Edit tour

Windows Analysis Report
https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js

Overview

General Information

Sample URL:	https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js
Analysis ID:	1346517
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Stores files to the Windows start menu directory

HTML page contains hidden URLs or javascript code

HTML body with high number of embedded images detected

Creates files inside the system directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3876 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1396 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2032,i,3473682876261523238,13484657790905124998,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5836 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4

Source: unknown	HTTPS traffic detected: 23.54.46.90:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.46.90:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.5:49819 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_3876_418516894

Jump to behavior

Source: classification engine

Classification label: clean2.win@23/154@58/23

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2032,i,3473682876261523238,13484657790905124998,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2032,i,3473682876261523238,13484657790905124998,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: chromecache_144.2.dr	Binary or memory string: Cbp=function(a,b){_.zbp(a);var c=b.title,d=b.content,e=b.expanded,f=b.Wcc,g=b.KTb,h=b.Nfc,l=b.bLb,m=b.fLb,q=b.HJb,t=b.NZb,w=b.CIb,A=b.DIb,B=b.EIb,I=b.FIb,O=b.aria_label,Q=b.GJb,Z=b.ej,X=b.rJb,ha=b.visibility,Aa=b.dYb,Ba=b.Dec;b="";var Ka=a.oa.ka("gws.common.api.jslayout.services.UniqueIdService");null==Z&&new _.Zo;null==X&&_.RB(80676);Ka.Id();Ka.Id();b+="<g-accordion-expander"+_.V(_.vbp(a,c,d,e,f,g,h,l,m,q,t,w,A,B,I,O,Q,Z,X,ha,Aa,Ba)+"")+_.W(_.wbp(a,c,d,e,f,g,h,l,m,q,t,w,A,B,I,O,Q,Z,X,ha,Aa,Ba)+"")+
Source: chromecache_144.2.dr	Binary or memory string: "<g-accordion-expander"+_.V(_.vbp(a,c,b,!1,!0,!0,!1,!1,!1,"",!0,!0,0,-1,0,null,"",e,null,null,!1,!1)+"")+_.W(_.wbp(a,c,b,!1,!0,!0,!1,!1,!1,"",!0,!0,0,-1,0,null,"",e,null,null,!1,!1)+"")+_.U(_.ubp(a,c,b,!1,!0,!0,!1,!1,!1,"",!0,!0,0,-1,0,null,"",e,null,null,!1,!1)+_.tbp())+">"+_.Abp(a,c,b,!1,!0,!1,!1,"",!0,!0,0,-1,0,null,"",e,null,null,!1)+"</g-accordion-expander>";d+=_.ybp(a,c,b,!1,!0,!0,!1,!1,!1,"",!0,!0,0,-1,0,null,"",e,null,null,!1,!1)?"":f}return d},Z8p=function(a){a.ka(c9p)\|\|(a.Na(c9p,{q8:0,qd:1,
Source: chromecache_144.2.dr	Binary or memory string: 3)})?"<div"+_.V("k5pEne qPvOK ")+_.W("")+_.U("")+">"+_.R(e)+"</div>":"")+(_.T(a,function(g){return g.A5()})?"<div"+_.V("k5pEne qPvOK ")+_.W("")+_.U("")+">"+_.R(f)+"</div>":""):"")},DLp=function(a){a.ka(HLp)\|\|a.Na(HLp,{rsd:0},FLp,GLp)},HLp="t-6uIy7OZ-De4";var ILp=function(){return""},JLp=function(){return""},KLp=function(){return""},LLp=function(){return!0},MLp=function(){return!1},PLp=function(a,b){NLp(a);return OLp(a,b.zVa,b.Zl,b.iCa)},QLp=function(a,b){NLp(a);a=OLp(a,b.zVa,b.Zl,b.iCa);return _.u(a)},OLp=function(a,b,c,d){return(0==c?_.S(d,[],function(e){return _.Ue(e,_.VBp,1)}).reduce(function(e,f,g){if(2>g&&BLp()){var h="<div"+_.V("E4WJib "+zLp())+_.W(ALp()+"")+_.U(yLp()+"")+">"+ELp(f)+"</div>";e+=CLp()?"":h}2==g&&BLp()&&(f="<div"+_.V("yC6fEd "+
Source: chromecache_144.2.dr	Binary or memory string: _.U("")+"></div>";b="<div"+_.V("qaxymf ")+_.W("")+_.U("")+">"+xnq(a,b,!1)+"</div>";m+=b;_.xbp(a,l,h,c,!0,d,!1,!1,!1,"",d,!0,0,-1,0,g,"",e,f,null,!1,!1)&&(b="<g-accordion-expander"+_.V(_.vbp(a,l,h,c,!0,d,!1,!1,!1,"",d,!0,0,-1,0,g,"",e,f,null,!1,!1)+"")+_.W(_.wbp(a,l,h,c,!0,d,!1,!1,!1,"",d,!0,0,-1,0,g,"",e,f,null,!1,!1)+"")+_.U(_.ubp(a,l,h,c,!0,d,!1,!1,!1,"",d,!0,0,-1,0,g,"",e,f,null,!1,!1)+_.tbp())+">"+_.Abp(a,l,h,c,d,!1,!1,"",d,!0,0,-1,0,g,"",e,f,null,!1)+"</g-accordion-expander>",m+=_.ybp(a,l,h,
Source: chromecache_144.2.dr	Binary or memory string: _.R(X)+'" id="'+_.R(O)+'" jsslot="" jsaction="'+_.R("CQwlrf")+'"')+">";_.YB(a,c)&&(b="<div"+_.V(_.WB(a,c)+_.TB(a,c))+_.W(_.XB(a,c)+_.UB(a,c))+_.U(_.VB(a,c)+_.SB(a,c))+">"+_.$B(a,c)+"</div>",A+=_.ZB(a,c)?"":b);return A+=_.MB(a)+"</div>"+_.MB(a)};_.zbp=function(a){a.ka(Dbp)\|\|(a.Na(Dbp,{title:0,content:1,expanded:2,Wcc:3,KTb:4,Nfc:5,bLb:6,fLb:7,HJb:8,NZb:9,CIb:10,DIb:11,EIb:12,FIb:13,aria_label:14,GJb:15,ej:16,rJb:17,visibility:18,dYb:19,Dec:20},Bbp,Cbp,_.xbp,_.ybp,_.tbp(),_.ubp,"",_.vbp,"",_.wbp),_.f7c(a))};
Source: chromecache_144.2.dr	Binary or memory string: _.S(Q,-1,function(Ba){return _.QB(Ba)}):-1,Ll:2,track:[3]}).attributes};_.vbp=function(a,b,c,d,e,f,g,h,l,m,q,t,w,A,B,I,O,Q,Z){a=a.oa.ka("gws.common.api.jslayout.services.UniqueIdService");null==Q&&new _.Zo;null==Z&&_.RB(80676);a.Id();a.Id();return""};_.wbp=function(a,b,c,d,e,f,g,h,l,m,q,t,w,A,B,I,O,Q,Z){a=a.oa.ka("gws.common.api.jslayout.services.UniqueIdService");null==Q&&new _.Zo;null==Z&&_.RB(80676);a.Id();a.Id();return""};
Source: chromecache_144.2.dr	Binary or memory string: FIb:0,aria_label:null,GJb:"",ej:null,rJb:null}))}).attributes+_.V(_.vbp(a,A,m,e,!0,!0,!1,!1,!1,"",!0,!0,0,-1,0,null,"",null,null,null,!1,!1)+"")+_.W(_.wbp(a,A,m,e,!0,!0,!1,!1,!1,"",!0,!0,0,-1,0,null,"",null,null,null,!1,!1)+"")+_.U(_.ubp(a,A,m,e,!0,!0,!1,!1,!1,"",!0,!0,0,-1,0,null,"",null,null,null,!1,!1)+_.tbp())+">"+_.Abp(a,A,m,e,!0,!1,!1,"",!0,!0,0,-1,0,null,"",null,null,null,!1)+_.MB(a)+"</g-accordion-expander>",B+=_.ybp(a,A,m,e,!0,!0,!1,!1,!1,"",!0,!0,0,-1,0,null,"",null,null,null,!1,!1)?"":
Source: chromecache_144.2.dr	Binary or memory string: _.RBp=function(a){return _.ch(a,_.uV,6)};_.SBp=function(a){this.Ia=_.n(a)};_.E(_.SBp,_.p);_.SBp.Ab=[1];_.TBp=function(a){return _.eh(a,_.SBp,17,_.WJ)};UBp=function(a){this.Ia=_.n(a)};_.E(UBp,_.p);_.k=UBp.prototype;_.k.getValue=function(){return _.C(this,1)};_.k.setValue=function(a){return _.He(this,1,a)};_.k.clearValue=function(){return _.Of(this,1)};_.k.Eg=function(){return _.Hi(this,1)};_.k.pR=function(){return _.F(this,2)};_.VBp=function(a){this.Ia=_.n(a)};_.E(_.VBp,_.p);_.k=_.VBp.prototype;
Source: chromecache_144.2.dr	Binary or memory string: _.k.getName=function(){return _.C(this,1)};_.k.wg=function(a){return _.He(this,1,a)};_.k.Nh=function(){return _.Ve(this,1)};_.k.getFormattedValue=function(){return _.C(this,2)};_.k.A5=function(){return _.Ve(this,2)};_.k.vt=function(){return _.Ue(this,UBp,4)};_.VBp.Ab=[4];_.WBp=function(a){this.Ia=_.n(a)};_.E(_.WBp,_.p);_.WBp.prototype.getLayout=function(){return _.ri(this,3,0)};_.WBp.Ab=[1];var XBp=function(a){this.Ia=_.n(a)};_.E(XBp,_.p);_.k=XBp.prototype;_.k.Zb=function(){return _.C(this,1)};
Source: chromecache_144.2.dr	Binary or memory string: 3)})?"<span"+_.V("DDBmU ")+_.W("")+_.U("")+"> \u00b7 </span>":"")+"<span"+_.V("")+_.W("")+_.U("")+">"+_.R(f)+"</span></div>"+(_.T(b,function(m){return m.Kd()})?"<div"+_.V("f9cKje zDbu9e ")+_.W("")+_.U("")+">"+_.R(h)+"</div>":"")+_.MB(a)+(_.T(b,function(m){return m.Oc()})?"</a>":"")},wGq=function(a){a.ka(AGq)\|\|(a.Na(AGq,{video:0},yGq,zGq),_.QT(a),_.QCl(a),_.LBl(a),pGq(a),ZFq(a))},AGq="t-QZHmvp1tKJg";var BGq=function(){return""},CGq=function(){return""},DGq=function(){return""},EGq=function(){return!0},FGq=function(){return!1},IGq=function(a){GGq(a);return HGq()},JGq=function(a){GGq(a);return _.u(HGq())},HGq=function(){return"Product attributes"},GGq=function(a){a.ka(KGq)\|\|a.Na(KGq,{},IGq,JGq,EGq,FGq,"",BGq,"",CGq,"",DGq)},KGq="t-FoLSUk2aKPM";var LGq=function(){return""},MGq=function(){return""},NGq=function(){return""},OGq=function(){return!0},PGq=function(){return!1},SGq=function(a,b){QGq(a);return RGq(b.iCa)},TGq=function(a,b){QGq(a);a=RGq(b.iCa);return _.u(a)},RGq=function(a){var b="";var c="<div"+_.V("AEaX3e ")+_.W("")+_.U("")+">"+HGq()+"</div>";return b=b+c+("<div"+_.V("kq3Dm ")+_.W("")+_.U("")+">"+_.S(a,[],function(d){return _.Ue(d,_.VBp,1)}).reduce(function(d,e){var f=_.S(e,"",function(l){return _.C(l,3)}),g=_.S(e,"",function(l){return l.getFormattedValue()}),
Source: chromecache_144.2.dr	Binary or memory string: zLp())+_.W(ALp()+"")+_.U(yLp()+"")+">"+ELp(f)+"</div>",e+=CLp()?"":f);return e},""):"")+(1==c?"<div"+_.V("EEd3Vd UEyKF ")+_.W("")+_.U("")+">"+_.S(d,[],function(e){return _.Ue(e,_.VBp,1)}).reduce(function(e,f,g){var h=0<_.Nw(f,function(t){return t.vt()}),l=_.S(f,"",function(t){return _.C(t,3)}),m=_.S(f,"",function(t){return t.getFormattedValue()}),q=_.S(f,"",function(t){return t.getName()});return e+((0<g?" \u00b7 ":"")+(1==h?_.S(f,[],function(t){return t.vt()}).reduce(function(t,w,A){var B=_.S(w,

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: _.k.yc=function(){var a;if(null==(a=this.ka)?0:a.wa()){var b;null==(b=this.ka)\|\|b.yc()}this.oa&&kFb(this,!1);(new _.Un(this.element)).removeClass("LvqzR")};var kFb=function(a,b,c){b&&(c=new _.PDb(a.index,a.Vm,void 0===c?1:c,_.fg("suggestion"+a.index+"audioBlock")),_.xe(a.el,_.FCb,c));a.oa=b;var d;(null==(d=a.wa)?void 0:_.Vn(d,".z76Rnb")).toggleClass("LvqzR",b)}; source: chromecache_193.2.dr
Source:	Binary string: _.J(_.BL.prototype,"EBoHac",function(){return this.BVb});_.J(_.BL.prototype,"uYT2Vb",function(){return this.VYd});_.J(_.BL.prototype,"bADxi",function(){return this.Jp});_.J(_.BL.prototype,"iFHZnf",function(){return this.onMouseLeave});_.J(_.BL.prototype,"MJEKMe",function(){return this.onMouseEnter});_.J(_.BL.prototype,"md2ume",function(){return this.skb});_.J(_.BL.prototype,"sN7olc",function(){return this.Fnc});_.J(_.BL.prototype,"h5M12e",function(){return this.Rc});_.J(_.BL.prototype,"jI3wzf",function(){return this.pDb}); source: chromecache_193.2.dr
Source:	Binary string: a.Aa.length&&(b=-1),-1!==b&&_.SHb(a.oa[b])&&(b+=0<b-a.ka?1:-1),a.Ja=b,fDg(a,b),-1===a.ka&&(b=a.getRoot().parent().el())&&_.xe(b,_.FCb,new _.PDb(-1)),-1!==a.ka&&a.Ba[a.ka].ka.wc(c))},fDg=function(a,b){iDg(a,b);-1!==a.ka&&a.Ba[a.ka].ka.yc();jDg(a,a.ka,!1);a.ka=b;-1!==b&&a.wa&&(_.ZAb(a.wa,a.oa[b])?(a.Ua=1,a.Ea=b):(a.Ua=0,a.Xa=b),jDg(a,b,!0))},jDg=function(a,b,c){0>b\|\|b>=a.Aa.length\|\|(new _.Un(a.Aa[b])).toggleClass("sbhl",c)};_.FL.prototype.wza=function(){return this.wa\|\|new _.Tu}; source: chromecache_193.2.dr
Source:	Binary string: _.FL.Fa=function(){return{controller:{LSe:"JUypV"},service:{Le:_.hv,Nc:_.Zv},model:{Uf:_.hDb,events:_.Kzb,qC:_.pDb,logging:_.lCb,Tp:_.dv}}};_.FL.prototype.Sc=function(){}; source: chromecache_193.2.dr
Source:	Binary string: _.pDb=function(a){_.kg.call(this,a.Ka);var b=this;this.ka=this.oa=null;this.Ja=new Map;this.Ba=new Map;this.wa=new Map;this.Aa=new Map;this.La=new Set;this.Le=a.service.Le;a.model.Tp.pS(_.lBb,this);var c=a.model.uB;this.Uf=c.Uf;_.fCb(c,function(){b.Uf=c.Uf;if(_.F(b.Uf,82)){var d=[[null,!0,_.Yh(b.Uf,83)],[1,_.F(b.Uf,84),_.Yh(b.Uf,85)],[2,_.F(b.Uf,86),_.Yh(b.Uf,87)],[3,_.F(b.Uf,88),_.Yh(b.Uf,89)],[4,_.F(b.Uf,90),_.Yh(b.Uf,91)],[5,_.F(b.Uf,92),_.Yh(b.Uf,93)],[7,_.F(b.Uf,110),_.Yh(b.Uf,111)],[8,_.F(b.Uf, source: chromecache_193.2.dr
Source:	Binary string: _.J(_.ev.prototype,"u3bW4e",function(){return this.wm});_.J(_.ev.prototype,"cXpfj",function(){return this.Cpa});_.J(_.ev.prototype,"jTC2vd",function(){return this.MPa});_.J(_.ev.prototype,"bADxi",function(){return this.Jp});_.J(_.ev.prototype,"WBMCG",function(){return this.rk});_.J(_.ev.prototype,"d3sQLd",function(){return this.vFa});_.J(_.ev.prototype,"jI3wzf",function(){return this.pDb});_.J(_.ev.prototype,"dFyQEf",function(){return this.ePa});_.J(_.ev.prototype,"puy29d",function(){return this.ERd}); source: chromecache_193.2.dr
Source:	Binary string: var hdb=function(a){this.Ia=_.n(a)};_.E(hdb,_.p);hdb.prototype.Zb=function(){return _.Me(this,1)};hdb.prototype.Yb=function(a){return _.He(this,1,a)};hdb.prototype.Df=function(){return _.Ve(this,1)};hdb.prototype.getLanguage=function(){return _.Me(this,2)};_.idb=[0,_.G,-2];var jdb=[0,_.Sj,-2];var kdb=function(a){this.Ia=_.n(a)};_.E(kdb,_.p);_.k=kdb.prototype;_.k.getName=function(){return _.r(this,hdb,1)};_.k.wg=function(a){return _.Mb(this,hdb,1,a)};_.k.Nh=function(){return _.ch(this,hdb,1)};_.k.getUrl=function(){return _.C(this,2)};_.k.Oc=function(){return _.Ve(this,2)};_.k.we=function(){return _.Hi(this,2)};_.k.Ir=function(){return _.C(this,3)};_.k.vN=function(){return _.ri(this,4,0)};_.k.hca=function(){return _.Hi(this,6)};var ldb=[0,_.xr,_.G,-1,_.tk,_.bk,_.G,jdb,_.G];_.mdb=function(a){this.Ia=_.n(a)};_.E(_.mdb,_.p);_.mdb.prototype.Dl=function(a,b){return _.ih(this,5,kdb,a,b)};_.mdb.Ab=[1,2,3,4,5];_.ndb=[0,_.mk,ldb,-4];_.odb=[0,_.Sj,_.pk,-3,1,_.pk,_.Dj,_.xr];_.pdb=function(a){this.Ia=_.n(a)};_.E(_.pdb,_.p);_.pdb.prototype.getTitle=function(){return _.r(this,hdb,1)};_.pdb.prototype.setTitle=function(a){return _.Mb(this,hdb,1,a)};_.pdb.prototype.Kd=function(){return _.ch(this,hdb,1)};_.pdb.Ab=[3];_.qdb=[0,_.xr,1,_.mk,_.xr,_.xr,-4];var rdb=[0,2,_.G,_.uk,_.xr,_.Sj];_.sdb=function(a){this.Ia=_.n(a)};_.E(_.sdb,_.p);_.sdb.prototype.zJa=function(){return _.Li(this,3)};_.sdb.Ab=[4];_.tdb=[0,_.tk,-2,_.uk,_.tk,rdb,_.tk,_.odb,-1];_.udb=[0,_.Dj,-2];_.vdb=[0,2,_.Bj,-1,_.tk];_.wdb=[0,_.Dj,-2];_.xdb=[0,_.vdb,_.udb,_.wdb,[0,_.fdb,_.Dj,_.xr,-1],_.G];_.ydb=[0,_.edb,_.wr,[0,_.G],_.fdb,2,_.idb];_.zdb=[0,_.G,_.tk];_.Adb=[0,_.G,_.gdb,_.G,_.Dj];_.Bdb=[0,_.Dj,-3,[0,_.tk],_.tk]; source: chromecache_199.2.dr
Source:	Binary string: _.GL.Fa=function(){return{preload:{UH:_.rzg,Nj:_.BL,Mx:_.FL},service:{Cyb:_.nDg,Le:_.hv},controller:{Nj:"gLFyf",Mx:"UUbT9"},controllers:{UH:"RP0xob"},model:{Tp:_.dv,qC:_.pDb,logging:_.lCb,p7:_.IDb,events:_.Kzb,Uf:_.hDb},Ee:{Etc:"R5mgy",g8f:"F7uqIe",hNf:"RoMYmb"}}};_.ZDg=function(){};_.GL.prototype.Sa=function(){var a=this;_.F(this.Uf,54)&&_.sf(this,{model:{wwb:_.FWa}}).then(function(b){a.wwb=b.model.wwb;a.wwb.register(a)})}; source: chromecache_193.2.dr
Source:	Binary string: _.$6b=function(a){this.Ka=_.t(a)};_.D(_.$6b,_.u);_.$6b.prototype.getValue=function(){return _.F(this,2)};_.$6b.prototype.setValue=function(a){return _.Hg(this,2,a)};_.pDb=function(a){this.Ka=_.t(a)};_.D(_.pDb,_.u);_.pDb.ob=[1]; source: chromecache_161.2.dr
Source:	Binary string: GNc:a[2661],uqa:a[2662],FGb:a[2663],MGb:a[2664],cOc:a[2665],rOc:a[2666],C6:a[2667],wHa:a[2668],BDd:a[2669],CDd:a[2670],ZOc:a[2671],LDd:a[2672],oPc:a[2673],pPc:a[2674],qPc:a[2675],eHb:a[2676],fHb:a[2677],EPc:a[2678],vC:function(){return new _.Gzb(a[2679])},fQc:a[2680],gQc:a[2681],hQc:a[2682],sHb:function(){return new _.pDb(a[2683])},jw:a[2684],En:function(){return new _.qDb(a[2685])},KQc:a[2686],lEd:a[2687],Lx:function(){return new _.rDb(a[2688])},HHb:a[2689],qEd:function(){return new _.axa(a[2690])}, source: chromecache_233.2.dr
Source:	Binary string: _.rzg=function(a){_.D.call(this,a.Ka);var b=this;this.MIb=_.to(this,"pkjasb");this.separator=_.to(this,"s1VaRe");this.ka=_.kzg.delegate(function(c){return new c(b)});this.PP=null;this.qC=a.model.qC;a=a.model.Uf;_.iDb(a);this.Uf=a.ka;this.ka?this.ka.LRb():this.LRb();_.Bv.W0(this)};_.E(_.rzg,_.D);_.rzg.Fa=function(){return{model:{qC:_.pDb,Uf:_.hDb}}};_.k=_.rzg.prototype;_.k.So=function(a){this.PP=a.get(_.mBb)}; source: chromecache_193.2.dr
Source:	Binary string: _.k.zSa=function(){return this.oa?(YHb(this),!0):!this.ka.Ja()\|\|this.ka.wa()?(XHb(this),!1):this.ka.zSa()};_.k.next=function(){return this.ka.next()};_.k.previous=function(){return this.ka.previous()};_.k.wc=function(a){38===a?XHb(this):this.ka.wc(a)};_.k.yc=function(){YHb(this);this.ka.yc()};var XHb=function(a,b){b=void 0===b?1:b;a.oa=!0;a.button.addClass("sOmPcf");b=new _.PDb(a.index,a.Vm,b,_.fg("suggestion"+a.index+"seeMoreBtn"));_.xe(a.el,_.FCb,b)},YHb=function(a){a.oa=!1;a.button.removeClass("sOmPcf")}; source: chromecache_193.2.dr
Source:	Binary string: var JLb=function(a,b){return 0===a.button&&!b.mouseButtons.PDb\|\|2===a.button&&!b.mouseButtons.oKc\|\|1===a.button&&!b.mouseButtons.Xob\|\|3===a.button&&!b.mouseButtons.back\|\|4===a.button&&!b.mouseButtons.forward\|\|a.altKey&&!b.Hna.alt\|\|a.ctrlKey&&!b.Hna.ctrl\|\|a.metaKey&&!b.Hna.q_a\|\|a.shiftKey&&!b.Hna.shift?!1:!0};_.Jh(_.ERa);_.ax=function(a){_.Uh.call(this,a.Oa);this.Ia=a.service.qUc;this.isSupported=!!document.addEventListener;this.Ha=[];this.listen();this.getWindow().ly11Pc=!0};_.D(_.ax,_.Uh);_.ax.Ja=function(){return{service:{qUc:_.TKb}}};_.ax.prototype.listen=function(){var a=this;if(this.isSupported){var b=this.getWindow().document.documentElement;_.Ww(this).listen(b,["click","auxclick"],this.hb.bind(this));(0,_.xh.listen)(this.getWindow().document.body,_.PKb,function(c){var d=a.Ia.Ak();d&&d.o2b(c.data)})}}; source: chromecache_205.2.dr
Source:	Binary string: 114),_.Yh(b.Uf,115)],[9,_.F(b.Uf,102),_.Yh(b.Uf,103)],[10,_.F(b.Uf,104),_.Yh(b.Uf,105)],[11,_.F(b.Uf,106),_.Yh(b.Uf,107)],[13,_.F(b.Uf,94),_.Yh(b.Uf,95)]];d=_.Ra(d);for(var e=d.next();!e.done;e=d.next()){var f=_.Ra(e.value);e=f.next().value;var g=f.next().value;f=f.next().value;if(g&&3===f.length){var h=_.Ra(f);g=h.next().value;f=h.next().value;h=h.next().value;b.Ja.set(e,g);b.Ba.set(e,f);b.wa.set(e,h)}}_.oDb(b)}})};_.E(_.pDb,_.kg);_.pDb.Fa=function(){return{service:{Le:_.hv},model:{Tp:_.dv,uB:_.eCb}}}; source: chromecache_193.2.dr
Source:	Binary string: _.k.previous=function(){return this.Aa?this.Ea?(SDb(this),_.xe(this.el,_.FCb,new _.PDb(this.index,this.Vm)),!1):!0:!0};var SDb=function(a){a.Ea=!1;var b;null==(b=a.Aa)\|\|b.classList.remove("LvqzR")};_.jv.prototype.up=function(){return!0};_.jv.prototype.zSa=function(){return!0};_.jv.prototype.fPa=function(){_.xe(this.el,_.FCb,new _.PDb(this.index,this.Vm,0))};_.jv.prototype.Rc=function(a){this.Ea&&13===a.event.keyCode?(RDb(this),_.xe(this.el,_.FCb,new _.PDb(-1))):_.NDb.prototype.Rc.call(this,a)}; source: chromecache_193.2.dr
Source:	Binary string: _.Zw(_.Pdb,pWc);var qWc=function(a){this.Ka=_.t(a)};_.D(qWc,_.u);var rWc=_.Cd(35,qWc);_.i9a[35]=[0,_.I,_.k9a];if(nWc.has("20"))throw Error("Ue`20");nWc.set("20",function(a){if(a=a.get("docid")){var b=new qWc;a=_.Hg(b,1,a);b=new _.kt;b=_.qEb(b,1,_.Sca,[1,2]);a=_.Pg(b,rWc,a);a=_.ZVc(_.ot(20),a);return _.Pt(_.Rt(new _.Ot,_.Gw(null,!0,2)),a)}}); source: chromecache_229.2.dr
Source:	Binary string: vdb=["jscontroller","jsmodel","jsowner"];sdb=vdb.map(function(a){return"["+a+"]"}).join(",")+(',[jsaction="'+_.xh.util.ixa+'."]');tdb=vdb.map(function(a){return"[jsname=coFSxe] ["+a+"]"}).join(",")+(',[jsname=coFSxe] [jsaction="'+_.xh.util.ixa+'."]');_.ldb=!0;_.Ddb=_.Vd("Vnmyoe","zOsCQe",void 0,void 0,"koUAcc");Pd("Kg1rBc","dc9Qtf");_.Edb=_.Mb("Kg1rBc",[_.Ddb]);_.Fdb=_.Vd("SHQT0","KcokUb",void 0,void 0,"vrLUF");Pd("NoECLb","abO1zb");_.Gdb=_.Mb("NoECLb",[_.Fdb]);_.Hdb=_.Vd("BngmTd","WCEKNd",void 0,void 0,"kKlbgd");Pd("nQze3d","P4fQWd");_.Idb=_.Mb("nQze3d",[_.Hdb]);_.Jdb=_.Mb("fkGYQb",[_.Hdb]);_.Kdb=_.Mb("SRsBqc",[_.Pj,_.Jdb,_.Bs]);_.Ldb=_.Mb("X8lTKe",[_.po,_.Dq,_.A5a,_.Tq,_.Qq,_.Bs,_.Pj]);var Mdb=_.Eq("fM7wyf",[_.Ldb,_.A5a,_.abb,_.sab,_.Kdb,_.Gcb,_.Bs]);_.Ndb=_.Mb("ClUoee",[_.qo,_.ro,Mdb]);Pd("oSegn","AZiwVe");_.Odb=_.Mb("oSegn",[_.Pj,_.qo,_.Dq,_.Tq,_.xab]);_.Pdb=_.Mb("iaRXBb",[_.Odb,_.abb,_.xab,_.Gcb,_.Bs]);_.Qdb=_.Mb("RAw16",[_.Gq]);_.Rdb=_.Mb("gJjRYc",[_.Gq]);_.Sdb=_.Mb("HSVCpe",[_.zs,_.h5a,_.W$a,_.Ef,_.go,_.Bs,_.Ts,_.f$a]);_.Tdb=_.Mb("Gi5Toe",[_.po,_.Ldb]);_.Udb=_.Mb("gpa7Te",[_.Tq,_.Ldb,_.Tdb]);var Vdb=_.Eq("PeYuVe",[_.Pj,_.Hcb,_.Ts,_.Dq,_.iab,_.A5a,_.no,_.oab,_.Tq,_.Udb,_.Gcb,_.Bs]);Pd("J29Kkd","bsStqd");_.Wdb=_.Mb("J29Kkd",[_.L$a,_.Ef,_.go,_.d5a,_.Vs,_.Ms,_.cbb,_.Pq,_.W$a,_.abb,_.oo,_.sab,Vdb]);_.Xdb=_.Mb("bypWo",[]);_.Ydb=function(a){this.oa=a};_.Ydb.prototype.dispatch=function(a,b,c,d,e,f){this.oa.dispatch({eventType:a,event:b,targetElement:c,action:d,actionElement:e,timeStamp:f})};var Ela,Dla;Eh("ONHNnf",{gjc:"gyo8od",Yxc:"CKvWib"});Eh("lIqdwc",{dispatch:"iONzxf"});Eh("xlXPXe",{getId:"pTuYge",xlc:"ruaFce",getUrl:"tTTJvc",getUserData:"tGu5yc"});Eh("XkpXDc",{Fi:"WZr6gf",pop:"gFWrEf",getState:"XiN8De",Lf:"a5waKe",Oi:"OS1QUb"});Eh("XisVq",{Dvd:"RkV9gc",q8b:"uBPX3d",X1a:"OHqFfb",zmc:"vn8ild",bic:"t9c2C",qrb:"qKiQLc"}); source: chromecache_233.2.dr
Source:	Binary string: _.k.MOb=function(a){return _.Zu(a)?1:0};_.k.wc=function(){this.el.scrollIntoView(!1);_.xe(this.el,_.FCb,new _.PDb(this.index,this.Vm))};_.k.yc=function(){SDb(this)};_.k.next=function(){if(!this.Aa)return!0;if(this.Ea)return SDb(this),!0;this.Ea=!0;var a;null==(a=this.Aa)\|\|a.classList.add("LvqzR");a=new _.PDb(this.index,this.Vm,1,_.fg("suggestion"+this.index+"actionBtn"));_.xe(this.el,_.FCb,a);return!1}; source: chromecache_193.2.dr
Source:	Binary string: _.PDb=function(a,b,c,d,e){this.index=a;this.Vm=b;this.ka=void 0===c?1:c;this.oa=void 0===d?"":d;this.wa=void 0===e?"":e};_.PDb.prototype.getIndex=function(){return this.index};_.PDb.prototype.Aa=function(){return this.oa?this.oa:-1!==this.index?_.aBb(this.index):""}; source: chromecache_193.2.dr
Source:	Binary string: _.pDb.prototype.I5e=function(){var a=this.ka;return null===a?"":a.toString()}; source: chromecache_193.2.dr
Source:	Binary string: _.k.yc=function(){var a;null==(a=this.ka[this.oa])\|\|a.view.classList.remove("LvqzR");_.jv.prototype.yc.call(this)};_.k.fPa=function(a){this.wa()\|\|_.jv.prototype.fPa.call(this,a)};var eFb=function(a,b,c,d){d=void 0===d?1:d;b.view.classList.add("LvqzR");b=new _.PDb(a.index,a.Vm,d,_.fg("suggestion"+a.index+"chip"+c),1===d?b.Cmb.getQuery():"");_.xe(a.el,_.FCb,b)};var gFb;_.Ev=function(){_.yv.call(this);this.ka=_.Pk(function(){return document.getElementById("bgeLZd")})};_.E(_.Ev,_.zv);_.Ev.prototype.render=function(a,b,c){var d=this;_.zv.prototype.render.call(this,a,b,c);a=_.fFb(this,a,b,this.v6a(b),this.logging,c);return new _.iv(a,a,function(){d.clear()})}; source: chromecache_193.2.dr
Source:	Binary string: _.oDb=function(a){a.oa=null;var b=new URLSearchParams(a.Le.location.search);if(_.F(a.Uf,109)&&b.has("tbm")){var c=b.get("tbm")\|\|"";c=nDb.get(c);void 0!==c&&(a.oa=qDb(a,c))}b.has("udm")&&(b=Number(b.get("udm")),b in mDb&&(a.oa=qDb(a,b)));_.rDb(a,a.oa)};_.rDb=function(a,b){a.ka=b;a=_.Ra(a.La);for(b=a.next();!b.done;b=a.next())b.value.BVb()};_.pDb.prototype.Sa=function(){return _.F(this.Uf,82)?this.Ja.get(this.ka)\|\|(0,_.Ub.Oe)(this.Ja.get(null)):""}; source: chromecache_193.2.dr
Source:	Binary string: _.k.pDb=function(){this.trigger(_.sCb)};_.k.vFa=function(a,b,c){a=void 0===a?!0:a;b=void 0===b?!0:b;c=void 0===c?!1:c;this.Qa.jxb();if(this.Ct!==this.rk()\|\|c)this.wa.Mja(1),a&&this.wa.V0b(),b&&(this.Ct=this.rk()),this.trigger(_.qCb)};_.k.rk=function(){return this.Jp().value};_.k.Jp=function(){return this.getRoot().find("[name=q]").el()};_.k.MPa=function(){return this.Jp().selectionEnd};_.k.Cpa=function(){return this.Ct};_.k.wm=function(){return this.Jp()===this.Ta.activeElement};_.k.focus=function(){this.Jp().focus()}; source: chromecache_193.2.dr
Source:	Binary string: _.FL.prototype.Sa=function(){var a=this;if(-1!==this.ka){var b;null==(b=this.Ba[this.ka].ka)\|\|b.yc();this.Ta.get(this.ka)&&((0,_.yn)(this.Ta.get(this.ka)),this.Ta.delete(this.ka));(0,_.xn)(function(){var c=a.wza();c.Tm().length&&-1===a.ka&&!kDg(a.oa,c.Tm())&&(a.oa=c.Tm(),cDg(a,a.Eb,c,a.oa))},300,this)}jDg(this,this.ka,!1);this.ka=-1;(b=this.getRoot().parent().el())&&_.lo(b,_.FCb,new _.PDb(-1,void 0,2))}; source: chromecache_193.2.dr
Source:	Binary string: c.next();!d.done;d=c.next()){d=d.value;var e=Azg.get(d);if(e=_.Vn(b.getRoot(),"."+e).Cd()){e=e.cloneNode(!0);(0,_.Ub.assert)(e,_.$la("span"));var f=b.qC;f.Aa.has(d);f.Aa.set(d,e)}}b.qC.La.add(b);Bzg(b)})};_.E(_.BL,_.ev);_.BL.Fa=function(){return{preload:{aVg:_.uzg},controllers:{cLa:"aJyGR"},model:{qC:_.pDb,Uf:_.hDb}}};_.k=_.BL.prototype; source: chromecache_193.2.dr
Source:	Binary string: _.pDb.prototype.Qa=function(){return _.F(this.Uf,82)?this.wa.get(this.ka)\|\|(0,_.Ub.Oe)(this.wa.get(null)):""};_.sDb=function(a){var b=null;null!==a.ka&&(a=a.Aa.get(a.ka),void 0!==a&&(b=a.cloneNode(!0)));return b};_.Oq(_.kDb,_.pDb); source: chromecache_193.2.dr
Source:	Binary string: _.k.IMa=function(){var a=this.Jp();a.style.height="0";var b=Math.min(Math.floor(a.scrollHeight/this.lineHeight),this.maxLines);a.rows!==b&&(a.rows=b,this.trigger(_.KCb,1<b));a.style.height="";this.Aa&&this.trigger(_.MCb,a.getBoundingClientRect().height)};_.k.ePa=function(){};_.k.pDb=function(a){_.Mk(window,"attn_resume",null);this.Jp().scrollTop=0;_.ev.prototype.pDb.call(this,a)};_.k.Rc=function(a){this.Jp()&&_.Lu(this.Jp());_.Mk(window,"attn_pause",null);_.ev.prototype.ePa.call(this,a)}; source: chromecache_193.2.dr

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	11 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	3 Non-Application Layer Protocol	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	4 Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	1 Ingress Tool Transfer			Data Destruction	Virtual Private Server	Employee Names

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	0%	URL Reputation	safe
https://www.google.com"	0%	Avira URL Cloud	safe
https://www.goodmorningamerica.com/shop/story/black-friday-2023-tech-deals-105072502	0%	Avira URL Cloud	safe
https://www.goodmorningamerica.com/shop/story/black-friday-2023-tech-deals-105072502&ved=2ahUKEw	0%	Avira URL Cloud	safe
https://www.goodmorningamerica.com	0%	Avira URL Cloud	safe
https://report-doc.org/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=82a281bac8890808	0%	Avira URL Cloud	safe
https://report-doc.org/cdn-cgi/styles/challenges.css	0%	Avira URL Cloud	safe
https://report-doc.org/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
accounts.google.com	172.253.122.84	true	false	high
plus.l.google.com	172.253.115.102	true	false	high
i.ytimg.com	142.250.31.119	true	false	high
adservice.google.com	142.251.167.156	true	false	high
static.doubleclick.net	142.251.163.149	true	false	high
report-doc.org	172.67.173.18	true	false	unknown
youtube-ui.l.google.com	172.253.63.136	true	false	high
www3.l.google.com	172.253.63.101	true	false	high
play.google.com	142.250.31.101	true	false	high
googleads.g.doubleclick.net	172.253.62.157	true	false	high
challenges.cloudflare.com	104.17.2.184	true	false	high
id.google.com	142.250.219.195	true	false	high
www.google.com	172.253.115.106	true	false	high
clients.l.google.com	142.251.163.101	true	false	high
ogs.google.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
www.youtube.com	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/images/shopping/deals/mens_apparel.png	false		high
https://www.youtube.com/s/player/63e90c30/www-embed-player.vflset/www-embed-player.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normal	false		high
https://www.google.com/gen_204?atyp=csi&ei=1CpeZcWlGoegiLMP6sm8yA0&s=async&astyp=vpkg&ima=0&imn=0&mem=ujhs.9,tjhs.12,jhsl.2173,dm.8&nv=ne.1,feid.014b0ae0-94e1-4a32-a6a5-e74fe35dadc3&hp=&rt=ttfb.689,st.1047,bs.83352,aaft.1050,acrt.1050,art.1050&zx=1700670164425&opi=89978449	false		high
https://i.ytimg.com/vi/WyL-v--M_BI/mqdefault.jpg?sqp=-oaymwEFCJQBEFM&rs=AMzJL3kxxj4wLr4MUw1312xJqtgxGYib6A	false		high
https://report-doc.org/cdn-cgi/styles/challenges.css	false	Avira URL Cloud: safe	unknown
https://www.google.com/xjs/_/js/md=1/k=xjs.hd.en.j7vH50XSWl8.O/ck=xjs.hd.3mhtCf28lXo.L.W.O/am=BAAAAAAAAAAAAAAAAAAAAAQAAAAAEPUTDgFsgACBABBggAAgAICAFKQQBAMAEPBQJgAAACZAYAhYCogKvOcBAJBAFQAAAAAAEAwiAAAACAAAoAMAACCgEdAAhIBKQAAAAADyACA4ABhEEAAAAAAAAAAAAAABTBAMLkgAFAQQAAAAAAAAAAAAAKSkycVAAg/rs=ACT90oEQOKoPcm_mXy_VnoCFj9ts7y2bDw	false		high
https://www.google.com/complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=rCpeZdXlGruf5NoPj9ax6A4.1700670128242&dpr=1&nolsbt=1	false		high
https://www.google.com/xjs/_/js/md=1/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A	false		high
https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8	false		high
https://www.google.com/gen_204?atyp=i&ei=xSpeZdzvEPyy5NoPhfSymAc&dt19=2&zx=1700670161851&opi=89978449	false		high
https://www.google.com/gen_204?atyp=i&ct=&cad=udla=1&ei=xSpeZdzvEPyy5NoPhfSymAc&act=p&ps=1&zx=1700670161935&opi=89978449	false		high
https://www.youtube.com/s/player/63e90c30/player_ias.vflset/en_US/remote.js	false		high
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	false		high
https://www.google.com/images/shopping/deals/pet_supplies.png	false		high
https://www.google.com/gen_204?atyp=csi&ei=xSpeZdzvEPyy5NoPhfSymAc&s=web&t=all&wh=907&frtp=594&imn=104&ima=26&imad=17&imac=0&imf=0&aft=1&aftp=907&adh=tv.6&ime=8&imex=11&imeh=13&imea=0&imeb=32&imel=0&imed=0&scp=0&fld=1431&mem=ujhs.9,tjhs.12,jhsl.2173,dm.8&nv=ne.1,feid.080e36ac-210a-4412-a61d-63cb8f2dea90&net=dl.1350,ect.3g,rtt.400&hp=&p=bs.false&sys=hc.4&rt=hst.196,cbs.196,cbt.426,sct.579,aft.2391,afti.2391,frvt.2391,frts.794,afts.862,prt.1327,xjsls.1536,dcl.1543,aftqf.2393,xjses.5814,xjsee.5853,xjs.5853,lcp.942,fcp.399,wsrt.1575,cst.321,dnst.0,rdxt.876,rqst.1875,rspt.1509,sslt.320,rqstt.1209,unt.879,cstt.887,dit.3118&zx=1700670154732&opi=89978449	false		high
https://www.google.com/gen_204?atyp=csi&ei=rCpeZdXlGruf5NoPj9ax6A4&s=promo&rt=hpbas.6345&zx=1700670130425&opi=89978449	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/82a281d8ed3d062f/1700670106977/KqjhGQJRJoD_bVM	false		high
https://report-doc.org/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.google.com/favicon.ico	false		high
https://www.google.com/gen_204?atyp=i&ei=rCpeZdXlGruf5NoPj9ax6A4&ct=slh&v=t1&im=M&m=HV&pv=0.4371916384417085&me=1:1700670124640,V,0,0,1280,907:0,B,907:0,N,1,rCpeZdXlGruf5NoPj9ax6A4:0,R,1,1,0,0,1280,907:5794,x:16915,e,B&zx=1700670147350&opi=89978449	false		high
https://www.youtube.com/s/player/63e90c30/www-player.css	false		high
https://www.google.com/xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=1/ed=1/dg=2/br=1/rs=ACT90oFaYErXXA3hRaO-qDqG-y2SopXzQg/ee=cEt90b:ws9Tlc;qddgKe:x4FYXe,d7YSfd;yxTchf:KUM7Z;dtl0hd:lLQWFe;eHDfl:ofjVkb;qaS3gd:yiLg6e;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;iFQyKf:vfuNJf,QIhFr;SNUn3:ZwDk9d,x8cHvb;io8t5d:sgY6Zb;Oj465e:KG2eXe,KG2eXe;Erl4fe:FloWmf,FloWmf;JsbNhc:Xd8iUd;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;uY49fb:COQbmf;Pjplud:PoEs9b,EEDORb;QGR0gd:Mlhmy;a56pNe:JEfCwb;Me32dd:MEeYgc;wR5FRb:TtcOte,O1Gjze;pXdRYb:JKoKVe;dIoSBb:ZgGg9b;EmZ2Bf:zr1jrb;NSEoX:lazG7b;eBAeSb:Ck63tb;WCEKNd:I46Hvd;wV5Pjc:L8KGxe;EVNhjf:pw70Gc;sTsDMc:kHVSUb;wQlYve:aLUfP;zOsCQe:Ko78Df;KcokUb:KiuZBf;YV5bee:IvPZ6d;kbAm9d:MkHyGd;ZWEUA:afR4Cf;g8nkx:U4MzKc;qZx2Fc:j0xrE;lzgfYb:PI40bd;w9w86d:dt4g2b;GleZL:J1A7Od;bcPXSc:gSZLJb;JXS8fb:Qj0suc;IoGlCf:b5lhvb;VN6jIc:ddQyuf;vfVwPd:lcrkwe;xBbsrc:NEW1Qc;pNsl2d:j9Yuyc;VGRfx:VFqbr;BjwMce:cXX2Wb;ESrPQc:mNTJvc;R9Ulx:CR7Ufe;kY7VAf:d91TEb;NPKaK:SdcwHb;LBgRLc:XVMNvd,SdcwHb;UyG7Kb:wQd0G;LsNahb:ucGLNb;KpRAue:Tia57b;jY0zg:Q6tNgc;coJ8e:KvoW8;oSUNyd:fTfGO,fTfGO,pnvXVc;SMDL4c:fTfGO,pnvXVc;aZ61od:arTwJ;w4rSdf:XKiZ9;h3MYod:cEt90b;eO3lse:nFClrf;zaIgPb:Qtpxbd;HMDDWe:G8QUdb;ShpF6e:N0pvGc;k2Qxcb:XY51pe;IBADCc:RYquRb;pKJiXd:VCenhc;rQSrae:C6D5Fc;kCQyJ:ueyPK;EABSZ:MXZt9d;qavrXe:zQzcXe,mYbt1d;TxfV6d:YORN0b;UDrY1c:eps46d;F9mqte:UoRcbe;Nyt6ic:jn2sGd;w3bZCb:ZPGaIb;G0KhTb:LIaoZ;XUezZ:sa7lqb;aAJE9c:WHW6Ef;V2HTTe:RolTY;Wfmdue:g3MJlb;imqimf:jKGL2e;BgS6mb:fidj5d;gtVSi:ekUOYd;KQzWid:ZMKkN;UVmjEd:EesRsb;z97YGf:oug9te;AfeaP:TkrAjf;eBZ5Nd:audvde;CxXAWb:YyRLvc;OgagBe:cNTe0;SLtqO:Kh1xYe;tosKvd:ZCqP3;VOcgDe:YquhTb;uuQkY:u2V3ud;WDGyFe:jcVOxd;trZL0b:qY8PFe;VxQ32b:k0XsBb;DULqB:RKfG5c;Np8Qkd:Dpx6qc;cFTWae:gT8qnd;gaub4:TN6bMe;DpcR3d:zL72xf;hjRo6e:F62sG;yGxLoc:FmAr0c;pj82le:mg5CW;dLlj2:Qqt3Gf;qGV2uc:HHi04c;oUlnpc:RagDlc;R2kc8b:ALJqWb;Q1Ow7b:x5CSu;bFZ6gf:RsDQqe;okUaUd:wItadb;xbe2wc:uRMPBc;KOxcK:bFOvTc;G6wU6e:hezEbd;uknmt:GkPrzb;U96pRd:FsR04;PqHfGe:im2cZe;heHB1:sFczq;Fmv9Nc:O1Tzwc;hK67qb:QWEO5b;BMxAGc:E5bFse;R4IIIb:QWfeKf;whEZac:F4AmNb;tH4IIe:Ymry6;lkq0A:JyBE3e;daB6be:lMxGPd;LEikZe:byfTOb,lsjVmc/m=attn,cdos,gwc,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1659967187:1700666959:s-xfDmFBeCQJ3zR5aQxdS7p1hXAcQJ8HD8Iovqf91qk/82a281d8ed3d062f/39b36f2cbd2d955	false		high
https://www.google.com/client_204?atyp=i&biw=1280&bih=907&dpr=1&ei=rCpeZdXlGruf5NoPj9ax6A4&opi=89978449	false		high
https://www.google.com/gen_204?atyp=csi&ei=sypeZYSFM6ye5NoPrKyzoAs&s=async&astyp=hpba&ima=0&imn=0&mem=ujhs.8,tjhs.12,jhsl.2173,dm.8&nv=ne.1,feid.738e3fad-c883-4f4e-b7d5-6e9e194e7087&hp=&rt=ttfb.1549,st.1550,bs.27,aaft.1556,acrt.1556,art.1557&zx=1700670131986&opi=89978449	false		high
https://www.google.com/url?q=https://www.google.com/search%3Fq%3Dshop%2Bdeals%26source%3Dsmp.23q4SDealsHPP.22%26stick%3DH4sIAAAAAAAA_7t17sBZTiYOBgBZcuXYCAAAAA&source=hpp&id=19039542&ct=7&usg=AOvVaw2tqojU1GkQ0_4pk5RspTmS	false		high
https://www.google.com/gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=xSpeZdzvEPyy5NoPhfSymAc&zx=1700670175855&opi=89978449	false		high
https://www.google.com/gen_204?atyp=i&ei=rCpeZdXlGruf5NoPj9ax6A4&dt19=2&zx=1700670130422&opi=89978449	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false		high
https://www.google.com/xjs/_/js/k=xjs.hd.en.j7vH50XSWl8.O/ck=xjs.hd.3mhtCf28lXo.L.W.O/am=BAAAAAAAAAAAAAAAAAAAAAQAAAAAEPUTDgFsgACBABBggAAgAICAFKQQBAMAEPBQJgAAACZAYAhYCogKvOcBAJBAFQAAAAAAEAwiAAAACAAAoAMAACCgEdAAhIBKQAAAAADyACA4ABhEEAAAAAAAAAAAAAABTBAMLkgAFAQQAAAAAAAAAAAAAKSkycVAAg/d=0/dg=2/br=1/ujg=1/rs=ACT90oEQOKoPcm_mXy_VnoCFj9ts7y2bDw/m=sy7c,syre,syrg,syrh,WlNQGd,syxa,syxc,nabPbb,symw,symx,symy,symz,syn0,syn2,DPreE,syl0,syrd,syrf,CnSW2d,syxb,fXO0xe?xjs=s3	false		high
https://www.google.com/gen_204?atyp=i&ct=&cad=udla=3&ei=xSpeZdzvEPyy5NoPhfSymAc&pd=25&e=1&zx=1700670161934&opi=89978449	false		high
https://www.google.com/gen_204?s=web&t=aft&atyp=csi&ei=xSpeZdzvEPyy5NoPhfSymAc&rt=wsrt.1575,aft.2391,afti.2391,afts.862,cbs.196,cbt.426,frts.794,frvt.2391,hst.196,prt.1327,sct.579&wh=907&frtp=594&imn=104&ima=26&imad=17&imac=0&imf=0&aft=1&aftp=907&opi=89978449	false		high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high
https://www.google.com/async/bgasy?ei=xSpeZdzvEPyy5NoPhfSymAc&opi=89978449&yv=3&cs=0&async=_fmt:jspb	false		high
https://www.google.com/xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=0/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/m=sywz,CnSW2d,sy12i,sy12j,sy12k,sy12l,sy12n,sy12o,sy34r,sy632,VD4Qme,sy1hj,sy1hl,sy1hm,sy1hn,NVlnE,sy1hk,Dq2Yjb,sy1gz,sy1h0,qmdEUe,sy1ho,sy1hp,UqGwg,sy46w,ND0kmf,pjDTFb,sy3ob,sy648,sy68h,KgxeNb,sy3o7,khkNpe,sy2ks,EfPGub?xjs=s3	false		high
https://play.google.com/log?format=json&hasfast=true&authuser=0	false		high
https://www.google.com/search?q=shop+deals&source=smp.23q4SDealsHPP.22&stick=H4sIAAAAAAAA_7t17sBZTiYOBgBZcuXYCAAAAA	false		high
https://www.google.com/client_204?cs=1&opi=89978449	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normal	false		high
https://play.google.com/log?hasfast=true&authuser=0&format=json	false		high
https://www.google.com/xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=0/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/m=sy134,sy135,dt4g2b?xjs=s3	false		high
https://report-doc.org/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=82a281bac8890808	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=rCpeZdXlGruf5NoPj9ax6A4&zx=1700670132568&opi=89978449	false		high
https://www.google.com/gen_204?atyp=csi&ei=rCpeZdXlGruf5NoPj9ax6A4&s=webhp&t=all&wh=907&imn=5&ima=2&imad=0&imac=0&imf=0&aft=1&aftp=907&adh=&ime=2&imex=2&imeh=3&imea=0&imeb=0&imel=0&imed=0&scp=0&mem=ujhs.8,tjhs.12,jhsl.2173,dm.8&nv=ne.1,feid.738e3fad-c883-4f4e-b7d5-6e9e194e7087&net=dl.1400,ect.3g,rtt.400&hp=&p=bs.true&sys=hc.4&rt=hst.162,aft.969,afti.969,prt.561,aftqf.970,xjses.4090,xjsee.4136,xjs.4136,lcp.983,fcp.465,wsrt.618,cst.0,dnst.0,rqst.944,rspt.559,rqstt.233,unt.6,cstt.6,dit.1181&zx=1700670128254&opi=89978449	false		high
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://ogs.google.com/	chromecache_128.2.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_189.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/search%3Fq%3Dshop%2Bdeals%26source%3Dsmp.23q4SDealsHPP.22%26stick%3DH4sIAAAAA	chromecache_128.2.dr	false		high
https://www.google.com/shopping/ratings/merchant/immersivedetails?q=coachoutlet.com&c=US&v=1	chromecache_237.2.dr	false		high
https://ogs.google.com/widget/callout?prid=19039542	chromecache_182.2.dr	false		high
https://ogs.google.com/widget/callout	chromecache_128.2.dr	false		high
https://www.self.com	chromecache_237.2.dr	false		high
https://slickdeals.net/computer-deals/&ved=2ahUKEwic5oKBgtiCAxV8GVkFHQW6DHMQ0gIoAXoECCcQAg	chromecache_237.2.dr	false		high
https://www.youtube.com	chromecache_198.2.dr, chromecache_160.2.dr	false		high
https://www.forever21.com/	chromecache_237.2.dr	false		high
https://admin.youtube.com	chromecache_189.2.dr	false		high
https://slickdeals.net/video-game-deals/	chromecache_237.2.dr	false		high
https://api.whatsapp.com/send	chromecache_161.2.dr	false		high
https://www.usatoday.com/story/money/shopping/2023/11/19/black-friday-holiday-shopping-deals-hours/7	chromecache_237.2.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_189.2.dr	false	URL Reputation: safe	unknown
https://www.dealnews.com/&ved=2ahUKEwic5oKBgtiCAxV8GVkFHQW6DHMQFnoECCIQAQ	chromecache_237.2.dr	false		high
https://yurt.corp.google.com	chromecache_189.2.dr	false		high
https://www.google.com/tools/feedback	chromecache_144.2.dr	false		high
https://www.youtube.com/generate_204?cpn=	chromecache_189.2.dr	false		high
https://apis.google.com/js/api.js	chromecache_130.2.dr	false		high
https://www.forever21.com/&ved=2ahUKEwic5oKBgtiCAxV8GVkFHQW6DHMQ-bAJegQIHRAB	chromecache_237.2.dr	false		high
https://plus.google.com	chromecache_266.2.dr	false		high
http://tools.ietf.org/html/rfc1950	chromecache_234.2.dr, chromecache_160.2.dr, chromecache_189.2.dr	false		high
https://www.dealnews.com/	chromecache_237.2.dr	false		high
https://support.google.com/websearch/?p=language_search_results	chromecache_158.2.dr	false		high
https://goto.google.com/oshop_gws_buffer_size	chromecache_144.2.dr	false		high
https://support.google.com/websearch/?p=m_ws_serp_gethelp	chromecache_161.2.dr	false		high
https://www.goodmorningamerica.com/shop/story/black-friday-2023-tech-deals-105072502	chromecache_237.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/url?q=https://www.google.com/search%3Fq%3Dshop%2Bdeals%26source%3Dsmp.23q4SDe	chromecache_182.2.dr, chromecache_128.2.dr	false		high
https://ogs.google.com/widget/app/so?awwd=1	chromecache_182.2.dr	false		high
https://www.coachoutlet.com/shop/deals/view-all&ved=2ahUKEwic5oKBgtiCAxV8GVkFHQW6DHMQ-bAJegQIHBA	chromecache_237.2.dr	false		high
https://www.google.com/log?format=json&hasfast=true	chromecache_193.2.dr, chromecache_189.2.dr, chromecache_231.2.dr	false		high
https://lens.google.com	chromecache_221.2.dr, chromecache_193.2.dr	false		high
https://support.google.com/youtube/?p=report_playback	chromecache_189.2.dr	false		high
https://developers.google.com/youtube/iframe_api_reference#Events	chromecache_160.2.dr	false		high
https://slickdeals.net/forums/forumdisplay.php?f=9	chromecache_237.2.dr	false		high
http://youtube.com/streaming/metadata/segment/102015	chromecache_189.2.dr	false		high
https://lens.google.com/gen204	chromecache_144.2.dr, chromecache_137.2.dr	false		high
https://myactivity.google.com/privacyadvisor/search	chromecache_158.2.dr	false		high
https://youtu.be/	chromecache_189.2.dr	false		high
https://slickdeals.net/forums/forumdisplay.php%3Ff%3D9&ved=2ahUKEwic5oKBgtiCAxV8GVkFHQW6DHMQ0gIo	chromecache_237.2.dr	false		high
https://apis.google.com	chromecache_252.2.dr, chromecache_257.2.dr, chromecache_182.2.dr, chromecache_266.2.dr	false		high
https://domains.google.com/suggest/flow	chromecache_266.2.dr	false		high
https://www.google.com/intl/en_US/googlefinance/disclaimer/	chromecache_158.2.dr	false		high
https://youtube.com/api/drm/fps?ek=uninitialized	chromecache_189.2.dr	false		high
https://www.goodmorningamerica.com/shop/story/black-friday-2023-tech-deals-105072502&ved=2ahUKEw	chromecache_237.2.dr	false	Avira URL Cloud: safe	unknown
https://docs.google.com/get_video_info	chromecache_189.2.dr	false		high
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	chromecache_130.2.dr, chromecache_233.2.dr, chromecache_221.2.dr, chromecache_193.2.dr	false		high
https://www.goodmorningamerica.com	chromecache_237.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com"	chromecache_128.2.dr	false	Avira URL Cloud: safe	low
https://www.youtube.com/watch?v=BGgisoPG7vw	chromecache_237.2.dr	false		high
https://www.google.com/shopping/ratings/merchant/immersivedetails%3Fq%3Dcoachoutlet.com%26c%3DUS%26v	chromecache_237.2.dr	false		high
https://support.google.com/websearch/troubleshooter/9685456#ts=2889054%2C2889099%2C9166584%2C9171202	chromecache_158.2.dr	false		high
http://youtube.com/drm/2012/10/10	chromecache_189.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.253.63.119	unknown	United States	15169	GOOGLEUS	false
142.250.31.101	play.google.com	United States	15169	GOOGLEUS	false
104.21.80.18	unknown	United States	13335	CLOUDFLARENETUS	false
142.251.163.101	clients.l.google.com	United States	15169	GOOGLEUS	false
142.251.16.157	unknown	United States	15169	GOOGLEUS	false
142.251.16.119	unknown	United States	15169	GOOGLEUS	false
172.253.122.84	accounts.google.com	United States	15169	GOOGLEUS	false
142.251.163.149	static.doubleclick.net	United States	15169	GOOGLEUS	false
104.17.3.184	unknown	United States	13335	CLOUDFLARENETUS	false
172.253.63.136	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
172.253.115.106	www.google.com	United States	15169	GOOGLEUS	false
172.67.173.18	report-doc.org	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.219.195	id.google.com	United States	15169	GOOGLEUS	false
142.251.167.156	adservice.google.com	United States	15169	GOOGLEUS	false
142.251.111.93	unknown	United States	15169	GOOGLEUS	false
172.253.63.91	unknown	United States	15169	GOOGLEUS	false
142.250.31.119	i.ytimg.com	United States	15169	GOOGLEUS	false
142.251.16.105	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.17.2.184	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.253.62.157	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox Version:	38.0.0 Ammolite
Analysis ID:	1346517
Start date and time:	2023-11-22 17:20:49 +01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 3m 24s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@23/154@58/23
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.google.com/url?q=https://www.google.com/search%3Fq%3Dshop%2Bdeals%26source%3Dsmp.23q4SDealsHPP.22%26stick%3DH4sIAAAAAAAA_7t17sBZTiYOBgBZcuXYCAAAAA&source=hpp&id=19039542&ct=7&usg=AOvVaw2tqojU1GkQ0_4pk5RspTmS

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.167.94, 34.104.35.123, 69.164.0.128, 72.21.81.240, 192.229.211.108, 142.251.111.94, 172.253.122.94, 142.251.16.94, 172.253.63.95, 142.251.16.95, 142.251.111.95, 172.253.62.95, 172.253.115.95, 172.253.122.95, 142.251.179.95, 142.251.167.95, 142.251.163.95, 142.250.31.95, 172.253.63.94, 172.253.122.138, 172.253.122.101, 172.253.122.139, 172.253.122.102, 172.253.122.113, 172.253.122.100, 172.253.115.113, 172.253.115.101, 172.253.115.102, 172.253.115.100, 172.253.115.139, 172.253.115.138, 142.251.163.147, 142.251.163.104, 142.251.163.99, 142.251.163.105, 142.251.163.106, 142.251.163.103, 172.253.63.101, 172.253.63.102, 172.253.63.100, 172.253.63.139, 172.253.63.138, 172.253.63.113, 142.251.167.101, 142.251.167.138, 142.251.167.100, 142.251.167.113, 142.251.167.139, 142.251.167.102, 172.253.63.103, 172.253.63.99, 172.253.63.106, 172.253.63.147, 172.253.63.104, 172.253.63.105, 172.253.62.100, 172.253.62.139, 172.253.62.101, 172.253.62.113, 172.253.62.138, 172.253.62
Excluded domains from analysis (whitelisted): ssl.gstatic.com, fs.microsoft.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, encrypted-tbn0.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, encrypted-tbn3.gstatic.com, encrypted-tbn2.gstatic.com, jnn-pa.googleapis.com, t0.gstatic.com, encrypted-tbn1.gstatic.com, fe3cr.delivery.mp.microsoft.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, www.gstatic.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 22 15:21:39 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9782797550098095
Encrypted:	false
SSDEEP:	48:8SdKjTuWGfHhidAKZdA19ehwiZUklqehiy+3:8Hj/Grpy
MD5:	553225BDD0C51542F94CDAB8712844A1
SHA1:	F026C1D606C976018C27A4CA5E1BDD35BA1DD6BD
SHA-256:	4B928B741C4213F0D25FACF61003395D9727BEB56E05CA158AEFC2A229C0FF4B
SHA-512:	462BE5DEE5B3578082C0606CD663E9FBB4A2D9A3B6879CB45697C1EEC26FDF5F5954EFD95E727C0742C875A09048E65B5F07E015AE9496596D663C1F98D64BFE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....E..._...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IvW......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VvW......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VvW......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VvW............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VvW.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............j......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 22 15:21:39 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.994105199995753
Encrypted:	false
SSDEEP:	48:8qdKjTuWGfHhidAKZdA1weh/iZUkAQkqehZy+2:8Pj/GZ9Qsy
MD5:	73D5D3306D981F3A9AAEF518B84972BA
SHA1:	4BDADFD18D0471C30AC79FC24244AB8DC23E0406
SHA-256:	8401D21256931C8590DC4BEC042028C42414324B25AD907714798FEA88DB0E27
SHA-512:	1B30745370AD3A58CBFD728B770227DF044A5FF3A14AC12AB49D26733596FB08F3E8C5E246D9564F3A82E189B8AD58424EDD150AB3C714BF1A1FBD90D90982D2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....N.._...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IvW......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VvW......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VvW......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VvW............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VvW.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............j......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0014843832363125
Encrypted:	false
SSDEEP:	48:8xPdKjTuWsHhidAKZdA14tseh7sFiZUkmgqeh7sLy+BX:8xQj/4ndy
MD5:	9F51EFBBD0723BED389A4299C5055E3E
SHA1:	015179D3A3F779FCCC0C6B8B5EDCDB175318DF2B
SHA-256:	33702750605345567B119532C1039A7064B3EDCBE2C0C2F5D625AB52679B1BD8
SHA-512:	D81101E7783A38D8707BD77F6B785AFC5A3DB1FBABBEF756A93DDC3298AABF348142CDE32A20B35C8CE65266976D42B3ED47B6DADBD012B93DA90A3147AAD5C5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IvW......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VvW......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VvW......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VvW............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............j......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 22 15:21:39 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9925893126182723
Encrypted:	false
SSDEEP:	48:8YdKjTuWGfHhidAKZdA1vehDiZUkwqehFy+R:8Rj/G6Ty
MD5:	D23B62AAF8EC1B91148684B3B225B4AC
SHA1:	8D8FA508AD6944A4ADFBF32157C89AC456E61168
SHA-256:	F38832941E1FC0D50E52353C434A22DB42114099AEA65B10DB3D8EBB43844E88
SHA-512:	5A408868FE7E5A82C2DB8403101065DF4165BBF08B91C7BC6372469BCBB69E2932C35065FABF8BAAA2F4C273238C129C8A91C017B0082861D423DAC572067928
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........_...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IvW......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VvW......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VvW......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VvW............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VvW.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............j......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 22 15:21:39 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9805213514259874
Encrypted:	false
SSDEEP:	48:89dKjTuWGfHhidAKZdA1hehBiZUk1W1qehPy+C:86j/G69vy
MD5:	5496A4F63CC17C6F700D61860AC26133
SHA1:	27EAA566317C4CF106238C257F2BD405C7F8A466
SHA-256:	28C048AEA18EAC05515455AE36B7B5722128BFE2D133FE2D78452FEA4AED4DE3
SHA-512:	66803F60014C472C8F32A1DA496D32D5D5F403A94DFB22544869A80554B8A3336543F24146485094EFB090220CB940E47CABCD5CCC08A7DB4748AC45595A0905
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....8..._...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IvW......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VvW......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VvW......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VvW............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VvW.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............j......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 22 15:21:39 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9933774260910297
Encrypted:	false
SSDEEP:	48:8adKjTuWGfHhidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbdy+yT+:8/j/GET/TbxWOvTbdy7T
MD5:	ECCEF4120C8E5B24781C528CA78320D6
SHA1:	9EED2383FB82FEEDA99776FA759FCF85AAF14204
SHA-256:	067B36C7CCF1F1EEF1B4DBBD0966723F0F26C947D2BBD35BCBFE6D1484F82F10
SHA-512:	01DB8695C32B36ACA9B471218F8340F3B89C4B76EBEDC18168AEFF5B1E2B8670E4E1858592416D03BF557A6CA8350E1FB7E0DA2BF946216615C7169CA2C77D34
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....?.._...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IvW......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VvW......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VvW......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VvW............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VvW.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............j......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (7926)
Category:	downloaded
Size (bytes):	33624
Entropy (8bit):	5.811409124800523
Encrypted:	false
SSDEEP:	768:zwEghhvpu4An1OX5uufL2aFf0aeELF2xArGRIDJnavW+D41l1wKQzFJ/N4ailtxZ:l1OX5TnJqA11+D41l1wR1viltxGzW
MD5:	F29BDBC47CFB50F8751374A30E08A23B
SHA1:	F8B9DD1DE9A8BF938F1BEE3EAA42C180B89DAD3C
SHA-256:	C133FC4BDC63E569170CE40338191F9CEEABC68E0C57335D38331AEFCBC9E3FB
SHA-512:	497DA6D03356C9A5740980B8D4DD80F61A440303ABF83191671E87B8000104A051BF056661F0298D2D628333D42944906B1CD779DB1DCCEE5E060D8247EE94E2
Malicious:	false
Reputation:	low
URL:	https://ogs.google.com/widget/callout?prid=19039542&pgid=19039541&puid=f8d7e651c1b87f2c&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en
Preview:	<!doctype html><html lang="en" dir="ltr"><head><base href="https://ogs.google.com/"><meta name="referrer" content="origin"><link rel="canonical" href="https://ogs.google.com/widget/callout"><link rel="preconnect" href="https://www.gstatic.com"><link rel="preconnect" href="https://ssl.gstatic.com"><script data-id="_gd" nonce="1zdKwmFFrHA-9U5l3TK8lA">window.WIZ_global_data = {"DpimGf":false,"EP1ykd":["/_/*"],"FdrFJe":"739280970472717521","Im6cmf":"/_/OneGoogleWidgetUi","LVIXXb":1,"LoQv7e":true,"MT7f9b":[],"NrSucd":false,"OwAJ6e":false,"QrtxK":"","S06Grb":"","S6lZl":128566913,"TSDtV":"%.@.[[null,[[45459555,null,false,null,null,null,\"Imeoqb\"]],\"CAMSCx0O99WlEOquvBIW\"]]]","Vvafkd":false,"Yllh3e":"%.@.1700670127190849,21450762,218116515]","ZwjLXe":538,"cfb2h":"boq_onegooglehttpserver_20231119.03_p0","eptZe":"/_/OneGoogleWidgetUi/","fPDxwd":[48802160,93814384],"gGcLoe":false,"nQyAE":{},"qwAQke":"OneGoogleWidgetUi","rtQCxc":300,"w2btAe":"%.@.null,null,\"\",true,null,null,true,false]","y2FhP

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	downloaded
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2598)
Category:	downloaded
Size (bytes):	186493
Entropy (8bit):	5.460735800179833
Encrypted:	false
SSDEEP:	3072:KurQlDVqAYQ2VCIlSMpz3w9vSoZuv07wr3T+Gf6th:Kz+O2YIcGySnv/6G0h
MD5:	CEA091F35A656E0E82CCC9ABA2F5ACA1
SHA1:	B94E1A9F324BD5D050BCBFA886A7F007577BEC9C
SHA-256:	818CA313780E7D5D1448BE1C7C22275C3AE7234B37C659B7C7123ADBB84B6D34
SHA-512:	D53688B6C00202CED6BEA489C239626801FD7B4904AC4648D6A7913A2B508CB924D340055CB68DBBD1790D2B654DB334AF2B46EEE86750E911FA572AA020A0DF
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-one-google/_/js/k=boq-one-google.OneGoogleWidgetUi.en.0ABcWAGioow.es5.O/am=CGFIGw/d=1/excm=_b,_tp,calloutview/ed=1/dg=0/wt=2/ujg=1/rs=AM-SdHthje4ScR6j40NSBClHBjFEhf4TWg/m=_b,_tp"
Preview:	"use strict";this.default_OneGoogleWidgetUi=this.default_OneGoogleWidgetUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x1b486108, 0x0, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. SPDX-License-Identifier: Apache-2.0 /./.. Copyright 2013 Google LLC.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2011 Google LLC.. SPDX-License-Identifier: Apache-2.0./.var ia,aaa,Ja,caa,Ua,Va,Wa,Xa,Ya,Za,$a,ab,db,daa,eaa,fb,hb,xb,yb,Bb,Eb,Hb,Lb,Ob,faa,Rb,Yb,Zb,ac,hc,jc,lc,ec,iaa,sc,tc,jaa,Cc,kaa,Fc,Hc,Uc,Gc,gd,rd,pd,sd,z,yd,Bd,qaa,raa,saa,taa,uaa,vaa,waa,xaa,je,Eaa,Caa,ve,De,Gaa,Haa,Fe,Te,Laa,Maa,Ze,Naa,Oaa,Paa,Qaa,of,Raa,Saa,pf,Taa,Uaa,wf,Waa,Xaa,Yaa,Zaa,aa,Qf,Rf,$aa,Tf,Uf,Xf,aba,bg,cg,dg,dba,eba,fg,gg,fba,gba;_.ca=function(a){return function(){re

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (513)
Category:	downloaded
Size (bytes):	4113
Entropy (8bit):	5.2302488962321245
Encrypted:	false
SSDEEP:	96:SatYBQiwRTQ+/kWQATuvr/MjoqHMGDJWX8ipBrxuUX1upBou:bWBDQTf/kWQAyvr/vqHMGDJpSgpBou
MD5:	F6FBDBAF92CB62B1F5CE575F55D4C165
SHA1:	3F2AB48CA258D54C583E57AA7476985F6680B047
SHA-256:	B8DD54A00A20B4CF3E6FCBF3808219B99929B41FD82E0144461D5BE9619763F4
SHA-512:	C90BEDB46C632A6452223D205EDD1E9039BD98783904D7CF3D6D44D00F30376370DC0E5CFAB7844217DCDC86CDA849A4B912017C10282144A9103CB1CFCAE6AC
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-search/_/js/k=boq-search.ViewPackageService.en.5vFoIj6rx6g.es5.O/ck=boq-search.ViewPackageService.fuMBNisZ1jo.L.B1.O/am=DAIAQIAAAAAAgAAAABAAAAAAAAAAayNc9I-AjQDgwfry__9JICim5wcAQAgAwCBiA8CIDgAACIABoAAAAAAgCjoegEACRAShCwAPiBCPAECpge5WYU0AkAEfJYAASACcBBQAAAAEAADA4AEAYB8AIIAwIyDiAAAAAMA1DxgQAAAAAAAAAAAAAEEhLwIqAgAAAAAAAAAAAAACoEk/d=1/exm=A7fCU,NwH0H,RMhBfe,VwDzFe,_gbm,w9hDv,x8cHvb,xUdipf/ed=1/dg=0/rs=AH7-fg4t4gGfMGBENuEcV0ZBKDMYVTU3JQ/cb=loaded_1_2/ee=ADJUGe:nSzGM;AfeaP:TkrAjf;Al37kf:WF2Oxf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CRubWc:GGHMXc;CxXAWb:YyRLvc;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;GzNeK:lwR3kb;HMDDWe:HPcd9d;IcRVsb:TzIJDb;IoGlCf:MEmnGe;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KQzWid:ZMKkN;LBgRLc:SdcwHb;LWyKNe:OGn9Jd;LsNahb:ucGLNb;MWIbN:Oezo8e;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;NoD55:tHLYle;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OGn9Jd:vP7cyb;OgagBe:cNTe0;OohIYe:mpEAQb;Pjplud:EEDORb;QGR0gd:Mlhmy;QHcAG:Doact;Qoo2ob:xNwrGf;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;Rlgi2d:XM4pie;SFqMfe:d7N0Ze;SLtqO:Kh1xYe;SnFeMb:gIO09b;T9F76b:IGrxNe;TxfV6d:YORN0b;UDrY1c:eps46d;UVmjEd:EesRsb;UVzb9c:W0fpg;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VxQ32b:k0XsBb;W1Xvfd:KwNFR;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;XcupOe:nPGmVc;YV5bee:IvPZ6d;ZMvdv:PHFPjb;ZlOOMb:ka50sc;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;aoM3kc:RmZU0e;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;cZGwze:Uq2Ztb;csKcjd:SWn78c;dIoSBb:SpsfSb;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:sVEevc;eBZ5Nd:audvde;eGOC9b:UFUkKb;eHDfl:ofjVkb;eO3lse:TC8ZNd;fWLTFc:TVBJbf;fcYTHe:rDv7Wc;flqRgb:ox2Q7c;fufDm:kGNN9b;g8nkx:U4MzKc;gPGwWe:ds8otb;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:wV5Pjc;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;iFQyKf:QIhFr;imqimf:jKGL2e;io8t5d:yDVVkb;jGHevf:wsoZ3c;jWrxGe:FHj41b;jlykkc:Ixcocc;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;kbIuKc:rDv7Wc;kyjn6b:CfXVTe;lUFnVe:Sq92Y;lkq0A:IbjKve;lx12yf:OtBNv;mT6AUb:vsaskf;mWzs9c:sVEevc;nAFL3:s39S4;oGtAuc:sOXFj;okUaUd:Kg1rBc;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:MdUzUe;pj82le:mg5CW;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:x4FYXe;qsajS:qGotLb;rQSrae:C6D5Fc;rebY5d:S5i2J;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;slvZxc:FU6yf;tGdRVe:b5f3kc;tH4IIe:NoECLb;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;ul9GGd:VDovNc;uuQkY:u2V3ud;vAvu5d:O6oXm;vGrMZ:Y1W8Ad;vXy3B:yzQjhd;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:aIe7ef;wQlYve:aLUfP;wR5FRb:O1Gjze;wV5Pjc:nQze3d;whEZac:F4AmNb;xBbsrc:NEW1Qc;xMUn6e:e0kzxe;xqZiqf:BBI74;yxTchf:KUM7Z;z97YGf:oug9te;zaIgPb:l09DXe;zxnPse:GkRiKb/m=KG2eXe"
Preview:	"use strict";loaded_1_2(function(_){var window=this;._.m("KG2eXe");.var aEb=_.Md(_.se),bEb=function(a){this.Ka=_.t(a)};_.D(bEb,_.u);.var cEb=_.Cd(203522521,bEb),dEb=function(a,b){return new _.aQa(a,b,1)},eEb=function(a){var b={};_.Da(a.JUa(),function(e){b[e]=!0});var c=a.VTa(),d=a.lUa();return new _.nQa(a.kUa(),1E3c.getSeconds(),a.dTa(),1E3d.getSeconds(),b)},fEb=function(a,b,c,d){return c.then(function(e){return e},function(e){if(!e.status\|\|!d.Rca(_.Lg(e.status,1)))throw e;return _.Gf(d.LOa).then(function(){_.oQa(d);b=_.br(b,_.GMa,d.PBa());return fEb(a,b,a.Ba(b),d)})},a)},gEb=function(a,b,c){c.then(function(d){_.ZMa(a.Ba,b,d.oa)},.function(){})},hEb=function(a){this.Ka=_.t(a)};_.D(hEb,_.u);var iEb=function(a){this.Ka=_.t(a)};_.D(iEb,_.u);var jEb=_.Cd(271230360,iEb),kEb=function(a){this.Ka=_.t(a)};_.D(kEb,_.u);kEb.prototype.getType=function(){return _.Jk(this,1,0)};kEb.prototype.ud=function(a){return _.il(this,1,a)};kEb.prototype.Ke=function(){return _.Wk(this,1)};var lEb=_.Cd(4876132

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 186x186, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	4726
Entropy (8bit):	7.9444309787428535
Encrypted:	false
SSDEEP:	96:83pXKrsVxqCpXzCaaQWColFjHGwaJQK71yWyJstt:ipX4sVx7DMQ3olFNLs
MD5:	9DCEC9088177F635FEDD5C9467702464
SHA1:	E494ACA7633BA9B5148BA9F1E0D3635301B7ABF1
SHA-256:	D12A8E648E5161456DDB1DB640FAB55C4E0825E4DA50EA69330528FE242D9A00
SHA-512:	46BA8CD80FB980C19EC2007DD4241F5AB036EE0209CF99DEBC6C8909238A0393E8DB5BBF11F3397FB977646CDA190369B4B56D40EB624C1D8F6401886DC8EC64
Malicious:	false
Reputation:	low
Preview:	RIFFn...WEBPVP8 b....N.......>I .E".!.Y].(....k...?B?k.a...c.7...a......3.O.'.O........{X.3.#.W....?....]......~_G...C...d.....`.....a.........n......%.....?&?09..Q...7.......L.g}.._1O`>................s....^..$...a.K./._b......./.?..._..._.<.~.{...](...C..8.^.R..0`.'!....k...L...M~...gP(..v.>:m.J..<4.V@2..?....q."9/.i9..o?._.(..C\|.84.....2...v.#.>..#.c....<.w)..1......rYc...d.s..D......e.uf..a,U.W.:.1.2..!.H#Zz..F...Se.....3...p...b.(d..M...IZm..r3Bo~..."z....dpI.U..S2.v!)...Y..[.+[....4C%....P.m...Tl.w...,.`0......bpN.....Y./+..!M1e.;....m..%.+.(..........6\|..^l..$....BJ...Q.`..o..-...T...Ov....w.;....P.D.4.=..(...........n.E-...8n.k.r.V...FoCM..hW..'.\|..>H.C.....J.+..v/.6BP....v....J...jVu...P...f..^...9k...p...5G2....iE.......-EY-9.o}............C.O.{...1.3.j....Ba...{...TMB./............"E..h.*...r...z...w.....=j.S...^....&.R...z..2Xx...[.-.....'X0..w..f0...{......#.%.8..A.&.)`/.......V.........r.......8.Q1MX.HH.&..wo.b...

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 145x186, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	3028
Entropy (8bit):	7.931010793419687
Encrypted:	false
SSDEEP:	48:8uC7rHgOxE3R1HJnSP5klRnXBc8ITjnoTvtQXahaM/ypBQ3ul3Rgw2ZSGY9:vQ7zxE3vHJnO5UXBPIqvsahaMABQ3kRL
MD5:	52251FE1033402E4D475CFC6AEF8ECB4
SHA1:	90F6355B94E9E9D6E4DDFCDFD0D375D8FFFA3CA0
SHA-256:	683E4BDF8223E19C7E2F0227B732DF274E5ED948A6F58C4CC6777AD6C81190C9
SHA-512:	6319F215628497B7D05CC600FD9C92F44A48E1546F07549C0D5565BC54580733765B1A6459FC97B2A073EFDE6E31D6C0799FD0514E0B4A806FAF95221FDFC88A
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn1.gstatic.com/shopping?q=tbn:ANd9GcRX8TpMoyfZo2mMWh3Cq_zHhtsQhJdJig3a9SsCwHPxvOwX7O4E5mKo0BCupqe1d6DO1yzn8ntB1qO3ZiFh9vCdEV9OUSfMVkjO8ICF3Dg
Preview:	RIFF....WEBPVP8 .....>.......>I..D"....~,0............Q`.._.......k......V..4?....?..zz......a......i}.?c.T.......3.;J.o..S.....r.r.'...xWQL1^...am!<P...Z...gH...9..X.Vn4m...sa.<...)]...b..&{.x...tQ.vQ... .l.[i]Y.l"0..?...IqC.%.FT..iZ..{.A......;\|......(..."^T'..w:.]...<~I8\..w...B....-,.y6uT.>.L.q.{.....(x.=/#<...w{..%9\..T....n......N.L.rr..^P.d..\|.~..y$,....3`.o.......}.....~...X6....M(}8..sat......a&.+..K.g.......J?.....8.g..Y.&.d..R.TDL..owM..B....%d.!.-.,...p..1..,AF 3..!vrQ..y..J...6..Y.@.....#...F..zs.]..i....+.+. kX..c....8,Yf]n....I..v...rg.-.......h{k&..`...<..=W..(.v...~.Z..ICk..S...P.....K.~.....u...s.......U.HFqc.0.of.-..j'...O...O&6..h........^21+Nu.,..S.t*.A...5g.FK\|...GC..L.....b..W.dE..Vy..:Rx.>.....bM.!W......5..".:........t.b..%...h..D`....M.....S.:.W..P7....e..ne......y&t..{,-0..d.....Kn..Z........../........{.....!0........i...W....BqF.m...i'.....[Egn...Q.:WM.`F....m........)\Q..R..!...G.P1Y...!..'.>.E.;..g?..=(R[.

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.997663540580514
Encrypted:	false
SSDEEP:	3:jTqtm2LGRFnvMmOVviLnfvY1ZXCn:CNEf2wfvG0
MD5:	B09DF57E90671B0C007ECE51F775D7A5
SHA1:	AB91A0D1F4A1A9728D93ADD95E43BBA6C850919A
SHA-256:	EBF8E72E46DB9D89CC6F36EE73B2AFE7A8510446E2938D4E0189F41AA7C1FEE9
SHA-512:	CE15E217390FF8909E4053725C736C6CF5DC6A27520A964AD8F423FD160AFAF91DB30269B4A4BB4E047899663783DCC2E79DD3DCEBFE1347A5520BC70B0B9F3D
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-search/_/js/k=boq-search.ViewPackageService.en.5vFoIj6rx6g.es5.O/ck=boq-search.ViewPackageService.fuMBNisZ1jo.L.B1.O/am=DAIAQIAAAAAAgAAAABAAAAAAAAAAayNc9I-AjQDgwfry__9JICim5wcAQAgAwCBiA8CIDgAACIABoAAAAAAgCjoegEACRAShCwAPiBCPAECpge5WYU0AkAEfJYAASACcBBQAAAAEAADA4AEAYB8AIIAwIyDiAAAAAMA1DxgQAAAAAAAAAAAAAEEhLwIqAgAAAAAAAAAAAAACoEk/d=1/exm=A7fCU,NwH0H,RMhBfe,VwDzFe,_gbm,w9hDv,xUdipf/ed=1/dg=0/rs=AH7-fg4t4gGfMGBENuEcV0ZBKDMYVTU3JQ/cb=loaded_1_1/ee=ADJUGe:nSzGM;AfeaP:TkrAjf;Al37kf:WF2Oxf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CRubWc:GGHMXc;CxXAWb:YyRLvc;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;GzNeK:lwR3kb;HMDDWe:HPcd9d;IcRVsb:TzIJDb;IoGlCf:MEmnGe;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KQzWid:ZMKkN;LBgRLc:SdcwHb;LWyKNe:OGn9Jd;LsNahb:ucGLNb;MWIbN:Oezo8e;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;NoD55:tHLYle;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OGn9Jd:vP7cyb;OgagBe:cNTe0;OohIYe:mpEAQb;Pjplud:EEDORb;QGR0gd:Mlhmy;QHcAG:Doact;Qoo2ob:xNwrGf;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;Rlgi2d:XM4pie;SFqMfe:d7N0Ze;SLtqO:Kh1xYe;SnFeMb:gIO09b;T9F76b:IGrxNe;TxfV6d:YORN0b;UDrY1c:eps46d;UVmjEd:EesRsb;UVzb9c:W0fpg;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VxQ32b:k0XsBb;W1Xvfd:KwNFR;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;XcupOe:nPGmVc;YV5bee:IvPZ6d;ZMvdv:PHFPjb;ZlOOMb:ka50sc;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;aoM3kc:RmZU0e;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;cZGwze:Uq2Ztb;csKcjd:SWn78c;dIoSBb:SpsfSb;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:sVEevc;eBZ5Nd:audvde;eGOC9b:UFUkKb;eHDfl:ofjVkb;eO3lse:TC8ZNd;fWLTFc:TVBJbf;fcYTHe:rDv7Wc;flqRgb:ox2Q7c;fufDm:kGNN9b;g8nkx:U4MzKc;gPGwWe:ds8otb;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:wV5Pjc;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;iFQyKf:QIhFr;imqimf:jKGL2e;io8t5d:yDVVkb;jGHevf:wsoZ3c;jWrxGe:FHj41b;jlykkc:Ixcocc;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;kbIuKc:rDv7Wc;kyjn6b:CfXVTe;lUFnVe:Sq92Y;lkq0A:IbjKve;lx12yf:OtBNv;mT6AUb:vsaskf;mWzs9c:sVEevc;nAFL3:s39S4;oGtAuc:sOXFj;okUaUd:Kg1rBc;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:MdUzUe;pj82le:mg5CW;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:x4FYXe;qsajS:qGotLb;rQSrae:C6D5Fc;rebY5d:S5i2J;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;slvZxc:FU6yf;tGdRVe:b5f3kc;tH4IIe:NoECLb;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;ul9GGd:VDovNc;uuQkY:u2V3ud;vAvu5d:O6oXm;vGrMZ:Y1W8Ad;vXy3B:yzQjhd;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:aIe7ef;wQlYve:aLUfP;wR5FRb:O1Gjze;wV5Pjc:nQze3d;whEZac:F4AmNb;xBbsrc:NEW1Qc;xMUn6e:e0kzxe;xqZiqf:BBI74;yxTchf:KUM7Z;z97YGf:oug9te;zaIgPb:l09DXe;zxnPse:GkRiKb/m=x8cHvb"
Preview:	"use strict";loaded_1_1(function(_){var window=this;._.m("x8cHvb");.._.p();.});.// Google Inc..

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, truncated
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	4.199873730859799
Encrypted:	false
SSDEEP:	3:FttVQfPltSj:XtqPU
MD5:	D317C25EBCF619DCAD17963A91904BC1
SHA1:	749A0A568BEF62730A278854033B5D83AC81519C
SHA-256:	F5AF56B41CA2466246D1648A3BE8FE236C4F123E3FA8589C10A72F1C68ABBE8F
SHA-512:	4055D9D3917796222A49B8BFB48D60E9A804D4CEBFE9958EAEEE9E7BABE153FEEB6C7C11577F1494E37BB91F89F5FAB6BC204B1A7AF11F32A6043D57B5A4A237
Malicious:	false
Reputation:	low
URL:	https://www.google.com/compressiontest/gzip.html
Preview:	...........QL.O..,HU.(....H.....

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 210x186, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	3890
Entropy (8bit):	7.948184529776776
Encrypted:	false
SSDEEP:	96:lTK0RRou49/p5gg8ySwRlyLwD+YyHikMfre:JtouYp5gfqlyLc+YyHikMDe
MD5:	919A20B8E0CCCF4B606D9F284DF727CA
SHA1:	ECC052C5B7FAA42DEE5E8D4B1A92AC24838F9FBC
SHA-256:	99121E8AC35E9F1C2A59293DBD8CB0E3C01EAE97CD1001882D684112185A958E
SHA-512:	EF6C0956E70E52C3CA96B5264F5531B8B19C1F3004278C231241DBA60570013FA3991969911E74111DA1A4AE14846D3F5E8CD27231DC19E26A9D51228C6FE98E
Malicious:	false
Reputation:	low
Preview:	RIFF...WEBPVP8 .....J.......>=..C.!..)5. ...n..n..[#...}...Z.......kv......e...s.Rv....,...._.}Z...?...._.>....`.u...K...g........P..?...m....X:.C....h..<.yb..B2..^..E........\...Vb...".....Q,.....a.2.%j...8.....=G..H...%..D.&......X...@l..-%F.Q..K.@l...S..1..Ha.W......l'Pi.j.%...Y.V5)End.C.`...1Q..).-l.6c.xW@..D....F.......t1G..N.W...O>l...q........<.R..o.i...H"..P......;..b....^E=...<AF...8n.qp=.. ..{0.;=.....\L../O.m.h..^.}5..........xm..u..6...O...g..}.Ga...~.)\i.d+.X.y...s.!/.sL)$.....t.Kj.J>'...kPd.,.nv...qW..0..C..d...H=tg....E.4..s.edJ..Z.5..T.-S+..fV>.D.......up6..t.....U..?P..E^.k.....j./..w92.y.J.!.c.......c?n.6........I...c.2.=.;.........rI...%.A..V.ml.P...Q....(...ieX..>.....B...C,<tRK.?.R.....=s....B......U{X....hl......o.....2.. ..&.M.)....Si...(._..RN.u...j.G..=.41............g..@......E...o6.fNY.8.i..-.x.......qA..%S...J..:...N.x..\ec#m.9..bjL4 .!=g..8.....F.4k,nAp..V...D_Jw.....\|.B.....VI8(..].<..J..@....=o..

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12592)
Category:	downloaded
Size (bytes):	911404
Entropy (8bit):	6.163619936867443
Encrypted:	false
SSDEEP:	24576:e4O40mh0fzaW3c+hB0uyOAImTrhmkX7WD:Bb0tzalQyO/z
MD5:	E4A8CA394A1C64759F92541C91C35417
SHA1:	6CFCD73556DF9893F67812A7514B1E7E6D5589FA
SHA-256:	D13D435E2B4324E9B1A9331D4890A98E914261CFA4F964A12AD1BC1F4C9FA97D
SHA-512:	F06FD8A30189E86365602A54D85F510DC19099096918D056035C83093AF3081836E33BF93B41C1D9FE0DE65F1282759FC912C823A2408E97B471FBA81206FC62
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/xjs/_/js/k=xjs.hd.en.j7vH50XSWl8.O/ck=xjs.hd.3mhtCf28lXo.L.W.O/am=BAAAAAAAAAAAAAAAAAAAAAQAAAAAEPUTDgFsgACBABBggAAgAICAFKQQBAMAEPBQJgAAACZAYAhYCogKvOcBAJBAFQAAAAAAEAwiAAAACAAAoAMAACCgEdAAhIBKQAAAAADyACA4ABhEEAAAAAAAAAAAAAABTBAMLkgAFAQQAAAAAAAAAAAAAKSkycVAAg/d=1/exm=SNUn3,cEt90b,cdos,csi,d,dtl0hd,eHDfl,hsm,jsa,mb4ZUb,qddgKe,sTsDMc/ed=1/dg=2/br=1/ujg=1/rs=ACT90oEQOKoPcm_mXy_VnoCFj9ts7y2bDw/ee=AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DULqB:RKfG5c;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;IBADCc:RYquRb;IoGlCf:b5lhvb;JXS8fb:Qj0suc;JsbNhc:Xd8iUd;KOxcK:bFOvTc;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe;Pjplud:EEDORb,PoEs9b;Q1Ow7b:x5CSu;QGR0gd:Mlhmy;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;SLtqO:Kh1xYe;SMDL4c:fTfGO,pnvXVc;SNUn3:ZwDk9d,x8cHvb;ShpF6e:N0pvGc;TxfV6d:YORN0b;U96pRd:FsR04;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YV5bee:IvPZ6d;ZWEUA:afR4Cf;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bFZ6gf:RsDQqe;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:audvde;eHDfl:ofjVkb;eO3lse:nFClrf;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;io8t5d:sgY6Zb;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;lkq0A:JyBE3e;lzgfYb:PI40bd;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO,pnvXVc;oUlnpc:RagDlc;okUaUd:wItadb;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;uuQkY:u2V3ud;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:O1Gjze,TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=B2qlPe,DhPYme,EkevXb,GU4Gab,MpJwZc,NzU6V,UUJqVe,aa,abd,async,epYOx,ifl,ms4mZb,mu,pHXghd,q0xTif,s39S4,sOXFj,sb_wiz,sf,sonic,spch?xjs=s1"
Preview:	_F_installCss(".jbBItf{display:block;position:relative}.DU0NJ{bottom:0;left:0;position:absolute;right:0;top:0}.lP3Jof{display:inline-block;position:relative}.nNMuOd{-webkit-animation:qli-container-rotate 1568.2352941176ms linear infinite;animation:qli-container-rotate 1568.2352941176ms linear infinite}@-webkit-keyframes qli-container-rotate{from{-webkit-transform:rotate(0);transform:rotate(0)}to{-webkit-transform:rotate(1turn);transform:rotate(1turn)}}@keyframes qli-container-rotate{from{-webkit-transform:rotate(0);transform:rotate(0)}to{-webkit-transform:rotate(1turn);transform:rotate(1turn)}}.RoKmhb{height:100%;opacity:0;position:absolute;width:100%}.nNMuOd .VQdeab{-webkit-animation:qli-fill-unfill-rotate 5332ms cubic-bezier(0.4,0,0.2,1) infinite both,qli-blue-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite both;animation:qli-fill-unfill-rotate 5332ms cubic-bezier(0.4,0,0.2,1) infinite both,qli-blue-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite both}.nNMuOd .IEqiAf{-web

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2956)
Category:	downloaded
Size (bytes):	18577
Entropy (8bit):	5.408156042681188
Encrypted:	false
SSDEEP:	384:z+ddgLmKpvpx3PbkT4SIwHwJUwMOVELOGTINkrJhmMtF8+:xJBpx3PITFtw5VELOGTINkrJYMtF8+
MD5:	A326EED0193D89CD3D4044C32867480A
SHA1:	9F17BFA05E38689B099663FCF81629EA9BFC878F
SHA-256:	60715B03F2F1B3836256166D61E0411C6215F0FCDA40DA6772328A310CDDDD04
SHA-512:	0E945399AFD1F0202B747D43BABD31516C39636936862EE74FB1D6E7C43A9682D7D3F265979F770FA5C4FE465890DBA30C0799DFB46B87EAB90968B18C8089AF
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-one-google/_/js/k=boq-one-google.OneGoogleWidgetUi.en.0ABcWAGioow.es5.O/ck=boq-one-google.OneGoogleWidgetUi.d1uIQnUcq8Q.L.B1.O/am=CGFIGw/d=1/exm=A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,FCpbqb,GkRiKb,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WhJNk,Wt6vjf,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fKUV3e,gychg,hKSk3e,hc6Ubd,hhhU8,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pw70Gc,s39S4,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,yDVVkb,yYB61,zbML3c,zr1jrb/excm=_b,_tp,calloutview/ed=1/wt=2/ujg=1/rs=AM-SdHvKQOpXYagvgeJ7sddAjZD90JtrGQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=RqjULd"
Preview:	"use strict";this.default_OneGoogleWidgetUi=this.default_OneGoogleWidgetUi\|\|{};(function(_){var window=this;.try{._.p("RqjULd");.var vha=function(a){if(_.m&&_.m.performance&&_.m.performance.memory){var b=_.m.performance.memory;if(b){var c=new RE;isNaN(b.jsHeapSizeLimit)\|\|_.Rd(c,1,_.rc(Math.round(b.jsHeapSizeLimit).toString()));isNaN(b.totalJSHeapSize)\|\|_.Rd(c,2,_.rc(Math.round(b.totalJSHeapSize).toString()));isNaN(b.usedJSHeapSize)\|\|_.Rd(c,3,_.rc(Math.round(b.usedJSHeapSize).toString()));_.bk(a,RE,1,c)}}},wha=function(a){if(SE()){var b=performance.getEntriesByType("navigation");if(b&&b.length){var c=new TE;if(b=b[0]){switch(b.type){case "navigate":c.Ug(1);.break;case "reload":c.Ug(2);break;case "back_forward":c.Ug(3);break;case "prerender":c.Ug(4);break;default:c.Ug(0)}var d=_.ok(c,2,Math.round(b.startTime));d=_.ok(d,3,Math.round(b.fetchStart));d=_.ok(d,4,Math.round(b.domainLookupStart));d=_.ok(d,5,Math.round(b.domainLookupEnd));d=_.ok(d,6,Math.round(b.connectStart));d=_.ok(d,7,Math.ro

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	629
Entropy (8bit):	7.564672249311839
Encrypted:	false
SSDEEP:	12:6v/7ixcno2hzWMstQjfasZklbM530LQhQeb2/+2ezuyzKLElz5ftkTKHvCl7l/lN:bUhzWKXE6yiVbmyrl9tpQ9
MD5:	26AA2A96591A8457131E2C2FAB297733
SHA1:	1252C95DBE00D6DB88593FE49DA675219748554A
SHA-256:	F31B3D2831EB8D2FD5678734A9F73AD2FF01424085CCBAC3981AC290BD7F0D99
SHA-512:	225413971B05FC06266A42AAE0069ED50131F945DF87A120B4281081327EDAAA40222E3270DFB4AAEEA6B05833EA840B30EC4A22245F3EE0CECCB0339DCA8C65
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz....<IDATx.b.R`...'O..^.xv..#.g>.}q.'n\8....WS....1....vjo_9...]..,Y.C..~...9}m.{....u...0..QVJ......D.AJ.K..+Y#X.EA..W.]W.np_....#d.D..8..k.+l.3.M%...dM..gG...B.BJ.Z.f.s.}U.g..o...l..WjG...=..0?=T.5.O.'.d.<O)BA., 8?...ET.z..8...n.;.06....8...L.wS........U.M%s.[.t...h...H...)a..F.H.^?v...[7.>..o....Y.gY.C.X.FK..S.4..F..+hn.... ...6.d..<.m.."..l.(.@...S..6B..e....x2..0).$.rG+.`.j<".......+..0...{.../=.]..?...g.aR..%...;p.......E0....0...7 .9.d...U..........Q.0?.T....*.AIx...k/.!..HC...Wy.R.9..)BF...g.k.....U.VMT...0..K...,l..5..g..&.c[.........;.........IEND.B`.

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 310 x 163, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2244
Entropy (8bit):	7.822694001839353
Encrypted:	false
SSDEEP:	48:5kQGcvNdOtmXVlzMkD/FTZQo5H0/BPh+n+AdoGzkcY42ulxmMtaa1bRl+H/hCem3:ecvWtSVtJDddl0lGzk7422QEaa1bRIM3
MD5:	932A3EFEAD7DA16BC06AE7FA1B5A9412
SHA1:	122D53F20FCD874BFEA8ADD51C336CB7DE02FA6D
SHA-256:	5D1F511937FC264ADCE879A38507C2D0D95E898E959E92A6BD74EA216AF6E4DA
SHA-512:	C02BA890151FF6FA6C130E841E088E57822292A1B3A1803BD6BC85A00226ADF007E8EA5AA40386AE3341C2D71490311029BAAB1201E1B5B5D7E8148E6076BEEB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...6.........7.......PLTE...!Bx..../m......!Ay.1n.<t...]q....$Cv!Bw....?w1L\|.....k...3NyIa.....bu..1o.8s...fy.Pg.....6s{.....;T..'j.i.3kq... f%Et...+Fz....<yTk..'k..c...BW.{.....?hr......4.T....IDATx...z.:.@.H....V....v.3..9}.G;.IDn.J.O.~t....e.$H.. .. .. .. .. .. .. .. .. .. .. .. ..................G.......S..sG.J.Og.G.A...E..`b...Z.a.!...9......UPJ...q#O...j..:L..I.A!+@Y<H..VF..L..B.....(..^.@]-.p.6....>3.CU.[8.......X.b..~-f..IL.w..H......>... .c&K...t]...S.Xg.....'........x2..A..TW.B.z]..O.....(......\|u4O".J.....o..2K....ls...1.i.._;Kx.X..pj!..............W/..<..B_....RW;....v.....l.T......$hMI\.v..}.0..O..........`....5..5...d.&..dL...m..v~.C>.=........~>...U....[wz.c..Q.'.....y=.."..k....h.+`.O..ZT..uj;..P[.P[#Z..:...{U..w..d.r...H.~s.......w....&q....RM.....<{mThSa..}.....1m.$.4.m.vdi..4k..r.W..574...r...f..R.......wqN9...r...}Z<_..nDFV.._F..C=.....7k.6.@r.C\|...7h.6.........x.U.=g\$r.m3m2.......!LW.."...8.6.n..{.JE..

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	718
Entropy (8bit):	7.611137599952794
Encrypted:	false
SSDEEP:	12:6v/7WH2lL4T8BkBhwSmzryy5XFaBZpoMMDMV4MbT3ridAJe4zjUV:mlLW8BAiV/yylFaBoVDMPLrY54zjUV
MD5:	1AEF4A6CA0B40E75D5A0BCB5BF096E8C
SHA1:	3D4744A204A769ED68B9D091A37751C646803483
SHA-256:	2A46B7FF978EDF5D69F9035446327125E5A01EA7961059D8DD766A5243331C7C
SHA-512:	28760D97AE4FEEBA1469A24D572EE7236989E37307B76DFB01BEA553FE94B476D05DF0A1AEAD04EF6F34D5F5768BB14A6B104B2B8BF061E1376FF2511E4AE184
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... ......s......IDATH...iH.........2".......(..&ZX^3.V....)JH...EB..B%.l..Ysk.hJ.SW.Z.Lai.YYb.._C. .....<..?j.+IS6.j.....).[...$[.E._%HB.<{<..d....p!kH....3....\p$..-..}.."q..E.......3Al..-.......y.;Y..^=..x.e;.E.P....N;2.7^...n.H..>?.5......C.Afi..1.N.<.A.W..2k.m...Z'b....2.Y0ek.n..81....#.,2.. .%f...ty.E..&(....F.T..vy~.7.ch....4.=Y.... e...e..T...E...h.o7..?......x)<..._...LH.6....E.w...(.....?1..."....;L..\.-....... ..\b6&-G8...,.P VD&W..}..oD .#h.-4...X}.\|..s...2D..$....8.s..O....b..W..D<@..P"l.eO.qHY......5D..Y.....C..P.-:....D..x........Y.e.u6..Y..^..7P.gh.)...d.T..\|...tg.D.ZS.A..x..p....nc.9.Hc~w...FR8.}..G.w..\Y.....nK.b...H+....ets.._....IEND.B`.

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	2664027
Entropy (8bit):	5.671479561622741
Encrypted:	false
SSDEEP:	24576:b++YzzOIf0oaIws1Tm28sLZUDsQ++h5AMFHsZd:b++Yzzk/Iws1dZUDsQ++h1o
MD5:	411BAC94979D92A532685B7EDC53DFE3
SHA1:	CBEE85371F3C90D3A778E5C92FD96D6286D496C3
SHA-256:	1641848AED75A5C1757DBAA9F11DE1C0FA75087D4F6B56924BF516F7D2AB1624
SHA-512:	329E39FBDB90638D2A8CD9C9D7DED276976A30EF3B8B1A703E481C3E80E4968884786E21C7ECC3A9ECEEFD458A9566E04995B42597D7C7952569CB85A6D4A399
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=0/excm=A9AtR,ABxRVc,AD6AIb,Adehte,B0xr7b,BH66lf,BVlhmd,CX5LId,D1J6He,DwnPgd,FljZ5,FmnE6b,FuQWyc,G4tpde,GLGZs,Ghqpae,H5Kvfd,JxE93,KbVV9d,KzZUob,M4w02c,MRb7nf,Mvtsf,Mxvwsd,Nly0kd,NsEUGe,ONYJsd,Oa7Qpb,Ok4XMd,Ollhtb,P4P2Yd,PX0cP,PoJj8d,PvSBGf,Q6cvgf,SJv1S,SLDaee,SMP3Ge,SfrWY,SiRWre,TO0csb,Trirbc,TurKxc,Tzd4Yc,U3Ovcc,UQpTU,UiPhkb,VZLyBe,WH3Khc,Wx0Z2d,WxJ6g,X6KoRc,XHo6qe,XbupY,Xk0c,XkocRe,Y2uByd,Yltq7c,YuNOCb,ZgKcee,ZrXR8b,Zudxcb,ZyUK2d,adn7N,ak946,bXyZdf,cKV22c,dI5Ii,eTv59e,erGeSe,f1YgBd,fNMhz,hU1IHe,hfJ9hb,hj5Zu,i5w0Yc,iAQA6,j0qO9b,jkRPje,kCkfUb,kOSi0d,oXRDzc,pPanAd,pTgt2d,pbYjsd,pqUxUc,qngJBf,rL2AR,ra3uhb,sU6eaf,tlA71,tzTB5,uUhTh,vJPFse,vbjdXc,vhpQNc,vymBNb,wKa2Bd,xB2dQd,y0l7mc,y25qZb,yChgtb,yuQBec,zjNhL,zoFt6e,zs9f9d/ed=1/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/m=syh3,syh4,syh5,syh6,syh7,syh8,syh9,syha,syhb,syhc,syhd,syhe,syhf,syhg,syhh,sy1d8,sy1d2,sy1d1,sy1ds,syi7,syz6,sy1e3,sy1fi,sy1kd,sy1kh,sy1ks,sy1kt,sy1ns,sy1ww,sy25b,sy26o,sy26q,sy2m0,syom,syoo,syop,syoq,sy5ao,sy5as,sy1np,sy5aq,sy5at,sy5pm,sy5pn,sy5po,sy5pp,sy5pq,sy5pr,sy2fn,sy5ps,sy5pt,sy5pu,sy5pv,sy5pw,sy2fl,sy5px,sy5py,sy5pz,sy5q0,sy5q1,sy2fr,sy5q2,sy5q3,sy5q4,sy5q5,sy5qc,sy5qd,sy5qe,sy5qf,sy5qg,sy5qh,sy5qi,sy5qj,sy5qk,sy5sw,sy5sz,sy5tc,sy5t9,sy5ti,sy5tj,sy5tf,sy5th,sy5tg,sy5tk,sy5tl,sy5tq,sy5uj,sy5s5,sy5s6,sy5s7,sy2m6,sy2m7,sy2mo,sy2mq,sy594,sy5u6,sy5uv,sy5uu,sy5ve,sy5vs,sy5vu,sy5vv,sy5xy,sy5xz,sy5y0,sy5ya,sy5yd,syo5,syod,syp1,sy5au,sy5lm,sy5lo,sy5lp,sy5lq,sy5lr,sy5ls,sy5lt,sy5lu,sy5lv,sy5lw,sy5lx,sy5ly,sy5lz,sy5m0,sy5m1,sy5m2,sy5m3,sy5m4,sy5m5,sy5m6,sy5m7,sy5m8,sy5mp,sy5mq,sy5mt,sy5mv,sy5mw,sy5mx,sy5my,sy5mz,sy5n0,sy5n1,sy5n2,sy5n3,sy5n7,sy5nc,sy5on,sy5oo,sy5op,sy5oq,sy5os,sy5ot,sy5ou,sy5ov,sy5ow,sy5p1,sy5p2,sy5p3,sy5p4,sy5p8,sy5p9,sy5tp,sy5tw,sy5tx,sy5ms,sy5ts,sy5uh,sy5mr,sy5up,sy5uw,sy5ln,sy5ur,sy5ul,sy5yf,sy5yg,sy5ye,sy2dl,sy5ty,sy5yh,sy5yi,sy5yk,sy5yj,sy5yl,sy5yn,sy5ym,sy5yo,sy5yq,sy5yr,sy5ys,sy5yt,sy5yw,sy5yu,sy5yv,sy5yx,sy5yp,sy5z1,sy5z2,sylb,sylf,sy5z0,sy5z3,sy5z5,sy5z6,sy5z7,sy5z4,sy5z9,sy5z8,sy5za,sy5yz,sy5zc,sy5zb,sy5yy,sy5ze,sy5yb,syjr,syk9,sy1df,syl4,symc,syme,symg,sy1dg,sy1dh,syjw,sykk,sy1dk,syk8,sy1g7,syj3,sy1fk,sy26m,sy1cg,sy5u9,sy5u8,syjs,syk2,sy5zl,sy5zk,sy5zh,sy5zn,sy5zm,sy60a,sy60b,sy60o,syka,sykd,syj9,synb,sy13c,sy13t,sy13u,sy1cm,syjq,sykb,sy1ct,sy1f0,sy223,syiq,syis,sy26l,sy2me,sy5ax,sy5io,sy5mb,sy5mc,sy5md,sy5me,sy5mf,sy5mg,sy5mh,sy5mi,sy5mj,sy5mk,sy5ml,sy5mm,sy5mn,sy5mo,sy5mu,sy5oy,sy5p0,sy5p5,sy5p6,sy5p7,sy5pa,sy5pb,sy5pc,sy5pd,sy5pe,sy5pf,sy5pg,sy5ph,sy5pi,sy5pj,sy5pk,sy5pl,sy5or,sy5oz,sy5us,sy60r,sy60s,sy60t,sy60q,sy5ol,sy5st,sy5sv,sy5u1,sy5u2,syld,syk6,symx,sy1cu,sy26p,sy5ox,sy5q6,sy5q7,sy5q8,sy5q9,sy5qa,sy5qb,sy5r3,sy5r4,sy5r7,sy5r8,sy5r9,sy5ra,sy5rc,sy5re,sy5rq,sy5rr,sy5rs,sy5rt,sy5ru,sy5rv,sy5rw,sy5rx,sy5ry,sy5rz,sy5s2,sy5s3,sy5s4,sy5s8,sy5s9,sy5sa,sy5sb,sy5sd,sy5se,sy5sf,sy5sg,sy5sh,sy5si,sy5sj,sy5sk,sy5sl,sy5sm,sy5sn,sy5so,sy5sp,sy5sq,sy5sr,sy5ss,sy5su,sy5un,syhi,sy26s,sy58m,sy5an,sy5r5,sy5r6,sy5rb,sy5rd,sy5rf,sy5rh,sy5ri,sy5rj,sy5rp,sy5s0,sy5s1,sy5sc,sy5ug,sy5u7,sy5uk,sy5ql,sy5qm,sy5ux,sy5u4,sy5uy,sy5qu,sy5r0,sy5r2,symb,sy1dw,sy1dx,sy5qt,sy5qv,sy5qw,sy5qx,sy5qy,sy5qz,sy5r1,sy5zf,sy5zg,sy5zq,sy60h,sy60u,sy60v,sy60x,sy60y,sy61c,sy61s,sy60w,sy60z,sy610,sy611,sy612,sy613,sy614,sy615,sy616,sy617,sy618,sy619,sy61a,sy61b,sy61d,sy61e,sy61f,sy61g,sy61h,sy61i,sy61j,sy2fp,sy61k,sy61l,sy61m,sy61n,sy61o,sy61p,sy61q,sy61r,sy61t,sy61u,sy61v,sy61w,sy61x,sy61y,sy61z,sy5zs,sy5zu,sy5zt,sy5zr,syp8,sy60m,sy620,sy622,sy623,sy621,IPPcAe,sy32w,sy624,bTGkSd,sy5zi,QzG4od,FCJvZd,sy32v,UagZge,sy626,RagDlc,oUlnpc,ALJqWb,R2kc8b,sy27h,sy5l8,sy5lj,syxc,syxe,syxd,syxf,syxi,syxj,syz2,syxg,sy11q,syv0,sy1c9,sy1io,sy1ip,sy5a0,sy5t6,sy5t5,sy5t7,sy5t2,sy5t1,sy62d,XTUZWc,sy2n5,sy32y,sy5tu,sy5tv,sy62e,sy62g,XT8Clf,sy339,dhnGve,syvj,sy33a,sy5a8,rQR4vd,sy32z,yezgIc,syyt,syyx,syyq,syys,syz3,syz4,Ah7cLd,syyy,syz5,WOJjZ,syz1,sy10f,sy46v,sy5a9,sy63f,sy63g,sy627,sy6e1,sy6hd,Da4hkd,sy25d,fVaWL,sy46s,xfmZMb,sy10e,sy26u,sy26v,sy26y,sy26z,sy26w,sy270,sy271,sy36g,sy5a7,aD8OEe,SMquOb,sy10k,sy10l,sy10m,sy10n,d5EhJe,sy10r,zx30Y,syzh,syzi,sy10t,sy10v,sy10w,sy10x,sy10z,sy110,sy111,sy10y,syr0,sy113,sy114,sy112,T1HOxc,sy115,Wo3n8,sy3yw,sy6e3,UzbKLd,sy11o,sy1h7,C8ffD,sy1h8,sy1ha,ZUBru,sy1h9,sy1hb,sy1hc,rTuANe,sy25s,yfZcPd,syzo,Dpem5c,syy0,sy1h2,sy1h3,sy1h6,Fy1Pv,sy36a,msmzHf,sy1hv,NEW1Qc,xBbsrc,sy1hx,IX53Tb,sy2kv,ROaKxe,sy2kw,sy2kx,pj8IAe,sy34h,vRe0ve,sy26c,sy34f,oWVrne,syuy,syut,syuw,syux,sywl,sywk,syy3,sy1iv,sy1ir,sy250,sy251,sy26d,sy2lb,sy34i,sy5al,sy635,ogmBcd,sy1is,sy34e,Gg40M,sy3ps,GU4Gab,sy4qf,sy3o8,sy16o,sy170,sy172,sy1lv,sy646,sy644,sy645,sy643,sy647,tboZfc,sy3p6,T5VV,sy3nc,aDVF7,sy3pu,rhYw1b,sy1hh,sy1ka,sy1kg,sy1kl,sy1kp,sy1kq,Hlw0zd,M6QgBb,sy1ku,sy1l6,EO13pd,MpJwZc,UUJqVe,sy75,sOXFj,sy74,s39S4,NTMZac,nAFL3,oGtAuc,sy7x,sy7y,q0xTif,y05UD,sy1sc,sy2br,sy1av,sy1aw,sy1ax,sy1se,sy2ii,sy1ay,sy1az,sy1n9,sy1na,sy1nb,sy1b6,sy1nf,sy1ng,sy1ne,sy1nh,syem,sy1nj,sy1ni,sy1nk,sy1nl,sy1nm,sy1nq,sy1nu,sy1nz,sy2nc,sy2nd,sy64f,sy1nt,sy1nx,sy1ny,sy1o3,sy1o6,sy1o8,sy1zd,sy64g,sy64i,epYOx?xjs=s3"
Preview:	_F_installCss(".gUAcff .niO4u{height:32px}.UZXANc.gUAcff .niO4u{top:3px;height:0}.mKjEAd.gUAcff .niO4u{height:0}.gUAcff.rlt7Ub .clOx1e{margin:5px 16px}.gUAcff .clOx1e{line-height:12px}.gUAcff .R04TOd,.gUAcff .d3o3Ad{height:16px}.bacHod.gUAcff .R04TOd,.bacHod.gUAcff .d3o3Ad{height:14px}.gUAcff .WoA9Zd{height:16px}.expUPd .niO4u{background-color:#4285f4;color:#fff}.expUPd .QuU3Wb{color:#fff}.NQYJvc .d3o3Ad,.NQYJvc .R04TOd{border-radius:4px;height:20px;overflow:hidden}.NQYJvc.rlt7Ub .clOx1e{margin:5px 16px}.NQYJvc .WoA9Zd{height:20px}.NQYJvc.gzV1t .niO4u{min-height:40px}.NQYJvc.PrjL8c .niO4u{height:40px}.zqrO0 .niO4u{background-color:#fff;border:1px solid #dadce0;color:#4d5156}.zqrO0 .QuU3Wb{color:#4d5156}.zqrO0.k0Jjg:hover .niO4u,.zqrO0.k0Jjg:hover .QuU3Wb{color:#4d5156}.zqrO0.k0Jjg:hover .kHtcsd{background-color:rgba(60,64,67,0.08)}.brKmxb:focus-visible .zqrO0.k0Jjg .niO4u,.brKmxb:focus-visible .zqrO0.k0Jjg .QuU3Wb,.zqrO0.k0Jjg:focus-visible .niO4u,.zqrO0.k0Jjg:focus-visible .QuU3Wb{col

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1603
Entropy (8bit):	5.2727801090429285
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8x/S8f:3qD+2+pUAew85zsaA
MD5:	78FD7C1A980B9162702E6F984A25B7A6
SHA1:	E832ABE897CDAA5E36131733AF619F174AD0F9C5
SHA-256:	1C5A3539A6FBE5420A519540FF6662EFEACB0BB1B9B8314C74064694A0D52C0B
SHA-512:	06B0C9A98D1F6B5BCF81D81574258B7D479579CD80FC51105C58B99263D802EFD64ECF6B5A9A3105C1046FB7EE3F776547E1593436AFC3E6C0820D149C0913BA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	161936
Entropy (8bit):	5.226454293247354
Encrypted:	false
SSDEEP:	3072:G3J1SWSTVUz+BsYIGrRY05Em/ETHSQHZP0:G3PxrMsFaFEHTyYZ8
MD5:	72C90E430925B2A8B2F2F5001AFC3D59
SHA1:	87A71D90E7C2E48C83088B2FCB7C636B0A380F54
SHA-256:	A973E1C0ACC7360C0B0BE4ADC5BF540B6A187A65D5750222F4675AE2E39BBD57
SHA-512:	6BC9AE8EF2770CED15960EE5878CBD7E1F2C7009ED35CD84375D7726AFD282B3CC942C84A399D66D3D4C1CE692FE34F9174223604FED801F328A80CFAA6C1862
Malicious:	false
Reputation:	low
URL:	https://www.google.com/xjs/_/js/md=1/k=xjs.hd.en.j7vH50XSWl8.O/ck=xjs.hd.3mhtCf28lXo.L.W.O/am=BAAAAAAAAAAAAAAAAAAAAAQAAAAAEPUTDgFsgACBABBggAAgAICAFKQQBAMAEPBQJgAAACZAYAhYCogKvOcBAJBAFQAAAAAAEAwiAAAACAAAoAMAACCgEdAAhIBKQAAAAADyACA4ABhEEAAAAAAAAAAAAAABTBAMLkgAFAQQAAAAAAAAAAAAAKSkycVAAg/rs=ACT90oEQOKoPcm_mXy_VnoCFj9ts7y2bDw
Preview:	{"moduleGraph":"quantum/t7xgIe/ws9Tlc/cEt90b/qddgKe/yxTchf/sy6s/sy6t/sy6u:6,7/sy6v/xQtZb:5,8,9/sy6w/R9YHJc:8,b/KUM7Z/wrzEXb/TxCJfd/WVDyKe/sy6x/Vj9hpd:g,h/tafPrf/dtl0hd/lLQWFe/Il1M4b/eHDfl/FONEdf:k/JiVLjd:k/FAUdW:k/dMZk3e:n/ofjVkb/qaS3gd/T9y5Dd/yiLg6e/Q7BaEe/tRaZif:u/F2pEhc/n73qwf/UUJqVe/MpJwZc/sy6y/nAFL3:12/sy6z/NTMZac:14/sy70/sOXFj:16/sy71/oGtAuc:18/sy72/sy73:1a/byfTOb:1b/sy74/sy75/sy76/sy77/LEikZe:1b,1d,1e,1f,1g/sy78/xUdipf:1i/sy7a/sy79:1i,1k/sy7c/sy7b:1l,1m/sy7d/NwH0H:1j,1n/sy7e:1g/sy7f/gychg:1h,1p,1q,1r/Ulmmrd:1s/rJmJrc:1a,1e/GHAeAc/Wt6vjf:1e/lsjVmc:1d/IZT63/Vgd6hb/sy7h/sy7i/sy7j:20,21/YNjGDd:22/iFQyKf/sy7l/sy7m:25/sy7k:1y,22,26/PrPYRd:23,27/sy7n/vfuNJf:29/sy7o/hc6Ubd:24,28,2a,2b/sy7p:12,18/sy7q:26/sy7r/q0xTif:13,14,16,19,28,2d,2e,2f/sy7s/rLpdIf:2h/w9hDv:1p/JNoxi:1t,2j/SNUn3/ZwDk9d:1i/RMhBfe/U0aPgd/io8t5d/sy7t/KG2eXe:2o,2p,2q/Oj465e/sy7u/FloWmf:2r,2t/Erl4fe/RuUrcf:2s/JsbNhc/Xd8iUd/sy7v/d7YSfd:6,7,2x,2z/sy7w/sP4Vbe:31/sy7x/ul9GGd:33/kMFpHd/sy7y/sy7z/sy80/sy81:36,37,38/COQbmf:39/uY49

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1208
Entropy (8bit):	7.769877645738661
Encrypted:	false
SSDEEP:	24:KoAOJvtgLEYLeCau8NmuLPUx2y93pV8XqD9ad6H:KoAIvtgLLeZ3NPUxtp
MD5:	FD626B6BB9884A947AC37B52A791A16B
SHA1:	66F7DC59DCBC53E86A62031B96D7320B67BCEA50
SHA-256:	54CCE85838C961A845EBB5BCDAC700AE3C19CD5952148D6E19210796ADA60A37
SHA-512:	DD46D1A0D0081DFD3880F49F683714C9236D7E695B3C6D2C5B0ECF0B42B3F524A79A12C49B5435F3B956D478C59AFB0AB6446D9D954C45D7ADAE0B93269A7548
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............[....pHYs...%...%.IR$.....sRGB.........gAMA......a....MIDATx...o.E...vZ.q.-i......"..5......CB.....@..A%...H...WTGP..!.#....*..B)....B.aI...zg:...............~..y......A..\|9.goH'.H.ogyS...?O....=...8..3 X.....#..!...,..pL.#.......?.4u...!E...W.J.m..n.d..MF.p!..).^.b.^.......H..Z..P.#R ...f.........mY.dE.f.q8..?~......S.#..M...?..h...'.Y.mA.O/...Cz.2.r..}..,e.$..O_.m.7.......}4...f.y..~.....w..&.u.r...z[..1..[Z.psN..L..^{.e$...'.....m.=A.v.\|...o..f,...~.x6K.v...S.?.s.<.em...v.=..Ch`p7.^=%..JP....aL]{.J.h.L-.D.............D y.ZBU2.9.]O....P]Y:DA......;.^.V1......Vt.......y... .$7.W#....Bt..%I(.........`.s..JO$75P.<:.34.#.\.....5....c.>.F.qU..[D.j@.Ec..fTO....?...j3.......y,D.v.A'.....3Z.R.G....@{.......xd...!.......$...R(....#.....K#.........XT.+\|...v.P.ht....m...f.{\|...}...x../..f_.-%...[.......y.Z..~@;........".."[...._.j.....y...`...K"..$z......"..x.TZ...h._.y..[!...........\|B9..M...K7.Q.\X....cC#F.l

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	896
Entropy (8bit):	7.709409327049996
Encrypted:	false
SSDEEP:	24:wCpqK43OcpQ/IUkjpVRYosC4xJJYkR4MwHoYXuLgUDmBvSx4WO73lz:5YBPqI9jZYZxJJLZwIY+ZCPWO7Vz
MD5:	982DDA17C63BCFB07F40BEE96CD7024E
SHA1:	034E1A7D4B7B07F6AA0DFF0F3AA6D6F83794D384
SHA-256:	ADB1E276E99E6FB259616C20340E63379E2A41804AD84757E1D4BFB0D01D6EA5
SHA-512:	BC74B4F1FA850E9DAFB04C785A4063047935C3A00653A113F6C994AB44286E1A0F7E41161C8DBFDF4542BDFD9414520DBBA2DDFD7E9AE908A57ABABF3DDDC4D3
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/shopping/deals/pet_supplies.png
Preview:	.PNG........IHDR... ... .....szz....GIDATx...C.,G...{\|'.m..Ml.mk..v6.....s.g.pNlo....#.n.......p.=f.W.Dh."...;%.{..i..I._v.&.Z...3yT{_y...c.=Z.@.O\|..e.H......Ll{..'.>...{.'4...`.... b..>W5}F...3z.1.....X.e..0G6./.......30.G..W.....d..[.wl7.4&.l..U.cILD.M..a0.r...@E0.....4.."> .Ha.i.~......~1.Y..B.n"..'.a.)#...=....I..b..X.......\|.?dM........R..Vi.~..#.M>....,?0.:..<.r...O?...NKp...9$.?..H..-.0.Ul...J.T.9O...zG.V%K..hK..f........W..L1.$.4.....\-b...o..G..`ACB..d...xk.d......)......x......;....c..D....4.N....Z....@.F..!Z...0.a..N,.5...z..(...a0g....._,..g.-.z...>'..D.^...A...=y.ZD.D.xIp.c.0..^Sb4..4.l...J.h.......d._-.d./..y..`f..B..h...Tp=m..1.......I..#...iUi....X ...H_#...fx.7K...o.{>..J..1&+.7..<..s.l.+I...m..AS...'...y..h...~..k.]:TG..mC............w...lhk.c....}../..:.t.t.;..\{..}..x.q..n...3...ttttt\|..1.d.y2.....IEND.B`.

