoding: gzip, deflate, br
                                                Accept-Language: en-US,en;q=0.9
                                                Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
                                                2024-02-29 07:39:50 UTC1847INHTTP/1.1 302 Found
                                                Location: https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgS_YOPXGMbpgK8GIjDM0jzunVG3Pq9C8_p5lbtQgdoKMHDC-yIg0E9GZsoonqCTKFjaHWbLvRCdKXGn0-4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
                                                x-hallmonitor-challenge: CgwIxumArwYQgo7powMSBL9g49c
                                                Content-Type: text/html; charset=UTF-8
                                                Strict-Transport-Security: max-age=31536000
                                                Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-rfcDdmQ_FW6Xy_QdMGYehQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp
                                                Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws"
                                                Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
                                                Permissions-Policy: unload=()
                                                Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0=
                                                Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0=
                                                Date: Thu, 29 Feb 2024 07:39:50 GMT
                                                Server: gws
                                                Content-Length: 398
                                                X-XSS-Protection: 0
                                                X-Frame-Options: SAMEORIGIN
                                                Set-Cookie: 1P_JAR=2024-02-29-07; expires=Sat, 30-Mar-2024 07:39:50 GMT; path=/; domain=.google.com; Secure; SameSite=none
                                                Set-Cookie: AEC=Ae3NU9ONhX9B7XLX981q957rojONvM6KssVw9cOsGpqQQbhrnqSLA01Im0g; expires=Tue, 27-Aug-2024 07:39:50 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
                                                Connection: close
                                                2024-02-29 07:39:50 UTC398INData Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 26 61 6d 70 3b 71 3d 45 67 53 5f 59 4f 50 58 47 4d 62 70 67
                                                Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/&amp;q=EgS_YOPXGMbpg


                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                1192.168.2.449739142.251.32.1004435572C:\Program Files\Google\Chrome\Application\chrome.exe
                                                TimestampBytes transferredDirectionData
                                                2024-02-29 07:39:51 UTC1107OUTGET /sorry/index?continue=https://www.google.com/&q=EgS_YOPXGMbpgK8GIjDM0jzunVG3Pq9C8_p5lbtQgdoKMHDC-yIg0E9GZsoonqCTKFjaHWbLvRCdKXGn0-4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1
                                                Host: www.google.com
                                                Connection: keep-alive
                                                Upgrade-Insecure-Requests: 1
                                                User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
                                                Sec-Fetch-Site: none
                                                Sec-Fetch-Mode: navigate
                                                Sec-Fetch-User: ?1
                                                Sec-Fetch-Dest: document
                                                sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                sec-ch-ua-mobile: ?0
                                                sec-ch-ua-platform: "Windows"
                                                Accept-Encoding: gzip, deflate, br
                                                Accept-Language: en-US,en;q=0.9
                                                Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk; 1P_JAR=2024-02-29-07; AEC=Ae3NU9ONhX9B7XLX981q957rojONvM6KssVw9cOsGpqQQbhrnqSLA01Im0g
                                                2024-02-29 07:39:51 UTC356INHTTP/1.1 429 Too Many Requests
                                                Date: Thu, 29 Feb 2024 07:39:51 GMT
                                                Pragma: no-cache
                                                Expires: Fri, 01 Jan 1990 00:00:00 GMT
                                                Cache-Control: no-store, no-cache, must-revalidate
                                                Content-Type: text/html
                                                Server: HTTP server (unknown)
                                                Content-Length: 3056
                                                X-XSS-Protection: 0
                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
                                                Connection: close
                                                2024-02-29 07:39:51 UTC896INData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 66 6f 6e 74
                                                Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.google.com/</title></head><body style="font
                                                2024-02-29 07:39:51 UTC1252INData Raw: 65 73 70 6f 6e 73 65 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 63 68 61 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 36 4c 66 77 75 79 55 54 41 41 41 41 41 4f 41 6d 6f 53 30 66 64 71 69 6a 43 32 50 62 62 64 48 34 6b 6a 71 36 32 59 31 62 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 22 20 64 61 74 61 2d 73 3d 22 53 4a 4d 76 36 64 5f 59 33 72 74 70 52 55 31 64 5a 78 42 57 6f 4c 79 63 53 47 33 6f 54 4e 68 52 55 67 4c 57 62 5a 58 41 4c 74 2d 6e 70 71 59 4b 51
                                                Data Ascii: esponse) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-recaptcha" data-sitekey="6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b" data-callback="submitCallback" data-s="SJMv6d_Y3rtpRU1dZxBWoLycSG3oTNhRUgLWbZXALt-npqYKQ
                                                2024-02-29 07:39:51 UTC908INData Raw: 73 74 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 70 70 65 61 72 20 74 6f 20 62 65 20 69 6e 20 76 69 6f 6c 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 74 65 72 6d 73 2f 22 3e 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 3c 2f 61 3e 2e 20 54 68 65 20 62 6c 6f 63 6b 20 77 69 6c 6c 20 65 78 70 69 72 65 20 73 68 6f 72 74 6c 79 20 61 66 74 65 72 20 74 68 6f 73 65 20 72 65 71 75 65 73 74 73 20 73 74 6f 70 2e 20 20 49 6e 20 74 68 65 20 6d 65 61 6e 74 69 6d 65 2c 20 73 6f 6c 76 69 6e 67 20 74 68 65 20 61 62 6f 76 65 20 43 41 50 54 43 48 41 20 77 69 6c 6c 20 6c 65 74 20 79 6f 75
                                                Data Ascii: sts coming from your computer network which appear to be in violation of the <a href="//www.google.com/policies/terms/">Terms of Service</a>. The block will expire shortly after those requests stop. In the meantime, solving the above CAPTCHA will let you


