Edit tour

Windows Analysis Report
DownloadDirectorLauncher1.zip

Overview

General Information

Sample name:	DownloadDirectorLauncher1.zip
Analysis ID:	1427739
MD5:	d79ed2719bd67207dafde96dc71000d7
SHA1:	a1277fe10a6dfff82dfcb6612d2db97cbd66350f
SHA256:	ed1e8e934bf18c8f4698dd04c7e3b476659e7319b6851667f8dbb950eb17caf1
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

rundll32.exe (PID: 7076 cmdline: C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding MD5: EF3179D498793BF4234F708D3BE28633)

DownloadDirectorLauncher.exe.exe (PID: 2792 cmdline: "C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe" MD5: 4CC30C1DF004C715600258D3349BD4C9)

DownloadDirectorLauncher.exe.exe (PID: 6848 cmdline: "C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe" MD5: 4CC30C1DF004C715600258D3349BD4C9)

chrome.exe (PID: 7068 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2068 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1888,i,2403929920380648888,10293033927867228673,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dvisurtotal%26oq%3Dvisurtotal%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOTIPCAEQABgKGIMBGLEDGIAEMg8IAhAAGAoYgwEYsQMYgAQyDAgDEAAYChixAxiABDIJCAQQABgKGIAEMgkIBRAAGAoYgAQyCQgGEAAYChiABDIECAcQBdIBCDcwNTFqMGo3qAIAsAIA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRRtTk0GJLlgbEGIjBFlmw-Z1Jr1gypU10CH7MqD41FI5YyaJtIY5ytq6NLWWR7LvXEHvlKJylF7TKn-sgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dvisurtotal%26oq%3Dvisurtotal%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOTIPCAEQABgKGIMBGLEDGIAEMg8IAhAAGAoYgwEYsQMYgAQyDAgDEAAYChixAxiABDIJCAQQABgKGIAEMgkIBRAAGAoYgAQyCQgGEAAYChiABDIECAcQBdIBCDcwNTFqMGo3qAIAsAIA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRRtTk0GJLlgbEGIjBFlmw-Z1Jr1gypU10CH7MqD41FI5YyaJtIY5ytq6NLWWR7LvXEHvlKJylF7TKn-sgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dvisurtotal%26oq%3Dvisurtotal%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOTIPCAEQABgKGIMBGLEDGIAEMg8IAhAAGAoYgwEYsQMYgAQyDAgDEAAYChixAxiABDIJCAQQABgKGIAEMgkIBRAAGAoYgAQyCQgGEAAYChiABDIECAcQBdIBCDcwNTFqMGo3qAIAsAIA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRRtTk0GJLlgbEGIjBFlmw-Z1Jr1gypU10CH7MqD41FI5YyaJtIY5ytq6NLWWR7LvXEHvlKJylF7TKn-sgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&s=wjjJycx7A6xdUH8ymV2wAZsbKFYleBfhF8M78a8nZ0f9I9xmxGqsZcDi4de3HWpwlf5odCOBWLTyz5Uf7Bn6iJyLK35QLtLGlBU67qESmK9mxN29oVR-6FuCKaXENR6UkgP__244I-nj6qgpOEaDoiRaMKZVWFmbNcQafOsK-kI2rqdMXqyqp7jPyowgz7wNrLOc87nXDsyxwDfprA85Hx2brNu0KST-f3giZLoYokBLsOTP5MHPjn8N0fzG5UkKoZaBGMpRytE1aR9bCt7kxNbWStTUVmo&cb=lk73a6yg16hu	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&s=wjjJycx7A6xdUH8ymV2wAZsbKFYleBfhF8M78a8nZ0f9I9xmxGqsZcDi4de3HWpwlf5odCOBWLTyz5Uf7Bn6iJyLK35QLtLGlBU67qESmK9mxN29oVR-6FuCKaXENR6UkgP__244I-nj6qgpOEaDoiRaMKZVWFmbNcQafOsK-kI2rqdMXqyqp7jPyowgz7wNrLOc87nXDsyxwDfprA85Hx2brNu0KST-f3giZLoYokBLsOTP5MHPjn8N0fzG5UkKoZaBGMpRytE1aR9bCt7kxNbWStTUVmo&cb=lk73a6yg16hu	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.33.136.127:443 -> 192.168.2.16:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.33.136.127:443 -> 192.168.2.16:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49708 version: TLS 1.2

Source: Joe Sandbox View

IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.136.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.136.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.136.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.136.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.136.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.136.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.136.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.136.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.136.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.136.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.136.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.136.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.136.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.136.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.136.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.136.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.136.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.136.127
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203

Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=rP1zYzBT3PL17Hh&MD=kDgTXRm9 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=rP1zYzBT3PL17Hh&MD=kDgTXRm9 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgRRtTk0GInlgbEGIjAqSG6qzk0ra_97H04g98D6YmD7Q3oweFIUlIYySdkbCbloCe41Ki0htoN7VEj0BBcyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-18-01; NID=513=mE19LzVEoqaHGsHyJIOfTP52AtkRlCrY_njRf47RaRhf1LrMMP82RGJ4VbdsyuW4FvCl5xahwpcu5Szio7cep5teQ8K92WeBxUNe4dg9jQlBmFh3ugRXtpHxsETBQuhwOU7do37YRUuPvaIFan23VQR-EHEdCpcaU4p53ZI_ejs
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgRRtTk0GInlgbEGIjDD_Fw62_katFhyo9zzmr8gQmeIehtlet4MzBVMpDoKind8jSRiUN-W8363LVjsk9AyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=v&oit=1&cp=1&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=vi&oit=1&cp=2&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=vis&oit=1&cp=3&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=visu&oit=1&cp=4&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=visur&oit=1&cp=5&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4
Source: global traffic	HTTP traffic detected: GET /p/AF1QipPWj31KawuEWhcSPEoG10VjL7pu_-t5hy76ZrpA=w92-h92-n-k-no HTTP/1.1Host: lh5.googleusercontent.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=visurto&oit=1&cp=7&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=visurtot&oit=1&cp=8&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=visurtotal&oit=1&cp=10&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4
Source: global traffic	HTTP traffic detected: GET /search?q=visurtotal&oq=visurtotal&gs_lcrp=EgZjaHJvbWUyBggAEEUYOTIPCAEQABgKGIMBGLEDGIAEMg8IAhAAGAoYgwEYsQMYgAQyDAgDEAAYChixAxiABDIJCAQQABgKGIAEMgkIBRAAGAoYgAQyCQgGEAAYChiABDIECAcQBdIBCDcwNTFqMGo3qAIAsAIA&sourceid=chrome&ie=UTF-8 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/search%3Fq%3Dvisurtotal%26oq%3Dvisurtotal%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOTIPCAEQABgKGIMBGLEDGIAEMg8IAhAAGAoYgwEYsQMYgAQyDAgDEAAYChixAxiABDIJCAQQABgKGIAEMgkIBRAAGAoYgAQyCQgGEAAYChiABDIECAcQBdIBCDcwNTFqMGo3qAIAsAIA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRRtTk0GJLlgbEGIjBFlmw-Z1Jr1gypU10CH7MqD41FI5YyaJtIY5ytq6NLWWR7LvXEHvlKJylF7TKn-sgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dvisurtotal%26oq%3Dvisurtotal%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOTIPCAEQABgKGIMBGLEDGIAEMg8IAhAAGAoYgwEYsQMYgAQyDAgDEAAYChixAxiABDIJCAQQABgKGIAEMgkIBRAAGAoYgAQyCQgGEAAYChiABDIECAcQBdIBCDcwNTFqMGo3qAIAsAIA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRRtTk0GJLlgbEGIjBFlmw-Z1Jr1gypU10CH7MqD41FI5YyaJtIY5ytq6NLWWR7LvXEHvlKJylF7TKn-sgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&s=wjjJycx7A6xdUH8ymV2wAZsbKFYleBfhF8M78a8nZ0f9I9xmxGqsZcDi4de3HWpwlf5odCOBWLTyz5Uf7Bn6iJyLK35QLtLGlBU67qESmK9mxN29oVR-6FuCKaXENR6UkgP__244I-nj6qgpOEaDoiRaMKZVWFmbNcQafOsK-kI2rqdMXqyqp7jPyowgz7wNrLOc87nXDsyxwDfprA85Hx2brNu0KST-f3giZLoYokBLsOTP5MHPjn8N0fzG5UkKoZaBGMpRytE1aR9bCt7kxNbWStTUVmo&cb=lk73a6yg16hu HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dvisurtotal%26oq%3Dvisurtotal%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOTIPCAEQABgKGIMBGLEDGIAEMg8IAhAAGAoYgwEYsQMYgAQyDAgDEAAYChixAxiABDIJCAQQABgKGIAEMgkIBRAAGAoYgAQyCQgGEAAYChiABDIECAcQBdIBCDcwNTFqMGo3qAIAsAIA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRRtTk0GJLlgbEGIjBFlmw-Z1Jr1gypU10CH7MqD41FI5YyaJtIY5ytq6NLWWR7LvXEHvlKJylF7TKn-sgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
Source: global traffic	HTTP traffic detected: GET /js/bg/rIjZlM8ZNfOeVQTojtt5OPuY9YnE0CAT82tG0V-YUX0.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&s=wjjJycx7A6xdUH8ymV2wAZsbKFYleBfhF8M78a8nZ0f9I9xmxGqsZcDi4de3HWpwlf5odCOBWLTyz5Uf7Bn6iJyLK35QLtLGlBU67qESmK9mxN29oVR-6FuCKaXENR6UkgP__244I-nj6qgpOEaDoiRaMKZVWFmbNcQafOsK-kI2rqdMXqyqp7jPyowgz7wNrLOc87nXDsyxwDfprA85Hx2brNu0KST-f3giZLoYokBLsOTP5MHPjn8N0fzG5UkKoZaBGMpRytE1aR9bCt7kxNbWStTUVmo&cb=lk73a6yg16huAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm- HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&s=wjjJycx7A6xdUH8ymV2wAZsbKFYleBfhF8M78a8nZ0f9I9xmxGqsZcDi4de3HWpwlf5odCOBWLTyz5Uf7Bn6iJyLK35QLtLGlBU67qESmK9mxN29oVR-6FuCKaXENR6UkgP__244I-nj6qgpOEaDoiRaMKZVWFmbNcQafOsK-kI2rqdMXqyqp7jPyowgz7wNrLOc87nXDsyxwDfprA85Hx2brNu0KST-f3giZLoYokBLsOTP5MHPjn8N0fzG5UkKoZaBGMpRytE1aR9bCt7kxNbWStTUVmo&cb=lk73a6yg16huAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dvisurtotal%26oq%3Dvisurtotal%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOTIPCAEQABgKGIMBGLEDGIAEMg8IAhAAGAoYgwEYsQMYgAQyDAgDEAAYChixAxiABDIJCAQQABgKGIAEMgkIBRAAGAoYgAQyCQgGEAAYChiABDIECAcQBdIBCDcwNTFqMGo3qAIAsAIA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRRtTk0GJLlgbEGIjBFlmw-Z1Jr1gypU10CH7MqD41FI5YyaJtIY5ytq6NLWWR7LvXEHvlKJylF7TKn-sgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dvisurtotal%26oq%3Dvisurtotal%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOTIPCAEQABgKGIMBGLEDGIAEMg8IAhAAGAoYgwEYsQMYgAQyDAgDEAAYChixAxiABDIJCAQQABgKGIAEMgkIBRAAGAoYgAQyCQgGEAAYChiABDIECAcQBdIBCDcwNTFqMGo3qAIAsAIA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRRtTk0GJLlgbEGIjBFlmw-Z1Jr1gypU10CH7MqD41FI5YyaJtIY5ytq6NLWWR7LvXEHvlKJylF7TKn-sgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA7yxEwJrTQzKFdvzKXBPyepU7lkUD6FHF_xaRg9MITh_oBGwJBlnrTky_tJUTuRePPmh9rA1h38UdFZMrfj0veWAhi-6avQdfso_JuqEei9G1OBX8K271KlGTtCIxsfd5i-to_bzQRZa4agIbvfNy8oOaERLvakWtpQI_wIkaJLEVAOh_WWRq5gROK9kU9nKkvq62Ju&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA7yxEwJrTQzKFdvzKXBPyepU7lkUD6FHF_xaRg9MITh_oBGwJBlnrTky_tJUTuRePPmh9rA1h38UdFZMrfj0veWAhi-6avQdfso_JuqEei9G1OBX8K271KlGTtCIxsfd5i-to_bzQRZa4agIbvfNy8oOaERLvakWtpQI_wIkaJLEVAOh_WWRq5gROK9kU9nKkvq62Ju&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA7yxEwJrTQzKFdvzKXBPyepU7lkUD6FHF_xaRg9MITh_oBGwJBlnrTky_tJUTuRePPmh9rA1h38UdFZMrfj0veWAhi-6avQdfso_JuqEei9G1OBX8K271KlGTtCIxsfd5i-to_bzQRZa4agIbvfNy8oOaERLvakWtpQI_wIkaJLEVAOh_WWRq5gROK9kU9nKkvq62Ju&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=2 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/replaceimage?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA7yxEwJrTQzKFdvzKXBPyepU7lkUD6FHF_xaRg9MITh_oBGwJBlnrTky_tJUTuRePPmh9rA1h38UdFZMrfj0veWAhi-6avQdfso_JuqEei9G1OBX8K271KlGTtCIxsfd5i-to_bzQRZa4agIbvfNy8oOaERLvakWtpQI_wIkaJLEVAOh_WWRq5gROK9kU9nKkvq62Ju&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=2 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/userverify?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA7h1gq_qS7al9HO7PQpzGTS5JWeX2FsfH159FjvTdvn_zUmpWU8JVsvm7trvqlPZ5_YAo-57ycQzgvbKn81Fot6-oIbceP5fjtRi2ZywiuvEXdVQJyV1I7MaV9pKPWF5fyGEszk2-PYs-dy74nFG0dBCsG9C4iuZVDbahfIj7unSSccRNQyV5eBz7q1hBqAgrSBfG_q&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA7h1gq_qS7al9HO7PQpzGTS5JWeX2FsfH159FjvTdvn_zUmpWU8JVsvm7trvqlPZ5_YAo-57ycQzgvbKn81Fot6-oIbceP5fjtRi2ZywiuvEXdVQJyV1I7MaV9pKPWF5fyGEszk2-PYs-dy74nFG0dBCsG9C4iuZVDbahfIj7unSSccRNQyV5eBz7q1hBqAgrSBfG_q&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA7h1gq_qS7al9HO7PQpzGTS5JWeX2FsfH159FjvTdvn_zUmpWU8JVsvm7trvqlPZ5_YAo-57ycQzgvbKn81Fot6-oIbceP5fjtRi2ZywiuvEXdVQJyV1I7MaV9pKPWF5fyGEszk2-PYs-dy74nFG0dBCsG9C4iuZVDbahfIj7unSSccRNQyV5eBz7q1hBqAgrSBfG_q&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=2 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/replaceimage?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA7h1gq_qS7al9HO7PQpzGTS5JWeX2FsfH159FjvTdvn_zUmpWU8JVsvm7trvqlPZ5_YAo-57ycQzgvbKn81Fot6-oIbceP5fjtRi2ZywiuvEXdVQJyV1I7MaV9pKPWF5fyGEszk2-PYs-dy74nFG0dBCsG9C4iuZVDbahfIj7unSSccRNQyV5eBz7q1hBqAgrSBfG_q&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=2 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/userverify?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA7PcvxEYFJucuS82ElQVhj9hNdQMnoOrcf94c85gf0b7M2K9weu7o2GvjbBCx_A22Kkd8cDW84vB5kaPQz0WBRySb_QbFJJqxd4YA-TUzxAK18LWuaf6TZ8-o1hukGdqWZGtNRUmwZW6JZOCbzk9avrwNXRmkck1E6a3ZSxeTvXiKF8T_79HJH0JBwqI5it1DjWIeUt&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA7PcvxEYFJucuS82ElQVhj9hNdQMnoOrcf94c85gf0b7M2K9weu7o2GvjbBCx_A22Kkd8cDW84vB5kaPQz0WBRySb_QbFJJqxd4YA-TUzxAK18LWuaf6TZ8-o1hukGdqWZGtNRUmwZW6JZOCbzk9avrwNXRmkck1E6a3ZSxeTvXiKF8T_79HJH0JBwqI5it1DjWIeUt&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ

Source: unknown

DNS traffic detected: queries for: www.google.com

Source: unknown

HTTP traffic detected: POST /recaptcha/api2/reload?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 7482sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-protobufferAccept: */*Origin: https://www.google.comX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ

Source: DownloadDirectorLauncher.exe.exe	String found in binary or memory: http://gcc.gnu.org/bugs.html):
Source: chromecache_171.14.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_171.14.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_171.14.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_171.14.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_171.14.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_171.14.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_171.14.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_171.14.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_171.14.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_171.14.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_171.14.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_139.14.dr, chromecache_171.14.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_171.14.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__.
Source: chromecache_139.14.dr, chromecache_150.14.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js
Source: chromecache_126.14.dr, chromecache_132.14.dr, chromecache_148.14.dr	String found in binary or memory: https://www.virustotal.com/
Source: DownloadDirectorLauncher.exe.exe	String found in binary or memory: https://www14.software.ibm.com/dldirector/
Source: DownloadDirectorLauncher.exe.exe	String found in binary or memory: https://www14.software.ibm.com/dldirector/%%26h%3D&h=///IBMDownloadDirectorApp.jnlpPATH;Javajavajrej

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.33.136.127:443 -> 192.168.2.16:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.33.136.127:443 -> 192.168.2.16:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49708 version: TLS 1.2

Source: classification engine

Classification label: clean1.winZIP@19/92@6/5

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Windows\System32\rundll32.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown

Process created: C:\Windows\System32\rundll32.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

Source: unknown	Process created: C:\Windows\System32\rundll32.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe "C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe"
Source: unknown	Process created: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe "C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe"
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1888,i,2403929920380648888,10293033927867228673,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1888,i,2403929920380648888,10293033927867228673,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: aclayers.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: sfc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: sfc_os.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe	Section loaded: wintypes.dll	Jump to behavior

Source: Google Drive.lnk.13.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.13.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.13.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.13.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.13.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.13.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Windows\System32\rundll32.exe

Process information set: NOOPENFILEERRORBOX

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 DLL Side-Loading	1 Process Injection	1 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	1 Rundll32	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Registry Run Keys / Startup Folder	1 Process Injection	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://recaptcha.net	0%	URL Reputation	safe
https://recaptcha.net	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__.	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.google.com	142.251.15.105	true	false	high
googlehosted.l.googleusercontent.com	64.233.177.132	true	false	high
lh5.googleusercontent.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://www.google.com/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=vis&oit=1&cp=3&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	high
https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dvisurtotal%26oq%3Dvisurtotal%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOTIPCAEQABgKGIMBGLEDGIAEMg8IAhAAGAoYgwEYsQMYgAQyDAgDEAAYChixAxiABDIJCAQQABgKGIAEMgkIBRAAGAoYgAQyCQgGEAAYChiABDIECAcQBdIBCDcwNTFqMGo3qAIAsAIA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRRtTk0GJLlgbEGIjBFlmw-Z1Jr1gypU10CH7MqD41FI5YyaJtIY5ytq6NLWWR7LvXEHvlKJylF7TKn-sgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=visurtotal&oit=1&cp=10&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	high
https://www.google.com/js/bg/rIjZlM8ZNfOeVQTojtt5OPuY9YnE0CAT82tG0V-YUX0.js	false	high
https://www.google.com/recaptcha/api2/reload?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=visurtot&oit=1&cp=8&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	high
https://www.google.com/recaptcha/api2/userverify?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=visurto&oit=1&cp=7&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	high
https://www.google.com/async/newtab_promos	false	high
https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgRRtTk0GInlgbEGIjDD_Fw62_katFhyo9zzmr8gQmeIehtlet4MzBVMpDoKind8jSRiUN-W8363LVjsk9AyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=visu&oit=1&cp=4&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	high
about:blank	false	low
https://www.google.com/favicon.ico	false	high
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA7PcvxEYFJucuS82ElQVhj9hNdQMnoOrcf94c85gf0b7M2K9weu7o2GvjbBCx_A22Kkd8cDW84vB5kaPQz0WBRySb_QbFJJqxd4YA-TUzxAK18LWuaf6TZ8-o1hukGdqWZGtNRUmwZW6JZOCbzk9avrwNXRmkck1E6a3ZSxeTvXiKF8T_79HJH0JBwqI5it1DjWIeUt&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=v&oit=1&cp=1&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	high
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA7h1gq_qS7al9HO7PQpzGTS5JWeX2FsfH159FjvTdvn_zUmpWU8JVsvm7trvqlPZ5_YAo-57ycQzgvbKn81Fot6-oIbceP5fjtRi2ZywiuvEXdVQJyV1I7MaV9pKPWF5fyGEszk2-PYs-dy74nFG0dBCsG9C4iuZVDbahfIj7unSSccRNQyV5eBz7q1hBqAgrSBfG_q&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=2	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	high
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA7yxEwJrTQzKFdvzKXBPyepU7lkUD6FHF_xaRg9MITh_oBGwJBlnrTky_tJUTuRePPmh9rA1h38UdFZMrfj0veWAhi-6avQdfso_JuqEei9G1OBX8K271KlGTtCIxsfd5i-to_bzQRZa4agIbvfNy8oOaERLvakWtpQI_wIkaJLEVAOh_WWRq5gROK9kU9nKkvq62Ju&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false	high
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&s=wjjJycx7A6xdUH8ymV2wAZsbKFYleBfhF8M78a8nZ0f9I9xmxGqsZcDi4de3HWpwlf5odCOBWLTyz5Uf7Bn6iJyLK35QLtLGlBU67qESmK9mxN29oVR-6FuCKaXENR6UkgP__244I-nj6qgpOEaDoiRaMKZVWFmbNcQafOsK-kI2rqdMXqyqp7jPyowgz7wNrLOc87nXDsyxwDfprA85Hx2brNu0KST-f3giZLoYokBLsOTP5MHPjn8N0fzG5UkKoZaBGMpRytE1aR9bCt7kxNbWStTUVmo&cb=lk73a6yg16hu	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=vi&oit=1&cp=2&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	high
https://www.google.com/recaptcha/api.js	false	high
https://www.google.com/search?q=visurtotal&oq=visurtotal&gs_lcrp=EgZjaHJvbWUyBggAEEUYOTIPCAEQABgKGIMBGLEDGIAEMg8IAhAAGAoYgwEYsQMYgAQyDAgDEAAYChixAxiABDIJCAQQABgKGIAEMgkIBRAAGAoYgAQyCQgGEAAYChiABDIECAcQBdIBCDcwNTFqMGo3qAIAsAIA&sourceid=chrome&ie=UTF-8	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=visur&oit=1&cp=5&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	high
https://www.google.com/recaptcha/api2/replaceimage?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false	high
https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0	false	high
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA7yxEwJrTQzKFdvzKXBPyepU7lkUD6FHF_xaRg9MITh_oBGwJBlnrTky_tJUTuRePPmh9rA1h38UdFZMrfj0veWAhi-6avQdfso_JuqEei9G1OBX8K271KlGTtCIxsfd5i-to_bzQRZa4agIbvfNy8oOaERLvakWtpQI_wIkaJLEVAOh_WWRq5gROK9kU9nKkvq62Ju&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=2	false	high
https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgRRtTk0GInlgbEGIjAqSG6qzk0ra_97H04g98D6YmD7Q3oweFIUlIYySdkbCbloCe41Ki0htoN7VEj0BBcyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	false	high
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA7h1gq_qS7al9HO7PQpzGTS5JWeX2FsfH159FjvTdvn_zUmpWU8JVsvm7trvqlPZ5_YAo-57ycQzgvbKn81Fot6-oIbceP5fjtRi2ZywiuvEXdVQJyV1I7MaV9pKPWF5fyGEszk2-PYs-dy74nFG0dBCsG9C4iuZVDbahfIj7unSSccRNQyV5eBz7q1hBqAgrSBfG_q&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	false	high
https://lh5.googleusercontent.com/p/AF1QipPWj31KawuEWhcSPEoG10VjL7pu_-t5hy76ZrpA=w92-h92-n-k-no	false	high
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_171.14.dr	false		high
https://www.virustotal.com/	chromecache_126.14.dr, chromecache_132.14.dr, chromecache_148.14.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_171.14.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_171.14.dr	false		high
https://recaptcha.net	chromecache_171.14.dr	false	URL Reputation: safe URL Reputation: safe	unknown
http://gcc.gnu.org/bugs.html):	DownloadDirectorLauncher.exe.exe	false		high
https://www.gstatic.c..?/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__.	chromecache_171.14.dr	false	URL Reputation: safe	low
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_171.14.dr	false		high
https://www14.software.ibm.com/dldirector/	DownloadDirectorLauncher.exe.exe	false		high
https://www14.software.ibm.com/dldirector/%%26h%3D&h=///IBMDownloadDirectorApp.jnlpPATH;Javajavajrej	DownloadDirectorLauncher.exe.exe	false		high
https://cloud.google.com/contact	chromecache_171.14.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_171.14.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_171.14.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_171.14.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_171.14.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_139.14.dr, chromecache_171.14.dr	false		high
https://support.google.com/recaptcha	chromecache_171.14.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
74.125.136.99	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
64.233.177.132	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.251.15.105	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1427739
Start date and time:	2024-04-18 03:06:56 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 36s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	DownloadDirectorLauncher1.zip
Detection:	CLEAN
Classification:	clean1.winZIP@19/92@6/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .zip

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 74.125.136.94, 64.233.177.102, 64.233.177.100, 64.233.177.101, 64.233.177.138, 64.233.177.113, 64.233.177.139, 74.125.136.84, 34.104.35.123, 64.233.185.102, 64.233.185.139, 64.233.185.113, 64.233.185.100, 64.233.185.101, 64.233.185.138, 74.125.138.94, 172.217.215.95, 172.253.124.95, 142.250.105.95, 64.233.185.95, 142.250.9.95, 142.251.15.95, 108.177.122.95, 64.233.177.95, 64.233.176.95, 74.125.138.95, 173.194.219.95, 74.125.136.95, 142.250.105.94
Excluded domains from analysis (whitelisted): fs.microsoft.com, clients2.google.com, accounts.google.com, edgedl.me.gvt1.com, content-autofill.googleapis.com, slscr.update.microsoft.com, encrypted-tbn0.gstatic.com, fonts.gstatic.com, clientservices.googleapis.com, clients.l.google.com, www.gstatic.com, fe3cr.delivery.mp.microsoft.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
239.255.255.250	http://ranchpools.com	Get hash	malicious	Unknown	Browse
	https://45.128.232.135	Get hash	malicious	Unknown	Browse
	http://t.cm.morganstanley.com/r/?id=h1b92d14%2C134cc33c%2C1356be32&p1=www.saiengroup.com%2Fteaz%2F648c482b60b3906833c9304bab170add%2FJBVNhz%2FYW15LmNoZW5AZG91YmxlbGluZS5jb20=	Get hash	malicious	HTMLPhisher	Browse
	https://windowdefalerts-error0x21906-alert-virus-detected.pages.dev/	Get hash	malicious	TechSupportScam	Browse
	https://windowdefalerts-error0x21903-alert-virus-detected.pages.dev/	Get hash	malicious	TechSupportScam	Browse
	https://windowdefalerts-error0x21905-alert-virus-detected.pages.dev/	Get hash	malicious	TechSupportScam	Browse
	https://windowdefalerts-error0x21908-alert-virus-detected.pages.dev/	Get hash	malicious	TechSupportScam	Browse
	https://windowdefalerts-error0x21904-alert-virus-detected.pages.dev/	Get hash	malicious	TechSupportScam	Browse
	https://windowdefalerts-error0x21902-alert-virus-detected.pages.dev/	Get hash	malicious	TechSupportScam	Browse
	https://www.applelswlqod.top/all/login.php?idsmt=10123005600&nextfunck=10130550000	Get hash	malicious	Unknown	Browse

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	http://ranchpools.com	Get hash	malicious	Unknown	Browse	40.68.123.157 23.33.136.127
	http://t.cm.morganstanley.com/r/?id=h1b92d14%2C134cc33c%2C1356be32&p1=www.saiengroup.com%2Fteaz%2F648c482b60b3906833c9304bab170add%2FJBVNhz%2FYW15LmNoZW5AZG91YmxlbGluZS5jb20=	Get hash	malicious	HTMLPhisher	Browse	40.68.123.157 23.33.136.127
	https://windowdefalerts-error0x21906-alert-virus-detected.pages.dev/	Get hash	malicious	TechSupportScam	Browse	40.68.123.157 23.33.136.127
	https://windowdefalerts-error0x21903-alert-virus-detected.pages.dev/	Get hash	malicious	TechSupportScam	Browse	40.68.123.157 23.33.136.127
	https://windowdefalerts-error0x21905-alert-virus-detected.pages.dev/	Get hash	malicious	TechSupportScam	Browse	40.68.123.157 23.33.136.127
	https://windowdefalerts-error0x21908-alert-virus-detected.pages.dev/	Get hash	malicious	TechSupportScam	Browse	40.68.123.157 23.33.136.127
	https://windowdefalerts-error0x21904-alert-virus-detected.pages.dev/	Get hash	malicious	TechSupportScam	Browse	40.68.123.157 23.33.136.127
	https://windowdefalerts-error0x21902-alert-virus-detected.pages.dev/	Get hash	malicious	TechSupportScam	Browse	40.68.123.157 23.33.136.127
	https://www.applelswlqod.top/all/login.php?idsmt=10123005600&nextfunck=10130550000	Get hash	malicious	Unknown	Browse	40.68.123.157 23.33.136.127
	https://groun-93ed.ehajdranrsuw.workers.dev/	Get hash	malicious	HTMLPhisher	Browse	40.68.123.157 23.33.136.127

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 00:08:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.988872157360713
Encrypted:	false
SSDEEP:	48:8ixxdoTMEZHqidAKZdA1FehwiZUklqehXy+3:8P/2oy
MD5:	73B7A6172364303727DA6610F778D43F
SHA1:	E2E4BDA8E2413C234B2E1F6EBC5D2AD08C4B586A
SHA-256:	8B09252414C766273FB19ED9407EAE43280DC325AB949376B98BDD23D97B0B4B
SHA-512:	F1503BB31406AECB0321A0A9C6CEDEA768338705EFAEC7B8AA04FB36B10A666B2D0E5ADFE8D4C1E410E5BAB0CF2D877CE2BBFBACF5ADF14871A4DBA572193B04
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....fy.,...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........7.Y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 00:08:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	4.004323706921167
Encrypted:	false
SSDEEP:	48:8AdoTMEZHqidAKZdA1seh/iZUkAQkqehYy+2:8n/Q9QNy
MD5:	372C87CBE741952149F057DCCFC23CCE
SHA1:	D069BF9598C88253A18E9F072EAB50F1F1C43CE0
SHA-256:	56B2BDB6C52B20065744842226EEE76408CE3779310302C767301FF65B7374E5
SHA-512:	1E716A78A99F8A4A57336594CD5C39EA54FBCA1629928B5CCFDE2651AE129B6B65E377B6D9E0C50B08E041A88A0632D1164EDE32812614058FB04C0792FF4EEE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....K.k.,...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........7.Y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	4.010845756489636
Encrypted:	false
SSDEEP:	48:8tdoTMEAHqidAKZdA14meh7sFiZUkmgqeh7sWy+BX:8I/Pn8y
MD5:	0A1E2B8C7997D4E99BEE6B24C8617229
SHA1:	1F6ADCDE47CD2D5DFD6ACA1067189F9035D21DF7
SHA-256:	520065E31A986625974A2B77B100DF22E304FAB0C4DC5C4C516A74162739DA18
SHA-512:	A23616FE32B323E871A654BBAF03972EDC81FFC5CFFDBA7F3305C0C653968EC83BFA4E4E15420E23BFD014701DF9F9563250C1BA6146FB276034C8B5FA598B72
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y.04...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFW.E...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........7.Y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 00:08:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	4.002447047609219
Encrypted:	false
SSDEEP:	48:8YdoTMEZHqidAKZdA1TehDiZUkwqehky+R:8f/Ley
MD5:	514809EAB202FEBC73990284642A54FF
SHA1:	F707B1A7FF22816E7472F3253D43A200EA34966B
SHA-256:	3EBAB09377A311D319DBA21789D29FCADB8594CC85A6A3B698784CEF67FDCF37
SHA-512:	38E2362B94CC67FBB26108D424655E0EBE8E31DA5007A1E3FDE350A6D94BE726C9F12F2B0746F7672220E7D8C43640BC565D9CDE007845C83EE2006217D14939
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......f.,...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........7.Y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 00:08:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9921751992888224
Encrypted:	false
SSDEEP:	48:8Xn1doTMEZHqidAKZdA1dehBiZUk1W1qeh6y+C:8A/r9ay
MD5:	BE187A1410B2E4C01A126B22D5A42032
SHA1:	0139A08059F230B59DF000E7B7D9B9EBD4393940
SHA-256:	13DF753E3DEEEA0678C5A848B640C3CA3A23976C5A51CAC3AEBAF59D64B8FD34
SHA-512:	385AC1520234703A79ED9C3ACBF29215DA91F15C5F96539C5B27EC179B766EEEC30D5E6F0E78270048E1FF26F882ABF61423BCD37B5F192F985DC5E1009AFCF4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......r.,...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........7.Y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 00:08:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.003015524639282
Encrypted:	false
SSDEEP:	48:8GdoTMEZHqidAKZdA1duTeehOuTbbiZUk5OjqehOuTb8y+yT+:8x/vTfTbxWOvTb8y7T
MD5:	20E8DB0F939E90A25D1A5C7DCB9085E4
SHA1:	C1BA111885F05BC05FB8901A96331D0ADBF646B5
SHA-256:	FA174EE0B2E2914F88FFF454E0371F0CAA1B2560A7F64FC7B2E5C62C0F358CA9
SHA-512:	5B9BBC11DD73B0668BBF290EBEFD7507D32EB3B7B10E80312E8E0806B22136EFAAA75795791DA9F50CBE5AD7058076BD0496099EB83B3757AED4AD29D0FC52A7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......Y.,...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........7.Y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1746)
Category:	downloaded
Size (bytes):	1754
Entropy (8bit):	5.8330970138553795
Encrypted:	false
SSDEEP:	48:e/YDuKlgkP83/6a1ZUu/9kljsOKFpI4CjuuVF5WmfffQfQV+:e/UlKSAj/9+jEFpl4fffQfQw
MD5:	26F817E35C61AFA7C80943616ACDC9C1
SHA1:	EC4B414F8CEE040868FE6EB8FA1F4A9800875553
SHA-256:	262AB5D511A3CBF70EB6403FFEACC76E2CCEE184B33718A37117E25E471FE3A7
SHA-512:	7F348399493A78F2ACC89B4C8AB793E6779FAFDC12233A92DDDE13C6ABE8AEB03754E04145FADE87827BE434AF7866B0F2969E94E4C2B5F4F4384239BBAB59ED
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=visu&oit=1&cp=4&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["visu",["visual","visual studio","visual studio code","visual comfort","visual edge it","visual timer","visual studio code download","visual studio 2022","visual comfort lighting","visual studio download"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":[{"ansa":{"l":[{"il":{"at":{"t":"\u2022 /.viZH(.)w.l/","tt":20},"t":[{"t":"visu\u003cb\u003eal\u003c\/b\u003e","tt":8}]}},{"il":{"t":[{"ln":3,"t":"relating to seeing or sight.","tt":20}]}}]},"ansb":"1","ansc":"1713382000710"},{},{},{},{"google:entityinfo":"CgwvZy8xMjYyanNfM3gSRUNvbXB1dGVyIHN1cHBvcnQgYW5kIHNlcnZpY2VzIMK3IDc1ODUgQSBFIEJlYXR5IERyICMxMDEsIEJhcnRsZXR0LCBUTjJfaHR0cHM6Ly9saDUuZ29vZ2xldXNlcmNvbnRlbnQuY29tL3AvQUYxUWlwUFdqMzFLYXd1RVdoY1NQRW9HMTBWakw3cHVfLXQ1aHk3NlpycEE9dzkyLWg5Mi1uLWstbm86L1Zpc3VhbCBFZGdlIElUIFRlbm5lc3NlZSB8IEJhcnRsZXR0IHwgWE1DLCBJbmMuUnFnc19zc3A9ZUp6ajR0RlAxemMwTWpQS0tvNDNyakJndEZJMXFMQ3dNRS16VExFd1RreE9ORWd5TURHMU1xZ3dOVGF3TURWSVRFazJOREZMU1ROTjg

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (713)
Category:	downloaded
Size (bytes):	718
Entropy (8bit):	5.03283146231624
Encrypted:	false
SSDEEP:	12:u88WndxknFW1fXUPLR6KX3QmRBHsrriFuKnF7kwuLvuw4/Xffffff0wzi:AWxXUPl6KX3XRBHsrguKnF7FKvPmXffE
MD5:	959B5050D6E963DBAE837BB4D2EE6D4E
SHA1:	1AD47C747FCE5BEB1708A40FF697FA14D9770098
SHA-256:	DF465F26FB897D45D59B656CCE03EACDFBDEECB0F7C740C2A789C878BB997D09
SHA-512:	0691B8E814B51A2803BBC83C2A73097B3DCEA64CB793D6A6E677A7D8CD8A1812E336DA6A3427B1D58D9BE3B9941FE5F6443BAA0583D85B5B410A9159CB8B2280
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=visurtot&oit=1&cp=8&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["visurtot",["virustotal","https://www.virustotal.com/","virustotal scan","virustotal api","virustotal alternative","virustotal api key","virustotal reddit","virustotal url","virustotal pricing","virustotal enterprise"],["","VirusTotal - Free Online Virus, Malware and URL Scanner","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"phi":0,"pre":0,"tlw":false},"google:suggestrelevance":[602,601,600,556,555,554,553,552,551,550],"google:suggestsubtypes":[[512,10,433,131],[],[512,10,433,131],[512,10,433],[512,10],[512,10],[512,10],[512,10],[512,10],[512,10]],"google:suggesttype":["QUERY","NAVIGATION","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"],"google:verbatimrelevance":1001}]

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1823)
Category:	downloaded
Size (bytes):	1828
Entropy (8bit):	5.892043429281862
Encrypted:	false
SSDEEP:	48:mKlgRhx9kmJCFzuk8hJ1JQ8We9kmxEZMSWuGmwuvYFCHQfQffYuV:dlwx9zIF0J128We9z29LlQfQffbV
MD5:	F62B9FE1719FB2641D770470BEB6661E
SHA1:	90A3FFAEF98567CF5569771DBAD268854841153A
SHA-256:	86FF9C2B30E53B25B01400C2614255BBB5CED4A5920CD1429B42958EE27D0157
SHA-512:	3E0A12FACF4F42C0D93FF96055F5C10B30298B8E1D54A35C005960D16E8A46403EA13B7467476FE526EB5B11D2B932C2ACB1C403F9842A3B15C5E626EB883002
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=visur&oit=1&cp=5&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["visur",["visur","visure","visure","visura","visceral","visura technologies","visura camerale","visura catastale","visuref 150","viscera"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":[{"google:entityinfo":"Cg0vZy8xMWgwY2R5dmc4EidTb2Z0d2FyZSBjb21wYW55IMK3IENhbGdhcnksIEFCLCBDYW5hZGE6BVZJU1VSUmZnc19zc3A9ZUp6ajR0VlAxemMwekRCSVRxa3NTN2N3WUxSU05hZ3dOVFkzTkVzek1rb3pNVWhLVEVveXR6S29TRFF5VEV0S05FZzFOREV6TlRBMk1fSmlMY3NzTGkwQ0FBNlJFVU1wGQ\u003d\u003d"},{},{"google:entityinfo":"CgwvZy8xMV9xYnE3MTISJVNvZnR3YXJlIGNvbXBhbnkgwrcgU2FuIEZyYW5jaXNjbywgQ0E6FlZpc3VyZSBTb2x1dGlvbnMsIEluYy5SY2dzX3NzcD1lSnpqNHRGUDF6YzBqQzlNS2pRM05ESmd0RkkxcUxBd3NEQzFNREF6TXJJMHRiQTBOYkMwTXFnd3RiUklOa28xTTBneVQwMDJCOUplYkdXWnhhVkZxUURaOFJCQXAZ"},{},{},{"google:entityinfo":"Cg0vZy8xMWdrNzlfajJiEgdDb21wYW55MmRodHRwczovL2VuY3J5cHRlZC10Ym4wLmdzdGF0aWMuY29tL2ltYWdlcz9xPXRibjpBTmQ5R2NRYmc2a0xQTGhKQ2RLeFQzMTQ0N3ZwbHhiYVhTLVFMcHRja1FjaGVaZyZzPTEwOhlWaXN1cmEgVGVjaG5vbG

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3573)
Category:	downloaded
Size (bytes):	3578
Entropy (8bit):	5.835209160937865
Encrypted:	false
SSDEEP:	96:CRr2lif7Fd66666r3pmhG47lDsxH4+DhD/k5R3NMfffQfo:C9M87Fd66666r3plosxJDirde
MD5:	009F87CA874C63F201BA20E265884C43
SHA1:	10404D6674F833052726F2B69D98571D24F12926
SHA-256:	A521F9FAEDEDF7C6EC8FAB24FC024036C3C858FF47EA30F181ED1DCFD33C5CE8
SHA-512:	EF45F39FE50CAE69919DA91A7F47229AA5D3EEA20555CBE70290E71407B677562D2AC110D63E8F6FFDE85ADF4655B98743CB258B880A397CCB66A2BFB51F3536
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["goldman sachs bitcoin halving","apple iphone 16","weather storms tornadoes","cleveland browns new helmet","quentin tarantino the movie critic","chevy silverado fox factory","detroit lions uniforms","nyt crossword clues"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"google:entityinfo":"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

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	high, very likely benign file
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	downloaded
Size (bytes):	36811
Entropy (8bit):	7.974414516061467
Encrypted:	false
SSDEEP:	768:e4ALDmXUbRPeEpdJp0wtuNnCQcaBLLkvHUXvpg1JtJH:ehDXpppvp0wtuVCQcaBL+HyRgZF
MD5:	E543BFA85F9B2A4E6D65987E6A3E304E
SHA1:	763FCFA3D9F13C9025CFAD2C179C05613319C864
SHA-256:	16FE4B6D8B80ADFFC8A833943D5E38AC14C7842554730CAEB015309C4C59806E
SHA-512:	CD5BE2749E3FA9926C1148E8A3944265FC06E37E31A2C19CCD8E9477903C7A6BB4A3AAF5A5C95C03AD465924184B378208E1D3D2AAAAD0C48781B479EF630944
Malicious:	false
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA7h1gq_qS7al9HO7PQpzGTS5JWeX2FsfH159FjvTdvn_zUmpWU8JVsvm7trvqlPZ5_YAo-57ycQzgvbKn81Fot6-oIbceP5fjtRi2ZywiuvEXdVQJyV1I7MaV9pKPWF5fyGEszk2-PYs-dy74nFG0dBCsG9C4iuZVDbahfIj7unSSccRNQyV5eBz7q1hBqAgrSBfG_q&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=2
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...R..FKa...;L...w.9.g_.k.q..!u^...]......~...%1.'+.t.^.,P./.....^...<.<.....Xj..vio\|...5.V.lj.....I....*{.......'.dY.y...q..5P.ysM....k.Q4S..{....%H.c...VT.K,..a....S...up6....A.....V....N4..:...W_Xm..4!...s..-......S..I..j...]..G3.......ll.....N03.mA..6...+..9.6;.........m...-....,.v..k...y...~Z.N...w..h.....u.[.Q...u..\..3....;E.D..j.;$..C..R.q.;+..c

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17696)
Category:	downloaded
Size (bytes):	18291
Entropy (8bit):	5.675040290596522
Encrypted:	false
SSDEEP:	384:A10ZNodN7X9fo6Gfx+VfvBZbIPGIu/9xJMD5RjTORps0E30cIMW4XdiGZ0ZeaeoR:A10ZY7XNo6Gfx+dvBZkPGt/97K5lTORP
MD5:	8D120D4D5CB207E52720218A143FEF17
SHA1:	DAE68D4F786BDA08FE39D89AB6F3366B1199CB8B
SHA-256:	AC88D994CF1935F39E5504E88EDB7938FB98F589C4D02013F36B46D15F98517D
SHA-512:	4611F40996ABD45761C5D56FD3EE000A3733ED872C6CFA89E112E32104E328AF632B0330C20E125E248F6D5718116D848A1D0CA28F01626CEDE564610319D629
Malicious:	false
URL:	https://www.google.com/js/bg/rIjZlM8ZNfOeVQTojtt5OPuY9YnE0CAT82tG0V-YUX0.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var a=this\|\|self,K=function(z,w){if(!(w=(z=null,a.trustedTypes),w)\|\|!w.createPolicy)return z;try{z=w.createPolicy("bg",{createHTML:m,createScript:m,createScriptURL:m})}catch(F){a.console&&a.console.error(F.message)}return z},m=function(z){return z};(0,eval)(function(z,w){return(w=K())&&1===z.eval(w.createScript("1"))?function(F){return w.createScript(F)}:function(F){return""+F}}(a)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var is=function(z,w){((w.push(z[0]<<24\|z[1]<<16\|z[2]<<8\|z[3]),w).push(z[4]<<24\|z[5]<<16\|z[6]<<8\|z[7]),w).push(z[8]<<24\|z[9]<<16\|z[10]<<8\|z[11])},zc=function(z,w){return z[w]<<24\|z[(w\|0)+1]<<16\|z[(w\|0)+2]<<8\|z[(w\|0)+3]},Fk=function(z,w,a,m,q){(((m=(a=(m=B((w&=(q=w&4,3),z)),B(z)),G)(z,m),q)&&(m=wk(""+m)),w)&&e(a,U(m.length,2),z),e)(a,m,z)},Q=function(z,w,a,m,q,M){if(!w.SQ&&(q=void 0,a&&a[0]===H&&(q=a[2]

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (715)
Category:	downloaded
Size (bytes):	720
Entropy (8bit):	5.033984224806859
Encrypted:	false
SSDEEP:	12:u88jdxknFW1fXUPLR6KX3QmRBHsrriFuKnF7kwuLvuw4/Xffffff0wzyV:ZWxXUPl6KX3XRBHsrguKnF7FKvPmXffK
MD5:	607473BD720BBE5A7CE1C437CC9F87C4
SHA1:	C115301F45EA3836845400F384478340820EFC11
SHA-256:	8733E3FFD30DD0EF881F0D5CC85AE97A005D84C296AFBE310AA169C34D296C9F
SHA-512:	626A280320C2D000E8B610C77AF37B2CA417D4B719879E402E01D4EC2CEAC32519EA82AA7FE1658FCA2E4F0732A04ED61D8138F9A1515C082FBCF269F0B2860E
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=visurtotal&oit=1&cp=10&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["visurtotal",["virustotal","https://www.virustotal.com/","virustotal scan","virustotal api","virustotal alternative","virustotal api key","virustotal reddit","virustotal url","virustotal pricing","virustotal enterprise"],["","VirusTotal - Free Online Virus, Malware and URL Scanner","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"phi":0,"pre":0,"tlw":false},"google:suggestrelevance":[602,601,600,556,555,554,553,552,551,550],"google:suggestsubtypes":[[512,10,433,131],[],[512,10,433,131],[512,10,433],[512,10],[512,10],[512,10],[512,10],[512,10],[512,10]],"google:suggesttype":["QUERY","NAVIGATION","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"],"google:verbatimrelevance":1300}]

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x46, components 3
Category:	downloaded
Size (bytes):	1026
Entropy (8bit):	7.300770270722343
Encrypted:	false
SSDEEP:	24:rQIr8Cuniq3aV294WauSbMB5ZASGDW5dHpNTKb9P3:rlr8CaaVtRMB5Z6W5zhC9P3
MD5:	E3E369D8BF251B9E85EB6962725623FC
SHA1:	AFDBB219D17BBF8729356AB50B17656C2EDF2E0B
SHA-256:	7C1151C995D7C13B95E429B2A8D707A9D8D7ADC834A0B8DB1A1AE5AF70348F12
SHA-512:	F84E5F9C073E66DE9846BB99273F5091DCD6A4D644B4E998034677FC75DB78BCDFB80C70AA5A62E26CC7DF841F61029661AC55023019DFD8DE569D7B1FC55CD8
Malicious:	false
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcRpcN46SslnmLZM3ipA6lGdZ97_K5HcmfyOdA0Kvsw&s=10
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777........@.."........................................0.........................!.1AQ..a.#q...."$2..........................................................A!1a"............?...E.B......iIn.qm..2.R..w.N=i..i.....b.q...RN>...Yb.][.&...U..<........v.Qk.......R..[a.P.c\[}......H.R..=qO.t.D.Ib}....A.mD.....Fw......1 ..[J..jp`..9.GD.{.....(..!.q.$.b}..R._v.H..A....L..1.+.!XHJA...U.].j...4.R...G...=...;....O..`.h._g..i.$.^Z...+..{....]6x.a.C...P..a......h.\II.e...RV5..;...V..WD..u.....Q[....%.Y.H.p.\|.y..$MR..(..2z....y.77.......#\|........Y..2..A#.I.md.).1%.:{#+..`..@9<.....F.C.s..RCn-..........m\a6].^...Q.g.#....j..w./...L-....@p..{z.\|9..R.z.=Jb6.......[g.d)......!.n1m..y........5.r7..<.'.q7..4..S.$.%.U....I#~.7=....\...N.<....}@....0.. .......,.n..^.c._-.... x.`.....zcS..6....[B..N....p..nL7.[.

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/api2/info_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	dropped
Size (bytes):	43921
Entropy (8bit):	7.973699720806626
Encrypted:	false
SSDEEP:	768:ePSUDd/bkFPnlQO5UJnZno/T621qgNKtAPLX2XjU3b9aC3Bp8X:eaU5QJlT5gnq/TXgKKthXyb9aC3IX
MD5:	59DAED8CE34AE84BBB37E34FEE6744F9
SHA1:	65FB3C89AC48F0C11513549E0AA83529F830FA54
SHA-256:	3E8E1A4AB682C14FA77BB67BF69BAACCEAE328E271985B37CCDF778A655A5F5F
SHA-512:	C812DA99EF6A8B8DF74753B0AEE74229F78190F3ED98D8FCAD3308C5B5A595F278D56F45E3F7DDF2F911E89398A9D25DFB770F2A45AD77ECAB75A2D8335E448D
Malicious:	false
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..Fky.l......>.J.v..-.E_.....h..C......X.\|..@...&...r.q]..xPc...B."U.'..q^......s..e..l.n.F[....Z.L.*.H....4......%.C.)...}......6.}.^......R.y......i.ws........+..5PC(.......+...LIP..M...S..FII.A..w..W.PR.T....\|+.]...l.........E.h..T.q.{.inEIic...^...`.....]N$o..z..?..Z....rskd.....Rh.e........Z<..3.p/......._.b...GY...{y...r.1. {Ve.._...?......7.

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 24, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	600
Entropy (8bit):	7.480401293211319
Encrypted:	false
SSDEEP:	12:6v/7MjQXluD9JwnUhVPiqHIcIWMk6p5L4lOxikYOwiYXd8EO:PQXID7wOVPiXcjZCh4lXkYOlUSb
MD5:	30384AF8EC55AECA75A952F126B0513F
SHA1:	1E57420057B56805BF8560D952F6B83215234E8C
SHA-256:	84341DE3D1654D696A0D83BD57C6883A526B5C555755BE372062AA031D7449C3
SHA-512:	0A39C1A939A65327B20F4F255C769D635686B91005C7163FDCE0B4628ABE807910F99439086CE2A3A8CF9BCDE25E11BDA99423C12DEC53105A58708F4FC648D4
Malicious:	false
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcSLKeE5-4Ujd1PotFcLjJaRMU5UqyvRkryylSeWp00&s=10
Preview:	.PNG........IHDR...@.........}j.v....PLTE...%/`O.........#Z.)]..N...IPwi..QX\|w\|....Z`.E...............AIr...................I...9.......U{......Pci....ns...../7f..R...9Am..S..7..Z........IDAT8...r.0.... ..%.....M./....o.#.[.$..).O1...'(.\|.]....%..........4...i......e.E.Kp8.q..V.Aol.......!Yk.: d%.....z.< ....~..p7......Gxg.-z. ..........n...48\..V....e.....j....~.w..f'.........H.@...[^.3...........)..-'.I..y.R....K..3x.%&T.%.3gdh.E~h.4..-.F...i.2u!..e....0...s..t..I...E}....b,..Jf.mH...B.)"[.Z....`..q2.....)..V0.o..%.....24Z..%z.....j.#4..I..Y.../............IEND.B`.

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1222), with no line terminators
Category:	downloaded
Size (bytes):	1222
Entropy (8bit):	5.812687833352702
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCLTLv138EgFB5vtTGJTlWtB31ngirLOGsLqo40RWUnYN:VKEctKonR3evtTA8/1/OXLrwUnG
MD5:	3F1B1790C083261F6FD3CF02FB56F2F8
SHA1:	BF1B289456E260CF5C5F0AF7C1B0F4E9BA7EB97B
SHA-256:	A58FF2DE4D6A14E055A553E83A4E67AEA6AAF589A57364305EEC36105CCE9EF3
SHA-512:	99D52B4D79A3B36CDAF0640C37FA504518DAF3C23A2FEAAE6A4966633D5407F1941F726741BE59E25A6726698614D202033BC6BD3D34DD2A352789088C54F0DE
Malicious:	false
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-eZG8e4nRp0gEpRB75JBNzhS0vVseDRBVprGQYHJN

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	dropped
Size (bytes):	44791
Entropy (8bit):	7.976665908801533
Encrypted:	false
SSDEEP:	768:efDgQAD+SL2bpcLjXg/c4sZ4w5j9nisgSFvtSCi6YsOfFDYgXSaEB7:efcQC+SLACyc4sJpnisl1SlsSJjihB7
MD5:	93C5571F90DF228377B40ACAA21E9443
SHA1:	C8A97E14F7D76A8E214BB011F9077F4D5053EA84
SHA-256:	43C0EB946F71B86EB55BAC9B1D7731CE1A3E31DCA5E1C9B120F01E7C52BC12A8
SHA-512:	1405FF0BDFA4438B7C7121D101088F2CEC437D885ABF712B5C2A7C2C59AD2803836858D7AB39427F7D6990E26898A9BD9B17A931CD2568D53895471C00D51022
Malicious:	false
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....`..CO.....R..q)...(.&^....b..Vr...M...T.!.W.SK...z..(....l.pO...8 ....oh.........J.`.g...b.....Z.q#.Rg=............%..7Ry.[....n......h.:QCR...:..`.QGz.\f..I...%..M..SI.4.(.J#%..@.u....)..rh.Z..=i.r..-..HH......Q..z...(,+(]...q..jn....e-._>@z.....i.VY.q.......j..;.c\..+%...\....k.Q5...P.=M.<...\.n.7$....H.i.REn.r.....\.y=j.-....u....;.n..z..4.9..

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3010)
Category:	downloaded
Size (bytes):	3015
Entropy (8bit):	5.919651802632784
Encrypted:	false
SSDEEP:	48:pK8KzKlgTF+OjGayWyYHV1v7+F+xr36/17fGd32fgj9km3XPV3H9kmVNTPF6+9kg:oJ+l0Vy4xD6ZfB4j9z3fV39z4+9mL2Pb
MD5:	1EA87FDCA5BCBB2197B3B71D9F5D2E01
SHA1:	833FF4CBA5694F909513CC430555083B823A2002
SHA-256:	55146702ADD669DEB3B78BD966C308812AABA4C7863A1651528AFB25D2CD6817
SHA-512:	07F1CC47B0303E19E66E7458C8FBA78A2919CA6EB766A2F4D66821E7A2188D6BF05365C77229A3B840424276B415F01EB08B2333B13B02F458250F4E873CE757
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=vi&oit=1&cp=2&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["vi",["vistaprint","vistaprint","victoria secret","vimeo","visionworks","virtual arkansas","victor wembanyama","virgin voyages","vitamin shoppe","vivint"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":[{},{"google:entityinfo":"CgovbS8wM21ndnNqEh1DaW1wcmVzcyDigJQgUHJpbnRpbmcgY29tcGFueTJkaHR0cHM6Ly9lbmNyeXB0ZWQtdGJuMC5nc3RhdGljLmNvbS9pbWFnZXM/cT10Ym46QU5kOUdjVG5QLVp3OFprMklfd2g4NGgwTzFYT1l4M2JVMzZld01nc0JqczdRV1Emcz0xMDoKdmlzdGFwcmludEoHIzJmNDg3NVI6Z3Nfc3NwPWVKemo0dExQMVRjd3prMHZLODVTWURSZ2RHRHc0aXJMTEM1SkxDakt6Q3NCQUhNYUNLUXAX"},{"google:entityinfo":"CgkvbS8wMnB2am4SEExpbmdlcmllIGNvbXBhbnkydGh0dHBzOi8vZW5jcnlwdGVkLXRibjAuZ3N0YXRpYy5jb20vaW1hZ2VzP3E9dGJuOkFOZDlHY1M1cDI1em5SYTZ2MExtX3dGNUgyNFhzZEFGTzZyNTZOQlhqYXlTVHd0N0NQU19VV2VfYTZDdUFfSSZzPTEwOhFWaWN0b3JpYSdzIFNlY3JldEoHIzQyNDI0MlI/Z3Nfc3NwPWVKemo0dFRQMVRjd0tpakx5bE5nTkdCMFlQRGlMOHRNTHNrdnlreFVLRTVOTGtvdEFRQ1U0Z254cBc\u003d"},{},{"google:entityinfo":"CgovbS8wOW02ajg1EhRSZX

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	downloaded
Size (bytes):	43921
Entropy (8bit):	7.973699720806626
Encrypted:	false
SSDEEP:	768:ePSUDd/bkFPnlQO5UJnZno/T621qgNKtAPLX2XjU3b9aC3Bp8X:eaU5QJlT5gnq/TXgKKthXyb9aC3IX
MD5:	59DAED8CE34AE84BBB37E34FEE6744F9
SHA1:	65FB3C89AC48F0C11513549E0AA83529F830FA54
SHA-256:	3E8E1A4AB682C14FA77BB67BF69BAACCEAE328E271985B37CCDF778A655A5F5F
SHA-512:	C812DA99EF6A8B8DF74753B0AEE74229F78190F3ED98D8FCAD3308C5B5A595F278D56F45E3F7DDF2F911E89398A9D25DFB770F2A45AD77ECAB75A2D8335E448D
Malicious:	false
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA7h1gq_qS7al9HO7PQpzGTS5JWeX2FsfH159FjvTdvn_zUmpWU8JVsvm7trvqlPZ5_YAo-57ycQzgvbKn81Fot6-oIbceP5fjtRi2ZywiuvEXdVQJyV1I7MaV9pKPWF5fyGEszk2-PYs-dy74nFG0dBCsG9C4iuZVDbahfIj7unSSccRNQyV5eBz7q1hBqAgrSBfG_q&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..Fky.l......>.J.v..-.E_.....h..C......X.\|..@...&...r.q]..xPc...B."U.'..q^......s..e..l.n.F[....Z.L.*.H....4......%.C.)...}......6.}.^......R.y......i.ws........+..5PC(.......+...LIP..M...S..FII.A..w..W.PR.T....\|+.]...l.........E.h..T.q.{.inEIic...^...`.....]N$o..z..?..Z....rskd.....Rh.e........Z<..3.p/......._.b...GY...{y...r.1. {Ve.._...?......7.

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	downloaded
Size (bytes):	44791
Entropy (8bit):	7.976665908801533
Encrypted:	false
SSDEEP:	768:efDgQAD+SL2bpcLjXg/c4sZ4w5j9nisgSFvtSCi6YsOfFDYgXSaEB7:efcQC+SLACyc4sJpnisl1SlsSJjihB7
MD5:	93C5571F90DF228377B40ACAA21E9443
SHA1:	C8A97E14F7D76A8E214BB011F9077F4D5053EA84
SHA-256:	43C0EB946F71B86EB55BAC9B1D7731CE1A3E31DCA5E1C9B120F01E7C52BC12A8
SHA-512:	1405FF0BDFA4438B7C7121D101088F2CEC437D885ABF712B5C2A7C2C59AD2803836858D7AB39427F7D6990E26898A9BD9B17A931CD2568D53895471C00D51022
Malicious:	false
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA7yxEwJrTQzKFdvzKXBPyepU7lkUD6FHF_xaRg9MITh_oBGwJBlnrTky_tJUTuRePPmh9rA1h38UdFZMrfj0veWAhi-6avQdfso_JuqEei9G1OBX8K271KlGTtCIxsfd5i-to_bzQRZa4agIbvfNy8oOaERLvakWtpQI_wIkaJLEVAOh_WWRq5gROK9kU9nKkvq62Ju&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=2
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....`..CO.....R..q)...(.&^....b..Vr...M...T.!.W.SK...z..(....l.pO...8 ....oh.........J.`.g...b.....Z.q#.Rg=............%..7Ry.[....n......h.:QCR...:..`.QGz.\f..I...%..M..SI.4.(.J#%..@.u....)..rh.Z..=i.r..-..HH......Q..z...(,+(]...q..jn....e-._>@z.....i.VY.q.......j..;.c\..+%...\....k.Q5...P.=M.<...\.n.7$....H.i.REn.r.....\.y=j.-....u....;.n..z..4.9..