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 186x201, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	8746
Entropy (8bit):	7.972187920105962
Encrypted:	false
SSDEEP:	192:iGIWcrzyOrjN4XqytwUZL7RrlM0UlicLh9F4NMJhn0MIfmJIfYQ/:eWBOy6ySU9kF19F4AvDqfYQ/
MD5:	06BFCEBBDF576FFAE04DA29B9C7B9E5E
SHA1:	DEDE875341C57C7FFEE71B511DEBFD9C0E7DF6A9
SHA-256:	455D6F28B7A547DDA931C26A1A0282A7600D84A69ADDAE99C30B1932509B40C8
SHA-512:	D8AE45F0C9016161CB4DD7CC69CC5BA1FB0D04266F791CE2687727F9AABC153D565894AC02A733F5CE0E5FAD706B28134EB04AD5DAD5FDCB4DCF862B11D2698E
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn1.gstatic.com/shopping?q=tbn:ANd9GcTBV4ISHicZPT2tBWaDwl5Nzvrb_3BpbU0ONd2FtQzC0WCu5-qKU00KhnAu4ZArwgsRHVx8FTR-xtto_j8_XifvT6AxHILp4acN9GYVLWbuOvn1os8T9Wia
Preview:	RIFF""..WEBPVP8 ."...p.......>i.E."...x@....j`.'...$=....?..c......h...q......B\|..I.....O...?N...m.......W._...~..%...O.?.....?._r....~........s.{.w.............?.....>E?..............Mc.2.g...~.{.c..MF.....]..g.......w....?..B=....o.._...._`?/..x}.........?....,z..C....../.?e......E..d...1..@o[..k....z_...~.J.x........^.Q.....".......H.....D.G`9Q...H.+.4.Lj.5....."%...$5.......nW&../..I.yI.1rU..+...JH....7..v.........F.8.Rb..e...T...l....ucx+P.....5'?.........iD..L.N........U....<.!.5..y...Z.....R.d..a.L...$T-.Z61.....".2.Y..x.wt}?.C.M.u_zl)#.f..&.)A.:8wX`."..<..'...br......x>..[.i.c....O.../.n.\|r77#.Q&....X.@L..OT.J.-4..<I...a....~.9._........1..X.....a[......s..W.Yg.Eg8.....x...g.c..ha.c0..N...@G....~S.7..C....v.K.>.^e.....D.[.f..J.......k..s"KD0G.......d.n?.@......5.E=.C.."3..'V&Dl.vcG.O. .x..1.*......#Y)....U..5....z..B...-.....aR.p.,>....yU.<.....=.\|.W;.l.$. ....(.2.........i.....(o\.+QGq....4.:<.{..O..P.]&\|.e:....t.J..2.&...pC^.n....

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	386712
Entropy (8bit):	5.206273677378181
Encrypted:	false
SSDEEP:	1536:Z1UkZpMCztkOgVLxkTIT36QpoQpAKza3M6oyL63Mln4byaOx5jUDEnXrDJc7MvBP:Z1UkZ4OgVyoyfUodahVnboRN
MD5:	FE1C53D51CB92C2A5D115AAA327F89FF
SHA1:	121246C952D00CBE64196F9AFB88823F1190CE13
SHA-256:	0D3110815E47322FA8C8821C53234F4F90FF9107501B4D74741DFE6E8250E24A
SHA-512:	9F48F3DA80ACBAC31D08D6CCFEE5011694E648274E8A27DE0A44BEE4E20247D138382A9EE4F582B17ADE6992E65794F048E046DC59024AB06EEE425881B8CA11
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/63e90c30/www-player.css
Preview:	@charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);touch-action:manipulation;-ms-high-contrast-adjust:none;forced-color-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode{background-color:#000}.ytp-big-mode{font-size:17px}.ytp-autohide{cursor:none}.html5-video-player a{color:inherit;text-decoration:none;-webkit-transition:color .1s cubic-bezier(0,0,.2,1);-o-transition:color .1s cubic-bezier(0,0,.2,1);transition:color .1s cubic-bezier(0,0,.2,1);outline:0}.html5-video-player a:hover{color:#fff;-webkit-transition:color .1s cubic-bezier(.4,0,1,1);-o-transition:color .1s cubic-bezier(.4,0,1,1);transition:color .1s cubic-bezi

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5879)
Category:	dropped
Size (bytes):	5884
Entropy (8bit):	6.056350583193441
Encrypted:	false
SSDEEP:	96:tjgsFsrfyxhxa3/5l6uhwWyLRv8BNimQJI3KMNVCAZLrFZiYX0p7Cqg3L:ZDFsjuhxa3h0wjygimj1NVrZlgv49
MD5:	C698CCD8BB95636C56AF4C4A9F8835A9
SHA1:	C3B22BBBBC34F6221DC6E0AE879300D6546F18FD
SHA-256:	C75E1AEB004E553E585FECD5535C3A97AE6441C7B6F4CE2D7A9BAEC2296BB846
SHA-512:	4B4CCD9D8FF2DB2C26022800CCE123AD109ACC1F26C73D6416EC5D70579393F54E06344C5CE0ABAFEB595E41020862A35366812527DBCA765FEA31399941F799
Malicious:	false
Reputation:	low
Preview:	)]}'.[[["veterans day",0,[512,650,362,308,67],{"zl":90000}],["aqi",0,[512,650,362,308,67],{"zl":90000}],["shop sneakers deals",0,[512,650,362,308,67],{"zl":90000}],["shop deals on toys \u0026amp; games",0,[512,650,362,308,67],{"zl":90000}],["shop tvs deals",0,[512,650,362,308,67],{"zl":90000}],["slickdeals",46,[512,650,357,357,199,465,362,308,394,439,468],{"lm":[],"zh":"Slickdeals","zi":"","zl":90000,"zp":{"gs_ssp":"eJzj4tLP1TcoqsopqKhSYDRgdGDw4irOyUzOTklNzCkGAHqWCM8"},"zs":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAMgAAAA6CAMAAADC3Oa+AAAAt1BMVEX///8AAAAOc7oAb7gAcbkAbLfy8vL39/dDQ0PIyMgmJib7+/u1tbXj4+PBwcHr6+ssLCykpKSWlpZfX1+JiYkhISFsbGwNDQ0aGhra2tpQUFBaWlp7e3sAaLUWFhaQkJA3NzfR0dHr8vlgoNDl6faovd/K1utmlcza4vG8y+hBj8g9gcLc6vUseb+LqtYAer56sdmYvNwsh8SjxuK80+h8otGUs9hcjcmIudx1pc/J3u5oqdVRl8tBH1YIAAAKeElEQVRogdVa2XbiQA71vuAdg8FmdwBDiEl3CCSd7v//rpFULi/YIXNmHhJ0TjdgCqNburqSighCwz4epZdfH8Ld28ezLEny7Pnvk/Xdrvxfpv9WJTJ59vLrnrE8PchSYYo6e3lf63cK5lVSpMoQy+80vUMsJbNKk9XZ4+/13WF5epSllsmq/Hi6MyxNZl

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 186x201, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	8746
Entropy (8bit):	7.972187920105962
Encrypted:	false
SSDEEP:	192:iGIWcrzyOrjN4XqytwUZL7RrlM0UlicLh9F4NMJhn0MIfmJIfYQ/:eWBOy6ySU9kF19F4AvDqfYQ/
MD5:	06BFCEBBDF576FFAE04DA29B9C7B9E5E
SHA1:	DEDE875341C57C7FFEE71B511DEBFD9C0E7DF6A9
SHA-256:	455D6F28B7A547DDA931C26A1A0282A7600D84A69ADDAE99C30B1932509B40C8
SHA-512:	D8AE45F0C9016161CB4DD7CC69CC5BA1FB0D04266F791CE2687727F9AABC153D565894AC02A733F5CE0E5FAD706B28134EB04AD5DAD5FDCB4DCF862B11D2698E
Malicious:	false
Reputation:	low
Preview:	RIFF""..WEBPVP8 ."...p.......>i.E."...x@....j`.'...$=....?..c......h...q......B\|..I.....O...?N...m.......W._...~..%...O.?.....?._r....~........s.{.w.............?.....>E?..............Mc.2.g...~.{.c..MF.....]..g.......w....?..B=....o.._...._`?/..x}.........?....,z..C....../.?e......E..d...1..@o[..k....z_...~.J.x........^.Q.....".......H.....D.G`9Q...H.+.4.Lj.5....."%...$5.......nW&../..I.yI.1rU..+...JH....7..v.........F.8.Rb..e...T...l....ucx+P.....5'?.........iD..L.N........U....<.!.5..y...Z.....R.d..a.L...$T-.Z61.....".2.Y..x.wt}?.C.M.u_zl)#.f..&.)A.:8wX`."..<..'...br......x>..[.i.c....O.../.n.\|r77#.Q&....X.@L..OT.J.-4..<I...a....~.9._........1..X.....a[......s..W.Yg.Eg8.....x...g.c..ha.c0..N...@G....~S.7..C....v.K.>.^e.....D.[.f..J.......k..s"KD0G.......d.n?.@......5.E=.C.."3..'V&Dl.vcG.O. .x..1.*......#Y)....U..5....z..B...-.....aR.p.,>....yU.<.....=.\|.W;.l.$. ....(.2.........i.....(o\.+QGq....4.:<.{..O..P.]&\|.e:....t.J..2.&...pC^.n....

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (732)
Category:	downloaded
Size (bytes):	3499
Entropy (8bit):	5.507711464501561
Encrypted:	false
SSDEEP:	48:ZfSfH9q3qC4jZl/xxET3HqQ4LVsF4/anOWWQbXInlr4ZWovxUoGvBZkBtBCzVKKh:8fdu94j3xxEDKtL2uS4rK+oGXx6Bwx
MD5:	1B7FE2E4ECD38623B20FB96141CFD786
SHA1:	930301051BAE35DDB264452A83F759BF0FABE008
SHA-256:	96637F44AC65555C47C63327EA4E1B547001D7892B93FB86666FCEB1967F3C29
SHA-512:	E157C5F0E5FCAD842D98148D62C4D5B004C7EDB3556930CB28044160FC5A9F80BAEEEA31EB75C308B0B19539B4BAFEEB445F2207973CF2506D3958FE36FF95E9
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-one-google/_/js/k=boq-one-google.OneGoogleWidgetUi.en.0ABcWAGioow.es5.O/ck=boq-one-google.OneGoogleWidgetUi.d1uIQnUcq8Q.L.B1.O/am=CGFIGw/d=1/exm=A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fKUV3e,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pw70Gc,s39S4,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,yDVVkb,yYB61,zbML3c,zr1jrb/excm=_b,_tp,calloutview/ed=1/wt=2/ujg=1/rs=AM-SdHvKQOpXYagvgeJ7sddAjZD90JtrGQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_OneGoogleWidgetUi=this.default_OneGoogleWidgetUi\|\|{};(function(_){var window=this;.try{._.p("Wt6vjf");.var jy=function(a){this.wa=_.y(a,0,jy.qb)};_.F(jy,_.D);jy.prototype.Xa=function(){return _.Wj(this,1)};jy.prototype.qc=function(a){_.nk(this,1,a)};jy.qb="f.bo";var ky=function(){_.bn.call(this)};_.F(ky,_.bn);ky.prototype.hb=function(){this.Gr=!1;ly(this);_.bn.prototype.hb.call(this)};ky.prototype.g=function(){my(this);if(this.Pk)return ny(this),!1;if(!this.Ns)return oy(this),!0;this.dispatchEvent("p");if(!this.Up)return oy(this),!0;this.Po?(this.dispatchEvent("r"),oy(this)):ny(this);return!1};.var py=function(a){var b=new _.ht(a.Ux);null!=a.Gq&&b.i.set("authuser",a.Gq);return b},ny=function(a){a.Pk=!0;var b=py(a),c="rt=r&f_uid="+_.Zh(a.Up);_.Io(b,(0,_.E)(a.i,a),"POST",c)};.ky.prototype.i=function(a){a=a.target;my(this);if(_.Po(a)){this.Pn=0;if(this.Po)this.Pk=!1,this.dispatchEvent("r");else if(this.Ns)this.dispatchEvent("s");else{try{var b=_.Qo(a),c=JSON.pars

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9124)
Category:	dropped
Size (bytes):	9129
Entropy (8bit):	6.075289156472673
Encrypted:	false
SSDEEP:	192:SZBdx6uxI3hMNF8l08lGaCOhx0s0/iqo9HV+7jwTBISe/a+Z4FJJ:Sfvpu3hsu08lGKx0s0/iqo9ikGS8fZ4x
MD5:	7A8A593B830499D50F401D123516C5C8
SHA1:	DE4EE3E76865E838F9EE3A92A89171E5639C6583
SHA-256:	E9D264192FC50F8B879F044CCAE985AC059CD7DD7E6FE6973C000E695681F6AF
SHA-512:	1B328F3D0342A986D237DA58E305D480135B322A9B4A340EA58917372110F0AE1606FB80E085CCF97662BE592BDAF8F09881C3A009E35D23516EF0381ACB906A
Malicious:	false
Reputation:	low
Preview:	)]}'.[[["mike lee",46,[3,143,357,362,396],{"lm":[],"zf":33,"zh":"Mike Lee","zi":"United States Senator","zl":8,"zp":{"gs_ssp":"eJzj4tLP1TewLDMttKwwYPTiyM3MTlXISU0FAEhOBpU"},"zs":"data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAkGBwgHBgkIBwgKCgkLDRYPDQwMDRsUFRAWIB0iIiAdHx8kKDQsJCYxJx8fLT0tMTU3Ojo6Iys/RD84QzQ5OjcBCgoKDQwNGg8PGjclHyU3Nzc3Nzc3Nzc3Nzc3Nzc3Nzc3Nzc3Nzc3Nzc3Nzc3Nzc3Nzc3Nzc3Nzc3Nzc3Nzc3N//AABEIAFAAUAMBIgACEQEDEQH/xAAbAAACAwEBAQAAAAAAAAAAAAAFBgIEBwMBAP/EADoQAAIBAwIDBAcFBwUAAAAAAAECAwAEEQUhBhJREzFBYRQicYGRobEHFSMywSRSwtHh8PFCYoKSov/EABgBAAIDAAAAAAAAAAAAAAAAAAMEAQIF/8QAIxEAAgIBBAEFAQAAAAAAAAAAAAECEQMEEiFBMSIyUWGxBf/aAAwDAQACEQMRAD8AzvWbZLK7ntY50nSCcoJU/K46jyoLyHmI6GiauyWc7KTuzq2/eDVNh+Ieh3pvIgBFYjiu8ds7D1VJ/Su9sgO7bDqaaeHuGbjUws0ztFbZPIq7F/P2UvkyLGrYTFhlldIWPumUJzO0SbZwzjJqs1oynfBHUEH6Vo91wREqjs5Nh37UD1HhyC1YcjlZR3nwb20GOqTYeehlFWKDQ48KhygGr8gRndVBBU7g1wkTFH3doUUa4ZWqc+0EHtz86iw3qxeTBbe3jaCFgqd/KQ3xBqU2WpBvSG0n7g1aO+jka9L/ALMwb1QfW7wN8e/pt30DeGSGQJKpV1GCD4URSxkh04XLshjuWc

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 186x186, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	5644
Entropy (8bit):	7.969486549368608
Encrypted:	false
SSDEEP:	96:fl5qbz6VFZdJN9Kpzx6RogK0WvXl5OA8TqBgwcGYOSCqNqXQx89keM61T:fCbQFLqYfyfDS+gwKdPx8OeM65
MD5:	F7AFF98DDD2BCF61D1EB6528DAB9B9DB
SHA1:	9370C2870A7EAC9137D051B3AFF6BE50771A4F14
SHA-256:	53847D87CC63A9F8E47367E46C7307A7E9F7ABCC2325A6C71D623C6509711626
SHA-512:	4A60A09F56952CAFCDB81E53F68C10FDA661322871F7BF6430CCD5DB7FEFA58E30C4B431F7A1FDF225830A36796E39A7780EAF15800BE6A3CC8B78D1A0BA0C19
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .....N.......>Q$.E#.!....8.....U..g..D~..>.....]QM.S7...\y...t....S.q.G....W._.^..C../hO.....;........o..E>_.O...}!.......B?.......{.-..G.?^........?[}7.o.7.O`O.....~....../..........oM..3_.../.$..~....GmC....(cRv.j.........i.X..t..u,.,..K....t...s.&.X.~A`.....x.:..N..a..../.X.{d...X.g.Z..q...P..j.6.&...v-j..zpB=.q.....T.1s%,..M.mp.b8j(.N...V.........4h..y[..C..u;.\|..>.vO..PJ.M.<U.....lUHj....J....^....i. \|.O7..C....LLiw..i..P>......8.tg.hu....+A..l...!.j......._<m.....).^C(.I..v...?.....K.w.......@u6.l.W,.'.^8...m....#...x.s`.q...e. ...........M......^f....'..,..n.u(/..(Z}..>Hr..{..n..%Hti.!...t............p....!...#.S[..!{!.......GH.....X...aL.s.O.v....N.:..A.I.Z;PV..g....j6<.r....,.FO.#~..\|..:..C....d.....V....O....`D.s.....C....y.%....f._o.....<gn.>;A4......6.B..J.'..P..ij.)....~.I{......!..g.@.....f..&.[kI._.r.R...e2..G.H...{oy..3...../...}..!>_..$=#.8.L_.q.9.S...l.A...a.........H.:l..80U..q...A....N.._..9.-L.^..+...f

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 184 x 60, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3831
Entropy (8bit):	7.925889412012612
Encrypted:	false
SSDEEP:	96:OMa+Lx3VhZ25tO+44s8NUH0Rdv4RzObT1koUpwGx+F:O5+1lP+44s814RidrrGx+F
MD5:	0877987D1BE23418318D595A3A297CE9
SHA1:	F69E2644E31165BD95311C2EF6D563CFEB1BCC13
SHA-256:	FD4D9D732E7A4AF52746EBABE6BB16941EE71AE3E919131AF700CF4E1228A16A
SHA-512:	780B8DB5E9FB5F27AE8E8AFF5FE710F2BDAB37692E8AF19E1F76CA169EDE7D988DB49CEDEC92C0FFF83A89B1539A2A7C2F6922A7E15979BDFB035F9F1F910641
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......<.......p.....IDATx..]..\E.n...n.P.D.`.r.7.cp.Mb.X..C.3"w.....kgf.phE.!.....D.9...P...X$$ ..E.......^.;...f7............5........~..D..Xc.VO..3.....:..gc..@.].SF.......Z:..}.A..'+..CLBb.BO."....=...";m.}./.?.IH...)./......<..5L...~tnq...u...i. d -e..wG.....$x...Oc)3."..L..x.y..........u...+q3c..L&!.....L$...]R.R.N..+..B..e.y..X8E..S.....bi.u."v.k.1.I...]...'l.!.../.7m..-_>i~........6.o.....IH....w..6c\|..L..t....3.....6.....D..,7...#....0..[..... .$.$x.R`..P9nb....G`. ..3...$$...HK..r..}....D.C....\.`.%$.. .$>....I..a...Hpd....3.$$........&!Q..G...7...o..b...D.l\.$../...+.......#....BOs....Kv.LX...j...Z........o=-....e...\|..2.`{.V..Or...1.;mAn.r...(..M.^VW.k.....$..S4/.v..i......ShM.....+5\....#..4HE;.=..I.\|....7XhgK..2..4".......].b.5..?JA.^..].....q.g.3..M..P..7..Q.+..............Q. f..3r5.=1...D6.L.....7-...5a...R5....u.&...V.....8=.4.-..wb.&k.1'.....^L.=;..U4.y.........,x.\.%x:.NEYm.. ...vM..78..y?-.7...(.

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1737)
Category:	downloaded
Size (bytes):	431061
Entropy (8bit):	5.684204738042341
Encrypted:	false
SSDEEP:	6144:KnlKS2+j0jPAsL7syGnYIXycih8F+i1r+QgL0p7LqBB5QhqbNh0IK:KnlwjPAsL7sp+id+Q6b5RhC
MD5:	6559A1D7EFB02642C6F255E53178104C
SHA1:	8D3CAC22C205815349A08B4AFB3B9F89D9A369C6
SHA-256:	3EF7D523D3D8836C74ADA13F279653A92C7D500FEB3942F54D24575F9AFE424F
SHA-512:	6F28D054CB7287820366B98026157DBE9084965DAADD020E59978DAEA839A1B4E658D8B822D913C06966C7165743DB77B53FD068AEEE26F0376A8E5F34D62A1F
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=0/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/m=uKlGbf,sy17q,sy2kj,DpX64d,sy2kk,EufiNb,sy4qw,vTw9Fc,sy1ca,sy1cb,p2I2Je,syum,sy136,Mbif2,syjt,syk7,sykn,sy10i,sy17c,sy17t,sy186,sy187,sy185,sy18i,sy18j,sy1ah,sy1as,sy1at,sy1ba,sy1c1,sy1cc,sy1cd,sy1ce,sy1cf,sy1ch,sy1cj,sy1ci,sy1ck,sy1cl,sy1dz,sy1e0,sy1f9,sy1fe,sy1ff,syj4,syjk,symy,symz,syn0,sy176,sy175,sy178,sy1fm,sy1fn,sy1fo,sy1fg,sy1fj,sy1fl,sy1be,sy1g4,sy1g5,sy1g6,sy1g8,sy1gb,sy1gc,sy1gd,exgaYe,sy33b,wuEeed,sy331,j6kZje,sy25r,sy4tu,sy5lk,sy5ll,BkkW1b,sy330,wRnMub,syyr,syyu,syyw,QE1bwd,sy10j,gSZvdb,sy4wt,sy5a2,SC7lYd,syte,syx2,WlNQGd,sy2ko,sy35l,nabPbb,syx6,syx9,syxa,DPreE,sy1il,sy34g,bpec7b,syeu,BYwJlf,syqk,syui,syuk,VEbNoe,sy2ky,sy2kz,b8OZff,sy2l9,sy2la,qcH9Lc,sypm,sy2lc,YFicMc?xjs=s3"
Preview:	_F_installCss(".Qlb37c{margin-left:2px;margin-right:2px}.tzM4td{margin-bottom:8px;margin-top:8px}.zUdppc{padding-bottom:4px}.bvSTKc{padding:8px}.wok5vf{padding:24px}.Y7Np1.kEUnfb{color:#fff}.Y7Np1.kEUnfb .eU4qJc{background:#dadce0;box-shadow:0px 1px 3px rgba(60,64,67,0.08)}.Y7Np1.kEUnfb .epKwIc{background:currentColor}.Y7Np1.WJlIqb{color:#fff}.Y7Np1.WJlIqb .eU4qJc{background:rgba(255,255,255,0.5)}.Y7Np1.WJlIqb .epKwIc{background:currentColor}.Nngxpe{border-left:1px solid transparent;border-right:1px solid transparent;height:100%;left:0;right:0;position:absolute;top:0;-webkit-transition:border-color .5s;transition:border-color .5s;pointer-events:none}.Nngxpe g-right-button,.Nngxpe g-left-button{pointer-events:auto}.lUmTWd{z-index:1}.JkSare{border-left:1px solid rgba(218,220,224,0.7)}.zl1zf{border-right:1px solid rgba(218,220,224,0.7)}.Nngxpe,.mb6V8{min-height:98px}.Nngxpe.P7d91{border:0}.P7d91 .lUmTWd:not(:focus){opacity:0;pointer-events:none}sentinel{}");.this._s=this._s\|\|{};(function(

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 272 x 92, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5969
Entropy (8bit):	7.949719859611916
Encrypted:	false
SSDEEP:	96:30VjFRx06o9fWBVE+/hVaf6hQrDTq2W4jnjhwKItTD97TPJn/SHbICKV6A4TT8D+:30XRx0QPE+5VBx2W4/WtTRnBnobpQDHe
MD5:	8F9327DB2597FA57D2F42B4A6C5A9855
SHA1:	1737D3DFB411C07B86ED8BD30F5987A4DC397CC1
SHA-256:	5776CD87617EACEC3BC00EBCF530D1924026033EDA852F706C1A675A98915826
SHA-512:	B807694ED1EF6DFA6CB5D35B46526FF9584D9AAD66CE4DC93CDEB7B8B103A7C78369D1141D53F092EDDEA0441E982D3A16DF6E98959A5557C288B580CF5191E6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......\............IDATx..]...U..:.................].{.A.A.(......\....1........A@6.......$...(.CXX\|..d...IUu..dz...g..u.....sO.1..g..W.....~..fv..+.TL.z.q.c..e..;..{..._"...`V...NwUwg....L.{6...y...]....2yo.x}^\|.....)....444.....r7.f&.<...t.!.l'8.s..LCCcl...t........ ......;..,a..0.xju........\|.. D%.l._..........]Y.. ...&N.r.~$g...&...Z}.w.3q......RKwm.ihh.I.pL.n..7j.W..%..Ld...@......q7x)..A.x.0..M .H..Wq.g.h..k.\|P..-Q.}.Ca...@.A.....D....x.....vOp.....+.z...N...T..o.?...?.%e....&..#..3.....P..Np9...$m.Ne. ..3y?......]....l.).z...g.^.v.!....-...&..M .Eg..w.K. ..;..@.qiP4yhh.....U.l7X-.u...-.tP..X..D.i......p'.T>Y.\o.TM.....xx&...&..M ..{.MQ...@.......C.ihh...]].ws..L.<.1...M ..>/yl...yhh.Yh..y..n...H.iW!..4444.p'8G.<...4444. .!.$'.._`....&....h=@8..........T.Ao..4444..#..i.q.'t.u........T..+j.ASyjT...u..(f.y.uw...-e.B...5.W........m~..5-\|_">.j....c[o..m+....K.v.Tak_.".\.....<........u.....},..02..'.h.v.^.....s..A..Ctw

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (530)
Category:	downloaded
Size (bytes):	220507
Entropy (8bit):	5.615733087832374
Encrypted:	false
SSDEEP:	1536:OpQmKRea193J4arfpkQWOD/2cJrwrUBWeE2dhtBwFpngX4irJV/bVBFtFiP4NEo4:EQn1ld12Uz4iFtF3NZvnOCijEcJfk+
MD5:	FCEEA776BFD6DAF3289AC3C210D34A84
SHA1:	6FA80B3B87143338B648CF35ADBDA2C2603D9C06
SHA-256:	AF82CD92CB1DF231870F60B847A411FCC4ADFFFEF67F01FFF41885828EDEE2E3
SHA-512:	51B61844AD95184F482F792E493AF6947580A2F00E637C5EF6124C1A888A53B2BEA783862BA94ED9D781C6DE270015174B10B93B76CB4C3A6D40F2305A769038
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/63e90c30/www-widgetapi.vflset/www-widgetapi.js
Preview:	(function(){'use strict';var r;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var da=ca(this);function v(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.v("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	906492
Entropy (8bit):	5.857162742288481
Encrypted:	false
SSDEEP:	12288:yCcGwQejTtPeTgQLioRkKEN/MrpExyMtmxI8:yC5vejTZmvRkKEN/MWxzyI8
MD5:	D73CE20969017EBC0C9224B9672F7EE5
SHA1:	4EA4B5C1184AC1D4D48C6708AB5A045EF51B7EA3
SHA-256:	97960DC350072DF61D7520DD54FC8009B568AADA2D716FF785589C2BE0A73D26
SHA-512:	5025B2DB48EB8773BA1906EE885A3DC42E6C3A50C5AD9DEA0BAD6E2899062E7D38F02A6234F26D03579CA3D3C98AAA544278E22A7EA2FD7D5E126AFCE6ABA5D5
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-search/_/js/k=boq-search.ViewPackageService.en.5vFoIj6rx6g.es5.O/ck=boq-search.ViewPackageService.fuMBNisZ1jo.L.B1.O/am=DAIAQIAAAAAAgAAAABAAAAAAAAAAayNc9I-AjQDgwfry__9JICim5wcAQAgAwCBiA8CIDgAACIABoAAAAAAgCjoegEACRAShCwAPiBCPAECpge5WYU0AkAEfJYAASACcBBQAAAAEAADA4AEAYB8AIIAwIyDiAAAAAMA1DxgQAAAAAAAAAAAAAEEhLwIqAgAAAAAAAAAAAAACoEk/d=1/exm=A7fCU,COQbmf,IZT63,KG2eXe,Kg1rBc,L919Z,LEikZe,MI6k7c,Mlhmy,MpJwZc,NwH0H,P9vDhc,Pkx8hb,PrPYRd,RDV3Nb,RMhBfe,Rr5NOe,SRsBqc,VwDzFe,Wq6lxf,X8lTKe,_gbm,coOdHc,fM7wyf,fkGYQb,gychg,hKSk3e,kjKdXe,lazG7b,mI3LFb,mdR7q,n73qwf,nQze3d,sFyk7b,sVEevc,szFNKc,w9hDv,x8cHvb,xUdipf/ed=1/dg=0/rs=AH7-fg4t4gGfMGBENuEcV0ZBKDMYVTU3JQ/cb=loaded_1_4/ee=ADJUGe:nSzGM;AfeaP:TkrAjf;Al37kf:WF2Oxf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CRubWc:GGHMXc;CxXAWb:YyRLvc;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;GzNeK:lwR3kb;HMDDWe:HPcd9d;IcRVsb:TzIJDb;IoGlCf:MEmnGe;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KQzWid:ZMKkN;LBgRLc:SdcwHb;LWyKNe:OGn9Jd;LsNahb:ucGLNb;MWIbN:Oezo8e;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;NoD55:tHLYle;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OGn9Jd:vP7cyb;OgagBe:cNTe0;OohIYe:mpEAQb;Pjplud:EEDORb;QGR0gd:Mlhmy;QHcAG:Doact;Qoo2ob:xNwrGf;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;Rlgi2d:XM4pie;SFqMfe:d7N0Ze;SLtqO:Kh1xYe;SnFeMb:gIO09b;T9F76b:IGrxNe;TxfV6d:YORN0b;UDrY1c:eps46d;UVmjEd:EesRsb;UVzb9c:W0fpg;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VxQ32b:k0XsBb;W1Xvfd:KwNFR;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;XcupOe:nPGmVc;YV5bee:IvPZ6d;ZMvdv:PHFPjb;ZlOOMb:ka50sc;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;aoM3kc:RmZU0e;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;cZGwze:Uq2Ztb;csKcjd:SWn78c;dIoSBb:SpsfSb;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:sVEevc;eBZ5Nd:audvde;eGOC9b:UFUkKb;eHDfl:ofjVkb;eO3lse:TC8ZNd;fWLTFc:TVBJbf;fcYTHe:rDv7Wc;flqRgb:ox2Q7c;fufDm:kGNN9b;g8nkx:U4MzKc;gPGwWe:ds8otb;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:wV5Pjc;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;iFQyKf:QIhFr;imqimf:jKGL2e;io8t5d:yDVVkb;jGHevf:wsoZ3c;jWrxGe:FHj41b;jlykkc:Ixcocc;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;kbIuKc:rDv7Wc;kyjn6b:CfXVTe;lUFnVe:Sq92Y;lkq0A:IbjKve;lx12yf:OtBNv;mT6AUb:vsaskf;mWzs9c:sVEevc;nAFL3:s39S4;oGtAuc:sOXFj;okUaUd:Kg1rBc;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:MdUzUe;pj82le:mg5CW;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:x4FYXe;qsajS:qGotLb;rQSrae:C6D5Fc;rebY5d:S5i2J;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;slvZxc:FU6yf;tGdRVe:b5f3kc;tH4IIe:NoECLb;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;ul9GGd:VDovNc;uuQkY:u2V3ud;vAvu5d:O6oXm;vGrMZ:Y1W8Ad;vXy3B:yzQjhd;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:aIe7ef;wQlYve:aLUfP;wR5FRb:O1Gjze;wV5Pjc:nQze3d;whEZac:F4AmNb;xBbsrc:NEW1Qc;xMUn6e:e0kzxe;xqZiqf:BBI74;yxTchf:KUM7Z;z97YGf:oug9te;zaIgPb:l09DXe;zxnPse:GkRiKb/m=yemSVb,btdpvd,al77M,hhzCmb,ANyn1,Qj0suc,tOtTyb,cj77d,N3wSKe,MI2fVb,i4bkXc,Gu8rrc,UFZhBc,kQvlef,ObWLec,vYwzYe,b6vcbb,EU1dwe,UXfCNd,RAw16,qszQwf,racp,Qg94gd,obXUHb,LmbeUd,y0wzC,I6YDgd,fgj8Rb,wk9bT,ljp6td,yPDigb,f159cf,D8Qs1c,EMKV5d,SzpDQc,hwnrob,msnw6d,LUacLb,gskBEc,wKdTle,Fdd8nd,SGpRce,ttQ27,lcrkwe,S9MdGb"
Preview:	"use strict";_F_installCss(".VfPpkd-BFbNVe-bF1uUb{position:absolute;border-radius:inherit;pointer-events:none;opacity:0;opacity:var(--mdc-elevation-overlay-opacity,0);transition:opacity .28s cubic-bezier(.4,0,.2,1);background-color:#fff;background-color:var(--mdc-elevation-overlay-color,#fff)}.NZp2ef{background-color:#e8eaed}.VfPpkd-z59Tgd{border-radius:4px;border-radius:var(--mdc-shape-small,4px)}.VfPpkd-Djsh7e-XxIAqe-ma6Yeb,.VfPpkd-Djsh7e-XxIAqe-cGMI2b{border-radius:4px;border-radius:var(--mdc-shape-small,4px)}.VfPpkd-z59Tgd{color:white;color:var(--mdc-theme-text-primary-on-dark,white)}.VfPpkd-z59Tgd{background-color:rgba(0,0,0,.6)}.VfPpkd-MlC99b{color:rgba(0,0,0,.87);color:var(--mdc-theme-text-primary-on-light,rgba(0,0,0,.87))}.VfPpkd-IqDDtd{color:rgba(0,0,0,.6)}.VfPpkd-IqDDtd-hSRGPd{color:#6200ee;color:var(--mdc-theme-primary,#6200ee)}.VfPpkd-a1tyJ-bN97Pc{overflow-x:unset;overflow-y:auto}.VfPpkd-suEOdc.VfPpkd-suEOdc-OWXEXe-nzrxxc .VfPpkd-z59Tgd,.VfPpkd-suEOdc.VfPpkd-suEOdc-OWXEXe-n

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 186x186, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	7.969486549368608
Encrypted:	false
SSDEEP:	96:fl5qbz6VFZdJN9Kpzx6RogK0WvXl5OA8TqBgwcGYOSCqNqXQx89keM61T:fCbQFLqYfyfDS+gwKdPx8OeM65
MD5:	F7AFF98DDD2BCF61D1EB6528DAB9B9DB
SHA1:	9370C2870A7EAC9137D051B3AFF6BE50771A4F14
SHA-256:	53847D87CC63A9F8E47367E46C7307A7E9F7ABCC2325A6C71D623C6509711626
SHA-512:	4A60A09F56952CAFCDB81E53F68C10FDA661322871F7BF6430CCD5DB7FEFA58E30C4B431F7A1FDF225830A36796E39A7780EAF15800BE6A3CC8B78D1A0BA0C19
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn1.gstatic.com/shopping?q=tbn:ANd9GcRMQxe0bqoIbScSYl9N4pR0lrPZ6efkPDh5j_zXjV6q1bFLvWZIzIXf1a3QdUt4BgIjw9ygdnDFdQZS2K0OZy3aKCFBH78OMyjniRXo4yvn
Preview:	RIFF....WEBPVP8 .....N.......>Q$.E#.!....8.....U..g..D~..>.....]QM.S7...\y...t....S.q.G....W._.^..C../hO.....;........o..E>_.O...}!.......B?.......{.-..G.?^........?[}7.o.7.O`O.....~....../..........oM..3_.../.$..~....GmC....(cRv.j.........i.X..t..u,.,..K....t...s.&.X.~A`.....x.:..N..a..../.X.{d...X.g.Z..q...P..j.6.&...v-j..zpB=.q.....T.1s%,..M.mp.b8j(.N...V.........4h..y[..C..u;.\|..>.vO..PJ.M.<U.....lUHj....J....^....i. \|.O7..C....LLiw..i..P>......8.tg.hu....+A..l...!.j......._<m.....).^C(.I..v...?.....K.w.......@u6.l.W,.'.^8...m....#...x.s`.q...e. ...........M......^f....'..,..n.u(/..(Z}..>Hr..{..n..%Hti.!...t............p....!...#.S[..!{!.......GH.....X...aL.s.O.v....N.:..A.I.Z;PV..g....j6<.r....,.FO.#~..\|..:..C....d.....V....O....`D.s.....C....y.%....f._o.....<gn.>;A4......6.B..J.'..P..ij.)....~.I{......!..g.@.....f..&.[kI._.r.R...e2..G.H...{oy..3...../...}..!>_..$=#.8.L_.q.9.S...l.A...a.........H.:l..80U..q...A....N.._..9.-L.^..+...f

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	161936
Entropy (8bit):	5.226454293247354
Encrypted:	false
SSDEEP:	3072:G3J1SWSTVUz+BsYIGrRY05Em/ETHSQHZP0:G3PxrMsFaFEHTyYZ8
MD5:	72C90E430925B2A8B2F2F5001AFC3D59
SHA1:	87A71D90E7C2E48C83088B2FCB7C636B0A380F54
SHA-256:	A973E1C0ACC7360C0B0BE4ADC5BF540B6A187A65D5750222F4675AE2E39BBD57
SHA-512:	6BC9AE8EF2770CED15960EE5878CBD7E1F2C7009ED35CD84375D7726AFD282B3CC942C84A399D66D3D4C1CE692FE34F9174223604FED801F328A80CFAA6C1862
Malicious:	false
Reputation:	low
Preview:	{"moduleGraph":"quantum/t7xgIe/ws9Tlc/cEt90b/qddgKe/yxTchf/sy6s/sy6t/sy6u:6,7/sy6v/xQtZb:5,8,9/sy6w/R9YHJc:8,b/KUM7Z/wrzEXb/TxCJfd/WVDyKe/sy6x/Vj9hpd:g,h/tafPrf/dtl0hd/lLQWFe/Il1M4b/eHDfl/FONEdf:k/JiVLjd:k/FAUdW:k/dMZk3e:n/ofjVkb/qaS3gd/T9y5Dd/yiLg6e/Q7BaEe/tRaZif:u/F2pEhc/n73qwf/UUJqVe/MpJwZc/sy6y/nAFL3:12/sy6z/NTMZac:14/sy70/sOXFj:16/sy71/oGtAuc:18/sy72/sy73:1a/byfTOb:1b/sy74/sy75/sy76/sy77/LEikZe:1b,1d,1e,1f,1g/sy78/xUdipf:1i/sy7a/sy79:1i,1k/sy7c/sy7b:1l,1m/sy7d/NwH0H:1j,1n/sy7e:1g/sy7f/gychg:1h,1p,1q,1r/Ulmmrd:1s/rJmJrc:1a,1e/GHAeAc/Wt6vjf:1e/lsjVmc:1d/IZT63/Vgd6hb/sy7h/sy7i/sy7j:20,21/YNjGDd:22/iFQyKf/sy7l/sy7m:25/sy7k:1y,22,26/PrPYRd:23,27/sy7n/vfuNJf:29/sy7o/hc6Ubd:24,28,2a,2b/sy7p:12,18/sy7q:26/sy7r/q0xTif:13,14,16,19,28,2d,2e,2f/sy7s/rLpdIf:2h/w9hDv:1p/JNoxi:1t,2j/SNUn3/ZwDk9d:1i/RMhBfe/U0aPgd/io8t5d/sy7t/KG2eXe:2o,2p,2q/Oj465e/sy7u/FloWmf:2r,2t/Erl4fe/RuUrcf:2s/JsbNhc/Xd8iUd/sy7v/d7YSfd:6,7,2x,2z/sy7w/sP4Vbe:31/sy7x/ul9GGd:33/kMFpHd/sy7y/sy7z/sy80/sy81:36,37,38/COQbmf:39/uY49

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (880)
Category:	downloaded
Size (bytes):	4800
Entropy (8bit):	5.378803620385906
Encrypted:	false
SSDEEP:	96:B1YBqfpSCtth3R/MbEqSn4c7F373LdSqbFbAZ73ma/wrN5J2zRPMmsqM0y:3YGSCttVR/MbEqSn4c7F3vXhAZ70Yvy
MD5:	D6C10B0A2D92686186EFCA10593CE3E2
SHA1:	D0221252904CD6AA9F14604E8B466714A4CC63C2
SHA-256:	45E727BDBAE016B767BE5D8BE8D1B506D88E4175B11D22D99EFD772DC165F6AA
SHA-512:	98386B04162FFD209054C00BCE56111078156F8CB82A84ED1CC4552C8C2C7CC31BA1B942E6FDC5A38B18E1A5FF52934C4DF250CA27EB4104F8D4893637DF608D
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=0/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/m=sy2kt,sy35j,w4UyN,sywv,syww,EbPKJf,sy3pg,sy68o,J9Q59e,sy3ph,a6Sgfb?xjs=s3"
Preview:	this._s=this._s\|\|{};(function(_){var window=this;.try{._.GJg=_.H("Lhx8ef");.}catch(e){_._DumpException(e)}.try{._.lvh=_.z("w4UyN",[]);.}catch(e){_._DumpException(e)}.try{._.x("w4UyN");.var KLr=function(a){_.D.call(this,a.Ka);this.ka=!1;this.oa=_.ed("elPddd");this.rootElement=this.getRoot().el()};_.E(KLr,_.D);KLr.Fa=_.D.Fa;KLr.prototype.wa=function(){if(""===_.v.getStyle(this.oa,"transform")){if(_.Lu(this.rootElement),_.lf(document,_.GJg),!this.ka){var a=_.Bx(new _.zx,_.Ax(new _.Cx,134634));_.lf(document,_.Dx,{IF:a});this.ka=!0}}else _.v.setStyle(this.oa,"transform","");this.nb("suEOdc").setStyle("visibility","hidden")};.KLr.prototype.showTooltip=function(){this.nb("suEOdc").setStyle("visibility","inherit")};KLr.prototype.Al=function(){this.nb("suEOdc").setStyle("visibility","hidden")};_.J(KLr.prototype,"LfDNce",function(){return this.Al});_.J(KLr.prototype,"eGiyHb",function(){return this.showTooltip});_.J(KLr.prototype,"HfCvm",function(){return this.wa});_.or(_.lvh,KLr);._.y();.}catch(

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (502)
Category:	downloaded
Size (bytes):	882
Entropy (8bit):	5.262529960990733
Encrypted:	false
SSDEEP:	24:Bgdv6WqlIBavzLx2Gyjn7BH+XZlBWtCZ+v0txy:BgArlyavzLKlRCccG
MD5:	FBEFC3FDC374569160884443DA9E97D5
SHA1:	1053D57B02CC05865C9BA5481DD26CFDF9236FD7
SHA-256:	9B210B37761BE605E27A19FA5D1D28F6D28A904AA4AC7D071F1A6E949AF4F12F
SHA-512:	D74F64E996EB00A147B7FF24EACF3184C58DA7BDF01E7F4BEC58E818FCEB7523A24A6575276D9B3F2DD0C59C10F973A83FD731C0737453817B4EEFDA52826FA5
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=0/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/m=sy134,sy135,dt4g2b?xjs=s3"
Preview:	this._s=this._s\|\|{};(function(_){var window=this;.try{._.df(_.lq);.}catch(e){_._DumpException(e)}.try{._.vic=function(a){a.isAvailable()&&(_.ba.silk=_.ba.silk\|\|{},_.ba.silk.s=_.ba.silk.s\|\|{},_.ba.silk.s.sis={},_.ba.silk.s.sis.ca=a.ZD.bind(a))};.}catch(e){_._DumpException(e)}.try{._.x("dt4g2b");.var Hoi=function(a){_.Kn.call(this,a.Ka)};_.E(Hoi,_.Kn);Hoi.qb=_.Kn.qb;Hoi.Fa=_.Kn.Fa;Hoi.prototype.isAvailable=function(){return!0};Hoi.prototype.ZD=function(a){var b=void 0===a?{}:a,c=b.tfa;a=b.lia;b=b.Era;void 0!==c?_.hg({serviceName:"sis",methodName:"ca"}):_.hg({serviceName:"sis",methodName:"caar"});a:switch(b){case 0:b="https://accounts.google.com/ServiceLogin";break a;default:b="https://accounts.google.com/AccountChooser"}c=_.Wla(b,{hl:_.Fy(),"continue":c\|\|_.Qs().toString()});(0,_.Ee)(c,a)};._.Mn(_.VZa,Hoi);._.y();.}catch(e){_._DumpException(e)}.})(this._s);.// Google Inc..

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 372 x 135, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	814
Entropy (8bit):	7.256636602459347
Encrypted:	false
SSDEEP:	12:6v/7g4q8bKar8rzhmuHU5Xuok5V46ObQxGTszLz/r/crDecFhYdIM23woeCPQUeM:f4lbBCzhmbhWHK8zceS0QXL4UeAPze8
MD5:	404E616971D44B131B2E8D1944C1B72B
SHA1:	2C04E35435A311140986C1F4642CE6952929AA5D
SHA-256:	ADBE3BE221191A0AA82A4BCB58EF755177835E84FEF2B786743D2B6028D1CB21
SHA-512:	16856A4899C4C88603E1A5CA6DCA07C5B2A0097E23790EEC12FB6EBB1827F7D2515ED434719929423570ED24FC9C61F817CA0668B62393534383780274E80199
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn2.gstatic.com/images?q=tbn:ANd9GcSEG-CK84nHyi07NNLmcAW5unoVP-MnGdwglHdPru2YW64wICJ9wtHmVyMFHq4
Preview:	.PNG........IHDR...t.........1.Rb....PLTE....q..t..o..{.....u.l..Y.. ......w..n.2...l..x...... .......Z..........?.....i.K..N........z..)........o.......g.......@..~...)V.....bIDATx....r.@...>...."."........i1.."7........\P.T7..............'.+.0n.j..U.~..=.l..~a..I..In..A&...v..: .}...~....\|X7.O.....<..!.ZK0...."A.>4...E...p..'..h.6............-:Y+..\|"Z...7lD6+mek.~.m.wJ.=..$.kUi}Q.Owa.b's.Gr6.E{.0.O...."...Q.WmX..N.....U.5.T...E.c.m..m.BSi.M..\D&I:j_7....=.......;pJ..V.z.7.$.N.L...[...'.Oo.{}{ .Z.....D.@=.'.L.l..].v.N...(....4..:u..G..8..n..=.>D?..B3.....\..R..ro........I2D..2..S ..=2F..'......._y..`Rq...0.M..n#.7M....`............9O..~........w1E1.....*..s...^\|..`....^......E...\|...O_.......................................................F. ........IEND.B`.

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 372 x 135, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	814
Entropy (8bit):	7.256636602459347
Encrypted:	false
SSDEEP:	12:6v/7g4q8bKar8rzhmuHU5Xuok5V46ObQxGTszLz/r/crDecFhYdIM23woeCPQUeM:f4lbBCzhmbhWHK8zceS0QXL4UeAPze8
MD5:	404E616971D44B131B2E8D1944C1B72B
SHA1:	2C04E35435A311140986C1F4642CE6952929AA5D
SHA-256:	ADBE3BE221191A0AA82A4BCB58EF755177835E84FEF2B786743D2B6028D1CB21
SHA-512:	16856A4899C4C88603E1A5CA6DCA07C5B2A0097E23790EEC12FB6EBB1827F7D2515ED434719929423570ED24FC9C61F817CA0668B62393534383780274E80199
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...t.........1.Rb....PLTE....q..t..o..{.....u.l..Y.. ......w..n.2...l..x...... .......Z..........?.....i.K..N........z..)........o.......g.......@..~...)V.....bIDATx....r.@...>...."."........i1.."7........\P.T7..............'.+.0n.j..U.~..=.l..~a..I..In..A&...v..: .}...~....\|X7.O.....<..!.ZK0...."A.>4...E...p..'..h.6............-:Y+..\|"Z...7lD6+mek.~.m.wJ.=..$.kUi}Q.Owa.b's.Gr6.E{.0.O...."...Q.WmX..N.....U.5.T...E.c.m..m.BSi.M..\D&I:j_7....=.......;pJ..V.z.7.$.N.L...[...'.Oo.{}{ .Z.....D.@=.'.L.l..].v.N...(....4..:u..G..8..n..=.>D?..B3.....\..R..ro........I2D..2..S ..=2F..'......._y..`Rq...0.M..n#.7M....`............9O..~........w1E1.....*..s...^\|..`....^......E...\|...O_.......................................................F. ........IEND.B`.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1130
Entropy (8bit):	7.798288505878824
Encrypted:	false
SSDEEP:	24:nJPWGRvlQ3BO7i/ZKG0sxrAIoasqOXfHkcBleHcBTd180ji/m8GPZ0H03TN+coC1:FNRvlMOGZAUcI3OXv9Ble8BTd1800UOq
MD5:	3D349AFE5780A1D63C31424161AEBD34
SHA1:	B508BBED18D916406AC4D5B35EB77F05FBC02D83
SHA-256:	51722669D88791A0C04F705ADA7E5F11ECE6AA4FA3F68153C0CFB81087AC15A0
SHA-512:	34364BC3F8AB937CC9D2DC389F5B895AAF8CB8BD4F07F388C9C06B48B40E0B20907600101D004C4DEF575953370F2C6F15D810525B91368137112AE8B8BA6B84
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/shopping/deals/toys_and_games.png
Preview:	.PNG........IHDR... ... .....szz....1IDATX....oTu....K.gO..AI..w.p.`...`4.(...qI<..5..".(B...RZZ.X..Z:..}........mf.t.....z./.....<....o%...}v.]...<.....O.P...;.A..,......{......'.."....6/.Zv...d.<(.c(...k..&.)w.y.............PO.h..A..@..Q)W.!..N}.r....Q......KKM4.K.Vo#..H..j.R.F:.95.......P..C..X..D.B?B.D...I..F:.v..>.x..........RA..^...I\F.\.Z...fs#..dj.)...&.ia\|p.Omy...~G...Fc...ET..S<..2...$C...oe`.:.8A.P...q....P.7.N.]w.e.(P%..$.jlfB.K..2..s^s....S.....$.....4...SS@U.L..rs...%nh.9.^ .T..+..t.v.b...spM...B.J..y.E...!.P.Q.44l.5.......\|.I.(......P....>.....2....ye..T.....!l....%....9p]....LUz.....6...(.3.ML .cDa...M.T.`.2\Nc.N.p....~L...s\|0..j.. B.&....0.........=O.a5..\>.j.8...`... ..K.,x..F.LC...(.9."<..&. O;._.....~.kZ...(a...w..]..pm..R..3HOMB..`s~7.].~.....b..G.....*B/.......7ln#.B.A.f.......3M.......r?..=.s..{...<.$."..)....n1.v...0....sYPM..-x.;W_.m .j..k?..u...#X.U...../' 5:<B5....`..w..a.F)....`......^..:z(...}.....G..{ahl..3.v.

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
URL:	https://static.doubleclick.net/instream/ad_status.js
Preview:	window.google_ad_status = 1;.

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (754)
Category:	downloaded
Size (bytes):	759
Entropy (8bit):	4.8461686983205965
Encrypted:	false
SSDEEP:	12:ISYVVtkN0XVVtkNoPVVtkNnNVVtkNoBVVtkNwVVVtkNEVVtkNweXVVtkNZX5XVVs:ISY/2N0X/2NW/2NnN/2Nq/2Nw/2NE/2N
MD5:	D59CC0A1AA76DF4EC58DB7556F873D60
SHA1:	A828ED0F4C1587DFE40AD42A4A7FA60037C10F96
SHA-256:	44DB7AFDA692FE07AB146BC1314DC61E75C86F6727C912E256C75E494E2CB122
SHA-512:	AD1A8813B9C3ED0A46BA4E2B546F62F037F9FA3F28DFBB611AF8CA715093B1195E8471047CC14299ED7CE4880DC1ACADE8FC601139E47CA69BE0844ABAC3D524
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?q=shop%20deals&cp=0&client=desktop-gws-wiz-on-focus-serp&xssi=t&gs_pcrt=3&hl=en&authuser=0&pq=shop%20deals&psi=xSpeZdzvEPyy5NoPhfSymAc.1700670154779&dpr=1&ofp=EAEY2KWL5pPx1Nf4ARirq_i4pPmltQYYnLvJ5Jr768bJARiE2PG52f_yqTgYs8SD-uXV3s5zMrIBChsKGXNob3AgZGVhbHMgb24gZWxlY3Ryb25pY3MKEwoRc2hvcCBkZWFscyBvbmxpbmUKFAoSc2hvcCBkZWFscyBsYXB0b3BzChkKF3Nob3AgZGVhbHMgcmVmcmlnZXJhdG9yChEKD3Nob3AgZGVhbHMgbGVnbwoSChBzaG9wIGRlYWxzIHRpcmVzChMKEXNob3AgZGVhbHMgbmVhcmJ5Cg8KDXNob3AgZGVhbHMgdHYQRzJ1CigKJldoYXQgZGF5IGlzIEJsYWNrIEZyaWRheSAyMDIzIFdhbG1hcnQ_CiYKJFdoYXQgZGF5IGlzIEJsYWNrIEZyaWRheSBzYWxlcyAyMDIzPwoeChxXaWxsIEFtYXpvbiBkbyBCbGFjayBGcmlkYXk_EOQC
Preview:	)]}'.[[["shop deals\u003cb\u003e on electronics\u003c\/b\u003e",0,[71,598,432]],["shop deals\u003cb\u003e online\u003c\/b\u003e",0,[71,598,432]],["shop deals\u003cb\u003e laptops\u003c\/b\u003e",0,[71,598,432]],["shop deals\u003cb\u003e refrigerator\u003c\/b\u003e",0,[71,598,432]],["shop deals\u003cb\u003e lego\u003c\/b\u003e",0,[71,598,432]],["shop deals\u003cb\u003e tires\u003c\/b\u003e",0,[71,598,432]],["shop deals\u003cb\u003e nearby\u003c\/b\u003e",0,[71,598,432]],["shop deals\u003cb\u003e tv\u003c\/b\u003e",0,[71,598,432]],["\u003cb\u003etoday show steals and \u003c\/b\u003edeals\u003cb\u003e today\u003c\/b\u003e",0,[512,650,432,67]],["shop\u003cb\u003e cell phones \u003c\/b\u003edeals",0,[512,650,432,67]]],{"q":"WvpPNSbQJxRGIN9ticZOTlkwXUE"}]

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1599
Entropy (8bit):	5.267838660635414
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xZS8f:3qD+2+pUAew85zssA
MD5:	5EDBA73F30F0D3A342CECCB3A34BFE45
SHA1:	3F39E4C8EF00408D327260F5328162AB3E5D3CAF
SHA-256:	F768529B209DB7EDF38AA0DA2A69C1C1DBE5A760D457FE74080D3AD76F14A0C2
SHA-512:	C302E3CCC2D9F2E12133ED07082A78260613F1B8C756D9EB2CF0A7AF63C425D4A8956B01EAE3FC3DFAB506DACF6416B0B53929D535CFA2AD81951183A6526FE7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (521)
Category:	downloaded
Size (bytes):	1573
Entropy (8bit):	5.0822739517862745
Encrypted:	false
SSDEEP:	48:XrNq+xpmV71a+hqNgfOaW97JWqA+hVPPs:xq+77+/o97s6Xs
MD5:	A2F3F668BDD15310759731A0FF447353
SHA1:	A01AE3B3546BFA3B0D827C43637F64C140BC5CA5
SHA-256:	3B87E2192C021A0CEC42A7AD621A140080D2621173F6743D2FA501C7722982E1
SHA-512:	1059A4CE9CDF33CD2E07911F16497286B9BC3520B2160EAED6932BFC38B514F1E32016A953FE297BF1C4A738DCD7A17598BA07BEC15CC62E99C18D9ECBB170CA
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/xjs/_/js/k=xjs.hd.en.j7vH50XSWl8.O/ck=xjs.hd.3mhtCf28lXo.L.W.O/am=BAAAAAAAAAAAAAAAAAAAAAQAAAAAEPUTDgFsgACBABBggAAgAICAFKQQBAMAEPBQJgAAACZAYAhYCogKvOcBAJBAFQAAAAAAEAwiAAAACAAAoAMAACCgEdAAhIBKQAAAAADyACA4ABhEEAAAAAAAAAAAAAABTBAMLkgAFAQQAAAAAAAAAAAAAKSkycVAAg/d=0/dg=2/br=1/ujg=1/rs=ACT90oEQOKoPcm_mXy_VnoCFj9ts7y2bDw/m=syed,aLUfP?xjs=s3"
Preview:	this._hd=this._hd\|\|{};(function(_){var window=this;.try{._.dlb=function(a){this.Bs=a};.}catch(e){_._DumpException(e)}.try{._.x("aLUfP");.var elb=function(a){_.yn.call(this,a.Oa);var b=this;this.window=a.service.window.get();this.ta=this.Bs();this.oa=window.orientation;this.ka=function(){var c=b.Bs(),d=b.vJa()&&90===Math.abs(window.orientation)&&b.oa===-1window.orientation;b.oa=window.orientation;if(c!==b.ta\|\|d){b.ta=c;d=_.Oa(b.Ye);for(var e=d.next();!e.done;e=d.next()){e=e.value;var f=new _.dlb(c);try{e(f)}catch(g){_.da(g)}}}};this.Ye=new Set;this.window.addEventListener("resize",this.ka);this.vJa()&&this.window.addEventListener("orientationchange",.this.ka)};_.C(elb,_.yn);elb.kb=_.yn.kb;elb.Ja=function(){return{service:{window:_.zn}}};_.m=elb.prototype;_.m.addListener=function(a){this.Ye.add(a)};_.m.removeListener=function(a){this.Ye.delete(a)};._.m.Bs=function(){if(_.ma()&&_.la()&&!navigator.userAgent.includes("GSA")){var a=_.el(this.window);a=new _.Sk(a.width,Math.round(a.widththi

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 210x186, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	3890
Entropy (8bit):	7.948184529776776
Encrypted:	false
SSDEEP:	96:lTK0RRou49/p5gg8ySwRlyLwD+YyHikMfre:JtouYp5gfqlyLc+YyHikMDe
MD5:	919A20B8E0CCCF4B606D9F284DF727CA
SHA1:	ECC052C5B7FAA42DEE5E8D4B1A92AC24838F9FBC
SHA-256:	99121E8AC35E9F1C2A59293DBD8CB0E3C01EAE97CD1001882D684112185A958E
SHA-512:	EF6C0956E70E52C3CA96B5264F5531B8B19C1F3004278C231241DBA60570013FA3991969911E74111DA1A4AE14846D3F5E8CD27231DC19E26A9D51228C6FE98E
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn3.gstatic.com/shopping?q=tbn:ANd9GcQs7hw3nBQYwICrEdnEMFhIpc74ef1GNhzdFlYJ_Si9u-RDsz7f-bmtwqn9ROdZyhnh0U12Pyp-E72cb9YNnoDlCy3E5svK0vziLMFVIUHVc-HMZ23u0SEi
Preview:	RIFF...WEBPVP8 .....J.......>=..C.!..)5. ...n..n..[#...}...Z.......kv......e...s.Rv....,...._.}Z...?...._.>....`.u...K...g........P..?...m....X:.C....h..<.yb..B2..^..E........\...Vb...".....Q,.....a.2.%j...8.....=G..H...%..D.&......X...@l..-%F.Q..K.@l...S..1..Ha.W......l'Pi.j.%...Y.V5)End.C.`...1Q..).-l.6c.xW@..D....F.......t1G..N.W...O>l...q........<.R..o.i...H"..P......;..b....^E=...<AF...8n.qp=.. ..{0.;=.....\L../O.m.h..^.}5..........xm..u..6...O...g..}.Ga...~.)\i.d+.X.y...s.!/.sL)$.....t.Kj.J>'...kPd.,.nv...qW..0..C..d...H=tg....E.4..s.edJ..Z.5..T.-S+..fV>.D.......up6..t.....U..?P..E^.k.....j./..w92.y.J.!.c.......c?n.6........I...c.2.=.;.........rI...%.A..V.ml.P...Q....(...ieX..>.....B...C,<tRK.?.R.....=s....B......U{X....hl......o.....2.. ..&.M.)....Si...(._..RN.u...j.G..=.41............g..@......E...o6.fNY.8.i..-.x.......qA..%S...J..:...N.x..\ec#m.9..bjL4 .!=g..8.....F.4k,nAp..V...D_Jw.....\|.B.....VI8(..].<..J..@....=o..

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21464, version 1.0
Category:	downloaded
Size (bytes):	21464
Entropy (8bit):	7.991635778215233
Encrypted:	true
SSDEEP:	384:kNMw20ZcZdIR049weTGXkBXju/W4irYjhPC09oOtbMDa9HVZycTvwxNTGup:UaxmXXSdiQPCjMvyugNiup
MD5:	923A543CC619EA568F91B723D9FB1EF0
SHA1:	6F4ADE25559645C741D7327C6E16521E43D7E1F9
SHA-256:	BF7344209EDB1BE5A2886C425CF6334A102D76CBEA1471FD50171E2EE92877CD
SHA-512:	A4153751761CD67465374828B0514D7773B8C4ED37779D1ECFD4F19BE4FAA171585C8EE0B4DB59B556399D5D2B9809BA87E04D4715E9D090E1F488D02219D555
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v14/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2
Preview:	wOF2......S...........St.................................`..~..<..u.....H........6.$..\|. ..r..K..........V...@yF#b...>.[<;P..@.....OINd(...T...C..T.w.s.b..$.....6+. ....R8E$..o..f."MD.@T"...fH..fX..O....AA..F....+v.Q(KpXF..U"..x@...3\|l..E..<.O..~..5M}.".q.#Y9....c.o.s...M.Cr..Dt.,..CtI.O..{D......H...+>K..:.Y..-.l.v......'.....^.Y.k..E..c..~..S..P0.@.....<.!(.P.u.g.2....y..y..Z...v.^..lu.dC.a..o....{.o....h3A.K.I..-.O,..}.c>....Q1]....($..........s..b.X..........CJ.+..4.gE4T.S.{g......(^...bA,...~..R..p...<G."..y.G...k..*'...i.u....I..S....\.......e$..m.2...{K........V......{me.%.}...P3...{.T..i..Av...K..g.... ...R..n..{m....t@Z....1A.H.2...^..R5)..4}..(...T......=...Pg...Y....y..e.$...]U..0.....8..Fs.(..O.....&..f,g..5..1.yo9..:cy...e..A.......i...i...G..4`)..#j.<+..{ai..[..[~.(,......X......3.f.m+3...B......_D.F.X.i.Y#.X......}_.d..`.i..i......T...7v..A.......?..c..~..g..w.D.H)%..B.!.......:.....ZE{........m.FN.....k...0.X...

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (427)
Category:	downloaded
Size (bytes):	1501
Entropy (8bit):	5.2878515605838645
Encrypted:	false
SSDEEP:	24:B2nOlFNVl4YOeh/JjYjovPlK4aDA5YmI8uDNm1jnCWUFI4Fh2V4yCSdL30IeDkAY:B2OlP4pGSoXLa+S8hYFLFACyv0IeDRV2
MD5:	3FC7DC0C16BF2EBB8C363A27D722BF8A
SHA1:	D7B1CE6E307BEC78C2B4D406740C136EA7B3E4D3
SHA-256:	ABDE10A73B588671B90665D04E36E2712C99637A11B2D56264860AEB7FC03462
SHA-512:	B75233BD171149AEFFE43C01C424A9C096C581147D93AD85C253EE2EBB808FF2374BE1AAB37D87162766B5D2322A4243C137EBA4D813E96E8EAD08B8BA4D1257
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=0/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/m=kMFpHd,sy8c,bm51tf?xjs=s3"
Preview:	this._s=this._s\|\|{};(function(_){var window=this;.try{._.x("kMFpHd");._.B$a=new _.Hn(_.oKa);._.y();.}catch(e){_._DumpException(e)}.try{.var K$a;_.L$a=function(a,b,c,d,e){this.iab=a;this.Xof=b;this.uac=c;this.Fwf=d;this.cQf=e;this.TXb=0;this.tac=K$a(this)};K$a=function(a){return Math.random()Math.min(a.XofMath.pow(a.uac,a.TXb),a.Fwf)};_.L$a.prototype.ced=function(){return this.TXb};_.L$a.prototype.sWa=function(a){return this.TXb>=this.iab?!1:null!=a?!!this.cQf[a]:!0};_.M$a=function(a){if(!a.sWa())throw Error("Ud`"+a.iab);++a.TXb;a.tac=K$a(a)};.}catch(e){_._DumpException(e)}.try{._.x("bm51tf");.var N$a=function(a){var b={};_.Ja(a.Olc(),function(e){b[e]=!0});var c=a.gkc(),d=a.Kkc();return new _.L$a(a.Jkc(),1E3c.getSeconds(),a.wic(),1E3d.getSeconds(),b)},O$a=function(a){_.Kn.call(this,a.Ka);this.Ri=null;this.wa=a.service.dBc;this.Aa=a.service.metadata;a=a.service.S9e;this.ka=a.fetch.bind(a)};_.E(O$a,_.Kn);O$a.qb=_.Kn.qb;O$a.Fa=function(){return{service:{dBc:_.F$a,metadata:_.B$a,S9e:_.a

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (906)
Category:	downloaded
Size (bytes):	72882
Entropy (8bit):	5.496990908081101
Encrypted:	false
SSDEEP:	1536:3+CL+VzEHDlzzM6RraFoSR8MOy5iuJADqDRVE/Z0cgTEAQ7:uCLQzYD9Moe6SR8Vi3JSqDROBsTy
MD5:	5350FA4A10CB810D19974D86F05E8964
SHA1:	64D543E9D4D26E9E30E9F0A1AC73695E04D2F519
SHA-256:	EE398FB1ABAD9B354ABAA69C475BE3BA27509379A7E8D6A5253D9AF2ED666B07
SHA-512:	8391915B943C5BE55E033DEF53AF42736B75810449B513D94C0DDCC4CC808B060A422B5FB963C0CF9D9026BA3BEB4892FC1AB3AB93456F0DED6CA1DAE6C91F1B
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-search/_/js/k=boq-search.ViewPackageService.en.5vFoIj6rx6g.es5.O/ck=boq-search.ViewPackageService.fuMBNisZ1jo.L.B1.O/am=DAIAQIAAAAAAgAAAABAAAAAAAAAAayNc9I-AjQDgwfry__9JICim5wcAQAgAwCBiA8CIDgAACIABoAAAAAAgCjoegEACRAShCwAPiBCPAECpge5WYU0AkAEfJYAASACcBBQAAAAEAADA4AEAYB8AIIAwIyDiAAAAAMA1DxgQAAAAAAAAAAAAAEEhLwIqAgAAAAAAAAAAAAACoEk/d=1/exm=A7fCU,ANyn1,COQbmf,D8Qs1c,EMKV5d,EU1dwe,Fdd8nd,Gu8rrc,I6YDgd,IZT63,KG2eXe,Kg1rBc,L919Z,LEikZe,LUacLb,LmbeUd,MI2fVb,MI6k7c,Mlhmy,MpJwZc,N3wSKe,NwH0H,ObWLec,P9vDhc,Pkx8hb,PrPYRd,Qg94gd,Qj0suc,RAw16,RDV3Nb,RMhBfe,Rr5NOe,S9MdGb,SGpRce,SRsBqc,SzpDQc,UFZhBc,UXfCNd,VwDzFe,Wq6lxf,X8lTKe,_gbm,al77M,b6vcbb,btdpvd,cj77d,coOdHc,f159cf,fM7wyf,fgj8Rb,fkGYQb,gskBEc,gychg,hKSk3e,hhzCmb,hwnrob,i4bkXc,iaRXBb,kQvlef,kjKdXe,lazG7b,lcrkwe,ljp6td,mI3LFb,mdR7q,msnw6d,n73qwf,nQze3d,oSegn,obXUHb,qszQwf,racp,sFyk7b,sVEevc,szFNKc,tOtTyb,ttQ27,vYwzYe,w9hDv,wKdTle,wk9bT,x8cHvb,xUdipf,y0wzC,yPDigb,yemSVb/ed=1/dg=0/rs=AH7-fg4t4gGfMGBENuEcV0ZBKDMYVTU3JQ/cb=loaded_1_7/ee=ADJUGe:nSzGM;AfeaP:TkrAjf;Al37kf:WF2Oxf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CRubWc:GGHMXc;CxXAWb:YyRLvc;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;GzNeK:lwR3kb;HMDDWe:HPcd9d;IcRVsb:TzIJDb;IoGlCf:MEmnGe;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KQzWid:ZMKkN;LBgRLc:SdcwHb;LWyKNe:OGn9Jd;LsNahb:ucGLNb;MWIbN:Oezo8e;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;NoD55:tHLYle;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OGn9Jd:vP7cyb;OgagBe:cNTe0;OohIYe:mpEAQb;Pjplud:EEDORb;QGR0gd:Mlhmy;QHcAG:Doact;Qoo2ob:xNwrGf;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;Rlgi2d:XM4pie;SFqMfe:d7N0Ze;SLtqO:Kh1xYe;SnFeMb:gIO09b;T9F76b:IGrxNe;TxfV6d:YORN0b;UDrY1c:eps46d;UVmjEd:EesRsb;UVzb9c:W0fpg;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VxQ32b:k0XsBb;W1Xvfd:KwNFR;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;XcupOe:nPGmVc;YV5bee:IvPZ6d;ZMvdv:PHFPjb;ZlOOMb:ka50sc;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;aoM3kc:RmZU0e;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;cZGwze:Uq2Ztb;csKcjd:SWn78c;dIoSBb:SpsfSb;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:sVEevc;eBZ5Nd:audvde;eGOC9b:UFUkKb;eHDfl:ofjVkb;eO3lse:TC8ZNd;fWLTFc:TVBJbf;fcYTHe:rDv7Wc;flqRgb:ox2Q7c;fufDm:kGNN9b;g8nkx:U4MzKc;gPGwWe:ds8otb;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:wV5Pjc;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;iFQyKf:QIhFr;imqimf:jKGL2e;io8t5d:yDVVkb;jGHevf:wsoZ3c;jWrxGe:FHj41b;jlykkc:Ixcocc;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;kbIuKc:rDv7Wc;kyjn6b:CfXVTe;lUFnVe:Sq92Y;lkq0A:IbjKve;lx12yf:OtBNv;mT6AUb:vsaskf;mWzs9c:sVEevc;nAFL3:s39S4;oGtAuc:sOXFj;okUaUd:Kg1rBc;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:MdUzUe;pj82le:mg5CW;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:x4FYXe;qsajS:qGotLb;rQSrae:C6D5Fc;rebY5d:S5i2J;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;slvZxc:FU6yf;tGdRVe:b5f3kc;tH4IIe:NoECLb;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;ul9GGd:VDovNc;uuQkY:u2V3ud;vAvu5d:O6oXm;vGrMZ:Y1W8Ad;vXy3B:yzQjhd;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:aIe7ef;wQlYve:aLUfP;wR5FRb:O1Gjze;wV5Pjc:nQze3d;whEZac:F4AmNb;xBbsrc:NEW1Qc;xMUn6e:e0kzxe;xqZiqf:BBI74;yxTchf:KUM7Z;z97YGf:oug9te;zaIgPb:l09DXe;zxnPse:GkRiKb/m=NoECLb,MnVV2d,hypYI,yGkNuf,qMBFFe,Gi5Toe,gpa7Te,ZfBJ7b"
Preview:	"use strict";loaded_1_7(function(_){var window=this;._.m("KcokUb");._.Ike=new _.wh(_.Fdb);._.p();._.m("NoECLb");.var Kke=function(a){_.eq.call(this,a.Oa);this.HC=a.service.HC};_.D(Kke,_.eq);Kke.Xa=_.eq.Xa;Kke.Ja=function(){return{service:{HC:_.Ike}}};_.k=Kke.prototype;_.k.Wb=function(){return this.HC.Wb()};_.k.lG=function(){return this.HC.lG()};_.k.Sk=function(a){return this.HC.Sk(a)};_.k.Vl=function(a){return this.HC.Vl(a)};_.k.VM=function(a){return this.HC.VM(a)};_.gq(_.Gdb,Kke);._.p();._.m("tH4IIe");._.Lke=new _.wh(_.DVa);._.p();._.m("v1daM");.._.p();._.m("MnVV2d");.var n4j=function(a){(new _.vf).listen(window,"pageshow",function(b){var c;!(c=b instanceof PageTransitionEvent&&b.persisted)&&(c=b instanceof _.fp)&&(b=b.Ue,c=b instanceof PageTransitionEvent&&b.persisted);(c\|\|window.performance&&window.performance.navigation&&window.performance.navigation.type===window.performance.navigation.TYPE_RELOAD)&&a()})};_.o4j=function(){};_.o4j.prototype.oa=function(){};_.p4j=function(a){_.eq.c

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 148x83, components 3
Category:	dropped
Size (bytes):	5434
Entropy (8bit):	7.915927555875939
Encrypted:	false
SSDEEP:	96:ekM/vE9rLv64Bi8qFTuyc4EZ/q9KkrXuUQCVJDJmWEdzJ68us9SydA:ezEZLybFAqYOuaV3s9SyK
MD5:	4470243A928E1B4E36972F5CAF284F2B
SHA1:	BD4C255B0836ED9C788C39803ADAB46537486259
SHA-256:	8D068EA31FDE9082F0898A6CDF10BB2C927E3E46FD9D5C0712EB95F94389A135
SHA-512:	AACC38BBEE0E6F0CABE5FDB825F94BC50DC8D3074B642524791485278CB3A234DAE0FACBD610D3AAA3FD4D8D7733CBCF843B011CEE853A9962380894949571D0
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......S...."........................................?........................!.1..AQ."aq2....#..Bb....$CR..3DSTr.................................0.......................!.1Q.Aq."2BRa.....3C...............?...5.........../........(..FVl..`........W.."~.$...).m..m..F..J..\|...h...v.....;<..q...Q.W.C.et2m...W5.../......E\...................)......Y...^..?...Ke....J..........(\....!.^L.....98.=..@^...p."..._>...........l.R.."....d...}...FW..Wx.4G..IQ.b....'.....]....LDG..!.J.......<h/.v87....0..p.O.>.M>......m.n..D9q..g.lzk@.K.U....yaR...Q.6. .t..Oz...7{h.L.lH..R8..}.=....8Z.I,?.."8g...8......6...c.&H^.O.^p....1...u...m..$'.\|eaE....y...>.=.k.>&.6{p...:.H.Kb".L.c..w.*..Y8p.q.ik.6...3.x.4.J$\epy.Y...:.4..9J^>.[r............~..\|...........:6Zc9....\v...^.....:.P./05..R......xa..<.#o....Y>T.8....?.../

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 184 x 60, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3831
Entropy (8bit):	7.925889412012612
Encrypted:	false
SSDEEP:	96:OMa+Lx3VhZ25tO+44s8NUH0Rdv4RzObT1koUpwGx+F:O5+1lP+44s814RidrrGx+F
MD5:	0877987D1BE23418318D595A3A297CE9
SHA1:	F69E2644E31165BD95311C2EF6D563CFEB1BCC13
SHA-256:	FD4D9D732E7A4AF52746EBABE6BB16941EE71AE3E919131AF700CF4E1228A16A
SHA-512:	780B8DB5E9FB5F27AE8E8AFF5FE710F2BDAB37692E8AF19E1F76CA169EDE7D988DB49CEDEC92C0FFF83A89B1539A2A7C2F6922A7E15979BDFB035F9F1F910641
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/branding/googlelogo/2x/googlelogo_color_92x30dp.png
Preview:	.PNG........IHDR.......<.......p.....IDATx..]..\E.n...n.P.D.`.r.7.cp.Mb.X..C.3"w.....kgf.phE.!.....D.9...P...X$$ ..E.......^.;...f7............5........~..D..Xc.VO..3.....:..gc..@.].SF.......Z:..}.A..'+..CLBb.BO."....=...";m.}./.?.IH...)./......<..5L...~tnq...u...i. d -e..wG.....$x...Oc)3."..L..x.y..........u...+q3c..L&!.....L$...]R.R.N..+..B..e.y..X8E..S.....bi.u."v.k.1.I...]...'l.!.../.7m..-_>i~........6.o.....IH....w..6c\|..L..t....3.....6.....D..,7...#....0..[..... .$.$x.R`..P9nb....G`. ..3...$$...HK..r..}....D.C....\.`.%$.. .$>....I..a...Hpd....3.$$........&!Q..G...7...o..b...D.l\.$../...+.......#....BOs....Kv.LX...j...Z........o=-....e...\|..2.`{.V..Or...1.;mAn.r...(..M.^VW.k.....$..S4/.v..i......ShM.....+5\....#..4HE;.=..I.\|....7XhgK..2..4".......].b.5..?JA.^..].....q.g.3..M..P..7..Q.+..............Q. f..3r5.=1...D6.L.....7-...5a...R5....u.&...V.....8=.4.-..wb.&k.1'.....^L.=;..U4.y.........,x.\.%x:.NEYm.. ...vM..78..y?-.7...(.

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15436, version 1.0
Category:	downloaded
Size (bytes):	15436
Entropy (8bit):	7.986311903040136
Encrypted:	false
SSDEEP:	384:uJ/qNyGt74AcZEG+69hFFHDJ1CggakKt0y:+q/kAc+ohFx9YgB2y
MD5:	037D830416495DEF72B7881024C14B7B
SHA1:	619389190B3CAFAFB5DB94113990350ACC8A0278
SHA-256:	1D5B7C64458F4AF91DCFEE0354BE47ADDE1F739B5ADED03A7AB6068A1BB6CA97
SHA-512:	C8D2808945A9BF2E6AD36C7749313467FF390F195448C326C4D4D7A4A635A11E2DDF4D0779BE2DB274F1D1D9D022B1F837294F1E12C9F87E3EAC8A95CFD8872F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......<L.......\|..;..........................d..z..J.`..L.H..<........e..^...x.6.$..6. ..~. ..).7{...K.. .k~....".v(...[...RE.$..K..C,.'..{BK.C&.....'L!...DZ........+6.r...K..._...<..0..].V..........e.r(RN.43k;g`...?<?.......b..c.`.. .6..p...5.$zd.R%.........h....";.^WU.....H........S.j..M:..=K..\B.6"f......z.........$...%w.?$-....9.:u....u.I..Tt..s........lY...J.6oN..y...1,I.Yx..lu..}.e...Og..d...Xv.. ...iF.]..x.N..#%,y.&..,$.^.n...\.K.P.J.x...H$..-.....p.....t.v...gD^....?..6o......e....,f.)..h...P...<.:.E...X..p....U.?.[m....l.Y.S..p..%..K.,U..3U.qFZo....U...3..3.]\.C.#..9T.8P`8......P...R;..r..J.*...u.j..^vnf.v.... .pw...Z.(.6%$U.[.\|....!mU\}./..i,..7D........:t'.a;.W(.."G....q.-.Z......;J..0.&/.5. .T......w..;...t...H.t.<y ..@xx .JA.U.t..;g....@..... .t......<.5(^.\|s..Ko.O.x.....!...........lHF............So{.%..V...7..aA$....C;,"(.J..EE..@.....vOB.,V..../....B#.r+./-t.(.N.S...R.Z$4...4i.c.}t...#3`.......s..;.O,.\|..W.A.f.w.

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	dropped
Size (bytes):	4465
Entropy (8bit):	7.666715222755507
Encrypted:	false
SSDEEP:	96:HxiWESDh8K9aI+yQMPAOjDBk9Et4X6ILzaqPuAO:HcWESDXaXyZjDB9q5O
MD5:	6BCD2C5891A5E617898FF487DF0D2082
SHA1:	A2242A3F396F1FEAF7AEABD40B48122D070F125A
SHA-256:	018716003EA7214D7F973B17997ACEB69CAFEE5C09C96C23851AF2D291522ED7
SHA-512:	A5E78F13A46F88779D91BF6683DB4963D77AA3E0D73CB700468FC0291D60EE8DFD30E8CC2A81EF38A8E6373BB3A7144CF1B4B5BAA5269555957B79D69929CDE0
Malicious:	false
Reputation:	low
Preview:	GIF89a.......rX.c.....R.T.E....S?..IHt....5..N>...k:&..=..}...2.5.KN.6.n;....x..F.f@.L@o...;.[x.ps...I....},._tg...O'....o.P..K..Er5.YS..e....Q.NC..b..TH....Uz6v.;U.d.z.R..!.a...]....d'.R.RW.Se.......;..H{.Si.QH...g$Um.%n.%.x..._.9~.q.......6....L.65.\...A%...<2..J..]...s.....T.a...\|...K?.....I....F>2...}.8..-.p..s..c.L5.w9...OW...:..@......xA.^...h$u..z..qBYY.9w..i...[92..g........#.yK..C..)..pu..M>.AR.I>9~...M4x..D9%j..`..1)...$.g.....n7}......9......._A..{..[..!.cE........or.y..PGG...OD%.hs...........`\...........K@5.x..U.C3=.Pfk...JO.P.>L..M0....\..N...@u...7w...K...x.Mo.St.....O.w=.T`..A.P.S={..k....I.n;..V?..@3.tR.Ii.Uz.Rj.Sq ....>..M......c.8....A._.0....p..RD....fH..a...._9...ZC,.........fA..Q.2:...K?8~.;...J>..M..`...!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="ht

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (12253)
Category:	downloaded
Size (bytes):	182787
Entropy (8bit):	5.825009926648524
Encrypted:	false
SSDEEP:	1536:zNHotIDzZnwV+FbMQbyiMO0HGUISm98G046LHv5p3dChCNzphPU84eGH/lTnWB9d:zA8MO0HhhvbOnWxALr2fjlj
MD5:	85586C3F9527C93DE6B708F4C7CB098B
SHA1:	F50108839BAF866A10C9A15C03BFD6F354B63096
SHA-256:	5EE4BF5BFFC1ADD6E3954D5B140FD65D3594D60866FC0F3533E755B58173E205
SHA-512:	F3886EAFE7C265E6286DEDD2A90DC035959576C8999CDB122251E23C5DB66B252CF6887F2D0B447574E6CE70F4794923A0C6602F45FC2BB76055ECC1FC5A5A49
Malicious:	false
Reputation:	low
URL:	https://www.google.com/
Preview:	<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="Anm+hhtuh7NJguqSnXHEAIqqMaV+GXCks8WYXHJKF7l6AeYMj+wO+fi9OdDqFnJTg9t0492DykVxx4jpvFbxnA8AAABseyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IlByaXZhY3lTYW5kYm94QWRzQVBJcyIsImV4cGlyeSI6MTY5NTE2Nzk5OSwiaXNTdWJkb21haW4iOnRydWV9" http-equiv="origin-trial"><meta content="/images/branding/googleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>Google</title><script nonce="aSBGYq1MtslSPb_ruSrYVQ">(function(){var _g={kEI:'rCpeZdXlGruf5NoPj9ax6A4',kEXPI:'31',kBL:'hFPp',kOPI:89978449};(function(){var a;(null==(a=window.google)?0:a.stvsc)?google.kEI=_g.kEI:window.google=_g;}).call(this);})();(function(){google.sn='webhp';google.kHL='en';})();(function(){.var h=this\|\|self;function l(){return void 0!==window.google&&void 0!==window.google.kOPI&&0!==window.google.kOPI?window.google.kOPI:null};var m,n=[];function p(

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 222x186, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4918
Entropy (8bit):	7.95362666598698
Encrypted:	false
SSDEEP:	96:HmAYfcFwNMhakkbJhBXhyusb72IKMiQO7sNNJ5RhD/8W:GAYfcFwaEkMhBsusb6IDi+NJ1V
MD5:	B200C0DD00D79A678A2A0858B15BA91D
SHA1:	9E55D74ACB7606616555544A1A0AFE1877EF8AAA
SHA-256:	9FDAD75683CEFE7095DF553FCA755662096F84812853BDF7E2DAC4CF8E075B38
SHA-512:	76F37EECB646E8CA988C8D97E7781DF2A984C0B197EAF1C5066F3D0DCAA7DF9A0508CE6CD1B940A44FF631A8EB729740711E967564DEF2D0900309E6EEEAAF80
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/shopping?q=tbn:ANd9GcQflQctedW9LN5Vkliqz5qxP3Uaes5LjIa9LzhYeiWZjaXLO5VQPntM1agkdnlmIQQiESi2bkkJokd6GzLDDmNSTsSvFXfxTgC243kE4DwcmWhFfZRDxXtktw
Preview:	RIFF....WEBPVP8 "....M.......>A..D......((....p..~W).......Wu.g.....g.......~]}e.o...+.w.?..g.m....W..~..).U.l..z.......p.............~........g./......~N}D...k.o....t.N...............^.?q...^.....MX.ah.....k.9.......dC.r3..u,l.V.:.e.Jo,6u..6......jl[..b........_w..V.l3m....9.;...zS...I:.>..V.....1...R....]O{...P.a-..Q..&.........R.&..d..{.m..s.?g!..t%R5..1K8......q..j..l.]...8....,g.<k...\|.&.]tS...+..zl#.(?c..z.q.]u5B}r.1..T.....[.Z.E..5......nf...8.!.i..:......=1.....)......>.<.#$...X..[.<..U...o..7r.y..H........#....<..<)m..7X.XX..&..!.....V..B...{.t....l..6Z}...K...%R@.....n.H....l..d.]R.,.E....#..R....g.~...&m..5:Z........r...0b%......\|.P.[..lS..G.%..$.k.........l.2..f..O.ws....QC.."9....N...J...q?...Mb....p.......{'......b.k.8..vF".....^.l.."J..7UL...t..lCc............-&}.e.).<Cd.#d..CE... ../..9>[.#g....T.Nt';....X.R.p2l...?.o..".W.R\...n;?si5....2y(.]o.5W.v..b76...?.e..x1......."_8....T...aa.....n....~a.hx...+.)j....Y.h"...c..?.......x.#

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (761)
Category:	downloaded
Size (bytes):	1255
Entropy (8bit):	5.280907453914886
Encrypted:	false
SSDEEP:	24:kWfSflORYc2YwFuDSZs/iKteZzcGSAcbGXe+VWTVfrOFwZ6rky:ZfSfoRY120uYZ4L6FaVfIwZ6rky
MD5:	2D5D33D0ED7C4BECF78CED38FAB476F3
SHA1:	2DD231C363DBEAB96EC6AA4DA10D79D4F46F9339
SHA-256:	889EB55B5570FA1E3C0E75276307B758BE2CD5BBD969723A3E21127181D0BB2A
SHA-512:	3B26068C9FE5CBA6DC77E3CF1DFBE885CFE2A3CDDAACD7D663F6771CAF8D074EC801DE5CA71F31DBEA80CB0B7B48D1AE459017ED24F204CC52F145481423102A
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-one-google/_/js/k=boq-one-google.OneGoogleWidgetUi.en.0ABcWAGioow.es5.O/ck=boq-one-google.OneGoogleWidgetUi.d1uIQnUcq8Q.L.B1.O/am=CGFIGw/d=1/exm=A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,FCpbqb,GkRiKb,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WhJNk,Wt6vjf,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fKUV3e,gychg,hKSk3e,hc6Ubd,hhhU8,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pw70Gc,s39S4,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,yDVVkb,yYB61,zbML3c,zr1jrb/excm=_b,_tp,calloutview/ed=1/wt=2/ujg=1/rs=AM-SdHvKQOpXYagvgeJ7sddAjZD90JtrGQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=bm51tf"
Preview:	"use strict";this.default_OneGoogleWidgetUi=this.default_OneGoogleWidgetUi\|\|{};(function(_){var window=this;.try{._.p("bm51tf");.var Toa=function(a,b,c,d,e){this.j=a;this.s=b;this.l=c;this.H=d;this.N=e;this.g=0;this.i=bZ(this)},Uoa=function(a){var b={};_.Ea(a.ur(),function(e){b[e]=!0});var c=a.kr(),d=a.mr();return new Toa(a.lr(),1E3c.getSeconds(),a.fr(),1E3d.getSeconds(),b)},bZ=function(a){return Math.random()Math.min(a.sMath.pow(a.l,a.g),a.H)},cZ=function(a,b){return a.g>=a.j?!1:null!=b?!!a.N[b]:!0};var dZ=function(a){_.P.call(this,a.na);this.j=a.service.Hs;this.l=a.service.metadata;a=a.service.RE;this.i=a.j.bind(a)};_.F(dZ,_.P);dZ.qa=_.P.qa;dZ.V=function(){return{service:{Hs:_.$Y,metadata:_.WY,RE:_.mX}}};dZ.prototype.g=function(a,b){if(1!=this.l.getType(a.Cb()))return _.En(a);var c=this.j.g;(c=c?Uoa(c):null)&&cZ(c)?(b=eZ(this,a,b,c),a=new _.Dn(a,b,2)):a=_.En(a);return a};.var eZ=function(a,b,c,d){return c.then(function(e){return e},function(e){if(!e.status\|\|!cZ(d,_.hk(e.status,1)

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 124 x 33, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1178
Entropy (8bit):	7.735688086333932
Encrypted:	false
SSDEEP:	24:tLaceylIl2yLGrN+mYoZjMUbPMpfvVaiusectgueldvZruCivkEFfeu+RSS:fIkyLGBzFdM5pXGflD9ZKh/euVS
MD5:	11CF17F4EF7121038E32CEBD6754CDB4
SHA1:	17992754CA34F656F60FE437327B382EBF06A407
SHA-256:	5E97BA7A9400693C0B84E34D237D15C3F4A9EC9CD0FECB2CD009B0809133FE8E
SHA-512:	C750AED9FC60BE73643B820DCE140302D894F89AE0F0025CB10E829B7BD058E08297AEE5FB77BE8F1C2AAFE0EDC0F5ADFDAFCF9F1680B83B1E217302513DB1EE
Malicious:	false
Reputation:	low
URL:	https://t0.gstatic.com/images?q=tbn:ANd9GcRckkncp63See-6FO9W_KgNArTkss2bjxLQ7jyCdRo-N1yMJq2YQ6Y
Preview:	.PNG........IHDR...\|...!.....,.?.....PLTE..../..... iOo..){/U.O.......1.$....../........:^.....H....g.........7..@.b............h..}..w.......@.........1\|(..Fh.'O...........<.3P.....<..o....~...J..\|.r...0{.F..a..........R....N...p.b....IDATX..W.b.0...ks..61......Y....U..JF.iB.@_:.X....;;r...9.a..e.D.R@...y.H^.l/F>-.W..#.....e.J.R.C.......}...ua..`e...Yt...d..aH<.N./k.cn_.H...y.(.....Ik..W.\|..s....g.......S... ..\|.....u..N.&o.i.6..\|tW..,7W.\.=.s.p`..Mx..x@...s.(..D.B4v...D....<.O....p...(..E/...L.[..3..R@..1..c.....j.l.......h......%jg.....,u]w.b.b/.%..R......L...)'..)..K.W.H.3.>G..(U.@<J...)_~...c..........D.(as.h.]..b~.1.........e.]}]....^.....B...m..p.ov*.....c.....1N....\.+Z.7.2,Nw..1....}..u.1HC}K...m...j..^]..5...)...C...z....6.l.H;....6.../..O.d. E'..wH.B.>....6.N..6'...\8.x...J@..ZaR..n.......Ky12...`<..^t..M.?5...aG....d.b.,...3...-8]+...h.../.7.t.j..'.J.............^".(v.?..EzkE...e.D..Gr...kl.6yp[.Z.s'.Q..\R.YYETa.In.5..J.

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1130
Entropy (8bit):	7.798288505878824
Encrypted:	false
SSDEEP:	24:nJPWGRvlQ3BO7i/ZKG0sxrAIoasqOXfHkcBleHcBTd180ji/m8GPZ0H03TN+coC1:FNRvlMOGZAUcI3OXv9Ble8BTd1800UOq
MD5:	3D349AFE5780A1D63C31424161AEBD34
SHA1:	B508BBED18D916406AC4D5B35EB77F05FBC02D83
SHA-256:	51722669D88791A0C04F705ADA7E5F11ECE6AA4FA3F68153C0CFB81087AC15A0
SHA-512:	34364BC3F8AB937CC9D2DC389F5B895AAF8CB8BD4F07F388C9C06B48B40E0B20907600101D004C4DEF575953370F2C6F15D810525B91368137112AE8B8BA6B84
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz....1IDATX....oTu....K.gO..AI..w.p.`...`4.(...qI<..5..".(B...RZZ.X..Z:..}........mf.t.....z./.....<....o%...}v.]...<.....O.P...;.A..,......{......'.."....6/.Zv...d.<(.c(...k..&.)w.y.............PO.h..A..@..Q)W.!..N}.r....Q......KKM4.K.Vo#..H..j.R.F:.95.......P..C..X..D.B?B.D...I..F:.v..>.x..........RA..^...I\F.\.Z...fs#..dj.)...&.ia\|p.Omy...~G...Fc...ET..S<..2...$C...oe`.:.8A.P...q....P.7.N.]w.e.(P%..$.jlfB.K..2..s^s....S.....$.....4...SS@U.L..rs...%nh.9.^ .T..+..t.v.b...spM...B.J..y.E...!.P.Q.44l.5.......\|.I.(......P....>.....2....ye..T.....!l....%....9p]....LUz.....6...(.3.ML .cDa...M.T.`.2\Nc.N.p....~L...s\|0..j.. B.&....0.........=O.a5..\>.j.8...`... ..K.,x..F.LC...(.9."<..&. O;._.....~.kZ...(a...w..]..pm..R..3HOMB..`s~7.].~.....b..G.....*B/.......7ln#.B.A.f.......3M.......r?..=.s..{...<.$."..)....n1.v...0....sYPM..-x.;W_.m .j..k?..u...#X.U...../' 5:<B5....`..w..a.F)....`......^..:z(...}.....G..{ahl..3.v.

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	611
Entropy (8bit):	4.918393991458898
Encrypted:	false
SSDEEP:	12:t47NWQFfelFQRbjYDq9mMG6AsLwUhMOLSmvfO14KAOKtjGSdi:t4AQfefQRbjvb8BOpM4KAZjGS4
MD5:	FDCCEBFA37374F47C7DB9D31714AD6BB
SHA1:	0020EF09D5BB52460B5D0239BEF9C2F2CF9EC9FA
SHA-256:	526AAAFB82827920E07B5CE784660FAB5F01FB62F3B63968EC34317AECAA5CCA
SHA-512:	D265EE577D64E9682698F021A5E2158CF5EA0A6C887E69A90F72C45E29B9F8A3ED436F2D4DA6B4F3436EF59FF306348EC57FFD7FEFDEC969909E089E03B59528
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/productlogos/youtube/v9/192px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 192 192" height="192" viewBox="0 0 192 192" width="192"><rect fill="none" height="192" width="192"/><g><g><path d="M177.44,55.09c-1.96-7.31-7.72-13.08-15.03-15.03C149.17,36.5,96,36.5,96,36.5s-53.17,0-66.41,3.56 c-7.31,1.96-13.08,7.72-15.03,15.03C11,68.33,11,96,11,96s0,27.67,3.56,40.91c1.96,7.31,7.72,13.08,15.03,15.03 C42.83,155.5,96,155.5,96,155.5s53.17,0,66.41-3.56c7.31-1.96,13.08-7.72,15.03-15.03C181,123.67,181,96,181,96 S181,68.33,177.44,55.09z" fill="#FF0000"/><polygon fill="#FFFFFF" points="79,121.5 123.17,96 79,70.5"/></g></g></svg>

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (555)
Category:	downloaded
Size (bytes):	2453295
Entropy (8bit):	5.666228785577035
Encrypted:	false
SSDEEP:	24576:FpOtrO+9+c7eDunfL4iQK2qSihAFXd4otvayZ:Fktrv1CDufL4iQK2qStFXhtvao
MD5:	C502246556FB79BBBB83D4F036EA963F
SHA1:	4AB8182F4453DD4808B94AA76D98EB08E46128AE
SHA-256:	7896BC3B93023BC401267007BEC8FF688D9C42021C94EB9289CDAC09C58FFB54
SHA-512:	74C6A3EE081EC6DD4E02318EEF8AA7BD3236C70046C658A0C350790371C0BED782419B23A8BEA8D5FE826EBE9CCB5EF032A92F43FF0C95DD7D2E7EAA3A03369B
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/63e90c30/player_ias.vflset/en_US/base.js
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,. FITNESS FOR A PARTICULAR PURPOSE AND NONIN

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1035
Entropy (8bit):	7.7433146380180755
Encrypted:	false
SSDEEP:	24:/OYEpsLS0icYucaDbwjxLB05gORAUbjWIa2E1T5mO0:/OYusyctcaD8j/St9y8O0
MD5:	DDD52CDC94F7378E6006BFD3786E11AA
SHA1:	97376CC94CF962C8EB6BD2E7B8A64EAE325C0D2B
SHA-256:	0A2AB1A6C51414B83B1E922399707FCD4940EAE726141F56E70809BB64762E4A
SHA-512:	6BAA7D2817B364D330A525F24B83C99A146F67D34F3E38D0FDCE2E99830FE63D3ADE03731923E971F3A4ACC347D967F8B10753E61CC1506C6ED4BB551759A367
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/shopping/deals/travel_and_luggage.png
Preview:	.PNG........IHDR... ... .....szz.....IDATX..=.TU......z..1...Rl.....DM........V[..;:..-.....@.QA.....ADV..f.A2.v.ewvv.}.s..!Z:<i.$7..w.......{.nn.Isss...3.Z.W...Z...c..I..&.t...z.E.-,,\|Y...m..=T.....t^[\\.:.Z.1..i<....a......I..&....}.....O...{....p8..5..........S..o6./..U].&k.>......{.f...6.>.&..(.....`..K..\|..._.....v.>.V.\...Q....U9...^..3S../8...";..'>q...!W.....Lu.....;\o.Nd...d...]$[Z".V.D...4>;E...M...~.......t.]%r...7.g...!...!...kz{!"<y.f...?.B..I)..S....T..s`.....3.R.....z%4.C..{k.(b..W..y3..f)~.+...Y.2".)j...(..jJ`..a.j...S.l0.yt8... ..1..1%0CM.8T.Q.b.XYu.....3..G..7p...f.0U......MR.\AG.tD.W.0.Q..djH..L..@/.lc.+UQ3dL;....Ya.1%...4pq1...A.....(R.Fbs.....C..\.I!.4K}.fXo0.;Ow%.<o..f.a(....:....jf.K.......).r-..df...<...$....JJ8V?..Q....!..%5% `...B..x..NP.p.......H1....Q3....h.+....wl[......f.%..G.C1<B6.cA..!..Z.....^.:.X...J. (.MQSb..A......N...p.x....}.....}...R.....<R.VW...K.5=%a..~TY...o..M6...j...v....B..333.OOO.R.z..V

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	845
Entropy (8bit):	7.737849160637306
Encrypted:	false
SSDEEP:	12:6v/7OAlpJDBk66hFjgf6oQAztbQk57fafyHFQy2nb0wjgeiwu0MYkIdrVjm1uhDs:glpdkDjrEzD57iqlkoFei4MYX3jhhWN
MD5:	4EEEBDCDA17EB527BD981630D97BD2CA
SHA1:	E84C561A4A2B8F20F01FA5208E5C45FFE14492C9
SHA-256:	E484C0B7C68E920EFE2D4C628CF582F9F480727F163BA8AFE31C74DBF3D8F0FD
SHA-512:	79CC4EA13C252F0AC550D17EAEBF30BFDE583DB05215D4401EC0631BDF1353BBD77AB2264A908E925C252FE59E35A2B2FF0CEA9C8AB1518BD7D721BC1220C101
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/shopping/deals/sports_and_outdoors.png
Preview:	.PNG........IHDR... ... ......s......IDATH...kh.u....R.f.Dx.\:Q....@.!....1r..z..,.T.xI..g.&.l.=.#..........6.vvn..9..4y.`#................3H../=...............%...N....;.N{.<ef)3...^:W0....._R..u9j......j]8...-.}..p5.HJH.....tE.v..uT..?...@ .....q11.u..^.>:.~..:..P(.p.Z..]....R~sJ"..=...a..i)_X.\....S....m..Hm..?2a....j/Za...l....B)..*..J:.S.^>)-.->W..\|3M1...x..%..G...s8.'...l..\|j.G.R..4...U..T.......M .:.F...,0C.B..H...a.JM..X..b_....c..f+6I...PF....+UbMs. y.o.1KUz\...LT.K .W..z.t[s.g.'...Ms.g..&)qBJ .._."V..^_........-"...@...%o.d..A.Lu.`......KTT.V1q)..^YY..z..9.....w....:u..%&...W.tK.?...yk..N..M.v.h.A...H.^.....;72....E.KZ.i...ujmwP(.l.F.r.....=N._.q.9.h4...p....().........q..~.."#.T`.1&X%..\.w.T>......Ro.\|.....(..G[..u...sCf..0.0.F....{{.'...K.5...._o9....+j..o.=d.?...J3.{g......IEND.B`.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21700, version 1.0
Category:	downloaded
Size (bytes):	21700
Entropy (8bit):	7.989666631701204
Encrypted:	false
SSDEEP:	384:PxbG/ZciREUTWlMwbptJm5f9/1HuLZ4r38bxSpfGL/+SHA+ilQlO3fq8O/4s:5bfiBWlRPm5fjrruYJGTiqlO3fo/p
MD5:	7D75A9EB3B38B5DD04B8A7CE4F1B87CC
SHA1:	68F598C84936C9720C5FFD6685294F5C94000DFF
SHA-256:	6C24799E77B963B00401713A1DBD9CBA3A00249B9363E2C194D01B13B8CDB3D7
SHA-512:	CF0488C34A1AF36B1BB854DEA2DECFC8394F47831B1670CAB3EED8291B61188484CC8AB0A726A524ECDD20B71D291BCCCBC2CE999FD91662ACA63D2D22ED0D9F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v14/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2
Preview:	wOF2......T...........T_..........................4......`..~..d..u.....,..$.....6.$..\|. ..V..K..^.=...sp.f.m../....l\.....T.9.n..A...........2x.{P[V..v%..M...f.7..+c.cM.'...$..u.H4[?i.'..T..+.(...L...inV.@.dd....T.. }b...c.ghRA..I$.su.....`....Q.OB..S.{.#.3..o.{v.........n...]f#b.J_.......}# ..1... F........=?O.\|._p........X.6.VQ..E..rU...}....dK.$...0.W..2i..Y...9.Y.............f{..6'....C:%.(........}.....W..._....k...\|.........Y8./..e..........L......_.9..v...2F..$..y)....UWu_..T.]qE.H.b..OP...B@.4.!,F..._............z.3..A,h.M.(...6~_[U$.....uM2...qz.v.........hV\\|?.......M-.h..by.A,.}.....?...52.g.,....<..s..k....h.U.]1.1..O......m......j...}6.j.v.a..R....Fj...).fO3........GSM....... ...GL..({A....$O..&'..\....:.x....{N.p8..q..iF..k...b.>....<..M..`.....d.I.5... .x...mo.L.?A(..F }./.._V.e.A.Z3.....C...h...f......(,..3....%.h'.?sG..&x..W.......b].'34.S#s...wiG.O....J.ADDDDBw.m;.....K.ti).....?.6.\.M..d.....[.z....4..D.b...6..F.....F..D.r

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (548)
Category:	downloaded
Size (bytes):	981532
Entropy (8bit):	5.602164507255768
Encrypted:	false
SSDEEP:	12288:ssAMRSQflaACIWhRRfSDS10YI8s86DVMitU3f6/p:s2SQdaAFWhRRqDU0YI8stVMitSUp
MD5:	022201167BBB865A6450139CB930B2C4
SHA1:	58832425C165404CD7B4B5025CD300AD5DDC7EF8
SHA-256:	95210DAC59C5FA62DF1E3D70F2116590D76C1E3CC189F75E04673BF952872A42
SHA-512:	910E55A856F1F623D01192DA82AB4BB42DD76ACDD17471B1CC7BB06DE90863B31D4662470F5FE59A9E6273E84372A32716333E8DAB37D3A112E95FE9FEA8D37D
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=1/ed=1/dg=2/br=1/rs=ACT90oFaYErXXA3hRaO-qDqG-y2SopXzQg/ee=cEt90b:ws9Tlc;qddgKe:x4FYXe,d7YSfd;yxTchf:KUM7Z;dtl0hd:lLQWFe;eHDfl:ofjVkb;qaS3gd:yiLg6e;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;iFQyKf:vfuNJf,QIhFr;SNUn3:ZwDk9d,x8cHvb;io8t5d:sgY6Zb;Oj465e:KG2eXe,KG2eXe;Erl4fe:FloWmf,FloWmf;JsbNhc:Xd8iUd;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;uY49fb:COQbmf;Pjplud:PoEs9b,EEDORb;QGR0gd:Mlhmy;a56pNe:JEfCwb;Me32dd:MEeYgc;wR5FRb:TtcOte,O1Gjze;pXdRYb:JKoKVe;dIoSBb:ZgGg9b;EmZ2Bf:zr1jrb;NSEoX:lazG7b;eBAeSb:Ck63tb;WCEKNd:I46Hvd;wV5Pjc:L8KGxe;EVNhjf:pw70Gc;sTsDMc:kHVSUb;wQlYve:aLUfP;zOsCQe:Ko78Df;KcokUb:KiuZBf;YV5bee:IvPZ6d;kbAm9d:MkHyGd;ZWEUA:afR4Cf;g8nkx:U4MzKc;qZx2Fc:j0xrE;lzgfYb:PI40bd;w9w86d:dt4g2b;GleZL:J1A7Od;bcPXSc:gSZLJb;JXS8fb:Qj0suc;IoGlCf:b5lhvb;VN6jIc:ddQyuf;vfVwPd:lcrkwe;xBbsrc:NEW1Qc;pNsl2d:j9Yuyc;VGRfx:VFqbr;BjwMce:cXX2Wb;ESrPQc:mNTJvc;R9Ulx:CR7Ufe;kY7VAf:d91TEb;NPKaK:SdcwHb;LBgRLc:XVMNvd,SdcwHb;UyG7Kb:wQd0G;LsNahb:ucGLNb;KpRAue:Tia57b;jY0zg:Q6tNgc;coJ8e:KvoW8;oSUNyd:fTfGO,fTfGO,pnvXVc;SMDL4c:fTfGO,pnvXVc;aZ61od:arTwJ;w4rSdf:XKiZ9;h3MYod:cEt90b;eO3lse:nFClrf;zaIgPb:Qtpxbd;HMDDWe:G8QUdb;ShpF6e:N0pvGc;k2Qxcb:XY51pe;IBADCc:RYquRb;pKJiXd:VCenhc;rQSrae:C6D5Fc;kCQyJ:ueyPK;EABSZ:MXZt9d;qavrXe:zQzcXe,mYbt1d;TxfV6d:YORN0b;UDrY1c:eps46d;F9mqte:UoRcbe;Nyt6ic:jn2sGd;w3bZCb:ZPGaIb;G0KhTb:LIaoZ;XUezZ:sa7lqb;aAJE9c:WHW6Ef;V2HTTe:RolTY;Wfmdue:g3MJlb;imqimf:jKGL2e;BgS6mb:fidj5d;gtVSi:ekUOYd;KQzWid:ZMKkN;UVmjEd:EesRsb;z97YGf:oug9te;AfeaP:TkrAjf;eBZ5Nd:audvde;CxXAWb:YyRLvc;OgagBe:cNTe0;SLtqO:Kh1xYe;tosKvd:ZCqP3;VOcgDe:YquhTb;uuQkY:u2V3ud;WDGyFe:jcVOxd;trZL0b:qY8PFe;VxQ32b:k0XsBb;DULqB:RKfG5c;Np8Qkd:Dpx6qc;cFTWae:gT8qnd;gaub4:TN6bMe;DpcR3d:zL72xf;hjRo6e:F62sG;yGxLoc:FmAr0c;pj82le:mg5CW;dLlj2:Qqt3Gf;qGV2uc:HHi04c;oUlnpc:RagDlc;R2kc8b:ALJqWb;Q1Ow7b:x5CSu;bFZ6gf:RsDQqe;okUaUd:wItadb;xbe2wc:uRMPBc;KOxcK:bFOvTc;G6wU6e:hezEbd;uknmt:GkPrzb;U96pRd:FsR04;PqHfGe:im2cZe;heHB1:sFczq;Fmv9Nc:O1Tzwc;hK67qb:QWEO5b;BMxAGc:E5bFse;R4IIIb:QWfeKf;whEZac:F4AmNb;tH4IIe:Ymry6;lkq0A:JyBE3e;daB6be:lMxGPd;LEikZe:byfTOb,lsjVmc/m=attn,cdos,gwc,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl"
Preview:	this._s=this._s\|\|{};(function(_){var window=this;.try{./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. SPDX-License-Identifier: Apache-2.0 /./. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2013 Google LLC.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2011 Google LLC.. SPDX-License-Identifier: Apache-2.0./.var baa,caa,maa,naa,oaa,paa,qaa,raa,saa,taa,uaa,yaa,waa,vaa,zaa,xaa,Aaa,Caa,Baa,Daa,Eaa,Faa,Haa,Iaa,Naa,Zaa,dba,mba,oba,sba,tba,zba,Cba,Gba,Iba,Lba,Oba,Nba,Qba,Dba,Sa,Rba,Xa,Tba,Xba,Yba,$ba,bca,dca,gca,hca,jca,lca,oca,qca,rca,xca,Aca,Cca,Eca,Lca,Mca,Nca,Jca,Oca,Ica,Pca,Hca,Qca,Rca,Wca,Xca,Yca,$ca,bda,dda,eda,gda,hda,ida,jda,kda,lda,nda,rda,sda,yda,zda,Bda,Ada,Eda,Gda,Fda,Ida,Hda,Lda,Kda,Nda,Pda,Rda,kb,Yda,Zda,$da,cea,dea,Vda,eea,fea,jea,mea,sea,tea,yea,Eea,Fea,vea,Hea,Iea,Gea,Nea,Oea,Pea,Sea,Tea,.wea,Uea,Wea,$ea,bfa,dfa,ffa,ifa,lfa,nfa,zfa,B

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	991
Entropy (8bit):	7.690170863960064
Encrypted:	false
SSDEEP:	24:DPumInGm728J467kcCUvn/x8KJ4SVWtIxvK5hTu9RXjF7:rumTW2D6jCm58KJ4QWtIxvK5hK9RXJ7
MD5:	59C612D421119B9572DD3A1E564A7BE7
SHA1:	28AF7D868981FBD4A64954E9B8450BE4DD1843FE
SHA-256:	B3492A75DDDBF248FD22FDA659091CFDA22B5812274F741CB982DAA0916A7783
SHA-512:	55667C951ECD2AAD2B766BEC3E0DF411335359D10A8119A40A03FBC0F12E244C3356157FAA708F7CEDF139743B38934E6DA7F8F7C076C61A0C14E3C7D9DC9CE0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATX....k_E......./.&QH.A)X.B..E....AA..h.VR.F(.......;.F.T..K..n....lk.m.6.m.$...8.H..c.[.=..s.3s.......3.;.3.g............k..?<.s@..O2s..4..... aA>2.2...4..9......=.O.4.....>....a.\Y"...#.t.a...t....=.....`.\|.L.K.EV..A.....jB..^.+=.8.Oi.".a.......J2PQ.gt.>..R.......)..$..9l^..s..Dk@..~........T.....+...6.#)... z.....m...F'........B8"F.J.".gz..v...X.....0}}.........H.(...`..#..28..9..7.......PX"..N,.>.LO..#s}.v.i...."....[ycZ.._.4.....(.$D...............sO..$,..0f..C.v....F...&.....q..Htn7..9"..J...".#..@..W..?Wl}.Z..\.....I..K.I...".v.D..n...4...2f...4x.I....X......J..xyK..W......P...].xD..c.M3HU.>.....-.....h........`......1.0.$.....4.~.z`.............*X..D..!.....&kwD. .C.'..M.Z...nc..Eb,..PuQ...0b.!@....V@\...X8y..M.x...6..m..!.....m...#T.H.bAR.C]...Y^}s.[.x...I.........V.. ..$.2#...".j..o1.%....z.^.vy..xj...vqsu.f..}.1\--R.....&.4Vn/s..~[.}...}v..Y.....~.).....kC..M..88..=....7.s.]........IEND.B`.