                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                2192.168.2.449740142.251.32.1004435572C:\Program Files\Google\Chrome\Application\chrome.exe
                                                TimestampBytes transferredDirectionData
                                                2024-02-29 07:39:51 UTC1116OUTGET /recaptcha/api.js HTTP/1.1
                                                Host: www.google.com
                                                Connection: keep-alive
                                                sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                sec-ch-ua-mobile: ?0
                                                User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                sec-ch-ua-platform: "Windows"
                                                Accept: */*
                                                X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX
                                                Sec-Fetch-Site: same-origin
                                                Sec-Fetch-Mode: no-cors
                                                Sec-Fetch-Dest: script
                                                Referer: https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgS_YOPXGMbpgK8GIjDM0jzunVG3Pq9C8_p5lbtQgdoKMHDC-yIg0E9GZsoonqCTKFjaHWbLvRCdKXGn0-4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
                                                Accept-Encoding: gzip, deflate, br
                                                Accept-Language: en-US,en;q=0.9
                                                Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk; 1P_JAR=2024-02-29-07; AEC=Ae3NU9ONhX9B7XLX981q957rojONvM6KssVw9cOsGpqQQbhrnqSLA01Im0g
                                                2024-02-29 07:39:51 UTC528INHTTP/1.1 200 OK
                                                Content-Type: text/javascript; charset=utf-8
                                                Expires: Thu, 29 Feb 2024 07:39:51 GMT
                                                Date: Thu, 29 Feb 2024 07:39:51 GMT
                                                Cache-Control: private, max-age=300
                                                Cross-Origin-Resource-Policy: cross-origin
                                                X-Content-Type-Options: nosniff
                                                X-Frame-Options: SAMEORIGIN
                                                Content-Security-Policy: frame-ancestors 'self'
                                                X-XSS-Protection: 1; mode=block
                                                Server: GSE
                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
                                                Accept-Ranges: none
                                                Vary: Accept-Encoding
                                                Connection: close
                                                Transfer-Encoding: chunked
                                                2024-02-29 07:39:51 UTC724INData Raw: 34 63 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67
                                                Data Ascii: 4c6/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]||{},N='grecaptcha';var gr=w[N]=w[N]||{};gr.ready=gr.ready||function(f){(cfg['fns']=cfg['fns']||[]).push(f);};w['__recaptcha_api']='https://www.g
                                                2024-02-29 07:39:51 UTC505INData Raw: 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 31 6b 52 44 59 43 33 62 66 41 2d 6f 36 2d 74 73 57 7a 49 42 76 70 37 6b 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 6d 4f 57 4c 53 51 79 63 58 69 6b 6d 77 39
                                                Data Ascii: mV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/1kRDYC3bfA-o6-tsWzIBvp7k/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-mOWLSQycXikmw9
                                                2024-02-29 07:39:51 UTC5INData Raw: 30 0d 0a 0d 0a
                                                Data Ascii: 0


                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                3192.168.2.449742142.251.32.1004435572C:\Program Files\Google\Chrome\Application\chrome.exe
                                                TimestampBytes transferredDirectionData
                                                2024-02-29 07:39:53 UTC1723OUTGET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=1kRDYC3bfA-o6-tsWzIBvp7k&size=normal&s=SJMv6d_Y3rtpRU1dZxBWoLycSG3oTNhRUgLWbZXALt-npqYKQ-ZbbZwf7zIhBct_gKIax55iTMFgrLqb3Kp0UI25oxXgX_0tu2jWCkwg-yzJxFxTPF3fFBFr63ny_eeasrd2REhhMop-kacaKeULBBP4eI3cmpv4c70HhpI7Eky3z8R2OlGcOwKq3jaY5KHEicYv7Frh5xJSYHcVdbYW8Voup6KOqgkxcljh3Uods9K5LCrFAhhGYDH43c6z9mnkxwQLqH-W5v9w7Ws8e2LDjVfiIZBXiMI&cb=vfor8c80z1l5 HTTP/1.1
                                                Host: www.google.com
                                                Connection: keep-alive
                                                sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                sec-ch-ua-mobile: ?0
                                                sec-ch-ua-platform: "Windows"
                                                Upgrade-Insecure-Requests: 1
                                                User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
                                                X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX
                                                Sec-Fetch-Site: same-origin
                                                Sec-Fetch-Mode: navigate
                                                Sec-Fetch-Dest: iframe
                                                Referer: https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgS_YOPXGMbpgK8GIjDM0jzunVG3Pq9C8_p5lbtQgdoKMHDC-yIg0E9GZsoonqCTKFjaHWbLvRCdKXGn0-4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
                                                Accept-Encoding: gzip, deflate, br
                                                Accept-Language: en-US,en;q=0.9
                                                Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk; 1P_JAR=2024-02-29-07; AEC=Ae3NU9ONhX9B7XLX981q957rojONvM6KssVw9cOsGpqQQbhrnqSLA01Im0g
                                                2024-02-29 07:39:53 UTC891INHTTP/1.1 200 OK
                                                Content-Type: text/html; charset=utf-8
                                                Cross-Origin-Resource-Policy: cross-origin
                                                Cross-Origin-Embedder-Policy: require-corp
                                                Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
                                                Cache-Control: no-cache, no-store, max-age=0, must-revalidate
                                                Pragma: no-cache
                                                Expires: Mon, 01 Jan 1990 00:00:00 GMT
                                                Date: Thu, 29 Feb 2024 07:39:53 GMT
                                                Content-Security-Policy: script-src 'report-sample' 'nonce-qEGrYGw77CBa9gpCf4_bYA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
                                                X-Content-Type-Options: nosniff
                                                X-XSS-Protection: 1; mode=block
                                                Server: GSE
                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
                                                Accept-Ranges: none
                                                Vary: Accept-Encoding
                                                Connection: close
                                                Transfer-Encoding: chunked
                                                2024-02-29 07:39:53 UTC361INData Raw: 32 61 62 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b
                                                Data Ascii: 2ab3<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
                                                2024-02-29 07:39:53 UTC1252INData Raw: 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66
                                                Data Ascii: o/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//f
                                                2024-02-29 07:39:53 UTC1252INData Raw: 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20
                                                Data Ascii: 9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329,
                                                2024-02-29 07:39:53 UTC1252INData Raw: 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a
                                                Data Ascii: 0-0491, U+04B0-04B1, U+2116;}/* greek-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}
                                                2024-02-29 07:39:53 UTC1252INData Raw: 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c
                                                Data Ascii: */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA,
                                                2024-02-29 07:39:53 UTC1252INData Raw: 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b
                                                Data Ascii: l(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal;
                                                2024-02-29 07:39:53 UTC1252INData Raw: 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 31 6b 52 44 59 43 33 62 66 41 2d 6f 36 2d 74 73 57 7a 49 42 76 70 37 6b 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 71 45 47 72 59 47 77 37 37 43 42 61 39 67 70 43 66 34 5f 62 59 41 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70
                                                Data Ascii: U+FEFF, U+FFFD;}</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/1kRDYC3bfA-o6-tsWzIBvp7k/styles__ltr.css"><script nonce="qEGrYGw77CBa9gpCf4_bYA" type="text/javascript">window['__recaptcha_api'] = 'http
                                                2024-02-29 07:39:53 UTC1252INData Raw: 62 72 41 71 72 6f 4c 34 42 4d 38 55 6e 69 51 6c 53 30 77 35 6a 4c 67 51 61 35 64 77 49 77 48 66 53 62 76 65 6e 44 6b 6d 69 56 30 4b 32 70 66 45 48 46 38 47 66 38 5a 69 47 73 51 69 73 2d 4c 6d 77 47 65 4f 50 34 5a 32 4c 64 4c 41 31 53 36 7a 76 57 38 73 50 74 4e 51 74 6f 4b 6a 4f 2d 6d 66 6a 52 6d 75 43 42 44 72 4e 46 71 66 59 65 5f 78 57 78 39 64 73 41 45 39 4b 50 7a 4f 58 38 43 64 44 69 6d 51 78 62 38 6f 38 4d 43 50 68 71 78 32 74 44 57 7a 45 66 76 56 58 69 35 44 4f 77 66 73 66 54 7a 75 55 32 48 77 67 4a 38 5f 5a 4d 62 45 39 64 2d 52 37 74 41 77 76 47 59 58 33 4a 42 58 66 6d 6d 6f 45 68 6e 52 5f 67 63 42 68 56 35 53 70 6e 5a 74 36 77 78 48 70 47 59 58 75 5a 67 55 50 43 69 4e 4c 55 45 5a 77 52 36 33 37 4d 33 64 72 64 66 53 79 69 72 67 52 47 66 6f 48 79 5f
                                                Data Ascii: brAqroL4BM8UniQlS0w5jLgQa5dwIwHfSbvenDkmiV0K2pfEHF8Gf8ZiGsQis-LmwGeOP4Z2LdLA1S6zvW8sPtNQtoKjO-mfjRmuCBDrNFqfYe_xWx9dsAE9KPzOX8CdDimQxb8o8MCPhqx2tDWzEfvVXi5DOwfsfTzuU2HwgJ8_ZMbE9d-R7tAwvGYX3JBXfmmoEhnR_gcBhV5SpnZt6wxHpGYXuZgUPCiNLUEZwR637M3drdfSyirgRGfoHy_
                                                2024-02-29 07:39:53 UTC1252INData Raw: 49 38 66 69 69 43 61 64 50 70 46 5f 55 57 59 30 57 36 73 2d 57 58 68 48 42 4c 63 32 66 6d 73 68 71 51 42 33 61 71 66 57 59 46 5a 5f 50 45 41 64 74 63 31 5a 41 38 41 71 61 53 43 36 70 78 39 6a 73 53 47 37 56 70 35 78 48 6b 2d 38 72 78 79 6b 67 32 63 67 39 49 6e 67 67 74 54 56 64 69 55 77 5a 6f 46 5a 48 73 70 75 51 51 64 47 73 4e 49 37 30 75 31 35 49 6d 6c 72 4f 52 65 66 71 50 7a 53 4b 4f 61 31 49 7a 4a 71 62 51 6c 41 57 58 48 34 68 72 55 65 45 6d 6d 4e 37 36 53 49 50 52 4c 55 6e 68 4a 70 63 36 43 46 51 36 33 4e 6e 78 34 52 57 77 6d 72 41 4d 77 4e 5a 75 77 74 70 5f 47 78 4d 45 65 44 68 66 48 34 70 74 7a 31 32 4d 49 6d 72 34 45 36 71 41 61 61 55 43 6e 47 4d 4f 38 75 59 52 38 46 47 31 43 5f 52 45 42 39 33 38 51 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d
                                                Data Ascii: I8fiiCadPpF_UWY0W6s-WXhHBLc2fmshqQB3aqfWYFZ_PEAdtc1ZA8AqaSC6px9jsSG7Vp5xHk-8rxykg2cg9InggtTVdiUwZoFZHspuQQdGsNI70u15ImlrORefqPzSKOa1IzJqbQlAWXH4hrUeEmmN76SIPRLUnhJpc6CFQ63Nnx4RWwmrAMwNZuwtp_GxMEeDhfH4ptz12MImr4E6qAaaUCnGMO8uYR8FG1C_REB938Q"><script type=
                                                2024-02-29 07:39:53 UTC562INData Raw: 6d 63 55 39 4e 54 7a 52 78 51 6d 5a 7a 64 6c 55 34 59 56 5a 4a 64 54 4e 33 4e 30 46 75 53 45 74 74 63 48 42 48 51 7a 64 36 53 32 68 4d 52 54 68 31 54 33 49 72 54 6d 70 68 4d 6b 6c 6b 4d 46 46 32 56 31 4a 49 51 55 4a 53 4d 44 64 33 64 32 35 4b 51 6a 56 69 63 45 39 6d 53 7a 4a 5a 5a 32 4e 32 59 56 6b 78 53 6c 4a 61 4b 32 64 70 52 6d 64 44 59 58 68 7a 61 6b 70 58 4e 48 42 58 55 55 73 32 52 56 5a 79 52 69 74 77 4f 57 4e 4b 59 31 68 4b 53 6b 52 34 64 54 64 50 4d 56 52 6b 53 6d 77 78 61 56 68 4a 63 6a 41 7a 64 58 70 58 4e 30 5a 7a 56 54 64 6e 55 7a 52 4f 56 44 56 35 64 45 52 59 59 30 46 4f 55 6d 64 4f 63 48 51 7a 65 6c 4a 50 55 6b 52 4f 62 44 64 6d 52 6b 4e 4c 52 44 59 34 56 44 42 4b 64 58 64 4f 63 7a 42 58 65 6e 4e 77 4d 31 6c 4b 53 43 74 46 4d 6c 6c 61 64 6e
                                                Data Ascii: mcU9NTzRxQmZzdlU4YVZJdTN3N0FuSEttcHBHQzd6S2hMRTh1T3IrTmphMklkMFF2V1JIQUJSMDd3d25KQjVicE9mSzJZZ2N2YVkxSlJaK2dpRmdDYXhzakpXNHBXUUs2RVZyRitwOWNKY1hKSkR4dTdPMVRkSmwxaVhJcjAzdXpXN0ZzVTdnUzROVDV5dERYY0FOUmdOcHQzelJPUkRObDdmRkNLRDY4VDBKdXdOczBXenNwM1lKSCtFMlladn


