Edit tour

Windows Analysis Report
http://indianatollsroad.com

Overview

General Information

Sample URL:	http://indianatollsroad.com
Analysis ID:	1524243
Infos:

Detection

Score:	20
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Phishing site detected (based on shot match)

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5796 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4888 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2188,i,11164879643775128826,17152757547805123670,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6364 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://indianatollsroad.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /recaptcha/api2/reload?k=6LfH3FMqAAAAAKyx_81aHghU_FTJYIX9beQVop6A HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 7495sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-protobufferAccept: */*Origin: https://www.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&k=6LfH3FMqAAAAAKyx_81aHghU_FTJYIX9beQVop6AAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.18.0 (Ubuntu)Date: Wed, 02 Oct 2024 14:32:56 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 282Connection: close

Source: chromecache_59.2.dr, chromecache_82.2.dr, chromecache_68.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_59.2.dr, chromecache_82.2.dr, chromecache_68.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_59.2.dr, chromecache_82.2.dr, chromecache_68.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_59.2.dr, chromecache_82.2.dr, chromecache_68.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_59.2.dr, chromecache_82.2.dr, chromecache_68.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_68.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_68.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_68.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_59.2.dr, chromecache_82.2.dr, chromecache_68.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_59.2.dr, chromecache_82.2.dr, chromecache_68.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_59.2.dr, chromecache_82.2.dr, chromecache_68.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_59.2.dr, chromecache_82.2.dr, chromecache_76.2.dr, chromecache_72.2.dr, chromecache_68.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_59.2.dr, chromecache_82.2.dr, chromecache_68.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.
Source: chromecache_75.2.dr, chromecache_60.2.dr, chromecache_76.2.dr, chromecache_72.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49745 version: TLS 1.2

Source: classification engine

Classification label: sus20.phis.win@18/44@12/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2188,i,11164879643775128826,17152757547805123670,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://indianatollsroad.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2188,i,11164879643775128826,17152757547805123670,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://support.google.com/recaptcha#6262736	0%	URL Reputation	safe
https://cloud.google.com/recaptcha-enterprise/billing-information	0%	URL Reputation	safe
https://recaptcha.net	0%	URL Reputation	safe
https://support.google.com/recaptcha/?hl=en#6223828	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
indianatollsroad.com	188.68.220.10	true	false	unknown
www.google.com	142.250.181.228	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://indianatollsroad.com/	true	unknown
https://indianatollsroad.com/favicon.ico	true	unknown
https://www.google.com/recaptcha/api2/bframe?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&k=6LfH3FMqAAAAAKyx_81aHghU_FTJYIX9beQVop6A	false	unknown
https://www.google.com/recaptcha/api.js	false	unknown
https://www.google.com/recaptcha/api2/reload?k=6LfH3FMqAAAAAKyx_81aHghU_FTJYIX9beQVop6A	false	unknown
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfH3FMqAAAAAKyx_81aHghU_FTJYIX9beQVop6A&co=aHR0cHM6Ly9pbmRpYW5hdG9sbHNyb2FkLmNvbTo0NDM.&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&theme=light&size=normal&cb=6xkhuhk0144l	false	unknown
http://indianatollsroad.com/	false	unknown
https://www.google.com/js/bg/5Hh2ALJwVCoAq5i04w6Tc_td0SFcwt2xcFfRkbQms3o.js	false	unknown
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://play.google.com/log?format=json&hasfast=true	chromecache_68.2.dr	false		unknown
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_59.2.dr, chromecache_82.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_59.2.dr, chromecache_82.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_59.2.dr, chromecache_82.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha#6262736	chromecache_59.2.dr, chromecache_82.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_59.2.dr, chromecache_82.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://recaptcha.net	chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/recaptcha/api2/	chromecache_59.2.dr, chromecache_82.2.dr, chromecache_76.2.dr, chromecache_72.2.dr, chromecache_68.2.dr	false		unknown
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_59.2.dr, chromecache_82.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://cloud.google.com/contact	chromecache_59.2.dr, chromecache_82.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/recaptcha	chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_59.2.dr, chromecache_82.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	chromecache_59.2.dr, chromecache_82.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
216.58.212.164	unknown	United States	15169	GOOGLEUS	false
188.68.220.10	indianatollsroad.com	Russian Federation	49505	SELECTELRU	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.181.228	www.google.com	United States	15169	GOOGLEUS	false
142.250.184.228	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.10

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1524243
Start date and time:	2024-10-02 16:31:44 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 53s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://indianatollsroad.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus20.phis.win@18/44@12/8

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.227, 142.250.185.206, 173.194.76.84, 34.104.35.123, 142.250.186.74, 172.217.23.99, 142.250.185.234, 142.250.185.138, 142.250.181.234, 172.217.18.10, 142.250.186.42, 216.58.206.42, 216.58.212.170, 142.250.185.202, 142.250.185.170, 142.250.186.170, 142.250.184.234, 172.217.16.138, 142.250.185.106, 142.250.184.202, 142.250.74.202, 142.250.186.106, 142.250.185.195, 142.250.185.67, 20.114.59.183, 93.184.221.240, 216.58.212.163, 192.229.221.95, 20.3.187.198, 52.165.164.15, 52.165.165.26
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, fonts.gstatic.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://indianatollsroad.com

Input	Output
URL: https://indianatollsroad.com/ Model: jbxai

URL: https://indianatollsroad.com/ Model: jbxai

URL: https://indianatollsroad.com/ Model: jbxai

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15340, version 1.0
Category:	downloaded
Size (bytes):	15340
Entropy (8bit):	7.983406336508752
Encrypted:	false
SSDEEP:	384:F2gPJde0V2iGrQyD8b3k/tigCdeNqOUd47SH0tsGm:4gPVV2NQE8b3ldeNWH0Wb
MD5:	19B7A0ADFDD4F808B53AF7E2CE2AD4E5
SHA1:	81D5D4C7B5035AD10CCE63CF7100295E0C51FDDA
SHA-256:	C912A9CE0C3122D4B2B29AD26BFE06B0390D1A5BDAA5D6128692C0BEFD1DFBBD
SHA-512:	49DA16000687AC81FC4CA9E9112BDCA850BB9F32E0AF2FE751ABC57A8E9C3382451B50998CEB9DE56FC4196F1DC7EF46BBA47933FC47EB4538124870B7630036
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBBc4.woff2
Preview:	wOF2......;........d..;..........................d..z..J.`..L.Z..<.....\..`..^...x.6.$..6. ..\|. ..8..z%......Q.{..q...FF.kd .8.(..d..).!C...Y.JA...r. ..GH8F......nW...".2&....2<..+C...p...b..SC.......J......z.-..Q..#6&1zUe../\...l.....<.....9s...E~.]B-..B.wY..o......Q..A.F..1j.......-.`P% .. ,..@1.0..~.....WWW.d.u<c{..^.R.+..w....&.........A......+C....(.N.....0.~..0.J.;.Nu..7....]..m.H.....[h.GL3....?)....c.H...2.3.}y........SXI\|..iVN'%E.D.W....r..<`....i....6;E$.....U.$j.@...._.......R2....WS...k.vz.R.'a9!^...N....h.._.....c.%."..S.2.16B...o.2}.pmU[.\|.LI....2.....OWQLO1-....s..8.(...".\|6...6R.. ..M-.zO.}w)..v..mXxX...c..3#.+.v....F`.Z;.zQ.......r,....Yo.....g.h....+.....O.3Y..)Y.8.!....elX......._.3.}k~u.{ C..H.z..FP........@...d..)T.R...L.H.J.j.@..............$...E......y...3.b...I.h u.+%.HA.\..9..8..X.!....gx...].:..V..C...._..X..!....6..)...GM:E.....O.Z.}k.;.T.k..D.k.O..D5.r..."......?..T.Q.A...CF...3g.5.Dn<.QPy..G..1.9..Q..0..

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32038)
Category:	downloaded
Size (bytes):	95992
Entropy (8bit):	5.391333957965341
Encrypted:	false
SSDEEP:	1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3
MD5:	F03E5A3BF534F4A738BC350631FD05BD
SHA1:	37B1DB88B57438F1072A8EBC7559C909C9D3A682
SHA-256:	AEC3D419D50F05781A96F223E18289AEB52598B5DB39BE82A7B71DC67D6A7947
SHA-512:	8EEEAEFB86CF5F9D09426814F7B60E1805E644CAC3F5AB382C4D393DD0B7AB272C1909A31A57E6D38D5ACF207555F097A64A6DD62F60A97093E97BB184126D2A
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/1.11.3/jquery.min.js
Preview:	/! jQuery v1.11.3 \| (c) 2005, 2015 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.3",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (724)
Category:	dropped
Size (bytes):	551834
Entropy (8bit):	5.646059185430787
Encrypted:	false
SSDEEP:	6144:ytxIUYTteVvs0E8gSdoxS4MLYw1tZnAzsz1I9VBojCdzNDC2vPpD:ybYTZMgGopkAzsz1ciEU2d
MD5:	33AFF52B82A1DF246136E75500D93220
SHA1:	4675754451AF81F996EAB925923C31EF5115A9F4
SHA-256:	B5E8EC5D4DCC080657DEB2D004F65D974BF4EC9E9AA5D621E10749182FFF8731
SHA-512:	2E1BAAE95052737BDB3613A6165589643516A1F4811D19C2F037D426265AA5ADF3C70334C1106B1B0EEF779244389F0D7C8C52B4CD55FCE9BAB2E4FCB0642720
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var z=function(){return[function(v,p,K,u,W,n){if(!((v>>2&(n=[6,"Unknown format requested type for int64",9],n[0])\|\|!U[22](11,this.U(),p)&&this.dispatchEvent("enter")&&this.isEnabled()&&R[23](n[2],this,2)&&R[3](n[0],2,!0,this),v-1)<20&&(v>>1&7)>=4&&(u=new vf,W=R[41](1,p,u,kV,K==p?K:P[8](37,K),5)),v<<1&11))throw Error(n[1]);return W},function(v,p,K,u,W){return((W=[17,7,46],v)<<2&W[1]\|\|(p=function(n){return K.call(p.src,p.listener,n)},K=UJ,u=p),(v-1\|12)<v&&(v-9\|59)>=v)&&(u=M[W[2]](15,p)&&!M[W[2]](13,."iPod")&&!M[W[2]](W[0],K)),((v\|8)&W[1])==1&&(u=p.Y?p.Y:p.I?"application/x-protobuffer":""),u},function(v,p,K,u,W){retu

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	102
Entropy (8bit):	4.921030304008144
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKzaXORdQzXWaee:PLKdXNQKGeOL
MD5:	59EE3965FCB16F88E9BDC20B9CD8612E
SHA1:	3D93A27E4DAC9DDA01DC5BBCCA9E1F53E827DAF2
SHA-256:	020A92F2FB27981D1398F916AE17400F8F11473962EBD858B7BF6901814EDD7B
SHA-512:	3E4C07D9CE3DEDE2998A59C32A3FE12D781AAE33C4AFE8D2B9B0D12C18EB96257373098497B5F3C909EC1EDE64FEB4B4074DBDB9678B4D6B019CD64360222849
Malicious:	false
Reputation:	low
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js');

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAk2URWKz8hE-hIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	282
Entropy (8bit):	5.179286355980502
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwGObRmEr6VnetdzRx3G0CezoIR+knL6pZIyBFEcXaoD:J0+oxBeRmR9etdzRxGezH0qLy2Lma+
MD5:	5E9F88423FC89944A1470E7A68975EB2
SHA1:	81366320A92D0DAD08B5C7320D403100CF98F5FF
SHA-256:	0BF45F72FBD9004361EFAD18B55A61655A5251F226244B3F7D9EAECC089348EC
SHA-512:	9CF3236F53F6C5855339F616968A0FB5AD3B2982FD5879794C5C19B3C97AEC5E3EEF9491CF216D1360AC9112DC7042EC0984C6368E35D604204BCD783CA70C1B
Malicious:	false
Reputation:	low
URL:	https://indianatollsroad.com/favicon.ico
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL was not found on this server.</p>.<hr>.<address>Apache/2.4.41 (Ubuntu) Server at indianatollsroad.com Port 80</address>.</body></html>.

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18030)
Category:	downloaded
Size (bytes):	18650
Entropy (8bit):	5.648575961776466
Encrypted:	false
SSDEEP:	384:jA1TuuRF74aIOsJZcn6wccp0cVj1dAHKx5ok9SvatinaeoHElo3o:joauRuOWZc6wckjfQw9camaeCC9
MD5:	52C5C97B26CBA07F7E59A5BA8CE60A3D
SHA1:	056ADB56291967583E49FC3FBD208AFF219DB2AC
SHA-256:	E4787600B270542A00AB98B4E30E9373FB5DD1215CC2DDB17057D191B426B37A
SHA-512:	08FE8755BF5042E83046B26624A4C8BC90CB85AA2BB5539C2C2C7E856590EFFB4FDF7E9768B884E9C15988DE705B4C809E708F34D9CCCA982BFE9CAF58AAEE5F
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/5Hh2ALJwVCoAq5i04w6Tc_td0SFcwt2xcFfRkbQms3o.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var u=this\|\|self,d=function(c){return c},A=function(c,T){if((T=(c=null,u).trustedTypes,!T)\|\|!T.createPolicy)return c;try{c=T.createPolicy("bg",{createHTML:d,createScript:d,createScriptURL:d})}catch(Y){u.console&&u.console.error(Y.message)}return c};(0,eval)(function(c,T){return(T=A())&&c.eval(T.createScript("1"))===1?function(Y){return T.createScript(Y)}:function(Y){return""+Y}}(u)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var uT=function(Y,c,T,d){return O(c,(M(c,(Yd(T,((d=O(c,493),c.A)&&d<c.T?(M(c,493,c.T),Tx(Y,c)):M(c,493,Y),c)),493),d),511))},R=function(Y,c){c.C.splice(0,0,Y)},D=this\|\|self,B=function(Y,c,T,d,A,S,v,k,u,Q,I,N,P,V){if(A=O(c,493),A>=c.T)throw[w,31];for(k=(I=(u=(P=0,c.kc.length),Y),A);I>0;)N=k>>3,V=c.A[N],d=k%8,S=8-(d\|0),S=S<I?S:I,T&&(v=k,Q=c,Q.g!=v>>6&&(Q.g=v>>6,v=O(Q,116),Q.hz=d

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (724)
Category:	downloaded
Size (bytes):	551834
Entropy (8bit):	5.646059185430787
Encrypted:	false
SSDEEP:	6144:ytxIUYTteVvs0E8gSdoxS4MLYw1tZnAzsz1I9VBojCdzNDC2vPpD:ybYTZMgGopkAzsz1ciEU2d
MD5:	33AFF52B82A1DF246136E75500D93220
SHA1:	4675754451AF81F996EAB925923C31EF5115A9F4
SHA-256:	B5E8EC5D4DCC080657DEB2D004F65D974BF4EC9E9AA5D621E10749182FFF8731
SHA-512:	2E1BAAE95052737BDB3613A6165589643516A1F4811D19C2F037D426265AA5ADF3C70334C1106B1B0EEF779244389F0D7C8C52B4CD55FCE9BAB2E4FCB0642720
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var z=function(){return[function(v,p,K,u,W,n){if(!((v>>2&(n=[6,"Unknown format requested type for int64",9],n[0])\|\|!U[22](11,this.U(),p)&&this.dispatchEvent("enter")&&this.isEnabled()&&R[23](n[2],this,2)&&R[3](n[0],2,!0,this),v-1)<20&&(v>>1&7)>=4&&(u=new vf,W=R[41](1,p,u,kV,K==p?K:P[8](37,K),5)),v<<1&11))throw Error(n[1]);return W},function(v,p,K,u,W){return((W=[17,7,46],v)<<2&W[1]\|\|(p=function(n){return K.call(p.src,p.listener,n)},K=UJ,u=p),(v-1\|12)<v&&(v-9\|59)>=v)&&(u=M[W[2]](15,p)&&!M[W[2]](13,."iPod")&&!M[W[2]](W[0],K)),((v\|8)&W[1])==1&&(u=p.Y?p.Y:p.I?"application/x-protobuffer":""),u},function(v,p,K,u,W){retu

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/audio_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	665
Entropy (8bit):	7.42832670119013
Encrypted:	false
SSDEEP:	12:6v/7OEUelyuRs56fyKgIEInu5VLJBZInmJhd/3VqQXD8GBm1:belFRs56fuIEIu5VNBZInMTICfBO
MD5:	07BF314AAB04047B9E9A959EE6F63DA3
SHA1:	17BEF6602672E2FD9956381E01356245144003E5
SHA-256:	55EAF62CB05DA20088DC12B39D7D254D046CB1FD61DDF3AE641F1439EFD0A5EE
SHA-512:	2A1D4EBC7FBA6951881FD1DDA745480B504E14E3ADAC3B27EC5CF4045DE14FF030D45DDA99DC056285C7980446BA0FC37F489B7534BE46107B21BD43CEE87BA0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/info_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..W..DA.=.6O...H.,E.............b.....C.1...1..EbLPI.W......H..s.z5.:..._.d.0.u.......j.x.R..._.v..R...1..ir..`.yn..R..j.h./y..l......(`..5....l.E..0......B^......F.....F....Y\|p..._,p.............(3^.r.P.O......;<....z.,..yF....N..x.MS...Q.C%......D8G.+......oOk...)T..}\|..e...G.....'.R..G.Z.T}7(...&..@...G....$PGYv...A.c.]d....N..'.4b...R.%..)2Yd..b.M..^@.M....^.:h.N(dP*t..RQ%.o...{.vGH..S._".@./...g.....]...?..h..E.,r.m.%."."W.6G..t...->....q\.Kc.t"^......Kj~{l..C..).y..><@\|yB....=c.............!...<....IEND.B`.

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	dropped
Size (bytes):	37077
Entropy (8bit):	7.974271687375226
Encrypted:	false
SSDEEP:	768:enc2wr5c97WSPksjpx9oLn3mEaQ6yi9zeZBWhZSu5QCypOIh/irlob:enc2wKWSPksjpgjzE4WhZSnqg
MD5:	9C54D7A656B582A13B7BBCEC8B554EDB
SHA1:	4185AA61077A5BB825FF1E97C3A588263A5D1573
SHA-256:	156CE57CEA4BC9A79C6098F8759FBD9FFA03B94F435A2637F95DF1167C958B12
SHA-512:	8F46C9C651E27ACC5594D9236FFCE06C675DB514A5B0EA9DAF485457E29C5BF2332C50DBF799DF61E43F351A9048DFCE9FBC7D73B03DB2619B38D8245D713204
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...........`(..O.."...2.S..5..K2..p."...D....%...y.#9le=t:=_..\G".+>8..s:v..(f..3[6@>...5.o..*.]..Z..U...[..Q...p.5..;4.V.5......q.N....GJm..O..v0@.....J....<B....C..../_.W.........8...$.v:]....!d.y.Mml..+.".\...sN..-2-..q.p...A}..q=...c(.+.S.V.)..:.+$..].#s..[:=...\|...!......<q.j>.HD...x.=..\|_...j.p...N...rv'.M..k{jt.}.H.A.../u.>....U.E..k..x..M..k.il.../

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1434), with no line terminators
Category:	dropped
Size (bytes):	1434
Entropy (8bit):	5.782287307315429
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtw1aWDAQosLc:VKEctKo7LmvtUjPKtX7S1aiRLrwUnG
MD5:	E7F4945A3458503BDEE0AD9476537604
SHA1:	CD049E2F8F9D05ABC087BBEF7EFEDA01EFB0F3A6
SHA-256:	8AB3BC08E25F6A7E24EF75EE66ED06360BCEEACE487D22822D7724B3F2BBED50
SHA-512:	BD30B50396E0015B723FFD185972E37094A5CFF4A42CB5AE5D439AE3B85F2735F33145B363E2657AC174D66ED2E3F97FC0C2BFC9FDEE6B06C61E5A01FD1CFF34
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m)

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	78840
Entropy (8bit):	6.022413301778022
Encrypted:	false
SSDEEP:	1536:OfGNbFoZJSUYOOaLnAW8+IcTOIlbuhXwW4nxM:mGRFauOxLA/+IcTOjX/
MD5:	0CA290F7801B0434CFE66A0F300A324C
SHA1:	0891B431E5F2671A211DDD8F03ACF1D07792F076
SHA-256:	0C613DC5F9E10DFF735C7A102433381C97B89C4A26CE26C78D9FFAD1ADDDC528
SHA-512:	AF70C75F30B08D731042C45091681B55E398EA6E6D96189BC9935CE25584A57240C678FF44C0C0428F93BF1F6A504E0558BC63F233D66D1B9A5B477BA1EF1533
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAAIGNIUk0AAHomAACAhAAA+gAAAIDoAAB1MAAA6mAAADqYAAAXcJy6UTwAAAAGYktHRAD/AP8A/6C9p5MAAHq9SURBVHja7Z15fFTl9f/fd9ZM9n1PgCyEXSSRNYKCgAuiIipuVSuudavV1tq6W/WrtnWrrZbWDZUqUqUoCoIEQhBI2JesELKvM9mTWe7c3x83d5xAlkky8fv92ft5vfKC19znOWfuZ571POc5B1SoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKFChQoVKlSoUKHifwGCRqsTNFrdj6VPq9XqtNofT9+wvutQyEyad8t9IaPPntFUd

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.921030304008144
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKzaXORdQzXWaee:PLKdXNQKGeOL
MD5:	59EE3965FCB16F88E9BDC20B9CD8612E
SHA1:	3D93A27E4DAC9DDA01DC5BBCCA9E1F53E827DAF2
SHA-256:	020A92F2FB27981D1398F916AE17400F8F11473962EBD858B7BF6901814EDD7B
SHA-512:	3E4C07D9CE3DEDE2998A59C32A3FE12D781AAE33C4AFE8D2B9B0D12C18EB96257373098497B5F3C909EC1EDE64FEB4B4074DBDB9678B4D6B019CD64360222849
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js');

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1434), with no line terminators
Category:	downloaded
Size (bytes):	1434
Entropy (8bit):	5.782287307315429
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCe2TLph9gFB5vtADjkrDQndcl/1t4glvllLtw1aWDAQosLc:VKEctKo7LmvtUjPKtX7S1aiRLrwUnG
MD5:	E7F4945A3458503BDEE0AD9476537604
SHA1:	CD049E2F8F9D05ABC087BBEF7EFEDA01EFB0F3A6
SHA-256:	8AB3BC08E25F6A7E24EF75EE66ED06360BCEEACE487D22822D7724B3F2BBED50
SHA-512:	BD30B50396E0015B723FFD185972E37094A5CFF4A42CB5AE5D439AE3B85F2735F33145B363E2657AC174D66ED2E3F97FC0C2BFC9FDEE6B06C61E5A01FD1CFF34
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A/kargTFyk8MR5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m)