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	dropped
Size (bytes):	36811
Entropy (8bit):	7.974414516061467
Encrypted:	false
SSDEEP:	768:e4ALDmXUbRPeEpdJp0wtuNnCQcaBLLkvHUXvpg1JtJH:ehDXpppvp0wtuVCQcaBL+HyRgZF
MD5:	E543BFA85F9B2A4E6D65987E6A3E304E
SHA1:	763FCFA3D9F13C9025CFAD2C179C05613319C864
SHA-256:	16FE4B6D8B80ADFFC8A833943D5E38AC14C7842554730CAEB015309C4C59806E
SHA-512:	CD5BE2749E3FA9926C1148E8A3944265FC06E37E31A2C19CCD8E9477903C7A6BB4A3AAF5A5C95C03AD465924184B378208E1D3D2AAAAD0C48781B479EF630944
Malicious:	false
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...R..FKa...;L...w.9.g_.k.q..!u^...]......~...%1.'+.t.^.,P./.....^...<.<.....Xj..vio\|...5.V.lj.....I....*{.......'.dY.y...q..5P.ysM....k.Q4S..{....%H.c...VT.K,..a....S...up6....A.....V....N4..:...W_Xm..4!...s..-......S..I..j...]..G3.......ll.....N03.mA..6...+..9.6;.........m...-....,.v..k...y...~Z.N...w..h.....u.[.Q...u..\..3....;E.D..j.;$..C..R.q.;+..c

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (712)
Category:	downloaded
Size (bytes):	717
Entropy (8bit):	5.035899585734127
Encrypted:	false
SSDEEP:	12:u880dxknFW1fXUPLR6KX3QmRBHsrriFuKnF7kwuLvuw4/Xffffff0wzyV:QWxXUPl6KX3XRBHsrguKnF7FKvPmXffK
MD5:	BE23AE3BA7521C265CBFB6FF2158F35D
SHA1:	9ED5F71E670AB97796818660D9DAB09AEAEF04A8
SHA-256:	001FF0864942225C2311C72BC5ED635B85BC11185FD878332CBD22A3FCB95EC9
SHA-512:	E98A9774BA33017BC7E8FB112C081871200D82E5F236373DDD4E1C2C0FB8DB75F980DAD4C81F4B73489B14C2D9016A78BF9AB5E23BFFCEA419649BC3C21F6834
Malicious:	false
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=visurto&oit=1&cp=7&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["visurto",["virustotal","https://www.virustotal.com/","virustotal scan","virustotal api","virustotal alternative","virustotal api key","virustotal reddit","virustotal url","virustotal pricing","virustotal enterprise"],["","VirusTotal - Free Online Virus, Malware and URL Scanner","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"phi":0,"pre":0,"tlw":false},"google:suggestrelevance":[602,601,600,556,555,554,553,552,551,550],"google:suggestsubtypes":[[512,10,433,131],[],[512,10,433,131],[512,10,433],[512,10],[512,10],[512,10],[512,10],[512,10],[512,10]],"google:suggesttype":["QUERY","NAVIGATION","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY","QUERY"],"google:verbatimrelevance":1300}]

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/api2/refresh_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.87377555746297
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKeHZQx66FTEVgWaee:PLKdXNQKOyo6FIVgL
MD5:	701C50FE2F9D8CFCA61542DEE7684552
SHA1:	952A04F81A291E11F5D4ECD7364A3840412BA65E
SHA-256:	9FC5DFC54DE18E9C98733BBEA6EBDCBC1F01C0B23F985556F24684EE96DC0582
SHA-512:	5CA3C342F4BE563EE68235F32BCB8B25B62215A961B903B3568C496FCAD4508B9408FBDE00C6592085A819826630462863630F888FE73348F13FC037A9AB2C99
Malicious:	false
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js');

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x64, components 3
Category:	downloaded
Size (bytes):	1633
Entropy (8bit):	7.648964852389526
Encrypted:	false
SSDEEP:	24:rQtSnm3X7FcZjYmVTe/AE3wUTAEt2IX5wyVLVgSD/MDosgcjjuOPRfVaj:rNIX7F2Y6oAGhf2I8STM06jjBd4j
MD5:	AFFB577ACE46CEC78D413A11A6DC5DB7
SHA1:	F559BB0AA44A08D0F1D4A58F6C79F8676322FBE9
SHA-256:	8E0524E1828C7F019DF3EA8E4AAD26D578A09275BCD4BBAFF7D791DD53E56A15
SHA-512:	91DA69A4274AAFC9141C807A6B39197762561C857452AB91F80593F7A7767445A45347A7D96D95CEAD3F3650C5EE78B82936C5BE162DB87AC9BDDD1D15DBDA8D
Malicious:	false
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcS5p25znRa6v0Lm_wF5H24XsdAFO6r56NBXjaySTwt7CPS_UWe_a6CuA_I&s=10
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......@.@.."........................................9.........................!..1A..."Qq..ab...2B.CR....#3r........................................................?.o....].......V..t.}qF6....0A.B.G..&..8J.A.f..l.......iBm.....)'......]{..e.H.4...@.....y...5=.N.%...VX...`. ..~Z..._........qQ.:.....@A...w....u..(+.1.....4..&R_2....)JUo;n......).U..u.2-..I..\|.Q7.o.#".C.N...2.H.Rq.....).IO.H.k........q..=!.%......U.....x.......$...T..>...>....v.....Z/....I..j...:8..J[.6..v.(...5.)<..$.:...1].......D.nKd..E.U..(...]u.3........e=..jp,..T.hW.$._E....n..s..y3.Kr3.:.0.oM.\|H..ksI........jj......p...c..W......k:....d.-...H.!./.o.6I.W7..:...B..*...W..uL.w...0..~.O#..W....Ei..55...s...?..<..Ziu...:6..X.M......4...r>m.e....L.!.C....$%.....6.I<..-.}l..... S...%=..5..S.M..pI....I!IP. ..y....]i..H..b:.p?...

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	238
Entropy (8bit):	5.184482755717443
Encrypted:	false
SSDEEP:	6:otqWtxbQLZVVi7GeqlAGmwbQLZVZYZ7qT:o7xbK95eqKVaKiM
MD5:	B54D0452E2FDB8C0D91C455D1C5495F9
SHA1:	DDD85730B9CB4CB9905B1D7E7643F595D2F33CB8
SHA-256:	F4138D99EC6E17514BB87CEEAD1C1D2A204219C970864FC85BFF00949EE18082
SHA-512:	6883DE3ABB2A7B71CBDE6EDA0854D5B9EC696A0656735843BBB6329007D758B502D2557CB36D5A1CEFC7B4D0AB5DCBC227C88DE9163662741C60F9D561F5A367
Malicious:	false
Preview:	<HTML>.<HEAD>.<TITLE>HTTP method GET is not supported by this URL</TITLE>.</HEAD>.<BODY BGCOLOR="#FFFFFF" TEXT="#000000">. GSE Default Error -->.<H1>HTTP method GET is not supported by this URL</H1>.<H2>Error 405</H2>.</BODY>.</HTML>.

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	downloaded
Size (bytes):	42539
Entropy (8bit):	7.973065760635484
Encrypted:	false
SSDEEP:	768:ebH+xCmzLM5o1obKA5RSoW4JWpp26pSZ/C81GV0uAjQFXxJ0BXZUy:ebHN9vaoWKQ74dC81G+utXxJ0pWy
MD5:	74515F51F9828A63BEF48F33D9F3C7E6
SHA1:	5AD7AAE1AC9BF14E795FBAFDE6B7DFD6862AB744
SHA-256:	2A2B427714C12086B9AB9ACB0E6054356AE6023E4C7038F227FB4408F33EDBAB
SHA-512:	44C308805DFFB1B6ACDEA4E4974E88FE1DCBC0882855C9A66E97BA043DC2E105AD85B45F930BB73F32A4ABAD679523D16D33A056F9B62C831D24603B561132F4
Malicious:	false
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA7PcvxEYFJucuS82ElQVhj9hNdQMnoOrcf94c85gf0b7M2K9weu7o2GvjbBCx_A22Kkd8cDW84vB5kaPQz0WBRySb_QbFJJqxd4YA-TUzxAK18LWuaf6TZ8-o1hukGdqWZGtNRUmwZW6JZOCbzk9avrwNXRmkck1E6a3ZSxeTvXiKF8T_79HJH0JBwqI5it1DjWIeUt&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...-%..$.R.......=...........V.-.>.\..[5..%...H.+...9'.8?....k...*..:T?.J..J.T.....>.3..}.p..o.....N......gS^9.k]6.......y!....w_...W....Y9.kJN..\|.....xn...Z}2.6.@gju?.fx...:.e...=.....)..<.9#.....2...WR..-..".Q....hS.&..eYiw....."y.2..sW.%8]..B7C.<...'k]."..'.....Wrf...o.)a.......W..1.#.....K..!...v...zV...5t.a..iJ...{..&w...N7H...jK...........4...g..

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x36, components 3
Category:	downloaded
Size (bytes):	1001
Entropy (8bit):	7.307129724283472
Encrypted:	false
SSDEEP:	24:rQYKjNCxGsbY6pJMloKVxjf4RHsFYPEriPuRYGQElUn:rizMXpqDnjfhFkE2yO
MD5:	FEA647178931A3EDCDAC07AB535EF1BF
SHA1:	805E30C9B50BB658291CD76239303EE54B859F40
SHA-256:	0FCD4E8EEFB85624257AFCD84F0470582536CE27A7381F6D68F061A0E6D54D9D
SHA-512:	716812908017EC2C2507A771D6BDA8F458E19FFD5737BBCF914532127EE541D481C378C58579A4BA50B1E15B0FFBBD580029C27536DE9A9335391277920E96AA
Malicious:	false
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcQbg6kLPLhJCdKxT31447vplxbaXS-QLptckQcheZg&s=10
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......$.@.."......................................2.........................!..1Q"Aq.#BRa.b.......2...............................!......................!1Q....A.............?...E...v.7l..FB....=.O..I.N.K..3..F..A.j..-Vv...2.W.?r*s......._..}.u..Q....O9.[......<..:......t......A....3..g.....I.....O..'=q.;%..(!_0.o..}.;.....x.4QE.)XQE-9}.....C.H..c.......v9.=...o.6.f......o.R.<I.p<..D.....D....7Fs..J.X.'...#.Uc..._J...Z....,%N+[....g.U........J..\bG.).#....$...H......QU.....]s~..\|....m.S&6........n.)d~....Z..V. BF..@J.r}Orz.-.k..h.....q.r7.ek..Eb.....K\g=.....Fy..j.r3.l;......p..)J....iz....O...Y...I..@H.I.YR.........v..8..........O@..dj^;j5....kOd[..s.....S.Z....^.#p\|G\|...-...K..o.1R[....:R=.u`. o.Q.sE...1....s.O.1p.n8.F.H.Y..cl."{..j......c:......N....\|...$.E!m.{.Q6.>.=.FR2.T..cY..X.\|.OTQD.A..

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15340, version 1.0
Category:	downloaded
Size (bytes):	15340
Entropy (8bit):	7.983406336508752
Encrypted:	false
SSDEEP:	384:F2gPJde0V2iGrQyD8b3k/tigCdeNqOUd47SH0tsGm:4gPVV2NQE8b3ldeNWH0Wb
MD5:	19B7A0ADFDD4F808B53AF7E2CE2AD4E5
SHA1:	81D5D4C7B5035AD10CCE63CF7100295E0C51FDDA
SHA-256:	C912A9CE0C3122D4B2B29AD26BFE06B0390D1A5BDAA5D6128692C0BEFD1DFBBD
SHA-512:	49DA16000687AC81FC4CA9E9112BDCA850BB9F32E0AF2FE751ABC57A8E9C3382451B50998CEB9DE56FC4196F1DC7EF46BBA47933FC47EB4538124870B7630036
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
Preview:	wOF2......;........d..;..........................d..z..J.`..L.Z..<.....\..`..^...x.6.$..6. ..\|. ..8..z%......Q.{..q...FF.kd .8.(..d..).!C...Y.JA...r. ..GH8F......nW...".2&....2<..+C...p...b..SC.......J......z.-..Q..#6&1zUe../\...l.....<.....9s...E~.]B-..B.wY..o......Q..A.F..1j.......-.`P% .. ,..@1.0..~.....WWW.d.u<c{..^.R.+..w....&.........A......+C....(.N.....0.~..0.J.;.Nu..7....]..m.H.....[h.GL3....?)....c.H...2.3.}y........SXI\|..iVN'%E.D.W....r..<`....i....6;E$.....U.$j.@...._.......R2....WS...k.vz.R.'a9!^...N....h.._.....c.%."..S.2.16B...o.2}.pmU[.\|.LI....2.....OWQLO1-....s..8.(...".\|6...6R.. ..M-.zO.}w)..v..mXxX...c..3#.+.v....F`.Z;.zQ.......r,....Yo.....g.h....+.....O.3Y..)Y.8.!....elX......._.3.}k~u.{ C..H.z..FP........@...d..)T.R...L.H.J.j.@..............$...E......y...3.b...I.h u.+%.HA.\..9..8..X.!....gx...].:..V..C...._..X..!....6..)...GM:E.....O.Z.}k.;.T.k..D.k.O..D5.r..."......?..T.Q.A...CF...3g.5.Dn<.QPy..G..1.9..Q..0..

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	dropped
Size (bytes):	32103
Entropy (8bit):	7.9706357614377215
Encrypted:	false
SSDEEP:	768:eyqznoGfSZ0zI0rPPpRNlh6/ekSWy1vxEbDBBTtaaZd6wHH:e/5I0rPPnHY2x9CxJRAuH
MD5:	E7627E5D27157ED702A5CDCE15AECBCE
SHA1:	3352969FC25C745E6C5F50CF5842B70F22047E64
SHA-256:	799156D3C9D27954B34A4D64E1E5ADB1D5A23D225BA6458E94339B93A478F559
SHA-512:	47B5DAD2B433B2D430AB05D039F57EEF32AED08A9656A3E7E1DFD27E0DA63B961D78E3407F6DC2813ABE223A06DA94271BB126AD2D74882986C892C803312E26
Malicious:	false
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...>.W..{).....k^iw.@.4...D~k.]f.LPZ.n.........v.F.]..Qu=..oc...[[.....8..H.!.X..O...m..C....X../...k+...M....[.z....mY..wVRt.)....g .D=9."..W.6. .....%.e.pR..0?.i..J...dbR.C..8!..n......R.U......}.."...t...9.s...3.....;..li.....u.f.sD2...u..d.h.......q"S.bj.y,...@....6..v..LS.......q..S...^..E.eL.......y..o..H..77...rc..b...q...)...!..x.0.......(..)

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 11, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	519
Entropy (8bit):	7.361449659268978
Encrypted:	false
SSDEEP:	12:6v/7cwltXr8H/uabymYJOpavBM3BzJqRlW66c:8XrouXdJOpaQEA66c
MD5:	B01C04F85DB0672F324C10D0A022D7B9
SHA1:	123EA6A3623A4B095C165290BB9E9839AD0E0E5E
SHA-256:	FD4BFCE6860AB4A971E85E3F8740A743D041E41FAAA388B09F0EE529924C3029
SHA-512:	D24E4605A0089A4E5DEF44ED506E47639D5C81F1ECD2B362732D30637FCB8D2A0C44AFD2246A6276C092D43FC680DCF8B5109EB81D26BC9D1D07A24BC7BA8C17
Malicious:	false
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcRtkBVUN8-tMiXun6kyt7SOe1MXHeWD7QCdQ1Cf2OI&s=10
Preview:	.PNG........IHDR...@..........({C...lPLTE..............................................pp..uu.TT.\|\|.++......!!..ii.AA.__.HH.99..22...c..R...VIDAT(..R.v. ......E.b.M....k.....{9g..,.. .......`.#.......<.s;./..~#0......x....c.W.K=...\|.D....%Xk../...g....\|c_.+y.m.7...\....R}......]....d&u...f.\|e...}..\&.PW......Pq..../b.b...J#......r=....}@..$.h...uX..R..U....P..M!...\&.,...)..~.8..{.....w..k.....a.vS....t@KXD......Q.....?..N./.n...ir.Eg.:..c.d......\.,]..3.6.*......A........IEND.B`.

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	downloaded
Size (bytes):	32103
Entropy (8bit):	7.9706357614377215
Encrypted:	false
SSDEEP:	768:eyqznoGfSZ0zI0rPPpRNlh6/ekSWy1vxEbDBBTtaaZd6wHH:e/5I0rPPnHY2x9CxJRAuH
MD5:	E7627E5D27157ED702A5CDCE15AECBCE
SHA1:	3352969FC25C745E6C5F50CF5842B70F22047E64
SHA-256:	799156D3C9D27954B34A4D64E1E5ADB1D5A23D225BA6458E94339B93A478F559
SHA-512:	47B5DAD2B433B2D430AB05D039F57EEF32AED08A9656A3E7E1DFD27E0DA63B961D78E3407F6DC2813ABE223A06DA94271BB126AD2D74882986C892C803312E26
Malicious:	false
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA7yxEwJrTQzKFdvzKXBPyepU7lkUD6FHF_xaRg9MITh_oBGwJBlnrTky_tJUTuRePPmh9rA1h38UdFZMrfj0veWAhi-6avQdfso_JuqEei9G1OBX8K271KlGTtCIxsfd5i-to_bzQRZa4agIbvfNy8oOaERLvakWtpQI_wIkaJLEVAOh_WWRq5gROK9kU9nKkvq62Ju&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...>.W..{).....k^iw.@.4...D~k.]f.LPZ.n.........v.F.]..Qu=..oc...[[.....8..H.!.X..O...m..C....X../...k+...M....[.z....mY..wVRt.)....g .D=9."..W.6. .....%.e.pR..0?.i..J...dbR.C..8!..n......R.U......}.."...t...9.s...3.....;..li.....u.f.sD2...u..d.h.......q"S.bj.y,...@....6..v..LS.......q..S...^..E.eL.......y..o..H..77...rc..b...q...)...!..x.0.......(..)

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 14, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	548
Entropy (8bit):	7.404357515672143
Encrypted:	false
SSDEEP:	12:6v/7H9ZeYB3y9JBNjvufJLB5Thmznoif6G3VcLxkwYGvcKSHSCDJdB:ZYB6DNbu9ThUpVoGGvcK2tL
MD5:	B6CC795402668D9D44A5B6115711C264
SHA1:	27F372C1DCF3B6A55EC5C68115385600469444DE
SHA-256:	CFBC736D3B71DF33873ADBE1215D47E326426FCA38DF8F7C613284BEC2E77B43
SHA-512:	8C2D6C02D81E1EB759C95690DA87FE40264D1D1CE9093D470EC7BFAB352B69F5C64FD5465B8208AC28AEEAAB9A81328E59AD260C89378C75AF6C90A57E2C5ED0
Malicious:	false
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcTjJkD7mpMnuNT067awGnvXV7MbMqe-Ktmo-Yut-kI&s=10
Preview:	.PNG........IHDR...@................fPLTE............"("......TXTvxv&,&......dfdY\YPSP.#.......................jmj...:>:......@D@494+1+...GKG.4NZ...yIDAT(....0.E..J.A@.....%.ie......p........c_.....{Y.....}...S.~N.\|...%..' ..=.....h..,h.u..OB.....3r. \..S"...L.../. ........#...i!.k.....@..:..Lr...,.u@Z....'k.I..p.8.$.L.R..(i?O......%.<.)..<.C >u.$.....:PS."\|-..J.F..0..../.>.-N3.s3`..m.`......G.v.......x....`h..T..6..6R.?..QE..J.#...$...R8.O...>{..&..t.F'./..H4N..G.....E.&.a.~,.PW...&W..kVu.yf.X....q.s}..7#...........IEND.B`.

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 52 x 64, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1304
Entropy (8bit):	7.790957531328582
Encrypted:	false
SSDEEP:	24:0072mnfRoYdGFH7oRp6q2vIMW4sJN7hqsmW17EOxWOvhRt93rxMNc:ftJ7wbonF2vIMirtk+Rn3r5
MD5:	B1208DC321272832F5491C5CD3BD069B
SHA1:	0FA1C975CD4B4BB54F0D5EFA7F2D8829CE97B8D3
SHA-256:	11FFF1DBBC407D34C0A6D5028F4877EE11CFAA5F5BD5F271A6424289EA198309
SHA-512:	24660FAF69E2460E2C6710DC13A656B566A0269680BBC3F625B44E1E0F5860B5E0BAB5484D49040758E74A6713F33156AC0ED1BC2BCB608BCBE3F42151319717
Malicious:	false
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcS4haJwgUG4g8ZZ_q5CuGYsmDsGdCkHi2EyNhOG6fk&s=10
Preview:	.PNG........IHDR...4...@.....b.......PLTE...........................................{{...ww.aa.rr.......................jj......::......VV.KK....DD....##.TT.xx...oo..55.HH.OO.@@.^^..........//.BB.ww.VV.gg.cc.,GF....IDATH..Vy..6.."....m0....m.M.......Vg$......?....F.. ...L&...\|6..u.l....X..z...2$.......Q..^.l..cq.......3$&.9......sU1qD...#...l.2..Mg]U.Jtr...m..Y...#.9H..9_....:.b>_JEbl.1..1.....o...^.N.9...f.6cQ......=.<P.TYC%#.Z.^a.-..m..7.J...G.........+...,.6.WE....jQo.-..{]...n.Y)....?....r;tJ.T.C_..I.........)..v...F/..."{..r..{yy..T...>$.H...-..L)....T....{.h.X.$...L@:.1k....Z.....tw..d2.....8.#.....L.`...T.....VOBw1.<.Z.5)<.<.{........1.8.~...4H...M$5...>.u....&jfg.....r...........,.K.M..LKs8 ...}"A.t.ow.$,4`zb?#..}Q..#QK.$.Sx.C.Wt=.eZ....t-Mc...f.&.......5...w$......0.\| .~,/bgJ.S~d[Cf.s...1.m...\s<..D.+J..^.t.W..I.k...U.l.....].1...N..s+0..[.m..-.2.x(o.tF.pfr]...p....].]..1..:...k..v..8.Z..<].Q...=.....N..k0'\|.....

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 10, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	515
Entropy (8bit):	7.353998702773719
Encrypted:	false
SSDEEP:	12:6v/7tuyqYd7iLsK4y5BST75QRa7OScEIPW82yds05nJ7GZw:lgdOr187OSdIl2KsWSw
MD5:	0E77865F7F93B1B5E2174566C3BBC700
SHA1:	D756B42BEAD49CF4CE7DAF7EE65B54E7714E4870
SHA-256:	6CCC6ACDE181BFF97E16D8886F2C5090418D5280A9F0FD834A5998DB6E356FF3
SHA-512:	6F340791ABFAD03D66B4E6135592B1D654701DCF520A8AC9B21C7F0C55AA58A5CD48B84CBAFD7CF2B8129621531DB710A38675E69754E22F830BA9D6406D92BE
Malicious:	false
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcTnP-Zw8Zk2I_wh84h0O1XOYx3bU36ewMgsBjs7QWQ&s=10
Preview:	.PNG........IHDR...@.........3t.....~PLTE.........3A........1.#4.'7",;.....+..%.. ..#TYc.........DJU..'.................08Evy..........;BNLR\......inu....{j.G'.C....ePC'...@IDAT(..R.r. .\....l....hL[.......>..F..E...ISs.[\.....<C....5<H.D..,.&.n8.X.:..J....u.....A}.R..V...1.M^.6TTU.DuVS.X..x.....0.F..OD......jZ..l....6..EX4.......>>....:A.G.'.L.!.L.!.IOG(...lM..cZ71..<..+.S.~cJ.].....7....}.....#..\......M;..v......8[L.l.5.%.c...j..n+.N...>i..4..8.J...4F..t.Hr0......yqD.....+.V.....IEND.B`.

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	dropped
Size (bytes):	42539
Entropy (8bit):	7.973065760635484
Encrypted:	false
SSDEEP:	768:ebH+xCmzLM5o1obKA5RSoW4JWpp26pSZ/C81GV0uAjQFXxJ0BXZUy:ebHN9vaoWKQ74dC81G+utXxJ0pWy
MD5:	74515F51F9828A63BEF48F33D9F3C7E6
SHA1:	5AD7AAE1AC9BF14E795FBAFDE6B7DFD6862AB744
SHA-256:	2A2B427714C12086B9AB9ACB0E6054356AE6023E4C7038F227FB4408F33EDBAB
SHA-512:	44C308805DFFB1B6ACDEA4E4974E88FE1DCBC0882855C9A66E97BA043DC2E105AD85B45F930BB73F32A4ABAD679523D16D33A056F9B62C831D24603B561132F4
Malicious:	false
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...-%..$.R.......=...........V.-.>.\..[5..%...H.+...9'.8?....k...*..:T?.J..J.T.....>.3..}.p..o.....N......gS^9.k]6.......y!....w_...W....Y9.kJN..\|.....xn...Z}2.6.@gju?.fx...:.e...=.....)..<.9#.....2...WR..-..".Q....hS.&..eYiw....."y.2..sW.%8]..B7C.<...'k]."..'.....Wrf...o.)a.......W..1.#.....K..!...v...zV...5t.a..iJ...{..&w...N7H...jK...........4...g..

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x64, components 3
Category:	downloaded
Size (bytes):	1366
Entropy (8bit):	7.5567651450482805
Encrypted:	false
SSDEEP:	24:rQbjo2TJlANBy4r9ljdRoZXjfSP/MRkmIfCZon1h8:rEy7RBaTSP0aJfCuh8
MD5:	B0B846DE9F3B79D9E307C19F0FF84127
SHA1:	C1B5487E01721778C9E8EA3A6A39CBC3BEAD9287
SHA-256:	F58442FBEEE503CB08EE22A38A8E73663EBED0CC98BD1227ACF1BBA330C23722
SHA-512:	71C50552F01650BD9F792A2A8201ACAFAE3428ECCB30BA3429C70DE86F05FF8EDF0F1E396212CCCA8B52A859CDFDADD3EA9B2B87F02CE3A3297E126140F0A967
Malicious:	false
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcRHdpW71Gjx7ESYaHCxxa0_uyXyab4TBP8OVeU3lsESDlOYgzhegYYaCoM&s=10
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......@.@.."......................................6........................!.1A."Qa.2q......B.3Rr....#$...................................................!.1.Aq"............?...U.dU:.tU..q.R_: u.J..W.\|/'>VI.b.,..3)..knf.c..Qa.3.f:.BDi.`z1..3...vV.ry...B.;X.V.......n...W...N.....z.)/..%..:....B)%d...<N...4H.h...Q....o.F...p.r.....Z..Gs.5.V(.p.3."...C.(:...Xn\|9.V6.U1...K.d..(..k.^^8...f%.4.m).F.....^..x..H.2N.8.P6..(.Q..e.<H...m[..Ff\|.Z;..J@...a,.d3..-".;u#...9..Ml..Y.H.:6.$..F......./..W.&..6 ..Do....Z.;..sg.......W....s...fP.x....%N.v...<Yc.. ..nl..^.s...2...6....@.aF.o.,)C....R8d.,M.%R..V.\|.B.`.+#...A.O....)..s?.N;L...E....O...1.L.I....7....~x...............W.`1.].[.{......)..j.[.?..&G.Z...{$.....{.c.E......N....g'-.ogR...s3......~..........`/.......T.>........ ..{.,.~.p~GW#x........U.?..Q.KX..1..

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 64x64, components 3
Category:	downloaded
Size (bytes):	1587
Entropy (8bit):	7.650211832586126
Encrypted:	false
SSDEEP:	24:rQUXXAzNPhbfQ+5+AaCFPuA8JSYRhmia+gninWCMu1JaGNfM6mcK:rZ2Js+5+UPuArYda+giWduu6E
MD5:	28402E989BABD19C5C57C82FC32A0679
SHA1:	AB7C5808A96E44FAF7082C97D1CFD229E3657695
SHA-256:	315123E06F926CDA7EF0CD3D7F4B3572FAED6E5CA3A18FF39830B74122E74346
SHA-512:	BE8BF04033552B7B75DB91BB1AED3F65117D7E8C2CEAA7F0CA0626057795D6C70B262B5846DD62AF4602F2ABEA9FE91BFEB6454D947C273859E956441DACC9A2
Malicious:	false
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcRoQEBgqIx4WUbM1VB4i-dtnMvQH68KyK5LpYOSu7c&s=10
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......@.@..........................................5........................!...A."1Qq...2Bas..4#b..................................)......................1.!Q.A....2a..Bq.............?..h...m..X...S.....r@..` g......q.KR.e...nv.6...I..K.....P.=mN.....O..r..>.7.kzW.[...<:!..Y......E....E.0.....H.>9.-.C.Y..;I..v.X.D...J.n.{.mm..@........]......t......W.....(..qq...8J.Q{.Z./.v.o.1....d..dd.t.i.9G.A.9G.........Ny..G..V.....".c..d...I..=..Uy..T.X...$.p...JSj..s.N....\.l../$.'..._p.jey.GW<.........J...ICiAh.G.Vr..a.^.....Z..Z.j.@..$.J..g...uU.(.....(.P..@..%../.g.{..&....Z..7....ZQ./..G.'...1rz#.....6.l..IDt.E....'P.;V.k.0\|q.$R..Q..u..6...v.W'.K+..%!..$v.RT.D.D.zd.sr....i...`...........hv..%.p.2...$$..N4...-...iP.w.V...WJ...h..EJo.._......8.4..q..........*.^.d...hN.W.+.2....TiL..\.Y...v..J.b@~:JJR...l.uy

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/api2/audio_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	238
Entropy (8bit):	5.184482755717443
Encrypted:	false
SSDEEP:	6:otqWtxbQLZVVi7GeqlAGmwbQLZVZYZ7qT:o7xbK95eqKVaKiM
MD5:	B54D0452E2FDB8C0D91C455D1C5495F9
SHA1:	DDD85730B9CB4CB9905B1D7E7643F595D2F33CB8
SHA-256:	F4138D99EC6E17514BB87CEEAD1C1D2A204219C970864FC85BFF00949EE18082
SHA-512:	6883DE3ABB2A7B71CBDE6EDA0854D5B9EC696A0656735843BBB6329007D758B502D2557CB36D5A1CEFC7B4D0AB5DCBC227C88DE9163662741C60F9D561F5A367
Malicious:	false
Preview:	<HTML>.<HEAD>.<TITLE>HTTP method GET is not supported by this URL</TITLE>.</HEAD>.<BODY BGCOLOR="#FFFFFF" TEXT="#000000">. GSE Default Error -->.<H1>HTTP method GET is not supported by this URL</H1>.<H2>Error 405</H2>.</BODY>.</HTML>.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56398), with no line terminators
Category:	downloaded
Size (bytes):	56398
Entropy (8bit):	5.907604034780877
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyB5lxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0B5chXwW49z2
MD5:	EB4BC511F79F7A1573B45F5775B3A99B
SHA1:	D910FB51AD7316AA54F055079374574698E74B35
SHA-256:	7859A62E04B0ACB06516EB12454DE6673883ECFAEAED6C254659BCA7CD59C050
SHA-512:	EC9BDF1C91B6262B183FD23F640EAC22016D1F42DB631380676ED34B962E01BADDA91F9CBDFA189B42FE3182A992F1B95A7353AF41E41B2D6E1DAB17E87637A0
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 92x92, components 3
Category:	downloaded
Size (bytes):	3607
Entropy (8bit):	7.817317374807938
Encrypted:	false
SSDEEP:	96:idbQxDQafRoXcTVSWsuwjXMijKDIEcoRt0L7PI8hDA:idUdQ6RS1zjXMcAIEcoRt03NhDA
MD5:	78A5A439D319A673C790AC28063C982D
SHA1:	2AA3FD123884B2CFED4D83E74FF77CA9A7812C9C
SHA-256:	9D3721BE9C4E44D026B612FC70C2C851A9B411FFF444748413A32AAAC979BFA5
SHA-512:	47C717B9C37261476B8680A0BB1C9FF7EEF201CE357BF83046FE5DF41A074890736039A768D79213593344D887CA73053BF7D54B1A316643C476DE553307EACE
Malicious:	false
URL:	https://lh5.googleusercontent.com/p/AF1QipPWj31KawuEWhcSPEoG10VjL7pu_-t5hy76ZrpA=w92-h92-n-k-no
Preview:	......JFIF.............Exif..II.......1...............Google..............................................................................................................................................\.\............................................3..........................!...."12ABQ..#$V..4Ra...................................=.........................!1A.."Qaq2B.......SU.....R.#Ccr...............?..S..DM.4D..DM.4D..DM.4D..DM.4D..DM.4D..DM.4D..DM.4D..DM.4D..DM.4D..DM.4D..DQ'..e+....I.>..g.H.=.....)..A]_...\3.....s..7...}..tS..@q.\|p...;KI.f..F....+..y..M....4...2...d.(.Lh.vfg.@.u......x....vS0.C..p.....1..F.y....$..o.L...d..r..Z...pA...X.I..d`....R.V.a....C.r.N[.v............X<.......P....)....\M...m.F.N..........a..9.F.h........O...67........8......'..g....:............o...~.2.Jf....}&~.o.Qb..-...R.s..I...4.....F..~.m.XI^m[..+;s...Z.z...J.......iM...4...L..P'.L!....[E....3.a..5....5...>....<..mYHNi...oZ.T8g..1..q.'.'u....Z...}.<}{....#.k...1l.5+.

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	downloaded
Size (bytes):	510578
Entropy (8bit):	5.695280300193632
Encrypted:	false
SSDEEP:	6144:/LJaSgOPDcwWOTEmzYSU9F0Gx95F+SiT1i7uiv5VQgDx212FC:IS4sGx97+SihiSrFIC
MD5:	E9CCB3DBDE79BA5FFDF9CAD4B32D59FD
SHA1:	3A8CD67ADC7C885BDF683F1E7F491E6A4A50679F
SHA-256:	8F2C6777C7CCC01AB67290FA8ACD5A4C4866BE64129F39DFAEB9197DFA15E137
SHA-512:	5CA7C8439030C9B4B966760C660640A094B0D6E30E10DF85D7B900C6F9108B0E309298ED93C006634BB3F437BAB3CFF1B83A5D1B18C666C04346F0856294C461
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0./.var y=function(){return[function(E,X,B,M,c,v,Y,I,h,J,F,a,C,R,P){return E+4>>3==(E-8<<2>=(R=[1,"F",22],E)&&(E+2&12)<E&&(M=u[32](4,B[R[1]]),P=A[16](32,0,X,B[R[1]],M)),R[0])&&(M=void 0===M?null:M,Y=[3,341,278],c=d[46](16,21,X,u[31](32,B)),J=e[48](7,Y[0],X,u[31](35,X),u[31](28,Y[R[0]])),I=g[27](77,15,u[31](29,X),X,u[31](33,438)),v=u[31](38,Y[2]),a=A[32](R[2],l[13](2,d[9](48,36),X),[u[7](24,v),u[31](34,X)]),C=[c,J,I,a],null!=M&&(h=A[8](73),F=A[8](72),C=[W[30](8,h,u[31](28,B),u[31](37,0))].concat(C,[W[30](8,.F,R[0],R[0]),h,e[39](12,M,X),F])),P=C),P}]}(),g=function(){return[function(E,X,B,M,c,v){return 3<=((((E^(v=[7,"W",2],19))&v[0]\|\|(this[v

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAk8dqZYMe7mkRIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Static File Info

General

File type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Entropy (8bit):	7.995948005875459
TrID:	ZIP compressed archive (8000/1) 100.00%
File name:	DownloadDirectorLauncher1.zip
File size:	490'761 bytes
MD5:	d79ed2719bd67207dafde96dc71000d7
SHA1:	a1277fe10a6dfff82dfcb6612d2db97cbd66350f
SHA256:	ed1e8e934bf18c8f4698dd04c7e3b476659e7319b6851667f8dbb950eb17caf1
SHA512:	c9c212bbb51eba9ad41288ff1f065d4a06f2e0954fba384a0130e065e10151581c1cb5ecddf1e4e7e5f18c36646e85a323f4a422f25910ee2c48d795a2752a52
SSDEEP:	6144:b2fvGTs4xfWaVWfLm3C/Dj8bX4bHHxOLAMshWZh/u1ogBBMRwO3BDObgJhpTTL8w:qXGTZZqt44rHxeZht56eyb0XfF
TLSH:	45A423AE62431A589FF8EA2535307C1A7B73C59BF9BD40767ADB5334183C9AE04049B3
File Content Preview:	PK........42'M.&..C\|..a. . ...DownloadDirectorLauncher.exe.exe.}.XT...9p..G..&%..b.LY....."...........Rl..(......[........,.b..P..R.f?jVs..........>g....<.{......g.Y{...^{..}......g..._..a63.'......F..f>...{3...w.......z..E..Ox........z$a.uA.....c...?