                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                4192.168.2.44974323.51.58.94443
                                                TimestampBytes transferredDirectionData
                                                2024-02-29 07:39:53 UTC161OUTHEAD /fs/windows/config.json HTTP/1.1
                                                Connection: Keep-Alive
                                                Accept: */*
                                                Accept-Encoding: identity
                                                User-Agent: Microsoft BITS/7.8
                                                Host: fs.microsoft.com
                                                2024-02-29 07:39:53 UTC467INHTTP/1.1 200 OK
                                                Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json
                                                Content-Type: application/octet-stream
                                                ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7"
                                                Last-Modified: Tue, 16 May 2017 22:58:00 GMT
                                                Server: ECAcc (chd/0790)
                                                X-CID: 11
                                                X-Ms-ApiVersion: Distribute 1.2
                                                X-Ms-Region: prod-eus-z1
                                                Cache-Control: public, max-age=215158
                                                Date: Thu, 29 Feb 2024 07:39:53 GMT
                                                Connection: close
                                                X-CID: 2


                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                5192.168.2.44974623.51.58.94443
                                                TimestampBytes transferredDirectionData
                                                2024-02-29 07:39:53 UTC239OUTGET /fs/windows/config.json HTTP/1.1
                                                Connection: Keep-Alive
                                                Accept: */*
                                                Accept-Encoding: identity
                                                If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT
                                                Range: bytes=0-2147483646
                                                User-Agent: Microsoft BITS/7.8
                                                Host: fs.microsoft.com
                                                2024-02-29 07:39:54 UTC456INHTTP/1.1 200 OK
                                                ApiVersion: Distribute 1.1
                                                Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json
                                                Content-Type: application/octet-stream
                                                ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7"
                                                Last-Modified: Tue, 16 May 2017 22:58:00 GMT
                                                Server: ECAcc (chd/0778)
                                                X-CID: 11
                                                Cache-Control: public, max-age=215157
                                                Date: Thu, 29 Feb 2024 07:39:54 GMT
                                                Content-Length: 55
                                                Connection: close
                                                X-CID: 2
                                                2024-02-29 07:39:54 UTC55INData Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d
                                                Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}