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32038)
Category:	dropped
Size (bytes):	95992
Entropy (8bit):	5.391333957965341
Encrypted:	false
SSDEEP:	1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLDFoNqLTW8+S5VRZIVI6xSb8xh2ZbQnRmm:R+41ZqLTW8xRrqSb8qGH77da98Hr3
MD5:	F03E5A3BF534F4A738BC350631FD05BD
SHA1:	37B1DB88B57438F1072A8EBC7559C909C9D3A682
SHA-256:	AEC3D419D50F05781A96F223E18289AEB52598B5DB39BE82A7B71DC67D6A7947
SHA-512:	8EEEAEFB86CF5F9D09426814F7B60E1805E644CAC3F5AB382C4D393DD0B7AB272C1909A31A57E6D38D5ACF207555F097A64A6DD62F60A97093E97BB184126D2A
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.11.3 \| (c) 2005, 2015 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.3",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18030)
Category:	dropped
Size (bytes):	18650
Entropy (8bit):	5.648575961776466
Encrypted:	false
SSDEEP:	384:jA1TuuRF74aIOsJZcn6wccp0cVj1dAHKx5ok9SvatinaeoHElo3o:joauRuOWZc6wckjfQw9camaeCC9
MD5:	52C5C97B26CBA07F7E59A5BA8CE60A3D
SHA1:	056ADB56291967583E49FC3FBD208AFF219DB2AC
SHA-256:	E4787600B270542A00AB98B4E30E9373FB5DD1215CC2DDB17057D191B426B37A
SHA-512:	08FE8755BF5042E83046B26624A4C8BC90CB85AA2BB5539C2C2C7E856590EFFB4FDF7E9768B884E9C15988DE705B4C809E708F34D9CCCA982BFE9CAF58AAEE5F
Malicious:	false
Reputation:	low
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var u=this\|\|self,d=function(c){return c},A=function(c,T){if((T=(c=null,u).trustedTypes,!T)\|\|!T.createPolicy)return c;try{c=T.createPolicy("bg",{createHTML:d,createScript:d,createScriptURL:d})}catch(Y){u.console&&u.console.error(Y.message)}return c};(0,eval)(function(c,T){return(T=A())&&c.eval(T.createScript("1"))===1?function(Y){return T.createScript(Y)}:function(Y){return""+Y}}(u)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' Copyright Google LLC',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var uT=function(Y,c,T,d){return O(c,(M(c,(Yd(T,((d=O(c,493),c.A)&&d<c.T?(M(c,493,c.T),Tx(Y,c)):M(c,493,Y),c)),493),d),511))},R=function(Y,c){c.C.splice(0,0,Y)},D=this\|\|self,B=function(Y,c,T,d,A,S,v,k,u,Q,I,N,P,V){if(A=O(c,493),A>=c.T)throw[w,31];for(k=(I=(u=(P=0,c.kc.length),Y),A);I>0;)N=k>>3,V=c.A[N],d=k%8,S=8-(d\|0),S=S<I?S:I,T&&(v=k,Q=c,Q.g!=v>>6&&(Q.g=v>>6,v=O(Q,116),Q.hz=d

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 450x450, components 3
Category:	downloaded
Size (bytes):	37077
Entropy (8bit):	7.974271687375226
Encrypted:	false
SSDEEP:	768:enc2wr5c97WSPksjpx9oLn3mEaQ6yi9zeZBWhZSu5QCypOIh/irlob:enc2wKWSPksjpgjzE4WhZSnqg
MD5:	9C54D7A656B582A13B7BBCEC8B554EDB
SHA1:	4185AA61077A5BB825FF1E97C3A588263A5D1573
SHA-256:	156CE57CEA4BC9A79C6098F8759FBD9FFA03B94F435A2637F95DF1167C958B12
SHA-512:	8F46C9C651E27ACC5594D9236FFCE06C675DB514A5B0EA9DAF485457E29C5BF2332C50DBF799DF61E43F351A9048DFCE9FBC7D73B03DB2619B38D8245D713204
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/payload?p=06AFcWeA7buMnOYkT1e1OX33WwV5BYHtGoe6rsCc6yLwIOZxWYReONmSzeYoH4QhJ96wFfjHVdoZbgzKFjuhEFc5CWzryWVquRxXJSXc0MvXu2Hku_AZ1ZY3TI3eS5Y6Xv4pZeNC8GlLKRexXU3EjCJXh_LXG4i7SktYtRp9ojSk2x4qXPwyWbFXmHXrLeZcWMV-TMBywxkpQI&k=6LfH3FMqAAAAAKyx_81aHghU_FTJYIX9beQVop6A
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...........`(..O.."...2.S..5..K2..p."...D....%...y.#9le=t:=_..\G".+>8..s:v..(f..3[6@>...5.o..*.]..Z..U...[..Q...p.5..;4.V.5......q.N....GJm..O..v0@.....J....<B....C..../_.W.........8...$.v:]....!d.y.Mml..+.".\...sN..-2-..q.p...A}..q=...c(.+.S.V.)..:.+$..].#s..[:=...\|...!......<q.j>.HD...x.=..\|_...j.p...N...rv'.M..k{jt.}.H.A.../u.>....U.E..k..x..M..k.il.../

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	600
Entropy (8bit):	7.391634169810707
Encrypted:	false
SSDEEP:	12:6v/7OEUT9vceKKNtY3kM8O+mucROzZbJOAjPBE2Iq8AnxT9:bTdcVIM8tfHzzjy2IdKT9
MD5:	0F2A4639B8A4CB30C76E8333C00D30A6
SHA1:	57E273A270BB864970D747C74B3F0A7C8E515B13
SHA-256:	44B988703019CD6BFA86C91840FECF2A42B611B364E3EEA2F4EB63BF62714E98
SHA-512:	3EA72C7E8702D2E9D94B0FAA6FA095A33AB8BC6EC2891F8B3165CE29A9CCF2114FAEF424FA03FD4B9D06785326284C1BB2087CE05E249CCAC65418361BFA7C51
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/refresh_2x.png
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX..M+.Q.....&/....&......6...\|.I..).o.I.X..#.@.bb.D.'5....m...=..y........{....<.P..;.H......f...3l...M.I...j2.....3..1x..S......9..<m...E.'F'.. ...M.j...C..c.5.-..F..3H./F!.."V.e.i.}.Y....../.rw...@...].rp...`CQo(.....J...u.".!E...$.^$...k....b....@.^.;.u5........H/Q{..$..'..........w...r.+xS.uR..J.......GD.O./.. G7..l...J.t.3.S...N.7...e..s.-Jlj)..5E....E.;8w4.k..=.li.G...1.c....p,T6;....1.oW.%.2,..Z..a...*m.s}T1F....Hr.1......<x0.....-.i......IEND.B`.

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (724)
Category:	downloaded
Size (bytes):	551834
Entropy (8bit):	5.646059185430787
Encrypted:	false
SSDEEP:	6144:ytxIUYTteVvs0E8gSdoxS4MLYw1tZnAzsz1I9VBojCdzNDC2vPpD:ybYTZMgGopkAzsz1ciEU2d
MD5:	33AFF52B82A1DF246136E75500D93220
SHA1:	4675754451AF81F996EAB925923C31EF5115A9F4
SHA-256:	B5E8EC5D4DCC080657DEB2D004F65D974BF4EC9E9AA5D621E10749182FFF8731
SHA-512:	2E1BAAE95052737BDB3613A6165589643516A1F4811D19C2F037D426265AA5ADF3C70334C1106B1B0EEF779244389F0D7C8C52B4CD55FCE9BAB2E4FCB0642720
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var z=function(){return[function(v,p,K,u,W,n){if(!((v>>2&(n=[6,"Unknown format requested type for int64",9],n[0])\|\|!U[22](11,this.U(),p)&&this.dispatchEvent("enter")&&this.isEnabled()&&R[23](n[2],this,2)&&R[3](n[0],2,!0,this),v-1)<20&&(v>>1&7)>=4&&(u=new vf,W=R[41](1,p,u,kV,K==p?K:P[8](37,K),5)),v<<1&11))throw Error(n[1]);return W},function(v,p,K,u,W){return((W=[17,7,46],v)<<2&W[1]\|\|(p=function(n){return K.call(p.src,p.listener,n)},K=UJ,u=p),(v-1\|12)<v&&(v-9\|59)>=v)&&(u=M[W[2]](15,p)&&!M[W[2]](13,."iPod")&&!M[W[2]](W[0],K)),((v\|8)&W[1])==1&&(u=p.Y?p.Y:p.I?"application/x-protobuffer":""),u},function(v,p,K,u,W){retu