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 148x83, components 3
Category:	downloaded
Size (bytes):	3720
Entropy (8bit):	7.876466961998792
Encrypted:	false
SSDEEP:	96:ZDLVlHljwH8MTfcDav4XttthPlw10joEKBVsD:Z3VlFjIPTfkoaL7Pe1YobK
MD5:	9065CC6A70CB1BE18C6FE033570DD4CE
SHA1:	2EB6C8D961A4634ADCD685457A4F8196B805D6C8
SHA-256:	C8C5231B3A6F24DDB895C58A87ED7BC2C0527625C6713C945203F6A903D47B68
SHA-512:	DB15E2577FE524099391DE5E866932C71BFB0BEE3320CC1B347E9986C6638A9A69B3B977FB14B7FD13B87E2BBE7E01084105D9699F437BA10874ECEBEAF45A25
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/BGgisoPG7vw/mqdefault.jpg?sqp=-oaymwEFCJQBEFM&rs=AMzJL3ltyvOaBQdGhLfjXMZ6rOVXlWEjag
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......S....".......................................B.........................!.1.."AQaq....#2...BRr...Ts.....Cbc.$34...............................&.......................!Q..1A2a..."q............?...(,.\M._T..1.....B.........e....H..Y..;)...........?1M..9.."i5.z.....D.b.9.NN@...s.[..c... .E>0&._..i`$..Fq...J.6n.R...!..6T...7Z..e.h1..fs...\|(\|..WA.5...h.O[..i.."w.+v#.....g.J< .....qq.^5R.Alq......e.....>.=f.o:OO[6..&.....Q..<...>.R.P.l."hn.EI.C+.~Es.+E.<.&.X...C.8.\|sC..y3... ....=..^3..20.....E-.{}.J$]. .....v..4...u...G.fK....b.[1...d.LzgO.\(..Y.A..{..NJ?.....&..#'..Xq.;X.eFM1.....^U. .}4.=.x.NV.rN..K....m$C..A.s.T.K.n.xb...6..p@..S.BB..n..#../u>..C....$1:..C....G..s....o..%[...qO.o.N.....4.=..7`!W...<...".'.$f...r}5.......g.E....mn.z.#..{^..;FO'.R.x.f_2.....SU.......R.q.y..M........o.U.-...n-m....

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	350
Entropy (8bit):	6.922576431804136
Encrypted:	false
SSDEEP:	6:6v/lhPKqJZAeExL4cO+QnlBC7rZEiWAbmP4BZQv26xQppp8GBzy3kay5zBup:6v/7ia7EmW0m7bRmPU8dxQpppV+055zK
MD5:	F8F20B1A0E5303C04EBAAFD7F09A625C
SHA1:	ED0ED603206887E2D5AE2F0F770ADC2B869DE6DA
SHA-256:	895172C5269BC2F7F1B26A807944106D88FEF304586399A0D9A10E21C6A8DD46
SHA-512:	C8D8FEB29312771F14B72A6DC992303508A66B0CBDC85AF2EF9659AA36A3F7806ABBA595FB83F36DBF164962DB4493B00E5ECDAC8DA41EAB56DD146D8D9F7C0C
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/product/1x/youtube_32dp.png
Preview:	.PNG........IHDR... ... .....szz....%IDATx....d.@......P.A0.0.C1`.......a......C...Eq........0...C..^{........... DBS...I.:+I..H..H.......?.N.....WB..e.._B .[@M.dk..`..o...\|.VU.\|.u...0.......L..0.r....k M]#...o^....(........H...^.....s._........nr.S.`u...M..E4.{_D..M.D..6.@...wB.-=.......-.%l3.$.H..8.z.?R..%}.0...w..=y>2;......IEND.B`.

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	718
Entropy (8bit):	7.611137599952794
Encrypted:	false
SSDEEP:	12:6v/7WH2lL4T8BkBhwSmzryy5XFaBZpoMMDMV4MbT3ridAJe4zjUV:mlLW8BAiV/yylFaBoVDMPLrY54zjUV
MD5:	1AEF4A6CA0B40E75D5A0BCB5BF096E8C
SHA1:	3D4744A204A769ED68B9D091A37751C646803483
SHA-256:	2A46B7FF978EDF5D69F9035446327125E5A01EA7961059D8DD766A5243331C7C
SHA-512:	28760D97AE4FEEBA1469A24D572EE7236989E37307B76DFB01BEA553FE94B476D05DF0A1AEAD04EF6F34D5F5768BB14A6B104B2B8BF061E1376FF2511E4AE184
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/shopping/deals/electronics.png
Preview:	.PNG........IHDR... ... ......s......IDATH...iH.........2".......(..&ZX^3.V....)JH...EB..B%.l..Ysk.hJ.SW.Z.Lai.YYb.._C. .....<..?j.+IS6.j.....).[...$[.E._%HB.<{<..d....p!kH....3....\p$..-..}.."q..E.......3Al..-.......y.;Y..^=..x.e;.E.P....N;2.7^...n.H..>?.5......C.Afi..1.N.<.A.W..2k.m...Z'b....2.Y0ek.n..81....#.,2.. .%f...ty.E..&(....F.T..vy~.7.ch....4.=Y.... e...e..T...E...h.o7..?......x)<..._...LH.6....E.w...(.....?1..."....;L..\.-....... ..\b6&-G8...,.P VD&W..}..oD .#h.-4...X}.\|..s...2D..$....8.s..O....b..W..D<@..P"l.eO.qHY......5D..Y.....C..P.-:....D..x........Y.e.u6..Y..^..7P.gh.)...d.T..\|...tg.D.ZS.A..x..p....nc.9.Hc~w...FR8.}..G.w..\Y.....nK.b...H+....ets.._....IEND.B`.

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	downloaded
Size (bytes):	993
Entropy (8bit):	5.295306867990871
Encrypted:	false
SSDEEP:	24:E1sXIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:E1sXmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	5EB4FC44B364C555B6EF93B74949E31F
SHA1:	3F3BAD529014099F7B460092BDE1B19285A1C02B
SHA-256:	0DE2A176AD08F62D4EB01561E51936094F156760B03746E2F17E69345824F7B2
SHA-512:	6D6281506FC62CE240960C9907AD0D2A07C0FCE238AC9649820E5178FDE8CBE1D44386B2D72905DD13FFB7273AE85F5BC1EDDB0792CE1EF513D9AB754F54F115
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/iframe_api?version=3
Preview:	var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/63e90c30\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTagName("script")[0];b.parentNode.insertBefore(a,b)})()};.

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2861)
Category:	downloaded
Size (bytes):	387794
Entropy (8bit):	5.5952534188691585
Encrypted:	false
SSDEEP:	3072:D7oPrKacoGqYnw9Rtvn+wMWrwF752dnzjwb0NYiG2Uory8:2r7LAiRRu2CbgYBy
MD5:	FAE67387A97942D8C92141BD5380FF63
SHA1:	2F7690E8B292B878FBD086E3F4E7CA64C641AC32
SHA-256:	EB78D18B4AE22396E9F65278639CD7271615A72FCED42B8F89B48D6E6C57AECB
SHA-512:	E01C8EA77984221BE05DA870805173BFF63A5CA9391170A8205E8B50B50D587A1FE49EA17A3C04A3446FE6A673B9672DAB5834AD5B686A15C24220035198F12A
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=1/exm=SNUn3,attn,cEt90b,cdos,csi,d,dtl0hd,eHDfl,gwc,hsm,jsa,mb4ZUb,qddgKe,sTsDMc/excm=A9AtR,ABxRVc,AD6AIb,Adehte,B0xr7b,BH66lf,BVlhmd,CX5LId,D1J6He,DwnPgd,FljZ5,FmnE6b,FuQWyc,G4tpde,GLGZs,Ghqpae,H5Kvfd,JxE93,KbVV9d,KzZUob,M4w02c,MRb7nf,Mvtsf,Mxvwsd,Nly0kd,NsEUGe,ONYJsd,Oa7Qpb,Ok4XMd,Ollhtb,P4P2Yd,PX0cP,PoJj8d,PvSBGf,Q6cvgf,SJv1S,SLDaee,SMP3Ge,SfrWY,SiRWre,TO0csb,Trirbc,TurKxc,Tzd4Yc,U3Ovcc,UQpTU,UiPhkb,VZLyBe,WH3Khc,Wx0Z2d,WxJ6g,X6KoRc,XHo6qe,XbupY,Xk0c,XkocRe,Y2uByd,Yltq7c,YuNOCb,ZgKcee,ZrXR8b,Zudxcb,ZyUK2d,adn7N,ak946,bXyZdf,cKV22c,dI5Ii,eTv59e,erGeSe,f1YgBd,fNMhz,hU1IHe,hfJ9hb,hj5Zu,i5w0Yc,iAQA6,j0qO9b,jkRPje,kCkfUb,kOSi0d,oXRDzc,pPanAd,pTgt2d,pbYjsd,pqUxUc,qngJBf,rL2AR,ra3uhb,sU6eaf,tlA71,tzTB5,uUhTh,vJPFse,vbjdXc,vhpQNc,vymBNb,wKa2Bd,xB2dQd,y0l7mc,y25qZb,yChgtb,yuQBec,zjNhL,zoFt6e,zs9f9d/ed=1/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/ee=AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DULqB:RKfG5c;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;IBADCc:RYquRb;IoGlCf:b5lhvb;JXS8fb:Qj0suc;JsbNhc:Xd8iUd;KOxcK:bFOvTc;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe;Pjplud:EEDORb,PoEs9b;PqHfGe:im2cZe;Q1Ow7b:x5CSu;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;SLtqO:Kh1xYe;SMDL4c:fTfGO,pnvXVc;SNUn3:ZwDk9d,x8cHvb;ShpF6e:N0pvGc;TxfV6d:YORN0b;U96pRd:FsR04;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YV5bee:IvPZ6d;ZWEUA:afR4Cf;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bFZ6gf:RsDQqe;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:audvde;eHDfl:ofjVkb;eO3lse:nFClrf;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;io8t5d:sgY6Zb;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kY7VAf:d91TEb;kbAm9d:MkHyGd;lkq0A:JyBE3e;lzgfYb:PI40bd;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO,pnvXVc;oUlnpc:RagDlc;okUaUd:wItadb;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qGV2uc:HHi04c;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:mYbt1d,zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;uknmt:GkPrzb;uuQkY:u2V3ud;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:O1Gjze,TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;xbe2wc:uRMPBc;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=Eox39d,GElbSc,HYSCof,TSZEqd,fcDBE,l17Pib,pHXghd,pgCXqb,s0j7C,tIj4fb?xjs=s1"
Preview:	this._s=this._s\|\|{};(function(_){var window=this;.try{._.x("FmAr0c");.var Ioi=function(a){_.Kn.call(this,a.Ka)};_.E(Ioi,_.Kn);Ioi.qb=_.Kn.qb;Ioi.Fa=_.Kn.Fa;Ioi.prototype.kEd=function(){};_.Mn(_.GSa,Ioi);._.y();.}catch(e){_._DumpException(e)}.try{._.x("yGxLoc");._.Joi=new _.Hn(_.HSa);._.y();.}catch(e){_._DumpException(e)}.try{._.cvh=_.z("Eox39d",[_.HSa]);.}catch(e){_._DumpException(e)}.try{._.x("Eox39d");.var Loi=function(a){_.D.call(this,a.Ka);this.z_a=a.service.u_f;this.z_a.kEd(this.getRoot().el())};_.E(Loi,_.D);Loi.Fa=function(){return{service:{u_f:_.Joi}}};Loi.prototype.oa=function(a){null==_.Moi\|\|_.Moi.BHf(a.data,this)};Loi.prototype.ka=function(){null==_.Moi\|\|_.Moi.JKe(this)};_.J(Loi.prototype,"MdxpAb",function(){return this.ka});_.J(Loi.prototype,"VVjTpc",function(){return this.oa});_.or(_.cvh,Loi);._.y();.}catch(e){_._DumpException(e)}.try{._.x("HxbScf");._.srf=_.H("K6uUze");_.trf=_.H("zqMmRc");_.urf=_.H("jx4fbd");._.y();.}catch(e){_._DumpException(e)}.try{._.vrf=_.z("IFqxxc",[]

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 310 x 163, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2244
Entropy (8bit):	7.822694001839353
Encrypted:	false
SSDEEP:	48:5kQGcvNdOtmXVlzMkD/FTZQo5H0/BPh+n+AdoGzkcY42ulxmMtaa1bRl+H/hCem3:ecvWtSVtJDddl0lGzk7422QEaa1bRIM3
MD5:	932A3EFEAD7DA16BC06AE7FA1B5A9412
SHA1:	122D53F20FCD874BFEA8ADD51C336CB7DE02FA6D
SHA-256:	5D1F511937FC264ADCE879A38507C2D0D95E898E959E92A6BD74EA216AF6E4DA
SHA-512:	C02BA890151FF6FA6C130E841E088E57822292A1B3A1803BD6BC85A00226ADF007E8EA5AA40386AE3341C2D71490311029BAAB1201E1B5B5D7E8148E6076BEEB
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn3.gstatic.com/images?q=tbn:ANd9GcTpkmj1Oa58go_zT39ZHjJoOGLh4JT_Lfhfj0R8K0GK2QojmFHoUOHLQOvt-qI
Preview:	.PNG........IHDR...6.........7.......PLTE...!Bx..../m......!Ay.1n.<t...]q....$Cv!Bw....?w1L\|.....k...3NyIa.....bu..1o.8s...fy.Pg.....6s{.....;T..'j.i.3kq... f%Et...+Fz....<yTk..'k..c...BW.{.....?hr......4.T....IDATx...z.:.@.H....V....v.3..9}.G;.IDn.J.O.~t....e.$H.. .. .. .. .. .. .. .. .. .. .. .. ..................G.......S..sG.J.Og.G.A...E..`b...Z.a.!...9......UPJ...q#O...j..:L..I.A!+@Y<H..VF..L..B.....(..^.@]-.p.6....>3.CU.[8.......X.b..~-f..IL.w..H......>... .c&K...t]...S.Xg.....'........x2..A..TW.B.z]..O.....(......\|u4O".J.....o..2K....ls...1.i.._;Kx.X..pj!..............W/..<..B_....RW;....v.....l.T......$hMI\.v..}.0..O..........`....5..5...d.&..dL...m..v~.C>.=........~>...U....[wz.c..Q.'.....y=.."..k....h.+`.O..ZT..uj;..P[.P[#Z..:...{U..w..d.r...H.~s.......w....&q....RM.....<{mThSa..}.....1m.$.4.m.vdi..4k..r.W..574...r...f..R.......wqN9...r...}Z<_..nDFV.._F..C=.....7k.6.@r.C\|...7h.6.........x.U.=g\$r.m3m2.......!LW.."...8.6.n..{.JE..

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1684), with no line terminators
Category:	downloaded
Size (bytes):	1684
Entropy (8bit):	5.216192159642517
Encrypted:	false
SSDEEP:	24:lZ9Zq3+q5OWx3VHqLrV8ujZBMc5KHKRkIWKfZUvGqRUvGAL7uzZrqHgkxUZZVO4R:lZUJVKLJJEcoKazKfZUvGCUvGUdHgpOW
MD5:	C418F8E8DEBD047B7254A6AF760EFE28
SHA1:	8CBFCCF9FA0375FF7B3D5EFA31E9688853E8588E
SHA-256:	D4425AB89A113E26300494CA1AA0CC26853DE9BA021BBBC1F49A8C1C36E6983A
SHA-512:	16A004D97A9F1B436C121CB72A9C7FBE1E01E3985DBC489DE1593FB1742F7A2A33E85D364E76DE8E24425C39B5F329F683D2C3DBFFEF066996F36B9F225B10E3
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.4eRGyM6nNYU.L.W.O/m=qcwid/excm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/ct=zgms/rs=AA2YrTtlTe1Rz8EyuaKxsSI_LfAM1SE1vg"
Preview:	.gb_Xe{background:rgba(60,64,67,.9);-webkit-border-radius:4px;border-radius:4px;color:#fff;font:500 12px "Roboto",arial,sans-serif;letter-spacing:.8px;line-height:16px;margin-top:4px;min-height:14px;padding:4px 8px;position:absolute;z-index:1000;-webkit-font-smoothing:antialiased}.gb_Cc{text-align:left}.gb_Cc>*{color:#bdc1c6;line-height:16px}.gb_Cc div:first-child{color:white}.gb_ma{background:none;border:1px solid transparent;-webkit-border-radius:50%;border-radius:50%;-webkit-box-sizing:border-box;box-sizing:border-box;cursor:pointer;height:40px;margin:8px;outline:none;padding:1px;position:absolute;right:0;top:0;width:40px}.gb_ma:hover{background-color:rgba(68,71,70,.08)}.gb_ma:focus,.gb_ma:active{background-color:rgba(68,71,70,.12)}.gb_ma:focus-visible{border-color:#0b57d0;outline:1px solid transparent;outline-offset:-1px}.gb_j .gb_ma:hover,.gb_j .gb_ma:focus,.gb_j .gb_ma:active{background-color:rgba(227,227,227,.08)}.gb_j .gb_ma:focus-visible{border-color:#a8c7fa}.gb_na{-webkit-box

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	246272
Entropy (8bit):	5.222753169596996
Encrypted:	false
SSDEEP:	6144:VlVZMl5hFQFh7ZYLnqnVHg4hffPvZnnL6jqI:VlbSFQv7ZYTqnJ5hfXvZnOjqI
MD5:	8C9BE4FD8C48EF153A891580B533AA32
SHA1:	CB6BB1F6F06C6ADCEBF7A2B5776B58C23AB77660
SHA-256:	359238E8BB879A985D900A1493B5EE42438B7C9D7409590F56F5D9B4B6CE1D5A
SHA-512:	9997C24CD76E1617E2C6F5E2F8A43D974C88B8EF95DA7A0BEFF9253AF00EE3079398C5000E8F4AA57911034838B3A8909D0EC4F93017626DE7DAB357B8E3F293
Malicious:	false
Reputation:	low
URL:	https://www.google.com/xjs/_/js/md=1/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A
Preview:	{"moduleGraph":"quantum/t7xgIe/ws9Tlc/cEt90b/qddgKe/yxTchf/sy6x/sy6y/sy6z:6,7/sy70/xQtZb:5,8,9/sy71/R9YHJc:8,b/KUM7Z/wrzEXb/TxCJfd/WVDyKe/sy72/Vj9hpd:g,h/tafPrf/dtl0hd/lLQWFe/Il1M4b/eHDfl/FONEdf:k/JiVLjd:k/FAUdW:k/dMZk3e:n/ofjVkb/qaS3gd/T9y5Dd/yiLg6e/Q7BaEe/tRaZif:u/F2pEhc/n73qwf/UUJqVe/MpJwZc/sy73/nAFL3:12/sy74/NTMZac:14/sy75/sOXFj:16/sy76/oGtAuc:18/sy77/sy78:1a/byfTOb:1b/sy79/sy7a/sy7b/sy7c/sy7d/LEikZe:1b,1d,1e,1f,1g,1h/sy7e/xUdipf:1j/sy7g/sy7h:1l/sy7f:1j,1m/sy7j/sy7i:1n,1o/sy7k/NwH0H:1k,1p/sy7l:1h/sy7m/gychg:1i,1r,1s,1t/Ulmmrd:1u/rJmJrc:1a,1f/GHAeAc/Wt6vjf:1f/lsjVmc:1e/IZT63/Vgd6hb/sy7o/sy7p/sy7q:22,23/YNjGDd:24/iFQyKf/sy7s/sy7t:27/sy7r:20,24,28/PrPYRd:25,29/sy7u/vfuNJf:2b/sy7v/hc6Ubd:26,2a,2c,2d/sy7w:12,18/sy7x:28/sy7y/q0xTif:13,14,16,19,2a,2f,2g,2h/sy7z/rLpdIf:2j/w9hDv:1r/JNoxi:1v,2l/SNUn3/ZwDk9d:1j/RMhBfe/U0aPgd/io8t5d/sy80/KG2eXe:2q,2r,2s/Oj465e/sy81/FloWmf:2t,2v/Erl4fe/RuUrcf:2u/JsbNhc/Xd8iUd/sy82/d7YSfd:6,7,2z,31/sy83/sP4Vbe:33/sy84/ul9GGd:35/kMFpHd/sy85/sy86/sy87/sy88:38,39,3

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (37169)
Category:	downloaded
Size (bytes):	37174
Entropy (8bit):	6.081008985362579
Encrypted:	false
SSDEEP:	768:ZR5hxhvQSQSnSWaiZ4SbRahKOCkXLlAQB/yMDUPbAnY39e7pAFvch2PIHOF:1hfQSpHTSjCulAaLoPbAYipGcUF
MD5:	0DE07257479A22B8ACBDF2B4367E8F9A
SHA1:	D26AAE454571CCAE133FD9B1444AFE7F5FCC47BD
SHA-256:	1BC6F1C92E1999EB16B14CB73DFCD1CB1C40E3CF71DA6DCB9EE547E8A8502727
SHA-512:	35534DE6A665F55E36EBE8B36E3C98DA9948B646B9CEAFF4DCEC9DD4B7DA5FB1A3F4B2F58A6D4239EAB9FDA0F1F6F89F85F0196D1511D2C5B628A76BDD49610C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?q&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=2&hl=en&authuser=0&pq=shop%20deals&psi=xSpeZdzvEPyy5NoPhfSymAc.1700670154779&dpr=1&ofp=GNili-aT8dTX-AEYq6v4uKT5pbUGGJy7yeSa--vGyQEYhNjxudn_8qk4GLPEg_rl1d7Ocw&nolsbt=1
Preview:	)]}'.[[["veterans day",0,[512,650,362,308,67],{"zl":90000}],["aqi",0,[512,650,362,308,67],{"zl":90000}],["shop sneakers deals",0,[512,650,362,308,67],{"zl":90000}],["shop deals on toys \u0026amp; games",0,[512,650,362,308,67],{"zl":90000}],["shop tvs deals",0,[512,650,362,308,67],{"zl":90000}],["slickdeals",46,[512,650,357,357,199,465,362,308,394,439,468],{"lm":[],"zh":"Slickdeals","zi":"","zl":90000,"zp":{"gs_ssp":"eJzj4tLP1TcoqsopqKhSYDRgdGDw4irOyUzOTklNzCkGAHqWCM8"},"zs":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAMgAAAA6CAMAAADC3Oa+AAAAt1BMVEX///8AAAAOc7oAb7gAcbkAbLfy8vL39/dDQ0PIyMgmJib7+/u1tbXj4+PBwcHr6+ssLCykpKSWlpZfX1+JiYkhISFsbGwNDQ0aGhra2tpQUFBaWlp7e3sAaLUWFhaQkJA3NzfR0dHr8vlgoNDl6faovd/K1utmlcza4vG8y+hBj8g9gcLc6vUseb+LqtYAer56sdmYvNwsh8SjxuK80+h8otGUs9hcjcmIudx1pc/J3u5oqdVRl8tBH1YIAAAKeElEQVRogdVa2XbiQA71vuAdg8FmdwBDiEl3CCSd7v//rpFULi/YIXNmHhJ0TjdgCqNburqSighCwz4epZdfH8Ld28ezLEny7Pnvk/Xdrvxfpv9WJTJ59vLrnrE8PchSYYo6e3lf63cK5lVSpMoQy+80vUMsJbNKk9XZ4+/13WF5epSllsmq/Hi6MyxNZl

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 222x186, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	3490
Entropy (8bit):	7.942455974270482
Encrypted:	false
SSDEEP:	96:P0nC4vJedfPYDo9kWniKD9Fi6WKdXKLgzm/pYOvglA:cCGsfw+ZDijKdM+u9vMA
MD5:	10F91D7C0964E5D65D193DFCD793B0FA
SHA1:	6BA385995A6A84646FBF479F3EC4ABDCEEF3687F
SHA-256:	DCB47B4A7883ADCFD002412FD6B7501A391BCE25FBC4ACFBF50C1E5CD22B6939
SHA-512:	07D4E05A50395B1237D01066758FD33B1793A1045EB4410AD6FC68120A917812D2B2BCFD8081A2B6419A9B3DB6FBBFD4A0225C3C7BAD402FBBD2D1C07913B606
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .....>.......>=..D"!....4 ...p.8p..,R%20_....6i.I..L....e.....u!..=a4....B....7..C.+.....zB(..M..K.&s.zF.,....._...............&J..y.......+L.....E...wU.x0N.!..$.....?...7..a.-...P.`..N....e..B.N..e..T..X_.ST\|..g.r=.=?.}.....M..5.q...[)........F.,.4YV.....M.....u...oET\.......s.A?2<..<.87..(.;..a....x.yo..O.\C..y..!x~.x8u...G...x...'.k.y.l..n/.....:..5E.._)g.j."...8.8AC._Ks.P%O5..D.l..Q.......T#Ht.g.==.\|..[.@.k.B.(.p....g4...S...k.C....=N..C..~.?...j.Z]e.\|.I..kw...u.U..T...sM.....t.B>.x.S=...y.....8.l.q5....5.eE'.[..R<.o..x$(...o..S..........}...w.w/K..\|pT.xs.z.\N..YK.$.@..J...Z6&.y.BY[N.~.@......\. W....:>.M.po..x.h....t.......H.C+.<.......Ej..nz\|ev.2...M..nf`$!'G?%...)9..c..(O.0.O5.?.bv'%U1B\|n..Ns..g.2...niK.{]...!.[.]g.?.n.p......${.A....=.*CGbQG...,..q...u%.;.-Z&.....f.......]...'.Z%....z..H..w..........\|\|...w...j..QGc...UY..P+.0x.".Y...L..B.\|.....C.....A..e.....B.y...K..X.... !0......A..y..j..LH@mqz2w..q[.x.f.....+....

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16232)
Category:	downloaded
Size (bytes):	518569
Entropy (8bit):	5.570244505483327
Encrypted:	false
SSDEEP:	6144:Fi7uRB3CLJmtYrfdHs+SN29VsTAVs94GSx8W2S+nRHOKbWP+zFYWSCEEVAj:UKCLJmtU960Gxe9j
MD5:	B6D8A26B837F4187CBCBBC242DCB88A5
SHA1:	9195F5E0503492452D44C5967AA286296D674D0F
SHA-256:	59903FE7BED325ABE03DDA5A419B332C40F9D5B8272AAB138377A5655663EFED
SHA-512:	190F585A9F0F1E7397A06D8D977E752BEEF9D7DAD15C55323D8B5C9B391E83C893531A5A840231E7A3ABFBC0BA1D8F8AF754E25230FE478BC29872A671EB277E
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-search/_/js/k=boq-search.ViewPackageService.en.5vFoIj6rx6g.es5.O/ck=boq-search.ViewPackageService.fuMBNisZ1jo.L.B1.O/am=DAIAQIAAAAAAgAAAABAAAAAAAAAAayNc9I-AjQDgwfry__9JICim5wcAQAgAwCBiA8CIDgAACIABoAAAAAAgCjoegEACRAShCwAPiBCPAECpge5WYU0AkAEfJYAASACcBBQAAAAEAADA4AEAYB8AIIAwIyDiAAAAAMA1DxgQAAAAAAAAAAAAAEEhLwIqAgAAAAAAAAAAAAACoEk/d=1/exm=A7fCU,KG2eXe,NwH0H,RMhBfe,VwDzFe,_gbm,w9hDv,x8cHvb,xUdipf/ed=1/dg=0/rs=AH7-fg4t4gGfMGBENuEcV0ZBKDMYVTU3JQ/cb=loaded_1_3/ee=ADJUGe:nSzGM;AfeaP:TkrAjf;Al37kf:WF2Oxf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CRubWc:GGHMXc;CxXAWb:YyRLvc;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;GzNeK:lwR3kb;HMDDWe:HPcd9d;IcRVsb:TzIJDb;IoGlCf:MEmnGe;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KQzWid:ZMKkN;LBgRLc:SdcwHb;LWyKNe:OGn9Jd;LsNahb:ucGLNb;MWIbN:Oezo8e;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;NoD55:tHLYle;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OGn9Jd:vP7cyb;OgagBe:cNTe0;OohIYe:mpEAQb;Pjplud:EEDORb;QGR0gd:Mlhmy;QHcAG:Doact;Qoo2ob:xNwrGf;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;Rlgi2d:XM4pie;SFqMfe:d7N0Ze;SLtqO:Kh1xYe;SnFeMb:gIO09b;T9F76b:IGrxNe;TxfV6d:YORN0b;UDrY1c:eps46d;UVmjEd:EesRsb;UVzb9c:W0fpg;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VxQ32b:k0XsBb;W1Xvfd:KwNFR;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;XcupOe:nPGmVc;YV5bee:IvPZ6d;ZMvdv:PHFPjb;ZlOOMb:ka50sc;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;aoM3kc:RmZU0e;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;cZGwze:Uq2Ztb;csKcjd:SWn78c;dIoSBb:SpsfSb;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:sVEevc;eBZ5Nd:audvde;eGOC9b:UFUkKb;eHDfl:ofjVkb;eO3lse:TC8ZNd;fWLTFc:TVBJbf;fcYTHe:rDv7Wc;flqRgb:ox2Q7c;fufDm:kGNN9b;g8nkx:U4MzKc;gPGwWe:ds8otb;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:wV5Pjc;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;iFQyKf:QIhFr;imqimf:jKGL2e;io8t5d:yDVVkb;jGHevf:wsoZ3c;jWrxGe:FHj41b;jlykkc:Ixcocc;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;kbIuKc:rDv7Wc;kyjn6b:CfXVTe;lUFnVe:Sq92Y;lkq0A:IbjKve;lx12yf:OtBNv;mT6AUb:vsaskf;mWzs9c:sVEevc;nAFL3:s39S4;oGtAuc:sOXFj;okUaUd:Kg1rBc;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:MdUzUe;pj82le:mg5CW;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:x4FYXe;qsajS:qGotLb;rQSrae:C6D5Fc;rebY5d:S5i2J;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;slvZxc:FU6yf;tGdRVe:b5f3kc;tH4IIe:NoECLb;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;ul9GGd:VDovNc;uuQkY:u2V3ud;vAvu5d:O6oXm;vGrMZ:Y1W8Ad;vXy3B:yzQjhd;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:aIe7ef;wQlYve:aLUfP;wR5FRb:O1Gjze;wV5Pjc:nQze3d;whEZac:F4AmNb;xBbsrc:NEW1Qc;xMUn6e:e0kzxe;xqZiqf:BBI74;yxTchf:KUM7Z;z97YGf:oug9te;zaIgPb:l09DXe;zxnPse:GkRiKb/m=n73qwf,mI3LFb,MpJwZc,P9vDhc,szFNKc,coOdHc,IZT63,LEikZe,COQbmf,Pkx8hb,L919Z,nQze3d,fkGYQb,lazG7b,Kg1rBc,PrPYRd,gychg,RDV3Nb,Wq6lxf,Mlhmy,SRsBqc,mdR7q,Rr5NOe,sVEevc,MI6k7c,kjKdXe,hKSk3e,X8lTKe,fM7wyf,sFyk7b"
Preview:	"use strict";_F_installCss("c-wiz{contain:style}c-wiz>c-data{display:none}c-wiz.rETSD{contain:none}c-wiz.Ubi8Z{contain:layout style}:root{--uv-styles-color-surface:#fff;--uv-styles-color-footer:#f8f9fa;--uv-styles-color-outline:#dadce0;--uv-styles-color-icon-on-secondary:#70757a;--uv-styles-color-scrim:#0009;--uv-styles-color-on-scrim:#fff;--uv-styles-color-icon-on-scrim:#fff;--uv-styles-color-primary:#1a73e8;--uv-styles-color-on-primary:#fff;--uv-styles-color-secondary:#e8f0fe;--uv-styles-color-on-secondary:#1558d6;--uv-styles-color-on-tertiary:#202124;--uv-styles-color-icon-on-tertiary:#9aa0a6;--uv-styles-color-tertiary:#f1f3f4;--uv-styles-color-text-primary:#1a73e8;--uv-styles-color-text-emphasis:#202124;--uv-styles-color-icon-emphasis:#202124;--uv-styles-color-text-de-emphasis:#70757a;--uv-styles-color-text-default:#3c4043;--uv-styles-color-icon-default:#3c4043;--uv-styles-color-review-stars:#fbbc04;--uv-styles-color-review-stars-empty:#dadce0;--uv-styles-color-letterbox:#f1f3f4}.k

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1792)
Category:	downloaded
Size (bytes):	2791
Entropy (8bit):	5.471188948334246
Encrypted:	false
SSDEEP:	48:pllgE93YJcG/qakGPBShPkrSiGEB7SSREJyAdcL2L:pj93YmO3SZkSEEdLL
MD5:	D499282C8BA5022853BB34CC4FAE9C22
SHA1:	F14796137233E2B57F0D1D46F2287CA5A95A2861
SHA-256:	21E2565C8BEBB014504E18135E2696E992F6A1695C726BEC9CE8C5B7DAAFFFDF
SHA-512:	80A3369AB47A863120B228770AF7D9F93C8D22840C3C5FD2EADA4118552A7B6926568FA704F0ADB82EB5AB0BC01CD1E2B26D337572C298132C39F9839482FDD7
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-search/_/js/k=boq-search.ViewPackageService.en.5vFoIj6rx6g.es5.O/ck=boq-search.ViewPackageService.fuMBNisZ1jo.L.B1.O/am=DAIAQIAAAAAAgAAAABAAAAAAAAAAayNc9I-AjQDgwfry__9JICim5wcAQAgAwCBiA8CIDgAACIABoAAAAAAgCjoegEACRAShCwAPiBCPAECpge5WYU0AkAEfJYAASACcBBQAAAAEAADA4AEAYB8AIIAwIyDiAAAAAMA1DxgQAAAAAAAAAAAAAEEhLwIqAgAAAAAAAAAAAAACoEk/d=1/exm=A7fCU,ANyn1,COQbmf,D8Qs1c,EMKV5d,EU1dwe,Fdd8nd,Gu8rrc,I6YDgd,IZT63,KG2eXe,Kg1rBc,L919Z,LEikZe,LUacLb,LmbeUd,MI2fVb,MI6k7c,Mlhmy,MpJwZc,N3wSKe,NwH0H,ObWLec,P9vDhc,Pkx8hb,PrPYRd,Qg94gd,Qj0suc,RAw16,RDV3Nb,RMhBfe,Rr5NOe,S9MdGb,SGpRce,SRsBqc,SzpDQc,UFZhBc,UXfCNd,VwDzFe,Wq6lxf,X8lTKe,_gbm,al77M,b6vcbb,btdpvd,cj77d,coOdHc,f159cf,fM7wyf,fgj8Rb,fkGYQb,gskBEc,gychg,hKSk3e,hhzCmb,hwnrob,i4bkXc,kQvlef,kjKdXe,lazG7b,lcrkwe,ljp6td,mI3LFb,mdR7q,msnw6d,n73qwf,nQze3d,obXUHb,qszQwf,racp,sFyk7b,sVEevc,szFNKc,tOtTyb,ttQ27,vYwzYe,w9hDv,wKdTle,wk9bT,x8cHvb,xUdipf,y0wzC,yPDigb,yemSVb/ed=1/dg=0/rs=AH7-fg4t4gGfMGBENuEcV0ZBKDMYVTU3JQ/cb=loaded_1_5/ee=ADJUGe:nSzGM;AfeaP:TkrAjf;Al37kf:WF2Oxf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CRubWc:GGHMXc;CxXAWb:YyRLvc;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;GzNeK:lwR3kb;HMDDWe:HPcd9d;IcRVsb:TzIJDb;IoGlCf:MEmnGe;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KQzWid:ZMKkN;LBgRLc:SdcwHb;LWyKNe:OGn9Jd;LsNahb:ucGLNb;MWIbN:Oezo8e;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;NoD55:tHLYle;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OGn9Jd:vP7cyb;OgagBe:cNTe0;OohIYe:mpEAQb;Pjplud:EEDORb;QGR0gd:Mlhmy;QHcAG:Doact;Qoo2ob:xNwrGf;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;Rlgi2d:XM4pie;SFqMfe:d7N0Ze;SLtqO:Kh1xYe;SnFeMb:gIO09b;T9F76b:IGrxNe;TxfV6d:YORN0b;UDrY1c:eps46d;UVmjEd:EesRsb;UVzb9c:W0fpg;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VxQ32b:k0XsBb;W1Xvfd:KwNFR;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;XcupOe:nPGmVc;YV5bee:IvPZ6d;ZMvdv:PHFPjb;ZlOOMb:ka50sc;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;aoM3kc:RmZU0e;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;cZGwze:Uq2Ztb;csKcjd:SWn78c;dIoSBb:SpsfSb;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:sVEevc;eBZ5Nd:audvde;eGOC9b:UFUkKb;eHDfl:ofjVkb;eO3lse:TC8ZNd;fWLTFc:TVBJbf;fcYTHe:rDv7Wc;flqRgb:ox2Q7c;fufDm:kGNN9b;g8nkx:U4MzKc;gPGwWe:ds8otb;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:wV5Pjc;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;iFQyKf:QIhFr;imqimf:jKGL2e;io8t5d:yDVVkb;jGHevf:wsoZ3c;jWrxGe:FHj41b;jlykkc:Ixcocc;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;kbIuKc:rDv7Wc;kyjn6b:CfXVTe;lUFnVe:Sq92Y;lkq0A:IbjKve;lx12yf:OtBNv;mT6AUb:vsaskf;mWzs9c:sVEevc;nAFL3:s39S4;oGtAuc:sOXFj;okUaUd:Kg1rBc;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:MdUzUe;pj82le:mg5CW;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:x4FYXe;qsajS:qGotLb;rQSrae:C6D5Fc;rebY5d:S5i2J;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;slvZxc:FU6yf;tGdRVe:b5f3kc;tH4IIe:NoECLb;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;ul9GGd:VDovNc;uuQkY:u2V3ud;vAvu5d:O6oXm;vGrMZ:Y1W8Ad;vXy3B:yzQjhd;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:aIe7ef;wQlYve:aLUfP;wR5FRb:O1Gjze;wV5Pjc:nQze3d;whEZac:F4AmNb;xBbsrc:NEW1Qc;xMUn6e:e0kzxe;xqZiqf:BBI74;yxTchf:KUM7Z;z97YGf:oug9te;zaIgPb:l09DXe;zxnPse:GkRiKb/m=oSegn"
Preview:	"use strict";loaded_1_5(function(_){var window=this;._.m("bBErTe");.var m1b;_.n1b=function(a){if((0,_.G$a)(a))return a;if(m1b(a)){var b;var c=null==(b=a.Fb())?void 0:_.rg(b,_.qg)}else{if((0,_.wxa)(a)){var d;c=_.Lka(_.Txa(new _.An,null!=(d=a.getUniqueId())?d:"").ud(1),a)}else c=a;a=_.Vg(new _.ln,_.Pg(new _.hn,_.qg,c))}var e;if(null==(e=c)?0:e.hasExtension(_.I$a))return _.w(_.rg(c,_.I$a),_.Ot,1);b=_.Rt(new _.Ot,a);var f;e=null==(f=c)?void 0:f.getId();null!=e&&_.Qt(b,e);var g,h;c=null==(g=c)?void 0:null==(h=g.Dc())?void 0:_.Xg(h,5);null!=c&&_.Hg(b,5,c);return b};.m1b=_.Hd(_.ln);._.p();._.NVc=_.G5a.Ko(9);_.OVc=function(a){_.j6a.call(this,a)};_.D(_.OVc,_.j6a);_.OVc.prototype.Ba=_.aa(128);.new _.Th(_.$s);_.Dm.IpsfGc=_.Cm;._.m("oSegn");.var PVc;PVc=function(a){var b=null==a?void 0:a.Fb();b=(null==b?0:b.hasExtension(_.qg))?[_.rg(b,_.qg)]:[];var c,d;a=(null!=(d=null==a?void 0:null==(c=a.Me())?void 0:_.Wg(c))?d:[]).map(PVc).flat();return b.concat(a)};_.QVc=new _.ss(11196);_.RVc=new _.ss(11195);v

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 24 x 24
Category:	downloaded
Size (bytes):	4465
Entropy (8bit):	7.666715222755507
Encrypted:	false
SSDEEP:	96:HxiWESDh8K9aI+yQMPAOjDBk9Et4X6ILzaqPuAO:HcWESDXaXyZjDB9q5O
MD5:	6BCD2C5891A5E617898FF487DF0D2082
SHA1:	A2242A3F396F1FEAF7AEABD40B48122D070F125A
SHA-256:	018716003EA7214D7F973B17997ACEB69CAFEE5C09C96C23851AF2D291522ED7
SHA-512:	A5E78F13A46F88779D91BF6683DB4963D77AA3E0D73CB700468FC0291D60EE8DFD30E8CC2A81EF38A8E6373BB3A7144CF1B4B5BAA5269555957B79D69929CDE0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/ui/v1/activityindicator/loading_24.gif
Preview:	GIF89a.......rX.c.....R.T.E....S?..IHt....5..N>...k:&..=..}...2.5.KN.6.n;....x..F.f@.L@o...;.[x.ps...I....},._tg...O'....o.P..K..Er5.YS..e....Q.NC..b..TH....Uz6v.;U.d.z.R..!.a...]....d'.R.RW.Se.......;..H{.Si.QH...g$Um.%n.%.x..._.9~.q.......6....L.65.\...A%...<2..J..]...s.....T.a...\|...K?.....I....F>2...}.8..-.p..s..c.L5.w9...OW...:..@......xA.^...h$u..z..qBYY.9w..i...[92..g........#.yK..C..)..pu..M>.AR.I>9~...M4x..D9%j..`..1)...$.g.....n7}......9......._A..{..[..!.cE........or.y..PGG...OD%.hs...........`\...........K@5.x..U.C3=.Pfk...JO.P.>L..M0....\..N...@u...7w...K...x.Mo.St.....O.w=.T`..A.P.S={..k....I.n;..V?..@3.tR.Ii.Uz.Rj.Sq ....>..M......c.8....A._.0....p..RD....fH..a...._9...ZC,.........fA..Q.2:...K?8~.;...J>..M..`...!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="ht

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7661)
Category:	downloaded
Size (bytes):	7666
Entropy (8bit):	6.016639667693439
Encrypted:	false
SSDEEP:	192:YJDxJnuNJksqmtEoONX+zekxyGll4z/fE91qVn5r:YDx4NJkctEoI+zekxpGjscnd
MD5:	CED6F25FB4E423307E9C9938544BC1FA
SHA1:	5E80E5D916E2373C55A5C166A59181023718A789
SHA-256:	EE789FF466671C219E90C921CC6652D5D4AE049E91AC3D3B35AE52B09BF59676
SHA-512:	C9BB7691CF9473120F0A90882260A37FFC4886A402D58FEEE0ABA0B946A0995F997F9B4FC207ADA99C9C015457E16CB4A3086DA2DD5833B7C6FBCB8F8A30DE3B
Malicious:	false
Reputation:	low
URL:	https://www.google.com/async/bgasy?ei=xSpeZdzvEPyy5NoPhfSymAc&opi=89978449&yv=3&cs=0&async=_fmt:jspb
Preview:	)]}'.{"bgasy":["https://www.google.com/js/bg/bXgCQMZpS0zAFfQhW4aLQXFu8vAtM6HtIRdhp5QrSUI.js","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

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 204x186, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4926
Entropy (8bit):	7.958367207689946
Encrypted:	false
SSDEEP:	96:+Oq9TNKKnejRT/d1N2fdESxIBKOENJNsU6iytPkrGwztlZsvam++XmpHe7R:+O8NKEw/dafdESxWhExVyDwDZsKER
MD5:	AFFB07065A92829948A844B289C9D77C
SHA1:	D206410DA872BB6E5C527259B89767E42A315478
SHA-256:	1C139D9030EB9B8A5F0ED56570E16904B05BAD5B1CB920002D768DAE78306583
SHA-512:	C5EB8B6DA1E0D5945E44C6A75C7E32DF5842CC435E95A98C3B407B4E8E13327A50045003A0150083D50898B5EE5592AF6EF6A808F1DD3DEE8D023DB4F4382FA6
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn3.gstatic.com/shopping?q=tbn:ANd9GcT6DMNhwhmzQSQod0mApHqhjuME69yZeLqCoVASHBumZ0SMob_d3qfH29XGbSoRAtGiyR9s48z_T8E3LYkS2_Zqp01sSSRVubWvsx0RvmlHdo9hhN6d_bQJ
Preview:	RIFF6...WEBPVP8 ....T.......>E..E"...Y>.(.D..j..{...?.'...}{..%.....7...\|y.Y...\.;?...?W.m......m.o...O....Q...=..._.....~....{.7.......}...z~...f.]...>....J.~t...'....l...k.M.Q..;f..........e}8.....l......\|..y.:..u.>=..+./.....W...6R.....s1.1.O{..s@....LS..L(-....(.V8..Vv..<.(..L.4.Hu.vCP....T..R...[.......1f..4.t/...g.....:]P.....6)...;.?...\......f..Y..3...07/...;..4q....iL...u8...#.\|.Z.....f..`8.F^NAt.CW<....h5..e.r..g...B)....b..VcN.\|...al........a $\).#..[....l.(..4wXv.dj5.8h.m.%..5..O<.R..@:...+k....S..cBU...[._.i.\|L.$tC....T.2.L.i.9n.%h.....:.....K.._%.]...8)....E2.....U_...:{2Z...:.........z................FW....5.!..........!.. ..H.o.3.......jD..w..........:."U........H.}...O........7.5.h....9..@..........8.T.p84..7...2 y....p.m....U.....9.d.n.0..........7.....0.8R..j.....{vd....N..,.!\J..k{.+A..q...<....tgHD]Gh2e..)u..........x@......e.4....wh2.,.^.IH......).....C.....niI..s.c...P.....2..#.lf...J'zd...}.w.......f.D

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 272 x 92, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5969
Entropy (8bit):	7.949719859611916
Encrypted:	false
SSDEEP:	96:30VjFRx06o9fWBVE+/hVaf6hQrDTq2W4jnjhwKItTD97TPJn/SHbICKV6A4TT8D+:30XRx0QPE+5VBx2W4/WtTRnBnobpQDHe
MD5:	8F9327DB2597FA57D2F42B4A6C5A9855
SHA1:	1737D3DFB411C07B86ED8BD30F5987A4DC397CC1
SHA-256:	5776CD87617EACEC3BC00EBCF530D1924026033EDA852F706C1A675A98915826
SHA-512:	B807694ED1EF6DFA6CB5D35B46526FF9584D9AAD66CE4DC93CDEB7B8B103A7C78369D1141D53F092EDDEA0441E982D3A16DF6E98959A5557C288B580CF5191E6
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_272x92dp.png
Preview:	.PNG........IHDR.......\............IDATx..]...U..:.................].{.A.A.(......\....1........A@6.......$...(.CXX\|..d...IUu..dz...g..u.....sO.1..g..W.....~..fv..+.TL.z.q.c..e..;..{..._"...`V...NwUwg....L.{6...y...]....2yo.x}^\|.....)....444.....r7.f&.<...t.!.l'8.s..LCCcl...t........ ......;..,a..0.xju........\|.. D%.l._..........]Y.. ...&N.r.~$g...&...Z}.w.3q......RKwm.ihh.I.pL.n..7j.W..%..Ld...@......q7x)..A.x.0..M .H..Wq.g.h..k.\|P..-Q.}.Ca...@.A.....D....x.....vOp.....+.z...N...T..o.?...?.%e....&..#..3.....P..Np9...$m.Ne. ..3y?......]....l.).z...g.^.v.!....-...&..M .Eg..w.K. ..;..@.qiP4yhh.....U.l7X-.u...-.tP..X..D.i......p'.T>Y.\o.TM.....xx&...&..M ..{.MQ...@.......C.ihh...]].ws..L.<.1...M ..>/yl...yhh.Yh..y..n...H.iW!..4444.p'8G.<...4444. .!.$'.._`....&....h=@8..........T.Ao..4444..#..i.q.'t.u........T..+j.ASyjT...u..(f.y.uw...-e.B...5.W........m~..5-\|_">.j....c[o..m+....K.v.Tak_.".\.....<........u.....},..02..'.h.v.^.....s..A..Ctw

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	742
Entropy (8bit):	4.715663467051154
Encrypted:	false
SSDEEP:	12:t4noU/vmRsSL10UclAEBTFMYNIE5Au/JXl+51tntkB3xYhyUQk2LrtmSEebfuFd3:t4oU/vyB0U4AORNZHt851VtkRUQhrlBU
MD5:	EDD0E34F60D7CA4A2F4ECE79CFF21AE3
SHA1:	2CC789A02534557380D92124E2F8B9483D198FB3
SHA-256:	ED9087D76CDC6D1C53698F6068F79872E77E87C8D012C0CFDAD13B05B6CCB37C
SHA-512:	CE9D50913CAD41D11C7B3963C90788301B63EE1FFFFF73108E9F8709CA0A9FCC6170853A65A820FBF020628B403813C9E3CD262389FEB7D17A6C73C2F724394F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/productlogos/googleg/v6/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92c-.26 1.37-1.04 2.53-2.21 3.31v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.09z" fill="#4285F4"/><path d="M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z" fill="#34A853"/><path d="M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.07H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.93l2.85-2.22.81-.62z" fill="#FBBC05"/><path d="M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.07l3.66 2.84c.87-2.6 3.3-4.53 6.16-4.53z" fill="#EA4335"/><path d="M1 1h22v22H1z" fill="none"/></svg>

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1609
Entropy (8bit):	5.268171846580519
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehk2:3q3+pUAew85zvc/hk2
MD5:	20D444971B8254AC39C8145D99D6CA4C
SHA1:	72E41F2A340F4A6E3A748CB57D293631390B733A
SHA-256:	A04F41837D317573EA61EA29ABBA7C4FF4E38C9177DA68F4706B9C13921A8D82
SHA-512:	BEA16497D014481EE10EB80A129846B7B184AB1ECA242FA38B84255C6461C748A62F1BD6C15D1807F8B5E926E550C30AB47F8A40AE43BE229E6AB857C4EA6F6F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 239x211, components 3
Category:	dropped
Size (bytes):	20635
Entropy (8bit):	7.982595336271492
Encrypted:	false
SSDEEP:	384:aGE6gfiQb836vKU/59ZkfwjEsKX44ZhkNHEgKHMV9v7lCZ1N5Nprhl2YglSy9Q8S:aZ6GZgqvKOkeE/o4Zh4F1BlCbbhsSyrS
MD5:	128862E494BD4FC13816A4C2A74EDFAE
SHA1:	0DFE96A3A0C11846BAA9198B5E21C1980ACC017B
SHA-256:	870ADB2ACEBA816F7B660EDB8F4BC255BB747F3091265680633BA89FF47AAA0B
SHA-512:	455A2DD18EDA4B22DD6F597480CEFB39CA243031F7FE97DAA2A7EC91CF64D01FE21F4E2D7DAD312834D1C160BF47E6E6960F816D34A160E7BDDDBC3699FE8C00
Malicious:	false
Reputation:	low
Preview:	......JFIF...................................................( ..%...!1!%+.....383-7(-.+...........-& %/--.--7---------/--/------------/-----------------....................................................K........................!..1."AQa.2q.#BR....3T.....Sbdr...$4Cc....t...s..................................<......................!..1.AQa."q......2R....B...#Sbr.3..$............?...S,...t..`nA.X..e......L.....Z$azW...N.x..V.i.(../._.b.B.a[\|..........q...)NS5......3U.......Aq......c."H......Ui....m...t..Tp.-.7.....t....6.m..........;...W..j.I.K."y(.....(.X..V..Z...,.c~....m.Y..\...>l..gB......aX.Q.........D...g.4)s.t.U..U@...5W.s..%A.....U..A.E.......\|N.....Jl..p,z....@........'j.../7P..X..J.....N.e.o...4....Rd..<)..A.s...RI...rGv........LM..s.3%L.A.J....i..KD..}..........R.........XJ...&+5..U.6)s.S.F.........l@...b.L(........g..?.D.tR.RTTm.....b*....V.0lP.Y...Y...p...q.1..8Tg1....ZL._J.....J.2.q..s..."N,Y..H..t..6.\|/s.`.A-..dc..I."...........d.$...

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	611
Entropy (8bit):	4.918393991458898
Encrypted:	false
SSDEEP:	12:t47NWQFfelFQRbjYDq9mMG6AsLwUhMOLSmvfO14KAOKtjGSdi:t4AQfefQRbjvb8BOpM4KAZjGS4
MD5:	FDCCEBFA37374F47C7DB9D31714AD6BB
SHA1:	0020EF09D5BB52460B5D0239BEF9C2F2CF9EC9FA
SHA-256:	526AAAFB82827920E07B5CE784660FAB5F01FB62F3B63968EC34317AECAA5CCA
SHA-512:	D265EE577D64E9682698F021A5E2158CF5EA0A6C887E69A90F72C45E29B9F8A3ED436F2D4DA6B4F3436EF59FF306348EC57FFD7FEFDEC969909E089E03B59528
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 192 192" height="192" viewBox="0 0 192 192" width="192"><rect fill="none" height="192" width="192"/><g><g><path d="M177.44,55.09c-1.96-7.31-7.72-13.08-15.03-15.03C149.17,36.5,96,36.5,96,36.5s-53.17,0-66.41,3.56 c-7.31,1.96-13.08,7.72-15.03,15.03C11,68.33,11,96,11,96s0,27.67,3.56,40.91c1.96,7.31,7.72,13.08,15.03,15.03 C42.83,155.5,96,155.5,96,155.5s53.17,0,66.41-3.56c7.31-1.96,13.08-7.72,15.03-15.03C181,123.67,181,96,181,96 S181,68.33,177.44,55.09z" fill="#FF0000"/><polygon fill="#FFFFFF" points="79,121.5 123.17,96 79,70.5"/></g></g></svg>

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65531)
Category:	downloaded
Size (bytes):	83412
Entropy (8bit):	5.479767366720632
Encrypted:	false
SSDEEP:	1536:ZTy8qxJsomZQu22W9qwYDXzk8BxhoZFgCNJD753iPw:6sQR5qwYk8BxhoPNJD75Aw
MD5:	C270AFD0DDC0CDA830B4A5263683DDBE
SHA1:	95F9066590DEA7CC91BDFBB1C359B39C36E31EAC
SHA-256:	E9E9E9F0E878D3A5A027D640B4999892B07EE760128EF5CAC698EEEE51B53F65
SHA-512:	3FB2D7C0DD5878ED902DDE788EEE96A10F56F449CCDE48AF78ED22AA3BABB9506543AA3AD3702C589092F84D2597282EC37E472B2908E6155938829EBD796C5C
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/async/vpkg?ei=xSpeZdzvEPyy5NoPhfSymAc&opi=89978449&yv=3&cs=0&async=_ck:xjs.s.qnyE1sBG7t8.L.W.O,_k:xjs.s.en_US.r7Ut2Mhd2yU.O,_am:ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA,_csss:ACT90oGxb2yBgv3mHTYRZ1xum4XELOUH9A,_fmt:prog,_id:QPwIld"
Preview:	)]}'.22;["1CpeZcWlGoegiLMP6sm8yA0","1906"]3;[2]14598;<div jsname="TYpc3" jscontroller="M6QgBb" data-gmc="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

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:Hnhn:Bn
MD5:	BEEDCB4EB0A559E6CE2D1E20D38CB330
SHA1:	A04EE9801770C0E81B170D7992EC3735E878AA58
SHA-256:	6E9D99B87595B07B10676B68EBE9AA8B63DF7D9A74F59CC91EED60EA1FBDC6EF
SHA-512:	BD101CDF7FDF1210127D83CE76E3F6F6F1378259F0A55C112E39C49A9131B8636FB020E07E985B8427A35B62A544F2F7C5F75B11AD69EF2C4AE67A41BD5898B2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAn11VQ7sgCk8RIFDWlIR0c=?alt=proto
Preview:	CgkKBw1pSEdHGgA=

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	896
Entropy (8bit):	7.709409327049996
Encrypted:	false
SSDEEP:	24:wCpqK43OcpQ/IUkjpVRYosC4xJJYkR4MwHoYXuLgUDmBvSx4WO73lz:5YBPqI9jZYZxJJLZwIY+ZCPWO7Vz
MD5:	982DDA17C63BCFB07F40BEE96CD7024E
SHA1:	034E1A7D4B7B07F6AA0DFF0F3AA6D6F83794D384
SHA-256:	ADB1E276E99E6FB259616C20340E63379E2A41804AD84757E1D4BFB0D01D6EA5
SHA-512:	BC74B4F1FA850E9DAFB04C785A4063047935C3A00653A113F6C994AB44286E1A0F7E41161C8DBFDF4542BDFD9414520DBBA2DDFD7E9AE908A57ABABF3DDDC4D3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz....GIDATx...C.,G...{\|'.m..Ml.mk..v6.....s.g.pNlo....#.n.......p.=f.W.Dh."...;%.{..i..I._v.&.Z...3yT{_y...c.=Z.@.O\|..e.H......Ll{..'.>...{.'4...`.... b..>W5}F...3z.1.....X.e..0G6./.......30.G..W.....d..[.wl7.4&.l..U.cILD.M..a0.r...@E0.....4.."> .Ha.i.~......~1.Y..B.n"..'.a.)#...=....I..b..X.......\|.?dM........R..Vi.~..#.M>....,?0.:..<.r...O?...NKp...9$.?..H..-.0.Ul...J.T.9O...zG.V%K..hK..f........W..L1.$.4.....\-b...o..G..`ACB..d...xk.d......)......x......;....c..D....4.N....Z....@.F..!Z...0.a..N,.5...z..(...a0g....._,..g.-.z...>'..D.^...A...=y.ZD.D.xIp.c.0..^Sb4..4.l...J.h.......d._-.d./..y..`f..B..h...Tp=m..1.......I..#...iUi....X ...H_#...fx.7K...o.{>..J..1&+.7..<..s.l.+I...m..AS...'...y..h...~..k.]:TG..mC............w...lhk.c....}../..:.t.t.;..\{..}..x.q..n...3...ttttt\|..1.d.y2.....IEND.B`.

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	84
Entropy (8bit):	5.258289077943268
Encrypted:	false
SSDEEP:	3:VG4VvPnglVTHbhXAEJElJWdHW0:VpdPnglVTHbhQEJkWdHW0
MD5:	F3BEE720ADC62A51AE4FE302D63EEE99
SHA1:	3AFD2E9419273F6612B48269E78DF353961BEDD4
SHA-256:	52FC44298778680DE540B52C4095F83D21E081744D7E54414DF01A59FDFB213A
SHA-512:	E8B0AD98DD50706CE29C9DED587E35EEA97077E0CF8F03AC33EFFC76EFF1D6A33D5094DEB4ECFDD5D8C92F1FD40F842ECF866921C8A4E4C7D40F232DDFC0B469
Malicious:	false
Reputation:	low
Preview:	)]}'.22;["tSpeZdTjA-qi5NoP3M22wAg","1906"]3;[2]1b;<div jsname="Nll0ne"></div>3;[9]0;

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 222x186, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	3490
Entropy (8bit):	7.942455974270482
Encrypted:	false
SSDEEP:	96:P0nC4vJedfPYDo9kWniKD9Fi6WKdXKLgzm/pYOvglA:cCGsfw+ZDijKdM+u9vMA
MD5:	10F91D7C0964E5D65D193DFCD793B0FA
SHA1:	6BA385995A6A84646FBF479F3EC4ABDCEEF3687F
SHA-256:	DCB47B4A7883ADCFD002412FD6B7501A391BCE25FBC4ACFBF50C1E5CD22B6939
SHA-512:	07D4E05A50395B1237D01066758FD33B1793A1045EB4410AD6FC68120A917812D2B2BCFD8081A2B6419A9B3DB6FBBFD4A0225C3C7BAD402FBBD2D1C07913B606
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn1.gstatic.com/shopping?q=tbn:ANd9GcSM4N3owzdgwxN86p4FCmBnrZfkcHJ_8I1vktIQC8jio10A-MV1n6QbcFkwQOvnW_f0025wWVLuCt0yt9TAs7jEFfUXfAKeQndZi8NZlIjT3-OXybAn80qJHA
Preview:	RIFF....WEBPVP8 .....>.......>=..D"!....4 ...p.8p..,R%20_....6i.I..L....e.....u!..=a4....B....7..C.+.....zB(..M..K.&s.zF.,....._...............&J..y.......+L.....E...wU.x0N.!..$.....?...7..a.-...P.`..N....e..B.N..e..T..X_.ST\|..g.r=.=?.}.....M..5.q...[)........F.,.4YV.....M.....u...oET\.......s.A?2<..<.87..(.;..a....x.yo..O.\C..y..!x~.x8u...G...x...'.k.y.l..n/.....:..5E.._)g.j."...8.8AC._Ks.P%O5..D.l..Q.......T#Ht.g.==.\|..[.@.k.B.(.p....g4...S...k.C....=N..C..~.?...j.Z]e.\|.I..kw...u.U..T...sM.....t.B>.x.S=...y.....8.l.q5....5.eE'.[..R<.o..x$(...o..S..........}...w.w/K..\|pT.xs.z.\N..YK.$.@..J...Z6&.y.BY[N.~.@......\. W....:>.M.po..x.h....t.......H.C+.<.......Ej..nz\|ev.2...M..nf`$!'G?%...)9..c..(O.0.O5.?.bv'%U1B\|n..Ns..g.2...niK.{]...!.[.]g.?.n.p......${.A....=.*CGbQG...,..q...u%.;.-Z&.....f.......]...'.Z%....z..H..w..........\|\|...w...j..QGc...UY..P+.0x.".Y...L..B.\|.....C.....A..e.....B.y...K..X.... !0......A..y..j..LH@mqz2w..q[.x.f.....+....

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (549)
Category:	downloaded
Size (bytes):	845493
Entropy (8bit):	5.5788598325681935
Encrypted:	false
SSDEEP:	6144:wGLq8HdvUNXIpXBjM5p1BIpq6UaNYY1WG9LB+5MU07nbBfSTFLXkzGNb4v/pG:w+IgXVm1T6Xd1WGLBMq7nbBfSTFrkzxG
MD5:	69A13040A04F0CB11D8DA1D959DB943E
SHA1:	E578D637CAE164926FE0889F7CD9032DB65AA8C5
SHA-256:	DB10A1DA1864F6F20F4FC24A11DCA0E9845E505D04ADA08D2363785B034A926E
SHA-512:	02FC482683928E81B154BAE84A575E1A149A655D3E6DD62B0CD644197B3AD84BD11EE86D38A0A22EC9B5966E4EF76AA3144085731064A50841686736F4F5649D
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/xjs/_/js/k=xjs.hd.en.j7vH50XSWl8.O/am=BAAAAAAAAAAAAAAAAAAAAAQAAAAAEPUTDgFsgACBABBggAAgAICAFKQQBAMAEPBQJgAAACZAYAhYCogKvOcBAJBAFQAAAAAAEAwiAAAACAAAoAMAACCgEdAAhIBKQAAAAADyACA4ABhEEAAAAAAAAAAAAAABTBAMLkgAFAQQAAAAAAAAAAAAAKSkycVAAg/d=1/ed=1/dg=2/br=1/rs=ACT90oFcDAHDhb4_oZd5Xts_Yb9yG3qqLA/ee=cEt90b:ws9Tlc;qddgKe:x4FYXe,d7YSfd;yxTchf:KUM7Z;dtl0hd:lLQWFe;eHDfl:ofjVkb;qaS3gd:yiLg6e;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;iFQyKf:vfuNJf,QIhFr;SNUn3:ZwDk9d,x8cHvb;io8t5d:sgY6Zb;Oj465e:KG2eXe,KG2eXe;Erl4fe:FloWmf,FloWmf;JsbNhc:Xd8iUd;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;uY49fb:COQbmf;Pjplud:PoEs9b,EEDORb;QGR0gd:Mlhmy;a56pNe:JEfCwb;Me32dd:MEeYgc;wR5FRb:TtcOte,O1Gjze;pXdRYb:JKoKVe;dIoSBb:ZgGg9b;EmZ2Bf:zr1jrb;NSEoX:lazG7b;eBAeSb:Ck63tb;WCEKNd:I46Hvd;wV5Pjc:L8KGxe;EVNhjf:pw70Gc;sTsDMc:kHVSUb;wQlYve:aLUfP;zOsCQe:Ko78Df;KcokUb:KiuZBf;kbAm9d:MkHyGd;g8nkx:U4MzKc;YV5bee:IvPZ6d;pNsl2d:j9Yuyc;BjwMce:cXX2Wb;KpRAue:Tia57b;jY0zg:Q6tNgc;aZ61od:arTwJ;vfVwPd:lcrkwe;NPKaK:SdcwHb;LBgRLc:XVMNvd,SdcwHb;UyG7Kb:wQd0G;LsNahb:ucGLNb;w9w86d:dt4g2b;coJ8e:KvoW8;oSUNyd:fTfGO,fTfGO,pnvXVc;SMDL4c:fTfGO,pnvXVc;lzgfYb:PI40bd;qZx2Fc:j0xrE;IoGlCf:b5lhvb;w4rSdf:XKiZ9;h3MYod:cEt90b;eO3lse:nFClrf;zaIgPb:Qtpxbd;HMDDWe:G8QUdb;ShpF6e:N0pvGc;k2Qxcb:XY51pe;IBADCc:RYquRb;pKJiXd:VCenhc;rQSrae:C6D5Fc;kCQyJ:ueyPK;EABSZ:MXZt9d;qavrXe:zQzcXe;TxfV6d:YORN0b;UDrY1c:eps46d;F9mqte:UoRcbe;GleZL:J1A7Od;Nyt6ic:jn2sGd;JXS8fb:Qj0suc;w3bZCb:ZPGaIb;VGRfx:VFqbr;G0KhTb:LIaoZ;XUezZ:sa7lqb;aAJE9c:WHW6Ef;V2HTTe:RolTY;Wfmdue:g3MJlb;imqimf:jKGL2e;BgS6mb:fidj5d;gtVSi:ekUOYd;KQzWid:ZMKkN;UVmjEd:EesRsb;z97YGf:oug9te;AfeaP:TkrAjf;eBZ5Nd:audvde;CxXAWb:YyRLvc;VN6jIc:ddQyuf;OgagBe:cNTe0;SLtqO:Kh1xYe;tosKvd:ZCqP3;VOcgDe:YquhTb;uuQkY:u2V3ud;WDGyFe:jcVOxd;trZL0b:qY8PFe;VxQ32b:k0XsBb;DULqB:RKfG5c;Np8Qkd:Dpx6qc;bcPXSc:gSZLJb;cFTWae:gT8qnd;gaub4:TN6bMe;xBbsrc:NEW1Qc;DpcR3d:zL72xf;hjRo6e:F62sG;yGxLoc:FmAr0c;pj82le:mg5CW;dLlj2:Qqt3Gf;oUlnpc:RagDlc;Q1Ow7b:x5CSu;bFZ6gf:RsDQqe;ESrPQc:mNTJvc;R9Ulx:CR7Ufe;KOxcK:bFOvTc;G6wU6e:hezEbd;okUaUd:wItadb;ZWEUA:afR4Cf;U96pRd:FsR04;heHB1:sFczq;Fmv9Nc:O1Tzwc;hK67qb:QWEO5b;BMxAGc:E5bFse;R4IIIb:QWfeKf;whEZac:F4AmNb;tH4IIe:Ymry6;lkq0A:JyBE3e;daB6be:lMxGPd;LEikZe:byfTOb,lsjVmc/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl"
Preview:	this._hd=this._hd\|\|{};(function(_){var window=this;.try{./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. SPDX-License-Identifier: Apache-2.0 /./. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2013 Google LLC.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2011 Google LLC.. SPDX-License-Identifier: Apache-2.0./.var baa,caa,maa,oaa,yaa,Aaa,Gaa,cba,jba,uba,xba,Bba,Gba,Kba,Mba,Pba,Oba,Iba,Qa,Sba,Ta,Uba,Xba,Yba,$ba,bca,dca,hca,kca,lca,oca,qca,rca,wca,yca,zca,Aca,Gca,Hca,Ica,Dca,Jca,Cca,Kca,Bca,Lca,Mca,Sca,Tca,Uca,Wca,Yca,ada,bda,dda,eda,fda,gda,hda,ida,kda,oda,pda,vda,wda,yda,xda,Cda,Eda,Dda,Gda,Fda,Jda,Ida,Lda,Pda,mb,Vda,Wda,Xda,cea,Sda,eea,fea,iea,qea,rea,wea,Cea,Dea,tea,Fea,Eea,Kea,Lea,Mea,Pea,Qea,uea,Rea,Tea,Xea,Zea,cfa,ffa,ifa,kfa,ufa,wfa,zfa,Dfa,Ifa,Kfa,Nfa,Pfa,Qfa,Sfa,Ufa,Wfa,Zfa,aga,bga,cga,dga,$fa,.Iga,Gga,Hga,Nga,Pga,Sga,Tga,Uga,Wga,aha,$ga

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	992
Entropy (8bit):	7.728730506543557
Encrypted:	false
SSDEEP:	24:QpaRQHSqIbkWHU6mFIPLqS4Ji0RHpXJ1ihXb8nuSODnTdcgGWiiN7F:Yamqbf06mq2S4A0p1J1+L8uSO7TSdeVF
MD5:	373737007166D8C5EA5FCAA985C4CF3D
SHA1:	67D236A8C20C011E4669E47B728BAB62A5854B25
SHA-256:	1F2E87B7BFD2FA68F16071D05C99F3452EA20CF022BB5101BB81CC49B44D887F
SHA-512:	309B77E0DD7B04228BB1EB63CA3177C6F3A011C25248ECAFD881727F41498B8971DED07623D00469FEF92C50463B003C6101C7DE8367F8C1ABB549C834129616
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATx....p,K...g.qrm.m.m.m.m..g...X..~U..v......e..6%..\.......{u[..........Mv...7....y...tfp.W..2~..Z=..w..ZdM#f.[.7.s2.2.MHN..........R........-...P......f.....U.:~o:.{...o.y......y.p...i....F]Z~..M:...n.Q.U:j?_GM.I.`<...e.0#......s...JB.C..$..\.8N!G.5.z.)....m...^.....V..,0..B..'...1......+........x.(..2..&.+. ]..i..[_+M....$AU....kK.".Q`.A..[`X!In0.1...Ao.....F.>.'@V...O._.Fw].7P Q......N...7..M.B{../...R.R.Z.?...2.Ab.\|.\..h_.....`W.....&..?@.......q.w.~.3......._.....U..%H. ......=.0... `.f..:8eB .?!C.J".O........-..3......L...I.......@.E.;%DcwP9E..?}.....b...K--.....3.r\.....6.....H...IC.....B.\.9...O..?3..Q..:.(..u/.w.zI.#O./t.o...BwKn.....C.....!....Z.Y...[.w...G....m....K.b....k...4...&....V..V...a.Y`.h..8....B.N...M. @.c.../.uFE4:..52..}...<..'M.. ...Z.wt..APU...A.P..[...U...~......q..j..:!4=..A.....5...2.......~...{..,/.j...T.'w2..H6.`..#.MGN'....M..1........n../u..5....IEND.B`.

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	660
Entropy (8bit):	7.7436458678149815
Encrypted:	false
SSDEEP:	12:CPgCZ+X6xCDzNAs1dVc1rhVbo50xCmGjkm9vgZAO2YCGoOg/t+YcJNw:KZ+iC134tFoOxC3/vO2YCpR8YcJNw
MD5:	C3DFF0D9F30EC0BCF4DEC9524505916B
SHA1:	4B378403ACBEBC3747E08C69B5FD7770A850C9EB
SHA-256:	73D788F86BE22112BB53762545989C0F1BBDB7343161130952C9BA3834FF81E3
SHA-512:	677EA304D00D176ACF61FF68BF23BD5F77AD2928D7DE9F4B842292BC9D3FB7029FE9F578B62F142DCE689230F392E828098EED3484FE2DBEE6E1A7AA5378E2C6
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/searchbox/desktop_searchbox_sprites318_hr.webp
Preview:	RIFF....WEBPVP8L..../'....Hv.=n.......Q...a..(Rv.o..U.....l..m........0l.6l..f.......A?B.C.A...2h..Ag0....G8.n#)R.j.x..P.F..I;.Ox......7-...bX./..]...3..T....5...x...G.C....%.u.....u/._.=....<!q.\...9.....\....p:..P.4.aS.N).>.>.."..9..Vh ....no....l.1..#6p\c..2..>..=8...........FP.^....+/.~......hs..D.Jm..9...r....t*.H..~T^\|.....l..l......he..}f....d.."....K...&1..................pl.Pf.%6...2X..I...eXQ(.K..1%c..w.s._..._K`K.1}..D.E=...<..ytM..>.q'.e.L.~$...b..;k.M.....t\O..m.I._..F....'........z.]..u?~..P.zJM.. k...p~9..D....".Zl$?f..+...\.Pg..%...;.[R>N.#.W.e..@q...(....]&......K.......?.\|.z..(...:&m.V.C.'...D^.R....

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (824)
Category:	downloaded
Size (bytes):	72524
Entropy (8bit):	5.495957806451644
Encrypted:	false
SSDEEP:	1536:f3KzKt7pWMwvMAA/RKwL7PAPZgr/yj8AsPmRB:f1xwvMA+xA/B
MD5:	C6BF5CF6325E5F71644E239D55367766
SHA1:	C4A63DCB542A738F6A7103131504CC02EC7FEDBB
SHA-256:	067B8B2C2C2738405F8ABD0E38A122FDA46D9DC496E9D8FC2E0CDE5738EDC7E6
SHA-512:	C9BEF4822EC7B23DC76B4A287FDD95569C4A7F4F7B89CAB377A1350CFF49ED74593A76B0C57ADD4CCD493B3C02E7BD31337F2D295863D912D13C58191124AA29
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=0/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/m=sywz,CnSW2d,sy12i,sy12j,sy12k,sy12l,sy12n,sy12o,sy34r,sy632,VD4Qme,sy1hj,sy1hl,sy1hm,sy1hn,NVlnE,sy1hk,Dq2Yjb,sy1gz,sy1h0,qmdEUe,sy1ho,sy1hp,UqGwg,sy46w,ND0kmf,pjDTFb,sy3ob,sy648,sy68h,KgxeNb,sy3o7,khkNpe,sy2ks,EfPGub?xjs=s3"
Preview:	this._s=this._s\|\|{};(function(_){var window=this;.try{._.SXb=_.z("CnSW2d",[]);.}catch(e){_._DumpException(e)}.try{._.x("CnSW2d");.var fx=function(a){_.D.call(this,a.Ka);this.data=a.jsdata.KUe;this.root=this.getRoot().el();this.root.getAttribute("disabled")&&this.setEnabled(!1)};_.E(fx,_.D);fx.Fa=function(){return{jsdata:{KUe:_.TXb}}};_.k=fx.prototype;_.k.dSd=function(){return this.root};_.k.Jg=function(){return this.root};_.k.getType=function(){return this.data.getType()};_.k.MHd=function(){var a=this.data.getType();return VXb.includes(a)};_.k.isEnabled=function(){return!this.root.getAttribute("disabled")};._.k.Imd=function(){return _.F(this.data,3)};_.k.Dsb=function(){return 4===this.data.getType()};_.k.pZb=function(){return 4!==this.data.getType()&&6!==this.data.getType()};_.k.setEnabled=function(a){a?this.root.removeAttribute("disabled"):this.root.setAttribute("disabled","true");_.Bm(this.root,"disabled",!a)};_.k.isSelected=function(){return _.xm.contains(this.root,"CB8nDe")};._.k.E

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1193
Entropy (8bit):	7.761995255453896
Encrypted:	false
SSDEEP:	24:Z5UFEORXsd0qtw+/Mvn+1mnuON8/OkadX3nJTWiyrnE0V3YoYxJ9:fUFEORXs3avnCbW8GkMXXB3InE01g1
MD5:	9616A0B95373015EE79594CE5877B198
SHA1:	A5B71ACC8A5B98BBF7CCFAB2302AF4F577839224
SHA-256:	B0073B437EF926BFF8D55D6E1AA1E58244993970DBD050975CDF3E4567B10D07
SHA-512:	79D9254BC54D698358AE3A664D91272A9AC57082A9A64B0AF21B5667BEF260EA29FB96E273B828EFDB6CEF03532B163ECBC959E709D93A95FD6787D0A50396F7
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/shopping/deals/mens_apparel.png
Preview:	.PNG........IHDR... ... .....szz....pIDATX....WU........f3:.C.B>..b.ty)..)..&...A..T.AD...aTt/.0A.....BYa.6.:V..\..wn{.....j...\..s.....Yl8...0...M[..tpx.....y..o.m.....xf...TA?..76<t....X.~dI........xn...VUx..UI.._.8.....)+.^A.w....`7.s./......^.Bx0.p..IO.....].>.5...."c`....^....%...UQ<\|.....W..;.-K.t........lJ......$.T.v.E.@?..}x..YK..[..y.........;.1x..R....,K.,.... Q....Q0.D...n...?.o.....o..1.B...;.H..{..b....5.c-y^.B..{.~.O.....,.1FW.%..j.e......b.!/rT......4.,..........Z...U...#Y.ED....,+..DU...Z.....uH.....j.h.Z...<...7z..x...M....U.,cbb.Q%..j..$.y....Oh$=.cp.s..w.6.....<.`@'...8KU........!..2...QAD..@)...(T..............\|.....{.v.M'M....X...1......`Z..O.n..(P..$il........_._{..k.e.v..cSS....W.H<.\..N.>..?.....P}2===Y...>IV...u.u.\_..I.}.v.......4>.....$..8.A.LJ.._...:zd.N.m....._.....0..F.S.UT.Ub.Te......;....Zun.w....@..(H....BQ.(:..!....G..v...i@DAT..ad.A$....h=.....e..K.Iu....T....B.......E..t..h.a0.X..1.18k......!..s.

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34253)
Category:	downloaded
Size (bytes):	34254
Entropy (8bit):	5.368963676057409
Encrypted:	false
SSDEEP:	768:3YpyCIUTKuBT1ytljuXeMDKLFn76p+B5nLZ73akHgMO4B4oq0HVi:30nKuBT1Yj7MDCKp
MD5:	6142A5F5C66E2C1BE52EE9506A565962
SHA1:	C3B39E8352EFD1E0619B6DD62AF8B2A917622868
SHA-256:	51CD12DA61A7401C73472B2AC77067ADFA30E9FC0545B4B7C240E9154E011FC7
SHA-512:	3DE194E4C8F32703CFEE9E2A48230D21301E28A39BEEFB36DCB2B8DF26B962B3A508E7FD8FE55ACA2F619293E293CDF64459BF5D91526CBCEDA770396765D5E2
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/g/9914b343/api.js?onload=FAIg1&render=explicit
Preview:	"use strict";(function(){function Ke(e,n,i,f,u,y,m){try{var l=e[y](m),d=l.value}catch(h){i(h);return}l.done?n(d):Promise.resolve(d).then(f,u)}function Ze(e){return function(){var n=this,i=arguments;return new Promise(function(f,u){var y=e.apply(n,i);function m(d){Ke(y,f,u,m,l,"next",d)}function l(d){Ke(y,f,u,m,l,"throw",d)}m(void 0)})}}function O(e,n){return n!=null&&typeof Symbol!="undefined"&&n[Symbol.hasInstance]?!!n[Symbol.hasInstance](e):O(e,n)}function ye(e,n,i){return n in e?Object.defineProperty(e,n,{value:i,enumerable:!0,configurable:!0,writable:!0}):e[n]=i,e}function Le(e){for(var n=1;n<arguments.length;n++){var i=arguments[n]!=null?arguments[n]:{},f=Object.keys(i);typeof Object.getOwnPropertySymbols=="function"&&(f=f.concat(Object.getOwnPropertySymbols(i).filter(function(u){return Object.getOwnPropertyDescriptor(i,u).enumerable}))),f.forEach(function(u){ye(e,u,i[u])})}return e}function et(e){if(Array.isArray(e))return e}function tt(e,n){var i=e==null?null:typeof Symbol!="und

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	879
Entropy (8bit):	7.686368689492006
Encrypted:	false
SSDEEP:	24:Mqol1jzd1mmKRQTY4p+8RpxcUtvL1DbLxhF:No//d1bKROp+8RfcUtBDfxn
MD5:	735E064D9E82A7FB99F275F67703BF04
SHA1:	A051335853179AB21B1634A2FA96603DBE1D0632
SHA-256:	3A9CF543B7AD3DA97F2C531FAC16D477B143C51DD6A83D0F338626A723018316
SHA-512:	93D5A2EC97C0A714CA4B7A2586F9C03ABF81BE2AD7CFDF52926F6A7217C1754EA28ABEBCAE62936D71881F521D8A72A1A55A489CE8DCCD7CD581FC03DC0BF1F1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz....6IDATx.....lW.....>3W.m.n.2l...j[A..j...v..~~of..k5.[.a...a.........4.Y...n..C..a..a..J.Y..C..G.....k.n...n.%.A...o}....&N4g....Z\|.<..W._+.......A...F.n..O\g.Mf-U..o~...n.6..Ct..j.x.....X.K........E..-.....&v^g.mf-.%..t.I.......%....uW%..8...$..;&.c..........._..^...wIF.1J[.....a.fD.I.$$.H$%"....')..........OWd.H..w.`8I(.......X.,....>.].0....>.p..\.Z..!. .../...S.W.6../.?.......$K......@.....i.......n;..!....w.O.D..cfH.@.<..F..b....3#<.m.......C3....~..w'...4.C.....2&F........HM.D..j..$Q..z#..J2...aD....aL.. .`....J....5..dj......A.%..H..K..R4i.......T...C.O.4........0..tB-.Z+a.$.N)..H..~.S+........-..L4...........i@..S..'.-.c...5.Id.v.Br.,7q..[~.bH,..;...>.=....Cr.....4M.).5........Gg.._...W........E...P..2..>@Rx[....i..B.rf\|.Ij[?......J.'r.RI.H....m.S..m..e..m>......?.,.'.-C.....IEND.B`.

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (619)
Category:	downloaded
Size (bytes):	4504
Entropy (8bit):	5.470790458262913
Encrypted:	false
SSDEEP:	96:G2PZvCYreP38edsxAH+d5DoY+Lixv8PW4IGk+SwzMtbXs6LaYqPIdk:/PhrtedsxAH+sEs3IGHgtrX8PUk
MD5:	FB96BA481A82F376C871B4352C7B2027
SHA1:	56EE68A6C330AE4EA9E4694EB7E40D5A04D7A597
SHA-256:	2D3694D5C47D8D9D49559BAC3406A28F7C96520CEC03B518705296DE0EDE9418
SHA-512:	AAB45AB60DF1F39D9F34AAEF7CCC4D223FA3B07227E4C3DAEF24C346E94B6E6593F6D65A6586AF2DEFA69B0491FB04F3336E232800720E37165CAFE516822172
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-search/_/js/k=boq-search.ViewPackageService.en.5vFoIj6rx6g.es5.O/ck=boq-search.ViewPackageService.fuMBNisZ1jo.L.B1.O/am=DAIAQIAAAAAAgAAAABAAAAAAAAAAayNc9I-AjQDgwfry__9JICim5wcAQAgAwCBiA8CIDgAACIABoAAAAAAgCjoegEACRAShCwAPiBCPAECpge5WYU0AkAEfJYAASACcBBQAAAAEAADA4AEAYB8AIIAwIyDiAAAAAMA1DxgQAAAAAAAAAAAAAEEhLwIqAgAAAAAAAAAAAAACoEk/d=1/exm=A7fCU,ANyn1,COQbmf,D8Qs1c,EMKV5d,EU1dwe,Fdd8nd,Gu8rrc,I6YDgd,IZT63,KG2eXe,Kg1rBc,L919Z,LEikZe,LUacLb,LmbeUd,MI2fVb,MI6k7c,Mlhmy,MpJwZc,N3wSKe,NwH0H,ObWLec,P9vDhc,Pkx8hb,PrPYRd,Qg94gd,Qj0suc,RAw16,RDV3Nb,RMhBfe,Rr5NOe,S9MdGb,SGpRce,SRsBqc,SzpDQc,UFZhBc,UXfCNd,VwDzFe,Wq6lxf,X8lTKe,_gbm,al77M,b6vcbb,btdpvd,cj77d,coOdHc,f159cf,fM7wyf,fgj8Rb,fkGYQb,gskBEc,gychg,hKSk3e,hhzCmb,hwnrob,i4bkXc,kQvlef,kjKdXe,lazG7b,lcrkwe,ljp6td,mI3LFb,mdR7q,msnw6d,n73qwf,nQze3d,oSegn,obXUHb,qszQwf,racp,sFyk7b,sVEevc,szFNKc,tOtTyb,ttQ27,vYwzYe,w9hDv,wKdTle,wk9bT,x8cHvb,xUdipf,y0wzC,yPDigb,yemSVb/ed=1/dg=0/rs=AH7-fg4t4gGfMGBENuEcV0ZBKDMYVTU3JQ/cb=loaded_1_6/ee=ADJUGe:nSzGM;AfeaP:TkrAjf;Al37kf:WF2Oxf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CRubWc:GGHMXc;CxXAWb:YyRLvc;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;GzNeK:lwR3kb;HMDDWe:HPcd9d;IcRVsb:TzIJDb;IoGlCf:MEmnGe;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KQzWid:ZMKkN;LBgRLc:SdcwHb;LWyKNe:OGn9Jd;LsNahb:ucGLNb;MWIbN:Oezo8e;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;NoD55:tHLYle;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OGn9Jd:vP7cyb;OgagBe:cNTe0;OohIYe:mpEAQb;Pjplud:EEDORb;QGR0gd:Mlhmy;QHcAG:Doact;Qoo2ob:xNwrGf;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;Rlgi2d:XM4pie;SFqMfe:d7N0Ze;SLtqO:Kh1xYe;SnFeMb:gIO09b;T9F76b:IGrxNe;TxfV6d:YORN0b;UDrY1c:eps46d;UVmjEd:EesRsb;UVzb9c:W0fpg;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VxQ32b:k0XsBb;W1Xvfd:KwNFR;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;XcupOe:nPGmVc;YV5bee:IvPZ6d;ZMvdv:PHFPjb;ZlOOMb:ka50sc;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;aoM3kc:RmZU0e;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;cZGwze:Uq2Ztb;csKcjd:SWn78c;dIoSBb:SpsfSb;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:sVEevc;eBZ5Nd:audvde;eGOC9b:UFUkKb;eHDfl:ofjVkb;eO3lse:TC8ZNd;fWLTFc:TVBJbf;fcYTHe:rDv7Wc;flqRgb:ox2Q7c;fufDm:kGNN9b;g8nkx:U4MzKc;gPGwWe:ds8otb;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:wV5Pjc;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;iFQyKf:QIhFr;imqimf:jKGL2e;io8t5d:yDVVkb;jGHevf:wsoZ3c;jWrxGe:FHj41b;jlykkc:Ixcocc;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;kbIuKc:rDv7Wc;kyjn6b:CfXVTe;lUFnVe:Sq92Y;lkq0A:IbjKve;lx12yf:OtBNv;mT6AUb:vsaskf;mWzs9c:sVEevc;nAFL3:s39S4;oGtAuc:sOXFj;okUaUd:Kg1rBc;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:MdUzUe;pj82le:mg5CW;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:x4FYXe;qsajS:qGotLb;rQSrae:C6D5Fc;rebY5d:S5i2J;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;slvZxc:FU6yf;tGdRVe:b5f3kc;tH4IIe:NoECLb;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;ul9GGd:VDovNc;uuQkY:u2V3ud;vAvu5d:O6oXm;vGrMZ:Y1W8Ad;vXy3B:yzQjhd;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:aIe7ef;wQlYve:aLUfP;wR5FRb:O1Gjze;wV5Pjc:nQze3d;whEZac:F4AmNb;xBbsrc:NEW1Qc;xMUn6e:e0kzxe;xqZiqf:BBI74;yxTchf:KUM7Z;z97YGf:oug9te;zaIgPb:l09DXe;zxnPse:GkRiKb/m=iaRXBb"
Preview:	"use strict";loaded_1_6(function(_){var window=this;._.m("nCUUCf");.._.p();._.m("iaRXBb");.var dWc=function(a,b){var c,d,e,f,g,h,l,n,q,r,v;return _.yh(function(z){if(1==z.oa)return c=new Promise(function(A){return void setTimeout(A,1E3)}),d=_.hVc(a,window).sendMessage($Vc(new _.ZG,aWc(new bWc,b))),_.Ah(z,Promise.race([c,d]),2);e=z.Ba;g=null==(f=e)?void 0:_.Cg(f,cWc,11,_.$G);if(!g\|\|!_.sg(g,_.$C,4))return z.return(null);h=_.w(g,_.$C,4).oQ();l=_.w(g,_.$C,4).v6(h);n=_.w(g,_.ZC,2);return z.return({rN:l,hPa:null!=(r=null==(q=n)?void 0:_.Ug(q,6,!1))?r:!1,Eq:null!=(v=_.w(g,_.A1b,3))?v:null})})},.eWc=function(a){return a.h1.get().filter(function(b){return 1===_.Zs(b).DI()})},fWc=function(a){return eWc(a)[0]\|\|null},bWc=function(a){this.Ka=_.t(a)};_.D(bWc,_.u);var aWc=function(a,b){return _.Hg(a,1,b)},cWc=function(a){this.Ka=_.t(a)};_.D(cWc,_.u);cWc.prototype.Ey=function(){return _.rk(this,_.An,1)};cWc.prototype.UF=function(){return _.Zj(this,1,_.An)};cWc.ob=[1];.var $Vc=function(a,b){return _.sk

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	84
Entropy (8bit):	5.286438220521843
Encrypted:	false
SSDEEP:	3:VG4GbzhKdGfp0cVTHbhXAEJElJWdHW0:VpGbtY6plVTHbhQEJkWdHW0
MD5:	14557D12CED24CCB8BA177A7D7317A1E
SHA1:	671AEFB75E4ADC3F6E964362D20A49F10C2F40DE
SHA-256:	BAA6D3E40AFAFA5FE3A959CC69B8E7DEA7B5AB45F35E4F82A831B85D9CC3ED99
SHA-512:	3964573943432A76BA9FBF9AA198F5FBE6F756EF980FECC5F5C64CA568C64F6F02C1BACA0494752DD496E7CBF79B0E11A637DA5455AE0B8BF0BDF57650608447
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/async/hpba?vet=10ahUKEwjV65b1gdiCAxW7D1kFHQ9rDO0Qj-0KCBs..i&ei=rCpeZdXlGruf5NoPj9ax6A4&opi=89978449&yv=3&cs=0&async=_ck:xjs.hd.3mhtCf28lXo.L.W.O,_k:xjs.hd.en.j7vH50XSWl8.O,_am:BAAAAAAAAAAAAAAAAAAAAAQAAAAAEPUTDgFsgACBABBggAAgAICAFKQQBAMAEPBQJgAAACZAYAhYCogKvOcBAJBAFQAAAAAAEAwiAAAACAAAoAMAACCgEdAAhIBKQAAAAADyACA4ABhEEAAAAAAAAAAAAAABTBAMLkgAFAQQAAAAAAAAAAAAAKSkycVAAg,_csss:ACT90oHg5mCcQv8sNOOYCaMvtyVFpx_jxw,_fmt:prog,_id:a3JU5b"
Preview:	)]}'.22;["sypeZYSFM6ye5NoPrKyzoAs","1906"]3;[2]1b;<div jsname="Nll0ne"></div>3;[9]0;

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1654)
Category:	downloaded
Size (bytes):	265324
Entropy (8bit):	5.462403346570799
Encrypted:	false
SSDEEP:	3072:N41zV5yHOqBOAVr1anPv7zFjyhkgQWtX4mPUjkWtX8ZGjKr:CzOOqBOAjanPzWtX4mPUYWXKr
MD5:	941AC29C4D1A3E0521AC735F288B3E08
SHA1:	D1A633F2DCD04D223B03FD2CF8E6C6F85C3EE58A
SHA-256:	1BA028B0DB45CE3599488325BCDACE8BA206FCD84285D413E70349A50C5B42D9
SHA-512:	6A4BB2769EF99BE665392A43CBC25D488F897ED15BFEF2C17E426D07E0A06A3B317C1FBB3581A6D01630DF06027997D6FE57D1C61198D61AA811A1C6AA9283C0
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-one-google/_/js/k=boq-one-google.OneGoogleWidgetUi.en.0ABcWAGioow.es5.O/ck=boq-one-google.OneGoogleWidgetUi.d1uIQnUcq8Q.L.B1.O/am=CGFIGw/d=1/exm=_b,_tp/excm=_b,_tp,calloutview/ed=1/wt=2/ujg=1/rs=AM-SdHvKQOpXYagvgeJ7sddAjZD90JtrGQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=ws9Tlc,n73qwf,GkRiKb,e5qFLc,IZT63,UUJqVe,O1Gjze,byfTOb,lsjVmc,xUdipf,OTA3Ae,COQbmf,fKUV3e,aurFic,U0aPgd,ZwDk9d,V3dDOb,mI3LFb,yYB61,O6y8ed,PrPYRd,MpJwZc,LEikZe,NwH0H,OmgaI,lazG7b,XVMNvd,L1AAkb,KUM7Z,Mlhmy,s39S4,lwddkf,gychg,w9hDv,EEDORb,RMhBfe,SdcwHb,aW3pY,pw70Gc,EFQ78c,Ulmmrd,ZfAoz,mdR7q,wmnU7d,xQtZb,JNoxi,kWgXee,MI6k7c,kjKdXe,BVgquf,QIhFr,ovKuLd,hKSk3e,yDVVkb,hc6Ubd,SpsfSb,KG2eXe,Z5uLle,MdUzUe,VwDzFe,zbML3c,A7fCU,zr1jrb,Uas9Hd,pjICDe"
Preview:	"use strict";_F_installCss(".KL4X6e{background:#eee;bottom:0;left:0;opacity:0;position:absolute;right:0;top:0}.TuA45b{opacity:.8}sentinel{}");.this.default_OneGoogleWidgetUi=this.default_OneGoogleWidgetUi\|\|{};(function(_){var window=this;.try{.var zy;_.ry=function(a,b,c,d,e,f,g){a=a.wa;var h=(0,_.Kc)(a);_.bc(h);b=_.Wc(a,h,c,b,f,2);c=null!=d?d:new c;if(g&&("number"!==typeof e\|\|0>e\|\|e>b.length))throw Error();void 0!=e?b.splice(e,g,c):b.push(c);(0,_.Jb)(c.wa)&2?(0,_.Rc)(b,8):(0,_.Rc)(b,16)};_.Pr.prototype.Ob=_.da(29,function(){if(0<this.tb.length){var a=this.tb[0];if("textContent"in a)return(0,_.mh)(a.textContent);if("innerText"in a)return(0,_.mh)(a.innerText)}return""});_.Pr.prototype.Yb=_.da(28,function(){return 0==this.tb.length?null:new _.I(this.tb[0])});._.I.prototype.Yb=_.da(27,function(){return this});_.Pr.prototype.La=_.da(26,function(){return this.tb.length?this.tb[0]:null});_.I.prototype.La=_.da(25,function(){return this.tb[0]});_.ep.prototype.Aq=_.da(12,function(){});_.sy=funct

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (754)
Category:	dropped
Size (bytes):	759
Entropy (8bit):	4.8461686983205965
Encrypted:	false
SSDEEP:	12:ISYVVtkN0XVVtkNoPVVtkNnNVVtkNoBVVtkNwVVVtkNEVVtkNweXVVtkNZX5XVVs:ISY/2N0X/2NW/2NnN/2Nq/2Nw/2NE/2N
MD5:	D59CC0A1AA76DF4EC58DB7556F873D60
SHA1:	A828ED0F4C1587DFE40AD42A4A7FA60037C10F96
SHA-256:	44DB7AFDA692FE07AB146BC1314DC61E75C86F6727C912E256C75E494E2CB122
SHA-512:	AD1A8813B9C3ED0A46BA4E2B546F62F037F9FA3F28DFBB611AF8CA715093B1195E8471047CC14299ED7CE4880DC1ACADE8FC601139E47CA69BE0844ABAC3D524
Malicious:	false
Reputation:	low
Preview:	)]}'.[[["shop deals\u003cb\u003e on electronics\u003c\/b\u003e",0,[71,598,432]],["shop deals\u003cb\u003e online\u003c\/b\u003e",0,[71,598,432]],["shop deals\u003cb\u003e laptops\u003c\/b\u003e",0,[71,598,432]],["shop deals\u003cb\u003e refrigerator\u003c\/b\u003e",0,[71,598,432]],["shop deals\u003cb\u003e lego\u003c\/b\u003e",0,[71,598,432]],["shop deals\u003cb\u003e tires\u003c\/b\u003e",0,[71,598,432]],["shop deals\u003cb\u003e nearby\u003c\/b\u003e",0,[71,598,432]],["shop deals\u003cb\u003e tv\u003c\/b\u003e",0,[71,598,432]],["\u003cb\u003etoday show steals and \u003c\/b\u003edeals\u003cb\u003e today\u003c\/b\u003e",0,[512,650,432,67]],["shop\u003cb\u003e cell phones \u003c\/b\u003edeals",0,[512,650,432,67]]],{"q":"WvpPNSbQJxRGIN9ticZOTlkwXUE"}]

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (570)
Category:	downloaded
Size (bytes):	712074
Entropy (8bit):	5.639095380154184
Encrypted:	false
SSDEEP:	6144:D0ZJGyhBqVSYD4qzRoKOaW2Tr2aztaL98rns6A/VaZYkfKXzvIR:os/DbRoKvDxpaZFX/VcfSQR
MD5:	8E10BC0DE1172E92155C942FE119E6BC
SHA1:	8FD24105611C287BDF88755E6F687D9E2BF5B93C
SHA-256:	A9BD0802C8CCE77DAC2096D092FF233800BE9ED8E2976A513C7A3B0B3FBCDA90
SHA-512:	3C5CFE28A57F5A04EF1ACBD4C307692C61EA167FB9B3D9438E1A608D20673DBE146F44A1F9EDE3D139EBEA24FA400CB40C9BD3290A0120C2AAE55F41B7D81D7F
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-search/_/js/k=boq-search.ViewPackageService.en.5vFoIj6rx6g.es5.O/am=DAIAQIAAAAAAgAAAABAAAAAAAAAAayNc9I-AjQDgwfry__9JICim5wcAQAgAwCBiA8CIDgAACIABoAAAAAAgCjoegEACRAShCwAPiBCPAECpge5WYU0AkAEfJYAASACcBBQAAAAEAADA4AEAYB8AIIAwIyDiAAAAAMA1DxgQAAAAAAAAAAAAAEEhLwIqAgAAAAAAAAAAAAACoEk/d=1/dg=0/rs=AH7-fg6h9qK_R5JauIV1HRaiDieC8wgBBg/cb=loaded_0/m=_gbm,xUdipf,NwH0H,RMhBfe,w9hDv,VwDzFe,A7fCU"
Preview:	"use strict";loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20c, 0x201, 0x80000, 0x40000, 0x0, 0xdac0000, 0x8ff45c2, 0x38002360, 0x3ff2fac1, 0x208127ff, 0x7e7a62, 0x21000, 0x36220c0, 0x3a2300, 0x18008000, 0x2800, 0xa200000, 0x20078e8, 0x10444024, 0x3c002e8, 0x8f1088, 0x3a06a500, 0x4d6156e, 0x7c06400, 0x8008025, 0x10127001, 0x1, 0x30000001, 0x200001e0, 0x80007d, 0x22023308, 0x38, 0xf35c000, 0x4060, 0x0, 0x0, 0x2f214100, 0x8a808, 0x0, 0x0, 0x20020000, 0x126, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. SPDX-License-Identifier: Apache-2.0 /./. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2013 Google LLC.. SPDX-License-Identifier: Apache-2.0././*.. Copyright 2011 Google LLC.. SPDX-License-Identi

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (682)
Category:	downloaded
Size (bytes):	329410
Entropy (8bit):	5.590206991490536
Encrypted:	false
SSDEEP:	3072:4c83nL5b29oQMf3Igoa3LRGItTJkCiL7k8Cu/CiXugGDRj/jQ/VI7Yk:C5fggoa3LRBviLgncCiXrGNuGn
MD5:	29D728B01DA2B497000A84ABA115257E
SHA1:	84FB48D68C9BAC9EFB1D3AEC0A32C0DED4CB461A
SHA-256:	C31A04C8FB061C363792F34FB8B368D710CA6BAA750E58AD587699D916AA5A52
SHA-512:	37435CA0EC1DF0FE61909D20E8C97DEAB2254B47AF899454E5A464B4FD70D8EC9EEAEAD4A009D5B66EACD51F98F9A2BDDE34CB866ADC4FB736351DC6D8FCED88
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/63e90c30/www-embed-player.vflset/www-embed-player.js
Preview:	(function(){'use strict';var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ea="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function fa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var ia=fa(this);function v(a,b){if(b)a:{var c=ia;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ea(c,a,{configurable:!0,writable:!0,value:b})}}.v("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ea(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	845
Entropy (8bit):	7.737849160637306
Encrypted:	false
SSDEEP:	12:6v/7OAlpJDBk66hFjgf6oQAztbQk57fafyHFQy2nb0wjgeiwu0MYkIdrVjm1uhDs:glpdkDjrEzD57iqlkoFei4MYX3jhhWN
MD5:	4EEEBDCDA17EB527BD981630D97BD2CA
SHA1:	E84C561A4A2B8F20F01FA5208E5C45FFE14492C9
SHA-256:	E484C0B7C68E920EFE2D4C628CF582F9F480727F163BA8AFE31C74DBF3D8F0FD
SHA-512:	79CC4EA13C252F0AC550D17EAEBF30BFDE583DB05215D4401EC0631BDF1353BBD77AB2264A908E925C252FE59E35A2B2FF0CEA9C8AB1518BD7D721BC1220C101
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... ......s......IDATH...kh.u....R.f.Dx.\:Q....@.!....1r..z..,.T.xI..g.&.l.=.#..........6.vvn..9..4y.`#................3H../=...............%...N....;.N{.<ef)3...^:W0....._R..u9j......j]8...-.}..p5.HJH.....tE.v..uT..?...@ .....q11.u..^.>:.~..:..P(.p.Z..]....R~sJ"..=...a..i)_X.\....S....m..Hm..?2a....j/Za...l....B)..*..J:.S.^>)-.->W..\|3M1...x..%..G...s8.'...l..\|j.G.R..4...U..T.......M .:.F...,0C.B..H...a.JM..X..b_....c..f+6I...PF....+UbMs. y.o.1KUz\...LT.K .W..z.t[s.g.'...Ms.g..&)qBJ .._."V..^_........-"...@...%o.d..A.Lu.`......KTT.V1q)..^YY..z..9.....w....:u..%&...W.tK.?...yk..N..M.v.h.A...H.^.....;72....E.KZ.i...ujmwP(.l.F.r.....=N._.q.9.h4...p....().........q..~.."#.T`.1&X%..\.w.T>......Ro.\|.....(..G[..u...sCf..0.0.F....{{.'...K.5...._o9....+j..o.=d.?...J3.{g......IEND.B`.

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65531)
Category:	dropped
Size (bytes):	83412
Entropy (8bit):	5.478663594311274
Encrypted:	false
SSDEEP:	1536:6forj9Gj2S8RO1RLeEXZtQtQ0GRn2AAPJ6gJTJzndfGr:Ej2pREXktQrn2TJ6gJTJzndg
MD5:	2BC81BBB40A6065B9A9F4A371D02C0D9
SHA1:	29E5D81295E6557F492978DAD93363E0D93AF522
SHA-256:	19375F9A1C4DC58421D93E8CD4C15FA41AEEFE79AE024319DC1864569720FC02
SHA-512:	440858A458102D0309B10D21C72E4AAE1D80A46DD8D8C831A2BCD2EC4A0C8EDA64CE62E479E09CA999E528737DB5E550921B8D7F521BFDE56594E62B448ECC8E
Malicious:	false
Reputation:	low
Preview:	)]}'.22;["1SpeZfCVH56j5NoP5Oae-A8","1906"]3;[2]14598;<div jsname="TYpc3" jscontroller="M6QgBb" data-gmc="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

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (35478)
Category:	downloaded
Size (bytes):	1266996
Entropy (8bit):	6.123151493268912
Encrypted:	false
SSDEEP:	24576:4cWNtzCFsJSqm7kPquX9sTnnN190rqWxZ:4c7n4sZ190rqWxZ
MD5:	AE399DA2BA831565E00FC4F779E1BBA9
SHA1:	8467FB16326A387072FD35BA628C9F7DB2844ECB
SHA-256:	3AB8116F696B776FC1385CCCB093D855AE4816F49EB1D14B3C1A04F675F4C18E
SHA-512:	6CB6F854A71AA9C4FC8FBCB148F9BA1AD846E76F102923CCA53F11F6AA0F0A392967949E439C03F8744FB2EF04FDDC4D0DAE5B31C9505AD3C2452C826D9C4310
Malicious:	false
Reputation:	low
URL:	https://www.google.com/search?q=shop+deals&source=smp.23q4SDealsHPP.22&stick=H4sIAAAAAAAA_7t17sBZTiYOBgBZcuXYCAAAAA
Preview:	<!doctype html><html itemscope="" itemtype="http://schema.org/SearchResultsPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="Anm+hhtuh7NJguqSnXHEAIqqMaV+GXCks8WYXHJKF7l6AeYMj+wO+fi9OdDqFnJTg9t0492DykVxx4jpvFbxnA8AAABseyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IlByaXZhY3lTYW5kYm94QWRzQVBJcyIsImV4cGlyeSI6MTY5NTE2Nzk5OSwiaXNTdWJkb21haW4iOnRydWV9" http-equiv="origin-trial"><meta content="/images/branding/googleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>shop deals - Google Search</title><script nonce="e7mITIDv-4e1anmjlQ7NCg">(function(){var b=window.addEventListener;window.addEventListener=function(a,c,d){"unload"!==a&&b(a,c,d)};}).call(this);(function(){var _g={kEI:'xSpeZdzvEPyy5NoPhfSymAc',kEXPI:'31',kBL:'hFPp',kOPI:89978449};(function(){var a;(null==(a=window.google)?0:a.stvsc)?google.kEI=_g.kEI:window.google=_g;}).call(this);})();(function(){google.sn='web';google.kHL='en';})();(function(){.var h=this\|\|

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 222x186, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	4918
Entropy (8bit):	7.95362666598698
Encrypted:	false
SSDEEP:	96:HmAYfcFwNMhakkbJhBXhyusb72IKMiQO7sNNJ5RhD/8W:GAYfcFwaEkMhBsusb6IDi+NJ1V
MD5:	B200C0DD00D79A678A2A0858B15BA91D
SHA1:	9E55D74ACB7606616555544A1A0AFE1877EF8AAA
SHA-256:	9FDAD75683CEFE7095DF553FCA755662096F84812853BDF7E2DAC4CF8E075B38
SHA-512:	76F37EECB646E8CA988C8D97E7781DF2A984C0B197EAF1C5066F3D0DCAA7DF9A0508CE6CD1B940A44FF631A8EB729740711E967564DEF2D0900309E6EEEAAF80
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 "....M.......>A..D......((....p..~W).......Wu.g.....g.......~]}e.o...+.w.?..g.m....W..~..).U.l..z.......p.............~........g./......~N}D...k.o....t.N...............^.?q...^.....MX.ah.....k.9.......dC.r3..u,l.V.:.e.Jo,6u..6......jl[..b........_w..V.l3m....9.;...zS...I:.>..V.....1...R....]O{...P.a-..Q..&.........R.&..d..{.m..s.?g!..t%R5..1K8......q..j..l.]...8....,g.<k...\|.&.]tS...+..zl#.(?c..z.q.]u5B}r.1..T.....[.Z.E..5......nf...8.!.i..:......=1.....)......>.<.#$...X..[.<..U...o..7r.y..H........#....<..<)m..7X.XX..&..!.....V..B...{.t....l..6Z}...K...%R@.....n.H....l..d.]R.,.E....#..R....g.~...&m..5:Z........r...0b%......\|.P.[..lS..G.%..$.k.........l.2..f..O.ws....QC.."9....N...J...q?...Mb....p.......{'......b.k.8..vF".....^.l.."J..7UL...t..lCc............-&}.e.).<Cd.#d..CE... ../..9>[.#g....T.Nt';....X.R.p2l...?.o..".W.R\...n;?si5....2y(.]o.5W.v..b76...?.e..x1......."_8....T...aa.....n....~a.hx...+.)j....Y.h"...c..?.......x.#

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1193
Entropy (8bit):	7.761995255453896
Encrypted:	false
SSDEEP:	24:Z5UFEORXsd0qtw+/Mvn+1mnuON8/OkadX3nJTWiyrnE0V3YoYxJ9:fUFEORXs3avnCbW8GkMXXB3InE01g1
MD5:	9616A0B95373015EE79594CE5877B198
SHA1:	A5B71ACC8A5B98BBF7CCFAB2302AF4F577839224
SHA-256:	B0073B437EF926BFF8D55D6E1AA1E58244993970DBD050975CDF3E4567B10D07
SHA-512:	79D9254BC54D698358AE3A664D91272A9AC57082A9A64B0AF21B5667BEF260EA29FB96E273B828EFDB6CEF03532B163ECBC959E709D93A95FD6787D0A50396F7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz....pIDATX....WU........f3:.C.B>..b.ty)..)..&...A..T.AD...aTt/.0A.....BYa.6.:V..\..wn{.....j...\..s.....Yl8...0...M[..tpx.....y..o.m.....xf...TA?..76<t....X.~dI........xn...VUx..UI.._.8.....)+.^A.w....`7.s./......^.Bx0.p..IO.....].>.5...."c`....^....%...UQ<\|.....W..;.-K.t........lJ......$.T.v.E.@?..}x..YK..[..y.........;.1x..R....,K.,.... Q....Q0.D...n...?.o.....o..1.B...;.H..{..b....5.c-y^.B..{.~.O.....,.1FW.%..j.e......b.!/rT......4.,..........Z...U...#Y.ED....,+..DU...Z.....uH.....j.h.Z...<...7z..x...M....U.,cbb.Q%..j..$.y....Oh$=.cp.s..w.6.....<.`@'...8KU........!..2...QAD..@)...(T..............\|.....{.v.M'M....X...1......`Z..O.n..(P..$il........_._{..k.e.v..cSS....W.H<.\..N.>..?.....P}2===Y...>IV...u.u.\_..I.}.v.......4>.....$..8.A.LJ.._...:zd.N.m....._.....0..F.S.UT.Ub.Te......;....Zun.w....@..(H....BQ.(:..!....G..v...i@DAT..ad.A$....h=.....e..K.Iu....T....B.......E..t..h.a0.X..1.18k......!..s.