File Icon


Icon Hash:	1c1c1e4e4ececedc

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 03:07:31.118477106 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 03:07:31.421046019 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 03:07:32.029098034 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 03:07:33.180036068 CEST	49689	80	192.168.2.16	192.229.211.108
Apr 18, 2024 03:07:33.238970995 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 03:07:35.223961115 CEST	49704	443	192.168.2.16	40.68.123.157
Apr 18, 2024 03:07:35.224004984 CEST	443	49704	40.68.123.157	192.168.2.16
Apr 18, 2024 03:07:35.224083900 CEST	49704	443	192.168.2.16	40.68.123.157
Apr 18, 2024 03:07:35.228986025 CEST	49704	443	192.168.2.16	40.68.123.157
Apr 18, 2024 03:07:35.229002953 CEST	443	49704	40.68.123.157	192.168.2.16
Apr 18, 2024 03:07:35.653125048 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 03:07:35.861423016 CEST	443	49704	40.68.123.157	192.168.2.16
Apr 18, 2024 03:07:35.861560106 CEST	49704	443	192.168.2.16	40.68.123.157
Apr 18, 2024 03:07:35.864869118 CEST	49704	443	192.168.2.16	40.68.123.157
Apr 18, 2024 03:07:35.864881039 CEST	443	49704	40.68.123.157	192.168.2.16
Apr 18, 2024 03:07:35.865998983 CEST	443	49704	40.68.123.157	192.168.2.16
Apr 18, 2024 03:07:35.907941103 CEST	49704	443	192.168.2.16	40.68.123.157
Apr 18, 2024 03:07:35.949750900 CEST	49704	443	192.168.2.16	40.68.123.157
Apr 18, 2024 03:07:35.996134043 CEST	443	49704	40.68.123.157	192.168.2.16
Apr 18, 2024 03:07:36.463470936 CEST	443	49704	40.68.123.157	192.168.2.16
Apr 18, 2024 03:07:36.463501930 CEST	443	49704	40.68.123.157	192.168.2.16
Apr 18, 2024 03:07:36.463505983 CEST	443	49704	40.68.123.157	192.168.2.16
Apr 18, 2024 03:07:36.463726997 CEST	443	49704	40.68.123.157	192.168.2.16
Apr 18, 2024 03:07:36.463814020 CEST	443	49704	40.68.123.157	192.168.2.16
Apr 18, 2024 03:07:36.464025021 CEST	49704	443	192.168.2.16	40.68.123.157
Apr 18, 2024 03:07:36.464025021 CEST	49704	443	192.168.2.16	40.68.123.157
Apr 18, 2024 03:07:36.464025021 CEST	49704	443	192.168.2.16	40.68.123.157
Apr 18, 2024 03:07:36.464055061 CEST	443	49704	40.68.123.157	192.168.2.16
Apr 18, 2024 03:07:36.464075089 CEST	443	49704	40.68.123.157	192.168.2.16
Apr 18, 2024 03:07:36.464183092 CEST	49704	443	192.168.2.16	40.68.123.157
Apr 18, 2024 03:07:36.478842974 CEST	49704	443	192.168.2.16	40.68.123.157
Apr 18, 2024 03:07:36.478868008 CEST	443	49704	40.68.123.157	192.168.2.16
Apr 18, 2024 03:07:36.479038954 CEST	49704	443	192.168.2.16	40.68.123.157
Apr 18, 2024 03:07:36.479044914 CEST	443	49704	40.68.123.157	192.168.2.16
Apr 18, 2024 03:07:37.473536968 CEST	49706	443	192.168.2.16	23.33.136.127
Apr 18, 2024 03:07:37.473620892 CEST	443	49706	23.33.136.127	192.168.2.16
Apr 18, 2024 03:07:37.473891020 CEST	49706	443	192.168.2.16	23.33.136.127
Apr 18, 2024 03:07:37.474915028 CEST	49706	443	192.168.2.16	23.33.136.127
Apr 18, 2024 03:07:37.474983931 CEST	443	49706	23.33.136.127	192.168.2.16
Apr 18, 2024 03:07:37.696456909 CEST	443	49706	23.33.136.127	192.168.2.16
Apr 18, 2024 03:07:37.696635008 CEST	49706	443	192.168.2.16	23.33.136.127
Apr 18, 2024 03:07:37.699081898 CEST	49706	443	192.168.2.16	23.33.136.127
Apr 18, 2024 03:07:37.699109077 CEST	443	49706	23.33.136.127	192.168.2.16
Apr 18, 2024 03:07:37.699512959 CEST	443	49706	23.33.136.127	192.168.2.16
Apr 18, 2024 03:07:37.739516020 CEST	49706	443	192.168.2.16	23.33.136.127
Apr 18, 2024 03:07:37.784116983 CEST	443	49706	23.33.136.127	192.168.2.16
Apr 18, 2024 03:07:37.898793936 CEST	443	49706	23.33.136.127	192.168.2.16
Apr 18, 2024 03:07:37.899271011 CEST	49706	443	192.168.2.16	23.33.136.127
Apr 18, 2024 03:07:37.899353027 CEST	443	49706	23.33.136.127	192.168.2.16
Apr 18, 2024 03:07:37.899408102 CEST	49706	443	192.168.2.16	23.33.136.127
Apr 18, 2024 03:07:37.899662971 CEST	443	49706	23.33.136.127	192.168.2.16
Apr 18, 2024 03:07:37.899748087 CEST	443	49706	23.33.136.127	192.168.2.16
Apr 18, 2024 03:07:37.899946928 CEST	49706	443	192.168.2.16	23.33.136.127
Apr 18, 2024 03:07:37.953705072 CEST	49707	443	192.168.2.16	23.33.136.127
Apr 18, 2024 03:07:37.953744888 CEST	443	49707	23.33.136.127	192.168.2.16
Apr 18, 2024 03:07:37.954056025 CEST	49707	443	192.168.2.16	23.33.136.127
Apr 18, 2024 03:07:37.954380989 CEST	49707	443	192.168.2.16	23.33.136.127
Apr 18, 2024 03:07:37.954410076 CEST	443	49707	23.33.136.127	192.168.2.16
Apr 18, 2024 03:07:38.174504042 CEST	443	49707	23.33.136.127	192.168.2.16
Apr 18, 2024 03:07:38.174618006 CEST	49707	443	192.168.2.16	23.33.136.127
Apr 18, 2024 03:07:38.176336050 CEST	49707	443	192.168.2.16	23.33.136.127
Apr 18, 2024 03:07:38.176347971 CEST	443	49707	23.33.136.127	192.168.2.16
Apr 18, 2024 03:07:38.177355051 CEST	443	49707	23.33.136.127	192.168.2.16
Apr 18, 2024 03:07:38.178735018 CEST	49707	443	192.168.2.16	23.33.136.127
Apr 18, 2024 03:07:38.220115900 CEST	443	49707	23.33.136.127	192.168.2.16
Apr 18, 2024 03:07:38.380474091 CEST	443	49707	23.33.136.127	192.168.2.16
Apr 18, 2024 03:07:38.380677938 CEST	443	49707	23.33.136.127	192.168.2.16
Apr 18, 2024 03:07:38.380814075 CEST	49707	443	192.168.2.16	23.33.136.127
Apr 18, 2024 03:07:38.381782055 CEST	49707	443	192.168.2.16	23.33.136.127
Apr 18, 2024 03:07:38.381808043 CEST	443	49707	23.33.136.127	192.168.2.16
Apr 18, 2024 03:07:38.381825924 CEST	49707	443	192.168.2.16	23.33.136.127
Apr 18, 2024 03:07:38.381834030 CEST	443	49707	23.33.136.127	192.168.2.16
Apr 18, 2024 03:07:39.277309895 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 03:07:39.579986095 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 03:07:40.186062098 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 03:07:40.456974030 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 03:07:41.399064064 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 03:07:43.748071909 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 03:07:43.811980963 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 03:07:44.052069902 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 03:07:44.658243895 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 03:07:45.873089075 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 03:07:48.287000895 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 03:07:48.623095989 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 03:07:50.062979937 CEST	49673	443	192.168.2.16	204.79.197.203
Apr 18, 2024 03:07:53.096978903 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 03:07:58.226110935 CEST	49678	443	192.168.2.16	20.189.173.10
Apr 18, 2024 03:08:02.700011015 CEST	49680	80	192.168.2.16	192.229.211.108
Apr 18, 2024 03:08:11.379259109 CEST	49696	80	192.168.2.16	96.7.245.89
Apr 18, 2024 03:08:11.379273891 CEST	49697	80	192.168.2.16	96.7.245.89
Apr 18, 2024 03:08:11.483136892 CEST	80	49697	96.7.245.89	192.168.2.16
Apr 18, 2024 03:08:11.483253956 CEST	49697	80	192.168.2.16	96.7.245.89
Apr 18, 2024 03:08:11.494558096 CEST	80	49696	96.7.245.89	192.168.2.16
Apr 18, 2024 03:08:11.494647026 CEST	49696	80	192.168.2.16	96.7.245.89
Apr 18, 2024 03:08:13.006249905 CEST	49708	443	192.168.2.16	40.68.123.157
Apr 18, 2024 03:08:13.006336927 CEST	443	49708	40.68.123.157	192.168.2.16
Apr 18, 2024 03:08:13.006434917 CEST	49708	443	192.168.2.16	40.68.123.157
Apr 18, 2024 03:08:13.006865978 CEST	49708	443	192.168.2.16	40.68.123.157
Apr 18, 2024 03:08:13.006892920 CEST	443	49708	40.68.123.157	192.168.2.16
Apr 18, 2024 03:08:13.642225981 CEST	443	49708	40.68.123.157	192.168.2.16
Apr 18, 2024 03:08:13.642333031 CEST	49708	443	192.168.2.16	40.68.123.157
Apr 18, 2024 03:08:13.643789053 CEST	49708	443	192.168.2.16	40.68.123.157
Apr 18, 2024 03:08:13.643801928 CEST	443	49708	40.68.123.157	192.168.2.16
Apr 18, 2024 03:08:13.644313097 CEST	443	49708	40.68.123.157	192.168.2.16
Apr 18, 2024 03:08:13.645565033 CEST	49708	443	192.168.2.16	40.68.123.157
Apr 18, 2024 03:08:13.692114115 CEST	443	49708	40.68.123.157	192.168.2.16
Apr 18, 2024 03:08:14.249932051 CEST	443	49708	40.68.123.157	192.168.2.16
Apr 18, 2024 03:08:14.249991894 CEST	443	49708	40.68.123.157	192.168.2.16
Apr 18, 2024 03:08:14.250030041 CEST	443	49708	40.68.123.157	192.168.2.16
Apr 18, 2024 03:08:14.250149012 CEST	49708	443	192.168.2.16	40.68.123.157
Apr 18, 2024 03:08:14.250149965 CEST	49708	443	192.168.2.16	40.68.123.157
Apr 18, 2024 03:08:14.250174046 CEST	443	49708	40.68.123.157	192.168.2.16
Apr 18, 2024 03:08:14.250190973 CEST	443	49708	40.68.123.157	192.168.2.16
Apr 18, 2024 03:08:14.250247955 CEST	49708	443	192.168.2.16	40.68.123.157
Apr 18, 2024 03:08:14.250257969 CEST	443	49708	40.68.123.157	192.168.2.16
Apr 18, 2024 03:08:14.250315905 CEST	49708	443	192.168.2.16	40.68.123.157
Apr 18, 2024 03:08:14.252882004 CEST	49708	443	192.168.2.16	40.68.123.157
Apr 18, 2024 03:08:14.252904892 CEST	443	49708	40.68.123.157	192.168.2.16
Apr 18, 2024 03:08:14.252921104 CEST	49708	443	192.168.2.16	40.68.123.157
Apr 18, 2024 03:08:14.252928019 CEST	443	49708	40.68.123.157	192.168.2.16
Apr 18, 2024 03:08:24.518296957 CEST	49712	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.518342972 CEST	443	49712	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.518438101 CEST	49712	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.518603086 CEST	49712	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.518636942 CEST	443	49712	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.741236925 CEST	443	49712	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.741524935 CEST	49712	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.741550922 CEST	443	49712	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.743190050 CEST	443	49712	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.743308067 CEST	49712	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.744385004 CEST	49712	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.744474888 CEST	443	49712	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.744978905 CEST	49713	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.745064020 CEST	443	49713	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.745079994 CEST	49714	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.745155096 CEST	443	49714	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.745260954 CEST	49713	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.745295048 CEST	49714	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.745297909 CEST	49715	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.745357037 CEST	443	49715	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.745372057 CEST	49712	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.745387077 CEST	443	49712	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.745431900 CEST	49715	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.745744944 CEST	49713	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.745765924 CEST	443	49713	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.745810032 CEST	49714	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.745842934 CEST	443	49714	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.746016026 CEST	49715	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.746046066 CEST	443	49715	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.796030045 CEST	49712	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.960493088 CEST	443	49714	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.960761070 CEST	49714	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.960793018 CEST	443	49714	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.962224960 CEST	443	49714	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.962301016 CEST	49714	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.962836027 CEST	49714	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.962937117 CEST	443	49714	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.962958097 CEST	49714	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.968815088 CEST	443	49715	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.969181061 CEST	49715	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.969197989 CEST	443	49715	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.969676971 CEST	443	49713	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.969868898 CEST	49713	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.969916105 CEST	443	49713	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.970340967 CEST	443	49715	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.971091032 CEST	443	49713	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.972244978 CEST	49715	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.972332001 CEST	443	49715	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.973213911 CEST	49715	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.974188089 CEST	49713	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.974280119 CEST	443	49713	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.994019985 CEST	443	49712	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.994139910 CEST	443	49712	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.994226933 CEST	49712	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.994235039 CEST	443	49712	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.994262934 CEST	443	49712	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.994321108 CEST	49712	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.994338989 CEST	443	49712	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.999228001 CEST	443	49712	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:24.999341965 CEST	49712	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.999394894 CEST	49712	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:24.999416113 CEST	443	49712	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:25.008112907 CEST	443	49714	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:25.016133070 CEST	443	49715	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:25.017004013 CEST	49714	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:25.017025948 CEST	443	49714	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:25.017025948 CEST	49713	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:25.064033985 CEST	49714	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:25.518294096 CEST	443	49714	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:25.518466949 CEST	49714	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:25.518527031 CEST	443	49714	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:25.518642902 CEST	443	49714	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:25.519336939 CEST	49714	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:25.519336939 CEST	49714	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:25.519336939 CEST	49714	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:25.519401073 CEST	443	49714	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:25.520191908 CEST	49714	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:25.522577047 CEST	49713	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:25.564136028 CEST	443	49713	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:25.564176083 CEST	443	49715	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:25.564486027 CEST	443	49715	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:25.564512968 CEST	49715	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:25.564573050 CEST	49715	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:25.564996958 CEST	49715	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:25.565037966 CEST	443	49715	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:25.565068960 CEST	49715	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:25.565115929 CEST	49715	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:25.566557884 CEST	49716	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:25.566644907 CEST	443	49716	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:25.566747904 CEST	49716	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:25.567034006 CEST	49716	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:25.567059040 CEST	443	49716	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:25.630655050 CEST	443	49713	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:25.630795956 CEST	443	49713	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:25.630923986 CEST	443	49713	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:25.631012917 CEST	49713	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:25.631046057 CEST	443	49713	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:25.631083965 CEST	443	49713	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:25.631154060 CEST	49713	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:25.631280899 CEST	49713	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:25.631310940 CEST	443	49713	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:25.784658909 CEST	443	49716	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:25.785002947 CEST	49716	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:25.785032034 CEST	443	49716	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:25.785501957 CEST	443	49716	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:25.785887003 CEST	49716	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:25.785972118 CEST	443	49716	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:25.786041021 CEST	49716	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:25.832117081 CEST	443	49716	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:26.000309944 CEST	443	49716	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:26.000410080 CEST	443	49716	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:26.000536919 CEST	443	49716	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:26.000550032 CEST	49716	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:26.000595093 CEST	443	49716	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:26.000714064 CEST	49716	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:26.000716925 CEST	443	49716	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:26.000823021 CEST	49716	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:26.001224995 CEST	49716	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:26.001251936 CEST	443	49716	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:26.896605015 CEST	49718	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:26.896657944 CEST	443	49718	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:26.896756887 CEST	49718	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:26.897157907 CEST	49718	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:26.897170067 CEST	443	49718	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:27.113440037 CEST	443	49718	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:27.113774061 CEST	49718	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:27.113790035 CEST	443	49718	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:27.114226103 CEST	443	49718	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:27.114680052 CEST	49718	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:27.114748001 CEST	443	49718	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:27.114878893 CEST	49718	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:27.156155109 CEST	443	49718	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:27.267374039 CEST	49718	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:27.267607927 CEST	443	49718	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:27.267702103 CEST	49718	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:27.268287897 CEST	49719	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:27.268393993 CEST	443	49719	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:27.268476009 CEST	49719	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:27.268762112 CEST	49719	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:27.268795967 CEST	443	49719	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:27.489315033 CEST	443	49719	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:27.489661932 CEST	49719	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:27.489721060 CEST	443	49719	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:27.492908955 CEST	443	49719	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:27.493012905 CEST	49719	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:27.493372917 CEST	49719	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:27.493458033 CEST	443	49719	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:27.493534088 CEST	49719	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:27.493551970 CEST	443	49719	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:27.537000895 CEST	49719	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:27.751590967 CEST	443	49719	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:27.751722097 CEST	443	49719	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:27.751810074 CEST	443	49719	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:27.751945972 CEST	49719	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:27.752010107 CEST	443	49719	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:27.752079010 CEST	49719	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:27.754692078 CEST	443	49719	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:27.754873991 CEST	49719	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:27.754905939 CEST	443	49719	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:27.754975080 CEST	49719	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:27.779895067 CEST	49720	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:27.779958963 CEST	443	49720	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:27.780057907 CEST	49720	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:27.780332088 CEST	49720	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:27.780363083 CEST	443	49720	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:28.000956059 CEST	443	49720	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:28.001539946 CEST	49720	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:28.001600981 CEST	443	49720	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:28.002089024 CEST	443	49720	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:28.002511024 CEST	49720	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:28.002605915 CEST	443	49720	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:28.002680063 CEST	49720	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:28.044156075 CEST	443	49720	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:28.081864119 CEST	49720	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:28.081968069 CEST	443	49720	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:28.082051039 CEST	49720	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:28.082690954 CEST	49727	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:28.082724094 CEST	443	49727	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:28.082803965 CEST	49727	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:28.083060980 CEST	49727	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:28.083075047 CEST	443	49727	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:28.303664923 CEST	443	49727	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:28.303904057 CEST	49727	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:28.303915024 CEST	443	49727	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:28.305357933 CEST	443	49727	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:28.305443048 CEST	49727	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:28.305824041 CEST	49727	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:28.305898905 CEST	443	49727	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:28.306179047 CEST	49727	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:28.306186914 CEST	443	49727	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:28.348124981 CEST	49727	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:28.572278023 CEST	443	49727	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:28.572407007 CEST	443	49727	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:28.572463036 CEST	49727	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:28.572479963 CEST	443	49727	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:28.573477983 CEST	443	49727	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:28.573548079 CEST	49727	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:28.574398994 CEST	49727	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:28.574417114 CEST	443	49727	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:28.635813951 CEST	49730	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:28.635834932 CEST	443	49730	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:28.635907888 CEST	49730	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:28.636208057 CEST	49730	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:28.636224031 CEST	443	49730	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:28.681885958 CEST	49731	443	192.168.2.16	64.233.177.132
Apr 18, 2024 03:08:28.681967020 CEST	443	49731	64.233.177.132	192.168.2.16
Apr 18, 2024 03:08:28.682095051 CEST	49731	443	192.168.2.16	64.233.177.132
Apr 18, 2024 03:08:28.682296038 CEST	49731	443	192.168.2.16	64.233.177.132
Apr 18, 2024 03:08:28.682315111 CEST	443	49731	64.233.177.132	192.168.2.16
Apr 18, 2024 03:08:28.855367899 CEST	443	49730	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:28.855706930 CEST	49730	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:28.855734110 CEST	443	49730	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:28.857202053 CEST	443	49730	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:28.857660055 CEST	49730	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:28.857846022 CEST	49730	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:28.857851982 CEST	443	49730	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:28.858067036 CEST	443	49730	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:28.904036999 CEST	49730	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:28.908842087 CEST	443	49731	64.233.177.132	192.168.2.16
Apr 18, 2024 03:08:28.909177065 CEST	49731	443	192.168.2.16	64.233.177.132
Apr 18, 2024 03:08:28.909233093 CEST	443	49731	64.233.177.132	192.168.2.16
Apr 18, 2024 03:08:28.909970045 CEST	443	49731	64.233.177.132	192.168.2.16
Apr 18, 2024 03:08:28.910052061 CEST	49731	443	192.168.2.16	64.233.177.132
Apr 18, 2024 03:08:28.910976887 CEST	443	49731	64.233.177.132	192.168.2.16
Apr 18, 2024 03:08:28.911052942 CEST	49731	443	192.168.2.16	64.233.177.132
Apr 18, 2024 03:08:28.911068916 CEST	443	49731	64.233.177.132	192.168.2.16
Apr 18, 2024 03:08:28.912256956 CEST	49731	443	192.168.2.16	64.233.177.132
Apr 18, 2024 03:08:28.912344933 CEST	443	49731	64.233.177.132	192.168.2.16
Apr 18, 2024 03:08:28.912545919 CEST	49731	443	192.168.2.16	64.233.177.132
Apr 18, 2024 03:08:28.912559986 CEST	443	49731	64.233.177.132	192.168.2.16
Apr 18, 2024 03:08:28.967160940 CEST	49731	443	192.168.2.16	64.233.177.132
Apr 18, 2024 03:08:29.120332956 CEST	443	49731	64.233.177.132	192.168.2.16
Apr 18, 2024 03:08:29.122463942 CEST	443	49731	64.233.177.132	192.168.2.16
Apr 18, 2024 03:08:29.122632980 CEST	49731	443	192.168.2.16	64.233.177.132
Apr 18, 2024 03:08:29.122694016 CEST	443	49731	64.233.177.132	192.168.2.16
Apr 18, 2024 03:08:29.126112938 CEST	443	49731	64.233.177.132	192.168.2.16
Apr 18, 2024 03:08:29.126195908 CEST	49731	443	192.168.2.16	64.233.177.132
Apr 18, 2024 03:08:29.126213074 CEST	443	49731	64.233.177.132	192.168.2.16
Apr 18, 2024 03:08:29.126486063 CEST	49731	443	192.168.2.16	64.233.177.132
Apr 18, 2024 03:08:29.126565933 CEST	443	49731	64.233.177.132	192.168.2.16
Apr 18, 2024 03:08:29.126631021 CEST	49731	443	192.168.2.16	64.233.177.132
Apr 18, 2024 03:08:29.154464960 CEST	443	49730	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:29.154520035 CEST	443	49730	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:29.154586077 CEST	49730	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:29.154608011 CEST	443	49730	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:29.156588078 CEST	443	49730	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:29.156668901 CEST	49730	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:29.156744003 CEST	49730	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:29.156755924 CEST	443	49730	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:31.201375961 CEST	49734	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:31.201459885 CEST	443	49734	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:31.201545954 CEST	49734	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:31.201749086 CEST	49734	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:31.201771975 CEST	443	49734	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:31.388622999 CEST	49735	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:31.388711929 CEST	443	49735	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:31.389048100 CEST	49735	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:31.389048100 CEST	49735	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:31.389143944 CEST	443	49735	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:31.430520058 CEST	443	49734	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:31.430883884 CEST	49734	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:31.430944920 CEST	443	49734	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:31.431458950 CEST	443	49734	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:31.431838036 CEST	49734	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:31.431838036 CEST	49734	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:31.431884050 CEST	443	49734	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:31.431960106 CEST	443	49734	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:31.487101078 CEST	49734	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:31.610032082 CEST	443	49735	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:31.610516071 CEST	49735	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:31.610558033 CEST	443	49735	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:31.611191988 CEST	443	49735	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:31.611478090 CEST	49735	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:31.611569881 CEST	443	49735	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:31.663017035 CEST	49735	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:31.696649075 CEST	443	49734	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:31.696738005 CEST	443	49734	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:31.696952105 CEST	49734	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:31.697010994 CEST	443	49734	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:31.698832989 CEST	443	49734	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:31.698971987 CEST	49734	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:31.699018955 CEST	49734	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:31.699047089 CEST	443	49734	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:31.942291021 CEST	49735	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:31.984121084 CEST	443	49735	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:32.090013027 CEST	443	49735	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:32.090049982 CEST	443	49735	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:32.090425968 CEST	49735	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:32.090465069 CEST	443	49735	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:32.090487957 CEST	443	49735	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:32.090553999 CEST	49735	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:32.091090918 CEST	49735	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:32.091123104 CEST	443	49735	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:32.262624979 CEST	49736	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:32.262734890 CEST	443	49736	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:32.268676043 CEST	49736	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:32.268910885 CEST	49736	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:32.268949032 CEST	443	49736	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:32.479000092 CEST	49737	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:32.479028940 CEST	443	49737	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:32.479094982 CEST	49737	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:32.479329109 CEST	49737	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:32.479340076 CEST	443	49737	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:32.489121914 CEST	443	49736	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:32.489360094 CEST	49736	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:32.489375114 CEST	443	49736	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:32.490468025 CEST	443	49736	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:32.490751028 CEST	49736	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:32.490832090 CEST	443	49736	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:32.490853071 CEST	49736	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:32.532140017 CEST	443	49736	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:32.539983034 CEST	49736	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:32.699434042 CEST	443	49737	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:32.699685097 CEST	49737	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:32.699697018 CEST	443	49737	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:32.701191902 CEST	443	49737	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:32.701468945 CEST	49737	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:32.701877117 CEST	443	49737	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:32.742661953 CEST	443	49736	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:32.742803097 CEST	443	49736	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:32.742868900 CEST	49736	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:32.742897987 CEST	443	49736	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:32.744585037 CEST	443	49736	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:32.744652033 CEST	49736	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:32.744707108 CEST	49736	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:32.744735003 CEST	443	49736	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:32.747989893 CEST	49737	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:33.244158030 CEST	49688	443	192.168.2.16	13.107.21.200
Apr 18, 2024 03:08:33.960812092 CEST	49737	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:34.008120060 CEST	443	49737	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:34.531676054 CEST	443	49737	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:34.531860113 CEST	443	49737	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:34.532044888 CEST	49737	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:34.532056093 CEST	443	49737	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:34.532111883 CEST	49737	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:34.532443047 CEST	49737	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:34.532463074 CEST	443	49737	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:34.532471895 CEST	49737	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:34.532510042 CEST	49737	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:34.534631014 CEST	49738	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:34.534714937 CEST	443	49738	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:34.534805059 CEST	49738	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:34.535032988 CEST	49738	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:34.535060883 CEST	443	49738	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:34.754411936 CEST	443	49738	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:34.754798889 CEST	49738	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:34.754831076 CEST	443	49738	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:34.755913019 CEST	443	49738	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:34.756236076 CEST	49738	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:34.756380081 CEST	49738	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:34.756395102 CEST	443	49738	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:34.756455898 CEST	443	49738	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:34.808990002 CEST	49738	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:34.968760967 CEST	443	49738	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:34.968878984 CEST	443	49738	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:34.968930006 CEST	49738	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:34.968951941 CEST	443	49738	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:34.969362974 CEST	443	49738	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:34.969412088 CEST	49738	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:34.969425917 CEST	443	49738	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:34.969585896 CEST	443	49738	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:34.969639063 CEST	49738	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:34.969985008 CEST	49738	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:34.970014095 CEST	443	49738	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:34.988905907 CEST	49739	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:34.988991976 CEST	443	49739	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:34.989088058 CEST	49739	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:34.989356041 CEST	49739	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:34.989391088 CEST	443	49739	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:35.211009026 CEST	443	49739	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:35.211288929 CEST	49739	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:35.211325884 CEST	443	49739	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:35.211796999 CEST	443	49739	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:35.212166071 CEST	49739	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:35.212256908 CEST	443	49739	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:35.212331057 CEST	49739	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:35.256124973 CEST	443	49739	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:35.439929008 CEST	443	49739	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:35.440340996 CEST	443	49739	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:35.440454006 CEST	49739	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:35.440675974 CEST	49739	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:35.440711021 CEST	443	49739	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:36.566976070 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:36.567071915 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:36.567167997 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:36.567373037 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:36.567406893 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:36.785859108 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:36.786081076 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:36.786119938 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:36.787548065 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:36.787841082 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:36.787982941 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:36.788023949 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:36.835196018 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.025487900 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.025609016 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.025662899 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.025686979 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.025769949 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.025813103 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.025820017 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.025896072 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.025938988 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.025944948 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.033649921 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.033828020 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.033835888 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.040977955 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.041059971 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.041089058 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.046586037 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.046664000 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.046672106 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.089010954 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.089030981 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.129323959 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.129410028 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.129462957 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.132950068 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.133018970 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.133060932 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.140247107 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.140322924 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.140381098 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.154825926 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.154903889 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.154907942 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.154942036 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.155002117 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.155015945 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.162081003 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.162154913 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.162178040 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.169406891 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.169467926 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.169483900 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.176265955 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.176330090 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.176338911 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.183152914 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.183219910 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.183228016 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.189702034 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.189773083 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.189779997 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.196404934 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.196464062 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.196471930 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.203111887 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.203171968 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.203178883 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.209887028 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.209947109 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.209954023 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.213566065 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.213629007 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.213732004 CEST	49741	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.213752031 CEST	443	49741	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.715084076 CEST	49745	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.715121031 CEST	443	49745	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.715195894 CEST	49745	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.715382099 CEST	49745	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.715393066 CEST	443	49745	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.933657885 CEST	443	49745	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.933926105 CEST	49745	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.933983088 CEST	443	49745	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.934672117 CEST	443	49745	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.934962034 CEST	49745	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.935055017 CEST	443	49745	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.935281038 CEST	49747	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.935312986 CEST	443	49747	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.935352087 CEST	49745	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.935379028 CEST	443	49745	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:37.935384035 CEST	49747	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.935560942 CEST	49747	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:37.935565948 CEST	443	49747	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.147289038 CEST	443	49745	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.147429943 CEST	443	49745	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.147521019 CEST	443	49745	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.147633076 CEST	49745	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.147731066 CEST	443	49745	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.147795916 CEST	49745	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.147814035 CEST	443	49745	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.152790070 CEST	443	49747	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.153007030 CEST	49747	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.153024912 CEST	443	49747	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.153347015 CEST	443	49745	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.153408051 CEST	49745	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.153418064 CEST	443	49745	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.153458118 CEST	443	49745	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.153506994 CEST	49745	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.154458046 CEST	443	49747	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.154843092 CEST	49747	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.154843092 CEST	49747	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.155064106 CEST	443	49747	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.155311108 CEST	443	49747	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.161181927 CEST	443	49745	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.168126106 CEST	443	49745	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.168196917 CEST	49745	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.168222904 CEST	443	49745	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.168262005 CEST	443	49745	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.168312073 CEST	49745	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.175400019 CEST	443	49745	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.204031944 CEST	49747	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.220119953 CEST	49745	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.250552893 CEST	443	49745	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.254169941 CEST	443	49745	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.254245043 CEST	49745	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.254304886 CEST	443	49745	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.254411936 CEST	443	49745	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.254506111 CEST	49745	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.254609108 CEST	49745	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.254636049 CEST	443	49745	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.320391893 CEST	49749	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.320463896 CEST	443	49749	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.320568085 CEST	49749	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.320780993 CEST	49749	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.320811987 CEST	443	49749	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.382414103 CEST	443	49747	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.382769108 CEST	443	49747	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.382836103 CEST	49747	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.383102894 CEST	49747	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.383114100 CEST	443	49747	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.541119099 CEST	443	49749	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.541373968 CEST	49749	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.541397095 CEST	443	49749	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.541903973 CEST	443	49749	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.542195082 CEST	49749	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.542279959 CEST	443	49749	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.542543888 CEST	49751	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.542601109 CEST	49749	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.542628050 CEST	443	49751	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.542717934 CEST	49751	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.542942047 CEST	49751	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.542962074 CEST	443	49751	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.584137917 CEST	443	49749	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.753787994 CEST	443	49749	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.753916979 CEST	443	49749	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.753990889 CEST	49749	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.754007101 CEST	443	49749	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.754035950 CEST	443	49749	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.754086018 CEST	49749	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.754117966 CEST	443	49749	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.756449938 CEST	443	49749	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.756516933 CEST	49749	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.756663084 CEST	49749	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.756699085 CEST	443	49749	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.759531021 CEST	443	49751	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.759772062 CEST	49751	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.759793997 CEST	443	49751	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.760263920 CEST	443	49751	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.760550022 CEST	49751	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.760628939 CEST	443	49751	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.760684013 CEST	49751	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.760711908 CEST	443	49751	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.809986115 CEST	49751	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.864764929 CEST	49752	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:38.864809036 CEST	443	49752	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:38.864877939 CEST	49752	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:38.865052938 CEST	49752	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:38.865060091 CEST	443	49752	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:38.988145113 CEST	443	49751	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.988254070 CEST	443	49751	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.988327980 CEST	49751	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.988334894 CEST	443	49751	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.988392115 CEST	443	49751	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.988449097 CEST	49751	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.988464117 CEST	443	49751	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.988528013 CEST	443	49751	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.988578081 CEST	49751	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.988590002 CEST	443	49751	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.997584105 CEST	443	49751	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:38.997667074 CEST	49751	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.997788906 CEST	49751	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:38.997819901 CEST	443	49751	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:39.083132029 CEST	443	49752	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:39.083398104 CEST	49752	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:39.083420038 CEST	443	49752	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:39.087122917 CEST	443	49752	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:39.087205887 CEST	49752	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:39.087508917 CEST	49752	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:39.087646961 CEST	49752	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:39.087657928 CEST	443	49752	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:39.087682009 CEST	443	49752	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:39.129262924 CEST	49752	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:39.129277945 CEST	443	49752	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:39.177017927 CEST	49752	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:39.298734903 CEST	443	49752	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:39.298861980 CEST	443	49752	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:39.298919916 CEST	49752	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:39.298940897 CEST	443	49752	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:39.299029112 CEST	443	49752	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:39.299079895 CEST	49752	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:39.299093008 CEST	443	49752	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:39.301595926 CEST	443	49752	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:39.301661968 CEST	49752	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:39.301799059 CEST	49752	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:39.301820040 CEST	443	49752	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:39.926493883 CEST	49753	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:39.926539898 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:39.926820993 CEST	49753	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:39.926872969 CEST	49753	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:39.926887035 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.147506952 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.147893906 CEST	49753	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.147942066 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.149084091 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.149458885 CEST	49753	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.149596930 CEST	49753	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.149604082 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.149635077 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.149667978 CEST	49753	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.149740934 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.195120096 CEST	49753	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.407520056 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.411856890 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.411933899 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.411986113 CEST	49753	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.412017107 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.412062883 CEST	49753	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.412142038 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.416012049 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.416069031 CEST	49753	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.416107893 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.419704914 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.419858932 CEST	49753	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.419888020 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.426960945 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.427098036 CEST	49753	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.427125931 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.434384108 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.434533119 CEST	49753	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.434562922 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.482001066 CEST	49753	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.511796951 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.515167952 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.515233994 CEST	49753	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.515249014 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.522480965 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.522543907 CEST	49753	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.522552013 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.522778034 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.522829056 CEST	49753	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.522836924 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.522970915 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.522974968 CEST	49753	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.523000956 CEST	443	49753	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.523020983 CEST	49753	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.523040056 CEST	49753	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.525095940 CEST	49754	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:40.525168896 CEST	443	49754	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:40.525259972 CEST	49754	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:40.525465965 CEST	49754	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:40.525501013 CEST	443	49754	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:40.545695066 CEST	49758	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.545772076 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.545850992 CEST	49758	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.546000004 CEST	49758	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.546036005 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.742952108 CEST	443	49754	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:40.743268013 CEST	49754	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:40.743302107 CEST	443	49754	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:40.743778944 CEST	443	49754	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:40.744049072 CEST	49754	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:40.744158983 CEST	443	49754	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:40.744173050 CEST	49754	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:40.762381077 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.762552023 CEST	49758	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.762587070 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.763629913 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.763904095 CEST	49758	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.764061928 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.764128923 CEST	49758	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.764147043 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.786019087 CEST	49754	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:40.786043882 CEST	443	49754	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:40.818140030 CEST	49758	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.976331949 CEST	443	49754	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:40.976675034 CEST	443	49754	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:40.976742029 CEST	49754	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:40.977083921 CEST	49754	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:40.977102995 CEST	443	49754	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:40.991583109 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.991893053 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.991954088 CEST	49758	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.991981030 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.992008924 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.992063046 CEST	49758	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.992086887 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.995387077 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.995446920 CEST	49758	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.995476007 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.999202013 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:40.999264002 CEST	49758	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:40.999277115 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:41.006371021 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:41.006428957 CEST	49758	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:41.006439924 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:41.013747931 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:41.013818026 CEST	49758	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:41.013829947 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:41.055016041 CEST	49758	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:41.055033922 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:41.096652031 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:41.096721888 CEST	49758	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:41.096735001 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:41.099991083 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:41.100054979 CEST	49758	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:41.100065947 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:41.107300043 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:41.107362986 CEST	49758	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:41.107374907 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:41.114542961 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:41.114598036 CEST	49758	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:41.114609957 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:41.121853113 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:41.121913910 CEST	49758	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:41.121926069 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:41.129285097 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:41.129355907 CEST	49758	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:41.129368067 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:41.136322021 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:41.136387110 CEST	49758	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:41.136399031 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:41.136508942 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:41.136563063 CEST	49758	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:41.136663914 CEST	49758	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:41.136698008 CEST	443	49758	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:41.136720896 CEST	49758	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:41.136744976 CEST	49758	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:41.140249014 CEST	49764	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:41.140300989 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.140394926 CEST	49764	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:41.140614033 CEST	49764	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:41.140638113 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.361588955 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.361886978 CEST	49764	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:41.361923933 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.362550020 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.362844944 CEST	49764	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:41.362931013 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.362977028 CEST	49764	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:41.403024912 CEST	49764	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:41.403039932 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.590683937 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.590958118 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.591017962 CEST	49764	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:41.591037989 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.591111898 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.591164112 CEST	49764	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:41.591176987 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.597884893 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.597954035 CEST	49764	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:41.597970963 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.605015993 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.605079889 CEST	49764	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:41.605093002 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.612539053 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.612603903 CEST	49764	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:41.612616062 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.619898081 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.619970083 CEST	49764	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:41.619982004 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.674030066 CEST	49764	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:41.695188999 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.698616028 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.698687077 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.698687077 CEST	49764	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:41.698713064 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.698765039 CEST	49764	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:41.705725908 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.713303089 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.713366985 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.713370085 CEST	49764	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:41.713387966 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.713440895 CEST	49764	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:41.720452070 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.727633953 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.727699041 CEST	49764	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:41.727713108 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.735013962 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.735080004 CEST	49764	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:41.735093117 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.735419035 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:41.735485077 CEST	49764	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:41.735603094 CEST	49764	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:41.735629082 CEST	443	49764	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:55.567228079 CEST	49765	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:55.567308903 CEST	443	49765	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:55.567552090 CEST	49765	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:55.568173885 CEST	49765	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:55.568224907 CEST	443	49765	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:55.783941031 CEST	443	49765	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:55.784563065 CEST	49765	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:55.784621000 CEST	443	49765	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:55.785126925 CEST	443	49765	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:55.785469055 CEST	49765	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:55.785562992 CEST	443	49765	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:55.785967112 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:55.786022902 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:55.786048889 CEST	49765	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:55.786092997 CEST	49765	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:55.786102057 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:55.786154985 CEST	443	49765	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:55.789266109 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:55.789284945 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.009049892 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.009356022 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.009413958 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.010571957 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.010874987 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.011039972 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.011054039 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.011142015 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.011941910 CEST	443	49765	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.011991978 CEST	443	49765	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.012027025 CEST	443	49765	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.012057066 CEST	443	49765	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.012063026 CEST	49765	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.012144089 CEST	443	49765	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.012191057 CEST	49765	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.014086962 CEST	443	49765	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.014152050 CEST	49765	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.014215946 CEST	49765	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.014242887 CEST	443	49765	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.016294003 CEST	49767	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.016330957 CEST	443	49767	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.016402960 CEST	49767	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.016629934 CEST	49767	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.016639948 CEST	443	49767	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.059026003 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.236684084 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.236845016 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.236924887 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.236923933 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.236972094 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.237020969 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.237036943 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.237112045 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.237164021 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.237174988 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.241244078 CEST	443	49767	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.241502047 CEST	49767	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.241513014 CEST	443	49767	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.241996050 CEST	443	49767	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.242288113 CEST	49767	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.242363930 CEST	443	49767	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.242407084 CEST	49767	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.243628979 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.243704081 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.243716002 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.250953913 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.251038074 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.251049995 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.257628918 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.257690907 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.257702112 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.283113956 CEST	49767	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.283122063 CEST	443	49767	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.299022913 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.299035072 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.341473103 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.341541052 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.341553926 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.344748020 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.344810963 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.344822884 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.351934910 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.352021933 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.352034092 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.359402895 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.359466076 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.359477997 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.366828918 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.366905928 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.366918087 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.381128073 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.381211042 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.381221056 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.381247044 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.381294966 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.388406992 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.395725965 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.395792961 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.395803928 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.401719093 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.401819944 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.401819944 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.401848078 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.401947975 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.408427954 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.415148020 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.415219069 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.415230989 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.415553093 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.415627956 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.415755987 CEST	49766	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:08:56.415786982 CEST	443	49766	142.251.15.105	192.168.2.16
Apr 18, 2024 03:08:56.418236017 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.418275118 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.418368101 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.418687105 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.418728113 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.475991964 CEST	443	49767	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.476166010 CEST	443	49767	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.476217985 CEST	49767	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.476243973 CEST	443	49767	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.476469040 CEST	443	49767	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.476520061 CEST	49767	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.476763010 CEST	49767	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.476794958 CEST	443	49767	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.639904022 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.640173912 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.640203953 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.641299009 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.641602039 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.641716957 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.641722918 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.641777992 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.683115005 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.868403912 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.868493080 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.868549109 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.868577957 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.868609905 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.868657112 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.868665934 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.875303984 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.875354052 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.875375986 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.882795095 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.882858992 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.882883072 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.889918089 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.889987946 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.890012026 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.897176981 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.897250891 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.897278070 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.939049959 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.972606897 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.976010084 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.976043940 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.976085901 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.976130009 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.976178885 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.983269930 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.990585089 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.990624905 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.990657091 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.990684986 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:56.990741968 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:56.997889996 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:57.005153894 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:57.005208969 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:57.005235910 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:57.005266905 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:57.005310059 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:57.012438059 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:57.022620916 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:57.022660971 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:57.022694111 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:57.022722006 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:57.022768021 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:57.026046991 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:57.032763958 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:57.032793999 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:57.032843113 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:57.032871008 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:57.032927036 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:57.039824963 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:57.046371937 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:57.046399117 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:57.046504021 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:57.046533108 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:57.046588898 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:57.046597004 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:57.046613932 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:57.046659946 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:57.046683073 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:57.046700001 CEST	443	49768	74.125.136.99	192.168.2.16
Apr 18, 2024 03:08:57.046713114 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:08:57.046747923 CEST	49768	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:01.898777008 CEST	49769	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:01.898819923 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:01.898880959 CEST	49769	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:01.899229050 CEST	49769	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:01.899243116 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.114543915 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.114811897 CEST	49769	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.114840984 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.115171909 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.115484953 CEST	49769	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.115545988 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.115626097 CEST	49769	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.115721941 CEST	49769	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.115758896 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.411468983 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.418618917 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.418682098 CEST	49769	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.418705940 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.418788910 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.418828011 CEST	49769	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.418834925 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.422835112 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.422890902 CEST	49769	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.422895908 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.430351973 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.430413008 CEST	49769	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.430421114 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.434784889 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.434848070 CEST	49769	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.434854984 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.434881926 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.434926033 CEST	49769	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.442109108 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.486016035 CEST	49769	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.486027002 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.515979052 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.516055107 CEST	49769	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.516086102 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.519211054 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.519272089 CEST	49769	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.519279957 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.526844978 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.526905060 CEST	49769	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.526916981 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.534049988 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.534116983 CEST	49769	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.534135103 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.541547060 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.541620970 CEST	49769	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.541707039 CEST	49769	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.541737080 CEST	443	49769	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.544272900 CEST	49770	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:02.544352055 CEST	443	49770	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:02.544450998 CEST	49770	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:02.544646978 CEST	49770	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:02.544686079 CEST	443	49770	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:02.550885916 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.550966978 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.551047087 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.551213026 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.551248074 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.763436079 CEST	443	49770	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:02.763730049 CEST	49770	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:02.763788939 CEST	443	49770	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:02.764991045 CEST	443	49770	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:02.765291929 CEST	49770	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:02.765388012 CEST	49770	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:02.765402079 CEST	443	49770	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:02.765486956 CEST	443	49770	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:02.766323090 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.766503096 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.766545057 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.767021894 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.767266035 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.767353058 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.767369032 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.767385960 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.805103064 CEST	49770	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:02.821140051 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.993155956 CEST	443	49770	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:02.993462086 CEST	443	49770	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:02.993542910 CEST	49770	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:02.994055033 CEST	49770	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:02.994095087 CEST	443	49770	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:02.994242907 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.994422913 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.994484901 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.994518995 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.994545937 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.994596004 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.994632959 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.997452021 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:02.997528076 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:02.997555971 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.001303911 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.001368046 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:03.001382113 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.008837938 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.008902073 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:03.008913994 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.016128063 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.016186953 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:03.016199112 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.061033964 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:03.061058998 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.098648071 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.098779917 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:03.098807096 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.102035046 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.102236986 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:03.102250099 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.109343052 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.109436035 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:03.109447002 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.116588116 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.116667032 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:03.116677999 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.123948097 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.124030113 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:03.124039888 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.131505966 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.131580114 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:03.131591082 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.138503075 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.138564110 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:03.138575077 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.145792007 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.145865917 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:03.145876884 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.152896881 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.152961969 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:03.152976990 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.159400940 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.159482956 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:03.159497023 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.166177988 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.166253090 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:03.166270018 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.172684908 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.172981024 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.173021078 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:03.173048019 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:03.173194885 CEST	49771	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:03.173224926 CEST	443	49771	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:03.176388979 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.176466942 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.176547050 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.176745892 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.176762104 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.398036003 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.398281097 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.398299932 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.399380922 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.399650097 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.399775982 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.399785042 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.399821043 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.445250034 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.627569914 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.627895117 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.627979994 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.628053904 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.628087997 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.628217936 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.632339954 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.639710903 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.639784098 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.639800072 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.643332005 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.643399000 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.643412113 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.650810003 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.650873899 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.650886059 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.701133013 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.701189995 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.732317924 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.732391119 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.732448101 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.735964060 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.736031055 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.736046076 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.743438005 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.743503094 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.743515015 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.750674009 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.750731945 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.750745058 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.758009911 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.758070946 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.758083105 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.765506983 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.765572071 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.765583992 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.772794008 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.772871971 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.772888899 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.780072927 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.780142069 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.780153036 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.786874056 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.786936998 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.786950111 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.793648958 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.793713093 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.793725967 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.800424099 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.800534010 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.800546885 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.807091951 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.807153940 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.807167053 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.807456017 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.807519913 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.807667017 CEST	49772	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:03.807697058 CEST	443	49772	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:03.909162998 CEST	49699	80	192.168.2.16	192.229.211.108
Apr 18, 2024 03:09:04.013014078 CEST	80	49699	192.229.211.108	192.168.2.16
Apr 18, 2024 03:09:04.013226032 CEST	49699	80	192.168.2.16	192.229.211.108
Apr 18, 2024 03:09:07.308687925 CEST	49773	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:07.308732033 CEST	443	49773	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.308953047 CEST	49773	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:07.309129953 CEST	49773	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:07.309144974 CEST	443	49773	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.528924942 CEST	443	49773	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.529234886 CEST	49773	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:07.529294014 CEST	443	49773	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.530390024 CEST	443	49773	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.531299114 CEST	49773	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:07.531518936 CEST	443	49773	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.531640053 CEST	49774	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:07.531716108 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.531810999 CEST	49774	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:07.531850100 CEST	49773	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:07.531851053 CEST	49773	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:07.531944036 CEST	443	49773	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.532016039 CEST	49774	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:07.532035112 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.751804113 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.752192974 CEST	49774	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:07.752252102 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.752736092 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.753642082 CEST	49774	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:07.753739119 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.753782988 CEST	49774	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:07.753814936 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.762306929 CEST	443	49773	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.762429953 CEST	443	49773	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.762501955 CEST	49773	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:07.762561083 CEST	443	49773	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.762649059 CEST	443	49773	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.762710094 CEST	49773	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:07.762727976 CEST	443	49773	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.766328096 CEST	443	49773	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.766418934 CEST	49773	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:07.766495943 CEST	49773	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:07.766521931 CEST	443	49773	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.768711090 CEST	49775	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:07.768759966 CEST	443	49775	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:07.768874884 CEST	49775	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:07.769130945 CEST	49775	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:07.769154072 CEST	443	49775	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:07.801161051 CEST	49774	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:07.979084015 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.979212046 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.979291916 CEST	49774	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:07.979300022 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.979353905 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.979423046 CEST	49774	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:07.979440928 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.982142925 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.982218981 CEST	49774	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:07.982239962 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.985922098 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.986007929 CEST	49774	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:07.986023903 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.988513947 CEST	443	49775	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:07.988787889 CEST	49775	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:07.988843918 CEST	443	49775	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:07.989944935 CEST	443	49775	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:07.990310907 CEST	49775	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:07.990449905 CEST	49775	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:07.990462065 CEST	443	49775	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:07.990493059 CEST	443	49775	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:07.993232965 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:07.993310928 CEST	49774	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:07.993331909 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:08.000541925 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:08.000616074 CEST	49774	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:08.000637054 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:08.040025949 CEST	49775	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.040230989 CEST	49774	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:08.040287971 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:08.083766937 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:08.083997011 CEST	49774	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:08.084058046 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:08.087028980 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:08.087232113 CEST	49774	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:08.087291002 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:08.094221115 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:08.094420910 CEST	49774	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:08.094480038 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:08.101458073 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:08.101650000 CEST	49774	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:08.101708889 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:08.108781099 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:08.108972073 CEST	49774	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:08.109030008 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:08.116281986 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:08.116485119 CEST	49774	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:08.116543055 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:08.123441935 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:08.123656988 CEST	49774	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:08.123713970 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:08.130635977 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:08.130834103 CEST	49774	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:08.130894899 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:08.137320995 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:08.137542009 CEST	49774	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:08.137600899 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:08.137641907 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:08.137849092 CEST	49774	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:08.137850046 CEST	49774	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:08.140070915 CEST	49776	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.140146017 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.140255928 CEST	49776	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.140434027 CEST	49776	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.140450954 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.218008041 CEST	443	49775	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.218132973 CEST	443	49775	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.218209028 CEST	49775	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.218220949 CEST	443	49775	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.218410969 CEST	443	49775	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.218492985 CEST	49775	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.218539953 CEST	49775	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.218549967 CEST	443	49775	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.359733105 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.360022068 CEST	49776	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.360037088 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.361164093 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.361466885 CEST	49776	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.361594915 CEST	49776	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.361601114 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.361634016 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.407052040 CEST	49776	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.439218044 CEST	49774	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:08.439276934 CEST	443	49774	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:08.591352940 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.591495991 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.591569901 CEST	49776	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.591583014 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.591612101 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.591676950 CEST	49776	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.591695070 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.591826916 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.591886044 CEST	49776	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.591896057 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.598711014 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.598779917 CEST	49776	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.598793983 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.605806112 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.605874062 CEST	49776	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.605880022 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.612464905 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.612545013 CEST	49776	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.612550974 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.662040949 CEST	49776	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.662060976 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.695980072 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.696082115 CEST	49776	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.696118116 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.699486017 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.699554920 CEST	49776	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.699567080 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.706521034 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.706589937 CEST	49776	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.706602097 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.713934898 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.714030027 CEST	49776	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.714041948 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.721308947 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.721374035 CEST	49776	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.721385956 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.736010075 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.736114025 CEST	49776	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.736116886 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.736140966 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.736200094 CEST	49776	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.742556095 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.749164104 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.749247074 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.749252081 CEST	49776	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.749269009 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.749320030 CEST	49776	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.749413013 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.749531031 CEST	49776	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.749550104 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.749599934 CEST	443	49776	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:08.749613047 CEST	49776	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:08.749664068 CEST	49776	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:14.462740898 CEST	49777	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:14.462822914 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:14.463124037 CEST	49777	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:14.463231087 CEST	49777	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:14.463260889 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:14.680718899 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:14.681129932 CEST	49777	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:14.681191921 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:14.681662083 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:14.681968927 CEST	49777	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:14.682049990 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:14.682094097 CEST	49777	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:14.682130098 CEST	49777	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:14.682178020 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:14.734045982 CEST	49777	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:14.938796997 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:14.949115038 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:14.949204922 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:14.949335098 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:14.949346066 CEST	49777	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:14.949418068 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:14.949457884 CEST	49777	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:14.956207991 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:14.956429005 CEST	49777	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:14.956487894 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:14.963251114 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:14.963474989 CEST	49777	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:14.963532925 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:14.968090057 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:14.968307018 CEST	49777	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:14.968365908 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:14.975287914 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:14.975568056 CEST	49777	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:14.975626945 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.021148920 CEST	49777	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.043343067 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.046983004 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.047044039 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.047208071 CEST	49777	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.047270060 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.047350883 CEST	49777	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.054121017 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.061489105 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.061585903 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.061687946 CEST	49777	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.061748981 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.061837912 CEST	49777	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.068764925 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.069067001 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.069346905 CEST	49777	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.069348097 CEST	49777	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.071799040 CEST	49778	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:15.071862936 CEST	443	49778	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:15.071965933 CEST	49778	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:15.072212934 CEST	49778	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:15.072230101 CEST	443	49778	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:15.076741934 CEST	49779	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.076786041 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.076865911 CEST	49779	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.077219963 CEST	49779	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.077258110 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.292896032 CEST	443	49778	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:15.293237925 CEST	49778	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:15.293263912 CEST	443	49778	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:15.294450045 CEST	443	49778	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:15.294841051 CEST	49778	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:15.295025110 CEST	443	49778	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:15.295038939 CEST	49778	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:15.297326088 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.297708035 CEST	49779	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.297766924 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.298876047 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.299268007 CEST	49779	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.299448013 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.299454927 CEST	49779	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.299554110 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.339051962 CEST	49778	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:15.339071989 CEST	443	49778	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:15.339186907 CEST	49779	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.371193886 CEST	49777	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.371253014 CEST	443	49777	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.521533012 CEST	443	49778	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:15.521821976 CEST	443	49778	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:15.521899939 CEST	49778	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:15.522635937 CEST	49778	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:15.522677898 CEST	443	49778	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:15.524935961 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.525000095 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.525026083 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.525055885 CEST	49779	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.525079966 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.525130987 CEST	49779	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.529715061 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.533206940 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.533273935 CEST	49779	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.533282995 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.540823936 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.540909052 CEST	49779	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.540918112 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.548060894 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.548122883 CEST	49779	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.548130035 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.595057011 CEST	49779	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.595069885 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.630043030 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.630139112 CEST	49779	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.630168915 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.633155107 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.633266926 CEST	49779	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.633275032 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.640898943 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.641053915 CEST	49779	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.641066074 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.648139954 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.648267031 CEST	49779	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.648278952 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.655420065 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.655530930 CEST	49779	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.655541897 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.662693977 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.662765026 CEST	49779	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.662775040 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.670114040 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.670221090 CEST	49779	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.670232058 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.677294016 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.677393913 CEST	49779	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.677406073 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.684236050 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.684304953 CEST	49779	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.684315920 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.690866947 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.690970898 CEST	49779	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.690984011 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.697532892 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.697602034 CEST	49779	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.697612047 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.704730988 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.704813004 CEST	49779	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.704945087 CEST	49779	443	192.168.2.16	142.251.15.105
Apr 18, 2024 03:09:15.704974890 CEST	443	49779	142.251.15.105	192.168.2.16
Apr 18, 2024 03:09:15.708518982 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:15.708604097 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:15.708914042 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:15.709014893 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:15.709044933 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:15.928359032 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:15.928777933 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:15.928839922 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:15.929956913 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:15.930430889 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:15.930582047 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:15.930597067 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:15.930624962 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:15.979185104 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:16.162720919 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.162988901 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.163078070 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.163100958 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:16.163125038 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.163183928 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:16.163192987 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.171962023 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.172175884 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:16.172235012 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.175776005 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.175992012 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:16.176050901 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.182974100 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.183125019 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:16.183182955 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.190489054 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.190608025 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:16.190668106 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.235496998 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:16.267323971 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.270832062 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.270926952 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.271102905 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:16.271148920 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.271236897 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:16.277939081 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.285310030 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.285424948 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.285497904 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:16.285559893 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.285640955 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:16.292788029 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.299968004 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.300069094 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.300183058 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:16.300245047 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.300331116 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:16.307193995 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.314547062 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.314640045 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.314743996 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:16.314805031 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.314894915 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:16.321751118 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.328953981 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.329041004 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.329142094 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:16.329202890 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.329288006 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:16.335867882 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.343111038 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.343295097 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:16.343353987 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.343559027 CEST	443	49780	74.125.136.99	192.168.2.16
Apr 18, 2024 03:09:16.343785048 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:16.343785048 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:16.648205042 CEST	49780	443	192.168.2.16	74.125.136.99
Apr 18, 2024 03:09:16.648264885 CEST	443	49780	74.125.136.99	192.168.2.16

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 03:08:24.310714960 CEST	53	60293	1.1.1.1	192.168.2.16
Apr 18, 2024 03:08:24.412595034 CEST	60689	53	192.168.2.16	1.1.1.1
Apr 18, 2024 03:08:24.412933111 CEST	50305	53	192.168.2.16	1.1.1.1
Apr 18, 2024 03:08:24.420361996 CEST	53	49567	1.1.1.1	192.168.2.16
Apr 18, 2024 03:08:24.516977072 CEST	53	60689	1.1.1.1	192.168.2.16
Apr 18, 2024 03:08:24.517775059 CEST	53	50305	1.1.1.1	192.168.2.16
Apr 18, 2024 03:08:25.028830051 CEST	53	60615	1.1.1.1	192.168.2.16
Apr 18, 2024 03:08:27.862238884 CEST	53	56098	1.1.1.1	192.168.2.16
Apr 18, 2024 03:08:28.576477051 CEST	58389	53	192.168.2.16	1.1.1.1
Apr 18, 2024 03:08:28.576621056 CEST	56004	53	192.168.2.16	1.1.1.1
Apr 18, 2024 03:08:28.681087971 CEST	53	58389	1.1.1.1	192.168.2.16
Apr 18, 2024 03:08:28.681402922 CEST	53	56004	1.1.1.1	192.168.2.16
Apr 18, 2024 03:08:35.451775074 CEST	138	138	192.168.2.16	192.168.2.255
Apr 18, 2024 03:08:35.548459053 CEST	53	55631	1.1.1.1	192.168.2.16
Apr 18, 2024 03:08:36.783935070 CEST	53	59539	1.1.1.1	192.168.2.16
Apr 18, 2024 03:08:37.839822054 CEST	53	54169	1.1.1.1	192.168.2.16
Apr 18, 2024 03:08:38.248536110 CEST	53	60835	1.1.1.1	192.168.2.16
Apr 18, 2024 03:08:38.758872986 CEST	61690	53	192.168.2.16	1.1.1.1
Apr 18, 2024 03:08:38.759016037 CEST	65116	53	192.168.2.16	1.1.1.1
Apr 18, 2024 03:08:38.863452911 CEST	53	65116	1.1.1.1	192.168.2.16
Apr 18, 2024 03:08:38.864378929 CEST	53	61690	1.1.1.1	192.168.2.16
Apr 18, 2024 03:08:42.034881115 CEST	53	57555	1.1.1.1	192.168.2.16
Apr 18, 2024 03:09:00.779737949 CEST	53	50187	1.1.1.1	192.168.2.16

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 18, 2024 03:08:24.412595034 CEST	192.168.2.16	1.1.1.1	0x7c76	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 03:08:24.412933111 CEST	192.168.2.16	1.1.1.1	0x46ce	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 03:08:28.576477051 CEST	192.168.2.16	1.1.1.1	0xc24a	Standard query (0)	lh5.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 03:08:28.576621056 CEST	192.168.2.16	1.1.1.1	0x37af	Standard query (0)	lh5.googleusercontent.com	65	IN (0x0001)	false
Apr 18, 2024 03:08:38.758872986 CEST	192.168.2.16	1.1.1.1	0x3e6b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 03:08:38.759016037 CEST	192.168.2.16	1.1.1.1	0x9730	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 18, 2024 03:08:24.516977072 CEST	1.1.1.1	192.168.2.16	0x7c76	No error (0)	www.google.com		142.251.15.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 03:08:24.516977072 CEST	1.1.1.1	192.168.2.16	0x7c76	No error (0)	www.google.com		142.251.15.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 03:08:24.516977072 CEST	1.1.1.1	192.168.2.16	0x7c76	No error (0)	www.google.com		142.251.15.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 03:08:24.516977072 CEST	1.1.1.1	192.168.2.16	0x7c76	No error (0)	www.google.com		142.251.15.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 03:08:24.516977072 CEST	1.1.1.1	192.168.2.16	0x7c76	No error (0)	www.google.com		142.251.15.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 03:08:24.516977072 CEST	1.1.1.1	192.168.2.16	0x7c76	No error (0)	www.google.com		142.251.15.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 03:08:24.517775059 CEST	1.1.1.1	192.168.2.16	0x46ce	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 03:08:28.681087971 CEST	1.1.1.1	192.168.2.16	0xc24a	No error (0)	lh5.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 03:08:28.681087971 CEST	1.1.1.1	192.168.2.16	0xc24a	No error (0)	googlehosted.l.googleusercontent.com		64.233.177.132	A (IP address)	IN (0x0001)	false
Apr 18, 2024 03:08:28.681402922 CEST	1.1.1.1	192.168.2.16	0x37af	No error (0)	lh5.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 03:08:38.863452911 CEST	1.1.1.1	192.168.2.16	0x9730	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 03:08:38.864378929 CEST	1.1.1.1	192.168.2.16	0x3e6b	No error (0)	www.google.com		74.125.136.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 03:08:38.864378929 CEST	1.1.1.1	192.168.2.16	0x3e6b	No error (0)	www.google.com		74.125.136.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 03:08:38.864378929 CEST	1.1.1.1	192.168.2.16	0x3e6b	No error (0)	www.google.com		74.125.136.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 03:08:38.864378929 CEST	1.1.1.1	192.168.2.16	0x3e6b	No error (0)	www.google.com		74.125.136.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 03:08:38.864378929 CEST	1.1.1.1	192.168.2.16	0x3e6b	No error (0)	www.google.com		74.125.136.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 03:08:38.864378929 CEST	1.1.1.1	192.168.2.16	0x3e6b	No error (0)	www.google.com		74.125.136.106	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

slscr.update.microsoft.com

fs.microsoft.com

www.google.com

lh5.googleusercontent.com

https:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.16	49704	40.68.123.157	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:07:35 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=rP1zYzBT3PL17Hh&MD=kDgTXRm9 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-18 01:07:36 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 94d52e33-2af0-4929-afc6-bd16b5ed0937 MS-RequestId: da3b62a9-076a-4da6-94aa-948f29d0f033 MS-CV: zqFe3uVpu0i+tF0H.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 18 Apr 2024 01:07:35 GMT Connection: close Content-Length: 24490
2024-04-18 01:07:36 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-18 01:07:36 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.16	49706	23.33.136.127	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:07:37 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-18 01:07:37 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/07A7) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=21360 Date: Thu, 18 Apr 2024 01:07:37 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.16	49707	23.33.136.127	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:07:38 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-18 01:07:38 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=21400 Date: Thu, 18 Apr 2024 01:07:38 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-18 01:07:38 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.16	49708	40.68.123.157	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:13 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=rP1zYzBT3PL17Hh&MD=kDgTXRm9 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-18 01:08:14 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 0e1db157-9296-4481-b5ad-fe5ecbd1568c MS-RequestId: c488be0e-ce75-47f5-aa5f-baa5dcd72d8e MS-CV: UWtxX5qgpE+lYGQ7.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 18 Apr 2024 01:08:13 GMT Connection: close Content-Length: 25457
2024-04-18 01:08:14 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-18 01:08:14 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.16	49712	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:24 UTC	627	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 01:08:24 UTC	1703	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 01:08:24 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-4OJtXxEcAgVoAbkOGTtYBA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 01:08:24 UTC	1703	IN	Data Raw: 62 37 38 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 67 6f 6c 64 6d 61 6e 20 73 61 63 68 73 20 62 69 74 63 6f 69 6e 20 68 61 6c 76 69 6e 67 22 2c 22 61 70 70 6c 65 20 69 70 68 6f 6e 65 20 31 36 22 2c 22 77 65 61 74 68 65 72 20 73 74 6f 72 6d 73 20 74 6f 72 6e 61 64 6f 65 73 22 2c 22 63 6c 65 76 65 6c 61 6e 64 20 62 72 6f 77 6e 73 20 6e 65 77 20 68 65 6c 6d 65 74 22 2c 22 71 75 65 6e 74 69 6e 20 74 61 72 61 6e 74 69 6e 6f 20 74 68 65 20 6d 6f 76 69 65 20 63 72 69 74 69 63 22 2c 22 63 68 65 76 79 20 73 69 6c 76 65 72 61 64 6f 20 66 6f 78 20 66 61 63 74 6f 72 79 22 2c 22 64 65 74 72 6f 69 74 20 6c 69 6f 6e 73 20 75 6e 69 66 6f 72 6d 73 22 2c 22 6e 79 74 20 63 72 6f 73 73 77 6f 72 64 20 63 6c 75 65 73 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 Data Ascii: b78)]}'["",["goldman sachs bitcoin halving","apple iphone 16","weather storms tornadoes","cleveland browns new helmet","quentin tarantino the movie critic","chevy silverado fox factory","detroit lions uniforms","nyt crossword clues"],["","","","","",""
2024-04-18 01:08:24 UTC	1240	IN	Data Raw: 4f 47 4e 51 4e 54 5a 54 4d 6d 6c 4e 62 6b 6f 32 53 33 68 49 64 30 39 50 62 48 46 35 59 6d 5a 75 5a 57 31 77 52 44 52 44 54 44 68 54 4e 45 35 6a 64 47 70 59 65 6b 64 6a 54 6c 6c 75 62 54 42 68 62 6e 4d 30 65 58 67 33 59 32 6c 69 63 6a 6b 72 52 7a 6c 58 65 46 64 55 56 45 77 76 62 6b 4a 43 4f 46 4a 70 54 31 70 77 5a 6e 4e 31 62 30 64 30 4d 47 30 76 61 57 4e 4e 5a 47 39 42 59 56 42 4b 64 45 39 35 53 6d 52 58 56 30 68 6a 52 30 68 6e 59 6b 4d 79 52 55 52 68 53 48 56 33 64 44 6c 44 65 56 64 78 54 7a 64 35 4c 31 68 47 52 46 63 78 56 47 51 7a 51 6b 68 48 63 47 52 32 53 47 39 6c 5a 7a 5a 75 4d 31 6c 56 65 56 52 57 4d 55 78 73 54 33 4d 32 64 58 56 59 64 6b 64 76 59 54 4d 32 61 32 30 31 59 6b 5a 6c 62 54 46 32 62 6a 6b 72 53 33 4a 4a 53 6b 70 4b 52 32 78 74 57 6a 4e Data Ascii: OGNQNTZTMmlNbko2S3hId09PbHF5YmZuZW1wRDRDTDhTNE5jdGpYekdjTllubTBhbnM0eXg3Y2licjkrRzlXeFdUVEwvbkJCOFJpT1pwZnN1b0d0MG0vaWNNZG9BYVBKdE95SmRXV0hjR0hnYkMyRURhSHV3dDlDeVdxTzd5L1hGRFcxVGQzQkhHcGR2SG9lZzZuM1lVeVRWMUxsT3M2dXVYdkdvYTM2a201YkZlbTF2bjkrS3JJSkpKR2xtWjN
2024-04-18 01:08:24 UTC	649	IN	Data Raw: 32 38 32 0d 0a 6c 58 54 30 35 74 55 57 56 73 64 45 73 35 56 44 63 34 56 58 5a 4d 53 33 56 49 4e 6b 52 74 56 56 6c 6f 52 48 70 35 59 6b 56 46 63 6d 5a 72 53 55 52 6a 61 47 5a 58 55 30 4a 6d 4d 6b 51 78 4e 48 4e 74 5a 6e 68 73 4e 6b 68 4a 62 56 42 52 56 56 56 59 65 6e 68 45 65 57 4a 6c 59 30 70 7a 59 30 68 46 52 6b 73 79 5a 6a 5a 32 4d 46 51 76 4c 7a 4a 52 50 54 30 36 49 6e 46 31 5a 57 35 30 61 57 34 67 64 47 46 79 59 57 35 30 61 57 35 76 49 48 52 6f 5a 53 42 74 62 33 5a 70 5a 53 42 6a 63 6d 6c 30 61 57 4e 4b 42 79 4d 33 4e 54 45 7a 4d 44 6c 53 56 57 64 7a 58 33 4e 7a 63 44 31 6c 53 6e 70 71 4e 48 52 57 55 44 46 36 59 7a 42 4d 51 7a 52 78 53 32 74 32 53 6b 35 71 55 58 64 5a 55 46 4a 54 53 32 6c 34 54 6e 70 54 64 6b 70 36 52 6b 31 76 55 31 4e 34 53 30 4a 45 Data Ascii: 282lXT05tUWVsdEs5VDc4VXZMS3VINkRtVVloRHp5YkVFcmZrSURjaGZXU0JmMkQxNHNtZnhsNkhJbVBRVVVYenhEeWJlY0pzY0hFRksyZjZ2MFQvLzJRPT06InF1ZW50aW4gdGFyYW50aW5vIHRoZSBtb3ZpZSBjcml0aWNKByM3NTEzMDlSVWdzX3NzcD1lSnpqNHRWUDF6YzBMQzRxS2t2Sk5qUXdZUFJTS2l4TnpTdkp6Rk1vU1N4S0JE
2024-04-18 01:08:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.16	49714	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:24 UTC	530	OUT	GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 01:08:25 UTC	1843	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgRRtTk0GInlgbEGIjAqSG6qzk0ra_97H04g98D6YmD7Q3oweFIUlIYySdkbCbloCe41Ki0htoN7VEj0BBcyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgwIieWBsQYQwprH1AESBFG1OTQ Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Thu, 18 Apr 2024 01:08:25 GMT Server: gws Content-Length: 458 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-18-01; expires=Sat, 18-May-2024 01:08:25 GMT; path=/; domain=.google.com; Secure; SameSite=none Set-Cookie: NID=513=mE19LzVEoqaHGsHyJIOfTP52AtkRlCrY_njRf47RaRhf1LrMMP82RGJ4VbdsyuW4FvCl5xahwpcu5Szio7cep5teQ8K92WeBxUNe4dg9jQlBmFh3ugRXtpHxsETBQuhwOU7do37YRUuPvaIFan23VQR-EHEdCpcaU4p53ZI_ejs; expires=Fri, 18-Oct-2024 01:08:25 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 01:08:25 UTC	458	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 6f 67 62 25 33 46 68 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.16	49715	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:24 UTC	353	OUT	GET /async/newtab_promos HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 01:08:25 UTC	1761	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgRRtTk0GInlgbEGIjDD_Fw62_katFhyo9zzmr8gQmeIehtlet4MzBVMpDoKind8jSRiUN-W8363LVjsk9AyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgwIieWBsQYQ5dv06QESBFG1OTQ Content-Type: text/html; charset=UTF-8 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Thu, 18 Apr 2024 01:08:25 GMT Server: gws Content-Length: 417 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-18-01; expires=Sat, 18-May-2024 01:08:25 GMT; path=/; domain=.google.com; Secure; SameSite=none Set-Cookie: NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; expires=Fri, 18-Oct-2024 01:08:25 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 01:08:25 UTC	417	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 70 72 6f 6d 6f 73 26 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_promos&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.16	49713	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:25 UTC	932	OUT	GET /sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgRRtTk0GInlgbEGIjAqSG6qzk0ra_97H04g98D6YmD7Q3oweFIUlIYySdkbCbloCe41Ki0htoN7VEj0BBcyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-18-01; NID=513=mE19LzVEoqaHGsHyJIOfTP52AtkRlCrY_njRf47RaRhf1LrMMP82RGJ4VbdsyuW4FvCl5xahwpcu5Szio7cep5teQ8K92WeBxUNe4dg9jQlBmFh3ugRXtpHxsETBQuhwOU7do37YRUuPvaIFan23VQR-EHEdCpcaU4p53ZI_ejs
2024-04-18 01:08:25 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Thu, 18 Apr 2024 01:08:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 3183 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 01:08:25 UTC	899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 6f 67 62 3f 68 6c 3d 65 6e 2d 55 53 26 61 6d 70 3b 61 73 79 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.google.com/async/newtab_ogb?hl=en-US&asy
2024-04-18 01:08:25 UTC	1255	IN	Data Raw: 0a 3c 73 63 72 69 70 74 3e 76 61 72 20 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 63 68 61 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 36 4c 66 77 75 79 55 54 41 41 41 41 41 4f 41 6d 6f 53 30 66 64 71 69 6a 43 32 50 62 62 64 48 34 6b 6a 71 36 32 59 31 62 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 22 20 64 61 74 61 2d 73 3d 22 61 30 5a 36 63 64 79 75 56 Data Ascii: <script>var submitCallback = function(response) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-recaptcha" data-sitekey="6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b" data-callback="submitCallback" data-s="a0Z6cdyuV
2024-04-18 01:08:25 UTC	1029	IN	Data Raw: 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 65 6d 3b 22 3e 0a 54 68 69 73 20 70 61 67 65 20 61 70 70 65 61 72 73 20 77 68 65 6e 20 47 6f 6f 67 6c 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 65 74 65 63 74 73 20 72 65 71 75 65 73 74 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 70 70 65 61 72 20 74 6f 20 62 65 20 69 6e 20 76 69 6f 6c 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 74 65 72 6d 73 2f 22 3e 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 3c 2f 61 3e 2e 20 54 68 65 20 62 6c 6f 63 6b 20 77 69 6c 6c 20 65 78 70 69 72 65 20 73 68 6f 72 74 6c 79 20 61 66 74 Data Ascii: ; line-height:1.4em;">This page appears when Google automatically detects requests coming from your computer network which appear to be in violation of the <a href="//www.google.com/policies/terms/">Terms of Service</a>. The block will expire shortly aft