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	530
Entropy (8bit):	7.2576396280117494
Encrypted:	false
SSDEEP:	12:6v/7OEUhUxzPKmghSn8nazyk+k8/OzxQcxNMvVb:bhUxzlvWkT8FcxK1
MD5:	88E0F42C9FA4F94AA8BCD54D1685C180
SHA1:	5AD9D47A49B82718BAA3BE88550A0B3350270C42
SHA-256:	89C62095126FCA89EA1511CF35B49B8306162946B0C26D6F60C5506C51D85992
SHA-512:	FAFF842E9FF4CC838EC3C724E95EEE6D36B2F8C768DC23E48669E28FC5C19AA24B1B34CF1DBCBE877B3537D6A325B4C35AF440C2B6D58F6A77A04A208D9296F8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.......1.....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........IDATX...JBA.....E-R... (#..-*$.}.%.Kt.A..Dx.I...AF.Q.4.......-.6..?.m:.,.......Q..D.L..e4..2.D..8)j4:......&>.s......p?......9.o5>.][H.}...&L.%.xh{~K.J\|.b..N..HMp....f.}dd..S..4%...$dK..!..Z..NNs.W&g..Fn....p...w..Ut...E\.e.......6......M.F...X.L......em.....R#'..%....j$/..-......@.l."..M.\|....OtW.H.,.-.~W`Z.s8..W...B...C-.8"H....6......9...A..aO.1`.M..A..eA.{...-...U.,.W........IEND.B`.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 2, 2024 16:32:39.329054117 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 2, 2024 16:32:43.085650921 CEST	49732	53	192.168.2.4	1.1.1.1
Oct 2, 2024 16:32:43.090730906 CEST	53	49732	1.1.1.1	192.168.2.4
Oct 2, 2024 16:32:43.090795040 CEST	49732	53	192.168.2.4	1.1.1.1
Oct 2, 2024 16:32:43.090873957 CEST	49732	53	192.168.2.4	1.1.1.1
Oct 2, 2024 16:32:43.090907097 CEST	49732	53	192.168.2.4	1.1.1.1
Oct 2, 2024 16:32:43.095705032 CEST	53	49732	1.1.1.1	192.168.2.4
Oct 2, 2024 16:32:43.095822096 CEST	53	49732	1.1.1.1	192.168.2.4
Oct 2, 2024 16:32:43.139416933 CEST	49732	53	192.168.2.4	1.1.1.1
Oct 2, 2024 16:32:43.189209938 CEST	53	49732	1.1.1.1	192.168.2.4
Oct 2, 2024 16:32:43.453367949 CEST	53	49732	1.1.1.1	192.168.2.4
Oct 2, 2024 16:32:43.453424931 CEST	49732	53	192.168.2.4	1.1.1.1
Oct 2, 2024 16:32:45.095282078 CEST	49736	80	192.168.2.4	188.68.220.10
Oct 2, 2024 16:32:45.095647097 CEST	49737	80	192.168.2.4	188.68.220.10
Oct 2, 2024 16:32:45.100286961 CEST	80	49736	188.68.220.10	192.168.2.4
Oct 2, 2024 16:32:45.100548983 CEST	49736	80	192.168.2.4	188.68.220.10
Oct 2, 2024 16:32:45.100548983 CEST	49736	80	192.168.2.4	188.68.220.10
Oct 2, 2024 16:32:45.100708961 CEST	80	49737	188.68.220.10	192.168.2.4
Oct 2, 2024 16:32:45.100761890 CEST	49737	80	192.168.2.4	188.68.220.10
Oct 2, 2024 16:32:45.105545044 CEST	80	49736	188.68.220.10	192.168.2.4
Oct 2, 2024 16:32:46.006249905 CEST	80	49736	188.68.220.10	192.168.2.4
Oct 2, 2024 16:32:46.006619930 CEST	80	49736	188.68.220.10	192.168.2.4
Oct 2, 2024 16:32:46.006666899 CEST	49736	80	192.168.2.4	188.68.220.10
Oct 2, 2024 16:32:46.011574984 CEST	49736	80	192.168.2.4	188.68.220.10
Oct 2, 2024 16:32:46.016418934 CEST	80	49736	188.68.220.10	192.168.2.4
Oct 2, 2024 16:32:46.050837040 CEST	49740	443	192.168.2.4	188.68.220.10
Oct 2, 2024 16:32:46.050892115 CEST	443	49740	188.68.220.10	192.168.2.4
Oct 2, 2024 16:32:46.050973892 CEST	49740	443	192.168.2.4	188.68.220.10
Oct 2, 2024 16:32:46.051671982 CEST	49740	443	192.168.2.4	188.68.220.10
Oct 2, 2024 16:32:46.051693916 CEST	443	49740	188.68.220.10	192.168.2.4
Oct 2, 2024 16:32:47.072772980 CEST	49741	443	192.168.2.4	142.250.181.228
Oct 2, 2024 16:32:47.072809935 CEST	443	49741	142.250.181.228	192.168.2.4
Oct 2, 2024 16:32:47.072925091 CEST	49741	443	192.168.2.4	142.250.181.228
Oct 2, 2024 16:32:47.075112104 CEST	443	49740	188.68.220.10	192.168.2.4
Oct 2, 2024 16:32:47.119415998 CEST	49740	443	192.168.2.4	188.68.220.10
Oct 2, 2024 16:32:47.508157015 CEST	49741	443	192.168.2.4	142.250.181.228
Oct 2, 2024 16:32:47.508188009 CEST	443	49741	142.250.181.228	192.168.2.4
Oct 2, 2024 16:32:47.508697987 CEST	49740	443	192.168.2.4	188.68.220.10
Oct 2, 2024 16:32:47.508721113 CEST	443	49740	188.68.220.10	192.168.2.4
Oct 2, 2024 16:32:47.512556076 CEST	443	49740	188.68.220.10	192.168.2.4
Oct 2, 2024 16:32:47.512655973 CEST	49740	443	192.168.2.4	188.68.220.10
Oct 2, 2024 16:32:47.514167070 CEST	49740	443	192.168.2.4	188.68.220.10
Oct 2, 2024 16:32:47.514369011 CEST	443	49740	188.68.220.10	192.168.2.4
Oct 2, 2024 16:32:47.514750957 CEST	49740	443	192.168.2.4	188.68.220.10
Oct 2, 2024 16:32:47.514756918 CEST	443	49740	188.68.220.10	192.168.2.4
Oct 2, 2024 16:32:47.563219070 CEST	49740	443	192.168.2.4	188.68.220.10
Oct 2, 2024 16:32:48.028100967 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 2, 2024 16:32:48.028141022 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 2, 2024 16:32:48.028213024 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 2, 2024 16:32:48.030976057 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 2, 2024 16:32:48.030988932 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 2, 2024 16:32:48.155328989 CEST	443	49741	142.250.181.228	192.168.2.4
Oct 2, 2024 16:32:48.155805111 CEST	49741	443	192.168.2.4	142.250.181.228
Oct 2, 2024 16:32:48.155822992 CEST	443	49741	142.250.181.228	192.168.2.4
Oct 2, 2024 16:32:48.157497883 CEST	443	49741	142.250.181.228	192.168.2.4
Oct 2, 2024 16:32:48.157572985 CEST	49741	443	192.168.2.4	142.250.181.228
Oct 2, 2024 16:32:48.161144972 CEST	49741	443	192.168.2.4	142.250.181.228
Oct 2, 2024 16:32:48.161245108 CEST	443	49741	142.250.181.228	192.168.2.4
Oct 2, 2024 16:32:48.172558069 CEST	443	49740	188.68.220.10	192.168.2.4
Oct 2, 2024 16:32:48.172688007 CEST	443	49740	188.68.220.10	192.168.2.4
Oct 2, 2024 16:32:48.172741890 CEST	49740	443	192.168.2.4	188.68.220.10
Oct 2, 2024 16:32:48.198309898 CEST	49740	443	192.168.2.4	188.68.220.10
Oct 2, 2024 16:32:48.198333025 CEST	443	49740	188.68.220.10	192.168.2.4
Oct 2, 2024 16:32:48.210880041 CEST	49741	443	192.168.2.4	142.250.181.228
Oct 2, 2024 16:32:48.210889101 CEST	443	49741	142.250.181.228	192.168.2.4
Oct 2, 2024 16:32:48.251209021 CEST	49741	443	192.168.2.4	142.250.181.228
Oct 2, 2024 16:32:48.317869902 CEST	49743	443	192.168.2.4	142.250.184.196
Oct 2, 2024 16:32:48.317917109 CEST	443	49743	142.250.184.196	192.168.2.4
Oct 2, 2024 16:32:48.317972898 CEST	49743	443	192.168.2.4	142.250.184.196
Oct 2, 2024 16:32:48.318887949 CEST	49743	443	192.168.2.4	142.250.184.196
Oct 2, 2024 16:32:48.318903923 CEST	443	49743	142.250.184.196	192.168.2.4
Oct 2, 2024 16:32:48.687819958 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 2, 2024 16:32:48.687946081 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 2, 2024 16:32:48.691734076 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 2, 2024 16:32:48.691739082 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 2, 2024 16:32:48.692054033 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 2, 2024 16:32:48.733553886 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 2, 2024 16:32:48.779400110 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 2, 2024 16:32:48.958695889 CEST	443	49743	142.250.184.196	192.168.2.4
Oct 2, 2024 16:32:48.959296942 CEST	49743	443	192.168.2.4	142.250.184.196
Oct 2, 2024 16:32:48.959316015 CEST	443	49743	142.250.184.196	192.168.2.4
Oct 2, 2024 16:32:48.960494041 CEST	443	49743	142.250.184.196	192.168.2.4
Oct 2, 2024 16:32:48.960587978 CEST	49743	443	192.168.2.4	142.250.184.196
Oct 2, 2024 16:32:48.960771084 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 2, 2024 16:32:48.960835934 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 2, 2024 16:32:48.960906029 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 2, 2024 16:32:48.961035967 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 2, 2024 16:32:48.961035967 CEST	49742	443	192.168.2.4	184.28.90.27
Oct 2, 2024 16:32:48.961050987 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 2, 2024 16:32:48.961059093 CEST	443	49742	184.28.90.27	192.168.2.4
Oct 2, 2024 16:32:48.961694002 CEST	49743	443	192.168.2.4	142.250.184.196
Oct 2, 2024 16:32:48.961798906 CEST	443	49743	142.250.184.196	192.168.2.4
Oct 2, 2024 16:32:48.961821079 CEST	49743	443	192.168.2.4	142.250.184.196
Oct 2, 2024 16:32:48.994250059 CEST	49745	443	192.168.2.4	184.28.90.27
Oct 2, 2024 16:32:48.994282007 CEST	443	49745	184.28.90.27	192.168.2.4
Oct 2, 2024 16:32:48.994354010 CEST	49745	443	192.168.2.4	184.28.90.27
Oct 2, 2024 16:32:48.994669914 CEST	49745	443	192.168.2.4	184.28.90.27
Oct 2, 2024 16:32:48.994683027 CEST	443	49745	184.28.90.27	192.168.2.4
Oct 2, 2024 16:32:49.005250931 CEST	49743	443	192.168.2.4	142.250.184.196
Oct 2, 2024 16:32:49.005275965 CEST	443	49743	142.250.184.196	192.168.2.4
Oct 2, 2024 16:32:49.053493023 CEST	49743	443	192.168.2.4	142.250.184.196
Oct 2, 2024 16:32:49.448508978 CEST	443	49743	142.250.184.196	192.168.2.4
Oct 2, 2024 16:32:49.448554993 CEST	443	49743	142.250.184.196	192.168.2.4
Oct 2, 2024 16:32:49.448654890 CEST	443	49743	142.250.184.196	192.168.2.4
Oct 2, 2024 16:32:49.448681116 CEST	49743	443	192.168.2.4	142.250.184.196
Oct 2, 2024 16:32:49.448720932 CEST	49743	443	192.168.2.4	142.250.184.196
Oct 2, 2024 16:32:49.452944040 CEST	49743	443	192.168.2.4	142.250.184.196
Oct 2, 2024 16:32:49.452963114 CEST	443	49743	142.250.184.196	192.168.2.4
Oct 2, 2024 16:32:49.491614103 CEST	49747	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:49.491657972 CEST	443	49747	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:49.491938114 CEST	49747	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:49.492346048 CEST	49747	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:49.492357969 CEST	443	49747	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:49.634215117 CEST	443	49745	184.28.90.27	192.168.2.4
Oct 2, 2024 16:32:49.634316921 CEST	49745	443	192.168.2.4	184.28.90.27
Oct 2, 2024 16:32:50.042784929 CEST	49745	443	192.168.2.4	184.28.90.27
Oct 2, 2024 16:32:50.042814016 CEST	443	49745	184.28.90.27	192.168.2.4
Oct 2, 2024 16:32:50.043253899 CEST	443	49745	184.28.90.27	192.168.2.4
Oct 2, 2024 16:32:50.054718018 CEST	49745	443	192.168.2.4	184.28.90.27
Oct 2, 2024 16:32:50.095400095 CEST	443	49745	184.28.90.27	192.168.2.4
Oct 2, 2024 16:32:50.149565935 CEST	443	49747	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:50.149982929 CEST	49747	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:50.150005102 CEST	443	49747	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:50.151077032 CEST	443	49747	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:50.151128054 CEST	49747	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:50.151835918 CEST	49747	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:50.151915073 CEST	443	49747	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:50.152127028 CEST	49747	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:50.152133942 CEST	443	49747	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:50.203826904 CEST	49747	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:50.239376068 CEST	443	49745	184.28.90.27	192.168.2.4
Oct 2, 2024 16:32:50.239577055 CEST	443	49745	184.28.90.27	192.168.2.4
Oct 2, 2024 16:32:50.239640951 CEST	49745	443	192.168.2.4	184.28.90.27
Oct 2, 2024 16:32:50.260171890 CEST	49745	443	192.168.2.4	184.28.90.27
Oct 2, 2024 16:32:50.260189056 CEST	443	49745	184.28.90.27	192.168.2.4
Oct 2, 2024 16:32:50.260200024 CEST	49745	443	192.168.2.4	184.28.90.27
Oct 2, 2024 16:32:50.260205030 CEST	443	49745	184.28.90.27	192.168.2.4
Oct 2, 2024 16:32:50.436945915 CEST	443	49747	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:50.437072992 CEST	443	49747	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:50.437119961 CEST	49747	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:50.437156916 CEST	443	49747	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:50.438954115 CEST	443	49747	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:50.439007998 CEST	49747	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:50.439418077 CEST	49747	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:50.439441919 CEST	443	49747	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:51.292493105 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:51.292551994 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:51.292773962 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:51.293080091 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:51.293090105 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:51.606308937 CEST	49672	443	192.168.2.4	173.222.162.32
Oct 2, 2024 16:32:51.606420040 CEST	443	49672	173.222.162.32	192.168.2.4
Oct 2, 2024 16:32:51.606551886 CEST	49672	443	192.168.2.4	173.222.162.32
Oct 2, 2024 16:32:51.606573105 CEST	443	49672	173.222.162.32	192.168.2.4
Oct 2, 2024 16:32:51.948683977 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:51.948977947 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:51.949001074 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:51.950021982 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:51.950092077 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:51.950448036 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:51.950505972 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:51.950607061 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:51.991400957 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.000366926 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:52.000379086 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.052140951 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:52.267460108 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.267504930 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.267530918 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.267553091 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.267576933 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:52.267587900 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.267607927 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:52.267625093 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.267657042 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:52.273458958 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.273502111 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.273550987 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:52.273561954 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.279877901 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.279932976 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:52.279941082 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.286313057 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.286354065 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:52.286361933 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.332756042 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:52.354751110 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.356745958 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.356767893 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.356787920 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:52.356800079 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.356842041 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:52.363631964 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.369808912 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.369854927 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:52.369863987 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.377135038 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.377159119 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.377171040 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:52.377177000 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.377224922 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:52.382469893 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.388709068 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.388735056 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.388767958 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:52.388775110 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.388814926 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:52.394635916 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.400810003 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.400832891 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.400855064 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:52.400861979 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.400897026 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:52.406431913 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.412329912 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.412353992 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.412367105 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:52.412374020 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.412405014 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:52.418133020 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.424290895 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.424315929 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.424334049 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:52.424340963 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.424376965 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:52.424381971 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.424443007 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.424499989 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:52.424520016 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:52.424530983 CEST	443	49750	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:52.424540997 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:52.424565077 CEST	49750	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:53.919032097 CEST	49758	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:53.919068098 CEST	443	49758	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:53.919661999 CEST	49758	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:53.919866085 CEST	49758	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:53.919874907 CEST	443	49758	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:53.948477030 CEST	49759	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:53.948506117 CEST	443	49759	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:53.950932026 CEST	49759	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:53.951713085 CEST	49759	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:53.951735020 CEST	443	49759	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:54.563666105 CEST	443	49758	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:54.583264112 CEST	443	49759	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:54.608565092 CEST	49758	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:54.625370979 CEST	49759	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:54.658421040 CEST	49759	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:54.658442974 CEST	443	49759	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:54.659066916 CEST	443	49759	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:54.659415960 CEST	49758	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:54.659436941 CEST	443	49758	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:54.659981012 CEST	443	49758	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:54.662930965 CEST	49759	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:54.663069010 CEST	443	49759	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:54.663583040 CEST	49758	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:54.663697958 CEST	443	49758	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:54.669018030 CEST	49759	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:54.669111013 CEST	49758	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:54.715394974 CEST	443	49759	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:54.715400934 CEST	443	49758	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:55.012236118 CEST	443	49758	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:55.012283087 CEST	443	49758	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:55.012314081 CEST	443	49758	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:55.012325048 CEST	49758	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:55.012342930 CEST	443	49758	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:55.012382030 CEST	49758	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:55.012396097 CEST	443	49758	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:55.012953043 CEST	443	49758	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:55.012988091 CEST	49758	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:55.012994051 CEST	443	49758	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:55.018373966 CEST	443	49758	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:55.018414021 CEST	49758	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:55.018424988 CEST	443	49758	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:55.024043083 CEST	443	49759	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:55.024149895 CEST	443	49759	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:55.024189949 CEST	49759	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:55.024574995 CEST	443	49758	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:55.024627924 CEST	49758	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:55.024638891 CEST	443	49758	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:55.025332928 CEST	49759	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:55.025338888 CEST	443	49759	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:55.030955076 CEST	443	49758	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:55.031004906 CEST	49758	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:55.031016111 CEST	443	49758	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:55.081486940 CEST	49758	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:55.099176884 CEST	443	49758	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:55.102144957 CEST	443	49758	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:55.102233887 CEST	49758	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:55.103102922 CEST	49758	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:55.103116989 CEST	443	49758	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:55.145708084 CEST	49764	443	192.168.2.4	188.68.220.10
Oct 2, 2024 16:32:55.145750999 CEST	443	49764	188.68.220.10	192.168.2.4
Oct 2, 2024 16:32:55.145838022 CEST	49764	443	192.168.2.4	188.68.220.10
Oct 2, 2024 16:32:55.146035910 CEST	49764	443	192.168.2.4	188.68.220.10
Oct 2, 2024 16:32:55.146048069 CEST	443	49764	188.68.220.10	192.168.2.4
Oct 2, 2024 16:32:55.419812918 CEST	49765	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:55.419866085 CEST	443	49765	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:55.420154095 CEST	49765	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:55.420758009 CEST	49765	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:55.420768976 CEST	443	49765	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:55.445475101 CEST	49767	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:55.445501089 CEST	443	49767	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:55.445559025 CEST	49767	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:55.445830107 CEST	49767	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:55.445841074 CEST	443	49767	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:55.450010061 CEST	49768	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:55.450062037 CEST	443	49768	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:55.450321913 CEST	49768	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:55.450546980 CEST	49768	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:55.450565100 CEST	443	49768	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.064732075 CEST	443	49764	188.68.220.10	192.168.2.4
Oct 2, 2024 16:32:56.074464083 CEST	443	49765	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:56.074615002 CEST	49764	443	192.168.2.4	188.68.220.10
Oct 2, 2024 16:32:56.074644089 CEST	443	49764	188.68.220.10	192.168.2.4
Oct 2, 2024 16:32:56.074873924 CEST	49765	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:56.074881077 CEST	443	49765	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:56.075212002 CEST	443	49765	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:56.075268030 CEST	443	49764	188.68.220.10	192.168.2.4
Oct 2, 2024 16:32:56.080243111 CEST	49765	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:56.080297947 CEST	443	49765	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:56.080718994 CEST	49764	443	192.168.2.4	188.68.220.10
Oct 2, 2024 16:32:56.080904007 CEST	443	49764	188.68.220.10	192.168.2.4
Oct 2, 2024 16:32:56.081044912 CEST	49765	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:56.081103086 CEST	49764	443	192.168.2.4	188.68.220.10
Oct 2, 2024 16:32:56.093202114 CEST	443	49768	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.093575001 CEST	49768	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:56.093591928 CEST	443	49768	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.093926907 CEST	443	49768	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.099404097 CEST	49768	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:56.099404097 CEST	49768	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:56.099476099 CEST	443	49768	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.105353117 CEST	443	49767	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.106837034 CEST	49767	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:56.106905937 CEST	443	49767	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.107316971 CEST	443	49767	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.111352921 CEST	49767	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:56.111464024 CEST	443	49767	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.111555099 CEST	49767	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:56.123406887 CEST	443	49764	188.68.220.10	192.168.2.4
Oct 2, 2024 16:32:56.123423100 CEST	443	49765	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:56.140320063 CEST	49768	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:56.155407906 CEST	443	49767	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.357462883 CEST	443	49765	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:56.357528925 CEST	443	49765	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:56.357566118 CEST	443	49765	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:56.357572079 CEST	49765	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:56.357600927 CEST	443	49765	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:56.357639074 CEST	49765	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:56.357645035 CEST	443	49765	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:56.365931988 CEST	443	49765	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:56.365974903 CEST	49765	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:56.365995884 CEST	443	49765	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:56.366131067 CEST	443	49765	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:56.366169930 CEST	49765	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:56.375500917 CEST	443	49768	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.377273083 CEST	443	49768	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.377329111 CEST	49768	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:56.381634951 CEST	443	49767	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.381683111 CEST	443	49767	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.381716013 CEST	443	49767	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.381737947 CEST	49767	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:56.381747961 CEST	443	49767	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.381758928 CEST	443	49767	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.381804943 CEST	49767	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:56.381818056 CEST	443	49767	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.381859064 CEST	49767	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:56.387281895 CEST	443	49767	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.387537003 CEST	443	49767	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.387583017 CEST	49767	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:56.387588024 CEST	443	49767	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.395507097 CEST	443	49767	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.395581961 CEST	49767	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:56.395648956 CEST	443	49767	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.401787996 CEST	443	49767	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.401853085 CEST	49767	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:56.401870012 CEST	443	49767	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.429230928 CEST	49765	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:32:56.429254055 CEST	443	49765	142.250.184.228	192.168.2.4
Oct 2, 2024 16:32:56.447491884 CEST	49768	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:56.447534084 CEST	443	49768	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.452841043 CEST	49767	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:56.472096920 CEST	443	49767	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.472234964 CEST	443	49767	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.472292900 CEST	49767	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:56.475507021 CEST	49767	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:32:56.475512981 CEST	443	49767	216.58.212.164	192.168.2.4
Oct 2, 2024 16:32:56.498008966 CEST	443	49764	188.68.220.10	192.168.2.4
Oct 2, 2024 16:32:56.498085976 CEST	443	49764	188.68.220.10	192.168.2.4
Oct 2, 2024 16:32:56.498133898 CEST	49764	443	192.168.2.4	188.68.220.10
Oct 2, 2024 16:32:56.518155098 CEST	49764	443	192.168.2.4	188.68.220.10
Oct 2, 2024 16:32:56.518182039 CEST	443	49764	188.68.220.10	192.168.2.4
Oct 2, 2024 16:32:57.293101072 CEST	49723	80	192.168.2.4	2.16.100.168
Oct 2, 2024 16:32:57.300544977 CEST	80	49723	2.16.100.168	192.168.2.4
Oct 2, 2024 16:32:57.300654888 CEST	49723	80	192.168.2.4	2.16.100.168
Oct 2, 2024 16:32:58.045314074 CEST	443	49741	142.250.181.228	192.168.2.4
Oct 2, 2024 16:32:58.045388937 CEST	443	49741	142.250.181.228	192.168.2.4
Oct 2, 2024 16:32:58.045494080 CEST	49741	443	192.168.2.4	142.250.181.228
Oct 2, 2024 16:32:58.109142065 CEST	49741	443	192.168.2.4	142.250.181.228
Oct 2, 2024 16:32:58.109174013 CEST	443	49741	142.250.181.228	192.168.2.4
Oct 2, 2024 16:33:12.065638065 CEST	49774	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:12.065685034 CEST	443	49774	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:12.066066027 CEST	49774	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:12.066482067 CEST	49774	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:12.066494942 CEST	443	49774	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:12.697218895 CEST	443	49774	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:12.697515965 CEST	49774	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:12.697546959 CEST	443	49774	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:12.697886944 CEST	443	49774	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:12.698358059 CEST	49774	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:12.698427916 CEST	443	49774	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:12.698499918 CEST	49774	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:12.698579073 CEST	49774	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:12.698606968 CEST	443	49774	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:12.959089041 CEST	443	49774	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:12.959137917 CEST	443	49774	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:12.959162951 CEST	443	49774	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:12.959192038 CEST	443	49774	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:12.959233999 CEST	49774	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:12.959307909 CEST	443	49774	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:12.959346056 CEST	49774	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:12.959619999 CEST	443	49774	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:12.959729910 CEST	49774	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:12.959748030 CEST	443	49774	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:12.965081930 CEST	443	49774	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:12.965137959 CEST	49774	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:12.965153933 CEST	443	49774	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:12.971391916 CEST	443	49774	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:12.971474886 CEST	49774	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:12.971492052 CEST	443	49774	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:12.977720976 CEST	443	49774	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:12.977804899 CEST	49774	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:12.977819920 CEST	443	49774	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:13.031061888 CEST	49774	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:13.046406031 CEST	443	49774	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:13.048595905 CEST	443	49774	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:13.048674107 CEST	49774	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:13.048724890 CEST	443	49774	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:13.049607992 CEST	443	49774	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:13.049669027 CEST	49774	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:13.049789906 CEST	49774	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:13.049817085 CEST	443	49774	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:13.052983999 CEST	49775	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:13.053035021 CEST	443	49775	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:13.053255081 CEST	49775	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:13.053699017 CEST	49775	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:13.053730011 CEST	443	49775	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:13.116605043 CEST	49779	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:13.116662979 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:13.116754055 CEST	49779	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:13.116981983 CEST	49779	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:13.116998911 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:13.727607965 CEST	443	49775	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:13.727828026 CEST	49775	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:13.727850914 CEST	443	49775	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:13.728195906 CEST	443	49775	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:13.728514910 CEST	49775	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:13.728584051 CEST	443	49775	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:13.728609085 CEST	49775	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:13.756083012 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:13.756449938 CEST	49779	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:13.756485939 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:13.756819010 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:13.757301092 CEST	49779	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:13.757394075 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:13.757497072 CEST	49779	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:13.771403074 CEST	443	49775	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:13.780693054 CEST	49775	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:13.799412966 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.015300989 CEST	443	49775	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:14.015347958 CEST	443	49775	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:14.015438080 CEST	49775	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:14.015486956 CEST	443	49775	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:14.015515089 CEST	443	49775	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:14.015567064 CEST	49775	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:14.017359972 CEST	49775	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:14.017386913 CEST	443	49775	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:14.097435951 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.097501040 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.097528934 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.097553968 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.097620964 CEST	49779	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:14.097620964 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.097654104 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.097661018 CEST	49779	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:14.097681046 CEST	49779	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:14.103344917 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.103446960 CEST	49779	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:14.103454113 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.109539986 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.111645937 CEST	49779	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:14.111651897 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.116118908 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.118972063 CEST	49779	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:14.118982077 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.163599014 CEST	49779	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:14.185554028 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.186377048 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.186398983 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.186445951 CEST	49779	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:14.186465025 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.186706066 CEST	49779	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:14.192783117 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.198961020 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.199017048 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.199059963 CEST	49779	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:14.199070930 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.199202061 CEST	49779	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:14.205647945 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.211781979 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.211819887 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.211893082 CEST	49779	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:14.211905003 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.215626001 CEST	49779	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:14.218065977 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.223927021 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.224128008 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.224260092 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.224334002 CEST	49779	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:14.225656033 CEST	49779	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:14.237790108 CEST	49779	443	192.168.2.4	142.250.184.228
Oct 2, 2024 16:33:14.237813950 CEST	443	49779	142.250.184.228	192.168.2.4
Oct 2, 2024 16:33:14.323772907 CEST	49785	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:14.323884964 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:14.324116945 CEST	49785	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:14.326575041 CEST	49785	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:14.326627970 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:14.977447033 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:14.977782965 CEST	49785	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:14.977823973 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:14.978173971 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:14.978776932 CEST	49785	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:14.978852034 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:14.978990078 CEST	49785	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:15.023406029 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.263012886 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.263067961 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.263102055 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.263143063 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.263156891 CEST	49785	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:15.263196945 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.263211966 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.263215065 CEST	49785	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:15.263257980 CEST	49785	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:15.268938065 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.268990040 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.269072056 CEST	49785	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:15.269124031 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.275316000 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.275401115 CEST	49785	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:15.275428057 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.281527996 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.281598091 CEST	49785	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:15.281615019 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.327651024 CEST	49785	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:15.353307009 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.353415966 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.353451967 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.353498936 CEST	49785	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:15.353513002 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.353547096 CEST	49785	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:15.358724117 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.364970922 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.365003109 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.365034103 CEST	49785	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:15.365060091 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.365130901 CEST	49785	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:15.371161938 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.377403975 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.377525091 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.377594948 CEST	49785	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:15.377644062 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.377698898 CEST	49785	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:15.383778095 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.389756918 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.389832020 CEST	49785	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:15.389856100 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.390527010 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.390592098 CEST	49785	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:15.391125917 CEST	49785	443	192.168.2.4	216.58.212.164
Oct 2, 2024 16:33:15.391166925 CEST	443	49785	216.58.212.164	192.168.2.4
Oct 2, 2024 16:33:15.699004889 CEST	80	49737	188.68.220.10	192.168.2.4
Oct 2, 2024 16:33:15.699161053 CEST	80	49737	188.68.220.10	192.168.2.4
Oct 2, 2024 16:33:15.699244022 CEST	49737	80	192.168.2.4	188.68.220.10
Oct 2, 2024 16:33:45.394684076 CEST	49737	80	192.168.2.4	188.68.220.10
Oct 2, 2024 16:33:45.394716978 CEST	49737	80	192.168.2.4	188.68.220.10
Oct 2, 2024 16:33:45.399667025 CEST	80	49737	188.68.220.10	192.168.2.4
Oct 2, 2024 16:33:45.399780035 CEST	49737	80	192.168.2.4	188.68.220.10
Oct 2, 2024 16:33:47.107458115 CEST	49788	443	192.168.2.4	142.250.181.228
Oct 2, 2024 16:33:47.107496977 CEST	443	49788	142.250.181.228	192.168.2.4
Oct 2, 2024 16:33:47.107614040 CEST	49788	443	192.168.2.4	142.250.181.228
Oct 2, 2024 16:33:47.108119965 CEST	49788	443	192.168.2.4	142.250.181.228
Oct 2, 2024 16:33:47.108129978 CEST	443	49788	142.250.181.228	192.168.2.4
Oct 2, 2024 16:33:47.747994900 CEST	443	49788	142.250.181.228	192.168.2.4
Oct 2, 2024 16:33:47.748611927 CEST	49788	443	192.168.2.4	142.250.181.228
Oct 2, 2024 16:33:47.748636007 CEST	443	49788	142.250.181.228	192.168.2.4
Oct 2, 2024 16:33:47.749706030 CEST	443	49788	142.250.181.228	192.168.2.4
Oct 2, 2024 16:33:47.754095078 CEST	49788	443	192.168.2.4	142.250.181.228
Oct 2, 2024 16:33:47.754158020 CEST	443	49788	142.250.181.228	192.168.2.4
Oct 2, 2024 16:33:47.797570944 CEST	49788	443	192.168.2.4	142.250.181.228
Oct 2, 2024 16:33:57.677184105 CEST	443	49788	142.250.181.228	192.168.2.4
Oct 2, 2024 16:33:57.677268982 CEST	443	49788	142.250.181.228	192.168.2.4
Oct 2, 2024 16:33:57.677339077 CEST	49788	443	192.168.2.4	142.250.181.228
Oct 2, 2024 16:33:59.394313097 CEST	49788	443	192.168.2.4	142.250.181.228
Oct 2, 2024 16:33:59.394336939 CEST	443	49788	142.250.181.228	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 2, 2024 16:32:42.905116081 CEST	53	63510	1.1.1.1	192.168.2.4
Oct 2, 2024 16:32:42.909436941 CEST	53	64441	1.1.1.1	192.168.2.4
Oct 2, 2024 16:32:44.080437899 CEST	53	62161	1.1.1.1	192.168.2.4
Oct 2, 2024 16:32:44.472039938 CEST	62303	53	192.168.2.4	1.1.1.1
Oct 2, 2024 16:32:44.472218990 CEST	58808	53	192.168.2.4	1.1.1.1
Oct 2, 2024 16:32:44.913429022 CEST	53	62303	1.1.1.1	192.168.2.4
Oct 2, 2024 16:32:45.098891973 CEST	53	58808	1.1.1.1	192.168.2.4
Oct 2, 2024 16:32:46.022418022 CEST	62009	53	192.168.2.4	1.1.1.1
Oct 2, 2024 16:32:46.022962093 CEST	65463	53	192.168.2.4	1.1.1.1
Oct 2, 2024 16:32:46.030174017 CEST	53	62009	1.1.1.1	192.168.2.4
Oct 2, 2024 16:32:46.310820103 CEST	53	65463	1.1.1.1	192.168.2.4
Oct 2, 2024 16:32:47.050829887 CEST	54441	53	192.168.2.4	1.1.1.1
Oct 2, 2024 16:32:47.050972939 CEST	57512	53	192.168.2.4	1.1.1.1
Oct 2, 2024 16:32:47.057920933 CEST	53	57512	1.1.1.1	192.168.2.4
Oct 2, 2024 16:32:47.058254957 CEST	53	54441	1.1.1.1	192.168.2.4
Oct 2, 2024 16:32:48.294262886 CEST	56032	53	192.168.2.4	1.1.1.1
Oct 2, 2024 16:32:48.294496059 CEST	55644	53	192.168.2.4	1.1.1.1
Oct 2, 2024 16:32:48.301457882 CEST	53	55644	1.1.1.1	192.168.2.4
Oct 2, 2024 16:32:48.302721977 CEST	53	56032	1.1.1.1	192.168.2.4
Oct 2, 2024 16:32:48.327687979 CEST	53	60210	1.1.1.1	192.168.2.4
Oct 2, 2024 16:32:49.483159065 CEST	58899	53	192.168.2.4	1.1.1.1
Oct 2, 2024 16:32:49.484074116 CEST	63052	53	192.168.2.4	1.1.1.1
Oct 2, 2024 16:32:49.490261078 CEST	53	58899	1.1.1.1	192.168.2.4
Oct 2, 2024 16:32:49.490899086 CEST	53	63052	1.1.1.1	192.168.2.4
Oct 2, 2024 16:32:50.120655060 CEST	53	62436	1.1.1.1	192.168.2.4
Oct 2, 2024 16:32:51.275516987 CEST	63224	53	192.168.2.4	1.1.1.1
Oct 2, 2024 16:32:51.275659084 CEST	60123	53	192.168.2.4	1.1.1.1
Oct 2, 2024 16:32:51.282347918 CEST	53	63224	1.1.1.1	192.168.2.4
Oct 2, 2024 16:32:51.291982889 CEST	53	60123	1.1.1.1	192.168.2.4
Oct 2, 2024 16:32:51.302647114 CEST	53	58995	1.1.1.1	192.168.2.4
Oct 2, 2024 16:32:57.664638996 CEST	138	138	192.168.2.4	192.168.2.255
Oct 2, 2024 16:33:01.477591991 CEST	53	62662	1.1.1.1	192.168.2.4
Oct 2, 2024 16:33:20.392056942 CEST	53	54374	1.1.1.1	192.168.2.4
Oct 2, 2024 16:33:42.775686979 CEST	53	65075	1.1.1.1	192.168.2.4
Oct 2, 2024 16:33:42.777826071 CEST	53	59161	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 2, 2024 16:32:45.099071026 CEST	192.168.2.4	1.1.1.1	c223	(Port unreachable)	Destination Unreachable
Oct 2, 2024 16:32:46.310894012 CEST	192.168.2.4	1.1.1.1	c223	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 2, 2024 16:32:44.472039938 CEST	192.168.2.4	1.1.1.1	0x62a3	Standard query (0)	indianatollsroad.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 16:32:44.472218990 CEST	192.168.2.4	1.1.1.1	0x88d3	Standard query (0)	indianatollsroad.com	65	IN (0x0001)	false
Oct 2, 2024 16:32:46.022418022 CEST	192.168.2.4	1.1.1.1	0xc9de	Standard query (0)	indianatollsroad.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 16:32:46.022962093 CEST	192.168.2.4	1.1.1.1	0xcd51	Standard query (0)	indianatollsroad.com	65	IN (0x0001)	false
Oct 2, 2024 16:32:47.050829887 CEST	192.168.2.4	1.1.1.1	0xe72c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 16:32:47.050972939 CEST	192.168.2.4	1.1.1.1	0x1db9	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 2, 2024 16:32:48.294262886 CEST	192.168.2.4	1.1.1.1	0x6213	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 16:32:48.294496059 CEST	192.168.2.4	1.1.1.1	0x6a60	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 2, 2024 16:32:49.483159065 CEST	192.168.2.4	1.1.1.1	0x697a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 16:32:49.484074116 CEST	192.168.2.4	1.1.1.1	0x348d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 2, 2024 16:32:51.275516987 CEST	192.168.2.4	1.1.1.1	0x58ce	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 2, 2024 16:32:51.275659084 CEST	192.168.2.4	1.1.1.1	0x716c	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 2, 2024 16:32:44.913429022 CEST	1.1.1.1	192.168.2.4	0x62a3	No error (0)	indianatollsroad.com		188.68.220.10	A (IP address)	IN (0x0001)	false
Oct 2, 2024 16:32:46.030174017 CEST	1.1.1.1	192.168.2.4	0xc9de	No error (0)	indianatollsroad.com		188.68.220.10	A (IP address)	IN (0x0001)	false
Oct 2, 2024 16:32:47.057920933 CEST	1.1.1.1	192.168.2.4	0x1db9	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 2, 2024 16:32:47.058254957 CEST	1.1.1.1	192.168.2.4	0xe72c	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
Oct 2, 2024 16:32:48.301457882 CEST	1.1.1.1	192.168.2.4	0x6a60	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 2, 2024 16:32:48.302721977 CEST	1.1.1.1	192.168.2.4	0x6213	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 2, 2024 16:32:49.490261078 CEST	1.1.1.1	192.168.2.4	0x697a	No error (0)	www.google.com		216.58.212.164	A (IP address)	IN (0x0001)	false
Oct 2, 2024 16:32:49.490899086 CEST	1.1.1.1	192.168.2.4	0x348d	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 2, 2024 16:32:51.282347918 CEST	1.1.1.1	192.168.2.4	0x58ce	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Oct 2, 2024 16:32:51.291982889 CEST	1.1.1.1	192.168.2.4	0x716c	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 2, 2024 16:32:54.285726070 CEST	1.1.1.1	192.168.2.4	0xa08c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 16:32:54.285726070 CEST	1.1.1.1	192.168.2.4	0xa08c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 2, 2024 16:33:08.634780884 CEST	1.1.1.1	192.168.2.4	0x3896	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 2, 2024 16:33:08.634780884 CEST	1.1.1.1	192.168.2.4	0x3896	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