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6600), with no line terminators
Category:	downloaded
Size (bytes):	6600
Entropy (8bit):	5.489888223560783
Encrypted:	false
SSDEEP:	96:NXePtxfXAQ+QagfBUoh2dflSxdY8FNqrEspOLJkmFAQtag:UPnIy9h21lS0tESwJkmWa
MD5:	2C78B7F8FA496092BF41D5EDD51611E7
SHA1:	8B0B1B276E8194B0A5497DB478EC2EA9B4F83C42
SHA-256:	2B0BD09C1CC7119D27E45353A59BF6C2721563E1689853FF704057A7439508D2
SHA-512:	53A7750EA46082968C2EC557857AD3975CDDB0B45595259F0F3E9FC16360B87C5F257E058489ECAF80E61A97F92F1C5E34FA2F6FCFE922F4AE22392FFD75B4DA
Malicious:	false
Reputation:	low
URL:	https://report-doc.org/cdn-cgi/styles/challenges.css
Preview:	*{box-sizing:border-box;margin:0;padding:0}html{line-height:1.15;-webkit-text-size-adjust:100%;color:#313131}html,button{font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,"Apple Color Emoji","Segoe UI Emoji",Segoe UI Symbol,"Noto Color Emoji"}body{display:flex;flex-direction:column;min-height:100vh}a{transition:color .15s ease;background-color:transparent;text-decoration:none;color:#0051c3}a:hover{text-decoration:underline;color:#ee730a}.hidden{display:none}.main-content{margin:8rem auto;width:100%;max-width:60rem}.heading-favicon{margin-right:.5rem;width:2rem;height:2rem}@media (max-width: 720px){.main-content{margin-top:4rem}.heading-favicon{width:1.5rem;height:1.5rem}}.main-content,.footer{padding-right:1.5rem;padding-left:1.5rem}.main-wrapper{display:flex;flex:1;flex-direction:column;align-items:center}.font-red{color:#b20f03}.spacer{margin:2rem 0}.h1{line-height:3.75rem;font-size:2.5rem;font-weight:500}.h2{line-height:

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1035
Entropy (8bit):	7.7433146380180755
Encrypted:	false
SSDEEP:	24:/OYEpsLS0icYucaDbwjxLB05gORAUbjWIa2E1T5mO0:/OYusyctcaD8j/St9y8O0
MD5:	DDD52CDC94F7378E6006BFD3786E11AA
SHA1:	97376CC94CF962C8EB6BD2E7B8A64EAE325C0D2B
SHA-256:	0A2AB1A6C51414B83B1E922399707FCD4940EAE726141F56E70809BB64762E4A
SHA-512:	6BAA7D2817B364D330A525F24B83C99A146F67D34F3E38D0FDCE2E99830FE63D3ADE03731923E971F3A4ACC347D967F8B10753E61CC1506C6ED4BB551759A367
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATX..=.TU......z..1...Rl.....DM........V[..;:..-.....@.QA.....ADV..f.A2.v.ewvv.}.s..!Z:<i.$7..w.......{.nn.Isss...3.Z.W...Z...c..I..&.t...z.E.-,,\|Y...m..=T.....t^[\\.:.Z.1..i<....a......I..&....}.....O...{....p8..5..........S..o6./..U].&k.>......{.f...6.>.&..(.....`..K..\|..._.....v.>.V.\...Q....U9...^..3S../8...";..'>q...!W.....Lu.....;\o.Nd...d...]$[Z".V.D...4>;E...M...~.......t.]%r...7.g...!...!...kz{!"<y.f...?.B..I)..S....T..s`.....3.R.....z%4.C..{k.(b..W..y3..f)~.+...Y.2".)j...(..jJ`..a.j...S.l0.yt8... ..1..1%0CM.8T.Q.b.XYu.....3..G..7p...f.0U......MR.\AG.tD.W.0.Q..djH..L..@/.lc.+UQ3dL;....Ya.1%...4pq1...A.....(R.Fbs.....C..\.I!.4K}.fXo0.;Ow%.<o..f.a(....:....jf.K.......).r-..df...<...$....JJ8V?..Q....!..%5% `...B..x..NP.p.......H1....Q3....h.+....wl[......f.%..G.C1<B6.cA..!..Z.....^.:.X...J. (.MQSb..A......N...p.x....}.....}...R.....<R.VW...K.5=%a..~TY...o..M6...j...v....B..333.OOO.R.z..V

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 124 x 33, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1178
Entropy (8bit):	7.735688086333932
Encrypted:	false
SSDEEP:	24:tLaceylIl2yLGrN+mYoZjMUbPMpfvVaiusectgueldvZruCivkEFfeu+RSS:fIkyLGBzFdM5pXGflD9ZKh/euVS
MD5:	11CF17F4EF7121038E32CEBD6754CDB4
SHA1:	17992754CA34F656F60FE437327B382EBF06A407
SHA-256:	5E97BA7A9400693C0B84E34D237D15C3F4A9EC9CD0FECB2CD009B0809133FE8E
SHA-512:	C750AED9FC60BE73643B820DCE140302D894F89AE0F0025CB10E829B7BD058E08297AEE5FB77BE8F1C2AAFE0EDC0F5ADFDAFCF9F1680B83B1E217302513DB1EE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\|...!.....,.?.....PLTE..../..... iOo..){/U.O.......1.$....../........:^.....H....g.........7..@.b............h..}..w.......@.........1\|(..Fh.'O...........<.3P.....<..o....~...J..\|.r...0{.F..a..........R....N...p.b....IDATX..W.b.0...ks..61......Y....U..JF.iB.@_:.X....;;r...9.a..e.D.R@...y.H^.l/F>-.W..#.....e.J.R.C.......}...ua..`e...Yt...d..aH<.N./k.cn_.H...y.(.....Ik..W.\|..s....g.......S... ..\|.....u..N.&o.i.6..\|tW..,7W.\.=.s.p`..Mx..x@...s.(..D.B4v...D....<.O....p...(..E/...L.[..3..R@..1..c.....j.l.......h......%jg.....,u]w.b.b/.%..R......L...)'..)..K.W.H.3.>G..(U.@<J...)_~...c..........D.(as.h.]..b~.1.........e.]}]....^.....B...m..p.ov*.....c.....1N....\.+Z.7.2,Nw..1....}..u.1HC}K...m...j..^]..5...)...C...z....6.l.H;....6.../..O.d. E'..wH.B.>....6.N..6'...\8.x...J@..ZaR..n.......Ky12...`<..^t..M.?5...aG....d.b.,...3...-8]+...h.../.7.t.j..'.J.............^".(v.?..EzkE...e.D..Gr...kl.6yp[.Z.s'.Q..\R.YYETa.In.5..J.

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	991
Entropy (8bit):	7.690170863960064
Encrypted:	false
SSDEEP:	24:DPumInGm728J467kcCUvn/x8KJ4SVWtIxvK5hTu9RXjF7:rumTW2D6jCm58KJ4QWtIxvK5hK9RXJ7
MD5:	59C612D421119B9572DD3A1E564A7BE7
SHA1:	28AF7D868981FBD4A64954E9B8450BE4DD1843FE
SHA-256:	B3492A75DDDBF248FD22FDA659091CFDA22B5812274F741CB982DAA0916A7783
SHA-512:	55667C951ECD2AAD2B766BEC3E0DF411335359D10A8119A40A03FBC0F12E244C3356157FAA708F7CEDF139743B38934E6DA7F8F7C076C61A0C14E3C7D9DC9CE0
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/shopping/deals/womens_apparel.png
Preview:	.PNG........IHDR... ... .....szz.....IDATX....k_E......./.&QH.A)X.B..E....AA..h.VR.F(.......;.F.T..K..n....lk.m.6.m.$...8.H..c.[.=..s.3s.......3.;.3.g............k..?<.s@..O2s..4..... aA>2.2...4..9......=.O.4.....>....a.\Y"...#.t.a...t....=.....`.\|.L.K.EV..A.....jB..^.+=.8.Oi.".a.......J2PQ.gt.>..R.......)..$..9l^..s..Dk@..~........T.....+...6.#)... z.....m...F'........B8"F.J.".gz..v...X.....0}}.........H.(...`..#..28..9..7.......PX"..N,.>.LO..#s}.v.i...."....[ycZ.._.4.....(.$D...............sO..$,..0f..C.v....F...&.....q..Htn7..9"..J...".#..@..W..?Wl}.Z..\.....I..K.I...".v.D..n...4...2f...4x.I....X......J..xyK..W......P...].xD..c.M3HU.>.....-.....h........`......1.0.$.....4.~.z`.............*X..D..!.....&kwD. .C.'..M.Z...nc..Eb,..PuQ...0b.!@....V@\...X8y..M.x...6..m..!.....m...#T.H.bAR.C]...Y^}s.[.x...I.........V.. ..$.2#...".j..o1.%....z.^.vy..xj...vqsu.f..}.1\--R.....&.4Vn/s..~[.}...}v..Y.....~.).....kC..M..88..=....7.s.]........IEND.B`.

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	660
Entropy (8bit):	7.7436458678149815
Encrypted:	false
SSDEEP:	12:CPgCZ+X6xCDzNAs1dVc1rhVbo50xCmGjkm9vgZAO2YCGoOg/t+YcJNw:KZ+iC134tFoOxC3/vO2YCpR8YcJNw
MD5:	C3DFF0D9F30EC0BCF4DEC9524505916B
SHA1:	4B378403ACBEBC3747E08C69B5FD7770A850C9EB
SHA-256:	73D788F86BE22112BB53762545989C0F1BBDB7343161130952C9BA3834FF81E3
SHA-512:	677EA304D00D176ACF61FF68BF23BD5F77AD2928D7DE9F4B842292BC9D3FB7029FE9F578B62F142DCE689230F392E828098EED3484FE2DBEE6E1A7AA5378E2C6
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../'....Hv.=n.......Q...a..(Rv.o..U.....l..m........0l.6l..f.......A?B.C.A...2h..Ag0....G8.n#)R.j.x..P.F..I;.Ox......7-...bX./..]...3..T....5...x...G.C....%.u.....u/._.=....<!q.\...9.....\....p:..P.4.aS.N).>.>.."..9..Vh ....no....l.1..#6p\c..2..>..=8...........FP.^....+/.~......hs..D.Jm..9...r....t*.H..~T^\|.....l..l......he..}f....d.."....K...&1..................pl.Pf.%6...2X..I...eXQ(.K..1%c..w.s._..._K`K.1}..D.E=...<..ytM..>.q'.e.L.~$...b..;k.M.....t\O..m.I._..F....'........z.]..u?~..P.zJM.. k...p~9..D....".Zl$?f..+...\.Pg..%...;.[R>N.#.W.e..@q...(....]&......K.......?.\|.z..(...:&m.V.C.'...D^.R....

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 21 x 12, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlCvJEdhBxl/k4E08up:6v/lhPzjB7Tp
MD5:	BFFB874AD1967D6112A6E79EBD7DFC1C
SHA1:	E870EEA5DDDA173ACD7EFCE63A0CBF14F9A9548C
SHA-256:	5504729C15761CD2B4F0957335B57AFB920EBEDBBBA50339C62C711C8FC481BB
SHA-512:	3FAB405CD79F08DF391174E41E64BD6ACF6D3411DBEA84FCACF62DB6175215FBECD560949AA80F7D6CF6148E5C3E43799792EABC952BA16E3ABD8EC91B8F753C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............a.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	246272
Entropy (8bit):	5.222753169596996
Encrypted:	false
SSDEEP:	6144:VlVZMl5hFQFh7ZYLnqnVHg4hffPvZnnL6jqI:VlbSFQv7ZYTqnJ5hfXvZnOjqI
MD5:	8C9BE4FD8C48EF153A891580B533AA32
SHA1:	CB6BB1F6F06C6ADCEBF7A2B5776B58C23AB77660
SHA-256:	359238E8BB879A985D900A1493B5EE42438B7C9D7409590F56F5D9B4B6CE1D5A
SHA-512:	9997C24CD76E1617E2C6F5E2F8A43D974C88B8EF95DA7A0BEFF9253AF00EE3079398C5000E8F4AA57911034838B3A8909D0EC4F93017626DE7DAB357B8E3F293
Malicious:	false
Reputation:	low
Preview:	{"moduleGraph":"quantum/t7xgIe/ws9Tlc/cEt90b/qddgKe/yxTchf/sy6x/sy6y/sy6z:6,7/sy70/xQtZb:5,8,9/sy71/R9YHJc:8,b/KUM7Z/wrzEXb/TxCJfd/WVDyKe/sy72/Vj9hpd:g,h/tafPrf/dtl0hd/lLQWFe/Il1M4b/eHDfl/FONEdf:k/JiVLjd:k/FAUdW:k/dMZk3e:n/ofjVkb/qaS3gd/T9y5Dd/yiLg6e/Q7BaEe/tRaZif:u/F2pEhc/n73qwf/UUJqVe/MpJwZc/sy73/nAFL3:12/sy74/NTMZac:14/sy75/sOXFj:16/sy76/oGtAuc:18/sy77/sy78:1a/byfTOb:1b/sy79/sy7a/sy7b/sy7c/sy7d/LEikZe:1b,1d,1e,1f,1g,1h/sy7e/xUdipf:1j/sy7g/sy7h:1l/sy7f:1j,1m/sy7j/sy7i:1n,1o/sy7k/NwH0H:1k,1p/sy7l:1h/sy7m/gychg:1i,1r,1s,1t/Ulmmrd:1u/rJmJrc:1a,1f/GHAeAc/Wt6vjf:1f/lsjVmc:1e/IZT63/Vgd6hb/sy7o/sy7p/sy7q:22,23/YNjGDd:24/iFQyKf/sy7s/sy7t:27/sy7r:20,24,28/PrPYRd:25,29/sy7u/vfuNJf:2b/sy7v/hc6Ubd:26,2a,2c,2d/sy7w:12,18/sy7x:28/sy7y/q0xTif:13,14,16,19,2a,2f,2g,2h/sy7z/rLpdIf:2j/w9hDv:1r/JNoxi:1v,2l/SNUn3/ZwDk9d:1j/RMhBfe/U0aPgd/io8t5d/sy80/KG2eXe:2q,2r,2s/Oj465e/sy81/FloWmf:2t,2v/Erl4fe/RuUrcf:2u/JsbNhc/Xd8iUd/sy82/d7YSfd:6,7,2z,31/sy83/sP4Vbe:33/sy84/ul9GGd:35/kMFpHd/sy85/sy86/sy87/sy88:38,39,3

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	992
Entropy (8bit):	7.728730506543557
Encrypted:	false
SSDEEP:	24:QpaRQHSqIbkWHU6mFIPLqS4Ji0RHpXJ1ihXb8nuSODnTdcgGWiiN7F:Yamqbf06mq2S4A0p1J1+L8uSO7TSdeVF
MD5:	373737007166D8C5EA5FCAA985C4CF3D
SHA1:	67D236A8C20C011E4669E47B728BAB62A5854B25
SHA-256:	1F2E87B7BFD2FA68F16071D05C99F3452EA20CF022BB5101BB81CC49B44D887F
SHA-512:	309B77E0DD7B04228BB1EB63CA3177C6F3A011C25248ECAFD881727F41498B8971DED07623D00469FEF92C50463B003C6101C7DE8367F8C1ABB549C834129616
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/shopping/deals/home_and_garden.png
Preview:	.PNG........IHDR... ... .....szz.....IDATx....p,K...g.qrm.m.m.m.m..g...X..~U..v......e..6%..\.......{u[..........Mv...7....y...tfp.W..2~..Z=..w..ZdM#f.[.7.s2.2.MHN..........R........-...P......f.....U.:~o:.{...o.y......y.p...i....F]Z~..M:...n.Q.U:j?_GM.I.`<...e.0#......s...JB.C..$..\.8N!G.5.z.)....m...^.....V..,0..B..'...1......+........x.(..2..&.+. ]..i..[_+M....$AU....kK.".Q`.A..[`X!In0.1...Ao.....F.>.'@V...O._.Fw].7P Q......N...7..M.B{../...R.R.Z.?...2.Ab.\|.\..h_.....`W.....&..?@.......q.w.~.3......._.....U..%H. ......=.0... `.f..:8eB .?!C.J".O........-..3......L...I.......@.E.;%DcwP9E..?}.....b...K--.....3.r\.....6.....H...IC.....B.\.9...O..?3..Q..:.(..u/.w.zI.#O./t.o...BwKn.....C.....!....Z.Y...[.w...G....m....K.b....k...4...&....V..V...a.Y`.h..8....B.N...M. @.c.../.uFE4:..52..}...<..'M.. ...Z.wt..APU...A.P..[...U...~......q..j..:!4=..A.....5...2.......~...{..,/.j...T.'w2..H6.`..#.MGN'....M..1........n../u..5....IEND.B`.

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 21 x 12, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlCvJEdhBxl/k4E08up:6v/lhPzjB7Tp
MD5:	BFFB874AD1967D6112A6E79EBD7DFC1C
SHA1:	E870EEA5DDDA173ACD7EFCE63A0CBF14F9A9548C
SHA-256:	5504729C15761CD2B4F0957335B57AFB920EBEDBBBA50339C62C711C8FC481BB
SHA-512:	3FAB405CD79F08DF391174E41E64BD6ACF6D3411DBEA84FCACF62DB6175215FBECD560949AA80F7D6CF6148E5C3E43799792EABC952BA16E3ABD8EC91B8F753C
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/82a281d8ed3d062f/1700670106977/KqjhGQJRJoD_bVM
Preview:	.PNG........IHDR...............a.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 186x114, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	6542
Entropy (8bit):	7.971255508706056
Encrypted:	false
SSDEEP:	192:R+Xdi4yWAQEskMxSJOQcEc/4wPqYWJ2G+yhBiWr:8g5QEskQSJOQcEc/1PqYm2Gv+Wr
MD5:	F691EB3FAA26D128EBCAF3B55B34C083
SHA1:	CD13C7D496DC6B58F966A25724CBBD1283D5F3F3
SHA-256:	65CA894D719BE645AFFC5046B6E8BDADE5BCF65D0354CA4D5E1FC7FD9ECDE741
SHA-512:	0C6347EB9A655ED31F1EFAD500B2605EC690F49091EB9DFE6B5B8069A9F54303C2A782A0ADE17C8EFBE4FB17E3A71425298C8DFE5D13C0BF935F23D2A72AB775
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 z....U.....r.>i..M$....@.....R...N3_.?.<...l;.......?H.....E.}...7.g...P........<.=.......v.....'.py.....d.m........A.....O........^....W.......y..[.g............._`O._.....N.........{......S......LY....F..5~...}...F.r..D.Q#.I....g.+.....,...lg&.....o.i.......\|KZ........Q{.....F..Z...}.rk...1...l..e..S..X....QE. ........U.(B.L;...E...T.2....7...Yn8+D.!Y.R.Q...a...tU'...T.7..g._$..)...".2c..KQ1`Tb.#...x......'.m.].]%w.....g..4.s...o/...O..1,.R.p.K.."U....j.p.q...`.$.L........u.K.....4a(S\|}g...N..Db..m.....n\|.4.`.,.W..o.,L....p].wK#n...62f.\|.S.poiq.\...i.]6..cWm.....?.......S.Tq......>V_q..N.T...y.H$$...1...k{;^.3....H.G.V.I...Bq.x.w#.e.u5.}...>e.m...GB.E.....-O3B..U......wC......;....[..P=...s...3.......v.W.....T..R....W..........>.5L..s.=...3...~e.u.v..".4..y..U.E\|l-...V..l...~_.........m.M...m..A../.s..).....j.k.;..Y..iP1{\|...V....o<.J.]../=.T>p.....5.V.`...H...2j..O......XZ.i....\.<.....v!./L.S....F#S.o1.N6i!

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	629
Entropy (8bit):	7.564672249311839
Encrypted:	false
SSDEEP:	12:6v/7ixcno2hzWMstQjfasZklbM530LQhQeb2/+2ezuyzKLElz5ftkTKHvCl7l/lN:bUhzWKXE6yiVbmyrl9tpQ9
MD5:	26AA2A96591A8457131E2C2FAB297733
SHA1:	1252C95DBE00D6DB88593FE49DA675219748554A
SHA-256:	F31B3D2831EB8D2FD5678734A9F73AD2FF01424085CCBAC3981AC290BD7F0D99
SHA-512:	225413971B05FC06266A42AAE0069ED50131F945DF87A120B4281081327EDAAA40222E3270DFB4AAEEA6B05833EA840B30EC4A22245F3EE0CECCB0339DCA8C65
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/shopping/deals/health_and_beauty.png
Preview:	.PNG........IHDR... ... .....szz....<IDATx.b.R`...'O..^.xv..#.g>.}q.'n\8....WS....1....vjo_9...]..,Y.C..~...9}m.{....u...0..QVJ......D.AJ.K..+Y#X.EA..W.]W.np_....#d.D..8..k.+l.3.M%...dM..gG...B.BJ.Z.f.s.}U.g..o...l..WjG...=..0?=T.5.O.'.d.<O)BA., 8?...ET.z..8...n.;.06....8...L.wS........U.M%s.[.t...h...H...)a..F.H.^?v...[7.>..o....Y.gY.C.X.FK..S.4..F..+hn.... ...6.d..<.m.."..l.(.@...S..6B..e....x2..0).$.rG+.`.j<".......+..0...{.../=.]..?...g.aR..%...;p.......E0....0...7 .9.d...U..........Q.0?.T....*.AIx...k/.!..HC...Wy.R.9..)BF...g.k.....U.VMT...0..K...,l..5..g..&.c[.........;.........IEND.B`.

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2119)
Category:	downloaded
Size (bytes):	211496
Entropy (8bit):	5.52076888123878
Encrypted:	false
SSDEEP:	6144:GgWy8/dfyZ4sEgGIlRWYfsBZxbj5nWFBuQwOn7fhDy9xlxpe1gvs2:RB8/dfyZ4sEtI9fsBZxbj5WFBuQwOn7o
MD5:	CD8EF8A2C2243E885C73DDB04AA690C6
SHA1:	139A6730463B73A4D91107DE4E481C6526EAF101
SHA-256:	A0FD03C6B39A26C58E44F90A59AEA3D69C78AE83C77E9CECC2F59CAA9EEDAB6B
SHA-512:	02B4FF6A41F9084FC82FF22A5A4E4B338B14F40D9121FE8B2B48451765BC57FFC7CDF52CD6EF263777845A9131990B86F1D46ED17A6E0332593C8CCEB1798222
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US._Y_GrwNhTr8.2019.O/rt=j/m=qabr,q_dnp,qcwid,qapid,q_dg/exm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/rs=AA2YrTuFdMeuRY-i7JPqP_M8jfztH8nn8Q"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.oe=function(a){return _.ub(a)&&1==a.nodeType};_.pe=function(a,b){if("textContent"in a)a.textContent=b;else if(3==a.nodeType)a.data=String(b);else if(a.firstChild&&3==a.firstChild.nodeType){for(;a.lastChild!=a.firstChild;)a.removeChild(a.lastChild);a.firstChild.data=String(b)}else _.me(a),a.appendChild(_.ne(a).createTextNode(String(b)))};var qe;_.re=function(a,b){b?a.setAttribute("role",b):a.removeAttribute("role")};_.se=function(a,b,c){Array.isArray(c)&&(c=c.join(" "));var d="aria-"+b;""===c\|\|void 0==c?(qe\|\|(qe={atomic:!1,autocomplete:"none",dropeffect:"none",haspopup:!1,live:"off",multiline:!1,multiselectable:!1,orientation:"vertical",readonly:!1,relevant:"additions text",required:!1,sort:"none",busy:!1,disabled:!1,hidden:!1,invalid:"false"}),c=qe,b in c?a.setAttribute(d,c[b]):a.removeAttribute(d)):a.setAttribute(d,c)};var we;_.ve=function(a,b,c,d,e,f){if(_.Pb&&e)return _.te(a);if(e&&!d)return!1;if(!_.Nb){"number"===typeof

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3391)
Category:	downloaded
Size (bytes):	57562
Entropy (8bit):	5.579914167705227
Encrypted:	false
SSDEEP:	768:6+1cbGURoRx4iz3RdHr/lYymRr/a7OV8HWEwHEQl:GUxLL/lYHVNYQl
MD5:	50BBF688F33E38D5F7C5F2A73C02AA7A
SHA1:	67F82D27E93488DAD1DA215155FEDB8744066738
SHA-256:	D5277513B55F5E850101F15939C3DDE471282E1A737D4D54CD347D4C28AA99C2
SHA-512:	746AC68004B32452437685995585C3F10C1DFB4B7F303E3D017BAB6E5D6BDF424B031C807987847F7715DF20E3FE5CF2F1A2C5A99A03B61CDABA4EAC89FA6420
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/63e90c30/player_ias.vflset/en_US/embed.js
Preview:	(function(g){var window=this;/.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.io/license././. SPDX-License-Identifier: Apache-2.0 /./.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause./.'use strict';var snb=function(a){a.mutedAutoplay=!1;a.endSeconds=NaN;a.limitedPlaybackDurationInSeconds=NaN;g.bT(a)},tnb=function(){return{I:"svg",.X:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},V:[{I:"path",zc:!0,S:"ytp-svg-fill",X:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2.7 .68,-8.31 .68,-8.31 0,0 .11,-5.61 -0.68,-8.31 -0.4,-1.5 -1.59,-2.6 -2.99,-3 C 29.11,.98 18.40,.99 18.40,.99 c 0,0 -0.67,-0.01 -1.71,0 z m 72.21,.90 0,21.28 2.78,0 .31,-1.37 .

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	879
Entropy (8bit):	7.686368689492006
Encrypted:	false
SSDEEP:	24:Mqol1jzd1mmKRQTY4p+8RpxcUtvL1DbLxhF:No//d1bKROp+8RfcUtBDfxn
MD5:	735E064D9E82A7FB99F275F67703BF04
SHA1:	A051335853179AB21B1634A2FA96603DBE1D0632
SHA-256:	3A9CF543B7AD3DA97F2C531FAC16D477B143C51DD6A83D0F338626A723018316
SHA-512:	93D5A2EC97C0A714CA4B7A2586F9C03ABF81BE2AD7CFDF52926F6A7217C1754EA28ABEBCAE62936D71881F521D8A72A1A55A489CE8DCCD7CD581FC03DC0BF1F1
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/shopping/deals/baby_and_kids.png
Preview:	.PNG........IHDR... ... .....szz....6IDATx.....lW.....>3W.m.n.2l...j[A..j...v..~~of..k5.[.a...a.........4.Y...n..C..a..a..J.Y..C..G.....k.n...n.%.A...o}....&N4g....Z\|.<..W._+.......A...F.n..O\g.Mf-U..o~...n.6..Ct..j.x.....X.K........E..-.....&v^g.mf-.%..t.I.......%....uW%..8...$..;&.c..........._..^...wIF.1J[.....a.fD.I.$$.H$%"....')..........OWd.H..w.`8I(.......X.,....>.].0....>.p..\.Z..!. .../...S.W.6../.?.......$K......@.....i.......n;..!....w.O.D..cfH.@.<..F..b....3#<.m.......C3....~..w'...4.C.....2&F........HM.D..j..$Q..z#..J2...aD....aL.. .`....J....5..dj......A.%..H..K..R4i.......T...C.O.4........0..tB-.Z+a.$.N)..H..~.S+........-..L4...........i@..S..'.-.c...5.Id.v.Br.,7q..[~.bH,..;...>.=....Cr.....4M.).5........Gg.._...W........E...P..2..>@Rx[....i..B.rf\|.Ij[?......J.'r.RI.H....m.S..m..e..m>......?.,.'.-C.....IEND.B`.

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 148x83, components 3
Category:	downloaded
Size (bytes):	5434
Entropy (8bit):	7.915927555875939
Encrypted:	false
SSDEEP:	96:ekM/vE9rLv64Bi8qFTuyc4EZ/q9KkrXuUQCVJDJmWEdzJ68us9SydA:ezEZLybFAqYOuaV3s9SyK
MD5:	4470243A928E1B4E36972F5CAF284F2B
SHA1:	BD4C255B0836ED9C788C39803ADAB46537486259
SHA-256:	8D068EA31FDE9082F0898A6CDF10BB2C927E3E46FD9D5C0712EB95F94389A135
SHA-512:	AACC38BBEE0E6F0CABE5FDB825F94BC50DC8D3074B642524791485278CB3A234DAE0FACBD610D3AAA3FD4D8D7733CBCF843B011CEE853A9962380894949571D0
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/WyL-v--M_BI/mqdefault.jpg?sqp=-oaymwEFCJQBEFM&rs=AMzJL3kxxj4wLr4MUw1312xJqtgxGYib6A
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......S...."........................................?........................!.1..AQ."aq2....#..Bb....$CR..3DSTr.................................0.......................!.1Q.Aq."2BRa.....3C...............?...5.........../........(..FVl..`........W.."~.$...).m..m..F..J..\|...h...v.....;<..q...Q.W.C.et2m...W5.../......E\...................)......Y...^..?...Ke....J..........(\....!.^L.....98.=..@^...p."..._>...........l.R.."....d...}...FW..Wx.4G..IQ.b....'.....]....LDG..!.J.......<h/.v87....0..p.O.>.M>......m.n..D9q..g.lzk@.K.U....yaR...Q.6. .t..Oz...7{h.L.lH..R8..}.=....8Z.I,?.."8g...8......6...c.&H^.O.^p....1...u...m..$'.\|eaE....y...>.=.k.>&.6{p...:.H.Kb".L.c..w.*..Y8p.q.ik.6...3.x.4.J$\epy.Y...:.4..9J^>.[r............~..\|...........:6Zc9....\v...^.....:.P./05..R......xa..<.#o....Y>T.8....?.../

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2119)
Category:	downloaded
Size (bytes):	217132
Entropy (8bit):	5.519567893391185
Encrypted:	false
SSDEEP:	6144:GgWy8/dGSgyZkgGIlRWYfsBZxbj5nWFBuQwOn7fhDy9xlxpe1gys2:RB8/dGSgyZktI9fsBZxbj5WFBuQwOn7l
MD5:	35FBB25724A3668923A271F1033D67D5
SHA1:	CB3BDB2A71BEC69CF31ECAB968143972487E5FD2
SHA-256:	4B514E51E5BB6600D354FF655D21E5897CD155B4180376F7342D053ADEA65E5E
SHA-512:	8CF96BBDD6CB3EC364E1737629D2C692C2CF268B90DCA87030C1A4A148482179673E4CEDEFCC6FFDE001875AB2958D318517D4A207EFF95CBC8FB346B760F240
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US._Y_GrwNhTr8.2019.O/rt=j/m=qabr,q_d,qcwid,qapid,qald,q_dg/exm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/rs=AA2YrTuFdMeuRY-i7JPqP_M8jfztH8nn8Q"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.oe=function(a){return _.ub(a)&&1==a.nodeType};_.pe=function(a,b){if("textContent"in a)a.textContent=b;else if(3==a.nodeType)a.data=String(b);else if(a.firstChild&&3==a.firstChild.nodeType){for(;a.lastChild!=a.firstChild;)a.removeChild(a.lastChild);a.firstChild.data=String(b)}else _.me(a),a.appendChild(_.ne(a).createTextNode(String(b)))};var qe;_.re=function(a,b){b?a.setAttribute("role",b):a.removeAttribute("role")};_.se=function(a,b,c){Array.isArray(c)&&(c=c.join(" "));var d="aria-"+b;""===c\|\|void 0==c?(qe\|\|(qe={atomic:!1,autocomplete:"none",dropeffect:"none",haspopup:!1,live:"off",multiline:!1,multiselectable:!1,orientation:"vertical",readonly:!1,relevant:"additions text",required:!1,sort:"none",busy:!1,disabled:!1,hidden:!1,invalid:"false"}),c=qe,b in c?a.setAttribute(d,c[b]):a.removeAttribute(d)):a.setAttribute(d,c)};var we;_.ve=function(a,b,c,d,e,f){if(_.Pb&&e)return _.te(a);if(e&&!d)return!1;if(!_.Nb){"number"===typeof

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	742
Entropy (8bit):	4.715663467051154
Encrypted:	false
SSDEEP:	12:t4noU/vmRsSL10UclAEBTFMYNIE5Au/JXl+51tntkB3xYhyUQk2LrtmSEebfuFd3:t4oU/vyB0U4AORNZHt851VtkRUQhrlBU
MD5:	EDD0E34F60D7CA4A2F4ECE79CFF21AE3
SHA1:	2CC789A02534557380D92124E2F8B9483D198FB3
SHA-256:	ED9087D76CDC6D1C53698F6068F79872E77E87C8D012C0CFDAD13B05B6CCB37C
SHA-512:	CE9D50913CAD41D11C7B3963C90788301B63EE1FFFFF73108E9F8709CA0A9FCC6170853A65A820FBF020628B403813C9E3CD262389FEB7D17A6C73C2F724394F
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M22.56 12.25c0-.78-.07-1.53-.2-2.25H12v4.26h5.92c-.26 1.37-1.04 2.53-2.21 3.31v2.77h3.57c2.08-1.92 3.28-4.74 3.28-8.09z" fill="#4285F4"/><path d="M12 23c2.97 0 5.46-.98 7.28-2.66l-3.57-2.77c-.98.66-2.23 1.06-3.71 1.06-2.86 0-5.29-1.93-6.16-4.53H2.18v2.84C3.99 20.53 7.7 23 12 23z" fill="#34A853"/><path d="M5.84 14.09c-.22-.66-.35-1.36-.35-2.09s.13-1.43.35-2.09V7.07H2.18C1.43 8.55 1 10.22 1 12s.43 3.45 1.18 4.93l2.85-2.22.81-.62z" fill="#FBBC05"/><path d="M12 5.38c1.62 0 3.06.56 4.21 1.64l3.15-3.15C17.45 2.09 14.97 1 12 1 7.7 1 3.99 3.47 2.18 7.07l3.66 2.84c.87-2.6 3.3-4.53 6.16-4.53z" fill="#EA4335"/><path d="M1 1h22v22H1z" fill="none"/></svg>

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 239x211, components 3
Category:	downloaded
Size (bytes):	20635
Entropy (8bit):	7.982595336271492
Encrypted:	false
SSDEEP:	384:aGE6gfiQb836vKU/59ZkfwjEsKX44ZhkNHEgKHMV9v7lCZ1N5Nprhl2YglSy9Q8S:aZ6GZgqvKOkeE/o4Zh4F1BlCbbhsSyrS
MD5:	128862E494BD4FC13816A4C2A74EDFAE
SHA1:	0DFE96A3A0C11846BAA9198B5E21C1980ACC017B
SHA-256:	870ADB2ACEBA816F7B660EDB8F4BC255BB747F3091265680633BA89FF47AAA0B
SHA-512:	455A2DD18EDA4B22DD6F597480CEFB39CA243031F7FE97DAA2A7EC91CF64D01FE21F4E2D7DAD312834D1C160BF47E6E6960F816D34A160E7BDDDBC3699FE8C00
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcS0vbY7OVPmZNQy_YFOCyfRyvCEmCciJUV096pCmoxhB9xbnfdxnAZlHk6b-_0
Preview:	......JFIF...................................................( ..%...!1!%+.....383-7(-.+...........-& %/--.--7---------/--/------------/-----------------....................................................K........................!..1."AQa.2q.#BR....3T.....Sbdr...$4Cc....t...s..................................<......................!..1.AQa."q......2R....B...#Sbr.3..$............?...S,...t..`nA.X..e......L.....Z$azW...N.x..V.i.(../._.b.B.a[\|..........q...)NS5......3U.......Aq......c."H......Ui....m...t..Tp.-.7.....t....6.m..........;...W..j.I.K."y(.....(.X..V..Z...,.c~....m.Y..\...>l..gB......aX.Q.........D...g.4)s.t.U..U@...5W.s..%A.....U..A.E.......\|N.....Jl..p,z....@........'j.../7P..X..J.....N.e.o...4....Rd..<)..A.s...RI...rGv........LM..s.3%L.A.J....i..KD..}..........R.........XJ...&+5..U.6)s.S.F.........l@...b.L(........g..?.D.tR.RTTm.....b*....V.0lP.Y...Y...p...q.1..8Tg1....ZL._J.....J.2.q..s..."N,Y..H..t..6.\|/s.`.A-..dc..I."...........d.$...

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 186x114, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	6542
Entropy (8bit):	7.971255508706056
Encrypted:	false
SSDEEP:	192:R+Xdi4yWAQEskMxSJOQcEc/4wPqYWJ2G+yhBiWr:8g5QEskQSJOQcEc/1PqYm2Gv+Wr
MD5:	F691EB3FAA26D128EBCAF3B55B34C083
SHA1:	CD13C7D496DC6B58F966A25724CBBD1283D5F3F3
SHA-256:	65CA894D719BE645AFFC5046B6E8BDADE5BCF65D0354CA4D5E1FC7FD9ECDE741
SHA-512:	0C6347EB9A655ED31F1EFAD500B2605EC690F49091EB9DFE6B5B8069A9F54303C2A782A0ADE17C8EFBE4FB17E3A71425298C8DFE5D13C0BF935F23D2A72AB775
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn3.gstatic.com/shopping?q=tbn:ANd9GcRzpvnaBNB_rCk8kdxnXMm8zSlHJ-wuga8MqB0mYpy0v_CnDDmmbBncbxYNIYowotm6a_HNaluLMwgemExSPdSVd93BiTFdhrDqFrB1Tw
Preview:	RIFF....WEBPVP8 z....U.....r.>i..M$....@.....R...N3_.?.<...l;.......?H.....E.}...7.g...P........<.=.......v.....'.py.....d.m........A.....O........^....W.......y..[.g............._`O._.....N.........{......S......LY....F..5~...}...F.r..D.Q#.I....g.+.....,...lg&.....o.i.......\|KZ........Q{.....F..Z...}.rk...1...l..e..S..X....QE. ........U.(B.L;...E...T.2....7...Yn8+D.!Y.R.Q...a...tU'...T.7..g._$..)...".2c..KQ1`Tb.#...x......'.m.].]%w.....g..4.s...o/...O..1,.R.p.K.."U....j.p.q...`.$.L........u.K.....4a(S\|}g...N..Db..m.....n\|.4.`.,.W..o.,L....p].wK#n...62f.\|.S.poiq.\...i.]6..cWm.....?.......S.Tq......>V_q..N.T...y.H$$...1...k{;^.3....H.G.V.I...Bq.x.w#.e.u5.}...>e.m...GB.E.....-O3B..U......wC......;....[..P=...s...3.......v.W.....T..R....W..........>.5L..s.=...3...~e.u.v..".4..y..U.E\|l-...V..l...~_.........m.M...m..A../.s..).....j.k.;..Y..iP1{\|...V....o<.J.]../=.T>p.....5.V.`...H...2j..O......XZ.i....\.<.....v!./L.S....F#S.o1.N6i!

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1588627
Entropy (8bit):	6.148101749049832
Encrypted:	false
SSDEEP:	24576:hUmh0fzaW3c+hB0JyOAImTrhmkX7WlzK1bzyALApIa7rBhOGF+:hUtzalzyO/w1bzyALA+4rBhOGF+
MD5:	AB67F72E43BF7C944A6B2DC6806B7867
SHA1:	172A7649F516E4309E618941B68CDDA23F09794C
SHA-256:	D262D786E0EA71889E495D83C6D7543CE47877D91E91F24511D0D37279E6BB55
SHA-512:	930D90098C636A21CA91A62AB3555D413910511B25012B5404A3F961FCA9CA4332BB301821AB0804EC96406C84B5F81179E9A1E68D100F2B90731886B877EFE9
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=0/excm=A9AtR,ABxRVc,AD6AIb,Adehte,B0xr7b,BH66lf,BVlhmd,CX5LId,D1J6He,DwnPgd,FljZ5,FmnE6b,FuQWyc,G4tpde,GLGZs,Ghqpae,H5Kvfd,JxE93,KbVV9d,KzZUob,M4w02c,MRb7nf,Mvtsf,Mxvwsd,Nly0kd,NsEUGe,ONYJsd,Oa7Qpb,Ok4XMd,Ollhtb,P4P2Yd,PX0cP,PoJj8d,PvSBGf,Q6cvgf,SJv1S,SLDaee,SMP3Ge,SfrWY,SiRWre,TO0csb,Trirbc,TurKxc,Tzd4Yc,U3Ovcc,UQpTU,UiPhkb,VZLyBe,WH3Khc,Wx0Z2d,WxJ6g,X6KoRc,XHo6qe,XbupY,Xk0c,XkocRe,Y2uByd,Yltq7c,YuNOCb,ZgKcee,ZrXR8b,Zudxcb,ZyUK2d,adn7N,ak946,bXyZdf,cKV22c,dI5Ii,eTv59e,erGeSe,f1YgBd,fNMhz,hU1IHe,hfJ9hb,hj5Zu,i5w0Yc,iAQA6,j0qO9b,jkRPje,kCkfUb,kOSi0d,oXRDzc,pPanAd,pTgt2d,pbYjsd,pqUxUc,qngJBf,rL2AR,ra3uhb,sU6eaf,tlA71,tzTB5,uUhTh,vJPFse,vbjdXc,vhpQNc,vymBNb,wKa2Bd,xB2dQd,y0l7mc,y25qZb,yChgtb,yuQBec,zjNhL,zoFt6e,zs9f9d/ed=1/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/m=sb_wiz,aa,abd,sywb,sywe,sywf,sywd,sywi,sy281,async,sy1gy,bgd,sy2jv,sy2jw,foot,sy2av,sy5j7,kyn,sy2il,lli,mu,sf,sy231,sy232,sy5l0,sonic,sytg,syti,sytj,syth,sy26n,sy1c4,sy634,spch,tl,syzm,sy3v1,syqj,sy11l,sy11m,sy11n,sy6cd,sy6ce,EkevXb,syqd,L1AAkb,syqe,fiAufb,sy11x,SZXsif,syxr,syxv,syxu,sy239,sy2nj,sy2nk,sy2ni,sy35k,sy64n,sYEX8b,sy4x1,qtz6lf,sy4x5,k8v0pe,syr1,sy13q,sy196,sy192,sy193,sy194,sy195,sy191,sy13r,sy198,sy197,sy199,sy19a,sy19f,sy19i,sy19j,sy19k,sy19l,sy19e,sy19d,sy19m,sy19n,NO84gd,E9M6Uc,Zilivc,sy1a7,sy1hf,sy1he,sy1hd,sy1k9,sy1ke,sy1kr,sy1kw,b5lhvb,IoGlCf,sy18l,sy18m,C8HsP,sy19o,sy19p,gOTY1,g0Ekse,rKbWof,ARtdse,tE6Rzd,AjRVIe,kpAr,phecbc,q28gvc,eTVOC,MafjZe,SQAZFd,OjtwQe,XTmxwe,YlMcGe,bIMMof,FjjTod,TnJGKb,SnmExf,ESo8je,Pq506,O19q8,nMfLA,bplExb,UMk45c,tDA9G,UX8qee,tW711b,R6UkWb,xMHx5e,QzraZb,I9JIjc,nzu4Ud,gGYzg,jtFQAf,FjvQsb,RcBNJ,uDw4Nb,rEAvrc,z2eFcc,GQxACe,vjBnvc,g1fOXc,syta,sy254,sy1ad,sy1ae,sy255,sy259,sy13p,syzc,sy1ep,sy152,sy15m,sy1mj,sy1mi,sy1ms,sy1m9,sy1mt,sy1mu,sy27e,sy27b,sy27c,sy27a,sy283,sy27g,sy28m,sy28n,sy28o,sy28r,sy28p,sy27f,syb0,syb4,syb5,syas,syat,sy13l,sy155,sy14g,sy14a,sy14r,sy14s,sy15b,sy15c,sy15d,sy1mk,sy1n2,sy1xa,sy1xd,sy1xp,sy27j,sy27k,sy27w,sy27i,sy27l,sy27m,sy27q,sy27p,sy27o,sy14c,sy13g,sy27s,sy27r,sy27t,sy27v,syax,syaw,sy27u,sy27x,sy286,sy288,sy287,sy1n8,sy28e,sy28f,sy28h,sy28g,sy1gr,sy1gs,sy289,sy28a,sy28c,sy28d,sy28b,sy27n,sy1h5,sy298,sy27z,sy280,sy13h,syzb,syze,sy13i,sy13k,sy13m,sy13f,sy13n,sy13j,sy13o,sy1ac,sy28z,sy290,sy291,sy28y,sy296,sy297,sy28j,sy28i,sy28t,sy28x,sy28w,sy1kc,sy1kb,sy28k,sy28l,sy28q,sy29a,sy29b,sy1ag,sy1a5,sy1bh,sy285,sy284,sy28u,sy28s,sy28v,sy292,sy293,sy295,sy299,sy294,sy29c,sy282,sy29d,sy29e,sy29f,sy5kw,sy5yc,USgF8d,sy22r,sy257,sy29g,sy5ng,A4Uref,sy5v6,Mf3zEb,sy5lf,sy5ne,sy5t3,sy5t4,sy60p,KH32Sd,sy13s,sy256,sy258,sy32x,sy5n4,sy5nh,sy5ni,uQjlvd,syj7,syje,syjf,syl1,syl2,syne,synk,synt,syoh,syp2,syp5,syzj,sy1d9,sy1da,sy1db,sy1dc,sy1dd,sy1di,sy1dj,syzf,sy10o,sy1cw,sy1ga,sy1g9,sy1eo,sy1ey,syja,syn3,sytr,sy1cs,syhj,syid,syie,syif,syig,syih,syii,syik,syil,syim,syin,syio,syip,sy1dm,sy1dn,sy1ei,sy1ej,syi4,syi9,syib,syhr,sy1ec,sy1ed,sy1ek,sy1el,sy1em,sy1en,sy1ge,sy1gf,sy1gg,sy1gh,sy1h4,sy235,sym2,sy1cq,sy26e,sykg,sy1dp,sy1dt,sy1e7,sy1eg,sy1e8,sy1ee,sy1ef,sy1du,sy1eh,sy1er,sy26b,sy26f,syk0,sy26i,sykf,sy26j,sy26k,sy26g,sy5a4,sy5in,sy10p,sy10q,sy5jb,sy5m9,sy5ma,sy5nk,sy5nl,sy5nj,sy5nm,sy5nn,sy5no,sy5np,sy5nq,sy5nr,sy5ns,sy5nt,sy5nu,sy5nv,sy5nw,sy5nx,sy5ny,sy5nz,sy5o0,sy5o1,sy5o2,sy5o3,sy5o4,sy5o5,sy5o6,sy5o7,sy5o8,sy5o9,sy5oa,sy5ob,sy5oc,sy5od,sy5oe,sy5oi,sy5oj,sy5ok,sy5om,sytq,sytp,syu1,syu0,syts,sytt,sytu,syty,sytx,sytv,sy5te,sy5td,sy5to,sy5tn,sy1e4,sy5tz,sy5u3,sy5vo,sy5vp,sy5wf,sy19c,sy1d5,sy1de,sym9,syji,sylz,syma,sy11t,sym8,sy1cn,sy1cp,syj2,syjj,syju,syjy,sykh,syl5,syl6,sylj,sym7,sy1d6,sy1dl,sy1do,syls,sylu,sylo,sylw,syly,syuj,syul,sy1cy,sy1cx,sy1cz,sy1d0,sy1dq,sy1f4,sy1f2,sy1f1,sy1f3,sym5,sy1fq,sy1fr,sy1fp,sy1fs,sy1ft,sy1fu,sy1fv,sy1fw,sy1fx,sy1fy,sy1fz,sy1g1,sy1g0,sy1g3,sy1g2,sy5vc,sy5v9,sy5va,sy5vb,sy5xx,sy5v8,sy1d3,sy1d4,sy1et,sy1eu,sykl,sykw,syle,syn6,syhx,syn7,sy1eq,sy1es,sy1ev,sy1ew,sy1ex,sy1ez,syml,symm,syx8,syxm,syxn,sy1f5,symj,symk,syx7,sy1f7,sy1f8,sy1f6,symo,symp,symq,symr,syx0,syx1,sy1fa,sywy,sy1fc,sy1fd,sy1fb,sy5t0,sy5ue,sy5ui,sy5uf,sy5um,sy5jc,sy5ua,sy5ut,sy5uq,sy5v2,sy5v4,sy5vd,sy5wd,sy5oh,sy5wg,sym3,sy1cr,sy1e5,sy1e6,sy137,sy2dt,sy2du,sy5av,sy5aw,sy5ay,sy5ta,sy5hd,sy5uo,sy1fh,sy5of,sy5og,sy1dy,sy5uc,sy5ud,sy5ub,sy5vw,sy5w4,sy5w5,sy5w3,sy5w6,sy5w2,sy5vx,sy5wm,sy5wn,sy5wo,sy5wp,sy5wq,sy5hc,sy5wr,sy5ws,sy5wt,sy5wu,sy5wv,sy5ww,sy5wy,sy5wx,sy5xk,sy5xl,sy5xn,sy5wj,sy5wl,sy5x1,sy5x2,sy5x0,sygq,sy5x6,sy5x5,sy5x7,sy5xa,sy5xb,sy5xc,sy1d7,sy2l0,sy2l1,sy2l2,sy2l3,sy2l6,sy5x8,sy5x9,sy5x4,sy5xd,sy5x3,sy5xi,sy5xm,sy5xj,sy5xh,syi6,syi0,syi2,syjb,syjc,syjh,sym0,sym1,syhk,syhm,syhn,syyv,sy1e1,sy1e9,sy1e2,syhw,sygp,syhy,syht,syhz,syi1,syi3,syi5,sy1ea,sy1eb,sy5hg,sy1dv,sy5xf,sy5xg,sy5xe,sy5wz,sy5xp,sy5xo,sy5xq,sy5xr,sy5xs,sy5xt,sy5xv,sy5xw,sy5xu,sy5wk,sy5wi,sy5wh,sy5y2,sy5y1,syiw,syk1,syk3,syk5,syke,syll,sylm,syln,sy1dr,sy5hb,sy5y6,sy5y8,sy5y7,syzg,sygk,sygm,sygr,sygs,sygt,sygu,sygv,sygw,sygx,sygy,sygz,syh0,syh1,syh2?xjs=s3"
Preview:	_F_installCss(".k0Jjg,.brKmxb:focus-visible{outline:0}.k0Jjg:focus-visible .niO4u,.brKmxb:focus-visible .niO4u{outline:2px solid #4285f4;outline-offset:1px}.niO4u{-webkit-box-align:center;-webkit-align-items:center;align-items:center;box-sizing:border-box;cursor:pointer;display:inline-block;-webkit-box-pack:center;-webkit-justify-content:center;justify-content:center;margin-left:auto;margin-right:auto;position:relative;width:100%}.gzV1t .niO4u{-webkit-box-align:stretch;-webkit-align-items:stretch;align-items:stretch;display:-webkit-box;display:-webkit-flex;display:flex}.niO4u::before{content:\"\";height:48px;left:0;margin-top:-24px;margin-left:-1px;margin-right:-1px;position:absolute;right:0;top:50%}.kHtcsd{border:none;border-radius:inherit;display:-webkit-box;display:-webkit-flex;display:flex;-webkit-box-align:center;-webkit-align-items:center;align-items:center;-webkit-box-pack:center;-webkit-justify-content:center;justify-content:center;width:100%;height:100%}.d3o3Ad,.clOx1e,.WoA9Zd

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 145x186, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	3028
Entropy (8bit):	7.931010793419687
Encrypted:	false
SSDEEP:	48:8uC7rHgOxE3R1HJnSP5klRnXBc8ITjnoTvtQXahaM/ypBQ3ul3Rgw2ZSGY9:vQ7zxE3vHJnO5UXBPIqvsahaMABQ3kRL
MD5:	52251FE1033402E4D475CFC6AEF8ECB4
SHA1:	90F6355B94E9E9D6E4DDFCDFD0D375D8FFFA3CA0
SHA-256:	683E4BDF8223E19C7E2F0227B732DF274E5ED948A6F58C4CC6777AD6C81190C9
SHA-512:	6319F215628497B7D05CC600FD9C92F44A48E1546F07549C0D5565BC54580733765B1A6459FC97B2A073EFDE6E31D6C0799FD0514E0B4A806FAF95221FDFC88A
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .....>.......>I..D"....~,0............Q`.._.......k......V..4?....?..zz......a......i}.?c.T.......3.;J.o..S.....r.r.'...xWQL1^...am!<P...Z...gH...9..X.Vn4m...sa.<...)]...b..&{.x...tQ.vQ... .l.[i]Y.l"0..?...IqC.%.FT..iZ..{.A......;\|......(..."^T'..w:.]...<~I8\..w...B....-,.y6uT.>.L.q.{.....(x.=/#<...w{..%9\..T....n......N.L.rr..^P.d..\|.~..y$,....3`.o.......}.....~...X6....M(}8..sat......a&.+..K.g.......J?.....8.g..Y.&.d..R.TDL..owM..B....%d.!.-.,...p..1..,AF 3..!vrQ..y..J...6..Y.@.....#...F..zs.]..i....+.+. kX..c....8,Yf]n....I..v...rg.-.......h{k&..`...<..=W..(.v...~.Z..ICk..S...P.....K.~.....u...s.......U.HFqc.0.of.-..j'...O...O&6..h........^21+Nu.,..S.t*.A...5g.FK\|...GC..L.....b..W.dE..Vy..:Rx.>.....bM.!W......5..".:........t.b..%...h..D`....M.....S.:.W..P7....e..ne......y&t..{,-0..d.....Kn..Z........../........{.....!0........i...W....BqF.m...i'.....[Egn...Q.:WM.`F....m........)\Q..R..!...G.P1Y...!..'.>.E.;..g?..=(R[.

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3563)
Category:	downloaded
Size (bytes):	3568
Entropy (8bit):	6.055823268055532
Encrypted:	false
SSDEEP:	96:HtZBTp3x64DxGLbTjhgpcYYr43gPlyafO:NZBdx6uxI3hMNF8l8
MD5:	813C6E9B8D777CA925F5B242E729EB18
SHA1:	F63CF3B1C4FD39DC70645868BADD1AA8821C92E4
SHA-256:	E3413616EBF7FCCA16198DEC6E83B1175F643E89C23AA0384F8BE27077FB6257
SHA-512:	30C48DF5B10365A8CCEE4CC57D5EBA04358F656307635D663CA7A1499515868822E961ADC7B96CD5667BA50683D14A401BC0B446BB0FB07D67DBA1DF91EA58E6
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=rCpeZdXlGruf5NoPj9ax6A4.1700670128242&dpr=1&nolsbt=1
Preview:	)]}'.[[["army football uniforms army navy game",0,[3,143,357,362,396],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["mike lee",46,[3,143,357,362,396],{"lm":[],"zf":33,"zh":"Mike Lee","zi":"United States Senator","zl":8,"zp":{"gs_ssp":"eJzj4tLP1TewLDMttKwwYPTiyM3MTlXISU0FAEhOBpU"},"zs":"data:image/jpeg;base64,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

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 204x186, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	4926
Entropy (8bit):	7.958367207689946
Encrypted:	false
SSDEEP:	96:+Oq9TNKKnejRT/d1N2fdESxIBKOENJNsU6iytPkrGwztlZsvam++XmpHe7R:+O8NKEw/dafdESxWhExVyDwDZsKER
MD5:	AFFB07065A92829948A844B289C9D77C
SHA1:	D206410DA872BB6E5C527259B89767E42A315478
SHA-256:	1C139D9030EB9B8A5F0ED56570E16904B05BAD5B1CB920002D768DAE78306583
SHA-512:	C5EB8B6DA1E0D5945E44C6A75C7E32DF5842CC435E95A98C3B407B4E8E13327A50045003A0150083D50898B5EE5592AF6EF6A808F1DD3DEE8D023DB4F4382FA6
Malicious:	false
Reputation:	low
Preview:	RIFF6...WEBPVP8 ....T.......>E..E"...Y>.(.D..j..{...?.'...}{..%.....7...\|y.Y...\.;?...?W.m......m.o...O....Q...=..._.....~....{.7.......}...z~...f.]...>....J.~t...'....l...k.M.Q..;f..........e}8.....l......\|..y.:..u.>=..+./.....W...6R.....s1.1.O{..s@....LS..L(-....(.V8..Vv..<.(..L.4.Hu.vCP....T..R...[.......1f..4.t/...g.....:]P.....6)...;.?...\......f..Y..3...07/...;..4q....iL...u8...#.\|.Z.....f..`8.F^NAt.CW<....h5..e.r..g...B)....b..VcN.\|...al........a $\).#..[....l.(..4wXv.dj5.8h.m.%..5..O<.R..@:...+k....S..cBU...[._.i.\|L.$tC....T.2.L.i.9n.%h.....:.....K.._%.]...8)....E2.....U_...:{2Z...:.........z................FW....5.!..........!.. ..H.o.3.......jD..w..........:."U........H.}...O........7.5.h....9..@..........8.T.p84..7...2 y....p.m....U.....9.d.n.0..........7.....0.8R..j.....{vd....N..,.!\J..k{.+A..q...<....tgHD]Gh2e..)u..........x@......e.4....wh2.,.^.IH......).....C.....niI..s.c...P.....2..#.lf...J'zd...}.w.......f.D

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 148x83, components 3
Category:	dropped
Size (bytes):	3720
Entropy (8bit):	7.876466961998792
Encrypted:	false
SSDEEP:	96:ZDLVlHljwH8MTfcDav4XttthPlw10joEKBVsD:Z3VlFjIPTfkoaL7Pe1YobK
MD5:	9065CC6A70CB1BE18C6FE033570DD4CE
SHA1:	2EB6C8D961A4634ADCD685457A4F8196B805D6C8
SHA-256:	C8C5231B3A6F24DDB895C58A87ED7BC2C0527625C6713C945203F6A903D47B68
SHA-512:	DB15E2577FE524099391DE5E866932C71BFB0BEE3320CC1B347E9986C6638A9A69B3B977FB14B7FD13B87E2BBE7E01084105D9699F437BA10874ECEBEAF45A25
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777......S....".......................................B.........................!.1.."AQaq....#2...BRr...Ts.....Cbc.$34...............................&.......................!Q..1A2a..."q............?...(,.\M._T..1.....B.........e....H..Y..;)...........?1M..9.."i5.z.....D.b.9.NN@...s.[..c... .E>0&._..i`$..Fq...J.6n.R...!..6T...7Z..e.h1..fs...\|(\|..WA.5...h.O[..i.."w.+v#.....g.J< .....qq.^5R.Alq......e.....>.=f.o:OO[6..&.....Q..<...>.R.P.l."hn.EI.C+.~Es.+E.<.&.X...C.8.\|sC..y3... ....=..^3..20.....E-.{}.J$]. .....v..4...u...G.fK....b.[1...d.LzgO.\(..Y.A..{..NJ?.....&..#'..Xq.;X.eFM1.....^U. .}4.=.x.NV.rN..K....m$C..A.s.T.K.n.xb...6..p@..S.BB..n..#../u>..C....$1:..C....G..s....o..%[...qO.o.N.....4.=..7`!W...<...".'.$f...r}5.......g.E....mn.z.#..{^..;FO'.R.x.f_2.....SU.......R.q.y..M........o.U.-...n-m....

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1505)
Category:	downloaded
Size (bytes):	120563
Entropy (8bit):	5.494119267772009
Encrypted:	false
SSDEEP:	3072:0Nyv5R8XYz+aHOSmyIXR3v5McvJr/4cAfQmlke:mywYzd4yQMcvbAomlke
MD5:	1CCD95D83B05996630E52AA8DAE42F06
SHA1:	027C31F9399BFAE7D6FFC8B8D7299B3A9E8E9080
SHA-256:	9D4E56038DCCCD960EA62BD2EE6925469001254602DFB54B740F1A1ADAF0D7B2
SHA-512:	31870199ACC48FAE0995B33B72154BD441E898D84CE851F26562D7540EED0ECAF27D5BC956C09658CA336ADF72472AF6A842F2E000B856B31EA7D982021D2485
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.CzrNRWo3AFk.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8xPbrtpW2bPUIcgU2adGqIEpV82Q/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;.var da,ea,la,pa,ra,wa,ya,Ba;_.ca=function(a){return function(){return _.ba[a].apply(this,arguments)}};_.ba=[];da=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ea="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.la=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=la(this);pa=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ea(c,a,{configurable:!0,writable:!0,value:b})}};.pa("Symbol",function(a){if(a)return a;var b=function(f,h){this.e0=f;ea(this,"description",{configurable:!0,writable:!0,value:h

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 186x186, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	5026
Entropy (8bit):	7.95916382923977
Encrypted:	false
SSDEEP:	96:Txoobe6jr9NgOwz3qDUaTdkzwKgd/ED4FcvUyVjUtomKSEN+8y0x9rusHU:u6jpNQIkz3Nn/1mKPn9Cs0
MD5:	BF3BCF20B3325BD2855EAADF02BA9A18
SHA1:	FD3665527A73A5B643E097DD57EAE455744490C3
SHA-256:	5A9406A951ED93886CFC0AA9D902005D68014866B326BE6F112CADC557A7BCAD
SHA-512:	79C5E92D293A925AE719F62EF516C16A7C1EBE151EF1C6A6010B5BD0FD24064B15C373058DE6C00FA2E68BDC4E048C4213302F17D7041EA7FC9DCFDF002C094C
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .....K.......>I .D..!..E.(....n..._...6\|{...O^..Y.....~c...?..{....7._....a.....c..i.....7..._.._.z.........~:\|.....?..g.....Q.........w.....7...?........d=......0.....&.2\9..<...p...1\|....N.k.V..S...-.sb...h..;yJ...c1..^..t#.N.03\..=...a0z,.T.....{.F...w:.Du..;..r...M9~.k.;...F\|...x...Xs.......>A..-\.H......._;...r..f..xx`.?......!uRd......f..4.....U...Z.'P.....4&..$....Z.6.{i..O.Knv._....+...`d2...5%e.0b.\.q.}`......[S.c...p.N.z..0.x ......rQ.ts..]T.jR47%.Y.g..+>....x......0..+s$Q..(.....l..W..0...b}8.........c7....g....`.\..4\) 5.....4.%...t..zr..Pr.S..sb...##8......zX.M........;...N..dg..F....5...-\.Q.w.d.....u..H.J..v...y..6...X..:.....x._v.T#.+o..K.cn.........WoN.1..bjt.$l7Y8...f..........M......#.y...W.^.&.i.[U3.G...a1..,;.....)......2KP.+...:...R...j.e....AD........X[.]t._Y..w.."X...b.rD.IM...?].e..XB..?..".g.Wv......^..Z.+......./3)...b.y.1E...^iQ.>'0T.:0}?Yfc.'..x2g..k.-..\{h.Q.ose.&cY.....*Z.....~...`.W.

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7771)
Category:	dropped
Size (bytes):	7776
Entropy (8bit):	6.01235518641136
Encrypted:	false
SSDEEP:	192:rHz3/Rdxrx94Gw1WQm9b0R/Neou6hPf1o+laES4PwKY206:rHTpSm9gR/N1P9o5UPwu06
MD5:	06D75A8C77B5C22DF314644DEA774CD5
SHA1:	E2AE76982652BECCF1F5ADEE47D580658E22285A
SHA-256:	2C12FCA3E838D15B6A94AF3F766E3A3CC891F7CF5BB48EEB8EB38BC0758F69DF
SHA-512:	AA473DD2F2959657C86823D8E46CCCA5D1CF6FD89B9960FD8AB5D03111CFE409535DA89E6462F510867A08D43C76B9B7922425F28D90B2F06B12D553F9925EA9
Malicious:	false
Reputation:	low
Preview:	)]}'.{"bgasy":["https://www.google.com/js/bg/bXgCQMZpS0zAFfQhW4aLQXFu8vAtM6HtIRdhp5QrSUI.js","IYX/bC//xfpHzUr2ggEY6Dvwm3r5b9gBcPts4bUTdCMKEBkIvrJJQE70G44TAxTMiQEsNZR6l5lsIE+6rUa+Ml+K1ZD4y9P3PAmndejNmXQtLU3KNT0ziOhF8lT22ZSkTzEqFakR2KC/AIS1V1Alqpzm3/qVvHLX1l1ribHy7qKF6MOkGeJcr8mvrxoy2+doDz7JBCOQwtt7t0cVY3TZeAaZt4cIeL4B45WoU+i3LN4vJdwLg2J0n/X8bZZzSsJEsBiY9xBd2O/xVk1niQseyVlC50/FYwxaW38LcGQPZdz+InIFoDKizOrXAnfbhqDsRw1fWyux4lRQ96C1iilYGS7KECHnpnYFB8xE9WOrk8e1xaFiCHfKEQN8jVzW70O0kGF4tDevBc1Ygpvqi9CeWUZi0YAWJ/BeLPU5CsZEWEvYDJV/FgVgVtS/Kb/85P5j9rlJLaEAVee/BNwJyhuP2UzfrxHYkCBSXr+1Bkke+H0j4dsOI/qb190+cCDmDODze30uFn/Onj/04/XRZv6xkwW/24aWMbAyvEo1TWV4YQACuSEvvRerngowCc/zI8VBUzlDGNSO4DYM7iJ6Vmr5Qt7Mzt9IC9axFOyKUfbjqR3Bp2TxjhIVw7u0/c89Pa800JE8FLT//BcZbVIjwEoSo2CXW+DT4cgP1l3PuKFtLqlI9NaC5sDwuYmw4K9TRPozQUkQFfO3iVkLfVFeM3rKer0tazMoWlMtMviQ3Vj903IZmIUCA1RtZoKG6owexa1kxshLyPnhuRt7lPZCwAZBM2RjqfLktKPX7G0zuldEqsiNFDg4dR41DmsyimhdvOHFAe+1IV/g4CUKERaip/B30RIaKhu67uQKC+1f/eUBvrp912jdQTepJ5r4dS3fRgk1x2eibANuMG

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (537)
Category:	downloaded
Size (bytes):	118947
Entropy (8bit):	5.479752367715125
Encrypted:	false
SSDEEP:	3072:mOx/5HaLk4wdK5i4VV3qjQ8ISUD8J4H+iBu1ukeXW0RL7s:mOHaL1wdK5i4aQ8ISUD8J4H+iBu1ukem
MD5:	BB11333549B97C894ABAFC17939EB2D4
SHA1:	10A398D001C1F1EA93CF07861387C6995D0D8B37
SHA-256:	01C5F418A4A809A6D77D96D45400039618C369827340E94DB9DC6248571C52F0
SHA-512:	2AC85326C1E75C0C34CF6D1566F937531D686A1F7993534DCF28D1F763B7126D387B81137795BCFB3D4A861B713F7FBCFAB1E53C509DB5FD9A83C6BE2EF7C449
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/63e90c30/player_ias.vflset/en_US/remote.js
Preview:	(function(g){var window=this;'use strict';var $7=function(a){g.uo(a,"zx",Math.floor(2147483648Math.random()).toString(36)+Math.abs(Math.floor(2147483648Math.random())^g.kb()).toString(36));return a},a8=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);.g.Iga(a.B,b,c)},oxb=function(a){if(a instanceof g.Us)return a;.if("function"==typeof a.Gk)return a.Gk(!1);if(g.Za(a)){var b=0,c=new g.Us;c.next=function(){for(;;){if(b>=a.length)return g.z2;if(b in a)return g.Vs(a[b++]);b++}};.return c}throw Error("Not implemented");},pxb=function(a,b,c){if(g.Za(a))g.cc(a,b,c);.else for(a=oxb(a);;){var d=a.next();if(d.done)break;b.call(c,d.value,void 0,a)}},qxb=function(a,b){var c=[];.pxb(b,function(d){try{var e=g.jv.prototype.B.call(this,d,!0)}catch(f){if("Storage: Invalid value was encountered"==f)return;throw f;}void 0===e?c.push(d):g.wla(e)&&c.push(d)},a);.return c},rxb=function(a,b){qxb(a,b).forEach(function(c){g.jv.prototype.remove.call(this,c)},a)},sxb=function(a){if(a.ma){if(a.ma.locationOverri

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	downloaded
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/eureka/clank/117/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (845)
Category:	downloaded
Size (bytes):	21697
Entropy (8bit):	5.417804953789615
Encrypted:	false
SSDEEP:	384:XfruJEWBIM986czFMnF/rSoSdRQJEDA5sl9PXfNFHsk/ZX/N6tgumR9PtG/X7Ku0:XfruJXBnLczFMnF/rHSdRQeA5sl9PXfX
MD5:	CBCE952BCF6B0C1052FC55B30510346E
SHA1:	B443CF6C794FF4799A72D9B3D5D52DCF7395B6B2
SHA-256:	C417D1F7342CD07E8152120136C538239D54564BBAC8821191F5146992610E0D
SHA-512:	9A3156024ED7CAF7D10992D34E0D52B0FA61DE04FFB6B2BB6AD5DC284C2C3E58B875906575DA507D857E1A9221220181B3AAB0AED5C4C2A6A4F6D8101DBA0DEB
Malicious:	false
Reputation:	low
URL:	"https://www.google.com/xjs/_/js/k=xjs.hd.en.j7vH50XSWl8.O/ck=xjs.hd.3mhtCf28lXo.L.W.O/am=BAAAAAAAAAAAAAAAAAAAAAQAAAAAEPUTDgFsgACBABBggAAgAICAFKQQBAMAEPBQJgAAACZAYAhYCogKvOcBAJBAFQAAAAAAEAwiAAAACAAAoAMAACCgEdAAhIBKQAAAAADyACA4ABhEEAAAAAAAAAAAAAABTBAMLkgAFAQQAAAAAAAAAAAAAKSkycVAAg/d=0/dg=2/br=1/ujg=1/rs=ACT90oEQOKoPcm_mXy_VnoCFj9ts7y2bDw/m=sy7c,syre,syrg,syrh,WlNQGd,syxa,syxc,nabPbb,symw,symx,symy,symz,syn0,syn2,DPreE,syl0,syrd,syrf,CnSW2d,syxb,fXO0xe?xjs=s3"
Preview:	_F_installCss(".EpPYLd{display:block;position:relative}.YpcDnf{padding:0 16px;vertical-align:middle}.YpcDnf.HG1dvd{padding:0}.HG1dvd>*{padding:0 16px}.WtV5nd .YpcDnf{padding-left:28px}.Zt0a5e .YpcDnf{line-height:48px}.GZnQqe .YpcDnf{line-height:23px}.EpPYLd:hover{cursor:pointer}.EpPYLd,.CB8nDe:hover{cursor:default}.LGiluc,.EpPYLd[disabled]{pointer-events:none;cursor:default}.LGiluc{border-top:1px solid;height:0;margin:5px 0}.Zt0a5e.CB8nDe{background:no-repeat left 8px center}.Zt0a5e.CB8nDe{background-image:url(https://ssl.gstatic.com/images/icons/material/system/1x/done_black_16dp.png)}.GZnQqe.CB8nDe{background:no-repeat left center}.GZnQqe.CB8nDe{background-image:url(https://ssl.gstatic.com/ui/v1/menu/checkmark2.png)}.GZnQqe.LGiluc,.GZnQqe.EpPYLd[disabled]{color:#dadce0!important}.GZnQqe.LGiluc{border-top-color:#dadce0}sentinel{}");.this._hd=this._hd\|\|{};(function(_){var window=this;.try{._.Yq=function(a,b,c){_.wk.call(this);this.NH=a;this.Ca=b\|\|0;this.ta=c;this.yq=(0,_.Sg)(this.oa,th

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1208
Entropy (8bit):	7.769877645738661
Encrypted:	false
SSDEEP:	24:KoAOJvtgLEYLeCau8NmuLPUx2y93pV8XqD9ad6H:KoAIvtgLLeZ3NPUxtp
MD5:	FD626B6BB9884A947AC37B52A791A16B
SHA1:	66F7DC59DCBC53E86A62031B96D7320B67BCEA50
SHA-256:	54CCE85838C961A845EBB5BCDAC700AE3C19CD5952148D6E19210796ADA60A37
SHA-512:	DD46D1A0D0081DFD3880F49F683714C9236D7E695B3C6D2C5B0ECF0B42B3F524A79A12C49B5435F3B956D478C59AFB0AB6446D9D954C45D7ADAE0B93269A7548
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/hpp/green-tag-42px.png
Preview:	.PNG........IHDR..............[....pHYs...%...%.IR$.....sRGB.........gAMA......a....MIDATx...o.E...vZ.q.-i......"..5......CB.....@..A%...H...WTGP..!.#....*..B)....B.aI...zg:...............~..y......A..\|9.goH'.H.ogyS...?O....=...8..3 X.....#..!...,..pL.#.......?.4u...!E...W.J.m..n.d..MF.p!..).^.b.^.......H..Z..P.#R ...f.........mY.dE.f.q8..?~......S.#..M...?..h...'.Y.mA.O/...Cz.2.r..}..,e.$..O_.m.7.......}4...f.y..~.....w..&.u.r...z[..1..[Z.psN..L..^{.e$...'.....m.=A.v.\|...o..f,...~.x6K.v...S.?.s.<.em...v.=..Ch`p7.^=%..JP....aL]{.J.h.L-.D.............D y.ZBU2.9.]O....P]Y:DA......;.^.V1......Vt.......y... .$7.W#....Bt..%I(.........`.s..JO$75P.<:.34.#.\.....5....c.>.F.qU..[D.j@.Ec..fTO....?...j3.......y,D.v.A'.....3Z.R.G....@{.......xd...!.......$...R(....#.....K#.........XT.+\|...v.P.ht....m...f.{\|...}...x../..f_.-%...[.......y.Z..~@;........".."[...._.j.....y...`...K"..$z......"..x.TZ...h._.y..[!...........\|B9..M...K7.Q.\X....cC#F.l

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	350
Entropy (8bit):	6.922576431804136
Encrypted:	false
SSDEEP:	6:6v/lhPKqJZAeExL4cO+QnlBC7rZEiWAbmP4BZQv26xQppp8GBzy3kay5zBup:6v/7ia7EmW0m7bRmPU8dxQpppV+055zK
MD5:	F8F20B1A0E5303C04EBAAFD7F09A625C
SHA1:	ED0ED603206887E2D5AE2F0F770ADC2B869DE6DA
SHA-256:	895172C5269BC2F7F1B26A807944106D88FEF304586399A0D9A10E21C6A8DD46
SHA-512:	C8D8FEB29312771F14B72A6DC992303508A66B0CBDC85AF2EF9659AA36A3F7806ABBA595FB83F36DBF164962DB4493B00E5ECDAC8DA41EAB56DD146D8D9F7C0C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz....%IDATx....d.@......P.A0.0.C1`.......a......C...Eq........0...C..^{........... DBS...I.:+I..H..H.......?.N.....WB..e.._B .[@M.dk..`..o...\|.VU.\|.u...0.......L..0.r....k M]#...o^....(........H...^.....s._........nr.S.`u...M..E4.{_D..M.D..6.@...wB.-=.......-.%l3.$.H..8.z.?R..%}.0...w..=y>2;......IEND.B`.

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 186x186, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	5026
Entropy (8bit):	7.95916382923977
Encrypted:	false
SSDEEP:	96:Txoobe6jr9NgOwz3qDUaTdkzwKgd/ED4FcvUyVjUtomKSEN+8y0x9rusHU:u6jpNQIkz3Nn/1mKPn9Cs0
MD5:	BF3BCF20B3325BD2855EAADF02BA9A18
SHA1:	FD3665527A73A5B643E097DD57EAE455744490C3
SHA-256:	5A9406A951ED93886CFC0AA9D902005D68014866B326BE6F112CADC557A7BCAD
SHA-512:	79C5E92D293A925AE719F62EF516C16A7C1EBE151EF1C6A6010B5BD0FD24064B15C373058DE6C00FA2E68BDC4E048C4213302F17D7041EA7FC9DCFDF002C094C
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/shopping?q=tbn:ANd9GcRLrx4TmB7Ib9azD7B60ZpenNKIojn81LFQNqYitnB9DFs_v3A3hp41gHMAhNCorAXQ8SbjQwpWaV82nkU-PhZqqERFbM_a6Y7LrKmnmDk
Preview:	RIFF....WEBPVP8 .....K.......>I .D..!..E.(....n..._...6\|{...O^..Y.....~c...?..{....7._....a.....c..i.....7..._.._.z.........~:\|.....?..g.....Q.........w.....7...?........d=......0.....&.2\9..<...p...1\|....N.k.V..S...-.sb...h..;yJ...c1..^..t#.N.03\..=...a0z,.T.....{.F...w:.Du..;..r...M9~.k.;...F\|...x...Xs.......>A..-\.H......._;...r..f..xx`.?......!uRd......f..4.....U...Z.'P.....4&..$....Z.6.{i..O.Knv._....+...`d2...5%e.0b.\.q.}`......[S.c...p.N.z..0.x ......rQ.ts..]T.jR47%.Y.g..+>....x......0..+s$Q..(.....l..W..0...b}8.........c7....g....`.\..4\) 5.....4.%...t..zr..Pr.S..sb...##8......zX.M........;...N..dg..F....5...-\.Q.w.d.....u..H.J..v...y..6...X..:.....x._v.T#.+o..K.cn.........WoN.1..bjt.$l7Y8...f..........M......#.y...W.^.&.i.[U3.G...a1..,;.....)......2KP.+...:...R...j.e....AD........X[.]t._Y..w.."X...b.rD.IM...?].e..XB..?..".g.Wv......^..Z.+......./3)...b.y.1E...^iQ.>'0T.:0}?Yfc.'..x2g..k.-..\{h.Q.ose.&cY.....*Z.....~...`.W.

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 186x186, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4726
Entropy (8bit):	7.9444309787428535
Encrypted:	false
SSDEEP:	96:83pXKrsVxqCpXzCaaQWColFjHGwaJQK71yWyJstt:ipX4sVx7DMQ3olFNLs
MD5:	9DCEC9088177F635FEDD5C9467702464
SHA1:	E494ACA7633BA9B5148BA9F1E0D3635301B7ABF1
SHA-256:	D12A8E648E5161456DDB1DB640FAB55C4E0825E4DA50EA69330528FE242D9A00
SHA-512:	46BA8CD80FB980C19EC2007DD4241F5AB036EE0209CF99DEBC6C8909238A0393E8DB5BBF11F3397FB977646CDA190369B4B56D40EB624C1D8F6401886DC8EC64
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/shopping?q=tbn:ANd9GcQ5CLZF4pxN-0nh70BVvaA46pBHx4x31MQCI4TJndYf1BOfqAqIj-UstT4PHN5HuZR0pSa502ri1MdvshXqfhXpyvecE2VWux4xkHvWkxc
Preview:	RIFFn...WEBPVP8 b....N.......>I .E".!.Y].(....k...?B?k.a...c.7...a......3.O.'.O........{X.3.#.W....?....]......~_G...C...d.....`.....a.........n......%.....?&?09..Q...7.......L.g}.._1O`>................s....^..$...a.K./._b......./.?..._..._.<.~.{...](...C..8.^.R..0`.'!....k...L...M~...gP(..v.>:m.J..<4.V@2..?....q."9/.i9..o?._.(..C\|.84.....2...v.#.>..#.c....<.w)..1......rYc...d.s..D......e.uf..a,U.W.:.1.2..!.H#Zz..F...Se.....3...p...b.(d..M...IZm..r3Bo~..."z....dpI.U..S2.v!)...Y..[.+[....4C%....P.m...Tl.w...,.`0......bpN.....Y./+..!M1e.;....m..%.+.(..........6\|..^l..$....BJ...Q.`..o..-...T...Ov....w.;....P.D.4.=..(...........n.E-...8n.k.r.V...FoCM..hW..'.\|..>H.C.....J.+..v/.6BP....v....J...jVu...P...f..^...9k...p...5G2....iE.......-EY-9.o}............C.O.{...1.3.j....Ba...{...TMB./............"E..h.*...r...z...w.....=j.S...^....&.R...z..2Xx...[.-.....'X0..w..f0...{......#.%.8..A.&.)`/.......V.........r.......8.Q1MX.HH.&..wo.b...

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 22, 2023 17:21:32.958786011 CET	49675	443	192.168.2.5	23.1.237.91
Nov 22, 2023 17:21:32.958786011 CET	49674	443	192.168.2.5	23.1.237.91
Nov 22, 2023 17:21:33.068150997 CET	49673	443	192.168.2.5	23.1.237.91
Nov 22, 2023 17:21:37.910928965 CET	49705	443	192.168.2.5	172.253.122.84
Nov 22, 2023 17:21:37.910938978 CET	443	49705	172.253.122.84	192.168.2.5
Nov 22, 2023 17:21:37.911019087 CET	49705	443	192.168.2.5	172.253.122.84
Nov 22, 2023 17:21:37.911334038 CET	49705	443	192.168.2.5	172.253.122.84
Nov 22, 2023 17:21:37.911346912 CET	443	49705	172.253.122.84	192.168.2.5
Nov 22, 2023 17:21:37.911834955 CET	49706	443	192.168.2.5	142.251.163.101
Nov 22, 2023 17:21:37.911863089 CET	443	49706	142.251.163.101	192.168.2.5
Nov 22, 2023 17:21:37.911922932 CET	49706	443	192.168.2.5	142.251.163.101
Nov 22, 2023 17:21:37.912136078 CET	49706	443	192.168.2.5	142.251.163.101
Nov 22, 2023 17:21:37.912149906 CET	443	49706	142.251.163.101	192.168.2.5
Nov 22, 2023 17:21:38.235011101 CET	443	49706	142.251.163.101	192.168.2.5
Nov 22, 2023 17:21:38.235395908 CET	49706	443	192.168.2.5	142.251.163.101
Nov 22, 2023 17:21:38.235404968 CET	443	49706	142.251.163.101	192.168.2.5
Nov 22, 2023 17:21:38.235780001 CET	443	49706	142.251.163.101	192.168.2.5
Nov 22, 2023 17:21:38.235950947 CET	49706	443	192.168.2.5	142.251.163.101
Nov 22, 2023 17:21:38.236780882 CET	443	49706	142.251.163.101	192.168.2.5
Nov 22, 2023 17:21:38.236835957 CET	49706	443	192.168.2.5	142.251.163.101
Nov 22, 2023 17:21:38.237979889 CET	49706	443	192.168.2.5	142.251.163.101
Nov 22, 2023 17:21:38.238064051 CET	443	49705	172.253.122.84	192.168.2.5
Nov 22, 2023 17:21:38.238080025 CET	443	49706	142.251.163.101	192.168.2.5
Nov 22, 2023 17:21:38.238114119 CET	49706	443	192.168.2.5	142.251.163.101
Nov 22, 2023 17:21:38.238243103 CET	49705	443	192.168.2.5	172.253.122.84
Nov 22, 2023 17:21:38.238253117 CET	443	49705	172.253.122.84	192.168.2.5
Nov 22, 2023 17:21:38.239749908 CET	443	49705	172.253.122.84	192.168.2.5
Nov 22, 2023 17:21:38.239814043 CET	49705	443	192.168.2.5	172.253.122.84
Nov 22, 2023 17:21:38.241355896 CET	49705	443	192.168.2.5	172.253.122.84
Nov 22, 2023 17:21:38.241436005 CET	443	49705	172.253.122.84	192.168.2.5
Nov 22, 2023 17:21:38.241569042 CET	49705	443	192.168.2.5	172.253.122.84
Nov 22, 2023 17:21:38.241575003 CET	443	49705	172.253.122.84	192.168.2.5
Nov 22, 2023 17:21:38.281291008 CET	443	49706	142.251.163.101	192.168.2.5
Nov 22, 2023 17:21:38.287869930 CET	49705	443	192.168.2.5	172.253.122.84
Nov 22, 2023 17:21:38.319171906 CET	49706	443	192.168.2.5	142.251.163.101
Nov 22, 2023 17:21:38.319190025 CET	443	49706	142.251.163.101	192.168.2.5
Nov 22, 2023 17:21:38.506490946 CET	49706	443	192.168.2.5	142.251.163.101
Nov 22, 2023 17:21:38.540923119 CET	443	49706	142.251.163.101	192.168.2.5
Nov 22, 2023 17:21:38.541084051 CET	443	49706	142.251.163.101	192.168.2.5
Nov 22, 2023 17:21:38.541168928 CET	49706	443	192.168.2.5	142.251.163.101
Nov 22, 2023 17:21:38.541744947 CET	49706	443	192.168.2.5	142.251.163.101
Nov 22, 2023 17:21:38.541755915 CET	443	49706	142.251.163.101	192.168.2.5
Nov 22, 2023 17:21:38.554461956 CET	443	49705	172.253.122.84	192.168.2.5
Nov 22, 2023 17:21:38.554673910 CET	443	49705	172.253.122.84	192.168.2.5
Nov 22, 2023 17:21:38.554738045 CET	49705	443	192.168.2.5	172.253.122.84
Nov 22, 2023 17:21:38.555316925 CET	49705	443	192.168.2.5	172.253.122.84
Nov 22, 2023 17:21:38.555326939 CET	443	49705	172.253.122.84	192.168.2.5
Nov 22, 2023 17:21:39.009445906 CET	49709	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:39.009484053 CET	443	49709	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:39.009574890 CET	49709	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:39.009988070 CET	49709	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:39.009994030 CET	443	49709	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:39.035691023 CET	49710	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:39.035741091 CET	443	49710	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:39.035804987 CET	49710	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:39.036123037 CET	49710	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:39.036144972 CET	443	49710	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:39.411309004 CET	443	49709	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:39.411652088 CET	49709	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:39.411672115 CET	443	49709	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:39.412640095 CET	443	49709	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:39.412709951 CET	49709	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:39.415631056 CET	49709	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:39.415688038 CET	443	49709	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:39.415873051 CET	49709	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:39.415879011 CET	443	49709	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:39.461455107 CET	49709	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:39.774501085 CET	443	49709	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:39.774545908 CET	443	49709	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:39.774574041 CET	443	49709	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:39.774604082 CET	49709	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:39.774616957 CET	443	49709	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:39.774669886 CET	49709	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:39.776141882 CET	443	49709	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:39.776215076 CET	443	49709	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:39.776262045 CET	49709	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:39.818914890 CET	49709	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:39.818933010 CET	443	49709	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:39.997473955 CET	49712	443	192.168.2.5	35.190.80.1
Nov 22, 2023 17:21:39.997507095 CET	443	49712	35.190.80.1	192.168.2.5
Nov 22, 2023 17:21:39.997596979 CET	49712	443	192.168.2.5	35.190.80.1
Nov 22, 2023 17:21:39.997837067 CET	49712	443	192.168.2.5	35.190.80.1
Nov 22, 2023 17:21:39.997853041 CET	443	49712	35.190.80.1	192.168.2.5
Nov 22, 2023 17:21:40.343100071 CET	443	49712	35.190.80.1	192.168.2.5
Nov 22, 2023 17:21:40.343525887 CET	49712	443	192.168.2.5	35.190.80.1
Nov 22, 2023 17:21:40.343548059 CET	443	49712	35.190.80.1	192.168.2.5
Nov 22, 2023 17:21:40.344588041 CET	443	49712	35.190.80.1	192.168.2.5
Nov 22, 2023 17:21:40.344657898 CET	49712	443	192.168.2.5	35.190.80.1
Nov 22, 2023 17:21:40.346110106 CET	49712	443	192.168.2.5	35.190.80.1
Nov 22, 2023 17:21:40.346183062 CET	443	49712	35.190.80.1	192.168.2.5
Nov 22, 2023 17:21:40.346472979 CET	49712	443	192.168.2.5	35.190.80.1
Nov 22, 2023 17:21:40.346481085 CET	443	49712	35.190.80.1	192.168.2.5
Nov 22, 2023 17:21:40.400815010 CET	49712	443	192.168.2.5	35.190.80.1
Nov 22, 2023 17:21:40.433635950 CET	443	49710	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:40.433945894 CET	49710	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:40.433964014 CET	443	49710	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:40.434973001 CET	443	49710	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:40.435049057 CET	49710	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:40.435894012 CET	49710	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:40.435960054 CET	443	49710	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:40.436175108 CET	49710	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:40.436182976 CET	443	49710	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:40.478789091 CET	49710	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:40.713660002 CET	443	49712	35.190.80.1	192.168.2.5
Nov 22, 2023 17:21:40.713742971 CET	443	49712	35.190.80.1	192.168.2.5
Nov 22, 2023 17:21:40.713913918 CET	49712	443	192.168.2.5	35.190.80.1
Nov 22, 2023 17:21:40.714304924 CET	49712	443	192.168.2.5	35.190.80.1
Nov 22, 2023 17:21:40.714323997 CET	443	49712	35.190.80.1	192.168.2.5
Nov 22, 2023 17:21:40.716118097 CET	49714	443	192.168.2.5	35.190.80.1
Nov 22, 2023 17:21:40.716175079 CET	443	49714	35.190.80.1	192.168.2.5
Nov 22, 2023 17:21:40.716260910 CET	49714	443	192.168.2.5	35.190.80.1
Nov 22, 2023 17:21:40.716984034 CET	49714	443	192.168.2.5	35.190.80.1
Nov 22, 2023 17:21:40.716991901 CET	443	49714	35.190.80.1	192.168.2.5
Nov 22, 2023 17:21:40.869677067 CET	443	49710	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:40.869729042 CET	443	49710	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:40.869759083 CET	443	49710	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:40.869787931 CET	443	49710	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:40.869812012 CET	443	49710	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:40.869821072 CET	49710	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:40.869848967 CET	443	49710	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:40.869869947 CET	49710	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:40.869894981 CET	49710	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:40.869900942 CET	443	49710	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:40.869930983 CET	443	49710	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:40.869971991 CET	49710	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:40.873008966 CET	49710	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:40.873020887 CET	443	49710	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:40.895436049 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:40.895478010 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:40.895587921 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:40.902621031 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:40.902637005 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.043207884 CET	443	49714	35.190.80.1	192.168.2.5
Nov 22, 2023 17:21:41.045878887 CET	49714	443	192.168.2.5	35.190.80.1
Nov 22, 2023 17:21:41.045908928 CET	443	49714	35.190.80.1	192.168.2.5
Nov 22, 2023 17:21:41.046231985 CET	443	49714	35.190.80.1	192.168.2.5
Nov 22, 2023 17:21:41.047491074 CET	49714	443	192.168.2.5	35.190.80.1
Nov 22, 2023 17:21:41.047550917 CET	443	49714	35.190.80.1	192.168.2.5
Nov 22, 2023 17:21:41.048157930 CET	49714	443	192.168.2.5	35.190.80.1
Nov 22, 2023 17:21:41.089256048 CET	443	49714	35.190.80.1	192.168.2.5
Nov 22, 2023 17:21:41.284756899 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.285161972 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.285183907 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.285516977 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.286000967 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.286048889 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.286124945 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.333251953 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.711631060 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.711705923 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.711738110 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.711865902 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.711898088 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.711945057 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.713385105 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.714453936 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.714560032 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.714575052 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.716211081 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.716284990 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.716298103 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.718080997 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.718153000 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.718163967 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.719810009 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.719890118 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.719901085 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.721729994 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.721800089 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.721812010 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.721832991 CET	443	49714	35.190.80.1	192.168.2.5
Nov 22, 2023 17:21:41.722002983 CET	443	49714	35.190.80.1	192.168.2.5
Nov 22, 2023 17:21:41.722060919 CET	49714	443	192.168.2.5	35.190.80.1
Nov 22, 2023 17:21:41.722250938 CET	49714	443	192.168.2.5	35.190.80.1
Nov 22, 2023 17:21:41.722268105 CET	443	49714	35.190.80.1	192.168.2.5
Nov 22, 2023 17:21:41.722280979 CET	49714	443	192.168.2.5	35.190.80.1
Nov 22, 2023 17:21:41.722317934 CET	49714	443	192.168.2.5	35.190.80.1
Nov 22, 2023 17:21:41.725874901 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.725914001 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.725996971 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.726010084 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.726051092 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.728245020 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.730818033 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.730858088 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.730885029 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.730899096 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.730940104 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.733407021 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.735603094 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.735640049 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.735666990 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.735680103 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.735718012 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.737935066 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.740154982 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.740217924 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.740231037 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.742964029 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.743037939 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.743051052 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.746952057 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.747040033 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.747056007 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.749176979 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.749201059 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.749255896 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.749269009 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.749305964 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.751833916 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.754899979 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.754925013 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.754985094 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.754997969 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.755033970 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.757339001 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.762820959 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.762942076 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.762979031 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.807084084 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.904597998 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.904616117 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.904757023 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.905108929 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.905162096 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.908514977 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.908601046 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.910267115 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.910372019 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.913964033 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.914057016 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.917979002 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.918054104 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.919820070 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.919892073 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.924777985 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.924849987 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.929621935 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.929687023 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.931855917 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.931936979 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.932898045 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.932960033 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.940531969 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.940606117 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.944468021 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.944535971 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.949440002 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.949500084 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.955430031 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.955491066 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.957355976 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.957410097 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.960678101 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:41.960733891 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:41.999916077 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:42.000066996 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:42.084913969 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:42.085035086 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:42.087903976 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:42.087989092 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:42.091248035 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:42.091314077 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:42.094171047 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:42.094245911 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:42.098700047 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:42.098782063 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:42.102472067 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:42.102536917 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:42.105138063 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:42.105201960 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:42.109566927 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:42.109644890 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:42.111690044 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:42.111767054 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:42.116209984 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:42.116290092 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:42.119676113 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:42.119749069 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:42.119777918 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:42.119798899 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:42.119821072 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:42.119859934 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:42.119947910 CET	49715	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:42.119962931 CET	443	49715	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:42.276834965 CET	49716	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:42.276897907 CET	443	49716	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:42.276967049 CET	49716	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:42.277410030 CET	49716	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:42.277429104 CET	443	49716	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:42.333122015 CET	49717	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:42.333172083 CET	443	49717	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:42.333306074 CET	49717	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:42.334156036 CET	49717	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:42.334172010 CET	443	49717	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:42.379333973 CET	49718	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:21:42.379395008 CET	443	49718	172.253.115.106	192.168.2.5
Nov 22, 2023 17:21:42.379492044 CET	49718	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:21:42.379905939 CET	49718	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:21:42.379928112 CET	443	49718	172.253.115.106	192.168.2.5
Nov 22, 2023 17:21:42.556121111 CET	49719	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:42.556150913 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:42.556225061 CET	49719	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:42.559324980 CET	49719	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:42.559339046 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:42.569690943 CET	49674	443	192.168.2.5	23.1.237.91
Nov 22, 2023 17:21:42.573873043 CET	49675	443	192.168.2.5	23.1.237.91
Nov 22, 2023 17:21:42.681031942 CET	49673	443	192.168.2.5	23.1.237.91
Nov 22, 2023 17:21:42.687957048 CET	443	49716	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:42.691865921 CET	49716	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:42.691911936 CET	443	49716	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:42.692307949 CET	443	49716	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:42.693202019 CET	49716	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:42.693288088 CET	443	49716	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:42.693448067 CET	49716	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:42.693485022 CET	49716	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:42.693523884 CET	443	49716	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:42.926124096 CET	49720	443	192.168.2.5	23.54.46.90
Nov 22, 2023 17:21:42.926167965 CET	443	49720	23.54.46.90	192.168.2.5
Nov 22, 2023 17:21:42.926235914 CET	49720	443	192.168.2.5	23.54.46.90
Nov 22, 2023 17:21:42.930186033 CET	49720	443	192.168.2.5	23.54.46.90
Nov 22, 2023 17:21:42.930202961 CET	443	49720	23.54.46.90	192.168.2.5
Nov 22, 2023 17:21:42.942975998 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:42.943394899 CET	49719	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:42.943409920 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:42.944919109 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:42.944997072 CET	49719	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:42.946623087 CET	49719	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:42.946751118 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:42.947328091 CET	49719	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:42.947336912 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:42.993124008 CET	49719	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:43.071466923 CET	443	49716	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:43.071513891 CET	443	49716	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:43.071540117 CET	443	49716	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:43.071572065 CET	443	49716	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:43.071583033 CET	49716	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:43.071625948 CET	443	49716	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:43.071659088 CET	49716	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:43.073673964 CET	443	49716	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:43.073741913 CET	49716	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:43.073756933 CET	443	49716	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:43.076649904 CET	443	49716	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:43.076806068 CET	49716	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:43.076818943 CET	443	49716	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:43.079544067 CET	443	49716	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:43.079612970 CET	49716	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:43.079618931 CET	443	49716	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:43.079629898 CET	443	49716	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:43.079684973 CET	49716	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:43.079912901 CET	49716	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:43.079929113 CET	443	49716	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:43.233239889 CET	443	49720	23.54.46.90	192.168.2.5
Nov 22, 2023 17:21:43.233320951 CET	49720	443	192.168.2.5	23.54.46.90
Nov 22, 2023 17:21:43.238452911 CET	49720	443	192.168.2.5	23.54.46.90
Nov 22, 2023 17:21:43.238476992 CET	443	49720	23.54.46.90	192.168.2.5
Nov 22, 2023 17:21:43.238742113 CET	443	49720	23.54.46.90	192.168.2.5
Nov 22, 2023 17:21:43.289617062 CET	49720	443	192.168.2.5	23.54.46.90
Nov 22, 2023 17:21:43.316955090 CET	49721	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:21:43.316996098 CET	443	49721	104.21.80.18	192.168.2.5
Nov 22, 2023 17:21:43.317056894 CET	49721	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:21:43.317414999 CET	49721	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:21:43.317429066 CET	443	49721	104.21.80.18	192.168.2.5
Nov 22, 2023 17:21:43.341895103 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.341959953 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.341999054 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.342016935 CET	49719	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:43.342039108 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.342077971 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.342078924 CET	49719	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:43.342093945 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.342139959 CET	49719	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:43.342147112 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.342756987 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.342811108 CET	49719	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:43.342818975 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.343962908 CET	49720	443	192.168.2.5	23.54.46.90
Nov 22, 2023 17:21:43.344643116 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.344679117 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.344708920 CET	49719	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:43.344717026 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.344754934 CET	49719	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:43.345530033 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.346715927 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.346751928 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.346790075 CET	49719	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:43.346800089 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.346853018 CET	49719	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:43.347852945 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.348964930 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.349051952 CET	49719	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:43.349060059 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.350275040 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.350332022 CET	49719	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:43.350338936 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.351402998 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.351458073 CET	49719	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:43.351464987 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.352313995 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.352369070 CET	49719	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:43.352375984 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.353219986 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.353271961 CET	49719	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:43.353277922 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.353307009 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.353352070 CET	49719	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:43.353432894 CET	49719	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:43.353444099 CET	443	49719	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:43.385262966 CET	443	49720	23.54.46.90	192.168.2.5
Nov 22, 2023 17:21:43.501916885 CET	443	49720	23.54.46.90	192.168.2.5
Nov 22, 2023 17:21:43.501980066 CET	443	49720	23.54.46.90	192.168.2.5
Nov 22, 2023 17:21:43.502054930 CET	49720	443	192.168.2.5	23.54.46.90
Nov 22, 2023 17:21:43.502203941 CET	49720	443	192.168.2.5	23.54.46.90
Nov 22, 2023 17:21:43.502222061 CET	443	49720	23.54.46.90	192.168.2.5
Nov 22, 2023 17:21:43.502242088 CET	49720	443	192.168.2.5	23.54.46.90
Nov 22, 2023 17:21:43.502248049 CET	443	49720	23.54.46.90	192.168.2.5
Nov 22, 2023 17:21:43.534225941 CET	443	49717	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:43.534674883 CET	49717	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:43.534699917 CET	443	49717	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:43.535053968 CET	443	49717	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:43.535561085 CET	49717	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:43.535626888 CET	443	49717	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:43.535728931 CET	49717	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:43.543493032 CET	49722	443	192.168.2.5	23.54.46.90
Nov 22, 2023 17:21:43.543529034 CET	443	49722	23.54.46.90	192.168.2.5
Nov 22, 2023 17:21:43.543618917 CET	49722	443	192.168.2.5	23.54.46.90
Nov 22, 2023 17:21:43.544131041 CET	49722	443	192.168.2.5	23.54.46.90
Nov 22, 2023 17:21:43.544151068 CET	443	49722	23.54.46.90	192.168.2.5
Nov 22, 2023 17:21:43.581253052 CET	443	49717	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:43.676786900 CET	443	49721	104.21.80.18	192.168.2.5
Nov 22, 2023 17:21:43.677150965 CET	49721	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:21:43.677182913 CET	443	49721	104.21.80.18	192.168.2.5
Nov 22, 2023 17:21:43.678303003 CET	443	49721	104.21.80.18	192.168.2.5
Nov 22, 2023 17:21:43.678390980 CET	49721	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:21:43.679073095 CET	49721	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:21:43.679138899 CET	443	49721	104.21.80.18	192.168.2.5
Nov 22, 2023 17:21:43.679227114 CET	49721	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:21:43.679236889 CET	443	49721	104.21.80.18	192.168.2.5
Nov 22, 2023 17:21:43.694375038 CET	443	49718	172.253.115.106	192.168.2.5
Nov 22, 2023 17:21:43.694614887 CET	49718	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:21:43.694653988 CET	443	49718	172.253.115.106	192.168.2.5
Nov 22, 2023 17:21:43.695693016 CET	443	49718	172.253.115.106	192.168.2.5
Nov 22, 2023 17:21:43.695770979 CET	49718	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:21:43.707720041 CET	49718	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:21:43.707875013 CET	443	49718	172.253.115.106	192.168.2.5
Nov 22, 2023 17:21:43.725670099 CET	49721	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:21:43.756035089 CET	49718	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:21:43.756055117 CET	443	49718	172.253.115.106	192.168.2.5
Nov 22, 2023 17:21:43.796763897 CET	49718	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:21:43.829303026 CET	443	49722	23.54.46.90	192.168.2.5
Nov 22, 2023 17:21:43.829431057 CET	49722	443	192.168.2.5	23.54.46.90
Nov 22, 2023 17:21:43.831350088 CET	49722	443	192.168.2.5	23.54.46.90
Nov 22, 2023 17:21:43.831357002 CET	443	49722	23.54.46.90	192.168.2.5
Nov 22, 2023 17:21:43.831715107 CET	443	49722	23.54.46.90	192.168.2.5
Nov 22, 2023 17:21:43.834259033 CET	49722	443	192.168.2.5	23.54.46.90
Nov 22, 2023 17:21:43.877259016 CET	443	49722	23.54.46.90	192.168.2.5
Nov 22, 2023 17:21:43.942931890 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:43.942979097 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:43.943041086 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:43.943800926 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:43.943814039 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.077893019 CET	443	49721	104.21.80.18	192.168.2.5
Nov 22, 2023 17:21:44.078051090 CET	443	49721	104.21.80.18	192.168.2.5
Nov 22, 2023 17:21:44.078141928 CET	49721	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:21:44.079226971 CET	49721	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:21:44.079250097 CET	443	49721	104.21.80.18	192.168.2.5
Nov 22, 2023 17:21:44.114346027 CET	443	49722	23.54.46.90	192.168.2.5
Nov 22, 2023 17:21:44.114429951 CET	443	49722	23.54.46.90	192.168.2.5
Nov 22, 2023 17:21:44.114509106 CET	49722	443	192.168.2.5	23.54.46.90
Nov 22, 2023 17:21:44.116638899 CET	49722	443	192.168.2.5	23.54.46.90
Nov 22, 2023 17:21:44.116662979 CET	443	49722	23.54.46.90	192.168.2.5
Nov 22, 2023 17:21:44.116678953 CET	49722	443	192.168.2.5	23.54.46.90
Nov 22, 2023 17:21:44.116683960 CET	443	49722	23.54.46.90	192.168.2.5
Nov 22, 2023 17:21:44.142208099 CET	443	49717	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:44.142307997 CET	443	49717	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:44.142354012 CET	49717	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:44.143117905 CET	49717	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:44.143131971 CET	443	49717	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:44.164324999 CET	443	49703	23.1.237.91	192.168.2.5
Nov 22, 2023 17:21:44.164417982 CET	49703	443	192.168.2.5	23.1.237.91
Nov 22, 2023 17:21:44.256748915 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.257890940 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.257915020 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.258908987 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.258979082 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.259573936 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.259630919 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.259922981 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.259929895 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.303476095 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.595978975 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.596033096 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.596070051 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.596103907 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.596117973 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.596136093 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.596275091 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.596966982 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.597007990 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.597012997 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.597018003 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.597062111 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.598222971 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.599267006 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.599298000 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.599315882 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.599322081 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.599366903 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.600238085 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.601114988 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.601166964 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.601172924 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.602194071 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.602252960 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.602258921 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.603681087 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.603729963 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.603735924 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.605175972 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.605226040 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.605232000 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.606952906 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.607007980 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.607014894 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.608519077 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.608566046 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.608572006 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.611766100 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.611799955 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.611815929 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.611821890 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.611860037 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.613228083 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.614976883 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.615006924 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.615024090 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.615031958 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.615076065 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.616616964 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.618277073 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.618319988 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.618325949 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.618824005 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.618872881 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.618877888 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.621865034 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.621917009 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.621922016 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.623070955 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.623106003 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.623125076 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.623131990 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.623177052 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.625704050 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.625767946 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.933046103 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.933227062 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.933290958 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.933355093 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.937377930 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.937438965 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.937469006 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.937504053 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.937531948 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.937539101 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:44.937561035 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.937582970 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.937663078 CET	49723	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:44.937690020 CET	443	49723	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.038604021 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.038659096 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.038765907 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.040652037 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.040669918 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.042320967 CET	49725	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.042360067 CET	443	49725	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.042428970 CET	49725	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.042692900 CET	49725	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.042706013 CET	443	49725	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.394767046 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.395076990 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.395097971 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.395786047 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.396192074 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.396255016 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.396332026 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.396338940 CET	443	49725	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.396497965 CET	49725	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.396522045 CET	443	49725	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.396943092 CET	443	49725	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.397264957 CET	49725	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.397342920 CET	443	49725	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.397347927 CET	49725	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.441252947 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.441266060 CET	443	49725	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.446156025 CET	49725	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.816289902 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.816354990 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.816402912 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.816404104 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.816422939 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.816463947 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.816477060 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.816521883 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.816565990 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.816575050 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.817002058 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.817047119 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.817056894 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.817873001 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.817917109 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.817924976 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.819814920 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.819864035 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.819864035 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.819876909 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.819921970 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.820750952 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.821899891 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.821937084 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.821957111 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.821964979 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.822012901 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.823059082 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.824081898 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.824119091 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.824139118 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.824148893 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.824187994 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.825041056 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.826209068 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.826268911 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.826282024 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.826334953 CET	443	49725	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.826448917 CET	443	49725	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.826498985 CET	49725	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.827250957 CET	49725	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.827265024 CET	443	49725	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.827677011 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.827738047 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.827749014 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.829380035 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.829443932 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.829453945 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.831476927 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.831516027 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.831533909 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.831542969 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.831588984 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.832884073 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.834232092 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.834269047 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.834290981 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.834299088 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.834340096 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.835522890 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.837080956 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.837153912 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.837162971 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.838444948 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.838496923 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.838505030 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.840873003 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.840944052 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:45.840953112 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:45.884166002 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.011235952 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.011346102 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.011373043 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.011420965 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.013112068 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.013178110 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.013931990 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.013988972 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.015652895 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.015707970 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.071095943 CET	49726	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:46.071150064 CET	443	49726	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:46.071240902 CET	49726	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:46.071531057 CET	49726	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:46.071548939 CET	443	49726	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:46.169863939 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.170011044 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.170356989 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.170398951 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.170416117 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.170428038 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.170461893 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.171402931 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.171447992 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.171463013 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.171471119 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.171499014 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.171504021 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.171551943 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.171554089 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.171566010 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.171607018 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.171610117 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.171619892 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.171653986 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.171664953 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.171713114 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.171715975 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.171725988 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.171752930 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.171768904 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.171771049 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.171782970 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.171814919 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.171833038 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.171880007 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.171885014 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.171897888 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.171936989 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.171936989 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.171950102 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.171977043 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.171988010 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.171998024 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.172039986 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.172044039 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.172061920 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.172086954 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.172096014 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.172106981 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.172152042 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.172153950 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.172163963 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.172192097 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.172205925 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.172575951 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.172632933 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.173600912 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.173675060 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.174458981 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.174529076 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.175664902 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.175730944 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.177282095 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.177354097 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.178169966 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.178231955 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.214941025 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.215040922 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.215490103 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.215552092 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.215572119 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.215615988 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.215617895 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.215671062 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.215676069 CET	443	49724	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.215701103 CET	49724	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.266402960 CET	49727	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:46.266447067 CET	443	49727	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:46.266525984 CET	49727	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:46.266895056 CET	49727	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:46.266913891 CET	443	49727	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:46.376015902 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.376055956 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.376156092 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.376493931 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.376508951 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.384886980 CET	443	49726	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:46.385144949 CET	49726	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:46.385159969 CET	443	49726	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:46.386039972 CET	443	49726	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:46.386105061 CET	49726	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:46.386415005 CET	49726	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:46.386466980 CET	443	49726	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:46.386533976 CET	49726	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:46.386540890 CET	443	49726	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:46.430655003 CET	49726	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:46.621756077 CET	443	49727	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:46.622071028 CET	49727	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:46.622134924 CET	443	49727	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:46.622634888 CET	443	49727	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:46.623024940 CET	49727	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:46.623069048 CET	49727	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:46.623083115 CET	443	49727	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:46.623121977 CET	443	49727	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:46.670198917 CET	49727	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:46.737983942 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.738385916 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.738413095 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.739624977 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.740113974 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.740295887 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.740314007 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.740355968 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.740401030 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:46.786389112 CET	443	49726	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:46.786550999 CET	443	49726	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:46.786638021 CET	49726	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:46.786700010 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:46.808322906 CET	49726	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:46.808336973 CET	443	49726	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:47.090126991 CET	443	49727	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:47.090279102 CET	443	49727	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:47.090343952 CET	49727	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:47.091553926 CET	49727	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:21:47.091576099 CET	443	49727	172.67.173.18	192.168.2.5
Nov 22, 2023 17:21:47.095757961 CET	49731	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:21:47.095792055 CET	443	49731	104.21.80.18	192.168.2.5
Nov 22, 2023 17:21:47.095855951 CET	49731	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:21:47.096208096 CET	49731	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:21:47.096224070 CET	443	49731	104.21.80.18	192.168.2.5
Nov 22, 2023 17:21:47.156816006 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.156948090 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.157047987 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.157063007 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.157105923 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.157166004 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.157174110 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.157280922 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.157350063 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.157357931 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.157435894 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.157501936 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.157507896 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.158473015 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.158515930 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.158538103 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.158546925 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.158586979 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.159106970 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.162158012 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.162199974 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.162230968 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.162242889 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.162257910 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.162282944 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.163197041 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.163260937 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.163269997 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.164179087 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.164243937 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.164253950 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.165010929 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.165077925 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.165086985 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.166090965 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.166152954 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.166162968 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.168225050 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.168257952 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.168298960 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.168311119 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.168355942 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.170316935 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.170391083 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.170423031 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.170444012 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.170454979 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.170496941 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.172440052 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.172483921 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.172530890 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.172542095 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.174597979 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.174632072 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.174660921 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.174666882 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.174678087 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.174709082 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.176686049 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.176717043 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.176757097 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.176768064 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.176810026 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.179884911 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.179954052 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.317015886 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.317267895 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.317290068 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.317339897 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.318188906 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.318252087 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.318660021 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.318717957 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.319572926 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.319634914 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.320873976 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.320945024 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.322191000 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.322351933 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.322966099 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.323029041 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.324352026 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.324414015 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.325103998 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.325155973 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.325166941 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.325206041 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.325211048 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.325258017 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.325431108 CET	49728	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.325448036 CET	443	49728	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.431850910 CET	443	49731	104.21.80.18	192.168.2.5
Nov 22, 2023 17:21:47.434745073 CET	49731	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:21:47.434792995 CET	443	49731	104.21.80.18	192.168.2.5
Nov 22, 2023 17:21:47.435113907 CET	443	49731	104.21.80.18	192.168.2.5
Nov 22, 2023 17:21:47.435523987 CET	49731	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:21:47.435585022 CET	443	49731	104.21.80.18	192.168.2.5
Nov 22, 2023 17:21:47.435739994 CET	49731	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:21:47.477268934 CET	443	49731	104.21.80.18	192.168.2.5
Nov 22, 2023 17:21:47.704807043 CET	49732	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.704854012 CET	443	49732	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.704926014 CET	49732	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.705235958 CET	49732	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:47.705252886 CET	443	49732	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:47.710336924 CET	49733	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:47.710346937 CET	443	49733	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:47.710416079 CET	49733	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:47.711124897 CET	49733	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:47.711136103 CET	443	49733	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:48.055577993 CET	443	49731	104.21.80.18	192.168.2.5
Nov 22, 2023 17:21:48.055671930 CET	443	49731	104.21.80.18	192.168.2.5
Nov 22, 2023 17:21:48.055744886 CET	49731	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:21:48.061595917 CET	49731	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:21:48.061645031 CET	443	49731	104.21.80.18	192.168.2.5
Nov 22, 2023 17:21:48.067019939 CET	443	49732	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:48.071027040 CET	443	49733	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:48.113724947 CET	49732	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:48.113842964 CET	49733	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:48.305108070 CET	49733	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:48.305155993 CET	443	49733	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:48.305253983 CET	49732	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:48.305265903 CET	443	49732	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:48.305740118 CET	443	49733	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:48.306054115 CET	443	49732	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:48.307182074 CET	49733	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:48.307284117 CET	443	49733	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:48.307742119 CET	49732	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:48.307832956 CET	443	49732	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:48.308063984 CET	49733	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:48.308124065 CET	49732	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:48.349262953 CET	443	49732	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:48.349284887 CET	443	49733	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:48.458587885 CET	443	49732	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:48.458697081 CET	443	49732	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:48.458749056 CET	443	49732	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:48.458765984 CET	49732	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:48.458815098 CET	49732	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:48.469513893 CET	443	49733	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:48.469609976 CET	443	49733	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:48.469671965 CET	49733	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:48.531163931 CET	49733	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:48.531193972 CET	443	49733	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:48.531691074 CET	49732	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:48.531696081 CET	443	49732	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:50.591599941 CET	49735	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:50.591655970 CET	443	49735	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:50.591752052 CET	49735	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:50.592092991 CET	49735	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:50.592116117 CET	443	49735	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:50.988475084 CET	443	49735	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:50.988945007 CET	49735	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:50.988961935 CET	443	49735	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:50.989259958 CET	443	49735	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:50.989614010 CET	49735	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:50.989666939 CET	443	49735	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:50.989768982 CET	49735	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:51.033298016 CET	443	49735	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:51.405925989 CET	443	49735	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:51.406034946 CET	443	49735	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:51.406090975 CET	49735	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:51.406814098 CET	49735	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:51.406831026 CET	443	49735	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:51.409919977 CET	49736	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:51.410010099 CET	443	49736	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:51.410103083 CET	49736	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:51.410545111 CET	49736	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:51.410579920 CET	443	49736	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:51.463788033 CET	49737	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:51.463810921 CET	443	49737	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:51.463948011 CET	49737	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:51.464416981 CET	49737	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:51.464433908 CET	443	49737	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:51.786871910 CET	443	49736	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:51.787219048 CET	49736	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:51.787240982 CET	443	49736	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:51.787554979 CET	443	49736	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:51.787976980 CET	49736	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:51.788038015 CET	49736	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:51.788043022 CET	443	49736	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:51.833261967 CET	443	49736	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:51.834717989 CET	49736	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:51.843314886 CET	443	49737	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:51.843591928 CET	49737	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:51.843601942 CET	443	49737	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:51.844316959 CET	443	49737	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:51.844665051 CET	49737	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:51.844752073 CET	443	49737	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:51.844856977 CET	49737	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:51.844945908 CET	49737	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:51.844966888 CET	443	49737	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:51.845041037 CET	49737	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:51.845050097 CET	443	49737	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:51.845094919 CET	49737	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:51.845168114 CET	443	49737	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:52.462074041 CET	443	49737	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:52.462138891 CET	443	49737	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:52.462182999 CET	443	49737	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:52.462204933 CET	49737	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:52.462232113 CET	443	49737	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:52.462595940 CET	443	49737	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:52.462630033 CET	49737	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:52.462637901 CET	443	49737	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:52.462719917 CET	49737	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:52.464639902 CET	443	49737	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:52.466542959 CET	443	49737	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:52.466581106 CET	443	49737	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:52.466602087 CET	49737	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:52.466609955 CET	443	49737	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:52.466655970 CET	49737	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:52.468853951 CET	443	49737	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:52.471154928 CET	443	49737	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:52.471190929 CET	443	49737	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:52.471213102 CET	49737	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:52.471220016 CET	443	49737	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:52.471271038 CET	49737	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:52.473304987 CET	443	49737	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:52.473409891 CET	443	49737	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:52.473495007 CET	49737	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:52.473578930 CET	49737	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:21:52.473589897 CET	443	49737	104.17.3.184	192.168.2.5
Nov 22, 2023 17:21:52.483855963 CET	49738	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:52.483884096 CET	443	49738	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:52.483984947 CET	49738	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:52.484402895 CET	49738	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:52.484417915 CET	443	49738	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:52.538425922 CET	443	49736	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:52.585256100 CET	49736	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:52.585277081 CET	443	49736	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:52.631459951 CET	49736	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:52.713411093 CET	443	49718	172.253.115.106	192.168.2.5
Nov 22, 2023 17:21:52.713494062 CET	443	49718	172.253.115.106	192.168.2.5
Nov 22, 2023 17:21:52.713680029 CET	49718	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:21:52.781399012 CET	443	49736	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:52.781500101 CET	443	49736	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:52.781568050 CET	49736	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:52.781766891 CET	49736	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:52.781786919 CET	443	49736	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:52.785039902 CET	49718	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:21:52.785073996 CET	443	49718	172.253.115.106	192.168.2.5
Nov 22, 2023 17:21:52.887837887 CET	443	49738	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:52.888123989 CET	49738	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:52.888149023 CET	443	49738	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:52.888811111 CET	443	49738	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:52.889149904 CET	49738	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:52.889234066 CET	443	49738	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:52.889313936 CET	49738	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:52.931575060 CET	49738	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:52.931585073 CET	443	49738	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:53.157057047 CET	49739	443	192.168.2.5	20.12.23.50
Nov 22, 2023 17:21:53.157083035 CET	443	49739	20.12.23.50	192.168.2.5
Nov 22, 2023 17:21:53.157146931 CET	49739	443	192.168.2.5	20.12.23.50
Nov 22, 2023 17:21:53.159339905 CET	49739	443	192.168.2.5	20.12.23.50
Nov 22, 2023 17:21:53.159354925 CET	443	49739	20.12.23.50	192.168.2.5
Nov 22, 2023 17:21:53.305494070 CET	443	49738	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:53.305622101 CET	443	49738	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:53.305687904 CET	49738	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:53.306464911 CET	49738	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:21:53.306476116 CET	443	49738	104.17.2.184	192.168.2.5
Nov 22, 2023 17:21:53.629038095 CET	443	49739	20.12.23.50	192.168.2.5
Nov 22, 2023 17:21:53.629157066 CET	49739	443	192.168.2.5	20.12.23.50
Nov 22, 2023 17:21:53.631469965 CET	49739	443	192.168.2.5	20.12.23.50
Nov 22, 2023 17:21:53.631479025 CET	443	49739	20.12.23.50	192.168.2.5
Nov 22, 2023 17:21:53.631690979 CET	443	49739	20.12.23.50	192.168.2.5
Nov 22, 2023 17:21:53.678417921 CET	49739	443	192.168.2.5	20.12.23.50
Nov 22, 2023 17:21:54.258327007 CET	49739	443	192.168.2.5	20.12.23.50
Nov 22, 2023 17:21:54.305275917 CET	443	49739	20.12.23.50	192.168.2.5
Nov 22, 2023 17:21:54.505795956 CET	443	49739	20.12.23.50	192.168.2.5
Nov 22, 2023 17:21:54.505825996 CET	443	49739	20.12.23.50	192.168.2.5
Nov 22, 2023 17:21:54.505836010 CET	443	49739	20.12.23.50	192.168.2.5
Nov 22, 2023 17:21:54.505848885 CET	443	49739	20.12.23.50	192.168.2.5
Nov 22, 2023 17:21:54.505878925 CET	443	49739	20.12.23.50	192.168.2.5
Nov 22, 2023 17:21:54.505945921 CET	49739	443	192.168.2.5	20.12.23.50
Nov 22, 2023 17:21:54.505970955 CET	443	49739	20.12.23.50	192.168.2.5
Nov 22, 2023 17:21:54.505986929 CET	49739	443	192.168.2.5	20.12.23.50
Nov 22, 2023 17:21:54.505990028 CET	443	49739	20.12.23.50	192.168.2.5
Nov 22, 2023 17:21:54.506010056 CET	443	49739	20.12.23.50	192.168.2.5
Nov 22, 2023 17:21:54.506037951 CET	49739	443	192.168.2.5	20.12.23.50
Nov 22, 2023 17:21:54.506057978 CET	49739	443	192.168.2.5	20.12.23.50
Nov 22, 2023 17:21:54.861928940 CET	49739	443	192.168.2.5	20.12.23.50
Nov 22, 2023 17:21:54.861949921 CET	443	49739	20.12.23.50	192.168.2.5
Nov 22, 2023 17:21:54.861960888 CET	49739	443	192.168.2.5	20.12.23.50
Nov 22, 2023 17:21:54.861965895 CET	443	49739	20.12.23.50	192.168.2.5
Nov 22, 2023 17:22:01.194622040 CET	49745	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:22:01.194647074 CET	443	49745	104.17.3.184	192.168.2.5
Nov 22, 2023 17:22:01.194736004 CET	49745	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:22:01.195403099 CET	49745	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:22:01.195411921 CET	443	49745	104.17.3.184	192.168.2.5
Nov 22, 2023 17:22:01.592984915 CET	443	49745	104.17.3.184	192.168.2.5
Nov 22, 2023 17:22:01.593262911 CET	49745	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:22:01.593282938 CET	443	49745	104.17.3.184	192.168.2.5
Nov 22, 2023 17:22:01.593597889 CET	443	49745	104.17.3.184	192.168.2.5
Nov 22, 2023 17:22:01.593903065 CET	49745	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:22:01.593961000 CET	443	49745	104.17.3.184	192.168.2.5
Nov 22, 2023 17:22:01.594079018 CET	49745	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:22:01.594156027 CET	49745	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:22:01.594182968 CET	443	49745	104.17.3.184	192.168.2.5
Nov 22, 2023 17:22:01.594249964 CET	49745	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:22:01.594276905 CET	443	49745	104.17.3.184	192.168.2.5
Nov 22, 2023 17:22:02.212845087 CET	443	49745	104.17.3.184	192.168.2.5
Nov 22, 2023 17:22:02.212898970 CET	443	49745	104.17.3.184	192.168.2.5
Nov 22, 2023 17:22:02.212965965 CET	443	49745	104.17.3.184	192.168.2.5
Nov 22, 2023 17:22:02.213071108 CET	443	49745	104.17.3.184	192.168.2.5
Nov 22, 2023 17:22:02.213099957 CET	49745	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:22:02.213138103 CET	49745	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:22:02.214014053 CET	49745	443	192.168.2.5	104.17.3.184
Nov 22, 2023 17:22:02.214030027 CET	443	49745	104.17.3.184	192.168.2.5
Nov 22, 2023 17:22:02.220710039 CET	49746	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:22:02.220738888 CET	443	49746	104.17.2.184	192.168.2.5
Nov 22, 2023 17:22:02.220828056 CET	49746	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:22:02.221153975 CET	49746	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:22:02.221169949 CET	443	49746	104.17.2.184	192.168.2.5
Nov 22, 2023 17:22:02.227458954 CET	49747	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:02.227495909 CET	443	49747	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:02.227588892 CET	49747	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:02.228135109 CET	49747	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:02.228152037 CET	443	49747	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:02.616929054 CET	443	49747	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:02.617290020 CET	49747	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:02.617317915 CET	443	49747	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:02.617628098 CET	443	49747	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:02.617924929 CET	49747	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:02.617980957 CET	443	49747	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:02.618074894 CET	49747	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:02.618115902 CET	49747	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:02.618140936 CET	443	49747	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:03.051428080 CET	443	49747	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:03.051497936 CET	443	49747	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:03.051523924 CET	443	49747	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:03.051620960 CET	443	49747	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:03.051702976 CET	49747	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:03.051702976 CET	49747	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:03.121871948 CET	49747	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:03.121915102 CET	443	49747	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:03.155761003 CET	49748	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:03.155816078 CET	443	49748	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:03.155909061 CET	49748	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:03.156049967 CET	49749	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:03.156111002 CET	443	49749	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:03.156162024 CET	49749	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:03.156390905 CET	49748	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:03.156402111 CET	443	49748	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:03.156579018 CET	49749	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:03.156586885 CET	443	49749	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:03.165364027 CET	49750	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:22:03.165402889 CET	443	49750	104.21.80.18	192.168.2.5
Nov 22, 2023 17:22:03.165467978 CET	49750	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:22:03.165769100 CET	49750	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:22:03.165775061 CET	443	49750	104.21.80.18	192.168.2.5
Nov 22, 2023 17:22:03.453097105 CET	443	49749	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:03.453361034 CET	49749	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:03.453373909 CET	443	49749	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:03.453723907 CET	443	49749	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:03.454175949 CET	49749	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:03.454231024 CET	443	49749	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:03.454256058 CET	49749	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:03.454323053 CET	49749	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:03.454338074 CET	443	49749	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:03.456008911 CET	443	49748	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:03.456185102 CET	49748	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:03.456197023 CET	443	49748	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:03.456494093 CET	443	49748	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:03.456773043 CET	49748	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:03.456815958 CET	443	49748	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:03.456907988 CET	49748	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:03.462208986 CET	443	49750	104.21.80.18	192.168.2.5
Nov 22, 2023 17:22:03.462598085 CET	49750	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:22:03.462626934 CET	443	49750	104.21.80.18	192.168.2.5
Nov 22, 2023 17:22:03.463021040 CET	443	49750	104.21.80.18	192.168.2.5
Nov 22, 2023 17:22:03.463294029 CET	49750	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:22:03.463352919 CET	443	49750	104.21.80.18	192.168.2.5
Nov 22, 2023 17:22:03.463442087 CET	49750	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:22:03.501259089 CET	443	49748	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:03.505260944 CET	443	49750	104.21.80.18	192.168.2.5
Nov 22, 2023 17:22:03.803524971 CET	443	49746	104.17.2.184	192.168.2.5
Nov 22, 2023 17:22:03.803949118 CET	49746	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:22:03.803968906 CET	443	49746	104.17.2.184	192.168.2.5
Nov 22, 2023 17:22:03.804431915 CET	443	49746	104.17.2.184	192.168.2.5
Nov 22, 2023 17:22:03.804855108 CET	49746	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:22:03.804940939 CET	443	49746	104.17.2.184	192.168.2.5
Nov 22, 2023 17:22:03.805022955 CET	49746	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:22:03.849261999 CET	443	49746	104.17.2.184	192.168.2.5
Nov 22, 2023 17:22:04.016030073 CET	443	49749	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:04.016156912 CET	443	49749	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:04.016232967 CET	49749	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:04.017081022 CET	49749	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:04.017096996 CET	443	49749	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:04.049746990 CET	443	49748	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:04.049854994 CET	443	49748	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:04.049906015 CET	49748	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:04.050426960 CET	49748	443	192.168.2.5	172.67.173.18
Nov 22, 2023 17:22:04.050437927 CET	443	49748	172.67.173.18	192.168.2.5
Nov 22, 2023 17:22:04.053710938 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.053735018 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.053792000 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.054090023 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.054104090 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.063034058 CET	443	49750	104.21.80.18	192.168.2.5
Nov 22, 2023 17:22:04.063122988 CET	443	49750	104.21.80.18	192.168.2.5
Nov 22, 2023 17:22:04.063189983 CET	49750	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:22:04.063805103 CET	49750	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:22:04.063818932 CET	443	49750	104.21.80.18	192.168.2.5
Nov 22, 2023 17:22:04.081805944 CET	49752	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:22:04.081832886 CET	443	49752	104.21.80.18	192.168.2.5
Nov 22, 2023 17:22:04.081947088 CET	49752	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:22:04.082273960 CET	49752	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:22:04.082284927 CET	443	49752	104.21.80.18	192.168.2.5
Nov 22, 2023 17:22:04.162493944 CET	443	49746	104.17.2.184	192.168.2.5
Nov 22, 2023 17:22:04.162633896 CET	443	49746	104.17.2.184	192.168.2.5
Nov 22, 2023 17:22:04.162697077 CET	49746	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:22:04.163539886 CET	49746	443	192.168.2.5	104.17.2.184
Nov 22, 2023 17:22:04.163553953 CET	443	49746	104.17.2.184	192.168.2.5
Nov 22, 2023 17:22:04.263942003 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.264936924 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.264961958 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.269680977 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.270159006 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.270406961 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.270416975 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.270551920 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.325911045 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.367925882 CET	443	49752	104.21.80.18	192.168.2.5
Nov 22, 2023 17:22:04.368252993 CET	49752	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:22:04.368269920 CET	443	49752	104.21.80.18	192.168.2.5
Nov 22, 2023 17:22:04.369868994 CET	443	49752	104.21.80.18	192.168.2.5
Nov 22, 2023 17:22:04.370338917 CET	49752	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:22:04.370523930 CET	49752	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:22:04.373363018 CET	443	49752	104.21.80.18	192.168.2.5
Nov 22, 2023 17:22:04.418107986 CET	49752	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:22:04.655630112 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.655668020 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.655704975 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.655725002 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.655745029 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.655765057 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.655786037 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.664839029 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.664916039 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.671283960 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.676194906 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.676320076 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.676331043 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.683448076 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.683551073 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.683561087 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.738219976 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.738229036 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.788609028 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.807372093 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.810808897 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.810878992 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.810888052 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.815412045 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.815440893 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.815478086 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.815484047 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.815532923 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.819072962 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.823208094 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.823230028 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.823295116 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.823303938 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.823355913 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.830060005 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.833030939 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.833055019 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.833080053 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.833087921 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.833146095 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.836105108 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.836127043 CET	49753	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.836190939 CET	443	49753	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.836270094 CET	49753	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.836755991 CET	49753	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.836785078 CET	443	49753	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.841322899 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.841346979 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.841375113 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.841384888 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.841434002 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.847856045 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.856477976 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.856550932 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.856563091 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.864407063 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.864460945 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.864470005 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.872795105 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.872886896 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.872896910 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.915179014 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.932843924 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.937149048 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.937180042 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.937319994 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.937331915 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.937388897 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.947422981 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.959696054 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.959728956 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.959837914 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.959847927 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.959911108 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.970150948 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.980259895 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.980308056 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.980376005 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.980387926 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.980529070 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.986630917 CET	443	49752	104.21.80.18	192.168.2.5
Nov 22, 2023 17:22:04.986741066 CET	443	49752	104.21.80.18	192.168.2.5
Nov 22, 2023 17:22:04.986798048 CET	49752	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:22:04.987663984 CET	49752	443	192.168.2.5	104.21.80.18
Nov 22, 2023 17:22:04.987677097 CET	443	49752	104.21.80.18	192.168.2.5
Nov 22, 2023 17:22:04.990336895 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.998159885 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.998213053 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.998226881 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:04.998236895 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:04.998279095 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.005500078 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.012464046 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.012517929 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.012589931 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.012602091 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.012742043 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.020467043 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.020768881 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.020823956 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.020833015 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.029510975 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.029544115 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.029591084 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.029598951 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.029649019 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.035207987 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.039135933 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.039169073 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.039196014 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.039206028 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.039345980 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.045557022 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.054073095 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.054104090 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.054168940 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.054176092 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.054316998 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.060488939 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.068089008 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.068120956 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.068255901 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.068264008 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.068312883 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.073381901 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.078351974 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.078383923 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.078449011 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.078459978 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.078502893 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.083800077 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.086040020 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.086088896 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.086117983 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.086132050 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.086175919 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.088380098 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.088428974 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.088496923 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.088509083 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.091176987 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.091207981 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.091238022 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.091249943 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.091291904 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.093837976 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.095465899 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.095493078 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.095519066 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.095529079 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.095571995 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.097917080 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.099255085 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.099282980 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.099328995 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.099335909 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.099383116 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.100940943 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.102516890 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.102543116 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.102585077 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.102593899 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.102646112 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.104708910 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.106606960 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.106640100 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.106673002 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.106681108 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.106724977 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.109029055 CET	443	49753	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.109268904 CET	49753	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.109291077 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.109297037 CET	443	49753	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.109759092 CET	443	49753	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.110194921 CET	49753	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.110276937 CET	443	49753	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.111017942 CET	49754	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.111067057 CET	443	49754	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.111124992 CET	49754	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.111275911 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.111305952 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.111325979 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.111332893 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.111371994 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.111618042 CET	49753	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.111655951 CET	443	49753	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.112267017 CET	49754	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.112282991 CET	443	49754	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.114383936 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.118532896 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.118597984 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.118606091 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.120229959 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.120309114 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.120316029 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.123301029 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.123366117 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.123373032 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.123481989 CET	49755	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.123503923 CET	443	49755	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.123569012 CET	49755	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.124150991 CET	49755	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.124161005 CET	443	49755	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.125760078 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.125808954 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.125817060 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.129123926 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.129189014 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.129199028 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.132817984 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.132903099 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.132910013 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.134869099 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.134931087 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.134941101 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.141256094 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.141321898 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.141330004 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.144273996 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.144324064 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.144331932 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.148200035 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.148255110 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.148262978 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.154906988 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.154956102 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.154963017 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.165899992 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.165971041 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.165978909 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.172341108 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.172391891 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.172399998 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.180533886 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.180574894 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.180617094 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.180627108 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.180669069 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.182866096 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.187788010 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.187810898 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.187843084 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.187851906 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.187896967 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.192281961 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.194549084 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.194577932 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.194617033 CET	49751	443	192.168.2.5	172.253.115.106
Nov 22, 2023 17:22:05.194629908 CET	443	49751	172.253.115.106	192.168.2.5
Nov 22, 2023 17:22:05.194670916 CET	49751	443	192.168.2.5	172.253.115.106