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.16	49716	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:25 UTC	738	OUT	GET /sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgRRtTk0GInlgbEGIjDD_Fw62_katFhyo9zzmr8gQmeIehtlet4MzBVMpDoKind8jSRiUN-W8363LVjsk9AyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4
2024-04-18 01:08:25 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Thu, 18 Apr 2024 01:08:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 3111 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 01:08:25 UTC	899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 70 72 6f 6d 6f 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.google.com/async/newtab_promos</title></head
2024-04-18 01:08:25 UTC	1255	IN	Data Raw: 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 63 68 61 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 36 4c 66 77 75 79 55 54 41 41 41 41 41 4f 41 6d 6f 53 30 66 64 71 69 6a 43 32 50 62 62 64 48 34 6b 6a 71 36 32 59 31 62 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 22 20 64 61 74 61 2d 73 3d 22 36 61 6d 70 63 53 50 44 33 62 34 5a 6a 4c 38 7a 45 45 50 30 4e 30 31 71 5a 43 4b 66 7a 73 73 4d 55 Data Ascii: ack = function(response) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-recaptcha" data-sitekey="6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b" data-callback="submitCallback" data-s="6ampcSPD3b4ZjL8zEEP0N01qZCKfzssMU
2024-04-18 01:08:25 UTC	957	IN	Data Raw: 6f 67 6c 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 65 74 65 63 74 73 20 72 65 71 75 65 73 74 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 70 70 65 61 72 20 74 6f 20 62 65 20 69 6e 20 76 69 6f 6c 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 74 65 72 6d 73 2f 22 3e 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 3c 2f 61 3e 2e 20 54 68 65 20 62 6c 6f 63 6b 20 77 69 6c 6c 20 65 78 70 69 72 65 20 73 68 6f 72 74 6c 79 20 61 66 74 65 72 20 74 68 6f 73 65 20 72 65 71 75 65 73 74 73 20 73 74 6f 70 2e 20 20 49 6e 20 74 68 65 20 6d 65 61 6e 74 69 6d 65 2c 20 73 6f 6c 76 69 6e Data Ascii: ogle automatically detects requests coming from your computer network which appear to be in violation of the <a href="//www.google.com/policies/terms/">Terms of Service</a>. The block will expire shortly after those requests stop. In the meantime, solvin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.16	49718	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:27 UTC	858	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=v&oit=1&cp=1&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.16	49719	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:27 UTC	859	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=vi&oit=1&cp=2&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4
2024-04-18 01:08:27 UTC	1703	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 01:08:27 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-q6Kq2iHRLHPRqY6ee-lBTA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 01:08:27 UTC	1703	IN	Data Raw: 62 63 37 0d 0a 29 5d 7d 27 0a 5b 22 76 69 22 2c 5b 22 76 69 73 74 61 70 72 69 6e 74 22 2c 22 76 69 73 74 61 70 72 69 6e 74 22 2c 22 76 69 63 74 6f 72 69 61 20 73 65 63 72 65 74 22 2c 22 76 69 6d 65 6f 22 2c 22 76 69 73 69 6f 6e 77 6f 72 6b 73 22 2c 22 76 69 72 74 75 61 6c 20 61 72 6b 61 6e 73 61 73 22 2c 22 76 69 63 74 6f 72 20 77 65 6d 62 61 6e 79 61 6d 61 22 2c 22 76 69 72 67 69 6e 20 76 6f 79 61 67 65 73 22 2c 22 76 69 74 61 6d 69 6e 20 73 68 6f 70 70 65 22 2c 22 76 69 76 69 6e 74 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 Data Ascii: bc7)]}'["vi",["vistaprint","vistaprint","victoria secret","vimeo","visionworks","virtual arkansas","victor wembanyama","virgin voyages","vitamin shoppe","vivint"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google
2024-04-18 01:08:27 UTC	1319	IN	Data Raw: 42 68 62 6e 6b 79 5a 47 68 30 64 48 42 7a 4f 69 38 76 5a 57 35 6a 63 6e 6c 77 64 47 56 6b 4c 58 52 69 62 6a 41 75 5a 33 4e 30 59 58 52 70 59 79 35 6a 62 32 30 76 61 57 31 68 5a 32 56 7a 50 33 45 39 64 47 4a 75 4f 6b 46 4f 5a 44 6c 48 59 31 4d 30 61 47 46 4b 64 32 64 56 52 7a 52 6e 4f 46 70 61 58 33 45 31 51 33 56 48 57 58 4e 74 52 48 4e 48 5a 45 4e 72 53 47 6b 79 52 58 6c 4f 61 45 39 48 4e 6d 5a 72 4a 6e 4d 39 4d 54 41 36 44 6c 5a 70 63 6d 64 70 62 69 42 57 62 33 6c 68 5a 32 56 7a 53 67 63 6a 59 54 4d 77 4d 44 41 77 55 6b 4e 6e 63 31 39 7a 63 33 41 39 5a 55 70 36 61 6a 52 30 56 6c 41 78 65 6d 4d 77 56 45 4e 78 63 45 31 44 4e 55 78 4c 61 58 42 52 57 55 52 53 5a 32 52 48 52 48 63 30 61 58 5a 4d 54 45 56 79 55 48 70 47 54 57 39 35 4e 6a 6c 4e 56 45 55 34 64 Data Ascii: BhbnkyZGh0dHBzOi8vZW5jcnlwdGVkLXRibjAuZ3N0YXRpYy5jb20vaW1hZ2VzP3E9dGJuOkFOZDlHY1M0aGFKd2dVRzRnOFpaX3E1Q3VHWXNtRHNHZENrSGkyRXlOaE9HNmZrJnM9MTA6DlZpcmdpbiBWb3lhZ2VzSgcjYTMwMDAwUkNnc19zc3A9ZUp6ajR0VlAxemMwVENxcE1DNUxLaXBRWURSZ2RHRHc0aXZMTEVyUHpGTW95NjlNVEU4d
2024-04-18 01:08:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.16	49720	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:27 UTC	860	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=vis&oit=1&cp=3&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.16	49727	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:28 UTC	861	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=visu&oit=1&cp=4&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4
2024-04-18 01:08:28 UTC	1703	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 01:08:28 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-460CxqzzdelfFxStc7IH7g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 01:08:28 UTC	1703	IN	Data Raw: 36 64 61 0d 0a 29 5d 7d 27 0a 5b 22 76 69 73 75 22 2c 5b 22 76 69 73 75 61 6c 22 2c 22 76 69 73 75 61 6c 20 73 74 75 64 69 6f 22 2c 22 76 69 73 75 61 6c 20 73 74 75 64 69 6f 20 63 6f 64 65 22 2c 22 76 69 73 75 61 6c 20 63 6f 6d 66 6f 72 74 22 2c 22 76 69 73 75 61 6c 20 65 64 67 65 20 69 74 22 2c 22 76 69 73 75 61 6c 20 74 69 6d 65 72 22 2c 22 76 69 73 75 61 6c 20 73 74 75 64 69 6f 20 63 6f 64 65 20 64 6f 77 6e 6c 6f 61 64 22 2c 22 76 69 73 75 61 6c 20 73 74 75 64 69 6f 20 32 30 32 32 22 2c 22 76 69 73 75 61 6c 20 63 6f 6d 66 6f 72 74 20 6c 69 67 68 74 69 6e 67 22 2c 22 76 69 73 75 61 6c 20 73 74 75 64 69 6f 20 64 6f 77 6e 6c 6f 61 64 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 Data Ascii: 6da)]}'["visu",["visual","visual studio","visual studio code","visual comfort","visual edge it","visual timer","visual studio code download","visual studio 2022","visual comfort lighting","visual studio download"],["","","","","","","","","",""],[],{"g
2024-04-18 01:08:28 UTC	58	IN	Data Raw: 4e 54 49 54 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 38 35 31 7d 5d 0d 0a Data Ascii: NTITY","QUERY","QUERY"],"google:verbatimrelevance":851}]
2024-04-18 01:08:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.16	49730	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:28 UTC	862	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=visur&oit=1&cp=5&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4
2024-04-18 01:08:29 UTC	1703	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 01:08:29 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-9JiZAaf6PdjgKOeyhZ6L4A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 01:08:29 UTC	1703	IN	Data Raw: 37 32 34 0d 0a 29 5d 7d 27 0a 5b 22 76 69 73 75 72 22 2c 5b 22 76 69 73 75 72 22 2c 22 76 69 73 75 72 65 22 2c 22 76 69 73 75 72 65 22 2c 22 76 69 73 75 72 61 22 2c 22 76 69 73 63 65 72 61 6c 22 2c 22 76 69 73 75 72 61 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 22 2c 22 76 69 73 75 72 61 20 63 61 6d 65 72 61 6c 65 22 2c 22 76 69 73 75 72 61 20 63 61 74 61 73 74 61 6c 65 22 2c 22 76 69 73 75 72 65 66 20 31 35 30 22 2c 22 76 69 73 63 65 72 61 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 64 65 74 61 69 6c 22 3a Data Ascii: 724)]}'["visur",["visur","visure","visure","visura","visceral","visura technologies","visura camerale","visura catastale","visuref 150","viscera"],["","","","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:suggestdetail":
2024-04-18 01:08:29 UTC	132	IN	Data Raw: 67 67 65 73 74 74 79 70 65 22 3a 5b 22 45 4e 54 49 54 59 22 2c 22 51 55 45 52 59 22 2c 22 45 4e 54 49 54 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 45 4e 54 49 54 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 45 4e 54 49 54 59 22 5d 2c 22 67 6f 6f 67 6c 65 3a 76 65 72 62 61 74 69 6d 72 65 6c 65 76 61 6e 63 65 22 3a 31 33 30 30 7d 5d 0d 0a Data Ascii: ggesttype":["ENTITY","QUERY","ENTITY","QUERY","QUERY","ENTITY","QUERY","QUERY","QUERY","ENTITY"],"google:verbatimrelevance":1300}]
2024-04-18 01:08:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.16	49731	64.233.177.132	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:28 UTC	406	OUT	GET /p/AF1QipPWj31KawuEWhcSPEoG10VjL7pu_-t5hy76ZrpA=w92-h92-n-k-no HTTP/1.1 Host: lh5.googleusercontent.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 01:08:29 UTC	531	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1e" Expires: Fri, 19 Apr 2024 01:08:29 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="xmc 25th logo-01.jpg" X-Content-Type-Options: nosniff Date: Thu, 18 Apr 2024 01:08:29 GMT Server: fife Content-Length: 3607 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 01:08:29 UTC	724	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 2a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 ff db 00 84 00 03 02 02 0d 08 08 09 08 0a 08 0d 0b 08 08 08 09 08 08 08 09 0b 08 0c 08 09 08 0a 08 0a 0a 08 08 08 0a 08 08 09 08 08 08 08 09 08 08 08 0b 08 09 08 14 0b 0b 0a 08 08 0b 0d 0a 08 0d 08 08 09 0a 01 03 04 04 06 05 06 0a 06 06 0a 0b 0e 0a 0e 0b 0d 10 0d 10 0d 0f 0f 13 12 10 0d 0f 0e 0b 0f 0a 13 0f 0f 10 0f 0f 0e 0b 0d 0e 0e 0d 0d 0a 0f 12 10 0f 0b 12 0d 0d 0d 0d 11 0c 0a 10 10 0b 0d 09 0d ff c0 00 11 08 00 5c 00 5c 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 02 03 01 00 03 00 00 00 00 00 00 00 00 00 00 07 08 03 04 06 05 01 02 09 ff c4 00 33 10 00 02 Data Ascii: JFIFExifII1Google\\3
2024-04-18 01:08:29 UTC	1255	IN	Data Raw: 09 a6 a5 5c 4d 08 93 88 6d b7 46 dd 4e cd f6 b0 07 eb f5 1d f5 1b 2e 61 a1 e5 82 39 1d 46 89 68 07 bb c6 c7 b6 95 e7 07 d0 87 4f 85 87 15 36 37 07 08 95 9a 9a d9 a4 d2 ea b2 38 11 b8 b1 ca d6 8f ef 83 27 f4 a6 67 fb 17 ff 00 3a d7 f4 99 fb 09 bf 0a e9 fa 8b 17 de 99 6f e7 0f 82 7e f8 32 7f 4a 66 7f b1 7f f3 ac 7d 26 7e c2 6f c2 9f 51 62 fb d7 2d fc e1 f0 52 be 73 a7 e3 9a 49 bf 9a 8c 34 c0 c5 f2 e2 d3 46 c5 04 7e 8c 6d ea a9 58 49 5e 6d 5b 8e ed 2b 3b 73 05 80 13 5a 87 7a f3 1e a6 4a bd 2e aa be 07 87 c1 69 4d d2 ca d1 34 1e f2 1f 4c b2 c8 50 27 c5 4c 21 03 00 be eb b4 5b 45 c9 d3 eb ea 33 b9 61 bf 1d 35 05 83 13 da 35 16 9a f2 3e c5 8e af 87 c9 3c 8e eb 6d 59 48 4e 69 02 c7 c7 6f 5a 19 54 38 67 99 1a 31 ed cc 71 a3 27 c6 27 75 05 be ba fa 5a 97 cb f8 7d Data Ascii: \MmFN.a9FhO678'g:o~2Jf}&~oQb-RsI4F~mXI^m[+;sZzJ.iM4LP'L![E3a55><mYHNioZT8g1q''uZ}
2024-04-18 01:08:29 UTC	1255	IN	Data Raw: 26 26 01 c3 5c 72 eb 3e 6e 6b c5 57 7e 90 7c 1a b0 f4 df 9e 4a 4a 8f 16 4f 9e 3b 23 04 8d 0d 9a 53 24 d2 15 75 00 f3 8d e1 89 83 c4 fc be 2c c0 13 b1 20 32 94 91 f0 cc ca 2a a9 7b 2e e6 0f 23 fc f7 f2 da 8a db 8a f9 3b cc 9c e1 26 59 a7 11 87 7b 43 99 23 0b 45 83 7b 10 e2 0b 5c 2b 71 bd 73 37 6d 12 2f 88 b5 53 27 37 ec 56 3b c0 d0 1b 39 30 a4 86 15 98 b2 55 ae 0a 48 b2 46 f6 67 56 97 90 05 4c 34 e7 8d c0 f7 11 9d 75 cb 52 3b aa e5 56 ef 2d eb ca ce fc f6 04 73 55 3c b1 f2 65 d1 7d 28 dd 9e 1f a6 0b 1e b8 a3 2b a8 82 1c 18 d2 1b 5d 93 ae 56 39 a7 b0 42 e0 fc a1 f5 53 c5 0d ae 9e b4 fb de c0 cd ed 83 1e c6 6a 0d de 94 ea 3e 81 7d 3d 90 20 24 ac 62 0e 47 77 d7 26 5e f2 1a 60 7f a4 c3 5e cf 57 cb cb 90 ab e2 ac dd 38 c1 c5 24 b1 67 58 51 50 62 d9 ae bf a6 61 Data Ascii: &&\r>nkW~\|JJO;#S$u, 2*{.#;&Y{C#E{\+qs7m/S'7V;90UHFgVL4uR;V-sU<e}(+]V9BSj>}= $bGw&^`^W8$gXQPba
2024-04-18 01:08:29 UTC	373	IN	Data Raw: 58 d1 8a c0 62 34 ca df f0 e3 7e bb ab 77 6d b4 2e 3e ce 97 6f cc 0e 6b 8c c1 f5 b6 57 a7 14 55 bf 46 5c be 3a 25 0b 5f 29 8f 5e 77 82 0e cb 1d aa cd 21 91 d9 40 1b ca 5f 60 36 de 6b 0c 58 ae a6 cb 3e 14 69 91 a5 ed e4 5b b9 e5 c4 71 3c fc 80 dd c4 ee a7 f1 19 7e 47 d2 13 f3 8c be 78 f0 98 87 12 5f 0c e6 a3 be 65 92 01 40 1f e9 ae 37 4c 68 00 1f 7b 25 e7 01 1d 42 52 c3 64 6d da 7e c9 0f b4 9a 28 d5 cf da 2c 4d 28 da 18 f7 ec d2 04 60 a3 72 7b 02 75 f6 73 10 76 8d 92 13 fe d2 07 b4 91 b0 f7 f9 28 c8 7a 0e f6 bb 56 37 19 83 8a 21 c5 dd 6b 5c 48 e7 a1 8d 36 f3 5c 05 b6 f8 05 1b 4f e4 7e 5c eb be 53 35 79 e1 c8 d9 6e 46 ad 4f 49 a0 ab 00 50 21 ac 0b 89 01 68 c0 3c 8c 6e 50 b1 27 94 8c 5e 57 d1 f3 07 ce 4c 92 b8 87 1e 42 8d 0e 5c 41 df cb 6f 33 6e 36 e6 7c a2 Data Ascii: Xb4~wm.>okWUF\:%_)^w!@_`6kX>i[q<~Gx_e@7Lh{%BRdm~(,M(`r{usv(zV7!k\H6\O~\S5ynFOIP!h<nP'^WLB\Ao3n6\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.16	49734	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:31 UTC	864	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=visurto&oit=1&cp=7&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4
2024-04-18 01:08:31 UTC	1703	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 01:08:31 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-7hbP2uGnOk56lD7kAMH7bQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 01:08:31 UTC	724	IN	Data Raw: 32 63 64 0d 0a 29 5d 7d 27 0a 5b 22 76 69 73 75 72 74 6f 22 2c 5b 22 76 69 72 75 73 74 6f 74 61 6c 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 73 63 61 6e 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 61 70 69 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 61 6c 74 65 72 6e 61 74 69 76 65 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 61 70 69 20 6b 65 79 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 72 65 64 64 69 74 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 75 72 6c 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 70 72 69 63 69 6e 67 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 65 6e 74 65 72 70 72 69 73 65 22 5d 2c 5b 22 22 2c 22 56 69 72 75 73 54 6f 74 61 6c 20 2d 20 46 72 65 65 20 4f 6e 6c Data Ascii: 2cd)]}'["visurto",["virustotal","https://www.virustotal.com/","virustotal scan","virustotal api","virustotal alternative","virustotal api key","virustotal reddit","virustotal url","virustotal pricing","virustotal enterprise"],["","VirusTotal - Free Onl
2024-04-18 01:08:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.16	49735	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:31 UTC	865	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=visurtot&oit=1&cp=8&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4
2024-04-18 01:08:32 UTC	1703	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 01:08:32 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-gtYHXcGy_-J5yzsvTQdCFg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 01:08:32 UTC	725	IN	Data Raw: 32 63 65 0d 0a 29 5d 7d 27 0a 5b 22 76 69 73 75 72 74 6f 74 22 2c 5b 22 76 69 72 75 73 74 6f 74 61 6c 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 73 63 61 6e 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 61 70 69 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 61 6c 74 65 72 6e 61 74 69 76 65 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 61 70 69 20 6b 65 79 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 72 65 64 64 69 74 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 75 72 6c 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 70 72 69 63 69 6e 67 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 65 6e 74 65 72 70 72 69 73 65 22 5d 2c 5b 22 22 2c 22 56 69 72 75 73 54 6f 74 61 6c 20 2d 20 46 72 65 65 20 4f 6e Data Ascii: 2ce)]}'["visurtot",["virustotal","https://www.virustotal.com/","virustotal scan","virustotal api","virustotal alternative","virustotal api key","virustotal reddit","virustotal url","virustotal pricing","virustotal enterprise"],["","VirusTotal - Free On
2024-04-18 01:08:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.16	49736	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:32 UTC	868	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=visurtotal&oit=1&cp=10&pgcl=7&gs_rn=42&psi=RP5R0tSeoBvYmYQE&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4
2024-04-18 01:08:32 UTC	1703	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 01:08:32 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-7rKTzbUhRO75CqazQm2Shw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 01:08:32 UTC	727	IN	Data Raw: 32 64 30 0d 0a 29 5d 7d 27 0a 5b 22 76 69 73 75 72 74 6f 74 61 6c 22 2c 5b 22 76 69 72 75 73 74 6f 74 61 6c 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 76 69 72 75 73 74 6f 74 61 6c 2e 63 6f 6d 2f 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 73 63 61 6e 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 61 70 69 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 61 6c 74 65 72 6e 61 74 69 76 65 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 61 70 69 20 6b 65 79 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 72 65 64 64 69 74 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 75 72 6c 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 70 72 69 63 69 6e 67 22 2c 22 76 69 72 75 73 74 6f 74 61 6c 20 65 6e 74 65 72 70 72 69 73 65 22 5d 2c 5b 22 22 2c 22 56 69 72 75 73 54 6f 74 61 6c 20 2d 20 46 72 65 65 20 Data Ascii: 2d0)]}'["visurtotal",["virustotal","https://www.virustotal.com/","virustotal scan","virustotal api","virustotal alternative","virustotal api key","virustotal reddit","virustotal url","virustotal pricing","virustotal enterprise"],["","VirusTotal - Free
2024-04-18 01:08:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.16	49737	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:33 UTC	1252	OUT	GET /search?q=visurtotal&oq=visurtotal&gs_lcrp=EgZjaHJvbWUyBggAEEUYOTIPCAEQABgKGIMBGLEDGIAEMg8IAhAAGAoYgwEYsQMYgAQyDAgDEAAYChixAxiABDIJCAQQABgKGIAEMgkIBRAAGAoYgAQyCQgGEAAYChiABDIECAcQBdIBCDcwNTFqMGo3qAIAsAIA&sourceid=chrome&ie=UTF-8 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4
2024-04-18 01:08:34 UTC	2076	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dvisurtotal%26oq%3Dvisurtotal%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOTIPCAEQABgKGIMBGLEDGIAEMg8IAhAAGAoYgwEYsQMYgAQyDAgDEAAYChixAxiABDIJCAQQABgKGIAEMgkIBRAAGAoYgAQyCQgGEAAYChiABDIECAcQBdIBCDcwNTFqMGo3qAIAsAIA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRRtTk0GJLlgbEGIjBFlmw-Z1Jr1gypU10CH7MqD41FI5YyaJtIY5ytq6NLWWR7LvXEHvlKJylF7TKn-sgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgwIkuWBsQYQhJu_2wESBFG1OTQ Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Y2iZeUyP-tdUWe-SDzR7OQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Date: Thu, 18 Apr 2024 01:08:34 GMT Server: gws Content-Length: 645 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-18-01; expires=Sat, 18-May-2024 01:08:34 GMT; path=/; domain=.google.com; Secure; SameSite=none Set-Cookie: AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ; expires=Tue, 15-Oct-2024 01:08:34 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 01:08:34 UTC	645	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 65 61 72 63 68 25 33 46 71 25 33 44 76 69 73 75 72 74 6f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dvisurto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.16	49738	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:34 UTC	1510	OUT	GET /sorry/index?continue=https://www.google.com/search%3Fq%3Dvisurtotal%26oq%3Dvisurtotal%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOTIPCAEQABgKGIMBGLEDGIAEMg8IAhAAGAoYgwEYsQMYgAQyDAgDEAAYChixAxiABDIJCAQQABgKGIAEMgkIBRAAGAoYgAQyCQgGEAAYChiABDIECAcQBdIBCDcwNTFqMGo3qAIAsAIA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRRtTk0GJLlgbEGIjBFlmw-Z1Jr1gypU10CH7MqD41FI5YyaJtIY5ytq6NLWWR7LvXEHvlKJylF7TKn-sgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:08:34 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Thu, 18 Apr 2024 01:08:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 3783 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 01:08:34 UTC	899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 65 61 72 63 68 3f 71 3d 76 69 73 75 72 74 6f 74 61 6c 26 61 6d 70 3b 6f 71 3d 76 69 73 75 72 74 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.google.com/search?q=visurtotal&oq=visurt
2024-04-18 01:08:34 UTC	1255	IN	Data Raw: 72 69 70 74 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 22 3e 0a 20 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 63 6f 6e 74 69 6e 75 65 2c 20 70 6c 65 61 73 65 20 65 6e 61 62 6c 65 20 6a 61 76 61 73 63 72 69 70 74 20 6f 6e 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 2e 0a 3c 2f 64 69 76 3e 0a 3c 2f 6e 6f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 2e 6a 73 22 20 61 73 79 6e 63 20 64 65 66 65 72 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 76 61 72 20 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 64 6f 63 75 6d Data Ascii: ript><div style="font-size:13px;"> In order to continue, please enable javascript on your web browser.</div></noscript><script src="https://www.google.com/recaptcha/api.js" async defer></script><script>var submitCallback = function(response) {docum
2024-04-18 01:08:34 UTC	1255	IN	Data Raw: 65 3d 22 63 6f 6c 6f 72 3a 23 63 63 63 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 63 63 3b 22 3e 0a 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 22 3e 0a 3c 62 3e 41 62 6f 75 74 20 74 68 69 73 20 70 61 67 65 3c 2f 62 3e 3c 62 72 3e 3c 62 72 3e 0a 54 68 69 73 20 6e 65 74 77 6f 72 6b 20 69 73 20 62 6c 6f 63 6b 65 64 20 64 75 65 20 74 6f 20 75 6e 61 64 64 72 65 73 73 65 64 20 61 62 75 73 65 20 63 6f 6d 70 6c 61 69 6e 74 73 20 61 62 6f 75 74 20 6d 61 6c 69 63 69 6f 75 73 20 62 65 68 61 76 69 6f 72 2e 20 54 68 69 73 20 70 61 67 65 20 63 68 65 63 6b 73 20 74 6f 20 73 65 65 20 69 66 20 69 74 27 73 20 72 65 61 6c 6c 79 20 61 20 68 75 6d 61 6e 20 73 65 6e 64 69 6e 67 20 74 68 65 20 72 65 71 75 65 73 74 73 Data Ascii: e="color:#ccc; background-color:#ccc;"><div style="font-size:13px;"><b>About this page</b><br><br>This network is blocked due to unaddressed abuse complaints about malicious behavior. This page checks to see if it's really a human sending the requests
2024-04-18 01:08:34 UTC	374	IN	Data Raw: 2e 0a 3c 2f 64 69 76 3e 0a 0a 49 50 20 61 64 64 72 65 73 73 3a 20 38 31 2e 31 38 31 2e 35 37 2e 35 32 3c 62 72 3e 54 69 6d 65 3a 20 32 30 32 34 2d 30 34 2d 31 38 54 30 31 3a 30 38 3a 33 34 5a 3c 62 72 3e 55 52 4c 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 65 61 72 63 68 3f 71 3d 76 69 73 75 72 74 6f 74 61 6c 26 61 6d 70 3b 6f 71 3d 76 69 73 75 72 74 6f 74 61 6c 26 61 6d 70 3b 67 73 5f 6c 63 72 70 3d 45 67 5a 6a 61 48 4a 76 62 57 55 79 42 67 67 41 45 45 55 59 4f 54 49 50 43 41 45 51 41 42 67 4b 47 49 4d 42 47 4c 45 44 47 49 41 45 4d 67 38 49 41 68 41 41 47 41 6f 59 67 77 45 59 73 51 4d 59 67 41 51 79 44 41 67 44 45 41 41 59 43 68 69 78 41 78 69 41 42 44 49 4a 43 41 51 51 41 42 67 4b 47 49 41 45 4d 67 6b 49 42 52 41 41 47 Data Ascii: .</div>IP address: 81.181.57.52<br>Time: 2024-04-18T01:08:34Z<br>URL: https://www.google.com/search?q=visurtotal&oq=visurtotal&gs_lcrp=EgZjaHJvbWUyBggAEEUYOTIPCAEQABgKGIMBGLEDGIAEMg8IAhAAGAoYgwEYsQMYgAQyDAgDEAAYChixAxiABDIJCAQQABgKGIAEMgkIBRAAG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.16	49739	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:35 UTC	1382	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dvisurtotal%26oq%3Dvisurtotal%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOTIPCAEQABgKGIMBGLEDGIAEMg8IAhAAGAoYgwEYsQMYgAQyDAgDEAAYChixAxiABDIJCAQQABgKGIAEMgkIBRAAGAoYgAQyCQgGEAAYChiABDIECAcQBdIBCDcwNTFqMGo3qAIAsAIA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRRtTk0GJLlgbEGIjBFlmw-Z1Jr1gypU10CH7MqD41FI5YyaJtIY5ytq6NLWWR7LvXEHvlKJylF7TKn-sgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:08:35 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 18 Apr 2024 01:08:35 GMT Date: Thu, 18 Apr 2024 01:08:35 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 01:08:35 UTC	727	IN	Data Raw: 34 63 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4c6/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-18 01:08:35 UTC	502	IN	Data Raw: 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 65 5a 47 38 65 34 6e 52 70 30 67 45 70 52 42 37 35 Data Ascii: cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-eZG8e4nRp0gEpRB75
2024-04-18 01:08:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.16	49741	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:36 UTC	1989	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&s=wjjJycx7A6xdUH8ymV2wAZsbKFYleBfhF8M78a8nZ0f9I9xmxGqsZcDi4de3HWpwlf5odCOBWLTyz5Uf7Bn6iJyLK35QLtLGlBU67qESmK9mxN29oVR-6FuCKaXENR6UkgP__244I-nj6qgpOEaDoiRaMKZVWFmbNcQafOsK-kI2rqdMXqyqp7jPyowgz7wNrLOc87nXDsyxwDfprA85Hx2brNu0KST-f3giZLoYokBLsOTP5MHPjn8N0fzG5UkKoZaBGMpRytE1aR9bCt7kxNbWStTUVmo&cb=lk73a6yg16hu HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dvisurtotal%26oq%3Dvisurtotal%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOTIPCAEQABgKGIMBGLEDGIAEMg8IAhAAGAoYgwEYsQMYgAQyDAgDEAAYChixAxiABDIJCAQQABgKGIAEMgkIBRAAGAoYgAQyCQgGEAAYChiABDIECAcQBdIBCDcwNTFqMGo3qAIAsAIA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRRtTk0GJLlgbEGIjBFlmw-Z1Jr1gypU10CH7MqD41FI5YyaJtIY5ytq6NLWWR7LvXEHvlKJylF7TKn-sgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:08:37 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 18 Apr 2024 01:08:36 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-zJv2P_ByBwElnk5uGdFqow' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 01:08:37 UTC	364	IN	Data Raw: 32 61 65 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2ae4<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-18 01:08:37 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-18 01:08:37 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-18 01:08:37 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-18 01:08:37 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-18 01:08:37 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-18 01:08:37 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 7a 4a 76 32 50 5f 42 79 42 77 45 6c 6e 6b 35 75 47 64 46 71 6f 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css"><script nonce="zJv2P_ByBwElnk5uGdFqow" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-18 01:08:37 UTC	1255	IN	Data Raw: 7a 57 7a 36 33 5f 45 44 78 76 56 2d 72 6c 4b 30 44 6e 5f 61 2d 52 59 58 39 78 48 46 30 34 54 73 42 4d 51 49 44 30 2d 4a 56 74 42 66 54 4c 30 4d 6a 36 5a 61 78 53 59 6f 71 37 50 66 56 36 4c 6c 78 39 77 6f 4c 51 59 6e 62 54 64 61 4e 61 79 5f 4a 47 6a 65 55 34 7a 34 56 74 33 77 38 64 75 45 33 57 79 4c 38 41 38 43 46 39 7a 58 56 30 61 45 42 35 4a 64 73 70 6b 33 35 57 7a 4f 6f 45 6e 31 71 77 77 6f 7a 6c 35 31 76 76 34 39 4e 58 77 52 6f 35 4b 42 43 6c 41 51 70 32 37 77 51 64 67 5f 62 58 2d 79 47 6f 62 79 4b 72 41 73 4f 5a 6f 55 46 73 34 2d 32 77 31 74 61 52 45 79 62 51 64 6d 49 39 4a 4d 6f 67 6f 31 56 7a 53 75 36 32 4c 57 4b 72 66 4a 53 6e 4f 4d 54 70 63 4a 54 4c 41 44 5a 4c 47 4e 68 56 30 4b 63 46 74 75 38 31 54 77 7a 72 39 4b 59 62 30 69 52 6c 68 47 56 74 4f Data Ascii: zWz63_EDxvV-rlK0Dn_a-RYX9xHF04TsBMQID0-JVtBfTL0Mj6ZaxSYoq7PfV6Llx9woLQYnbTdaNay_JGjeU4z4Vt3w8duE3WyL8A8CF9zXV0aEB5Jdspk35WzOoEn1qwwozl51vv49NXwRo5KBClAQp27wQdg_bX-yGobyKrAsOZoUFs4-2w1taREybQdmI9JMogo1VzSu62LWKrfJSnOMTpcJTLADZLGNhV0KcFtu81Twzr9KYb0iRlhGVtO
2024-04-18 01:08:37 UTC	1255	IN	Data Raw: 7a 4f 77 36 64 30 6a 64 33 64 67 4e 76 31 6f 64 4c 74 4e 33 6c 50 76 69 64 61 75 67 41 4d 55 75 44 4a 5a 5a 63 45 44 6f 55 6b 46 47 73 32 56 2d 4c 67 55 45 4f 52 72 72 72 33 51 6c 65 44 72 30 41 68 68 34 4c 64 52 61 4b 70 6e 69 6a 59 77 6c 43 52 37 2d 46 6a 45 48 6e 7a 77 57 47 51 39 65 6d 74 5a 35 68 32 6f 4e 67 66 68 41 56 34 42 32 61 4e 6e 30 73 66 49 31 51 67 72 37 5f 37 32 49 67 65 6e 7a 69 37 75 41 4e 39 37 62 63 53 4e 44 49 36 45 58 6f 62 38 76 39 68 55 5a 34 51 41 7a 6e 67 45 53 44 4c 6f 68 37 4e 48 4e 59 4d 58 53 47 53 61 4d 45 51 63 67 48 6c 63 72 45 78 50 6a 39 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 7a 4a 76 32 50 5f 42 79 42 77 45 6c 6e 6b 35 75 47 64 46 71 6f Data Ascii: zOw6d0jd3dgNv1odLtN3lPvidaugAMUuDJZZcEDoUkFGs2V-LgUEORrrr3QleDr0Ahh4LdRaKpnijYwlCR7-FjEHnzwWGQ9emtZ5h2oNgfhAV4B2aNn0sfI1Qgr7_72Igenzi7uAN97bcSNDI6EXob8v9hUZ4QAzngESDLoh7NHNYMXSGSaMEQcgHlcrExPj9"><script type="text/javascript" nonce="zJv2P_ByBwElnk5uGdFqo
2024-04-18 01:08:37 UTC	584	IN	Data Raw: 54 6a 6c 44 55 56 4d 72 62 32 31 32 63 6e 64 55 4e 57 6c 35 51 57 77 7a 54 6b 5a 6e 4c 30 6b 34 63 6a 68 7a 4d 48 45 79 56 46 56 33 55 69 39 53 52 31 42 4b 52 6b 78 48 61 47 73 72 56 7a 49 78 55 6b 78 33 59 32 68 52 62 6e 4e 75 63 55 73 33 51 6e 70 59 64 7a 52 50 4e 57 4a 4c 4e 32 77 7a 4e 55 4a 47 65 47 78 34 4e 7a 59 31 56 54 6b 76 53 45 6c 6c 64 30 34 78 5a 6a 42 6f 56 56 70 32 5a 57 68 58 53 30 5a 6b 61 7a 55 77 51 30 4a 32 4e 58 68 55 51 55 31 73 65 56 6c 43 54 55 74 56 4d 32 4e 4f 57 6e 4e 50 52 54 41 78 59 30 64 6c 62 46 56 70 54 31 6c 36 56 33 49 78 5a 33 70 79 4e 54 64 71 65 6a 42 49 56 58 5a 44 65 6a 46 70 65 6a 64 6f 65 58 4a 56 57 6e 56 76 64 55 46 33 4d 30 4e 34 57 46 4d 30 57 6b 52 34 57 58 4d 32 4b 7a 42 4a 4d 45 4e 57 4d 6e 6c 69 61 6d 74 Data Ascii: TjlDUVMrb212cndUNWl5QWwzTkZnL0k4cjhzMHEyVFV3Ui9SR1BKRkxHaGsrVzIxUkx3Y2hRbnNucUs3QnpYdzRPNWJLN2wzNUJGeGx4NzY1VTkvSElld04xZjBoVVp2ZWhXS0ZkazUwQ0J2NXhUQU1seVlCTUtVM2NOWnNPRTAxY0dlbFVpT1l6V3IxZ3pyNTdqejBIVXZDejFpejdoeXJVWnVvdUF3M0N4WFM0WkR4WXM2KzBJMENWMnliamt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.16	49745	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:37 UTC	1457	OUT	GET /js/bg/rIjZlM8ZNfOeVQTojtt5OPuY9YnE0CAT82tG0V-YUX0.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&s=wjjJycx7A6xdUH8ymV2wAZsbKFYleBfhF8M78a8nZ0f9I9xmxGqsZcDi4de3HWpwlf5odCOBWLTyz5Uf7Bn6iJyLK35QLtLGlBU67qESmK9mxN29oVR-6FuCKaXENR6UkgP__244I-nj6qgpOEaDoiRaMKZVWFmbNcQafOsK-kI2rqdMXqyqp7jPyowgz7wNrLOc87nXDsyxwDfprA85Hx2brNu0KST-f3giZLoYokBLsOTP5MHPjn8N0fzG5UkKoZaBGMpRytE1aR9bCt7kxNbWStTUVmo&cb=lk73a6yg16hu Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:08:38 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18291 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 12 Apr 2024 01:54:28 GMT Expires: Sat, 12 Apr 2025 01:54:28 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 04 Apr 2024 18:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 515650 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 01:08:38 UTC	443	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 29 7b 69 66 28 21 28 77 3d 28 7a 3d 6e 75 6c 6c 2c 61 2e 74 72 75 73 74 65 64 54 79 70 65 73 29 2c 77 29 7c 7c 21 77 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 7a 3b 74 72 79 7b 7a 3d 77 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 6d 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 6d 2c 63 72 65 61 74 Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var a=this\|\|self,K=function(z,w){if(!(w=(z=null,a.trustedTypes),w)\|\|!w.createPolicy)return z;try{z=w.createPolicy("bg",{createHTML:m,createScript:m,creat
2024-04-18 01:08:38 UTC	1255	IN	Data Raw: 72 65 61 74 65 53 63 72 69 70 74 28 46 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 46 29 7b 72 65 74 75 72 6e 22 22 2b 46 7d 7d 28 61 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 69 73 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 29 7b 28 28 77 2e 70 75 73 68 28 7a 5b 30 5d 3c 3c 32 34 7c 7a 5b 31 5d 3c 3c 31 36 7c 7a 5b 32 5d 3c 3c 38 7c 7a 5b 33 5d 29 2c 77 29 2e 70 75 73 68 28 7a 5b 34 5d 3c 3c 32 34 7c 7a 5b 35 5d 3c 3c 31 36 7c 7a 5b 36 5d 3c 3c 38 7c 7a 5b 37 5d 29 2c Data Ascii: reateScript(F)}:function(F){return""+F}}(a)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var is=function(z,w){((w.push(z[0]<<24\|z[1]<<16\|z[2]<<8\|z[3]),w).push(z[4]<<24\|z[5]<<16\|z[6]<<8\|z[7]),
2024-04-18 01:08:38 UTC	1255	IN	Data Raw: 35 35 2c 61 3e 3e 3e 32 34 26 32 35 35 2c 61 3e 3e 3e 31 36 26 32 35 35 2c 61 3e 3e 3e 38 26 32 35 35 2c 61 3e 3e 3e 30 26 32 35 35 5d 7d 2c 73 36 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 74 68 69 73 2e 43 3d 74 68 69 73 2e 50 3d 74 68 69 73 2e 6e 3d 30 7d 72 65 74 75 72 6e 20 77 3d 28 61 2e 70 72 6f 74 6f 74 79 70 65 2e 4e 68 3d 28 61 2e 70 72 6f 74 6f 74 79 70 65 2e 62 50 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 74 68 69 73 2e 6e 3f 30 3a 4d 61 74 68 2e 73 71 72 74 28 74 68 69 73 2e 43 2f 74 68 69 73 2e 6e 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 6d 2c 71 29 7b 28 74 68 69 73 2e 50 2b 3d 28 71 3d 6d 2d 74 68 69 73 2e 50 2c 74 68 69 73 2e 6e 2b 2b 2c 71 29 2f 74 68 69 73 2e 6e 2c 74 68 69 Data Ascii: 55,a>>>24&255,a>>>16&255,a>>>8&255,a>>>0&255]},s6=function(z,w){function a(){this.C=this.P=this.n=0}return w=(a.prototype.Nh=(a.prototype.bP=function(){return 0===this.n?0:Math.sqrt(this.C/this.n)},function(m,q){(this.P+=(q=m-this.P,this.n++,q)/this.n,thi
2024-04-18 01:08:38 UTC	1255	IN	Data Raw: 7a 29 2c 4d 29 2e 52 3d 5b 5d 2c 7a 2e 5a 3d 3d 7a 3f 28 76 28 7a 29 7c 30 29 2d 31 3a 31 29 2c 42 28 7a 29 29 2c 30 29 3b 71 3c 77 3b 71 2b 2b 29 4d 2e 52 2e 70 75 73 68 28 42 28 7a 29 29 3b 66 6f 72 28 3b 77 2d 2d 3b 29 4d 2e 52 5b 77 5d 3d 47 28 7a 2c 4d 2e 52 5b 77 5d 29 3b 72 65 74 75 72 6e 28 4d 2e 6b 74 3d 47 28 7a 2c 61 29 2c 4d 29 2e 4f 4f 3d 47 28 7a 2c 6d 29 2c 4d 7d 2c 47 63 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 2c 61 2c 6d 2c 71 2c 4d 29 7b 69 66 28 21 77 2e 44 29 7b 77 2e 4b 2b 2b 3b 74 72 79 7b 66 6f 72 28 71 3d 28 61 3d 28 4d 3d 76 6f 69 64 20 30 2c 77 2e 57 29 2c 30 29 3b 2d 2d 7a 3b 29 74 72 79 7b 69 66 28 6d 3d 76 6f 69 64 20 30 2c 77 2e 47 29 4d 3d 4b 49 28 77 2c 77 2e 47 29 3b 65 6c 73 65 7b 69 66 28 71 3d 47 28 77 2c 36 34 29 2c 71 Data Ascii: z),M).R=[],z.Z==z?(v(z)\|0)-1:1),B(z)),0);q<w;q++)M.R.push(B(z));for(;w--;)M.R[w]=G(z,M.R[w]);return(M.kt=G(z,a),M).OO=G(z,m),M},Gc=function(z,w,a,m,q,M){if(!w.D){w.K++;try{for(q=(a=(M=void 0,w.W),0);--z;)try{if(m=void 0,w.G)M=KI(w,w.G);else{if(q=G(w,64),q
2024-04-18 01:08:38 UTC	1255	IN	Data Raw: 7d 2c 66 61 6c 73 65 2c 7a 29 2c 61 7d 2c 50 3d 7b 70 61 73 73 69 76 65 3a 74 72 75 65 2c 63 61 70 74 75 72 65 3a 74 72 75 65 7d 2c 79 4d 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 2c 61 2c 6d 29 7b 66 6f 72 28 3b 7a 2e 6c 2e 6c 65 6e 67 74 68 3b 29 7b 6d 3d 28 7a 2e 67 3d 6e 75 6c 6c 2c 7a 2e 6c 29 2e 70 6f 70 28 29 3b 74 72 79 7b 61 3d 62 73 28 7a 2c 6d 29 7d 63 61 74 63 68 28 71 29 7b 6e 28 7a 2c 71 29 7d 69 66 28 77 26 26 7a 2e 67 29 7b 77 3d 7a 2e 67 2c 77 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 28 7a 2c 74 72 75 65 2c 74 72 75 65 29 7d 29 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 61 7d 2c 78 34 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 2c 61 2c 6d 2c 71 2c 4d 2c 74 29 7b 66 6f 72 28 4d 3d 28 7a 2e 64 31 3d 28 7a 2e 67 31 3d 61 57 28 7b 67 65 74 3a 66 75 Data Ascii: },false,z),a},P={passive:true,capture:true},yM=function(z,w,a,m){for(;z.l.length;){m=(z.g=null,z.l).pop();try{a=bs(z,m)}catch(q){n(z,q)}if(w&&z.g){w=z.g,w(function(){O(z,true,true)});break}}return a},x4=function(z,w,a,m,q,M,t){for(M=(z.d1=(z.g1=aW({get:fu
2024-04-18 01:08:38 UTC	1255	IN	Data Raw: 7d 29 29 2c 7a 29 2c 7a 29 2c 30 29 2c 7a 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 46 2c 4b 2c 79 29 7b 28 4b 3d 47 28 28 79 3d 30 21 3d 47 28 46 2c 28 79 3d 42 28 46 29 2c 4b 3d 42 28 46 29 2c 79 29 29 2c 46 29 2c 4b 29 2c 79 29 26 26 41 28 36 34 2c 46 2c 4b 29 7d 29 29 2c 30 29 2c 30 5d 29 2c 67 29 29 2c 7a 29 2c 66 75 6e 63 74 69 6f 6e 28 46 2c 4b 2c 79 2c 62 29 7b 21 44 28 74 72 75 65 2c 66 61 6c 73 65 2c 4b 2c 46 29 26 26 28 4b 3d 57 74 28 46 29 2c 79 3d 4b 2e 4f 4f 2c 62 3d 4b 2e 6b 74 2c 46 2e 5a 3d 3d 46 7c 7c 79 3d 3d 46 2e 48 5a 26 26 62 3d 3d 46 29 26 26 28 41 28 4b 2e 56 6f 2c 46 2c 79 2e 61 70 70 6c 79 28 62 2c 4b 2e 52 29 29 2c 46 2e 41 3d 46 2e 59 28 29 29 7d 29 2c 7a 29 2c 5b 5d 29 2c 66 75 6e 63 74 69 6f Data Ascii: })),z),z),0),z),function(){}),function(F,K,y){(K=G((y=0!=G(F,(y=B(F),K=B(F),y)),F),K),y)&&A(64,F,K)})),0),0]),g)),z),function(F,K,y,b){!D(true,false,K,F)&&(K=Wt(F),y=K.OO,b=K.kt,F.Z==F\|\|y==F.HZ&&b==F)&&(A(K.Vo,F,y.apply(b,K.R)),F.A=F.Y())}),z),[]),functio
2024-04-18 01:08:38 UTC	1255	IN	Data Raw: 47 28 46 2c 42 28 46 29 29 29 3b 49 28 62 2c 46 2c 66 75 6e 63 74 69 6f 6e 28 59 2c 5a 2c 78 2c 66 2c 72 29 7b 66 6f 72 28 72 3d 28 5a 3d 28 66 3d 5b 5d 2c 30 29 2c 5b 5d 29 3b 5a 3c 53 3b 5a 2b 2b 29 7b 69 66 28 21 28 78 3d 6c 5b 5a 5d 2c 57 5b 5a 5d 29 29 7b 66 6f 72 28 3b 78 3e 3d 66 2e 6c 65 6e 67 74 68 3b 29 66 2e 70 75 73 68 28 42 28 59 29 29 3b 78 3d 66 5b 78 5d 7d 72 2e 70 75 73 68 28 78 29 7d 59 2e 48 3d 55 36 28 28 59 2e 47 3d 55 36 28 64 2e 73 6c 69 63 65 28 29 2c 59 29 2c 72 29 2c 59 29 7d 29 7d 29 29 2c 7a 29 2e 50 5a 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 46 2c 4b 2c 79 2c 62 29 7b 41 28 28 4b 3d 42 28 28 79 3d 28 62 3d 42 28 46 29 2c 42 29 28 46 29 2c 46 29 29 2c 4b 29 2c 46 2c 47 28 46 2c 62 29 7c 7c 47 28 46 2c 79 29 29 7d 29 29 2c 37 34 29 Data Ascii: G(F,B(F)));I(b,F,function(Y,Z,x,f,r){for(r=(Z=(f=[],0),[]);Z<S;Z++){if(!(x=l[Z],W[Z])){for(;x>=f.length;)f.push(B(Y));x=f[x]}r.push(x)}Y.H=U6((Y.G=U6(d.slice(),Y),r),Y)})})),z).PZ=0,function(F,K,y,b){A((K=B((y=(b=B(F),B)(F),F)),K),F,G(F,b)\|\|G(F,y))})),74)
2024-04-18 01:08:38 UTC	1255	IN	Data Raw: 6c 73 65 20 41 28 36 34 2c 46 2c 46 2e 57 29 7d 29 2c 7a 29 2c 66 75 6e 63 74 69 6f 6e 28 46 2c 4b 2c 79 2c 62 2c 57 2c 64 2c 6c 29 7b 66 6f 72 28 62 3d 28 6c 3d 28 57 3d 28 4b 3d 28 64 3d 42 28 46 29 2c 4d 78 28 46 29 29 2c 22 22 29 2c 47 28 46 2c 31 33 35 29 29 2c 6c 2e 6c 65 6e 67 74 68 29 2c 79 3d 30 3b 4b 2d 2d 3b 29 79 3d 28 28 79 7c 30 29 2b 28 4d 78 28 46 29 7c 30 29 29 25 62 2c 57 2b 3d 74 5b 6c 5b 79 5d 5d 3b 41 28 64 2c 46 2c 57 29 7d 29 2c 41 29 28 33 30 32 2c 7a 2c 30 29 2c 66 75 6e 63 74 69 6f 6e 28 46 29 7b 74 73 28 46 2c 31 29 7d 29 29 2c 7a 29 2c 7b 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 46 2c 4b 29 7b 28 46 3d 28 4b 3d 42 28 46 29 2c 47 28 46 2e 5a 2c 4b 29 29 2c 46 29 5b 30 5d 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 Data Ascii: lse A(64,F,F.W)}),z),function(F,K,y,b,W,d,l){for(b=(l=(W=(K=(d=B(F),Mx(F)),""),G(F,135)),l.length),y=0;K--;)y=((y\|0)+(Mx(F)\|0))%b,W+=t[l[y]];A(d,F,W)}),A)(302,z,0),function(F){ts(F,1)})),z),{}),function(F,K){(F=(K=B(F),G(F.Z,K)),F)[0].removeEventListener(
2024-04-18 01:08:38 UTC	1255	IN	Data Raw: 28 7a 2e 42 3d 74 72 75 65 29 2c 77 5b 34 5d 26 26 28 7a 2e 69 3d 74 72 75 65 29 2c 77 5b 35 5d 26 26 28 7a 2e 49 3d 74 72 75 65 29 2c 77 5b 36 5d 26 26 28 7a 2e 54 3d 74 72 75 65 29 2c 7a 2e 6a 28 77 29 3b 65 6c 73 65 20 69 66 28 71 3d 3d 6b 34 29 7a 2e 42 3d 74 72 75 65 2c 7a 2e 6a 28 77 29 3b 65 6c 73 65 20 69 66 28 71 3d 3d 63 74 29 7b 7a 2e 49 3d 74 72 75 65 3b 74 72 79 7b 66 6f 72 28 6d 3d 30 3b 6d 3c 7a 2e 46 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 74 72 79 7b 61 3d 7a 2e 46 5b 6d 5d 2c 61 5b 30 5d 5b 61 5b 31 5d 5d 28 61 5b 32 5d 29 7d 63 61 74 63 68 28 4d 29 7b 7d 7d 63 61 74 63 68 28 4d 29 7b 7d 28 30 2c 77 5b 31 5d 29 28 66 75 6e 63 74 69 6f 6e 28 4d 2c 74 29 7b 7a 2e 6f 73 28 4d 2c 74 72 75 65 2c 74 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 4d 29 7b 28 Data Ascii: (z.B=true),w[4]&&(z.i=true),w[5]&&(z.I=true),w[6]&&(z.T=true),z.j(w);else if(q==k4)z.B=true,z.j(w);else if(q==ct){z.I=true;try{for(m=0;m<z.F.length;m++)try{a=z.F[m],a[0][a[1]](a[2])}catch(M){}}catch(M){}(0,w[1])(function(M,t){z.os(M,true,t)},function(M){(
2024-04-18 01:08:38 UTC	1255	IN	Data Raw: 77 5b 6d 5d 29 7d 2c 41 73 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 29 7b 69 66 28 28 77 3d 67 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 7a 3d 6e 75 6c 6c 2c 21 77 29 7c 7c 21 77 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 7a 3b 74 72 79 7b 7a 3d 77 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 53 45 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 53 45 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 53 45 7d 29 7d 63 61 74 63 68 28 61 29 7b 67 2e 63 6f 6e 73 6f 6c 65 26 26 67 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 61 2e 6d 65 73 73 61 67 65 29 7d 72 65 74 75 72 6e 20 7a 7d 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 2c 61 2c 6d 2c 71 2c 4d 2c 74 2c 46 2c 4b 29 7b 69 66 28 28 28 28 74 3d Data Ascii: w[m])},As=function(z,w){if((w=g.trustedTypes,z=null,!w)\|\|!w.createPolicy)return z;try{z=w.createPolicy("bg",{createHTML:SE,createScript:SE,createScriptURL:SE})}catch(a){g.console&&g.console.error(a.message)}return z},D=function(z,w,a,m,q,M,t,F,K){if((((t=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.16	49747	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:38 UTC	1469	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm- HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&s=wjjJycx7A6xdUH8ymV2wAZsbKFYleBfhF8M78a8nZ0f9I9xmxGqsZcDi4de3HWpwlf5odCOBWLTyz5Uf7Bn6iJyLK35QLtLGlBU67qESmK9mxN29oVR-6FuCKaXENR6UkgP__244I-nj6qgpOEaDoiRaMKZVWFmbNcQafOsK-kI2rqdMXqyqp7jPyowgz7wNrLOc87nXDsyxwDfprA85Hx2brNu0KST-f3giZLoYokBLsOTP5MHPjn8N0fzG5UkKoZaBGMpRytE1aR9bCt7kxNbWStTUVmo&cb=lk73a6yg16hu Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:08:38 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Thu, 18 Apr 2024 01:08:38 GMT Date: Thu, 18 Apr 2024 01:08:38 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 01:08:38 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js');
2024-04-18 01:08:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.16	49749	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:38 UTC	1437	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dvisurtotal%26oq%3Dvisurtotal%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOTIPCAEQABgKGIMBGLEDGIAEMg8IAhAAGAoYgwEYsQMYgAQyDAgDEAAYChixAxiABDIJCAQQABgKGIAEMgkIBRAAGAoYgAQyCQgGEAAYChiABDIECAcQBdIBCDcwNTFqMGo3qAIAsAIA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRRtTk0GJLlgbEGIjBFlmw-Z1Jr1gypU10CH7MqD41FI5YyaJtIY5ytq6NLWWR7LvXEHvlKJylF7TKn-sgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:08:38 UTC	706	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 17 Apr 2024 16:47:52 GMT Expires: Thu, 25 Apr 2024 16:47:52 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 30046 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 01:08:38 UTC	549	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-04-18 01:08:38 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 Data Ascii: BBBBBuBBBBB{5k7R8F2Vb5C;I
2024-04-18 01:08:38 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 fe fe fe 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 24 fd fd fd ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb f5 e7 ff 8f c6 7b ff 54 a9 36 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 Data Ascii: /${T6S4S4S4S4S4S4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4S4S
2024-04-18 01:08:38 UTC	1255	IN	Data Raw: ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c8 aa ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBB}BBBBBBBBBBB}
2024-04-18 01:08:38 UTC	1116	IN	Data Raw: 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 81 8a f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0b fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b5 ba f7 ff 3e 4b eb ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 3f 4c eb ff ba bf f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd eb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: 5C5C5C5C5C5C5C5C5C5C5C5C5C5C>K5C5C5C5C5C5C5C5C5C5C5C5C?L&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.16	49751	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:38 UTC	1626	OUT	GET /recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dvisurtotal%26oq%3Dvisurtotal%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOTIPCAEQABgKGIMBGLEDGIAEMg8IAhAAGAoYgwEYsQMYgAQyDAgDEAAYChixAxiABDIJCAQQABgKGIAEMgkIBRAAGAoYgAQyCQgGEAAYChiABDIECAcQBdIBCDcwNTFqMGo3qAIAsAIA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRRtTk0GJLlgbEGIjBFlmw-Z1Jr1gypU10CH7MqD41FI5YyaJtIY5ytq6NLWWR7LvXEHvlKJylF7TKn-sgyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:08:38 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 18 Apr 2024 01:08:38 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-q0csh9QcDd7fnWpYQu5NDw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 01:08:38 UTC	364	IN	Data Raw: 31 64 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d14<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-04-18 01:08:38 UTC	1255	IN	Data Raw: 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e Data Ascii: v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fon
2024-04-18 01:08:38 UTC	1255	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-04-18 01:08:38 UTC	1255	IN	Data Raw: 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b Data Ascii: U+04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-18 01:08:38 UTC	1255	IN	Data Raw: 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b Data Ascii: ce { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+
2024-04-18 01:08:38 UTC	1255	IN	Data Raw: 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: tic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight
2024-04-18 01:08:38 UTC	813	IN	Data Raw: 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 71 30 63 73 68 39 51 63 44 64 37 66 6e 57 70 59 51 75 35 4e 44 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f Data Ascii: }</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css"><script nonce="q0csh9QcDd7fnWpYQu5NDw" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.co
2024-04-18 01:08:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.16	49752	74.125.136.99	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:39 UTC	717	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:08:39 UTC	706	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 17 Apr 2024 02:08:46 GMT Expires: Thu, 25 Apr 2024 02:08:46 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 82793 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 01:08:39 UTC	549	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-04-18 01:08:39 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 Data Ascii: BBBBBuBBBBB{5k7R8F2Vb5C;I
2024-04-18 01:08:39 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 fe fe fe 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 24 fd fd fd ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb f5 e7 ff 8f c6 7b ff 54 a9 36 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 Data Ascii: /${T6S4S4S4S4S4S4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4S4S
2024-04-18 01:08:39 UTC	1255	IN	Data Raw: ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c8 aa ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBB}BBBBBBBBBBB}
2024-04-18 01:08:39 UTC	1116	IN	Data Raw: 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 81 8a f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0b fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b5 ba f7 ff 3e 4b eb ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 3f 4c eb ff ba bf f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd eb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: 5C5C5C5C5C5C5C5C5C5C5C5C5C5C>K5C5C5C5C5C5C5C5C5C5C5C5C?L&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.16	49753	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:40 UTC	1198	OUT	POST /recaptcha/api2/reload?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7482 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:08:40 UTC	7482	OUT	Data Raw: 0a 18 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 12 ce 10 30 33 41 46 63 57 65 41 35 4a 5a 79 2d 6f 66 75 39 74 50 6e 53 46 74 50 57 34 4e 61 77 70 74 49 56 43 30 31 58 76 49 5f 61 2d 4a 41 7a 4c 33 4b 30 65 7a 63 6f 4d 42 74 6a 78 4b 74 72 71 53 63 38 35 5f 76 49 51 6f 42 33 55 76 41 36 59 43 76 78 5a 5f 73 6c 6c 51 70 49 6c 44 49 73 50 79 50 68 64 41 6f 4f 73 4a 46 7a 4e 31 50 6a 41 52 55 72 66 43 30 34 53 35 74 6c 36 6b 4d 50 73 33 4b 79 34 73 51 41 75 45 62 51 51 36 5a 78 6c 69 35 52 6c 6d 4b 67 66 77 59 66 33 6f 6e 7a 34 47 4d 50 66 71 4d 55 76 53 5a 67 74 69 6a 51 56 72 68 54 55 74 4c 76 63 58 41 46 70 4b 71 55 63 6e 75 76 30 54 38 50 79 70 34 53 6f 4b 55 32 34 6d 36 30 34 35 73 4d 65 71 6b 5f 63 55 50 53 71 34 77 49 4e Data Ascii: rz4DvU-cY2JYCwHSTck0_qm-03AFcWeA5JZy-ofu9tPnSFtPW4NawptIVC01XvI_a-JAzL3K0ezcoMBtjxKtrqSc85_vIQoB3UvA6YCvxZ_sllQpIlDIsPyPhdAoOsJFzN1PjARUrfC04S5tl6kMPs3Ky4sQAuEbQQ6Zxli5RlmKgfwYf3onz4GMPfqMUvSZgtijQVrhTUtLvcXAFpKqUcnuv0T8Pyp4SoKU24m6045sMeqk_cUPSq4wIN
2024-04-18 01:08:40 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Thu, 18 Apr 2024 01:08:40 GMT Expires: Thu, 18 Apr 2024 01:08:40 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs;Path=/recaptcha;Expires=Tue, 15-Oct-2024 01:08:40 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 01:08:40 UTC	559	IN	Data Raw: 32 33 30 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 36 56 51 34 4b 5f 57 61 48 58 76 37 66 6d 42 64 4f 64 41 41 34 48 54 66 78 6a 57 6c 37 73 6b 30 66 71 6e 74 31 4e 77 77 67 75 6d 51 64 6f 76 7a 65 76 70 70 4f 4c 38 64 68 45 69 63 4f 75 39 6e 59 78 46 68 30 36 7a 5f 67 6a 6f 46 79 54 7a 34 44 75 31 49 6d 5a 32 6b 5f 76 70 77 64 66 72 79 63 70 56 36 6c 30 6d 70 42 58 4a 64 67 5f 4b 65 46 4a 59 44 36 41 37 64 5a 45 67 6f 6d 43 4c 61 6d 42 6f 78 59 61 62 43 49 79 73 4a 69 79 64 4f 68 6d 37 50 6d 58 37 52 6b 56 44 48 6c 50 41 58 42 31 45 45 59 6c 31 79 61 53 69 72 57 42 4c 4a 4b 54 4b 76 6b 4e 72 78 30 4b 4c 39 55 6f 65 34 67 74 59 51 36 42 59 65 6d 4b 4d 61 79 54 52 64 78 4e 41 44 6b 6d 69 31 55 6e 36 79 52 51 73 74 31 67 4a Data Ascii: 230)]}'["rresp","03AFcWeA6VQ4K_WaHXv7fmBdOdAA4HTfxjWl7sk0fqnt1NwwgumQdovzevppOL8dhEicOu9nYxFh06z_gjoFyTz4Du1ImZ2k_vpwdfrycpV6l0mpBXJdg_KeFJYD6A7dZEgomCLamBoxYabCIysJiydOhm7PmX7RkVDHlPAXB1EEYl1yaSirWBLJKTKvkNrx0KL9Uoe4gtYQ6BYemKMayTRdxNADkmi1Un6yRQst1gJ
2024-04-18 01:08:40 UTC	8	IN	Data Raw: 76 68 52 69 57 78 0d 0a Data Ascii: vhRiWx
2024-04-18 01:08:40 UTC	1255	IN	Data Raw: 61 33 36 0d 0a 50 2d 34 51 6c 55 69 55 4e 49 59 53 58 6e 39 54 52 47 33 75 4b 4f 77 59 5a 4f 7a 42 37 4a 34 52 4e 6c 66 6e 55 63 79 35 61 55 37 70 76 36 4f 46 72 6a 4c 52 54 4c 75 79 47 57 56 46 41 63 74 43 36 78 38 48 4b 55 34 49 63 53 58 76 55 4b 53 41 52 41 50 6f 47 64 4f 75 6b 63 66 78 37 67 79 43 63 2d 63 6e 38 47 48 51 65 46 5f 62 70 59 35 59 4c 6e 7a 35 30 4a 35 75 69 72 46 49 4f 52 30 47 6f 43 4c 7a 4c 5f 38 6d 78 33 5a 76 6d 6d 42 47 4a 72 57 32 49 46 73 32 44 30 51 38 72 56 34 72 71 5f 57 51 32 75 64 46 7a 6f 4c 41 5f 42 70 65 77 58 5f 74 59 65 45 33 73 6d 32 49 75 46 50 42 4a 52 65 79 50 48 39 4b 4d 44 6a 48 6a 53 38 62 48 64 57 2d 43 35 55 6c 79 4d 4f 6c 48 56 61 54 48 43 4b 64 53 62 4a 5a 57 75 4d 33 6f 71 31 5a 32 57 78 54 6e 48 35 5f 68 5a Data Ascii: a36P-4QlUiUNIYSXn9TRG3uKOwYZOzB7J4RNlfnUcy5aU7pv6OFrjLRTLuyGWVFActC6x8HKU4IcSXvUKSARAPoGdOukcfx7gyCc-cn8GHQeF_bpY5YLnz50J5uirFIOR0GoCLzL_8mx3ZvmmBGJrW2IFs2D0Q8rV4rq_WQ2udFzoLA_BpewX_tYeE3sm2IuFPBJReyPH9KMDjHjS8bHdW-C5UlyMOlHVaTHCKdSbJZWuM3oq1Z2WxTnH5_hZ
2024-04-18 01:08:40 UTC	1255	IN	Data Raw: 32 57 2d 72 69 71 43 46 52 38 65 66 61 31 76 4a 65 43 6d 47 78 30 63 31 5a 6c 56 44 62 47 39 63 55 42 49 75 56 38 4e 51 64 30 72 41 75 78 76 49 62 37 33 6d 55 4f 35 37 50 79 61 46 41 4a 45 61 55 6e 65 2d 51 39 75 63 73 4d 6b 6e 66 42 50 4d 6b 50 67 6e 6b 54 76 77 59 68 6a 67 44 5a 75 76 52 66 75 6a 69 59 5f 6f 64 4c 51 71 4a 4e 73 4d 63 43 79 5a 61 39 4a 62 7a 68 52 67 6f 48 32 61 48 56 72 41 48 44 76 76 43 41 54 36 61 70 64 57 33 5a 74 43 68 77 57 64 65 73 6a 47 33 52 78 36 6f 6d 56 31 7a 4b 4e 4c 36 61 6c 4e 38 6c 69 61 4b 6a 2d 31 4b 50 39 41 78 6a 4b 51 5a 74 64 37 37 45 53 6e 6f 34 37 59 72 52 43 32 37 58 45 4c 30 76 6b 75 79 37 6d 58 65 58 73 42 50 50 66 4d 50 4a 74 36 48 2d 4d 73 6c 51 68 63 5a 42 47 61 39 72 5a 35 69 4f 35 58 42 66 75 59 66 66 38 Data Ascii: 2W-riqCFR8efa1vJeCmGx0c1ZlVDbG9cUBIuV8NQd0rAuxvIb73mUO57PyaFAJEaUne-Q9ucsMknfBPMkPgnkTvwYhjgDZuvRfujiY_odLQqJNsMcCyZa9JbzhRgoH2aHVrAHDvvCAT6apdW3ZtChwWdesjG3Rx6omV1zKNL6alN8liaKj-1KP9AxjKQZtd77ESno47YrRC27XEL0vkuy7mXeXsBPPfMPJt6H-MslQhcZBGa9rZ5iO5XBfuYff8
2024-04-18 01:08:40 UTC	111	IN	Data Raw: 75 51 32 55 66 4b 54 7a 52 78 78 44 57 4a 37 65 78 66 4b 79 70 49 4a 31 71 4a 5f 4c 38 43 38 4f 31 49 4f 71 6c 78 4e 79 62 79 77 4e 49 53 35 74 61 4b 57 33 30 71 4e 6e 32 49 55 33 33 34 38 64 36 4d 6e 6b 6e 6a 66 2d 64 6e 38 68 74 6d 74 4c 37 30 56 42 44 6e 74 4c 73 4b 62 79 75 4d 4e 7a 72 6d 59 76 34 35 64 42 36 4f 4f 77 7a 0d 0a Data Ascii: uQ2UfKTzRxxDWJ7exfKypIJ1qJ_L8C8O1IOqlxNybywNIS5taKW30qNn2IU3348d6Mnknjf-dn8htmtL70VBDntLsKbyuMNzrmYv45dB6OOwz
2024-04-18 01:08:40 UTC	1255	IN	Data Raw: 31 35 61 61 0d 0a 65 6f 50 30 5a 79 44 43 63 6d 4e 4f 32 51 7a 44 7a 30 58 57 41 37 4e 35 55 52 64 4e 4e 58 4d 47 52 71 43 44 47 31 69 5a 42 61 4c 47 34 72 4f 76 4f 6e 52 49 65 51 76 44 41 65 53 33 42 30 4d 76 32 42 33 4b 7a 55 77 70 4f 62 5f 4e 76 56 4f 5a 2d 74 31 46 56 4f 42 54 72 38 4f 4b 45 33 75 63 5f 62 34 67 70 79 44 4e 57 47 74 76 42 54 32 6c 54 70 4f 50 6c 51 6c 6f 65 6e 65 4d 39 65 2d 44 6e 44 2d 59 6b 4d 64 58 56 6a 62 4f 74 6e 42 36 37 2d 6e 4c 6d 66 73 66 56 5f 6c 4e 42 32 6c 57 66 64 48 65 42 78 61 77 5f 54 30 49 33 61 6a 73 6c 64 54 47 7a 4b 56 7a 52 48 4d 31 37 61 48 78 66 46 6a 77 73 71 52 49 4e 6a 51 2d 35 41 56 44 44 4c 64 62 65 41 78 6a 47 31 70 6a 5a 4e 4c 69 70 34 57 68 74 4d 55 63 6a 37 35 30 77 39 41 59 34 62 64 67 2d 6c 36 68 4f Data Ascii: 15aaeoP0ZyDCcmNO2QzDz0XWA7N5URdNNXMGRqCDG1iZBaLG4rOvOnRIeQvDAeS3B0Mv2B3KzUwpOb_NvVOZ-t1FVOBTr8OKE3uc_b4gpyDNWGtvBT2lTpOPlQloeneM9e-DnD-YkMdXVjbOtnB67-nLmfsfV_lNB2lWfdHeBxaw_T0I3ajsldTGzKVzRHM17aHxfFjwsqRINjQ-5AVDDLdbeAxjG1pjZNLip4WhtMUcj750w9AY4bdg-l6hO
2024-04-18 01:08:40 UTC	1255	IN	Data Raw: 4c 37 69 42 38 65 50 75 43 42 47 68 56 39 57 53 5f 79 6c 79 36 55 51 4f 63 6f 4a 45 67 78 35 6d 64 7a 47 4a 48 75 31 6a 78 6c 48 59 39 74 65 57 4d 61 6a 4e 31 7a 41 62 6a 47 74 39 71 5f 78 56 58 30 6f 59 66 75 6d 45 72 5a 77 50 75 55 2d 38 70 34 4e 66 78 35 34 43 72 55 33 77 71 76 69 49 71 33 4e 34 6f 50 51 54 5a 67 53 49 39 47 44 6e 53 4d 66 70 4d 33 4a 5a 63 5a 64 73 4f 34 4f 50 36 49 59 6e 69 59 44 36 50 68 4d 75 57 42 69 4e 4f 53 56 33 5f 69 56 79 7a 62 53 36 35 34 6e 74 55 4b 63 4b 56 75 6f 6c 42 4c 45 54 71 6f 4b 44 49 70 38 30 70 68 5a 46 65 52 57 32 38 78 72 30 64 41 4a 59 37 55 69 35 42 41 4b 79 6a 79 69 33 7a 44 70 41 47 33 6d 75 71 38 5a 6b 6d 75 53 42 46 33 50 66 64 63 4b 62 77 46 52 5a 6e 38 48 67 38 51 51 35 6e 67 38 79 53 55 35 76 72 39 64 Data Ascii: L7iB8ePuCBGhV9WS_yly6UQOcoJEgx5mdzGJHu1jxlHY9teWMajN1zAbjGt9q_xVX0oYfumErZwPuU-8p4Nfx54CrU3wqviIq3N4oPQTZgSI9GDnSMfpM3JZcZdsO4OP6IYniYD6PhMuWBiNOSV3_iVyzbS654ntUKcKVuolBLETqoKDIp80phZFeRW28xr0dAJY7Ui5BAKyjyi3zDpAG3muq8ZkmuSBF3PfdcKbwFRZn8Hg8QQ5ng8ySU5vr9d
2024-04-18 01:08:40 UTC	1255	IN	Data Raw: 6a 4e 54 59 79 61 58 4e 77 63 6b 30 79 4b 7a 5a 7a 4e 58 4a 4a 59 7a 46 73 64 46 4e 6b 4c 33 68 4d 4e 46 5a 44 4f 47 31 76 57 6c 51 30 51 55 52 44 4e 7a 56 57 4d 31 46 4a 57 55 31 46 56 55 4e 78 59 30 4a 35 64 56 56 78 65 6a 42 75 59 57 64 58 52 69 39 6b 4d 6c 5a 45 56 46 6c 33 53 55 74 54 53 58 49 78 51 56 45 32 53 31 4d 78 61 6c 68 49 61 47 46 45 64 47 52 44 55 57 31 45 62 69 39 69 5a 6a 6c 55 62 32 56 55 4b 79 39 6e 64 45 70 32 59 56 4e 53 62 45 6c 6c 52 6b 39 57 51 57 78 51 5a 45 4a 59 55 6e 56 58 65 6b 56 53 53 6d 74 47 63 6a 4a 48 52 31 46 70 52 6d 70 58 62 6d 52 30 65 48 4a 6c 56 48 42 74 53 47 52 79 54 57 6c 7a 56 45 31 79 62 46 51 7a 54 48 52 4f 4d 47 38 35 56 69 74 34 4b 31 68 73 62 6b 70 4d 65 6c 70 48 53 6d 78 43 53 6e 52 4b 4e 6e 52 61 63 6d Data Ascii: jNTYyaXNwck0yKzZzNXJJYzFsdFNkL3hMNFZDOG1vWlQ0QURDNzVWM1FJWU1FVUNxY0J5dVVxejBuYWdXRi9kMlZEVFl3SUtTSXIxQVE2S1MxalhIaGFEdGRDUW1Ebi9iZjlUb2VUKy9ndEp2YVNSbEllRk9WQWxQZEJYUnVXekVSSmtGcjJHR1FpRmpXbmR0eHJlVHBtSGRyTWlzVE1ybFQzTHROMG85Vit4K1hsbkpMelpHSmxCSnRKNnRacm
2024-04-18 01:08:40 UTC	1255	IN	Data Raw: 64 69 4d 6d 78 35 53 45 45 30 56 6b 6b 78 61 55 31 36 53 30 68 73 63 6d 78 69 57 6a 4a 45 4e 6c 5a 36 65 6e 70 6e 55 57 5a 46 55 56 46 44 57 57 78 74 5a 30 6c 46 63 48 6f 7a 52 33 4a 76 63 6d 35 74 53 31 64 70 5a 33 49 76 51 32 70 33 55 7a 55 32 65 6d 70 52 54 55 64 36 63 6b 35 34 57 69 39 6d 56 43 73 76 52 44 56 32 4e 47 4a 6e 62 56 68 52 61 7a 42 6f 56 6c 56 76 59 6b 52 5a 64 54 6c 71 53 56 4a 78 56 7a 42 55 62 6e 70 76 5a 33 56 6e 56 55 52 73 62 44 68 45 61 7a 68 45 62 53 73 31 64 56 68 31 53 47 4e 47 61 32 4a 36 4f 55 31 75 61 30 64 72 52 46 56 31 52 32 35 4a 64 6c 5a 74 64 48 42 46 4d 30 45 79 56 48 5a 42 54 47 49 77 54 6c 4a 45 56 46 56 32 4d 32 6b 78 61 55 78 74 52 6d 4e 46 54 46 56 4b 51 55 56 6c 4f 56 42 4a 64 56 4d 33 4d 54 5a 43 5a 30 59 76 4f Data Ascii: diMmx5SEE0VkkxaU16S0hscmxiWjJENlZ6enpnUWZFUVFDWWxtZ0lFcHozR3Jvcm5tS1dpZ3IvQ2p3UzU2empRTUd6ck54Wi9mVCsvRDV2NGJnbVhRazBoVlVvYkRZdTlqSVJxVzBUbnpvZ3VnVURsbDhEazhEbSs1dVh1SGNGa2J6OU1ua0drRFV1R25JdlZtdHBFM0EyVHZBTGIwTlJEVFV2M2kxaUxtRmNFTFVKQUVlOVBJdVM3MTZCZ0YvO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.16	49754	74.125.136.99	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:40 UTC	873	OUT	GET /recaptcha/api2/reload?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:08:40 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Thu, 18 Apr 2024 01:08:40 GMT Expires: Thu, 18 Apr 2024 01:08:40 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 01:08:40 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-18 01:08:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.16	49758	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:40 UTC	1479	OUT	GET /recaptcha/api2/payload?p=06AFcWeA7yxEwJrTQzKFdvzKXBPyepU7lkUD6FHF_xaRg9MITh_oBGwJBlnrTky_tJUTuRePPmh9rA1h38UdFZMrfj0veWAhi-6avQdfso_JuqEei9G1OBX8K271KlGTtCIxsfd5i-to_bzQRZa4agIbvfNy8oOaERLvakWtpQI_wIkaJLEVAOh_WWRq5gROK9kU9nKkvq62Ju&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:08:40 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Thu, 18 Apr 2024 01:08:40 GMT Date: Thu, 18 Apr 2024 01:08:40 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 01:08:40 UTC	1255	IN	Data Raw: 37 44 36 37 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 7D67JFIFC!"$"$C"}!1AQa"q
2024-04-18 01:08:40 UTC	1255	IN	Data Raw: 9a 27 0d 77 04 ce b7 e1 96 b4 d0 a3 68 73 02 62 99 77 c6 3d 0d 7a 07 88 3c 51 1d 87 87 6c 51 1c 92 1f ca 75 fc 6b c6 7c 2d 71 34 1e 27 8d 36 e3 c8 52 b8 ae 87 57 97 ed 9a 75 bc b2 3e 00 ba c7 eb 53 19 db 42 dd 35 27 a9 d5 78 82 5b 7f b7 21 8f 6a f9 f0 82 71 5e a9 e0 07 33 78 76 d0 a9 c8 48 88 35 e1 1e 29 b9 50 96 ed 14 bc a2 7e 95 eb 3f 06 b5 8b 79 fc 20 21 67 fd ee d6 ef 57 87 97 bc d1 96 2a 3e e1 f3 97 c7 58 e4 7f 12 c9 30 5f bf 21 cf bf 35 e6 d2 a6 55 98 12 08 f4 35 f4 2f ed 3b e1 e8 74 e8 34 6b b8 40 cc fb 8b 9a f9 f9 c8 58 2e 3b e1 f1 57 ad d9 8d d3 48 82 5c 34 d6 d9 fb db 68 bf ce f5 1e d4 cc 7f a7 c1 cf 01 6a 4b f3 89 01 a4 c6 b7 20 84 93 92 6a c2 f6 a8 62 18 c8 a9 d4 71 52 cd c9 12 a5 51 51 20 a9 d2 b3 68 a4 48 87 b5 49 de a2 51 cd 4a 39 e6 a1 a2 Data Ascii: 'whsbw=z<QlQuk\|-q4'6RWu>SB5'x[!jq^3xvH5)P~?y !gW*>X0_!5U5/;t4k@X.;WH\4hjK jbqRQQ hHIQJ9
2024-04-18 01:08:40 UTC	1255	IN	Data Raw: d0 bb 76 fb ec 85 bf 1a cb 6d 4d ec d9 0c 3a 9c 77 3a 6c 8d 20 cc a1 30 05 77 ff 00 08 b5 0b 7b 7d 39 37 92 19 be 52 b8 f7 af 2c d3 d3 ca 8e 74 6f bf 1f 4f 7a f5 df 85 b6 36 52 f8 6c 6a 32 32 89 37 00 17 3e f5 b5 19 5a 57 33 ac bf 77 62 2f da e2 45 fb 2e 89 0a fd d0 84 8a f9 7a e7 72 db 4e c4 70 cf c5 7d 25 fb 59 c8 e7 55 d2 60 5e 54 5b e6 be 6e 92 65 78 e6 04 7c a0 e2 b7 92 f7 99 c3 1f 85 11 0e 6f e1 f6 4e 69 75 03 96 04 50 a3 fd 3e 3f f7 28 be ea b5 2d 15 1d 48 e3 ce 6a c2 1a 81 3a d4 c9 da a5 9b a2 64 a9 92 a1 4a 9d 45 66 d9 a2 43 d6 a4 5e 94 c1 4f 15 25 a2 45 a7 60 9e 94 d5 a7 8e 2a 5b 2c 40 09 1c 54 77 42 32 36 bb 02 29 d3 36 c8 0b 0a a6 59 24 1b 9c 9d c2 b3 91 8d 46 56 64 48 66 71 09 e0 e3 ad 38 5a cd 70 e5 61 84 c8 7d 07 5a 73 5a bc e4 b2 f1 5d 17 Data Ascii: vmM:w:l 0w{}97R,toOz6Rlj227>ZW3wb/E.zrNp}%YU`^T[nex\|oNiuP>?(-Hj:dJEfC^O%E`*[,@TwB26)6Y$FVdHfq8Zpa}ZsZ]
2024-04-18 01:08:40 UTC	339	IN	Data Raw: f8 9b 4e 1b b9 fb 1a 93 f9 57 ce d3 47 8b 59 7f da 96 be 91 fd a6 6d 9c eb 56 17 ad 11 da f6 81 46 7b 71 5f 3a dc 8f dd 01 d8 c9 cd 75 5e f2 38 ad ee 95 e3 18 be 55 fe ea 0a 8e ef 9b 82 7d 45 4a 9f f1 fc e7 da a2 bb e2 e0 8f 6a 1a 2a 28 44 15 62 31 50 44 7d 6a c2 11 8a cd 9b 26 4c 95 2a d4 28 6a 54 eb 59 b4 68 99 28 34 f1 c9 a8 d4 53 c7 06 91 68 95 69 d9 c7 34 c5 a5 a9 b1 57 16 51 ba 3a a9 2c 6b 0a 82 c7 3c d5 bc f6 cf 15 46 e6 60 c3 1b 07 15 9c 8c 66 49 2d ee c8 ce d5 e9 f7 6b 47 42 d3 2f ee 3f d3 21 73 08 3c 3b 1f 4a a9 e1 ad 2e f7 5f d6 6d b4 ab 38 1e 69 67 6e 02 8c 91 5e b2 9e 0f d6 7c 39 70 20 d4 2c a6 58 84 5b b2 50 91 8a ce cd 6b 62 1f bb d4 e5 bc 23 e0 b9 7c 45 7f 73 67 26 a1 e5 18 a3 2c 84 af 04 d5 9f 18 78 26 1d 33 49 b3 db 7e cd 38 6d bb 19 0e Data Ascii: NWGYmVF{q_:u^8U}EJj(Db1PD}j&L(jTYh(4Shi4WQ:,k<F`fI-kGB/?!s<;J._m8ign^\|9p ,X[Pkb#\|Esg&,x&3I~8m
2024-04-18 01:08:40 UTC	1255	IN	Data Raw: 48 d5 af 25 d3 ad 76 e4 b0 53 e8 33 5c 35 cc b3 5d 5b 48 ce c4 63 9e b5 cc e2 ef 62 dc 54 63 73 5d 2f e5 33 0b c6 75 d9 bb 25 47 4c 54 97 31 c3 75 33 4e 23 4d b3 1e 95 c9 45 f6 b6 45 0b 28 11 9e aa 7b d6 ae 8d 74 b6 17 91 b5 cb b3 a0 fe 03 da aa da 0e 94 ae f5 20 d5 34 d8 b4 f8 8b b3 f0 cd 9c 7a 55 8f 0d f8 95 34 cd 46 34 8d be 57 e2 b5 b5 33 a6 6a d6 ef 1c aa d1 1c 65 4f ad 70 d1 e9 7e 55 d3 96 25 d5 5b e4 6f 4a a8 f9 97 67 17 74 7b 70 d7 72 01 f3 c7 3c f5 a2 bc bd 25 bd 54 03 cc 3c 0c 75 a2 8b 23 6e 77 d8 f6 e2 74 88 6d 82 47 32 48 14 60 57 31 77 a5 db dd 5d b4 a2 77 4c f4 0a fc 51 e6 59 83 b6 40 11 0f 52 dc 66 9e b6 ba 51 70 52 e9 46 7b 09 2b a0 77 5d 48 a2 d2 24 89 cf 93 7d 30 3f ef d5 c8 ad b5 44 c2 c7 a9 3a 8e ff 00 36 73 48 34 f8 3c d0 62 bc 04 7b Data Ascii: H%vS3\5][HcbTcs]/3u%GLT1u3N#MEE({t 4zU4F4W3jeOp~U%[oJgt{pr<%T<u#nwtmG2H`W1w]wLQY@RfQpRF{+w]H$}0?D:6sH4<b{
2024-04-18 01:08:40 UTC	1255	IN	Data Raw: 70 0f 43 5c 92 4a f7 3a 2a c7 9a c7 46 d6 b7 17 3a 2c 57 90 46 87 cb 39 62 a6 9e 4c 5a 94 c9 0c 38 12 6c e4 b7 1c 8a e9 3e 07 d8 c3 a8 e9 57 56 b2 40 ca c1 71 bd b9 02 b9 df 88 ba 3c de 1c d4 be d0 1f 7a 3e 40 23 8c 54 6a 98 d4 54 56 a6 26 ad 73 75 6d 6c 62 8a 60 59 5b 07 15 16 eb 98 ed d0 47 96 24 6e 61 d6 a1 85 24 91 15 a4 8d 82 48 78 cf 5a bb 75 63 71 61 09 d8 c5 96 45 f9 5f fa 55 26 67 ab 7a 0e 5d 51 36 8c a3 0e 28 ac b1 67 a8 11 9f 21 ce 68 a7 ca bb 97 ed 25 d8 f6 9d 46 e2 cd d3 75 c4 27 07 d4 74 ac f2 34 86 50 a0 2a 93 c8 3d 0d 6d dd db c9 2b b7 9b 6c c4 67 3f 77 a5 67 91 65 23 f9 73 2a 21 1c 60 8c 71 5a 36 6d a3 66 cf 87 f4 bd 15 d5 66 9a fa 32 eb ce c2 d8 ae 8d 74 fd 2a 40 5e 29 53 38 e3 0f 5c 3f d9 b4 88 d4 9f 39 54 e3 f8 5b 15 25 8c 3a 65 ba 97 Data Ascii: pC\J:F:,WF9bLZ8l>WV@q<z>@#TjTV&sumlb`Y[G$na$HxZucqaE_U&gz]Q6(g!h%Fu't4P=m+lg?wge#s!`qZ6mff2t@^)S8\?9T[%:e
2024-04-18 01:08:40 UTC	1255	IN	Data Raw: d2 58 07 11 88 8e f6 63 e9 ed 5e 27 aa 5e ad ec d7 96 56 f2 f9 cb 28 c0 27 ad 4c e1 ca 52 b4 d5 cf 3d 69 e4 b9 fb 3d bd b2 8d ec c0 63 da bb 3b ad 36 f2 d2 d2 de 4b bb 76 36 b2 0d a8 0a f4 35 b3 f0 a7 c1 36 97 f7 c7 52 91 b2 2d 9b 0c a7 d6 bd 86 f7 4d b0 b8 b6 8a 36 81 0a a3 7c a3 15 1e cd cb 61 5d 44 f1 e8 6d 31 12 03 66 b9 da 3b 51 5e b5 fd 93 6b ff 00 3c d7 f2 a2 9f b1 90 b9 91 c5 b7 8b 6c e7 88 85 b4 96 07 ef b9 3a d6 62 4d a7 5c 4a 5e 45 05 8f 6c 53 25 6c 80 cf 92 7e 95 12 4b 6e 0f cc b8 3e b8 ab 6e e6 b1 8a 45 a9 6c 34 69 99 43 a6 c1 ed da b9 cf 11 4d a1 c0 86 de ca 23 24 b9 c1 7c f0 2a 4f 10 ea c9 0d bb 8b 7c 67 18 e2 b9 19 e5 44 4f 31 8f cc fc e2 aa 0a da 89 ea 13 c9 e5 96 6d c7 8f ba 0d 75 7f 0f 3c 23 2e a9 20 d5 75 34 2b 6c a7 31 21 fe 2a a9 f0 Data Ascii: Xc^'^V('LR=i=c;6Kv656R-M6\|a]Dm1f;Q^k<l:bM\J^ElS%l~Kn>nEl4iCM#$\|O\|gDO1mu<#. u4+l1!
2024-04-18 01:08:40 UTC	1255	IN	Data Raw: e2 d0 78 e3 c3 73 95 1f 6e 55 07 d4 74 14 b7 fe 20 b1 96 d0 b5 84 91 ce 1b a1 06 bc 6b fe 11 5d 60 e4 2c 0a 73 c7 06 bb ef 85 3e 11 d7 35 a5 96 c2 da ca 49 1e 05 2c c4 70 07 e3 44 a3 49 7c 25 42 a6 9e f0 db 99 f2 ac d2 36 77 76 f4 ad 2f 04 78 72 7f 11 ea 41 dd 59 2c e2 3f 3b 63 af d2 9b a2 78 67 50 d6 b5 c9 74 f6 88 a4 70 c9 b6 62 4f 1d 6b da 34 6d 36 db 49 b3 4b 3b 68 c2 2a 2e dc 81 d4 d7 3c 67 cd b1 af 32 48 93 4e b2 5b 1b 54 b6 b6 8c 24 6a 31 8a 9c 93 4f 19 1f c5 48 71 5b c6 36 39 9b bb 10 1e 29 69 0d 00 83 56 21 d8 a4 3d 69 c2 8c 73 4d 0a e2 1a 46 1c ee f4 e3 14 ec 53 49 07 20 7a 8a a8 ee 89 96 cc ed ad 70 ba 7c 00 77 5a 7e 3b 53 20 ff 00 8f 18 3f dd a7 f7 35 e9 c7 63 c9 96 e2 1e 05 18 e6 94 f2 28 c5 36 48 e5 15 20 c8 52 71 c0 ef 4c 4a 98 7c d0 4a be Data Ascii: xsnUt k]`,s>5I,pDI\|%B6wv/xrAY,?;cxgPtpbOk4m6IK;h*.<g2HN[T$j1OHq[69)iV!=isMFSI zp\|wZ~;S ?5c(6H RqLJ\|J
2024-04-18 01:08:41 UTC	1255	IN	Data Raw: fd d1 47 61 5e 92 7a 1e 44 b7 0a 28 a2 98 87 2f 4a 96 32 36 f5 ea 31 50 2d 4a b8 48 9e 46 e8 06 6a 5b d1 8e 3b 9e 5d f1 3a d2 3b 7b 98 ad 00 c7 9e df ce b2 34 af 0f db 58 69 77 a4 80 5b 61 3c f6 ad 0f 8a ba a4 73 ea 1a 7d c2 9e 11 f0 6b 95 d4 fc 47 26 fb c8 e3 3f 23 26 2b c7 a9 b9 ee d2 7e e2 30 3c 2f 38 97 c4 e6 21 d0 39 c5 7a 5d d8 81 f4 cb 86 21 77 18 c8 af 30 f0 fa 0b 4b cb 7d 4c 81 8f 30 83 5d 3d ee ad b6 ea 60 c7 6a 15 dc a0 f4 35 2e db 1a 5c f3 9b ab 77 82 fe 47 3c 00 4e 6a 8d c3 09 ad 25 38 e4 73 5b 3a c4 a9 71 1d c4 89 d7 3c d7 36 f3 85 89 93 3f 7a 9a 4c 89 17 b4 bb e7 82 01 16 72 87 de b6 bc 48 b1 dd f8 7e d2 ec 0f 9b 25 72 3b 57 2f 6a a3 c8 67 cf dd ed 5b 36 37 29 2e 82 2d a6 7c 30 62 40 a2 51 2a 26 66 a0 b0 35 8d bb 44 31 20 18 7a d8 f8 75 73 Data Ascii: Ga^zD(/J261P-JHFj[;]:;{4Xiw[a<s}kG&?#&+~0</8!9z]!w0K}L0]=`j5.\wG<Nj%8s[:q<6?zLrH~%r;W/jg[67).-\|0b@Q*&f5D1 zus
2024-04-18 01:08:41 UTC	1255	IN	Data Raw: 8a b3 77 73 f6 59 ec 67 03 ee e3 24 53 6d e6 53 a7 b1 2b c8 35 1e b2 63 92 c2 00 9f eb 3d 29 c7 5d c7 13 dd fc 2b 2c 36 5a 0d e7 88 64 70 c2 ee d7 ca c9 fa 57 cd 9e 24 7f b4 df dc 49 1e 18 07 38 c5 76 1e 28 f1 a1 b4 f0 9d b6 8f 66 e4 a8 e5 b1 eb 8a f2 c9 35 43 14 be 62 8f 98 9c 9a aa 54 9a d4 25 25 61 f2 79 de 5b 03 1c 8b 9f 6a a8 aa dd 32 c5 bd 08 ad 5b 7d 7d 31 fb c4 ce 7d ab 46 0d 57 47 68 f7 cb 1a ef c7 a5 68 f9 91 2d 45 98 90 02 a3 f7 8c 17 d2 9f 2c a3 fb c2 a7 bb b9 b1 92 4d c3 1b 6a 06 9e c4 f5 c7 e7 57 19 36 4e c4 71 4c c8 d9 0c 05 2c f7 2c fc 31 dd 4f 73 64 54 14 3c fd 69 88 2d 8b 61 9b f5 a1 21 90 72 c6 9f b8 01 5a 96 d6 96 52 e7 7c c5 30 3d 7a d3 67 d3 ec 94 fc b7 24 fe 35 2d bb 92 f5 32 5d e9 02 ad 4e d6 f1 19 0a 89 70 07 7a 8f ec ad fd f1 4d Data Ascii: wsYg$SmS+5c=)]+,6ZdpW$I8v(f5CbT%%ay[j2[}}1}FWGhh-E,MjW6NqL,,1OsdT<i-a!rZR\|0=zg$5-2]NpzM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.16	49764	74.125.136.99	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:41 UTC	1083	OUT	GET /recaptcha/api2/payload?p=06AFcWeA7yxEwJrTQzKFdvzKXBPyepU7lkUD6FHF_xaRg9MITh_oBGwJBlnrTky_tJUTuRePPmh9rA1h38UdFZMrfj0veWAhi-6avQdfso_JuqEei9G1OBX8K271KlGTtCIxsfd5i-to_bzQRZa4agIbvfNy8oOaERLvakWtpQI_wIkaJLEVAOh_WWRq5gROK9kU9nKkvq62Ju&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:08:41 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Thu, 18 Apr 2024 01:08:41 GMT Date: Thu, 18 Apr 2024 01:08:41 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 01:08:41 UTC	6	IN	Data Raw: 37 44 36 37 0d 0a Data Ascii: 7D67
2024-04-18 01:08:41 UTC	1255	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C"}!1AQa"q2
2024-04-18 01:08:41 UTC	1255	IN	Data Raw: b7 e1 96 b4 d0 a3 68 73 02 62 99 77 c6 3d 0d 7a 07 88 3c 51 1d 87 87 6c 51 1c 92 1f ca 75 fc 6b c6 7c 2d 71 34 1e 27 8d 36 e3 c8 52 b8 ae 87 57 97 ed 9a 75 bc b2 3e 00 ba c7 eb 53 19 db 42 dd 35 27 a9 d5 78 82 5b 7f b7 21 8f 6a f9 f0 82 71 5e a9 e0 07 33 78 76 d0 a9 c8 48 88 35 e1 1e 29 b9 50 96 ed 14 bc a2 7e 95 eb 3f 06 b5 8b 79 fc 20 21 67 fd ee d6 ef 57 87 97 bc d1 96 2a 3e e1 f3 97 c7 58 e4 7f 12 c9 30 5f bf 21 cf bf 35 e6 d2 a6 55 98 12 08 f4 35 f4 2f ed 3b e1 e8 74 e8 34 6b b8 40 cc fb 8b 9a f9 f9 c8 58 2e 3b e1 f1 57 ad d9 8d d3 48 82 5c 34 d6 d9 fb db 68 bf ce f5 1e d4 cc 7f a7 c1 cf 01 6a 4b f3 89 01 a4 c6 b7 20 84 93 92 6a c2 f6 a8 62 18 c8 a9 d4 71 52 cd c9 12 a5 51 51 20 a9 d2 b3 68 a4 48 87 b5 49 de a2 51 cd 4a 39 e6 a1 a2 d0 f1 d2 80 7e 61 Data Ascii: hsbw=z<QlQuk\|-q4'6RWu>SB5'x[!jq^3xvH5)P~?y !gW*>X0_!5U5/;t4k@X.;WH\4hjK jbqRQQ hHIQJ9~a
2024-04-18 01:08:41 UTC	1255	IN	Data Raw: bf 1a cb 6d 4d ec d9 0c 3a 9c 77 3a 6c 8d 20 cc a1 30 05 77 ff 00 08 b5 0b 7b 7d 39 37 92 19 be 52 b8 f7 af 2c d3 d3 ca 8e 74 6f bf 1f 4f 7a f5 df 85 b6 36 52 f8 6c 6a 32 32 89 37 00 17 3e f5 b5 19 5a 57 33 ac bf 77 62 2f da e2 45 fb 2e 89 0a fd d0 84 8a f9 7a e7 72 db 4e c4 70 cf c5 7d 25 fb 59 c8 e7 55 d2 60 5e 54 5b e6 be 6e 92 65 78 e6 04 7c a0 e2 b7 92 f7 99 c3 1f 85 11 0e 6f e1 f6 4e 69 75 03 96 04 50 a3 fd 3e 3f f7 28 be ea b5 2d 15 1d 48 e3 ce 6a c2 1a 81 3a d4 c9 da a5 9b a2 64 a9 92 a1 4a 9d 45 66 d9 a2 43 d6 a4 5e 94 c1 4f 15 25 a2 45 a7 60 9e 94 d5 a7 8e 2a 5b 2c 40 09 1c 54 77 42 32 36 bb 02 29 d3 36 c8 0b 0a a6 59 24 1b 9c 9d c2 b3 91 8d 46 56 64 48 66 71 09 e0 e3 ad 38 5a cd 70 e5 61 84 c8 7d 07 5a 73 5a bc e4 b2 f1 5d 17 c3 b9 53 4f d6 5a Data Ascii: mM:w:l 0w{}97R,toOz6Rlj227>ZW3wb/E.zrNp}%YU`^T[nex\|oNiuP>?(-Hj:dJEfC^O%E`*[,@TwB26)6Y$FVdHfq8Zpa}ZsZ]SOZ
2024-04-18 01:08:41 UTC	1255	IN	Data Raw: 1a 93 f9 57 ce d3 47 8b 59 7f da 96 be 91 fd a6 6d 9c eb 56 17 ad 11 da f6 81 46 7b 71 5f 3a dc 8f dd 01 d8 c9 cd 75 5e f2 38 ad ee 95 e3 18 be 55 fe ea 0a 8e ef 9b 82 7d 45 4a 9f f1 fc e7 da a2 bb e2 e0 8f 6a 1a 2a 28 44 15 62 31 50 44 7d 6a c2 11 8a cd 9b 26 4c 95 2a d4 28 6a 54 eb 59 b4 68 99 28 34 f1 c9 a8 d4 53 c7 06 91 68 95 69 d9 c7 34 c5 a5 a9 b1 57 16 51 ba 3a a9 2c 6b 0a 82 c7 3c d5 bc f6 cf 15 46 e6 60 c3 1b 07 15 9c 8c 66 49 2d ee c8 ce d5 e9 f7 6b 47 42 d3 2f ee 3f d3 21 73 08 3c 3b 1f 4a a9 e1 ad 2e f7 5f d6 6d b4 ab 38 1e 69 67 6e 02 8c 91 5e b2 9e 0f d6 7c 39 70 20 d4 2c a6 58 84 5b b2 50 91 8a ce cd 6b 62 1f bb d4 e5 bc 23 e0 b9 7c 45 7f 73 67 26 a1 e5 18 a3 2c 84 af 04 d5 9f 18 78 26 1d 33 49 b3 db 7e cd 38 6d bb 19 0e 1b e9 5e 85 f0 f6 Data Ascii: WGYmVF{q_:u^8U}EJj(Db1PD}j&L(jTYh(4Shi4WQ:,k<F`fI-kGB/?!s<;J._m8ign^\|9p ,X[Pkb#\|Esg&,x&3I~8m^
2024-04-18 01:08:41 UTC	1255	IN	Data Raw: 86 c6 52 f1 7d 27 ad 41 77 cd c9 3e d5 64 8f f4 c9 1f df 15 5a e4 e6 e0 d3 63 83 04 15 3a 76 a8 53 a5 4c 9d ab 36 6e 91 32 d4 cb 51 2d 48 9c d6 4c d2 24 aa 69 fd 4e 69 8b 4f ac d9 64 8a 06 28 cd 22 9a 5c 71 9a 57 18 b5 0f 94 a7 92 38 c6 4d 4b 9c 52 28 66 04 01 90 4e 29 da e3 49 37 a9 ee bf b2 8a e8 fa 54 ba a6 ad a8 f9 6a e5 54 40 cc 99 61 eb 8a e8 3e 24 fc 66 89 ef ae 34 5d 32 da 12 ae 3c b5 79 63 c9 39 ae 33 c1 b3 41 a5 68 16 c9 35 bb 15 5f 9d ca f1 c5 70 5f 10 2e 2c 75 af 12 0b 9d 32 27 89 57 03 1e a7 d7 8a de 12 4a 36 67 25 5a 77 a9 ce 75 3e 34 30 78 52 c6 18 ec ef 41 d5 75 05 cc e8 a7 72 80 dd b1 5e a9 f0 07 44 d6 34 5f 00 ea b1 b8 85 65 b8 1b d5 9b ae 08 af 22 f0 7f c3 4f 15 6a 3a ba 78 8e 77 17 16 96 8a 26 fd ee 48 38 ed 5e a3 a9 f8 9a f1 7c 39 3d Data Ascii: R}'Aw>dZc:vSL6n2Q-HL$iNiOd("\qW8MKR(fN)I7TjT@a>$f4]2<yc93Ah5_p_.,u2'WJ6g%Zwu>40xRAur^D4_e"Oj:xw&H8^\|9=
2024-04-18 01:08:41 UTC	1255	IN	Data Raw: 50 cd 22 c9 45 3d 7a 53 05 38 1a 86 8b 43 c7 14 ed c3 1d 69 b9 e2 92 95 86 29 35 a1 e1 db 56 bd d4 a1 89 41 c0 f9 8d 67 57 aa 7c 03 b5 d2 23 bb bb d4 b5 78 4c c5 97 6c 39 e8 28 bf 40 6e ca e5 e6 b2 d4 ee ac be c5 6b 0b b0 7e 0b 01 d0 56 87 86 be 19 dd 43 60 35 0b f7 f2 3e 7c aa 30 19 6a eb 75 df 16 5a d9 aa 43 6b 6b 1a 12 78 d8 bd aa 5f f8 4a e0 bc d3 19 2e 63 2b e5 8c a6 05 52 a7 d6 e7 3b 94 8e 5f c5 be 31 bd f0 df 85 c6 89 65 7a 3f 7f 2e d6 03 ae de f5 2d 9e 91 0e a7 e1 d1 ac 59 c0 24 f2 a2 cc 84 1c ed c7 3c d7 21 e3 9f 2b 50 d6 ed 67 0b 95 c8 f9 08 c5 7a 0f 88 7c 53 a7 f8 63 c1 f6 7a 66 9d 08 59 ae 97 6c b1 81 90 d9 15 33 6a d6 36 a7 17 6f 33 89 d5 a7 83 4d 36 77 fa 65 ab 3c 8e e0 4d 22 8c 85 cf 51 5a 5a cf c3 1b 79 26 6d 56 08 0c 89 70 a1 8a 01 d0 9e Data Ascii: P"E=zS8Ci)5VAgW\|#xLl9(@nk~VC`5>\|0juZCkkx_J.c+R;_1ez?.-Y$<!+Pgz\|SczfYl3j6o3M6we<M"QZZy&mVp
2024-04-18 01:08:41 UTC	1255	IN	Data Raw: 8f 84 bc 2e 34 9d 26 ce 0d 4a 65 81 e4 50 c4 83 d3 35 e3 9a 04 26 6d 5e 15 41 f7 18 39 fc 2b d5 e6 d5 5b 50 11 8b 87 63 b1 42 80 4f 61 52 96 a2 9f 63 d0 a0 f0 c6 87 3a 95 9b 50 49 dc 0f 90 83 cd 56 b1 f0 f2 cd ab a6 9e e9 ba 27 6c 29 5e 71 58 3a 3c f6 02 1c b3 79 6e bf c5 bb ad 77 3a 07 8e 74 9d 36 38 55 60 8a 49 0b 6d 2f 9e 6b a6 9c 56 ec e5 a8 e4 b4 89 57 59 f0 6e 99 75 e3 98 74 89 e3 07 6c 1b 95 93 b7 d6 b4 ae 7e 16 e8 3f 62 12 6a 0f 24 d7 10 b0 68 db 3d 31 5a 3a 13 1d 4b c7 77 1a c6 3f 76 f0 e1 45 74 b7 df f1 e5 20 f7 cd 6f 0c 34 37 30 9e 26 a4 5f 29 86 e8 b0 da a4 71 0c 46 aa 14 54 2c 47 6a 9e e1 d8 c7 d7 b5 56 24 05 14 34 93 b2 34 8c a4 d5 d9 5a f6 15 9f 11 3e 36 b0 20 83 d2 bc 7f c4 de 1e 7d 1f 59 9b 53 b3 55 c0 3d 31 d7 e9 5e bb 77 70 b1 73 fc 43 Data Ascii: .4&JeP5&m^A9+[PcBOaRc:PIV'l)^qX:<ynw:t68U`Im/kVWYnutl~?bj$h=1Z:Kw?vEt o470&_)qFT,GjV$44Z>6 }YSU=1^wpsC
2024-04-18 01:08:41 UTC	1255	IN	Data Raw: e5 68 84 23 ef 5c f7 5f 87 51 2a e8 d1 cd bb 79 2b 8d df 4a de be ff 00 8f 27 f7 38 ae 7b e1 5e d6 f0 dc 88 ad cc 72 91 8a e8 6f b8 b2 3f 5a f5 28 3b d3 3c 8c 45 d5 53 12 5e 57 15 4a e0 ec 1e b5 7e 41 54 6e d4 b0 20 56 35 0e a8 18 9a 9c 8c e7 01 6a b5 b0 6c e7 1d 3f 5a bf 3c 0c cd d0 7e 74 b1 42 07 18 e6 b9 1a 6d 9d 6a 49 22 b1 4c 2e 40 ef 4f 88 67 ad 59 74 55 5c 1c 54 32 15 4e 73 c5 16 b0 af 70 c3 51 59 ed a9 46 09 1b e8 a5 cc 3e 53 c4 2d 2d e7 bb 90 c1 6f 13 99 71 c9 50 49 02 be 91 f8 2c 9e 1c d3 3c 16 b6 f6 5a 85 b9 be 95 4b 5c 06 20 38 3d 08 f5 aa 7f 0a bc 17 0f 87 ed 56 ea f6 25 9a f2 e1 3e 65 61 90 a3 d2 ae f8 cb 41 d1 ac 44 37 9a 7d 8c 76 93 c8 c4 b9 43 f7 ab a2 8d 37 05 ce d1 c5 56 a2 9b 50 47 32 6c 6d b4 fb db a1 6a 14 09 24 2c ce a3 ef 73 4a df Data Ascii: h#\_Q*y+J'8{^ro?Z(;<ES^WJ~ATn V5jl?Z<~tBmjI"L.@OgYtU\T2NspQYF>S--oqPI,<ZK\ 8=V%>eaAD7}vC7VPG2lmj$,sJ
2024-04-18 01:08:41 UTC	1255	IN	Data Raw: eb 98 6d 41 f5 af 7a a2 b5 33 c0 a1 ad 4d 4e 41 93 1d 38 14 d2 bc 55 87 eb 8f 6a 61 1d ab cb b1 eb 15 d8 11 d2 9e a6 9c ca 29 80 50 34 3c d3 69 49 a6 9e b4 c0 50 79 a2 9a 3a d2 f6 a4 2b 0e 24 52 af de 5f a8 a8 aa 58 b9 96 30 7a 12 2a e3 ba 14 b6 67 70 9f ea 23 ff 00 70 52 0a 58 ff 00 d5 20 ff 00 64 50 05 7a 6b 63 c7 96 e1 48 7a d3 b1 4d 3d 69 88 54 14 fb 93 b3 4c ba 7c 67 6c 44 81 4d 4a 9a 45 f3 6d 26 4c 70 53 06 a2 4b 42 a1 f1 23 c1 7c 68 b2 5d 69 76 f2 20 25 cc a7 a7 6e 6b 92 be 86 48 e1 93 70 20 83 c9 3d eb d9 86 80 af ba 36 1f 22 c8 48 cf 35 c1 7c 49 b5 8e c6 15 44 03 2f 27 35 e3 54 4f 98 f7 69 b4 e3 a1 c6 db df 23 5b 47 a7 90 01 32 67 3e 95 ab e3 ac 5b da 40 e8 72 c6 20 33 5c 95 c1 fb 3e ad 19 60 46 71 8a e8 f5 d9 1a f1 12 32 41 02 30 45 26 9d ee 51 Data Ascii: mAz3MNA8Uja)P4<iIPy:+$R_X0z*gp#pRX dPzkcHzM=iTL\|glDMJEm&LpSKB#\|h]iv %nkHp =6"H5\|ID/'5TOi#[G2g>[@r 3\>`Fq2A0E&Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.16	49765	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:55 UTC	1329	OUT	POST /recaptcha/api2/replaceimage?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 5198 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:08:55 UTC	5198	OUT	Data Raw: 76 3d 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 26 63 3d 30 33 41 46 63 57 65 41 36 56 51 34 4b 5f 57 61 48 58 76 37 66 6d 42 64 4f 64 41 41 34 48 54 66 78 6a 57 6c 37 73 6b 30 66 71 6e 74 31 4e 77 77 67 75 6d 51 64 6f 76 7a 65 76 70 70 4f 4c 38 64 68 45 69 63 4f 75 39 6e 59 78 46 68 30 36 7a 5f 67 6a 6f 46 79 54 7a 34 44 75 31 49 6d 5a 32 6b 5f 76 70 77 64 66 72 79 63 70 56 36 6c 30 6d 70 42 58 4a 64 67 5f 4b 65 46 4a 59 44 36 41 37 64 5a 45 67 6f 6d 43 4c 61 6d 42 6f 78 59 61 62 43 49 79 73 4a 69 79 64 4f 68 6d 37 50 6d 58 37 52 6b 56 44 48 6c 50 41 58 42 31 45 45 59 6c 31 79 61 53 69 72 57 42 4c 4a 4b 54 4b 76 6b 4e 72 78 30 4b 4c 39 55 6f 65 34 67 74 59 51 36 42 59 65 6d 4b 4d 61 79 54 52 64 78 4e 41 44 6b 6d 69 31 55 6e Data Ascii: v=rz4DvU-cY2JYCwHSTck0_qm-&c=03AFcWeA6VQ4K_WaHXv7fmBdOdAA4HTfxjWl7sk0fqnt1NwwgumQdovzevppOL8dhEicOu9nYxFh06z_gjoFyTz4Du1ImZ2k_vpwdfrycpV6l0mpBXJdg_KeFJYD6A7dZEgomCLamBoxYabCIysJiydOhm7PmX7RkVDHlPAXB1EEYl1yaSirWBLJKTKvkNrx0KL9Uoe4gtYQ6BYemKMayTRdxNADkmi1Un
2024-04-18 01:08:56 UTC	483	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Date: Thu, 18 Apr 2024 01:08:55 GMT Expires: Thu, 18 Apr 2024 01:08:55 GMT Cache-Control: private, max-age=0 X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 01:08:56 UTC	772	IN	Data Raw: 31 34 65 61 0d 0a 29 5d 7d 27 0a 5b 22 64 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 37 68 55 55 65 53 48 4e 4b 6a 59 47 71 75 4e 5a 4a 53 35 76 6b 43 65 64 4f 62 38 6a 68 33 52 65 5f 34 4a 41 5f 71 31 67 73 66 68 72 6e 43 43 35 63 52 53 6a 4b 6e 79 78 71 71 5f 41 44 7a 61 66 7a 4c 55 48 4f 4f 4f 46 79 70 78 56 63 62 33 41 5f 43 30 32 79 56 53 4b 4b 58 55 55 5a 6e 6c 64 42 39 5f 2d 57 43 72 6d 71 4a 6c 31 6e 31 48 5f 68 4b 7a 77 48 65 71 67 32 75 56 59 42 6b 5f 30 66 4c 4c 47 66 65 52 59 6a 33 4c 34 73 44 73 33 55 6f 6c 6c 74 5f 64 5f 43 7a 43 44 68 51 66 6f 44 42 59 42 75 32 74 51 50 59 4f 52 41 5a 74 70 4c 36 4c 6a 39 78 64 7a 58 48 77 44 65 6b 72 6e 34 75 48 63 76 50 32 2d 74 49 4b 66 63 78 39 72 78 31 6d 4e 49 43 33 6e 48 47 63 45 44 77 35 49 6e 70 Data Ascii: 14ea)]}'["dresp","03AFcWeA7hUUeSHNKjYGquNZJS5vkCedOb8jh3Re_4JA_q1gsfhrnCC5cRSjKnyxqq_ADzafzLUHOOOFypxVcb3A_C02yVSKKXUUZnldB9_-WCrmqJl1n1H_hKzwHeqg2uVYBk_0fLLGfeRYj3L4sDs3Uollt_d_CzCDhQfoDBYBu2tQPYORAZtpL6Lj9xdzXHwDekrn4uHcvP2-tIKfcx9rx1mNIC3nHGcEDw5Inp
2024-04-18 01:08:56 UTC	1255	IN	Data Raw: 78 62 57 70 43 4f 70 35 67 4c 66 6d 48 71 32 46 56 72 74 59 6b 66 56 6f 68 6a 68 6c 42 4d 73 62 6a 42 58 46 74 76 43 55 50 77 34 69 72 5a 30 73 7a 62 64 46 5a 38 57 37 46 50 30 77 74 35 78 36 58 77 75 6f 7a 78 4e 67 66 6c 57 4d 5a 5a 57 6a 69 4f 4b 56 68 70 4a 6f 54 63 73 56 74 50 6b 36 30 33 53 75 66 39 72 44 77 42 57 73 79 4b 6b 41 6d 55 6f 5a 61 32 33 58 6e 51 6c 44 33 76 58 79 35 70 50 38 74 5f 53 77 33 63 74 46 74 4b 51 58 49 33 49 74 4a 6f 5f 49 79 68 52 48 76 6a 56 61 37 31 69 75 79 4a 73 39 57 4b 79 50 4e 33 56 5a 45 58 72 46 2d 59 34 7a 75 66 44 64 41 44 41 52 5a 33 6f 6e 2d 43 31 62 53 67 43 47 73 6a 66 31 58 4f 5f 49 4f 48 74 32 6f 67 75 51 42 62 42 37 43 4f 6f 4d 37 76 63 66 30 36 52 46 72 38 33 67 69 68 55 56 44 4a 4d 59 5a 36 51 5a 38 6e 64 Data Ascii: xbWpCOp5gLfmHq2FVrtYkfVohjhlBMsbjBXFtvCUPw4irZ0szbdFZ8W7FP0wt5x6XwuozxNgflWMZZWjiOKVhpJoTcsVtPk603Suf9rDwBWsyKkAmUoZa23XnQlD3vXy5pP8t_Sw3ctFtKQXI3ItJo_IyhRHvjVa71iuyJs9WKyPN3VZEXrF-Y4zufDdADARZ3on-C1bSgCGsjf1XO_IOHt2oguQBbB7COoM7vcf06RFr83gihUVDJMYZ6QZ8nd
2024-04-18 01:08:56 UTC	1255	IN	Data Raw: 6d 73 44 59 4a 63 35 56 46 67 78 6a 59 30 4a 4c 51 66 47 64 38 4a 44 34 47 47 56 34 69 66 55 57 78 75 59 74 45 56 51 50 41 62 71 34 50 37 61 53 32 4d 78 35 76 72 48 6f 50 64 64 46 6c 6b 48 67 61 36 71 31 59 43 55 46 6a 76 4b 65 66 45 77 66 68 46 73 56 4b 4d 43 37 61 31 77 5f 46 37 45 65 79 67 41 63 42 33 5a 4b 42 6d 4a 74 5a 33 73 41 42 54 6a 51 73 53 54 33 71 6f 6f 42 48 79 41 56 4a 77 71 4b 47 33 71 57 35 66 71 58 59 31 4f 49 70 55 5a 68 6c 6b 75 4c 6c 52 31 5f 4f 72 5f 42 7a 61 45 68 35 38 49 61 68 70 70 43 33 69 73 52 34 74 77 30 43 6a 61 50 6d 33 65 7a 55 6e 5f 61 38 65 37 77 55 37 6d 46 78 70 75 5a 74 73 2d 38 4a 6f 76 76 78 58 6c 73 72 4e 61 50 62 44 6b 6d 57 51 64 45 71 56 73 39 6d 54 34 79 33 53 4d 4f 61 63 72 76 6c 59 4a 69 37 44 77 7a 66 39 77 Data Ascii: msDYJc5VFgxjY0JLQfGd8JD4GGV4ifUWxuYtEVQPAbq4P7aS2Mx5vrHoPddFlkHga6q1YCUFjvKefEwfhFsVKMC7a1w_F7EeygAcB3ZKBmJtZ3sABTjQsST3qooBHyAVJwqKG3qW5fqXY1OIpUZhlkuLlR1_Or_BzaEh58IahppC3isR4tw0CjaPm3ezUn_a8e7wU7mFxpuZts-8JovvxXlsrNaPbDkmWQdEqVs9mT4y3SMOacrvlYJi7Dwzf9w
2024-04-18 01:08:56 UTC	1255	IN	Data Raw: 56 53 6d 67 57 4b 35 34 2d 4d 45 52 4a 52 4e 77 67 51 4d 62 31 59 55 55 48 32 48 65 55 6d 75 31 37 47 66 2d 62 67 71 4f 4e 65 72 32 4f 4f 53 52 70 7a 72 77 69 49 39 5a 57 4b 38 46 33 4b 5f 6e 72 2d 45 4a 34 32 62 7a 35 48 4b 49 62 4e 65 70 43 37 4b 44 61 54 4c 65 73 62 46 72 55 33 5a 33 55 58 53 47 49 72 5a 5f 74 54 58 6f 38 6e 6f 48 31 4c 53 78 78 41 66 6c 77 71 67 73 71 5a 73 41 70 50 34 59 70 39 37 77 70 50 71 75 46 67 68 69 78 45 2d 4b 4d 4c 45 4d 42 37 6f 44 71 57 67 30 65 6e 4d 72 31 6b 6c 4d 31 5a 64 59 37 38 54 79 54 75 5a 73 31 52 67 74 73 59 48 58 47 75 46 6e 79 63 79 50 59 44 37 4d 52 75 77 4d 61 39 64 69 4a 70 4b 55 77 4f 6f 70 38 4c 55 6e 64 54 45 4a 63 61 63 4e 4d 6e 32 50 75 33 5f 33 36 6f 4a 69 32 73 38 5f 6f 4c 6c 52 4f 35 70 66 5a 6c 33 Data Ascii: VSmgWK54-MERJRNwgQMb1YUUH2HeUmu17Gf-bgqONer2OOSRpzrwiI9ZWK8F3K_nr-EJ42bz5HKIbNepC7KDaTLesbFrU3Z3UXSGIrZ_tTXo8noH1LSxxAflwqgsqZsApP4Yp97wpPquFghixE-KMLEMB7oDqWg0enMr1klM1ZdY78TyTuZs1RgtsYHXGuFnycyPYD7MRuwMa9diJpKUwOop8LUndTEJcacNMn2Pu3_36oJi2s8_oLlRO5pfZl3
2024-04-18 01:08:56 UTC	825	IN	Data Raw: 42 70 6f 65 5f 4c 53 51 74 47 54 2d 79 4a 55 52 75 75 63 33 56 49 67 42 63 73 65 74 57 4b 48 4b 39 4d 79 4a 61 35 4e 54 61 36 42 74 47 42 6e 5a 43 72 54 38 6d 30 61 46 4d 35 43 49 30 74 69 47 6e 52 6b 2d 73 4d 54 75 69 72 5a 69 47 52 48 56 50 4c 36 55 4a 46 66 70 46 52 79 6d 44 45 66 32 65 6a 79 59 4a 37 4d 59 58 58 72 36 48 41 72 64 64 55 4c 6e 49 77 46 66 45 7a 4e 71 6b 75 33 55 6a 73 57 64 69 31 4e 44 6c 65 70 72 64 41 32 54 69 33 75 32 68 36 77 4f 59 78 50 47 59 76 34 48 38 34 47 55 31 45 64 6c 4a 37 61 4a 42 62 6e 38 2d 36 31 42 5f 4b 30 35 68 72 31 63 46 42 67 67 73 33 71 32 46 30 77 4e 70 66 71 58 33 52 67 73 71 44 43 6f 63 74 46 58 4f 43 58 6d 37 5a 7a 66 37 70 54 5f 64 51 74 77 43 4e 38 37 66 53 37 74 6a 68 33 44 63 4e 46 71 57 67 64 76 70 56 2d Data Ascii: Bpoe_LSQtGT-yJURuuc3VIgBcsetWKHK9MyJa5NTa6BtGBnZCrT8m0aFM5CI0tiGnRk-sMTuirZiGRHVPL6UJFfpFRymDEf2ejyYJ7MYXXr6HArddULnIwFfEzNqku3UjsWdi1NDleprdA2Ti3u2h6wOYxPGYv4H84GU1EdlJ7aJBbn8-61B_K05hr1cFBggs3q2F0wNpfqX3RgsqDCoctFXOCXm7Zzf7pT_dQtwCN87fS7tjh3DcNFqWgdvpV-
2024-04-18 01:08:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.16	49766	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:56 UTC	1484	OUT	GET /recaptcha/api2/payload?p=06AFcWeA7yxEwJrTQzKFdvzKXBPyepU7lkUD6FHF_xaRg9MITh_oBGwJBlnrTky_tJUTuRePPmh9rA1h38UdFZMrfj0veWAhi-6avQdfso_JuqEei9G1OBX8K271KlGTtCIxsfd5i-to_bzQRZa4agIbvfNy8oOaERLvakWtpQI_wIkaJLEVAOh_WWRq5gROK9kU9nKkvq62Ju&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=2 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:08:56 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Thu, 18 Apr 2024 01:08:56 GMT Date: Thu, 18 Apr 2024 01:08:56 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 01:08:56 UTC	1255	IN	Data Raw: 41 45 46 37 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: AEF7JFIFC!"$"$C"}!1AQa"q
2024-04-18 01:08:56 UTC	1255	IN	Data Raw: 73 c5 46 f7 64 a6 de 7d e9 5e d6 57 fb 8a 48 1d 4d 23 59 ba b0 18 2d 9a 00 58 5c b9 ab 76 f8 07 34 db 7b 36 52 0b fe 55 6c 44 8b 83 8c 50 02 80 18 73 9e 68 54 0b d2 9d 91 4d de a0 e0 9a 00 71 14 dc 60 d3 e9 0d 00 25 36 9c 69 b4 00 1a 28 a2 80 12 8a 5a 3b 50 03 1b 04 d3 58 7b 53 c0 e6 9d 40 10 84 39 e9 4e da 05 49 4d 61 40 10 91 f3 54 77 67 f7 47 6f a5 4a e3 9a 89 c6 ee 0f 22 90 cc a3 23 f4 ef 4d 67 6e e0 d6 c2 24 79 c1 45 fc a9 5a da 16 62 59 01 a6 99 36 31 41 2d da 82 86 b5 a6 b7 89 17 e4 40 0d 45 6b 6c 4c e1 98 7c ab cd 3b 85 8a 29 0c df f3 cd bf 2a 95 61 97 3c a3 7e 55 b8 31 db 8a 6b 11 cd 2b 81 90 a8 73 8c 52 95 20 73 5a 12 01 b7 80 3f 2a ae e8 71 d2 8b 8c ab b3 34 34 40 0a 9c 29 e9 8a 5d a7 d2 8b 81 43 ca c9 c7 6a 9e 3b 68 b1 f7 8d 4e 50 11 4b 1c 60 Data Ascii: sFd}^WHM#Y-X\v4{6RUlDPshTMq`%6i(Z;PX{S@9NIMa@TwgGoJ"#Mgn$yEZbY61A-@EklL\|;)a<~U1k+sR sZ?q44@)]Cj;hNPK`
2024-04-18 01:08:56 UTC	1255	IN	Data Raw: 53 19 2c d7 07 61 51 54 18 12 79 34 e7 6a 6a 9e 68 15 c6 b4 67 b1 a8 bc 96 26 ad f4 f7 a5 18 f4 a7 70 20 8e dc e7 9a bb 14 4b 1e 08 e4 d2 22 b1 19 02 9f b5 f6 f4 a4 34 24 b3 e1 b8 15 17 9f b9 b9 e6 94 c6 ce 71 8c d4 f6 fa 74 8e c0 e3 02 90 cb 9a 3e 1b 7b 8e 00 e3 35 a1 51 59 da 8b 78 f6 29 cf ad 4f b6 90 15 a6 dc 1b 00 1c 1f 4a 70 8d 48 fb b5 31 5c d1 8a 00 8c 28 1d aa 09 a6 d8 76 af 38 eb 56 88 a8 cc 4a 4e 48 ce 68 02 84 d3 33 0c 1e 9f 4a 8c 32 e7 d2 b4 64 b7 47 5d a0 62 a9 5c 5a 98 8e 43 a9 a0 06 82 3d 7f 5a 53 bd f8 51 f8 d4 5f 5a b5 6d 24 6a b8 63 cd 00 22 2b 46 33 4d 77 72 32 49 c5 49 34 a1 94 a4 78 dc 78 e6 ab 4f 20 55 09 9e 7d a8 01 5e 6e 30 73 51 99 1b 38 04 d4 65 81 a4 dc 45 00 4a aa 5b 14 8d 11 a5 47 c5 2c 93 0a 00 82 55 c7 7a 81 b2 39 eb 53 3c Data Ascii: S,aQTy4jjhg&p K"4$qt>{5QYx)OJpH1\(v8VJNHh3J2dG]b\ZC=ZSQ_Zm$jc"+F3Mwr2II4xxO U}^n0sQ8eEJ[G,Uz9S<
2024-04-18 01:08:56 UTC	1255	IN	Data Raw: d8 b1 63 d0 e2 ac 43 6a b1 8f 98 73 54 05 dc 80 70 c6 9a 6e 66 3d 5c d2 d4 0d 70 15 78 1c 0a 8d e4 55 3d 6b 31 27 71 9f 98 9c d3 5a 52 dd cd 16 03 45 a5 18 a8 8c 99 35 4f cd f7 a7 23 e4 d1 60 b9 64 b5 46 49 27 ad 34 b8 03 ad 34 b8 f5 a6 17 25 c8 c5 38 74 aa fb c5 48 8e 28 02 53 9a 50 69 a0 83 4f 51 40 19 da d6 94 35 08 1a 3c 8c e0 ed cf 40 4f 7a bd a4 69 96 d6 56 30 db 24 4b 88 d7 1d 3a fa 9a 91 e5 8e 18 da 47 60 15 41 62 73 d0 0a f3 9f 10 fc 51 48 a5 96 d7 4c b7 0e 79 55 95 ba 1f a5 63 3a b0 a7 b9 4a 2d ec 7a 94 51 c2 c7 76 d4 dc 3a 1a 86 4d 3a dd a5 69 9e da 29 98 f4 2c 01 af 0c d6 3c 4d a9 cb a3 b5 f4 ba ab 45 e5 8c 2a 44 76 fc de 95 e4 7a d7 8e 7c 4e b7 ae a9 ae 5f 44 a3 a0 12 57 3b c5 eb 64 8a e4 68 f7 0f 89 df 0a b5 2b 93 75 ac 68 d2 ac 37 33 36 e7 Data Ascii: cCjsTpnf=\pxU=k1'qZRE5O#`dFI'44%8tH(SPiOQ@5<@OziV0$K:G`AbsQHLyUc:J-zQv:M:i),<ME*Dvz\|N_DW;dh+uh736
2024-04-18 01:08:56 UTC	1255	IN	Data Raw: b4 b0 5c 56 6a 4c 92 29 a7 ad 28 23 a5 20 00 49 a5 c5 4f 6b 0a 48 7e 72 40 ed 4b 7f 07 92 40 5c 90 68 b8 c8 77 60 75 a4 32 0a 89 83 8e a0 e2 93 14 01 2e e1 8a 69 3c e7 35 19 e0 53 72 68 02 62 fe f4 6f f7 a8 73 8a 09 3d a8 02 6d f4 8c e4 f4 a8 81 34 e5 a0 43 d4 9f 5a 5d d4 ce 7b 50 0f af 14 0c 78 6a 50 e4 54 2f 24 63 ab af e7 4c 37 96 cb d6 64 fc f3 40 17 54 93 d6 9e a0 1a a0 97 f0 9f ba 1d be 88 69 e2 ee 5c e2 3b 49 98 7b 8c 52 02 f8 41 8a 72 a8 f5 aa 5e 6d fb 0e 2d 54 0f f6 9f a5 20 5d 41 be f3 c1 1f d3 93 40 1a 4a 07 ad 3d dd 51 09 66 0a 00 ea 6b 35 61 98 8f de 5f b0 f6 50 05 63 f8 a4 a5 bd 89 8e 2b 89 65 95 c6 32 cd c2 d2 6e c8 12 39 9f 1f f8 92 6b af 33 4e b1 2c 10 67 ce 62 d8 c8 ae 10 45 6d 2c 92 cb 25 dc 68 d1 2f ca 14 64 55 bd 5e 34 79 fe c7 f6 86 Data Ascii: \VjL)(# IOkH~r@K@\hw`u2.i<5Srhbos=m4CZ]{PxjPT/$cL7d@Ti\;I{RAr^m-T ]A@J=Qfk5a_Pc+e2n9k3N,gbEm,%h/dU^4y
2024-04-18 01:08:56 UTC	1255	IN	Data Raw: 25 a0 d5 ae 41 1e a9 7c b3 9b 8b c9 7e cc ac 99 19 3c 9f 6c 7a d3 ac 35 04 96 fa 35 d4 bc cf b3 2c 9e 66 d6 6c 33 9f f0 a6 1b 33 e2 8f 19 c3 a5 5d cd 05 aa ef f2 92 28 06 e2 31 fc 46 a0 d7 2c 34 d8 35 79 60 7b ab a6 8a dd cc 4b 2b b0 01 80 38 e0 75 ae 9a 54 92 49 bd c7 ca cf 59 b5 f8 c4 6c e1 5b 4b 78 63 86 10 c1 63 5c 67 0b fc f3 5e ad a4 78 cf 44 ba d0 a2 bf 9e fa 08 db 66 e9 14 30 24 71 cd 7c c3 e2 6d 2f 41 f0 fe 95 a5 5e 49 2d dc b7 1a 8a 92 a8 40 ca 8c e0 1a ce bc 96 0d 22 48 6d d7 ed d2 3c 80 32 a0 35 bc 27 52 17 b3 bf a8 7b 36 76 bf 15 65 8b c4 1e 2c b9 be b3 7f f4 29 42 9c b8 e7 81 5e ed f0 b9 23 1e 00 d2 96 05 90 20 84 7d ee a7 de be 67 b0 6d 3e f7 57 b5 b5 26 64 92 77 55 da f2 7c c4 9f 61 d0 57 b0 e9 ff 00 16 74 2f 0d 20 f0 f1 8a 49 e4 b2 52 8c Data Ascii: %A\|~<lz55,fl33](1F,45y`{K+8uTIYl[Kxcc\g^xDf0$q\|m/A^I-@"Hm<25'R{6ve,)B^# }gm>W&dwU\|aWt/ IR
2024-04-18 01:08:56 UTC	1255	IN	Data Raw: 73 6b 05 de a5 3c 80 b3 7c bf 22 7d d5 1d 6b ce 96 ee fd 2e 99 b7 30 96 55 39 63 d7 9a de f0 a4 f3 c7 6f 73 01 bb 90 09 46 c7 5c fd e0 7b 56 b1 a4 e1 b3 0b dc eb bc 3f f1 16 c7 c2 ba a1 d4 b4 63 1c 57 8d 19 12 4a c8 0f 2d d7 15 3d f6 bd ff 00 09 12 9b 9f 9e e2 57 19 66 03 19 27 ad 70 bf f0 85 5e de 4a 6e d2 16 8a d8 ca cb b9 b8 19 1d 85 6f 4e 23 d1 22 8a c2 d6 f7 ce 9e 28 f2 ea be be 95 18 84 f4 57 bb 1a 76 33 af ec e5 82 c2 79 6f 04 79 32 6d 44 3c b9 e7 f4 ae 3e 3b cb a9 2e 64 92 c8 61 46 49 0a 38 02 bb 3f 3d af 9e 4b 69 2d cc 93 3c 44 b7 3c 21 23 8e 7d 6b 8d b2 9d b4 a7 bc 81 b0 e5 91 90 81 d8 d7 4e 1a 2d c7 de 44 b6 4f 67 e2 1d 52 34 96 08 6e 5c ee 53 9c 1e dd ea 38 3c 51 7b 04 11 c3 0e 51 83 e4 91 c9 6e 6a 85 83 1b 49 92 e7 ec e6 60 bf c3 ea 4d 6b f8 Data Ascii: sk<\|"}k.0U9cosF\{V?cWJ-=Wf'p^JnoN#"(Wv3yoy2mD<>;.daFI8?=Ki-<D<!#}kN-DOgR4n\S8<Q{QnjI`Mk
2024-04-18 01:08:56 UTC	1255	IN	Data Raw: c9 80 09 af 16 f1 b5 ab 4f 7d 2b f9 ee f2 b3 03 18 5e fe b9 ac 24 e2 9f 2c 4b b3 b5 d9 e9 de 19 92 49 62 79 05 c6 11 db cb 54 ed 9c 72 d5 cd f8 ca ea ce 2b a7 17 0e 26 f2 d8 24 ce 2b 0b 4a d5 b5 7b 3d 22 4b 25 b6 96 66 61 85 64 eb 18 c5 60 3e 8f ad cc 8f 2e d9 07 9e d8 93 3c e4 75 ac e3 15 7d 42 f7 36 bc 37 3d f9 bf b8 ba d3 ee 12 28 51 39 f5 2a 39 a8 a5 d5 64 5d 75 ce a9 74 92 3b 64 a2 a8 dd 8c f4 35 7b 55 d1 6e 74 ff 00 0f 09 6d 9d 22 4f 2b 12 85 38 cf ae 6b cd 2e 64 99 2e 0c c9 bd 58 73 91 ce 3f 1a da 9c 54 de 84 34 d1 d3 4d e2 0b b5 95 d4 17 c0 62 06 45 15 c9 99 a5 72 59 a5 94 93 c9 a2 b6 f6 28 9e 66 77 1e 1a 9f 5b b5 92 ee da 38 97 7d b4 47 cc 0c 33 56 34 8b 6b 2b 7d 3a 5d 5d ee 19 a7 97 77 9c 49 c7 3e 95 bb e1 1b 6b 58 e6 b8 36 37 6b 2b 49 6e cf 36 Data Ascii: O}+^$,KIbyTr+&$+J{="K%fad`>.<u}B67=(Q9*9d]ut;d5{Untm"O+8k.d.Xs?T4MbErY(fw[8}G3V4k+}:]]wI>kX67k+In6
2024-04-18 01:08:56 UTC	1255	IN	Data Raw: 7c 2a b6 9a 90 4b 5d 3e 7b 98 da 3d a3 7f ca 0b 91 c9 fc 0d 5e bd f0 5c 6f 3e 9e ba 75 9b 43 e4 44 1e ee 49 9c 0d cf 9c 9c 0f 4c 60 57 53 a8 96 89 d8 70 a0 d3 d4 f6 7d 23 f6 88 b4 b0 96 e2 db 5c b7 92 e6 53 26 e5 78 fa 22 9e d5 bf a6 7c 75 f0 de a9 77 15 b4 36 17 7e 64 8d 83 81 9c 0f 5a f1 dd 1f c2 de 13 b5 31 ea 7e 25 9c ce 25 66 0f 14 67 1b 33 d0 e7 bf d2 bd 1b c1 3a 1f c2 8d 2a ea cb ca d6 e3 7b f0 ad 1b 6c 7e 09 39 e4 93 d3 83 5a 27 65 f1 93 38 b4 ce ba d7 e2 56 95 7f 79 e5 5a db 5c 79 21 88 69 58 7a 7b 57 5e 8c 24 89 64 5c 85 61 91 91 83 59 3a 0d a7 82 ac e5 11 69 0b 6a cf 81 87 dc 1b 71 3d fd cd 6e 4e f1 e7 ef a8 fa 9a d2 9d ed ab b9 2c ac d8 07 34 e8 9c 6e c5 46 e4 10 70 41 a8 04 98 3c 1a d6 c4 dc b3 23 e1 ba d3 a1 98 64 8c d5 32 f9 cf 34 c2 f8 39 Data Ascii: \|K]>{=^\o>uCDIL`WSp}#\S&x"\|uw6~dZ1~%%fg3:{l~9Z'e8VyZ\y!iXz{W^$d\aY:ijq=nN,4nFpA<#d249
2024-04-18 01:08:56 UTC	1003	IN	Data Raw: 47 a9 58 d9 ea d6 ed 3c 22 30 a9 be 49 24 03 2d cf 5f ce bc e2 e3 c4 3a be b1 27 d9 ad ef 25 8a 1b 74 f9 21 8c ed 5c e7 9a af aa ea 2b 35 94 c9 75 24 93 5e 33 af cc 79 f9 40 c6 33 e9 5d 31 c3 49 bd 46 9d d1 dd ea fe 2e 82 ff 00 37 92 b3 c4 8c 78 24 f1 81 d0 0a 65 8d cc fa bc 51 b3 48 60 b6 07 7c 68 1b 2e d8 e4 9f a5 79 54 f2 4b 29 08 33 c0 f9 40 e8 05 4f 6f 26 a1 0e ef 22 59 54 95 db c1 e7 1e 95 b7 d4 95 b7 22 ed 6e 7b 54 97 fa 74 1a 6f f6 9d c0 df 21 02 38 19 8e 4a e3 b9 f7 ae 6f 5e f1 8b 49 6c 91 e8 93 18 a7 5c fb b3 9c f3 8f 4a f3 9d 47 c4 37 b7 16 90 d8 c8 e5 20 83 80 a0 77 f5 fa d4 36 f7 06 18 a3 95 09 ce ec ee 26 aa 9e 06 da c8 69 5d 1d a5 bf 89 75 59 16 11 78 1e 50 49 11 02 79 07 3d 6b b7 d3 ad 35 2b dd 2d e2 b8 8e 51 25 ce d0 c9 fd d0 3a 0f 6a f2 Data Ascii: GX<"0I$-_:'%t!\+5u$^3y@3]1IF.7x$eQH`\|h.yTK)3@Oo&"YT"n{Tto!8Jo^Il\JG7 w6&i]uYxPIy=k5+-Q%:j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.16	49767	74.125.136.99	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:56 UTC	879	OUT	GET /recaptcha/api2/replaceimage?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:08:56 UTC	473	IN	HTTP/1.1 405 Method Not Allowed Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 18 Apr 2024 01:08:56 GMT Content-Type: text/html; charset=utf-8 Allow: POST X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 01:08:56 UTC	782	IN	Data Raw: 36 37 36 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 Data Ascii: 676<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;c
2024-04-18 01:08:56 UTC	879	IN	Data Raw: 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 Data Ascii: color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.c
2024-04-18 01:08:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.16	49768	74.125.136.99	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:08:56 UTC	1088	OUT	GET /recaptcha/api2/payload?p=06AFcWeA7yxEwJrTQzKFdvzKXBPyepU7lkUD6FHF_xaRg9MITh_oBGwJBlnrTky_tJUTuRePPmh9rA1h38UdFZMrfj0veWAhi-6avQdfso_JuqEei9G1OBX8K271KlGTtCIxsfd5i-to_bzQRZa4agIbvfNy8oOaERLvakWtpQI_wIkaJLEVAOh_WWRq5gROK9kU9nKkvq62Ju&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=2 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:08:56 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Thu, 18 Apr 2024 01:08:56 GMT Date: Thu, 18 Apr 2024 01:08:56 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 01:08:56 UTC	6	IN	Data Raw: 41 45 46 37 0d 0a Data Ascii: AEF7
2024-04-18 01:08:56 UTC	1255	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C"}!1AQa"q2
2024-04-18 01:08:56 UTC	1255	IN	Data Raw: de 7d e9 5e d6 57 fb 8a 48 1d 4d 23 59 ba b0 18 2d 9a 00 58 5c b9 ab 76 f8 07 34 db 7b 36 52 0b fe 55 6c 44 8b 83 8c 50 02 80 18 73 9e 68 54 0b d2 9d 91 4d de a0 e0 9a 00 71 14 dc 60 d3 e9 0d 00 25 36 9c 69 b4 00 1a 28 a2 80 12 8a 5a 3b 50 03 1b 04 d3 58 7b 53 c0 e6 9d 40 10 84 39 e9 4e da 05 49 4d 61 40 10 91 f3 54 77 67 f7 47 6f a5 4a e3 9a 89 c6 ee 0f 22 90 cc a3 23 f4 ef 4d 67 6e e0 d6 c2 24 79 c1 45 fc a9 5a da 16 62 59 01 a6 99 36 31 41 2d da 82 86 b5 a6 b7 89 17 e4 40 0d 45 6b 6c 4c e1 98 7c ab cd 3b 85 8a 29 0c df f3 cd bf 2a 95 61 97 3c a3 7e 55 b8 31 db 8a 6b 11 cd 2b 81 90 a8 73 8c 52 95 20 73 5a 12 01 b7 80 3f 2a ae e8 71 d2 8b 8c ab b3 34 34 40 0a 9c 29 e9 8a 5d a7 d2 8b 81 43 ca c9 c7 6a 9e 3b 68 b1 f7 8d 4e 50 11 4b 1c 60 7a d1 71 10 1b 41 Data Ascii: }^WHM#Y-X\v4{6RUlDPshTMq`%6i(Z;PX{S@9NIMa@TwgGoJ"#Mgn$yEZbY61A-@EklL\|;)a<~U1k+sR sZ?q44@)]Cj;hNPK`zqA
2024-04-18 01:08:56 UTC	1255	IN	Data Raw: 51 54 18 12 79 34 e7 6a 6a 9e 68 15 c6 b4 67 b1 a8 bc 96 26 ad f4 f7 a5 18 f4 a7 70 20 8e dc e7 9a bb 14 4b 1e 08 e4 d2 22 b1 19 02 9f b5 f6 f4 a4 34 24 b3 e1 b8 15 17 9f b9 b9 e6 94 c6 ce 71 8c d4 f6 fa 74 8e c0 e3 02 90 cb 9a 3e 1b 7b 8e 00 e3 35 a1 51 59 da 8b 78 f6 29 cf ad 4f b6 90 15 a6 dc 1b 00 1c 1f 4a 70 8d 48 fb b5 31 5c d1 8a 00 8c 28 1d aa 09 a6 d8 76 af 38 eb 56 88 a8 cc 4a 4e 48 ce 68 02 84 d3 33 0c 1e 9f 4a 8c 32 e7 d2 b4 64 b7 47 5d a0 62 a9 5c 5a 98 8e 43 a9 a0 06 82 3d 7f 5a 53 bd f8 51 f8 d4 5f 5a b5 6d 24 6a b8 63 cd 00 22 2b 46 33 4d 77 72 32 49 c5 49 34 a1 94 a4 78 dc 78 e6 ab 4f 20 55 09 9e 7d a8 01 5e 6e 30 73 51 99 1b 38 04 d4 65 81 a4 dc 45 00 4a aa 5b 14 8d 11 a5 47 c5 2c 93 0a 00 82 55 c7 7a 81 b2 39 eb 53 3c 8a c2 a3 05 49 a0 Data Ascii: QTy4jjhg&p K"4$qt>{5QYx)OJpH1\(v8VJNHh3J2dG]b\ZC=ZSQ_Zm$jc"+F3Mwr2II4xxO U}^n0sQ8eEJ[G,Uz9S<I
2024-04-18 01:08:56 UTC	333	IN	Data Raw: 43 6a b1 8f 98 73 54 05 dc 80 70 c6 9a 6e 66 3d 5c d2 d4 0d 70 15 78 1c 0a 8d e4 55 3d 6b 31 27 71 9f 98 9c d3 5a 52 dd cd 16 03 45 a5 18 a8 8c 99 35 4f cd f7 a7 23 e4 d1 60 b9 64 b5 46 49 27 ad 34 b8 03 ad 34 b8 f5 a6 17 25 c8 c5 38 74 aa fb c5 48 8e 28 02 53 9a 50 69 a0 83 4f 51 40 19 da d6 94 35 08 1a 3c 8c e0 ed cf 40 4f 7a bd a4 69 96 d6 56 30 db 24 4b 88 d7 1d 3a fa 9a 91 e5 8e 18 da 47 60 15 41 62 73 d0 0a f3 9f 10 fc 51 48 a5 96 d7 4c b7 0e 79 55 95 ba 1f a5 63 3a b0 a7 b9 4a 2d ec 7a 94 51 c2 c7 76 d4 dc 3a 1a 86 4d 3a dd a5 69 9e da 29 98 f4 2c 01 af 0c d6 3c 4d a9 cb a3 b5 f4 ba ab 45 e5 8c 2a 44 76 fc de 95 e4 7a d7 8e 7c 4e b7 ae a9 ae 5f 44 a3 a0 12 57 3b c5 eb 64 8a e4 68 f7 0f 89 df 0a b5 2b 93 75 ac 68 d2 ac 37 33 36 e7 40 7a 2f a7 d6 bc Data Ascii: CjsTpnf=\pxU=k1'qZRE5O#`dFI'44%8tH(SPiOQ@5<@OziV0$K:G`AbsQHLyUc:J-zQv:M:i),<ME*Dvz\|N_DW;dh+uh736@z/
2024-04-18 01:08:56 UTC	1255	IN	Data Raw: 01 61 c7 4c 13 5c d4 5a 9f db 2f 22 bf b9 92 e6 68 d4 8d c0 9e 09 1e de 95 b7 e3 0f 0d 5c ea 3a e1 9e f6 44 12 39 ce 13 b8 ab 10 68 b6 36 36 56 f1 95 24 af cc ec 46 7f 0c 56 16 8a d5 0f 91 dc 6f db 6c 9f e7 10 42 03 73 8d a3 8a 2a 57 b3 d3 4b 12 ab 2e 33 c7 02 8a 39 98 f9 0f ae 23 64 92 24 92 36 0e ae 32 08 3d ab 26 f3 c4 3a 2d b7 da 04 da 84 2a 6d c1 32 0d c3 22 be 71 d1 fe 23 6b f6 17 a6 18 2e de 6b 71 1f 97 f3 1c 8d a3 8c 01 5c b6 b9 7d 7d a8 49 3a b3 4a 1e 47 25 bd 00 27 a5 77 bc 65 ed 64 72 f2 b3 eb ed 27 51 b4 d4 b4 a8 35 38 24 02 de 65 ca 96 38 ef 8a 7b ea 36 09 76 96 8d 79 0f 9e ff 00 75 37 0c 9a f9 11 35 ef 13 5c 69 f6 ba 6a ea b3 45 63 64 98 44 4f 97 27 39 e7 d6 ab 49 ab eb da 7c b6 d7 ab 76 cd 78 ce 48 72 d9 23 23 8f c6 a9 e2 f5 b2 40 a2 7d a4 Data Ascii: aL\Z/"h\:D9h66V$FVolBsWK.39#d$62=&:-m2"q#k.kq\}}I:JG%'wedr'Q58$e8{6vyu75\ijEcdDO'9I\|vxHr##@}
2024-04-18 01:08:56 UTC	1255	IN	Data Raw: 1a 85 98 bc 4b 18 1d 81 4f be ad f2 82 47 4f ad 44 a3 28 6e 25 24 4d 63 a1 81 82 5c 31 0a 09 19 eb 5d 76 a6 6d b4 cd 0e c8 c0 42 5c 32 ed 65 5f ce b8 a9 ae 35 2b fb e4 82 d6 28 61 85 5f 63 be 39 cf b7 a8 ae 8e 54 74 b2 5d f2 aa a2 2e 1a 46 20 0c fb 54 ca 4e d6 2f 9c 97 22 3b 55 9a 46 46 67 38 3b 86 4d 63 eb 40 5b 4c 10 4f e7 3b 8c aa 28 e0 0a af ae ea 9f f1 2a 8a f1 49 8f ca 6c 2b 13 f7 88 eb 8f 51 49 e1 2b b1 77 a8 b5 f0 b7 17 50 2c 65 80 2b f7 5f 1d 3f 0a 6b 55 a8 b5 2a 98 ee 49 cf d9 5b fe fa a2 ba 30 b7 ac 01 fb 28 e7 9f bb 45 16 64 f3 33 99 b1 b7 89 46 62 44 55 76 da 25 ed 81 d7 14 cd 4a 6b 7b 42 c2 08 8c ad 93 bc f7 cd 2f 90 d6 ea cf a8 48 a8 71 e6 24 4a 78 41 ef 59 13 5c c5 2d d4 d0 06 7c 39 0c ad 8c 82 69 b9 5b 63 1f 21 63 b8 92 d4 b4 33 b2 87 c1 Data Ascii: KOGOD(n%$Mc\1]vmB\2e_5+(a_c9Tt].F TN/";UFFg8;Mc@[LO;(Il+QI+wP,e+_?kUI[0(Ed3FbDUv%Jk{B/Hq$JxAY\-\|9i[c!c3
2024-04-18 01:08:56 UTC	1255	IN	Data Raw: 0c a3 90 ae 31 f4 ae b1 90 3a 65 66 72 b8 cf 5e 31 5a c6 a4 66 af 16 09 16 21 d8 92 28 18 c0 ab b3 79 4c 32 c5 45 73 c4 db ac 83 7d c0 e7 b6 fa b3 e5 c0 ea 08 e4 7d 6a 96 a3 2e ac 36 af b8 bc 8b ed cd 51 ba 8e d6 37 c2 dc af b0 a5 55 44 3c 28 cf d2 a3 94 29 6c 9e b4 01 4e ea 78 62 c6 1f 77 d0 66 ab ad e2 b1 c2 24 8d f4 53 57 a6 40 f1 ed 5c fe 75 6a da 08 52 31 c6 4f bd 30 32 7c e9 c9 01 6c e6 6f 72 00 a1 e5 b9 5e 0d b6 cf f7 9c 56 ef 99 12 f5 45 3f 85 54 bf 74 75 01 51 45 24 c0 ca f3 6e 89 ff 00 96 2b ec 49 34 84 dc 9e b7 28 3f dd 8e ad a8 1e 83 f2 a7 7c bd f1 f9 53 15 ca 42 39 1b fd 65 c4 ed fe e8 c5 2f d8 c3 75 49 df ea e6 ae 86 03 a0 14 e0 e4 9e 28 02 b4 7a 7c 5f f3 ea 99 ff 00 68 e4 d5 84 b6 54 fb b0 c2 a7 e9 52 06 39 e4 d3 f2 3a e6 81 88 04 83 f8 95 Data Ascii: 1:efr^1Zf!(yL2Es}}j.6Q7UD<()lNxbwf$SW@\ujR1O02\|lor^VE?TtuQE$n+I4(?\|SB9e/uI(z\|_hTR9:
2024-04-18 01:08:56 UTC	1255	IN	Data Raw: 1b 2d 4d 44 68 25 40 be 57 dd 01 42 fd 28 85 5b 2f 76 20 92 ea 71 f1 e8 b0 41 81 22 4f 7b 70 0e 36 44 30 bf 8b 1a 9a 69 ee 6c 8e cb 9b 84 b1 c7 4b 7b 71 f3 fe 26 bd 4b 44 bc 49 6c 7e d5 75 e5 ac 3b c4 a0 2c 60 67 9e 01 f5 ac dd 5b 49 f0 c6 a9 7b 75 7f 3d d4 6b 3c ec 33 b1 86 14 fd 3b 52 58 a4 dd 9a 2f 44 b4 38 6f 0c 6b d7 d6 37 93 9d 06 ce 34 b9 96 26 4f 3a 5f 99 c0 3d 48 3e b4 b6 fa 0f 89 b5 0b b7 96 58 ce 23 3b 99 dc d7 71 e1 dd 27 40 fb 75 d8 d3 fc a5 86 dd 7e 49 a5 3c b1 c7 5f ce a5 d4 f4 d9 25 8a 48 6d 35 e8 77 4a 00 3b a5 1f 8e 2b 4f 68 de b0 43 8b 6d 6e 73 b6 0b 3d e6 ad 6a f7 06 7d 41 a1 65 45 55 1f 22 01 d7 af 6a bb e3 bb fd 5b 5a f1 43 c3 a7 c4 5c 5b c7 c0 44 03 00 0e 99 ad 9d 37 c3 77 1a 7d ed b2 c9 a8 c6 b6 a8 aa f2 22 b7 cc c0 75 e7 d2 8b ad Data Ascii: -MDh%@WB([/v qA"O{p6D0ilK{q&KDIl~u;,`g[I{u=k<3;RX/D8ok74&O:_=H>X#;q'@u~I<_%Hm5wJ;+OhCmns=j}AeEU"j[ZC\[D7w}"u
2024-04-18 01:08:56 UTC	1255	IN	Data Raw: be 1c ba b2 d2 96 04 b8 48 5d 01 dd 23 8e 58 57 3c e1 4d 7c 40 e2 51 b3 d3 f5 4d 72 fa 18 18 86 0a 0b 36 4f 08 bd aa e6 a3 a3 5a 8b 84 87 cd 89 64 fb d2 b7 40 a0 75 02 ab 68 fe 7e 9e 55 25 bc 88 b0 c6 fc c9 92 de 82 8d 7a 39 2f af 63 10 44 15 47 0c c0 f0 73 d0 56 6d 5a 5c a9 e8 4b d1 15 f5 3d 36 d2 fa e6 49 2c 6e 16 08 c6 d4 8c 30 c9 3e a7 f9 d4 ff 00 d8 b6 96 ee d6 d6 37 9b 8a 3a 93 b8 63 23 be 6b 94 bd d3 f5 10 ce 6d 77 b3 ab 90 db 5b ee f3 d2 b6 3c 39 61 3c 32 c7 73 ab 5c c9 1c 4c a7 cc 18 f9 c6 3b 56 fc 8d 2d c9 4c ef f4 bd 2a e2 4c dc 3e a0 7e c8 cf 85 53 c0 1c 64 9f d2 bc ce 7d af e2 09 ee 56 49 24 56 94 a8 2a 78 6e 7a 67 d2 b6 ae 62 ba d4 ef 3e c5 67 7d 38 b4 07 cb c4 7d 18 9e b5 4e f3 4f 7d 12 e9 6d 91 04 91 c1 20 93 0b cb 13 c7 14 e9 46 d2 bc 8b Data Ascii: H]#XW<M\|@QMr6OZd@uh~U%z9/cDGsVmZ\K=6I,n0>7:c#kmw[<9a<2s\L;V-LL>~Sd}VI$Vxnzgb>g}8}NO}m F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.16	49769	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:09:02 UTC	1327	OUT	POST /recaptcha/api2/userverify?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 6246 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:09:02 UTC	6246	OUT	Data Raw: 76 3d 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 26 63 3d 30 33 41 46 63 57 65 41 37 68 55 55 65 53 48 4e 4b 6a 59 47 71 75 4e 5a 4a 53 35 76 6b 43 65 64 4f 62 38 6a 68 33 52 65 5f 34 4a 41 5f 71 31 67 73 66 68 72 6e 43 43 35 63 52 53 6a 4b 6e 79 78 71 71 5f 41 44 7a 61 66 7a 4c 55 48 4f 4f 4f 46 79 70 78 56 63 62 33 41 5f 43 30 32 79 56 53 4b 4b 58 55 55 5a 6e 6c 64 42 39 5f 2d 57 43 72 6d 71 4a 6c 31 6e 31 48 5f 68 4b 7a 77 48 65 71 67 32 75 56 59 42 6b 5f 30 66 4c 4c 47 66 65 52 59 6a 33 4c 34 73 44 73 33 55 6f 6c 6c 74 5f 64 5f 43 7a 43 44 68 51 66 6f 44 42 59 42 75 32 74 51 50 59 4f 52 41 5a 74 70 4c 36 4c 6a 39 78 64 7a 58 48 77 44 65 6b 72 6e 34 75 48 63 76 50 32 2d 74 49 4b 66 63 78 39 72 78 31 6d 4e 49 43 33 6e 48 47 Data Ascii: v=rz4DvU-cY2JYCwHSTck0_qm-&c=03AFcWeA7hUUeSHNKjYGquNZJS5vkCedOb8jh3Re_4JA_q1gsfhrnCC5cRSjKnyxqq_ADzafzLUHOOOFypxVcb3A_C02yVSKKXUUZnldB9_-WCrmqJl1n1H_hKzwHeqg2uVYBk_0fLLGfeRYj3L4sDs3Uollt_d_CzCDhQfoDBYBu2tQPYORAZtpL6Lj9xdzXHwDekrn4uHcvP2-tIKfcx9rx1mNIC3nHG
2024-04-18 01:09:02 UTC	483	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Thu, 18 Apr 2024 01:09:02 GMT Expires: Thu, 18 Apr 2024 01:09:02 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 01:09:02 UTC	592	IN	Data Raw: 32 34 39 0d 0a 29 5d 7d 27 0a 5b 22 75 76 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 37 63 4f 43 78 78 71 73 58 4b 70 49 77 4b 4a 63 49 6e 7a 2d 38 4c 55 52 77 38 36 77 35 77 75 68 78 49 32 7a 56 43 64 63 31 2d 67 6c 72 49 75 4b 57 4f 42 6d 33 79 38 6d 58 70 43 51 4b 33 32 37 56 7a 55 52 64 30 4f 72 39 61 47 72 75 31 65 52 41 79 72 6b 35 72 5f 72 54 5f 4c 54 6e 50 30 71 51 4c 72 52 2d 35 31 48 76 42 72 66 4e 45 32 66 45 45 55 57 6f 57 32 35 70 36 57 31 2d 38 6b 48 79 34 32 31 6e 58 6a 4e 77 5f 35 5f 6e 30 62 4f 33 6a 70 42 55 6b 63 54 73 6a 77 45 2d 68 78 6e 51 61 30 4c 6b 31 49 68 63 62 6e 42 35 64 77 57 59 36 4d 4a 2d 4f 2d 41 4c 44 53 64 79 78 73 56 7a 44 6e 36 49 76 71 4d 37 55 64 41 7a 4f 48 49 77 71 5a 51 32 4f 39 46 34 59 71 34 79 41 5f 4e 34 74 Data Ascii: 249)]}'["uvresp","03AFcWeA7cOCxxqsXKpIwKJcInz-8LURw86w5wuhxI2zVCdc1-glrIuKWOBm3y8mXpCQK327VzURd0Or9aGru1eRAyrk5r_rT_LTnP0qQLrR-51HvBrfNE2fEEUWoW25p6W1-8kHy421nXjNw_5_n0bO3jpBUkcTsjwE-hxnQa0Lk1IhcbnB5dwWY6MJ-O-ALDSdyxsVzDn6IvqM7UdAzOHIwqZQ2O9F4Yq4yA_N4t
2024-04-18 01:09:02 UTC	1255	IN	Data Raw: 61 37 64 0d 0a 69 75 59 2d 70 56 4a 41 55 74 61 48 72 6c 68 69 54 6f 56 68 31 58 4c 34 6e 61 79 4a 52 6f 52 72 68 31 76 50 6b 72 61 34 5a 62 72 33 53 2d 72 38 58 56 42 6d 4c 52 74 79 6e 35 38 4e 75 70 48 65 6d 6f 47 74 48 68 72 6d 75 5a 67 6d 39 31 75 4f 7a 75 2d 53 7a 54 4d 4f 78 58 70 63 72 31 5a 34 77 38 30 42 58 6f 32 51 57 6d 59 6a 78 33 76 37 67 52 4b 71 50 45 6e 48 35 70 53 51 72 4d 4a 58 53 58 34 61 69 64 74 41 76 68 75 4f 78 56 70 75 63 47 56 58 6b 5a 6a 56 4a 64 68 6e 59 57 73 75 6d 30 54 59 48 72 49 70 39 74 4d 36 63 54 49 35 39 45 44 39 58 70 53 5a 57 79 6c 58 45 4f 77 37 73 6a 69 57 75 54 2d 52 39 48 6d 31 30 79 56 72 4f 37 4b 6b 44 73 52 59 50 44 39 77 4c 66 59 6c 56 32 6c 5a 56 2d 47 43 53 71 5f 41 51 53 74 50 55 36 4e 6a 36 55 77 58 42 67 Data Ascii: a7diuY-pVJAUtaHrlhiToVh1XL4nayJRoRrh1vPkra4Zbr3S-r8XVBmLRtyn58NupHemoGtHhrmuZgm91uOzu-SzTMOxXpcr1Z4w80BXo2QWmYjx3v7gRKqPEnH5pSQrMJXSX4aidtAvhuOxVpucGVXkZjVJdhnYWsum0TYHrIp9tM6cTI59ED9XpSZWylXEOw7sjiWuT-R9Hm10yVrO7KkDsRYPD9wLfYlV2lZV-GCSq_AQStPU6Nj6UwXBg
2024-04-18 01:09:02 UTC	1255	IN	Data Raw: 73 6b 31 4f 31 5a 49 32 42 62 7a 51 6b 51 7a 6f 6e 73 72 50 67 63 67 38 5f 75 53 35 48 30 72 38 57 35 62 6d 31 73 49 36 6c 6d 6e 68 37 36 48 36 76 4f 61 5a 59 7a 32 4f 36 46 51 54 64 44 6f 7a 65 6e 50 54 45 6a 32 77 64 36 4d 62 48 50 52 36 6f 51 42 30 52 56 35 6a 72 5a 6d 4c 52 76 73 58 57 61 77 42 69 78 6a 69 48 6f 31 63 6e 55 47 43 65 54 74 61 65 79 55 67 36 67 49 78 4d 77 38 72 62 57 49 33 58 64 6d 4a 34 6b 67 55 78 7a 32 43 44 78 55 33 57 35 6c 69 4e 41 4e 4b 69 36 39 67 53 47 46 55 53 37 56 63 6f 75 2d 77 61 6e 56 4f 30 62 6e 31 6e 54 6b 6f 69 42 6c 33 42 53 42 50 51 53 54 45 59 4d 56 7a 4b 70 38 50 2d 46 2d 7a 7a 72 32 70 6a 50 5f 59 4e 65 5a 2d 4e 42 72 6a 6b 6e 65 7a 46 42 48 66 6c 66 76 4f 5a 31 4a 66 66 73 73 49 53 71 41 57 50 78 4a 75 6b 38 70 Data Ascii: sk1O1ZI2BbzQkQzonsrPgcg8_uS5H0r8W5bm1sI6lmnh76H6vOaZYz2O6FQTdDozenPTEj2wd6MbHPR6oQB0RV5jrZmLRvsXWawBixjiHo1cnUGCeTtaeyUg6gIxMw8rbWI3XdmJ4kgUxz2CDxU3W5liNANKi69gSGFUS7Vcou-wanVO0bn1nTkoiBl3BSBPQSTEYMVzKp8P-F-zzr2pjP_YNeZ-NBrjknezFBHflfvOZ1JffssISqAWPxJuk8p
2024-04-18 01:09:02 UTC	182	IN	Data Raw: 43 39 55 78 6d 72 4c 56 72 4d 38 54 6c 2d 5a 75 66 34 34 37 79 6e 31 31 78 5f 31 38 47 71 35 71 74 75 73 59 62 58 6f 46 35 71 69 6d 38 33 68 67 61 46 77 42 66 75 63 47 4f 77 49 44 39 36 6c 67 31 45 33 69 4e 6b 6d 37 57 67 52 59 31 6d 66 6a 42 50 6d 56 4a 31 4a 32 77 72 75 63 30 4e 4c 33 36 30 75 52 34 57 46 58 30 4f 50 30 73 55 45 48 56 47 43 41 7a 6c 52 52 76 65 42 6a 6e 65 53 77 44 2d 6c 5f 44 5a 35 6f 72 5a 6a 52 6f 55 37 42 67 72 47 4a 37 6c 73 6e 43 36 59 48 58 57 34 70 58 54 30 37 59 57 63 35 62 41 68 57 4b 56 54 52 6e 41 72 66 0d 0a Data Ascii: C9UxmrLVrM8Tl-Zuf447yn11x_18Gq5qtusYbXoF5qim83hgaFwBfucGOwID96lg1E3iNkm7WgRY1mfjBPmVJ1J2wruc0NL360uR4WFX0OP0sUEHVGCAzlRRveBjneSwD-l_DZ5orZjRoU7BgrGJ7lsnC6YHXW4pXT07YWc5bAhWKVTRnArf
2024-04-18 01:09:02 UTC	1255	IN	Data Raw: 31 35 30 63 0d 0a 70 5f 6d 59 6d 48 6a 2d 37 46 71 31 42 2d 56 49 54 4b 6a 76 71 57 6d 68 64 4c 65 71 74 4f 54 75 39 4e 42 4f 70 36 7a 44 6e 32 68 66 41 6a 39 47 72 71 70 39 63 46 63 70 46 51 36 6d 4b 71 51 73 52 45 2d 63 33 2d 5a 69 56 74 5f 4f 62 58 53 45 4d 66 39 70 66 4f 4d 32 74 76 4c 44 67 4e 72 48 4f 6b 70 4b 71 54 68 49 4c 45 71 6e 77 68 67 44 50 45 55 5f 38 32 36 7a 58 55 66 38 50 44 6a 39 52 68 2d 79 4f 69 6f 73 50 49 66 69 43 4e 5a 70 4a 45 69 43 46 41 2d 79 31 30 73 4d 72 37 71 68 61 66 52 79 55 2d 6e 59 61 6f 4e 5f 59 64 56 51 62 37 4a 48 7a 6a 41 78 78 63 51 48 67 41 6f 6f 4f 2d 31 75 79 6a 4f 7a 32 64 78 37 30 52 58 74 6e 75 59 6c 57 66 68 6f 7a 7a 35 68 5a 71 5f 46 57 6c 6e 62 5f 4c 33 34 49 75 58 71 62 54 4b 35 43 7a 4c 38 6a 59 75 32 73 Data Ascii: 150cp_mYmHj-7Fq1B-VITKjvqWmhdLeqtOTu9NBOp6zDn2hfAj9Grqp9cFcpFQ6mKqQsRE-c3-ZiVt_ObXSEMf9pfOM2tvLDgNrHOkpKqThILEqnwhgDPEU_826zXUf8PDj9Rh-yOiosPIfiCNZpJEiCFA-y10sMr7qhafRyU-nYaoN_YdVQb7JHzjAxxcQHgAooO-1uyjOz2dx70RXtnuYlWfhozz5hZq_FWlnb_L34IuXqbTK5CzL8jYu2s
2024-04-18 01:09:02 UTC	1255	IN	Data Raw: 45 2d 62 38 48 78 6c 74 6e 73 50 57 7a 4b 72 69 2d 31 4a 4b 79 55 33 70 4c 68 61 6a 49 69 48 4f 74 47 6e 5f 4c 36 45 35 4b 73 75 37 62 6b 58 49 6b 4e 69 73 34 54 53 6f 44 49 57 4a 66 43 44 47 6b 58 47 38 63 53 78 7a 73 63 36 54 41 5f 4f 50 57 67 6d 62 4e 30 79 68 55 39 54 7a 6f 38 63 73 62 4b 4c 6b 74 6b 4e 56 44 76 73 37 53 70 75 6c 33 4b 6e 48 47 70 47 54 43 57 67 5f 74 59 67 32 46 6e 62 70 44 45 52 75 44 6e 31 41 64 6b 50 38 38 6d 41 4b 30 39 37 4e 55 49 4e 49 46 6c 72 4a 4b 61 57 5f 34 43 42 31 55 48 4b 57 75 52 79 4a 37 42 78 44 68 69 30 69 78 51 6a 5a 7a 49 42 37 57 56 49 77 4e 65 62 70 44 51 4b 70 6c 65 46 54 38 73 52 6d 6e 4e 47 71 2d 78 56 6d 33 77 73 69 79 68 2d 67 48 7a 75 73 4e 6c 62 43 39 42 2d 32 4f 57 4c 35 65 6d 38 5a 45 59 4b 72 35 4b 61 Data Ascii: E-b8HxltnsPWzKri-1JKyU3pLhajIiHOtGn_L6E5Ksu7bkXIkNis4TSoDIWJfCDGkXG8cSxzsc6TA_OPWgmbN0yhU9Tzo8csbKLktkNVDvs7Spul3KnHGpGTCWg_tYg2FnbpDERuDn1AdkP88mAK097NUINIFlrJKaW_4CB1UHKWuRyJ7BxDhi0ixQjZzIB7WVIwNebpDQKpleFT8sRmnNGq-xVm3wsiyh-gHzusNlbC9B-2OWL5em8ZEYKr5Ka
2024-04-18 01:09:02 UTC	1255	IN	Data Raw: 6d 32 34 42 54 4c 41 54 58 73 6b 74 49 6d 4b 36 6f 58 58 4e 79 53 51 48 32 4b 4e 35 56 4f 64 6a 69 2d 53 6e 39 37 49 51 61 4a 4d 54 44 76 31 6d 56 56 46 67 59 74 72 6c 71 70 48 70 32 2d 6f 44 5f 66 6a 43 4a 32 56 6c 70 30 35 5a 32 71 58 34 70 59 72 66 70 6d 77 49 6c 6e 51 62 74 78 4c 63 37 37 79 57 39 64 4e 38 5a 42 65 6e 66 41 52 7a 4e 77 39 4c 37 37 64 68 52 6f 6c 32 6f 63 44 78 43 4e 39 42 66 47 4b 48 73 61 70 4c 63 4a 6b 64 4f 61 72 67 4a 4c 55 38 47 68 74 6b 43 53 53 36 4d 46 74 50 55 5a 72 4e 53 30 42 52 53 36 52 31 5a 36 6e 52 77 79 30 6c 6e 71 34 4b 4b 74 52 39 4f 72 5f 2d 37 50 61 68 30 6d 6a 6c 4f 4a 65 45 53 5a 47 36 32 4a 72 6d 4d 4e 45 4b 34 70 43 72 6c 51 5f 63 78 76 75 79 46 41 41 4f 37 5a 5a 6e 43 64 4b 45 78 6c 59 4c 42 6a 42 71 58 6f 78 Data Ascii: m24BTLATXsktImK6oXXNySQH2KN5VOdji-Sn97IQaJMTDv1mVVFgYtrlqpHp2-oD_fjCJ2Vlp05Z2qX4pYrfpmwIlnQbtxLc77yW9dN8ZBenfARzNw9L77dhRol2ocDxCN9BfGKHsapLcJkdOargJLU8GhtkCSS6MFtPUZrNS0BRS6R1Z6nRwy0lnq4KKtR9Or_-7Pah0mjlOJeESZG62JrmMNEK4pCrlQ_cxvuyFAAO7ZZnCdKExlYLBjBqXox
2024-04-18 01:09:02 UTC	1255	IN	Data Raw: 6a 70 47 38 71 70 68 73 6d 66 46 68 45 6d 75 31 6b 36 5a 33 71 62 41 49 33 4f 65 70 50 6f 5f 73 58 68 39 6c 4b 62 6a 70 50 78 39 6a 34 71 35 30 66 35 55 5a 34 43 4d 4a 36 34 53 69 42 75 70 43 7a 30 43 57 44 75 31 67 36 36 46 56 57 64 67 56 77 58 4b 2d 33 4c 52 6f 5a 30 5f 4c 32 4d 51 57 41 5f 68 41 35 39 5f 2d 31 57 62 37 38 58 75 7a 6b 52 63 45 62 58 55 49 46 31 4a 47 39 51 4a 36 5a 49 65 66 39 54 79 51 45 49 32 67 6d 46 47 2d 79 77 64 62 6e 68 55 66 47 76 44 54 31 4c 4a 75 5a 5a 5f 69 67 44 35 6a 73 6e 7a 4b 5a 6f 35 73 54 6d 5a 41 37 4d 5f 31 77 43 77 73 56 74 5f 6e 4c 39 67 62 5a 69 6e 4c 44 79 7a 75 6a 42 71 54 47 35 35 34 37 30 57 42 4c 4c 62 4c 57 4c 73 59 6e 7a 46 33 4f 4b 6b 4d 56 6a 77 39 70 64 46 67 62 64 34 74 74 64 4b 49 63 65 45 56 6c 70 75 Data Ascii: jpG8qphsmfFhEmu1k6Z3qbAI3OepPo_sXh9lKbjpPx9j4q50f5UZ4CMJ64SiBupCz0CWDu1g66FVWdgVwXK-3LRoZ0_L2MQWA_hA59_-1Wb78XuzkRcEbXUIF1JG9QJ6ZIef9TyQEI2gmFG-ywdbnhUfGvDT1LJuZZ_igD5jsnzKZo5sTmZA7M_1wCwsVt_nL9gbZinLDyzujBqTG55470WBLLbLWLsYnzF3OKkMVjw9pdFgbd4ttdKIceEVlpu
2024-04-18 01:09:02 UTC	376	IN	Data Raw: 59 6f 46 4c 74 46 32 5f 50 49 4d 75 4e 54 65 51 73 6e 4b 39 65 78 55 50 4b 6f 31 34 38 5a 51 45 54 59 38 76 46 66 4c 77 56 39 4c 4a 61 51 43 71 55 70 5f 55 66 31 71 32 64 49 7a 77 4f 54 49 2d 6d 69 4e 77 59 6e 62 55 67 36 71 4f 34 63 43 68 5f 67 43 6e 45 77 6e 4e 6e 46 50 2d 46 68 4d 6d 70 4d 54 73 42 63 68 6e 70 73 73 65 67 63 36 4c 53 30 36 32 61 6d 42 58 58 6c 72 55 74 6a 54 70 31 62 36 4a 77 7a 74 36 47 65 46 6b 62 4f 72 7a 58 55 6b 70 4b 2d 4e 51 47 6b 39 5a 79 67 46 32 66 31 34 39 74 5a 38 61 61 70 46 34 53 48 34 49 77 77 57 64 31 79 39 69 6c 59 6a 41 37 73 69 53 54 73 69 47 6a 65 35 49 70 4c 49 68 43 4d 50 35 7a 76 6d 67 6f 72 62 32 76 59 46 54 6a 51 6e 2d 4a 5a 5f 6a 64 6c 2d 75 4c 5f 57 63 39 4a 49 4c 69 30 59 61 70 43 36 42 4c 48 41 61 6a 37 37 Data Ascii: YoFLtF2_PIMuNTeQsnK9exUPKo148ZQETY8vFfLwV9LJaQCqUp_Uf1q2dIzwOTI-miNwYnbUg6qO4cCh_gCnEwnNnFP-FhMmpMTsBchnpssegc6LS062amBXXlrUtjTp1b6Jwzt6GeFkbOrzXUkpK-NQGk9ZygF2f149tZ8aapF4SH4IwwWd1y9ilYjA7siSTsiGje5IpLIhCMP5zvmgorb2vYFTjQn-JZ_jdl-uL_Wc9JILi0YapC6BLHAaj77