indianatollsroad.com

https:

www.google.com

fs.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	188.68.220.10	80	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 2, 2024 16:32:45.100548983 CEST	435	OUT	GET / HTTP/1.1 Host: indianatollsroad.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 2, 2024 16:32:46.006249905 CEST	386	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.18.0 (Ubuntu) Date: Wed, 02 Oct 2024 14:32:45 GMT Content-Type: text/html Content-Length: 178 Connection: close Location: https://indianatollsroad.com/ Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49737	188.68.220.10	80	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 2, 2024 16:33:15.699004889 CEST	212	IN	HTTP/1.0 408 Request Time-out Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49740	188.68.220.10	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 14:32:47 UTC	663	OUT	GET / HTTP/1.1 Host: indianatollsroad.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 14:32:48 UTC	359	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Wed, 02 Oct 2024 14:32:48 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 1181 Connection: close Set-Cookie: PHPSESSID=srruqq8eh147ekias60d8flbg2; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding
2024-10-02 14:32:48 UTC	1181	IN	Data Raw: 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 76 69 65 77 70 6f 72 74 27 20 63 6f 6e 74 65 6e 74 3d 27 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 27 20 2f 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 27 70 6f 73 74 27 20 6e 61 6d 65 3d 27 6d 79 66 6f 72 6d 27 3e 0d 0a 20 20 20 20 3c 64 69 76 0d 0a 20 20 20 20 20 20 20 20 73 74 79 6c 65 3d 27 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 35 30 25 3b 20 6c 65 66 74 3a 20 35 30 25 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 33 37 70 Data Ascii: <meta name='viewport' content='width=device-width, initial-scale=1' /><script src='https://www.google.com/recaptcha/api.js'></script><form method='post' name='myform'> <div style='position: absolute; top: 50%; left: 50%; margin-top: -37p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49742	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-02 14:32:48 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-02 14:32:48 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=94382 Date: Wed, 02 Oct 2024 14:32:48 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	142.250.184.196	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 14:32:48 UTC	631	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://indianatollsroad.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 14:32:49 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 02 Oct 2024 14:32:49 GMT Date: Wed, 02 Oct 2024 14:32:49 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-02 14:32:49 UTC	641	IN	Data Raw: 35 39 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-10-02 14:32:49 UTC	800	IN	Data Raw: 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e Data Ascii: AACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.
2024-10-02 14:32:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49745	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-02 14:32:50 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-02 14:32:50 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=94324 Date: Wed, 02 Oct 2024 14:32:50 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-02 14:32:50 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49747	216.58.212.164	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 14:32:50 UTC	451	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 14:32:50 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 02 Oct 2024 14:32:50 GMT Date: Wed, 02 Oct 2024 14:32:50 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-02 14:32:50 UTC	641	IN	Data Raw: 35 39 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-10-02 14:32:50 UTC	800	IN	Data Raw: 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e Data Ascii: AACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.
2024-10-02 14:32:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49750	142.250.184.228	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 14:32:51 UTC	968	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfH3FMqAAAAAKyx_81aHghU_FTJYIX9beQVop6A&co=aHR0cHM6Ly9pbmRpYW5hdG9sbHNyb2FkLmNvbTo0NDM.&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&theme=light&size=normal&cb=6xkhuhk0144l HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://indianatollsroad.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 14:32:52 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 02 Oct 2024 14:32:52 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-HcbinIZ2uhJo7No__AT9LQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-02 14:32:52 UTC	229	IN	Data Raw: 35 37 35 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 Data Ascii: 5759<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cy
2024-10-02 14:32:52 UTC	1390	IN	Data Raw: 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 Data Ascii: rillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A64
2024-10-02 14:32:52 UTC	1390	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-10-02 14:32:52 UTC	1390	IN	Data Raw: 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 Data Ascii: s.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqE
2024-10-02 14:32:52 UTC	1390	IN	Data Raw: 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 Data Ascii: 0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUt
2024-10-02 14:32:52 UTC	1390	IN	Data Raw: 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 33 30 39 2c 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 Data Ascii: 8-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/r
2024-10-02 14:32:52 UTC	1390	IN	Data Raw: 22 68 69 64 64 65 6e 22 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 2d 74 6f 6b 65 6e 22 20 76 61 6c 75 65 3d 22 30 33 41 46 63 57 65 41 34 4b 5f 6e 69 31 6f 41 51 7a 67 76 30 6f 6c 30 6f 45 62 30 68 39 6f 62 4c 45 48 37 63 73 68 77 74 62 59 57 71 76 46 52 41 4a 55 67 31 67 35 32 7a 74 41 53 2d 48 52 63 73 70 4d 4c 53 72 4f 7a 59 48 46 6e 57 56 39 58 39 30 6e 59 71 39 34 70 78 67 35 53 56 2d 6c 41 59 4e 39 63 56 4c 76 53 4a 6e 57 6e 66 73 6c 76 77 34 48 6c 6d 79 32 6f 67 74 76 65 38 32 6c 52 65 39 38 47 6c 4d 42 48 50 6c 6d 4b 52 71 4e 43 78 41 64 35 53 49 42 2d 4a 37 6c 46 77 49 39 58 4c 31 4f 67 6b 67 59 58 76 75 6e 34 50 34 58 4f 31 68 32 43 41 6d 4b 57 67 58 57 36 75 41 36 75 46 36 37 4f 7a 51 78 5f 34 79 35 78 6d 59 31 6f 79 41 30 7a 6e 6b 56 39 44 58 Data Ascii: "hidden" id="recaptcha-token" value="03AFcWeA4K_ni1oAQzgv0ol0oEb0h9obLEH7cshwtbYWqvFRAJUg1g52ztAS-HRcspMLSrOzYHFnWV9X90nYq94pxg5SV-lAYN9cVLvSJnWnfslvw4Hlmy2ogtve82lRe98GlMBHPlmKRqNCxAd5SIB-J7lFwI9XL1OgkgYXvun4P4XO1h2CAmKWgXW6uA6uF67OzQx_4y5xmY1oyA0znkV9DX
2024-10-02 14:32:52 UTC	1390	IN	Data Raw: 74 4c 58 46 62 34 33 31 66 64 38 41 53 50 58 38 62 4e 31 68 52 70 39 48 45 4d 34 52 52 43 53 67 70 36 6b 2d 54 62 73 65 6b 4e 6b 42 34 55 63 30 5a 48 32 76 53 55 47 30 4f 56 70 68 77 78 51 58 4b 72 63 47 6d 6b 54 6c 45 67 72 2d 54 33 48 52 6e 77 4a 6d 77 62 50 71 63 6c 65 45 51 33 35 47 48 38 66 54 50 36 4e 64 69 5a 7a 77 65 4b 4f 6b 65 68 35 43 35 53 61 74 44 53 79 53 59 79 4d 76 46 67 31 5a 74 55 5f 44 74 35 66 4f 73 76 4c 5a 56 33 7a 48 63 65 5a 31 66 63 64 6c 5a 34 32 4b 48 69 35 32 6b 74 32 61 35 6d 63 42 37 71 44 57 38 71 72 62 71 5a 35 42 48 6c 76 52 30 49 4f 73 6d 4c 73 41 67 35 50 6f 4b 37 50 71 50 6c 36 64 4f 64 68 72 6c 36 49 70 69 57 38 6f 77 31 79 6e 47 6d 32 53 37 67 6e 30 76 78 37 43 4c 46 47 5f 44 66 46 41 44 75 76 31 54 71 78 43 6d 75 6f Data Ascii: tLXFb431fd8ASPX8bN1hRp9HEM4RRCSgp6k-TbsekNkB4Uc0ZH2vSUG0OVphwxQXKrcGmkTlEgr-T3HRnwJmwbPqcleEQ35GH8fTP6NdiZzweKOkeh5C5SatDSySYyMvFg1ZtU_Dt5fOsvLZV3zHceZ1fcdlZ42KHi52kt2a5mcB7qDW8qrbqZ5BHlvR0IOsmLsAg5PoK7PqPl6dOdhrl6IpiW8ow1ynGm2S7gn0vx7CLFG_DfFADuv1TqxCmuo
2024-10-02 14:32:52 UTC	1390	IN	Data Raw: 32 52 48 70 32 52 32 46 33 53 44 64 76 4f 57 46 58 59 54 6c 57 54 57 38 32 51 6d 4e 31 65 6c 6c 77 53 6a 68 6a 51 57 70 42 53 46 46 6d 62 46 5a 70 62 48 46 43 4d 45 78 57 4f 45 56 4c 52 57 56 4b 65 6c 55 33 4d 7a 5a 6a 4e 58 68 6d 52 47 56 47 59 6a 67 78 57 48 70 74 4d 57 74 59 51 6e 56 47 4e 54 56 45 52 6a 64 7a 4e 6d 39 77 63 32 5a 30 52 32 31 46 53 69 74 4c 5a 7a 4a 70 4f 57 31 7a 5a 6e 4e 56 4d 47 56 45 4d 30 31 4b 55 33 56 6a 4d 46 6f 30 4c 33 5a 44 4e 57 6c 61 56 33 46 48 56 57 56 6d 61 6a 52 79 5a 6b 68 61 4f 58 70 48 59 31 4e 73 5a 46 46 78 4d 57 4e 68 4d 56 55 7a 63 44 46 74 57 45 52 6b 55 46 64 6e 56 46 46 71 61 54 4e 4f 53 47 39 75 4e 30 70 45 59 6d 68 52 57 6b 31 48 59 58 6c 49 65 44 5a 72 59 56 46 72 4e 7a 5a 5a 4d 56 51 34 52 31 64 30 61 47 Data Ascii: 2RHp2R2F3SDdvOWFXYTlWTW82QmN1ellwSjhjQWpBSFFmbFZpbHFCMExWOEVLRWVKelU3MzZjNXhmRGVGYjgxWHptMWtYQnVGNTVERjdzNm9wc2Z0R21FSitLZzJpOW1zZnNVMGVEM01KU3VjMFo0L3ZDNWlaV3FHVWVmajRyZkhaOXpHY1NsZFFxMWNhMVUzcDFtWERkUFdnVFFqaTNOSG9uN0pEYmhRWk1HYXlIeDZrYVFrNzZZMVQ4R1d0aG
2024-10-02 14:32:52 UTC	1390	IN	Data Raw: 58 52 76 63 6a 49 79 54 47 6c 53 62 55 4a 46 4f 45 31 45 62 7a 6c 5a 57 56 6c 70 57 48 64 73 4c 30 64 4d 4b 32 55 7a 59 6b 6f 32 57 6d 51 34 64 48 6c 4c 55 56 6c 78 56 6e 55 77 52 45 35 6e 5a 47 70 34 4d 57 52 7a 4f 53 39 30 65 56 64 33 64 47 6b 76 4d 55 6c 53 54 48 41 33 62 79 74 71 65 47 67 34 61 48 52 42 63 7a 52 36 54 54 42 7a 57 48 5a 57 51 6d 4a 4f 61 6b 68 77 4e 44 68 52 52 48 52 4d 4e 54 46 71 4b 33 4a 4a 4f 58 4e 72 61 48 70 33 51 7a 51 7a 62 47 78 53 55 58 46 79 4b 32 4a 6c 5a 44 64 4b 4d 6b 46 69 64 56 52 69 54 31 55 78 5a 46 42 61 4e 48 4e 71 61 30 5a 6a 61 33 56 34 52 6c 42 78 5a 44 4a 6b 55 6a 52 35 4d 30 4e 36 4e 6b 6c 5a 5a 6d 45 35 51 6e 52 50 64 33 6c 56 4e 56 4e 53 53 56 4d 72 61 6c 4a 55 54 56 52 30 4f 45 46 4a 55 55 78 4a 63 6a 46 4a Data Ascii: XRvcjIyTGlSbUJFOE1EbzlZWVlpWHdsL0dMK2UzYko2WmQ4dHlLUVlxVnUwRE5nZGp4MWRzOS90eVd3dGkvMUlSTHA3bytqeGg4aHRBczR6TTBzWHZWQmJOakhwNDhRRHRMNTFqK3JJOXNraHp3QzQzbGxSUXFyK2JlZDdKMkFidVRiT1UxZFBaNHNqa0Zja3V4RlBxZDJkUjR5M0N6NklZZmE5QnRPd3lVNVNSSVMralJUTVR0OEFJUUxJcjFJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49759	142.250.184.228	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 14:32:54 UTC	864	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfH3FMqAAAAAKyx_81aHghU_FTJYIX9beQVop6A&co=aHR0cHM6Ly9pbmRpYW5hdG9sbHNyb2FkLmNvbTo0NDM.&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&theme=light&size=normal&cb=6xkhuhk0144l Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 14:32:55 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Wed, 02 Oct 2024 14:32:54 GMT Date: Wed, 02 Oct 2024 14:32:54 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-02 14:32:55 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 78 64 73 30 72 7a 47 72 6b 74 52 38 38 75 45 5a 32 4a 55 76 64 67 4f 59 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js');
2024-10-02 14:32:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49758	142.250.184.228	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 14:32:54 UTC	852	OUT	GET /js/bg/5Hh2ALJwVCoAq5i04w6Tc_td0SFcwt2xcFfRkbQms3o.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfH3FMqAAAAAKyx_81aHghU_FTJYIX9beQVop6A&co=aHR0cHM6Ly9pbmRpYW5hdG9sbHNyb2FkLmNvbTo0NDM.&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&theme=light&size=normal&cb=6xkhuhk0144l Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 14:32:55 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18650 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 02 Oct 2024 11:41:46 GMT Expires: Thu, 02 Oct 2025 11:41:46 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 23 Sep 2024 09:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 10268 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-02 14:32:55 UTC	579	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 7d 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 54 29 7b 69 66 28 28 54 3d 28 63 3d 6e 75 6c 6c 2c 75 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 21 54 29 7c 7c 21 54 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 63 3b 74 72 79 7b 63 3d 54 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var u=this\|\|self,d=function(c){return c},A=function(c,T){if((T=(c=null,u).trustedTypes,!T)\|\|!T.createPolicy)return c;try{c=T.createPolicy("bg",{createHTM
2024-10-02 14:32:55 UTC	1390	IN	Data Raw: 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 75 54 3d 66 75 6e 63 74 69 6f 6e 28 59 2c 63 2c 54 2c 64 29 7b 72 65 74 75 72 6e 20 4f 28 63 2c 28 4d 28 63 2c 28 59 64 28 54 2c 28 28 64 3d 4f 28 63 2c 34 39 33 29 2c 63 2e 41 29 26 26 64 3c 63 2e 54 3f 28 4d 28 63 2c 34 39 33 2c 63 2e 54 29 2c 54 78 28 59 2c 63 29 29 3a 4d 28 63 2c 34 39 33 2c 59 29 2c 63 29 29 2c 34 39 33 29 2c 64 29 2c 35 31 31 29 29 7d 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 59 2c 63 29 7b 63 2e 43 2e 73 70 6c 69 63 65 28 30 2c 30 2c 59 29 7d 2c 44 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 59 2c 63 2c 54 2c 64 2c 41 2c 53 2c 76 2c 6b 2c 75 2c 51 2c 49 2c 4e 2c 50 2c 56 29 7b Data Ascii: X-License-Identifier: Apache-2.0','*/','var uT=function(Y,c,T,d){return O(c,(M(c,(Yd(T,((d=O(c,493),c.A)&&d<c.T?(M(c,493,c.T),Tx(Y,c)):M(c,493,Y),c)),493),d),511))},R=function(Y,c){c.C.splice(0,0,Y)},D=this\|\|self,B=function(Y,c,T,d,A,S,v,k,u,Q,I,N,P,V){
2024-10-02 14:32:55 UTC	1390	IN	Data Raw: 65 2c 76 6f 69 64 20 30 29 2c 59 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 7b 7d 2c 59 2e 74 69 6d 65 4f 72 69 67 69 6e 29 7c 7c 28 59 2e 74 69 6d 69 6e 67 7c 7c 7b 7d 29 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 7c 7c 30 2c 64 26 26 64 2e 6c 65 6e 67 74 68 3d 3d 32 29 26 26 28 54 2e 4e 32 3d 64 5b 31 5d 2c 54 2e 4c 41 3d 64 5b 30 5d 29 2c 34 39 33 29 2c 30 29 2c 33 31 35 29 2c 30 29 2c 66 75 6e 63 74 69 6f 6e 28 75 2c 51 2c 49 2c 4e 29 7b 21 6d 28 66 61 6c 73 65 2c 51 2c 75 2c 74 72 75 65 29 26 26 28 51 3d 4e 66 28 75 29 2c 49 3d 51 2e 7a 72 2c 4e 3d 51 2e 51 39 2c 75 2e 69 3d 3d 75 7c 7c 4e 3d 3d 75 2e 75 4e 26 26 49 3d 3d 75 29 26 26 28 4d 28 75 2c 51 2e 47 72 2c 4e 2e 61 70 70 6c 79 28 49 2c 51 2e 48 29 29 2c 75 2e 4b 3d 75 Data Ascii: e,void 0),Y=window.performance\|\|{},Y.timeOrigin)\|\|(Y.timing\|\|{}).navigationStart\|\|0,d&&d.length==2)&&(T.N2=d[1],T.LA=d[0]),493),0),315),0),function(u,Q,I,N){!m(false,Q,u,true)&&(Q=Nf(u),I=Q.zr,N=Q.Q9,u.i==u\|\|N==u.uN&&I==u)&&(M(u,Q.Gr,N.apply(I,Q.H)),u.K=u
2024-10-02 14:32:55 UTC	1390	IN	Data Raw: 66 6f 72 28 63 5f 3d 5b 5d 2c 6c 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 4c 3b 6e 2b 2b 29 7b 69 66 28 66 3d 79 5b 6e 5d 2c 21 50 5b 6e 5d 29 7b 66 6f 72 28 3b 66 3e 3d 63 5f 2e 6c 65 6e 67 74 68 3b 29 63 5f 2e 70 75 73 68 28 5a 28 68 29 29 3b 66 3d 63 5f 5b 66 5d 7d 6c 2e 70 75 73 68 28 66 29 7d 68 2e 75 3d 50 5f 28 28 68 2e 42 3d 50 5f 28 4e 2e 73 6c 69 63 65 28 29 2c 68 29 2c 6c 29 2c 68 29 7d 29 7d 29 2c 78 28 54 2c 31 37 33 2c 66 75 6e 63 74 69 6f 6e 28 75 29 7b 6b 64 28 75 2c 34 29 7d 29 2c 35 33 29 2c 66 75 6e 63 74 69 6f 6e 28 75 2c 51 2c 49 2c 4e 2c 50 29 7b 4d 28 75 2c 28 51 3d 28 4e 3d 4f 28 75 2c 28 49 3d 5a 28 28 51 3d 28 4e 3d 28 50 3d 5a 28 75 29 2c 5a 28 75 29 29 2c 5a 28 75 29 29 2c 75 29 29 2c 4e 29 29 2c 4f 28 75 2c 51 29 29 2c 49 3d 4f 28 75 2c Data Ascii: for(c_=[],l=[],n=0;n<L;n++){if(f=y[n],!P[n]){for(;f>=c_.length;)c_.push(Z(h));f=c_[f]}l.push(f)}h.u=P_((h.B=P_(N.slice(),h),l),h)})}),x(T,173,function(u){kd(u,4)}),53),function(u,Q,I,N,P){M(u,(Q=(N=O(u,(I=Z((Q=(N=(P=Z(u),Z(u)),Z(u)),u)),N)),O(u,Q)),I=O(u,
2024-10-02 14:32:55 UTC	1390	IN	Data Raw: 2c 4f 6e 28 75 29 29 2c 22 22 29 2c 75 29 2c 38 39 29 2c 4e 3d 4c 2e 6c 65 6e 67 74 68 2c 30 29 3b 50 2d 2d 3b 29 49 3d 28 28 49 7c 30 29 2b 28 4f 6e 28 75 29 7c 30 29 29 25 4e 2c 51 2b 3d 76 5b 4c 5b 49 5d 5d 3b 4d 28 75 2c 56 2c 51 29 7d 29 2c 38 35 29 2c 66 75 6e 63 74 69 6f 6e 28 75 2c 51 2c 49 2c 4e 29 7b 4d 28 75 2c 28 49 3d 4f 28 28 51 3d 28 4e 3d 5a 28 28 51 3d 5a 28 75 29 2c 49 3d 5a 28 75 29 2c 75 29 29 2c 4f 28 75 2c 51 29 29 2c 75 29 2c 49 29 2c 4e 29 2c 51 5b 49 5d 29 7d 29 2c 32 34 31 29 2c 66 75 6e 63 74 69 6f 6e 28 75 2c 51 2c 49 2c 4e 29 7b 4d 28 75 2c 28 49 3d 4f 28 75 2c 28 4e 3d 4f 28 75 2c 28 51 3d 28 49 3d 28 4e 3d 5a 28 75 29 2c 5a 29 28 75 29 2c 5a 28 75 29 29 2c 4e 29 29 2c 49 29 29 2c 51 29 2c 4e 20 69 6e 20 49 7c 30 29 7d 29 2c Data Ascii: ,On(u)),""),u),89),N=L.length,0);P--;)I=((I\|0)+(On(u)\|0))%N,Q+=v[L[I]];M(u,V,Q)}),85),function(u,Q,I,N){M(u,(I=O((Q=(N=Z((Q=Z(u),I=Z(u),u)),O(u,Q)),u),I),N),Q[I])}),241),function(u,Q,I,N){M(u,(I=O(u,(N=O(u,(Q=(I=(N=Z(u),Z)(u),Z(u)),N)),I)),Q),N in I\|0)}),