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 22, 2023 17:21:37.736596107 CET	192.168.2.5	1.1.1.1	0xc954	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:37.736778021 CET	192.168.2.5	1.1.1.1	0xb583	Standard query (0)	clients2.google.com	65	IN (0x0001)	false
Nov 22, 2023 17:21:37.737143040 CET	192.168.2.5	1.1.1.1	0xb9bf	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:37.737409115 CET	192.168.2.5	1.1.1.1	0x376	Standard query (0)	accounts.google.com	65	IN (0x0001)	false
Nov 22, 2023 17:21:38.760102987 CET	192.168.2.5	1.1.1.1	0x8d54	Standard query (0)	report-doc.org	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:38.763427019 CET	192.168.2.5	1.1.1.1	0xc829	Standard query (0)	report-doc.org	65	IN (0x0001)	false
Nov 22, 2023 17:21:39.821238041 CET	192.168.2.5	1.1.1.1	0xfa6d	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:39.821670055 CET	192.168.2.5	1.1.1.1	0x8b3a	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Nov 22, 2023 17:21:42.164189100 CET	192.168.2.5	1.1.1.1	0xf942	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:42.164505959 CET	192.168.2.5	1.1.1.1	0x6cfc	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 22, 2023 17:21:42.272238970 CET	192.168.2.5	1.1.1.1	0x4b3a	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:42.275685072 CET	192.168.2.5	1.1.1.1	0xc41	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Nov 22, 2023 17:21:43.150752068 CET	192.168.2.5	1.1.1.1	0x628e	Standard query (0)	report-doc.org	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:43.151292086 CET	192.168.2.5	1.1.1.1	0x853b	Standard query (0)	report-doc.org	65	IN (0x0001)	false
Nov 22, 2023 17:21:43.749669075 CET	192.168.2.5	1.1.1.1	0x64c9	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:43.750020981 CET	192.168.2.5	1.1.1.1	0x347f	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Nov 22, 2023 17:21:45.837831974 CET	192.168.2.5	1.1.1.1	0xa304	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:45.838119030 CET	192.168.2.5	1.1.1.1	0xcab1	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:05.629168034 CET	192.168.2.5	1.1.1.1	0x48e0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:05.629513979 CET	192.168.2.5	1.1.1.1	0xfa8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:06.516514063 CET	192.168.2.5	1.1.1.1	0x8fa0	Standard query (0)	ogs.google.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:06.516916990 CET	192.168.2.5	1.1.1.1	0x99f6	Standard query (0)	ogs.google.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:06.524050951 CET	192.168.2.5	1.1.1.1	0x7b9e	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:06.524898052 CET	192.168.2.5	1.1.1.1	0xfff	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:06.649000883 CET	192.168.2.5	1.1.1.1	0x7cc7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:06.649194002 CET	192.168.2.5	1.1.1.1	0x6277	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:07.510504961 CET	192.168.2.5	1.1.1.1	0xbf65	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:07.510730028 CET	192.168.2.5	1.1.1.1	0xedad	Standard query (0)	play.google.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:08.375937939 CET	192.168.2.5	1.1.1.1	0xecd5	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:08.376372099 CET	192.168.2.5	1.1.1.1	0xe57e	Standard query (0)	play.google.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:09.398029089 CET	192.168.2.5	1.1.1.1	0xa5a7	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:13.157254934 CET	192.168.2.5	1.1.1.1	0x86ac	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:13.157917023 CET	192.168.2.5	1.1.1.1	0x9483	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:31.471256971 CET	192.168.2.5	1.1.1.1	0xf246	Standard query (0)	id.google.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:31.471554041 CET	192.168.2.5	1.1.1.1	0xa8de	Standard query (0)	id.google.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:36.824417114 CET	192.168.2.5	1.1.1.1	0x6534	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:36.824731112 CET	192.168.2.5	1.1.1.1	0x343c	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:37.629697084 CET	192.168.2.5	1.1.1.1	0xc09f	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:37.630000114 CET	192.168.2.5	1.1.1.1	0x5dc5	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:39.802615881 CET	192.168.2.5	1.1.1.1	0xbfed	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:39.802865028 CET	192.168.2.5	1.1.1.1	0x240e	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:45.580403090 CET	192.168.2.5	1.1.1.1	0x8789	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:45.580869913 CET	192.168.2.5	1.1.1.1	0x7f4d	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:46.601418972 CET	192.168.2.5	1.1.1.1	0x20fb	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:48.624181986 CET	192.168.2.5	1.1.1.1	0xb21	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:48.624586105 CET	192.168.2.5	1.1.1.1	0xdd15	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:49.882882118 CET	192.168.2.5	1.1.1.1	0xdbdf	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:49.883316040 CET	192.168.2.5	1.1.1.1	0xd9e8	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:52.797961950 CET	192.168.2.5	1.1.1.1	0x54dd	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:52.798146009 CET	192.168.2.5	1.1.1.1	0x401a	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Nov 22, 2023 17:22:52.807100058 CET	192.168.2.5	1.1.1.1	0xf766	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:52.807303905 CET	192.168.2.5	1.1.1.1	0x580f	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Nov 22, 2023 17:22:53.811126947 CET	192.168.2.5	1.1.1.1	0x5ce4	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:53.811408043 CET	192.168.2.5	1.1.1.1	0x2cad	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Nov 22, 2023 17:22:55.268156052 CET	192.168.2.5	1.1.1.1	0x3506	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:55.268392086 CET	192.168.2.5	1.1.1.1	0xf22f	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Nov 22, 2023 17:22:56.671343088 CET	192.168.2.5	1.1.1.1	0x3a98	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:56.671689034 CET	192.168.2.5	1.1.1.1	0xfe05	Standard query (0)	www.youtube.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Nov 22, 2023 17:21:37.910202026 CET	1.1.1.1	192.168.2.5	0xc954	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2023 17:21:37.910202026 CET	1.1.1.1	192.168.2.5	0xc954	No error (0)	clients.l.google.com		142.251.163.101	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:37.910202026 CET	1.1.1.1	192.168.2.5	0xc954	No error (0)	clients.l.google.com		142.251.163.100	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:37.910202026 CET	1.1.1.1	192.168.2.5	0xc954	No error (0)	clients.l.google.com		142.251.163.139	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:37.910202026 CET	1.1.1.1	192.168.2.5	0xc954	No error (0)	clients.l.google.com		142.251.163.102	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:37.910202026 CET	1.1.1.1	192.168.2.5	0xc954	No error (0)	clients.l.google.com		142.251.163.113	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:37.910202026 CET	1.1.1.1	192.168.2.5	0xc954	No error (0)	clients.l.google.com		142.251.163.138	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:37.910356045 CET	1.1.1.1	192.168.2.5	0xb9bf	No error (0)	accounts.google.com		172.253.122.84	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:37.911334038 CET	1.1.1.1	192.168.2.5	0xb583	No error (0)	clients2.google.com	clients.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2023 17:21:38.959721088 CET	1.1.1.1	192.168.2.5	0x8d54	No error (0)	report-doc.org		172.67.173.18	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:38.959721088 CET	1.1.1.1	192.168.2.5	0x8d54	No error (0)	report-doc.org		104.21.80.18	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:39.992351055 CET	1.1.1.1	192.168.2.5	0xfa6d	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:42.356374025 CET	1.1.1.1	192.168.2.5	0xf942	No error (0)	www.google.com		172.253.115.106	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:42.356374025 CET	1.1.1.1	192.168.2.5	0xf942	No error (0)	www.google.com		172.253.115.105	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:42.356374025 CET	1.1.1.1	192.168.2.5	0xf942	No error (0)	www.google.com		172.253.115.103	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:42.356374025 CET	1.1.1.1	192.168.2.5	0xf942	No error (0)	www.google.com		172.253.115.147	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:42.356374025 CET	1.1.1.1	192.168.2.5	0xf942	No error (0)	www.google.com		172.253.115.104	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:42.356374025 CET	1.1.1.1	192.168.2.5	0xf942	No error (0)	www.google.com		172.253.115.99	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:42.356975079 CET	1.1.1.1	192.168.2.5	0x6cfc	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 22, 2023 17:21:42.471388102 CET	1.1.1.1	192.168.2.5	0x4b3a	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:42.471388102 CET	1.1.1.1	192.168.2.5	0x4b3a	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:43.315176010 CET	1.1.1.1	192.168.2.5	0x628e	No error (0)	report-doc.org		104.21.80.18	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:43.315176010 CET	1.1.1.1	192.168.2.5	0x628e	No error (0)	report-doc.org		172.67.173.18	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:43.316119909 CET	1.1.1.1	192.168.2.5	0x853b	No error (0)	report-doc.org			65	IN (0x0001)	false
Nov 22, 2023 17:21:43.935903072 CET	1.1.1.1	192.168.2.5	0x64c9	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:43.935903072 CET	1.1.1.1	192.168.2.5	0x64c9	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:43.941885948 CET	1.1.1.1	192.168.2.5	0x347f	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Nov 22, 2023 17:21:46.026913881 CET	1.1.1.1	192.168.2.5	0xa304	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:46.026913881 CET	1.1.1.1	192.168.2.5	0xa304	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:06.698523045 CET	1.1.1.1	192.168.2.5	0x8fa0	No error (0)	ogs.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2023 17:22:06.698523045 CET	1.1.1.1	192.168.2.5	0x8fa0	No error (0)	www3.l.google.com		172.253.63.101	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:06.698523045 CET	1.1.1.1	192.168.2.5	0x8fa0	No error (0)	www3.l.google.com		172.253.63.113	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:06.698523045 CET	1.1.1.1	192.168.2.5	0x8fa0	No error (0)	www3.l.google.com		172.253.63.100	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:06.698523045 CET	1.1.1.1	192.168.2.5	0x8fa0	No error (0)	www3.l.google.com		172.253.63.139	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:06.698523045 CET	1.1.1.1	192.168.2.5	0x8fa0	No error (0)	www3.l.google.com		172.253.63.138	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:06.698523045 CET	1.1.1.1	192.168.2.5	0x8fa0	No error (0)	www3.l.google.com		172.253.63.102	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:06.698941946 CET	1.1.1.1	192.168.2.5	0x99f6	No error (0)	ogs.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2023 17:22:06.703963041 CET	1.1.1.1	192.168.2.5	0x7b9e	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2023 17:22:06.703963041 CET	1.1.1.1	192.168.2.5	0x7b9e	No error (0)	plus.l.google.com		172.253.115.102	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:06.703963041 CET	1.1.1.1	192.168.2.5	0x7b9e	No error (0)	plus.l.google.com		172.253.115.139	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:06.703963041 CET	1.1.1.1	192.168.2.5	0x7b9e	No error (0)	plus.l.google.com		172.253.115.138	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:06.703963041 CET	1.1.1.1	192.168.2.5	0x7b9e	No error (0)	plus.l.google.com		172.253.115.100	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:06.703963041 CET	1.1.1.1	192.168.2.5	0x7b9e	No error (0)	plus.l.google.com		172.253.115.101	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:06.703963041 CET	1.1.1.1	192.168.2.5	0x7b9e	No error (0)	plus.l.google.com		172.253.115.113	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:06.704459906 CET	1.1.1.1	192.168.2.5	0xfff	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2023 17:22:06.807189941 CET	1.1.1.1	192.168.2.5	0x7cc7	No error (0)	www.google.com		142.251.16.105	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:06.807189941 CET	1.1.1.1	192.168.2.5	0x7cc7	No error (0)	www.google.com		142.251.16.103	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:06.807189941 CET	1.1.1.1	192.168.2.5	0x7cc7	No error (0)	www.google.com		142.251.16.104	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:06.807189941 CET	1.1.1.1	192.168.2.5	0x7cc7	No error (0)	www.google.com		142.251.16.147	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:06.807189941 CET	1.1.1.1	192.168.2.5	0x7cc7	No error (0)	www.google.com		142.251.16.99	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:06.807189941 CET	1.1.1.1	192.168.2.5	0x7cc7	No error (0)	www.google.com		142.251.16.106	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:06.807220936 CET	1.1.1.1	192.168.2.5	0x6277	No error (0)	www.google.com			65	IN (0x0001)	false
Nov 22, 2023 17:22:07.698760986 CET	1.1.1.1	192.168.2.5	0xbf65	No error (0)	play.google.com		142.250.31.101	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:07.698760986 CET	1.1.1.1	192.168.2.5	0xbf65	No error (0)	play.google.com		142.250.31.113	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:07.698760986 CET	1.1.1.1	192.168.2.5	0xbf65	No error (0)	play.google.com		142.250.31.139	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:07.698760986 CET	1.1.1.1	192.168.2.5	0xbf65	No error (0)	play.google.com		142.250.31.138	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:07.698760986 CET	1.1.1.1	192.168.2.5	0xbf65	No error (0)	play.google.com		142.250.31.100	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:07.698760986 CET	1.1.1.1	192.168.2.5	0xbf65	No error (0)	play.google.com		142.250.31.102	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:09.565860987 CET	1.1.1.1	192.168.2.5	0xa5a7	No error (0)	play.google.com		172.253.115.138	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:09.565860987 CET	1.1.1.1	192.168.2.5	0xa5a7	No error (0)	play.google.com		172.253.115.139	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:09.565860987 CET	1.1.1.1	192.168.2.5	0xa5a7	No error (0)	play.google.com		172.253.115.102	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:09.565860987 CET	1.1.1.1	192.168.2.5	0xa5a7	No error (0)	play.google.com		172.253.115.100	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:09.565860987 CET	1.1.1.1	192.168.2.5	0xa5a7	No error (0)	play.google.com		172.253.115.113	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:09.565860987 CET	1.1.1.1	192.168.2.5	0xa5a7	No error (0)	play.google.com		172.253.115.101	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:13.324574947 CET	1.1.1.1	192.168.2.5	0x86ac	No error (0)	adservice.google.com		142.251.167.156	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:13.324574947 CET	1.1.1.1	192.168.2.5	0x86ac	No error (0)	adservice.google.com		142.251.167.157	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:13.324574947 CET	1.1.1.1	192.168.2.5	0x86ac	No error (0)	adservice.google.com		142.251.167.155	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:13.324574947 CET	1.1.1.1	192.168.2.5	0x86ac	No error (0)	adservice.google.com		142.251.167.154	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:13.326224089 CET	1.1.1.1	192.168.2.5	0x9483	No error (0)	adservice.google.com			65	IN (0x0001)	false
Nov 22, 2023 17:22:31.634759903 CET	1.1.1.1	192.168.2.5	0xf246	No error (0)	id.google.com		142.250.219.195	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:37.019685984 CET	1.1.1.1	192.168.2.5	0x6534	No error (0)	i.ytimg.com		142.250.31.119	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:37.019685984 CET	1.1.1.1	192.168.2.5	0x6534	No error (0)	i.ytimg.com		142.251.167.119	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:37.019685984 CET	1.1.1.1	192.168.2.5	0x6534	No error (0)	i.ytimg.com		172.253.115.119	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:37.019685984 CET	1.1.1.1	192.168.2.5	0x6534	No error (0)	i.ytimg.com		172.253.63.119	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:37.019685984 CET	1.1.1.1	192.168.2.5	0x6534	No error (0)	i.ytimg.com		172.253.122.119	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:37.019685984 CET	1.1.1.1	192.168.2.5	0x6534	No error (0)	i.ytimg.com		172.253.62.119	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:37.019685984 CET	1.1.1.1	192.168.2.5	0x6534	No error (0)	i.ytimg.com		142.251.16.119	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:37.817091942 CET	1.1.1.1	192.168.2.5	0xc09f	No error (0)	i.ytimg.com		172.253.63.119	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:37.817091942 CET	1.1.1.1	192.168.2.5	0xc09f	No error (0)	i.ytimg.com		142.250.31.119	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:37.817091942 CET	1.1.1.1	192.168.2.5	0xc09f	No error (0)	i.ytimg.com		172.253.115.119	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:37.817091942 CET	1.1.1.1	192.168.2.5	0xc09f	No error (0)	i.ytimg.com		172.253.122.119	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:37.817091942 CET	1.1.1.1	192.168.2.5	0xc09f	No error (0)	i.ytimg.com		142.251.167.119	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:37.817091942 CET	1.1.1.1	192.168.2.5	0xc09f	No error (0)	i.ytimg.com		172.253.62.119	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:37.817091942 CET	1.1.1.1	192.168.2.5	0xc09f	No error (0)	i.ytimg.com		142.251.16.119	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:39.985671043 CET	1.1.1.1	192.168.2.5	0xbfed	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:45.751152039 CET	1.1.1.1	192.168.2.5	0x7f4d	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2023 17:22:45.751152039 CET	1.1.1.1	192.168.2.5	0x7f4d	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Nov 22, 2023 17:22:46.757756948 CET	1.1.1.1	192.168.2.5	0x20fb	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2023 17:22:46.757756948 CET	1.1.1.1	192.168.2.5	0x20fb	No error (0)	youtube-ui.l.google.com		172.253.63.136	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:46.757756948 CET	1.1.1.1	192.168.2.5	0x20fb	No error (0)	youtube-ui.l.google.com		172.253.115.190	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:46.757756948 CET	1.1.1.1	192.168.2.5	0x20fb	No error (0)	youtube-ui.l.google.com		172.253.63.190	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:46.757756948 CET	1.1.1.1	192.168.2.5	0x20fb	No error (0)	youtube-ui.l.google.com		172.253.63.93	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:46.757756948 CET	1.1.1.1	192.168.2.5	0x20fb	No error (0)	youtube-ui.l.google.com		172.253.122.136	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:46.757756948 CET	1.1.1.1	192.168.2.5	0x20fb	No error (0)	youtube-ui.l.google.com		172.253.115.136	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:46.757756948 CET	1.1.1.1	192.168.2.5	0x20fb	No error (0)	youtube-ui.l.google.com		172.253.122.190	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:46.757756948 CET	1.1.1.1	192.168.2.5	0x20fb	No error (0)	youtube-ui.l.google.com		142.251.111.91	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:46.757756948 CET	1.1.1.1	192.168.2.5	0x20fb	No error (0)	youtube-ui.l.google.com		142.250.31.93	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:46.757756948 CET	1.1.1.1	192.168.2.5	0x20fb	No error (0)	youtube-ui.l.google.com		142.251.179.190	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:46.757756948 CET	1.1.1.1	192.168.2.5	0x20fb	No error (0)	youtube-ui.l.google.com		172.253.63.91	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:46.757756948 CET	1.1.1.1	192.168.2.5	0x20fb	No error (0)	youtube-ui.l.google.com		172.253.115.91	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:46.757756948 CET	1.1.1.1	192.168.2.5	0x20fb	No error (0)	youtube-ui.l.google.com		172.253.122.93	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:46.757756948 CET	1.1.1.1	192.168.2.5	0x20fb	No error (0)	youtube-ui.l.google.com		172.253.115.93	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:46.757756948 CET	1.1.1.1	192.168.2.5	0x20fb	No error (0)	youtube-ui.l.google.com		142.251.111.136	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:46.757756948 CET	1.1.1.1	192.168.2.5	0x20fb	No error (0)	youtube-ui.l.google.com		172.253.122.91	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:48.799206018 CET	1.1.1.1	192.168.2.5	0xb21	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2023 17:22:48.799206018 CET	1.1.1.1	192.168.2.5	0xb21	No error (0)	youtube-ui.l.google.com		142.251.111.93	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:48.799206018 CET	1.1.1.1	192.168.2.5	0xb21	No error (0)	youtube-ui.l.google.com		142.251.163.190	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:48.799206018 CET	1.1.1.1	192.168.2.5	0xb21	No error (0)	youtube-ui.l.google.com		142.251.163.91	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:48.799206018 CET	1.1.1.1	192.168.2.5	0xb21	No error (0)	youtube-ui.l.google.com		142.251.167.190	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:48.799206018 CET	1.1.1.1	192.168.2.5	0xb21	No error (0)	youtube-ui.l.google.com		142.251.16.91	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:48.799206018 CET	1.1.1.1	192.168.2.5	0xb21	No error (0)	youtube-ui.l.google.com		142.251.16.136	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:48.799206018 CET	1.1.1.1	192.168.2.5	0xb21	No error (0)	youtube-ui.l.google.com		172.253.62.91	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:48.799206018 CET	1.1.1.1	192.168.2.5	0xb21	No error (0)	youtube-ui.l.google.com		172.253.63.190	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:48.799206018 CET	1.1.1.1	192.168.2.5	0xb21	No error (0)	youtube-ui.l.google.com		142.251.163.136	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:48.799206018 CET	1.1.1.1	192.168.2.5	0xb21	No error (0)	youtube-ui.l.google.com		142.251.167.93	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:48.799206018 CET	1.1.1.1	192.168.2.5	0xb21	No error (0)	youtube-ui.l.google.com		142.251.167.136	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:48.799206018 CET	1.1.1.1	192.168.2.5	0xb21	No error (0)	youtube-ui.l.google.com		142.251.16.93	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:48.799206018 CET	1.1.1.1	192.168.2.5	0xb21	No error (0)	youtube-ui.l.google.com		172.253.63.91	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:48.799206018 CET	1.1.1.1	192.168.2.5	0xb21	No error (0)	youtube-ui.l.google.com		142.251.16.190	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:48.799206018 CET	1.1.1.1	192.168.2.5	0xb21	No error (0)	youtube-ui.l.google.com		142.251.167.91	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:48.799206018 CET	1.1.1.1	192.168.2.5	0xb21	No error (0)	youtube-ui.l.google.com		142.250.31.136	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:48.799535990 CET	1.1.1.1	192.168.2.5	0xdd15	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2023 17:22:48.799535990 CET	1.1.1.1	192.168.2.5	0xdd15	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Nov 22, 2023 17:22:50.079796076 CET	1.1.1.1	192.168.2.5	0xdbdf	No error (0)	i.ytimg.com		142.251.16.119	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:50.079796076 CET	1.1.1.1	192.168.2.5	0xdbdf	No error (0)	i.ytimg.com		172.253.122.119	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:50.079796076 CET	1.1.1.1	192.168.2.5	0xdbdf	No error (0)	i.ytimg.com		142.251.163.119	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:50.079796076 CET	1.1.1.1	192.168.2.5	0xdbdf	No error (0)	i.ytimg.com		172.253.115.119	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:50.079796076 CET	1.1.1.1	192.168.2.5	0xdbdf	No error (0)	i.ytimg.com		142.251.111.119	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:50.079796076 CET	1.1.1.1	192.168.2.5	0xdbdf	No error (0)	i.ytimg.com		172.253.63.119	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:50.079796076 CET	1.1.1.1	192.168.2.5	0xdbdf	No error (0)	i.ytimg.com		172.253.62.119	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:50.079796076 CET	1.1.1.1	192.168.2.5	0xdbdf	No error (0)	i.ytimg.com		142.251.167.119	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:53.002470970 CET	1.1.1.1	192.168.2.5	0xf766	No error (0)	static.doubleclick.net		142.251.163.149	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:53.002470970 CET	1.1.1.1	192.168.2.5	0xf766	No error (0)	static.doubleclick.net		142.251.163.148	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:53.946463108 CET	1.1.1.1	192.168.2.5	0x5ce4	No error (0)	googleads.g.doubleclick.net		172.253.62.157	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:53.946463108 CET	1.1.1.1	192.168.2.5	0x5ce4	No error (0)	googleads.g.doubleclick.net		172.253.62.154	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:53.946892023 CET	1.1.1.1	192.168.2.5	0x2cad	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Nov 22, 2023 17:22:55.450386047 CET	1.1.1.1	192.168.2.5	0x3506	No error (0)	googleads.g.doubleclick.net		142.251.16.157	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:55.450386047 CET	1.1.1.1	192.168.2.5	0x3506	No error (0)	googleads.g.doubleclick.net		142.251.16.156	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:55.450664997 CET	1.1.1.1	192.168.2.5	0xf22f	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Nov 22, 2023 17:22:56.854195118 CET	1.1.1.1	192.168.2.5	0xfe05	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2023 17:22:56.854195118 CET	1.1.1.1	192.168.2.5	0xfe05	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Nov 22, 2023 17:22:56.854441881 CET	1.1.1.1	192.168.2.5	0x3a98	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Nov 22, 2023 17:22:56.854441881 CET	1.1.1.1	192.168.2.5	0x3a98	No error (0)	youtube-ui.l.google.com		172.253.63.91	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:56.854441881 CET	1.1.1.1	192.168.2.5	0x3a98	No error (0)	youtube-ui.l.google.com		172.253.63.136	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:56.854441881 CET	1.1.1.1	192.168.2.5	0x3a98	No error (0)	youtube-ui.l.google.com		142.250.31.190	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:56.854441881 CET	1.1.1.1	192.168.2.5	0x3a98	No error (0)	youtube-ui.l.google.com		172.253.63.93	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:56.854441881 CET	1.1.1.1	192.168.2.5	0x3a98	No error (0)	youtube-ui.l.google.com		172.253.122.190	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:56.854441881 CET	1.1.1.1	192.168.2.5	0x3a98	No error (0)	youtube-ui.l.google.com		142.250.31.91	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:56.854441881 CET	1.1.1.1	192.168.2.5	0x3a98	No error (0)	youtube-ui.l.google.com		172.253.63.190	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:56.854441881 CET	1.1.1.1	192.168.2.5	0x3a98	No error (0)	youtube-ui.l.google.com		172.253.115.91	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:56.854441881 CET	1.1.1.1	192.168.2.5	0x3a98	No error (0)	youtube-ui.l.google.com		172.253.115.93	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:56.854441881 CET	1.1.1.1	192.168.2.5	0x3a98	No error (0)	youtube-ui.l.google.com		172.253.122.91	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:56.854441881 CET	1.1.1.1	192.168.2.5	0x3a98	No error (0)	youtube-ui.l.google.com		172.253.115.136	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:56.854441881 CET	1.1.1.1	192.168.2.5	0x3a98	No error (0)	youtube-ui.l.google.com		142.251.179.190	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:56.854441881 CET	1.1.1.1	192.168.2.5	0x3a98	No error (0)	youtube-ui.l.google.com		172.253.122.136	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:56.854441881 CET	1.1.1.1	192.168.2.5	0x3a98	No error (0)	youtube-ui.l.google.com		172.253.122.93	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:56.854441881 CET	1.1.1.1	192.168.2.5	0x3a98	No error (0)	youtube-ui.l.google.com		172.253.115.190	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:56.854441881 CET	1.1.1.1	192.168.2.5	0x3a98	No error (0)	youtube-ui.l.google.com		142.250.31.136	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49706	142.251.163.101	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:38 UTC	752	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-117.0.5938.132 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:38 UTC	732	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 73 63 72 69 70 74 2d 73 72 63 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 6e 6f 6e 63 65 2d 59 32 41 74 62 6e 71 78 4f 58 32 36 6f 59 71 33 66 61 54 78 50 41 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 68 74 74 70 73 3a 20 68 74 74 70 3a 3b 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 63 6c 69 65 6e 74 75 70 64 61 74 65 2d 61 75 73 2f 31 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c Data Ascii: HTTP/1.1 200 OKContent-Security-Policy: script-src 'report-sample' 'nonce-Y2AtbnqxOX26oYq3faTxPA' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1Cache-Control
2023-11-22 16:21:38 UTC	520	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 31 36 39 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 33 30 30 39 38 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6169" elapsed_seconds="30098"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2023-11-22 16:21:38 UTC	200	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2023-11-22 16:21:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49705	172.253.122.84	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:38 UTC	680	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2023-11-22 16:21:38 UTC	1	OUT	Data Raw: 20 Data Ascii:
2023-11-22 16:21:38 UTC	1627	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 Data Ascii: HTTP/1.1 200 OKContent-Type: application/json; charset=utf-8Access-Control-Allow-Origin: https://www.google.comAccess-Control-Allow-Credentials: trueX-Content-Type-Options: nosniffCache-Control: no-cache, no-store, max-age=0, must-revalidatePr
2023-11-22 16:21:38 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2023-11-22 16:21:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49709	172.67.173.18	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:39 UTC	699	OUT	GET /w/files/doc_order_11.22.2023_0368201058.js HTTP/1.1 Host: report-doc.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:39 UTC	1223	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 33 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 35 32 34 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 45 6d 62 65 64 64 65 72 2d 50 6f 6c 69 63 79 3a 20 72 65 71 75 69 72 65 2d 63 6f 72 70 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 Data Ascii: HTTP/1.1 403 ForbiddenDate: Wed, 22 Nov 2023 16:21:39 GMTContent-Type: text/html; charset=UTF-8Content-Length: 6524Connection: closeCross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy
2023-11-22 16:21:39 UTC	146	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta ht
2023-11-22 16:21:39 UTC	1369	IN	Data Raw: 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d Data Ascii: tp-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name="viewport" content="width=device-width,initial-scale=1"><link href="/cdn-cgi/styles/challenges.css" rel="stylesheet"><meta http-equiv="refresh" content=
2023-11-22 16:21:39 UTC	1369	IN	Data Raw: 6e 32 70 39 52 48 36 6c 73 78 53 47 65 66 37 62 61 70 4e 4a 79 6d 35 30 71 74 45 51 73 68 36 30 64 78 5f 6f 57 66 6f 52 44 4e 52 78 75 35 6a 72 55 53 55 50 75 30 50 4f 6e 59 5a 35 34 79 6d 65 73 46 54 5a 47 50 35 5f 55 66 72 4f 6a 33 45 34 4d 53 57 4a 64 76 77 4a 54 57 35 32 33 62 73 65 6f 2d 35 4b 34 35 56 76 66 61 52 58 53 62 33 72 6a 35 71 6c 56 68 59 78 41 63 33 6f 64 55 66 33 4f 39 64 4e 4a 62 6b 69 50 38 76 6a 47 4a 75 66 64 51 44 78 6d 68 32 54 46 62 74 39 36 48 35 77 6c 34 53 77 33 59 52 66 78 47 64 44 63 5a 6b 4a 33 57 69 68 58 64 63 56 55 2d 41 6b 73 72 58 4a 73 32 32 41 77 6c 61 68 41 68 36 79 55 55 52 56 67 51 50 5a 62 4d 45 6f 7a 63 75 66 4a 7a 73 53 4a 6f 6e 6f 65 71 2d 59 77 52 52 78 55 61 5f 2d 71 78 59 46 39 63 35 4c 68 58 50 41 51 6c 34 Data Ascii: n2p9RH6lsxSGef7bapNJym50qtEQsh60dx_oWfoRDNRxu5jrUSUPu0POnYZ54ymesFTZGP5_UfrOj3E4MSWJdvwJTW523bseo-5K45VvfaRXSb3rj5qlVhYxAc3odUf3O9dNJbkiP8vjGJufdQDxmh2TFbt96H5wl4Sw3YRfxGdDcZkJ3WihXdcVU-AksrXJs22AwlahAh6yUURVgQPZbMEozcufJzsSJonoeq-YwRRxUa_-qxYF9c5LhXPAQl4
2023-11-22 16:21:39 UTC	1369	IN	Data Raw: 51 4e 65 72 30 50 36 34 4a 67 41 33 39 31 44 6b 4e 55 66 32 6d 53 34 38 73 44 43 6f 66 59 77 41 62 62 37 79 6b 6d 5f 74 71 79 6d 63 34 76 75 35 4b 52 64 5a 42 5a 75 49 65 7a 67 4e 76 6c 37 37 77 76 76 5a 79 43 2d 42 46 4f 2d 49 69 63 4a 58 31 78 4f 38 45 4f 45 65 52 70 6c 36 39 36 6a 55 4a 6c 4c 5a 42 66 67 49 55 51 55 32 6c 51 73 79 5f 73 79 70 34 5f 78 4e 6f 33 5a 68 63 44 64 36 41 57 49 62 6d 38 4d 67 32 49 5f 38 49 57 31 66 33 4e 7a 36 5a 56 4b 73 4d 36 2d 7a 46 49 54 5f 79 45 54 6e 33 49 51 6c 36 74 51 4c 47 4f 7a 7a 4e 49 33 73 51 66 32 7a 42 44 6e 31 5f 4d 51 2d 36 57 42 71 57 4c 6d 42 5f 4e 47 4f 38 63 61 34 70 70 46 6d 61 5a 6b 31 51 65 4e 78 51 44 36 46 7a 50 71 2d 55 50 2d 31 76 63 70 4e 58 64 62 33 70 44 47 53 67 49 6b 67 36 4c 4b 59 76 6e 32 Data Ascii: QNer0P64JgA391DkNUf2mS48sDCofYwAbb7ykm_tqymc4vu5KRdZBZuIezgNvl77wvvZyC-BFO-IicJX1xO8EOEeRpl696jUJlLZBfgIUQU2lQsy_syp4_xNo3ZhcDd6AWIbm8Mg2I_8IW1f3Nz6ZVKsM6-zFIT_yETn3IQl6tQLGOzzNI3sQf2zBDn1_MQ-6WBqWLmB_NGO8ca4ppFmaZk1QeNxQD6FzPq-UP-1vcpNXdb3pDGSgIkg6LKYvn2
2023-11-22 16:21:39 UTC	1369	IN	Data Raw: 4c 59 30 37 36 4a 34 44 69 4b 57 62 43 6b 78 59 34 41 6d 44 63 53 4f 75 71 42 4d 62 57 2d 71 62 78 2d 2d 6d 59 74 73 71 46 6c 69 51 58 61 62 55 58 36 71 38 32 59 57 6a 72 30 69 32 33 2d 48 6e 2d 6d 42 46 41 58 42 7a 4c 68 74 43 76 4c 30 6a 66 48 72 45 67 52 75 51 57 67 58 49 6b 7a 4a 41 37 53 34 4f 69 78 78 2d 4e 62 65 6e 41 7a 77 5a 53 71 6c 47 50 6b 51 62 4e 6e 72 58 72 50 53 64 6f 54 50 5f 4a 69 51 41 2d 63 54 54 34 4d 4e 6b 53 78 78 77 36 4b 71 72 4e 5a 74 4b 71 39 33 63 4f 6c 6b 6c 41 53 67 55 43 39 70 52 6f 30 73 67 77 73 51 33 61 54 58 39 6c 35 6f 70 32 46 5a 36 45 79 61 55 2d 68 73 6e 65 51 53 5f 6c 6a 64 67 53 6b 79 55 52 69 34 75 4f 30 39 46 4a 56 64 66 6a 44 67 78 4b 37 76 69 35 62 44 52 61 38 22 2c 63 52 71 3a 20 7b 72 75 3a 20 27 61 48 52 30 Data Ascii: LY076J4DiKWbCkxY4AmDcSOuqBMbW-qbx--mYtsqFliQXabUX6q82YWjr0i23-Hn-mBFAXBzLhtCvL0jfHrEgRuQWgXIkzJA7S4Oixx-NbenAzwZSqlGPkQbNnrXrPSdoTP_JiQA-cTT4MNkSxxw6KqrNZtKq93cOlklASgUC9pRo0sgwsQ3aTX9l5op2FZ6EyaU-hsneQS_ljdgSkyURi4uO09FJVdfjDgxK7vi5bDRa8",cRq: {ru: 'aHR0
2023-11-22 16:21:39 UTC	902	IN	Data Raw: 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 63 70 6f 2e 73 72 63 20 3d 20 27 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 68 2f 67 2f 6f 72 63 68 65 73 74 72 61 74 65 2f 63 68 6c 5f 70 61 67 65 2f 76 31 3f 72 61 79 3d 38 32 61 32 38 31 62 61 63 38 38 39 30 38 30 38 27 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 20 3d 3d 3d 20 27 27 20 26 26 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 23 27 29 20 21 3d 3d 20 2d 31 20 3f 20 27 23 27 20 3a 20 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 Data Ascii: cument.createElement('script');cpo.src = '/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=82a281bac8890808';window._cf_chl_opt.cOgUHash = location.hash === '' && location.href.indexOf('#') !== -1 ? '#' : location.hash;window._cf_chl_opt.cOgUQu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49712	35.190.80.1	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:40 UTC	543	OUT	OPTIONS /report/v3?s=sHE3%2F5fh5%2Fx2rUD27PEld7L2NWuihxittppZNThVXzeM1DEr%2FP1CZw3V1NkKXGSjcrC8Rz%2BLLk3%2F14mOyt5U2t6mSG0kZi%2BgrMHH8XGKckcR2BC1sXpFU1HBuFm4cheUAA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://report-doc.org Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:40 UTC	336	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 30 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 6d 61 78 2d 61 67 65 3a 20 38 36 34 30 30 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 50 4f 53 54 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2c 20 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 0d 0a 64 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 30 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c Data Ascii: HTTP/1.1 200 OKcontent-length: 0access-control-max-age: 86400access-control-allow-methods: POST, OPTIONSaccess-control-allow-origin: *access-control-allow-headers: content-type, content-lengthdate: Wed, 22 Nov 2023 16:21:40 GMTVia: 1.1 googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49710	172.67.173.18	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:40 UTC	598	OUT	GET /cdn-cgi/styles/challenges.css HTTP/1.1 Host: report-doc.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:40 UTC	410	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 63 73 73 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 36 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 31 36 20 4e 6f 76 20 32 30 32 33 20 32 31 3a 35 35 3a 34 38 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 36 35 35 36 38 66 65 34 2d 31 39 63 38 22 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 32 61 32 38 31 63 31 37 39 35 34 30 38 30 30 2d 49 41 44 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:40 GMTContent-Type: text/cssContent-Length: 6600Connection: closeLast-Modified: Thu, 16 Nov 2023 21:55:48 GMTETag: "65568fe4-19c8"Server: cloudflareCF-RAY: 82a281c179540800-IADX-Frame-Options:
2023-11-22 16:21:40 UTC	959	IN	Data Raw: 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 63 6f 6c 6f 72 3a 23 33 31 33 31 33 31 7d 68 74 6d 6c 2c 62 75 74 74 6f 6e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 79 73 74 65 6d 2d 75 69 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 52 6f 62 6f 74 6f 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 41 72 69 61 6c 2c 4e 6f 74 6f 20 53 61 6e 73 2c 73 61 6e 73 2d 73 65 72 69 66 2c 22 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 2c 22 Data Ascii: *{box-sizing:border-box;margin:0;padding:0}html{line-height:1.15;-webkit-text-size-adjust:100%;color:#313131}html,button{font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,"Apple Color Emoji","
2023-11-22 16:21:40 UTC	1369	IN	Data Raw: 65 3a 32 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 2e 68 32 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 2e 63 6f 72 65 2d 6d 73 67 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 62 6f 64 79 2d 74 65 78 74 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 65 78 70 61 6e 64 61 62 6c 65 2d 74 69 74 6c 65 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: e:2.5rem;font-weight:500}.h2{line-height:2.25rem;font-size:1.5rem;font-weight:500}.core-msg{line-height:2.25rem;font-size:1.5rem;font-weight:400}.body-text{line-height:1.25rem;font-size:1rem;font-weight:400}.expandable-title{line-height:1.5rem;font-weight
2023-11-22 16:21:40 UTC	1369	IN	Data Raw: 51 68 47 6d 7a 53 49 34 51 68 48 47 68 56 75 66 7a 34 51 4a 2f 76 36 48 75 67 36 64 4b 30 45 4b 33 59 75 4d 38 2f 33 4c 78 35 68 33 5a 30 53 54 79 77 65 35 35 6f 78 52 65 6a 4d 35 51 6f 34 61 41 74 5a 38 65 54 42 75 57 70 36 64 6c 33 49 58 67 66 6e 6e 4c 70 79 7a 42 43 46 63 74 48 6f 6d 6e 53 6f 70 65 6a 4c 68 48 2f 33 41 4d 66 45 4d 6e 64 54 4a 41 41 41 41 41 45 6c 46 54 6b 53 75 51 6d 43 43 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 7d 2e 74 65 78 74 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 65 78 70 61 6e 64 61 62 6c 65 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 68 65 69 67 68 74 2c 62 6f 72 64 65 72 2d 6c 65 66 74 20 2e 32 73 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 2e 31 32 35 72 65 6d 20 73 6f Data Ascii: QhGmzSI4QhHGhVufz4QJ/v6Hug6dK0EK3YuM8/3Lx5h3Z0STywe55oxRejM5Qo4aAtZ8eTBuWp6dl3IXgfnnLpyzBCFctHomnSopejLhH/3AMfEMndTJAAAAAElFTkSuQmCC);background-size:cover}.text-center{text-align:center}.expandable{transition:height,border-left .2s;border-left:.125rem so
2023-11-22 16:21:40 UTC	1369	IN	Data Raw: 64 74 68 3a 20 37 32 30 70 78 29 7b 2e 63 61 70 74 63 68 61 2d 70 72 6f 6d 70 74 3a 6e 6f 74 28 2e 68 69 64 64 65 6e 29 7b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 7d 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 3a 32 72 65 6d 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 35 31 63 33 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 70 6f 77 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 6f 6f 74 65 72 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 78 2d 77 Data Ascii: dth: 720px){.captcha-prompt:not(.hidden){flex-wrap:wrap;justify-content:center}}.pow-button{margin:2rem 0;background-color:#0051c3;color:#fff}.pow-button:hover{border-color:#003681;background-color:#003681;color:#fff}.footer{margin:0 auto;width:100%;max-w
2023-11-22 16:21:40 UTC	1369	IN	Data Raw: 6e 66 69 6e 69 74 65 7d 2e 6c 64 73 2d 72 69 6e 67 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 31 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 34 35 73 7d 2e 6c 64 73 2d 72 69 6e 67 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 33 73 7d 2e 6c 64 73 2d 72 69 6e 67 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 33 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 31 35 73 7d 40 6b 65 79 66 72 61 6d 65 73 20 6c 64 73 2d 72 69 6e 67 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 Data Ascii: nfinite}.lds-ring div:nth-child(1){animation-delay:-.45s}.lds-ring div:nth-child(2){animation-delay:-.3s}.lds-ring div:nth-child(3){animation-delay:-.15s}@keyframes lds-ring{0%{transform:rotate(0)}to{transform:rotate(360deg)}}@media screen and (-ms-high-c
2023-11-22 16:21:40 UTC	165	IN	Data Raw: 37 34 61 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 6c 69 67 68 74 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 65 78 70 61 6e 64 61 62 6c 65 2e 65 78 70 61 6e 64 65 64 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 23 30 30 35 31 63 33 7d Data Ascii: 74a}body.light .big-button,body.light .pow-button{border-color:#003681;background-color:#003681;color:#fff}body.light .expandable.expanded{border-left-color:#0051c3}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49714	35.190.80.1	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:41 UTC	486	OUT	POST /report/v3?s=sHE3%2F5fh5%2Fx2rUD27PEld7L2NWuihxittppZNThVXzeM1DEr%2FP1CZw3V1NkKXGSjcrC8Rz%2BLLk3%2F14mOyt5U2t6mSG0kZi%2BgrMHH8XGKckcR2BC1sXpFU1HBuFm4cheUAA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 428 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:41 UTC	428	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 34 32 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 30 30 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 37 33 2e 31 38 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 65 70 6f 72 74 2d 64 6f 63 2e 6f 72 67 Data Ascii: [{"age":42,"body":{"elapsed_time":1004,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.173.18","status_code":403,"type":"http.error"},"type":"network-error","url":"https://report-doc.org
2023-11-22 16:21:41 UTC	168	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 30 0d 0a 64 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 31 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 32 35 39 32 30 30 30 2c 68 33 2d 32 39 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 32 35 39 32 30 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKcontent-length: 0date: Wed, 22 Nov 2023 16:21:41 GMTVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49715	172.67.173.18	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:41 UTC	714	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=82a281bac8890808 HTTP/1.1 Host: report-doc.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js?__cf_chl_rt_tk=XuxhaDrbm05aROwP4yp3oEYzeKDRZb4cDxLYnrPY9lU-1700670099-0-gaNycGzNDJA Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:41 UTC	670	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 52 65 Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:41 GMTContent-Type: application/javascript; charset=UTF-8Transfer-Encoding: chunkedConnection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Re
2023-11-22 16:21:41 UTC	699	IN	Data Raw: 37 64 31 31 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 53 52 3d 74 72 75 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 61 2c 66 79 2c 66 7a 2c 66 41 2c 66 47 2c 66 48 2c 66 49 2c 66 4a 2c 66 4b 2c 66 4c 2c 66 4d 2c 66 4e 2c 66 4f 2c 66 50 2c 66 51 2c 66 52 2c 66 53 2c 66 54 2c 66 55 2c 66 56 2c 66 57 2c 66 58 2c 66 59 2c 66 5a 2c 67 30 2c 67 31 2c 67 32 2c 67 33 2c 67 34 2c 67 35 2c 67 36 2c 67 37 2c 67 38 2c 67 39 2c 67 61 2c 67 62 2c 67 63 2c 67 64 2c 67 65 2c 67 66 2c 67 67 2c 67 68 2c 67 69 2c 67 6a 2c 67 6b 2c 67 6c 2c 67 6d 2c 67 6e 2c 67 6f 2c 67 70 2c 67 71 2c 67 72 2c 67 73 2c 67 74 2c 67 75 2c 67 76 2c 67 77 2c 67 78 2c 67 79 2c 67 7a 2c 67 Data Ascii: 7d11window._cf_chl_opt.uaSR=true;window._cf_chl_opt.uaO=false;~function(ia,fy,fz,fA,fG,fH,fI,fJ,fK,fL,fM,fN,fO,fP,fQ,fR,fS,fT,fU,fV,fW,fX,fY,fZ,g0,g1,g2,g3,g4,g5,g6,g7,g8,g9,ga,gb,gc,gd,ge,gf,gg,gh,gi,gj,gk,gl,gm,gn,go,gp,gq,gr,gs,gt,gu,gv,gw,gx,gy,gz,g
2023-11-22 16:21:41 UTC	1369	IN	Data Raw: 69 61 28 31 38 37 32 29 5d 2c 66 41 3d 66 75 6e 63 74 69 6f 6e 28 69 62 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 69 62 3d 69 61 2c 64 3d 7b 27 74 4f 71 43 43 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 50 6f 5a 72 42 27 3a 69 62 28 31 37 32 35 29 2c 27 79 6c 6e 70 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 5e 69 7d 2c 27 68 68 65 6d 56 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 2c 6a 29 7b 72 65 74 75 72 6e 20 68 28 69 2c 6a 29 7d 2c 27 57 4d 65 76 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 2c 6a 29 7b 72 65 74 75 72 6e 20 68 28 69 2c 6a 29 7d 2c 27 47 67 49 70 79 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 6d 68 68 47 72 27 Data Ascii: ia(1872)],fA=function(ib,d,e,f,g){return ib=ia,d={'tOqCC':function(h,i){return i==h},'PoZrB':ib(1725),'ylnpQ':function(h,i){return h^i},'hhemV':function(h,i,j){return h(i,j)},'WMevJ':function(h,i,j){return h(i,j)},'GgIpy':function(h,i){return h-i},'mhhGr'
2023-11-22 16:21:41 UTC	1369	IN	Data Raw: 44 50 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 42 44 48 6a 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 73 4b 6f 78 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 65 75 54 58 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4d 47 66 70 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 74 63 6b 41 75 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 67 77 62 64 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 67 47 74 50 63 27 3a 66 75 6e 63 74 69 6f Data Ascii: DPb':function(h,i){return i&h},'BDHja':function(h,i){return h==i},'sKoxA':function(h,i){return i==h},'euTXR':function(h,i){return h(i)},'MGfpU':function(h,i){return i*h},'tckAu':function(h,i){return h(i)},'gwbdU':function(h,i){return i!=h},'gGtPc':functio
2023-11-22 16:21:41 UTC	1369	IN	Data Raw: 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 20 66 6f 72 28 4f 3d 64 5b 69 65 28 31 39 31 34 29 5d 5b 69 65 28 35 36 39 29 5d 28 27 7c 27 29 2c 50 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 4f 5b 50 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 69 66 28 31 36 3e 61 75 29 51 3d 61 76 5b 61 77 2b 61 78 5d 3b 65 6c 73 65 20 66 6f 72 28 52 3d 69 65 28 38 39 34 29 5b 69 65 28 35 36 39 29 5d 28 27 7c 27 29 2c 53 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 52 5b 53 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 51 3d 64 5b 69 65 28 31 33 33 36 29 5d 28 62 46 28 51 2c 31 37 29 5e 62 47 28 51 2c 31 39 29 2c 51 3e 3e 3e 31 30 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 54 3d 62 4b 5b 62 4c 2d 31 35 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 Data Ascii: >>=1,s++);}else for(O=d[ie(1914)][ie(569)]('\|'),P=0;!![];){switch(O[P++]){case'0':if(16>au)Q=av[aw+ax];else for(R=ie(894)[ie(569)]('\|'),S=0;!![];){switch(R[S++]){case'0':Q=d[ie(1336)](bF(Q,17)^bG(Q,19),Q>>>10);continue;case'1':T=bK[bL-15];continue;case'2'
2023-11-22 16:21:41 UTC	1369	IN	Data Raw: 2c 46 2b 2b 29 2c 78 5b 4c 5d 3d 45 2b 2b 2c 53 74 72 69 6e 67 28 4b 29 29 7d 69 66 28 27 27 21 3d 3d 43 29 7b 69 66 28 4f 62 6a 65 63 74 5b 69 65 28 39 38 38 29 5d 5b 69 65 28 31 30 34 37 29 5d 5b 69 65 28 31 33 32 34 29 5d 28 42 2c 43 29 29 7b 69 66 28 64 5b 69 65 28 38 31 36 29 5d 28 32 35 36 2c 43 5b 69 65 28 35 34 35 29 5d 28 30 29 29 29 7b 66 6f 72 28 73 3d 30 3b 73 3c 46 3b 48 3c 3c 3d 31 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 69 65 28 37 32 39 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 69 65 28 35 34 35 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 64 5b 69 65 28 32 30 34 37 29 5d 28 48 3c 3c 31 2e 37 33 2c 4d 26 31 29 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 69 65 28 37 32 39 29 5d 28 Data Ascii: ,F++),x[L]=E++,String(K))}if(''!==C){if(Object[ie(988)][ie(1047)][ie(1324)](B,C)){if(d[ie(816)](256,C[ie(545)](0))){for(s=0;s<F;H<<=1,I==j-1?(I=0,G[ie(729)](o(H)),H=0):I++,s++);for(M=C[ie(545)](0),s=0;8>s;H=d[ie(2047)](H<<1.73,M&1),I==j-1?(I=0,G[ie(729)](
2023-11-22 16:21:41 UTC	1369	IN	Data Raw: 64 5b 69 6a 28 39 31 37 29 5d 29 72 65 74 75 72 6e 20 68 5b 69 6a 28 35 34 35 29 5d 28 69 29 3b 65 6c 73 65 7b 66 6f 72 28 44 3d 6a 5b 69 6a 28 32 31 33 38 29 5d 28 6a 5b 69 6a 28 34 38 30 29 5d 28 74 68 69 73 2e 68 5b 38 31 5e 74 68 69 73 2e 67 5d 5b 33 5d 2c 31 38 34 2b 74 68 69 73 2e 68 5b 38 31 5e 74 68 69 73 2e 67 5d 5b 31 5d 5b 69 6a 28 35 34 35 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 38 31 2e 36 37 5d 5b 30 5d 2b 2b 29 26 32 35 35 29 2c 38 29 7c 74 68 69 73 2e 68 5b 38 31 2e 36 34 5e 74 68 69 73 2e 67 5d 5b 33 5d 5e 6a 5b 69 6a 28 37 39 34 29 5d 28 74 68 69 73 2e 68 5b 6a 5b 69 6a 28 31 31 32 38 29 5d 28 38 31 2c 74 68 69 73 2e 67 29 5d 5b 31 5d 5b 69 6a 28 35 34 35 29 5d 28 74 68 69 73 2e 68 5b 6a 5b 69 6a 28 34 38 30 29 5d 28 38 31 2c Data Ascii: d[ij(917)])return h[ij(545)](i);else{for(D=j[ij(2138)](j[ij(480)](this.h[81^this.g][3],184+this.h[81^this.g][1][ij(545)](this.h[this.g^81.67][0]++)&255),8)\|this.h[81.64^this.g][3]^j[ij(794)](this.h[j[ij(1128)](81,this.g)][1][ij(545)](this.h[j[ij(480)](81,
2023-11-22 16:21:41 UTC	1369	IN	Data Raw: 3d 30 2c 4b 3d 4d 61 74 68 5b 69 6b 28 31 36 34 38 29 5d 28 32 2c 43 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4c 3d 48 26 47 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 28 64 5b 69 6b 28 31 32 38 34 29 5d 28 30 2c 4c 29 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 4d 3d 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 6b 28 31 36 34 38 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 64 5b 69 6b 28 31 30 31 38 29 5d 28 46 2c 4b 29 3b 4c 3d 48 26 47 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 64 5b 69 6b 28 37 32 35 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 69 6b 28 31 32 33 36 29 5d 28 64 5b 69 6b 28 39 31 34 29 5d 28 30 2c 4c 29 3f 31 3a 30 2c 46 29 2c 46 Data Ascii: =0,K=Math[ik(1648)](2,C),F=1;K!=F;L=H&G,H>>=1,0==H&&(H=j,G=o(I++)),J\|=(d[ik(1284)](0,L)?1:0)*F,F<<=1);switch(M=J){case 0:for(J=0,K=Math[ik(1648)](2,8),F=1;d[ik(1018)](F,K);L=H&G,H>>=1,0==H&&(H=j,G=d[ik(725)](o,I++)),J\|=d[ik(1236)](d[ik(914)](0,L)?1:0,F),F
2023-11-22 16:21:41 UTC	1369	IN	Data Raw: 2c 68 5b 69 72 28 31 34 32 36 29 5d 3d 69 72 28 35 37 33 29 2c 68 5b 69 72 28 35 33 39 29 5d 3d 69 72 28 31 33 30 36 29 2c 68 5b 69 72 28 31 33 33 31 29 5d 3d 69 72 28 31 39 38 33 29 2c 68 5b 69 72 28 34 37 37 29 5d 3d 69 72 28 31 37 30 39 29 2c 68 29 3b 74 72 79 7b 69 66 28 69 72 28 31 33 33 30 29 21 3d 3d 69 5b 69 72 28 37 34 36 29 5d 29 7b 69 66 28 6a 3d 66 79 5b 69 72 28 31 36 30 37 29 5d 5b 69 72 28 31 34 35 33 29 5d 3f 27 68 2f 27 2b 66 79 5b 69 72 28 31 36 30 37 29 5d 5b 69 72 28 31 34 35 33 29 5d 2b 27 2f 27 3a 27 27 2c 6b 3d 69 5b 69 72 28 31 33 30 37 29 5d 28 69 5b 69 72 28 31 33 30 37 29 5d 28 69 5b 69 72 28 31 33 30 37 29 5d 28 69 5b 69 72 28 31 33 30 37 29 5d 28 69 5b 69 72 28 31 37 33 37 29 5d 28 69 72 28 31 30 35 31 29 2b 6a 2b 69 72 28 32 Data Ascii: ,h[ir(1426)]=ir(573),h[ir(539)]=ir(1306),h[ir(1331)]=ir(1983),h[ir(477)]=ir(1709),h);try{if(ir(1330)!==i[ir(746)]){if(j=fy[ir(1607)][ir(1453)]?'h/'+fy[ir(1607)][ir(1453)]+'/':'',k=i[ir(1307)](i[ir(1307)](i[ir(1307)](i[ir(1307)](i[ir(1737)](ir(1051)+j+ir(2
2023-11-22 16:21:41 UTC	1369	IN	Data Raw: 26 26 6e 5b 73 5b 69 75 28 31 34 35 31 29 5d 5d 5b 69 75 28 39 37 32 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 69 75 28 37 30 37 29 2c 27 77 69 64 67 65 74 49 64 27 3a 6f 5b 69 75 28 31 36 30 37 29 5d 5b 69 75 28 37 38 38 29 5d 2c 27 65 76 65 6e 74 27 3a 73 5b 69 75 28 31 32 35 34 29 5d 7d 2c 27 2a 27 29 7d 29 29 3a 66 79 5b 69 74 28 31 31 34 38 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 76 29 7b 69 76 3d 69 74 2c 66 79 5b 69 76 28 31 32 36 35 29 5d 28 29 7d 2c 31 65 33 29 3a 28 6d 3d 5b 6a 5b 69 74 28 31 30 33 38 29 5d 28 69 74 28 36 38 38 29 2c 64 29 2c 69 74 28 31 35 37 32 29 2b 65 2c 6a 5b 69 74 28 31 35 39 39 29 5d 28 69 74 28 31 37 34 39 29 2c 66 29 2c 69 74 28 34 38 34 29 2b 67 2c 6a 5b 69 74 28 37 30 33 29 5d 28 69 74 28 31 38 31 32 29 2c 4a 53 4f 4e 5b Data Ascii: &&n[s[iu(1451)]][iu(972)]({'source':iu(707),'widgetId':o[iu(1607)][iu(788)],'event':s[iu(1254)]},'*')})):fy[it(1148)](function(iv){iv=it,fy[iv(1265)]()},1e3):(m=[j[it(1038)](it(688),d),it(1572)+e,j[it(1599)](it(1749),f),it(484)+g,j[it(703)](it(1812),JSON[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49716	172.67.173.18	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:42 UTC	858	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1016394738:1700666829:-yVJKTyB4G9hzKxVgcHjtvuTc6QxdkOn-XEeN9njovw/82a281bac8890808/b991f7e9b718311 HTTP/1.1 Host: report-doc.org Connection: keep-alive Content-Length: 1817 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: b991f7e9b718311 sec-ch-ua-platform: "Windows" Accept: / Origin: https://report-doc.org Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_chl_2=b991f7e9b718311
2023-11-22 16:21:42 UTC	1817	OUT	Data Raw: 76 5f 38 32 61 32 38 31 62 61 63 38 38 39 30 38 30 38 3d 32 43 6f 62 69 62 58 62 34 62 39 62 31 62 4f 2d 6a 2d 62 57 2d 62 4c 4d 24 6a 76 55 78 69 36 59 61 62 75 4d 62 59 39 6f 59 4a 62 79 6f 75 49 59 78 62 24 31 5a 62 76 4e 59 69 59 76 2d 75 4e 7a 72 6f 59 6f 33 69 78 59 6e 33 59 4b 4d 64 75 7a 68 6a 64 38 59 64 45 39 59 5a 62 24 51 59 54 66 53 68 4e 72 59 75 33 69 34 59 6e 6d 5a 76 79 6c 4f 61 59 59 44 59 57 4d 57 77 59 4d 35 6e 5a 59 65 76 33 69 49 73 4a 62 24 39 59 7a 36 24 63 61 33 59 75 48 59 73 31 4d 4e 79 33 59 67 4f 65 62 4f 78 67 4d 59 54 78 25 32 62 59 68 36 52 4a 32 33 24 6f 38 76 2d 5a 6a 35 5a 52 74 64 66 43 65 76 68 4a 6e 64 44 43 31 7a 5a 2d 59 75 6a 52 59 69 46 59 4c 2d 77 6f 34 24 2b 7a 74 6a 49 6a 75 6f 59 58 38 54 37 38 59 59 52 6c 24 Data Ascii: v_82a281bac8890808=2CobibXb4b9b1bO-j-bW-bLM$jvUxi6YabuMbY9oYJbyouIYxb$1ZbvNYiYv-uNzroYo3ixYn3YKMduzhjd8YdE9YZb$QYTfShNrYu3i4YnmZvylOaYYDYWMWwYM5nZYev3iIsJb$9Yz6$ca3YuHYs1MNy3YgOebOxgMYTx%2bYh6RJ23$o8v-Zj5ZRtdfCevhJndDC1zZ-YujRYiFYL-wo4$+ztjIjuoYX8T78YYRl$
2023-11-22 16:21:43 UTC	654	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 66 2d 63 68 6c 2d 67 65 6e 3a 20 54 78 6f 59 72 72 54 58 78 54 2b 6b 6a 4f 51 43 52 6d 49 41 39 68 77 41 65 6f 4f 4b 33 37 77 7a 71 74 39 61 2b 78 70 79 37 59 56 39 6f 51 41 54 4a 33 32 53 64 58 58 6f 46 69 33 5a 4b 7a 4e 7a 24 78 36 50 72 50 34 4d 6d 53 73 77 65 66 33 43 51 38 6a 2f 31 7a 67 3d 3d 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:42 GMTContent-Type: text/plain; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-chl-gen: TxoYrrTXxT+kjOQCRmIA9hwAeoOK37wzqt9a+xpy7YV9oQATJ32SdXXoFi3ZKzNz$x6PrP4MmSswef3CQ8j/1zg==Report-To:
2023-11-22 16:21:43 UTC	715	IN	Data Raw: 33 31 31 63 0d 0a 6b 34 43 56 75 35 53 30 6a 6e 36 7a 67 73 6d 59 75 4b 75 71 6a 73 37 44 6b 64 4b 2b 72 4d 53 68 72 71 4f 74 31 37 4c 59 73 61 2b 64 75 63 75 66 75 38 4f 79 30 63 57 33 74 74 58 4d 34 4c 37 74 7a 38 79 74 78 4e 50 54 39 65 76 76 38 4c 50 53 75 65 66 71 73 4c 58 41 75 4f 4b 36 33 51 44 56 43 41 50 43 38 76 7a 49 78 73 77 4e 34 38 72 67 44 76 45 50 35 51 67 51 35 4e 72 59 30 68 63 48 33 39 62 34 48 4f 49 53 49 2b 50 6d 46 42 33 35 39 52 76 74 4c 51 37 39 4d 66 45 77 4b 67 55 58 45 54 63 77 44 79 59 79 47 78 67 71 44 68 6a 2b 4c 6a 45 78 46 68 49 34 47 30 4d 32 4b 77 59 4e 4f 67 70 4e 55 55 42 4b 4a 55 73 78 56 31 41 79 52 53 6f 2f 53 45 68 4b 58 7a 56 43 47 30 55 37 49 79 59 33 61 47 56 4a 5a 45 35 46 54 57 35 77 61 6d 78 6b 51 43 70 32 62 Data Ascii: 311ck4CVu5S0jn6zgsmYuKuqjs7DkdK+rMShrqOt17LYsa+ducufu8Oy0cW3ttXM4L7tz8ytxNPT9evv8LPSuefqsLXAuOK63QDVCAPC8vzIxswN48rgDvEP5QgQ5NrY0hcH39b4HOISI+PmFB359RvtLQ79MfEwKgUXETcwDyYyGxgqDhj+LjExFhI4G0M2KwYNOgpNUUBKJUsxV1AyRSo/SEhKXzVCG0U7IyY3aGVJZE5FTW5wamxkQCp2b
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 64 62 46 6e 38 66 48 74 4d 65 4f 31 5a 36 39 31 74 2b 55 30 2b 4c 68 34 37 4b 77 34 73 4b 30 32 73 6a 65 74 39 37 42 71 37 33 69 36 2f 50 55 36 73 37 5a 32 4c 6a 4a 31 65 7a 6f 75 2b 72 56 35 66 6a 45 41 41 55 44 32 66 6a 56 44 65 7a 36 43 66 6f 45 36 39 54 70 38 64 2f 51 47 68 54 36 47 73 2f 33 49 64 72 61 48 2f 6b 67 48 68 38 70 39 79 6a 39 49 66 73 71 41 68 33 35 4d 52 45 66 4c 52 38 41 4e 67 77 46 4f 76 49 57 43 67 6f 66 4d 67 73 76 2b 55 59 62 2b 43 42 44 47 30 67 6f 4c 67 6c 4b 54 52 41 4b 4c 53 67 77 4c 31 67 75 44 7a 52 56 4a 6c 42 4a 4c 6a 34 68 4f 55 38 35 59 6d 64 57 57 6b 51 69 57 7a 52 41 4e 32 41 6e 4c 32 6c 6d 4d 46 34 79 5a 6d 73 35 62 30 68 54 65 6e 39 75 53 48 42 77 58 58 41 33 66 6a 6c 68 52 48 53 4d 66 57 56 48 68 6c 70 5a 65 32 78 79 Data Ascii: dbFn8fHtMeO1Z691t+U0+Lh47Kw4sK02sjet97Bq73i6/PU6s7Z2LjJ1ezou+rV5fjEAAUD2fjVDez6CfoE69Tp8d/QGhT6Gs/3IdraH/kgHh8p9yj9IfsqAh35MREfLR8ANgwFOvIWCgofMgsv+UYb+CBDG0goLglKTRAKLSgwL1guDzRVJlBJLj4hOU85YmdWWkQiWzRAN2AnL2lmMF4yZms5b0hTen9uSHBwXXA3fjlhRHSMfWVHhlpZe2xy
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 2f 58 6c 36 6d 65 75 71 75 5a 33 75 58 55 78 73 53 69 30 38 6e 42 71 2b 6a 69 79 4d 4b 36 76 4c 44 72 38 4d 6e 30 74 4d 62 37 74 65 54 78 30 74 33 36 33 4c 33 56 30 39 6b 49 33 38 55 4c 34 4f 76 44 33 77 66 6f 35 42 4c 78 37 4e 4c 72 36 77 54 59 39 77 6f 4c 36 52 66 71 30 65 6f 52 37 52 6f 53 38 2f 44 2b 2f 4f 55 63 42 43 55 6c 2b 69 30 43 48 51 49 75 38 75 33 30 37 79 45 49 42 78 6f 33 47 66 6b 52 2f 52 73 63 4e 69 30 53 52 6b 49 70 53 79 45 73 42 43 42 48 4b 53 4e 53 4d 69 30 54 4c 46 4a 45 47 54 68 4b 53 79 70 58 4b 78 49 72 54 79 38 34 51 54 4d 77 57 6b 55 6d 57 6c 35 66 50 54 6c 45 5a 44 35 74 64 57 6c 45 59 6b 41 7a 53 47 6f 34 62 31 6c 64 54 57 39 6a 59 58 70 69 59 48 70 37 63 34 56 48 68 48 35 4d 65 34 6d 4c 57 35 46 66 55 56 39 4e 69 56 4e 58 56 Data Ascii: /Xl6meuquZ3uXUxsSi08nBq+jiyMK6vLDr8Mn0tMb7teTx0t363L3V09kI38UL4OvD3wfo5BLx7NLr6wTY9woL6Rfq0eoR7RoS8/D+/OUcBCUl+i0CHQIu8u307yEIBxo3GfkR/RscNi0SRkIpSyEsBCBHKSNSMi0TLFJEGThKSypXKxIrTy84QTMwWkUmWl5fPTlEZD5tdWlEYkAzSGo4b1ldTW9jYXpiYHp7c4VHhH5Me4mLW5FfUV9NiVNXV
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 68 31 62 2b 78 31 4b 66 48 33 4b 6d 6c 70 4f 37 4a 78 50 48 47 37 50 48 79 78 76 65 75 75 4c 53 7a 73 64 4c 4b 37 64 62 65 79 2b 43 37 77 77 41 46 78 74 37 41 34 4e 66 56 42 63 7a 4d 43 74 6f 46 45 77 72 67 34 67 63 4a 34 2b 6e 6b 33 50 48 71 35 78 33 67 41 66 58 34 41 77 45 42 34 50 34 45 34 79 30 57 49 78 45 43 48 4f 34 67 38 54 4d 4e 37 66 67 37 4a 78 66 79 43 50 30 38 4d 53 38 55 47 76 34 33 49 41 4c 2b 41 55 59 71 4b 44 38 34 4b 69 5a 50 53 51 30 69 54 6b 41 74 4f 45 5a 51 55 6a 77 76 48 31 78 4b 59 55 73 63 50 46 52 64 55 6c 6f 33 4e 45 52 4f 4f 7a 63 77 55 47 55 79 4c 69 31 33 55 54 64 70 53 31 68 37 57 6d 64 4c 50 47 78 66 56 6b 32 43 65 54 36 43 58 56 39 6e 52 59 35 4e 6b 48 6c 6c 5a 6c 32 41 69 59 42 4a 5a 55 39 70 69 46 52 57 61 32 64 66 64 31 Data Ascii: h1b+x1KfH3KmlpO7JxPHG7PHyxveuuLSzsdLK7dbey+C7wwAFxt7A4NfVBczMCtoFEwrg4gcJ4+nk3PHq5x3gAfX4AwEB4P4E4y0WIxECHO4g8TMN7fg7JxfyCP08MS8UGv43IAL+AUYqKD84KiZPSQ0iTkAtOEZQUjwvH1xKYUscPFRdUlo3NEROOzcwUGUyLi13UTdpS1h7WmdLPGxfVk2CeT6CXV9nRY5NkHllZl2AiYBJZU9piFRWa2dfd1
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 78 61 6a 58 31 4e 33 72 37 4b 6d 76 34 4f 44 75 70 36 7a 75 77 36 2f 6e 75 73 62 46 2b 77 47 32 74 39 72 66 7a 64 33 57 42 51 48 48 32 2f 76 37 42 63 6f 50 30 4f 66 63 38 67 37 67 7a 65 63 5a 39 51 37 62 42 76 33 57 45 2f 76 39 47 68 38 59 42 39 34 66 45 51 76 34 46 79 41 4e 44 43 4d 4a 34 2b 34 73 49 42 45 6d 4e 66 49 6e 44 50 55 64 42 78 6b 39 47 41 70 41 52 44 59 35 47 43 49 71 50 52 68 49 51 45 55 4c 53 44 6c 4a 4a 55 42 49 53 7a 68 4e 4d 55 5a 61 55 6b 68 58 4b 69 30 62 54 7a 51 65 52 53 39 42 5a 55 41 79 57 55 5a 69 5a 56 42 43 58 6d 5a 55 5a 44 56 78 4b 56 5a 73 63 31 68 7a 54 6d 30 34 63 6b 41 36 4f 58 30 37 65 32 2b 41 61 48 75 43 69 56 70 6e 6b 47 69 46 58 55 79 55 61 70 5a 75 64 32 78 74 6d 32 79 53 6a 58 31 79 63 49 79 5a 6a 35 42 6d 5a 49 65 Data Ascii: xajX1N3r7Kmv4ODup6zuw6/nusbF+wG2t9rfzd3WBQHH2/v7BcoP0Ofc8g7gzecZ9Q7bBv3WE/v9Gh8YB94fEQv4FyANDCMJ4+4sIBEmNfInDPUdBxk9GApARDY5GCIqPRhIQEULSDlJJUBISzhNMUZaUkhXKi0bTzQeRS9BZUAyWUZiZVBCXmZUZDVxKVZsc1hzTm04ckA6OX07e2+AaHuCiVpnkGiFXUyUapZud2xtm2ySjX1ycIyZj5BmZIe
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 65 69 2f 71 4c 47 78 79 50 66 54 74 63 62 44 38 64 33 48 31 62 72 39 74 2f 44 78 31 74 67 46 2b 64 61 2f 34 77 72 66 77 77 34 47 43 2b 62 74 7a 68 4c 6f 37 67 62 4b 36 4f 4d 4e 32 2f 4d 51 35 77 76 72 2f 67 54 65 38 66 48 33 2b 41 44 7a 49 2f 76 32 4d 50 73 62 2b 79 4d 71 44 77 67 6c 4b 76 45 49 4b 76 49 2b 43 2f 55 67 4c 42 63 63 48 77 51 56 49 68 78 42 41 45 6f 67 54 68 77 46 44 79 6f 67 51 42 4d 56 4a 53 4d 77 51 79 59 31 52 6c 45 79 58 46 5a 54 47 47 4d 63 4d 7a 68 6c 58 6b 55 33 57 6a 52 57 4f 7a 68 51 61 30 41 38 54 45 68 45 51 47 70 4a 53 58 6f 37 58 6b 31 4c 61 6d 4a 54 63 33 46 46 55 33 52 48 61 56 64 55 69 6f 35 66 57 6f 70 38 5a 6f 52 50 61 6d 4a 76 68 6c 4a 75 5a 56 4a 63 61 6d 71 4b 67 58 5a 75 64 46 64 79 70 47 64 35 64 4a 70 30 66 6e 65 75 Data Ascii: ei/qLGxyPfTtcbD8d3H1br9t/Dx1tgF+da/4wrfww4GC+btzhLo7gbK6OMN2/MQ5wvr/gTe8fH3+ADzI/v2MPsb+yMqDwglKvEIKvI+C/UgLBccHwQVIhxBAEogThwFDyogQBMVJSMwQyY1RlEyXFZTGGMcMzhlXkU3WjRWOzhQa0A8TEhEQGpJSXo7Xk1LamJTc3FFU3RHaVdUio5fWop8ZoRPamJvhlJuZVJcamqKgXZudFdypGd5dJp0fneu
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 62 69 34 36 2f 55 30 66 6e 59 39 64 33 62 75 66 43 2b 31 38 37 33 2b 76 50 44 30 2b 45 4b 36 41 62 5a 41 41 44 73 41 4d 59 4f 46 39 4d 44 39 68 6f 62 45 77 77 50 44 68 2f 34 41 75 37 73 48 78 58 77 46 77 6f 72 38 78 76 39 49 2f 6b 66 4b 52 2f 39 49 79 33 6f 41 69 63 78 4e 77 59 72 4d 69 73 4b 4c 7a 59 5a 44 6a 4d 36 2b 42 49 33 50 6b 63 57 4f 30 4d 37 47 6a 39 48 4b 52 35 44 53 78 63 6b 4c 69 4d 61 56 54 4a 57 52 31 77 65 56 6c 78 51 5a 6c 34 6c 4e 55 4a 70 4a 6d 52 48 62 6b 59 2f 53 44 46 65 50 30 63 31 5a 48 46 34 65 30 64 6d 54 30 70 78 62 34 42 64 50 56 46 64 59 48 78 56 52 6e 52 32 64 31 78 59 66 6e 46 68 6a 30 74 6c 5a 6f 43 4c 63 6d 69 45 56 5a 75 59 65 6c 35 31 6f 46 6c 61 6a 6e 64 7a 6b 4a 39 35 70 32 4f 4e 70 34 6d 4c 63 4b 6d 4e 62 49 47 6b 6f Data Ascii: bi46/U0fnY9d3bufC+1873+vPD0+EK6AbZAADsAMYOF9MD9hobEwwPDh/4Au7sHxXwFwor8xv9I/kfKR/9Iy3oAicxNwYrMisKLzYZDjM6+BI3PkcWO0M7Gj9HKR5DSxckLiMaVTJWR1weVlxQZl4lNUJpJmRHbkY/SDFeP0c1ZHF4e0dmT0pxb4BdPVFdYHxVRnR2d1xYfnFhj0tlZoCLcmiEVZuYel51oFlajndzkJ95p2ONp4mLcKmNbIGko
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 54 78 39 33 31 39 74 54 41 34 4d 50 36 33 66 33 54 39 39 2f 72 34 77 41 4d 41 50 72 62 78 63 73 42 36 39 48 50 34 63 7a 75 2b 66 62 58 39 4f 72 31 37 64 34 67 44 2b 44 6e 48 42 50 36 34 66 59 73 48 41 66 6e 34 7a 44 71 36 78 63 51 38 6a 51 57 38 78 49 48 4c 50 6f 52 4f 54 55 58 4a 53 4a 43 48 30 4d 4a 49 53 59 5a 50 6b 30 4b 53 43 5a 53 4b 55 31 55 56 77 30 53 4c 54 42 47 58 42 6f 76 53 6a 45 59 57 32 4d 76 50 6b 59 6e 4f 47 51 6c 61 55 68 4a 50 43 38 71 4d 55 49 77 4e 45 74 74 53 45 39 58 53 58 6c 32 53 31 46 77 66 48 56 63 59 49 46 35 55 46 43 44 66 58 70 48 68 34 46 2b 68 6f 75 46 68 58 53 50 69 59 6c 6f 6b 34 32 4e 6b 70 65 52 6b 49 43 62 6c 5a 52 30 6e 35 6d 62 69 4b 4f 64 6e 36 4b 6e 6f 61 4b 63 61 5a 75 4f 5a 57 71 4c 67 6f 47 47 67 6f 74 35 65 62 Data Ascii: Tx9319tTA4MP63f3T99/r4wAMAPrbxcsB69HP4czu+fbX9Or17d4gD+DnHBP64fYsHAfn4zDq6xcQ8jQW8xIHLPoROTUXJSJCH0MJISYZPk0KSCZSKU1UVw0SLTBGXBovSjEYW2MvPkYnOGQlaUhJPC8qMUIwNEttSE9XSXl2S1FwfHVcYIF5UFCDfXpHh4F+houFhXSPiYlok42NkpeRkICblZR0n5mbiKOdn6KnoaKcaZuOZWqLgoGGgot5eb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49719	104.17.2.184	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:42 UTC	577	OUT	GET /turnstile/v0/g/9914b343/api.js?onload=FAIg1&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://report-doc.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:43 UTC	296	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 34 32 35 34 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 32 61 32 38 31 64 31 30 65 33 38 35 Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:43 GMTContent-Type: application/javascript; charset=UTF-8Content-Length: 34254Connection: closeAccess-Control-Allow-Origin: *Cache-Control: max-age=31536000Server: cloudflareCF-RAY: 82a281d10e385
2023-11-22 16:21:43 UTC	1073	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 4b 65 28 65 2c 6e 2c 69 2c 66 2c 75 2c 79 2c 6d 29 7b 74 72 79 7b 76 61 72 20 6c 3d 65 5b 79 5d 28 6d 29 2c 64 3d 6c 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 68 29 7b 69 28 68 29 3b 72 65 74 75 72 6e 7d 6c 2e 64 6f 6e 65 3f 6e 28 64 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 64 29 2e 74 68 65 6e 28 66 2c 75 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 65 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 69 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 66 2c 75 29 7b 76 61 72 20 79 3d 65 2e 61 70 70 6c 79 28 6e 2c 69 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ke(e,n,i,f,u,y,m){try{var l=e[y](m),d=l.value}catch(h){i(h);return}l.done?n(d):Promise.resolve(d).then(f,u)}function Ze(e){return function(){var n=this,i=arguments;return new Promise(function(f,u){var y=e.apply(n,i);funct
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 21 31 2c 6d 2c 6c 3b 74 72 79 7b 66 6f 72 28 69 3d 69 2e 63 61 6c 6c 28 65 29 3b 21 28 75 3d 28 6d 3d 69 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 66 2e 70 75 73 68 28 6d 2e 76 61 6c 75 65 29 2c 21 28 6e 26 26 66 2e 6c 65 6e 67 74 68 3d 3d 3d 6e 29 29 3b 75 3d 21 30 29 3b 7d 63 61 74 63 68 28 64 29 7b 79 3d 21 30 2c 6c 3d 64 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 21 75 26 26 69 2e 72 65 74 75 72 6e 21 3d 6e 75 6c 6c 26 26 69 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 79 29 74 68 72 6f 77 20 6c 7d 7d 72 65 74 75 72 6e 20 66 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 74 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e Data Ascii: !1,m,l;try{for(i=i.call(e);!(u=(m=i.next()).done)&&(f.push(m.value),!(n&&f.length===n));u=!0);}catch(d){y=!0,l=d}finally{try{!u&&i.return!=null&&i.return()}finally{if(y)throw l}}return f}}function rt(){throw new TypeError("Invalid attempt to destructure n
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 20 37 3a 76 3d 75 2e 6f 70 73 2e 70 6f 70 28 29 2c 75 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 64 65 66 61 75 6c 74 3a 69 66 28 6c 3d 75 2e 74 72 79 73 2c 21 28 6c 3d 6c 2e 6c 65 6e 67 74 68 3e 30 26 26 6c 5b 6c 2e 6c 65 6e 67 74 68 2d 31 5d 29 26 26 28 76 5b 30 5d 3d 3d 3d 36 7c 7c 76 5b 30 5d 3d 3d 3d 32 29 29 7b 75 3d 30 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 76 5b 30 5d 3d 3d 3d 33 26 26 28 21 6c 7c 7c 76 5b 31 5d 3e 6c 5b 30 5d 26 26 76 5b 31 5d 3c 6c 5b 33 5d 29 29 7b 75 2e 6c 61 62 65 6c 3d 76 5b 31 5d 3b 62 72 65 61 6b 7d 69 66 28 76 5b 30 5d 3d 3d 3d 36 26 26 75 2e 6c 61 62 65 6c 3c 6c 5b 31 5d 29 7b 75 2e 6c 61 62 65 6c 3d 6c 5b 31 5d 2c 6c 3d 76 3b 62 72 65 61 6b 7d 69 66 28 6c 26 Data Ascii: ;continue;case 7:v=u.ops.pop(),u.trys.pop();continue;default:if(l=u.trys,!(l=l.length>0&&l[l.length-1])&&(v[0]===6\|\|v[0]===2)){u=0;continue}if(v[0]===3&&(!l\|\|v[1]>l[0]&&v[1]<l[3])){u.label=v[1];break}if(v[0]===6&&u.label<l[1]){u.label=l[1],l=v;break}if(l&
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 63 75 74 65 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 44 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 5f 46 41 49 4c 53 3d 22 61 6c 77 61 79 73 2d 66 61 69 6c 73 22 2c 65 2e 53 4f 4d 45 54 49 4d 45 53 5f 46 41 49 4c 53 3d 22 73 6f 6d 65 74 69 6d 65 73 2d 66 61 69 6c 73 22 2c 65 2e 54 4f 4f 5f 53 4c 4f 57 3d 22 74 6f 6f 2d 73 6c 6f 77 22 2c 65 2e 4f 54 48 45 52 3d 22 6f 74 68 65 72 22 7d 29 28 44 65 7c 7c 28 44 65 3d 7b 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 64 61 72 6b 22 2c 22 6c 69 67 68 74 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 65 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 Data Ascii: cute"})(Q\|\|(Q={}));var De;(function(e){e.ALWAYS_FAILS="always-fails",e.SOMETIMES_FAILS="sometimes-fails",e.TOO_SLOW="too-slow",e.OTHER="other"})(De\|\|(De={}));function Ue(e){return M(["auto","dark","light"],e)}function Me(e){return M(["auto","never"],e)}fu
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 66 2c 75 29 7b 72 65 74 75 72 6e 20 66 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 75 2c 66 7d 2c 71 28 65 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 74 28 65 2c 6e 29 7b 69 66 28 74 79 70 65 6f 66 20 6e 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 6e 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 26 26 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 Data Ascii: function(f,u){return f.__proto__=u,f},q(e,n)}function _t(e,n){if(typeof n!="function"&&n!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(n&&n.prototype,{constructor:{value:e,writable:!0,configurab
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 75 2c 66 29 7d 2c 45 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 28 6b 28 6e 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 6e 3a 78 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 78 74 28 65 29 7b 76 61 72 20 6e 3d 62 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 4a 28 65 29 2c 75 3b 69 66 28 6e 29 7b 76 61 72 20 79 3d 4a 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 75 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 66 2c 61 72 67 75 6d 65 6e 74 73 2c 79 29 7d 65 6c 73 65 20 75 3d 66 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 67 74 28 74 68 69 Data Ascii: u,f)},Ee(e)}function gt(e,n){return n&&(k(n)==="object"\|\|typeof n=="function")?n:xe(e)}function xt(e){var n=be();return function(){var f=J(e),u;if(n){var y=J(this).constructor;u=Reflect.construct(f,arguments,y)}else u=f.apply(this,arguments);return gt(thi
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 6f 6e 74 69 6e 75 65 7d 69 66 28 28 64 2e 69 73 45 78 65 63 75 74 69 6e 67 7c 7c 21 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 7c 7c 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 26 26 21 64 2e 69 73 53 74 61 6c 65 26 26 21 64 2e 69 73 45 78 65 63 75 74 65 64 29 26 26 64 2e 77 61 74 63 68 63 61 74 2e 6c 61 73 74 41 63 6b 65 64 53 65 71 21 3d 3d 30 26 26 64 2e 77 61 74 63 68 63 61 74 2e 6c 61 73 74 41 63 6b 65 64 53 65 71 3c 64 2e 77 61 74 63 68 63 61 74 2e 73 65 71 2d 31 2d 56 74 29 7b 64 2e 77 61 74 63 68 63 61 74 2e 6c 61 73 74 41 63 6b 65 64 53 65 71 3d 30 2c 64 2e 77 61 74 63 68 63 61 74 2e 73 65 71 3d 30 2c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 54 75 72 6e 73 74 69 6c 65 20 57 69 64 67 65 74 20 73 65 65 6d 20 74 6f 20 68 61 76 65 20 63 72 61 73 68 Data Ascii: ontinue}if((d.isExecuting\|\|!d.isInitialized\|\|d.isInitialized&&!d.isStale&&!d.isExecuted)&&d.watchcat.lastAckedSeq!==0&&d.watchcat.lastAckedSeq<d.watchcat.seq-1-Vt){d.watchcat.lastAckedSeq=0,d.watchcat.seq=0,console.log("Turnstile Widget seem to have crash
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 66 65 65 64 62 61 63 6b 22 2c 6c 2e 69 64 3d 22 63 66 2d 66 72 2d 69 64 22 2c 6c 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 43 6f 6c 6f 72 3d 22 23 30 30 30 30 30 30 22 2c 6c 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 34 35 30 70 78 22 2c 6c 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 33 34 30 70 78 22 2c 6c 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 6c 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 32 30 22 2c 6c 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 57 69 64 74 68 3d 22 31 70 78 22 2c 6c 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 43 6f 6c 6f 72 3d 22 23 30 30 30 22 2c 6c 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 53 74 79 6c 65 3d 22 73 6f 6c 69 64 22 2c 6c 2e 73 Data Ascii: cf-turnstile-feedback",l.id="cf-fr-id",l.style.borderColor="#000000",l.style.width="450px",l.style.height="340px",l.style.position="absolute",l.style.zIndex="21474836420",l.style.borderWidth="1px",l.style.borderColor="#000",l.style.borderStyle="solid",l.s
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 66 69 6c 6c 22 2c 22 23 61 61 61 61 61 61 22 29 2c 76 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 2d 77 69 64 74 68 22 2c 22 30 22 29 2c 68 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 76 29 3b 76 61 72 20 77 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 22 6c 69 6e 65 22 29 3b 77 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 2d 77 69 64 74 68 22 2c 22 33 22 29 2c 77 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 22 2c 22 23 66 66 66 22 29 2c 77 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 69 6c 6c 22 2c 22 6e 6f 6e 65 22 29 2c 77 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 78 31 22 2c 22 Data Ascii: fill","#aaaaaa"),v.setAttribute("stroke-width","0"),h.appendChild(v);var w=document.createElementNS("http://www.w3.org/2000/svg","line");w.setAttribute("stroke-width","3"),w.setAttribute("stroke","#fff"),w.setAttribute("fill","none"),w.setAttribute("x1","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49720	23.54.46.90	443

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:43 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2023-11-22 16:21:43 UTC	435	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 70 69 56 65 72 73 69 6f 6e 3a 20 44 69 73 74 72 69 62 75 74 65 20 31 2e 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 61 74 74 61 63 68 6d 65 6e 74 3b 20 66 69 6c 65 6e 61 6d 65 3d 63 6f 6e 66 69 67 2e 6a 73 6f 6e 3b 20 66 69 6c 65 6e 61 6d 65 2a 3d 55 54 46 2d 38 27 27 63 6f 6e 66 69 67 2e 6a 73 6f 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 45 54 61 67 3a 20 22 30 78 36 34 36 36 37 46 37 30 37 46 46 30 37 44 36 32 42 37 33 33 44 42 43 42 37 39 45 46 45 33 38 35 35 45 36 38 38 36 43 39 39 37 35 42 30 43 30 42 34 36 37 44 34 36 32 33 31 42 33 46 41 35 45 37 22 0d 0a 4c 61 73 74 2d 4d 6f 64 69 Data Ascii: HTTP/1.1 200 OKApiVersion: Distribute 1.1Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.jsonContent-Type: application/octet-streamETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7"Last-Modi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49717	172.67.173.18	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:43 UTC	660	OUT	GET /favicon.ico HTTP/1.1 Host: report-doc.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_chl_2=b991f7e9b718311
2023-11-22 16:21:44 UTC	728	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Strict-Transport-Security: max-a
2023-11-22 16:21:44 UTC	71	IN	Data Raw: 34 31 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 41<script>window.location.href = "https://www.google.com";</script>
2023-11-22 16:21:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49721	104.21.80.18	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:43 UTC	510	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1016394738:1700666829:-yVJKTyB4G9hzKxVgcHjtvuTc6QxdkOn-XEeN9njovw/82a281bac8890808/b991f7e9b718311 HTTP/1.1 Host: report-doc.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_chl_2=b991f7e9b718311
2023-11-22 16:21:44 UTC	713	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 6c 58 Data Ascii: HTTP/1.1 400 Bad RequestDate: Wed, 22 Nov 2023 16:21:43 GMTContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: lX
2023-11-22 16:21:44 UTC	12	IN	Data Raw: 37 0d 0a 69 6e 76 61 6c 69 64 0d 0a Data Ascii: 7invalid
2023-11-22 16:21:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49722	23.54.46.90	443