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.16	49770	74.125.136.99	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:09:02 UTC	877	OUT	GET /recaptcha/api2/userverify?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:09:02 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Thu, 18 Apr 2024 01:09:02 GMT Expires: Thu, 18 Apr 2024 01:09:02 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 01:09:02 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-18 01:09:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.16	49771	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:09:02 UTC	1479	OUT	GET /recaptcha/api2/payload?p=06AFcWeA7h1gq_qS7al9HO7PQpzGTS5JWeX2FsfH159FjvTdvn_zUmpWU8JVsvm7trvqlPZ5_YAo-57ycQzgvbKn81Fot6-oIbceP5fjtRi2ZywiuvEXdVQJyV1I7MaV9pKPWF5fyGEszk2-PYs-dy74nFG0dBCsG9C4iuZVDbahfIj7unSSccRNQyV5eBz7q1hBqAgrSBfG_q&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:09:02 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Thu, 18 Apr 2024 01:09:02 GMT Date: Thu, 18 Apr 2024 01:09:02 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 01:09:02 UTC	1255	IN	Data Raw: 41 42 39 31 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: AB91JFIFC!"$"$C"}!1AQa"q
2024-04-18 01:09:02 UTC	1255	IN	Data Raw: 2b 27 52 62 da 24 8d b9 81 09 b7 3d f2 bc 7f 4a dd 2a 44 7d 2a 97 88 ad c2 f8 57 ce 8c 72 24 91 1b f3 0d fd 4d 54 0c ab 25 1b 33 86 d2 6d 9e e2 77 54 65 5c 46 4f cd f9 52 49 a3 ea 08 c5 56 03 28 c6 73 19 c8 ab 9e 14 03 ed 33 7a f9 5f d6 bb 05 d8 f6 d7 6d 12 e1 42 c6 07 18 e7 8c ff 00 5a ed 9c ac 2c 36 0e 35 a9 f3 5f 5b 9e 6e 56 58 64 65 21 e3 75 38 23 a1 06 ad db ea ba 84 3f 76 ee 42 00 c6 18 ee fc 39 ae af 4b 8c 9d 43 56 20 64 bd e6 d0 3d 70 18 9f e6 2a ed e5 86 99 72 23 c5 95 bb 30 44 12 61 76 9d c7 3c f1 8e b8 34 2a 8d 3d 05 1c b9 d4 8a 77 5a 9c ba f8 86 e9 d2 35 b8 82 19 16 35 da bb 41 53 8c 93 5a 91 78 a6 d1 de 77 9e d6 58 cc b0 88 be 42 18 0c 63 9f d2 ab 7f 61 d9 4f ad 5e 5b 47 2b 45 14 30 a3 e1 08 7c 31 20 11 9f c6 92 f7 c2 77 70 a8 fb 3c cb 33 96 Data Ascii: +'Rb$=JD}Wr$MT%3mwTe\FORIV(s3z_mBZ,65_[nVXde!u8#?vB9KCV d=pr#0Dav<4=wZ55ASZxwXBcaO^[G+E0\|1 wp<3
2024-04-18 01:09:02 UTC	1255	IN	Data Raw: 8e 73 51 b2 90 73 8e 29 81 a1 a4 00 5f df 1f d6 ba 8b 44 18 87 a8 cc 72 03 ff 00 7d 1a e6 b4 35 cb 92 47 4f f1 ae a2 d4 0c 5b 0f 69 78 ff 00 81 1a 89 6a 61 37 ef 0f 0a 00 7c 0e c3 3e f5 cc cc a4 fd a3 3c 7e f1 bf ad 75 c9 0f c8 de c3 a5 73 17 4b fb fb a5 ff 00 a6 87 1f 91 a5 02 62 f5 36 2c 90 36 85 a5 cd 8f bd 3c 8b 8f 4d a0 7f 8d 6a 6c cc 45 40 e4 8e 2a 8e 9e 3f e2 94 d3 ce 79 4b d9 87 e8 b5 a5 1a 96 5e 73 d2 a2 bf c4 7a 54 1f b8 4d a1 ac 8c 8e 64 8f 63 29 23 02 a7 b9 6d ac 46 71 56 ec d8 4a 5a 41 f7 73 8c 7e 15 15 ec 5b 8d 73 3d ce ea 69 b8 2b 94 d6 40 df 28 ce 40 e6 9b ab 9d de 15 d5 20 da 77 47 b2 51 f4 39 53 fd 2a d0 8c 28 e0 01 9a 68 8f cd 37 30 63 fd 7d 94 ab 8f 75 c3 8f e5 5a 53 7a d8 cb 10 bd c6 70 7e 11 5c 5e ca ad 8c 98 4e 32 71 5a b6 97 37 13 Data Ascii: sQs)_Dr}5GO[ixja7\|><~usKb6,6<MjlE@?yK^szTMdc)#mFqVJZAs~[s=i+@(@ wGQ9S(h70c}uZSzp~\^N2qZ7
2024-04-18 01:09:02 UTC	339	IN	Data Raw: f2 8a 9a 8b dc 60 f4 3c aa 41 e9 d7 b7 34 88 78 c9 ce 45 5c 4d 36 fe 4e 9a 6d c9 e3 b4 67 fc 2a 44 d1 75 66 20 a6 99 77 81 ff 00 4c 8f f8 54 dd 0f 99 15 cc e8 40 db 11 cf bd 21 94 e3 1e 48 fc ab 40 78 7f 5d 61 95 d3 af 3f ef c9 a9 57 c3 3e 20 75 ff 00 90 65 e7 fd fb 22 91 5c eb b9 92 65 c7 26 34 07 e9 4c 79 b0 bc 2c 7f 4e 6b 69 7c 23 e2 22 c3 3a 65 d1 e3 ba e2 9e de 0c f1 0b 03 b7 4c 97 f1 65 1f d6 9a 48 5c eb b9 cd 24 e0 c9 20 68 94 e4 f1 d6 9b 31 c2 96 50 46 3d 18 d7 44 3c 0b e2 4f 38 37 f6 78 5c 7a cc bf e3 56 1b c1 3e 22 31 15 7b 7b 70 3d e5 19 15 64 fb 45 63 95 43 30 47 6d ae 72 07 39 35 6f 49 d4 45 b4 bf 34 26 45 dd ca 9e 73 5d 3d b7 83 75 b8 c1 6d f6 b1 e1 47 0d 26 7f a5 6a 68 9a 14 f6 32 b3 de a6 9d 31 23 18 f3 0a 8f e5 d6 a9 2d 0c db 30 a2 b5 b4 Data Ascii: `<A4xE\M6Nmg*Duf wLT@!H@x]a?W> ue"\e&4Ly,Nki\|#":eLeH\$ h1PF=D<O87x\zV>"1{{p=dEcC0Gmr95oIE4&Es]=umG&jh21#-0
2024-04-18 01:09:02 UTC	1255	IN	Data Raw: aa d6 b5 ad 37 c9 31 5a 35 94 0f b8 15 92 23 96 04 1c f7 cd 66 6b 5e 32 92 ea 05 85 63 87 70 18 67 19 c1 fa 0e d4 ac ca 8b 66 36 8d 1b 24 ac 1c 10 76 9a e9 6d 33 fe 8a 73 91 99 b2 7f 13 5c ce 99 23 cf 33 48 7a 9c f4 ae 96 d7 22 4b 64 3d a5 90 1c fd 4d 44 d9 0e 37 66 a1 8c 65 bd d7 1d 3a d7 23 32 10 d7 43 6e 36 c9 fd 2b b2 c8 5d cc 4f 41 fe 15 cc 5d af fa 56 a1 e9 b8 1f d2 94 4c 13 d4 d2 d2 3e 7f 07 44 7f b9 7f 27 ea bf fd 6a d4 84 03 01 03 a9 15 9b a0 a9 3e 0c 97 db 50 e9 f5 53 5a b6 ab 88 11 80 39 c7 34 b1 36 e6 fb bf 23 d6 c3 2f 75 9a fa 75 a9 8e c5 0b 75 6f 9b 1e 95 1d d0 1b 87 b9 e9 57 2c 65 79 ad 83 bf 71 81 81 4c be 8c a3 a0 c6 0f 15 c9 2f 89 9d b4 b9 b9 57 36 e5 29 06 08 f4 a2 c8 ed d5 2d 4f 04 19 02 10 7b 86 1b 4f f3 a9 64 43 90 48 aa 97 ef e4 44 Data Ascii: 71Z5#fk^2cpgf6$vm3s\#3Hz"Kd=MD7fe:#2Cn6+]OA]VL>D'j>PSZ946#/uuuoW,eyqL/W6)-O{OdCHD
2024-04-18 01:09:02 UTC	1255	IN	Data Raw: 81 ce 47 98 47 34 fd 41 07 96 8f 96 1b c8 38 ed d3 8a 62 85 8e e0 b6 30 c6 4e a7 bf 35 2d e9 2e 63 42 00 52 41 1e 9d 2a 7a 0f aa 1b be 31 c1 92 40 7b 81 45 49 b0 1e 4a f2 7d e8 a0 2e 78 ce bb ce 9d 61 ff 00 5c c7 f2 ac 75 03 de b5 f5 8f f9 05 58 93 fd ca c8 53 ed 9a ec 5b 09 09 b7 07 8a f7 5f 87 d7 8f 61 f0 72 7b c8 d5 59 e1 92 46 01 bd 95 6b c3 17 06 bd b3 c1 60 1f 83 37 b1 00 0f cd 2f fe 80 b5 52 7e e3 09 6c 73 ff 00 f0 b2 75 e6 f9 a2 8a cc 0f 40 95 13 7c 47 f1 2e 0f cd 02 7f db 2c d7 2e 96 d2 e7 3e 53 8f a0 ab 51 db 2c ab b4 a9 53 df 22 a4 39 53 35 a4 f8 8d e2 66 e9 75 10 fa 42 2a 23 f1 03 c4 e4 7f c7 f2 fd 44 42 b2 ae b4 d5 48 5a 40 c3 e5 19 35 52 18 63 dc 03 16 c7 b0 a5 70 71 46 db 78 db c4 ae 3f e4 24 c3 3e 8a 3f c2 ab 4d e2 df 11 bf 07 55 9f 1e c4 Data Ascii: GG4A8b0N5-.cBRAz1@{EIJ}.xa\uXS[_ar{YFk`7/R~lsu@\|G.,.>SQ,S"9S5fuB#DBHZ@5RcpqFx?$>?MU
2024-04-18 01:09:02 UTC	1255	IN	Data Raw: a9 b5 db b8 ef 44 ad 24 d0 df 5b 9d af b9 4a 9f 9d 33 8e bf dd a8 ad 91 1c c9 b4 2b 7c fd 54 e7 b0 f4 ac bd 5b 4d b2 36 d2 4b f6 60 b2 82 30 57 8a 98 cd 2d d1 36 d0 f5 8f 04 6a f7 56 16 6f 05 bd cd b6 aa 66 b8 bc b9 9e 4b 1b 85 97 73 48 9f bb 1b 73 bb ef 0e e3 8c d7 9d db c4 f6 fa 7d 8c 4c 0a b2 1e 41 1c fd e3 5c bd 8e 94 6e 03 cb 1c a6 27 8b 90 45 76 12 3c 93 47 6a 64 c1 75 da ac 71 d4 8a 55 1a 63 8a 1c ea 3e d2 47 7c 0e bf 5a 92 ca 32 86 e3 24 8c ca bf fa 09 a2 6c fd a8 71 fc 23 35 25 ae 76 5c 13 da 55 c7 fd f3 58 74 28 ac 01 21 f2 46 48 3f d2 9b 02 3f f6 5f 5d bf ba e0 ff 00 c0 4d 38 2e 43 f6 20 1e dd 7a 53 89 07 4a 87 9f f9 60 f9 fa 81 4c 7b 20 8a 35 1a 55 99 5c fd d5 24 9f a1 15 a9 77 cc 67 9e 30 7f 91 ac ed 85 b4 5b 58 f3 82 51 6a e5 c9 cc 7b 3b e3 Data Ascii: D$[J3+\|T[M6K`0W-6jVofKsHs}LA\n'Ev<GjduqUc>G\|Z2$lq#5%v\UXt(!FH??_]M8.C zSJ`L{ 5U\$wg0[XQj{;
2024-04-18 01:09:02 UTC	1255	IN	Data Raw: 8f 14 08 17 79 ba 52 c4 9c 01 f2 9f f3 f8 55 1f 85 5a 6d cd 96 bd a8 f9 e9 b4 1b 60 01 1c 83 cd 7b 98 17 3a 94 b9 e5 be a7 ce 66 4e 14 aa ba 51 ec 65 78 b5 33 e1 af 0e 37 fd 3b b8 ad ff 00 04 91 1e b3 6c d9 1c 44 7f 95 65 f8 b2 d9 bf e1 16 d0 39 fb 90 b8 3f 95 69 78 5f 8b c8 1f 3c f9 7f d2 bd 18 ed 23 c7 93 bb 89 0e ac a4 5e dc b8 1f 7a e1 ff 00 56 35 83 a9 bc 02 19 bc c9 31 26 d7 50 bb 7a ee 00 0f e4 6b a5 d4 a3 0f 34 ac 7b bb 1c fe 35 cc ea 76 db dd 9b af af ad 78 b2 d2 47 bf 4b 5a 69 18 9a 3b 79 7a a4 0c 1c a9 59 07 cd 5d 0f 87 6e a4 8e da cd 4c fb 04 12 dc 34 4c 46 44 64 a0 f9 87 e3 cd 61 7d 92 40 e1 86 40 1d eb 42 d9 5e 28 94 ab 64 0c 9d ad d3 9e 0d 68 9a 06 89 f5 a9 a0 36 ba a0 5b 78 d2 e1 ae a3 75 9d 78 6c 6d 39 03 d0 12 33 f8 d6 55 9e a5 a9 2e 23 Data Ascii: yRUZm`{:fNQex37;lDe9?ix_<#^zV51&Pzk4{5vxGKZi;yzY]nL4LFDda}@@B^(dh6[xuxlm93U.#
2024-04-18 01:09:03 UTC	1255	IN	Data Raw: 9e a5 ba 15 93 90 30 57 8f c8 9a b7 e2 01 a4 6a 5a 9f 87 f4 9d 43 47 8a 79 35 2f de 99 76 81 b4 20 05 94 9e bc e6 ba 55 46 e2 b9 95 ce 7d 9f ba cf 2c d3 fc 79 ae e9 71 c7 14 d2 41 7c 33 cf 98 bf 36 df 4c 8f ad 74 da 57 c4 cd 32 55 10 5e d8 cf 6e ee c3 e6 42 1c 0e bf 8d 65 7c 6a f0 ae 97 e1 fb cd 3e 5d 1e 16 8a 1b a4 72 ca 5c b0 0c a4 74 cf b1 ae 12 dd 7c b4 33 b0 e9 90 9e e7 d6 b0 fa b5 1a de f7 2d 8e 98 62 ea d3 5b 9e a3 f1 1b c4 3a 3e a9 e1 c6 fe ce d4 12 49 be d3 19 f2 c6 43 0c 06 c9 c5 37 e0 95 d5 c5 c6 b7 a8 c5 2c cf 22 0b 61 8d c7 38 e6 bc ba 2c b4 b8 51 b9 8f 4e 6b db bc 05 a7 c3 e1 9f 05 cf ad dc 26 27 b9 88 3e 3b 91 8c 2a 8f a9 35 d1 86 a7 c9 06 a3 b1 c3 8e ab ce ef 25 ad 8a 3e 20 02 4f 0b e8 ac 00 0a 23 74 fa 9c 1f f0 a9 3c 3c 36 dc 42 31 fc 1e Data Ascii: 0WjZCGy5/v UF},yqA\|36LtW2U^nBe\|j>]r\t\|3-b[:>IC7,"a8,QNk&'>;*5%> O#t<<6B1
2024-04-18 01:09:03 UTC	1255	IN	Data Raw: 67 79 61 7c b7 31 ba 47 22 1c ab 7f 10 ae 82 3d 58 d9 e8 d1 6a 53 33 48 61 bd 06 6e 39 c6 e2 d9 ff 00 c7 8d 62 5d ea 53 3b ef 08 14 fd 29 f6 92 cb 7d a0 6a d6 6e 43 3e d5 91 47 b8 a2 77 8d 9f 63 4a 69 ca e8 e9 7c 6b ae 69 9f f0 85 5f bd 9e a5 0c d2 5f 4e b2 44 a8 df 30 ce dc 82 3f e0 26 ba d8 62 32 f8 bb c2 0f 8c ec b0 9d f3 ff 00 00 4f f1 af 9c e4 b6 b8 89 be 78 5d 47 42 48 ad ed 17 c6 1e 21 d2 6f ad ee ed af e4 91 ed a3 68 e3 13 7e f1 55 5b 19 18 3f 41 5b 26 ad 6f eb 6b 19 38 23 d5 3e 38 69 f9 f0 8e 95 35 d4 8a 1e 1b a7 8f 7a f2 3e 70 48 e7 fe 03 5e 31 76 50 32 db c2 fb e3 8f a3 7a 9e e6 ba 7d 57 c7 77 1a bf 83 0f 87 af ac 51 a4 fb 4f 9e 97 0a e7 83 b8 92 36 ff 00 c0 88 eb 5c 8a 03 9a 71 95 a2 e2 4f 23 bd d9 d0 f8 03 45 7d 73 c5 36 b6 44 37 94 0f 99 31 Data Ascii: gya\|1G"=XjS3Han9b]S;)}jnC>GwcJi\|ki__ND0?&b2Ox]GBH!oh~U[?A[&ok8#>8i5z>pH^1vP2z}WwQO6\qO#E}s6D71