2024-10-02 14:32:55 UTC	1390	IN	Data Raw: 30 2c 59 5b 28 53 2b 35 33 26 37 29 2b 28 64 26 32 29 5d 3d 75 2c 59 5b 53 2b 28 64 26 32 29 5d 3d 32 35 2c 75 7d 2c 76 7d 2c 69 54 3d 66 75 6e 63 74 69 6f 6e 28 59 2c 63 2c 54 2c 64 29 7b 66 6f 72 28 54 3d 5a 28 59 29 2c 64 3d 30 3b 63 3e 30 3b 63 2d 2d 29 64 3d 64 3c 3c 38 7c 47 28 59 29 3b 4d 28 59 2c 54 2c 64 29 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 59 2c 63 2c 54 2c 64 2c 41 2c 53 2c 76 2c 6b 29 7b 69 66 28 28 54 2e 69 3d 28 54 2e 56 2b 3d 28 41 3d 28 6b 3d 28 64 7c 7c 54 2e 59 2b 2b 2c 54 2e 6a 3e 30 26 26 54 2e 6c 26 26 54 2e 57 65 26 26 54 2e 4f 3c 3d 31 26 26 21 54 2e 42 26 26 21 54 2e 57 29 26 26 28 21 64 7c 7c 54 2e 49 75 2d 63 3e 31 29 26 26 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 3d 3d 30 2c 28 53 3d 54 2e 59 3d 3d 34 29 7c 7c 6b 29 3f Data Ascii: 0,Y[(S+53&7)+(d&2)]=u,Y[S+(d&2)]=25,u},v},iT=function(Y,c,T,d){for(T=Z(Y),d=0;c>0;c--)d=d<<8\|G(Y);M(Y,T,d)},m=function(Y,c,T,d,A,S,v,k){if((T.i=(T.V+=(A=(k=(d\|\|T.Y++,T.j>0&&T.l&&T.We&&T.O<=1&&!T.B&&!T.W)&&(!d\|\|T.Iu-c>1)&&document.hidden==0,(S=T.Y==4)\|\|k)?
2024-10-02 14:32:55 UTC	1390	IN	Data Raw: 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 20 59 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 21 59 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 22 63 61 6c 6c 22 29 29 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 7d 65 6c 73 65 20 72 65 74 75 72 6e 22 6e 75 6c 6c 22 3b 65 6c 73 65 20 69 66 28 63 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 59 2e 63 61 6c 6c 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3b 72 65 74 75 72 6e 20 63 7d 2c 62 54 3d 66 75 6e 63 74 69 6f 6e 28 59 2c 63 2c 54 2c 64 2c 41 29 7b 66 6f 72 28 54 3d 28 59 3d 59 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 72 5c 5c 6e 2f 67 2c 22 5c Data Ascii: !="undefined"&&typeof Y.propertyIsEnumerable!="undefined"&&!Y.propertyIsEnumerable("call"))return"function"}else return"null";else if(c=="function"&&typeof Y.call=="undefined")return"object";return c},bT=function(Y,c,T,d,A){for(T=(Y=Y.replace(/\\r\\n/g,"\
2024-10-02 14:32:55 UTC	1390	IN	Data Raw: 4c 69 73 74 65 6e 65 72 28 53 2c 76 2c 55 29 7d 7d 72 65 74 75 72 6e 20 76 7d 2c 4e 66 3d 66 75 6e 63 74 69 6f 6e 28 59 2c 63 2c 54 2c 64 2c 41 2c 53 29 7b 66 6f 72 28 64 3d 28 53 3d 5a 28 28 54 3d 28 63 3d 28 41 3d 59 5b 6e 41 5d 7c 7c 7b 7d 2c 5a 28 59 29 29 2c 41 2e 47 72 3d 5a 28 59 29 2c 41 2e 48 3d 5b 5d 2c 59 2e 69 3d 3d 59 29 3f 28 47 28 59 29 7c 30 29 2d 31 3a 31 2c 59 29 29 2c 30 29 3b 64 3c 54 3b 64 2b 2b 29 41 2e 48 2e 70 75 73 68 28 5a 28 59 29 29 3b 66 6f 72 28 28 41 2e 7a 72 3d 4f 28 59 2c 53 29 2c 41 29 2e 51 39 3d 4f 28 59 2c 63 29 3b 54 2d 2d 3b 29 41 2e 48 5b 54 5d 3d 4f 28 59 2c 41 2e 48 5b 54 5d 29 3b 72 65 74 75 72 6e 20 41 7d 2c 6d 79 3d 66 75 6e 63 74 69 6f 6e 28 59 2c 63 2c 54 2c 64 2c 41 29 7b 69 66 28 64 3d 59 5b 30 5d 2c 64 3d Data Ascii: Listener(S,v,U)}}return v},Nf=function(Y,c,T,d,A,S){for(d=(S=Z((T=(c=(A=Y[nA]\|\|{},Z(Y)),A.Gr=Z(Y),A.H=[],Y.i==Y)?(G(Y)\|0)-1:1,Y)),0);d<T;d++)A.H.push(Z(Y));for((A.zr=O(Y,S),A).Q9=O(Y,c);T--;)A.H[T]=O(Y,A.H[T]);return A},my=function(Y,c,T,d,A){if(d=Y[0],d=
2024-10-02 14:32:55 UTC	1390	IN	Data Raw: 74 69 6f 6e 28 59 2c 63 29 7b 72 65 74 75 72 6e 20 59 28 66 75 6e 63 74 69 6f 6e 28 54 29 7b 54 28 63 29 7d 29 2c 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 5d 7d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 59 2c 63 2c 54 2c 64 2c 41 2c 53 29 7b 69 66 28 63 2e 43 2e 6c 65 6e 67 74 68 29 7b 63 2e 6c 3d 28 63 2e 6c 26 26 22 3a 54 51 52 3a 54 51 52 3a 22 28 29 2c 74 72 75 65 29 2c 63 2e 57 65 3d 59 3b 74 72 79 7b 41 3d 63 2e 5a 28 29 2c 63 2e 46 3d 30 2c 63 2e 55 3d 41 2c 63 2e 4b 3d 41 2c 63 2e 59 3d 30 2c 64 3d 73 6e 28 59 2c 63 29 2c 59 3d 54 3f 30 3a 31 30 2c 53 3d 63 2e 5a 28 29 2d 63 2e 55 2c 63 2e 73 2b 3d 53 2c 63 2e 42 65 26 26 63 2e 42 65 28 53 2d 63 2e 44 2c 63 2e 4c 2c 63 2e 4e 2c 63 2e 46 29 2c Data Ascii: tion(Y,c){return Y(function(T){T(c)}),[function(){return c},function(){}]},e=function(Y,c,T,d,A,S){if(c.C.length){c.l=(c.l&&":TQR:TQR:"(),true),c.We=Y;try{A=c.Z(),c.F=0,c.U=A,c.K=A,c.Y=0,d=sn(Y,c),Y=T?0:10,S=c.Z()-c.U,c.s+=S,c.Be&&c.Be(S-c.D,c.L,c.N,c.F),
2024-10-02 14:32:55 UTC	1390	IN	Data Raw: 29 2c 53 3e 3d 41 29 62 72 65 61 6b 3b 54 3d 28 64 3d 5a 28 28 4d 28 63 2c 33 31 35 2c 53 29 2c 63 29 29 2c 4f 28 63 2c 64 29 29 7d 6d 28 66 61 6c 73 65 2c 28 54 26 26 54 5b 6f 31 5d 26 32 30 34 38 3f 54 28 63 2c 59 29 3a 70 28 30 2c 5b 77 2c 32 31 2c 64 5d 2c 63 29 2c 59 29 2c 63 2c 66 61 6c 73 65 29 7d 63 61 74 63 68 28 76 29 7b 4f 28 63 2c 32 37 31 29 3f 70 28 32 32 2c 76 2c 63 29 3a 4d 28 63 2c 32 37 31 2c 76 29 7d 69 66 28 21 59 29 7b 69 66 28 63 2e 56 39 29 7b 59 64 28 36 38 38 30 39 32 38 35 36 38 35 37 2c 28 63 2e 4f 2d 2d 2c 63 29 29 3b 72 65 74 75 72 6e 7d 70 28 30 2c 5b 77 2c 33 33 5d 2c 63 29 7d 7d 63 61 74 63 68 28 76 29 7b 74 72 79 7b 70 28 32 32 2c 76 2c 63 29 7d 63 61 74 63 68 28 6b 29 7b 71 28 6b 2c 63 29 7d 7d 63 2e 4f 2d 2d 7d 7d 2c 7a Data Ascii: ),S>=A)break;T=(d=Z((M(c,315,S),c)),O(c,d))}m(false,(T&&T[o1]&2048?T(c,Y):p(0,[w,21,d],c),Y),c,false)}catch(v){O(c,271)?p(22,v,c):M(c,271,v)}if(!Y){if(c.V9){Yd(688092856857,(c.O--,c));return}p(0,[w,33],c)}}catch(v){try{p(22,v,c)}catch(k){q(k,c)}}c.O--}},z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49765	142.250.184.228	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 14:32:56 UTC	875	OUT	GET /recaptcha/api2/bframe?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&k=6LfH3FMqAAAAAKyx_81aHghU_FTJYIX9beQVop6A HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://indianatollsroad.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 14:32:56 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 02 Oct 2024 14:32:56 GMT Content-Security-Policy: script-src 'report-sample' 'nonce--pvKdzFeUITvA6JynwhGyQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-02 14:32:56 UTC	229	IN	Data Raw: 31 64 36 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 Data Ascii: 1d69<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* c
2024-10-02 14:32:56 UTC	1390	IN	Data Raw: 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 Data Ascii: yrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A6
2024-10-02 14:32:56 UTC	1390	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-10-02 14:32:56 UTC	1390	IN	Data Raw: 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 Data Ascii: ts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnq
2024-10-02 14:32:56 UTC	1390	IN	Data Raw: 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 37 34 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 Data Ascii: +0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYU
2024-10-02 14:32:56 UTC	1390	IN	Data Raw: 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 33 30 39 2c 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f Data Ascii: 28-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/
2024-10-02 14:32:56 UTC	358	IN	Data Raw: 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 2d 70 76 4b 64 7a 46 65 55 49 54 76 41 36 4a 79 6e 77 68 47 79 51 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 66 72 61 6d 65 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 66 69 6e 70 75 74 5c 78 32 32 2c 6e 75 6c 6c 2c 5b 5c 78 32 32 63 6f 6e 66 5c 78 32 32 2c 6e 75 6c 6c 2c 5c 78 32 32 36 4c 66 48 33 46 4d 71 41 41 41 41 41 4b 79 78 5f 38 31 61 48 67 68 55 5f 46 54 4a 59 49 58 39 62 65 51 56 6f 70 36 41 5c 78 32 32 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2e 37 35 2c 6e 75 6c 6c 2c 5b 32 31 2c 31 32 35 2c 36 33 2c 37 33 2c 39 35 2c 38 37 2c 34 31 2c 34 33 2c 34 32 2c 38 33 2c 31 30 32 2c 31 30 35 2c 31 30 39 2c 31 32 31 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: ript" nonce="-pvKdzFeUITvA6JynwhGyQ"> recaptcha.frame.Main.init("[\x22finput\x22,null,[\x22conf\x22,null,\x226LfH3FMqAAAAAKyx_81aHghU_FTJYIX9beQVop6A\x22,0,null,null,0.75,null,[21,125,63,73,95,87,41,43,42,83,102,105,109,121],null,null,null,
2024-10-02 14:32:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49764	188.68.220.10	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 14:32:56 UTC	642	OUT	GET /favicon.ico HTTP/1.1 Host: indianatollsroad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://indianatollsroad.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=srruqq8eh147ekias60d8flbg2
2024-10-02 14:32:56 UTC	179	IN	HTTP/1.1 404 Not Found Server: nginx/1.18.0 (Ubuntu) Date: Wed, 02 Oct 2024 14:32:56 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 282 Connection: close
2024-10-02 14:32:56 UTC	282	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 34 31 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 69 6e 64 69 61 6e 61 74 6f 6c 6c 73 72 6f 61 64 2e 63 6f 6d 20 50 6f 72 74 20 38 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.41 (Ubuntu) Server at indianatollsroad.com Port 8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49768	216.58.212.164	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 14:32:56 UTC	495	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 14:32:56 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Wed, 02 Oct 2024 14:32:56 GMT Date: Wed, 02 Oct 2024 14:32:56 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-02 14:32:56 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 78 64 73 30 72 7a 47 72 6b 74 52 38 38 75 45 5a 32 4a 55 76 64 67 4f 59 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__en.js');
2024-10-02 14:32:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49767	216.58.212.164	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 14:32:56 UTC	487	OUT	GET /js/bg/5Hh2ALJwVCoAq5i04w6Tc_td0SFcwt2xcFfRkbQms3o.js HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 14:32:56 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18650 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 02 Oct 2024 11:41:46 GMT Expires: Thu, 02 Oct 2025 11:41:46 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 23 Sep 2024 09:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 10270 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-02 14:32:56 UTC	579	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 7d 2c 41 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 54 29 7b 69 66 28 28 54 3d 28 63 3d 6e 75 6c 6c 2c 75 29 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 21 54 29 7c 7c 21 54 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 63 3b 74 72 79 7b 63 3d 54 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var u=this\|\|self,d=function(c){return c},A=function(c,T){if((T=(c=null,u).trustedTypes,!T)\|\|!T.createPolicy)return c;try{c=T.createPolicy("bg",{createHTM
2024-10-02 14:32:56 UTC	1390	IN	Data Raw: 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 75 54 3d 66 75 6e 63 74 69 6f 6e 28 59 2c 63 2c 54 2c 64 29 7b 72 65 74 75 72 6e 20 4f 28 63 2c 28 4d 28 63 2c 28 59 64 28 54 2c 28 28 64 3d 4f 28 63 2c 34 39 33 29 2c 63 2e 41 29 26 26 64 3c 63 2e 54 3f 28 4d 28 63 2c 34 39 33 2c 63 2e 54 29 2c 54 78 28 59 2c 63 29 29 3a 4d 28 63 2c 34 39 33 2c 59 29 2c 63 29 29 2c 34 39 33 29 2c 64 29 2c 35 31 31 29 29 7d 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 59 2c 63 29 7b 63 2e 43 2e 73 70 6c 69 63 65 28 30 2c 30 2c 59 29 7d 2c 44 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 59 2c 63 2c 54 2c 64 2c 41 2c 53 2c 76 2c 6b 2c 75 2c 51 2c 49 2c 4e 2c 50 2c 56 29 7b Data Ascii: X-License-Identifier: Apache-2.0','*/','var uT=function(Y,c,T,d){return O(c,(M(c,(Yd(T,((d=O(c,493),c.A)&&d<c.T?(M(c,493,c.T),Tx(Y,c)):M(c,493,Y),c)),493),d),511))},R=function(Y,c){c.C.splice(0,0,Y)},D=this\|\|self,B=function(Y,c,T,d,A,S,v,k,u,Q,I,N,P,V){
2024-10-02 14:32:56 UTC	1390	IN	Data Raw: 65 2c 76 6f 69 64 20 30 29 2c 59 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 7c 7c 7b 7d 2c 59 2e 74 69 6d 65 4f 72 69 67 69 6e 29 7c 7c 28 59 2e 74 69 6d 69 6e 67 7c 7c 7b 7d 29 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 7c 7c 30 2c 64 26 26 64 2e 6c 65 6e 67 74 68 3d 3d 32 29 26 26 28 54 2e 4e 32 3d 64 5b 31 5d 2c 54 2e 4c 41 3d 64 5b 30 5d 29 2c 34 39 33 29 2c 30 29 2c 33 31 35 29 2c 30 29 2c 66 75 6e 63 74 69 6f 6e 28 75 2c 51 2c 49 2c 4e 29 7b 21 6d 28 66 61 6c 73 65 2c 51 2c 75 2c 74 72 75 65 29 26 26 28 51 3d 4e 66 28 75 29 2c 49 3d 51 2e 7a 72 2c 4e 3d 51 2e 51 39 2c 75 2e 69 3d 3d 75 7c 7c 4e 3d 3d 75 2e 75 4e 26 26 49 3d 3d 75 29 26 26 28 4d 28 75 2c 51 2e 47 72 2c 4e 2e 61 70 70 6c 79 28 49 2c 51 2e 48 29 29 2c 75 2e 4b 3d 75 Data Ascii: e,void 0),Y=window.performance\|\|{},Y.timeOrigin)\|\|(Y.timing\|\|{}).navigationStart\|\|0,d&&d.length==2)&&(T.N2=d[1],T.LA=d[0]),493),0),315),0),function(u,Q,I,N){!m(false,Q,u,true)&&(Q=Nf(u),I=Q.zr,N=Q.Q9,u.i==u\|\|N==u.uN&&I==u)&&(M(u,Q.Gr,N.apply(I,Q.H)),u.K=u
2024-10-02 14:32:56 UTC	1390	IN	Data Raw: 66 6f 72 28 63 5f 3d 5b 5d 2c 6c 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 4c 3b 6e 2b 2b 29 7b 69 66 28 66 3d 79 5b 6e 5d 2c 21 50 5b 6e 5d 29 7b 66 6f 72 28 3b 66 3e 3d 63 5f 2e 6c 65 6e 67 74 68 3b 29 63 5f 2e 70 75 73 68 28 5a 28 68 29 29 3b 66 3d 63 5f 5b 66 5d 7d 6c 2e 70 75 73 68 28 66 29 7d 68 2e 75 3d 50 5f 28 28 68 2e 42 3d 50 5f 28 4e 2e 73 6c 69 63 65 28 29 2c 68 29 2c 6c 29 2c 68 29 7d 29 7d 29 2c 78 28 54 2c 31 37 33 2c 66 75 6e 63 74 69 6f 6e 28 75 29 7b 6b 64 28 75 2c 34 29 7d 29 2c 35 33 29 2c 66 75 6e 63 74 69 6f 6e 28 75 2c 51 2c 49 2c 4e 2c 50 29 7b 4d 28 75 2c 28 51 3d 28 4e 3d 4f 28 75 2c 28 49 3d 5a 28 28 51 3d 28 4e 3d 28 50 3d 5a 28 75 29 2c 5a 28 75 29 29 2c 5a 28 75 29 29 2c 75 29 29 2c 4e 29 29 2c 4f 28 75 2c 51 29 29 2c 49 3d 4f 28 75 2c Data Ascii: for(c_=[],l=[],n=0;n<L;n++){if(f=y[n],!P[n]){for(;f>=c_.length;)c_.push(Z(h));f=c_[f]}l.push(f)}h.u=P_((h.B=P_(N.slice(),h),l),h)})}),x(T,173,function(u){kd(u,4)}),53),function(u,Q,I,N,P){M(u,(Q=(N=O(u,(I=Z((Q=(N=(P=Z(u),Z(u)),Z(u)),u)),N)),O(u,Q)),I=O(u,
2024-10-02 14:32:56 UTC	1390	IN	Data Raw: 2c 4f 6e 28 75 29 29 2c 22 22 29 2c 75 29 2c 38 39 29 2c 4e 3d 4c 2e 6c 65 6e 67 74 68 2c 30 29 3b 50 2d 2d 3b 29 49 3d 28 28 49 7c 30 29 2b 28 4f 6e 28 75 29 7c 30 29 29 25 4e 2c 51 2b 3d 76 5b 4c 5b 49 5d 5d 3b 4d 28 75 2c 56 2c 51 29 7d 29 2c 38 35 29 2c 66 75 6e 63 74 69 6f 6e 28 75 2c 51 2c 49 2c 4e 29 7b 4d 28 75 2c 28 49 3d 4f 28 28 51 3d 28 4e 3d 5a 28 28 51 3d 5a 28 75 29 2c 49 3d 5a 28 75 29 2c 75 29 29 2c 4f 28 75 2c 51 29 29 2c 75 29 2c 49 29 2c 4e 29 2c 51 5b 49 5d 29 7d 29 2c 32 34 31 29 2c 66 75 6e 63 74 69 6f 6e 28 75 2c 51 2c 49 2c 4e 29 7b 4d 28 75 2c 28 49 3d 4f 28 75 2c 28 4e 3d 4f 28 75 2c 28 51 3d 28 49 3d 28 4e 3d 5a 28 75 29 2c 5a 29 28 75 29 2c 5a 28 75 29 29 2c 4e 29 29 2c 49 29 29 2c 51 29 2c 4e 20 69 6e 20 49 7c 30 29 7d 29 2c Data Ascii: ,On(u)),""),u),89),N=L.length,0);P--;)I=((I\|0)+(On(u)\|0))%N,Q+=v[L[I]];M(u,V,Q)}),85),function(u,Q,I,N){M(u,(I=O((Q=(N=Z((Q=Z(u),I=Z(u),u)),O(u,Q)),u),I),N),Q[I])}),241),function(u,Q,I,N){M(u,(I=O(u,(N=O(u,(Q=(I=(N=Z(u),Z)(u),Z(u)),N)),I)),Q),N in I\|0)}),
2024-10-02 14:32:56 UTC	1390	IN	Data Raw: 30 2c 59 5b 28 53 2b 35 33 26 37 29 2b 28 64 26 32 29 5d 3d 75 2c 59 5b 53 2b 28 64 26 32 29 5d 3d 32 35 2c 75 7d 2c 76 7d 2c 69 54 3d 66 75 6e 63 74 69 6f 6e 28 59 2c 63 2c 54 2c 64 29 7b 66 6f 72 28 54 3d 5a 28 59 29 2c 64 3d 30 3b 63 3e 30 3b 63 2d 2d 29 64 3d 64 3c 3c 38 7c 47 28 59 29 3b 4d 28 59 2c 54 2c 64 29 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 59 2c 63 2c 54 2c 64 2c 41 2c 53 2c 76 2c 6b 29 7b 69 66 28 28 54 2e 69 3d 28 54 2e 56 2b 3d 28 41 3d 28 6b 3d 28 64 7c 7c 54 2e 59 2b 2b 2c 54 2e 6a 3e 30 26 26 54 2e 6c 26 26 54 2e 57 65 26 26 54 2e 4f 3c 3d 31 26 26 21 54 2e 42 26 26 21 54 2e 57 29 26 26 28 21 64 7c 7c 54 2e 49 75 2d 63 3e 31 29 26 26 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 3d 3d 30 2c 28 53 3d 54 2e 59 3d 3d 34 29 7c 7c 6b 29 3f Data Ascii: 0,Y[(S+53&7)+(d&2)]=u,Y[S+(d&2)]=25,u},v},iT=function(Y,c,T,d){for(T=Z(Y),d=0;c>0;c--)d=d<<8\|G(Y);M(Y,T,d)},m=function(Y,c,T,d,A,S,v,k){if((T.i=(T.V+=(A=(k=(d\|\|T.Y++,T.j>0&&T.l&&T.We&&T.O<=1&&!T.B&&!T.W)&&(!d\|\|T.Iu-c>1)&&document.hidden==0,(S=T.Y==4)\|\|k)?
2024-10-02 14:32:56 UTC	1390	IN	Data Raw: 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 74 79 70 65 6f 66 20 59 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 21 59 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 22 63 61 6c 6c 22 29 29 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 7d 65 6c 73 65 20 72 65 74 75 72 6e 22 6e 75 6c 6c 22 3b 65 6c 73 65 20 69 66 28 63 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 59 2e 63 61 6c 6c 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3b 72 65 74 75 72 6e 20 63 7d 2c 62 54 3d 66 75 6e 63 74 69 6f 6e 28 59 2c 63 2c 54 2c 64 2c 41 29 7b 66 6f 72 28 54 3d 28 59 3d 59 2e 72 65 70 6c 61 63 65 28 2f 5c 5c 72 5c 5c 6e 2f 67 2c 22 5c Data Ascii: !="undefined"&&typeof Y.propertyIsEnumerable!="undefined"&&!Y.propertyIsEnumerable("call"))return"function"}else return"null";else if(c=="function"&&typeof Y.call=="undefined")return"object";return c},bT=function(Y,c,T,d,A){for(T=(Y=Y.replace(/\\r\\n/g,"\
2024-10-02 14:32:56 UTC	1390	IN	Data Raw: 4c 69 73 74 65 6e 65 72 28 53 2c 76 2c 55 29 7d 7d 72 65 74 75 72 6e 20 76 7d 2c 4e 66 3d 66 75 6e 63 74 69 6f 6e 28 59 2c 63 2c 54 2c 64 2c 41 2c 53 29 7b 66 6f 72 28 64 3d 28 53 3d 5a 28 28 54 3d 28 63 3d 28 41 3d 59 5b 6e 41 5d 7c 7c 7b 7d 2c 5a 28 59 29 29 2c 41 2e 47 72 3d 5a 28 59 29 2c 41 2e 48 3d 5b 5d 2c 59 2e 69 3d 3d 59 29 3f 28 47 28 59 29 7c 30 29 2d 31 3a 31 2c 59 29 29 2c 30 29 3b 64 3c 54 3b 64 2b 2b 29 41 2e 48 2e 70 75 73 68 28 5a 28 59 29 29 3b 66 6f 72 28 28 41 2e 7a 72 3d 4f 28 59 2c 53 29 2c 41 29 2e 51 39 3d 4f 28 59 2c 63 29 3b 54 2d 2d 3b 29 41 2e 48 5b 54 5d 3d 4f 28 59 2c 41 2e 48 5b 54 5d 29 3b 72 65 74 75 72 6e 20 41 7d 2c 6d 79 3d 66 75 6e 63 74 69 6f 6e 28 59 2c 63 2c 54 2c 64 2c 41 29 7b 69 66 28 64 3d 59 5b 30 5d 2c 64 3d Data Ascii: Listener(S,v,U)}}return v},Nf=function(Y,c,T,d,A,S){for(d=(S=Z((T=(c=(A=Y[nA]\|\|{},Z(Y)),A.Gr=Z(Y),A.H=[],Y.i==Y)?(G(Y)\|0)-1:1,Y)),0);d<T;d++)A.H.push(Z(Y));for((A.zr=O(Y,S),A).Q9=O(Y,c);T--;)A.H[T]=O(Y,A.H[T]);return A},my=function(Y,c,T,d,A){if(d=Y[0],d=