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:43 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2023-11-22 16:21:44 UTC	804	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 70 69 56 65 72 73 69 6f 6e 3a 20 44 69 73 74 72 69 62 75 74 65 20 31 2e 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 61 74 74 61 63 68 6d 65 6e 74 3b 20 66 69 6c 65 6e 61 6d 65 3d 63 6f 6e 66 69 67 2e 6a 73 6f 6e 3b 20 66 69 6c 65 6e 61 6d 65 2a 3d 55 54 46 2d 38 27 27 63 6f 6e 66 69 67 2e 6a 73 6f 6e 0d 0a 45 54 61 67 3a 20 22 30 78 36 34 36 36 37 46 37 30 37 46 46 30 37 44 36 32 42 37 33 33 44 42 43 42 37 39 45 46 45 33 38 35 35 45 36 38 38 36 43 39 39 37 35 42 30 43 30 42 34 36 37 44 34 36 32 33 31 42 33 46 41 35 45 37 22 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 75 65 2c 20 31 36 20 4d 61 79 20 32 30 31 37 20 32 32 3a 35 38 3a 30 30 20 47 4d 54 0d 0a 53 65 72 Data Ascii: HTTP/1.1 200 OKApiVersion: Distribute 1.1Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.jsonETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7"Last-Modified: Tue, 16 May 2017 22:58:00 GMTSer
2023-11-22 16:21:44 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49723	104.17.3.184	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:44 UTC	754	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:44 UTC	921	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0content-securit
2023-11-22 16:21:44 UTC	448	IN	Data Raw: 37 63 31 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c Data Ascii: 7c16<!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scal
2023-11-22 16:21:44 UTC	1369	IN	Data Raw: 3c 73 74 79 6c 65 3e 40 6b 65 79 66 72 61 6d 65 73 20 72 6f 74 61 74 65 20 7b 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 74 72 6f 6b 65 20 7b 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 20 30 3b 0a 20 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 20 7b 0a 20 20 30 25 2c 20 31 30 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 20 20 35 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 2c 20 31 29 3b 0a 20 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 20 7b Data Ascii: <style>@keyframes rotate { 100% { transform: rotate(360deg); }}@keyframes stroke { 100% { stroke-dashoffset: 0; }}@keyframes scale { 0%, 100% { transform: none; } 50% { transform: scale3d(1, 1, 1); }}@keyframes fill {
2023-11-22 16:21:44 UTC	1369	IN	Data Raw: 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 38 70 78 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 7d 0a 0a 23 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 30 65 30 65 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c Data Ascii: font-size: 16px; font-weight: 700;}p { margin: 8px 0; text-align: center; font-size: 20px; font-weight: 400;}#content { display: flex; align-items: center; justify-content: space-between; border: 1px solid #e0e0e0; background-col
2023-11-22 16:21:44 UTC	1369	IN	Data Raw: 72 63 6c 65 20 7b 0a 20 20 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 20 30 3b 0a 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 32 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 30 33 38 31 32 37 3b 0a 20 20 66 69 6c 6c 3a 20 23 30 33 38 31 32 37 3b 0a 7d 0a 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 2e 70 31 20 7b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 3b 0a 7d 0a 2e 74 68 65 6d 65 2d Data Ascii: rcle { stroke-dashoffset: 0; stroke-width: 2; stroke-miterlimit: 10; stroke: #038127; fill: #038127;}.theme-dark #success-icon { box-shadow: inset 0 0 0 #0aa937;}.theme-dark #success-icon .p1 { box-shadow: inset 0 0 0 #0aa937;}.theme-
2023-11-22 16:21:44 UTC	1369	IN	Data Raw: 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 68 6f 76 65 72 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 Data Ascii: #challenge-error-title a { color: #bbb;}.theme-dark #challenge-error-title a:visited, .theme-dark #challenge-error-title a:link { color: #bbb;}.theme-dark #challenge-error-title a:hover, .theme-dark #challenge-error-title a:active, .theme-dark #c
2023-11-22 16:21:44 UTC	1369	IN	Data Raw: 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 66 66 61 32 39 39 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 61 32 39 39 3b 0a 7d 0a 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 Data Ascii: : #bbb;}.theme-dark #expired-refresh-link:active, .theme-dark #expired-refresh-link:hover, .theme-dark #expired-refresh-link:focus { color: #949494;}.theme-dark .overlay { border-color: #ffa299; color: #ffa299;}#challenge-error { margin: 0
2023-11-22 16:21:44 UTC	1369	IN	Data Raw: 20 77 69 64 74 68 3a 20 32 34 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 Data Ascii: width: 24px; height: 24px;}.ctp-checkbox-label input:active ~ .mark { border: 2px solid #c44d0e;}.ctp-checkbox-label input:active ~ span.ctp-label { text-decoration: underline;}.ctp-checkbox-label input:focus ~ .mark { border: 2px solid #c4
2023-11-22 16:21:44 UTC	1369	IN	Data Raw: 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 31 38 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 Data Ascii: n-items: center; justify-content: center; height: 118px;}.size-compact .link-spacer { margin-right: 3px; margin-left: 3px;}.size-compact .ctp-checkbox-container { text-align: left;}.size-compact #logo { margin-top: 5px; margin-bottom:
2023-11-22 16:21:44 UTC	1369	IN	Data Raw: 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 66 61 69 6c 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 73 70 69 6e 6e 65 72 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 65 78 70 69 72 65 64 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 Data Ascii: #success-icon { left: 255px; margin-left: 8px;}.rtl #fail-icon { left: 255px; margin-left: 8px;}.rtl #spinner-icon { left: 255px; margin-left: 8px;}.rtl #expired-icon { left: 255px; margin-left: 8px;}.rtl #branding { margin: 0 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49724	104.17.3.184	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:45 UTC	711	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=82a281d8ed3d062f HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:45 UTC	335	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 53 65 Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:45 GMTContent-Type: application/javascript; charset=UTF-8Transfer-Encoding: chunkedConnection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Se
2023-11-22 16:21:45 UTC	1034	IN	Data Raw: 37 65 36 30 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 38 2c 66 79 2c 66 7a 2c 66 43 2c 66 44 2c 66 45 2c 66 46 2c 66 47 2c 66 48 2c 66 49 2c 66 4a 2c 66 4b 2c 66 4c 2c 66 4d 2c 66 4e 2c 66 4f 2c 66 50 2c 66 51 2c 66 52 2c 66 53 2c 66 54 2c 66 55 2c 66 56 2c 66 57 2c 66 58 2c 66 59 2c 66 5a 2c 67 30 2c 67 31 2c 67 32 2c 67 33 2c 67 34 2c 67 35 2c 67 36 2c 67 37 2c 67 38 2c 67 39 2c 67 61 2c 67 62 2c 67 63 2c 67 64 2c 67 65 2c 67 66 2c 67 67 2c 67 68 2c 67 69 2c 67 6a 2c 67 6b 2c 67 6c 2c 67 6d 2c 67 6e 2c 67 6f 2c 67 70 2c 67 71 2c 67 72 2c 67 73 2c 67 74 2c 67 75 2c 67 76 2c 67 79 2c 67 58 2c 68 32 2c 68 62 2c 68 6a 2c 68 6e 2c 68 72 2c 68 73 2c 68 51 2c 68 52 2c 68 53 2c Data Ascii: 7e60window._cf_chl_opt.uaO=false;~function(i8,fy,fz,fC,fD,fE,fF,fG,fH,fI,fJ,fK,fL,fM,fN,fO,fP,fQ,fR,fS,fT,fU,fV,fW,fX,fY,fZ,g0,g1,g2,g3,g4,g5,g6,g7,g8,g9,ga,gb,gc,gd,ge,gf,gg,gh,gi,gj,gk,gl,gm,gn,go,gp,gq,gr,gs,gt,gu,gv,gy,gX,h2,hb,hj,hn,hr,hs,hQ,hR,hS,
2023-11-22 16:21:45 UTC	1369	IN	Data Raw: 31 29 5d 2c 27 77 69 64 67 65 74 49 64 27 3a 66 79 5b 69 61 28 31 39 35 38 29 5d 5b 69 61 28 31 32 39 31 29 5d 2c 27 65 76 65 6e 74 27 3a 69 61 28 31 31 39 38 29 2c 27 63 6f 64 65 27 3a 69 61 28 38 32 33 29 2c 27 72 63 56 27 3a 66 79 5b 69 61 28 31 39 35 38 29 5d 5b 69 61 28 31 32 31 30 29 5d 7d 2c 27 2a 27 29 7d 7d 2c 67 29 7d 2c 66 79 5b 69 38 28 32 31 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 69 62 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 29 7b 69 3d 28 69 62 3d 69 38 2c 68 3d 7b 7d 2c 68 5b 69 62 28 34 32 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 75 29 7b 72 65 74 75 72 6e 20 73 2b 75 7d 2c 68 5b 69 62 28 31 33 34 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 75 29 7b 72 65 74 75 72 6e 20 73 2b 75 7d 2c 68 5b 69 62 28 33 34 34 29 5d Data Ascii: 1)],'widgetId':fy[ia(1958)][ia(1291)],'event':ia(1198),'code':ia(823),'rcV':fy[ia(1958)][ia(1210)]},'*')}},g)},fy[i8(217)]=function(f,g,ib,h,i,j,k,l,m,n,o){i=(ib=i8,h={},h[ib(422)]=function(s,u){return s+u},h[ib(1343)]=function(s,u){return s+u},h[ib(344)]
2023-11-22 16:21:45 UTC	1369	IN	Data Raw: 28 39 31 38 29 5d 3d 73 2c 6d 5b 69 63 28 31 37 34 30 29 5d 5b 69 63 28 31 31 34 35 29 5d 28 6f 2c 27 2a 27 29 29 3a 28 6d 3d 5b 6a 5b 69 63 28 36 39 39 29 5d 2b 64 2c 6a 5b 69 63 28 39 34 30 29 5d 2b 65 2c 6a 5b 69 63 28 32 33 35 29 5d 2b 66 2c 6a 5b 69 63 28 32 35 34 29 5d 28 6a 5b 69 63 28 38 31 32 29 5d 2c 67 29 2c 69 63 28 32 39 39 29 2b 4a 53 4f 4e 5b 69 63 28 31 32 39 33 29 5d 28 68 29 5d 5b 69 63 28 38 35 35 29 5d 28 69 63 28 31 36 30 35 29 29 2c 66 79 5b 69 63 28 32 30 33 33 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 65 29 7b 69 65 3d 69 63 2c 66 79 5b 69 65 28 32 31 37 29 5d 28 6d 29 7d 2c 31 30 29 2c 66 79 5b 69 63 28 32 30 33 33 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 67 29 7b 69 67 3d 69 63 2c 66 79 5b 69 67 28 31 37 37 33 29 5d 28 29 7d 2c 31 65 Data Ascii: (918)]=s,m[ic(1740)][ic(1145)](o,'*')):(m=[j[ic(699)]+d,j[ic(940)]+e,j[ic(235)]+f,j[ic(254)](j[ic(812)],g),ic(299)+JSON[ic(1293)](h)][ic(855)](ic(1605)),fy[ic(2033)](function(ie){ie=ic,fy[ie(217)](m)},10),fy[ic(2033)](function(ig){ig=ic,fy[ig(1773)]()},1e
2023-11-22 16:21:45 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 69 6c 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 75 29 7b 69 66 28 69 6c 3d 69 69 2c 6c 3d 69 6c 28 31 35 37 32 29 2c 69 5b 69 6c 28 31 35 32 31 29 5d 21 3d 34 29 72 65 74 75 72 6e 20 66 5b 69 6c 28 31 33 36 38 29 5d 28 66 5b 69 6c 28 31 39 36 34 29 5d 2c 66 5b 69 6c 28 31 39 36 34 29 5d 29 3f 76 6f 69 64 20 30 3a 76 6f 69 64 20 64 28 29 3b 28 6d 3d 74 68 69 73 5b 69 6c 28 31 38 36 39 29 5d 28 69 6c 28 31 32 35 33 29 29 2c 66 5b 69 6c 28 34 32 34 29 5d 28 6d 2c 69 6c 28 38 35 31 29 29 29 26 26 28 6e 3d 4a 53 4f 4e 5b 69 6c 28 31 31 33 38 29 5d 28 69 5b 69 6c 28 36 33 30 29 5d 29 2c 6e 5b 69 6c 28 31 39 32 34 29 5d 26 26 28 6c 3d 6e 5b 69 6c 28 31 39 32 34 29 5d 29 29 3b 69 66 28 6f 3d 67 44 28 6c 29 2c 6f 26 26 28 69 6c 28 38 33 30 29 21 Data Ascii: function(il,l,m,n,o,s,u){if(il=ii,l=il(1572),i[il(1521)]!=4)return f[il(1368)](f[il(1964)],f[il(1964)])?void 0:void d();(m=this[il(1869)](il(1253)),f[il(424)](m,il(851)))&&(n=JSON[il(1138)](i[il(630)]),n[il(1924)]&&(l=n[il(1924)]));if(o=gD(l),o&&(il(830)!
2023-11-22 16:21:45 UTC	1369	IN	Data Raw: 38 28 31 38 36 30 29 2c 66 46 5b 69 38 28 35 33 39 29 5d 3d 69 38 28 36 31 30 29 2c 66 46 5b 69 38 28 31 32 38 34 29 5d 3d 69 38 28 36 32 36 29 2c 66 46 5b 69 38 28 31 32 37 31 29 5d 3d 69 38 28 35 30 37 29 2c 66 46 5b 69 38 28 31 39 39 34 29 5d 3d 69 38 28 31 37 33 38 29 2c 66 46 5b 69 38 28 31 32 37 35 29 5d 3d 69 38 28 31 32 37 30 29 2c 66 46 5b 69 38 28 31 31 39 31 29 5d 3d 69 38 28 31 39 39 31 29 2c 66 46 5b 69 38 28 31 39 37 34 29 5d 3d 69 38 28 31 31 34 39 29 2c 66 46 5b 69 38 28 31 39 36 31 29 5d 3d 69 38 28 31 37 34 31 29 2c 66 46 5b 69 38 28 33 38 32 29 5d 3d 69 38 28 32 30 33 39 29 2c 66 46 5b 69 38 28 39 32 37 29 5d 3d 69 38 28 36 33 39 29 2c 66 46 5b 69 38 28 31 37 35 29 5d 3d 69 38 28 31 30 33 39 29 2c 66 46 5b 69 38 28 35 38 32 29 5d 3d 69 Data Ascii: 8(1860),fF[i8(539)]=i8(610),fF[i8(1284)]=i8(626),fF[i8(1271)]=i8(507),fF[i8(1994)]=i8(1738),fF[i8(1275)]=i8(1270),fF[i8(1191)]=i8(1991),fF[i8(1974)]=i8(1149),fF[i8(1961)]=i8(1741),fF[i8(382)]=i8(2039),fF[i8(927)]=i8(639),fF[i8(175)]=i8(1039),fF[i8(582)]=i
2023-11-22 16:21:45 UTC	1369	IN	Data Raw: 28 39 32 37 29 5d 3d 69 38 28 33 35 32 29 2c 66 48 5b 69 38 28 31 37 35 29 5d 3d 69 38 28 36 38 36 29 2c 66 48 5b 69 38 28 35 38 32 29 5d 3d 69 38 28 31 31 33 39 29 2c 66 48 5b 69 38 28 31 39 32 29 5d 3d 69 38 28 38 34 37 29 2c 66 48 5b 69 38 28 33 31 39 29 5d 3d 69 38 28 31 35 32 39 29 2c 66 48 5b 69 38 28 31 37 39 30 29 5d 3d 69 38 28 39 35 30 29 2c 66 48 5b 69 38 28 31 39 35 31 29 5d 3d 69 38 28 32 34 38 29 2c 66 48 5b 69 38 28 31 38 31 34 29 5d 3d 69 38 28 31 30 39 38 29 2c 66 48 5b 69 38 28 35 35 31 29 5d 3d 69 38 28 36 30 37 29 2c 66 48 5b 69 38 28 36 35 34 29 5d 3d 69 38 28 31 36 33 37 29 2c 66 48 5b 69 38 28 31 39 36 35 29 5d 3d 69 38 28 31 38 38 39 29 2c 66 48 5b 69 38 28 32 39 35 29 5d 3d 69 38 28 31 33 32 38 29 2c 66 48 5b 69 38 28 31 35 31 33 Data Ascii: (927)]=i8(352),fH[i8(175)]=i8(686),fH[i8(582)]=i8(1139),fH[i8(192)]=i8(847),fH[i8(319)]=i8(1529),fH[i8(1790)]=i8(950),fH[i8(1951)]=i8(248),fH[i8(1814)]=i8(1098),fH[i8(551)]=i8(607),fH[i8(654)]=i8(1637),fH[i8(1965)]=i8(1889),fH[i8(295)]=i8(1328),fH[i8(1513
2023-11-22 16:21:45 UTC	1369	IN	Data Raw: 35 31 29 5d 3d 69 38 28 33 32 37 29 2c 66 4a 5b 69 38 28 36 35 34 29 5d 3d 69 38 28 31 38 37 39 29 2c 66 4a 5b 69 38 28 31 39 36 35 29 5d 3d 69 38 28 34 34 38 29 2c 66 4a 5b 69 38 28 32 39 35 29 5d 3d 69 38 28 32 30 35 31 29 2c 66 4a 5b 69 38 28 31 35 31 33 29 5d 3d 69 38 28 36 30 39 29 2c 66 4a 5b 69 38 28 31 31 35 39 29 5d 3d 69 38 28 31 37 33 33 29 2c 66 4a 5b 69 38 28 38 39 36 29 5d 3d 69 38 28 31 37 36 39 29 2c 66 4a 5b 69 38 28 31 34 38 32 29 5d 3d 69 38 28 34 38 32 29 2c 66 4a 5b 69 38 28 31 35 38 30 29 5d 3d 69 38 28 31 35 34 37 29 2c 66 4b 3d 7b 7d 2c 66 4b 5b 69 38 28 39 34 31 29 5d 3d 69 38 28 31 31 33 33 29 2c 66 4b 5b 69 38 28 35 33 39 29 5d 3d 69 38 28 31 34 30 31 29 2c 66 4b 5b 69 38 28 31 32 38 34 29 5d 3d 69 38 28 31 38 32 34 29 2c 66 4b Data Ascii: 51)]=i8(327),fJ[i8(654)]=i8(1879),fJ[i8(1965)]=i8(448),fJ[i8(295)]=i8(2051),fJ[i8(1513)]=i8(609),fJ[i8(1159)]=i8(1733),fJ[i8(896)]=i8(1769),fJ[i8(1482)]=i8(482),fJ[i8(1580)]=i8(1547),fK={},fK[i8(941)]=i8(1133),fK[i8(539)]=i8(1401),fK[i8(1284)]=i8(1824),fK
2023-11-22 16:21:45 UTC	1369	IN	Data Raw: 29 5d 3d 69 38 28 39 31 36 29 2c 66 4d 5b 69 38 28 31 32 38 34 29 5d 3d 69 38 28 37 38 38 29 2c 66 4d 5b 69 38 28 31 32 37 31 29 5d 3d 69 38 28 31 36 38 35 29 2c 66 4d 5b 69 38 28 31 39 39 34 29 5d 3d 69 38 28 38 31 38 29 2c 66 4d 5b 69 38 28 31 32 37 35 29 5d 3d 69 38 28 31 32 31 36 29 2c 66 4d 5b 69 38 28 31 31 39 31 29 5d 3d 69 38 28 39 36 36 29 2c 66 4d 5b 69 38 28 31 39 37 34 29 5d 3d 69 38 28 31 32 34 30 29 2c 66 4d 5b 69 38 28 31 39 36 31 29 5d 3d 69 38 28 31 33 34 35 29 2c 66 4d 5b 69 38 28 33 38 32 29 5d 3d 69 38 28 37 31 33 29 2c 66 4d 5b 69 38 28 39 32 37 29 5d 3d 69 38 28 31 31 35 30 29 2c 66 4d 5b 69 38 28 31 37 35 29 5d 3d 69 38 28 31 34 36 39 29 2c 66 4d 5b 69 38 28 35 38 32 29 5d 3d 69 38 28 39 33 37 29 2c 66 4d 5b 69 38 28 31 39 32 29 5d Data Ascii: )]=i8(916),fM[i8(1284)]=i8(788),fM[i8(1271)]=i8(1685),fM[i8(1994)]=i8(818),fM[i8(1275)]=i8(1216),fM[i8(1191)]=i8(966),fM[i8(1974)]=i8(1240),fM[i8(1961)]=i8(1345),fM[i8(382)]=i8(713),fM[i8(927)]=i8(1150),fM[i8(175)]=i8(1469),fM[i8(582)]=i8(937),fM[i8(192)]
2023-11-22 16:21:45 UTC	1369	IN	Data Raw: 36 35 39 29 2c 66 4f 5b 69 38 28 35 38 32 29 5d 3d 69 38 28 31 35 31 32 29 2c 66 4f 5b 69 38 28 31 39 32 29 5d 3d 69 38 28 31 33 32 32 29 2c 66 4f 5b 69 38 28 33 31 39 29 5d 3d 69 38 28 31 36 31 35 29 2c 66 4f 5b 69 38 28 31 37 39 30 29 5d 3d 69 38 28 32 32 35 29 2c 66 4f 5b 69 38 28 31 39 35 31 29 5d 3d 69 38 28 33 35 33 29 2c 66 4f 5b 69 38 28 31 38 31 34 29 5d 3d 69 38 28 31 30 36 39 29 2c 66 4f 5b 69 38 28 35 35 31 29 5d 3d 69 38 28 31 32 38 36 29 2c 66 4f 5b 69 38 28 36 35 34 29 5d 3d 69 38 28 31 38 37 35 29 2c 66 4f 5b 69 38 28 31 39 36 35 29 5d 3d 69 38 28 31 39 30 32 29 2c 66 4f 5b 69 38 28 32 39 35 29 5d 3d 69 38 28 32 31 31 29 2c 66 4f 5b 69 38 28 31 35 31 33 29 5d 3d 69 38 28 37 39 34 29 2c 66 4f 5b 69 38 28 31 31 35 39 29 5d 3d 69 38 28 36 39 Data Ascii: 659),fO[i8(582)]=i8(1512),fO[i8(192)]=i8(1322),fO[i8(319)]=i8(1615),fO[i8(1790)]=i8(225),fO[i8(1951)]=i8(353),fO[i8(1814)]=i8(1069),fO[i8(551)]=i8(1286),fO[i8(654)]=i8(1875),fO[i8(1965)]=i8(1902),fO[i8(295)]=i8(211),fO[i8(1513)]=i8(794),fO[i8(1159)]=i8(69

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49725	104.17.3.184	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:45 UTC	786	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:45 UTC	248	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 32 36 32 39 38 30 30 2c 20 70 75 62 6c 69 63 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 32 61 32 38 31 65 30 35 63 37 32 33 61 65 65 2d 49 41 44 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:45 GMTContent-Type: image/pngTransfer-Encoding: chunkedConnection: closecache-control: max-age=2629800, publicServer: cloudflareCF-RAY: 82a281e05c723aee-IADalt-svc: h3=":443"; ma=86400
2023-11-22 16:21:45 UTC	67	IN	Data Raw: 33 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 3dPNGIHDRsIDAT$IENDB`
2023-11-22 16:21:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49726	104.17.2.184	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:46 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:46 UTC	248	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 32 36 32 39 38 30 30 2c 20 70 75 62 6c 69 63 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 32 61 32 38 31 65 36 37 38 32 64 30 35 66 31 2d 49 41 44 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:46 GMTContent-Type: image/pngTransfer-Encoding: chunkedConnection: closecache-control: max-age=2629800, publicServer: cloudflareCF-RAY: 82a281e6782d05f1-IADalt-svc: h3=":443"; ma=86400
2023-11-22 16:21:46 UTC	67	IN	Data Raw: 33 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 3dPNGIHDRsIDAT$IENDB`
2023-11-22 16:21:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49727	172.67.173.18	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:46 UTC	660	OUT	GET /favicon.ico HTTP/1.1 Host: report-doc.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_chl_2=b991f7e9b718311
2023-11-22 16:21:47 UTC	734	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:46 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Strict-Transport-Security: max-a
2023-11-22 16:21:47 UTC	71	IN	Data Raw: 34 31 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 41<script>window.location.href = "https://www.google.com";</script>
2023-11-22 16:21:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49728	104.17.3.184	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:46 UTC	917	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1659967187:1700666959:s-xfDmFBeCQJ3zR5aQxdS7p1hXAcQJ8HD8Iovqf91qk/82a281d8ed3d062f/39b36f2cbd2d955 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3134 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 39b36f2cbd2d955 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:46 UTC	3134	OUT	Data Raw: 76 5f 38 32 61 32 38 31 64 38 65 64 33 64 30 36 32 66 3d 6d 53 6e 39 4b 39 68 39 33 39 56 39 6c 39 66 73 72 73 39 75 73 6a 39 38 73 4b 35 79 56 38 2d 35 41 57 50 39 4f 35 39 41 56 6e 41 30 39 79 6e 38 25 32 62 41 55 39 63 6c 5a 39 41 46 31 41 76 41 41 31 4c 4a 39 41 48 39 2d 54 41 2b 39 6f 46 73 4a 75 64 57 4d 4a 41 66 39 75 32 2d 41 4a 48 38 24 41 4b 48 38 54 45 79 39 5a 41 24 41 46 48 4b 64 4e 41 6e 53 2b 4e 6e 41 38 6e 41 50 37 41 79 6d 45 41 35 77 67 5a 41 6a 75 48 4b 2b 34 44 39 63 56 41 70 31 41 52 32 75 41 41 65 73 6f 6b 6d 78 6c 4e 41 38 4a 47 64 2d 54 41 47 73 39 41 2d 55 4d 45 65 4f 4e 51 41 41 4e 6a 77 58 5a 34 47 4a 35 6d 47 39 33 42 4d 7a 2b 6e 41 6f 6d 51 55 6d 6e 41 6e 56 72 41 72 48 4b 2d 4a 24 49 68 6f 4c 35 47 38 41 50 35 33 6d 24 30 47 Data Ascii: v_82a281d8ed3d062f=mSn9K9h939V9l9fsrs9usj98sK5yV8-5AWP9O59AVnA09yn8%2bAU9clZ9AF1AvAA1LJ9AH9-TA+9oFsJudWMJAf9u2-AJH8$AKH8TEy9ZA$AFHKdNAnS+NnA8nAP7AymEA5wgZAjuHK+4D9cVAp1AR2uAAesokmxlNA8JGd-TAGs9A-UMEeONQAANjwXZ4GJ5mG93BMz+nAomQUmnAnVrArHK-J$IhoL5G8AP53m$0G
2023-11-22 16:21:47 UTC	647	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 66 2d 63 68 6c 2d 67 65 6e 3a 20 6d 35 44 4a 41 74 44 55 66 32 4e 67 70 42 6f 50 74 34 69 68 72 33 47 72 68 6c 50 55 48 62 53 65 78 6c 6f 6d 50 5a 2b 6c 37 72 62 69 53 77 37 6d 59 58 6d 4c 7a 36 49 37 64 45 6b 31 36 49 6e 32 5a 2f 42 36 7a 56 6b 6c 6c 44 36 6d 46 79 49 47 68 36 71 78 43 36 47 63 6b 36 79 45 71 55 48 4e 68 39 63 6a 46 Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:47 GMTContent-Type: text/plain; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-chl-gen: m5DJAtDUf2NgpBoPt4ihr3GrhlPUHbSexlomPZ+l7rbiSw7mYXmLz6I7dEk16In2Z/B6zVkllD6mFyIGh6qxC6Gck6yEqUHNh9cjF
2023-11-22 16:21:47 UTC	722	IN	Data Raw: 37 64 32 38 0d 0a 69 48 6d 54 6d 71 57 54 6c 4b 62 47 77 38 62 4c 79 63 65 47 76 37 69 61 76 4c 4f 6d 31 63 50 54 6c 63 58 58 75 61 75 61 74 4e 44 53 73 73 4f 2f 7a 4e 6e 68 32 74 47 32 78 4e 57 30 78 63 6e 73 73 4f 44 53 34 72 2f 32 30 76 58 4c 72 2f 4f 35 39 65 58 71 36 66 4f 35 41 39 44 30 76 77 50 6d 2b 74 66 66 2b 65 6a 46 34 41 45 49 7a 67 50 75 44 4e 49 50 42 2f 58 54 42 74 6b 4e 37 65 6a 66 48 50 51 55 2b 53 41 66 34 79 6b 71 43 67 51 66 46 76 6f 61 43 43 67 45 4a 78 34 72 48 6a 4d 76 4c 6a 49 52 48 42 6e 32 4d 69 30 65 44 76 51 2b 51 43 34 46 45 53 55 43 4f 52 51 58 4a 55 77 4e 4b 67 6c 46 45 53 4e 49 4e 43 45 7a 4d 69 70 49 4b 30 31 55 53 6c 56 52 56 7a 6b 2f 51 31 6f 6c 50 31 74 4d 4e 55 59 6b 54 69 38 6e 58 30 5a 78 4b 30 78 53 4d 7a 6c 34 53 Data Ascii: 7d28iHmTmqWTlKbGw8bLyceGv7iavLOm1cPTlcXXuauatNDSssO/zNnh2tG2xNW0xcnssODS4r/20vXLr/O59eXq6fO5A9D0vwPm+tff+ejF4AEIzgPuDNIPB/XTBtkN7ejfHPQU+SAf4ykqCgQfFvoaCCgEJx4rHjMvLjIRHBn2Mi0eDvQ+QC4FESUCORQXJUwNKglFESNINCEzMipIK01USlVRVzk/Q1olP1tMNUYkTi8nX0ZxK0xSMzl4S
2023-11-22 16:21:47 UTC	1369	IN	Data Raw: 6c 63 53 2b 32 64 61 53 74 4d 47 64 74 74 50 67 34 4c 33 61 31 4a 32 6e 70 36 32 6f 78 4f 54 64 71 74 57 77 35 75 79 77 74 50 44 4e 38 4e 6a 2b 30 67 47 7a 37 4c 33 52 37 75 4c 6c 36 66 6b 49 39 66 54 4b 43 2b 7a 65 35 75 58 4c 30 2b 33 4f 42 4f 50 30 31 4f 54 77 39 2b 76 70 31 78 6a 78 4a 4e 73 55 39 52 4d 57 4b 64 77 71 47 77 51 49 4d 65 76 75 44 66 34 4e 4e 2b 6a 32 4e 78 6b 77 4a 50 4c 32 43 77 7a 34 4d 79 33 39 2f 43 63 57 41 6a 63 49 46 69 42 43 4f 77 30 48 51 6b 77 64 54 44 30 50 55 52 63 35 4a 69 4d 55 4d 30 77 32 56 6c 6c 44 4f 31 67 62 48 56 42 42 4a 55 63 71 5a 57 70 6b 59 44 78 61 4d 45 5a 4a 53 57 52 32 56 45 5a 78 57 6e 4e 5a 62 58 6c 35 56 6d 4e 74 4e 6b 46 50 57 6e 68 7a 56 56 2b 41 62 59 4a 37 58 48 43 53 53 57 79 4c 61 6d 6d 4a 56 4a 5a Data Ascii: lcS+2daStMGdttPg4L3a1J2np62oxOTdqtWw5uywtPDN8Nj+0gGz7L3R7uLl6fkI9fTKC+ze5uXL0+3OBOP01OTw9+vp1xjxJNsU9RMWKdwqGwQIMevuDf4NN+j2NxkwJPL2Cwz4My39/CcWAjcIFiBCOw0HQkwdTD0PURc5JiMUM0w2VllDO1gbHVBBJUcqZWpkYDxaMEZJSWR2VEZxWnNZbXl5VmNtNkFPWnhzVV+AbYJ7XHCSSWyLammJVJZ
2023-11-22 16:21:47 UTC	1369	IN	Data Raw: 72 33 54 33 37 75 37 32 63 44 6f 75 74 32 30 37 63 66 41 72 36 36 76 75 39 7a 52 38 66 44 53 74 76 76 6c 79 74 4c 72 33 37 77 44 38 39 50 30 78 50 48 43 78 64 2f 30 36 38 72 57 37 64 33 64 37 2b 33 51 46 51 30 4d 31 4f 49 44 47 78 54 70 36 4f 76 56 33 68 6b 69 33 78 30 65 34 2f 45 6f 49 52 4d 72 43 4f 51 6f 49 65 77 64 38 51 77 6d 37 68 54 76 38 67 6f 58 39 42 73 75 49 44 77 67 4f 76 77 76 4a 66 73 59 52 77 41 31 48 55 77 2f 51 77 64 4d 55 45 73 53 4d 79 35 4d 55 69 77 59 4f 44 63 77 48 54 55 72 47 6a 35 55 47 57 4a 6d 49 42 30 78 49 45 6f 38 61 54 56 41 58 30 70 74 61 6d 39 53 61 32 30 31 53 6d 74 78 55 6c 74 76 58 56 6c 36 64 6c 42 39 62 56 71 41 64 6b 4e 47 56 59 65 47 56 55 53 4d 61 33 2b 4a 52 57 70 70 68 6e 69 55 63 46 69 57 58 49 39 75 58 6c 61 50 Data Ascii: r3T37u72cDout207cfAr66vu9zR8fDStvvlytLr37wD89P0xPHCxd/068rW7d3d7+3QFQ0M1OIDGxTp6OvV3hki3x0e4/EoIRMrCOQoIewd8Qwm7hTv8goX9BsuIDwgOvwvJfsYRwA1HUw/QwdMUEsSMy5MUiwYODcwHTUrGj5UGWJmIB0xIEo8aTVAX0ptam9Sa201SmtxUltvXVl6dlB9bVqAdkNGVYeGVUSMa3+JRWpphniUcFiWXI9uXlaP
2023-11-22 16:21:47 UTC	1369	IN	Data Raw: 62 6a 33 4d 50 63 71 64 6e 58 70 75 37 65 30 2b 4c 7a 33 74 66 56 71 2f 48 50 75 76 4f 30 31 38 6a 4c 79 39 76 36 32 4e 48 54 34 4d 44 68 77 67 6f 4e 7a 67 33 35 36 4d 54 4a 30 74 50 65 37 4e 66 6e 7a 42 72 74 38 41 72 79 37 79 4d 52 37 66 73 4f 47 77 48 79 42 75 54 71 2b 67 7a 6e 2b 68 73 62 48 52 4c 39 49 52 4d 51 43 44 6b 45 4b 6a 50 30 45 6b 41 41 49 42 6b 31 4c 77 4d 67 49 69 6b 41 49 54 34 68 49 42 6b 73 55 53 4d 4a 4e 43 63 55 46 6a 63 34 52 30 34 7a 52 6b 31 51 47 6a 4a 41 4f 53 35 58 51 6a 55 30 50 6a 70 42 62 55 55 2b 4f 45 68 42 50 43 77 71 62 69 34 2f 5a 6d 78 46 53 54 52 6f 53 56 46 4e 59 6c 39 4d 5a 48 35 78 66 56 4e 31 68 55 4a 34 53 55 35 6f 57 6d 64 4d 58 6f 46 6d 6b 47 56 6d 54 35 43 50 64 59 5a 78 56 58 47 62 58 59 36 50 6e 46 68 38 65 Data Ascii: bj3MPcqdnXpu7e0+Lz3tfVq/HPuvO018jLy9v62NHT4MDhwgoNzg356MTJ0tPe7NfnzBrt8Ary7yMR7fsOGwHyBuTq+gzn+hsbHRL9IRMQCDkEKjP0EkAAIBk1LwMgIikAIT4hIBksUSMJNCcUFjc4R04zRk1QGjJAOS5XQjU0PjpBbUU+OEhBPCwqbi4/ZmxFSTRoSVFNYl9MZH5xfVN1hUJ4SU5oWmdMXoFmkGVmT5CPdYZxVXGbXY6PnFh8e
2023-11-22 16:21:47 UTC	1369	IN	Data Raw: 33 75 75 4c 51 34 73 72 4e 77 62 44 6a 77 75 6e 35 73 76 44 32 32 66 7a 4e 32 66 59 41 75 2f 6e 6d 78 4f 48 65 2b 2b 41 41 33 50 37 2b 2f 4f 41 54 2f 66 4c 50 46 4e 49 50 37 66 55 4c 47 75 72 34 2f 41 45 67 36 2f 41 46 2f 68 76 32 38 67 6f 64 39 42 6f 49 36 51 38 6d 4c 44 4c 2b 46 52 49 48 42 52 41 5a 42 68 55 4a 48 41 72 35 48 42 34 35 4e 68 30 34 49 7a 73 44 52 44 64 4d 44 41 74 48 4d 41 38 79 4c 52 30 6c 50 31 67 34 55 44 42 61 4a 7a 30 32 57 56 6f 5a 47 57 51 2f 50 6a 34 37 4e 6c 4e 56 52 46 74 66 53 55 4e 4f 55 31 35 50 55 47 6f 33 54 57 78 4c 53 56 78 48 57 33 31 52 4f 6c 52 69 58 49 4e 69 59 6c 70 57 53 6c 74 70 52 32 53 44 58 59 4e 6c 61 35 4f 54 62 57 68 69 56 34 78 56 68 34 5a 33 57 48 5a 73 6f 31 79 51 65 4a 64 35 64 71 47 45 59 6d 53 62 72 70 Data Ascii: 3uuLQ4srNwbDjwun5svD22fzN2fYAu/nmxOHe++AA3P7+/OAT/fLPFNIP7fULGur4/AEg6/AF/hv28god9BoI6Q8mLDL+FRIHBRAZBhUJHAr5HB45Nh04IzsDRDdMDAtHMA8yLR0lP1g4UDBaJz02WVoZGWQ/Pj47NlNVRFtfSUNOU15PUGo3TWxLSVxHW31ROlRiXINiYlpWSltpR2SDXYNla5OTbWhiV4xVh4Z3WHZso1yQeJd5dqGEYmSbrp
2023-11-22 16:21:47 UTC	1369	IN	Data Raw: 7a 37 62 32 2b 74 43 79 38 4d 7a 4a 79 2b 33 55 7a 64 38 42 37 62 67 43 43 64 72 53 77 63 7a 71 37 4e 34 51 42 41 48 70 46 76 30 4b 46 78 54 31 30 65 7a 76 48 75 62 71 44 50 37 32 36 2f 76 76 2f 69 45 45 36 41 73 6d 4a 78 76 6d 42 65 72 71 4c 52 41 4d 4c 2b 38 5a 4d 79 54 79 38 7a 63 70 39 2f 45 33 43 30 45 66 45 41 55 52 51 6b 51 64 4f 68 51 59 47 44 30 6e 48 53 6f 6a 56 43 55 78 46 69 38 68 53 43 73 6d 4d 55 38 77 59 43 45 76 55 54 77 74 4d 56 51 66 4f 43 41 6e 57 69 5a 65 52 6a 6c 66 62 6c 74 67 59 57 78 4b 52 6a 5a 30 4f 32 63 36 63 31 45 79 57 46 74 30 67 31 35 7a 51 6b 56 6d 65 33 32 46 67 47 70 2f 5a 47 75 53 55 55 35 70 67 49 74 74 6a 33 70 59 64 48 42 6f 63 6c 75 4d 59 6e 71 4e 6c 70 2b 49 71 4a 36 66 61 5a 71 4b 72 49 53 43 65 35 42 72 6b 47 75 Data Ascii: z7b2+tCy8MzJy+3Uzd8B7bgCCdrSwczq7N4QBAHpFv0KFxT10ezvHubqDP726/vv/iEE6AsmJxvmBerqLRAML+8ZMyTy8zcp9/E3C0EfEAURQkQdOhQYGD0nHSojVCUxFi8hSCsmMU8wYCEvUTwtMVQfOCAnWiZeRjlfbltgYWxKRjZ0O2c6c1EyWFt0g15zQkVme32FgGp/ZGuSUU5pgIttj3pYdHBocluMYnqNlp+IqJ6faZqKrISCe5BrkGu
2023-11-22 16:21:47 UTC	1369	IN	Data Raw: 73 33 53 39 4e 73 44 39 64 6a 66 30 2f 37 33 33 77 50 41 44 65 62 4e 41 67 76 5a 41 78 50 52 43 74 4d 45 37 67 54 58 38 51 6b 5a 37 2f 37 35 44 66 6b 59 39 52 34 66 44 39 6b 43 47 50 6f 6f 39 77 66 67 4b 43 51 42 4a 50 41 55 4a 52 63 43 44 79 66 31 46 65 34 4d 4b 42 72 35 4c 42 6b 51 41 68 63 51 52 6a 6b 65 4a 6a 70 4f 4b 77 56 44 4d 69 56 52 45 69 52 54 51 69 63 59 4a 56 6f 38 4d 56 34 74 53 6c 70 59 52 44 45 31 50 56 6b 69 61 69 56 6e 59 56 34 2f 5a 57 64 47 53 53 38 30 4c 6d 46 46 51 48 56 4a 56 56 52 70 56 48 63 38 63 57 31 37 56 54 35 62 65 57 6c 39 61 33 39 74 61 46 61 4b 6a 57 36 50 61 32 68 74 5a 48 42 6f 55 70 53 4f 57 46 71 54 6a 33 47 4e 67 5a 5a 67 6e 59 36 5a 61 4b 61 68 6f 61 79 74 6f 34 46 70 61 59 64 76 73 33 35 6f 6f 33 65 6e 6b 4b 79 58 Data Ascii: s3S9NsD9djf0/733wPADebNAgvZAxPRCtME7gTX8QkZ7/75DfkY9R4fD9kCGPoo9wfgKCQBJPAUJRcCDyf1Fe4MKBr5LBkQAhcQRjkeJjpOKwVDMiVREiRTQicYJVo8MV4tSlpYRDE1PVkiaiVnYV4/ZWdGSS80LmFFQHVJVVRpVHc8cW17VT5beWl9a39taFaKjW6Pa2htZHBoUpSOWFqTj3GNgZZgnY6ZaKahoayto4FpaYdvs35oo3enkKyX
2023-11-22 16:21:47 UTC	1369	IN	Data Raw: 66 33 76 50 72 57 34 74 50 69 42 75 49 49 34 4e 30 4a 43 4f 6a 2b 42 67 2f 54 45 78 59 51 31 2f 45 4f 46 4e 73 52 47 67 2f 76 4a 4e 77 69 34 2f 41 6c 43 65 4d 46 47 42 6f 72 37 69 49 48 4c 77 45 6b 46 68 55 46 4b 67 73 37 4a 68 67 57 2b 6a 67 76 4c 77 49 54 48 66 34 6b 52 53 49 64 4b 79 64 4c 48 55 39 43 44 30 42 4c 48 7a 30 6c 56 43 78 47 55 46 4d 70 4c 54 6c 52 47 6a 6b 5a 52 46 39 63 48 56 5a 6e 55 54 4d 2f 59 46 74 48 4f 6b 73 2b 51 45 31 68 56 55 4d 32 54 31 51 77 4f 6c 46 49 4f 44 35 58 63 6f 41 31 63 55 56 59 67 45 64 78 69 59 56 48 57 6b 53 41 68 58 4a 49 66 59 42 67 54 32 5a 67 64 6f 36 4d 62 48 53 61 6f 46 4a 38 6a 33 52 75 63 61 4a 31 67 58 79 42 5a 71 53 65 61 36 75 65 6e 6d 74 37 6a 49 31 74 6a 47 2b 47 67 70 4b 47 66 59 32 4b 6e 37 61 50 76 Data Ascii: f3vPrW4tPiBuII4N0JCOj+Bg/TExYQ1/EOFNsRGg/vJNwi4/AlCeMFGBor7iIHLwEkFhUFKgs7JhgW+jgvLwITHf4kRSIdKydLHU9CD0BLHz0lVCxGUFMpLTlRGjkZRF9cHVZnUTM/YFtHOks+QE1hVUM2T1QwOlFIOD5XcoA1cUVYgEdxiYVHWkSAhXJIfYBgT2Zgdo6MbHSaoFJ8j3RucaJ1gXyBZqSea6uenmt7jI1tjG+GgpKGfY2Kn7aPv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49731	104.21.80.18	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:47 UTC	383	OUT	GET /favicon.ico HTTP/1.1 Host: report-doc.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_chl_2=b991f7e9b718311
2023-11-22 16:21:48 UTC	732	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Strict-Transport-Security: max-a
2023-11-22 16:21:48 UTC	71	IN	Data Raw: 34 31 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 41<script>window.location.href = "https://www.google.com";</script>
2023-11-22 16:21:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49733	104.17.2.184	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:48 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1659967187:1700666959:s-xfDmFBeCQJ3zR5aQxdS7p1hXAcQJ8HD8Iovqf91qk/82a281d8ed3d062f/39b36f2cbd2d955 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:48 UTC	386	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 44 52 Data Ascii: HTTP/1.1 400 Bad RequestDate: Wed, 22 Nov 2023 16:21:48 GMTContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: DR
2023-11-22 16:21:48 UTC	12	IN	Data Raw: 37 0d 0a 69 6e 76 61 6c 69 64 0d 0a Data Ascii: 7invalid
2023-11-22 16:21:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49732	104.17.3.184	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:48 UTC	805	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/82a281d8ed3d062f/1700670106968/086cd84cc905b337cfeb5813071be2a30c5d7fededdd7fc625302b6261d08b8e/mpyr05rD6k1SCe6 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:48 UTC	152	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 31 20 55 6e 61 75 74 68 6f 72 69 7a 65 64 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: HTTP/1.1 401 UnauthorizedDate: Wed, 22 Nov 2023 16:21:48 GMTContent-Type: text/plain; charset=UTF-8Transfer-Encoding: chunkedConnection: close
2023-11-22 16:21:48 UTC	1374	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 43 47 7a 59 54 4d 6b 46 73 7a 66 50 36 31 67 54 42 78 76 69 6f 77 78 64 66 2d 33 74 33 58 5f 47 4a 54 41 72 59 6d 48 51 69 34 34 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d 45 41 67 Data Ascii: www-authenticate: PrivateToken challenge=AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gCGzYTMkFszfP61gTBxviowxdf-3t3X_GJTArYmHQi44AGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=, token-key=MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAg
2023-11-22 16:21:48 UTC	6	IN	Data Raw: 31 0d 0a 4a 0d 0a Data Ascii: 1J
2023-11-22 16:21:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49735	104.17.3.184	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:50 UTC	776	OUT	GET /cdn-cgi/challenge-platform/h/g/i/82a281d8ed3d062f/1700670106977/KqjhGQJRJoD_bVM HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:51 UTC	208	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 35 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 32 61 32 38 32 30 33 36 63 62 33 33 39 33 32 2d 49 41 44 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:51 GMTContent-Type: image/pngTransfer-Encoding: chunkedConnection: closeServer: cloudflareCF-RAY: 82a282036cb33932-IADalt-svc: h3=":443"; ma=86400
2023-11-22 16:21:51 UTC	67	IN	Data Raw: 33 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 15 00 00 00 0c 08 02 00 00 00 02 ac 61 92 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 3dPNGIHDRaIDAT$IENDB`
2023-11-22 16:21:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49736	104.17.2.184	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:51 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/82a281d8ed3d062f/1700670106977/KqjhGQJRJoD_bVM HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:52 UTC	208	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 35 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 32 61 32 38 32 30 61 34 64 39 37 32 34 31 39 2d 49 41 44 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:52 GMTContent-Type: image/pngTransfer-Encoding: chunkedConnection: closeServer: cloudflareCF-RAY: 82a2820a4d972419-IADalt-svc: h3=":443"; ma=86400
2023-11-22 16:21:52 UTC	67	IN	Data Raw: 33 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 15 00 00 00 0c 08 02 00 00 00 02 ac 61 92 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 3dPNGIHDRaIDAT$IENDB`
2023-11-22 16:21:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49737	104.17.3.184	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:51 UTC	918	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1659967187:1700666959:s-xfDmFBeCQJ3zR5aQxdS7p1hXAcQJ8HD8Iovqf91qk/82a281d8ed3d062f/39b36f2cbd2d955 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 28741 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 39b36f2cbd2d955 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:51 UTC	16384	OUT	Data Raw: 76 5f 38 32 61 32 38 31 64 38 65 64 33 64 30 36 32 66 3d 6d 53 6e 39 6a 38 6f 46 5a 79 6e 74 35 2d 72 41 55 6f 6d 41 48 39 32 33 33 41 76 41 48 48 75 72 41 58 41 32 73 2d 54 41 70 41 6d 6a 4b 48 63 43 6f 47 63 41 2d 7a 41 79 46 53 43 6f 4b 41 75 58 73 63 71 38 41 4d 6c 35 39 56 48 39 6f 5a 41 68 41 36 5a 77 6e 6e 4a 55 48 41 36 41 24 73 41 33 77 36 63 48 41 46 41 70 57 35 41 32 74 41 2d 4a 24 41 65 25 32 62 63 30 5a 41 4d 57 35 6f 77 41 6d 6e 41 6a 77 73 41 4e 79 6d 51 36 41 41 72 4a 41 6d 5a 39 4a 39 48 41 66 39 4b 58 41 38 67 6e 5a 51 5a 7a 6e 48 70 58 41 64 51 51 75 75 63 6c 46 48 43 41 63 39 24 51 35 4a 39 77 5a 43 6e 6e 67 78 6f 24 4a 7a 36 33 41 41 67 46 35 48 48 24 41 74 6e 41 4d 5a 49 38 6f 41 55 54 77 24 32 57 36 75 4a 49 6f 38 7a 6d 4f 55 44 75 Data Ascii: v_82a281d8ed3d062f=mSn9j8oFZynt5-rAUomAH9233AvAHHurAXA2s-TApAmjKHcCoGcA-zAyFSCoKAuXscq8AMl59VH9oZAhA6ZwnnJUHA6A$sA3w6cHAFApW5A2tA-J$Ae%2bc0ZAMW5owAmnAjwsANymQ6AArJAmZ9J9HAf9KXA8gnZQZznHpXAdQQuuclFHCAc9$Q5J9wZCnngxo$Jz63AAgF5HH$AtnAMZI8oAUTw$2W6uJIo8zmOUDu
2023-11-22 16:21:51 UTC	12357	OUT	Data Raw: 79 79 33 61 6f 6c 53 4c 43 77 63 70 32 36 56 41 59 4e 6b 42 4f 48 52 39 2d 46 35 39 38 5a 41 58 41 6d 39 41 53 41 65 72 38 48 41 35 41 64 41 2d 46 41 50 4a 35 48 4b 53 6f 76 41 70 41 6d 35 2b 46 41 59 41 41 6e 41 52 2d 43 39 4f 6e 4b 2b 41 33 39 6d 37 67 51 41 58 39 75 41 41 30 41 64 39 4b 53 6f 2d 41 62 39 6f 35 6f 55 41 34 39 41 53 41 4c 41 76 39 65 53 4b 35 41 56 47 75 4e 6f 38 39 74 41 4b 53 41 48 41 59 42 50 2d 38 73 41 39 41 47 39 41 70 39 45 73 38 70 6f 37 41 79 41 4d 32 35 35 41 35 48 38 46 4b 73 6f 76 41 6e 39 63 4d 39 6e 41 6e 6e 4b 4f 48 53 39 6d 6e 6f 2b 41 44 41 63 5a 6f 35 6f 32 5a 2d 41 41 6f 48 6f 41 55 35 38 55 41 31 53 79 35 6f 36 58 2b 39 6e 53 6f 50 33 54 35 79 7a 48 63 41 7a 67 54 53 41 6f 73 7a 43 6f 63 6f 6c 53 75 41 4b 53 38 24 33 Data Ascii: yy3aolSLCwcp26VAYNkBOHR9-F598ZAXAm9ASAer8HA5AdA-FAPJ5HKSovApAm5+FAYAAnAR-C9OnK+A39m7gQAX9uAA0Ad9KSo-Ab9o5oUA49ASALAv9eSK5AVGuNo89tAKSAHAYBP-8sA9AG9Ap9Es8po7AyAM255A5H8FKsovAn9cM9nAnnKOHS9mno+ADAcZo5o2Z-AAoHoAU58UA1Sy5o6X+9nSoP3T5yzHcAzgTSAoszCocolSuAKS8$3
2023-11-22 16:21:52 UTC	327	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 35 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 66 2d 63 68 6c 2d 67 65 6e 3a 20 56 55 6e 6f 4c 5a 69 57 4a 52 50 61 4a 59 75 61 57 76 73 42 74 53 73 36 6b 70 75 50 4d 63 75 59 66 58 30 73 36 69 76 54 44 32 48 4d 63 54 6c 76 6d 31 4b 54 69 62 57 76 49 34 46 5a 63 7a 6a 2f 24 34 4f 37 68 75 67 44 2b 53 74 78 35 42 38 68 2b 38 77 76 47 4b 77 3d 3d 0d 0a 53 65 72 76 65 72 3a 20 63 6c Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:52 GMTContent-Type: text/plain; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-chl-gen: VUnoLZiWJRPaJYuaWvsBtSs6kpuPMcuYfX0s6ivTD2HMcTlvm1KTibWvI4FZczj/$4O7hugD+Stx5B8h+8wvGKw==Server: cl
2023-11-22 16:21:52 UTC	1042	IN	Data Raw: 34 35 36 63 0d 0a 69 48 6d 54 6d 71 57 54 6d 4c 57 39 77 4c 61 6b 77 4a 2b 58 78 5a 33 51 77 4d 79 6d 30 4a 36 6f 6f 62 44 50 6b 36 58 4e 30 4d 7a 57 6e 72 69 37 32 4d 54 6c 31 63 69 6a 36 64 6e 55 79 36 61 75 32 62 36 2f 30 4f 6d 39 77 73 4f 32 72 39 72 5a 7a 4e 57 39 74 39 54 4c 75 4d 43 32 77 72 2f 38 2f 64 72 39 2b 50 33 62 37 38 2f 39 42 52 50 79 42 2b 50 72 42 76 54 52 30 2f 59 54 2f 76 41 67 47 67 6f 58 45 78 7a 68 39 41 49 47 34 78 62 70 48 66 30 76 37 79 30 73 36 2f 41 6b 42 42 51 79 46 76 45 34 45 6a 55 66 2b 7a 73 64 2b 6a 59 78 49 68 4d 5a 50 30 49 65 4f 30 46 4e 51 52 67 77 47 52 70 45 45 67 63 69 56 55 77 6e 4e 6b 67 59 4a 55 6b 61 53 43 39 4e 59 30 77 7a 52 68 38 35 52 7a 6c 68 4b 55 4a 67 50 44 38 78 58 33 51 30 4e 48 49 74 4e 7a 56 52 62 Data Ascii: 456ciHmTmqWTmLW9wLakwJ+XxZ3QwMym0J6oobDPk6XN0MzWnri72MTl1cij6dnUy6au2b6/0Om9wsO2r9rZzNW9t9TLuMC2wr/8/dr9+P3b78/9BRPyB+PrBvTR0/YT/vAgGgoXExzh9AIG4xbpHf0v7y0s6/AkBBQyFvE4EjUf+zsd+jYxIhMZP0IeO0FNQRgwGRpEEgciVUwnNkgYJUkaSC9NY0wzRh85RzlhKUJgPD8xX3Q0NHItNzVRb
2023-11-22 16:21:52 UTC	1369	IN	Data Raw: 76 59 50 48 68 59 69 6b 6d 6f 72 43 6f 70 2f 59 79 73 6d 73 71 4c 72 52 7a 39 72 58 6e 73 32 32 30 63 50 41 76 38 44 45 75 74 4f 31 72 4c 75 6e 36 75 33 62 36 4f 76 51 30 75 72 41 35 73 37 4f 37 2f 75 31 37 37 66 7a 76 4e 37 51 2f 67 50 48 30 4f 67 4a 79 63 4d 4a 31 75 33 49 32 67 54 79 39 51 49 4c 44 78 41 47 44 52 49 56 36 2f 34 56 43 66 63 54 47 51 62 36 43 42 72 6b 46 67 73 69 4a 4f 59 50 4a 68 49 51 49 79 6b 57 49 68 63 4e 4a 77 59 61 45 78 6f 49 42 78 51 50 41 50 67 4d 4c 79 41 36 43 42 77 70 53 55 51 35 54 79 4d 61 49 67 78 4d 4d 53 59 6c 4c 6a 55 69 49 30 63 31 58 46 34 66 45 6a 4d 78 56 55 55 76 4c 78 39 47 58 45 56 41 58 57 74 46 5a 79 4a 65 58 7a 35 7a 54 54 4e 48 55 6d 78 57 63 6a 63 7a 5a 32 73 36 56 55 46 75 4f 33 4e 54 65 44 70 32 66 30 5a Data Ascii: vYPHhYikmorCop/YysmsqLrRz9rXns220cPAv8DEutO1rLun6u3b6OvQ0urA5s7O7/u177fzvN7Q/gPH0OgJycMJ1u3I2gTy9QILDxAGDRIV6/4VCfcTGQb6CBrkFgsiJOYPJhIQIykWIhcNJwYaExoIBxQPAPgMLyA6CBwpSUQ5TyMaIgxMMSYlLjUiI0c1XF4fEjMxVUUvLx9GXEVAXWtFZyJeXz5zTTNHUmxWcjczZ2s6VUFuO3NTeDp2f0Z
2023-11-22 16:21:52 UTC	1369	IN	Data Raw: 4c 47 75 73 36 33 56 30 4e 48 50 30 73 69 57 30 74 61 2b 71 64 79 75 72 4e 2f 64 76 64 75 70 35 39 58 68 33 73 62 68 75 4f 37 43 30 2b 4f 2b 73 63 36 75 31 63 57 36 30 39 33 59 32 63 76 30 31 74 32 32 75 38 58 59 43 65 48 68 33 66 67 4c 36 4d 59 4e 44 2b 72 4c 45 50 51 52 31 41 50 50 2b 4e 67 49 33 42 72 5a 30 68 38 64 32 79 45 62 49 64 38 56 2b 41 6e 6f 47 53 73 70 48 69 4c 72 4a 50 73 64 4e 76 55 44 44 77 77 4f 4c 42 48 38 48 43 77 57 45 42 38 50 4c 7a 55 31 47 52 67 57 41 52 59 5a 42 79 49 61 49 56 45 64 4d 42 41 67 4f 42 49 74 4e 69 4d 71 4b 6c 30 77 4d 56 41 71 4e 42 73 6a 47 47 4d 78 51 54 78 72 4c 46 6f 2b 59 56 46 69 5a 6b 42 74 4d 6b 6c 4a 64 7a 52 50 4e 58 74 72 57 32 77 32 62 6a 78 43 64 32 32 45 67 46 4a 30 67 6b 46 39 53 57 42 38 59 6c 74 6d Data Ascii: LGus63V0NHP0siW0ta+qdyurN/dvdup59Xh3sbhuO7C0+O+sc6u1cW6093Y2cv01t22u8XYCeHh3fgL6MYND+rLEPQR1APP+NgI3BrZ0h8d2yEbId8V+AnoGSspHiLrJPsdNvUDDwwOLBH8HCwWEB8PLzU1GRgWARYZByIaIVEdMBAgOBItNiMqKl0wMVAqNBsjGGMxQTxrLFo+YVFiZkBtMklJdzRPNXtrW2w2bjxCd22EgFJ0gkF9SWB8Yltm
2023-11-22 16:21:52 UTC	1369	IN	Data Raw: 61 52 31 37 7a 51 6d 74 44 57 33 72 58 64 33 74 79 69 30 39 72 63 78 37 71 6c 31 38 2f 59 70 2b 6d 72 38 75 33 44 39 2b 48 75 7a 76 6e 6c 74 2f 79 31 2f 76 7a 54 32 73 37 59 30 74 2f 6e 35 65 72 69 42 4d 6e 6e 37 41 6a 4e 32 77 44 7a 2f 75 51 55 45 51 4c 52 30 51 37 74 30 78 48 66 44 67 4d 54 46 67 48 64 34 41 66 77 2b 2b 50 32 43 67 34 67 2b 77 55 6e 37 78 77 4e 38 75 7a 7a 43 51 4d 4e 44 2b 34 47 48 76 55 4f 4e 79 34 33 4c 52 6b 67 4b 53 6f 43 4b 69 6f 56 50 51 55 4a 44 6b 55 68 53 43 74 55 55 46 4d 68 4f 43 31 64 47 69 59 5a 56 54 59 78 58 31 52 58 4d 47 5a 49 59 46 78 4a 5a 57 35 46 5a 43 70 41 62 45 4a 4c 53 45 4e 67 59 6c 46 6f 62 46 5a 51 57 32 42 72 58 46 31 33 52 46 70 35 57 46 5a 70 56 47 69 4b 58 6b 64 68 62 32 6d 51 62 32 39 6e 59 31 5a 34 64 Data Ascii: aR17zQmtDW3rXd3tyi09rcx7ql18/Yp+mr8u3D9+Huzvnlt/y1/vzT2s7Y0t/n5eriBMnn7AjN2wDz/uQUEQLR0Q7t0xHfDgMTFgHd4Afw++P2Cg4g+wUn7xwN8uzzCQMND+4GHvUONy43LRkgKSoCKioVPQUJDkUhSCtUUFMhOC1dGiYZVTYxX1RXMGZIYFxJZW5FZCpAbEJLSENgYlFobFZQW2BrXF13RFp5WFZpVGiKXkdhb2mQb29nY1Z4d
2023-11-22 16:21:52 UTC	1369	IN	Data Raw: 2f 74 70 7a 55 32 70 36 36 31 36 50 68 75 39 75 38 32 62 7a 65 32 61 71 78 37 37 4c 74 73 76 50 48 35 50 6a 33 75 75 57 2b 41 64 47 37 31 4f 37 36 76 74 66 7a 32 2f 6e 37 42 2b 7a 58 31 67 48 66 32 2b 67 45 35 75 50 65 42 75 6a 36 30 51 63 54 47 52 34 62 41 42 62 30 44 77 51 45 38 53 6e 37 48 2f 77 73 46 79 34 74 48 53 6f 66 2b 78 38 75 4a 77 67 79 44 44 63 4e 4e 79 58 76 50 53 73 36 48 30 4d 2f 46 43 55 53 53 42 77 45 48 7a 6c 46 41 42 68 47 44 41 73 6f 52 54 56 47 4b 6b 67 35 57 69 31 4e 55 7a 39 66 55 55 46 4b 4d 46 4e 46 58 6a 6c 58 4a 47 49 39 58 55 78 41 51 6d 46 6e 61 6b 42 6b 4d 48 5a 4b 61 47 39 6d 55 47 5a 7a 65 6b 78 78 55 54 74 5a 64 58 74 6b 57 48 64 45 68 59 74 37 62 58 35 6b 66 33 46 36 59 6f 56 31 68 6d 71 43 6a 31 4e 73 6a 5a 4f 47 62 49 Data Ascii: /tpzU2p6616Phu9u82bze2aqx77LtsvPH5Pj3uuW+AdG71O76vtfz2/n7B+zX1gHf2+gE5uPeBuj60QcTGR4bABb0DwQE8Sn7H/wsFy4tHSof+x8uJwgyDDcNNyXvPSs6H0M/FCUSSBwEHzlFABhGDAsoRTVGKkg5Wi1NUz9fUUFKMFNFXjlXJGI9XUxAQmFnakBkMHZKaG9mUGZzekxxUTtZdXtkWHdEhYt7bX5kf3F6YoV1hmqCj1NsjZOGbI
2023-11-22 16:21:52 UTC	1369	IN	Data Raw: 31 75 43 32 36 75 75 6e 75 39 2f 67 30 4e 33 42 34 74 53 79 79 65 65 7a 35 64 44 72 74 73 2f 52 38 4f 44 35 31 50 54 6b 41 74 6a 34 32 50 58 5a 39 51 50 47 35 41 48 77 44 74 38 46 43 77 37 71 43 41 38 5a 47 77 33 73 43 75 30 51 32 78 72 77 46 52 73 53 39 68 6e 33 2b 77 41 63 35 79 4c 37 48 79 63 51 42 69 55 56 37 67 51 69 4c 7a 6f 4c 4c 54 50 36 44 54 45 52 51 68 41 31 46 54 31 48 4f 43 6c 4b 47 54 73 49 53 69 46 41 49 55 34 6b 50 6b 73 50 4b 45 68 50 45 79 31 4d 50 54 77 7a 55 54 46 57 55 6b 35 66 51 44 42 64 55 32 73 2f 61 56 64 4c 4b 47 42 42 61 53 74 65 62 43 35 33 62 55 6c 51 4d 33 49 37 57 45 64 75 55 58 5a 79 67 6e 74 55 58 48 6c 5a 63 6c 56 36 67 34 35 68 65 6e 70 72 54 34 52 51 6c 5a 65 54 67 57 39 55 6c 32 78 30 62 35 43 58 62 47 75 54 68 58 68 Data Ascii: 1uC26uunu9/g0N3B4tSyyeez5dDrts/R8OD51PTkAtj42PXZ9QPG5AHwDt8FCw7qCA8ZGw3sCu0Q2xrwFRsS9hn3+wAc5yL7HycQBiUV7gQiLzoLLTP6DTERQhA1FT1HOClKGTsISiFAIU4kPksPKEhPEy1MPTwzUTFWUk5fQDBdU2s/aVdLKGBBaStebC53bUlQM3I7WEduUXZygntUXHlZclV6g45henprT4RQlZeTgW9Ul2x0b5CXbGuThXh
2023-11-22 16:21:52 UTC	1369	IN	Data Raw: 62 2f 66 7a 38 2b 38 34 65 72 31 79 4f 48 68 31 72 62 72 74 2f 33 4a 41 64 50 32 31 41 54 75 42 67 58 30 41 76 62 54 39 67 62 46 78 76 6b 48 38 73 6b 52 38 39 38 58 46 41 4c 6a 31 42 77 57 2f 74 59 4c 43 2b 38 67 48 76 66 7a 34 69 6a 6e 4a 75 6f 6e 36 69 4c 33 4c 41 55 6d 4d 54 44 7a 4c 75 34 78 39 67 50 7a 4f 41 77 64 43 6b 41 55 2b 78 63 78 50 6a 49 51 52 42 67 55 43 45 6b 33 52 67 38 36 4a 45 6f 4c 55 43 68 47 44 31 51 59 54 6c 74 63 56 7a 74 66 57 31 63 77 48 6b 34 34 58 69 64 6f 59 69 4a 70 5a 32 64 6d 57 6c 70 71 54 44 78 77 52 45 41 30 64 57 4e 79 4f 32 5a 52 50 46 4e 38 61 6e 49 37 67 33 70 59 69 48 5a 79 65 59 6d 49 68 6b 68 68 6a 58 42 63 53 35 52 6b 61 4a 65 47 65 56 64 6d 6d 47 39 55 63 34 75 62 6b 6d 4f 6c 64 47 4f 6d 6c 6f 70 34 61 36 79 6d Data Ascii: b/fz8+84er1yOHh1rbrt/3JAdP21ATuBgX0AvbT9gbFxvkH8skR898XFALj1BwW/tYLC+8gHvfz4ijnJuon6iL3LAUmMTDzLu4x9gPzOAwdCkAU+xcxPjIQRBgUCEk3Rg86JEoLUChGD1QYTltcVztfW1cwHk44XidoYiJpZ2dmWlpqTDxwREA0dWNyO2ZRPFN8anI7g3pYiHZyeYmIhkhhjXBcS5RkaJeGeVdmmG9Uc4ubkmOldGOmlop4a6ym

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49738	104.17.2.184	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:52 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1659967187:1700666959:s-xfDmFBeCQJ3zR5aQxdS7p1hXAcQJ8HD8Iovqf91qk/82a281d8ed3d062f/39b36f2cbd2d955 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:53 UTC	386	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 35 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 45 6c Data Ascii: HTTP/1.1 400 Bad RequestDate: Wed, 22 Nov 2023 16:21:53 GMTContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: El
2023-11-22 16:21:53 UTC	12	IN	Data Raw: 37 0d 0a 69 6e 76 61 6c 69 64 0d 0a Data Ascii: 7invalid
2023-11-22 16:21:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49739	20.12.23.50	443

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:54 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=HspY2CHUf5tsTg5&MD=XHz6fdxt HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2023-11-22 16:21:54 UTC	560	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 4d 6f 6e 2c 20 30 31 20 4a 61 6e 20 30 30 30 31 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 58 41 6f 70 61 7a 56 30 30 58 44 57 6e 4a 43 77 6b 6d 45 57 52 76 36 4a 6b 62 6a 52 41 39 51 53 53 5a 32 2b 65 2f 33 4d 7a 45 6b 3d 5f 32 38 38 30 22 0d 0a 4d 53 2d 43 6f 72 72 65 6c 61 74 69 6f 6e 49 64 3a 20 62 38 37 33 39 61 65 32 2d 30 62 35 36 2d 34 64 38 66 2d Data Ascii: HTTP/1.1 200 OKCache-Control: no-cachePragma: no-cacheContent-Type: application/octet-streamExpires: -1Last-Modified: Mon, 01 Jan 0001 00:00:00 GMTETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880"MS-CorrelationId: b8739ae2-0b56-4d8f-
2023-11-22 16:21:54 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2023-11-22 16:21:54 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49745	104.17.3.184	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:01 UTC	918	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1659967187:1700666959:s-xfDmFBeCQJ3zR5aQxdS7p1hXAcQJ8HD8Iovqf91qk/82a281d8ed3d062f/39b36f2cbd2d955 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 29395 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 39b36f2cbd2d955 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:22:01 UTC	16384	OUT	Data Raw: 76 5f 38 32 61 32 38 31 64 38 65 64 33 64 30 36 32 66 3d 6d 53 6e 39 6a 38 6f 46 5a 79 6e 74 35 2d 72 41 55 6f 6d 41 48 39 32 33 33 41 76 41 48 48 75 72 41 58 41 32 73 2d 54 41 70 41 6d 6a 4b 48 63 43 6f 47 63 41 2d 7a 41 79 46 53 43 6f 4b 41 75 58 73 63 71 38 41 4d 6c 35 39 56 48 39 6f 5a 41 68 41 36 5a 77 6e 6e 4a 55 48 41 36 41 24 73 41 33 77 36 63 48 41 46 41 70 57 35 41 32 74 41 2d 4a 24 41 65 25 32 62 63 30 5a 41 4d 57 35 6f 77 41 6d 6e 41 6a 77 73 41 4e 79 6d 51 36 41 41 72 4a 41 6d 5a 39 4a 39 48 41 66 39 4b 58 41 38 67 6e 5a 51 5a 7a 6e 48 70 58 41 64 51 51 75 75 63 6c 46 48 43 41 63 39 24 51 35 4a 39 77 5a 43 6e 6e 67 78 6f 24 4a 7a 36 33 41 41 67 46 35 48 48 24 41 74 6e 41 4d 5a 49 38 6f 41 55 54 77 24 32 57 36 75 4a 49 6f 38 7a 6d 4f 55 44 75 Data Ascii: v_82a281d8ed3d062f=mSn9j8oFZynt5-rAUomAH9233AvAHHurAXA2s-TApAmjKHcCoGcA-zAyFSCoKAuXscq8AMl59VH9oZAhA6ZwnnJUHA6A$sA3w6cHAFApW5A2tA-J$Ae%2bc0ZAMW5owAmnAjwsANymQ6AArJAmZ9J9HAf9KXA8gnZQZznHpXAdQQuuclFHCAc9$Q5J9wZCnngxo$Jz63AAgF5HH$AtnAMZI8oAUTw$2W6uJIo8zmOUDu
2023-11-22 16:22:01 UTC	13011	OUT	Data Raw: 79 79 33 61 6f 6c 53 4c 43 77 63 70 32 36 56 41 59 4e 6b 42 4f 48 52 39 2d 46 35 39 38 5a 41 58 41 6d 39 41 53 41 65 72 38 48 41 35 41 64 41 2d 46 41 50 4a 35 48 4b 53 6f 76 41 70 41 6d 35 2b 46 41 59 41 41 6e 41 52 2d 43 39 4f 6e 4b 2b 41 33 39 6d 37 67 51 41 58 39 75 41 41 30 41 64 39 4b 53 6f 2d 41 62 39 6f 35 6f 55 41 34 39 41 53 41 4c 41 76 39 65 53 4b 35 41 56 47 75 4e 6f 38 39 74 41 4b 53 41 48 41 59 42 50 2d 38 73 41 39 41 47 39 41 70 39 45 73 38 70 6f 37 41 79 41 4d 32 35 35 41 35 48 38 46 4b 73 6f 76 41 6e 39 63 4d 39 6e 41 6e 6e 4b 4f 48 53 39 6d 6e 6f 2b 41 44 41 63 5a 6f 35 6f 32 5a 2d 41 41 6f 48 6f 41 55 35 38 55 41 31 53 79 35 6f 36 58 2b 39 6e 53 6f 50 33 54 35 79 7a 48 63 41 7a 67 54 53 41 6f 73 7a 43 6f 63 6f 6c 53 75 41 4b 53 38 24 33 Data Ascii: yy3aolSLCwcp26VAYNkBOHR9-F598ZAXAm9ASAer8HA5AdA-FAPJ5HKSovApAm5+FAYAAnAR-C9OnK+A39m7gQAX9uAA0Ad9KSo-Ab9o5oUA49ASALAv9eSK5AVGuNo89tAKSAHAYBP-8sA9AG9Ap9Es8po7AyAM255A5H8FKsovAn9cM9nAnnKOHS9mno+ADAcZo5o2Z-AAoHoAU58UA1Sy5o6X+9nSoP3T5yzHcAzgTSAoszCocolSuAKS8$3
2023-11-22 16:22:02 UTC	1307	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 30 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 49 47 79 43 50 64 4b 36 48 34 49 4a 68 4e 32 4c 45 56 62 33 2b 63 46 4d 71 35 51 4e 6c 35 45 58 4e 71 50 62 65 63 52 77 49 4e 71 58 48 64 4a 38 39 58 78 45 6f 72 73 71 63 66 51 76 76 51 54 55 34 53 73 75 31 4e 37 2b 2b 43 32 4c 65 44 48 75 75 66 7a 53 36 52 6a 57 4b 76 32 64 61 4f 35 72 58 33 74 31 77 57 Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:22:02 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-chl-out: IGyCPdK6H4IJhN2LEVb3+cFMq5QNl5EXNqPbecRwINqXHdJ89XxEorsqcfQvvQTU4Ssu1N7++C2LeDHuufzS6RjWKv2daO5rX3t1wW
2023-11-22 16:22:02 UTC	62	IN	Data Raw: 64 62 38 0d 0a 69 48 6d 54 6d 71 57 54 6d 4c 57 39 77 4c 61 6b 77 4a 2b 58 78 5a 33 51 77 4d 79 6d 77 5a 54 43 6c 71 37 50 73 35 6e 4d 6b 4e 44 57 6e 61 7a 41 7a 4b 43 76 33 39 4c 49 75 Data Ascii: db8iHmTmqWTmLW9wLakwJ+XxZ3QwMymwZTClq7Ps5nMkNDWnazAzKCv39LIu
2023-11-22 16:22:02 UTC	1369	IN	Data Raw: 38 50 65 71 65 79 34 75 63 65 6f 73 4d 4c 32 74 73 50 47 2b 72 72 4e 31 2b 7a 35 30 74 54 79 36 38 48 39 37 66 4c 78 2b 39 62 35 41 50 54 72 2f 51 6a 75 38 66 4d 4c 42 2b 50 72 42 76 54 52 35 50 55 55 32 68 73 50 47 65 34 4f 33 52 48 67 46 2f 30 70 2f 41 59 43 4c 4f 73 66 34 53 41 41 45 43 34 53 37 51 55 58 4d 68 76 33 37 54 4d 6d 48 54 73 33 2f 66 73 77 49 66 34 36 4e 53 59 57 2f 43 68 45 49 53 49 59 4c 68 39 42 48 42 38 74 56 42 45 77 53 78 6f 61 4d 30 34 73 4d 54 64 6a 58 6a 6b 2b 48 56 6b 34 58 30 41 31 4b 69 4d 6c 58 56 42 46 50 55 77 39 4d 79 31 6d 54 47 70 54 55 45 52 62 52 32 39 4c 56 6f 42 43 62 56 64 51 67 56 78 46 50 49 78 43 58 34 32 4b 69 6d 42 78 6a 34 5a 4e 6c 46 4f 41 5a 47 68 6f 69 31 79 4c 62 48 36 62 6e 33 57 66 70 6e 6c 34 6e 5a 4f 71 Data Ascii: 8Peqey4uceosML2tsPG+rrN1+z50tTy68H97fLx+9b5APTr/Qju8fMLB+PrBvTR5PUU2hsPGe4O3RHgF/0p/AYCLOsf4SAAEC4S7QUXMhv37TMmHTs3/fswIf46NSYW/ChEISIYLh9BHB8tVBEwSxoaM04sMTdjXjk+HVk4X0A1KiMlXVBFPUw9My1mTGpTUERbR29LVoBCbVdQgVxFPIxCX42KimBxj4ZNlFOAZGhoi1yLbH6bn3Wfpnl4nZOq
2023-11-22 16:22:02 UTC	1369	IN	Data Raw: 66 7a 34 61 72 31 34 4f 53 78 7a 2b 2b 34 75 74 66 37 74 73 72 74 37 77 54 52 7a 77 48 5a 77 39 45 42 42 74 37 56 41 65 44 6a 35 75 33 53 33 68 51 55 42 39 58 76 45 50 6a 54 43 68 51 63 31 2f 62 39 44 39 76 62 2b 76 7a 69 4b 68 67 6c 35 69 30 4b 47 65 63 47 38 52 44 75 44 43 45 55 37 78 45 4f 4b 2f 50 7a 4e 51 34 4c 41 67 73 54 45 42 74 42 4e 67 41 68 52 45 6b 45 50 41 5a 4d 43 43 6c 4d 55 77 38 65 55 53 67 58 53 68 5a 54 45 7a 56 4e 50 52 35 69 4c 6d 49 74 50 44 4a 41 49 54 38 68 53 53 5a 71 58 47 77 77 58 6d 30 38 52 69 78 57 55 6a 5a 6e 61 58 67 37 62 56 35 6f 4f 6d 32 42 65 31 64 78 67 47 6c 43 58 34 52 33 52 6f 35 61 65 6d 52 6e 6a 48 52 50 61 34 57 53 61 4a 71 55 68 57 31 7a 6c 5a 56 79 59 71 53 50 58 34 43 64 6f 58 6c 30 6d 4a 64 2f 69 4b 53 52 67 Data Ascii: fz4ar14OSxz++4utf7tsrt7wTRzwHZw9EBBt7VAeDj5u3S3hQUB9XvEPjTChQc1/b9D9vb+vziKhgl5i0KGecG8RDuDCEU7xEOK/PzNQ4LAgsTEBtBNgAhREkEPAZMCClMUw8eUSgXShZTEzVNPR5iLmItPDJAIT8hSSZqXGwwXm08RixWUjZnaXg7bV5oOm2Be1dxgGlCX4R3Ro5aemRnjHRPa4WSaJqUhW1zlZVyYqSPX4CdoXl0mJd/iKSRg
2023-11-22 16:22:02 UTC	719	IN	Data Raw: 31 35 73 6e 30 75 76 37 5a 39 72 66 39 2b 2b 4c 4f 33 4d 58 63 30 75 48 69 78 38 4b 2f 35 73 6a 4e 45 4f 6b 54 30 52 51 46 46 74 41 58 32 64 4c 77 48 42 6a 34 36 65 77 44 39 41 41 58 47 66 66 38 42 52 51 48 36 42 6f 63 4a 2b 62 6e 4b 51 4c 30 35 2b 30 41 39 51 38 6f 4e 2f 4d 54 42 2f 62 39 41 6b 45 53 42 52 45 53 52 42 4d 41 4a 30 6f 6a 50 30 59 6d 44 6c 42 41 53 43 6c 45 54 45 67 6b 53 31 42 62 47 44 51 2b 58 52 35 64 57 52 77 36 4f 30 59 6c 4d 32 5a 43 5a 79 74 63 53 6b 6b 74 62 32 78 56 53 56 46 70 51 6a 63 73 52 6e 31 53 61 6a 31 58 51 47 35 79 57 6c 70 78 55 6b 56 41 56 57 75 4d 6a 6b 31 4f 53 56 79 4f 66 48 46 4e 67 34 53 59 56 35 69 56 61 31 74 55 64 33 4a 73 6b 48 64 35 59 35 46 2b 5a 48 32 58 69 6d 69 49 6e 49 75 43 65 34 35 75 67 6e 53 53 63 6f Data Ascii: 15sn0uv7Z9rf9++LO3MXc0uHix8K/5sjNEOkT0RQFFtAX2dLwHBj46ewD9AAXGff8BRQH6BocJ+bnKQL05+0A9Q8oN/MTB/b9AkESBRESRBMAJ0ojP0YmDlBASClETEgkS1BbGDQ+XR5dWRw6O0YlM2ZCZytcSkktb2xVSVFpQjcsRn1Saj1XQG5yWlpxUkVAVWuMjk1OSVyOfHFNg4SYV5iVa1tUd3JskHd5Y5F+ZH2XimiInIuCe45ugnSSco
2023-11-22 16:22:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49747	172.67.173.18	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:02 UTC	858	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1016394738:1700666829:-yVJKTyB4G9hzKxVgcHjtvuTc6QxdkOn-XEeN9njovw/82a281bac8890808/b991f7e9b718311 HTTP/1.1 Host: report-doc.org Connection: keep-alive Content-Length: 3228 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: b991f7e9b718311 sec-ch-ua-platform: "Windows" Accept: / Origin: https://report-doc.org Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_chl_2=b991f7e9b718311
2023-11-22 16:22:02 UTC	3228	OUT	Data Raw: 76 5f 38 32 61 32 38 31 62 61 63 38 38 39 30 38 30 38 3d 32 43 6f 62 65 75 76 48 5a 79 6f 41 4d 54 6a 59 78 76 32 59 33 62 73 34 34 59 4d 36 59 6a 62 38 6f 59 55 59 78 62 74 43 75 55 59 68 62 62 4c 6f 75 25 32 62 6f 59 32 75 59 38 72 31 6f 75 54 59 4c 32 4b 33 57 6a 59 53 34 31 76 5a 6b 59 69 78 6f 76 73 75 74 76 59 76 6b 59 59 2d 6f 59 6c 62 59 2b 59 75 51 62 51 71 2d 59 38 2d 51 59 74 59 74 6f 76 35 59 54 6e 5a 39 67 59 24 2d 76 38 59 57 6f 76 36 59 59 43 43 59 74 45 4d 69 64 65 62 38 4d 6a 69 59 59 70 59 64 4c 4a 61 59 69 4e 59 75 6f 59 34 62 59 77 74 51 65 46 4f 59 75 39 45 7a 59 59 39 77 6f 59 6d 61 5a 59 67 67 54 55 46 54 69 55 4d 54 75 55 45 79 24 59 62 66 72 36 6d 24 6f 59 79 57 69 38 45 75 24 6e 59 24 4d 6e 4a 6b 7a 38 55 24 5a 59 4f 41 77 77 59 Data Ascii: v_82a281bac8890808=2CobeuvHZyoAMTjYxv2Y3bs44YM6Yjb8oYUYxbtCuUYhbbLou%2boY2uY8r1ouTYL2K3WjYS41vZkYixovsutvYvkYY-oYlbY+YuQbQq-Y8-QYtYtov5YTnZ9gY$-v8YWov6YYCCYtEMideb8MjiYYpYdLJaYiNYuoY4bYwtQeFOYu9EzYY9woYmaZYggTUFTiUMTuUEy$Ybfr6m$oYyWi8Eu$nY$MnJkz8U$ZYOAwwY
2023-11-22 16:22:03 UTC	1308	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 30 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 73 65 74 2d 63 6f 6f 6b 69 65 3a 20 63 66 5f 63 68 6c 5f 72 63 5f 6d 3d 3b 45 78 70 69 72 65 73 3d 54 75 65 2c 20 32 31 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 30 32 20 47 4d 54 3b 53 61 6d 65 53 69 74 65 3d 53 74 72 69 63 74 0d 0a 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 67 4e 78 4d 53 53 79 4e 67 58 6f 65 55 64 34 52 65 43 51 44 76 69 Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:22:02 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeset-cookie: cf_chl_rc_m=;Expires=Tue, 21 Nov 2023 16:22:02 GMT;SameSite=Strictcf-chl-out: gNxMSSyNgXoeUd4ReCQDvi
2023-11-22 16:22:03 UTC	61	IN	Data Raw: 63 64 38 0d 0a 6b 34 43 56 75 35 53 30 6a 6e 36 7a 67 73 6d 59 75 4b 75 71 6a 73 37 44 6b 64 4b 38 78 4c 47 78 70 38 6e 44 79 71 76 4d 74 62 57 73 71 72 58 53 72 2b 4c 61 34 62 54 70 Data Ascii: cd8k4CVu5S0jn6zgsmYuKuqjs7DkdK8xLGxp8nDyqvMtbWsqrXSr+La4bTp
2023-11-22 16:22:03 UTC	1369	IN	Data Raw: 34 4c 50 56 79 61 58 4f 32 63 32 70 35 74 50 70 77 75 58 53 36 76 44 70 36 4d 37 70 39 76 6e 36 2b 74 73 46 37 77 50 68 43 4d 6a 55 38 73 4c 6c 43 4e 30 51 44 50 30 4f 45 65 59 53 46 42 51 52 46 75 30 57 46 52 6f 67 47 4e 37 72 33 78 34 43 48 2f 55 59 49 50 67 6f 34 53 72 72 4b 4f 34 48 4b 77 6a 7a 4d 69 4d 33 39 44 59 4a 48 42 55 37 4e 42 59 73 44 77 4a 44 4d 50 31 42 52 67 45 56 4e 42 30 58 51 6b 59 65 50 55 56 4e 55 68 41 4d 51 43 6b 6a 54 69 4e 59 52 68 5a 5a 58 68 78 54 54 44 55 76 48 31 46 6c 56 56 35 6c 4b 45 6c 48 50 79 64 46 54 47 5a 50 58 79 31 74 5a 45 74 55 4d 55 35 4b 61 54 5a 49 66 6e 39 39 65 32 78 54 4f 46 4a 5a 52 55 4a 49 59 6b 52 61 64 33 6c 72 53 6c 79 53 54 6f 47 50 67 5a 71 4d 68 57 70 35 65 58 39 31 6a 58 6d 4e 59 58 32 43 6d 35 64 Data Ascii: 4LPVyaXO2c2p5tPpwuXS6vDp6M7p9vn6+tsF7wPhCMjU8sLlCN0QDP0OEeYSFBQRFu0WFRogGN7r3x4CH/UYIPgo4SrrKO4HKwjzMiM39DYJHBU7NBYsDwJDMP1BRgEVNB0XQkYePUVNUhAMQCkjTiNYRhZZXhxTTDUvH1FlVV5lKElHPydFTGZPXy1tZEtUMU5KaTZIfn99e2xTOFJZRUJIYkRad3lrSlySToGPgZqMhWp5eX91jXmNYX2Cm5d
2023-11-22 16:22:03 UTC	1369	IN	Data Raw: 2f 48 6e 35 62 7a 68 36 75 75 75 73 73 76 50 36 50 44 62 39 50 6d 36 37 76 6a 51 7a 4e 6a 79 32 76 54 57 39 64 37 71 79 51 6a 77 43 67 33 6c 2f 67 30 42 36 77 77 4f 32 66 54 34 35 74 67 63 38 78 4c 78 4a 50 58 77 2b 51 48 6c 41 75 58 33 4c 42 67 43 47 68 77 6f 34 7a 4d 65 4d 41 6b 55 37 67 4d 5a 47 76 4c 38 46 69 38 51 47 77 6f 78 45 30 41 65 4e 52 64 45 4a 6a 38 45 49 69 70 45 49 53 59 71 52 69 52 51 4d 6b 67 51 4c 69 35 4c 45 30 30 78 4f 7a 42 63 4e 55 49 63 4c 69 52 44 4f 55 4d 31 52 54 30 74 53 55 64 42 4d 55 4a 6c 52 45 39 43 61 55 68 43 4f 57 64 4d 55 6b 6c 61 55 56 74 73 64 6a 78 61 56 6e 5a 59 65 57 56 38 51 33 31 49 65 31 6c 71 63 6d 35 4f 67 6f 79 45 62 49 68 73 6b 4a 4f 56 62 33 74 38 6d 57 2b 43 6d 35 78 59 6d 70 36 47 63 34 57 69 6c 5a 61 66 Data Ascii: /Hn5bzh6uuussvP6PDb9Pm67vjQzNjy2vTW9d7qyQjwCg3l/g0B6wwO2fT45tgc8xLxJPXw+QHlAuX3LBgCGhwo4zMeMAkU7gMZGvL8Fi8QGwoxE0AeNRdEJj8EIipEISYqRiRQMkgQLi5LE00xOzBcNUIcLiRDOUM1RT0tSUdBMUJlRE9CaUhCOWdMUklaUVtsdjxaVnZYeWV8Q31Ie1lqcm5OgoyEbIhskJOVb3t8mW+Cm5xYmp6Gc4WilZaf
2023-11-22 16:22:03 UTC	496	IN	Data Raw: 33 4f 34 2b 61 33 77 37 69 33 78 2f 50 6f 2f 51 44 7a 77 41 4c 61 2b 73 66 6d 32 65 48 38 39 38 58 68 2b 4f 49 49 7a 63 76 4f 44 39 54 59 39 65 37 5a 7a 76 41 53 48 52 72 54 32 68 34 65 47 74 30 68 35 4f 48 6b 2f 41 72 70 41 42 30 53 48 75 38 7a 4c 7a 63 67 4f 54 55 4e 4b 50 55 6f 4f 7a 70 41 50 50 63 56 2f 50 59 55 45 30 52 45 46 6a 77 46 52 43 77 69 45 44 6f 77 50 6a 38 31 4d 30 77 79 4f 46 59 36 57 46 59 59 53 68 30 54 48 53 34 57 59 56 39 61 4d 56 46 6d 4b 57 4a 57 4a 79 34 73 57 56 42 75 55 56 4e 49 52 6d 42 55 63 31 6f 75 61 31 42 71 66 6d 4a 32 66 49 4e 38 4f 46 78 2f 67 32 61 46 59 6f 31 57 52 6d 4a 68 6b 57 64 50 56 56 47 4f 6d 58 46 79 65 47 69 4d 64 56 75 52 65 46 74 6a 6c 34 31 38 6a 36 4e 6e 6e 6f 61 58 5a 61 57 66 68 34 74 2b 62 33 36 31 6c Data Ascii: 3O4+a3w7i3x/Po/QDzwALa+sfm2eH898Xh+OIIzcvOD9TY9e7ZzvASHRrT2h4eGt0h5OHk/ArpAB0SHu8zLzcgOTUNKPUoOzpAPPcV/PYUE0REFjwFRCwiEDowPj81M0wyOFY6WFYYSh0THS4WYV9aMVFmKWJWJy4sWVBuUVNIRmBUc1oua1BqfmJ2fIN8OFx/g2aFYo1WRmJhkWdPVVGOmXFyeGiMdVuReFtjl418j6NnnoaXZaWfh4t+b361l
2023-11-22 16:22:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49749	172.67.173.18	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:03 UTC	1027	OUT	POST /w/files/doc_order_11.22.2023_0368201058.js HTTP/1.1 Host: report-doc.org Connection: keep-alive Content-Length: 3616 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://report-doc.org Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js?__cf_chl_tk=XuxhaDrbm05aROwP4yp3oEYzeKDRZb4cDxLYnrPY9lU-1700670099-0-gaNycGzNDJA Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_chl_2=b991f7e9b718311
2023-11-22 16:22:03 UTC	3616	OUT	Data Raw: 38 32 63 30 30 32 65 62 30 66 32 39 61 34 31 65 32 38 64 31 38 64 37 33 30 32 36 62 32 65 39 62 33 65 36 36 63 35 31 39 62 38 62 33 65 36 34 35 66 64 39 66 39 39 30 33 33 34 34 31 35 37 61 34 3d 76 4f 4f 75 78 2e 72 76 30 46 52 31 5a 64 61 7a 55 51 62 6b 6c 34 79 78 76 6c 52 61 33 32 49 58 44 54 30 77 53 79 6a 58 4c 72 63 2d 31 37 30 30 36 37 30 30 39 39 2d 30 2d 41 55 58 4b 31 35 50 4b 6a 4a 68 62 6e 73 56 6d 43 53 44 41 79 66 4a 49 55 67 5f 69 76 4a 47 64 54 4a 65 44 52 57 49 50 47 53 51 6d 72 6e 61 5f 5f 65 39 6e 44 55 44 54 36 2d 30 61 6d 79 56 4d 30 71 72 2d 6d 30 57 75 7a 38 41 31 6a 59 6a 51 32 50 66 62 54 55 51 70 4b 44 63 37 65 64 59 45 79 66 59 68 4e 67 37 47 73 33 4d 61 55 70 42 2d 58 67 67 41 63 57 4c 44 30 79 4c 53 4f 63 6f 53 6f 55 71 6b 47 Data Ascii: 82c002eb0f29a41e28d18d73026b2e9b3e66c519b8b3e645fd9f9903344157a4=vOOux.rv0FR1ZdazUQbkl4yxvlRa32IXDT0wSyjXLrc-1700670099-0-AUXK15PKjJhbnsVmCSDAyfJIUg_ivJGdTJeDRWIPGSQmrna__e9nDUDT6-0amyVM0qr-m0Wuz8A1jYjQ2PfbTUQpKDc7edYEyfYhNg7Gs3MaUpB-XggAcWLD0yLSOcoSoUqkG
2023-11-22 16:22:04 UTC	1054	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 30 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 63 66 5f 63 68 6c 5f 32 3d 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 4a 61 6e 20 30 31 20 31 39 37 30 20 30 30 3a 30 30 3a 30 30 20 55 54 43 3b 20 64 6f 6d 61 69 6e 3d 2e 72 65 70 6f 72 74 2d 64 6f 63 2e 6f 72 67 3b 20 53 65 63 75 72 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:22:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeSet-Cookie: cf_chl_2=; path=/; expires=Thu, Jan 01 1970 00:00:00 UTC; domain=.report-doc.org; SecureSet-Cookie:
2023-11-22 16:22:04 UTC	71	IN	Data Raw: 34 31 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 41<script>window.location.href = "https://www.google.com";</script>
2023-11-22 16:22:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49748	172.67.173.18	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:03 UTC	741	OUT	GET /favicon.ico HTTP/1.1 Host: report-doc.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js?__cf_chl_tk=XuxhaDrbm05aROwP4yp3oEYzeKDRZb4cDxLYnrPY9lU-1700670099-0-gaNycGzNDJA Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_chl_2=b991f7e9b718311
2023-11-22 16:22:04 UTC	732	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 30 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:22:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Strict-Transport-Security: max-a
2023-11-22 16:22:04 UTC	71	IN	Data Raw: 34 31 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 41<script>window.location.href = "https://www.google.com";</script>
2023-11-22 16:22:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49750	104.21.80.18	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:03 UTC	510	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1016394738:1700666829:-yVJKTyB4G9hzKxVgcHjtvuTc6QxdkOn-XEeN9njovw/82a281bac8890808/b991f7e9b718311 HTTP/1.1 Host: report-doc.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_chl_2=b991f7e9b718311
2023-11-22 16:22:04 UTC	715	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 30 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 30 38 Data Ascii: HTTP/1.1 400 Bad RequestDate: Wed, 22 Nov 2023 16:22:03 GMTContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: 08
2023-11-22 16:22:04 UTC	12	IN	Data Raw: 37 0d 0a 69 6e 76 61 6c 69 64 0d 0a Data Ascii: 7invalid
2023-11-22 16:22:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49746	104.17.2.184	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:03 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1659967187:1700666959:s-xfDmFBeCQJ3zR5aQxdS7p1hXAcQJ8HD8Iovqf91qk/82a281d8ed3d062f/39b36f2cbd2d955 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:22:04 UTC	386	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 30 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 61 32 Data Ascii: HTTP/1.1 400 Bad RequestDate: Wed, 22 Nov 2023 16:22:04 GMTContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: a2
2023-11-22 16:22:04 UTC	12	IN	Data Raw: 37 0d 0a 69 6e 76 61 6c 69 64 0d 0a Data Ascii: 7invalid
2023-11-22 16:22:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49751	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:04 UTC	963	OUT	GET / HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://report-doc.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2023-11-22 16:22:04 UTC	2284	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 30 34 20 47 4d 54 0d 0a 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:22:04 GMTExpires: -1Cache-Control: private, max-age=0Content-Type: text/html; charset=UTF-8Strict-Transport-Security: max-age=31536000Content-Security-Policy-Report-Only: object-src 'none';base-uri 'sel
2023-11-22 16:22:04 UTC	2284	IN	Data Raw: 31 39 32 31 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 41 6e 6d 2b 68 68 74 75 68 37 4e 4a 67 75 71 53 6e 58 48 45 41 49 71 71 4d 61 56 2b 47 58 43 6b 73 38 57 59 58 48 4a 4b 46 37 6c 36 41 65 59 4d 6a 2b 77 4f 2b 66 69 39 4f 64 44 71 46 6e 4a 54 67 39 74 30 34 39 32 44 79 6b 56 78 78 34 6a 70 76 46 62 78 6e 41 Data Ascii: 1921<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="Anm+hhtuh7NJguqSnXHEAIqqMaV+GXCks8WYXHJKF7l6AeYMj+wO+fi9OdDqFnJTg9t0492DykVxx4jpvFbxnA
2023-11-22 16:22:04 UTC	2284	IN	Data Raw: 3b 67 6f 6f 67 6c 65 2e 6c 6d 3d 5b 5d 3b 67 6f 6f 67 6c 65 2e 70 6c 6d 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 6c 6d 2e 70 75 73 68 2e 61 70 70 6c 79 28 67 6f 6f 67 6c 65 2e 6c 6d 2c 61 29 7d 3b 67 6f 6f 67 6c 65 2e 6c 71 3d 5b 5d 3b 67 6f 6f 67 6c 65 2e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 67 6f 6f 67 6c 65 2e 6c 71 2e 70 75 73 68 28 5b 5b 61 5d 2c 62 2c 63 5d 29 7d 3b 67 6f 6f 67 6c 65 2e 6c 6f 61 64 41 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 67 6f 6f 67 6c 65 2e 6c 71 2e 70 75 73 68 28 5b 61 2c 62 5d 29 7d 3b 67 6f 6f 67 6c 65 2e 62 78 3d 21 31 3b 67 6f 6f 67 6c 65 2e 6c 78 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 76 61 72 20 64 3d 5b 5d 3b 67 6f 6f 67 6c 65 2e 66 63 65 3d 66 75 6e 63 74 69 6f Data Ascii: ;google.lm=[];google.plm=function(a){google.lm.push.apply(google.lm,a)};google.lq=[];google.load=function(a,b,c){google.lq.push([[a],b,c])};google.loadAll=function(a,b){google.lq.push([a,b])};google.bx=!1;google.lx=function(){};var d=[];google.fce=functio
2023-11-22 16:22:04 UTC	1873	IN	Data Raw: 4c 65 66 74 3b 63 3d 65 28 63 29 3b 69 66 28 66 2b 72 3c 63 2e 6c 65 66 74 7c 7c 66 3e 3d 63 2e 72 69 67 68 74 29 67 7c 3d 38 7d 67 7c 7c 28 67 3d 31 2c 71 2b 74 3e 62 26 26 28 67 7c 3d 34 29 29 3b 72 65 74 75 72 6e 20 67 7d 3b 76 61 72 20 75 3d 67 6f 6f 67 6c 65 2e 63 2e 67 6c 2c 76 3d 67 6f 6f 67 6c 65 2e 63 2e 73 78 73 2c 77 3d 67 6f 6f 67 6c 65 2e 63 2e 77 66 6f 3b 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 62 2c 64 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 64 2c 63 7c 7c 21 31 29 3a 61 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 61 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 62 2c 64 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 61 2c 62 2c 64 2c 63 29 7b 22 61 64 Data Ascii: Left;c=e(c);if(f+r<c.left\|\|f>=c.right)g\|=8}g\|\|(g=1,q+t>b&&(g\|=4));return g};var u=google.c.gl,v=google.c.sxs,w=google.c.wfo;function x(a,b,d,c){a.addEventListener?a.addEventListener(b,d,c\|\|!1):a.attachEvent&&a.attachEvent("on"+b,d)}function y(a,b,d,c){"ad
2023-11-22 16:22:04 UTC	1252	IN	Data Raw: 38 30 30 30 0d 0a 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 26 26 28 62 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 2b 61 29 29 3b 67 6f 6f 67 6c 65 2e 74 69 63 6b 28 22 6c 6f 61 64 22 2c 22 66 68 74 22 2c 62 29 3b 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 61 29 7b 49 28 61 2e 74 69 6d 65 53 74 61 6d 70 29 26 26 79 28 64 6f 63 75 6d 65 6e 74 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 4a 2c 21 30 29 7d 67 6f 6f 67 6c 65 2e 63 2e 66 68 3d 49 6e 66 69 6e 69 74 79 3b 78 28 64 6f 63 75 6d 65 6e 74 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 Data Ascii: 8000window.performance.timing&&(b=Math.floor(window.performance.timing.navigationStart+a));google.tick("load","fht",b);return!0}return!1}function J(a){I(a.timeStamp)&&y(document,"visibilitychange",J,!0)}google.c.fh=Infinity;x(document,"visibilitychange"
2023-11-22 16:22:04 UTC	1252	IN	Data Raw: 76 61 72 20 62 3b 6e 75 6c 6c 3d 3d 28 62 3d 43 28 22 61 66 74 22 29 29 7c 7c 62 2e 73 65 6e 64 4e 6f 77 28 29 3b 76 61 72 20 63 3b 6e 75 6c 6c 3d 3d 28 63 3d 43 28 22 61 6c 6c 22 29 29 7c 7c 63 2e 73 65 6e 64 4e 6f 77 28 29 3b 61 3d 77 69 6e 64 6f 77 3b 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 69 6e 20 61 3f 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 67 65 68 69 64 65 22 2c 42 2c 21 31 29 3a 61 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 61 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 70 61 67 65 68 69 64 65 22 2c 42 29 7d 76 61 72 20 44 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 29 7b 7a 26 26 28 44 5b 61 5d 3d 6e 65 77 20 50 65 6e 64 69 6e 67 47 65 74 42 65 61 63 6f 6e 28 41 28 61 29 2b 22 26 69 6e 63 Data Ascii: var b;null==(b=C("aft"))\|\|b.sendNow();var c;null==(c=C("all"))\|\|c.sendNow();a=window;"addEventListener"in a?a.removeEventListener("pagehide",B,!1):a.attachEvent&&a.detachEvent("onpagehide",B)}var D={};function E(a){z&&(D[a]=new PendingGetBeacon(A(a)+"&inc
2023-11-22 16:22:04 UTC	1252	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 3f 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 62 2c 22 22 29 3a 67 6f 6f 67 6c 65 2e 6c 6f 67 28 22 22 2c 22 22 2c 62 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 48 28 61 29 7b 61 26 26 67 6f 6f 67 6c 65 2e 74 69 63 6b 28 22 6c 6f 61 64 22 2c 22 63 62 73 22 2c 61 29 3b 67 6f 6f 67 6c 65 2e 74 69 63 6b 28 22 6c 6f 61 64 22 2c 22 63 62 74 22 29 3b 47 28 22 63 61 70 22 29 7d 3b 76 61 72 20 49 3d 22 73 72 63 20 62 73 72 63 20 75 72 6c 20 6c 6c 20 69 6d 61 67 65 20 69 6d 67 2d 75 72 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 66 75 6e 63 74 69 6f 6e 20 66 61 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 49 2e 6c 65 6e 67 74 Data Ascii: function"===typeof navigator.sendBeacon?navigator.sendBeacon(b,""):google.log("","",b)}};function H(a){a&&google.tick("load","cbs",a);google.tick("load","cbt");G("cap")};var I="src bsrc url ll image img-url".split(" ");function fa(a){for(var b=0;b<I.lengt
2023-11-22 16:22:04 UTC	1252	IN	Data Raw: 3d 3d 50 2c 62 3d 4f 3d 3d 3d 4e 3b 61 3d 71 3f 61 26 26 62 3a 61 3b 61 3d 79 3f 4d 3d 3d 3d 4c 3a 61 3b 21 53 26 26 61 26 26 67 6f 6f 67 6c 65 2e 63 2e 75 28 22 69 6c 22 2c 56 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 59 28 29 7b 69 66 28 21 52 29 7b 76 61 72 20 61 3d 51 3d 3d 3d 50 2c 62 3d 4f 3d 3d 3d 4e 2c 63 3d 78 26 26 6c 61 3d 3d 3d 69 61 3b 61 26 26 28 67 6f 6f 67 6c 65 2e 63 2e 65 28 56 2c 22 61 66 74 22 2c 22 31 22 29 2c 67 6f 6f 67 6c 65 2e 63 2e 65 28 56 2c 22 61 66 74 70 22 2c 53 74 72 69 6e 67 28 4d 61 74 68 2e 72 6f 75 6e 64 28 54 29 29 29 29 3b 69 66 28 61 26 26 62 29 7b 55 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 55 29 3b 76 61 72 20 64 3b 6e 75 6c 6c 3d 3d 28 64 3d 43 28 22 63 61 70 22 29 29 7c 7c 64 2e 64 65 61 63 74 69 76 61 74 65 28 29 Data Ascii: ==P,b=O===N;a=q?a&&b:a;a=y?M===L:a;!S&&a&&google.c.u("il",V)}function Y(){if(!R){var a=Q===P,b=O===N,c=x&&la===ia;a&&(google.c.e(V,"aft","1"),google.c.e(V,"aftp",String(Math.round(T))));if(a&&b){U&&clearTimeout(U);var d;null==(d=C("cap"))\|\|d.deactivate()
2023-11-22 16:22:04 UTC	1252	IN	Data Raw: 2e 73 72 63 2c 66 3d 21 21 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 62 73 72 63 22 29 2c 72 3d 21 21 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 64 65 66 65 72 72 65 64 22 29 2c 6e 3d 21 72 26 26 66 61 28 61 29 3b 6e 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6c 7a 79 5f 22 2c 22 31 22 29 3b 64 3d 68 61 28 61 29 3b 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 61 74 66 22 2c 53 74 72 69 6e 67 28 64 29 29 3b 76 61 72 20 6b 3d 21 21 28 64 26 31 29 3b 65 3d 28 65 7c 7c 61 2e 63 6f 6d 70 6c 65 74 65 29 26 26 21 72 26 26 21 66 26 26 21 28 6b 26 26 6e 29 3b 66 3d 21 62 61 26 26 4e 75 6d 62 65 72 28 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 69 6d 6c 22 29 29 Data Ascii: .src,f=!!a.getAttribute("data-bsrc"),r=!!a.getAttribute("data-deferred"),n=!r&&fa(a);n&&a.setAttribute("data-lzy_","1");d=ha(a);a.setAttribute("data-atf",String(d));var k=!!(d&1);e=(e\|\|a.complete)&&!r&&!f&&!(k&&n);f=!ba&&Number(a.getAttribute("data-iml"))
2023-11-22 16:22:04 UTC	1252	IN	Data Raw: 29 7d 55 3d 76 6f 69 64 20 30 7d 67 6f 6f 67 6c 65 2e 63 2e 77 68 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 3b 67 6f 6f 67 6c 65 2e 63 2e 65 28 56 2c 22 77 68 22 2c 53 74 72 69 6e 67 28 67 6f 6f 67 6c 65 2e 63 2e 77 68 29 29 3b 67 6f 6f 67 6c 65 2e 63 2e 62 28 22 69 6c 22 2c 56 29 3b 69 66 28 67 6f 6f 67 6c 65 2e 63 2e 73 78 73 29 7b 76 61 72 20 76 61 3d 67 6f 6f 67 6c 65 2e 63 2e 73 65 74 75 70 3b 67 6f 6f 67 6c 65 2e 63 2e 73 65 74 75 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 28 61 29 3b 72 65 74 75 72 6e 20 72 61 28 61 29 7d 7d 65 6c 73 65 20 67 6f 6f 67 6c 65 2e 63 2e 73 65 74 75 Data Ascii: )}U=void 0}google.c.wh=Math.floor(window.innerHeight\|\|document.documentElement.clientHeight);google.c.e(V,"wh",String(google.c.wh));google.c.b("il",V);if(google.c.sxs){var va=google.c.setup;google.c.setup=function(a){va(a);return ra(a)}}else google.c.setu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49752	104.21.80.18	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:04 UTC	491	OUT	GET /favicon.ico HTTP/1.1 Host: report-doc.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_chl_2=b991f7e9b718311; cf_clearance=jpifFkb84m._ay8OoY_U8xI0a36omFiLDGWUAaQrI3E-1700670099-0-1-48230311.31d7c504.1f225cf1-250.0.0
2023-11-22 16:22:04 UTC	730	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 30 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:22:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Strict-Transport-Security: max-a
2023-11-22 16:22:04 UTC	71	IN	Data Raw: 34 31 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 41<script>window.location.href = "https://www.google.com";</script>
2023-11-22 16:22:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49753	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:05 UTC	3427	OUT	GET /xjs/_/js/k=xjs.hd.en.j7vH50XSWl8.O/am=BAAAAAAAAAAAAAAAAAAAAAQAAAAAEPUTDgFsgACBABBggAAgAICAFKQQBAMAEPBQJgAAACZAYAhYCogKvOcBAJBAFQAAAAAAEAwiAAAACAAAoAMAACCgEdAAhIBKQAAAAADyACA4ABhEEAAAAAAAAAAAAAABTBAMLkgAFAQQAAAAAAAAAAAAAKSkycVAAg/d=1/ed=1/dg=2/br=1/rs=ACT90oFcDAHDhb4_oZd5Xts_Yb9yG3qqLA/ee=cEt90b:ws9Tlc;qddgKe:x4FYXe,d7YSfd;yxTchf:KUM7Z;dtl0hd:lLQWFe;eHDfl:ofjVkb;qaS3gd:yiLg6e;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;iFQyKf:vfuNJf,QIhFr;SNUn3:ZwDk9d,x8cHvb;io8t5d:sgY6Zb;Oj465e:KG2eXe,KG2eXe;Erl4fe:FloWmf,FloWmf;JsbNhc:Xd8iUd;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;uY49fb:COQbmf;Pjplud:PoEs9b,EEDORb;QGR0gd:Mlhmy;a56pNe:JEfCwb;Me32dd:MEeYgc;wR5FRb:TtcOte,O1Gjze;pXdRYb:JKoKVe;dIoSBb:ZgGg9b;EmZ2Bf:zr1jrb;NSEoX:lazG7b;eBAeSb:Ck63tb;WCEKNd:I46Hvd;wV5Pjc:L8KGxe;EVNhjf:pw70Gc;sTsDMc:kHVSUb;wQlYve:aLUfP;zOsCQe:Ko78Df;KcokUb:KiuZBf;kbAm9d:MkHyGd;g8nkx:U4MzKc;YV5bee:IvPZ6d;pNsl2d:j9Yuyc;BjwMce:cXX2Wb;KpRAue:Tia57b;jY0zg:Q6tNgc;aZ61od:arTwJ;vfVwPd:lcrkwe;NPKaK:SdcwHb;LBgRLc:XVMNvd,SdcwHb;UyG7Kb:wQd0G;LsNahb:ucGLNb;w9w86d:dt4g2b;coJ8e:KvoW8;oSUNyd:fTfGO,fTfGO,pnvXVc;SMDL4c:fTfGO,pnvXVc;lzgfYb:PI40bd;qZx2Fc:j0xrE;IoGlCf:b5lhvb;w4rSdf:XKiZ9;h3MYod:cEt90b;eO3lse:nFClrf;zaIgPb:Qtpxbd;HMDDWe:G8QUdb;ShpF6e:N0pvGc;k2Qxcb:XY51pe;IBADCc:RYquRb;pKJiXd:VCenhc;rQSrae:C6D5Fc;kCQyJ:ueyPK;EABSZ:MXZt9d;qavrXe:zQzcXe;TxfV6d:YORN0b;UDrY1c:eps46d;F9mqte:UoRcbe;GleZL:J1A7Od;Nyt6ic:jn2sGd;JXS8fb:Qj0suc;w3bZCb:ZPGaIb;VGRfx:VFqbr;G0KhTb:LIaoZ;XUezZ:sa7lqb;aAJE9c:WHW6Ef;V2HTTe:RolTY;Wfmdue:g3MJlb;imqimf:jKGL2e;BgS6mb:fidj5d;gtVSi:ekUOYd;KQzWid:ZMKkN;UVmjEd:EesRsb;z97YGf:oug9te;AfeaP:TkrAjf;eBZ5Nd:audvde;CxXAWb:YyRLvc;VN6jIc:ddQyuf;OgagBe:cNTe0;SLtqO:Kh1xYe;tosKvd:ZCqP3;VOcgDe:YquhTb;uuQkY:u2V3ud;WDGyFe:jcVOxd;trZL0b:qY8PFe;VxQ32b:k0XsBb;DULqB:RKfG5c;Np8Qkd:Dpx6qc;bcPXSc:gSZLJb;cFTWae:gT8qnd;gaub4:TN6bMe;xBbsrc:NEW1Qc;DpcR3d:zL72xf;hjRo6e:F62sG;yGxLoc:FmAr0c;pj82le:mg5CW;dLlj2:Qqt3Gf;oUlnpc:RagDlc;Q1Ow7b:x5CSu;bFZ6gf:RsDQqe;ESrPQc:mNTJvc;R9Ulx:CR7Ufe;KOxcK:bFOvTc;G6wU6e:hezEbd;okUaUd:wItadb;ZWEUA:afR4Cf;U96pRd:FsR04;heHB1:sFczq;Fmv9Nc:O1Tzwc;hK67qb:QWEO5b;BMxAGc:E5bFse;R4IIIb:QWfeKf;whEZac:F4AmNb;tH4IIe:Ymry6;lkq0A:JyBE3e;daB6be:lMxGPd;LEikZe:byfTOb,lsjVmc/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914
2023-11-22 16:22:05 UTC	818	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 4f 72 69 67 69 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 74 72 75 73 74 65 64 2d 74 79 70 65 73 2d 66 6f 72 20 27 73 63 72 69 70 74 27 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 67 77 73 2d 74 65 61 6d 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesVary: Accept-Encoding, OriginContent-Type: text/javascript; charset=UTF-8Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-teamCross-Origin-R
2023-11-22 16:22:05 UTC	434	IN	Data Raw: 74 68 69 73 2e 5f 68 64 3d 74 68 69 73 2e 5f 68 64 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c Data Ascii: this._hd=this._hd\|\|{};(function(_){var window=this;try{/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// SPDX-License-Identifier: Apache-2.0// SPDX-License-Identifier: Apache-2.0 // Copyright The Closure L
2023-11-22 16:22:05 UTC	1252	IN	Data Raw: 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 62 61 61 2c 63 61 61 2c 6d 61 61 2c 6f 61 61 2c 79 61 61 2c 41 61 61 2c 47 61 61 2c 63 62 61 2c 6a 62 61 2c 75 62 61 2c 78 62 61 2c 42 62 61 2c 47 62 61 2c 4b 62 61 2c 4d 62 61 2c 50 62 61 2c 4f 62 61 2c 49 62 61 2c 51 61 2c 53 62 61 2c 54 61 2c 55 62 61 2c 58 62 61 2c 59 62 61 2c 24 62 61 2c 62 63 61 2c 64 63 61 2c 68 63 61 2c 6b 63 61 2c 6c 63 61 2c 6f 63 61 2c 71 63 61 2c 72 63 61 2c 77 63 61 2c 79 63 61 2c 7a 63 61 2c 41 63 61 2c 47 63 61 2c 48 63 61 2c 49 63 61 2c 44 63 61 2c 4a 63 61 2c 43 63 61 2c 4b 63 61 2c 42 63 61 2c 4c 63 61 2c 4d 63 61 2c 53 63 61 2c 54 63 61 2c 55 63 61 2c 57 63 61 2c 59 63 61 2c 61 64 61 2c 62 64 61 2c 64 64 61 2c 65 64 61 2c 66 64 61 2c 67 64 61 2c Data Ascii: ifier: Apache-2.0*/var baa,caa,maa,oaa,yaa,Aaa,Gaa,cba,jba,uba,xba,Bba,Gba,Kba,Mba,Pba,Oba,Iba,Qa,Sba,Ta,Uba,Xba,Yba,$ba,bca,dca,hca,kca,lca,oca,qca,rca,wca,yca,zca,Aca,Gca,Hca,Ica,Dca,Jca,Cca,Kca,Bca,Lca,Mca,Sca,Tca,Uca,Wca,Yca,ada,bda,dda,eda,fda,gda,
2023-11-22 16:22:05 UTC	1252	IN	Data Raw: 58 71 61 2c 24 71 61 3b 5f 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 76 6f 69 64 20 30 21 3d 3d 62 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 0a 5f 2e 61 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 25 73 22 29 3b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 61 2e 6c 65 6e 67 74 68 2d 31 2c 65 3d 30 3b Data Ascii: Xqa,$qa;_.aa=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));void 0!==b&&(this.cause=b)};_.aaa=function(a,b){a=a.split("%s");for(var c="",d=a.length-1,e=0;
2023-11-22 16:22:05 UTC	1252	IN	Data Raw: 79 28 62 2c 63 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 2e 64 65 63 6f 64 65 28 61 29 7d 63 61 74 63 68 28 66 29 7b 69 66 28 61 3d 64 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 67 61 61 29 7b 74 72 79 7b 65 2e 64 65 63 6f 64 65 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 5b 31 32 38 5d 29 29 7d 63 61 74 63 68 28 67 29 7b 7d 74 72 79 7b 65 2e 64 65 63 6f 64 65 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 5b 39 37 5d 29 29 2c 67 61 61 3d 21 30 7d 63 61 74 63 68 28 67 29 7b 67 61 61 3d 21 31 7d 7d 61 3d 21 67 61 61 7d 61 26 26 28 65 61 61 3d 76 6f 69 64 20 30 29 3b 74 68 72 6f 77 20 66 3b 7d 7d 3b 0a 5f 2e 6b 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 21 31 3b 62 3d 76 6f 69 64 20 30 3d 3d 3d 62 3f 21 31 3a 62 3b 69 66 28 69 61 61 Data Ascii: y(b,c);try{return e.decode(a)}catch(f){if(a=d){if(void 0===gaa){try{e.decode(new Uint8Array([128]))}catch(g){}try{e.decode(new Uint8Array([97])),gaa=!0}catch(g){gaa=!1}}a=!gaa}a&&(eaa=void 0);throw f;}};_.kaa=function(a){var b=!1;b=void 0===b?!1:b;if(iaa
2023-11-22 16:22:05 UTC	1252	IN	Data Raw: 64 3d 62 2e 65 78 65 63 28 61 29 3b 29 63 2e 70 75 73 68 28 5b 64 5b 31 5d 2c 64 5b 32 5d 2c 64 5b 33 5d 7c 7c 76 6f 69 64 20 30 5d 29 3b 72 65 74 75 72 6e 20 63 7d 3b 6f 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 6c 61 61 3f 21 21 5f 2e 66 61 26 26 30 3c 5f 2e 66 61 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 3b 5f 2e 70 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 61 61 28 29 3f 21 31 3a 5f 2e 69 61 28 22 4f 70 65 72 61 22 29 7d 3b 5f 2e 71 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 61 61 28 29 3f 21 31 3a 5f 2e 69 61 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 5f 2e 69 61 28 22 4d 53 49 45 22 29 7d 3b 5f 2e 72 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 61 Data Ascii: d=b.exec(a);)c.push([d[1],d[2],d[3]\|\|void 0]);return c};oaa=function(){return _.laa?!!_.fa&&0<_.fa.brands.length:!1};_.paa=function(){return oaa()?!1:_.ia("Opera")};_.qaa=function(){return oaa()?!1:_.ia("Trident")\|\|_.ia("MSIE")};_.raa=function(){return oa
2023-11-22 16:22:05 UTC	267	IN	Data Raw: 61 29 7b 76 61 72 20 62 3d 5f 2e 65 61 28 29 3b 69 66 28 22 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 22 3d 3d 3d 61 29 72 65 74 75 72 6e 20 5f 2e 71 61 61 28 29 3f 5f 2e 78 61 61 28 62 29 3a 22 22 3b 62 3d 5f 2e 6e 61 61 28 62 29 3b 76 61 72 20 63 3d 5f 2e 77 61 61 28 62 29 3b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 22 4f 70 65 72 61 22 3a 69 66 28 5f 2e 70 61 61 28 29 29 72 65 74 75 72 6e 20 63 28 5b 22 56 65 72 73 69 6f 6e 22 2c 22 4f 70 65 72 61 22 5d 29 3b 69 66 28 6f 61 61 28 29 3f 6d 61 61 28 22 4f 70 65 72 61 22 29 3a 5f 2e 69 61 28 22 4f 50 52 22 29 29 72 65 74 75 72 6e 20 63 28 5b 22 4f 50 52 22 5d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 3a 69 66 28 5f 2e 72 61 61 28 29 29 72 65 74 75 Data Ascii: a){var b=_.ea();if("Internet Explorer"===a)return _.qaa()?_.xaa(b):"";b=_.naa(b);var c=_.waa(b);switch(a){case "Opera":if(_.paa())return c(["Version","Opera"]);if(oaa()?maa("Opera"):_.ia("OPR"))return c(["OPR"]);break;case "Microsoft Edge":if(_.raa())retu
2023-11-22 16:22:05 UTC	1252	IN	Data Raw: 5d 29 3b 69 66 28 5f 2e 73 61 61 28 29 29 72 65 74 75 72 6e 20 63 28 5b 22 45 64 67 22 5d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 43 68 72 6f 6d 69 75 6d 22 3a 69 66 28 5f 2e 6a 61 28 29 29 72 65 74 75 72 6e 20 63 28 5b 22 43 68 72 6f 6d 65 22 2c 22 43 72 69 4f 53 22 2c 22 48 65 61 64 6c 65 73 73 43 68 72 6f 6d 65 22 5d 29 7d 72 65 74 75 72 6e 22 46 69 72 65 66 6f 78 22 3d 3d 3d 61 26 26 5f 2e 74 61 61 28 29 7c 7c 22 53 61 66 61 72 69 22 3d 3d 3d 61 26 26 5f 2e 6c 61 28 29 7c 7c 22 41 6e 64 72 6f 69 64 20 42 72 6f 77 73 65 72 22 3d 3d 3d 61 26 26 5f 2e 76 61 61 28 29 7c 7c 22 53 69 6c 6b 22 3d 3d 3d 61 26 26 5f 2e 75 61 61 28 29 3f 28 61 3d 62 5b 32 5d 29 26 26 0a 61 5b 31 5d 7c 7c 22 22 3a 22 22 7d 3b 5f 2e 7a 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: ]);if(_.saa())return c(["Edg"]);break;case "Chromium":if(_.ja())return c(["Chrome","CriOS","HeadlessChrome"])}return"Firefox"===a&&_.taa()\|\|"Safari"===a&&_.la()\|\|"Android Browser"===a&&_.vaa()\|\|"Silk"===a&&_.uaa()?(a=b[2])&&a[1]\|\|"":""};_.zaa=function(a)
2023-11-22 16:22:05 UTC	1252	IN	Data Raw: 3d 28 61 3d 62 2e 65 78 65 63 28 61 29 29 3f 61 5b 31 5d 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2e 22 29 3a 22 31 30 22 29 3a 5f 2e 54 61 61 28 5f 2e 65 61 28 29 2c 22 4b 61 69 4f 53 22 29 3f 28 62 3d 2f 28 3f 3a 4b 61 69 4f 53 29 5c 2f 28 5c 53 2b 29 2f 69 2c 62 3d 28 61 3d 62 2e 65 78 65 63 28 61 29 29 26 26 61 5b 31 5d 29 3a 5f 2e 42 61 61 28 29 3f 28 62 3d 2f 41 6e 64 72 6f 69 64 5c 73 2b 28 5b 5e 5c 29 3b 5d 2b 29 28 5c 29 7c 3b 29 2f 2c 62 3d 28 61 3d 62 2e 65 78 65 63 28 61 29 29 26 26 61 5b 31 5d 29 3a 47 61 61 28 29 26 26 28 62 3d 2f 28 3f 3a 43 72 4f 53 5c 73 2b 28 3f 3a 69 36 38 36 7c 78 38 36 5f 36 34 29 5c 73 2b 28 5b 30 2d 39 2e 5d 2b 29 29 2f 2c 62 3d 28 61 3d 62 2e 65 78 65 63 28 61 29 29 26 26 61 5b 31 5d 29 3b 72 65 74 75 72 6e 20 Data Ascii: =(a=b.exec(a))?a[1].replace(/_/g,"."):"10"):_.Taa(_.ea(),"KaiOS")?(b=/(?:KaiOS)\/(\S+)/i,b=(a=b.exec(a))&&a[1]):_.Baa()?(b=/Android\s+([^\);]+)(\)\|;)/,b=(a=b.exec(a))&&a[1]):Gaa()&&(b=/(?:CrOS\s+(?:i686\|x86_64)\s+([0-9.]+))/,b=(a=b.exec(a))&&a[1]);return
2023-11-22 16:22:05 UTC	1252	IN	Data Raw: 7b 76 61 72 20 63 3d 30 3b 5f 2e 70 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 64 2c 65 2c 61 29 26 26 5f 2e 75 61 28 61 2c 65 29 26 26 63 2b 2b 7d 29 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 78 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 5f 2e 62 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 5f 2e 79 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3c 62 29 Data Ascii: {var c=0;_.pa(a,function(d,e){b.call(void 0,d,e,a)&&_.ua(a,e)&&c++});return c};_.xa=function(a){return Array.prototype.concat.apply([],arguments)};_.bba=function(a){return Array.prototype.concat.apply([],arguments)};_.ya=function(a){var b=a.length;if(0<b)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49754	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:05 UTC	1345	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_272x92dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914
2023-11-22 16:22:05 UTC	671	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/pngCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"en
2023-11-22 16:22:05 UTC	581	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 10 00 00 00 5c 08 06 00 00 00 a6 e7 ea b6 00 00 17 18 49 44 41 54 78 01 ed 5d 0b 94 1c 55 99 be 3a d3 81 c0 2e 82 c2 2a 82 08 12 10 90 05 92 aa 9a 84 90 d8 5d b7 7b b2 41 e2 41 81 28 b8 bb 0a 08 8a 1b 5c 84 98 05 e5 31 9a ae 9a 09 89 c0 02 0a 41 40 36 e1 81 06 17 10 1f 90 cc 24 01 f4 08 28 c8 43 58 58 7c 10 1e 64 fa 11 92 49 55 75 1e 99 64 7a ef b7 e6 b8 a4 b7 67 e6 bf d5 75 bb aa 87 fb 9d 73 4f e7 31 d3 d3 67 ea d6 57 ff fd ff ef ff 7e 16 07 66 76 ad db 2b ed 54 4c ee 7a a7 71 d7 9f 63 bb c1 65 b6 eb 3b dc f1 7b c4 df e7 8b bf 5f 22 d6 b9 d9 ee 60 56 da f5 8f 4e 77 55 77 67 1a 1a 1a ef 4c a4 7b 36 1f cc 9d ca 79 dc 0d ee b2 5d ff cf e2 b5 2a b3 32 79 6f bb 78 7d 5e 7c ef cd dc f5 ff 29 dd e5 ed cb Data Ascii: PNGIHDR\IDATx]U:.]{AA(\1A@6$(CXX\|dIUudzgusO1gW~fv+TLzqce;{_"`VNwUwgL{6y]2yox}^\|)
2023-11-22 16:22:05 UTC	1252	IN	Data Raw: 98 8c 1b 6c 0c 29 f2 7a c1 ce fb 67 88 5e 96 76 16 21 10 9d d8 ae ff 2d ee 06 be 26 0f 0d 4d 20 09 45 67 97 ff 77 c8 4b 84 20 0f 9f 3b fe d7 40 1c 71 69 50 34 79 68 68 02 89 11 b3 97 55 db 6c 37 58 2d 1f 75 f8 bf ce 2d d8 74 50 93 8f 58 9f 15 44 e2 69 f2 d0 d0 04 92 10 70 27 b8 54 3e 59 19 5c 6f dc 54 4d b1 18 90 ed de 78 78 26 1f fc b7 26 0f 0d 4d 20 09 c8 7b f0 bc b7 4d 2a 51 ea 04 df 40 a2 93 c5 08 b4 f9 c3 43 84 69 68 68 02 89 07 5d 5d d5 77 73 d7 7f 4c 92 3c e6 31 0d 0d 0d 4d 20 82 0c 3e 2f 79 6c b9 86 1e 79 68 68 8c 59 68 02 99 79 ed d0 6e dc f5 d6 48 94 69 57 21 d9 ca 34 34 34 34 81 70 27 38 47 82 3c d6 a1 8c ca 34 34 34 34 81 20 f7 21 d3 24 27 92 95 5f 60 80 86 86 86 26 10 f4 ba c8 68 3d 40 38 0c d0 d0 d0 d0 04 c2 f3 c1 9d 54 02 41 6f 0c 03 34 34 Data Ascii: l)zg^v!-&M EgwK ;@qiP4yhhUl7X-u-tPXDip'T>Y\oTMxx&&M {M*Q@Cihh]]wsL<1M >/ylyhhYhynHiW!4444p'8G<4444 !$'_`&h=@8TAo44
2023-11-22 16:22:05 UTC	1252	IN	Data Raw: 7d b3 f7 a6 9e 44 de 62 a8 6f fc 01 75 df 77 f5 f8 03 c5 fb 7e 45 24 48 9f 96 7d 6f 7c 1e 7c 2e ba 57 8d bf 58 9e 34 bc 57 71 4c 87 e5 65 3d 05 35 46 8d 70 d7 9f 8b d1 23 49 24 10 ec 8d 10 e4 f1 b8 d8 4f 9f 7d 6d ca 94 f1 c3 ed 65 1c 4d 20 2a a3 bf a7 b9 6c 98 9b d6 5b 42 9c ed 72 f3 d8 27 90 ca b0 09 3e 30 b8 5c e8 67 bd 56 e0 1d 9f 82 d0 87 2c 08 ca 9a a7 a2 da 22 75 94 b1 cd ab 68 15 97 d4 35 92 79 8a 57 07 fb c6 7d b2 5a a5 7d 7e 7c 9d f8 fa 4f 0b 52 78 5d 92 48 ae a3 89 1d bd b4 e4 30 b1 0a 26 03 50 3d 7a f1 75 20 12 4c 45 4c 0a 81 40 22 50 b0 8d 8d f4 bd 60 bc 55 b2 8d 33 a8 7b ee 95 74 7a 77 99 72 70 d1 ee 98 51 27 02 f1 bf 4f 22 90 7c 70 f7 98 3f c2 e4 fd 8b ea 32 76 6e f2 91 82 10 76 48 d4 d2 1f 1c 98 36 6d 1f 16 02 d0 7b 40 90 26 75 46 b5 cd 8f Data Ascii: }Dbouw~E$H}o\|\|.WX4WqLe=5Fp#I$O}meM *l[Br'>0\gV,"uh5yW}Z}~\|ORx]H0&P=zu LEL@"P`U3{tzwrpQ'O"\|p?2vnvH6m{@&uF
2023-11-22 16:22:05 UTC	1252	IN	Data Raw: f5 bf 4d dc 84 e7 ff 7f 02 31 1f a2 fc e2 09 2c dd 10 d0 d3 10 22 17 83 dc c3 43 94 1b 57 a5 63 37 50 5d c6 c6 11 73 31 bd 35 5e 35 0e 31 2a b6 99 42 a0 8d a3 99 04 42 f1 d3 fd df 48 c3 b6 9e 8b e8 98 f2 78 31 db f1 79 ec 33 e5 4f 6a 2c 34 1e 21 5f d0 22 d3 f6 fe 48 d4 b9 1c c5 6a 00 67 6b 12 81 28 be 01 a1 6c 25 36 ee f5 d5 10 48 1f a5 fa c1 00 b5 04 d2 46 ec d0 5d 55 53 c2 ed a1 3d d0 bc 8f 2b ce a1 dd d8 4c 02 69 8e 69 90 b1 b9 c0 ad 5b cb f6 64 23 42 1d 46 f0 a8 84 f0 ea 0a 96 70 50 33 e8 b0 fc 47 ae a4 ce 93 e0 7e 92 b0 06 e5 53 85 40 7f 0c b1 57 e1 be 9a 23 cc fd a4 23 cc 72 b6 27 53 08 94 67 89 1e 21 3f af 89 8a bb 88 e5 f7 4f 30 85 40 29 b7 99 04 a2 d0 fb 03 e5 fe 97 e1 34 06 ad 49 ac f3 61 20 b0 81 ad 5c a2 93 a7 f0 7e a0 85 c0 0b eb 37 19 99 4b Data Ascii: M1,"CWc7P]s15^51*BBHx1y3Oj,4!_"Hjgk(l%6HF]US=+Lii[d#BFpP3G~S@W##r'Sg!?O0@)4Ia \~7K
2023-11-22 16:22:05 UTC	1252	IN	Data Raw: 6f 1a 8c 7c 60 1f 87 23 09 a2 15 7b fe c6 8f c2 62 00 ed dc 08 5f 6d 37 e8 a5 90 06 e1 58 75 19 0b 89 f2 0c e3 08 59 1b b8 9d b3 4c 2f 1f ed c9 80 6e 5b b8 4b 89 e8 65 83 24 79 6c a1 fa b0 62 74 82 c8 33 6c 95 9c 44 f7 96 20 92 4b 05 31 8c 78 14 85 21 32 44 6b 82 a4 36 48 be ff 56 7c 2e 46 00 72 21 3c 1f bc 28 97 d4 f7 36 71 c7 5b 84 07 e0 68 09 78 4c 27 c0 d7 27 6f b0 94 75 a6 6c 49 17 ba 21 e4 ee f0 60 19 6d 4f 8b 7d 77 9d cc be 46 34 22 88 ea e4 d0 02 2d 0c d9 4e d2 4c d2 66 f6 ee 14 b9 71 7e 58 7f 85 9d de aa d7 c3 a4 08 79 12 bc 62 a8 0f bc 1f 6a 4a 76 e4 85 44 9b a4 a0 eb fc 90 23 2d 77 88 2a c9 e3 f0 37 85 49 11 26 d5 e1 55 fc db f5 f0 32 c5 b1 27 cc fb 22 4f c2 24 00 4f de 5a 8f 52 99 92 3d 77 82 1b e0 bc 0f e9 bb ed fa 17 72 37 b8 16 ed 0e 82 38 Data Ascii: o\|`#{b_m7XuYL/n[Ke$ylbt3lD K1x!2Dk6HV\|.Fr!<(6q[hxL''oulI!`mO}wF4"-NLfq~XybjJvD#-w*7I&U2'"O$OZR=wr78
2023-11-22 16:22:05 UTC	380	IN	Data Raw: 88 6c 08 f9 8f 9f 32 0d 0d 8d e4 02 be 1d 44 bd d0 66 c8 02 58 83 80 65 45 26 1f bc 40 9c cb fb cf 4c 43 43 23 b9 c8 cd df 78 18 55 78 88 a6 ce 46 a6 f5 43 a4 08 07 3c a2 c8 71 c3 ac ae ea 1e 4c 43 43 23 d9 c8 b8 fe 8d 52 ad 0e 21 3a b2 31 dd 4e c6 71 cf 76 7c 97 b5 06 34 34 74 d5 05 25 55 c9 41 67 2f 62 38 14 a2 8a 91 7a b6 e0 cb 8b 31 24 e8 e8 96 e8 9b 19 c0 67 62 ad 01 0d 0d 0d 48 d1 c3 fa 7a 88 1b fe 51 db f1 17 db ae ef 20 72 40 44 c3 1d 6f 79 b8 c6 3b 2c 7f 0e 6b 2d 68 68 68 80 00 e2 36 ad 42 8e 04 22 33 d6 8a d0 d0 d0 ca 53 6f 69 5c e4 81 ee 5e 0c ba 62 1a 1a 1a 49 05 61 6a 7e 3e b8 bd e9 e4 81 b9 cf dd 1b 0f 67 ad 0f 0d 0d 1d 89 20 97 d1 44 02 79 89 60 d2 dd 4a d0 d0 d0 c0 d8 0e 38 89 a9 3d b6 04 77 2a 73 be d3 d0 d0 88 df 30 88 3b c1 75 51 3b b4 Data Ascii: l2DfXeE&@LCC#xUxFC<qLCC#R!:1Nqv\|44t%UAg/b8z1$gbHzQ r@Doy;,k-hhh6B"3Soi\^bIaj~>g Dy`J8=w*s0;uQ;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49755	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:05 UTC	1339	OUT	GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914
2023-11-22 16:22:05 UTC	671	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 77 65 62 70 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/webpCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"e
2023-11-22 16:22:05 UTC	581	IN	Data Raw: 52 49 46 46 8c 02 00 00 57 45 42 50 56 50 38 4c 80 02 00 00 2f 27 c0 1e 10 d5 48 76 b6 3d 6e 95 fb bf 0a bb 07 b8 51 ea d8 9f 99 61 e5 e8 28 52 76 0c 6f ab da 55 98 1c c6 fe ea 8a 99 6c 18 b6 6d 1b a6 ff 1f dc da f4 06 30 6c db 36 6c ae ed 66 da 0c b1 ed 09 a4 90 41 3f 42 08 43 98 41 19 94 c1 32 68 06 9d 41 67 30 84 10 0e e1 47 38 07 6e 23 29 52 ba 6a f1 78 a0 e6 be 50 9e 46 e5 ce 49 3b cc 4f 78 a1 e7 c7 cf f5 1c 37 2d f7 c8 cf 62 58 9e 2f eb c0 5d c5 88 96 af 33 cb b8 1c 54 80 ab 93 e1 a2 35 b7 ba 01 78 ee ac da f6 47 2e 43 09 aa 19 e0 b7 25 e2 75 03 8e 19 f9 14 75 2f 97 5f b4 3d f0 b2 94 98 bc 10 3c 21 71 06 5c 86 f8 07 39 02 f7 de b2 c2 15 5c f7 a6 1a 07 70 3a 14 bc 50 f8 34 1f 61 53 00 4e 29 9c 3e b0 3e 18 ae 22 06 db 83 39 99 e0 56 68 20 a7 aa d0 80 Data Ascii: RIFFWEBPVP8L/'Hv=nQa(RvoUlm0l6lfA?BCA2hAg0G8n#)RjxPFI;Ox7-bX/]3T5xG.C%uu/_=<!q\9\p:P4aSN)>>"9Vh
2023-11-22 16:22:05 UTC	79	IN	Data Raw: 67 d7 f6 25 ed f7 1a 3b 0c 5b 52 3e 4e 12 23 dc 57 c2 65 8f e2 40 71 07 08 1e 28 e6 10 c1 ef 5d 26 7f 02 0d 1d 96 e2 4b 99 03 b9 bf 9a ed c8 3f af 7c 07 7a 10 1e 28 df 11 e5 3a 26 6d 01 56 ce 43 e7 27 c6 9f c0 0f 44 5e e3 52 9e bb aa 00 Data Ascii: g%;[R>N#We@q(]&K?\|z(:&mVC'D^R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49758	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:06 UTC	1486	OUT	POST /gen_204?s=webhp&t=aft&atyp=csi&ei=rCpeZdXlGruf5NoPj9ax6A4&rt=wsrt.618,aft.969,afti.969,hst.162,prt.561&wh=907&imn=5&ima=2&imad=0&imac=0&imf=0&aft=1&aftp=907&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914
2023-11-22 16:22:06 UTC	1227	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 53 54 53 55 7a 56 2d 6c 46 48 4a 53 79 75 5a 31 4f 67 34 30 4c 51 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 20 68 74 74 70 3a 3b 72 65 70 6f 72 74 2d 75 72 69 20 68 74 Data Ascii: HTTP/1.1 204 No ContentContent-Type: text/html; charset=UTF-8Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-STSUzV-lFHJSyuZ1Og40LQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49761	142.251.16.105	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:07 UTC	769	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_272x92dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914
2023-11-22 16:22:07 UTC	671	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/pngCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"en
2023-11-22 16:22:07 UTC	581	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 10 00 00 00 5c 08 06 00 00 00 a6 e7 ea b6 00 00 17 18 49 44 41 54 78 01 ed 5d 0b 94 1c 55 99 be 3a d3 81 c0 2e 82 c2 2a 82 08 12 10 90 05 92 aa 9a 84 90 d8 5d b7 7b b2 41 e2 41 81 28 b8 bb 0a 08 8a 1b 5c 84 98 05 e5 31 9a ae 9a 09 89 c0 02 0a 41 40 36 e1 81 06 17 10 1f 90 cc 24 01 f4 08 28 c8 43 58 58 7c 10 1e 64 fa 11 92 49 55 75 1e 99 64 7a ef b7 e6 b8 a4 b7 67 e6 bf d5 75 bb aa 87 fb 9d 73 4f e7 31 d3 d3 67 ea d6 57 ff fd ff ef ff 7e 16 07 66 76 ad db 2b ed 54 4c ee 7a a7 71 d7 9f 63 bb c1 65 b6 eb 3b dc f1 7b c4 df e7 8b bf 5f 22 d6 b9 d9 ee 60 56 da f5 8f 4e 77 55 77 67 1a 1a 1a ef 4c a4 7b 36 1f cc 9d ca 79 dc 0d ee b2 5d ff cf e2 b5 2a b3 32 79 6f bb 78 7d 5e 7c ef cd dc f5 ff 29 dd e5 ed cb Data Ascii: PNGIHDR\IDATx]U:.]{AA(\1A@6$(CXX\|dIUudzgusO1gW~fv+TLzqce;{_"`VNwUwgL{6y]2yox}^\|)
2023-11-22 16:22:07 UTC	1252	IN	Data Raw: 98 8c 1b 6c 0c 29 f2 7a c1 ce fb 67 88 5e 96 76 16 21 10 9d d8 ae ff 2d ee 06 be 26 0f 0d 4d 20 09 45 67 97 ff 77 c8 4b 84 20 0f 9f 3b fe d7 40 1c 71 69 50 34 79 68 68 02 89 11 b3 97 55 db 6c 37 58 2d 1f 75 f8 bf ce 2d d8 74 50 93 8f 58 9f 15 44 e2 69 f2 d0 d0 04 92 10 70 27 b8 54 3e 59 19 5c 6f dc 54 4d b1 18 90 ed de 78 78 26 1f fc b7 26 0f 0d 4d 20 09 c8 7b f0 bc b7 4d 2a 51 ea 04 df 40 a2 93 c5 08 b4 f9 c3 43 84 69 68 68 02 89 07 5d 5d d5 77 73 d7 7f 4c 92 3c e6 31 0d 0d 0d 4d 20 82 0c 3e 2f 79 6c b9 86 1e 79 68 68 8c 59 68 02 99 79 ed d0 6e dc f5 d6 48 94 69 57 21 d9 ca 34 34 34 34 81 70 27 38 47 82 3c d6 a1 8c ca 34 34 34 34 81 20 f7 21 d3 24 27 92 95 5f 60 80 86 86 86 26 10 f4 ba c8 68 3d 40 38 0c d0 d0 d0 d0 04 c2 f3 c1 9d 54 02 41 6f 0c 03 34 34 Data Ascii: l)zg^v!-&M EgwK ;@qiP4yhhUl7X-u-tPXDip'T>Y\oTMxx&&M {M*Q@Cihh]]wsL<1M >/ylyhhYhynHiW!4444p'8G<4444 !$'_`&h=@8TAo44
2023-11-22 16:22:07 UTC	1252	IN	Data Raw: 7d b3 f7 a6 9e 44 de 62 a8 6f fc 01 75 df 77 f5 f8 03 c5 fb 7e 45 24 48 9f 96 7d 6f 7c 1e 7c 2e ba 57 8d bf 58 9e 34 bc 57 71 4c 87 e5 65 3d 05 35 46 8d 70 d7 9f 8b d1 23 49 24 10 ec 8d 10 e4 f1 b8 d8 4f 9f 7d 6d ca 94 f1 c3 ed 65 1c 4d 20 2a a3 bf a7 b9 6c 98 9b d6 5b 42 9c ed 72 f3 d8 27 90 ca b0 09 3e 30 b8 5c e8 67 bd 56 e0 1d 9f 82 d0 87 2c 08 ca 9a a7 a2 da 22 75 94 b1 cd ab 68 15 97 d4 35 92 79 8a 57 07 fb c6 7d b2 5a a5 7d 7e 7c 9d f8 fa 4f 0b 52 78 5d 92 48 ae a3 89 1d bd b4 e4 30 b1 0a 26 03 50 3d 7a f1 75 20 12 4c 45 4c 0a 81 40 22 50 b0 8d 8d f4 bd 60 bc 55 b2 8d 33 a8 7b ee 95 74 7a 77 99 72 70 d1 ee 98 51 27 02 f1 bf 4f 22 90 7c 70 f7 98 3f c2 e4 fd 8b ea 32 76 6e f2 91 82 10 76 48 d4 d2 1f 1c 98 36 6d 1f 16 02 d0 7b 40 90 26 75 46 b5 cd 8f Data Ascii: }Dbouw~E$H}o\|\|.WX4WqLe=5Fp#I$O}meM *l[Br'>0\gV,"uh5yW}Z}~\|ORx]H0&P=zu LEL@"P`U3{tzwrpQ'O"\|p?2vnvH6m{@&uF
2023-11-22 16:22:07 UTC	1252	IN	Data Raw: f5 bf 4d dc 84 e7 ff 7f 02 31 1f a2 fc e2 09 2c dd 10 d0 d3 10 22 17 83 dc c3 43 94 1b 57 a5 63 37 50 5d c6 c6 11 73 31 bd 35 5e 35 0e 31 2a b6 99 42 a0 8d a3 99 04 42 f1 d3 fd df 48 c3 b6 9e 8b e8 98 f2 78 31 db f1 79 ec 33 e5 4f 6a 2c 34 1e 21 5f d0 22 d3 f6 fe 48 d4 b9 1c c5 6a 00 67 6b 12 81 28 be 01 a1 6c 25 36 ee f5 d5 10 48 1f a5 fa c1 00 b5 04 d2 46 ec d0 5d 55 53 c2 ed a1 3d d0 bc 8f 2b ce a1 dd d8 4c 02 69 8e 69 90 b1 b9 c0 ad 5b cb f6 64 23 42 1d 46 f0 a8 84 f0 ea 0a 96 70 50 33 e8 b0 fc 47 ae a4 ce 93 e0 7e 92 b0 06 e5 53 85 40 7f 0c b1 57 e1 be 9a 23 cc fd a4 23 cc 72 b6 27 53 08 94 67 89 1e 21 3f af 89 8a bb 88 e5 f7 4f 30 85 40 29 b7 99 04 a2 d0 fb 03 e5 fe 97 e1 34 06 ad 49 ac f3 61 20 b0 81 ad 5c a2 93 a7 f0 7e a0 85 c0 0b eb 37 19 99 4b Data Ascii: M1,"CWc7P]s15^51*BBHx1y3Oj,4!_"Hjgk(l%6HF]US=+Lii[d#BFpP3G~S@W##r'Sg!?O0@)4Ia \~7K
2023-11-22 16:22:07 UTC	1252	IN	Data Raw: 6f 1a 8c 7c 60 1f 87 23 09 a2 15 7b fe c6 8f c2 62 00 ed dc 08 5f 6d 37 e8 a5 90 06 e1 58 75 19 0b 89 f2 0c e3 08 59 1b b8 9d b3 4c 2f 1f ed c9 80 6e 5b b8 4b 89 e8 65 83 24 79 6c a1 fa b0 62 74 82 c8 33 6c 95 9c 44 f7 96 20 92 4b 05 31 8c 78 14 85 21 32 44 6b 82 a4 36 48 be ff 56 7c 2e 46 00 72 21 3c 1f bc 28 97 d4 f7 36 71 c7 5b 84 07 e0 68 09 78 4c 27 c0 d7 27 6f b0 94 75 a6 6c 49 17 ba 21 e4 ee f0 60 19 6d 4f 8b 7d 77 9d cc be 46 34 22 88 ea e4 d0 02 2d 0c d9 4e d2 4c d2 66 f6 ee 14 b9 71 7e 58 7f 85 9d de aa d7 c3 a4 08 79 12 bc 62 a8 0f bc 1f 6a 4a 76 e4 85 44 9b a4 a0 eb fc 90 23 2d 77 88 2a c9 e3 f0 37 85 49 11 26 d5 e1 55 fc db f5 f0 32 c5 b1 27 cc fb 22 4f c2 24 00 4f de 5a 8f 52 99 92 3d 77 82 1b e0 bc 0f e9 bb ed fa 17 72 37 b8 16 ed 0e 82 38 Data Ascii: o\|`#{b_m7XuYL/n[Ke$ylbt3lD K1x!2Dk6HV\|.Fr!<(6q[hxL''oulI!`mO}wF4"-NLfq~XybjJvD#-w*7I&U2'"O$OZR=wr78
2023-11-22 16:22:07 UTC	380	IN	Data Raw: 88 6c 08 f9 8f 9f 32 0d 0d 8d e4 02 be 1d 44 bd d0 66 c8 02 58 83 80 65 45 26 1f bc 40 9c cb fb cf 4c 43 43 23 b9 c8 cd df 78 18 55 78 88 a6 ce 46 a6 f5 43 a4 08 07 3c a2 c8 71 c3 ac ae ea 1e 4c 43 43 23 d9 c8 b8 fe 8d 52 ad 0e 21 3a b2 31 dd 4e c6 71 cf 76 7c 97 b5 06 34 34 74 d5 05 25 55 c9 41 67 2f 62 38 14 a2 8a 91 7a b6 e0 cb 8b 31 24 e8 e8 96 e8 9b 19 c0 67 62 ad 01 0d 0d 0d 48 d1 c3 fa 7a 88 1b fe 51 db f1 17 db ae ef 20 72 40 44 c3 1d 6f 79 b8 c6 3b 2c 7f 0e 6b 2d 68 68 68 80 00 e2 36 ad 42 8e 04 22 33 d6 8a d0 d0 d0 ca 53 6f 69 5c e4 81 ee 5e 0c ba 62 1a 1a 1a 49 05 61 6a 7e 3e b8 bd e9 e4 81 b9 cf dd 1b 0f 67 ad 0f 0d 0d 1d 89 20 97 d1 44 02 79 89 60 d2 dd 4a d0 d0 d0 c0 d8 0e 38 89 a9 3d b6 04 77 2a 73 be d3 d0 d0 88 df 30 88 3b c1 75 51 3b b4 Data Ascii: l2DfXeE&@LCC#xUxFC<qLCC#R!:1Nqv\|44t%UAg/b8z1$gbHzQ r@Doy;,k-hhh6B"3Soi\^bIaj~>g Dy`J8=w*s0;uQ;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49762	142.251.16.105	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:07 UTC	763	OUT	GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914
2023-11-22 16:22:07 UTC	671	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 77 65 62 70 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/webpCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"e
2023-11-22 16:22:07 UTC	581	IN	Data Raw: 52 49 46 46 8c 02 00 00 57 45 42 50 56 50 38 4c 80 02 00 00 2f 27 c0 1e 10 d5 48 76 b6 3d 6e 95 fb bf 0a bb 07 b8 51 ea d8 9f 99 61 e5 e8 28 52 76 0c 6f ab da 55 98 1c c6 fe ea 8a 99 6c 18 b6 6d 1b a6 ff 1f dc da f4 06 30 6c db 36 6c ae ed 66 da 0c b1 ed 09 a4 90 41 3f 42 08 43 98 41 19 94 c1 32 68 06 9d 41 67 30 84 10 0e e1 47 38 07 6e 23 29 52 ba 6a f1 78 a0 e6 be 50 9e 46 e5 ce 49 3b cc 4f 78 a1 e7 c7 cf f5 1c 37 2d f7 c8 cf 62 58 9e 2f eb c0 5d c5 88 96 af 33 cb b8 1c 54 80 ab 93 e1 a2 35 b7 ba 01 78 ee ac da f6 47 2e 43 09 aa 19 e0 b7 25 e2 75 03 8e 19 f9 14 75 2f 97 5f b4 3d f0 b2 94 98 bc 10 3c 21 71 06 5c 86 f8 07 39 02 f7 de b2 c2 15 5c f7 a6 1a 07 70 3a 14 bc 50 f8 34 1f 61 53 00 4e 29 9c 3e b0 3e 18 ae 22 06 db 83 39 99 e0 56 68 20 a7 aa d0 80 Data Ascii: RIFFWEBPVP8L/'Hv=nQa(RvoUlm0l6lfA?BCA2hAg0G8n#)RjxPFI;Ox7-bX/]3T5xG.C%uu/_=<!q\9\p:P4aSN)>>"9Vh
2023-11-22 16:22:07 UTC	79	IN	Data Raw: 67 d7 f6 25 ed f7 1a 3b 0c 5b 52 3e 4e 12 23 dc 57 c2 65 8f e2 40 71 07 08 1e 28 e6 10 c1 ef 5d 26 7f 02 0d 1d 96 e2 4b 99 03 b9 bf 9a ed c8 3f af 7c 07 7a 10 1e 28 df 11 e5 3a 26 6d 01 56 ce 43 e7 27 c6 9f c0 0f 44 5e e3 52 9e bb aa 00 Data Ascii: g%;[R>N#We@q(]&K?\|z(:&mVC'D^R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49766	142.250.31.101	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:08 UTC	1074	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1386 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914
2023-11-22 16:22:08 UTC	1386	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 30 30 36 37 30 31 32 35 39 32 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1700670125920",null,null,null,
2023-11-22 16:22:08 UTC	518	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 48 65 61 64 65 72 73 3a 20 58 2d 50 6c 61 79 6c 6f 67 2d 57 65 62 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e Data Ascii: HTTP/1.1 200 OKAccess-Control-Allow-Origin: https://www.google.comCross-Origin-Resource-Policy: cross-originAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Headers: X-Playlog-WebContent-Type: text/plain; charset=UTF-8Date: Wed, 22 N
2023-11-22 16:22:08 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2023-11-22 16:22:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49765	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:08 UTC	1020	OUT	GET /images/hpp/green-tag-42px.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ogs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914
2023-11-22 16:22:08 UTC	671	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/pngCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"en
2023-11-22 16:22:08 UTC	581	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2a 00 00 00 2a 08 06 00 00 00 c5 c3 c9 5b 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 04 4d 49 44 41 54 78 01 ed 98 cf 6f 1b 45 14 c7 bf b3 76 5a db 71 93 2d 69 08 d4 81 ba ad b0 a8 22 11 17 35 15 85 0a 19 c1 91 43 42 e0 04 a8 e5 0f 40 8d b9 41 25 b2 86 03 48 1c 9c 00 57 54 47 50 90 f8 21 9c 23 87 12 97 b6 2a 2a 88 f8 42 29 95 00 03 05 42 c8 61 49 ed c6 f1 7a 67 3a b3 ee a6 fe 99 b5 bd eb a8 07 7f a4 d5 ee ce cc ee 7e f7 bd 79 ef cd 2e d0 a5 cb 9d 0d 41 07 88 7c 39 2e 67 6f 48 27 c0 48 84 6f 67 79 53 ea fb 17 3f 4f c1 06 8e 0b 3d fc f1 e4 38 a3 88 33 20 58 d1 c1 a0 f2 a7 a5 f9 23 e7 09 21 Data Ascii: PNGIHDR[pHYs%%IR$sRGBgAMAaMIDATxoEvZq-i"5CB@A%HWTGP!#B)BaIzg:~y.A\|9.goH'HogyS?O=83 X#!
2023-11-22 16:22:08 UTC	627	IN	Data Raw: f5 fa aa 91 9a 44 20 79 e9 5a 42 55 32 aa 39 ce 5d 4f a4 ae bb 16 50 5d 59 3a 44 41 d3 b0 ab ff 2e f8 fd 3b e6 97 5e f9 56 31 db d7 ab c6 d5 04 93 56 74 85 d9 16 89 14 e4 0b 79 f8 bc bd 20 94 24 37 1b 57 23 94 80 a8 d8 42 74 aa c3 25 49 28 fa 8b 9b 96 d0 1a a1 c6 2a 87 60 d3 b7 73 1e 92 4a 4f 24 37 35 50 dd 3c 3a ba 33 34 d7 23 b5 5c 0b da 87 e1 ac d5 90 1a 35 b1 8b ef 1f 63 ba 3e b3 46 d7 71 55 fd 1d 5b 44 ca 6a 40 85 45 63 17 de 9b 66 54 4f 88 bc b9 b7 3f 80 ad b2 6a 33 8b ea 0a a1 0c f4 b8 79 2c 44 86 76 ee 41 27 09 f8 ef 16 b9 33 5a bd 52 aa 47 f5 1c ad a8 40 7b fb 02 e8 db e6 87 d3 0c 78 64 1c b9 f7 21 1c 1c 0c cd 15 0a f9 24 d1 88 e5 2a ac 52 28 a3 b1 ea 01 23 03 fb e0 14 c2 4b 23 03 fb 0d 91 03 9e be 98 f2 58 54 c9 2b 7c 11 c2 ac f3 76 85 50 e5 68 Data Ascii: D yZBU29]OP]Y:DA.;^V1Vty $7W#Bt%I(`sJO$75P<:34#\5c>FqU[Dj@EcfTO?j3y,DvA'3ZRG@{xd!$R(#K#XT+\|vPh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49769	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:08 UTC	1451	OUT	GET /gen_204?use_corp=on&atyp=i&zx=1700670127241&ogsr=1&ei=rCpeZbT_G-6t5NoP8f-zuAQ&ct=7&cad=i&id=19039542&loc=webhp&prid=538&ogd=com&ogprm=up&ap=1&vis=1 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914; OGPC=19039541-1:
2023-11-22 16:22:08 UTC	1395	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 56 53 66 33 6f 33 4a 6a 66 6d 2d 72 59 67 4b 72 62 5f 4e 79 33 77 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c Data Ascii: HTTP/1.1 204 No ContentCross-Origin-Resource-Policy: cross-originContent-Type: text/html; charset=UTF-8Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-VSf3o3Jjfm-rYgKrb_Ny3w' 'strict-dynamic' 'report-sample' 'unsafe-eval