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.16	49772	74.125.136.99	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:09:03 UTC	1083	OUT	GET /recaptcha/api2/payload?p=06AFcWeA7h1gq_qS7al9HO7PQpzGTS5JWeX2FsfH159FjvTdvn_zUmpWU8JVsvm7trvqlPZ5_YAo-57ycQzgvbKn81Fot6-oIbceP5fjtRi2ZywiuvEXdVQJyV1I7MaV9pKPWF5fyGEszk2-PYs-dy74nFG0dBCsG9C4iuZVDbahfIj7unSSccRNQyV5eBz7q1hBqAgrSBfG_q&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:09:03 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Thu, 18 Apr 2024 01:09:03 GMT Date: Thu, 18 Apr 2024 01:09:03 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 01:09:03 UTC	6	IN	Data Raw: 41 42 39 31 0d 0a Data Ascii: AB91
2024-04-18 01:09:03 UTC	1255	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C"}!1AQa"q2
2024-04-18 01:09:03 UTC	1255	IN	Data Raw: 8d b9 81 09 b7 3d f2 bc 7f 4a dd 2a 44 7d 2a 97 88 ad c2 f8 57 ce 8c 72 24 91 1b f3 0d fd 4d 54 0c ab 25 1b 33 86 d2 6d 9e e2 77 54 65 5c 46 4f cd f9 52 49 a3 ea 08 c5 56 03 28 c6 73 19 c8 ab 9e 14 03 ed 33 7a f9 5f d6 bb 05 d8 f6 d7 6d 12 e1 42 c6 07 18 e7 8c ff 00 5a ed 9c ac 2c 36 0e 35 a9 f3 5f 5b 9e 6e 56 58 64 65 21 e3 75 38 23 a1 06 ad db ea ba 84 3f 76 ee 42 00 c6 18 ee fc 39 ae af 4b 8c 9d 43 56 20 64 bd e6 d0 3d 70 18 9f e6 2a ed e5 86 99 72 23 c5 95 bb 30 44 12 61 76 9d c7 3c f1 8e b8 34 2a 8d 3d 05 1c b9 d4 8a 77 5a 9c ba f8 86 e9 d2 35 b8 82 19 16 35 da bb 41 53 8c 93 5a 91 78 a6 d1 de 77 9e d6 58 cc b0 88 be 42 18 0c 63 9f d2 ab 7f 61 d9 4f ad 5e 5b 47 2b 45 14 30 a3 e1 08 7c 31 20 11 9f c6 92 f7 c2 77 70 a8 fb 3c cb 33 96 00 26 36 9c 1c e0 Data Ascii: =JD}Wr$MT%3mwTe\FORIV(s3z_mBZ,65_[nVXde!u8#?vB9KCV d=pr#0Dav<4=wZ55ASZxwXBcaO^[G+E0\|1 wp<3&6
2024-04-18 01:09:03 UTC	1255	IN	Data Raw: 8e 29 81 a1 a4 00 5f df 1f d6 ba 8b 44 18 87 a8 cc 72 03 ff 00 7d 1a e6 b4 35 cb 92 47 4f f1 ae a2 d4 0c 5b 0f 69 78 ff 00 81 1a 89 6a 61 37 ef 0f 0a 00 7c 0e c3 3e f5 cc cc a4 fd a3 3c 7e f1 bf ad 75 c9 0f c8 de c3 a5 73 17 4b fb fb a5 ff 00 a6 87 1f 91 a5 02 62 f5 36 2c 90 36 85 a5 cd 8f bd 3c 8b 8f 4d a0 7f 8d 6a 6c cc 45 40 e4 8e 2a 8e 9e 3f e2 94 d3 ce 79 4b d9 87 e8 b5 a5 1a 96 5e 73 d2 a2 bf c4 7a 54 1f b8 4d a1 ac 8c 8e 64 8f 63 29 23 02 a7 b9 6d ac 46 71 56 ec d8 4a 5a 41 f7 73 8c 7e 15 15 ec 5b 8d 73 3d ce ea 69 b8 2b 94 d6 40 df 28 ce 40 e6 9b ab 9d de 15 d5 20 da 77 47 b2 51 f4 39 53 fd 2a d0 8c 28 e0 01 9a 68 8f cd 37 30 63 fd 7d 94 ab 8f 75 c3 8f e5 5a 53 7a d8 cb 10 bd c6 70 7e 11 5c 5e ca ad 8c 98 4e 32 71 5a b6 97 37 13 6b 7a 84 12 4c ef Data Ascii: )_Dr}5GO[ixja7\|><~usKb6,6<MjlE@?yK^szTMdc)#mFqVJZAs~[s=i+@(@ wGQ9S(h70c}uZSzp~\^N2qZ7kzL
2024-04-18 01:09:03 UTC	333	IN	Data Raw: f4 3c aa 41 e9 d7 b7 34 88 78 c9 ce 45 5c 4d 36 fe 4e 9a 6d c9 e3 b4 67 fc 2a 44 d1 75 66 20 a6 99 77 81 ff 00 4c 8f f8 54 dd 0f 99 15 cc e8 40 db 11 cf bd 21 94 e3 1e 48 fc ab 40 78 7f 5d 61 95 d3 af 3f ef c9 a9 57 c3 3e 20 75 ff 00 90 65 e7 fd fb 22 91 5c eb b9 92 65 c7 26 34 07 e9 4c 79 b0 bc 2c 7f 4e 6b 69 7c 23 e2 22 c3 3a 65 d1 e3 ba e2 9e de 0c f1 0b 03 b7 4c 97 f1 65 1f d6 9a 48 5c eb b9 cd 24 e0 c9 20 68 94 e4 f1 d6 9b 31 c2 96 50 46 3d 18 d7 44 3c 0b e2 4f 38 37 f6 78 5c 7a cc bf e3 56 1b c1 3e 22 31 15 7b 7b 70 3d e5 19 15 64 fb 45 63 95 43 30 47 6d ae 72 07 39 35 6f 49 d4 45 b4 bf 34 26 45 dd ca 9e 73 5d 3d b7 83 75 b8 c1 6d f6 b1 e1 47 0d 26 7f a5 6a 68 9a 14 f6 32 b3 de a6 9d 31 23 18 f3 0a 8f e5 d6 a9 2d 0c db 30 a2 b5 b4 bd 51 2a db b4 44 Data Ascii: <A4xE\M6NmgDuf wLT@!H@x]a?W> ue"\e&4Ly,Nki\|#":eLeH\$ h1PF=D<O87x\zV>"1{{p=dEcC0Gmr95oIE4&Es]=umG&jh21#-0QD
2024-04-18 01:09:03 UTC	1255	IN	Data Raw: aa d6 b5 ad 37 c9 31 5a 35 94 0f b8 15 92 23 96 04 1c f7 cd 66 6b 5e 32 92 ea 05 85 63 87 70 18 67 19 c1 fa 0e d4 ac ca 8b 66 36 8d 1b 24 ac 1c 10 76 9a e9 6d 33 fe 8a 73 91 99 b2 7f 13 5c ce 99 23 cf 33 48 7a 9c f4 ae 96 d7 22 4b 64 3d a5 90 1c fd 4d 44 d9 0e 37 66 a1 8c 65 bd d7 1d 3a d7 23 32 10 d7 43 6e 36 c9 fd 2b b2 c8 5d cc 4f 41 fe 15 cc 5d af fa 56 a1 e9 b8 1f d2 94 4c 13 d4 d2 d2 3e 7f 07 44 7f b9 7f 27 ea bf fd 6a d4 84 03 01 03 a9 15 9b a0 a9 3e 0c 97 db 50 e9 f5 53 5a b6 ab 88 11 80 39 c7 34 b1 36 e6 fb bf 23 d6 c3 2f 75 9a fa 75 a9 8e c5 0b 75 6f 9b 1e 95 1d d0 1b 87 b9 e9 57 2c 65 79 ad 83 bf 71 81 81 4c be 8c a3 a0 c6 0f 15 c9 2f 89 9d b4 b9 b9 57 36 e5 29 06 08 f4 a2 c8 ed d5 2d 4f 04 19 02 10 7b 86 1b 4f f3 a9 64 43 90 48 aa 97 ef e4 44 Data Ascii: 71Z5#fk^2cpgf6$vm3s\#3Hz"Kd=MD7fe:#2Cn6+]OA]VL>D'j>PSZ946#/uuuoW,eyqL/W6)-O{OdCHD
2024-04-18 01:09:03 UTC	1255	IN	Data Raw: 81 ce 47 98 47 34 fd 41 07 96 8f 96 1b c8 38 ed d3 8a 62 85 8e e0 b6 30 c6 4e a7 bf 35 2d e9 2e 63 42 00 52 41 1e 9d 2a 7a 0f aa 1b be 31 c1 92 40 7b 81 45 49 b0 1e 4a f2 7d e8 a0 2e 78 ce bb ce 9d 61 ff 00 5c c7 f2 ac 75 03 de b5 f5 8f f9 05 58 93 fd ca c8 53 ed 9a ec 5b 09 09 b7 07 8a f7 5f 87 d7 8f 61 f0 72 7b c8 d5 59 e1 92 46 01 bd 95 6b c3 17 06 bd b3 c1 60 1f 83 37 b1 00 0f cd 2f fe 80 b5 52 7e e3 09 6c 73 ff 00 f0 b2 75 e6 f9 a2 8a cc 0f 40 95 13 7c 47 f1 2e 0f cd 02 7f db 2c d7 2e 96 d2 e7 3e 53 8f a0 ab 51 db 2c ab b4 a9 53 df 22 a4 39 53 35 a4 f8 8d e2 66 e9 75 10 fa 42 2a 23 f1 03 c4 e4 7f c7 f2 fd 44 42 b2 ae b4 d5 48 5a 40 c3 e5 19 35 52 18 63 dc 03 16 c7 b0 a5 70 71 46 db 78 db c4 ae 3f e4 24 c3 3e 8a 3f c2 ab 4d e2 df 11 bf 07 55 9f 1e c4 Data Ascii: GG4A8b0N5-.cBRAz1@{EIJ}.xa\uXS[_ar{YFk`7/R~lsu@\|G.,.>SQ,S"9S5fuB#DBHZ@5RcpqFx?$>?MU
2024-04-18 01:09:03 UTC	1255	IN	Data Raw: a9 b5 db b8 ef 44 ad 24 d0 df 5b 9d af b9 4a 9f 9d 33 8e bf dd a8 ad 91 1c c9 b4 2b 7c fd 54 e7 b0 f4 ac bd 5b 4d b2 36 d2 4b f6 60 b2 82 30 57 8a 98 cd 2d d1 36 d0 f5 8f 04 6a f7 56 16 6f 05 bd cd b6 aa 66 b8 bc b9 9e 4b 1b 85 97 73 48 9f bb 1b 73 bb ef 0e e3 8c d7 9d db c4 f6 fa 7d 8c 4c 0a b2 1e 41 1c fd e3 5c bd 8e 94 6e 03 cb 1c a6 27 8b 90 45 76 12 3c 93 47 6a 64 c1 75 da ac 71 d4 8a 55 1a 63 8a 1c ea 3e d2 47 7c 0e bf 5a 92 ca 32 86 e3 24 8c ca bf fa 09 a2 6c fd a8 71 fc 23 35 25 ae 76 5c 13 da 55 c7 fd f3 58 74 28 ac 01 21 f2 46 48 3f d2 9b 02 3f f6 5f 5d bf ba e0 ff 00 c0 4d 38 2e 43 f6 20 1e dd 7a 53 89 07 4a 87 9f f9 60 f9 fa 81 4c 7b 20 8a 35 1a 55 99 5c fd d5 24 9f a1 15 a9 77 cc 67 9e 30 7f 91 ac ed 85 b4 5b 58 f3 82 51 6a e5 c9 cc 7b 3b e3 Data Ascii: D$[J3+\|T[M6K`0W-6jVofKsHs}LA\n'Ev<GjduqUc>G\|Z2$lq#5%v\UXt(!FH??_]M8.C zSJ`L{ 5U\$wg0[XQj{;
2024-04-18 01:09:03 UTC	1255	IN	Data Raw: 8f 14 08 17 79 ba 52 c4 9c 01 f2 9f f3 f8 55 1f 85 5a 6d cd 96 bd a8 f9 e9 b4 1b 60 01 1c 83 cd 7b 98 17 3a 94 b9 e5 be a7 ce 66 4e 14 aa ba 51 ec 65 78 b5 33 e1 af 0e 37 fd 3b b8 ad ff 00 04 91 1e b3 6c d9 1c 44 7f 95 65 f8 b2 d9 bf e1 16 d0 39 fb 90 b8 3f 95 69 78 5f 8b c8 1f 3c f9 7f d2 bd 18 ed 23 c7 93 bb 89 0e ac a4 5e dc b8 1f 7a e1 ff 00 56 35 83 a9 bc 02 19 bc c9 31 26 d7 50 bb 7a ee 00 0f e4 6b a5 d4 a3 0f 34 ac 7b bb 1c fe 35 cc ea 76 db dd 9b af af ad 78 b2 d2 47 bf 4b 5a 69 18 9a 3b 79 7a a4 0c 1c a9 59 07 cd 5d 0f 87 6e a4 8e da cd 4c fb 04 12 dc 34 4c 46 44 64 a0 f9 87 e3 cd 61 7d 92 40 e1 86 40 1d eb 42 d9 5e 28 94 ab 64 0c 9d ad d3 9e 0d 68 9a 06 89 f5 a9 a0 36 ba a0 5b 78 d2 e1 ae a3 75 9d 78 6c 6d 39 03 d0 12 33 f8 d6 55 9e a5 a9 2e 23 Data Ascii: yRUZm`{:fNQex37;lDe9?ix_<#^zV51&Pzk4{5vxGKZi;yzY]nL4LFDda}@@B^(dh6[xuxlm93U.#
2024-04-18 01:09:03 UTC	1255	IN	Data Raw: 9e a5 ba 15 93 90 30 57 8f c8 9a b7 e2 01 a4 6a 5a 9f 87 f4 9d 43 47 8a 79 35 2f de 99 76 81 b4 20 05 94 9e bc e6 ba 55 46 e2 b9 95 ce 7d 9f ba cf 2c d3 fc 79 ae e9 71 c7 14 d2 41 7c 33 cf 98 bf 36 df 4c 8f ad 74 da 57 c4 cd 32 55 10 5e d8 cf 6e ee c3 e6 42 1c 0e bf 8d 65 7c 6a f0 ae 97 e1 fb cd 3e 5d 1e 16 8a 1b a4 72 ca 5c b0 0c a4 74 cf b1 ae 12 dd 7c b4 33 b0 e9 90 9e e7 d6 b0 fa b5 1a de f7 2d 8e 98 62 ea d3 5b 9e a3 f1 1b c4 3a 3e a9 e1 c6 fe ce d4 12 49 be d3 19 f2 c6 43 0c 06 c9 c5 37 e0 95 d5 c5 c6 b7 a8 c5 2c cf 22 0b 61 8d c7 38 e6 bc ba 2c b4 b8 51 b9 8f 4e 6b db bc 05 a7 c3 e1 9f 05 cf ad dc 26 27 b9 88 3e 3b 91 8c 2a 8f a9 35 d1 86 a7 c9 06 a3 b1 c3 8e ab ce ef 25 ad 8a 3e 20 02 4f 0b e8 ac 00 0a 23 74 fa 9c 1f f0 a9 3c 3c 36 dc 42 31 fc 1e Data Ascii: 0WjZCGy5/v UF},yqA\|36LtW2U^nBe\|j>]r\t\|3-b[:>IC7,"a8,QNk&'>;*5%> O#t<<6B1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.16	49773	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:09:07 UTC	1329	OUT	POST /recaptcha/api2/replaceimage?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 5194 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:09:07 UTC	5194	OUT	Data Raw: 76 3d 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 26 63 3d 30 33 41 46 63 57 65 41 36 49 61 64 72 42 42 79 49 2d 7a 7a 65 33 4d 37 47 4f 4a 30 4b 35 30 49 32 76 38 31 48 64 4a 56 7a 5a 54 53 38 34 34 73 67 30 63 62 46 39 7a 4b 4c 30 53 4d 69 58 6d 35 58 5f 69 50 70 5f 44 68 65 63 6d 4f 35 6d 6d 32 48 75 32 33 4f 50 59 2d 62 76 77 78 30 79 6b 74 4f 52 33 5f 41 36 4c 58 4e 63 49 44 6f 67 6b 62 62 43 69 74 49 55 54 44 4d 6e 41 68 4e 71 63 4c 63 71 6f 35 50 76 36 5a 49 59 67 35 6b 64 69 36 37 4b 42 4e 63 53 72 67 71 6d 70 78 37 54 4a 55 69 33 58 4f 6a 77 6c 33 6b 2d 59 69 44 6f 5a 59 4b 76 34 77 6a 70 69 4d 76 68 79 51 33 35 4d 52 66 47 54 37 5f 48 4d 59 62 41 34 56 7a 4e 33 66 55 65 76 57 5f 59 4b 6d 67 77 42 72 31 75 42 31 4d 6e Data Ascii: v=rz4DvU-cY2JYCwHSTck0_qm-&c=03AFcWeA6IadrBByI-zze3M7GOJ0K50I2v81HdJVzZTS844sg0cbF9zKL0SMiXm5X_iPp_DhecmO5mm2Hu23OPY-bvwx0yktOR3_A6LXNcIDogkbbCitIUTDMnAhNqcLcqo5Pv6ZIYg5kdi67KBNcSrgqmpx7TJUi3XOjwl3k-YiDoZYKv4wjpiMvhyQ35MRfGT7_HMYbA4VzN3fUevW_YKmgwBr1uB1Mn
2024-04-18 01:09:07 UTC	483	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Date: Thu, 18 Apr 2024 01:09:07 GMT Expires: Thu, 18 Apr 2024 01:09:07 GMT Cache-Control: private, max-age=0 X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 01:09:07 UTC	772	IN	Data Raw: 61 36 36 0d 0a 29 5d 7d 27 0a 5b 22 64 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 36 69 41 6b 58 77 33 71 78 30 4f 5f 2d 48 39 36 58 56 64 56 61 33 59 65 47 48 75 38 39 45 39 36 61 77 53 34 4f 59 67 52 43 35 67 4f 46 6a 5a 69 57 30 31 42 7a 32 35 72 54 4e 75 54 56 59 6e 6a 57 52 4f 4c 78 4b 38 34 62 34 49 39 67 66 4f 70 50 6c 46 4f 54 4d 63 35 63 76 64 6e 4f 41 35 62 78 43 59 53 59 45 33 46 41 39 59 78 73 74 70 5f 61 66 42 50 2d 37 49 47 4d 33 47 42 6b 46 30 64 7a 36 78 4e 70 4b 4e 50 72 49 6d 57 63 79 78 58 59 36 4a 37 45 53 6b 54 54 76 33 38 67 32 73 56 6a 7a 6e 34 59 70 32 38 4e 30 5a 36 47 47 74 54 6d 4c 6c 62 57 4c 46 57 50 32 78 77 6b 32 68 7a 33 33 63 51 78 44 45 53 69 63 55 55 46 2d 73 53 38 38 74 71 6c 64 38 33 6d 72 44 51 52 66 47 4e 63 6c 39 Data Ascii: a66)]}'["dresp","03AFcWeA6iAkXw3qx0O_-H96XVdVa3YeGHu89E96awS4OYgRC5gOFjZiW01Bz25rTNuTVYnjWROLxK84b4I9gfOpPlFOTMc5cvdnOA5bxCYSYE3FA9Yxstp_afBP-7IGM3GBkF0dz6xNpKNPrImWcyxXY6J7ESkTTv38g2sVjzn4Yp28N0Z6GGtTmLlbWLFWP2xwk2hz33cQxDESicUUF-sS88tqld83mrDQRfGNcl9
2024-04-18 01:09:07 UTC	1255	IN	Data Raw: 67 64 42 5a 57 5f 55 6c 2d 78 59 64 77 72 74 2d 75 68 35 63 74 53 44 45 62 59 51 4b 30 4d 6b 5a 49 54 6f 4f 57 63 6f 47 54 33 33 76 6c 34 44 49 6d 6e 6e 38 4b 49 6d 76 7a 41 61 6f 35 50 34 76 69 62 6e 66 32 59 39 4c 37 4b 32 72 39 42 36 32 66 4f 66 72 44 69 4d 4c 4a 77 77 2d 52 34 72 4b 32 78 49 66 6f 38 6a 4c 59 74 78 31 32 34 41 55 4e 57 54 4f 41 59 65 67 32 66 39 75 37 6b 50 5f 66 43 2d 69 43 55 54 52 71 6f 6d 6b 4c 35 6e 4a 72 56 45 66 35 4d 31 4d 44 71 45 4d 51 44 52 78 2d 46 77 4d 36 5a 75 42 4f 75 58 6b 67 75 51 36 31 78 4b 5f 74 61 45 72 4e 36 76 71 63 52 62 55 43 33 4d 59 44 63 46 64 44 62 34 31 6c 64 74 57 41 58 4d 32 59 67 42 67 32 56 78 53 37 46 59 54 72 54 59 51 62 39 67 69 77 54 6d 32 67 4c 58 53 53 49 57 5a 58 65 71 61 34 59 75 67 6c 54 77 Data Ascii: gdBZW_Ul-xYdwrt-uh5ctSDEbYQK0MkZIToOWcoGT33vl4DImnn8KImvzAao5P4vibnf2Y9L7K2r9B62fOfrDiMLJww-R4rK2xIfo8jLYtx124AUNWTOAYeg2f9u7kP_fC-iCUTRqomkL5nJrVEf5M1MDqEMQDRx-FwM6ZuBOuXkguQ61xK_taErN6vqcRbUC3MYDcFdDb41ldtWAXM2YgBg2VxS7FYTrTYQb9giwTm2gLXSSIWZXeqa4YuglTw
2024-04-18 01:09:07 UTC	642	IN	Data Raw: 4c 4a 56 6e 70 45 32 30 51 39 50 41 79 4c 6d 69 52 4e 43 4a 79 38 48 55 46 48 67 79 6a 45 58 52 36 2d 4b 34 68 4e 76 39 66 66 6b 72 70 5f 52 6d 34 30 63 72 45 4b 4a 61 65 79 75 7a 5f 41 5a 61 4b 4e 6b 36 6c 79 64 67 6f 55 2d 4c 61 30 32 33 43 6b 5a 61 4e 31 51 38 63 6c 6e 35 75 6f 4a 35 6c 6e 49 44 32 74 76 53 44 33 4b 39 5a 34 75 43 6f 6d 37 54 71 5a 7a 57 74 63 74 53 48 7a 4d 52 6a 43 39 4b 66 4c 7a 64 45 62 65 76 56 49 6e 48 46 6c 69 63 47 68 5f 6b 4a 47 34 42 6b 6a 6d 5f 56 6a 79 45 4a 49 35 46 37 30 68 78 70 4e 69 52 67 6e 73 47 33 48 6c 73 69 33 77 79 73 2d 62 54 71 77 79 37 44 31 30 47 2d 37 44 74 56 30 6d 6b 78 44 63 54 50 34 31 67 4a 4f 51 33 76 68 5a 4b 32 51 4c 79 57 68 65 79 70 61 73 34 41 47 33 35 32 30 43 54 34 76 35 6f 42 57 74 42 6c 4a 59 Data Ascii: LJVnpE20Q9PAyLmiRNCJy8HUFHgyjEXR6-K4hNv9ffkrp_Rm40crEKJaeyuz_AZaKNk6lydgoU-La023CkZaN1Q8cln5uoJ5lnID2tvSD3K9Z4uCom7TqZzWtctSHzMRjC9KfLzdEbevVInHFlicGh_kJG4Bkjm_VjyEJI5F70hxpNiRgnsG3Hlsi3wys-bTqwy7D10G-7DtV0mkxDcTP41gJOQ3vhZK2QLyWheypas4AG3520CT4v5oBWtBlJY
2024-04-18 01:09:07 UTC	1255	IN	Data Raw: 61 39 39 0d 0a 66 5f 72 64 2d 57 47 36 36 65 6b 41 79 6e 55 54 39 70 55 52 5f 51 73 64 65 59 49 5f 46 6f 66 4c 37 36 2d 52 5f 79 47 4a 61 6f 49 33 50 6a 5a 6d 49 64 74 4e 63 56 32 6a 79 34 4d 2d 4e 6c 4d 68 79 79 39 32 62 6a 68 64 5f 62 64 66 36 4f 31 42 77 30 4d 64 76 43 50 6a 30 46 6d 54 2d 6e 45 38 73 55 42 78 59 65 63 75 37 69 30 4e 61 44 41 45 6f 32 6f 68 73 4a 35 70 4f 61 78 6e 47 7a 2d 51 75 48 6d 4e 6c 6c 70 53 4b 4c 58 78 32 66 6d 74 49 64 52 5a 32 59 64 46 6e 6b 46 6b 37 47 75 58 32 53 61 42 54 74 66 61 5f 65 71 37 32 50 77 76 6e 71 5a 35 43 39 4d 77 4e 5a 32 77 64 6e 32 61 78 59 72 4a 51 55 76 4d 58 4c 6b 39 53 54 36 4d 5f 51 72 7a 39 74 76 44 4d 33 5f 49 32 41 51 6e 52 77 33 51 53 48 74 58 59 54 4e 4e 32 79 70 67 30 70 69 44 43 76 69 43 55 42 Data Ascii: a99f_rd-WG66ekAynUT9pUR_QsdeYI_FofL76-R_yGJaoI3PjZmIdtNcV2jy4M-NlMhyy92bjhd_bdf6O1Bw0MdvCPj0FmT-nE8sUBxYecu7i0NaDAEo2ohsJ5pOaxnGz-QuHmNllpSKLXx2fmtIdRZ2YdFnkFk7GuX2SaBTtfa_eq72PwvnqZ5C9MwNZ2wdn2axYrJQUvMXLk9ST6M_Qrz9tvDM3_I2AQnRw3QSHtXYTNN2ypg0piDCviCUB
2024-04-18 01:09:07 UTC	1255	IN	Data Raw: 4b 49 7a 68 54 45 34 74 43 6a 6d 69 72 54 74 78 35 58 63 6c 5f 4e 33 79 77 7a 57 67 4a 50 65 62 4e 54 5a 6f 5a 7a 61 50 39 77 49 6d 30 79 32 68 6c 62 6e 49 37 70 34 43 71 6c 50 50 77 71 75 48 4a 36 4f 46 52 44 4d 6f 2d 70 63 75 46 6b 72 47 6a 5a 52 49 6a 7a 5f 4e 53 58 34 44 56 63 35 77 59 61 48 48 53 64 64 2d 4f 38 32 79 2d 4e 64 34 66 51 67 66 71 53 5f 5a 6d 75 4d 58 5a 4c 4e 75 50 6b 4d 45 42 4f 6e 64 6f 72 61 76 31 42 4a 31 79 6a 4c 46 41 56 71 75 72 65 66 30 51 31 61 38 46 4d 6a 49 67 51 31 37 75 74 37 6b 4f 38 72 75 2d 6c 74 78 34 4d 64 48 65 34 56 67 63 36 4b 7a 31 39 47 64 48 74 38 57 55 41 70 71 2d 47 63 66 44 58 78 6c 5a 7a 39 44 36 45 74 31 79 43 41 33 5f 36 44 52 75 55 4d 77 72 6f 74 52 2d 69 43 73 6b 6b 74 6b 69 36 5f 54 78 72 6d 56 41 33 63 Data Ascii: KIzhTE4tCjmirTtx5Xcl_N3ywzWgJPebNTZoZzaP9wIm0y2hlbnI7p4CqlPPwquHJ6OFRDMo-pcuFkrGjZRIjz_NSX4DVc5wYaHHSdd-O82y-Nd4fQgfqS_ZmuMXZLNuPkMEBOndorav1BJ1yjLFAVquref0Q1a8FMjIgQ17ut7kO8ru-ltx4MdHe4Vgc6Kz19GdHt8WUApq-GcfDXxlZz9D6Et1yCA3_6DRuUMwrotR-iCskktki6_TxrmVA3c
2024-04-18 01:09:07 UTC	210	IN	Data Raw: 30 36 41 46 63 57 65 41 36 71 6b 34 36 79 58 31 76 30 77 73 58 31 5a 33 71 59 43 65 5f 56 6f 51 6c 53 58 31 4e 5a 6f 2d 43 74 5f 55 45 63 4a 34 52 43 49 33 77 31 35 74 37 59 65 2d 50 49 2d 35 42 55 70 77 6e 69 58 55 71 49 4f 61 61 57 6e 5f 55 2d 6a 6a 53 4d 68 55 54 44 73 5f 59 71 53 72 57 6e 63 4a 49 6d 63 36 7a 6a 72 67 6d 61 6c 45 48 35 34 5a 47 51 63 4b 45 37 54 67 4a 52 5f 78 61 4c 74 75 36 45 58 74 62 55 5a 55 77 79 31 62 43 61 31 4d 43 5a 49 38 45 32 72 2d 4a 32 6f 4c 39 76 42 67 66 51 4e 61 41 39 46 66 6c 61 76 33 2d 6c 34 42 4c 50 58 49 51 6f 2d 6d 6b 61 77 59 65 51 7a 68 75 5a 54 5a 49 50 68 57 75 6e 22 5d 0d 0a Data Ascii: 06AFcWeA6qk46yX1v0wsX1Z3qYCe_VoQlSX1NZo-Ct_UEcJ4RCI3w15t7Ye-PI-5BUpwniXUqIOaaWn_U-jjSMhUTDs_YqSrWncJImc6zjrgmalEH54ZGQcKE7TgJR_xaLtu6EXtbUZUwy1bCa1MCZI8E2r-J2oL9vBgfQNaA9Fflav3-l4BLPXIQo-mkawYeQzhuZTZIPhWun"]
2024-04-18 01:09:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.16	49774	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:09:07 UTC	1484	OUT	GET /recaptcha/api2/payload?p=06AFcWeA7h1gq_qS7al9HO7PQpzGTS5JWeX2FsfH159FjvTdvn_zUmpWU8JVsvm7trvqlPZ5_YAo-57ycQzgvbKn81Fot6-oIbceP5fjtRi2ZywiuvEXdVQJyV1I7MaV9pKPWF5fyGEszk2-PYs-dy74nFG0dBCsG9C4iuZVDbahfIj7unSSccRNQyV5eBz7q1hBqAgrSBfG_q&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=2 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:09:07 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Thu, 18 Apr 2024 01:09:07 GMT Date: Thu, 18 Apr 2024 01:09:07 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 01:09:07 UTC	836	IN	Data Raw: 38 46 43 42 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 8FCBJFIFC!"$"$C"}!1AQa"q
2024-04-18 01:09:07 UTC	1255	IN	Data Raw: 16 da 34 21 88 c3 b7 ad 73 d1 ea 2d bd 94 93 b5 81 cd 53 b9 9a 49 1b 2e 6a 08 cf cf 5d 9c 96 47 33 ab ef 1d 17 87 f5 d8 6c 6c a6 86 e4 1d ca 4e 30 33 c5 6d 41 af da 36 9a d3 ee 2b fd de 39 ae 36 3b a8 d5 1c ba 06 0b c1 e2 a7 bb d4 6d 8d b0 8e 2d a0 81 d0 8a e4 9c 2c ee 76 c2 a6 85 6b eb c6 b9 bb 79 0b 86 dc 7e 5a 9b 4e bf 16 e4 ab 77 f4 ac 68 9c bb bb 05 e0 75 c5 5b 85 51 86 ec d6 75 e5 b1 db 83 5c ed 90 eb 33 bc d7 e5 80 e3 ad 3b 45 de 44 a4 e7 9e 95 6a ea 3b 24 b1 dc 43 19 8d 52 b4 71 1a 3b 2b 15 cd 63 09 5d 0a b4 79 65 61 2f 9c 63 6f 3e 94 68 ca d1 ce 77 03 c8 a8 23 8d e6 bf 0b e6 77 cf 35 d0 69 76 2e 4e ef 31 78 a8 94 b9 62 3a 14 ee ee 6d db 03 e5 a1 f6 15 67 9c 0a 86 01 85 50 4e 70 2a 49 0e 31 5e 64 f5 67 b5 07 a0 e1 9c f6 a9 63 35 5c 37 6a 91 1a 84 Data Ascii: 4!s-SI.j]G3llN03mA6+96;m-,vky~ZNwhu[Qu\3;EDj;$CRq;+c]yea/co>hw#w5iv.N1xb:mgPNp*I1^dgc5\7j
2024-04-18 01:09:07 UTC	1255	IN	Data Raw: 19 e0 ae 6a 60 96 e6 15 9d e4 49 61 21 7b fd 9e f5 d8 5a 7c a5 7e 95 c7 e8 c0 35 fb b1 3c 83 c5 76 16 dc 85 27 ae 2b 9f 10 f4 3b 70 bb 17 91 ba 52 ca d9 51 f5 a8 d7 03 81 4a 79 1c d7 12 47 a4 de 82 83 fb df c2 a7 46 aa e0 0d f9 ef 52 43 ce 73 da 86 89 4f 52 c0 6a 91 1a a1 51 c0 34 f8 ff 00 d6 00 7a 62 a2 fa 95 b1 68 38 08 4f 3f 85 73 5e 31 6f f4 75 f2 7a 13 ce 6b 7d 5f 08 cc 7b 57 33 e2 e7 1e 5e 1f ee e3 3c 56 f4 8c 2b cb 42 a0 d2 5a f3 c3 ef 72 36 8f 2b a0 07 ad 50 97 c8 4b 68 36 23 07 4e 4f d6 ae 79 a2 2d 22 36 89 dd 53 19 c6 6a 8d cc a0 94 f9 c0 04 02 01 ae a6 db 56 3c 97 6b 9d 6c 77 98 f0 ab a8 95 77 c9 fc 27 bd 73 57 f0 b6 c8 40 d9 f2 2e 68 ba 92 55 f2 95 36 ed c7 a5 1c c9 32 06 ef 5c f1 a5 67 73 78 25 61 75 11 2b 08 73 d9 45 3a f1 65 66 8b 1d 80 ab Data Ascii: j`Ia!{Z\|~5<v'+;pRQJyGFRCsORjQ4zbh8O?s^1ouzk}_{W3^<V+BZr6+PKh6#NOy-"6SjV<klww'sW@.hU62\gsx%au+sE:ef
2024-04-18 01:09:07 UTC	758	IN	Data Raw: bc c5 5d b9 39 ef 4a f9 12 96 0a 3f 1a ae 67 61 75 8c 74 a9 52 72 d7 3b 5b bd 3d 91 93 8b 6c 91 4e e9 54 6d 18 cd 4f 2e c1 70 73 55 a0 99 45 ea 8c 70 0d 36 77 2d a8 b1 07 8c d4 36 82 30 77 25 95 51 a7 52 be bc d3 6e c1 55 67 56 18 cf 4a 42 1b ed 04 a1 e0 9e 6a 1d 41 4f 94 c4 1f ad 67 0d ce 89 59 23 3e 28 e5 9b 58 85 88 8f 6e f1 93 9e 6b af d5 e6 68 f5 44 e4 6c 08 31 5c 3e 99 03 a6 b3 1c 8e 1f 66 e1 df 8a eb f5 47 57 bd 25 be e8 41 5b 4e 0a 51 39 5b bb 12 fd d6 79 15 d4 f0 07 7a a3 28 2c ac 9c 10 c6 ad 47 e5 a2 73 ce 47 15 46 e6 65 82 40 07 3b 8e 6b cf 54 b9 5e 84 f2 eb 61 89 6c 90 be 48 07 1c d3 f5 2b 8f 31 03 a1 da d8 c5 20 b9 f3 6e 44 6a b9 2d c0 14 eb 9b 79 76 98 cc 78 2b cd 66 e0 d3 14 a9 b5 b1 9f 32 e4 2b 93 92 07 35 34 4c 9f 2e 03 73 ed 4c 94 7e eb Data Ascii: ]9J?gautRr;[=lNTmO.psUEp6w-60w%QRnUgVJBjAOgY#>(XnkhDl1\>fGW%A[NQ9[yz(,GsGFe@;kT^alH+1 nDj-yvx+f2+54L.sL~
2024-04-18 01:09:07 UTC	1255	IN	Data Raw: ca d5 2b 60 16 db 20 7c c6 ae 46 d8 74 06 b0 92 d4 f4 28 bb 40 ad aa b6 2e d0 1e 84 55 45 60 b3 30 3d 40 e9 56 75 71 9b e8 d0 f4 ce 45 54 2a 1a f6 47 6c e4 0c 64 74 ad a1 b1 c5 53 72 e7 87 32 f3 b3 37 f7 b8 ae a1 1f 6a 57 2d e1 e6 02 67 20 96 e7 ae 3a 57 44 58 f9 79 cf 15 c9 55 6a 77 e1 f4 45 94 97 3c 54 8a c4 1e 3b d6 62 4c 03 55 b8 ae 33 e9 59 a5 a1 d2 a5 a9 a2 98 23 3d e9 d5 5a 39 01 e9 d6 a6 56 cf 5a ca 5b 9a 93 06 e0 53 81 a8 b8 a7 a6 33 53 60 52 1c 4f ad 75 36 25 63 4b 71 9e a9 5c 8d c3 15 53 b7 ad 23 78 a9 60 92 38 65 8f 2d 18 db 9a ea a0 8f 3f 15 73 52 15 2f e2 de 54 10 2b a5 82 de 09 6e 98 bc 60 05 eb c5 79 ed 8e b5 1c 3e 23 fb 5c c4 f9 64 64 0c d7 4f 61 e2 4b 19 ee 64 71 20 51 8e 01 35 d6 e4 79 d2 6c d7 97 47 b0 96 19 5b ca 0c d9 e0 55 29 3c 39 Data Ascii: +` \|Ft(@.UE`0=@VuqET*GldtSr27jW-g :WDXyUjwE<T;bLU3Y#=Z9VZ[S3S`ROu6%cKq\S#x`8e-?sR/T+n`y>#\ddOaKdq Q5ylG[U)<9
2024-04-18 01:09:07 UTC	1255	IN	Data Raw: d9 95 5f 95 35 51 2e 71 8e 0f b5 3e 80 ab 6a 6a c6 30 33 53 46 4f ad 67 c5 73 91 b4 f1 9a b3 1b b0 eb 9f ca b3 3a 63 59 5b 52 e6 ee 33 9a 92 3c b0 2c 3a 0a b7 a4 e9 b3 de c4 64 44 18 1e b5 a7 ff 00 08 c5 fa c2 1d a3 24 39 e3 15 8c ab 47 62 95 58 a7 73 9c 9d b2 bb 88 60 0d 72 f7 e8 64 d4 57 e6 18 63 93 5d fe a5 a1 dd c1 85 68 1b 00 67 a1 ae 52 5d 16 e7 ed be 69 81 f0 3d 8d 69 4a b4 11 95 6f 7c cb 9d 5d a6 8c 10 72 b9 c9 f6 a8 6d 37 fd a4 9c 31 03 35 aa d6 72 99 ff 00 d5 be 39 ce 2a bd 9d a4 e2 66 da 8c 06 4f 51 5d 2e b4 0e 3f 65 a9 52 c9 a6 17 32 9d f2 2a 7d 6b 47 4f be ba 40 e4 dc 31 c7 dd e6 a1 b6 82 65 92 62 c0 10 3a d4 96 a8 76 bf ee e8 95 65 d0 de 34 95 8b f6 ba cd e8 6d fb c9 22 ac da 78 92 f7 63 c4 e4 60 72 6b 2e dd 38 6e 29 b1 22 8f 34 b7 5c 71 4d Data Ascii: _5Q.q>jj03SFOgs:cY[R3<,:dD$9GbXs`rdWc]hgR]i=iJo\|]rm715r9fOQ].?eR2}kGO@1eb:ve4m"xc`rk.8n)"4\qM
2024-04-18 01:09:07 UTC	1255	IN	Data Raw: 3d 5a bc 4b 41 f1 9e ad 04 51 59 4f 22 bc 08 7e 5c af 2b f8 d5 87 d7 e5 6d 57 ed 12 e5 a2 8f ae 2b 8d 41 c2 57 29 d5 e6 67 d0 9e 19 f0 0f 87 cd ae a0 21 d4 a2 21 73 e5 e5 fb 76 a5 ba f0 ea 5b 68 2c 96 fa 94 2d 3f f0 21 6e 7f 0a f0 9d 33 c6 d7 10 4c eb 1b 30 27 a0 ff 00 66 ba 2d 57 c5 16 2d 6d 0b ad cb ac 84 06 0c 0f 7e f5 cf 53 0e dc ae 68 a7 cc ae 76 53 f8 6f 5d 6b cb 64 f3 12 67 7e 4a 93 9a bd 7d e1 fb cb 48 e4 57 d2 c4 f8 43 bd 94 74 ae 73 c3 1e 26 96 e7 37 70 5d b3 4a 8b c1 66 e9 50 45 f1 4f 59 b3 d4 ae 20 6b 84 da ca 77 6f 19 c9 a9 96 1f 41 d3 ac ef 66 60 f8 4a ce 69 f5 cb f0 34 f9 a6 88 b9 1b 15 77 15 ad 98 74 78 96 de ea 49 34 c6 45 85 89 60 57 9a cb f8 73 f1 0e 6d 07 5e bf bb e0 99 e4 dc 49 5e 2b af b2 f8 9d a3 49 f6 c5 b8 4f 9a e5 c9 90 e3 ad 0e Data Ascii: =ZKAQYO"~\+mW+AW)g!!sv[h,-?!n3L0'f-W-m~ShvSo]kdg~J}HWCts&7p]JfPEOY kwoAf`Ji4wtxI4E`Wsm^I^+IO
2024-04-18 01:09:07 UTC	1255	IN	Data Raw: e6 f5 58 47 8f 97 d2 9d 6d 69 32 dc c8 5e 3e 3e 95 4b 11 16 ac 3e 56 cc f2 43 4b 2e dc 91 93 9a 8d 54 0b 56 3b 87 27 8f 6a b0 62 94 cf 22 aa 60 73 93 8a 85 2d f6 a3 2a 6e 62 4f 39 15 6e 71 5d 42 c2 ef 48 cc 4a 4e 49 e7 8a b0 87 63 c8 18 e7 8e d5 59 a3 63 75 18 29 80 07 26 9e 1c 93 29 3f 4a 4a 49 89 a6 3b 71 fb 30 3c 9c 9a 61 2c 6e 90 0c e4 0e 69 c7 3f 67 50 9d 77 73 48 a0 fd b3 23 fb bc d5 59 0e da 16 04 b9 c9 24 f1 53 9b a9 16 30 88 c4 6e 18 6a cd 67 50 1b d7 34 ad 21 ca d4 ba 77 32 51 b3 ba 34 7c d7 13 2f cc 72 17 39 1d ea cd b5 c4 f7 c7 c8 93 08 17 85 c5 65 19 48 98 0f 6c d4 96 f3 97 de e8 db 0a 9a 89 53 2a 0b 94 dc 8a e3 53 d1 13 6a 4c d8 7e a0 1e 31 51 4d 77 2d d9 f3 66 93 2f fa 8a ab 77 a8 b5 c4 0a 25 24 95 5c 0a ad 14 84 5c 27 39 07 b5 66 e9 97 25 Data Ascii: XGmi2^>>K>VCK.TV;'jb"`s-nbO9nq]BHJNIcYcu)&)?JJI;q0<a,ni?gPwsH#Y$S0njgP4!w2Q4\|/r9eHlSSjL~1QMw-f/w%$\\'9f%
2024-04-18 01:09:07 UTC	1255	IN	Data Raw: 79 23 a7 5f 86 36 cf 6b 6d 3c 4d cd c2 82 df 53 54 26 f8 5c 4d d4 88 8c 0e c1 d8 55 4d 0b e2 95 cd 82 45 6f a8 c4 d3 47 0f 08 47 15 d4 69 7f 13 f4 9b 9b a6 29 1b 89 24 e3 9a 53 8e 26 2e fd 0c dd 3d 6c 70 77 bf 0d b5 01 ba 68 d4 b2 83 8c 62 b3 65 f8 7f aa a5 c3 2c b0 b0 f3 39 1f 25 7b 6d bf 8a 34 e9 6c 9a 10 ea 99 39 dc 4d 6a 47 ac e9 37 77 36 ee 2e a0 61 1a e3 05 87 5a 3d bd 78 a3 29 d3 68 f9 be 5f 04 5f a2 cc 16 39 3f 74 72 7e 5a c7 9b 48 b9 8e 51 ba 16 04 7a af 5a fa ae 35 d3 ae 4d d9 fd c9 2e bd b1 d6 a8 5e f8 57 49 9e da 29 1e 14 2f ea 2a a1 98 d6 4f 51 72 34 8f 95 9e ca 71 be 2f 2c f5 f4 a8 a6 b5 70 a8 59 47 06 be 98 bc f0 36 91 2e a2 23 8e 05 54 75 f9 ab 1a fb e1 ad 84 e9 37 94 36 6c 3c 71 5d 51 cd 5a e8 4a 81 f3 eb c7 27 db 14 ec 38 ed 48 ea 44 12 Data Ascii: y#_6km<MST&\MUMEoGGi)$S&.=lpwhbe,9%{m4l9MjG7w6.aZ=x)h__9?tr~ZHQzZ5M.^WI)/*OQr4q/,pYG6.#Tu76l<q]QZJ'8HD
2024-04-18 01:09:07 UTC	1255	IN	Data Raw: 26 e9 2e 04 f2 6d 51 d0 64 74 ad f6 d4 ee 27 b3 b7 8e 6b a1 24 c0 7e e9 40 fe 75 4f 54 bf 4b 59 e3 79 8b 0f 97 90 bd 8d 37 56 4f dd 68 e7 fa a5 15 a9 a7 2c 20 db f9 23 00 9e 0f 38 35 c9 cf 1d c2 5e c8 d6 f3 4a a3 77 f7 ba 56 96 9b 7e 35 38 e4 8b 79 32 03 90 7a 1c 55 1d 20 19 b5 0b a8 65 93 cb e7 2b 9e f4 d4 6f d0 e5 af 86 a6 f6 34 5b 50 d5 ad 2c b3 15 e4 80 9e 73 9a d4 d0 3c 49 e2 36 84 86 bc 2c 07 4d d5 93 a8 17 10 2a e3 f4 ad 9d 0e 12 b6 c8 48 fb c2 94 a8 c0 e1 f6 26 97 fc 27 5a cd 9c 81 e6 41 20 c6 38 eb 57 ac fe 23 b3 21 69 6d 98 06 eb 58 1a 84 0a 57 27 18 07 9e f5 d0 78 7f e1 ce a9 a8 78 76 4d 64 5b c8 b6 a5 f0 1d b8 53 51 0c 2c 64 ec cc e7 4a 31 dc d9 b0 f1 fe 99 77 14 69 28 68 c0 6f 6a d2 87 c5 7a 2d ce a0 25 fb 4c 61 00 c1 0c 46 6b b7 f8 6f f0 07 Data Ascii: &.mQdt'k$~@uOTKYy7VOh, #85^JwV~58y2zU e+o4[P,s<I6,M*H&'ZA 8W#!imXW'xxvMd[SQ,dJ1wi(hojz-%LaFko