2024-10-02 14:32:56 UTC	1390	IN	Data Raw: 74 69 6f 6e 28 59 2c 63 29 7b 72 65 74 75 72 6e 20 59 28 66 75 6e 63 74 69 6f 6e 28 54 29 7b 54 28 63 29 7d 29 2c 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 5d 7d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 59 2c 63 2c 54 2c 64 2c 41 2c 53 29 7b 69 66 28 63 2e 43 2e 6c 65 6e 67 74 68 29 7b 63 2e 6c 3d 28 63 2e 6c 26 26 22 3a 54 51 52 3a 54 51 52 3a 22 28 29 2c 74 72 75 65 29 2c 63 2e 57 65 3d 59 3b 74 72 79 7b 41 3d 63 2e 5a 28 29 2c 63 2e 46 3d 30 2c 63 2e 55 3d 41 2c 63 2e 4b 3d 41 2c 63 2e 59 3d 30 2c 64 3d 73 6e 28 59 2c 63 29 2c 59 3d 54 3f 30 3a 31 30 2c 53 3d 63 2e 5a 28 29 2d 63 2e 55 2c 63 2e 73 2b 3d 53 2c 63 2e 42 65 26 26 63 2e 42 65 28 53 2d 63 2e 44 2c 63 2e 4c 2c 63 2e 4e 2c 63 2e 46 29 2c Data Ascii: tion(Y,c){return Y(function(T){T(c)}),[function(){return c},function(){}]},e=function(Y,c,T,d,A,S){if(c.C.length){c.l=(c.l&&":TQR:TQR:"(),true),c.We=Y;try{A=c.Z(),c.F=0,c.U=A,c.K=A,c.Y=0,d=sn(Y,c),Y=T?0:10,S=c.Z()-c.U,c.s+=S,c.Be&&c.Be(S-c.D,c.L,c.N,c.F),
2024-10-02 14:32:56 UTC	1390	IN	Data Raw: 29 2c 53 3e 3d 41 29 62 72 65 61 6b 3b 54 3d 28 64 3d 5a 28 28 4d 28 63 2c 33 31 35 2c 53 29 2c 63 29 29 2c 4f 28 63 2c 64 29 29 7d 6d 28 66 61 6c 73 65 2c 28 54 26 26 54 5b 6f 31 5d 26 32 30 34 38 3f 54 28 63 2c 59 29 3a 70 28 30 2c 5b 77 2c 32 31 2c 64 5d 2c 63 29 2c 59 29 2c 63 2c 66 61 6c 73 65 29 7d 63 61 74 63 68 28 76 29 7b 4f 28 63 2c 32 37 31 29 3f 70 28 32 32 2c 76 2c 63 29 3a 4d 28 63 2c 32 37 31 2c 76 29 7d 69 66 28 21 59 29 7b 69 66 28 63 2e 56 39 29 7b 59 64 28 36 38 38 30 39 32 38 35 36 38 35 37 2c 28 63 2e 4f 2d 2d 2c 63 29 29 3b 72 65 74 75 72 6e 7d 70 28 30 2c 5b 77 2c 33 33 5d 2c 63 29 7d 7d 63 61 74 63 68 28 76 29 7b 74 72 79 7b 70 28 32 32 2c 76 2c 63 29 7d 63 61 74 63 68 28 6b 29 7b 71 28 6b 2c 63 29 7d 7d 63 2e 4f 2d 2d 7d 7d 2c 7a Data Ascii: ),S>=A)break;T=(d=Z((M(c,315,S),c)),O(c,d))}m(false,(T&&T[o1]&2048?T(c,Y):p(0,[w,21,d],c),Y),c,false)}catch(v){O(c,271)?p(22,v,c):M(c,271,v)}if(!Y){if(c.V9){Yd(688092856857,(c.O--,c));return}p(0,[w,33],c)}}catch(v){try{p(22,v,c)}catch(k){q(k,c)}}c.O--}},z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49774	142.250.184.228	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 14:33:12 UTC	863	OUT	POST /recaptcha/api2/reload?k=6LfH3FMqAAAAAKyx_81aHghU_FTJYIX9beQVop6A HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7495 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-protobuffer Accept: / Origin: https://www.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&k=6LfH3FMqAAAAAKyx_81aHghU_FTJYIX9beQVop6A Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-02 14:33:12 UTC	7495	OUT	Data Raw: 0a 18 78 64 73 30 72 7a 47 72 6b 74 52 38 38 75 45 5a 32 4a 55 76 64 67 4f 59 12 ce 0f 30 33 41 46 63 57 65 41 34 4b 5f 6e 69 31 6f 41 51 7a 67 76 30 6f 6c 30 6f 45 62 30 68 39 6f 62 4c 45 48 37 63 73 68 77 74 62 59 57 71 76 46 52 41 4a 55 67 31 67 35 32 7a 74 41 53 2d 48 52 63 73 70 4d 4c 53 72 4f 7a 59 48 46 6e 57 56 39 58 39 30 6e 59 71 39 34 70 78 67 35 53 56 2d 6c 41 59 4e 39 63 56 4c 76 53 4a 6e 57 6e 66 73 6c 76 77 34 48 6c 6d 79 32 6f 67 74 76 65 38 32 6c 52 65 39 38 47 6c 4d 42 48 50 6c 6d 4b 52 71 4e 43 78 41 64 35 53 49 42 2d 4a 37 6c 46 77 49 39 58 4c 31 4f 67 6b 67 59 58 76 75 6e 34 50 34 58 4f 31 68 32 43 41 6d 4b 57 67 58 57 36 75 41 36 75 46 36 37 4f 7a 51 78 5f 34 79 35 78 6d 59 31 6f 79 41 30 7a 6e 6b 56 39 44 58 77 58 52 45 31 62 72 34 Data Ascii: xds0rzGrktR88uEZ2JUvdgOY03AFcWeA4K_ni1oAQzgv0ol0oEb0h9obLEH7cshwtbYWqvFRAJUg1g52ztAS-HRcspMLSrOzYHFnWV9X90nYq94pxg5SV-lAYN9cVLvSJnWnfslvw4Hlmy2ogtve82lRe98GlMBHPlmKRqNCxAd5SIB-J7lFwI9XL1OgkgYXvun4P4XO1h2CAmKWgXW6uA6uF67OzQx_4y5xmY1oyA0znkV9DXwXRE1br4
2024-10-02 14:33:12 UTC	1000	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: same-site Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Date: Wed, 02 Oct 2024 14:33:12 GMT Server: ESF Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: _GRECAPTCHA=09AGteOyolv9InuFRncA0hy-Vg3QiQ1I8WZOsPXJSTB4xEsAfMLKyNVOFy8i-ZLN3nOe32ztWpeiiq9mEI1OWJg84; Expires=Mon, 31-Mar-2025 14:33:12 GMT; Path=/recaptcha; Secure; HttpOnly; Priority=HIGH; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Expires: Wed, 02 Oct 2024 14:33:12 GMT Connection: close Transfer-Encoding: chunked
2024-10-02 14:33:12 UTC	390	IN	Data Raw: 34 30 63 34 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 35 74 57 64 4f 75 4e 43 45 45 36 43 66 33 48 39 4c 75 75 34 2d 65 45 49 43 77 4a 72 49 75 6d 6f 4b 34 73 51 6d 35 79 52 4b 69 5f 74 4b 58 47 54 69 2d 6c 6a 6b 39 69 32 68 4b 51 30 6f 68 52 33 54 54 32 65 34 6a 72 4d 67 42 4e 68 76 35 58 55 6f 76 79 55 31 6e 65 6f 65 34 68 39 48 6c 48 48 54 57 57 4a 5a 4d 33 6b 61 62 6f 45 46 6d 6a 34 42 42 5a 79 65 73 35 36 53 59 30 43 4f 4b 79 75 30 64 4b 4b 6f 7a 70 5a 62 7a 6e 43 54 49 32 41 63 63 65 57 47 52 4c 68 42 44 72 67 51 6c 63 50 79 76 64 4e 38 77 41 58 41 53 62 74 52 35 75 42 4f 78 75 76 6a 41 49 36 6a 4a 73 79 77 45 46 36 57 32 52 71 4d 37 62 68 46 58 6a 51 69 49 67 42 32 4b 56 71 33 6a 64 64 6a 4b 51 68 5f 62 71 4e 75 6b Data Ascii: 40c4)]}'["rresp","03AFcWeA5tWdOuNCEE6Cf3H9Luu4-eEICwJrIumoK4sQm5yRKi_tKXGTi-ljk9i2hKQ0ohR3TT2e4jrMgBNhv5XUovyU1neoe4h9HlHHTWWJZM3kaboEFmj4BBZyes56SY0COKyu0dKKozpZbznCTI2AcceWGRLhBDrgQlcPyvdN8wAXASbtR5uBOxuvjAI6jJsywEF6W2RqM7bhFXjQiIgB2KVq3jddjKQh_bqNuk
2024-10-02 14:33:12 UTC	1390	IN	Data Raw: 75 51 54 66 47 50 69 72 71 36 54 45 55 6e 53 42 6f 74 4a 37 55 4a 42 7a 76 43 33 79 35 53 77 6e 75 54 49 75 50 30 70 49 4f 69 48 36 6b 46 4b 2d 74 46 4d 6e 4b 6e 68 5a 34 73 54 7a 75 5a 76 51 57 32 77 64 64 56 48 50 2d 64 76 36 7a 53 4d 4e 4f 6a 73 67 51 52 58 77 59 41 4b 52 43 45 57 6d 48 34 66 4f 31 74 57 47 65 36 76 41 72 4f 75 33 67 5f 78 42 30 73 6e 4d 6c 59 4d 43 51 4c 71 58 6f 58 46 43 4f 59 7a 63 61 33 50 55 36 41 30 67 77 49 47 59 63 31 56 68 45 41 78 7a 36 57 32 6f 45 73 66 72 6b 65 4f 59 65 47 4c 38 62 33 69 4a 75 5f 4e 4b 2d 63 55 35 71 35 42 53 70 71 52 48 64 6a 63 63 56 48 2d 4d 53 65 6b 2d 76 49 42 39 36 33 6d 48 57 4e 32 57 76 5f 73 37 78 65 33 59 54 71 72 62 35 71 76 67 6c 74 72 59 59 69 39 48 30 35 71 41 63 67 47 47 35 51 35 44 32 45 4a Data Ascii: uQTfGPirq6TEUnSBotJ7UJBzvC3y5SwnuTIuP0pIOiH6kFK-tFMnKnhZ4sTzuZvQW2wddVHP-dv6zSMNOjsgQRXwYAKRCEWmH4fO1tWGe6vArOu3g_xB0snMlYMCQLqXoXFCOYzca3PU6A0gwIGYc1VhEAxz6W2oEsfrkeOYeGL8b3iJu_NK-cU5q5BSpqRHdjccVH-MSek-vIB963mHWN2Wv_s7xe3YTqrb5qvgltrYYi9H05qAcgGG5Q5D2EJ
2024-10-02 14:33:12 UTC	1390	IN	Data Raw: 69 48 6e 59 6e 61 34 30 55 61 66 62 68 71 78 54 72 4a 39 6b 46 33 76 50 43 42 59 56 68 56 33 32 47 6a 73 43 4e 6c 5f 41 6b 78 49 37 72 6d 59 53 56 32 32 52 78 54 35 43 64 75 67 4c 31 68 4a 48 68 30 4c 75 4f 50 68 45 64 5f 71 6f 61 63 59 72 70 6d 71 4f 63 39 6b 38 52 7a 75 42 50 55 69 4c 7a 47 44 5f 59 58 4c 56 62 33 78 62 63 41 70 6f 45 35 45 79 71 65 48 45 68 69 35 30 74 57 4c 34 30 36 45 32 50 69 46 69 6a 74 43 75 30 75 7a 44 61 2d 55 66 4b 73 71 6f 41 69 73 2d 67 76 45 2d 77 63 72 2d 47 30 71 44 64 38 2d 69 4b 43 74 32 5a 35 48 58 6b 6a 38 45 44 46 59 46 75 34 52 77 68 55 47 44 6a 6c 78 4d 31 6c 6d 47 66 6e 63 4f 57 62 6e 75 5a 66 47 4f 42 79 4e 30 46 66 50 35 36 35 38 55 6e 4a 5f 50 6d 49 5a 46 71 69 61 6d 45 4a 4f 4e 34 53 69 37 76 45 5f 73 74 30 55 Data Ascii: iHnYna40UafbhqxTrJ9kF3vPCBYVhV32GjsCNl_AkxI7rmYSV22RxT5CdugL1hJHh0LuOPhEd_qoacYrpmqOc9k8RzuBPUiLzGD_YXLVb3xbcApoE5EyqeHEhi50tWL406E2PiFijtCu0uzDa-UfKsqoAis-gvE-wcr-G0qDd8-iKCt2Z5HXkj8EDFYFu4RwhUGDjlxM1lmGfncOWbnuZfGOByN0FfP5658UnJ_PmIZFqiamEJON4Si7vE_st0U
2024-10-02 14:33:12 UTC	1390	IN	Data Raw: 43 6d 6b 71 5a 70 6a 75 7a 33 46 36 6c 55 47 67 46 4b 6f 6f 64 6c 38 64 35 69 65 61 57 78 75 2d 42 70 46 6e 48 4d 66 64 71 5f 79 4a 47 42 47 5f 5a 63 56 41 38 47 38 76 69 44 4b 42 65 4b 6a 61 43 43 71 52 4d 6a 68 2d 46 76 35 36 54 35 64 32 6a 46 4b 35 6c 67 79 36 67 69 35 6b 75 36 65 4d 4f 31 75 49 68 32 72 78 41 6b 71 4f 32 49 51 6f 39 2d 4c 32 61 58 50 4e 67 41 32 56 30 4f 37 77 64 52 37 32 70 6b 66 50 51 58 41 6d 77 68 38 70 58 42 54 58 34 64 6b 70 54 56 49 51 68 6a 6b 4a 4c 79 4f 58 47 4f 30 6a 46 71 68 49 48 70 67 36 69 55 66 4c 66 66 72 58 6c 59 34 6f 50 6d 79 6a 51 32 5f 69 55 6e 6a 30 5f 4e 79 4e 78 47 4c 63 4f 6a 75 69 34 64 57 50 37 30 36 4e 5a 57 4c 70 6b 55 59 5a 72 53 6a 54 5f 50 4e 6b 35 42 79 43 73 2d 54 2d 47 2d 73 64 75 36 54 2d 64 71 4d Data Ascii: CmkqZpjuz3F6lUGgFKoodl8d5ieaWxu-BpFnHMfdq_yJGBG_ZcVA8G8viDKBeKjaCCqRMjh-Fv56T5d2jFK5lgy6gi5ku6eMO1uIh2rxAkqO2IQo9-L2aXPNgA2V0O7wdR72pkfPQXAmwh8pXBTX4dkpTVIQhjkJLyOXGO0jFqhIHpg6iUfLffrXlY4oPmyjQ2_iUnj0_NyNxGLcOjui4dWP706NZWLpkUYZrSjT_PNk5ByCs-T-G-sdu6T-dqM
2024-10-02 14:33:12 UTC	1390	IN	Data Raw: 39 61 44 4a 36 38 4d 39 30 58 72 4b 51 58 4a 4d 36 4f 4f 4a 37 4d 76 2d 43 2d 76 49 74 42 47 2d 47 57 59 50 69 46 70 65 50 38 5a 31 2d 42 45 44 61 74 52 68 56 7a 48 42 43 37 6a 75 33 35 44 4c 45 39 57 37 52 75 58 62 79 72 6c 45 4b 41 72 4d 45 36 52 4c 5a 59 2d 39 47 71 4f 4f 67 76 61 47 38 36 49 4d 59 50 4b 68 39 35 73 36 45 32 47 72 71 36 36 52 52 33 7a 39 71 79 76 5f 78 79 37 6e 6c 51 62 37 78 35 77 58 7a 77 68 63 6f 50 49 32 76 76 4b 64 71 42 4e 50 61 46 6c 71 4d 38 64 65 31 5a 63 71 63 33 42 5f 48 54 78 61 2d 34 52 67 78 48 5f 53 2d 64 55 54 5a 42 44 45 36 6b 37 4f 49 46 6c 79 6c 72 58 49 32 49 38 70 74 37 31 46 48 33 49 6c 52 44 72 56 42 4e 5a 6f 6f 4e 78 4b 4d 65 77 56 4c 79 5a 51 51 22 2c 6e 75 6c 6c 2c 31 32 30 2c 5b 22 70 6d 65 74 61 22 2c 5b 22 Data Ascii: 9aDJ68M90XrKQXJM6OOJ7Mv-C-vItBG-GWYPiFpeP8Z1-BEDatRhVzHBC7ju35DLE9W7RuXbyrlEKArME6RLZY-9GqOOgvaG86IMYPKh95s6E2Grq66RR3z9qyv_xy7nlQb7x5wXzwhcoPI2vvKdqBNPaFlqM8de1Zcqc3B_HTxa-4RgxH_S-dUTZBDE6k7OIFlylrXI2I8pt71FH3IlRDrVBNZooNxKMewVLyZQQ",null,120,["pmeta",["
2024-10-02 14:33:12 UTC	1390	IN	Data Raw: 62 33 68 6a 4e 45 4a 51 4b 30 5a 35 59 55 5a 32 59 32 4a 48 4f 48 6c 58 4b 33 64 69 57 47 64 4f 54 30 6b 77 4d 57 39 4b 52 6b 78 78 59 7a 45 78 53 58 6c 33 4c 30 6c 6e 63 45 35 52 56 47 78 47 53 48 6f 79 54 33 4a 69 55 31 6c 45 59 58 64 36 59 6d 4a 30 56 6b 38 35 56 32 73 35 5a 44 63 33 4f 57 4a 6b 4b 30 56 31 63 56 52 71 65 56 42 42 52 46 4a 4b 54 45 52 79 64 6e 4e 6d 4e 57 31 42 59 57 35 54 4e 6e 46 61 61 6d 73 72 4b 32 52 45 55 30 35 51 4d 30 31 61 65 56 42 46 63 79 74 6a 56 6b 68 55 4d 6c 52 72 61 54 45 7a 55 6d 55 35 62 6b 49 32 5a 6a 4a 6d 54 56 70 51 55 32 5a 42 55 58 6c 31 51 69 74 42 55 33 5a 51 4d 33 4e 44 56 6e 6c 48 62 32 64 35 54 55 78 59 51 55 56 69 4f 45 35 68 62 7a 4e 6d 53 54 67 79 51 56 4e 59 55 33 56 43 62 6d 31 50 64 6c 42 36 59 6d 4a Data Ascii: b3hjNEJQK0Z5YUZ2Y2JHOHlXK3diWGdOT0kwMW9KRkxxYzExSXl3L0lncE5RVGxGSHoyT3JiU1lEYXd6YmJ0Vk85V2s5ZDc3OWJkK0V1cVRqeVBBRFJKTERydnNmNW1BYW5TNnFaamsrK2REU05QM01aeVBFcytjVkhUMlRraTEzUmU5bkI2ZjJmTVpQU2ZBUXl1QitBU3ZQM3NDVnlHb2d5TUxYQUViOE5hbzNmSTgyQVNYU3VCbm1PdlB6YmJ
2024-10-02 14:33:12 UTC	1390	IN	Data Raw: 70 30 63 33 42 32 64 30 31 5a 52 47 4a 52 57 44 64 42 64 30 31 74 61 7a 63 78 63 33 52 61 54 6c 49 35 4d 6a 68 30 64 6b 46 30 63 46 6c 45 4e 30 6c 59 52 6a 45 35 52 33 6c 61 57 47 6b 78 65 6b 77 31 4d 30 5a 68 54 6d 74 73 4d 7a 41 33 4c 30 6c 44 57 46 52 6a 57 6e 55 33 51 54 56 61 4e 6a 4e 59 52 55 4a 4e 64 44 64 31 55 31 64 77 57 46 46 79 4f 55 39 58 4d 48 5a 43 51 6d 46 76 55 6d 35 51 62 6d 68 47 59 31 56 55 4d 7a 4e 55 54 55 6b 32 54 58 42 74 51 57 4e 4b 61 7a 52 57 55 45 4a 47 59 6e 46 4a 55 6e 70 36 51 31 46 43 64 45 4e 76 57 6d 64 4a 5a 6b 35 30 53 31 68 6c 4d 31 52 48 62 57 52 72 4d 33 5a 68 64 54 5a 52 57 55 64 6c 4d 56 42 6a 56 53 39 72 54 30 74 77 52 7a 4a 33 52 54 46 47 52 48 70 57 4e 6d 46 47 5a 56 4e 77 53 46 52 46 62 57 35 58 52 79 39 36 61 Data Ascii: p0c3B2d01ZRGJRWDdBd01tazcxc3RaTlI5Mjh0dkF0cFlEN0lYRjE5R3laWGkxekw1M0ZhTmtsMzA3L0lDWFRjWnU3QTVaNjNYRUJNdDd1U1dwWFFyOU9XMHZCQmFvUm5QbmhGY1VUMzNUTUk2TXBtQWNKazRWUEJGYnFJUnp6Q1FCdENvWmdJZk50S1hlM1RHbWRrM3ZhdTZRWUdlMVBjVS9rT0twRzJ3RTFGRHpWNmFGZVNwSFRFbW5XRy96a
2024-10-02 14:33:12 UTC	1390	IN	Data Raw: 63 46 41 77 4e 57 52 56 61 56 41 79 55 58 6f 34 55 55 4e 76 64 6c 5a 4b 5a 6d 5a 77 56 47 46 4f 4e 33 55 30 63 6c 52 33 53 31 42 7a 65 58 6c 55 4b 33 42 72 65 45 49 31 64 47 64 33 63 6b 64 69 61 32 77 7a 4d 57 6c 43 4e 47 55 7a 62 6d 31 57 62 45 74 77 62 31 55 78 65 48 52 31 4f 55 55 32 4e 44 56 51 55 45 5a 59 62 57 6c 50 63 6e 5a 72 55 30 78 57 5a 54 59 34 63 58 67 33 61 55 73 34 56 55 67 77 51 6c 6c 69 63 46 4e 6b 54 31 70 68 55 6b 56 6a 54 44 6c 74 61 6a 59 7a 52 30 70 70 59 57 68 33 4e 48 4d 79 4d 54 4e 50 65 46 6c 33 61 6c 64 70 59 55 4e 34 65 44 42 59 56 32 6c 46 56 6d 52 55 54 43 74 4e 53 6a 56 49 5a 6e 4a 46 57 6e 4a 69 52 7a 6c 7a 51 30 52 50 53 6d 39 77 55 6d 31 6b 5a 47 5a 31 54 47 31 55 51 54 52 57 55 6b 73 32 55 33 52 74 55 32 31 72 4e 44 41 Data Ascii: cFAwNWRVaVAyUXo4UUNvdlZKZmZwVGFON3U0clR3S1BzeXlUK3BreEI1dGd3ckdia2wzMWlCNGUzbm1WbEtwb1UxeHR1OUU2NDVQUEZYbWlPcnZrU0xWZTY4cXg3aUs4VUgwQllicFNkT1phUkVjTDltajYzR0ppYWh3NHMyMTNPeFl3aldpYUN4eDBYV2lFVmRUTCtNSjVIZnJFWnJiRzlzQ0RPSm9wUm1kZGZ1TG1UQTRWUks2U3RtU21rNDA
2024-10-02 14:33:12 UTC	1390	IN	Data Raw: 41 31 64 57 46 6b 62 45 35 6c 51 6b 4a 33 5a 58 6f 72 61 58 56 33 51 6b 39 4e 52 7a 56 4c 51 57 52 4b 4e 48 42 70 4c 7a 52 71 59 57 46 72 63 54 42 49 62 47 45 7a 65 46 52 5a 57 55 78 33 4f 58 46 32 52 31 42 6d 4d 30 59 32 61 32 5a 78 55 30 6f 79 59 6e 46 4a 61 30 52 73 4d 30 4e 6a 55 48 46 49 4e 30 4d 79 52 7a 42 79 63 32 6c 76 53 6b 63 30 4f 46 64 4b 55 44 52 71 65 45 77 77 53 33 4a 52 53 6a 5a 6d 61 48 4a 48 56 58 6b 7a 53 6a 56 71 64 44 4d 31 5a 48 6f 72 51 33 4e 69 52 44 4e 31 52 53 74 69 56 30 46 33 54 55 4d 7a 65 56 64 56 4f 48 4e 6a 55 30 70 56 56 48 64 4a 4d 57 64 36 62 46 46 51 65 6a 56 35 51 6b 68 42 5a 6a 41 76 59 6b 4a 46 51 55 68 54 64 56 68 44 55 30 6c 59 55 6b 35 48 61 7a 56 59 64 44 5a 30 59 33 68 55 4d 57 52 33 63 31 68 4f 52 48 4a 33 4d Data Ascii: A1dWFkbE5lQkJ3ZXoraXV3Qk9NRzVLQWRKNHBpLzRqYWFrcTBIbGEzeFRZWUx3OXF2R1BmM0Y2a2ZxU0oyYnFJa0RsM0NjUHFIN0MyRzByc2lvSkc0OFdKUDRqeEwwS3JRSjZmaHJHVXkzSjVqdDM1ZHorQ3NiRDN1RStiV0F3TUMzeVdVOHNjU0pVVHdJMWd6bFFQejV5QkhBZjAvYkJFQUhTdVhDU0lYUk5HazVYdDZ0Y3hUMWR3c1hORHJ3M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49775	216.58.212.164	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 14:33:13 UTC	610	OUT	GET /recaptcha/api2/reload?k=6LfH3FMqAAAAAKyx_81aHghU_FTJYIX9beQVop6A HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyolv9InuFRncA0hy-Vg3QiQ1I8WZOsPXJSTB4xEsAfMLKyNVOFy8i-ZLN3nOe32ztWpeiiq9mEI1OWJg84
2024-10-02 14:33:14 UTC	743	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 02 Oct 2024 14:33:13 GMT Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Allow: POST Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-02 14:33:14 UTC	647	IN	Data Raw: 36 38 30 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f Data Ascii: 680<html lang="en" dir=ltr><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{backgro
2024-10-02 14:33:14 UTC	1024	IN	Data Raw: 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 7d 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background
2024-10-02 14:33:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49779	142.250.184.228	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 14:33:13 UTC	1152	OUT	GET /recaptcha/api2/payload?p=06AFcWeA7buMnOYkT1e1OX33WwV5BYHtGoe6rsCc6yLwIOZxWYReONmSzeYoH4QhJ96wFfjHVdoZbgzKFjuhEFc5CWzryWVquRxXJSXc0MvXu2Hku_AZ1ZY3TI3eS5Y6Xv4pZeNC8GlLKRexXU3EjCJXh_LXG4i7SktYtRp9ojSk2x4qXPwyWbFXmHXrLeZcWMV-TMBywxkpQI&k=6LfH3FMqAAAAAKyx_81aHghU_FTJYIX9beQVop6A HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&k=6LfH3FMqAAAAAKyx_81aHghU_FTJYIX9beQVop6A Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyolv9InuFRncA0hy-Vg3QiQ1I8WZOsPXJSTB4xEsAfMLKyNVOFy8i-ZLN3nOe32ztWpeiiq9mEI1OWJg84
2024-10-02 14:33:14 UTC	681	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Wed, 02 Oct 2024 14:33:14 GMT Date: Wed, 02 Oct 2024 14:33:14 GMT Cache-Control: private, max-age=30 Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Cross-Origin-Resource-Policy: same-site Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-02 14:33:14 UTC	709	IN	Data Raw: 39 30 64 35 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 90d5JFIFC!"$"$C"}!1AQa"q
2024-10-02 14:33:14 UTC	1390	IN	Data Raw: 33 5b 36 40 3e 86 ba f8 35 f8 6f ac e3 2a de 5d f2 f1 9f 5a e5 a3 f1 55 ec 1a 98 5b d9 1d 51 1f e7 0a 70 0f 35 a5 15 3b 34 ca 8b 56 b3 35 b4 0f 09 ca 93 bd c6 af 71 9e 4e c8 ff 00 bc 47 4a 6d d6 9f ac 4f a9 a8 76 30 40 a7 00 01 c6 df 4a ca f1 8f 8d be df 3c 42 c0 18 82 10 43 0e 09 ad 9d 2f 5f 9f 57 8a db cc 93 a0 01 f1 c1 fa d1 38 b8 ab 91 24 92 76 3a 5d 07 c3 d6 ed 21 64 8f 79 ee 4d 6d 6c 8a da 2b 81 22 f4 5c 00 be b5 73 4e 92 de 2d 32 2d 8d 87 71 db ad 70 7f 10 bc 41 7d a0 ea 71 3d b2 82 b2 63 28 c3 82 2b cc 53 a9 56 a7 29 9a 93 3a 1b 2b 24 8e c0 5d ce ac 23 73 f3 86 ed 5b 3a 3d b5 84 da 7c b7 d6 ae 9b 21 04 b0 1d ab 8d d4 3c 71 a7 6a 3e 1c 48 44 cb 14 cc a3 78 f4 3d eb 9a d3 7c 5f 16 91 a3 6a ba 70 94 e6 e5 4e c6 ad 16 1e 72 76 27 96 4d 9e bf 6b 7b 6a Data Ascii: 3[6@>5o*]ZU[Qp5;4V5qNGJmOv0@J<BC/_W8$v:]!dyMml+"\sN-2-qpA}q=c(+SV):+$]#s[:=\|!<qj>HDx=\|_jpNrv'Mk{j