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49770	142.251.16.105	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:08 UTC	757	OUT	GET /images/hpp/green-tag-42px.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914; OGPC=19039541-1:
2023-11-22 16:22:09 UTC	671	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/pngCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"en
2023-11-22 16:22:09 UTC	581	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2a 00 00 00 2a 08 06 00 00 00 c5 c3 c9 5b 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 04 4d 49 44 41 54 78 01 ed 98 cf 6f 1b 45 14 c7 bf b3 76 5a db 71 93 2d 69 08 d4 81 ba ad b0 a8 22 11 17 35 15 85 0a 19 c1 91 43 42 e0 04 a8 e5 0f 40 8d b9 41 25 b2 86 03 48 1c 9c 00 57 54 47 50 90 f8 21 9c 23 87 12 97 b6 2a 2a 88 f8 42 29 95 00 03 05 42 c8 61 49 ed c6 f1 7a 67 3a b3 ee a6 fe 99 b5 bd eb a8 07 7f a4 d5 ee ce cc ee 7e f7 bd 79 ef cd 2e d0 a5 cb 9d 0d 41 07 88 7c 39 2e 67 6f 48 27 c0 48 84 6f 67 79 53 ea fb 17 3f 4f c1 06 8e 0b 3d fc f1 e4 38 a3 88 33 20 58 d1 c1 a0 f2 a7 a5 f9 23 e7 09 21 Data Ascii: PNGIHDR[pHYs%%IR$sRGBgAMAaMIDATxoEvZq-i"5CB@A%HWTGP!#B)BaIzg:~y.A\|9.goH'HogyS?O=83 X#!
2023-11-22 16:22:09 UTC	627	IN	Data Raw: f5 fa aa 91 9a 44 20 79 e9 5a 42 55 32 aa 39 ce 5d 4f a4 ae bb 16 50 5d 59 3a 44 41 d3 b0 ab ff 2e f8 fd 3b e6 97 5e f9 56 31 db d7 ab c6 d5 04 93 56 74 85 d9 16 89 14 e4 0b 79 f8 bc bd 20 94 24 37 1b 57 23 94 80 a8 d8 42 74 aa c3 25 49 28 fa 8b 9b 96 d0 1a a1 c6 2a 87 60 d3 b7 73 1e 92 4a 4f 24 37 35 50 dd 3c 3a ba 33 34 d7 23 b5 5c 0b da 87 e1 ac d5 90 1a 35 b1 8b ef 1f 63 ba 3e b3 46 d7 71 55 fd 1d 5b 44 ca 6a 40 85 45 63 17 de 9b 66 54 4f 88 bc b9 b7 3f 80 ad b2 6a 33 8b ea 0a a1 0c f4 b8 79 2c 44 86 76 ee 41 27 09 f8 ef 16 b9 33 5a bd 52 aa 47 f5 1c ad a8 40 7b fb 02 e8 db e6 87 d3 0c 78 64 1c b9 f7 21 1c 1c 0c cd 15 0a f9 24 d1 88 e5 2a ac 52 28 a3 b1 ea 01 23 03 fb e0 14 c2 4b 23 03 fb 0d 91 03 9e be 98 f2 58 54 c9 2b 7c 11 c2 ac f3 76 85 50 e5 68 Data Ascii: D yZBU29]OP]Y:DA.;^V1Vty $7W#Bt%I(`sJO$75P<:34#\5c>FqU[Dj@EcfTO?j3y,DvA'3ZRG@{xd!$R(#K#XT+\|vPh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49771	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:09 UTC	1390	OUT	GET /complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=rCpeZdXlGruf5NoPj9ax6A4.1700670128242&dpr=1&nolsbt=1 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16
2023-11-22 16:22:09 UTC	1742	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 30 39 20 47 4d 54 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 30 39 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 Data Ascii: HTTP/1.1 200 OKX-Content-Type-Options: nosniffDate: Wed, 22 Nov 2023 16:22:09 GMTExpires: Wed, 22 Nov 2023 16:22:09 GMTCache-Control: private, max-age=3600Content-Type: application/json; charset=UTF-8Strict-Transport-Security: max-age=31536000
2023-11-22 16:22:09 UTC	1742	IN	Data Raw: 61 63 37 0d 0a 29 5d 7d 27 0a 5b 5b 5b 22 61 72 6d 79 20 66 6f 6f 74 62 61 6c 6c 20 75 6e 69 66 6f 72 6d 73 20 61 72 6d 79 20 6e 61 76 79 20 67 61 6d 65 22 2c 30 2c 5b 33 2c 31 34 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 6d 69 6b 65 20 6c 65 65 22 2c 34 36 2c 5b 33 2c 31 34 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 5d 2c 7b 22 6c 6d 22 3a 5b 5d 2c 22 7a 66 22 3a 33 33 2c 22 7a 68 22 3a 22 4d 69 6b 65 20 4c 65 65 22 2c 22 7a 69 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 53 65 6e 61 74 6f 72 22 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 70 22 3a 22 65 4a 7a 6a 34 74 4c 50 31 54 65 77 4c 44 4d 74 74 4b 77 77 59 50 54 Data Ascii: ac7)]}'[[["army football uniforms army navy game",0,[3,143,357,362,396],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["mike lee",46,[3,143,357,362,396],{"lm":[],"zf":33,"zh":"Mike Lee","zi":"United States Senator","zl":8,"zp":{"gs_ssp":"eJzj4tLP1TewLDMttKwwYPT
2023-11-22 16:22:09 UTC	1024	IN	Data Raw: 72 45 37 49 75 4f 58 59 2f 7a 70 42 4a 4e 55 62 4d 32 31 36 72 4b 55 30 70 61 31 4a 49 77 65 31 59 48 34 55 4b 6e 72 76 4c 4a 49 31 68 4a 63 52 38 76 5a 51 53 67 79 38 78 33 49 62 49 32 36 37 6b 56 7a 58 6c 6c 51 4f 68 79 70 72 51 77 31 74 4d 54 55 4e 75 64 73 39 30 53 78 65 2b 31 69 32 74 34 79 41 7a 73 54 6b 39 77 77 43 66 30 72 6e 72 75 6d 79 61 66 66 7a 78 33 48 4e 79 6f 51 4f 59 44 38 77 38 76 4f 6a 66 42 7a 43 32 31 68 37 70 6f 6d 6b 57 47 42 6d 49 58 77 79 51 50 6f 54 52 4c 69 5a 49 64 52 75 35 49 34 6e 42 53 34 42 43 74 30 63 4c 2f 52 61 74 4a 74 45 59 36 61 46 69 36 30 36 33 68 31 2b 34 69 30 79 59 33 56 76 47 69 73 4a 78 33 59 7a 67 35 36 62 37 66 35 70 39 34 44 43 33 4f 6c 54 51 4e 67 38 79 53 51 74 38 54 2b 6c 44 75 46 64 48 74 30 34 66 75 4a Data Ascii: rE7IuOXY/zpBJNUbM216rKU0pa1JIwe1YH4UKnrvLJI1hJcR8vZQSgy8x3IbI267kVzXllQOhyprQw1tMTUNuds90Sxe+1i2t4yAzsTk9wwCf0rnrumyaffzx3HNyoQOYD8w8vOjfBzC21h7pomkWGBmIXwyQPoTRLiZIdRu5I4nBS4BCt0cL/RatJtEY6aFi6063h1+4i0yY3VvGisJx3Yzg56b7f5p94DC3OlTQNg8ySQt8T+lDuFdHt04fuJ
2023-11-22 16:22:09 UTC	816	IN	Data Raw: 33 32 39 0d 0a 66 38 41 30 71 43 54 2f 39 6b 5c 75 30 30 33 64 22 7d 5d 2c 5b 22 69 63 65 6c 61 6e 64 20 76 6f 6c 63 61 6e 6f 20 65 72 75 70 74 69 6f 6e 22 2c 30 2c 5b 33 2c 31 34 33 2c 33 35 37 2c 33 36 32 2c 31 30 2c 33 39 36 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 63 69 74 69 62 61 6e 6b 20 6c 61 79 6f 66 66 73 22 2c 30 2c 5b 33 2c 31 34 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 6a 61 6e 65 20 62 6f 75 74 69 71 75 65 20 73 68 75 74 20 64 6f 77 6e 22 2c 30 2c 5b 33 2c 31 34 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c Data Ascii: 329f8A0qCT/9k\u003d"}],["iceland volcano eruption",0,[3,143,357,362,10,396],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["citibank layoffs",0,[3,143,357,362,396],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["jane boutique shut down",0,[3,143,357,362,396],{"zf":33,"zl
2023-11-22 16:22:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49775	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:09 UTC	1561	OUT	GET /xjs/_/js/md=1/k=xjs.hd.en.j7vH50XSWl8.O/ck=xjs.hd.3mhtCf28lXo.L.W.O/am=BAAAAAAAAAAAAAAAAAAAAAQAAAAAEPUTDgFsgACBABBggAAgAICAFKQQBAMAEPBQJgAAACZAYAhYCogKvOcBAJBAFQAAAAAAEAwiAAAACAAAoAMAACCgEdAAhIBKQAAAAADyACA4ABhEEAAAAAAAAAAAAAABTBAMLkgAFAQQAAAAAAAAAAAAAKSkycVAAg/rs=ACT90oEQOKoPcm_mXy_VnoCFj9ts7y2bDw HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16
2023-11-22 16:22:09 UTC	818	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 4f 72 69 67 69 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 74 72 75 73 74 65 64 2d 74 79 70 65 73 2d 66 6f 72 20 27 73 63 72 69 70 74 27 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 67 77 73 2d 74 65 61 6d 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesVary: Accept-Encoding, OriginContent-Type: text/javascript; charset=UTF-8Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-teamCross-Origin-R
2023-11-22 16:22:09 UTC	434	IN	Data Raw: 7b 22 6d 6f 64 75 6c 65 47 72 61 70 68 22 3a 22 71 75 61 6e 74 75 6d 2f 74 37 78 67 49 65 2f 77 73 39 54 6c 63 2f 63 45 74 39 30 62 2f 71 64 64 67 4b 65 2f 79 78 54 63 68 66 2f 73 79 36 73 2f 73 79 36 74 2f 73 79 36 75 3a 36 2c 37 2f 73 79 36 76 2f 78 51 74 5a 62 3a 35 2c 38 2c 39 2f 73 79 36 77 2f 52 39 59 48 4a 63 3a 38 2c 62 2f 4b 55 4d 37 5a 2f 77 72 7a 45 58 62 2f 54 78 43 4a 66 64 2f 57 56 44 79 4b 65 2f 73 79 36 78 2f 56 6a 39 68 70 64 3a 67 2c 68 2f 74 61 66 50 72 66 2f 64 74 6c 30 68 64 2f 6c 4c 51 57 46 65 2f 49 6c 31 4d 34 62 2f 65 48 44 66 6c 2f 46 4f 4e 45 64 66 3a 6b 2f 4a 69 56 4c 6a 64 3a 6b 2f 46 41 55 64 57 3a 6b 2f 64 4d 5a 6b 33 65 3a 6e 2f 6f 66 6a 56 6b 62 2f 71 61 53 33 67 64 2f 54 39 79 35 44 64 2f 79 69 4c 67 36 65 2f 51 37 42 61 Data Ascii: {"moduleGraph":"quantum/t7xgIe/ws9Tlc/cEt90b/qddgKe/yxTchf/sy6s/sy6t/sy6u:6,7/sy6v/xQtZb:5,8,9/sy6w/R9YHJc:8,b/KUM7Z/wrzEXb/TxCJfd/WVDyKe/sy6x/Vj9hpd:g,h/tafPrf/dtl0hd/lLQWFe/Il1M4b/eHDfl/FONEdf:k/JiVLjd:k/FAUdW:k/dMZk3e:n/ofjVkb/qaS3gd/T9y5Dd/yiLg6e/Q7Ba
2023-11-22 16:22:09 UTC	1252	IN	Data Raw: 79 37 61 2f 73 79 37 39 3a 31 69 2c 31 6b 2f 73 79 37 63 2f 73 79 37 62 3a 31 6c 2c 31 6d 2f 73 79 37 64 2f 4e 77 48 30 48 3a 31 6a 2c 31 6e 2f 73 79 37 65 3a 31 67 2f 73 79 37 66 2f 67 79 63 68 67 3a 31 68 2c 31 70 2c 31 71 2c 31 72 2f 55 6c 6d 6d 72 64 3a 31 73 2f 72 4a 6d 4a 72 63 3a 31 61 2c 31 65 2f 47 48 41 65 41 63 2f 57 74 36 76 6a 66 3a 31 65 2f 6c 73 6a 56 6d 63 3a 31 64 2f 49 5a 54 36 33 2f 56 67 64 36 68 62 2f 73 79 37 68 2f 73 79 37 69 2f 73 79 37 6a 3a 32 30 2c 32 31 2f 59 4e 6a 47 44 64 3a 32 32 2f 69 46 51 79 4b 66 2f 73 79 37 6c 2f 73 79 37 6d 3a 32 35 2f 73 79 37 6b 3a 31 79 2c 32 32 2c 32 36 2f 50 72 50 59 52 64 3a 32 33 2c 32 37 2f 73 79 37 6e 2f 76 66 75 4e 4a 66 3a 32 39 2f 73 79 37 6f 2f 68 63 36 55 62 64 3a 32 34 2c 32 38 2c 32 61 Data Ascii: y7a/sy79:1i,1k/sy7c/sy7b:1l,1m/sy7d/NwH0H:1j,1n/sy7e:1g/sy7f/gychg:1h,1p,1q,1r/Ulmmrd:1s/rJmJrc:1a,1e/GHAeAc/Wt6vjf:1e/lsjVmc:1d/IZT63/Vgd6hb/sy7h/sy7i/sy7j:20,21/YNjGDd:22/iFQyKf/sy7l/sy7m:25/sy7k:1y,22,26/PrPYRd:23,27/sy7n/vfuNJf:29/sy7o/hc6Ubd:24,28,2a
2023-11-22 16:22:09 UTC	1252	IN	Data Raw: 2f 73 79 38 79 2f 65 35 71 46 4c 63 3a 35 32 2c 35 35 2f 64 49 6f 53 42 62 2f 73 79 38 7a 2f 53 70 73 66 53 62 3a 32 63 2c 35 38 2f 5a 67 47 67 39 62 2f 73 79 39 33 2f 73 79 39 61 2f 73 79 39 62 2f 73 79 39 35 2f 73 79 39 30 3a 35 62 2c 35 63 2c 35 64 2c 35 65 2f 73 79 39 34 2f 73 79 39 38 2f 73 79 39 31 3a 35 63 2c 35 64 2c 35 67 2c 35 68 2f 73 79 39 39 2f 73 79 39 36 2f 73 79 39 63 2f 73 79 39 64 2f 73 79 39 65 2f 73 79 39 32 3a 35 66 2c 35 69 2c 35 6a 2c 35 6b 2c 35 6c 2c 35 6d 2c 35 6e 2f 73 79 39 37 3a 35 65 2c 35 68 2c 35 6b 2f 73 79 39 66 3a 35 65 2c 35 6c 2f 73 79 39 67 3a 35 68 2c 35 6e 2f 73 79 39 68 2f 73 79 39 6a 2f 73 79 39 6b 2f 73 79 39 6c 3a 35 75 2f 73 79 39 6d 3a 35 74 2c 35 76 2f 73 79 39 69 3a 35 73 2c 35 77 2f 73 79 39 6f 2f 73 79 39 Data Ascii: /sy8y/e5qFLc:52,55/dIoSBb/sy8z/SpsfSb:2c,58/ZgGg9b/sy93/sy9a/sy9b/sy95/sy90:5b,5c,5d,5e/sy94/sy98/sy91:5c,5d,5g,5h/sy99/sy96/sy9c/sy9d/sy9e/sy92:5f,5i,5j,5k,5l,5m,5n/sy97:5e,5h,5k/sy9f:5e,5l/sy9g:5h,5n/sy9h/sy9j/sy9k/sy9l:5u/sy9m:5t,5v/sy9i:5s,5w/sy9o/sy9
2023-11-22 16:22:09 UTC	1252	IN	Data Raw: 38 61 2f 73 79 63 6a 3a 32 30 2c 37 70 2c 38 63 2c 38 64 2c 38 68 2c 38 69 2c 38 6f 2f 73 79 63 75 3a 38 61 2f 73 79 63 6b 3a 37 65 2c 38 63 2c 38 71 2f 73 79 63 36 3a 37 6d 2c 37 79 2f 73 79 63 76 3a 38 61 2f 73 79 63 6c 3a 32 30 2c 37 7a 2c 38 63 2c 38 64 2c 38 73 2c 38 74 2f 73 79 63 77 3a 38 61 2f 73 79 63 6d 3a 32 30 2c 37 7a 2c 38 63 2c 38 64 2c 38 73 2c 38 76 2f 73 79 63 78 3a 38 61 2f 73 79 63 79 3a 35 73 2c 36 30 2f 73 79 63 37 3a 32 30 2c 37 6f 2c 37 7a 2c 38 63 2c 38 64 2c 38 78 2c 38 79 2f 73 79 63 38 3a 37 79 2f 73 79 63 7a 3a 38 61 2f 73 79 63 39 3a 32 30 2c 37 6f 2c 37 7a 2c 38 63 2c 38 64 2c 39 30 2c 39 31 2f 73 79 64 30 3a 38 61 2f 73 79 63 6e 3a 32 30 2c 37 7a 2c 38 39 2c 38 63 2c 38 64 2c 39 33 2f 73 79 64 31 3a 38 61 2f 73 79 64 32 2f Data Ascii: 8a/sycj:20,7p,8c,8d,8h,8i,8o/sycu:8a/syck:7e,8c,8q/syc6:7m,7y/sycv:8a/sycl:20,7z,8c,8d,8s,8t/sycw:8a/sycm:20,7z,8c,8d,8s,8v/sycx:8a/sycy:5s,60/syc7:20,7o,7z,8c,8d,8x,8y/syc8:7y/sycz:8a/syc9:20,7o,7z,8c,8d,90,91/syd0:8a/sycn:20,7z,89,8c,8d,93/syd1:8a/syd2/
2023-11-22 16:22:09 UTC	1252	IN	Data Raw: 76 65 3a 62 69 2c 62 6b 2f 73 54 73 44 4d 63 2f 76 31 64 61 4d 2f 4c 4b 34 50 79 65 2f 73 79 65 64 2f 61 4c 55 66 50 3a 62 77 2f 77 51 6c 59 76 65 2f 61 52 6a 75 78 62 2f 73 79 65 65 3a 38 34 2f 73 79 65 66 2f 75 78 4d 70 55 3a 31 72 2c 63 30 2c 63 31 2f 43 6f 67 46 37 64 2f 73 79 65 67 3a 35 66 2c 35 6a 2c 35 71 2c 36 74 2f 73 79 65 68 3a 35 69 2c 35 6d 2c 35 72 2c 36 74 2f 73 79 65 69 3a 35 78 2f 73 79 65 6a 3a 63 36 2f 73 79 65 6b 3a 37 30 2c 63 37 2f 73 79 65 6c 3a 36 67 2f 73 79 65 6d 3a 37 6f 2f 73 79 66 36 2f 73 79 65 6e 3a 63 62 2f 73 79 65 6f 3a 31 6e 2f 73 79 65 71 2f 73 79 65 72 2f 73 79 65 70 3a 63 65 2c 63 66 2f 73 79 65 73 2f 73 79 65 74 3a 63 64 2c 63 67 2c 63 68 2f 73 79 65 75 2f 73 79 65 76 3a 37 6a 2c 37 78 2c 63 6a 2f 73 79 65 77 3a 63 Data Ascii: ve:bi,bk/sTsDMc/v1daM/LK4Pye/syed/aLUfP:bw/wQlYve/aRjuxb/syee:84/syef/uxMpU:1r,c0,c1/CogF7d/syeg:5f,5j,5q,6t/syeh:5i,5m,5r,6t/syei:5x/syej:c6/syek:70,c7/syel:6g/syem:7o/syf6/syen:cb/syeo:1n/syeq/syer/syep:ce,cf/syes/syet:cd,cg,ch/syeu/syev:7j,7x,cj/syew:c
2023-11-22 16:22:09 UTC	1252	IN	Data Raw: 46 58 55 64 77 3a 66 6d 2f 73 79 67 74 3a 64 68 2f 45 52 77 56 62 3a 66 6f 2f 73 79 67 75 3a 64 68 2f 65 54 76 35 39 65 3a 66 71 2f 73 79 67 76 3a 64 68 2f 67 70 4e 33 34 63 3a 66 73 2f 73 79 67 77 3a 64 68 2f 67 69 79 75 65 63 3a 66 75 2f 73 79 67 78 3a 64 68 2f 41 33 65 57 44 62 3a 66 77 2f 73 79 67 79 3a 64 68 2f 61 67 76 55 59 64 3a 66 79 2f 73 79 67 7a 3a 64 68 2f 6a 56 71 44 37 3a 67 30 2f 73 79 68 30 3a 64 68 2f 4e 6d 52 39 6a 64 3a 67 32 2f 73 79 68 31 3a 64 68 2f 47 52 4a 33 32 63 3a 67 34 2f 73 79 68 32 3a 64 68 2f 71 6e 67 4a 42 66 3a 67 36 2f 73 79 68 33 3a 64 68 2f 55 33 4f 76 63 63 3a 67 38 2f 73 79 68 34 3a 64 68 2f 79 66 48 32 42 64 3a 67 61 2f 73 79 68 35 3a 64 68 2f 42 31 37 79 53 65 3a 67 63 2f 73 79 68 36 3a 64 68 2f 63 4b 56 32 32 63 Data Ascii: FXUdw:fm/sygt:dh/ERwVb:fo/sygu:dh/eTv59e:fq/sygv:dh/gpN34c:fs/sygw:dh/giyuec:fu/sygx:dh/A3eWDb:fw/sygy:dh/agvUYd:fy/sygz:dh/jVqD7:g0/syh0:dh/NmR9jd:g2/syh1:dh/GRJ32c:g4/syh2:dh/qngJBf:g6/syh3:dh/U3Ovcc:g8/syh4:dh/yfH2Bd:ga/syh5:dh/B17ySe:gc/syh6:dh/cKV22c
2023-11-22 16:22:09 UTC	1252	IN	Data Raw: 79 69 76 3a 6a 66 2c 6a 67 2c 6a 68 2f 73 79 69 78 3a 6a 66 2c 6a 67 2c 6a 68 2f 51 7a 72 61 5a 62 2f 49 39 4a 49 6a 63 2f 6e 7a 75 34 55 64 2f 67 47 59 7a 67 2f 6d 36 62 32 50 65 3a 6a 69 2c 6a 6a 2c 6a 6b 2c 6a 6c 2c 6a 6d 2c 6a 6e 2c 6a 6f 2f 73 79 6a 30 2f 73 79 6a 31 3a 64 6b 2c 6a 71 2f 6f 58 52 44 7a 63 3a 6a 72 2f 50 45 37 32 38 62 3a 6a 72 2f 73 79 6a 32 3a 64 6b 2c 66 30 2c 68 32 2c 6a 68 2c 6a 71 2f 6e 73 4a 78 6a 63 3a 6a 75 2f 73 79 6a 33 2f 73 79 6a 34 3a 64 6b 2c 65 34 2c 66 67 2c 67 73 2c 67 77 2c 68 30 2c 68 69 2c 68 6b 2c 6a 77 2f 73 79 6a 35 3a 64 68 2f 6f 4f 54 69 46 63 3a 6a 78 2c 6a 79 2f 73 79 6a 36 2f 73 79 6a 61 3a 64 68 2f 73 79 6a 63 3a 64 68 2f 73 79 6a 65 2f 73 79 6a 66 3a 64 72 2c 69 68 2c 6a 34 2c 6a 71 2c 6b 30 2c 6b 33 2f Data Ascii: yiv:jf,jg,jh/syix:jf,jg,jh/QzraZb/I9JIjc/nzu4Ud/gGYzg/m6b2Pe:ji,jj,jk,jl,jm,jn,jo/syj0/syj1:dk,jq/oXRDzc:jr/PE728b:jr/syj2:dk,f0,h2,jh,jq/nsJxjc:ju/syj3/syj4:dk,e4,fg,gs,gw,h0,hi,hk,jw/syj5:dh/oOTiFc:jx,jy/syj6/syja:dh/syjc:dh/syje/syjf:dr,ih,j4,jq,k0,k3/
2023-11-22 16:22:09 UTC	1252	IN	Data Raw: 6a 67 2c 6d 68 2f 56 47 38 34 64 65 3a 6d 77 2f 73 79 6b 74 3a 6a 67 2c 6d 68 2f 43 66 4f 38 30 62 3a 6d 79 2f 73 79 6b 75 3a 6a 67 2c 6d 68 2f 51 34 6a 4e 63 3a 6e 30 2f 44 4c 56 57 78 3a 6d 6b 2f 73 79 6b 76 2f 73 79 6b 77 3a 64 6b 2c 6e 33 2f 76 68 73 66 73 65 3a 6e 34 2f 62 49 4d 4d 6f 66 2f 78 4e 53 6e 79 3a 6e 36 2f 73 79 6b 79 2f 73 79 6b 7a 3a 64 6b 2c 6a 68 2c 6a 71 2c 6e 38 2f 73 79 6c 30 3a 64 6b 2c 6a 71 2f 79 43 68 67 74 62 3a 6e 39 2c 6e 61 2f 73 79 6c 31 3a 64 72 2c 69 68 2c 6a 71 2f 72 4c 32 41 52 3a 6e 63 2f 73 79 6c 32 3a 64 6a 2f 56 39 57 31 61 64 3a 6e 65 2f 73 79 6c 33 3a 64 6a 2f 59 30 64 70 46 63 3a 6e 67 2f 41 4f 54 6b 75 63 3a 6b 6e 2f 73 79 6c 34 3a 64 6a 2f 58 4f 65 68 4f 63 3a 6e 6a 2f 73 79 6c 35 3a 64 6a 2f 64 41 6e 65 6b 64 Data Ascii: jg,mh/VG84de:mw/sykt:jg,mh/CfO80b:my/syku:jg,mh/Q4jNc:n0/DLVWx:mk/sykv/sykw:dk,n3/vhsfse:n4/bIMMof/xNSny:n6/syky/sykz:dk,jh,jq,n8/syl0:dk,jq/yChgtb:n9,na/syl1:dr,ih,jq/rL2AR:nc/syl2:dj/V9W1ad:ne/syl3:dj/Y0dpFc:ng/AOTkuc:kn/syl4:dj/XOehOc:nj/syl5:dj/dAnekd
2023-11-22 16:22:09 UTC	1252	IN	Data Raw: 6e 3a 71 67 2f 73 79 6d 6f 3a 71 61 2f 54 4f 54 7a 62 62 3a 71 62 2c 71 68 2c 71 69 2f 73 79 6d 70 2f 73 79 6d 71 3a 61 65 2c 61 68 2c 71 6b 2f 4d 6b 48 79 47 64 3a 61 67 2c 71 6c 2f 73 79 6d 72 2f 6b 62 41 6d 39 64 3a 71 6e 2f 73 79 6d 73 2f 41 4e 79 6e 31 3a 71 70 2f 55 46 5a 68 42 63 2f 73 79 6d 75 2f 55 34 4d 7a 4b 63 3a 61 67 2c 71 71 2c 71 72 2c 71 73 2f 67 38 6e 6b 78 2f 73 79 6d 76 3a 70 7a 2f 73 79 6d 77 2f 73 79 6d 78 2f 73 79 6d 79 2f 73 79 6d 7a 2f 73 79 6e 30 2f 73 79 6e 31 2f 73 79 6e 32 2f 44 50 72 65 45 3a 34 74 2c 71 6b 2c 71 6f 2c 71 75 2c 71 76 2c 71 77 2c 71 78 2c 71 79 2c 71 7a 2c 72 30 2c 72 31 2c 72 32 2f 73 79 6e 33 2f 69 39 53 4e 42 66 3a 34 74 2c 72 34 2f 73 79 6e 34 2f 67 71 69 42 46 3a 34 74 2c 70 7a 2c 72 36 2f 73 79 6e 62 2f Data Ascii: n:qg/symo:qa/TOTzbb:qb,qh,qi/symp/symq:ae,ah,qk/MkHyGd:ag,ql/symr/kbAm9d:qn/syms/ANyn1:qp/UFZhBc/symu/U4MzKc:ag,qq,qr,qs/g8nkx/symv:pz/symw/symx/symy/symz/syn0/syn1/syn2/DPreE:4t,qk,qo,qu,qv,qw,qx,qy,qz,r0,r1,r2/syn3/i9SNBf:4t,r4/syn4/gqiBF:4t,pz,r6/synb/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49777	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:09 UTC	3620	OUT	GET /xjs/_/js/k=xjs.hd.en.j7vH50XSWl8.O/ck=xjs.hd.3mhtCf28lXo.L.W.O/am=BAAAAAAAAAAAAAAAAAAAAAQAAAAAEPUTDgFsgACBABBggAAgAICAFKQQBAMAEPBQJgAAACZAYAhYCogKvOcBAJBAFQAAAAAAEAwiAAAACAAAoAMAACCgEdAAhIBKQAAAAADyACA4ABhEEAAAAAAAAAAAAAABTBAMLkgAFAQQAAAAAAAAAAAAAKSkycVAAg/d=1/exm=SNUn3,cEt90b,cdos,csi,d,dtl0hd,eHDfl,hsm,jsa,mb4ZUb,qddgKe,sTsDMc/ed=1/dg=2/br=1/ujg=1/rs=ACT90oEQOKoPcm_mXy_VnoCFj9ts7y2bDw/ee=AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DULqB:RKfG5c;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;IBADCc:RYquRb;IoGlCf:b5lhvb;JXS8fb:Qj0suc;JsbNhc:Xd8iUd;KOxcK:bFOvTc;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe;Pjplud:EEDORb,PoEs9b;Q1Ow7b:x5CSu;QGR0gd:Mlhmy;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;SLtqO:Kh1xYe;SMDL4c:fTfGO,pnvXVc;SNUn3:ZwDk9d,x8cHvb;ShpF6e:N0pvGc;TxfV6d:YORN0b;U96pRd:FsR04;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YV5bee:IvPZ6d;ZWEUA:afR4Cf;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bFZ6gf:RsDQqe;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:audvde;eHDfl:ofjVkb;eO3lse:nFClrf;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;io8t5d:sgY6Zb;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;lkq0A:JyBE3e;lzgfYb:PI40bd;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO,pnvXVc;oUlnpc:RagDlc;okUaUd:wItadb;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;uuQkY:u2V3ud;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:O1Gjze,TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=B2qlPe,DhPYme,EkevXb,GU4Gab,MpJwZc,NzU6V,UUJqVe,aa,abd,async,epYOx,ifl,ms4mZb,mu,pHXghd,q0xTif,s39S4,sOXFj,sb_wiz,sf,sonic,spch?xjs=s1 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16
2023-11-22 16:22:09 UTC	818	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 4f 72 69 67 69 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 74 72 75 73 74 65 64 2d 74 79 70 65 73 2d 66 6f 72 20 27 73 63 72 69 70 74 27 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 67 77 73 2d 74 65 61 6d 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesVary: Accept-Encoding, OriginContent-Type: text/javascript; charset=UTF-8Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-teamCross-Origin-R
2023-11-22 16:22:09 UTC	434	IN	Data Raw: 5f 46 5f 69 6e 73 74 61 6c 6c 43 73 73 28 22 2e 6a 62 42 49 74 66 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 44 55 30 4e 4a 7b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 7d 2e 6c 50 33 4a 6f 66 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6e 4e 4d 75 4f 64 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 71 6c 69 2d 63 6f 6e 74 61 69 6e 65 72 2d 72 6f 74 61 74 65 20 31 35 36 38 2e 32 33 35 32 39 34 31 31 37 36 6d 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 3a 71 6c 69 2d 63 6f 6e Data Ascii: _F_installCss(".jbBItf{display:block;position:relative}.DU0NJ{bottom:0;left:0;position:absolute;right:0;top:0}.lP3Jof{display:inline-block;position:relative}.nNMuOd{-webkit-animation:qli-container-rotate 1568.2352941176ms linear infinite;animation:qli-con
2023-11-22 16:22:09 UTC	1252	IN	Data Raw: 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 71 6c 69 2d 63 6f 6e 74 61 69 6e 65 72 2d 72 6f 74 61 74 65 7b 66 72 6f 6d 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 7d 7d 2e 52 6f 4b 6d 68 62 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 70 61 63 69 74 79 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6e 4e 4d 75 4f 64 20 2e 56 51 64 65 61 62 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 Data Ascii: nsform:rotate(1turn)}}@keyframes qli-container-rotate{from{-webkit-transform:rotate(0);transform:rotate(0)}to{-webkit-transform:rotate(1turn);transform:rotate(1turn)}}.RoKmhb{height:100%;opacity:0;position:absolute;width:100%}.nNMuOd .VQdeab{-webkit-anima
2023-11-22 16:22:09 UTC	1252	IN	Data Raw: 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 2c 71 6c 69 2d 67 72 65 65 6e 2d 66 61 64 65 2d 69 6e 2d 6f 75 74 20 35 33 33 32 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 3b 61 6e 69 6d 61 74 69 6f 6e 3a 71 6c 69 2d 66 69 6c 6c 2d 75 6e 66 69 6c 6c 2d 72 6f 74 61 74 65 20 35 33 33 32 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 2c 71 6c 69 2d 67 72 65 65 6e 2d 66 61 64 65 2d 69 6e 2d 6f 75 74 20 35 33 33 32 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f Data Ascii: cubic-bezier(0.4,0,0.2,1) infinite both,qli-green-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite both;animation:qli-fill-unfill-rotate 5332ms cubic-bezier(0.4,0,0.2,1) infinite both,qli-green-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite bo
2023-11-22 16:22:09 UTC	1252	IN	Data Raw: 72 6d 3a 72 6f 74 61 74 65 28 32 37 30 64 65 67 29 7d 33 37 2e 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 30 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 30 35 64 65 67 29 7d 35 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 35 34 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 35 34 30 64 65 67 29 7d 36 32 2e 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 36 37 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 36 37 35 64 65 67 29 7d 37 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 38 31 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a Data Ascii: rm:rotate(270deg)}37.5%{-webkit-transform:rotate(405deg);transform:rotate(405deg)}50%{-webkit-transform:rotate(540deg);transform:rotate(540deg)}62.5%{-webkit-transform:rotate(675deg);transform:rotate(675deg)}75%{-webkit-transform:rotate(810deg);transform:
2023-11-22 16:22:09 UTC	1252	IN	Data Raw: 61 64 65 2d 69 6e 2d 6f 75 74 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 36 35 25 7b 6f 70 61 63 69 74 79 3a 30 7d 37 35 25 7b 6f 70 61 63 69 74 79 3a 30 2e 39 39 7d 39 30 25 7b 6f 70 61 63 69 74 79 3a 30 2e 39 39 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 7d 2e 62 65 44 51 50 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 35 30 25 7d 2e 46 63 58 66 69 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 65 66 74 3a 34 35 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 Data Ascii: ade-in-out{0%{opacity:0}65%{opacity:0}75%{opacity:0.99}90%{opacity:0.99}100%{opacity:0}}.beDQP{display:inline-block;height:100%;overflow:hidden;position:relative;width:50%}.FcXfi{box-sizing:border-box;height:100%;left:45%;overflow:hidden;position:absolute
2023-11-22 16:22:09 UTC	1252	IN	Data Raw: 4d 75 4f 64 20 2e 4a 37 75 75 55 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 71 6c 69 2d 6c 65 66 74 2d 73 70 69 6e 20 31 33 33 33 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 3b 61 6e 69 6d 61 74 69 6f 6e 3a 71 6c 69 2d 6c 65 66 74 2d 73 70 69 6e 20 31 33 33 33 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 3b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 42 53 6e 4c 62 20 2e 6e 4e 4d 75 4f 64 20 2e 73 44 50 49 43 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 71 6c 69 2d 72 69 67 Data Ascii: MuOd .J7uuUe{-webkit-animation:qli-left-spin 1333ms cubic-bezier(0.4,0,0.2,1) infinite both;animation:qli-left-spin 1333ms cubic-bezier(0.4,0,0.2,1) infinite both;border-left-color:#fff;border-top-color:#fff}.BSnLb .nNMuOd .sDPIC{-webkit-animation:qli-rig
2023-11-22 16:22:09 UTC	1252	IN	Data Raw: 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 35 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 33 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 33 30 64 65 67 29 7d 7d 63 2d 77 69 7a 7b 63 6f 6e 74 61 69 6e 3a 73 74 79 6c 65 7d 63 2d 77 69 7a 3e 63 2d 64 61 74 61 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 63 2d 77 69 7a 2e 72 45 54 53 44 7b 63 6f 6e 74 61 69 6e 3a 6e 6f 6e 65 7d 63 2d 77 69 7a 2e 55 62 69 38 5a 7b 63 6f 6e 74 61 69 6e 3a 6c 61 79 6f 75 74 20 73 74 79 6c 65 7d 2e 65 61 30 4c 62 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 34 70 Data Ascii: ansform:rotate(5deg);transform:rotate(5deg)}100%{-webkit-transform:rotate(-130deg);transform:rotate(-130deg)}}c-wiz{contain:style}c-wiz>c-data{display:none}c-wiz.rETSD{contain:none}c-wiz.Ubi8Z{contain:layout style}.ea0Lbe{background:#fff;border-radius:24p
2023-11-22 16:22:09 UTC	1252	IN	Data Raw: 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 68 65 69 67 68 74 3a 32 38 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 Data Ascii: sizing:border-box;display:-webkit-box;display:-webkit-flex;display:flex;-webkit-box-orient:vertical;-webkit-box-direction:normal;-webkit-flex-direction:column;flex-direction:column;-webkit-box-flex:1;-webkit-flex-grow:1;flex-grow:1;height:280px;position:r
2023-11-22 16:22:09 UTC	1252	IN	Data Raw: 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 7d 2e 4f 48 7a 57 6a 62 7b 63 6f 6c 6f 72 3a 72 67 62 28 31 37 39 2c 32 30 2c 31 38 29 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3a 31 3b 66 6c 65 78 3a 31 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 22 47 6f 6f 67 6c 65 20 53 61 6e 73 5c 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 3a 35 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 Data Ascii: fy-content:space-between;justify-content:space-between;left:0;position:absolute;right:0;top:0}.OHzWjb{color:rgb(179,20,18);-webkit-box-flex:1;-webkit-flex:1;flex:1;font-family:\"Google Sans\",Roboto,Arial,sans-serif;font-size:12px;padding:5px;text-align:c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49776	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:09 UTC	1816	OUT	POST /gen_204?atyp=csi&ei=rCpeZdXlGruf5NoPj9ax6A4&s=webhp&t=all&wh=907&imn=5&ima=2&imad=0&imac=0&imf=0&aft=1&aftp=907&adh=&ime=2&imex=2&imeh=3&imea=0&imeb=0&imel=0&imed=0&scp=0&mem=ujhs.8,tjhs.12,jhsl.2173,dm.8&nv=ne.1,feid.738e3fad-c883-4f4e-b7d5-6e9e194e7087&net=dl.1400,ect.3g,rtt.400&hp=&p=bs.true&sys=hc.4&rt=hst.162,aft.969,afti.969,prt.561,aftqf.970,xjses.4090,xjsee.4136,xjs.4136,lcp.983,fcp.465,wsrt.618,cst.0,dnst.0,rqst.944,rspt.559,rqstt.233,unt.6,cstt.6,dit.1181&zx=1700670128254&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16
2023-11-22 16:22:09 UTC	1227	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 50 52 35 43 62 73 32 41 37 6c 47 77 65 45 55 4c 46 69 66 35 42 77 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 20 68 74 74 70 3a 3b 72 65 70 6f 72 74 2d 75 72 69 20 68 74 Data Ascii: HTTP/1.1 204 No ContentContent-Type: text/html; charset=UTF-8Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-PR5Cbs2A7lGweEULFif5Bw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49778	142.250.31.101	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:09 UTC	1114	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1397 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16
2023-11-22 16:22:09 UTC	1397	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 30 30 36 37 30 31 32 37 32 33 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1700670127239",null,null,null,
2023-11-22 16:22:09 UTC	518	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 48 65 61 64 65 72 73 3a 20 58 2d 50 6c 61 79 6c 6f 67 2d 57 65 62 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e Data Ascii: HTTP/1.1 200 OKAccess-Control-Allow-Origin: https://www.google.comCross-Origin-Resource-Policy: cross-originAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Headers: X-Playlog-WebContent-Type: text/plain; charset=UTF-8Date: Wed, 22 N
2023-11-22 16:22:09 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2023-11-22 16:22:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49779	142.251.16.105	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:09 UTC	878	OUT	GET /complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=rCpeZdXlGruf5NoPj9ax6A4.1700670128242&dpr=1&nolsbt=1 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16
2023-11-22 16:22:10 UTC	1742	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 31 30 20 47 4d 54 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 31 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 33 36 30 30 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 Data Ascii: HTTP/1.1 200 OKX-Content-Type-Options: nosniffDate: Wed, 22 Nov 2023 16:22:10 GMTExpires: Wed, 22 Nov 2023 16:22:10 GMTCache-Control: private, max-age=3600Content-Type: application/json; charset=UTF-8Strict-Transport-Security: max-age=31536000
2023-11-22 16:22:10 UTC	1742	IN	Data Raw: 61 65 39 0d 0a 29 5d 7d 27 0a 5b 5b 5b 22 6d 69 6b 65 20 6c 65 65 22 2c 34 36 2c 5b 33 2c 31 34 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 5d 2c 7b 22 6c 6d 22 3a 5b 5d 2c 22 7a 66 22 3a 33 33 2c 22 7a 68 22 3a 22 4d 69 6b 65 20 4c 65 65 22 2c 22 7a 69 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 53 65 6e 61 74 6f 72 22 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 70 22 3a 22 65 4a 7a 6a 34 74 4c 50 31 54 65 77 4c 44 4d 74 74 4b 77 77 59 50 54 69 79 4d 33 4d 54 6c 58 49 53 55 30 46 41 45 68 4f 42 70 55 22 7d 2c 22 7a 73 22 3a 22 64 61 74 61 3a 69 6d 61 67 65 2f 6a 70 65 67 3b 62 61 73 65 36 34 2c 2f 39 6a 2f 34 41 41 51 53 6b 5a 4a 52 67 41 42 41 51 41 41 41 51 41 42 41 41 44 2f 32 77 43 45 41 41 6b 47 42 77 67 48 42 67 6b 49 42 77 67 4b Data Ascii: ae9)]}'[[["mike lee",46,[3,143,357,362,396],{"lm":[],"zf":33,"zh":"Mike Lee","zi":"United States Senator","zl":8,"zp":{"gs_ssp":"eJzj4tLP1TewLDMttKwwYPTiyM3MTlXISU0FAEhOBpU"},"zs":"data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAkGBwgHBgkIBwgK
2023-11-22 16:22:10 UTC	1058	IN	Data Raw: 7a 73 54 6b 39 77 77 43 66 30 72 6e 72 75 6d 79 61 66 66 7a 78 33 48 4e 79 6f 51 4f 59 44 38 77 38 76 4f 6a 66 42 7a 43 32 31 68 37 70 6f 6d 6b 57 47 42 6d 49 58 77 79 51 50 6f 54 52 4c 69 5a 49 64 52 75 35 49 34 6e 42 53 34 42 43 74 30 63 4c 2f 52 61 74 4a 74 45 59 36 61 46 69 36 30 36 33 68 31 2b 34 69 30 79 59 33 56 76 47 69 73 4a 78 33 59 7a 67 35 36 62 37 66 35 70 39 34 44 43 33 4f 6c 54 51 4e 67 38 79 53 51 74 38 54 2b 6c 44 75 46 64 48 74 30 34 66 75 4a 55 6c 44 79 58 64 71 7a 4f 57 32 43 46 4e 38 65 36 67 2b 6a 61 35 63 61 48 42 4f 4c 5a 6f 32 61 5a 79 79 6b 6a 50 4c 6b 59 32 2b 56 43 6e 4b 55 70 38 65 42 31 52 68 44 45 39 33 75 73 42 51 32 7a 52 35 52 78 68 6b 50 4b 32 66 41 69 6d 58 67 75 32 53 37 34 67 67 73 44 49 46 65 34 6a 6b 56 53 64 68 7a Data Ascii: zsTk9wwCf0rnrumyaffzx3HNyoQOYD8w8vOjfBzC21h7pomkWGBmIXwyQPoTRLiZIdRu5I4nBS4BCt0cL/RatJtEY6aFi6063h1+4i0yY3VvGisJx3Yzg56b7f5p94DC3OlTQNg8ySQt8T+lDuFdHt04fuJUlDyXdqzOW2CFN8e6g+ja5caHBOLZo2aZyykjPLkY2+VCnKUp8eB1RhDE93usBQ2zR5RxhkPK2fAimXgu2S74ggsDIFe4jkVSdhz
2023-11-22 16:22:10 UTC	1252	IN	Data Raw: 31 38 63 30 0d 0a 22 2c 30 2c 5b 33 2c 31 34 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 64 72 20 63 68 61 6e 67 20 68 65 61 72 74 20 73 75 72 67 65 6f 6e 22 2c 30 2c 5b 33 2c 31 34 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 6a 61 6e 65 20 62 6f 75 74 69 71 75 65 20 73 68 75 74 20 64 6f 77 6e 22 2c 30 2c 5b 33 2c 31 34 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 6d 61 72 6a 6f 72 69 65 20 67 72 65 65 6e 65 Data Ascii: 18c0",0,[3,143,357,362,396],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["dr chang heart surgeon",0,[3,143,357,362,396],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["jane boutique shut down",0,[3,143,357,362,396],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["marjorie greene
2023-11-22 16:22:10 UTC	1252	IN	Data Raw: 70 55 31 44 36 33 57 58 74 36 35 46 51 4e 56 42 64 69 6d 34 39 64 66 58 42 4b 53 4a 4c 73 63 53 61 6c 75 6d 52 2f 78 34 67 54 34 62 32 34 71 38 68 67 64 54 71 77 70 75 62 37 64 49 49 51 72 4d 64 38 6a 71 68 52 76 59 65 57 6e 79 37 34 70 31 53 63 34 31 57 48 6e 56 71 54 4a 38 52 53 6a 4e 38 4f 55 38 76 6c 69 56 62 56 59 39 68 48 75 50 6f 66 66 6c 78 4b 43 4f 69 71 44 2b 2b 73 48 56 33 2f 41 46 42 56 7a 77 55 41 65 64 72 41 58 77 79 37 52 56 43 6b 79 74 6e 71 61 31 43 53 38 4a 4b 63 72 69 31 6c 43 41 56 32 75 33 37 77 67 2f 46 59 58 47 41 45 57 6c 4f 31 46 70 61 6d 6c 4e 6f 51 30 43 70 52 57 34 42 6c 39 4f 4e 75 39 73 56 32 42 64 74 61 62 33 30 30 78 52 72 54 61 4d 65 51 45 56 64 73 6e 4d 49 55 61 73 4a 70 6b 43 6f 73 4f 77 57 5a 4a 6d 4e 62 6c 74 31 31 41 Data Ascii: pU1D63WXt65FQNVBdim49dfXBKSJLscSalumR/x4gT4b24q8hgdTqwpub7dIIQrMd8jqhRvYeWny74p1Sc41WHnVqTJ8RSjN8OU8vliVbVY9hHuPofflxKCOiqD++sHV3/AFBVzwUAedrAXwy7RVCkytnqa1CS8JKcri1lCAV2u37wg/FYXGAEWlO1FpamlNoQ0CpRW4Bl9ONu9sV2Bdtab300xRrTaMeQEVdsnMIUasJpkCosOwWZJmNblt11A
2023-11-22 16:22:10 UTC	1252	IN	Data Raw: 32 69 75 73 73 42 5a 38 4b 6c 35 6c 72 4b 69 4e 4f 2b 4b 6b 4d 51 71 31 54 34 49 71 41 57 57 78 6c 33 69 6b 6d 33 61 78 2b 6d 4f 64 71 58 6e 6a 54 57 6e 5a 6e 69 55 74 6e 4d 70 6b 48 72 63 41 58 78 51 32 66 66 43 59 68 5a 79 32 7a 4e 35 68 32 56 78 2f 62 47 30 4a 48 69 69 31 77 47 63 43 61 58 50 5a 62 61 70 69 47 6d 55 70 51 30 67 42 4b 45 70 47 67 46 74 41 4d 42 61 2f 53 50 38 57 6f 77 44 61 62 79 47 56 6c 54 58 63 32 31 54 36 6a 37 59 4f 79 55 33 70 62 5a 47 71 54 61 78 37 59 2b 68 43 38 55 39 6c 6a 46 48 47 35 63 47 4b 72 59 61 72 41 36 39 52 4d 50 55 48 61 4e 58 55 42 65 69 34 7a 2b 74 75 59 42 2b 34 77 30 37 62 52 6c 53 49 44 45 39 4f 6f 61 4f 37 4e 75 68 46 78 39 52 39 63 43 76 34 67 78 30 74 56 34 50 49 54 59 50 4e 69 35 36 71 47 68 2b 32 48 46 68 Data Ascii: 2iussBZ8Kl5lrKiNO+KkMQq1T4IqAWWxl3ikm3ax+mOdqXnjTWnZniUtnMpkHrcAXxQ2ffCYhZy2zN5h2Vx/bG0JHii1wGcCaXPZbapiGmUpQ0gBKEpGgFtAMBa/SP8WowDabyGVlTXc21T6j7YOyU3pbZGqTax7Y+hC8U9ljFHG5cGKrYarA69RMPUHaNXUBei4z+tuYB+4w07bRlSIDE9OoaO7NuhFx9R9cCv4gx0tV4PITYPNi56qGh+2HFh
2023-11-22 16:22:10 UTC	1252	IN	Data Raw: 71 31 5a 32 56 55 45 74 69 77 41 53 51 73 67 36 4b 36 45 59 38 70 55 6f 77 36 70 46 65 42 30 44 67 53 72 2b 6b 36 48 36 48 41 39 4f 78 51 2b 73 50 62 57 48 54 2f 41 45 54 2f 32 51 5c 75 30 30 33 64 5c 75 30 30 33 64 22 7d 5d 2c 5b 22 65 61 72 74 68 20 6c 61 73 65 72 20 62 65 61 6d 65 64 20 6d 65 73 73 61 67 65 22 2c 30 2c 5b 33 2c 31 34 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 70 6f 6c 61 72 20 65 78 70 72 65 73 73 20 70 72 65 71 75 65 6c 20 63 68 72 69 73 74 6d 61 73 20 65 78 70 72 65 73 73 22 2c 30 2c 5b 33 2c 31 34 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 Data Ascii: q1Z2VUEtiwASQsg6K6EY8pUow6pFeB0DgSr+k6H6HA9OxQ+sPbWHT/AET/2Q\u003d\u003d"}],["earth laser beamed message",0,[3,143,357,362,396],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["polar express prequel christmas express",0,[3,143,357,362,396],{"zf":33,"zl":8,"zp":{"gs
2023-11-22 16:22:10 UTC	1252	IN	Data Raw: 6a 5a 73 49 32 6b 78 5a 44 37 34 6c 62 70 34 71 62 66 55 6b 32 58 6d 4a 4f 59 67 39 66 39 31 79 54 70 44 77 67 35 75 6b 4e 37 44 49 6d 4b 72 57 48 73 4e 68 76 71 49 42 41 58 6c 46 69 43 4c 66 75 30 4e 49 6c 34 56 69 63 4e 47 61 58 68 37 37 61 52 70 6d 74 6d 41 39 72 31 4a 55 4f 57 37 41 53 6a 65 5a 79 79 62 63 4b 32 6b 69 39 2f 44 57 39 4b 6e 7a 31 54 48 46 4e 52 63 36 57 77 4c 4b 43 57 30 6b 6e 54 6d 62 31 50 4c 6b 30 37 43 78 37 59 77 64 67 35 66 36 50 62 66 41 5a 43 64 52 2b 75 62 62 30 2f 6d 63 68 2f 77 41 71 74 5a 56 57 73 51 77 75 51 4d 58 77 35 7a 44 6e 57 32 4a 54 38 68 4f 36 65 56 77 4a 51 6f 47 36 56 6e 6e 61 78 46 7a 7a 35 64 61 74 49 6d 2b 55 5a 69 43 71 32 70 41 36 31 52 4f 7a 4e 4f 44 69 36 5a 37 52 52 52 58 52 41 6f 6f 6f 6f 41 4b 68 2b 64 Data Ascii: jZsI2kxZD74lbp4qbfUk2XmJOYg9f91yTpDwg5ukN7DImKrWHsNhvqIBAXlFiCLfu0NIl4VicNGaXh77aRpmtmA9r1JUOW7ASjeZyybcK2ki9/DW9Knz1THFNRc6WwLKCW0knTmb1PLk07Cx7Ywdg5f6PbfAZCdR+ubb0/mch/wAqtZVWsQwuQMXw5zDnW2JT8hO6eVwJQoG6VnnaxFzz5datIm+UZiCq2pA61ROzNODi6Z7RRRXRAooooAKh+d
2023-11-22 16:22:10 UTC	84	IN	Data Raw: 31 22 7d 7d 5d 5d 2c 7b 22 61 67 22 3a 7b 22 61 22 3a 7b 22 38 22 3a 5b 22 54 72 65 6e 64 69 6e 67 20 73 65 61 72 63 68 65 73 22 5d 7d 7d 2c 22 71 22 3a 22 64 6f 67 79 49 44 75 74 49 46 58 6f 6c 48 4b 51 32 42 6c 45 39 6f 42 77 44 38 63 22 7d 5d 0d 0a Data Ascii: 1"}}]],{"ag":{"a":{"8":["Trending searches"]}},"q":"dogyIDutIFXolHKQ2BlE9oBwD8c"}]
2023-11-22 16:22:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49781	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:10 UTC	1406	OUT	GET /client_204?atyp=i&biw=1280&bih=907&dpr=1&ei=rCpeZdXlGruf5NoPj9ax6A4&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16
2023-11-22 16:22:10 UTC	1394	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 37 56 45 6f 54 6f 78 57 49 70 64 2d 46 74 49 6f 34 49 38 71 41 51 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 Data Ascii: HTTP/1.1 204 No ContentContent-Type: text/html; charset=UTF-8Strict-Transport-Security: max-age=31536000Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-7VEoToxWIpd-FtIo4I8qAQ' 'strict-dynamic' 'report-sample' 'unsafe-eva

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49782	142.251.16.105	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:10 UTC	1049	OUT	GET /xjs/_/js/md=1/k=xjs.hd.en.j7vH50XSWl8.O/ck=xjs.hd.3mhtCf28lXo.L.W.O/am=BAAAAAAAAAAAAAAAAAAAAAQAAAAAEPUTDgFsgACBABBggAAgAICAFKQQBAMAEPBQJgAAACZAYAhYCogKvOcBAJBAFQAAAAAAEAwiAAAACAAAoAMAACCgEdAAhIBKQAAAAADyACA4ABhEEAAAAAAAAAAAAAABTBAMLkgAFAQQAAAAAAAAAAAAAKSkycVAAg/rs=ACT90oEQOKoPcm_mXy_VnoCFj9ts7y2bDw HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16
2023-11-22 16:22:11 UTC	818	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 4f 72 69 67 69 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 74 72 75 73 74 65 64 2d 74 79 70 65 73 2d 66 6f 72 20 27 73 63 72 69 70 74 27 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 67 77 73 2d 74 65 61 6d 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesVary: Accept-Encoding, OriginContent-Type: text/javascript; charset=UTF-8Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-teamCross-Origin-R
2023-11-22 16:22:11 UTC	434	IN	Data Raw: 7b 22 6d 6f 64 75 6c 65 47 72 61 70 68 22 3a 22 71 75 61 6e 74 75 6d 2f 74 37 78 67 49 65 2f 77 73 39 54 6c 63 2f 63 45 74 39 30 62 2f 71 64 64 67 4b 65 2f 79 78 54 63 68 66 2f 73 79 36 73 2f 73 79 36 74 2f 73 79 36 75 3a 36 2c 37 2f 73 79 36 76 2f 78 51 74 5a 62 3a 35 2c 38 2c 39 2f 73 79 36 77 2f 52 39 59 48 4a 63 3a 38 2c 62 2f 4b 55 4d 37 5a 2f 77 72 7a 45 58 62 2f 54 78 43 4a 66 64 2f 57 56 44 79 4b 65 2f 73 79 36 78 2f 56 6a 39 68 70 64 3a 67 2c 68 2f 74 61 66 50 72 66 2f 64 74 6c 30 68 64 2f 6c 4c 51 57 46 65 2f 49 6c 31 4d 34 62 2f 65 48 44 66 6c 2f 46 4f 4e 45 64 66 3a 6b 2f 4a 69 56 4c 6a 64 3a 6b 2f 46 41 55 64 57 3a 6b 2f 64 4d 5a 6b 33 65 3a 6e 2f 6f 66 6a 56 6b 62 2f 71 61 53 33 67 64 2f 54 39 79 35 44 64 2f 79 69 4c 67 36 65 2f 51 37 42 61 Data Ascii: {"moduleGraph":"quantum/t7xgIe/ws9Tlc/cEt90b/qddgKe/yxTchf/sy6s/sy6t/sy6u:6,7/sy6v/xQtZb:5,8,9/sy6w/R9YHJc:8,b/KUM7Z/wrzEXb/TxCJfd/WVDyKe/sy6x/Vj9hpd:g,h/tafPrf/dtl0hd/lLQWFe/Il1M4b/eHDfl/FONEdf:k/JiVLjd:k/FAUdW:k/dMZk3e:n/ofjVkb/qaS3gd/T9y5Dd/yiLg6e/Q7Ba
2023-11-22 16:22:11 UTC	1252	IN	Data Raw: 79 37 61 2f 73 79 37 39 3a 31 69 2c 31 6b 2f 73 79 37 63 2f 73 79 37 62 3a 31 6c 2c 31 6d 2f 73 79 37 64 2f 4e 77 48 30 48 3a 31 6a 2c 31 6e 2f 73 79 37 65 3a 31 67 2f 73 79 37 66 2f 67 79 63 68 67 3a 31 68 2c 31 70 2c 31 71 2c 31 72 2f 55 6c 6d 6d 72 64 3a 31 73 2f 72 4a 6d 4a 72 63 3a 31 61 2c 31 65 2f 47 48 41 65 41 63 2f 57 74 36 76 6a 66 3a 31 65 2f 6c 73 6a 56 6d 63 3a 31 64 2f 49 5a 54 36 33 2f 56 67 64 36 68 62 2f 73 79 37 68 2f 73 79 37 69 2f 73 79 37 6a 3a 32 30 2c 32 31 2f 59 4e 6a 47 44 64 3a 32 32 2f 69 46 51 79 4b 66 2f 73 79 37 6c 2f 73 79 37 6d 3a 32 35 2f 73 79 37 6b 3a 31 79 2c 32 32 2c 32 36 2f 50 72 50 59 52 64 3a 32 33 2c 32 37 2f 73 79 37 6e 2f 76 66 75 4e 4a 66 3a 32 39 2f 73 79 37 6f 2f 68 63 36 55 62 64 3a 32 34 2c 32 38 2c 32 61 Data Ascii: y7a/sy79:1i,1k/sy7c/sy7b:1l,1m/sy7d/NwH0H:1j,1n/sy7e:1g/sy7f/gychg:1h,1p,1q,1r/Ulmmrd:1s/rJmJrc:1a,1e/GHAeAc/Wt6vjf:1e/lsjVmc:1d/IZT63/Vgd6hb/sy7h/sy7i/sy7j:20,21/YNjGDd:22/iFQyKf/sy7l/sy7m:25/sy7k:1y,22,26/PrPYRd:23,27/sy7n/vfuNJf:29/sy7o/hc6Ubd:24,28,2a
2023-11-22 16:22:11 UTC	1252	IN	Data Raw: 2f 73 79 38 79 2f 65 35 71 46 4c 63 3a 35 32 2c 35 35 2f 64 49 6f 53 42 62 2f 73 79 38 7a 2f 53 70 73 66 53 62 3a 32 63 2c 35 38 2f 5a 67 47 67 39 62 2f 73 79 39 33 2f 73 79 39 61 2f 73 79 39 62 2f 73 79 39 35 2f 73 79 39 30 3a 35 62 2c 35 63 2c 35 64 2c 35 65 2f 73 79 39 34 2f 73 79 39 38 2f 73 79 39 31 3a 35 63 2c 35 64 2c 35 67 2c 35 68 2f 73 79 39 39 2f 73 79 39 36 2f 73 79 39 63 2f 73 79 39 64 2f 73 79 39 65 2f 73 79 39 32 3a 35 66 2c 35 69 2c 35 6a 2c 35 6b 2c 35 6c 2c 35 6d 2c 35 6e 2f 73 79 39 37 3a 35 65 2c 35 68 2c 35 6b 2f 73 79 39 66 3a 35 65 2c 35 6c 2f 73 79 39 67 3a 35 68 2c 35 6e 2f 73 79 39 68 2f 73 79 39 6a 2f 73 79 39 6b 2f 73 79 39 6c 3a 35 75 2f 73 79 39 6d 3a 35 74 2c 35 76 2f 73 79 39 69 3a 35 73 2c 35 77 2f 73 79 39 6f 2f 73 79 39 Data Ascii: /sy8y/e5qFLc:52,55/dIoSBb/sy8z/SpsfSb:2c,58/ZgGg9b/sy93/sy9a/sy9b/sy95/sy90:5b,5c,5d,5e/sy94/sy98/sy91:5c,5d,5g,5h/sy99/sy96/sy9c/sy9d/sy9e/sy92:5f,5i,5j,5k,5l,5m,5n/sy97:5e,5h,5k/sy9f:5e,5l/sy9g:5h,5n/sy9h/sy9j/sy9k/sy9l:5u/sy9m:5t,5v/sy9i:5s,5w/sy9o/sy9
2023-11-22 16:22:11 UTC	1252	IN	Data Raw: 38 61 2f 73 79 63 6a 3a 32 30 2c 37 70 2c 38 63 2c 38 64 2c 38 68 2c 38 69 2c 38 6f 2f 73 79 63 75 3a 38 61 2f 73 79 63 6b 3a 37 65 2c 38 63 2c 38 71 2f 73 79 63 36 3a 37 6d 2c 37 79 2f 73 79 63 76 3a 38 61 2f 73 79 63 6c 3a 32 30 2c 37 7a 2c 38 63 2c 38 64 2c 38 73 2c 38 74 2f 73 79 63 77 3a 38 61 2f 73 79 63 6d 3a 32 30 2c 37 7a 2c 38 63 2c 38 64 2c 38 73 2c 38 76 2f 73 79 63 78 3a 38 61 2f 73 79 63 79 3a 35 73 2c 36 30 2f 73 79 63 37 3a 32 30 2c 37 6f 2c 37 7a 2c 38 63 2c 38 64 2c 38 78 2c 38 79 2f 73 79 63 38 3a 37 79 2f 73 79 63 7a 3a 38 61 2f 73 79 63 39 3a 32 30 2c 37 6f 2c 37 7a 2c 38 63 2c 38 64 2c 39 30 2c 39 31 2f 73 79 64 30 3a 38 61 2f 73 79 63 6e 3a 32 30 2c 37 7a 2c 38 39 2c 38 63 2c 38 64 2c 39 33 2f 73 79 64 31 3a 38 61 2f 73 79 64 32 2f Data Ascii: 8a/sycj:20,7p,8c,8d,8h,8i,8o/sycu:8a/syck:7e,8c,8q/syc6:7m,7y/sycv:8a/sycl:20,7z,8c,8d,8s,8t/sycw:8a/sycm:20,7z,8c,8d,8s,8v/sycx:8a/sycy:5s,60/syc7:20,7o,7z,8c,8d,8x,8y/syc8:7y/sycz:8a/syc9:20,7o,7z,8c,8d,90,91/syd0:8a/sycn:20,7z,89,8c,8d,93/syd1:8a/syd2/
2023-11-22 16:22:11 UTC	1252	IN	Data Raw: 76 65 3a 62 69 2c 62 6b 2f 73 54 73 44 4d 63 2f 76 31 64 61 4d 2f 4c 4b 34 50 79 65 2f 73 79 65 64 2f 61 4c 55 66 50 3a 62 77 2f 77 51 6c 59 76 65 2f 61 52 6a 75 78 62 2f 73 79 65 65 3a 38 34 2f 73 79 65 66 2f 75 78 4d 70 55 3a 31 72 2c 63 30 2c 63 31 2f 43 6f 67 46 37 64 2f 73 79 65 67 3a 35 66 2c 35 6a 2c 35 71 2c 36 74 2f 73 79 65 68 3a 35 69 2c 35 6d 2c 35 72 2c 36 74 2f 73 79 65 69 3a 35 78 2f 73 79 65 6a 3a 63 36 2f 73 79 65 6b 3a 37 30 2c 63 37 2f 73 79 65 6c 3a 36 67 2f 73 79 65 6d 3a 37 6f 2f 73 79 66 36 2f 73 79 65 6e 3a 63 62 2f 73 79 65 6f 3a 31 6e 2f 73 79 65 71 2f 73 79 65 72 2f 73 79 65 70 3a 63 65 2c 63 66 2f 73 79 65 73 2f 73 79 65 74 3a 63 64 2c 63 67 2c 63 68 2f 73 79 65 75 2f 73 79 65 76 3a 37 6a 2c 37 78 2c 63 6a 2f 73 79 65 77 3a 63 Data Ascii: ve:bi,bk/sTsDMc/v1daM/LK4Pye/syed/aLUfP:bw/wQlYve/aRjuxb/syee:84/syef/uxMpU:1r,c0,c1/CogF7d/syeg:5f,5j,5q,6t/syeh:5i,5m,5r,6t/syei:5x/syej:c6/syek:70,c7/syel:6g/syem:7o/syf6/syen:cb/syeo:1n/syeq/syer/syep:ce,cf/syes/syet:cd,cg,ch/syeu/syev:7j,7x,cj/syew:c
2023-11-22 16:22:11 UTC	1252	IN	Data Raw: 46 58 55 64 77 3a 66 6d 2f 73 79 67 74 3a 64 68 2f 45 52 77 56 62 3a 66 6f 2f 73 79 67 75 3a 64 68 2f 65 54 76 35 39 65 3a 66 71 2f 73 79 67 76 3a 64 68 2f 67 70 4e 33 34 63 3a 66 73 2f 73 79 67 77 3a 64 68 2f 67 69 79 75 65 63 3a 66 75 2f 73 79 67 78 3a 64 68 2f 41 33 65 57 44 62 3a 66 77 2f 73 79 67 79 3a 64 68 2f 61 67 76 55 59 64 3a 66 79 2f 73 79 67 7a 3a 64 68 2f 6a 56 71 44 37 3a 67 30 2f 73 79 68 30 3a 64 68 2f 4e 6d 52 39 6a 64 3a 67 32 2f 73 79 68 31 3a 64 68 2f 47 52 4a 33 32 63 3a 67 34 2f 73 79 68 32 3a 64 68 2f 71 6e 67 4a 42 66 3a 67 36 2f 73 79 68 33 3a 64 68 2f 55 33 4f 76 63 63 3a 67 38 2f 73 79 68 34 3a 64 68 2f 79 66 48 32 42 64 3a 67 61 2f 73 79 68 35 3a 64 68 2f 42 31 37 79 53 65 3a 67 63 2f 73 79 68 36 3a 64 68 2f 63 4b 56 32 32 63 Data Ascii: FXUdw:fm/sygt:dh/ERwVb:fo/sygu:dh/eTv59e:fq/sygv:dh/gpN34c:fs/sygw:dh/giyuec:fu/sygx:dh/A3eWDb:fw/sygy:dh/agvUYd:fy/sygz:dh/jVqD7:g0/syh0:dh/NmR9jd:g2/syh1:dh/GRJ32c:g4/syh2:dh/qngJBf:g6/syh3:dh/U3Ovcc:g8/syh4:dh/yfH2Bd:ga/syh5:dh/B17ySe:gc/syh6:dh/cKV22c
2023-11-22 16:22:11 UTC	1252	IN	Data Raw: 79 69 76 3a 6a 66 2c 6a 67 2c 6a 68 2f 73 79 69 78 3a 6a 66 2c 6a 67 2c 6a 68 2f 51 7a 72 61 5a 62 2f 49 39 4a 49 6a 63 2f 6e 7a 75 34 55 64 2f 67 47 59 7a 67 2f 6d 36 62 32 50 65 3a 6a 69 2c 6a 6a 2c 6a 6b 2c 6a 6c 2c 6a 6d 2c 6a 6e 2c 6a 6f 2f 73 79 6a 30 2f 73 79 6a 31 3a 64 6b 2c 6a 71 2f 6f 58 52 44 7a 63 3a 6a 72 2f 50 45 37 32 38 62 3a 6a 72 2f 73 79 6a 32 3a 64 6b 2c 66 30 2c 68 32 2c 6a 68 2c 6a 71 2f 6e 73 4a 78 6a 63 3a 6a 75 2f 73 79 6a 33 2f 73 79 6a 34 3a 64 6b 2c 65 34 2c 66 67 2c 67 73 2c 67 77 2c 68 30 2c 68 69 2c 68 6b 2c 6a 77 2f 73 79 6a 35 3a 64 68 2f 6f 4f 54 69 46 63 3a 6a 78 2c 6a 79 2f 73 79 6a 36 2f 73 79 6a 61 3a 64 68 2f 73 79 6a 63 3a 64 68 2f 73 79 6a 65 2f 73 79 6a 66 3a 64 72 2c 69 68 2c 6a 34 2c 6a 71 2c 6b 30 2c 6b 33 2f Data Ascii: yiv:jf,jg,jh/syix:jf,jg,jh/QzraZb/I9JIjc/nzu4Ud/gGYzg/m6b2Pe:ji,jj,jk,jl,jm,jn,jo/syj0/syj1:dk,jq/oXRDzc:jr/PE728b:jr/syj2:dk,f0,h2,jh,jq/nsJxjc:ju/syj3/syj4:dk,e4,fg,gs,gw,h0,hi,hk,jw/syj5:dh/oOTiFc:jx,jy/syj6/syja:dh/syjc:dh/syje/syjf:dr,ih,j4,jq,k0,k3/
2023-11-22 16:22:11 UTC	1252	IN	Data Raw: 6a 67 2c 6d 68 2f 56 47 38 34 64 65 3a 6d 77 2f 73 79 6b 74 3a 6a 67 2c 6d 68 2f 43 66 4f 38 30 62 3a 6d 79 2f 73 79 6b 75 3a 6a 67 2c 6d 68 2f 51 34 6a 4e 63 3a 6e 30 2f 44 4c 56 57 78 3a 6d 6b 2f 73 79 6b 76 2f 73 79 6b 77 3a 64 6b 2c 6e 33 2f 76 68 73 66 73 65 3a 6e 34 2f 62 49 4d 4d 6f 66 2f 78 4e 53 6e 79 3a 6e 36 2f 73 79 6b 79 2f 73 79 6b 7a 3a 64 6b 2c 6a 68 2c 6a 71 2c 6e 38 2f 73 79 6c 30 3a 64 6b 2c 6a 71 2f 79 43 68 67 74 62 3a 6e 39 2c 6e 61 2f 73 79 6c 31 3a 64 72 2c 69 68 2c 6a 71 2f 72 4c 32 41 52 3a 6e 63 2f 73 79 6c 32 3a 64 6a 2f 56 39 57 31 61 64 3a 6e 65 2f 73 79 6c 33 3a 64 6a 2f 59 30 64 70 46 63 3a 6e 67 2f 41 4f 54 6b 75 63 3a 6b 6e 2f 73 79 6c 34 3a 64 6a 2f 58 4f 65 68 4f 63 3a 6e 6a 2f 73 79 6c 35 3a 64 6a 2f 64 41 6e 65 6b 64 Data Ascii: jg,mh/VG84de:mw/sykt:jg,mh/CfO80b:my/syku:jg,mh/Q4jNc:n0/DLVWx:mk/sykv/sykw:dk,n3/vhsfse:n4/bIMMof/xNSny:n6/syky/sykz:dk,jh,jq,n8/syl0:dk,jq/yChgtb:n9,na/syl1:dr,ih,jq/rL2AR:nc/syl2:dj/V9W1ad:ne/syl3:dj/Y0dpFc:ng/AOTkuc:kn/syl4:dj/XOehOc:nj/syl5:dj/dAnekd
2023-11-22 16:22:11 UTC	1252	IN	Data Raw: 6e 3a 71 67 2f 73 79 6d 6f 3a 71 61 2f 54 4f 54 7a 62 62 3a 71 62 2c 71 68 2c 71 69 2f 73 79 6d 70 2f 73 79 6d 71 3a 61 65 2c 61 68 2c 71 6b 2f 4d 6b 48 79 47 64 3a 61 67 2c 71 6c 2f 73 79 6d 72 2f 6b 62 41 6d 39 64 3a 71 6e 2f 73 79 6d 73 2f 41 4e 79 6e 31 3a 71 70 2f 55 46 5a 68 42 63 2f 73 79 6d 75 2f 55 34 4d 7a 4b 63 3a 61 67 2c 71 71 2c 71 72 2c 71 73 2f 67 38 6e 6b 78 2f 73 79 6d 76 3a 70 7a 2f 73 79 6d 77 2f 73 79 6d 78 2f 73 79 6d 79 2f 73 79 6d 7a 2f 73 79 6e 30 2f 73 79 6e 31 2f 73 79 6e 32 2f 44 50 72 65 45 3a 34 74 2c 71 6b 2c 71 6f 2c 71 75 2c 71 76 2c 71 77 2c 71 78 2c 71 79 2c 71 7a 2c 72 30 2c 72 31 2c 72 32 2f 73 79 6e 33 2f 69 39 53 4e 42 66 3a 34 74 2c 72 34 2f 73 79 6e 34 2f 67 71 69 42 46 3a 34 74 2c 70 7a 2c 72 36 2f 73 79 6e 62 2f Data Ascii: n:qg/symo:qa/TOTzbb:qb,qh,qi/symp/symq:ae,ah,qk/MkHyGd:ag,ql/symr/kbAm9d:qn/syms/ANyn1:qp/UFZhBc/symu/U4MzKc:ag,qq,qr,qs/g8nkx/symv:pz/symw/symx/symy/symz/syn0/syn1/syn2/DPreE:4t,qk,qo,qu,qv,qw,qx,qy,qz,r0,r1,r2/syn3/i9SNBf:4t,r4/syn4/gqiBF:4t,pz,r6/synb/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49784	142.250.31.101	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:11 UTC	539	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://ogs.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://ogs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:22:11 UTC	756	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 6f 67 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 4f 53 54 2c 20 4f 50 54 49 4f 4e 53 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 4d 61 78 2d 41 67 65 3a 20 38 36 34 30 30 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 48 65 61 64 65 72 73 3a 20 58 2d 50 6c 61 79 6c 6f 67 2d 57 65 62 2c 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 2c 6f 72 69 67 69 6e Data Ascii: HTTP/1.1 200 OKAccess-Control-Allow-Origin: https://ogs.google.comAccess-Control-Allow-Methods: GET, POST, OPTIONSAccess-Control-Max-Age: 86400Access-Control-Allow-Credentials: trueAccess-Control-Allow-Headers: X-Playlog-Web,authorization,origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49787	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:11 UTC	1290	OUT	GET /client_204?cs=1&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16
2023-11-22 16:22:11 UTC	1768	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 67 58 6b 54 36 43 5f 6f 7a 79 5f 4e 7a 74 50 6b 5a 32 6e 6c 42 41 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 Data Ascii: HTTP/1.1 204 No ContentContent-Type: text/html; charset=UTF-8Strict-Transport-Security: max-age=31536000Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-gXkT6C_ozy_NztPkZ2nlBA' 'strict-dynamic' 'report-sample' 'unsafe-eva