                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                6192.168.2.449748142.251.32.1004435572C:\Program Files\Google\Chrome\Application\chrome.exe
                                                TimestampBytes transferredDirectionData
                                                2024-02-29 07:39:54 UTC1450OUTGET /recaptcha/api2/webworker.js?hl=en&v=1kRDYC3bfA-o6-tsWzIBvp7k HTTP/1.1
                                                Host: www.google.com
                                                Connection: keep-alive
                                                sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                sec-ch-ua-mobile: ?0
                                                User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                sec-ch-ua-platform: "Windows"
                                                Accept: */*
                                                X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX
                                                Sec-Fetch-Site: same-origin
                                                Sec-Fetch-Mode: same-origin
                                                Sec-Fetch-Dest: worker
                                                Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=1kRDYC3bfA-o6-tsWzIBvp7k&size=normal&s=SJMv6d_Y3rtpRU1dZxBWoLycSG3oTNhRUgLWbZXALt-npqYKQ-ZbbZwf7zIhBct_gKIax55iTMFgrLqb3Kp0UI25oxXgX_0tu2jWCkwg-yzJxFxTPF3fFBFr63ny_eeasrd2REhhMop-kacaKeULBBP4eI3cmpv4c70HhpI7Eky3z8R2OlGcOwKq3jaY5KHEicYv7Frh5xJSYHcVdbYW8Voup6KOqgkxcljh3Uods9K5LCrFAhhGYDH43c6z9mnkxwQLqH-W5v9w7Ws8e2LDjVfiIZBXiMI&cb=vfor8c80z1l5
                                                Accept-Encoding: gzip, deflate, br
                                                Accept-Language: en-US,en;q=0.9
                                                Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk; 1P_JAR=2024-02-29-07; AEC=Ae3NU9ONhX9B7XLX981q957rojONvM6KssVw9cOsGpqQQbhrnqSLA01Im0g
                                                2024-02-29 07:39:54 UTC655INHTTP/1.1 200 OK
                                                Content-Type: text/javascript; charset=utf-8
                                                Cross-Origin-Embedder-Policy: require-corp
                                                Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
                                                Expires: Thu, 29 Feb 2024 07:39:54 GMT
                                                Date: Thu, 29 Feb 2024 07:39:54 GMT
                                                Cache-Control: private, max-age=300
                                                X-Content-Type-Options: nosniff
                                                X-Frame-Options: SAMEORIGIN
                                                Content-Security-Policy: frame-ancestors 'self'
                                                X-XSS-Protection: 1; mode=block
                                                Server: GSE
                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
                                                Accept-Ranges: none
                                                Vary: Accept-Encoding
                                                Connection: close
                                                Transfer-Encoding: chunked
                                                2024-02-29 07:39:54 UTC108INData Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 31 6b 52 44 59 43 33 62 66 41 2d 6f 36 2d 74 73 57 7a 49 42 76 70 37 6b 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a
                                                Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/1kRDYC3bfA-o6-tsWzIBvp7k/recaptcha__en.js');
                                                2024-02-29 07:39:54 UTC5INData Raw: 30 0d 0a 0d 0a
                                                Data Ascii: 0