2024-10-02 14:33:14 UTC	1390	IN	Data Raw: e9 88 7c c9 40 f6 ab 51 da 91 91 90 07 ad 46 d0 aa 1e 1b 6e d6 eb ea 2b 55 ad 99 52 89 dd fc 03 b7 cf 8d 21 3e ff 00 d2 af fe d2 44 37 89 ed 54 b6 42 40 78 fc 6a b7 ec f4 c2 5f 1a fc a4 b6 c8 33 f8 fa d3 bf 68 a2 1b c7 28 84 e3 6d b8 e3 f1 15 d3 56 36 b2 32 92 bb 3c ff 00 47 40 d7 96 c9 b4 f0 f9 35 f4 0f 87 06 c8 22 4c 73 b4 7f 2a f0 6d 00 83 aa db 29 e9 e6 57 be e8 5f 79 48 e8 00 15 b5 b4 1c d9 d6 5a e4 40 b9 ab 89 80 7d 2a 95 b6 36 8c 92 40 ab 71 e0 ae 4f 5c d2 31 b9 37 e3 45 32 8a 02 e7 c6 2d a9 de 02 41 9d c6 7d 0d 5a d1 6e e1 05 96 5c f9 cc 78 6e f5 9c c9 19 6f 99 8e 07 f7 46 6a e6 8d 6b 2d e5 e8 8a 20 86 41 d3 27 15 c9 64 91 d6 a0 99 b5 77 77 24 33 42 f6 c1 d9 87 5c 8c 55 59 e5 33 23 c8 eb bc b1 e4 8a bd aa 0b 8b 43 1c 77 60 6d 1c 30 02 9b 6d 0a ac Data Ascii: \|@QFn+UR!>D7TB@xj_3h(mV62<G@5"Lsm)W_yHZ@}6@qO\17E2-A}Zn\xnoFjk- A'dww$3B\UY3#Cw`m0m
2024-10-02 14:33:14 UTC	1390	IN	Data Raw: 93 d4 57 a7 0a 2a 48 a5 12 e6 a9 3d ac a9 13 c6 08 91 97 e7 c5 66 3c 85 7f 88 d4 8f 32 84 d9 b3 2d 9c 0f a5 30 21 3f 36 de f5 ac 61 65 63 44 b4 11 5e 56 e3 27 06 a0 9c 30 77 56 25 c7 18 15 62 59 19 47 08 00 a8 e3 5d f2 b4 99 c7 40 7e b5 a2 1c f5 d8 f4 cf d9 b2 d4 27 8a e7 70 48 fd c1 e0 d5 1f 8f 92 07 f8 8a c3 6e 58 44 05 6c 7e cf 0b bb c4 f7 6c 33 81 01 03 23 bd 62 7c 6b 20 fc 43 ba 70 73 e5 a8 eb f4 ae 9a ce f2 8a 30 7b 9c 97 87 93 3a dd b7 fb fd 2b df b4 21 95 5e 31 d2 bc 23 c2 d9 97 5f b6 18 fe 2c d7 bd e8 4b 88 c7 d6 b7 e8 13 3a 68 14 6d 51 da ae 0c 02 00 f4 aa 50 e7 0b 56 c0 e4 64 d4 98 92 f1 45 33 68 f5 34 50 07 c5 49 b4 e0 6c 65 25 ba d7 5b f0 fa d0 5d 6a ac 21 20 b0 fe 2f 4a e5 af 8b 16 13 29 f9 58 73 8e f5 db 7c 28 00 5d bb 95 e3 1c e2 b8 ea e9 Data Ascii: W*H=f<2-0!?6aecD^V'0wV%bYG]@~'pHnXDl~l3#b\|k Cps0{:+!^1#_,K:hmQPVdE3h4PIle%[]j! /J)Xs\|(]
2024-10-02 14:33:14 UTC	1390	IN	Data Raw: 5b 04 d5 8f 2a 6d bd 7e b5 0b c4 eb b1 df 9c e3 35 a4 1d e4 83 a9 eb 5f b3 a2 e6 ea fa 7c 7c dc 0a e3 fe 2f 0f 37 c7 fa 8c 84 f0 a7 15 dd fe cf 31 ed 8f 51 7c 74 90 7f 23 5e 7d f1 32 40 fe 34 d4 58 9f e3 2b 5d 35 bf 89 03 29 fc 46 5f 83 63 2f e2 5b 60 3e ea 0c 9a f7 7d 19 70 8b f5 af 0e f0 06 1b c4 6a 71 90 12 bd cf 44 c1 51 ba ba 13 21 9d 25 b7 cc 3f 0a b2 17 9c e7 b5 41 68 b8 1e d8 ab 31 11 93 49 b3 3b 06 45 14 98 14 54 dc ab 1f 1a 59 9f 3a d4 40 dd 81 2b fe 15 dc 7c 29 04 dd c8 1e 3d 85 47 dd ae 0a dc 4b 0c 8b f2 92 40 c8 15 e8 1f 0e e6 76 b8 92 76 52 18 0f 98 fa d7 25 6b 38 bb 1d b1 3b 8d 4a e0 8b 79 13 67 18 ae 0b 51 65 f2 1a 38 d5 79 3c 7b 57 7f 79 34 6f 63 27 cb fb cc 74 f5 ae 25 ad 43 5c 06 99 46 33 d0 57 9f 4e e4 55 43 f4 4d 34 24 12 5c 4c bb b0 Data Ascii: [*m~5_\|\|/71Q\|t#^}2@4X+]5)F_c/[`>}pjqDQ!%?Ah1I;ETY:@+\|)=GK@vvR%k8;JygQe8y<{Wy4oc't%C\F3WNUCM4$\L
2024-10-02 14:33:14 UTC	1390	IN	Data Raw: 8f 19 19 39 14 c1 b8 29 da 06 6b 60 5a 95 00 24 95 79 30 7b d2 dc 00 de 5a 46 32 7b 9f 5c 51 2c 6a 5c 15 c9 6e f5 3b 8f dd a9 db ca 82 38 a1 6e 84 d6 87 ae 7c 05 8c 45 a7 df 30 18 66 91 49 f7 e0 d7 94 7c 42 70 fe 34 d4 32 33 fb e6 e0 57 b0 7c 10 e3 c3 77 52 37 77 3f a0 af 15 f1 53 19 3c 4d a9 4c 0f 06 76 eb db 9a ed a9 ad 44 73 cb e2 2d 7c 3e c7 fc 24 3f 28 2a 02 d7 b7 e8 fb 42 82 49 3c 57 8a fc 37 40 fa bc 8d c9 20 57 b6 68 4b d8 f7 18 ae 8f b2 4c ce 9a df 8c e0 1c 63 8a 92 30 06 49 06 a1 8b 3b 7a d4 cb c8 20 93 53 d0 8b 89 bb fd ea 29 d8 5f 43 45 02 b9 e2 5a af 85 34 bd 31 96 09 ad b8 97 a3 e3 9f a5 75 fe 05 f0 2d 93 40 d2 e9 b3 ac 88 cb f3 ab f6 a6 78 a8 c7 ab f8 4e 3d 63 8b 66 8d ce c5 1f c8 d3 fe 0c dc 5f dc 6a 67 cb 3f ba 55 0d 22 1e 84 7a fd 6b e6 Data Ascii: 9)k`Z$y0{ZF2{\Q,j\n;8n\|E0fI\|Bp423W\|wR7w?S<MLvDs-\|>$?(*BI<W7@ WhKLc0I;z S)_CEZ41u-@xN=cf_jg?U"zk
2024-10-02 14:33:14 UTC	1390	IN	Data Raw: 3c e0 c8 2b c5 fe 37 45 26 ad f1 0f 47 9a ce 40 c8 23 2a 3e b9 cd 71 62 3e 38 b4 1e c6 6b 74 78 df c6 6f 30 f8 b6 72 25 df 85 5e b5 c1 89 32 d8 cf 7a ed fe 30 c5 24 7e 27 b8 8a ed b3 20 51 d3 e9 5c 5a 87 ce 04 78 41 d0 fa d6 f4 a4 ac fd 4c a6 b5 b0 f3 27 cb f2 8e 3b d3 24 39 60 17 91 de 98 bb 7c dc 48 c4 0e f8 a9 0a 42 7e eb 3d 69 bf 40 8b b1 62 d7 80 4b 8c 53 59 e2 67 62 4f cd d0 54 6a f1 ed db ba ab c8 f1 a6 4f 26 82 1b ee 4f b6 56 52 0b aa 2e 78 a4 f3 a3 83 a9 0e de 82 a9 35 ca 48 de 58 c8 3d 69 8f 1e e9 33 b8 d5 c7 51 29 74 2f 6f 47 6d e0 6d 27 a8 a6 cb 31 88 01 18 dd bb a9 f7 a8 e1 0f 8e 45 5f d1 34 9b fd 6f 51 4b 1b 0b 79 66 ba 66 c4 71 a2 e7 23 d7 3d aa e3 16 e4 36 ee 7a ff 00 c1 75 1f f0 86 4d 21 52 09 77 39 3e c2 bc 27 5e 94 cb ae 5f a9 eb f6 86 Data Ascii: <+7E&G@#*>qb>8ktxo0r%^2z0$~' Q\ZxAL';$9`\|HB~=i@bKSYgbOTjO&OVR.x5HX=i3Q)t/oGmm'1E_4oQKyffq#=6zuM!Rw9>'^_
2024-10-02 14:33:14 UTC	1390	IN	Data Raw: ff 00 26 4b 1c d6 11 a9 73 d6 74 a4 f6 37 91 ed 59 b6 1b b8 c9 a7 0b 78 8b 65 6e a3 3f 43 5c dc 20 79 c4 9f d2 a7 63 83 c3 12 28 e6 65 2a 72 b6 e7 45 f6 6c fd db 88 ff 00 3a 8a 6d 02 de e6 e6 2b b9 1e 33 24 63 86 dd d2 b9 fc be ec ef 61 f8 d3 d6 79 14 64 b9 26 84 d3 7a 91 2a 6d ad 46 eb df 0d 34 8d 63 55 fb 7d c8 8a e1 d8 e5 cb 3e 31 54 2f 3e 11 e8 92 be d8 b6 a8 1f dd 35 ac b3 bf 92 57 7b 9f 4e 79 14 25 cc c0 91 e6 b0 c7 bf 35 a4 79 16 ec e3 96 07 98 c4 8f e0 9e 85 cb 79 8c 1f f0 ac eb ff 00 81 96 6c c4 c3 7a e9 f4 02 bb 11 79 31 18 f3 5f f0 34 92 6a 37 21 01 12 c8 3f 1a d1 4e 9a 33 fe ce 67 00 df 01 a3 c1 4f b6 cb 83 ce 70 2a a4 bf 01 ce 0a ad dc a4 7f b9 9a f4 e8 b5 3b d1 1f cd 70 c6 a6 4d 6a f4 0e 26 6c 8e d4 3a b6 25 e5 cf a9 e3 37 3f 04 6f ed f2 6d Data Ascii: &Kst7Yxen?C\ yc(erEl:m+3$cayd&zmF4cU}>1T/>5W{Ny%5yylzy1_4j7!?N3gOp*;pMj&l:%7?om
2024-10-02 14:33:14 UTC	1390	IN	Data Raw: 00 1e 94 61 1b 4d dc c5 c5 a7 73 db fc 62 64 1e 4b 16 21 ca e4 90 6b 19 16 e2 64 0d 13 12 31 d4 b5 3b c5 8d 25 ac 7e 43 48 65 c8 dc 18 9a c1 b2 91 fc b1 89 18 13 db 35 94 e6 d4 99 ee e1 52 70 37 7c bb fe 00 2f f8 35 50 bb b7 d4 cc 2d 9b 69 18 fa d4 49 3d d2 9c ac ac 3f 1a 92 3d 42 ed 57 6f 9e e4 67 b9 a8 9c 94 b7 3a 63 4e 71 d5 15 06 9f 7b 80 5a 09 33 f4 a9 0d 9d df 6b 77 fc aa 79 af ee 82 6e 13 9a 75 be a5 79 e5 ee 32 1a cd 46 28 d3 9a a2 45 48 a0 b8 0e 77 c0 cb cf a5 23 24 a2 5c 08 64 3f 41 56 9b 52 ba 27 ef 91 cf a5 0b a9 5c a9 27 cc e7 dc 56 8a 11 7d 41 4e 64 38 60 46 e8 d8 7e 15 1c e5 c1 f9 53 03 e9 56 86 a9 76 1f a2 37 e1 4b 26 a7 70 d9 1b 63 c7 fb b4 38 46 fb 8b 9a 7d 8a c8 c1 94 10 70 df 4a 42 1b 71 38 c9 ef 57 2d b5 1d 8a 03 5b c6 c7 d7 15 29 d4 Data Ascii: aMsbdK!kd1;%~CHe5Rp7\|/5P-iI=?=BWog:cNq{Z3kwynuy2F(EHw#$\d?AVR'\'V}ANd8`F~SVv7K&pc8F}pJBq8W-[)
2024-10-02 14:33:14 UTC	1390	IN	Data Raw: 00 72 4f 39 a8 a4 ef ce 2b 54 43 a4 2b 1c 49 30 f5 e6 98 60 d2 9d b0 b7 2c 0f bf 35 9d 9f 43 a6 35 6d d0 cc 2c 40 1c 8c 53 8b 36 cf 95 45 69 3d 8d 93 80 12 f7 1f f0 1a 24 d3 ad 95 30 b7 c9 9f 7a af 66 d8 9d 68 df 63 32 32 cc c3 3c 53 9d 7e 63 de af c7 a5 a1 39 17 b1 7e 74 7f 65 c8 49 22 ee 22 7e b4 72 34 1e da 3d 8c fc 80 d8 14 64 01 ef 57 17 4a b9 33 f1 3c 24 63 fb d5 23 e8 f7 a4 64 79 6c 7d 9a a6 4e db 8d 55 4c a0 a7 2a 73 42 31 24 03 d2 af 1d 2e f5 07 cd 10 fc e9 ad a7 dd 28 e2 16 27 b0 14 d2 be c0 e6 ac 50 88 91 3b 93 db a5 4d 0a c9 71 2a c5 14 65 df d0 54 b6 fa 6e a1 3c de 52 59 c8 4b 9c 13 8e 95 ea 7e 06 f0 9d ae 99 12 dd dc a8 92 e0 8c 80 dd ab aa 86 1b 9b 56 72 57 c5 46 9a d0 a3 e0 6f 02 aa 32 5f ea 43 32 75 54 3d 2b bd b9 36 d6 b0 f9 6a 06 54 70 Data Ascii: rO9+TC+I0`,5C5m,@S6Ei=$0zfhc22<S~c9~teI""~r4=dWJ3<$c#dyl}NULsB1$.('P;MqeTn<RYK~VrWFo2_C2uT=+6jTp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49785	216.58.212.164	443	4888	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-02 14:33:14 UTC	820	OUT	GET /recaptcha/api2/payload?p=06AFcWeA7buMnOYkT1e1OX33WwV5BYHtGoe6rsCc6yLwIOZxWYReONmSzeYoH4QhJ96wFfjHVdoZbgzKFjuhEFc5CWzryWVquRxXJSXc0MvXu2Hku_AZ1ZY3TI3eS5Y6Xv4pZeNC8GlLKRexXU3EjCJXh_LXG4i7SktYtRp9ojSk2x4qXPwyWbFXmHXrLeZcWMV-TMBywxkpQI&k=6LfH3FMqAAAAAKyx_81aHghU_FTJYIX9beQVop6A HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AGteOyolv9InuFRncA0hy-Vg3QiQ1I8WZOsPXJSTB4xEsAfMLKyNVOFy8i-ZLN3nOe32ztWpeiiq9mEI1OWJg84
2024-10-02 14:33:15 UTC	681	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Expires: Wed, 02 Oct 2024 14:33:15 GMT Date: Wed, 02 Oct 2024 14:33:15 GMT Cache-Control: private, max-age=30 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Cross-Origin-Resource-Policy: same-site Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-02 14:33:15 UTC	709	IN	Data Raw: 39 30 64 35 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 01 02 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0a 0b 09 0c 11 0f 12 12 11 0f 11 10 13 16 1c 17 13 14 1a 15 10 11 18 21 18 1a 1c 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c0 00 11 08 01 c2 01 c2 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 Data Ascii: 90d5JFIFC!"$"$C"}!1AQa"q
2024-10-02 14:33:15 UTC	1390	IN	Data Raw: 33 5b 36 40 3e 86 ba f8 35 f8 6f ac e3 2a de 5d f2 f1 9f 5a e5 a3 f1 55 ec 1a 98 5b d9 1d 51 1f e7 0a 70 0f 35 a5 15 3b 34 ca 8b 56 b3 35 b4 0f 09 ca 93 bd c6 af 71 9e 4e c8 ff 00 bc 47 4a 6d d6 9f ac 4f a9 a8 76 30 40 a7 00 01 c6 df 4a ca f1 8f 8d be df 3c 42 c0 18 82 10 43 0e 09 ad 9d 2f 5f 9f 57 8a db cc 93 a0 01 f1 c1 fa d1 38 b8 ab 91 24 92 76 3a 5d 07 c3 d6 ed 21 64 8f 79 ee 4d 6d 6c 8a da 2b 81 22 f4 5c 00 be b5 73 4e 92 de 2d 32 2d 8d 87 71 db ad 70 7f 10 bc 41 7d a0 ea 71 3d b2 82 b2 63 28 c3 82 2b cc 53 a9 56 a7 29 9a 93 3a 1b 2b 24 8e c0 5d ce ac 23 73 f3 86 ed 5b 3a 3d b5 84 da 7c b7 d6 ae 9b 21 04 b0 1d ab 8d d4 3c 71 a7 6a 3e 1c 48 44 cb 14 cc a3 78 f4 3d eb 9a d3 7c 5f 16 91 a3 6a ba 70 94 e6 e5 4e c6 ad 16 1e 72 76 27 96 4d 9e bf 6b 7b 6a Data Ascii: 3[6@>5o*]ZU[Qp5;4V5qNGJmOv0@J<BC/_W8$v:]!dyMml+"\sN-2-qpA}q=c(+SV):+$]#s[:=\|!<qj>HDx=\|_jpNrv'Mk{j
2024-10-02 14:33:15 UTC	1390	IN	Data Raw: e9 88 7c c9 40 f6 ab 51 da 91 91 90 07 ad 46 d0 aa 1e 1b 6e d6 eb ea 2b 55 ad 99 52 89 dd fc 03 b7 cf 8d 21 3e ff 00 d2 af fe d2 44 37 89 ed 54 b6 42 40 78 fc 6a b7 ec f4 c2 5f 1a fc a4 b6 c8 33 f8 fa d3 bf 68 a2 1b c7 28 84 e3 6d b8 e3 f1 15 d3 56 36 b2 32 92 bb 3c ff 00 47 40 d7 96 c9 b4 f0 f9 35 f4 0f 87 06 c8 22 4c 73 b4 7f 2a f0 6d 00 83 aa db 29 e9 e6 57 be e8 5f 79 48 e8 00 15 b5 b4 1c d9 d6 5a e4 40 b9 ab 89 80 7d 2a 95 b6 36 8c 92 40 ab 71 e0 ae 4f 5c d2 31 b9 37 e3 45 32 8a 02 e7 c6 2d a9 de 02 41 9d c6 7d 0d 5a d1 6e e1 05 96 5c f9 cc 78 6e f5 9c c9 19 6f 99 8e 07 f7 46 6a e6 8d 6b 2d e5 e8 8a 20 86 41 d3 27 15 c9 64 91 d6 a0 99 b5 77 77 24 33 42 f6 c1 d9 87 5c 8c 55 59 e5 33 23 c8 eb bc b1 e4 8a bd aa 0b 8b 43 1c 77 60 6d 1c 30 02 9b 6d 0a ac Data Ascii: \|@QFn+UR!>D7TB@xj_3h(mV62<G@5"Lsm)W_yHZ@}6@qO\17E2-A}Zn\xnoFjk- A'dww$3B\UY3#Cw`m0m
2024-10-02 14:33:15 UTC	1390	IN	Data Raw: 93 d4 57 a7 0a 2a 48 a5 12 e6 a9 3d ac a9 13 c6 08 91 97 e7 c5 66 3c 85 7f 88 d4 8f 32 84 d9 b3 2d 9c 0f a5 30 21 3f 36 de f5 ac 61 65 63 44 b4 11 5e 56 e3 27 06 a0 9c 30 77 56 25 c7 18 15 62 59 19 47 08 00 a8 e3 5d f2 b4 99 c7 40 7e b5 a2 1c f5 d8 f4 cf d9 b2 d4 27 8a e7 70 48 fd c1 e0 d5 1f 8f 92 07 f8 8a c3 6e 58 44 05 6c 7e cf 0b bb c4 f7 6c 33 81 01 03 23 bd 62 7c 6b 20 fc 43 ba 70 73 e5 a8 eb f4 ae 9a ce f2 8a 30 7b 9c 97 87 93 3a dd b7 fb fd 2b df b4 21 95 5e 31 d2 bc 23 c2 d9 97 5f b6 18 fe 2c d7 bd e8 4b 88 c7 d6 b7 e8 13 3a 68 14 6d 51 da ae 0c 02 00 f4 aa 50 e7 0b 56 c0 e4 64 d4 98 92 f1 45 33 68 f5 34 50 07 c5 49 b4 e0 6c 65 25 ba d7 5b f0 fa d0 5d 6a ac 21 20 b0 fe 2f 4a e5 af 8b 16 13 29 f9 58 73 8e f5 db 7c 28 00 5d bb 95 e3 1c e2 b8 ea e9 Data Ascii: W*H=f<2-0!?6aecD^V'0wV%bYG]@~'pHnXDl~l3#b\|k Cps0{:+!^1#_,K:hmQPVdE3h4PIle%[]j! /J)Xs\|(]
2024-10-02 14:33:15 UTC	1390	IN	Data Raw: 5b 04 d5 8f 2a 6d bd 7e b5 0b c4 eb b1 df 9c e3 35 a4 1d e4 83 a9 eb 5f b3 a2 e6 ea fa 7c 7c dc 0a e3 fe 2f 0f 37 c7 fa 8c 84 f0 a7 15 dd fe cf 31 ed 8f 51 7c 74 90 7f 23 5e 7d f1 32 40 fe 34 d4 58 9f e3 2b 5d 35 bf 89 03 29 fc 46 5f 83 63 2f e2 5b 60 3e ea 0c 9a f7 7d 19 70 8b f5 af 0e f0 06 1b c4 6a 71 90 12 bd cf 44 c1 51 ba ba 13 21 9d 25 b7 cc 3f 0a b2 17 9c e7 b5 41 68 b8 1e d8 ab 31 11 93 49 b3 3b 06 45 14 98 14 54 dc ab 1f 1a 59 9f 3a d4 40 dd 81 2b fe 15 dc 7c 29 04 dd c8 1e 3d 85 47 dd ae 0a dc 4b 0c 8b f2 92 40 c8 15 e8 1f 0e e6 76 b8 92 76 52 18 0f 98 fa d7 25 6b 38 bb 1d b1 3b 8d 4a e0 8b 79 13 67 18 ae 0b 51 65 f2 1a 38 d5 79 3c 7b 57 7f 79 34 6f 63 27 cb fb cc 74 f5 ae 25 ad 43 5c 06 99 46 33 d0 57 9f 4e e4 55 43 f4 4d 34 24 12 5c 4c bb b0 Data Ascii: [*m~5_\|\|/71Q\|t#^}2@4X+]5)F_c/[`>}pjqDQ!%?Ah1I;ETY:@+\|)=GK@vvR%k8;JygQe8y<{Wy4oc't%C\F3WNUCM4$\L
2024-10-02 14:33:15 UTC	1390	IN	Data Raw: 8f 19 19 39 14 c1 b8 29 da 06 6b 60 5a 95 00 24 95 79 30 7b d2 dc 00 de 5a 46 32 7b 9f 5c 51 2c 6a 5c 15 c9 6e f5 3b 8f dd a9 db ca 82 38 a1 6e 84 d6 87 ae 7c 05 8c 45 a7 df 30 18 66 91 49 f7 e0 d7 94 7c 42 70 fe 34 d4 32 33 fb e6 e0 57 b0 7c 10 e3 c3 77 52 37 77 3f a0 af 15 f1 53 19 3c 4d a9 4c 0f 06 76 eb db 9a ed a9 ad 44 73 cb e2 2d 7c 3e c7 fc 24 3f 28 2a 02 d7 b7 e8 fb 42 82 49 3c 57 8a fc 37 40 fa bc 8d c9 20 57 b6 68 4b d8 f7 18 ae 8f b2 4c ce 9a df 8c e0 1c 63 8a 92 30 06 49 06 a1 8b 3b 7a d4 cb c8 20 93 53 d0 8b 89 bb fd ea 29 d8 5f 43 45 02 b9 e2 5a af 85 34 bd 31 96 09 ad b8 97 a3 e3 9f a5 75 fe 05 f0 2d 93 40 d2 e9 b3 ac 88 cb f3 ab f6 a6 78 a8 c7 ab f8 4e 3d 63 8b 66 8d ce c5 1f c8 d3 fe 0c dc 5f dc 6a 67 cb 3f ba 55 0d 22 1e 84 7a fd 6b e6 Data Ascii: 9)k`Z$y0{ZF2{\Q,j\n;8n\|E0fI\|Bp423W\|wR7w?S<MLvDs-\|>$?(*BI<W7@ WhKLc0I;z S)_CEZ41u-@xN=cf_jg?U"zk
2024-10-02 14:33:15 UTC	1390	IN	Data Raw: 3c e0 c8 2b c5 fe 37 45 26 ad f1 0f 47 9a ce 40 c8 23 2a 3e b9 cd 71 62 3e 38 b4 1e c6 6b 74 78 df c6 6f 30 f8 b6 72 25 df 85 5e b5 c1 89 32 d8 cf 7a ed fe 30 c5 24 7e 27 b8 8a ed b3 20 51 d3 e9 5c 5a 87 ce 04 78 41 d0 fa d6 f4 a4 ac fd 4c a6 b5 b0 f3 27 cb f2 8e 3b d3 24 39 60 17 91 de 98 bb 7c dc 48 c4 0e f8 a9 0a 42 7e eb 3d 69 bf 40 8b b1 62 d7 80 4b 8c 53 59 e2 67 62 4f cd d0 54 6a f1 ed db ba ab c8 f1 a6 4f 26 82 1b ee 4f b6 56 52 0b aa 2e 78 a4 f3 a3 83 a9 0e de 82 a9 35 ca 48 de 58 c8 3d 69 8f 1e e9 33 b8 d5 c7 51 29 74 2f 6f 47 6d e0 6d 27 a8 a6 cb 31 88 01 18 dd bb a9 f7 a8 e1 0f 8e 45 5f d1 34 9b fd 6f 51 4b 1b 0b 79 66 ba 66 c4 71 a2 e7 23 d7 3d aa e3 16 e4 36 ee 7a ff 00 c1 75 1f f0 86 4d 21 52 09 77 39 3e c2 bc 27 5e 94 cb ae 5f a9 eb f6 86 Data Ascii: <+7E&G@#*>qb>8ktxo0r%^2z0$~' Q\ZxAL';$9`\|HB~=i@bKSYgbOTjO&OVR.x5HX=i3Q)t/oGmm'1E_4oQKyffq#=6zuM!Rw9>'^_
2024-10-02 14:33:15 UTC	1390	IN	Data Raw: ff 00 26 4b 1c d6 11 a9 73 d6 74 a4 f6 37 91 ed 59 b6 1b b8 c9 a7 0b 78 8b 65 6e a3 3f 43 5c dc 20 79 c4 9f d2 a7 63 83 c3 12 28 e6 65 2a 72 b6 e7 45 f6 6c fd db 88 ff 00 3a 8a 6d 02 de e6 e6 2b b9 1e 33 24 63 86 dd d2 b9 fc be ec ef 61 f8 d3 d6 79 14 64 b9 26 84 d3 7a 91 2a 6d ad 46 eb df 0d 34 8d 63 55 fb 7d c8 8a e1 d8 e5 cb 3e 31 54 2f 3e 11 e8 92 be d8 b6 a8 1f dd 35 ac b3 bf 92 57 7b 9f 4e 79 14 25 cc c0 91 e6 b0 c7 bf 35 a4 79 16 ec e3 96 07 98 c4 8f e0 9e 85 cb 79 8c 1f f0 ac eb ff 00 81 96 6c c4 c3 7a e9 f4 02 bb 11 79 31 18 f3 5f f0 34 92 6a 37 21 01 12 c8 3f 1a d1 4e 9a 33 fe ce 67 00 df 01 a3 c1 4f b6 cb 83 ce 70 2a a4 bf 01 ce 0a ad dc a4 7f b9 9a f4 e8 b5 3b d1 1f cd 70 c6 a6 4d 6a f4 0e 26 6c 8e d4 3a b6 25 e5 cf a9 e3 37 3f 04 6f ed f2 6d Data Ascii: &Kst7Yxen?C\ yc(erEl:m+3$cayd&zmF4cU}>1T/>5W{Ny%5yylzy1_4j7!?N3gOp*;pMj&l:%7?om
2024-10-02 14:33:15 UTC	1390	IN	Data Raw: 00 1e 94 61 1b 4d dc c5 c5 a7 73 db fc 62 64 1e 4b 16 21 ca e4 90 6b 19 16 e2 64 0d 13 12 31 d4 b5 3b c5 8d 25 ac 7e 43 48 65 c8 dc 18 9a c1 b2 91 fc b1 89 18 13 db 35 94 e6 d4 99 ee e1 52 70 37 7c bb fe 00 2f f8 35 50 bb b7 d4 cc 2d 9b 69 18 fa d4 49 3d d2 9c ac ac 3f 1a 92 3d 42 ed 57 6f 9e e4 67 b9 a8 9c 94 b7 3a 63 4e 71 d5 15 06 9f 7b 80 5a 09 33 f4 a9 0d 9d df 6b 77 fc aa 79 af ee 82 6e 13 9a 75 be a5 79 e5 ee 32 1a cd 46 28 d3 9a a2 45 48 a0 b8 0e 77 c0 cb cf a5 23 24 a2 5c 08 64 3f 41 56 9b 52 ba 27 ef 91 cf a5 0b a9 5c a9 27 cc e7 dc 56 8a 11 7d 41 4e 64 38 60 46 e8 d8 7e 15 1c e5 c1 f9 53 03 e9 56 86 a9 76 1f a2 37 e1 4b 26 a7 70 d9 1b 63 c7 fb b4 38 46 fb 8b 9a 7d 8a c8 c1 94 10 70 df 4a 42 1b 71 38 c9 ef 57 2d b5 1d 8a 03 5b c6 c7 d7 15 29 d4 Data Ascii: aMsbdK!kd1;%~CHe5Rp7\|/5P-iI=?=BWog:cNq{Z3kwynuy2F(EHw#$\d?AVR'\'V}ANd8`F~SVv7K&pc8F}pJBq8W-[)
2024-10-02 14:33:15 UTC	1390	IN	Data Raw: 00 72 4f 39 a8 a4 ef ce 2b 54 43 a4 2b 1c 49 30 f5 e6 98 60 d2 9d b0 b7 2c 0f bf 35 9d 9f 43 a6 35 6d d0 cc 2c 40 1c 8c 53 8b 36 cf 95 45 69 3d 8d 93 80 12 f7 1f f0 1a 24 d3 ad 95 30 b7 c9 9f 7a af 66 d8 9d 68 df 63 32 32 cc c3 3c 53 9d 7e 63 de af c7 a5 a1 39 17 b1 7e 74 7f 65 c8 49 22 ee 22 7e b4 72 34 1e da 3d 8c fc 80 d8 14 64 01 ef 57 17 4a b9 33 f1 3c 24 63 fb d5 23 e8 f7 a4 64 79 6c 7d 9a a6 4e db 8d 55 4c a0 a7 2a 73 42 31 24 03 d2 af 1d 2e f5 07 cd 10 fc e9 ad a7 dd 28 e2 16 27 b0 14 d2 be c0 e6 ac 50 88 91 3b 93 db a5 4d 0a c9 71 2a c5 14 65 df d0 54 b6 fa 6e a1 3c de 52 59 c8 4b 9c 13 8e 95 ea 7e 06 f0 9d ae 99 12 dd dc a8 92 e0 8c 80 dd ab aa 86 1b 9b 56 72 57 c5 46 9a d0 a3 e0 6f 02 aa 32 5f ea 43 32 75 54 3d 2b bd b9 36 d6 b0 f9 6a 06 54 70 Data Ascii: rO9+TC+I0`,5C5m,@S6Ei=$0zfhc22<S~c9~teI""~r4=dWJ3<$c#dyl}NULsB1$.('P;MqeTn<RYK~VrWFo2_C2uT=+6jTp