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.16	49775	74.125.136.99	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:09:07 UTC	879	OUT	GET /recaptcha/api2/replaceimage?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:09:08 UTC	473	IN	HTTP/1.1 405 Method Not Allowed Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 18 Apr 2024 01:09:08 GMT Content-Type: text/html; charset=utf-8 Allow: POST X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 01:09:08 UTC	782	IN	Data Raw: 36 37 36 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 Data Ascii: 676<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;c
2024-04-18 01:09:08 UTC	879	IN	Data Raw: 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 Data Ascii: color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.c
2024-04-18 01:09:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.16	49776	74.125.136.99	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:09:08 UTC	1088	OUT	GET /recaptcha/api2/payload?p=06AFcWeA7h1gq_qS7al9HO7PQpzGTS5JWeX2FsfH159FjvTdvn_zUmpWU8JVsvm7trvqlPZ5_YAo-57ycQzgvbKn81Fot6-oIbceP5fjtRi2ZywiuvEXdVQJyV1I7MaV9pKPWF5fyGEszk2-PYs-dy74nFG0dBCsG9C4iuZVDbahfIj7unSSccRNQyV5eBz7q1hBqAgrSBfG_q&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=2 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:09:08 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Thu, 18 Apr 2024 01:09:08 GMT Date: Thu, 18 Apr 2024 01:09:08 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 01:09:08 UTC	1255	IN	Data Raw: 38 46 43 42 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 8FCBJFIFC!"$"$C"}!1AQa"q
2024-04-18 01:09:08 UTC	1255	IN	Data Raw: e7 ad 5b ba 75 74 45 63 94 0b 9f a5 4d e2 d9 2c 21 75 36 a4 10 c0 1c d6 25 f4 ae d1 a2 c4 78 6f bd 55 18 e8 5d 3a 2e e6 9a c8 52 db cd 52 36 74 6c 9e d4 cf 10 2c 32 5b 42 b6 aa 47 19 26 b3 2e 64 94 46 96 eb 92 9f c5 57 f5 40 56 de dd 23 f9 49 41 4b 93 53 67 49 23 3e ef cc 8c 45 93 b8 8c 54 d3 b9 74 05 41 c3 0c 9a af 71 ba 37 02 43 93 57 95 49 80 05 1d 46 6a f9 0c ea 44 b7 63 7b 0d a5 ba bc b9 d8 3a f1 5a f3 ea 5e 76 98 bd 04 6c 32 87 bd 71 da ec e9 1d 8a a0 fb c3 82 2b 6e 77 31 e8 b6 3b 63 fb c8 29 fb 14 d5 d9 8b 56 1d 63 02 cd 23 79 a0 9f a5 65 6b 10 c4 27 22 3c 8d bd 6b 77 4d 66 b7 24 b8 1f 30 cd 61 6a 4a ed 77 23 1e 84 f1 58 28 da 5a 18 c9 5c ce 7b b4 8b 70 60 df 80 a8 6e 9b ed 92 fc 80 ec 03 bd 49 34 6a 72 08 a5 b5 da 27 2b 8e 31 5d b0 d1 17 05 61 07 Data Ascii: [utEcM,!u6%xoU]:.RR6tl,2[BG&.dFW@V#IAKSgI#>ETtAq7CWIFjDc{:Z^vl2q+nw1;c)Vc#yek'"<kwMf$0ajJw#X(Z\{p`nI4jr'+1]a
2024-04-18 01:09:08 UTC	1255	IN	Data Raw: a4 8b 0c 2b 8d aa 07 4a e7 75 09 1d e2 32 1c 65 06 06 05 79 74 25 29 36 d9 86 c6 55 dc 4a 50 aa 75 14 90 2a 91 b0 29 dd 49 66 db e5 f9 bb 9c 56 b3 c2 b0 38 50 a0 b1 19 ae b7 3e 81 cc 63 dd 26 d5 d8 fc 93 54 2e 6c cb c6 14 fd 45 6b df 14 fb 4a f0 7d f3 4d da 18 90 07 15 ac 6a f2 a1 22 a5 ac 1f 67 b6 33 3f 2e 78 14 8d 04 8c d9 43 80 7a d6 85 b5 ac 8d f2 39 01 3d 4f 6a 82 f3 64 60 c7 1b 1c fa d0 aa 5c 6d 68 54 91 7c b8 ca 9e d5 0d bc 3e 6b 6d ed d6 ad b4 7b d0 2b 1c f1 53 5a 40 10 f4 e7 b5 6a a7 a1 29 33 31 8b 89 0c 64 60 2d 68 5b 7f ab c8 e9 de 99 34 7e 64 a4 01 df 9a b0 d0 34 51 ab 00 70 7b 52 9c ee 8b 6a e2 96 21 08 aa f6 bb a3 95 bd ea f1 08 02 6f e8 69 25 8d 01 25 14 e4 1e 2b 04 d2 29 43 43 13 59 95 cc 89 b7 aa 1a 9f cc 66 8f 91 ce 2a 7b 9b 46 69 3c d0 Data Ascii: +Ju2eyt%)6UJPu)IfV8P>c&T.lEkJ}Mj"g3?.xCz9=Ojd`\mhT\|>km{+SZ@j)31d`-h[4~d4Qp{Rj!oi%%+)CCYf{Fi<
2024-04-18 01:09:08 UTC	1255	IN	Data Raw: 7e b5 a6 6e 99 ac 23 8a 54 05 f1 90 7d ab 07 7b 9d 0d 2e 86 2d dc 06 37 0a 41 20 74 34 e5 b6 55 81 5c 1c 36 6a 69 66 49 25 20 9e 47 6a 2e 3f e3 d9 76 f1 cd 6d 49 36 c9 e4 32 6f 64 78 6e 76 85 c8 23 a8 a6 0b c6 48 8c 4e a0 96 39 ab 33 e0 46 40 c1 6a a5 24 71 90 1c fd e5 e4 d7 43 56 64 49 b4 42 5e 6c f6 fc e8 a9 84 64 8c fa f3 45 59 17 2b eb 18 92 ec 96 fb b9 e6 aa 5a c0 23 56 68 f8 db 5a 30 c0 6f a5 66 20 ed c6 69 b7 56 ad 10 64 5c 8d dd 6b aa 33 48 d3 d9 b6 cc 85 40 43 ee 3c e7 9a 1c 22 c6 b9 19 19 ab a9 a5 dc 9e 99 c1 e7 a5 48 74 c9 80 5f 97 22 93 9a 46 b1 a3 2b 19 cc af e7 a9 07 8e d5 18 23 cb 94 63 e6 cf 5a d2 93 4c b9 fb 47 dd 6c 63 8a 81 ec 27 48 5c 14 20 93 d6 9a 9a 66 73 a5 24 56 60 5a 28 c1 e4 86 a1 cf fa 56 da b8 ba 7c c2 d9 18 1c e0 f4 f7 a8 5e Data Ascii: ~n#T}{.-7A t4U\6jifI% Gj.?vmI62odxnv#HN93F@j$qCVdIB^ldEY+Z#VhZ0of iVd\k3H@C<"Ht_"F+#cZLGlc'H\ fs$V`Z(V\|^
2024-04-18 01:09:08 UTC	1255	IN	Data Raw: 52 b4 98 52 de b5 9c 9b b9 d1 1b 24 4b 72 e8 a8 1f 60 ce 2b 3b 51 70 d0 00 54 63 be 29 f7 77 43 e5 5f 53 59 f7 72 90 0a f5 cd 5a b9 cf 5a 71 64 d1 2a 98 83 44 09 f6 3e 95 38 b7 46 1b bc b2 a4 f4 c8 ac bb 46 96 3c 92 e7 1e 95 a0 2f ca c0 3e 61 c7 ad 5a 6e e7 24 5a 32 f5 a4 09 92 aa 06 3a 9a a9 16 e6 2b f2 e4 54 b7 fa 8b b4 b9 01 5f 07 a6 3a d3 92 fe 32 57 cc 8b 1e c2 ba 55 ec 61 53 71 f2 b9 0c 0e d1 80 30 6a b8 36 ca 1f 2a c0 b7 b5 5b 37 96 85 1f 28 41 07 a6 29 aa f6 93 43 f2 8d bf 51 53 aa 21 b2 1d 8a 11 51 46 7b e4 53 ce 0c aa 03 0d c3 a8 ef 57 f4 74 d3 8d f4 6b 79 71 88 7f 8b e9 5a 7a ae 9b a6 a4 3f 69 b2 ba 46 6f ee f7 c5 1c c3 55 5a 56 39 7b b4 69 66 0e 06 18 74 cd 46 b6 d3 02 ec 7a 30 e7 1d eb 7a 1b 25 9a 25 95 58 1e 76 85 ad 71 e0 dd 60 20 99 60 2c Data Ascii: RR$Kr`+;QpTc)wC_SYrZZqdD>8FF</>aZn$Z2:+T_:2WUaSq0j6[7(A)CQS!QF{SWtkyqZz?iFoUZV9{iftFz0z%%Xvq` `,
2024-04-18 01:09:08 UTC	1255	IN	Data Raw: 42 27 11 67 7f 39 a8 af 25 6d b8 07 8a a6 d2 39 c6 4e 71 5a c6 99 c7 39 6a 6a 19 d7 68 22 a0 9a 72 d1 36 46 7d 05 53 f3 1b d6 82 f9 42 18 fe 55 a2 85 8c f9 86 ca 49 50 59 02 d2 29 fd f8 dd e9 c5 45 31 29 10 0e 49 c9 a7 cd bb ed 28 c0 8d a1 73 8a d3 97 42 1e a4 a7 71 93 76 7a 0a 58 8b f9 6c e3 9a 80 b9 60 ee 3b d3 77 ed 88 27 3c fb d1 ca 2b 16 ce d2 12 26 4c 73 d7 d2 ac da b4 7e 71 0a fd 05 50 66 61 22 06 6e a3 a5 4b a7 f1 78 e0 63 18 a9 e5 25 a3 4e c2 fb ec da 9c 13 0d cd 14 6d 97 4f 5a f4 09 7e 22 45 15 ba cb 67 21 8c 63 69 52 32 05 79 61 3f bf 66 0f 80 07 35 04 7b 56 39 14 12 51 8e 70 4d 67 2a 2a 45 47 dd 77 3d 72 6f 88 17 30 c4 b0 96 49 12 64 e7 6a d2 0f 1a 5c dd 69 92 59 06 8c 46 3b 63 9a f2 c8 6e 5c 95 1b 8e 3a 0a b3 1c cc 24 62 ac 47 73 58 7d 59 5c Data Ascii: B'g9%m9NqZ9jjh"r6F}SBUIPY)E1)I(sBqvzXl`;w'<+&Ls~qPfa"nKxc%NmOZ~"Eg!ciR2ya?f5{V9QpMg**EGw=ro0Idj\iYF;cn\:$bGsX}Y\
2024-04-18 01:09:08 UTC	1255	IN	Data Raw: c8 d8 eb b7 90 dd 88 44 99 41 c0 18 a5 f1 1e b7 73 71 66 63 6c 10 0f 1c 57 75 29 bb 58 f1 ea d2 b4 8d df 87 61 7c a9 9f 3d c5 75 9e 5c 6c b9 61 9a f2 bf 0a 78 aa 0d 3f 7d bc 88 55 98 f3 c5 75 f6 be 2e d3 a6 c4 61 88 6e 9c f1 cd 54 ae 8c 9c 2e 74 1f 67 8b fb 83 f3 a2 b2 ff 00 b6 ed bf e7 a0 a2 a2 ec 7c 87 39 a9 ca b1 c1 83 9e 47 6a e2 f5 29 37 ca f8 e9 5d 1f 88 65 64 88 70 6b 9a 9a dd 99 84 9c f3 da b1 a3 15 73 d3 ad 39 35 62 a2 b1 2a 00 38 c7 ad 3c 4d fa 75 a9 64 83 1c fa d2 1b 56 18 6c 11 5b 3b 5c e5 7c c4 52 48 1c 1e a3 eb 50 31 3b 80 c1 ab 32 42 5c 65 78 22 98 23 91 5c 64 7e 95 6a c8 c9 b2 16 ca 9c 11 cd 30 b8 7b 69 36 e4 36 46 33 57 a6 8b 2d b8 8e 48 e2 ab c7 0b 98 9c 2a e5 b3 4f 99 12 57 97 71 d8 58 74 19 a1 88 fb 4e f2 72 31 d2 ae 0d 3e 67 92 37 6d Data Ascii: DAsqfclWu)Xa\|=u\lax?}Uu.anT.tg\|9Gj)7]edpks95b8<MudVl[;\\|RHP1;2B\ex"#\d~j0{i66F3W-HOWqXtNr1>g7m
2024-04-18 01:09:08 UTC	1255	IN	Data Raw: 41 0c 11 9b 4e 7e fe 3a d4 fe 21 60 ce 1e 35 c1 07 9a 9a 28 04 96 2a 54 7c c4 57 14 65 64 7b 0e 0a e6 6a d8 c7 22 0e 32 d9 e6 a4 d5 2d 3c b8 63 00 62 b5 6d 2d 1d 02 7b f5 ab 5a cd b4 72 46 80 8e 54 52 e7 63 74 95 b5 38 87 83 12 b1 c5 57 95 a4 53 b7 69 db 5b 89 6d 99 9f 77 27 b5 17 96 a1 21 cb 26 79 ad 23 33 92 54 55 cc a8 90 bc 2a c4 7c a2 af 69 7f 64 50 d2 cb 19 20 1c 1a b3 15 b4 49 6e 55 53 9c 67 ad 24 16 e1 2c 64 66 53 d7 b5 4c e4 35 86 6f 63 aa d2 ae 3c 26 52 2f 38 32 f1 cd 76 56 b2 78 2e e2 38 a3 49 a0 f7 05 86 6b c6 e5 85 7c 95 6c 12 a3 da a9 5a a1 6b 96 00 91 f4 e2 b8 ea 61 7d a7 51 7b 16 8f a0 ed f4 af 09 49 78 12 de 58 b6 b8 c3 f2 2a 4b 7f 07 e8 57 16 b3 2e d8 89 56 3b 30 45 78 9d 8d a6 a6 f0 bb 5a 4b 29 c1 ec c7 8a db d1 ae 3c 53 1d a3 b0 96 52 Data Ascii: AN~:!`5(T\|Wed{j"2-<cbm-{ZrFTRct8WSi[mw'!&y#3TU\|idP InUSg$,dfSL5oc<&R/82vVx.8Ik\|lZka}Q{IxX*KW.V;0ExZK)<SR
2024-04-18 01:09:08 UTC	1255	IN	Data Raw: c8 f5 2d a9 af 68 49 44 63 d0 f4 a7 6a 8d 1a b0 2e 73 91 51 58 4a 15 91 1c 64 1e 95 57 5a 0e 6f 46 1b 2b da a1 17 d0 ab 1c 69 f6 b0 47 ae 68 79 61 91 5e 27 1f 36 78 a2 d3 77 da 98 10 7a 71 55 de d5 d6 e8 3e 78 2d 5a 26 67 cb a8 b2 15 49 d6 33 c7 15 d6 e8 1a 13 dd 69 0f 7d 22 81 6a a7 e7 f5 ae 43 c4 71 32 08 e7 8f a7 00 e2 ae ea 5e 2c b8 fe c0 b7 b1 b1 94 45 b0 61 c7 f7 ab 1a 90 94 b6 3b a8 b5 15 73 4f 5a d2 22 f2 59 ac ce 61 c1 f9 b1 c5 71 96 eb b2 fa 44 c6 08 3d 6b 7e 4f 17 99 f4 78 2c 4c 5e 51 5f bc c3 a3 7d 6b 9f 13 2b dd 33 02 32 4f 4a 74 94 e3 a3 23 10 e9 d4 92 94 37 3a 6b 5b c7 b4 d2 4b 42 e2 26 2d c9 f5 ae e7 e1 de b4 65 b5 be b0 b7 b6 8e 69 e7 8b e6 77 c6 14 57 96 a3 2c 90 18 a4 62 4f 50 29 f6 f7 17 16 28 64 49 5e 20 78 ca 1c 66 a6 71 49 f3 23 a9 Data Ascii: -hIDcj.sQXJdWZoF+iGhya^'6xwzqU>x-Z&gI3i}"jCq2^,Ea;sOZ"YaqD=k~Ox,L^Q_}k+32OJt#7:k[KB&-eiwW,bOP)(dI^ xfqI#
2024-04-18 01:09:08 UTC	1003	IN	Data Raw: fe f6 31 45 cc bf b8 04 9e 45 68 a4 98 8d 1b 17 0b 18 4c f2 3a 9a bd 1c aa 3a e6 b9 fb 19 d8 b3 55 c1 3b 0e a7 15 33 8d ce da 53 e5 46 a8 98 b3 6d 02 a8 ea b2 02 9c f5 15 24 2f 96 07 3d aa 9e a7 20 53 92 09 ac 94 6c ce 87 25 28 8b 68 7f 76 dd b7 74 ac 4d 45 83 5e 2f 1d 0d 6d c1 24 6f 06 e1 f2 90 3b f1 58 0e 77 ea 20 76 dd 5d 50 3c aa d2 d4 e9 ed b1 1c 43 07 a8 a6 3b 28 49 30 71 91 4c 19 09 d7 8a a9 73 20 48 df 27 3c 55 c9 11 4e 7a 95 c8 19 3f 30 a2 a8 f9 c3 d0 fe 54 54 d8 e9 e7 47 55 04 e1 ee 57 6f 42 d5 a9 76 df 22 57 29 a6 4c e9 72 7e 6e 33 d2 b7 26 bd f3 51 55 57 0c 2b 8e 51 67 6c 2a 5c d0 b3 72 d7 39 3d 14 54 b2 48 af 27 00 1c 56 5c 17 c9 6e 8f 24 a7 3d aa b4 5a bd b9 9f 60 1c b7 bd 67 c8 cd 79 d2 37 22 e6 5e 80 7b d4 37 07 cb dc 3e f6 39 aa 4b 73 89 Data Ascii: 1EEhL::U;3SFm$/= Sl%(hvtME^/m$o;Xw v]P<C;(I0qLs H'<UNz?0TTGUWoBv"W)Lr~n3&QUW+Qgl*\r9=TH'V\n$=Z`gy7"^{7>9Ks