                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                7192.168.2.449749142.251.32.1004435572C:\Program Files\Google\Chrome\Application\chrome.exe
                                                TimestampBytes transferredDirectionData
                                                2024-02-29 07:39:54 UTC1438OUTGET /js/bg/722MIWu_TMZiQau3mAaarHtCk2pd6rTYw5oNsH4wR_g.js HTTP/1.1
                                                Host: www.google.com
                                                Connection: keep-alive
                                                sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                sec-ch-ua-mobile: ?0
                                                User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                sec-ch-ua-platform: "Windows"
                                                Accept: */*
                                                X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX
                                                Sec-Fetch-Site: same-origin
                                                Sec-Fetch-Mode: no-cors
                                                Sec-Fetch-Dest: script
                                                Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=1kRDYC3bfA-o6-tsWzIBvp7k&size=normal&s=SJMv6d_Y3rtpRU1dZxBWoLycSG3oTNhRUgLWbZXALt-npqYKQ-ZbbZwf7zIhBct_gKIax55iTMFgrLqb3Kp0UI25oxXgX_0tu2jWCkwg-yzJxFxTPF3fFBFr63ny_eeasrd2REhhMop-kacaKeULBBP4eI3cmpv4c70HhpI7Eky3z8R2OlGcOwKq3jaY5KHEicYv7Frh5xJSYHcVdbYW8Voup6KOqgkxcljh3Uods9K5LCrFAhhGYDH43c6z9mnkxwQLqH-W5v9w7Ws8e2LDjVfiIZBXiMI&cb=vfor8c80z1l5
                                                Accept-Encoding: gzip, deflate, br
                                                Accept-Language: en-US,en;q=0.9
                                                Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk; 1P_JAR=2024-02-29-07; AEC=Ae3NU9ONhX9B7XLX981q957rojONvM6KssVw9cOsGpqQQbhrnqSLA01Im0g
                                                2024-02-29 07:39:54 UTC811INHTTP/1.1 200 OK
                                                Accept-Ranges: bytes
                                                Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
                                                Cross-Origin-Resource-Policy: cross-origin
                                                Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs"
                                                Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
                                                Content-Length: 17256
                                                X-Content-Type-Options: nosniff
                                                Server: sffe
                                                X-XSS-Protection: 0
                                                Date: Thu, 29 Feb 2024 04:03:49 GMT
                                                Expires: Fri, 28 Feb 2025 04:03:49 GMT
                                                Cache-Control: public, max-age=31536000
                                                Last-Modified: Mon, 19 Feb 2024 17:30:00 GMT
                                                Content-Type: text/javascript
                                                Vary: Accept-Encoding
                                                Age: 12965
                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
                                                Connection: close
                                                2024-02-29 07:39:54 UTC441INData Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 57 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 4e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 68 29 7b 69 66 28 21 28 74 3d 28 68 3d 57 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 68 29 7c 7c 21 68 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 74 3b 74 72 79 7b 74 3d 68 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 75 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 75 2c 63 72 65 61 74
                                                Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var W=this||self,N=function(t,h){if(!(t=(h=W.trustedTypes,null),h)||!h.createPolicy)return t;try{t=h.createPolicy("bg",{createHTML:u,createScript:u,creat
                                                2024-02-29 07:39:54 UTC1252INData Raw: 2e 63 72 65 61 74 65 53 63 72 69 70 74 28 49 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 49 29 7b 72 65 74 75 72 6e 22 22 2b 49 7d 7d 28 57 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 47 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 68 2c 57 29 7b 74 5b 66 28 57 2c 68 2c 74 29 2c 74 36 5d 3d 32 37 39 36 7d 2c 6a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 68 2c 57 2c 75 29 7b 58 28 68 2c 28 75 3d 70 28 28 57 3d 70 28 68 29 2c 68 29 29 2c 75 29 2c 46 28 74 2c 45 28 68 2c 57 29 29 29 7d 2c 41 3d 7b 70 61 73 73 69 76 65 3a 74 72 75 65 2c 63 61 70 74 75 72 65 3a 74 72 75 65 7d 2c 68 36 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 68 29 7b 28 68 2e 70 75 73 68 28
                                                Data Ascii: .createScript(I)}:function(I){return""+I}}(W)(Array(7824*Math.random()|0).join("\n")+'(function(){var G=function(t,h,W){t[f(W,h,t),t6]=2796},je=function(t,h,W,u){X(h,(u=p((W=p(h),h)),u),F(t,E(h,W)))},A={passive:true,capture:true},h6=function(t,h){(h.push(
                                                2024-02-29 07:39:54 UTC1252INData Raw: 74 2e 4c 29 72 65 74 75 72 6e 20 4e 6a 28 74 2c 74 2e 67 29 3b 72 65 74 75 72 6e 28 68 3d 7a 28 74 2c 74 72 75 65 2c 38 29 2c 68 29 26 31 32 38 26 26 28 68 5e 3d 31 32 38 2c 74 3d 7a 28 74 2c 74 72 75 65 2c 32 29 2c 68 3d 28 68 3c 3c 32 29 2b 28 74 7c 30 29 29 2c 68 7d 2c 59 46 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 68 29 7b 72 65 74 75 72 6e 20 52 5b 68 5d 28 52 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 64 6f 63 75 6d 65 6e 74 3a 74 2c 66 6c 6f 6f 72 3a 74 2c 73 70 6c 69 63 65 3a 74 2c 73 74 61 63 6b 3a 74 2c 63 61 6c 6c 3a 74 2c 72 65 70 6c 61 63 65 3a 74 2c 63 6f 6e 73 6f 6c 65 3a 74 2c 6c 65 6e 67 74 68 3a 74 2c 70 61 72 65 6e 74 3a 74 2c 70 72 6f 74 6f 74 79 70 65 3a 74 2c 70 6f 70 3a 74 2c 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 3a 74 7d
                                                Data Ascii: t.L)return Nj(t,t.g);return(h=z(t,true,8),h)&128&&(h^=128,t=z(t,true,2),h=(h<<2)+(t|0)),h},YF=function(t,h){return R[h](R.prototype,{document:t,floor:t,splice:t,stack:t,call:t,replace:t,console:t,length:t,parent:t,prototype:t,pop:t,propertyIsEnumerable:t}
                                                2024-02-29 07:39:54 UTC1252INData Raw: 29 2c 71 29 3e 3d 74 2e 6c 29 74 68 72 6f 77 5b 54 2c 33 31 5d 3b 66 6f 72 28 77 3d 28 59 3d 71 2c 67 3d 28 75 3d 30 2c 57 29 2c 74 2e 52 43 2e 6c 65 6e 67 74 68 29 3b 30 3c 67 3b 29 48 3d 59 3e 3e 33 2c 4e 3d 59 25 38 2c 4f 3d 38 2d 28 4e 7c 30 29 2c 49 3d 74 2e 6a 5b 48 5d 2c 4f 3d 4f 3c 67 3f 4f 3a 67 2c 68 26 26 28 4a 3d 74 2c 4a 2e 73 21 3d 59 3e 3e 36 26 26 28 4a 2e 73 3d 59 3e 3e 36 2c 50 3d 45 28 4a 2c 32 34 34 29 2c 4a 2e 72 54 3d 4a 36 28 4a 2e 4a 2c 4a 2e 73 2c 5b 30 2c 30 2c 50 5b 31 5d 2c 50 5b 32 5d 5d 29 29 2c 49 5e 3d 74 2e 72 54 5b 48 26 77 5d 29 2c 59 2b 3d 4f 2c 75 7c 3d 28 49 3e 3e 38 2d 28 4e 7c 30 29 2d 28 4f 7c 30 29 26 28 31 3c 3c 4f 29 2d 31 29 3c 3c 28 67 7c 30 29 2d 28 4f 7c 30 29 2c 67 2d 3d 4f 3b 72 65 74 75 72 6e 20 66 28 34
                                                Data Ascii: ),q)>=t.l)throw[T,31];for(w=(Y=q,g=(u=0,W),t.RC.length);0<g;)H=Y>>3,N=Y%8,O=8-(N|0),I=t.j[H],O=O<g?O:g,h&&(J=t,J.s!=Y>>6&&(J.s=Y>>6,P=E(J,244),J.rT=J6(J.J,J.s,[0,0,P[1],P[2]])),I^=t.rT[H&w]),Y+=O,u|=(I>>8-(N|0)-(O|0)&(1<<O)-1)<<(g|0)-(O|0),g-=O;return f(4
                                                2024-02-29 07:39:54 UTC1252INData Raw: 35 29 2c 74 3d 57 2e 6c 65 6e 67 74 68 2c 75 3d 30 3b 75 3c 74 3b 75 2b 2b 29 68 28 57 5b 75 5d 29 7d 2c 46 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 68 2c 57 2c 75 29 7b 66 6f 72 28 75 3d 28 57 3d 5b 5d 2c 28 74 7c 30 29 2d 31 29 3b 30 3c 3d 75 3b 75 2d 2d 29 57 5b 28 74 7c 30 29 2d 31 2d 28 75 7c 30 29 5d 3d 68 3e 3e 38 2a 75 26 32 35 35 3b 72 65 74 75 72 6e 20 57 7d 2c 41 36 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 68 2c 57 2c 75 2c 59 2c 71 29 7b 66 6f 72 28 68 3d 28 59 3d 28 75 3d 28 28 71 3d 70 28 28 57 3d 74 5b 45 39 5d 7c 7c 7b 7d 2c 74 29 29 2c 57 2e 64 54 3d 70 28 74 29 2c 57 29 2e 52 3d 5b 5d 2c 74 2e 58 29 3d 3d 74 3f 28 76 28 74 29 7c 30 29 2d 31 3a 31 2c 70 28 74 29 29 2c 30 29 3b 68 3c 75 3b 68 2b 2b 29 57 2e 52 2e 70 75 73 68 28 70 28 74 29 29 3b 66
                                                Data Ascii: 5),t=W.length,u=0;u<t;u++)h(W[u])},F=function(t,h,W,u){for(u=(W=[],(t|0)-1);0<=u;u--)W[(t|0)-1-(u|0)]=h>>8*u&255;return W},A6=function(t,h,W,u,Y,q){for(h=(Y=(u=((q=p((W=t[E9]||{},t)),W.dT=p(t),W).R=[],t.X)==t?(v(t)|0)-1:1,p(t)),0);h<u;h++)W.R.push(p(t));f
                                                2024-02-29 07:39:54 UTC1252INData Raw: 35 33 3e 50 3b 50 2b 2b 29 71 5b 50 5d 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 50 29 3b 51 28 74 2c 28 28 6e 28 5b 28 28 47 28 66 75 6e 63 74 69 6f 6e 28 49 29 7b 55 39 28 34 2c 49 29 7d 2c 28 47 28 66 75 6e 63 74 69 6f 6e 28 49 29 7b 6a 65 28 31 2c 49 29 7d 2c 28 66 28 38 33 2c 28 66 28 33 38 35 2c 74 2c 28 47 28 66 75 6e 63 74 69 6f 6e 28 49 2c 4e 2c 77 2c 48 2c 4f 29 7b 28 4f 3d 28 48 3d 28 77 3d 70 28 49 29 2c 70 28 49 29 29 2c 70 28 49 29 29 2c 49 2e 58 29 3d 3d 49 26 26 28 4e 3d 45 28 49 2c 77 29 2c 4f 3d 45 28 49 2c 4f 29 2c 48 3d 45 28 49 2c 48 29 2c 4e 5b 48 5d 3d 4f 2c 32 34 34 3d 3d 77 26 26 28 49 2e 73 3d 76 6f 69 64 20 30 2c 32 3d 3d 48 26 26 28 49 2e 4a 3d 7a 28 49 2c 66 61 6c 73 65 2c 33 32 29 2c 49 2e 73 3d 76 6f 69
                                                Data Ascii: 53>P;P++)q[P]=String.fromCharCode(P);Q(t,((n([((G(function(I){U9(4,I)},(G(function(I){je(1,I)},(f(83,(f(385,t,(G(function(I,N,w,H,O){(O=(H=(w=p(I),p(I)),p(I)),I.X)==I&&(N=E(I,w),O=E(I,O),H=E(I,H),N[H]=O,244==w&&(I.s=void 0,2==H&&(I.J=z(I,false,32),I.s=voi
                                                2024-02-29 07:39:54 UTC1252INData Raw: 77 2c 48 2c 4f 29 7b 30 21 3d 3d 28 4f 3d 45 28 49 2c 28 77 3d 28 48 3d 45 28 49 2c 28 4e 3d 28 48 3d 28 4f 3d 28 4e 3d 70 28 28 77 3d 70 28 49 29 2c 49 29 29 2c 70 29 28 49 29 2c 70 29 28 49 29 2c 45 29 28 49 2c 4e 29 2c 48 29 29 2c 45 28 49 2e 58 2c 77 29 29 2c 4f 29 29 2c 77 29 26 26 28 4f 3d 77 67 28 49 2c 31 2c 48 2c 4f 2c 77 2c 4e 29 2c 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 4e 2c 4f 2c 41 29 2c 66 28 33 39 2c 49 2c 5b 77 2c 4e 2c 4f 5d 29 29 7d 2c 28 66 28 34 32 39 2c 74 2c 28 66 28 33 35 35 2c 74 2c 28 47 28 66 75 6e 63 74 69 6f 6e 28 49 2c 4e 29 7b 71 6a 28 28 4e 3d 45 28 49 2c 70 28 49 29 29 2c 49 2e 58 29 2c 4e 29 7d 2c 74 2c 28 74 2e 68 58 3d 28 47 28 66 75 6e 63 74 69 6f 6e 28 49 2c 4e 2c 77 2c 48 2c 4f 2c 4a 2c 67 29 7b 69
                                                Data Ascii: w,H,O){0!==(O=E(I,(w=(H=E(I,(N=(H=(O=(N=p((w=p(I),I)),p)(I),p)(I),E)(I,N),H)),E(I.X,w)),O)),w)&&(O=wg(I,1,H,O,w,N),w.addEventListener(N,O,A),f(39,I,[w,N,O]))},(f(429,t,(f(355,t,(G(function(I,N){qj((N=E(I,p(I)),I.X),N)},t,(t.hX=(G(function(I,N,w,H,O,J,g){i
                                                2024-02-29 07:39:54 UTC1252INData Raw: 2c 45 28 49 2c 48 29 29 2c 49 29 2c 77 29 2c 66 28 4e 2c 49 2c 77 5b 48 5d 29 7d 2c 74 2c 28 66 28 31 30 36 2c 28 47 28 66 75 6e 63 74 69 6f 6e 28 49 2c 4e 2c 77 2c 48 29 7b 28 77 3d 28 48 3d 45 28 49 2c 28 4e 3d 70 28 28 77 3d 28 48 3d 70 28 49 29 2c 70 29 28 49 29 2c 49 29 29 2c 48 29 29 2c 45 29 28 49 2c 77 29 2c 66 29 28 4e 2c 49 2c 48 20 69 6e 20 77 7c 30 29 7d 2c 28 66 28 33 36 33 2c 74 2c 28 66 28 28 66 28 34 33 36 2c 74 2c 28 74 2e 63 77 3d 28 74 2e 76 3d 28 74 2e 6c 3d 28 74 2e 73 3d 76 6f 69 64 20 30 2c 74 2e 42 3d 30 2c 74 2e 73 58 3d 66 75 6e 63 74 69 6f 6e 28 49 29 7b 74 68 69 73 2e 58 3d 49 7d 2c 74 2e 4a 3d 28 74 2e 47 3d 6e 75 6c 6c 2c 76 6f 69 64 20 30 29 2c 75 3d 28 74 2e 44 3d 66 61 6c 73 65 2c 74 2e 55 3d 28 74 2e 67 3d 76 6f 69 64 20
                                                Data Ascii: ,E(I,H)),I),w),f(N,I,w[H])},t,(f(106,(G(function(I,N,w,H){(w=(H=E(I,(N=p((w=(H=p(I),p)(I),I)),H)),E)(I,w),f)(N,I,H in w|0)},(f(363,t,(f((f(436,t,(t.cw=(t.v=(t.l=(t.s=void 0,t.B=0,t.sX=function(I){this.X=I},t.J=(t.G=null,void 0),u=(t.D=false,t.U=(t.g=void
                                                2024-02-29 07:39:54 UTC1252INData Raw: 29 7d 2c 74 2c 34 36 34 29 2c 74 29 2c 31 38 31 29 2c 30 29 2c 74 29 2c 35 29 2c 72 28 34 29 29 29 2c 74 29 2c 7b 7d 29 2c 74 29 2c 34 39 29 2c 74 29 2c 33 34 31 29 2c 47 28 66 75 6e 63 74 69 6f 6e 28 49 29 7b 55 39 28 33 2c 49 29 7d 2c 74 2c 33 30 38 29 2c 6e 29 28 5b 74 36 5d 2c 74 29 2c 56 53 29 2c 57 5d 2c 74 29 2c 6e 29 28 5b 79 53 2c 59 5d 2c 74 29 2c 74 72 75 65 29 2c 74 72 75 65 29 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 68 29 7b 66 6f 72 28 68 3d 5b 5d 3b 74 2d 2d 3b 29 68 2e 70 75 73 68 28 32 35 35 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 3b 72 65 74 75 72 6e 20 68 7d 2c 53 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 68 29 7b 72 65 74 75 72 6e 28 68 3d 76 28 74 29 2c 68 26 31 32 38 29 26 26 28 68 3d 68 26 31 32 37 7c 76 28 74 29 3c 3c
                                                Data Ascii: )},t,464),t),181),0),t),5),r(4))),t),{}),t),49),t),341),G(function(I){U9(3,I)},t,308),n)([t6],t),VS),W],t),n)([yS,Y],t),true),true)},r=function(t,h){for(h=[];t--;)h.push(255*Math.random()|0);return h},Se=function(t,h){return(h=v(t),h&128)&&(h=h&127|v(t)<<
                                                2024-02-29 07:39:54 UTC1252INData Raw: 28 29 3a 28 77 3d 71 2c 71 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 77 28 29 2c 47 48 29 28 48 29 7d 29 7d 29 2c 70 65 3a 66 75 6e 63 74 69 6f 6e 28 50 29 7b 75 26 26 75 28 50 29 7d 7d 7d 2c 67 67 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 68 2c 57 2c 75 29 7b 66 6f 72 28 3b 74 2e 55 2e 6c 65 6e 67 74 68 3b 29 7b 75 3d 28 74 2e 47 3d 6e 75 6c 6c 2c 74 29 2e 55 2e 70 6f 70 28 29 3b 74 72 79 7b 57 3d 24 46 28 74 2c 75 29 7d 63 61 74 63 68 28 59 29 7b 62 28 59 2c 74 29 7d 69 66 28 68 26 26 74 2e 47 29 7b 68 3d 74 2e 47 2c 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 51 28 74 2c 74 72 75 65 2c 74 72 75 65 29 7d 29 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 57 7d 2c 24 46 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 68 2c 57 2c 75 2c 59 29 7b 69 66 28 28 75 3d 68 5b 30 5d 2c 75 29
                                                Data Ascii: ():(w=q,q=function(){(w(),GH)(H)})}),pe:function(P){u&&u(P)}}},gg=function(t,h,W,u){for(;t.U.length;){u=(t.G=null,t).U.pop();try{W=$F(t,u)}catch(Y){b(Y,t)}if(h&&t.G){h=t.G,h(function(){Q(t,true,true)});break}}return W},$F=function(t,h,W,u,Y){if((u=h[0],u)