Target ID:	0
Start time:	10:32:35
Start date:	02/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	10:32:40
Start date:	02/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2248 --field-trial-handle=2188,i,11164879643775128826,17152757547805123670,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	10:32:43
Start date:	02/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://indianatollsroad.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://indianatollsroad.com/	Matcher: Template: captcha matched
Source: https://indianatollsroad.com/	Matcher: Template: captcha matched
Source: https://indianatollsroad.com/	Matcher: Template: captcha matched

Source: https://indianatollsroad.com/	HTTP Parser: No favicon
Source: https://indianatollsroad.com/	HTTP Parser: No favicon
Source: https://indianatollsroad.com/	HTTP Parser: No favicon
Source: https://indianatollsroad.com/	HTTP Parser: No favicon
Source: https://indianatollsroad.com/	HTTP Parser: No favicon
Source: https://indianatollsroad.com/	HTTP Parser: No favicon
Source: https://indianatollsroad.com/	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.168
Source: unknown	TCP traffic detected without corresponding DNS query: 2.16.100.168
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: indianatollsroad.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://indianatollsroad.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfH3FMqAAAAAKyx_81aHghU_FTJYIX9beQVop6A&co=aHR0cHM6Ly9pbmRpYW5hdG9sbHNyb2FkLmNvbTo0NDM.&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&theme=light&size=normal&cb=6xkhuhk0144l HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://indianatollsroad.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfH3FMqAAAAAKyx_81aHghU_FTJYIX9beQVop6A&co=aHR0cHM6Ly9pbmRpYW5hdG9sbHNyb2FkLmNvbTo0NDM.&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&theme=light&size=normal&cb=6xkhuhk0144lAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/5Hh2ALJwVCoAq5i04w6Tc_td0SFcwt2xcFfRkbQms3o.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfH3FMqAAAAAKyx_81aHghU_FTJYIX9beQVop6A&co=aHR0cHM6Ly9pbmRpYW5hdG9sbHNyb2FkLmNvbTo0NDM.&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&theme=light&size=normal&cb=6xkhuhk0144lAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&k=6LfH3FMqAAAAAKyx_81aHghU_FTJYIX9beQVop6A HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://indianatollsroad.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: indianatollsroad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://indianatollsroad.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=srruqq8eh147ekias60d8flbg2
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/5Hh2ALJwVCoAq5i04w6Tc_td0SFcwt2xcFfRkbQms3o.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LfH3FMqAAAAAKyx_81aHghU_FTJYIX9beQVop6A HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyolv9InuFRncA0hy-Vg3QiQ1I8WZOsPXJSTB4xEsAfMLKyNVOFy8i-ZLN3nOe32ztWpeiiq9mEI1OWJg84
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA7buMnOYkT1e1OX33WwV5BYHtGoe6rsCc6yLwIOZxWYReONmSzeYoH4QhJ96wFfjHVdoZbgzKFjuhEFc5CWzryWVquRxXJSXc0MvXu2Hku_AZ1ZY3TI3eS5Y6Xv4pZeNC8GlLKRexXU3EjCJXh_LXG4i7SktYtRp9ojSk2x4qXPwyWbFXmHXrLeZcWMV-TMBywxkpQI&k=6LfH3FMqAAAAAKyx_81aHghU_FTJYIX9beQVop6A HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&k=6LfH3FMqAAAAAKyx_81aHghU_FTJYIX9beQVop6AAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyolv9InuFRncA0hy-Vg3QiQ1I8WZOsPXJSTB4xEsAfMLKyNVOFy8i-ZLN3nOe32ztWpeiiq9mEI1OWJg84
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA7buMnOYkT1e1OX33WwV5BYHtGoe6rsCc6yLwIOZxWYReONmSzeYoH4QhJ96wFfjHVdoZbgzKFjuhEFc5CWzryWVquRxXJSXc0MvXu2Hku_AZ1ZY3TI3eS5Y6Xv4pZeNC8GlLKRexXU3EjCJXh_LXG4i7SktYtRp9ojSk2x4qXPwyWbFXmHXrLeZcWMV-TMBywxkpQI&k=6LfH3FMqAAAAAKyx_81aHghU_FTJYIX9beQVop6A HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AGteOyolv9InuFRncA0hy-Vg3QiQ1I8WZOsPXJSTB4xEsAfMLKyNVOFy8i-ZLN3nOe32ztWpeiiq9mEI1OWJg84
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: indianatollsroad.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: indianatollsroad.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://indianatollsroad.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Static File Info

Windows Analysis Report
http://indianatollsroad.com