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.16	49777	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:09:14 UTC	1327	OUT	POST /recaptcha/api2/userverify?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 6331 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:09:14 UTC	6331	OUT	Data Raw: 76 3d 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 26 63 3d 30 33 41 46 63 57 65 41 36 69 41 6b 58 77 33 71 78 30 4f 5f 2d 48 39 36 58 56 64 56 61 33 59 65 47 48 75 38 39 45 39 36 61 77 53 34 4f 59 67 52 43 35 67 4f 46 6a 5a 69 57 30 31 42 7a 32 35 72 54 4e 75 54 56 59 6e 6a 57 52 4f 4c 78 4b 38 34 62 34 49 39 67 66 4f 70 50 6c 46 4f 54 4d 63 35 63 76 64 6e 4f 41 35 62 78 43 59 53 59 45 33 46 41 39 59 78 73 74 70 5f 61 66 42 50 2d 37 49 47 4d 33 47 42 6b 46 30 64 7a 36 78 4e 70 4b 4e 50 72 49 6d 57 63 79 78 58 59 36 4a 37 45 53 6b 54 54 76 33 38 67 32 73 56 6a 7a 6e 34 59 70 32 38 4e 30 5a 36 47 47 74 54 6d 4c 6c 62 57 4c 46 57 50 32 78 77 6b 32 68 7a 33 33 63 51 78 44 45 53 69 63 55 55 46 2d 73 53 38 38 74 71 6c 64 38 33 6d 72 Data Ascii: v=rz4DvU-cY2JYCwHSTck0_qm-&c=03AFcWeA6iAkXw3qx0O_-H96XVdVa3YeGHu89E96awS4OYgRC5gOFjZiW01Bz25rTNuTVYnjWROLxK84b4I9gfOpPlFOTMc5cvdnOA5bxCYSYE3FA9Yxstp_afBP-7IGM3GBkF0dz6xNpKNPrImWcyxXY6J7ESkTTv38g2sVjzn4Yp28N0Z6GGtTmLlbWLFWP2xwk2hz33cQxDESicUUF-sS88tqld83mr
2024-04-18 01:09:14 UTC	483	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Thu, 18 Apr 2024 01:09:14 GMT Expires: Thu, 18 Apr 2024 01:09:14 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 01:09:14 UTC	598	IN	Data Raw: 32 34 66 0d 0a 29 5d 7d 27 0a 5b 22 75 76 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 34 6f 45 42 35 57 4f 5f 4f 48 63 31 73 36 74 55 56 75 43 73 49 48 6b 53 38 79 49 48 57 5f 77 4c 56 45 59 4f 30 32 6e 68 34 30 52 76 57 32 41 35 43 4e 42 62 31 66 6c 43 75 73 73 6f 65 79 50 62 38 35 75 48 36 30 75 34 4a 63 31 6a 39 77 41 61 33 77 70 39 68 6a 52 4c 47 61 59 4c 56 35 6c 33 57 50 73 5f 6f 72 36 44 72 6c 64 49 54 76 39 38 57 79 64 63 7a 6b 73 37 43 62 78 57 63 39 53 43 7a 58 46 36 5a 48 32 72 59 72 54 54 63 41 58 5f 48 52 73 51 7a 62 69 48 6a 30 6a 63 65 75 42 54 66 65 6b 62 62 42 67 47 6e 38 4c 77 2d 44 39 56 45 70 52 65 62 38 4b 62 61 56 5f 6f 74 6c 4a 30 7a 57 46 73 68 61 45 70 79 74 4b 32 30 2d 52 2d 31 53 6a 65 6d 51 56 55 70 62 5a 35 4f 39 6c 47 65 4a Data Ascii: 24f)]}'["uvresp","03AFcWeA4oEB5WO_OHc1s6tUVuCsIHkS8yIHW_wLVEYO02nh40RvW2A5CNBb1flCussoeyPb85uH60u4Jc1j9wAa3wp9hjRLGaYLV5l3WPs_or6DrldITv98Wydczks7CbxWc9SCzXF6ZH2rYrTTcAX_HRsQzbiHj0jceuBTfekbbBgGn8Lw-D9VEpReb8KbaV_otlJ0zWFshaEpytK20-R-1SjemQVUpbZ5O9lGeJ
2024-04-18 01:09:14 UTC	1255	IN	Data Raw: 61 37 39 0d 0a 4e 50 75 4f 4b 4c 6c 36 5a 43 46 6e 39 77 4b 38 75 36 4b 70 45 50 49 63 50 65 65 67 4a 47 5f 32 4b 37 37 4a 6a 68 72 5a 32 4d 55 6d 6c 36 53 47 41 33 53 35 61 6c 64 6c 47 64 6f 4c 63 70 41 52 64 4c 59 64 66 4c 75 52 64 38 71 67 64 58 78 6a 50 45 31 72 31 66 50 6f 58 35 73 4e 71 34 6c 5f 6a 67 58 57 37 6b 4c 30 78 4e 42 76 50 66 6a 43 77 7a 38 75 59 31 4a 69 41 79 6b 6b 2d 65 32 6f 54 69 52 62 74 4f 43 48 6b 32 63 48 48 72 4c 69 49 33 59 36 33 66 78 37 75 50 4b 76 72 32 73 62 4d 56 4d 6a 49 6b 59 57 37 61 30 79 4c 41 69 72 2d 64 78 4f 76 4b 55 4b 65 4c 65 66 76 5f 52 72 45 6d 78 48 4a 67 47 72 48 43 52 4d 5a 4d 48 6b 73 48 6c 33 4f 72 36 4f 2d 50 63 6c 44 59 55 53 52 49 34 32 36 6d 67 50 57 4d 72 42 36 44 51 32 39 4d 6f 7a 41 68 51 7a 36 46 Data Ascii: a79NPuOKLl6ZCFn9wK8u6KpEPIcPeegJG_2K77JjhrZ2MUml6SGA3S5aldlGdoLcpARdLYdfLuRd8qgdXxjPE1r1fPoX5sNq4l_jgXW7kL0xNBvPfjCwz8uY1JiAykk-e2oTiRbtOCHk2cHHrLiI3Y63fx7uPKvr2sbMVMjIkYW7a0yLAir-dxOvKUKeLefv_RrEmxHJgGrHCRMZMHksHl3Or6O-PclDYUSRI426mgPWMrB6DQ29MozAhQz6F
2024-04-18 01:09:14 UTC	1255	IN	Data Raw: 59 64 5a 6f 73 61 48 52 32 6e 6f 5a 7a 59 4f 6b 79 4f 47 5a 7a 39 59 51 6b 54 30 64 6e 66 5f 76 76 5a 76 49 50 5f 30 77 4b 64 59 48 44 54 38 6c 54 38 4c 66 33 35 57 48 6b 31 59 42 39 75 2d 36 36 46 45 48 39 53 34 4f 37 38 56 44 49 63 78 53 63 43 38 46 6d 49 66 6a 6b 49 4c 42 74 45 6f 61 69 70 39 6d 6b 56 6d 37 36 61 51 4b 72 45 33 31 48 33 48 32 51 59 4f 50 38 51 56 4c 71 67 76 5f 4a 75 5a 71 36 32 39 73 63 5f 6a 37 61 54 38 33 6b 62 56 62 47 54 78 67 68 46 49 38 65 41 79 6f 58 39 6e 5f 70 36 66 66 61 59 54 35 32 59 48 36 43 44 38 6c 50 59 51 35 46 42 30 4a 68 5a 55 59 6e 55 54 62 5a 6c 6e 70 36 61 57 4d 6e 75 70 50 56 51 30 75 68 77 4b 32 74 6f 66 35 6a 61 72 55 67 2d 45 2d 43 70 66 43 73 33 6d 2d 61 6e 49 39 50 4a 76 4d 57 4f 2d 77 59 75 45 4f 45 6e 77 Data Ascii: YdZosaHR2noZzYOkyOGZz9YQkT0dnf_vvZvIP_0wKdYHDT8lT8Lf35WHk1YB9u-66FEH9S4O78VDIcxScC8FmIfjkILBtEoaip9mkVm76aQKrE31H3H2QYOP8QVLqgv_JuZq629sc_j7aT83kbVbGTxghFI8eAyoX9n_p6ffaYT52YH6CD8lPYQ5FB0JhZUYnUTbZlnp6aWMnupPVQ0uhwK2tof5jarUg-E-CpfCs3m-anI9PJvMWO-wYuEOEnw
2024-04-18 01:09:14 UTC	178	IN	Data Raw: 69 4b 57 71 6b 74 5a 48 6c 76 33 6a 54 53 59 78 67 6a 58 76 48 53 4b 6d 35 76 56 73 37 74 45 63 4b 6b 57 4a 6c 67 39 72 37 5a 4b 63 58 62 51 63 69 79 61 31 57 4e 6a 44 5f 46 71 39 54 75 6f 30 6b 67 74 4f 69 33 35 42 35 7a 66 36 43 4c 39 5a 63 32 44 6d 55 39 31 30 53 54 46 32 44 37 4c 52 61 64 34 79 46 38 63 36 4a 50 31 4f 77 4d 46 4c 41 55 50 53 7a 44 72 36 58 4b 44 5f 6d 57 4c 72 71 7a 4e 78 47 67 4b 57 72 6b 68 6b 64 54 39 77 38 4a 5a 65 4f 61 77 58 44 5f 72 67 67 31 52 6c 65 67 5f 34 77 5f 6c 33 52 37 69 4c 35 48 76 50 0d 0a Data Ascii: iKWqktZHlv3jTSYxgjXvHSKm5vVs7tEcKkWJlg9r7ZKcXbQciya1WNjD_Fq9Tuo0kgtOi35B5zf6CL9Zc2DmU910STF2D7LRad4yF8c6JP1OwMFLAUPSzDr6XKD_mWLrqzNxGgKWrkhkdT9w8JZeOawXD_rgg1Rleg_4w_l3R7iL5HvP
2024-04-18 01:09:14 UTC	1255	IN	Data Raw: 31 35 31 35 0d 0a 44 55 49 78 37 30 4e 68 4c 61 6e 51 5a 6e 35 33 45 2d 32 5f 72 65 47 68 54 76 41 55 37 48 69 65 4b 59 51 58 68 75 53 53 53 4d 56 75 34 4c 31 54 79 32 76 6b 32 72 35 55 71 70 51 35 61 53 58 4b 30 73 31 49 31 44 56 76 63 6e 4a 6b 4a 63 39 66 4e 41 37 46 41 6e 52 50 49 56 6e 2d 47 55 58 46 78 38 53 37 6e 6b 76 76 41 43 65 4e 53 56 61 42 49 6b 77 55 4c 62 5a 72 58 49 7a 55 7a 61 56 72 6e 75 41 55 68 5a 65 36 6b 57 58 6c 41 4a 67 53 74 57 55 56 6f 61 62 36 64 46 4c 6c 6f 58 57 35 4a 32 38 34 48 72 4b 55 5f 39 6a 49 75 47 4e 45 4a 34 35 45 67 39 64 6b 6a 31 37 66 58 61 74 51 63 6a 78 79 4b 79 44 72 4f 6a 46 69 48 46 6d 42 35 54 75 72 78 53 30 79 6b 73 48 7a 51 47 4e 55 6b 34 50 69 66 41 48 2d 55 35 66 66 35 61 39 77 71 65 52 4d 32 48 68 54 58 Data Ascii: 1515DUIx70NhLanQZn53E-2_reGhTvAU7HieKYQXhuSSSMVu4L1Ty2vk2r5UqpQ5aSXK0s1I1DVvcnJkJc9fNA7FAnRPIVn-GUXFx8S7nkvvACeNSVaBIkwULbZrXIzUzaVrnuAUhZe6kWXlAJgStWUVoab6dFLloXW5J284HrKU_9jIuGNEJ45Eg9dkj17fXatQcjxyKyDrOjFiHFmB5TurxS0yksHzQGNUk4PifAH-U5ff5a9wqeRM2HhTX
2024-04-18 01:09:14 UTC	1255	IN	Data Raw: 5a 56 55 57 31 5a 37 49 62 56 34 6d 30 48 6a 70 54 33 30 5a 39 48 74 35 56 4e 6c 74 5a 6d 44 6a 58 47 6d 63 43 6e 62 41 59 67 31 57 49 33 38 59 79 6c 2d 77 6f 4f 72 37 36 35 4a 6f 32 77 6e 71 42 31 6b 50 6e 64 71 78 6f 73 64 68 46 2d 41 66 31 4d 65 75 62 30 58 50 6c 31 74 52 2d 5a 62 6b 63 36 47 37 78 38 4f 38 56 31 72 62 46 6c 62 61 47 6c 64 62 6e 34 56 65 4e 52 7a 4f 58 61 6d 34 76 55 38 38 49 64 6f 67 33 31 7a 31 74 73 35 7a 61 65 48 41 30 55 46 42 33 73 47 79 6f 5f 73 78 6d 49 53 32 79 66 69 73 47 4f 31 6d 52 63 46 55 61 77 43 4e 6e 59 46 30 47 50 76 48 5f 37 58 55 68 57 35 39 6c 65 4d 5f 5a 68 33 47 6a 4b 35 36 62 52 36 54 70 6e 4c 71 62 4f 69 66 57 58 73 53 41 42 2d 36 36 6d 2d 57 38 43 6b 62 6b 38 41 51 57 39 44 48 38 6a 62 6b 75 51 54 59 43 7a 64 Data Ascii: ZVUW1Z7IbV4m0HjpT30Z9Ht5VNltZmDjXGmcCnbAYg1WI38Yyl-woOr765Jo2wnqB1kPndqxosdhF-Af1Meub0XPl1tR-Zbkc6G7x8O8V1rbFlbaGldbn4VeNRzOXam4vU88Idog31z1ts5zaeHA0UFB3sGyo_sxmIS2yfisGO1mRcFUawCNnYF0GPvH_7XUhW59leM_Zh3GjK56bR6TpnLqbOifWXsSAB-66m-W8Ckbk8AQW9DH8jbkuQTYCzd
2024-04-18 01:09:14 UTC	1255	IN	Data Raw: 62 2d 59 73 58 4b 4f 51 61 63 63 79 45 73 48 35 32 61 67 7a 74 76 77 6d 34 62 6d 66 65 77 67 46 57 6d 73 47 6b 76 71 48 35 35 72 78 4d 35 39 78 48 51 55 64 4d 53 4d 76 58 45 48 6c 6b 70 5a 58 4d 61 42 36 58 78 65 70 33 70 31 45 53 46 4d 73 61 48 58 79 48 4e 57 47 55 78 63 6e 55 73 79 68 4f 71 38 5f 4f 66 41 4f 69 2d 4f 38 55 54 64 72 56 6c 38 36 48 44 6a 65 59 48 50 74 66 68 57 4f 69 74 66 4c 75 46 56 5a 6a 69 71 4b 44 72 51 61 47 44 75 52 73 62 58 77 69 55 6d 76 46 52 4c 53 43 77 74 75 65 47 6b 5a 77 68 72 6d 63 6c 74 6d 56 33 57 72 69 4c 33 70 34 36 64 66 4f 79 34 74 7a 5f 76 59 71 32 35 43 67 76 56 4f 38 39 61 59 58 47 57 4c 4c 4f 5f 62 66 49 35 32 65 64 67 34 5a 56 62 68 50 77 42 48 42 56 70 59 4e 74 35 67 4e 67 48 4e 4d 36 45 32 67 38 78 30 6a 74 6d Data Ascii: b-YsXKOQaccyEsH52agztvwm4bmfewgFWmsGkvqH55rxM59xHQUdMSMvXEHlkpZXMaB6Xxep3p1ESFMsaHXyHNWGUxcnUsyhOq8_OfAOi-O8UTdrVl86HDjeYHPtfhWOitfLuFVZjiqKDrQaGDuRsbXwiUmvFRLSCwtueGkZwhrmcltmV3WriL3p46dfOy4tz_vYq25CgvVO89aYXGWLLO_bfI52edg4ZVbhPwBHBVpYNt5gNgHNM6E2g8x0jtm
2024-04-18 01:09:14 UTC	1255	IN	Data Raw: 76 67 47 32 41 57 59 7a 69 65 49 47 65 4f 52 36 2d 4c 41 6e 45 4e 63 6a 70 54 71 6d 6f 70 6e 71 76 66 6a 45 6a 67 75 6d 47 56 4a 2d 71 62 4f 50 6f 50 45 35 35 6c 6d 30 44 67 52 4f 6c 66 48 5f 4e 49 4f 6c 47 61 6a 6a 33 34 75 76 38 68 5f 54 4c 47 61 4e 49 4a 6d 44 77 45 53 65 58 54 7a 50 65 2d 76 34 6e 74 62 6f 32 4e 4f 78 71 47 4d 4c 78 38 46 41 65 36 38 70 5a 62 33 79 58 43 2d 42 46 6b 69 49 54 35 34 35 63 39 4d 44 4d 41 54 5f 4e 5f 63 75 45 42 72 39 50 6d 30 63 69 33 33 62 55 38 7a 32 34 54 33 69 48 75 30 79 6a 74 4a 31 39 54 67 37 2d 47 66 4d 77 62 57 53 4e 4f 39 5f 42 69 4b 4a 4f 6b 7a 35 50 65 73 4d 4e 64 30 45 35 33 71 4d 63 4b 42 37 49 6a 35 36 38 6b 76 6d 41 5f 36 73 4d 73 39 75 57 75 56 65 67 47 6e 30 41 6f 78 2d 6e 50 53 6c 4f 4c 45 6e 6f 4e 66 Data Ascii: vgG2AWYzieIGeOR6-LAnENcjpTqmopnqvfjEjgumGVJ-qbOPoPE55lm0DgROlfH_NIOlGajj34uv8h_TLGaNIJmDwESeXTzPe-v4ntbo2NOxqGMLx8FAe68pZb3yXC-BFkiIT545c9MDMAT_N_cuEBr9Pm0ci33bU8z24T3iHu0yjtJ19Tg7-GfMwbWSNO9_BiKJOkz5PesMNd0E53qMcKB7Ij568kvmA_6sMs9uWuVegGn0Aox-nPSlOLEnoNf
2024-04-18 01:09:14 UTC	385	IN	Data Raw: 72 77 54 53 67 51 55 6b 65 53 47 34 6c 38 34 37 59 76 4b 30 4c 75 46 33 41 72 65 46 69 41 6c 75 68 4b 48 44 64 5a 53 76 76 4e 4f 50 73 65 6d 71 37 7a 63 58 62 70 4c 44 7a 77 4a 50 69 58 6a 6e 30 62 54 7a 65 6f 41 66 4d 67 73 76 42 75 36 48 52 58 54 79 49 33 7a 39 33 70 4c 63 67 57 45 58 43 54 61 79 34 71 37 45 59 35 37 71 42 74 4e 31 59 59 59 58 4d 63 52 77 78 49 49 32 69 63 42 53 71 37 6a 33 6d 51 53 78 6e 35 57 66 55 58 59 59 49 55 77 70 42 54 48 44 7a 46 6c 46 68 64 56 68 36 69 76 74 48 79 43 6f 67 44 6c 69 52 42 74 4f 77 65 61 4d 34 6c 79 46 76 68 65 65 38 4d 51 48 59 61 69 32 53 45 51 4d 54 42 4c 69 48 71 49 69 42 36 4b 57 4d 4e 6a 42 66 74 59 51 56 66 63 79 6b 2d 32 55 75 74 4e 46 4e 51 2d 54 56 48 68 6d 59 78 6d 6a 44 37 71 58 53 32 33 46 61 6b 59 Data Ascii: rwTSgQUkeSG4l847YvK0LuF3AreFiAluhKHDdZSvvNOPsemq7zcXbpLDzwJPiXjn0bTzeoAfMgsvBu6HRXTyI3z93pLcgWEXCTay4q7EY57qBtN1YYYXMcRwxII2icBSq7j3mQSxn5WfUXYYIUwpBTHDzFlFhdVh6ivtHyCogDliRBtOweaM4lyFvhee8MQHYai2SEQMTBLiHqIiB6KWMNjBftYQVfcyk-2UutNFNQ-TVHhmYxmjD7qXS23FakY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.16	49778	74.125.136.99	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:09:15 UTC	877	OUT	GET /recaptcha/api2/userverify?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:09:15 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Thu, 18 Apr 2024 01:09:15 GMT Expires: Thu, 18 Apr 2024 01:09:15 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 01:09:15 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-18 01:09:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.16	49779	142.251.15.105	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:09:15 UTC	1479	OUT	GET /recaptcha/api2/payload?p=06AFcWeA7PcvxEYFJucuS82ElQVhj9hNdQMnoOrcf94c85gf0b7M2K9weu7o2GvjbBCx_A22Kkd8cDW84vB5kaPQz0WBRySb_QbFJJqxd4YA-TUzxAK18LWuaf6TZ8-o1hukGdqWZGtNRUmwZW6JZOCbzk9avrwNXRmkck1E6a3ZSxeTvXiKF8T_79HJH0JBwqI5it1DjWIeUt&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEI3L3NAQiSys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:09:15 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Thu, 18 Apr 2024 01:09:15 GMT Date: Thu, 18 Apr 2024 01:09:15 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 01:09:15 UTC	6	IN	Data Raw: 41 36 32 42 0d 0a Data Ascii: A62B
2024-04-18 01:09:15 UTC	1255	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C"}!1AQa"q2
2024-04-18 01:09:15 UTC	1255	IN	Data Raw: cf 2e a8 74 b8 b4 c8 d7 00 b0 c9 3f 53 59 d4 c2 ba 91 8d 9d 81 d4 e5 5c ad 1e 49 e0 ed 2e d9 bc 1f 7c db 9d dc 29 cf b9 aa 3f 08 95 a3 82 e8 30 e0 4a d8 af 43 d4 2e b4 5f 22 68 ad 2e f4 e6 8e 4c e5 21 93 e6 3f 85 71 9a 77 d8 f4 dd 4f ec f6 0b 24 51 bb 65 83 f7 35 51 8f 24 a5 e6 8a f7 a7 04 fa 1b 9e 38 58 c5 84 64 3e 5b 8e 2a 5d 1e 05 9b 42 f9 97 23 67 a5 53 f1 9c 9b 74 f8 9b d7 15 bf a1 aa be 84 98 ee 9d 2b 34 af 06 86 d5 8f 18 d2 f4 bf f8 b8 53 ce d1 62 08 db 86 f4 af 58 f0 fc 5a 3b dd 3c d3 c9 14 92 af 00 1c 1c 56 25 d6 9f 6c 6e 27 2b 6e 50 92 72 c7 a9 ae 5a d2 19 63 d6 d4 22 9d a5 fb 67 a6 7b 9a cd 55 94 ad 0e c6 aa 9a a7 15 2e e7 71 e2 79 2d 96 73 f6 75 c2 9f d6 a6 f0 69 92 6b 3b 91 19 00 f3 da b3 35 b3 ca 21 c1 1b 79 ad 0f 07 5c c7 67 a5 dd cc 48 00 Data Ascii: .t?SY\I.\|)?0JC._"h.L!?qwO$Qe5Q$8Xd>[*]B#gSt+4SbXZ;<V%ln'+nPrZc"g{U.qy-suik;5!y\gH
2024-04-18 01:09:15 UTC	1255	IN	Data Raw: f4 a7 5c 20 fb 68 90 28 e2 ab 5a ca 7f b4 a5 18 c8 ac 68 de d6 66 92 68 da 5c 63 a1 a9 82 f1 9c 55 61 70 32 17 69 fc aa d8 7f 90 11 8a e9 89 8b 65 39 c1 f9 8b 67 18 af 09 f8 93 af e8 b6 7a bd cd b5 ea 5d 3c ac 32 02 11 8a f7 8b c2 7c bc 7a f1 5e 41 e3 df 86 b6 da f6 b0 6f 1c c8 a4 8c 1c 3e 2b 0a ae 4a 5a 04 62 99 e5 9e 0e bc 9b 52 d6 be c8 99 6b 66 7c 88 d8 f6 af a2 6c 35 c8 34 6d 16 3b 18 b4 8b 40 80 60 95 51 cd 79 6f 87 be 19 cd a2 f8 8a 2b ab 49 b3 10 fb c1 9b 26 bb ef 11 c2 d0 e9 ea e5 79 18 ef 44 a5 17 0d 51 ac 9b 5b 1d cf 85 b5 bd 30 41 e5 4c 61 b6 f3 30 02 29 c1 39 ae d9 7c 39 23 e9 a5 ae 2d e2 9e c9 d7 3e 59 e4 90 6b e6 2b bd 33 c4 50 6a b6 5a cd bc 5e 7c 30 b0 73 1a 1e 6b be bc f8 d7 aa 5a 69 d1 d9 8d 13 55 88 28 c1 7d 81 b1 4a 72 83 82 b3 b3 08 Data Ascii: \ h(Zhfh\cUap2ie9gz]<2\|z^Ao>+JZbRkf\|l54m;@`Qyo+I&yDQ[0ALa0)9\|9#->Yk+3PjZ^\|0skZiU(}Jr
2024-04-18 01:09:15 UTC	333	IN	Data Raw: e1 7e 1d 98 d1 1e 28 97 0a 87 15 dc 45 9e 6b d1 96 b1 4c c6 a5 f9 8e 17 c7 e3 fd 36 33 fe d5 4b a8 73 e1 b0 71 d1 73 4d f1 f8 1f 69 8c fb d5 0d 6f 55 8e 2d 12 3b 34 20 b3 0f 98 d7 04 75 84 97 99 7d 11 1c 8c 1f c2 d2 e4 1e 10 d7 8c f8 71 d3 fb 72 f2 32 31 f3 1a f6 5b 72 1f c2 92 e3 fb 86 bc 5f 48 89 db c4 77 81 71 f7 b9 ab 4d 2a ef d0 a5 ac 59 dd 68 d1 46 d1 65 64 2b cf 18 35 b6 20 bb 58 1c c1 72 72 06 47 7a e5 ec 2c 67 92 20 14 00 01 f5 ad 31 65 79 05 bb b2 33 67 1f de 35 ac e7 a1 95 9b 3c 93 e2 26 bb ac 4f a8 4d 61 77 77 23 c6 8d f7 33 c5 74 5f 06 fc 6b 7f 68 c3 48 b8 95 9a 22 30 80 8c 9f a5 72 5e 34 b5 bd 4d 49 de e4 22 97 63 f5 34 be 05 b5 bb fe df 82 7b 75 04 a3 03 8c d5 61 9e 8e fd 4a e9 63 d7 7c 55 e2 75 d0 dd 1e e4 3a 99 58 6d 24 74 cd 77 3e 11 be Data Ascii: ~(EkL63KsqsMioU-;4 u}qr21[r_HwqM*YhFed+5 XrrGz,g 1ey3g5<&OMaww#3t_khH"0r^4MI"c4{uaJc\|Uu:Xm$tw>
2024-04-18 01:09:15 UTC	1255	IN	Data Raw: 0e 82 a9 5b 33 8b d9 08 5c f3 4b 73 77 b7 56 30 01 d7 9a 75 a9 26 f2 40 6a 23 1b 3b 96 9d cd 48 e4 2c 06 53 9a b4 ac 42 8e 06 6a 84 97 d6 76 6a 0d c5 c4 51 ff 00 bc c0 53 ad 75 6d 3e e5 82 c1 79 6e e7 fd 97 06 b7 85 d9 9b 2d 48 ec 47 2a 3f 2a cc be 89 99 b7 63 3e d5 a6 c0 b0 dc a4 30 f5 af 3a f1 77 8f ed 34 0d 59 ad 2e 14 9e 33 c7 7a c6 ad d3 b2 dc 74 ed 7d 4e 89 d1 41 ce 30 45 55 b8 d3 66 d6 b1 63 6c f1 97 cf 56 3c 0a f2 af 17 fc 51 9b 52 88 59 68 e3 ec 8f 27 06 53 8c e2 bd 1f f6 76 bb 9a e6 60 6e 41 76 88 fc d2 b1 c9 6a ba 30 f6 89 df a1 6d 1d df 86 3c 28 f7 73 a6 8f 34 8b 1b c6 a3 73 81 5d ce 9d f0 d3 41 80 ef b9 df 72 df ed 70 2b 09 7c 55 a6 e9 7e 23 9e e5 ca b3 fd c5 50 c3 35 7e 4f 1f 5e cd ff 00 1e 96 1b 47 62 f5 95 6a 52 93 5c bb 58 50 aa 96 e6 fd Data Ascii: [3\KswV0u&@j#;H,SBjvjQSum>yn-HG?c>0:w4Y.3zt}NA0EUfclV<QRYh'Sv`nAvj0m<(s4s]Arp+\|U~#P5~O^GbjR\XP
2024-04-18 01:09:15 UTC	1255	IN	Data Raw: d6 fe 0f 53 6f 19 76 7d db 06 7e 63 d7 14 57 a8 26 b7 e1 b0 8a 3c b9 0e 07 5f 2f ad 15 af 24 8d f9 a9 94 fc 04 49 96 4c a8 5c 9e 82 bb 78 cf cd 5c 0f c3 d7 85 a6 93 c9 7d e3 3f 7a bb d8 b3 bb f0 ae f8 fc 09 9c 75 be 23 8b f8 86 b8 74 3b 49 e7 b5 71 92 32 15 f9 b2 4f 41 9a ee 3e 21 49 0e f4 8c 31 2f 9e 45 71 a2 30 4e e2 2b cd 4d a9 34 69 15 78 9a 91 34 89 e1 89 02 26 e2 54 d7 93 f8 5e ce e2 eb c5 97 8b 10 05 cf 6a f5 89 ad e6 7f 0f ba db ce a9 f2 9c d7 99 f8 32 f1 6c 3c 6d 77 e6 1c 92 30 3d eb 68 ff 00 bc 2b f6 29 2d 19 dd 69 fe 15 f1 32 42 5e 1b 78 dc 67 39 0d cd 3a 5d 37 c4 89 1b 45 25 8b 0c 8c 71 cd 76 5a 46 bd 02 db 85 32 14 27 b1 35 a9 1e b1 01 ff 00 96 ea 6b 49 c3 5d cc ae d1 f1 f7 c6 cd 37 53 d3 b5 48 e4 b9 8e 54 0e 4e 33 91 55 7e 0f 4f 76 fa e1 5d Data Ascii: Sov}~cW&<_/$IL\x\}?zu#t;Iq2OA>!I1/Eq0N+M4ix4&T^j2l<mw0=h+)-i2B^xg9:]7E%qvZF2'5kI]7SHTN3U~Ov]
2024-04-18 01:09:15 UTC	1255	IN	Data Raw: 0f ef 0c 1a f4 7f 00 e9 5a 7e 99 a7 79 97 36 d1 2c 60 ee 69 24 6e be f8 ac 3b 8d 46 de 38 fe cd 6b 36 d8 53 80 07 7a ca 95 e6 bd 26 d1 ee e4 58 8f 5d c7 1c 57 54 62 f9 5d 88 e7 77 56 3d a3 43 f8 a3 e1 1b 2b 96 b1 8a 66 67 1c 0d ab c6 6b d5 f4 bf 0d dd f8 97 40 4b df ed 51 69 0d ca 6e 41 1a e4 81 ee 6b e1 e7 b5 8e c6 f6 49 6d 9f 76 de 86 bd 4f e1 27 8d bc 61 aa c9 26 91 15 eb 2d ba 0c 61 56 b9 e5 ed 67 1e 48 bd 0f 52 84 b0 ea 1c cf 49 77 b5 ff 00 03 bc d6 fc 1b aa 58 5f 5c c7 69 a8 49 22 23 e0 cd 9c ee fc 6b 90 d7 34 2f 11 5b c6 d3 cf ac 5c 2c 43 b2 35 74 5e 21 d5 75 58 60 16 5a 8e ab 39 4e c9 11 09 f9 d7 9b 6b 16 d3 6a 77 4d 6e fa bd f8 85 8f dd 32 9c 55 d0 a7 88 4d 5e 57 43 c4 e2 f0 35 22 d4 69 5a 5d d7 f9 16 56 ca ea 46 4d fa fd e4 51 b3 61 9b 77 22 b5 Data Ascii: Z~y6,`i$n;F8k6Sz&X]WTb]wV=C+fgk@KQinAkImvO'a&-aVgHRIwX_\iI"#k4/[\,C5t^!uX`Z9NkjwMn2UM^WC5"iZ]VFMQaw"
2024-04-18 01:09:15 UTC	1255	IN	Data Raw: 41 0e a3 63 0c a4 8c 65 94 1c d6 4e af e0 0f 01 db 2b 5f 5d e8 16 38 5e 4b 18 81 ac 7d b3 8f bb 24 66 e9 df 54 78 a6 95 a9 e8 49 6e 12 c2 ee 26 4f 63 9a be 97 0a cc 1a 24 96 45 f5 58 c9 fe 95 eb de 16 b1 f0 65 fc 8d 16 95 a7 da 0d 83 b2 01 8a ea 17 47 b3 54 0b 1c 31 a0 1e 88 2a a7 5f 91 da 48 a8 d0 93 3e 7d 91 ae 98 06 8b 4a bf 9b fd d8 48 1f ad 55 ba b6 f1 6d c2 6d d3 3c 37 2a b9 e8 66 70 00 af a5 56 ca dd 40 01 17 8f 61 49 2c 56 90 c6 d2 c8 88 aa a3 24 9a cb eb 25 ac 33 ea 7c e5 a5 f8 5b e2 84 ff 00 34 89 a5 db e7 b1 2c 71 5b d0 78 37 e2 0f 94 3c fd 67 4e 84 7f b3 09 3f cc d7 b1 58 6a fa 2d e5 cf d9 ed 6e 22 92 5c e3 00 56 af 96 9f dc 1f 95 29 62 1a dd 0f ea c7 8d c1 e0 4f 13 49 10 32 f8 8d c1 3d e3 84 0a d9 d1 fc 07 72 80 0b cd 52 ee e3 3d 72 00 af 4c Data Ascii: AceN+_]8^K}$fTxIn&Oc$EXeGT1_H>}JHUmm<7fpV@aI,V$%3\|[4,q[x7<gN?Xj-n"\V)bOI2=rR=rL
2024-04-18 01:09:15 UTC	1255	IN	Data Raw: 7b 87 a5 5a b0 8d 6c 9e 38 24 28 8c 4f 0a 1b 9a 86 3d 71 18 95 3e 68 cf a0 a5 b2 82 d2 e3 52 4b 93 13 99 01 e1 98 9a 4f 71 c7 46 77 16 39 11 a9 c5 69 43 ca d6 7d 99 1b 40 c5 68 c3 c2 d5 83 d0 e4 fc 6b 6a b3 4d 1b 95 24 8a f3 8b bd 32 39 e5 b9 df 08 27 9e 6b d6 3c 55 34 36 d6 8f 3c c3 e5 45 24 9a f1 2b 6f 14 5d f8 8f c4 f2 e8 9e 1f d3 80 91 8e 1a 79 ce 14 0f 5a e2 93 f7 9a 05 b1 c9 6a c5 74 e9 5c ca a4 2a 9f ad 67 d9 6a 50 6a d7 71 da 41 1c e0 b1 c6 4a 71 57 3e 2e 69 3e 22 f0 c5 f2 0b e6 b7 9a 39 be eb 20 c8 06 b8 5b 6d 7b 54 82 40 d6 f2 f9 6e 3d 10 53 a3 5a 12 5e 47 3c a3 15 23 e9 ff 00 87 9e 16 b1 d2 ed 92 e4 e2 49 d8 64 bb 76 ae 6b e3 2e 89 6f a9 ea fa 78 29 f2 99 94 12 38 38 af 2b b7 f1 4f c4 08 2d 56 e2 0d 52 53 1f 61 81 5d 6f c3 5d 57 5a d7 fc 4d 07 Data Ascii: {Zl8$(O=q>hRKOqFw9iC}@hkjM$29'k<U46<E$+o]yZjt\*gjPjqAJqW>.i>"9 [m{T@n=SZ^G<#Idvk.ox)88+O-VRSa]o]WZM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.16	49780	74.125.136.99	443	2068	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 01:09:15 UTC	1083	OUT	GET /recaptcha/api2/payload?p=06AFcWeA7PcvxEYFJucuS82ElQVhj9hNdQMnoOrcf94c85gf0b7M2K9weu7o2GvjbBCx_A22Kkd8cDW84vB5kaPQz0WBRySb_QbFJJqxd4YA-TUzxAK18LWuaf6TZ8-o1hukGdqWZGtNRUmwZW6JZOCbzk9avrwNXRmkck1E6a3ZSxeTvXiKF8T_79HJH0JBwqI5it1DjWIeUt&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIlKHLAQj2mM0BCIWgzQEIucrNAQiJ080BGMvYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AH0dGfQPRrZ_CbCVlvAzYcc3QNfHah5BSRB63Az9DjkgB73is8iMnQ5JcXIfyQ7PgYr4o_HpPrSr6q3ZmzBsxjs; 1P_JAR=2024-04-18-01; NID=513=EUpSlw5z64ofsc1VGKp8pfpuj3hZRgmZ4W_1gZa1WmZFaMdKtj3pSMC-rSFdFXlCZUCvynj4NqKLrxGrerGFR35ZmU76XoByKGDgkAvvpak0fwAK5cIHjfLMCvzsKH8CRigPq2BupXlATYbUpljj-GxoB-fA6jdT0GDjLMr4Cx4; AEC=AQTF6HybsPYqJbpgeyQHtkNvOsh5Fu0SNkrk8IDbh4M0JVq57opLkcgvhQ
2024-04-18 01:09:16 UTC	419	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Thu, 18 Apr 2024 01:09:16 GMT Date: Thu, 18 Apr 2024 01:09:16 GMT Cache-Control: private, max-age=30 Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 01:09:16 UTC	6	IN	Data Raw: 41 36 32 42 0d 0a Data Ascii: A62B
2024-04-18 01:09:16 UTC	1255	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC!"$"$C"}!1AQa"q2
2024-04-18 01:09:16 UTC	1255	IN	Data Raw: cf 2e a8 74 b8 b4 c8 d7 00 b0 c9 3f 53 59 d4 c2 ba 91 8d 9d 81 d4 e5 5c ad 1e 49 e0 ed 2e d9 bc 1f 7c db 9d dc 29 cf b9 aa 3f 08 95 a3 82 e8 30 e0 4a d8 af 43 d4 2e b4 5f 22 68 ad 2e f4 e6 8e 4c e5 21 93 e6 3f 85 71 9a 77 d8 f4 dd 4f ec f6 0b 24 51 bb 65 83 f7 35 51 8f 24 a5 e6 8a f7 a7 04 fa 1b 9e 38 58 c5 84 64 3e 5b 8e 2a 5d 1e 05 9b 42 f9 97 23 67 a5 53 f1 9c 9b 74 f8 9b d7 15 bf a1 aa be 84 98 ee 9d 2b 34 af 06 86 d5 8f 18 d2 f4 bf f8 b8 53 ce d1 62 08 db 86 f4 af 58 f0 fc 5a 3b dd 3c d3 c9 14 92 af 00 1c 1c 56 25 d6 9f 6c 6e 27 2b 6e 50 92 72 c7 a9 ae 5a d2 19 63 d6 d4 22 9d a5 fb 67 a6 7b 9a cd 55 94 ad 0e c6 aa 9a a7 15 2e e7 71 e2 79 2d 96 73 f6 75 c2 9f d6 a6 f0 69 92 6b 3b 91 19 00 f3 da b3 35 b3 ca 21 c1 1b 79 ad 0f 07 5c c7 67 a5 dd cc 48 00 Data Ascii: .t?SY\I.\|)?0JC._"h.L!?qwO$Qe5Q$8Xd>[*]B#gSt+4SbXZ;<V%ln'+nPrZc"g{U.qy-suik;5!y\gH
2024-04-18 01:09:16 UTC	1255	IN	Data Raw: f4 a7 5c 20 fb 68 90 28 e2 ab 5a ca 7f b4 a5 18 c8 ac 68 de d6 66 92 68 da 5c 63 a1 a9 82 f1 9c 55 61 70 32 17 69 fc aa d8 7f 90 11 8a e9 89 8b 65 39 c1 f9 8b 67 18 af 09 f8 93 af e8 b6 7a bd cd b5 ea 5d 3c ac 32 02 11 8a f7 8b c2 7c bc 7a f1 5e 41 e3 df 86 b6 da f6 b0 6f 1c c8 a4 8c 1c 3e 2b 0a ae 4a 5a 04 62 99 e5 9e 0e bc 9b 52 d6 be c8 99 6b 66 7c 88 d8 f6 af a2 6c 35 c8 34 6d 16 3b 18 b4 8b 40 80 60 95 51 cd 79 6f 87 be 19 cd a2 f8 8a 2b ab 49 b3 10 fb c1 9b 26 bb ef 11 c2 d0 e9 ea e5 79 18 ef 44 a5 17 0d 51 ac 9b 5b 1d cf 85 b5 bd 30 41 e5 4c 61 b6 f3 30 02 29 c1 39 ae d9 7c 39 23 e9 a5 ae 2d e2 9e c9 d7 3e 59 e4 90 6b e6 2b bd 33 c4 50 6a b6 5a cd bc 5e 7c 30 b0 73 1a 1e 6b be bc f8 d7 aa 5a 69 d1 d9 8d 13 55 88 28 c1 7d 81 b1 4a 72 83 82 b3 b3 08 Data Ascii: \ h(Zhfh\cUap2ie9gz]<2\|z^Ao>+JZbRkf\|l54m;@`Qyo+I&yDQ[0ALa0)9\|9#->Yk+3PjZ^\|0skZiU(}Jr
2024-04-18 01:09:16 UTC	333	IN	Data Raw: e1 7e 1d 98 d1 1e 28 97 0a 87 15 dc 45 9e 6b d1 96 b1 4c c6 a5 f9 8e 17 c7 e3 fd 36 33 fe d5 4b a8 73 e1 b0 71 d1 73 4d f1 f8 1f 69 8c fb d5 0d 6f 55 8e 2d 12 3b 34 20 b3 0f 98 d7 04 75 84 97 99 7d 11 1c 8c 1f c2 d2 e4 1e 10 d7 8c f8 71 d3 fb 72 f2 32 31 f3 1a f6 5b 72 1f c2 92 e3 fb 86 bc 5f 48 89 db c4 77 81 71 f7 b9 ab 4d 2a ef d0 a5 ac 59 dd 68 d1 46 d1 65 64 2b cf 18 35 b6 20 bb 58 1c c1 72 72 06 47 7a e5 ec 2c 67 92 20 14 00 01 f5 ad 31 65 79 05 bb b2 33 67 1f de 35 ac e7 a1 95 9b 3c 93 e2 26 bb ac 4f a8 4d 61 77 77 23 c6 8d f7 33 c5 74 5f 06 fc 6b 7f 68 c3 48 b8 95 9a 22 30 80 8c 9f a5 72 5e 34 b5 bd 4d 49 de e4 22 97 63 f5 34 be 05 b5 bb fe df 82 7b 75 04 a3 03 8c d5 61 9e 8e fd 4a e9 63 d7 7c 55 e2 75 d0 dd 1e e4 3a 99 58 6d 24 74 cd 77 3e 11 be Data Ascii: ~(EkL63KsqsMioU-;4 u}qr21[r_HwqM*YhFed+5 XrrGz,g 1ey3g5<&OMaww#3t_khH"0r^4MI"c4{uaJc\|Uu:Xm$tw>
2024-04-18 01:09:16 UTC	1255	IN	Data Raw: 0e 82 a9 5b 33 8b d9 08 5c f3 4b 73 77 b7 56 30 01 d7 9a 75 a9 26 f2 40 6a 23 1b 3b 96 9d cd 48 e4 2c 06 53 9a b4 ac 42 8e 06 6a 84 97 d6 76 6a 0d c5 c4 51 ff 00 bc c0 53 ad 75 6d 3e e5 82 c1 79 6e e7 fd 97 06 b7 85 d9 9b 2d 48 ec 47 2a 3f 2a cc be 89 99 b7 63 3e d5 a6 c0 b0 dc a4 30 f5 af 3a f1 77 8f ed 34 0d 59 ad 2e 14 9e 33 c7 7a c6 ad d3 b2 dc 74 ed 7d 4e 89 d1 41 ce 30 45 55 b8 d3 66 d6 b1 63 6c f1 97 cf 56 3c 0a f2 af 17 fc 51 9b 52 88 59 68 e3 ec 8f 27 06 53 8c e2 bd 1f f6 76 bb 9a e6 60 6e 41 76 88 fc d2 b1 c9 6a ba 30 f6 89 df a1 6d 1d df 86 3c 28 f7 73 a6 8f 34 8b 1b c6 a3 73 81 5d ce 9d f0 d3 41 80 ef b9 df 72 df ed 70 2b 09 7c 55 a6 e9 7e 23 9e e5 ca b3 fd c5 50 c3 35 7e 4f 1f 5e cd ff 00 1e 96 1b 47 62 f5 95 6a 52 93 5c bb 58 50 aa 96 e6 fd Data Ascii: [3\KswV0u&@j#;H,SBjvjQSum>yn-HG?c>0:w4Y.3zt}NA0EUfclV<QRYh'Sv`nAvj0m<(s4s]Arp+\|U~#P5~O^GbjR\XP
2024-04-18 01:09:16 UTC	1255	IN	Data Raw: d6 fe 0f 53 6f 19 76 7d db 06 7e 63 d7 14 57 a8 26 b7 e1 b0 8a 3c b9 0e 07 5f 2f ad 15 af 24 8d f9 a9 94 fc 04 49 96 4c a8 5c 9e 82 bb 78 cf cd 5c 0f c3 d7 85 a6 93 c9 7d e3 3f 7a bb d8 b3 bb f0 ae f8 fc 09 9c 75 be 23 8b f8 86 b8 74 3b 49 e7 b5 71 92 32 15 f9 b2 4f 41 9a ee 3e 21 49 0e f4 8c 31 2f 9e 45 71 a2 30 4e e2 2b cd 4d a9 34 69 15 78 9a 91 34 89 e1 89 02 26 e2 54 d7 93 f8 5e ce e2 eb c5 97 8b 10 05 cf 6a f5 89 ad e6 7f 0f ba db ce a9 f2 9c d7 99 f8 32 f1 6c 3c 6d 77 e6 1c 92 30 3d eb 68 ff 00 bc 2b f6 29 2d 19 dd 69 fe 15 f1 32 42 5e 1b 78 dc 67 39 0d cd 3a 5d 37 c4 89 1b 45 25 8b 0c 8c 71 cd 76 5a 46 bd 02 db 85 32 14 27 b1 35 a9 1e b1 01 ff 00 96 ea 6b 49 c3 5d cc ae d1 f1 f7 c6 cd 37 53 d3 b5 48 e4 b9 8e 54 0e 4e 33 91 55 7e 0f 4f 76 fa e1 5d Data Ascii: Sov}~cW&<_/$IL\x\}?zu#t;Iq2OA>!I1/Eq0N+M4ix4&T^j2l<mw0=h+)-i2B^xg9:]7E%qvZF2'5kI]7SHTN3U~Ov]
2024-04-18 01:09:16 UTC	1255	IN	Data Raw: 0f ef 0c 1a f4 7f 00 e9 5a 7e 99 a7 79 97 36 d1 2c 60 ee 69 24 6e be f8 ac 3b 8d 46 de 38 fe cd 6b 36 d8 53 80 07 7a ca 95 e6 bd 26 d1 ee e4 58 8f 5d c7 1c 57 54 62 f9 5d 88 e7 77 56 3d a3 43 f8 a3 e1 1b 2b 96 b1 8a 66 67 1c 0d ab c6 6b d5 f4 bf 0d dd f8 97 40 4b df ed 51 69 0d ca 6e 41 1a e4 81 ee 6b e1 e7 b5 8e c6 f6 49 6d 9f 76 de 86 bd 4f e1 27 8d bc 61 aa c9 26 91 15 eb 2d ba 0c 61 56 b9 e5 ed 67 1e 48 bd 0f 52 84 b0 ea 1c cf 49 77 b5 ff 00 03 bc d6 fc 1b aa 58 5f 5c c7 69 a8 49 22 23 e0 cd 9c ee fc 6b 90 d7 34 2f 11 5b c6 d3 cf ac 5c 2c 43 b2 35 74 5e 21 d5 75 58 60 16 5a 8e ab 39 4e c9 11 09 f9 d7 9b 6b 16 d3 6a 77 4d 6e fa bd f8 85 8f dd 32 9c 55 d0 a7 88 4d 5e 57 43 c4 e2 f0 35 22 d4 69 5a 5d d7 f9 16 56 ca ea 46 4d fa fd e4 51 b3 61 9b 77 22 b5 Data Ascii: Z~y6,`i$n;F8k6Sz&X]WTb]wV=C+fgk@KQinAkImvO'a&-aVgHRIwX_\iI"#k4/[\,C5t^!uX`Z9NkjwMn2UM^WC5"iZ]VFMQaw"
2024-04-18 01:09:16 UTC	1255	IN	Data Raw: 41 0e a3 63 0c a4 8c 65 94 1c d6 4e af e0 0f 01 db 2b 5f 5d e8 16 38 5e 4b 18 81 ac 7d b3 8f bb 24 66 e9 df 54 78 a6 95 a9 e8 49 6e 12 c2 ee 26 4f 63 9a be 97 0a cc 1a 24 96 45 f5 58 c9 fe 95 eb de 16 b1 f0 65 fc 8d 16 95 a7 da 0d 83 b2 01 8a ea 17 47 b3 54 0b 1c 31 a0 1e 88 2a a7 5f 91 da 48 a8 d0 93 3e 7d 91 ae 98 06 8b 4a bf 9b fd d8 48 1f ad 55 ba b6 f1 6d c2 6d d3 3c 37 2a b9 e8 66 70 00 af a5 56 ca dd 40 01 17 8f 61 49 2c 56 90 c6 d2 c8 88 aa a3 24 9a cb eb 25 ac 33 ea 7c e5 a5 f8 5b e2 84 ff 00 34 89 a5 db e7 b1 2c 71 5b d0 78 37 e2 0f 94 3c fd 67 4e 84 7f b3 09 3f cc d7 b1 58 6a fa 2d e5 cf d9 ed 6e 22 92 5c e3 00 56 af 96 9f dc 1f 95 29 62 1a dd 0f ea c7 8d c1 e0 4f 13 49 10 32 f8 8d c1 3d e3 84 0a d9 d1 fc 07 72 80 0b cd 52 ee e3 3d 72 00 af 4c Data Ascii: AceN+_]8^K}$fTxIn&Oc$EXeGT1_H>}JHUmm<7fpV@aI,V$%3\|[4,q[x7<gN?Xj-n"\V)bOI2=rR=rL
2024-04-18 01:09:16 UTC	1255	IN	Data Raw: 7b 87 a5 5a b0 8d 6c 9e 38 24 28 8c 4f 0a 1b 9a 86 3d 71 18 95 3e 68 cf a0 a5 b2 82 d2 e3 52 4b 93 13 99 01 e1 98 9a 4f 71 c7 46 77 16 39 11 a9 c5 69 43 ca d6 7d 99 1b 40 c5 68 c3 c2 d5 83 d0 e4 fc 6b 6a b3 4d 1b 95 24 8a f3 8b bd 32 39 e5 b9 df 08 27 9e 6b d6 3c 55 34 36 d6 8f 3c c3 e5 45 24 9a f1 2b 6f 14 5d f8 8f c4 f2 e8 9e 1f d3 80 91 8e 1a 79 ce 14 0f 5a e2 93 f7 9a 05 b1 c9 6a c5 74 e9 5c ca a4 2a 9f ad 67 d9 6a 50 6a d7 71 da 41 1c e0 b1 c6 4a 71 57 3e 2e 69 3e 22 f0 c5 f2 0b e6 b7 9a 39 be eb 20 c8 06 b8 5b 6d 7b 54 82 40 d6 f2 f9 6e 3d 10 53 a3 5a 12 5e 47 3c a3 15 23 e9 ff 00 87 9e 16 b1 d2 ed 92 e4 e2 49 d8 64 bb 76 ae 6b e3 2e 89 6f a9 ea fa 78 29 f2 99 94 12 38 38 af 2b b7 f1 4f c4 08 2d 56 e2 0d 52 53 1f 61 81 5d 6f c3 5d 57 5a d7 fc 4d 07 Data Ascii: {Zl8$(O=q>hRKOqFw9iC}@hkjM$29'k<U46<E$+o]yZjt\*gjPjqAJqW>.i>"9 [m{T@n=SZ^G<#Idvk.ox)88+O-VRSa]o]WZM

Target ID:	1
Start time:	03:07:24
Start date:	18/04/2024
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
Imagebase:	0x7ff764a40000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	03:07:52
Start date:	18/04/2024
Path:	C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe"
Imagebase:	0x400000
File size:	2'156'385 bytes
MD5 hash:	4CC30C1DF004C715600258D3349BD4C9
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	12
Start time:	03:08:06
Start date:	18/04/2024
Path:	C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\Temp1_DownloadDirectorLauncher1.zip\DownloadDirectorLauncher.exe.exe"
Imagebase:	0x400000
File size:	2'156'385 bytes
MD5 hash:	4CC30C1DF004C715600258D3349BD4C9
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	03:08:22
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	03:08:23
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1888,i,2403929920380648888,10293033927867228673,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads (ex: `rundll32.exe {DLLname, DLLfunction}` ).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report DownloadDirectorLauncher1.zip

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Windows Analysis Report
DownloadDirectorLauncher1.zip