                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                8192.168.2.449751142.251.32.1004435572C:\Program Files\Google\Chrome\Application\chrome.exe
                                                TimestampBytes transferredDirectionData
                                                2024-02-29 07:39:55 UTC1360OUTGET /recaptcha/api2/bframe?hl=en&v=1kRDYC3bfA-o6-tsWzIBvp7k&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1
                                                Host: www.google.com
                                                Connection: keep-alive
                                                sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                sec-ch-ua-mobile: ?0
                                                sec-ch-ua-platform: "Windows"
                                                Upgrade-Insecure-Requests: 1
                                                User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
                                                X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX
                                                Sec-Fetch-Site: same-origin
                                                Sec-Fetch-Mode: navigate
                                                Sec-Fetch-Dest: iframe
                                                Referer: https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgS_YOPXGMbpgK8GIjDM0jzunVG3Pq9C8_p5lbtQgdoKMHDC-yIg0E9GZsoonqCTKFjaHWbLvRCdKXGn0-4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
                                                Accept-Encoding: gzip, deflate, br
                                                Accept-Language: en-US,en;q=0.9
                                                Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk; 1P_JAR=2024-02-29-07; AEC=Ae3NU9ONhX9B7XLX981q957rojONvM6KssVw9cOsGpqQQbhrnqSLA01Im0g
                                                2024-02-29 07:39:56 UTC891INHTTP/1.1 200 OK
                                                Content-Type: text/html; charset=utf-8
                                                Cross-Origin-Resource-Policy: cross-origin
                                                Cross-Origin-Embedder-Policy: require-corp
                                                Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
                                                Cache-Control: no-cache, no-store, max-age=0, must-revalidate
                                                Pragma: no-cache
                                                Expires: Mon, 01 Jan 1990 00:00:00 GMT
                                                Date: Thu, 29 Feb 2024 07:39:56 GMT
                                                Content-Security-Policy: script-src 'report-sample' 'nonce-HAHE6QMUzZV3tRgrdxZTZw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
                                                X-Content-Type-Options: nosniff
                                                X-XSS-Protection: 1; mode=block
                                                Server: GSE
                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
                                                Accept-Ranges: none
                                                Vary: Accept-Encoding
                                                Connection: close
                                                Transfer-Encoding: chunked
                                                2024-02-29 07:39:56 UTC361INData Raw: 31 64 30 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20
                                                Data Ascii: 1d0d<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
                                                2024-02-29 07:39:56 UTC1252INData Raw: 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f
                                                Data Ascii: to/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//
                                                2024-02-29 07:39:56 UTC1252INData Raw: 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c
                                                Data Ascii: F9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329,
                                                2024-02-29 07:39:56 UTC1252INData Raw: 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d
                                                Data Ascii: 90-0491, U+04B0-04B1, U+2116;}/* greek-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}
                                                2024-02-29 07:39:56 UTC1252INData Raw: 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41
                                                Data Ascii: */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA
                                                2024-02-29 07:39:56 UTC1252INData Raw: 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c
                                                Data Ascii: rl(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal
                                                2024-02-29 07:39:56 UTC824INData Raw: 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 31 6b 52 44 59 43 33 62 66 41 2d 6f 36 2d 74 73 57 7a 49 42 76 70 37 6b 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 48 41 48 45 36 51 4d 55 7a 5a 56 33 74 52 67 72 64 78 5a 54 5a 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74
                                                Data Ascii: , U+FEFF, U+FFFD;}</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/1kRDYC3bfA-o6-tsWzIBvp7k/styles__ltr.css"><script nonce="HAHE6QMUzZV3tRgrdxZTZw" type="text/javascript">window['__recaptcha_api'] = 'htt
                                                2024-02-29 07:39:56 UTC5INData Raw: 30 0d 0a 0d 0a
                                                Data Ascii: 0


                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                9192.168.2.449754142.251.32.1004435572C:\Program Files\Google\Chrome\Application\chrome.exe
                                                TimestampBytes transferredDirectionData
                                                2024-02-29 07:39:56 UTC1171OUTGET /favicon.ico HTTP/1.1
                                                Host: www.google.com
                                                Connection: keep-alive
                                                sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"
                                                sec-ch-ua-mobile: ?0
                                                User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                sec-ch-ua-platform: "Windows"
                                                Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
                                                X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX
                                                Sec-Fetch-Site: same-origin
                                                Sec-Fetch-Mode: no-cors
                                                Sec-Fetch-Dest: image
                                                Referer: https://www.google.com/sorry/index?continue=https://www.google.com/&q=EgS_YOPXGMbpgK8GIjDM0jzunVG3Pq9C8_p5lbtQgdoKMHDC-yIg0E9GZsoonqCTKFjaHWbLvRCdKXGn0-4yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
                                                Accept-Encoding: gzip, deflate, br
                                                Accept-Language: en-US,en;q=0.9
                                                Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk; 1P_JAR=2024-02-29-07; AEC=Ae3NU9ONhX9B7XLX981q957rojONvM6KssVw9cOsGpqQQbhrnqSLA01Im0g
                                                2024-02-29 07:39:56 UTC706INHTTP/1.1 200 OK
                                                Accept-Ranges: bytes
                                                Cross-Origin-Resource-Policy: cross-origin
                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"
                                                Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
                                                Content-Length: 5430
                                                X-Content-Type-Options: nosniff
                                                Server: sffe
                                                X-XSS-Protection: 0
                                                Date: Wed, 28 Feb 2024 23:44:00 GMT
                                                Expires: Thu, 07 Mar 2024 23:44:00 GMT
                                                Cache-Control: public, max-age=691200
                                                Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT
                                                Content-Type: image/x-icon
                                                Vary: Accept-Encoding
                                                Age: 28556
                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
                                                Connection: close
                                                2024-02-29 07:39:56 UTC546INData Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff
                                                Data Ascii: h& ( 0.v]X:X:rY
                                                2024-02-29 07:39:56 UTC1252INData Raw: ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea
                                                Data Ascii: BBBBBuBBBBB{5k7R8F2Vb5C
                                                2024-02-29 07:39:56 UTC1252INData Raw: de ee d8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 fe fe fe 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 24 fd fd fd ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb f5 e7 ff 8f c6 7b ff 54 a9 36 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34
                                                Data Ascii: /${T6S4S4S4S4S4S4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4
                                                2024-02-29 07:39:56 UTC1252INData Raw: ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c8 aa ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
                                                Data Ascii: BBBBBBBBBBB}BBBBBBBBBBB}
                                                2024-02-29 07:39:56 UTC1128INData Raw: ff ff ff ff a0 a7 f5 ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 81 8a f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0b fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b5 ba f7 ff 3e 4b eb ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 3f 4c eb ff ba bf f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd eb ff ff ff
                                                Data Ascii: 5C5C5C5C5C5C5C5C5C5C5C5C5C5C5C>K5C5C5C5C5C5C5C5C5C5C5C5C?L&


                                                Session IDSource IPSource PortDestination IPDestination PortPIDProcess
                                                10192.168.2.449759142.251.40.1004435572C:\Program Files\Google\Chrome\Application\chrome.exe
                                                TimestampBytes transferredDirectionData
                                                2024-02-29 07:39:57 UTC722OUTGET /favicon.ico HTTP/1.1
                                                Host: www.google.com
                                                Connection: keep-alive
                                                User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
                                                Accept: */*
                                                X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX
                                                Sec-Fetch-Site: none
                                                Sec-Fetch-Mode: cors
                                                Sec-Fetch-Dest: empty
                                                Accept-Encoding: gzip, deflate, br
                                                Accept-Language: en-US,en;q=0.9
                                                Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk; 1P_JAR=2024-02-29-07; AEC=Ae3NU9ONhX9B7XLX981q957rojONvM6KssVw9cOsGpqQQbhrnqSLA01Im0g
                                                2024-02-29 07:39:57 UTC706INHTTP/1.1 200 OK
                                                Accept-Ranges: bytes
                                                Cross-Origin-Resource-Policy: cross-origin
                                                Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"
                                                Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
                                                Content-Length: 5430
                                                X-Content-Type-Options: nosniff
                                                Server: sffe
                                                X-XSS-Protection: 0
                                                Date: Wed, 28 Feb 2024 23:44:00 GMT
                                                Expires: Thu, 07 Mar 2024 23:44:00 GMT
                                                Cache-Control: public, max-age=691200
                                                Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT
                                                Content-Type: image/x-icon
                                                Vary: Accept-Encoding
                                                Age: 28557
                                                Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
                                                Connection: close
                                                2024-02-29 07:39:57 UTC546INData Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff
                                                Data Ascii: h& ( 0.v]X:X:rY
                                                2024-02-29 07:39:57 UTC1252INData Raw: ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea
                                                Data Ascii: BBBBBuBBBBB{5k7R8F2Vb5C
                                                2024-02-29 07:39:57 UTC1252INData Raw: de ee d8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 fe fe fe 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 24 fd fd fd ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb f5 e7 ff 8f c6 7b ff 54 a9 36 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34
                                                Data Ascii: /${T6S4S4S4S4S4S4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4
                                                2024-02-29 07:39:57 UTC1252INData Raw: ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c8 aa ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
                                                Data Ascii: BBBBBBBBBBB}BBBBBBBBBBB}
                                                2024-02-29 07:39:57 UTC1128INData Raw: ff ff ff ff a0 a7 f5 ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 81 8a f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0b fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b5 ba f7 ff 3e 4b eb ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 3f 4c eb ff ba bf f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd eb ff ff ff
                                                Data Ascii: 5C5C5C5C5C5C5C5C5C5C5C5C5C5C5C>K5C5C5C5C5C5C5C5C5C5C5C5C?L&


                                                Statistics

                                                CPU Usage

                                                Click to jump to process

                                                Memory Usage

                                                Click to jump to process

                                                Behavior

                                                Click to jump to process

                                                System Behavior

                                                General

                                                Target ID:0
                                                Start time:08:39:43
                                                Start date:29/02/2024
                                                Path:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                Wow64 process (32bit):false
                                                Commandline:C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
                                                Imagebase:0x7ff76e190000
                                                File size:3'242'272 bytes
                                                MD5 hash:45DE480806D1B5D462A7DDE4DCEFC4E4
                                                Has elevated privileges:true
                                                Has administrator privileges:true
                                                Programmed in:C, C++ or other language
                                                Reputation:low
                                                Has exited:false

                                                General

                                                Target ID:2
                                                Start time:08:39:46
                                                Start date:29/02/2024
                                                Path:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                Wow64 process (32bit):false
                                                Commandline:"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2168,i,5198871792002701054,9817953159442565843,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
                                                Imagebase:0x7ff76e190000
                                                File size:3'242'272 bytes
                                                MD5 hash:45DE480806D1B5D462A7DDE4DCEFC4E4
                                                Has elevated privileges:true
                                                Has administrator privileges:true
                                                Programmed in:C, C++ or other language
                                                Reputation:low
                                                Has exited:false

                                                General

                                                Target ID:3
                                                Start time:08:39:48
                                                Start date:29/02/2024
                                                Path:C:\Program Files\Google\Chrome\Application\chrome.exe
                                                Wow64 process (32bit):false
                                                Commandline:C:\Program Files\Google\Chrome\Application\chrome.exe" "http://link.jschoenconsultingco.com/
                                                Imagebase:0x7ff76e190000
                                                File size:3'242'272 bytes
                                                MD5 hash:45DE480806D1B5D462A7DDE4DCEFC4E4
                                                Has elevated privileges:true
                                                Has administrator privileges:true
                                                Programmed in:C, C++ or other language
                                                Reputation:low
                                                Has exited:true

                                                Disassembly

                                                ⊘No disassembly