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49789	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:11 UTC	1690	OUT	GET /async/hpba?vet=10ahUKEwjV65b1gdiCAxW7D1kFHQ9rDO0Qj-0KCBs..i&ei=rCpeZdXlGruf5NoPj9ax6A4&opi=89978449&yv=3&cs=0&async=_ck:xjs.hd.3mhtCf28lXo.L.W.O,_k:xjs.hd.en.j7vH50XSWl8.O,_am:BAAAAAAAAAAAAAAAAAAAAAQAAAAAEPUTDgFsgACBABBggAAgAICAFKQQBAMAEPBQJgAAACZAYAhYCogKvOcBAJBAFQAAAAAAEAwiAAAACAAAoAMAACCgEdAAhIBKQAAAAADyACA4ABhEEAAAAAAAAAAAAAABTBAMLkgAFAQQAAAAAAAAAAAAAKSkycVAAg,_csss:ACT90oHg5mCcQv8sNOOYCaMvtyVFpx_jxw,_fmt:prog,_id:a3JU5b HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16
2023-11-22 16:22:11 UTC	1637	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 56 65 72 73 69 6f 6e 3a 20 35 38 33 31 33 31 32 38 32 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 61 74 74 61 63 68 6d 65 6e 74 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 66 2e 74 78 74 22 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 2d 61 6c 6c 6f 77 2d 70 6f Data Ascii: HTTP/1.1 200 OKVersion: 583131282X-Content-Type-Options: nosniffContent-Type: text/plain; charset=UTF-8Content-Disposition: attachment; filename="f.txt"Strict-Transport-Security: max-age=31536000Cross-Origin-Opener-Policy: same-origin-allow-po
2023-11-22 16:22:11 UTC	48	IN	Data Raw: 32 61 0d 0a 29 5d 7d 27 0a 32 32 3b 5b 22 73 79 70 65 5a 59 53 46 4d 36 79 65 35 4e 6f 50 72 4b 79 7a 6f 41 73 22 2c 22 31 39 30 36 22 5d 0d 0a Data Ascii: 2a)]}'22;["sypeZYSFM6ye5NoPrKyzoAs","1906"]
2023-11-22 16:22:11 UTC	41	IN	Data Raw: 32 33 0d 0a 33 3b 5b 32 5d 31 62 3b 3c 64 69 76 20 6a 73 6e 61 6d 65 3d 22 4e 6c 6c 30 6e 65 22 3e 3c 2f 64 69 76 3e 0d 0a Data Ascii: 233;[2]1b;<div jsname="Nll0ne"></div>
2023-11-22 16:22:11 UTC	12	IN	Data Raw: 37 0d 0a 33 3b 5b 39 5d 30 3b 0d 0a Data Ascii: 73;[9]0;
2023-11-22 16:22:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49788	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:11 UTC	1703	OUT	GET /xjs/_/js/k=xjs.hd.en.j7vH50XSWl8.O/ck=xjs.hd.3mhtCf28lXo.L.W.O/am=BAAAAAAAAAAAAAAAAAAAAAQAAAAAEPUTDgFsgACBABBggAAgAICAFKQQBAMAEPBQJgAAACZAYAhYCogKvOcBAJBAFQAAAAAAEAwiAAAACAAAoAMAACCgEdAAhIBKQAAAAADyACA4ABhEEAAAAAAAAAAAAAABTBAMLkgAFAQQAAAAAAAAAAAAAKSkycVAAg/d=0/dg=2/br=1/ujg=1/rs=ACT90oEQOKoPcm_mXy_VnoCFj9ts7y2bDw/m=sy7c,syre,syrg,syrh,WlNQGd,syxa,syxc,nabPbb,symw,symx,symy,symz,syn0,syn2,DPreE,syl0,syrd,syrf,CnSW2d,syxb,fXO0xe?xjs=s3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16
2023-11-22 16:22:11 UTC	817	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 4f 72 69 67 69 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 74 72 75 73 74 65 64 2d 74 79 70 65 73 2d 66 6f 72 20 27 73 63 72 69 70 74 27 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 67 77 73 2d 74 65 61 6d 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesVary: Accept-Encoding, OriginContent-Type: text/javascript; charset=UTF-8Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-teamCross-Origin-R
2023-11-22 16:22:11 UTC	435	IN	Data Raw: 5f 46 5f 69 6e 73 74 61 6c 6c 43 73 73 28 22 2e 45 70 50 59 4c 64 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 59 70 63 44 6e 66 7b 70 61 64 64 69 6e 67 3a 30 20 31 36 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 59 70 63 44 6e 66 2e 48 47 31 64 76 64 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 48 47 31 64 76 64 3e 2a 7b 70 61 64 64 69 6e 67 3a 30 20 31 36 70 78 7d 2e 57 74 56 35 6e 64 20 2e 59 70 63 44 6e 66 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 38 70 78 7d 2e 5a 74 30 61 35 65 20 2e 59 70 63 44 6e 66 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 34 38 70 78 7d 2e 47 5a 6e 51 71 65 20 2e 59 70 63 44 6e 66 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 33 70 78 7d 2e 45 70 50 59 Data Ascii: _F_installCss(".EpPYLd{display:block;position:relative}.YpcDnf{padding:0 16px;vertical-align:middle}.YpcDnf.HG1dvd{padding:0}.HG1dvd>*{padding:0 16px}.WtV5nd .YpcDnf{padding-left:28px}.Zt0a5e .YpcDnf{line-height:48px}.GZnQqe .YpcDnf{line-height:23px}.EpPY
2023-11-22 16:22:11 UTC	1252	IN	Data Raw: 2e 43 42 38 6e 44 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 20 38 70 78 20 63 65 6e 74 65 72 7d 2e 5a 74 30 61 35 65 2e 43 42 38 6e 44 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 73 6c 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 6d 61 74 65 72 69 61 6c 2f 73 79 73 74 65 6d 2f 31 78 2f 64 6f 6e 65 5f 62 6c 61 63 6b 5f 31 36 64 70 2e 70 6e 67 29 7d 2e 47 5a 6e 51 71 65 2e 43 42 38 6e 44 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6e 6f 2d 72 65 70 65 61 74 20 6c 65 66 74 20 63 65 6e 74 65 72 7d 2e 47 5a 6e 51 71 65 2e 43 42 38 6e 44 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 73 6c 2e 67 Data Ascii: .CB8nDe{background:no-repeat left 8px center}.Zt0a5e.CB8nDe{background-image:url(https://ssl.gstatic.com/images/icons/material/system/1x/done_black_16dp.png)}.GZnQqe.CB8nDe{background:no-repeat left center}.GZnQqe.CB8nDe{background-image:url(https://ssl.g
2023-11-22 16:22:11 UTC	1252	IN	Data Raw: 79 7b 0a 5f 2e 78 28 22 57 6c 4e 51 47 64 22 29 3b 0a 76 61 72 20 54 4b 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 74 68 69 73 2e 74 72 69 67 67 65 72 3d 61 3b 74 68 69 73 2e 6e 69 64 3d 62 3b 74 68 69 73 2e 62 47 3d 63 7d 2c 6c 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 41 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 4f 61 29 3b 74 68 69 73 2e 45 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 4b 61 3d 5b 5d 3b 74 68 69 73 2e 6f 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 70 72 65 66 69 78 3d 22 22 3b 74 68 69 73 2e 48 6a 61 3d 5b 5d 2e 63 6f 6e 63 61 74 28 5f 2e 61 64 28 61 2e 63 6f 6e 74 72 6f 6c 6c 65 72 73 2e 48 6a 61 29 2c 5f 2e 61 64 28 61 2e 63 6f 6e 74 72 6f 6c 6c 65 72 73 2e 76 69 64 29 2c 5f 2e 61 64 28 61 2e 63 6f 6e 74 72 6f 6c 6c 65 72 73 2e 66 46 63 Data Ascii: y{_.x("WlNQGd");var TKb=function(a,b,c){this.trigger=a;this.nid=b;this.bG=c},lx=function(a){_.A.call(this,a.Oa);this.Ea=null;this.Ka=[];this.oa=null;this.prefix="";this.Hja=[].concat(_.ad(a.controllers.Hja),_.ad(a.controllers.vid),_.ad(a.controllers.fFc
2023-11-22 16:22:11 UTC	1252	IN	Data Raw: 73 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 74 68 69 73 2e 4b 61 2e 70 6f 70 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 63 61 73 65 20 37 3a 63 61 73 65 20 36 3a 63 61 73 65 20 34 3a 63 61 73 65 20 35 3a 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 62 2e 67 65 74 54 79 70 65 28 29 7d 62 2e 54 71 28 21 31 29 7d 57 4b 62 28 74 68 69 73 2c 6e 75 6c 6c 29 7d 3b 76 61 72 20 56 4b 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 45 61 26 26 28 61 2e 6b 61 28 61 2e 45 61 29 2e 54 71 28 21 31 29 2c 61 2e 45 61 3d 6e 75 6c 6c 29 7d 3b 6c 78 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 48 6a 61 2e 66 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 2e 67 65 74 52 6f 6f Data Ascii: s);break;case 3:this.Ka.pop();break;case 1:case 7:case 6:case 4:case 5:break;default:b.getType()}b.Tq(!1)}WKb(this,null)};var VKb=function(a){a.Ea&&(a.ka(a.Ea).Tq(!1),a.Ea=null)};lx.prototype.ka=function(a){return this.Hja.find(function(b){return b.getRoo
2023-11-22 16:22:11 UTC	1252	IN	Data Raw: 72 6e 20 61 3b 76 61 72 20 62 3d 28 6e 65 77 20 5f 2e 69 67 28 5b 61 5d 29 29 2e 66 69 6e 64 28 22 2a 22 29 2e 74 6f 41 72 72 61 79 28 29 3b 72 65 74 75 72 6e 28 61 3d 5b 61 5d 2e 63 6f 6e 63 61 74 28 62 29 2e 66 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 5f 2e 6d 65 28 63 29 26 26 5f 2e 64 6d 2e 59 67 28 63 29 26 26 28 22 6d 65 6e 75 69 74 65 6d 22 3d 3d 3d 63 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 29 26 26 63 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 29 7c 7c 5f 2e 79 6c 28 63 29 29 7d 29 29 3f 61 3a 6e 75 6c 6c 7d 3b 5f 2e 6d 2e 69 65 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 26 26 21 58 4b 62 28 74 68 69 73 2c 61 29 7c 7c 57 4b 62 28 74 68 69 73 2c 61 29 7d 3b 0a 76 61 72 Data Ascii: rn a;var b=(new _.ig([a])).find("*").toArray();return(a=[a].concat(b).find(function(c){return _.me(c)&&_.dm.Yg(c)&&("menuitem"===c.getAttribute("role")&&c.hasAttribute("tabindex")\|\|_.yl(c))}))?a:null};_.m.iea=function(a){a&&!XKb(this,a)\|\|WKb(this,a)};var
2023-11-22 16:22:11 UTC	1252	IN	Data Raw: 74 4b 65 79 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 63 3d 62 2e 77 68 69 63 68 7c 7c 62 2e 6b 65 79 43 6f 64 65 2c 64 3d 21 31 3b 69 66 28 32 37 3d 3d 3d 63 29 72 65 74 75 72 6e 21 30 3b 69 66 28 34 30 3d 3d 3d 63 7c 7c 33 38 3d 3d 3d 63 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6f 61 2c 66 3d 74 68 69 73 2e 74 61 28 29 3b 65 3d 33 38 3d 3d 3d 63 3f 65 3d 3d 3d 66 5b 30 5d 3a 65 3d 3d 3d 66 2e 70 6f 70 28 29 3b 69 66 28 21 74 68 69 73 2e 50 61 7c 7c 21 65 29 7b 63 3d 34 30 3d 3d 3d 63 3b 65 3d 61 4c 62 28 74 68 69 73 2c 63 29 3b 76 61 72 20 67 3b 63 3d 6e 75 6c 6c 21 3d 28 67 3d 63 3f 65 2e 73 68 69 66 74 28 29 3a 65 2e 70 6f 70 28 29 29 3f 67 3a 6e 75 6c 6c 3b 57 4b 62 28 74 68 69 73 2c 63 29 3b 74 68 69 73 2e 4e 61 28 74 68 69 73 2e 6f 61 29 7d 7d 65 6c Data Ascii: tKey)return!1;var c=b.which\|\|b.keyCode,d=!1;if(27===c)return!0;if(40===c\|\|38===c){var e=this.oa,f=this.ta();e=38===c?e===f[0]:e===f.pop();if(!this.Pa\|\|!e){c=40===c;e=aLb(this,c);var g;c=null!=(g=c?e.shift():e.pop())?g:null;WKb(this,c);this.Na(this.oa)}}el
2023-11-22 16:22:11 UTC	1252	IN	Data Raw: 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 74 6f 70 2c 65 3d 5f 2e 64 6d 2e 67 65 74 53 69 7a 65 28 61 29 3b 64 3d 61 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 74 6f 70 2d 64 3b 76 61 72 20 66 3d 65 2e 68 65 69 67 68 74 2f 32 3b 64 3c 66 3f 74 68 69 73 2e 6d 65 6e 75 2e 73 63 72 6f 6c 6c 54 6f 70 2b 3d 64 2d 66 3a 64 2b 65 2e 68 65 69 67 68 74 3e 63 2e 68 65 69 67 68 74 2d 66 26 26 28 74 68 69 73 2e 6d 65 6e 75 2e 73 63 72 6f 6c 6c 54 6f 70 2b 3d 64 2b 65 2e 68 65 69 67 68 74 2d 63 2e 68 65 69 67 68 74 2b 66 29 3b 62 26 26 28 74 68 69 73 2e 6d 65 6e 75 2e 73 63 72 6f 6c 6c 54 6f 70 2b 3d 61 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 74 6f 70 2d 74 68 69 73 2e 6d 65 6e 75 2e 67 65 74 Data Ascii: dingClientRect().top,e=_.dm.getSize(a);d=a.getBoundingClientRect().top-d;var f=e.height/2;d<f?this.menu.scrollTop+=d-f:d+e.height>c.height-f&&(this.menu.scrollTop+=d+e.height-c.height+f);b&&(this.menu.scrollTop+=a.getBoundingClientRect().top-this.menu.get
2023-11-22 16:22:11 UTC	1252	IN	Data Raw: 2e 24 62 63 3d 5f 2e 56 6e 28 22 6e 31 49 71 33 22 29 3b 5f 2e 61 63 63 3d 5f 2e 56 6e 28 22 78 36 42 43 66 62 22 29 3b 5f 2e 62 63 63 3d 5f 2e 56 6e 28 22 42 56 66 6a 68 66 22 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 66 63 63 3d 5f 2e 76 64 28 22 6e 61 62 50 62 62 22 2c 5b 5d 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 78 28 22 6e 61 62 50 62 62 22 29 3b 0a 76 61 72 20 67 63 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 41 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 4f 61 29 3b 74 68 69 73 2e 6b 61 3d 61 2e 63 6f 6e 74 72 6f 6c 6c 65 72 2e 55 6b 2e 4c 61 28 22 78 6c 30 37 4f 62 22 29 2e 65 6c 28 29 Data Ascii: .$bc=_.Vn("n1Iq3");_.acc=_.Vn("x6BCfb");_.bcc=_.Vn("BVfjhf");}catch(e){_._DumpException(e)}try{_.fcc=_.vd("nabPbb",[]);}catch(e){_._DumpException(e)}try{_.x("nabPbb");var gcc=function(a){_.A.call(this,a.Oa);this.ka=a.controller.Uk.La("xl07Ob").el()
2023-11-22 16:22:11 UTC	1252	IN	Data Raw: 61 6b 7d 7d 62 2e 6e 6f 74 69 66 79 28 5f 2e 59 62 63 29 7d 7d 29 7d 3b 0a 67 63 63 2e 70 72 6f 74 6f 74 79 70 65 2e 74 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 67 64 28 22 73 65 61 72 63 68 66 6f 72 6d 22 29 2c 63 3d 74 68 69 73 2e 70 6f 70 75 70 2e 67 65 74 50 6f 70 75 70 28 29 3b 62 26 26 62 2e 63 6f 6e 74 61 69 6e 73 28 61 2e 74 61 72 67 65 74 45 6c 65 6d 65 6e 74 2e 65 6c 28 29 29 3f 28 5f 2e 64 6d 2e 73 65 74 53 74 79 6c 65 28 62 2c 22 7a 2d 69 6e 64 65 78 22 2c 22 22 29 2c 5f 2e 64 6d 2e 73 65 74 53 74 79 6c 65 28 63 2c 22 70 6f 73 69 74 69 6f 6e 22 2c 22 22 29 2c 74 68 69 73 2e 70 6f 70 75 70 2e 41 77 61 28 30 2c 30 29 29 3a 74 68 69 73 2e 6f 61 26 26 28 5f 2e 64 6d 2e 73 65 74 53 74 79 6c 65 28 5f 2e 47 75 28 29 2c 22 7a Data Ascii: ak}}b.notify(_.Ybc)}})};gcc.prototype.ta=function(a){var b=_.gd("searchform"),c=this.popup.getPopup();b&&b.contains(a.targetElement.el())?(_.dm.setStyle(b,"z-index",""),_.dm.setStyle(c,"position",""),this.popup.Awa(0,0)):this.oa&&(_.dm.setStyle(_.Gu(),"z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49791	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:11 UTC	1395	OUT	POST /gen_204?atyp=i&ei=rCpeZdXlGruf5NoPj9ax6A4&dt19=2&zx=1700670130422&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16
2023-11-22 16:22:12 UTC	1227	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 6f 53 53 58 79 35 32 64 35 6f 31 35 75 72 77 71 4f 46 36 64 66 67 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 20 68 74 74 70 3a 3b 72 65 70 6f 72 74 2d 75 72 69 20 68 74 Data Ascii: HTTP/1.1 204 No ContentContent-Type: text/html; charset=UTF-8Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-oSSXy52d5o15urwqOF6dfg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49790	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:11 UTC	1412	OUT	POST /gen_204?atyp=csi&ei=rCpeZdXlGruf5NoPj9ax6A4&s=promo&rt=hpbas.6345&zx=1700670130425&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16
2023-11-22 16:22:12 UTC	1227	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 62 53 74 4f 34 78 6b 4d 46 4f 36 33 57 77 5f 71 62 43 50 51 50 51 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 20 68 74 74 70 3a 3b 72 65 70 6f 72 74 2d 75 72 69 20 68 74 Data Ascii: HTTP/1.1 204 No ContentContent-Type: text/html; charset=UTF-8Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-bStO4xkMFO63Ww_qbCPQPQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49792	142.250.31.101	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:11 UTC	1144	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 477 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ogs.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ogs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16
2023-11-22 16:22:11 UTC	477	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 6f 6e 65 67 6f 6f 67 6c 65 68 74 74 70 73 65 72 76 65 72 5f 32 30 32 33 31 31 31 39 2e 30 33 5f 70 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 37 32 39 2c 5b 5b 22 31 37 30 30 36 37 30 31 33 30 33 37 34 22 2c 6e 75 6c 6c 2c 5b 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 37 30 38 38 31 2c 6e 75 6c 6c 2c 5b 5d 5d 2c 35 33 38 2c 5b 5d 5d 5d 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 2d Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"boq_onegooglehttpserver_20231119.03_p0",null,null,[1,0,0,0,0]]],729,[["1700670130374",null,[],null,null,null,null,"[[[70881,null,[]],538,[]]]",null,null,null,null,null,null,-
2023-11-22 16:22:12 UTC	518	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 6f 67 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 48 65 61 64 65 72 73 3a 20 58 2d 50 6c 61 79 6c 6f 67 2d 57 65 62 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e Data Ascii: HTTP/1.1 200 OKAccess-Control-Allow-Origin: https://ogs.google.comCross-Origin-Resource-Policy: cross-originAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Headers: X-Playlog-WebContent-Type: text/plain; charset=UTF-8Date: Wed, 22 N
2023-11-22 16:22:12 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2023-11-22 16:22:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49793	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:12 UTC	1612	OUT	GET /xjs/_/js/k=xjs.hd.en.j7vH50XSWl8.O/ck=xjs.hd.3mhtCf28lXo.L.W.O/am=BAAAAAAAAAAAAAAAAAAAAAQAAAAAEPUTDgFsgACBABBggAAgAICAFKQQBAMAEPBQJgAAACZAYAhYCogKvOcBAJBAFQAAAAAAEAwiAAAACAAAoAMAACCgEdAAhIBKQAAAAADyACA4ABhEEAAAAAAAAAAAAAABTBAMLkgAFAQQAAAAAAAAAAAAAKSkycVAAg/d=0/dg=2/br=1/ujg=1/rs=ACT90oEQOKoPcm_mXy_VnoCFj9ts7y2bDw/m=syed,aLUfP?xjs=s3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:13 UTC	816	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 4f 72 69 67 69 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 74 72 75 73 74 65 64 2d 74 79 70 65 73 2d 66 6f 72 20 27 73 63 72 69 70 74 27 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 67 77 73 2d 74 65 61 6d 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesVary: Accept-Encoding, OriginContent-Type: text/javascript; charset=UTF-8Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-teamCross-Origin-R
2023-11-22 16:22:13 UTC	436	IN	Data Raw: 74 68 69 73 2e 5f 68 64 3d 74 68 69 73 2e 5f 68 64 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 64 6c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 42 73 3d 61 7d 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 78 28 22 61 4c 55 66 50 22 29 3b 0a 76 61 72 20 65 6c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 79 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 4f 61 29 3b 76 61 72 20 62 3d 74 68 69 73 3b 74 68 69 73 2e 77 69 6e 64 6f 77 3d 61 2e 73 65 72 76 69 63 65 2e 77 69 6e 64 6f 77 2e 67 65 74 28 29 3b 74 68 69 73 2e 74 61 3d 74 68 69 73 2e 42 73 28 29 3b 74 68 69 73 2e 6f 61 3d 77 69 6e 64 6f Data Ascii: this._hd=this._hd\|\|{};(function(_){var window=this;try{_.dlb=function(a){this.Bs=a};}catch(e){_._DumpException(e)}try{_.x("aLUfP");var elb=function(a){_.yn.call(this,a.Oa);var b=this;this.window=a.service.window.get();this.ta=this.Bs();this.oa=windo
2023-11-22 16:22:13 UTC	588	IN	Data Raw: 66 6f 72 28 76 61 72 20 65 3d 64 2e 6e 65 78 74 28 29 3b 21 65 2e 64 6f 6e 65 3b 65 3d 64 2e 6e 65 78 74 28 29 29 7b 65 3d 65 2e 76 61 6c 75 65 3b 76 61 72 20 66 3d 6e 65 77 20 5f 2e 64 6c 62 28 63 29 3b 74 72 79 7b 65 28 66 29 7d 63 61 74 63 68 28 67 29 7b 5f 2e 64 61 28 67 29 7d 7d 7d 7d 3b 74 68 69 73 2e 59 65 3d 6e 65 77 20 53 65 74 3b 74 68 69 73 2e 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 7a 65 22 2c 74 68 69 73 2e 6b 61 29 3b 74 68 69 73 2e 76 4a 61 28 29 26 26 74 68 69 73 2e 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6f 72 69 65 6e 74 61 74 69 6f 6e 63 68 61 6e 67 65 22 2c 0a 74 68 69 73 2e 6b 61 29 7d 3b 5f 2e 43 28 65 6c 62 2c 5f 2e 79 6e 29 3b 65 6c 62 2e 6b 62 3d 5f Data Ascii: for(var e=d.next();!e.done;e=d.next()){e=e.value;var f=new _.dlb(c);try{e(f)}catch(g){_.da(g)}}}};this.Ye=new Set;this.window.addEventListener("resize",this.ka);this.vJa()&&this.window.addEventListener("orientationchange",this.ka)};_.C(elb,_.yn);elb.kb=_
2023-11-22 16:22:13 UTC	549	IN	Data Raw: 73 2e 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 29 29 7d 65 6c 73 65 20 61 3d 74 68 69 73 2e 52 63 28 29 7c 7c 28 5f 2e 6d 61 28 29 3f 5f 2e 6d 61 28 29 26 26 5f 2e 6c 61 28 29 26 26 21 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 63 6c 75 64 65 73 28 22 47 53 41 22 29 3a 74 68 69 73 2e 77 69 6e 64 6f 77 2e 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 29 3f 5f 2e 65 6c 28 74 68 69 73 2e 77 69 6e 64 6f 77 29 3a 6e 65 77 20 5f 2e 53 6b 28 74 68 69 73 2e 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 2c 74 68 69 73 2e 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 29 3b 72 65 74 75 72 6e 20 61 2e 68 65 69 67 68 74 3c 61 2e 77 69 64 74 68 7d 3b 0a 5f 2e 6d 2e 64 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 Data Ascii: s.window.innerWidth))}else a=this.Rc()\|\|(_.ma()?_.ma()&&_.la()&&!navigator.userAgent.includes("GSA"):this.window.visualViewport)?_.el(this.window):new _.Sk(this.window.innerWidth,this.window.innerHeight);return a.height<a.width};_.m.destroy=function(){th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49794	142.251.16.105	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:12 UTC	1190	OUT	GET /async/hpba?vet=10ahUKEwjV65b1gdiCAxW7D1kFHQ9rDO0Qj-0KCBs..i&ei=rCpeZdXlGruf5NoPj9ax6A4&opi=89978449&yv=3&cs=0&async=_ck:xjs.hd.3mhtCf28lXo.L.W.O,_k:xjs.hd.en.j7vH50XSWl8.O,_am:BAAAAAAAAAAAAAAAAAAAAAQAAAAAEPUTDgFsgACBABBggAAgAICAFKQQBAMAEPBQJgAAACZAYAhYCogKvOcBAJBAFQAAAAAAEAwiAAAACAAAoAMAACCgEdAAhIBKQAAAAADyACA4ABhEEAAAAAAAAAAAAAABTBAMLkgAFAQQAAAAAAAAAAAAAKSkycVAAg,_csss:ACT90oHg5mCcQv8sNOOYCaMvtyVFpx_jxw,_fmt:prog,_id:a3JU5b HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:13 UTC	1637	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 56 65 72 73 69 6f 6e 3a 20 35 38 33 31 33 31 32 38 32 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 61 74 74 61 63 68 6d 65 6e 74 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 66 2e 74 78 74 22 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 2d 61 6c 6c 6f 77 2d 70 6f Data Ascii: HTTP/1.1 200 OKVersion: 583131282X-Content-Type-Options: nosniffContent-Type: text/plain; charset=UTF-8Content-Disposition: attachment; filename="f.txt"Strict-Transport-Security: max-age=31536000Cross-Origin-Opener-Policy: same-origin-allow-po
2023-11-22 16:22:13 UTC	48	IN	Data Raw: 32 61 0d 0a 29 5d 7d 27 0a 32 32 3b 5b 22 74 53 70 65 5a 64 54 6a 41 2d 71 69 35 4e 6f 50 33 4d 32 32 77 41 67 22 2c 22 31 39 30 36 22 5d 0d 0a Data Ascii: 2a)]}'22;["tSpeZdTjA-qi5NoP3M22wAg","1906"]
2023-11-22 16:22:13 UTC	41	IN	Data Raw: 32 33 0d 0a 33 3b 5b 32 5d 31 62 3b 3c 64 69 76 20 6a 73 6e 61 6d 65 3d 22 4e 6c 6c 30 6e 65 22 3e 3c 2f 64 69 76 3e 0d 0a Data Ascii: 233;[2]1b;<div jsname="Nll0ne"></div>
2023-11-22 16:22:13 UTC	12	IN	Data Raw: 37 0d 0a 33 3b 5b 39 5d 30 3b 0d 0a Data Ascii: 73;[9]0;
2023-11-22 16:22:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49795	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:13 UTC	1577	OUT	POST /gen_204?atyp=csi&ei=sypeZYSFM6ye5NoPrKyzoAs&s=async&astyp=hpba&ima=0&imn=0&mem=ujhs.8,tjhs.12,jhsl.2173,dm.8&nv=ne.1,feid.738e3fad-c883-4f4e-b7d5-6e9e194e7087&hp=&rt=ttfb.1549,st.1550,bs.27,aaft.1556,acrt.1556,art.1557&zx=1700670131986&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:13 UTC	1227	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 78 54 79 6a 64 31 69 4a 30 61 73 4b 75 68 6c 66 47 56 46 6a 72 51 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 20 68 74 74 70 3a 3b 72 65 70 6f 72 74 2d 75 72 69 20 68 74 Data Ascii: HTTP/1.1 204 No ContentContent-Type: text/html; charset=UTF-8Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-xTyjd1iJ0asKuhlfGVFjrQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri ht

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.5	49796	172.253.115.106	443

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:13 UTC	1436	OUT	POST /gen_204?atyp=csi&ei=rCpeZdXlGruf5NoPj9ax6A4&s=promo&rt=hpbas.6345,hpbarr.1561&zx=1700670131986&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:13 UTC	1227	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 43 34 4e 7a 45 7a 4f 56 62 77 43 65 36 59 57 55 61 59 64 58 6f 67 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 20 68 74 74 70 3a 3b 72 65 70 6f 72 74 2d 75 72 69 20 68 74 Data Ascii: HTTP/1.1 204 No ContentContent-Type: text/html; charset=UTF-8Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-C4NzEzOVbwCe6YWUaYdXog' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49798	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:13 UTC	1349	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:13 UTC	706	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https:/
2023-11-22 16:22:13 UTC	546	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2023-11-22 16:22:13 UTC	1252	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea Data Ascii: BBBBBuBBBBB{5k7R8F2Vb5C
2023-11-22 16:22:13 UTC	1252	IN	Data Raw: de ee d8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 fe fe fe 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 24 fd fd fd ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb f5 e7 ff 8f c6 7b ff 54 a9 36 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 Data Ascii: /${T6S4S4S4S4S4S4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4
2023-11-22 16:22:13 UTC	1252	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c8 aa ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBB}BBBBBBBBBBB}
2023-11-22 16:22:13 UTC	1128	IN	Data Raw: ff ff ff ff a0 a7 f5 ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 81 8a f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0b fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b5 ba f7 ff 3e 4b eb ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 3f 4c eb ff ba bf f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd eb ff ff ff Data Ascii: 5C5C5C5C5C5C5C5C5C5C5C5C5C5C5C>K5C5C5C5C5C5C5C5C5C5C5C5C?L&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49800	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:13 UTC	1434	OUT	GET /gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=rCpeZdXlGruf5NoPj9ax6A4&zx=1700670132568&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:14 UTC	1351	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 74 39 57 4b 6c 71 75 6e 61 30 45 64 39 54 65 70 45 35 62 6d 57 67 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 20 68 74 74 70 3a 3b 72 65 70 6f 72 74 2d 75 72 69 20 68 74 Data Ascii: HTTP/1.1 204 No ContentContent-Type: text/html; charset=UTF-8Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-t9WKlquna0Ed9TepE5bmWg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49799	142.251.167.156	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:13 UTC	1064	OUT	GET /adsid/google/ui HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:14 UTC	476	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 50 33 50 3a 20 43 50 3d 22 54 68 69 73 20 69 73 20 6e 6f 74 20 61 20 50 33 50 20 70 6f 6c 69 63 79 21 20 53 65 65 20 68 74 74 70 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 73 2f 61 6e 73 77 65 72 2f 31 35 31 36 35 37 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 2e 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 31 35 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 Data Ascii: HTTP/1.1 204 No ContentP3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originCache-Control: private, max-age=15Content-Type: text/ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49801	142.251.16.105	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:14 UTC	773	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:15 UTC	705	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https:/
2023-11-22 16:22:15 UTC	547	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2023-11-22 16:22:15 UTC	1252	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff Data Ascii: BBBBBuBBBBB{5k7R8F2Vb5C
2023-11-22 16:22:15 UTC	1252	IN	Data Raw: ee d8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 fe fe fe 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 24 fd fd fd ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb f5 e7 ff 8f c6 7b ff 54 a9 36 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff Data Ascii: /${T6S4S4S4S4S4S4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4
2023-11-22 16:22:15 UTC	1252	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c8 aa ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBB}BBBBBBBBBBB}
2023-11-22 16:22:15 UTC	1127	IN	Data Raw: ff ff ff a0 a7 f5 ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 81 8a f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0b fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b5 ba f7 ff 3e 4b eb ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 3f 4c eb ff ba bf f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd eb ff ff ff ff Data Ascii: 5C5C5C5C5C5C5C5C5C5C5C5C5C5C5C>K5C5C5C5C5C5C5C5C5C5C5C5C?L&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49802	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:28 UTC	1598	OUT	GET /url?q=https://www.google.com/search%3Fq%3Dshop%2Bdeals%26source%3Dsmp.23q4SDealsHPP.22%26stick%3DH4sIAAAAAAAA_7t17sBZTiYOBgBZcuXYCAAAAA&source=hpp&id=19039542&ct=7&usg=AOvVaw2tqojU1GkQ0_4pk5RspTmS HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:28 UTC	1199	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 65 61 72 63 68 3f 71 3d 73 68 6f 70 2b 64 65 61 6c 73 26 73 6f 75 72 63 65 3d 73 6d 70 2e 32 33 71 34 53 44 65 61 6c 73 48 50 50 2e 32 32 26 73 74 69 63 6b 3d 48 34 73 49 41 41 41 41 41 41 41 41 5f 37 74 31 37 73 42 5a 54 69 59 4f 42 67 42 5a 63 75 58 59 43 41 41 41 41 41 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d Data Ascii: HTTP/1.1 302 FoundLocation: https://www.google.com/search?q=shop+deals&source=smp.23q4SDealsHPP.22&stick=H4sIAAAAAAAA_7t17sBZTiYOBgBZcuXYCAAAAACache-Control: privateContent-Type: text/html; charset=UTF-8Strict-Transport-Security: max-age=31536000
2023-11-22 16:22:28 UTC	53	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="
2023-11-22 16:22:28 UTC	267	IN	Data Raw: 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 65 61 72 63 68 3f 71 3d 73 68 6f 70 2b 64 65 61 6c 73 26 61 6d 70 3b 73 6f 75 72 63 65 3d 73 6d 70 2e 32 33 71 34 53 44 65 61 6c 73 48 50 50 2e 32 32 26 61 6d 70 3b 73 74 69 63 6b 3d 48 34 73 49 41 41 41 41 41 41 41 41 5f 37 74 31 37 73 42 5a 54 69 59 4f 42 67 42 5a 63 75 58 59 43 41 41 41 41 41 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f Data Ascii: text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/search?q=shop+deals&source=smp.23q4SDealsHPP.22&stick=H4sIAAAAAAAA_7t17sBZTiYOBgBZcuXYCAAAAA">here</A>.</BO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49804	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:28 UTC	1554	OUT	POST /gen_204?atyp=i&ei=rCpeZdXlGruf5NoPj9ax6A4&ct=slh&v=t1&im=M&m=HV&pv=0.4371916384417085&me=1:1700670124640,V,0,0,1280,907:0,B,907:0,N,1,rCpeZdXlGruf5NoPj9ax6A4:0,R,1,1,0,0,1280,907:5794,x:16915,e,B&zx=1700670147350&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:28 UTC	1227	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 4a 4e 67 48 57 61 39 35 5a 6f 57 44 76 4d 4d 2d 76 4e 48 79 59 77 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 20 68 74 74 70 3a 3b 72 65 70 6f 72 74 2d 75 72 69 20 68 74 Data Ascii: HTTP/1.1 204 No ContentContent-Type: text/html; charset=UTF-8Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-JNgHWa95ZoWDvMM-vNHyYw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49805	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:29 UTC	1494	OUT	GET /search?q=shop+deals&source=smp.23q4SDealsHPP.22&stick=H4sIAAAAAAAA_7t17sBZTiYOBgBZcuXYCAAAAA HTTP/1.1 Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:29 UTC	1745	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 32 39 20 47 4d 54 0d 0a 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 73 63 72 69 70 74 2d 73 72 Data Ascii: HTTP/1.1 200 OKContent-Type: text/html; charset=UTF-8Date: Wed, 22 Nov 2023 16:22:29 GMTExpires: -1Cache-Control: private, max-age=0Strict-Transport-Security: max-age=31536000Content-Security-Policy: object-src 'none';base-uri 'self';script-sr
2023-11-22 16:22:29 UTC	1745	IN	Data Raw: 31 30 33 39 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 53 65 61 72 63 68 52 65 73 75 6c 74 73 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 41 6e 6d 2b 68 68 74 75 68 37 4e 4a 67 75 71 53 6e 58 48 45 41 49 71 71 4d 61 56 2b 47 58 43 6b 73 38 57 59 58 48 4a 4b 46 37 6c 36 41 65 59 4d 6a 2b 77 4f 2b 66 69 39 4f 64 44 71 46 6e 4a 54 67 39 74 30 34 39 32 44 79 6b 56 78 Data Ascii: 1039<!doctype html><html itemscope="" itemtype="http://schema.org/SearchResultsPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="Anm+hhtuh7NJguqSnXHEAIqqMaV+GXCks8WYXHJKF7l6AeYMj+wO+fi9OdDqFnJTg9t0492DykVx
2023-11-22 16:22:29 UTC	1745	IN	Data Raw: 3d 63 26 26 66 2e 70 75 73 68 28 5b 22 6f 70 69 22 2c 63 2e 74 6f 53 74 72 69 6e 67 28 29 5d 29 3b 66 6f 72 28 63 3d 30 3b 63 3c 66 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 69 66 28 30 3d 3d 3d 63 7c 7c 30 3c 63 29 64 2b 3d 22 26 22 3b 64 2b 3d 66 5b 63 5d 5b 30 5d 2b 22 3d 22 2b 66 5b 63 5d 5b 31 5d 7d 72 65 74 75 72 6e 22 2f 22 2b 28 6b 7c 7c 22 67 65 6e 5f 32 30 34 22 29 2b 22 3f 61 74 79 70 3d 69 26 63 74 3d 22 2b 53 74 72 69 6e 67 28 61 29 2b 22 26 63 61 64 3d 22 2b 28 62 2b 65 2b 64 29 7d 3b 6d 3d 67 6f 6f 67 6c 65 2e 6b 45 49 3b 67 6f 6f 67 6c 65 2e 67 65 74 45 49 3d 70 3b 67 6f 6f 67 6c 65 2e 67 65 74 4c 45 49 3d 71 3b 67 6f 6f 67 6c 65 2e 6d 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 3b 67 6f 6f 67 6c 65 2e 6c 6f 67 Data Ascii: =c&&f.push(["opi",c.toString()]);for(c=0;c<f.length;c++){if(0===c\|\|0<c)d+="&";d+=f[c][0]+"="+f[c][1]}return"/"+(k\|\|"gen_204")+"?atyp=i&ct="+String(a)+"&cad="+(b+e+d)};m=google.kEI;google.getEI=p;google.getLEI=q;google.ml=function(){return null};google.log
2023-11-22 16:22:29 UTC	671	IN	Data Raw: 6c 68 63 3a 66 61 6c 73 65 2c 6c 69 6e 70 3a 74 72 75 65 2c 6c 6c 6f 61 66 3a 66 61 6c 73 65 2c 6c 6c 74 3a 66 61 6c 73 65 2c 6c 73 62 3a 74 72 75 65 2c 6c 73 62 73 72 3a 30 2e 30 31 2c 6d 61 69 73 3a 66 61 6c 73 65 2c 6d 61 72 62 3a 66 61 6c 73 65 2c 70 62 70 68 3a 66 61 6c 73 65 2c 72 61 66 3a 66 61 6c 73 65 2c 73 69 3a 74 72 75 65 2c 73 69 64 74 3a 32 30 30 2c 73 69 73 72 3a 30 2e 30 31 2c 73 78 73 3a 66 61 6c 73 65 2c 74 61 66 3a 74 72 75 65 2c 74 69 6d 6c 3a 66 61 6c 73 65 2c 75 70 62 3a 66 61 6c 73 65 2c 76 69 73 3a 74 72 75 65 2c 77 66 6f 3a 66 61 6c 73 65 2c 77 68 30 3a 66 61 6c 73 65 2c 77 68 75 3a 66 61 6c 73 65 7d 3b 7d 29 28 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 76 61 72 20 68 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 6b 3d 77 69 Data Ascii: lhc:false,linp:true,lloaf:false,llt:false,lsb:true,lsbsr:0.01,mais:false,marb:false,pbph:false,raf:false,si:true,sidt:200,sisr:0.01,sxs:false,taf:true,timl:false,upb:false,vis:true,wfo:false,wh0:false,whu:false};})();(function(){var h=this\|\|self;var k=wi
2023-11-22 16:22:29 UTC	1252	IN	Data Raw: 38 30 30 30 0d 0a 3f 21 30 3a 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 26 26 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 3f 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 61 29 2c 21 21 61 26 26 28 22 68 69 64 64 65 6e 22 3d 3d 3d 61 2e 76 69 73 69 62 69 6c 69 74 79 7c 7c 22 30 70 78 22 3d 3d 3d 61 2e 68 65 69 67 68 74 26 26 22 30 70 78 22 3d 3d 3d 61 2e 77 69 64 74 68 29 29 3a 21 31 7d 0a 66 75 6e 63 74 69 6f 6e 20 70 28 61 2c 62 2c 64 2c 63 2c 65 29 7b 76 61 72 20 66 3d 65 28 61 29 2c 6c 3d 66 2e 6c 65 66 74 2b 28 64 3f 30 3a 77 69 6e 64 6f 77 2e 70 61 67 65 58 4f 66 66 73 65 74 29 2c 71 3d 66 Data Ascii: 8000?!0:document.defaultView&&document.defaultView.getComputedStyle?(a=document.defaultView.getComputedStyle(a),!!a&&("hidden"===a.visibility\|\|"0px"===a.height&&"0px"===a.width)):!1}function p(a,b,d,c,e){var f=e(a),l=f.left+(d?0:window.pageXOffset),q=f
2023-11-22 16:22:29 UTC	1252	IN	Data Raw: 20 30 21 3d 3d 64 3f 64 3a 44 61 74 65 2e 6e 6f 77 28 29 3b 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 7c 7c 28 62 3d 5b 62 5d 29 3b 66 6f 72 28 76 61 72 20 63 3d 30 2c 65 3b 65 3d 62 5b 63 2b 2b 5d 3b 29 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 5b 61 5d 2e 74 5b 65 5d 3d 64 7d 3b 67 6f 6f 67 6c 65 2e 63 2e 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 5b 61 5d 2e 65 5b 62 5d 3d 64 7d 3b 67 6f 6f 67 6c 65 2e 63 2e 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 5b 62 7c 7c 22 6c 6f 61 64 22 5d 2e 6d 3b 62 5b 61 5d 26 26 67 6f 6f 67 6c 65 2e 6d 6c 28 45 72 72 6f 72 28 22 61 22 29 2c 21 31 2c 7b 6d 3a 61 7d 29 3b 62 5b 61 5d 3d 21 30 7d 3b 67 6f 6f 67 6c 65 Data Ascii: 0!==d?d:Date.now();b instanceof Array\|\|(b=[b]);for(var c=0,e;e=b[c++];)google.timers[a].t[e]=d};google.c.e=function(a,b,d){google.timers[a].e[b]=d};google.c.b=function(a,b){b=google.timers[b\|\|"load"].m;b[a]&&google.ml(Error("a"),!1,{m:a});b[a]=!0};google
2023-11-22 16:22:29 UTC	1252	IN	Data Raw: 76 69 67 61 74 69 6f 6e 53 74 61 72 74 2b 61 29 29 3b 67 6f 6f 67 6c 65 2e 74 69 63 6b 28 22 6c 6f 61 64 22 2c 22 66 68 74 22 2c 62 29 3b 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 61 29 7b 49 28 61 2e 74 69 6d 65 53 74 61 6d 70 29 26 26 79 28 64 6f 63 75 6d 65 6e 74 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 4a 2c 21 30 29 7d 67 6f 6f 67 6c 65 2e 63 2e 66 68 3d 49 6e 66 69 6e 69 74 79 3b 78 28 64 6f 63 75 6d 65 6e 74 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 4a 2c 21 30 29 3b 49 28 30 29 3b 75 26 26 28 41 3d 7a 2c 78 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 22 6c 6f 61 64 22 2c 41 2c 21 30 29 2c 67 6f 6f 67 6c 65 2e 63 2e 67 6c 75 3d 42 29 Data Ascii: vigationStart+a));google.tick("load","fht",b);return!0}return!1}function J(a){I(a.timeStamp)&&y(document,"visibilitychange",J,!0)}google.c.fh=Infinity;x(document,"visibilitychange",J,!0);I(0);u&&(A=z,x(document.documentElement,"load",A,!0),google.c.glu=B)
2023-11-22 16:22:29 UTC	1252	IN	Data Raw: 3b 61 3d 77 69 6e 64 6f 77 3b 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 69 6e 20 61 3f 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 61 67 65 68 69 64 65 22 2c 42 2c 21 31 29 3a 61 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 61 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 70 61 67 65 68 69 64 65 22 2c 42 29 7d 76 61 72 20 44 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 29 7b 7a 26 26 28 44 5b 61 5d 3d 6e 65 77 20 50 65 6e 64 69 6e 67 47 65 74 42 65 61 63 6f 6e 28 41 28 61 29 2b 22 26 69 6e 63 3d 31 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 29 7b 69 66 28 7a 29 72 65 74 75 72 6e 20 44 5b 61 5d 7d 3b 76 61 72 20 64 61 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2c 65 61 3d 22 61 66 74 20 61 66 74 69 20 61 Data Ascii: ;a=window;"addEventListener"in a?a.removeEventListener("pagehide",B,!1):a.attachEvent&&a.detachEvent("onpagehide",B)}var D={};function E(a){z&&(D[a]=new PendingGetBeacon(A(a)+"&inc=1"))}function C(a){if(z)return D[a]};var da=window.location,ea="aft afti a
2023-11-22 16:22:29 UTC	1252	IN	Data Raw: 6f 67 28 22 22 2c 22 22 2c 62 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 48 28 61 29 7b 61 26 26 67 6f 6f 67 6c 65 2e 74 69 63 6b 28 22 6c 6f 61 64 22 2c 22 63 62 73 22 2c 61 29 3b 67 6f 6f 67 6c 65 2e 74 69 63 6b 28 22 6c 6f 61 64 22 2c 22 63 62 74 22 29 3b 47 28 22 63 61 70 22 29 7d 3b 76 61 72 20 49 3d 22 73 72 63 20 62 73 72 63 20 75 72 6c 20 6c 6c 20 69 6d 61 67 65 20 69 6d 67 2d 75 72 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 3b 66 75 6e 63 74 69 6f 6e 20 66 61 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 49 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 69 66 28 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 22 2b 49 5b 62 5d 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 0a 66 75 6e 63 74 69 6f 6e 20 68 61 28 61 29 7b 76 61 72 Data Ascii: og("","",b)}};function H(a){a&&google.tick("load","cbs",a);google.tick("load","cbt");G("cap")};var I="src bsrc url ll image img-url".split(" ");function fa(a){for(var b=0;b<I.length;++b)if(a.getAttribute("data-"+I[b]))return!0;return!1}function ha(a){var
2023-11-22 16:22:29 UTC	1252	IN	Data Raw: 3a 61 3b 21 53 26 26 61 26 26 67 6f 6f 67 6c 65 2e 63 2e 75 28 22 69 6c 22 2c 56 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 59 28 29 7b 69 66 28 21 52 29 7b 76 61 72 20 61 3d 51 3d 3d 3d 50 2c 62 3d 4f 3d 3d 3d 4e 2c 63 3d 78 26 26 6c 61 3d 3d 3d 69 61 3b 61 26 26 28 67 6f 6f 67 6c 65 2e 63 2e 65 28 56 2c 22 61 66 74 22 2c 22 31 22 29 2c 67 6f 6f 67 6c 65 2e 63 2e 65 28 56 2c 22 61 66 74 70 22 2c 53 74 72 69 6e 67 28 4d 61 74 68 2e 72 6f 75 6e 64 28 54 29 29 29 29 3b 69 66 28 61 26 26 62 29 7b 55 26 26 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 55 29 3b 76 61 72 20 64 3b 6e 75 6c 6c 3d 3d 28 64 3d 43 28 22 63 61 70 22 29 29 7c 7c 64 2e 64 65 61 63 74 69 76 61 74 65 28 29 3b 47 28 74 3f 22 61 66 74 32 22 3a 22 61 66 74 22 2c 56 29 3b 69 66 28 21 74 26 26 67 6f 6f 67 Data Ascii: :a;!S&&a&&google.c.u("il",V)}function Y(){if(!R){var a=Q===P,b=O===N,c=x&&la===ia;a&&(google.c.e(V,"aft","1"),google.c.e(V,"aftp",String(Math.round(T))));if(a&&b){U&&clearTimeout(U);var d;null==(d=C("cap"))\|\|d.deactivate();G(t?"aft2":"aft",V);if(!t&&goog

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49806	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:30 UTC	1396	OUT	GET /images/branding/googlelogo/2x/googlelogo_color_92x30dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:30 UTC	671	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/pngCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"en
2023-11-22 16:22:30 UTC	581	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b8 00 00 00 3c 08 06 00 00 00 d5 12 70 09 00 00 0e be 49 44 41 54 78 da ed 5d 09 90 5c 45 19 6e c8 ce 12 6e 0f 50 b9 44 c5 60 08 72 ed 9b 37 1b 63 70 e6 bd 99 4d 62 8c 58 10 97 43 94 33 22 77 04 14 8a a3 18 6b 67 66 97 70 68 45 0e 21 87 05 94 1c 15 44 10 39 c2 1e e1 50 82 10 08 58 24 24 20 16 05 45 92 9d 9d cd f5 de cc 5e 09 3b fe 9f ec 66 37 bb db fd ee 99 1d ab bf aa ae 0c ec 9b d7 35 dd df fb fb ef ef ff ff 7e cc 0f 44 93 c5 aa 58 63 a1 56 4f e7 af d3 33 f9 87 b5 b4 b1 3a 96 c9 67 63 19 a3 40 ff 5d d4 53 46 1f fd 9b d3 d3 c6 db 5a 3a ff 18 7d be 41 cf 18 27 2b f7 15 43 4c 42 62 bc 42 4f 17 22 b1 8c f9 07 3d 95 df 02 22 3b 6d 9f 7d cf bc 2f de 94 3f 89 49 48 8c 17 10 29 eb 88 a0 2f 81 a4 be b5 b4 Data Ascii: PNGIHDR<pIDATx]\EnnPD`r7cpMbXC3"wkgfphE!D9PX$$ E^;f75~DXcVO3:gc@]SFZ:}A'+CLBbBO"=";m}/?IH)/
2023-11-22 16:22:30 UTC	1252	IN	Data Raw: 03 8a 15 13 33 ce 24 24 2a 95 e0 90 05 05 9b ca 16 26 21 51 a9 04 47 b4 90 f2 b7 37 f3 08 1e 6f cc cf 62 15 8e 8e 44 ed a4 6c 5c bd 24 1b 0f 2f a6 d6 d6 ae 2b ab d0 f0 99 da 12 fc ad 23 ae 1e cd 02 42 4f 73 f5 a4 be e6 aa 4b 76 b4 4c 58 dc db 12 6a db d1 1a 5a 85 f6 bf cf cd 13 96 e0 6f 3d 2d d5 81 f5 9f b8 65 cb 81 94 de 7c 2a 05 ef 32 14 60 7b 88 56 e4 a7 90 9b 4f 72 ef ed 14 31 9e 3b 6d 41 6e ff 72 13 bc a8 28 a1 0e 4d fd 5e 56 57 af 6b d7 d5 a5 1d ba fa 24 cd cb 53 34 2f 0f 76 e8 e1 9b 69 be ea de 9f f5 cd bd 98 53 68 4d 05 85 ef 9e 18 1b 2b 35 5c 8e 01 cb c6 23 e7 80 c8 34 48 45 3b ad 3d ae be 49 03 7c 1e be eb b9 ff 37 58 68 67 4b e8 9c 01 32 17 ed 34 22 fb 9b bd ad a1 f3 f0 5d 9f 62 1a 35 b4 02 3f 4a 41 b9 5e 8b a0 5d 81 ae fd fd f4 8c 71 f0 67 df Data Ascii: 3$$&!QG7obDl\$/+#BOsKvLXjZo=-e\|2`{VOr1;mAnr(M^VWk$S4/viShM+5\#4HE;=I\|7XhgK24"]b5?JA^]qg
2023-11-22 16:22:30 UTC	1252	IN	Data Raw: 04 4f e5 57 70 1e ba cc 30 bf 6e 31 67 63 d9 6d 95 b7 60 19 88 d0 94 9d 3c 5d 7c 98 7a b2 98 43 c2 6e a8 24 ae 35 fd 17 d8 7e b4 02 ec e4 e9 e2 76 ca 0b e3 8d 5d df 71 4d f0 8c 71 9a af 04 d7 c2 f7 73 dc 93 f5 6c 18 e0 87 d3 9c 5e 0a 55 cb 01 a9 f3 a4 b0 dc db ae d7 1e cf 2d 17 43 88 96 6b c5 1b f3 b3 59 89 81 83 39 79 01 0b 2d 65 9e 35 8c e0 6d bc 1d 39 f3 08 0c b2 95 9f 87 64 29 5e 4e 09 f3 08 9e 74 48 c4 df d5 3f 1e 76 de 29 61 b3 16 f6 bb 7e c0 a2 4d dd 5f f3 91 e0 98 a7 15 a2 b1 dc a4 a9 c7 c2 70 d0 ff 33 ed 12 1b aa 16 11 fb 8a 2d 09 e5 40 66 05 1c a2 29 90 e5 56 94 21 7d 57 e3 17 3c 6f db e5 83 c2 57 e6 10 fc 59 cf 04 d7 d4 16 de 8e 7f f0 1a f8 ca 1c 0b ee b9 7f 22 72 0b c7 82 ef ea 1f 47 dd 71 dc b8 0e e6 01 90 87 fd 24 38 0c 0e 2f e7 87 88 fa a2 Data Ascii: OWp0n1gcm`<]\|zCn$5~v]qMqsl^U-CkY9y-e5m9d)^NtH?v)a~M_p3-@f)V!}W<oWY"rGq$8/
2023-11-22 16:22:30 UTC	746	IN	Data Raw: 90 35 7e c2 cf 39 c2 46 15 16 de e3 e9 48 5d 5f a5 1f f9 e7 60 09 6e 2c e7 6c 28 6d 93 3c a7 ab d7 0c 05 69 dc 37 f8 ee b9 78 f8 22 e6 00 20 39 11 f2 1a 4e 90 86 d3 44 be 7b e8 22 17 2a d8 6c 72 39 b6 79 5b 3d 8d e7 bd 13 5c bc 6f 1a ca 04 f5 d8 50 b5 a5 2b 3f f6 35 11 0a 09 58 3e 17 31 ac 83 bf ee 97 be be 29 56 53 8b 4a 1f 0f 56 fb d5 ac 16 39 81 b9 44 df 8a aa da a1 4a 1f 57 ed 55 0a e8 b8 ee 3f de d4 fd 0d 14 86 b8 a8 77 dd 46 51 cc 39 be 1f fc 23 0e a8 e5 3c b8 8e af 0d e5 7f fb 0c 44 d1 06 8a 12 72 2e 2d 45 0f de e2 86 37 b1 b9 7d cf 0f 20 54 46 12 ea e9 34 10 af 38 48 c1 7c 91 76 fa 3f 1a 52 2b dc 03 ca 08 45 24 4f df d1 1c 7a c5 01 b1 5f 24 29 d0 97 fe 61 2c a0 56 a1 24 d1 a6 d5 7e 90 88 7d d8 40 3e f8 25 63 5f 67 ae f4 fb e8 36 a4 bb e2 ec 41 52 Data Ascii: 5~9FH]_`n,l(m<i7x" 9ND{"*lr9y[=\oP+?5X>1)VSJV9DJWU?wFQ9#<Dr.-E7} TF48H\|v?R+E$Oz_$)a,V$~}@>%c_g6AR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49809	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:30 UTC	1375	OUT	GET /images/shopping/deals/electronics.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:30 UTC	670	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/pngCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"en
2023-11-22 16:22:30 UTC	582	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 04 00 00 00 d9 73 b2 7f 00 00 02 95 49 44 41 54 48 0d ed c1 69 48 d3 01 18 07 e0 d7 cc c0 14 32 2a 22 89 0a 8a b0 02 b3 b0 28 8b c4 26 5a 58 5e 33 d4 56 a6 13 13 1d 29 4a 48 a9 a5 a0 45 42 84 f3 42 25 cf 6c 9b ce 59 73 6b f3 68 4a a6 53 57 c6 bc 5a a9 4c 61 69 84 59 59 62 87 b4 5f 43 fc 20 f4 df da 97 be f9 3c b4 e2 3f 6a d8 2b 49 53 36 d6 6a cb de 16 f4 e5 29 ca b2 5b 0e 93 f5 24 5b eb 45 b2 5f 25 48 42 d8 3c 7b 3c d0 10 64 0c 01 cf 98 d3 aa 70 21 6b 48 0e c8 a7 ea c0 33 06 b7 06 07 5c 70 24 93 a8 2d 01 b7 7d e7 ce 22 71 ae 98 45 ff d2 bc af fd a3 10 91 33 41 6c 91 0d 2d 13 b9 8b d3 13 85 b6 79 a5 3b 59 f2 ca 5e 3d a0 84 78 a4 65 3b fd 45 e8 50 d9 dd 82 81 e1 4e 3b 32 af 37 5e 83 Data Ascii: PNGIHDR sIDATHiH2*"(&ZX^3V)JHEBB%lYskhJSWZLaiYYb_C <?j+IS6j)[$[E_%HB<{<dp!kH3\p$-}"qE3Al-y;Y^=xe;EPN;27^
2023-11-22 16:22:30 UTC	136	IN	Data Raw: e1 0f d7 cd 44 81 ab 78 86 f3 f0 c2 19 a4 a2 03 59 bd 65 f7 75 36 c4 ac cf 59 fa a9 5e f7 04 37 50 8a 67 68 c2 29 e3 c9 f5 64 12 54 ce 85 1f 7c d1 80 e2 c9 74 67 b2 44 e0 a8 5a 53 c5 af 41 2e 04 78 0c d6 70 a6 0d 99 04 6e 63 bd 39 81 48 63 7e 77 f2 1e b2 46 52 38 e7 7d f4 02 47 ea 77 84 96 5c 59 e3 1d e3 19 94 6e 4b d6 62 af f5 d8 48 2b ac f4 07 89 65 74 73 9a d6 b1 5f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: DxYeu6Y^7Pgh)dT\|tgDZSA.xpnc9Hc~wFR8}Gw\YnKbH+ets_IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49812	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:31 UTC	1378	OUT	GET /images/shopping/deals/womens_apparel.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:31 UTC	670	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/pngCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"en
2023-11-22 16:22:31 UTC	582	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 a6 49 44 41 54 58 c3 ed d7 cb 6b 5f 45 14 07 f0 ef 99 b9 8f df cd 2f 8f 26 51 48 13 41 29 58 eb 42 c1 07 45 8a 1b 85 a4 41 41 a1 8b 68 ed 56 52 ea 46 28 e8 a2 0b 17 d2 9d 8f 8d a4 3b ed 46 14 54 90 16 4b 10 91 6e b4 8a ab 16 6c 6b ab 6d 90 36 b5 6d da 24 bf e7 bd f3 38 e7 b8 48 fe 00 63 f2 5b 88 3d eb 99 e1 73 cf 9c 33 73 07 b8 17 ff f7 a0 7f 33 a9 3b ff 33 f1 67 a7 de 09 8b b7 f6 fb aa c9 fc c8 f8 6b 13 c7 3f 3c d7 73 40 fb 83 4f 32 73 ed e6 b4 34 da 87 8c da bd b1 d5 20 61 41 3e 32 da 32 a3 c3 df 34 ab e5 39 fb d2 f4 99 91 c9 3d fa 4f d7 34 1b 01 98 85 bf 3e b2 ad f2 84 f1 61 ba 5c 59 22 f1 1e e4 23 b4 74 03 61 e9 ce fe 74 b9 f3 03 7f 3d ff c2 86 Data Ascii: PNGIHDR szzIDATXk_E/&QHA)XBEAAhVRF(;FTKnlkm6m$8Hc[=s3s3;3gk?<s@O2s4 aA>2249=O4>a\Y"#tat=
2023-11-22 16:22:31 UTC	409	IN	Data Raw: 6c 7d 06 5a 9d a7 5c b7 93 9a c4 00 49 0a ef 4b 14 49 06 0d 01 22 02 76 0e 44 04 94 6e 90 7f bd 34 b5 e5 00 32 66 af 8b 15 34 78 e4 49 06 cf 11 a4 58 db 02 ef 10 d7 8b 91 4a 07 c3 78 79 4b 01 d5 57 a7 13 02 f6 89 b5 50 b7 de ea 89 5d 07 78 44 ef 11 63 80 4d 33 48 55 02 3e ee bb f1 f6 d1 c1 2d 03 f0 f2 f2 d3 68 97 0f 15 83 c3 90 10 a0 1c 60 b2 0c aa 0a 0e 01 31 04 30 80 24 af 83 ab 12 c4 34 14 7e bf 7a 60 cb 00 d2 e8 bc 1a db 1d ea 1f 1a 01 c7 88 e8 2a 58 93 00 44 88 de 21 f8 0a 02 83 c4 26 6b 77 44 0c 20 a1 43 ab 27 be a5 4d 03 5a c7 be cc e5 6e 63 86 8c 45 62 2c a0 8a 50 75 51 cb 0a a8 30 62 f4 88 21 40 00 90 00 b6 56 40 5c 09 8d fc 58 38 79 fa f9 4d 03 78 e1 fa 94 36 da db 6d 91 03 21 80 c8 c0 ac 7f 6d f4 0e 1c 23 54 02 48 01 62 41 52 ab 43 5d 05 18 0b Data Ascii: l}Z\IKI"vDn42f4xIXJxyKWP]xDcM3HU>-h`10$4~z`*XD!&kwD C'MZncEb,PuQ0b!@V@\X8yMx6m!m#THbARC]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49810	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:31 UTC	1376	OUT	GET /images/shopping/deals/mens_apparel.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:31 UTC	671	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/pngCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"en
2023-11-22 16:22:31 UTC	581	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 04 70 49 44 41 54 58 c3 ed d6 db 8b 57 55 14 c0 f1 ef be 9c df cc fc e6 66 33 3a d2 43 11 42 3e 94 f4 62 91 74 79 29 88 e8 29 8a a8 26 b3 ec 1e 41 18 bd 54 12 41 44 14 96 08 61 54 74 2f cd b2 30 41 ff 04 89 c0 e8 42 59 61 11 36 93 3a 56 bf df 5c ce ef 77 6e 7b af d5 c3 99 a4 97 6a ac b1 97 5c 8f 9b 73 d6 fa 9c bd f6 59 6c 38 15 ff f7 30 ff f4 c5 4d 5b 9e ba 74 70 78 f0 9c be 9e fe 90 17 79 f6 ed 81 6f f6 6d de b4 e5 d0 7f 02 78 66 f3 13 97 54 41 3f b0 0d 37 36 3c 74 1a 93 93 93 58 f8 7e 64 49 ff b5 1b ee 7f e4 f3 93 06 78 6e eb d3 e7 56 55 78 12 ec 55 49 d2 f0 5f 1e 38 c0 d8 f2 d3 e9 a4 29 2b cf 5e 41 91 77 b4 d1 d3 b3 d7 60 37 de 73 d7 86 2f 16 0d f0 Data Ascii: PNGIHDR szzpIDATXWUf3:CB>bty))&ATADaTt/0ABYa6:V\wn{j\sYl80M[tpxyomxfTA?76<tX~dIxnVUxUI_8)+^Aw`7s/
2023-11-22 16:22:31 UTC	612	IN	Data Raw: 51 25 c4 08 6a b0 c6 91 24 09 79 96 a3 0a 89 4f 68 24 3d 18 63 70 ce 73 f0 e0 77 f4 36 9b a8 2a ce ba 15 dd 3c db b0 60 40 27 9d bd 0f 38 4b 55 01 e6 01 13 a0 8a a2 a8 2a 21 04 aa 32 90 f8 04 51 41 44 10 15 40 29 f2 ac 9a 9c 98 28 54 84 18 03 d6 18 9c b3 0f bd f3 de b6 d1 05 01 7c 92 ec b1 ce 7f fc 7b e2 76 bb 4d 27 4d f7 87 18 90 58 af 85 10 31 c6 a0 80 8a d6 eb 2a 88 2a 60 5a d6 da 4f b3 6e 97 ac 28 50 cc e1 24 69 6c f4 de cf 2e 08 b0 ee a6 f5 5f af 5f 7b db 1a 6b dd 65 ed 76 fb dd 63 53 53 e9 c8 c8 c8 57 2a 82 48 3c fe 5c 8c 91 4e b7 3e 1f 98 3f b4 a5 c8 fa aa 50 7d 32 3d 3d 3d 59 e6 f9 03 3e 49 56 ae 1b bf 75 eb 75 d7 5c 5f fd a3 49 b8 7d c7 76 f3 e3 c4 0f e7 f5 f6 34 3e eb ed eb a3 d9 d7 24 8a a0 2a 38 e7 41 eb 4c 2a 4a 88 81 5f 7f fd a5 3a 7a 64 ea Data Ascii: Q%j$yOh$=cpsw6<`@'8KU!2QAD@)(T\|{vM'MX1*`ZOn(P$il.__{kevcSSWH<\N>?P}2===Y>IVuu\_I}v4>$8ALJ_:zd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49811	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:31 UTC	1379	OUT	GET /images/shopping/deals/home_and_garden.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:31 UTC	670	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/pngCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"en
2023-11-22 16:22:31 UTC	582	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 a7 49 44 41 54 78 01 ed d3 03 70 2c 4b 14 06 e0 bf 67 16 71 72 6d db b6 6d db b6 6d db b6 6d db b6 6d db 9b ac 67 a6 fb bc 58 cf d6 7e 55 07 a5 76 e3 1f c9 c5 c5 c5 65 c1 81 36 25 0e de 5c d4 08 7f 87 f5 17 ab 7b 75 5b 14 ef de b2 a3 dd b7 e1 0f f2 e8 c3 4d 76 fa c1 2e 37 fc 00 1d a2 79 f7 f5 c9 74 66 70 a4 57 b9 f3 32 7e c0 ed 8f bb 5a 3d fa b0 77 b2 a2 5a 64 4d 23 66 b3 5b c4 37 f3 73 32 db bf 32 bb 4d 48 4e 07 98 aa 12 88 cb 1c dc c8 f5 52 dc bb 9b 8e 0c 9d ed e3 e3 2d cd d8 d1 50 f7 cd f4 f9 dd f0 66 07 0f fd f0 ee af 55 a8 3a 7e 6f 3a d1 7b 93 81 06 6f c8 79 e5 d2 eb dd 12 a2 79 16 70 a6 d0 ee 87 ad 69 db dd 9a b4 f9 46 5d 5a 7e a1 02 4d 3a 10 Data Ascii: PNGIHDR szzIDATxp,KgqrmmmmmgX~Uve6%\{u[Mv.7ytfpW2~Z=wZdM#f[7s22MHNR-PfU:~o:{oyypiF]Z~M:
2023-11-22 16:22:31 UTC	410	IN	Data Raw: 4a 22 be 4f 8e 9a c9 12 e4 bc e7 e6 f1 2d f3 eb 80 33 c7 9f be bb d8 8c 0b ab 4c a0 90 89 49 80 10 18 04 88 a0 00 40 08 45 c1 3b 25 44 63 77 50 39 45 88 8b 3f 7d 02 a1 8a a7 1c 62 de f7 a8 4b 2d 2d 9e fd d4 a3 f7 17 33 7f 72 5c 9e 1f cb af 04 08 36 08 e2 10 82 83 48 02 a3 88 49 43 17 13 8c 88 18 42 f5 5c 9c 39 b6 9f 97 4f 19 10 3f 33 b4 c1 51 ff 9f 3a 81 28 2a a4 99 75 2f 96 77 86 7a 49 e3 a4 23 4f a3 2f 74 92 6f f0 0c 8c 42 77 4b 6e 00 0c 00 e9 02 43 82 c4 18 98 90 21 04 83 cc 0c 5a bb 59 a9 f2 f7 5b 9e 77 a0 bb bb 47 81 b4 89 8a 6d 18 da e0 c2 4b 84 62 f8 15 b6 dd 6b d2 d9 e6 34 cd 8a e9 91 11 26 fb 0d d8 1d 56 d8 ed 56 98 ad 9f 61 b1 59 60 b1 68 b0 d9 38 9c 8a 13 aa 42 e0 4e 03 e2 c7 4d fd 20 20 40 1a 63 90 bd d6 2f e8 75 46 45 34 3a fc 0a 35 32 ac 9a Data Ascii: J"O-3LI@E;%DcwP9E?}bK--3r\6HICB\9O?3Q:(*u/wzI#O/toBwKnC!ZY[wGmKbk4&VVaY`h8BNM @c/uFE4:52

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49813	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:31 UTC	1378	OUT	GET /images/shopping/deals/toys_and_games.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:31 UTC	671	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/pngCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"en
2023-11-22 16:22:31 UTC	581	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 04 31 49 44 41 54 58 09 ed c1 c9 6f 54 75 00 07 f0 1f 4b 0c 67 4f 04 c3 41 49 8c 89 77 e3 85 70 c2 60 8c 1e b8 60 34 9a 28 e2 c2 85 93 71 49 3c a0 c6 35 11 05 22 a9 28 42 ad 14 da 52 5a 5a 0a 58 84 16 5a 3a 9d a5 7d b3 bc fd fd de ef f7 f6 6d 66 ca 74 a6 d3 0e 0d fd 7a f1 2f 80 19 88 86 cf 87 3c f2 bf 10 8d 8d 6f 25 0f 93 d6 7d 76 8c 5d bc bc 95 3c 0c a3 16 d6 15 4f f4 50 b1 fb f4 3b e4 41 ca cf 2c be fc d2 e5 fa c4 7b 83 d5 93 f3 a7 fa 16 8b 27 ff e8 22 0f ca 1a d3 36 2f 0c 5a 76 d7 e7 05 64 86 3c 28 83 63 28 0c 9c 97 6b b5 da 26 d2 29 77 05 79 d3 ca f5 99 9d cd 99 ec eb cb 92 ba af 95 0a 50 4f ea 68 ad dc 41 a3 de 40 12 97 51 29 57 7f 21 9d d2 9a 4e Data Ascii: PNGIHDR szz1IDATXoTuKgOAIwp``4(qI<5"(BRZZXZ:}mftz/<o%}v]<OP;A,{'"6/Zvd<(c(k&)wyPOhA@Q)W!N
2023-11-22 16:22:31 UTC	549	IN	Data Raw: 03 a4 dd 3e 1d 8b f7 f4 7f 32 db ca 9d 1c 86 79 65 02 c1 54 06 91 ce 11 fa 21 6c ce c1 a8 09 25 9d 87 f0 ed 39 70 5d fd 8b b4 d3 4c 55 7a ee ed 9b c3 cb af fe 36 04 a6 1a 28 a4 33 c8 4d 4c 20 09 63 44 61 02 c7 b2 c1 4d 13 54 d7 60 c8 32 5c 4e 63 d2 4e 95 70 e8 fb d1 d4 7e 4c 89 7f c3 73 7c 30 83 82 6a 1a a2 20 42 1c 26 f0 1c 0f cc a4 30 0d 0d 16 d5 c1 0d 0d 81 ef 3d 4f da 61 35 a5 ef 5c 3e d5 b3 6a 9e 38 80 80 e9 60 86 89 92 20 a0 90 4b c3 b5 2c 78 8e 0f 46 19 4c 43 87 a1 88 28 09 39 c8 a5 22 3c c7 19 26 ed 20 4f 3b ef 5f df 7f 09 bd bb 7e 82 6b 5a f0 9d 00 aa 28 61 e2 f2 08 77 b8 f5 5d e0 85 70 6d 0f 8c 52 e4 d3 33 48 4f 4d 42 2e 15 60 73 7e 37 f4 83 5d e4 7e f5 ca ca 9b db 8f 8e 62 f3 c7 47 90 96 0d 94 e3 2a 42 2f 82 94 17 d6 c4 f9 b9 37 6c 6e 23 f0 42 Data Ascii: >2yeT!l%9p]LUz6(3ML cDaMT`2\NcNp~Ls\|0j B&0=Oa5\>j8` K,xFLC(9"<& O;_~kZ(aw]pmR3HOMB.`s~7]~bG*B/7ln#B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49814	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:31 UTC	1383	OUT	GET /images/shopping/deals/sports_and_outdoors.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:31 UTC	670	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/pngCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"en
2023-11-22 16:22:31 UTC	582	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 04 00 00 00 d9 73 b2 7f 00 00 03 14 49 44 41 54 48 c7 ed d3 6b 68 d5 75 1c c7 f1 e1 52 07 66 9a 44 78 db 5c 3a 51 b7 2e 8a b5 40 11 21 83 90 2e 0a 31 72 a8 0f 7a d0 ca 8a 2c b5 54 1c 78 49 88 10 67 d8 26 c3 88 6c 95 3d 08 23 93 85 b7 ca 82 a2 86 e8 ba a8 99 0e e7 36 cf 76 76 6e ff ff 39 db 09 34 79 f5 60 23 84 b3 e9 9e d7 e7 fb f8 fd e6 f7 fd fe be df bc bc ff 33 48 92 c3 2f 3d f6 e1 ce 1d 07 ab 7f da d8 b4 fe f0 d6 1d fb 16 25 87 0d 19 4e 15 a4 d6 c7 3b a3 4e 7b db 3c 65 66 29 33 df ca cb bb 5e 3a 57 30 04 fc b3 85 89 5f 52 92 e2 ba 75 39 6a b7 8f bc af c6 eb 6a 5d 38 df fa d0 2d f0 7d cf fd 70 35 10 48 4a 48 88 89 88 8a ea 74 45 87 76 1d da af 75 54 de 04 3f b0 ec 9d eb 81 40 20 Data Ascii: PNGIHDR sIDATHkhuRfDx\:Q.@!.1rz,TxIg&l=#6vvn94y`#3H/=%N;N{<ef)3^:W0_Ru9jj]8-}p5HJHtEvuT?@
2023-11-22 16:22:31 UTC	263	IN	Data Raw: 56 31 71 29 a1 8c 5e 59 59 bd b2 7a 84 e5 39 82 fa db ca e3 77 a9 14 f9 b7 3a 75 e9 d4 25 26 d1 af e8 d1 ab 57 8f 74 4b 90 3f c0 2e 2e 79 6b bc f1 4e bb ac 4d 9b 76 ed ae 88 68 bf 41 11 ca c8 48 0b 5e 18 f0 16 de 1d 3b 37 32 d6 ab 2e b8 a8 45 8b 4b 5a b5 69 b0 c9 2e 75 6a 6d 77 50 28 90 6c 0a 46 0c 72 8f cb 16 15 ff 3d 4e a3 5f 9d 71 c6 39 7f 68 34 de ed ee 70 a7 bb 15 db 28 29 9e 8d 95 e5 0d 9e 8a e5 93 af cf 71 c4 f7 7e d4 e4 a0 22 23 8d 54 60 94 31 26 58 25 92 ed 5c 9c 77 f3 54 3e b8 a1 ed 13 07 1c 52 6f 82 7c c3 e4 1b ae c0 28 13 d5 47 5b 9f ca bb 75 f6 8d db b4 73 43 66 ab dd 9e 30 c2 30 f9 46 1a e7 c9 ec 7b 7b 9a 27 0d 01 ef 4b ed 98 35 cf be f2 c1 1b 5f 6f 39 f9 f4 cf e5 87 2b 6a f7 2e 6f 1c 3d 64 f8 3f 97 7f 00 4a 33 ed a2 7b 67 03 1e 00 00 00 00 Data Ascii: V1q)^YYz9w:u%&WtK?..ykNMvhAH^;72.EKZi.ujmwP(lFr=N_q9h4p()q~"#T`1&X%\wT>Ro\|(G[usCf00F{{'K5_o9+j.o=d?J3{g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49815	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:31 UTC	1381	OUT	GET /images/shopping/deals/health_and_beauty.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:31 UTC	670	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/pngCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"en
2023-11-22 16:22:31 UTC	582	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 02 3c 49 44 41 54 78 01 62 18 52 60 14 8c 82 27 4f 9f f2 5e b9 78 76 fa d9 23 bb 67 3e be 7d 71 e3 ad 8b 27 6e 5c 38 b2 fd c6 eb 87 57 53 e8 e6 88 cf 9f df 31 82 e8 03 bb 76 6a 6f 5f 39 f7 df ba d9 5d ff d6 2c 59 a8 43 f7 d0 b8 7e e1 cc fa 39 7d 6d ff 7b eb 8b ff 9f d8 b7 75 09 b9 e6 30 91 ab 51 56 4a c4 c8 ce ca 80 c1 c6 44 93 41 4a 84 4b 1f c0 2b 59 23 58 11 45 41 f4 d4 57 dc 5d 57 c1 6e 70 5f 02 b2 01 dc 23 64 05 44 e4 c4 84 38 d1 b8 bb 6b db 2b 6c a4 33 f4 4d 25 f7 86 a7 64 4d 01 16 67 47 9b 95 2a 0d 42 82 42 4a ad 5a dd b2 66 00 73 e3 7d 55 ec 67 a8 ba 6f fd 96 1d 6c dd bd 1f 57 6a 47 86 da df 3d 8b 0e 30 3f 3d 54 ad 35 9a 4f 04 27 b2 64 91 3c 4f Data Ascii: PNGIHDR szz<IDATxbR`'O^xv#g>}q'n\8WS1vjo_9],YC~9}m{u0QVJDAJK+Y#XEAW]Wnp_#dD8k+l3M%dMgG*BBJZfs}UgolWjG=0?=T5O'd<O
2023-11-22 16:22:31 UTC	47	IN	Data Raw: 4b db 02 f6 2c 6c 0a d9 35 bf c9 67 fb bc 26 f5 63 5b e6 93 dc c0 19 05 a3 00 00 db 93 3b e2 fe 98 15 c7 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: K,l5g&c[;IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49816	142.251.16.105	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:31 UTC	820	OUT	GET /images/branding/googlelogo/2x/googlelogo_color_92x30dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:31 UTC	671	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/pngCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"en
2023-11-22 16:22:31 UTC	581	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b8 00 00 00 3c 08 06 00 00 00 d5 12 70 09 00 00 0e be 49 44 41 54 78 da ed 5d 09 90 5c 45 19 6e c8 ce 12 6e 0f 50 b9 44 c5 60 08 72 ed 9b 37 1b 63 70 e6 bd 99 4d 62 8c 58 10 97 43 94 33 22 77 04 14 8a a3 18 6b 67 66 97 70 68 45 0e 21 87 05 94 1c 15 44 10 39 c2 1e e1 50 82 10 08 58 24 24 20 16 05 45 92 9d 9d cd f5 de cc 5e 09 3b fe 9f ec 66 37 bb db fd ee 99 1d ab bf aa ae 0c ec 9b d7 35 dd df fb fb ef ef ff ff 7e cc 0f 44 93 c5 aa 58 63 a1 56 4f e7 af d3 33 f9 87 b5 b4 b1 3a 96 c9 67 63 19 a3 40 ff 5d d4 53 46 1f fd 9b d3 d3 c6 db 5a 3a ff 18 7d be 41 cf 18 27 2b f7 15 43 4c 42 62 bc 42 4f 17 22 b1 8c f9 07 3d 95 df 02 22 3b 6d 9f 7d cf bc 2f de 94 3f 89 49 48 8c 17 10 29 eb 88 a0 2f 81 a4 be b5 b4 Data Ascii: PNGIHDR<pIDATx]\EnnPD`r7cpMbXC3"wkgfphE!D9PX$$ E^;f75~DXcVO3:gc@]SFZ:}A'+CLBbBO"=";m}/?IH)/
2023-11-22 16:22:31 UTC	1252	IN	Data Raw: 03 8a 15 13 33 ce 24 24 2a 95 e0 90 05 05 9b ca 16 26 21 51 a9 04 47 b4 90 f2 b7 37 f3 08 1e 6f cc cf 62 15 8e 8e 44 ed a4 6c 5c bd 24 1b 0f 2f a6 d6 d6 ae 2b ab d0 f0 99 da 12 fc ad 23 ae 1e cd 02 42 4f 73 f5 a4 be e6 aa 4b 76 b4 4c 58 dc db 12 6a db d1 1a 5a 85 f6 bf cf cd 13 96 e0 6f 3d 2d d5 81 f5 9f b8 65 cb 81 94 de 7c 2a 05 ef 32 14 60 7b 88 56 e4 a7 90 9b 4f 72 ef ed 14 31 9e 3b 6d 41 6e ff 72 13 bc a8 28 a1 0e 4d fd 5e 56 57 af 6b d7 d5 a5 1d ba fa 24 cd cb 53 34 2f 0f 76 e8 e1 9b 69 be ea de 9f f5 cd bd 98 53 68 4d 05 85 ef 9e 18 1b 2b 35 5c 8e 01 cb c6 23 e7 80 c8 34 48 45 3b ad 3d ae be 49 03 7c 1e be eb b9 ff 37 58 68 67 4b e8 9c 01 32 17 ed 34 22 fb 9b bd ad a1 f3 f0 5d 9f 62 1a 35 b4 02 3f 4a 41 b9 5e 8b a0 5d 81 ae fd fd f4 8c 71 f0 67 df Data Ascii: 3$$&!QG7obDl\$/+#BOsKvLXjZo=-e\|2`{VOr1;mAnr(M^VWk$S4/viShM+5\#4HE;=I\|7XhgK24"]b5?JA^]qg
2023-11-22 16:22:31 UTC	1252	IN	Data Raw: 04 4f e5 57 70 1e ba cc 30 bf 6e 31 67 63 d9 6d 95 b7 60 19 88 d0 94 9d 3c 5d 7c 98 7a b2 98 43 c2 6e a8 24 ae 35 fd 17 d8 7e b4 02 ec e4 e9 e2 76 ca 0b e3 8d 5d df 71 4d f0 8c 71 9a af 04 d7 c2 f7 73 dc 93 f5 6c 18 e0 87 d3 9c 5e 0a 55 cb 01 a9 f3 a4 b0 dc db ae d7 1e cf 2d 17 43 88 96 6b c5 1b f3 b3 59 89 81 83 39 79 01 0b 2d 65 9e 35 8c e0 6d bc 1d 39 f3 08 0c b2 95 9f 87 64 29 5e 4e 09 f3 08 9e 74 48 c4 df d5 3f 1e 76 de 29 61 b3 16 f6 bb 7e c0 a2 4d dd 5f f3 91 e0 98 a7 15 a2 b1 dc a4 a9 c7 c2 70 d0 ff 33 ed 12 1b aa 16 11 fb 8a 2d 09 e5 40 66 05 1c a2 29 90 e5 56 94 21 7d 57 e3 17 3c 6f db e5 83 c2 57 e6 10 fc 59 cf 04 d7 d4 16 de 8e 7f f0 1a f8 ca 1c 0b ee b9 7f 22 72 0b c7 82 ef ea 1f 47 dd 71 dc b8 0e e6 01 90 87 fd 24 38 0c 0e 2f e7 87 88 fa a2 Data Ascii: OWp0n1gcm`<]\|zCn$5~v]qMqsl^U-CkY9y-e5m9d)^NtH?v)a~M_p3-@f)V!}W<oWY"rGq$8/
2023-11-22 16:22:31 UTC	746	IN	Data Raw: 90 35 7e c2 cf 39 c2 46 15 16 de e3 e9 48 5d 5f a5 1f f9 e7 60 09 6e 2c e7 6c 28 6d 93 3c a7 ab d7 0c 05 69 dc 37 f8 ee b9 78 f8 22 e6 00 20 39 11 f2 1a 4e 90 86 d3 44 be 7b e8 22 17 2a d8 6c 72 39 b6 79 5b 3d 8d e7 bd 13 5c bc 6f 1a ca 04 f5 d8 50 b5 a5 2b 3f f6 35 11 0a 09 58 3e 17 31 ac 83 bf ee 97 be be 29 56 53 8b 4a 1f 0f 56 fb d5 ac 16 39 81 b9 44 df 8a aa da a1 4a 1f 57 ed 55 0a e8 b8 ee 3f de d4 fd 0d 14 86 b8 a8 77 dd 46 51 cc 39 be 1f fc 23 0e a8 e5 3c b8 8e af 0d e5 7f fb 0c 44 d1 06 8a 12 72 2e 2d 45 0f de e2 86 37 b1 b9 7d cf 0f 20 54 46 12 ea e9 34 10 af 38 48 c1 7c 91 76 fa 3f 1a 52 2b dc 03 ca 08 45 24 4f df d1 1c 7a c5 01 b1 5f 24 29 d0 97 fe 61 2c a0 56 a1 24 d1 a6 d5 7e 90 88 7d d8 40 3e f8 25 63 5f 67 ae f4 fb e8 36 a4 bb e2 ec 41 52 Data Ascii: 5~9FH]_`n,l(m<i7x" 9ND{"*lr9y[=\oP+?5X>1)VSJV9DJWU?wFQ9#<Dr.-E7} TF48H\|v?R+E$Oz_$)a,V$~}@>%c_g6AR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49817	142.251.16.105	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:31 UTC	799	OUT	GET /images/shopping/deals/electronics.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:31 UTC	670	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/pngCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"en
2023-11-22 16:22:31 UTC	582	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 04 00 00 00 d9 73 b2 7f 00 00 02 95 49 44 41 54 48 0d ed c1 69 48 d3 01 18 07 e0 d7 cc c0 14 32 2a 22 89 0a 8a b0 02 b3 b0 28 8b c4 26 5a 58 5e 33 d4 56 a6 13 13 1d 29 4a 48 a9 a5 a0 45 42 84 f3 42 25 cf 6c 9b ce 59 73 6b f3 68 4a a6 53 57 c6 bc 5a a9 4c 61 69 84 59 59 62 87 b4 5f 43 fc 20 f4 df da 97 be f9 3c b4 e2 3f 6a d8 2b 49 53 36 d6 6a cb de 16 f4 e5 29 ca b2 5b 0e 93 f5 24 5b eb 45 b2 5f 25 48 42 d8 3c 7b 3c d0 10 64 0c 01 cf 98 d3 aa 70 21 6b 48 0e c8 a7 ea c0 33 06 b7 06 07 5c 70 24 93 a8 2d 01 b7 7d e7 ce 22 71 ae 98 45 ff d2 bc af fd a3 10 91 33 41 6c 91 0d 2d 13 b9 8b d3 13 85 b6 79 a5 3b 59 f2 ca 5e 3d a0 84 78 a4 65 3b fd 45 e8 50 d9 dd 82 81 e1 4e 3b 32 af 37 5e 83 Data Ascii: PNGIHDR sIDATHiH2*"(&ZX^3V)JHEBB%lYskhJSWZLaiYYb_C <?j+IS6j)[$[E_%HB<{<dp!kH3\p$-}"qE3Al-y;Y^=xe;EPN;27^
2023-11-22 16:22:31 UTC	136	IN	Data Raw: e1 0f d7 cd 44 81 ab 78 86 f3 f0 c2 19 a4 a2 03 59 bd 65 f7 75 36 c4 ac cf 59 fa a9 5e f7 04 37 50 8a 67 68 c2 29 e3 c9 f5 64 12 54 ce 85 1f 7c d1 80 e2 c9 74 67 b2 44 e0 a8 5a 53 c5 af 41 2e 04 78 0c d6 70 a6 0d 99 04 6e 63 bd 39 81 48 63 7e 77 f2 1e b2 46 52 38 e7 7d f4 02 47 ea 77 84 96 5c 59 e3 1d e3 19 94 6e 4b d6 62 af f5 d8 48 2b ac f4 07 89 65 74 73 9a d6 b1 5f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: DxYeu6Y^7Pgh)dT\|tgDZSA.xpnc9Hc~wFR8}Gw\YnKbH+ets_IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49818	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:31 UTC	1382	OUT	GET /images/shopping/deals/travel_and_luggage.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:31 UTC	671	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/pngCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"en
2023-11-22 16:22:31 UTC	581	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 d2 49 44 41 54 58 c3 ed 97 3d 8c 54 55 14 c7 7f f7 bd f9 7a ce f0 31 0b e2 e0 52 6c 96 98 98 e0 07 44 4d 94 c2 9a 04 13 12 2a 83 85 09 56 5b d8 10 3b 3a 13 13 2d 8c 95 8d b1 b5 40 13 51 41 1b 13 8b 0d 01 41 44 56 8d 11 66 09 41 32 10 76 d8 65 77 76 76 e6 7d dc 73 8e c5 9b 21 5a 3a 3c 69 f4 24 37 f7 dc bc 77 ef fd 9f ff fd 9f 93 7b e1 bf 6e 6e 92 49 73 73 73 af 8b c8 33 b5 5a ad 57 ab d5 16 5a ad d6 e9 63 c7 8e f9 49 d6 0a 26 99 74 f8 f0 e1 7a 14 45 ef 2d 2c 2c 7c 59 2e 97 9f 6d b7 db 8f 3d 54 da ba dd ee 91 b1 df e9 74 5e 5b 5c 5c dc 3a e9 5a 13 31 90 a6 69 3c f6 cd ac ea 9c e3 61 03 88 c6 be f7 be ee 9c b3 49 01 94 26 99 14 c7 f1 7d e0 83 c1 a0 e7 Data Ascii: PNGIHDR szzIDATX=TUz1RlDM*V[;:-@QAADVfA2vewvv}s!Z:<i$7w{nnIsss3ZWZcI&tzE-,,\|Y.m=Tt^[\\:Z1i<aI&}
2023-11-22 16:22:31 UTC	454	IN	Data Raw: 30 f0 96 79 74 38 b8 bf 99 20 08 e0 31 c4 0c 31 25 30 43 4d f1 38 54 15 51 d5 62 18 58 59 75 96 08 ba be 9e 33 80 c3 93 47 e9 dd a8 37 70 96 83 f1 66 b9 30 55 ac 18 06 ba ab 2e 4d 52 b4 5c 41 47 00 74 44 b3 57 c5 30 94 51 f4 a6 64 6a 48 e0 c8 4c 8b 01 40 2f 96 6c 63 1d 2b 55 51 33 64 4c 3b 8a 18 08 e4 59 61 0e 31 25 c5 10 02 34 70 71 31 0c f4 e2 41 9a c4 d8 ea c6 28 52 10 46 62 73 b9 af ce e5 d4 43 ae 81 5c a8 49 21 00 34 4b 7d 9c 66 58 6f 30 a2 3b 4f 77 25 df 3c 6f 2e ff 66 90 61 28 0e 09 c3 b8 90 3a f0 ee ca ed 6a 66 86 4b 93 91 e2 c7 c7 a0 f7 c7 99 29 de 72 2d a4 a6 64 66 7f bb b8 3c 10 03 ed 24 a9 d5 82 90 9f 4a 4a 38 56 3f 90 99 51 1e a5 a2 c7 21 18 1e 25 35 25 20 60 c9 c7 dd 42 18 f8 78 ea f1 4e 50 ae 70 a3 bf 96 8b cc 04 c1 48 31 0c f0 06 9e 51 33 Data Ascii: 0yt8 11%0CM8TQbXYu3G7pf0U.MR\AGtDW0QdjHL@/lc+UQ3dL;Ya1%4pq1A(RFbsC\I!4K}fXo0;Ow%<o.fa(:jfK)r-df<$JJ8V?Q!%5% `BxNPpH1Q3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49820	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:31 UTC	1377	OUT	GET /images/shopping/deals/baby_and_kids.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:31 UTC	670	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/pngCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"en
2023-11-22 16:22:31 UTC	582	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 36 49 44 41 54 78 01 ed d6 03 ac 6c 57 14 87 f1 ef bf f6 3e 33 57 b5 6d db 6e 9c 32 6c ac 86 0d 6a 5b 41 dd b0 0e 6a 04 b5 cd a0 76 a3 da 7e 7e 6f 66 ce de 6b 35 99 5b f3 61 c2 de df 61 b8 bf e3 c3 ff de 8c 19 99 c5 34 eb a3 59 99 1f e7 6e 98 88 43 d3 82 c1 61 91 ed 61 c6 9a 07 4a f5 59 1d b4 43 f4 fa 47 d5 b1 ee 87 a5 f8 13 c5 6b 9f 6e f3 fa ea bb 6e f8 25 ff 41 fc 87 d9 6f 7d 92 b3 db d1 26 4e 34 67 ed e2 2e f5 5a 7c ce 3c 9a d5 57 a6 5f 2b 1d 0f bc 14 18 ef e2 83 96 41 12 83 b6 46 09 6e b0 9c 4f 5c 67 af 4d 66 2d 55 c0 0f 6f 7e b4 b2 b9 6e f5 36 0e 1c 43 74 c6 1b 6a a9 78 c0 c2 cf bf c3 12 58 b7 4b ce 19 9b 1c 07 03 af 95 45 a5 a5 2d 85 04 e4 d0 Data Ascii: PNGIHDR szz6IDATxlW>3Wmn2lj[Ajv~~ofk5[aa4YnCaaJYCGknn%Ao}&N4g.Z\|<W_+AFnO\gMf-Uo~n6CtjxXKE-
2023-11-22 16:22:31 UTC	297	IN	Data Raw: a5 df 4a c1 90 97 8a 35 89 dc 64 6a a9 98 19 ee 0e c5 41 90 25 02 d3 48 ef 01 4b e6 d5 9d 52 2a 34 69 18 10 04 10 84 18 06 54 af 94 ea b8 43 84 4f 8d 34 80 88 8d cc 04 8d 11 c6 30 a4 fa 74 42 2d 95 5a 2b 61 c2 24 a8 4e 29 be d9 48 03 12 7e 7f 53 2b 1d 19 ee 01 02 af 95 b6 2d b8 02 4c 34 18 ea f5 b0 fe e0 eb dc 0e 9e 19 69 40 2e eb 9f 53 07 fd 27 e8 2d a2 63 06 12 ee 8e 35 09 49 64 8c 76 e1 42 72 d3 a9 2c 37 71 f8 d4 be 5b 7e c0 62 48 2c a6 f3 af 3b 9f b3 8f 3e e5 3d fa ed 11 04 43 72 07 c0 bd a2 e2 34 4d 03 29 dd 35 be eb 06 17 b1 98 8c c5 47 67 c7 f5 5f b3 a9 a9 57 cb bc f9 98 07 d9 12 c9 83 c6 45 bb a0 87 50 b8 e9 32 a6 8d 3e 40 52 78 5b ee e8 ac b4 12 d6 69 00 91 42 91 72 66 7c f9 49 6a 5b 3f 1a ef ae ff d2 e8 7f 4a 7f 27 72 ba 52 49 af 48 fa 81 89 f4 Data Ascii: J5djA%HKR*4iTCO40tB-Z+a$N)H~S+-L4i@.S'-c5IdvBr,7q[~bH,;>=Cr4M)5Gg_WEP2>@Rx[iBrf\|Ij[?J'rRIH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49821	142.251.16.105	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:31 UTC	800	OUT	GET /images/shopping/deals/mens_apparel.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:32 UTC	671	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/pngCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"en
2023-11-22 16:22:32 UTC	581	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 04 70 49 44 41 54 58 c3 ed d6 db 8b 57 55 14 c0 f1 ef be 9c df cc fc e6 66 33 3a d2 43 11 42 3e 94 f4 62 91 74 79 29 88 e8 29 8a a8 26 b3 ec 1e 41 18 bd 54 12 41 44 14 96 08 61 54 74 2f cd b2 30 41 ff 04 89 c0 e8 42 59 61 11 36 93 3a 56 bf df 5c ce ef 77 6e 7b af d5 c3 99 a4 97 6a ac b1 97 5c 8f 9b 73 d6 fa 9c bd f6 59 6c 38 15 ff f7 30 ff f4 c5 4d 5b 9e ba 74 70 78 f0 9c be 9e fe 90 17 79 f6 ed 81 6f f6 6d de b4 e5 d0 7f 02 78 66 f3 13 97 54 41 3f b0 0d 37 36 3c 74 1a 93 93 93 58 f8 7e 64 49 ff b5 1b ee 7f e4 f3 93 06 78 6e eb d3 e7 56 55 78 12 ec 55 49 d2 f0 5f 1e 38 c0 d8 f2 d3 e9 a4 29 2b cf 5e 41 91 77 b4 d1 d3 b3 d7 60 37 de 73 d7 86 2f 16 0d f0 Data Ascii: PNGIHDR szzpIDATXWUf3:CB>bty))&ATADaTt/0ABYa6:V\wn{j\sYl80M[tpxyomxfTA?76<tX~dIxnVUxUI_8)+^Aw`7s/
2023-11-22 16:22:32 UTC	612	IN	Data Raw: 51 25 c4 08 6a b0 c6 91 24 09 79 96 a3 0a 89 4f 68 24 3d 18 63 70 ce 73 f0 e0 77 f4 36 9b a8 2a ce ba 15 dd 3c db b0 60 40 27 9d bd 0f 38 4b 55 01 e6 01 13 a0 8a a2 a8 2a 21 04 aa 32 90 f8 04 51 41 44 10 15 40 29 f2 ac 9a 9c 98 28 54 84 18 03 d6 18 9c b3 0f bd f3 de b6 d1 05 01 7c 92 ec b1 ce 7f fc 7b e2 76 bb 4d 27 4d f7 87 18 90 58 af 85 10 31 c6 a0 80 8a d6 eb 2a 88 2a 60 5a d6 da 4f b3 6e 97 ac 28 50 cc e1 24 69 6c f4 de cf 2e 08 b0 ee a6 f5 5f af 5f 7b db 1a 6b dd 65 ed 76 fb dd 63 53 53 e9 c8 c8 c8 57 2a 82 48 3c fe 5c 8c 91 4e b7 3e 1f 98 3f b4 a5 c8 fa aa 50 7d 32 3d 3d 3d 59 e6 f9 03 3e 49 56 ae 1b bf 75 eb 75 d7 5c 5f fd a3 49 b8 7d c7 76 f3 e3 c4 0f e7 f5 f6 34 3e eb ed eb a3 d9 d7 24 8a a0 2a 38 e7 41 eb 4c 2a 4a 88 81 5f 7f fd a5 3a 7a 64 ea Data Ascii: Q%j$yOh$=cpsw6<`@'8KU!2QAD@)(T\|{vM'MX1*`ZOn(P$il.__{kevcSSWH<\N>?P}2===Y>IVuu\_I}v4>$8ALJ_:zd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49822	142.251.16.105	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:31 UTC	802	OUT	GET /images/shopping/deals/womens_apparel.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:32 UTC	670	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/pngCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"en
2023-11-22 16:22:32 UTC	582	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 a6 49 44 41 54 58 c3 ed d7 cb 6b 5f 45 14 07 f0 ef 99 b9 8f df cd 2f 8f 26 51 48 13 41 29 58 eb 42 c1 07 45 8a 1b 85 a4 41 41 a1 8b 68 ed 56 52 ea 46 28 e8 a2 0b 17 d2 9d 8f 8d a4 3b ed 46 14 54 90 16 4b 10 91 6e b4 8a ab 16 6c 6b ab 6d 90 36 b5 6d da 24 bf e7 bd f3 38 e7 b8 48 fe 00 63 f2 5b 88 3d eb 99 e1 73 cf 9c 33 73 07 b8 17 ff f7 a0 7f 33 a9 3b ff 33 f1 67 a7 de 09 8b b7 f6 fb aa c9 fc c8 f8 6b 13 c7 3f 3c d7 73 40 fb 83 4f 32 73 ed e6 b4 34 da 87 8c da bd b1 d5 20 61 41 3e 32 da 32 a3 c3 df 34 ab e5 39 fb d2 f4 99 91 c9 3d fa 4f d7 34 1b 01 98 85 bf 3e b2 ad f2 84 f1 61 ba 5c 59 22 f1 1e e4 23 b4 74 03 61 e9 ce fe 74 b9 f3 03 7f 3d ff c2 86 Data Ascii: PNGIHDR szzIDATXk_E/&QHA)XBEAAhVRF(;FTKnlkm6m$8Hc[=s3s3;3gk?<s@O2s4 aA>2249=O4>a\Y"#tat=
2023-11-22 16:22:32 UTC	409	IN	Data Raw: 6c 7d 06 5a 9d a7 5c b7 93 9a c4 00 49 0a ef 4b 14 49 06 0d 01 22 02 76 0e 44 04 94 6e 90 7f bd 34 b5 e5 00 32 66 af 8b 15 34 78 e4 49 06 cf 11 a4 58 db 02 ef 10 d7 8b 91 4a 07 c3 78 79 4b 01 d5 57 a7 13 02 f6 89 b5 50 b7 de ea 89 5d 07 78 44 ef 11 63 80 4d 33 48 55 02 3e ee bb f1 f6 d1 c1 2d 03 f0 f2 f2 d3 68 97 0f 15 83 c3 90 10 a0 1c 60 b2 0c aa 0a 0e 01 31 04 30 80 24 af 83 ab 12 c4 34 14 7e bf 7a 60 cb 00 d2 e8 bc 1a db 1d ea 1f 1a 01 c7 88 e8 2a 58 93 00 44 88 de 21 f8 0a 02 83 c4 26 6b 77 44 0c 20 a1 43 ab 27 be a5 4d 03 5a c7 be cc e5 6e 63 86 8c 45 62 2c a0 8a 50 75 51 cb 0a a8 30 62 f4 88 21 40 00 90 00 b6 56 40 5c 09 8d fc 58 38 79 fa f9 4d 03 78 e1 fa 94 36 da db 6d 91 03 21 80 c8 c0 ac 7f 6d f4 0e 1c 23 54 02 48 01 62 41 52 ab 43 5d 05 18 0b Data Ascii: l}Z\IKI"vDn42f4xIXJxyKWP]xDcM3HU>-h`10$4~z`*XD!&kwD C'MZncEb,PuQ0b!@V@\X8yMx6m!m#THbARC]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49823	142.251.16.105	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:31 UTC	803	OUT	GET /images/shopping/deals/home_and_garden.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:32 UTC	670	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/pngCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"en
2023-11-22 16:22:32 UTC	582	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 a7 49 44 41 54 78 01 ed d3 03 70 2c 4b 14 06 e0 bf 67 16 71 72 6d db b6 6d db b6 6d db b6 6d db b6 6d db 9b ac 67 a6 fb bc 58 cf d6 7e 55 07 a5 76 e3 1f c9 c5 c5 c5 65 c1 81 36 25 0e de 5c d4 08 7f 87 f5 17 ab 7b 75 5b 14 ef de b2 a3 dd b7 e1 0f f2 e8 c3 4d 76 fa c1 2e 37 fc 00 1d a2 79 f7 f5 c9 74 66 70 a4 57 b9 f3 32 7e c0 ed 8f bb 5a 3d fa b0 77 b2 a2 5a 64 4d 23 66 b3 5b c4 37 f3 73 32 db bf 32 bb 4d 48 4e 07 98 aa 12 88 cb 1c dc c8 f5 52 dc bb 9b 8e 0c 9d ed e3 e3 2d cd d8 d1 50 f7 cd f4 f9 dd f0 66 07 0f fd f0 ee af 55 a8 3a 7e 6f 3a d1 7b 93 81 06 6f c8 79 e5 d2 eb dd 12 a2 79 16 70 a6 d0 ee 87 ad 69 db dd 9a b4 f9 46 5d 5a 7e a1 02 4d 3a 10 Data Ascii: PNGIHDR szzIDATxp,KgqrmmmmmgX~Uve6%\{u[Mv.7ytfpW2~Z=wZdM#f[7s22MHNR-PfU:~o:{oyypiF]Z~M:
2023-11-22 16:22:32 UTC	410	IN	Data Raw: 4a 22 be 4f 8e 9a c9 12 e4 bc e7 e6 f1 2d f3 eb 80 33 c7 9f be bb d8 8c 0b ab 4c a0 90 89 49 80 10 18 04 88 a0 00 40 08 45 c1 3b 25 44 63 77 50 39 45 88 8b 3f 7d 02 a1 8a a7 1c 62 de f7 a8 4b 2d 2d 9e fd d4 a3 f7 17 33 7f 72 5c 9e 1f cb af 04 08 36 08 e2 10 82 83 48 02 a3 88 49 43 17 13 8c 88 18 42 f5 5c 9c 39 b6 9f 97 4f 19 10 3f 33 b4 c1 51 ff 9f 3a 81 28 2a a4 99 75 2f 96 77 86 7a 49 e3 a4 23 4f a3 2f 74 92 6f f0 0c 8c 42 77 4b 6e 00 0c 00 e9 02 43 82 c4 18 98 90 21 04 83 cc 0c 5a bb 59 a9 f2 f7 5b 9e 77 a0 bb bb 47 81 b4 89 8a 6d 18 da e0 c2 4b 84 62 f8 15 b6 dd 6b d2 d9 e6 34 cd 8a e9 91 11 26 fb 0d d8 1d 56 d8 ed 56 98 ad 9f 61 b1 59 60 b1 68 b0 d9 38 9c 8a 13 aa 42 e0 4e 03 e2 c7 4d fd 20 20 40 1a 63 90 bd d6 2f e8 75 46 45 34 3a fc 0a 35 32 ac 9a Data Ascii: J"O-3LI@E;%DcwP9E?}bK--3r\6HICB\9O?3Q:(*u/wzI#O/toBwKnC!ZY[wGmKbk4&VVaY`h8BNM @c/uFE4:52

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49826	142.251.16.105	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:31 UTC	802	OUT	GET /images/shopping/deals/toys_and_games.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:32 UTC	671	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/pngCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"en
2023-11-22 16:22:32 UTC	581	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 04 31 49 44 41 54 58 09 ed c1 c9 6f 54 75 00 07 f0 1f 4b 0c 67 4f 04 c3 41 49 8c 89 77 e3 85 70 c2 60 8c 1e b8 60 34 9a 28 e2 c2 85 93 71 49 3c a0 c6 35 11 05 22 a9 28 42 ad 14 da 52 5a 5a 0a 58 84 16 5a 3a 9d a5 7d b3 bc fd fd de ef f7 f6 6d 66 ca 74 a6 d3 0e 0d fd 7a f1 2f 80 19 88 86 cf 87 3c f2 bf 10 8d 8d 6f 25 0f 93 d6 7d 76 8c 5d bc bc 95 3c 0c a3 16 d6 15 4f f4 50 b1 fb f4 3b e4 41 ca cf 2c be fc d2 e5 fa c4 7b 83 d5 93 f3 a7 fa 16 8b 27 ff e8 22 0f ca 1a d3 36 2f 0c 5a 76 d7 e7 05 64 86 3c 28 83 63 28 0c 9c 97 6b b5 da 26 d2 29 77 05 79 d3 ca f5 99 9d cd 99 ec eb cb 92 ba af 95 0a 50 4f ea 68 ad dc 41 a3 de 40 12 97 51 29 57 7f 21 9d d2 9a 4e Data Ascii: PNGIHDR szz1IDATXoTuKgOAIwp``4(qI<5"(BRZZXZ:}mftz/<o%}v]<OP;A,{'"6/Zvd<(c(k&)wyPOhA@Q)W!N
2023-11-22 16:22:32 UTC	549	IN	Data Raw: 03 a4 dd 3e 1d 8b f7 f4 7f 32 db ca 9d 1c 86 79 65 02 c1 54 06 91 ce 11 fa 21 6c ce c1 a8 09 25 9d 87 f0 ed 39 70 5d fd 8b b4 d3 4c 55 7a ee ed 9b c3 cb af fe 36 04 a6 1a 28 a4 33 c8 4d 4c 20 09 63 44 61 02 c7 b2 c1 4d 13 54 d7 60 c8 32 5c 4e 63 d2 4e 95 70 e8 fb d1 d4 7e 4c 89 7f c3 73 7c 30 83 82 6a 1a a2 20 42 1c 26 f0 1c 0f cc a4 30 0d 0d 16 d5 c1 0d 0d 81 ef 3d 4f da 61 35 a5 ef 5c 3e d5 b3 6a 9e 38 80 80 e9 60 86 89 92 20 a0 90 4b c3 b5 2c 78 8e 0f 46 19 4c 43 87 a1 88 28 09 39 c8 a5 22 3c c7 19 26 ed 20 4f 3b ef 5f df 7f 09 bd bb 7e 82 6b 5a f0 9d 00 aa 28 61 e2 f2 08 77 b8 f5 5d e0 85 70 6d 0f 8c 52 e4 d3 33 48 4f 4d 42 2e 15 60 73 7e 37 f4 83 5d e4 7e f5 ca ca 9b db 8f 8e 62 f3 c7 47 90 96 0d 94 e3 2a 42 2f 82 94 17 d6 c4 f9 b9 37 6c 6e 23 f0 42 Data Ascii: >2yeT!l%9p]LUz6(3ML cDaMT`2\NcNp~Ls\|0j B&0=Oa5\>j8` K,xFLC(9"<& O;_~kZ(aw]pmR3HOMB.`s~7]~bG*B/7ln#B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49824	142.251.16.105	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:31 UTC	807	OUT	GET /images/shopping/deals/sports_and_outdoors.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:32 UTC	670	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/pngCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"en
2023-11-22 16:22:32 UTC	582	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 04 00 00 00 d9 73 b2 7f 00 00 03 14 49 44 41 54 48 c7 ed d3 6b 68 d5 75 1c c7 f1 e1 52 07 66 9a 44 78 db 5c 3a 51 b7 2e 8a b5 40 11 21 83 90 2e 0a 31 72 a8 0f 7a d0 ca 8a 2c b5 54 1c 78 49 88 10 67 d8 26 c3 88 6c 95 3d 08 23 93 85 b7 ca 82 a2 86 e8 ba a8 99 0e e7 36 cf 76 76 6e ff ff 39 db 09 34 79 f5 60 23 84 b3 e9 9e d7 e7 fb f8 fd e6 f7 fd fe be df bc bc ff 33 48 92 c3 2f 3d f6 e1 ce 1d 07 ab 7f da d8 b4 fe f0 d6 1d fb 16 25 87 0d 19 4e 15 a4 d6 c7 3b a3 4e 7b db 3c 65 66 29 33 df ca cb bb 5e 3a 57 30 04 fc b3 85 89 5f 52 92 e2 ba 75 39 6a b7 8f bc af c6 eb 6a 5d 38 df fa d0 2d f0 7d cf fd 70 35 10 48 4a 48 88 89 88 8a ea 74 45 87 76 1d da af 75 54 de 04 3f b0 ec 9d eb 81 40 20 Data Ascii: PNGIHDR sIDATHkhuRfDx\:Q.@!.1rz,TxIg&l=#6vvn94y`#3H/=%N;N{<ef)3^:W0_Ru9jj]8-}p5HJHtEvuT?@
2023-11-22 16:22:32 UTC	263	IN	Data Raw: 56 31 71 29 a1 8c 5e 59 59 bd b2 7a 84 e5 39 82 fa db ca e3 77 a9 14 f9 b7 3a 75 e9 d4 25 26 d1 af e8 d1 ab 57 8f 74 4b 90 3f c0 2e 2e 79 6b bc f1 4e bb ac 4d 9b 76 ed ae 88 68 bf 41 11 ca c8 48 0b 5e 18 f0 16 de 1d 3b 37 32 d6 ab 2e b8 a8 45 8b 4b 5a b5 69 b0 c9 2e 75 6a 6d 77 50 28 90 6c 0a 46 0c 72 8f cb 16 15 ff 3d 4e a3 5f 9d 71 c6 39 7f 68 34 de ed ee 70 a7 bb 15 db 28 29 9e 8d 95 e5 0d 9e 8a e5 93 af cf 71 c4 f7 7e d4 e4 a0 22 23 8d 54 60 94 31 26 58 25 92 ed 5c 9c 77 f3 54 3e b8 a1 ed 13 07 1c 52 6f 82 7c c3 e4 1b ae c0 28 13 d5 47 5b 9f ca bb 75 f6 8d db b4 73 43 66 ab dd 9e 30 c2 30 f9 46 1a e7 c9 ec 7b 7b 9a 27 0d 01 ef 4b ed 98 35 cf be f2 c1 1b 5f 6f 39 f9 f4 cf e5 87 2b 6a f7 2e 6f 1c 3d 64 f8 3f 97 7f 00 4a 33 ed a2 7b 67 03 1e 00 00 00 00 Data Ascii: V1q)^YYz9w:u%&WtK?..ykNMvhAH^;72.EKZi.ujmwP(lFr=N_q9h4p()q~"#T`1&X%\wT>Ro\|(G[usCf00F{{'K5_o9+j.o=d?J3{g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49825	142.251.16.105	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:31 UTC	805	OUT	GET /images/shopping/deals/health_and_beauty.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:32 UTC	670	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/pngCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"en
2023-11-22 16:22:32 UTC	582	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 02 3c 49 44 41 54 78 01 62 18 52 60 14 8c 82 27 4f 9f f2 5e b9 78 76 fa d9 23 bb 67 3e be 7d 71 e3 ad 8b 27 6e 5c 38 b2 fd c6 eb 87 57 53 e8 e6 88 cf 9f df 31 82 e8 03 bb 76 6a 6f 5f 39 f7 df ba d9 5d ff d6 2c 59 a8 43 f7 d0 b8 7e e1 cc fa 39 7d 6d ff 7b eb 8b ff 9f d8 b7 75 09 b9 e6 30 91 ab 51 56 4a c4 c8 ce ca 80 c1 c6 44 93 41 4a 84 4b 1f c0 2b 59 23 58 11 45 41 f4 d4 57 dc 5d 57 c1 6e 70 5f 02 b2 01 dc 23 64 05 44 e4 c4 84 38 d1 b8 bb 6b db 2b 6c a4 33 f4 4d 25 f7 86 a7 64 4d 01 16 67 47 9b 95 2a 0d 42 82 42 4a ad 5a dd b2 66 00 73 e3 7d 55 ec 67 a8 ba 6f fd 96 1d 6c dd bd 1f 57 6a 47 86 da df 3d 8b 0e 30 3f 3d 54 ad 35 9a 4f 04 27 b2 64 91 3c 4f Data Ascii: PNGIHDR szz<IDATxbR`'O^xv#g>}q'n\8WS1vjo_9],YC~9}m{u0QVJDAJK+Y#XEAW]Wnp_#dD8k+l3M%dMgG*BBJZfs}UgolWjG=0?=T5O'd<O
2023-11-22 16:22:32 UTC	47	IN	Data Raw: 4b db 02 f6 2c 6c 0a d9 35 bf c9 67 fb bc 26 f5 63 5b e6 93 dc c0 19 05 a3 00 00 db 93 3b e2 fe 98 15 c7 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: K,l5g&c[;IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49819	52.165.165.26	443

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:31 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=HspY2CHUf5tsTg5&MD=XHz6fdxt HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2023-11-22 16:22:32 UTC	560	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 4d 6f 6e 2c 20 30 31 20 4a 61 6e 20 30 30 30 31 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 4d 78 31 52 6f 4a 48 2f 71 45 77 70 57 66 4b 6c 6c 78 37 73 62 73 6c 32 38 41 75 45 52 7a 35 49 59 64 63 73 76 74 54 4a 63 67 4d 3d 5f 32 31 36 30 22 0d 0a 4d 53 2d 43 6f 72 72 65 6c 61 74 69 6f 6e 49 64 3a 20 32 37 31 30 32 31 61 66 2d 32 37 64 38 2d 34 33 62 30 2d Data Ascii: HTTP/1.1 200 OKCache-Control: no-cachePragma: no-cacheContent-Type: application/octet-streamExpires: -1Last-Modified: Mon, 01 Jan 0001 00:00:00 GMTETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160"MS-CorrelationId: 271021af-27d8-43b0-
2023-11-22 16:22:32 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2023-11-22 16:22:32 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49830	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:32 UTC	1376	OUT	GET /images/shopping/deals/pet_supplies.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:32 UTC	670	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/pngCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"en
2023-11-22 16:22:32 UTC	582	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 47 49 44 41 54 78 01 ed d3 43 a0 2c 47 14 80 e1 bf aa 7b 7c 27 b6 6d db b6 93 4d 6c db b6 6d 6b 15 db 76 36 b1 ed e4 19 d7 73 a7 67 ba 70 4e 6c 6f c2 f9 b6 c5 23 fe 6e 1d 1d 1d 1d 1d 86 9f 70 83 3d 66 d8 a3 57 ef 44 68 1d 22 ca 94 c1 87 3b 25 f7 7b cf b7 e3 69 03 fc 49 af 5f 76 d0 26 85 5a e9 00 11 33 79 54 7b 5f 79 c2 a9 8e 9c 63 e3 3d 5a fc 40 ca 4f 7c fc c0 65 bb 48 ab ff d2 c1 e1 c3 4c 6c 7b 92 09 27 de ba 3e dd b4 b3 0d 7b e2 b2 27 34 d2 c4 d8 60 8d 01 d4 a8 a2 20 62 8c 0d 2a 3e 57 35 7d 46 e3 84 2a 01 d7 33 7a 01 31 85 dd 1a a3 c6 58 97 65 98 a4 30 47 36 94 2f ee b2 fe 15 8a d5 89 f4 17 33 30 e2 b9 47 d3 ee 57 ee 1b 95 8d f9 64 f2 90 b7 11 5b Data Ascii: PNGIHDR szzGIDATxC,G{\|'mMlmkv6sgpNlo#np=fWDh";%{iI_v&Z3yT{_yc=Z@O\|eHLl{'>{'4` b>W5}F3z1Xe0G6/30GWd[
2023-11-22 16:22:32 UTC	314	IN	Data Raw: 9f 9c 7a b9 88 28 b4 ec c4 61 30 67 ae 0d 8e bd e2 a3 5f 2c c1 b0 67 ef 2d b7 7a bb e7 f4 3e 27 2a 98 b4 44 a5 5e a5 af b7 41 a0 8c cb 3d 79 ee 89 5a 44 b0 44 ca 78 49 70 ce 63 12 30 c5 0a 5e 53 62 34 0c f6 34 98 6c e2 0a 95 4a 95 68 0a 84 e0 89 cd fe d4 9a 64 8e 5f 2d c1 64 b3 2f 94 8f 79 e9 b1 e1 60 66 c2 18 42 cb d3 68 04 0a 13 54 70 3d 6d 82 80 31 02 a2 88 2a 18 8b a2 a4 49 82 aa 23 ea d7 0d 69 55 69 0c 09 93 d7 ab 58 20 cb 1d b8 48 5f 23 0b 95 19 66 78 fb 37 4b f0 c4 b9 07 6f e6 7b 3e bb c1 4a 0b c4 31 26 2b d3 37 94 9f 3c e3 1c 73 de 6c d5 2b 49 2a 1a 9d f7 6d 8f 8f 41 53 9b e0 83 27 b5 96 dc 79 ac b5 68 08 de e5 7e 86 09 6b e9 bd 5d 3a 54 47 03 03 6d 43 bf d4 ce d9 e9 a2 db 0e fc cd 0f 00 dc 77 ea de ab bb 6c 68 6b ef 63 bd d1 18 b8 7d f3 e3 2f be Data Ascii: z(a0g_,g-z>'D^A=yZDDxIpc0^Sb44lJhd_-d/y`fBhTp=m1I#iUiX H_#fx7Ko{>J1&+7<sl+I*mAS'yh~k]:TGmCwlhkc}/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49832	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:32 UTC	3590	OUT	GET /xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=1/ed=1/dg=2/br=1/rs=ACT90oFaYErXXA3hRaO-qDqG-y2SopXzQg/ee=cEt90b:ws9Tlc;qddgKe:x4FYXe,d7YSfd;yxTchf:KUM7Z;dtl0hd:lLQWFe;eHDfl:ofjVkb;qaS3gd:yiLg6e;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;iFQyKf:vfuNJf,QIhFr;SNUn3:ZwDk9d,x8cHvb;io8t5d:sgY6Zb;Oj465e:KG2eXe,KG2eXe;Erl4fe:FloWmf,FloWmf;JsbNhc:Xd8iUd;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;uY49fb:COQbmf;Pjplud:PoEs9b,EEDORb;QGR0gd:Mlhmy;a56pNe:JEfCwb;Me32dd:MEeYgc;wR5FRb:TtcOte,O1Gjze;pXdRYb:JKoKVe;dIoSBb:ZgGg9b;EmZ2Bf:zr1jrb;NSEoX:lazG7b;eBAeSb:Ck63tb;WCEKNd:I46Hvd;wV5Pjc:L8KGxe;EVNhjf:pw70Gc;sTsDMc:kHVSUb;wQlYve:aLUfP;zOsCQe:Ko78Df;KcokUb:KiuZBf;YV5bee:IvPZ6d;kbAm9d:MkHyGd;ZWEUA:afR4Cf;g8nkx:U4MzKc;qZx2Fc:j0xrE;lzgfYb:PI40bd;w9w86d:dt4g2b;GleZL:J1A7Od;bcPXSc:gSZLJb;JXS8fb:Qj0suc;IoGlCf:b5lhvb;VN6jIc:ddQyuf;vfVwPd:lcrkwe;xBbsrc:NEW1Qc;pNsl2d:j9Yuyc;VGRfx:VFqbr;BjwMce:cXX2Wb;ESrPQc:mNTJvc;R9Ulx:CR7Ufe;kY7VAf:d91TEb;NPKaK:SdcwHb;LBgRLc:XVMNvd,SdcwHb;UyG7Kb:wQd0G;LsNahb:ucGLNb;KpRAue:Tia57b;jY0zg:Q6tNgc;coJ8e:KvoW8;oSUNyd:fTfGO,fTfGO,pnvXVc;SMDL4c:fTfGO,pnvXVc;aZ61od:arTwJ;w4rSdf:XKiZ9;h3MYod:cEt90b;eO3lse:nFClrf;zaIgPb:Qtpxbd;HMDDWe:G8QUdb;ShpF6e:N0pvGc;k2Qxcb:XY51pe;IBADCc:RYquRb;pKJiXd:VCenhc;rQSrae:C6D5Fc;kCQyJ:ueyPK;EABSZ:MXZt9d;qavrXe:zQzcXe,mYbt1d;TxfV6d:YORN0b;UDrY1c:eps46d;F9mqte:UoRcbe;Nyt6ic:jn2sGd;w3bZCb:ZPGaIb;G0KhTb:LIaoZ;XUezZ:sa7lqb;aAJE9c:WHW6Ef;V2HTTe:RolTY;Wfmdue:g3MJlb;imqimf:jKGL2e;BgS6mb:fidj5d;gtVSi:ekUOYd;KQzWid:ZMKkN;UVmjEd:EesRsb;z97YGf:oug9te;AfeaP:TkrAjf;eBZ5Nd:audvde;CxXAWb:YyRLvc;OgagBe:cNTe0;SLtqO:Kh1xYe;tosKvd:ZCqP3;VOcgDe:YquhTb;uuQkY:u2V3ud;WDGyFe:jcVOxd;trZL0b:qY8PFe;VxQ32b:k0XsBb;DULqB:RKfG5c;Np8Qkd:Dpx6qc;cFTWae:gT8qnd;gaub4:TN6bMe;DpcR3d:zL72xf;hjRo6e:F62sG;yGxLoc:FmAr0c;pj82le:mg5CW;dLlj2:Qqt3Gf;qGV2uc:HHi04c;oUlnpc:RagDlc;R2kc8b:ALJqWb;Q1Ow7b:x5CSu;bFZ6gf:RsDQqe;okUaUd:wItadb;xbe2wc:uRMPBc;KOxcK:bFOvTc;G6wU6e:hezEbd;uknmt:GkPrzb;U96pRd:FsR04;PqHfGe:im2cZe;heHB1:sFczq;Fmv9Nc:O1Tzwc;hK67qb:QWEO5b;BMxAGc:E5bFse;R4IIIb:QWfeKf;whEZac:F4AmNb;tH4IIe:Ymry6;lkq0A:JyBE3e;daB6be:lMxGPd;LEikZe:byfTOb,lsjVmc/m=attn,cdos,gwc,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:32 UTC	818	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 4f 72 69 67 69 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 74 72 75 73 74 65 64 2d 74 79 70 65 73 2d 66 6f 72 20 27 73 63 72 69 70 74 27 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 67 77 73 2d 74 65 61 6d 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesVary: Accept-Encoding, OriginContent-Type: text/javascript; charset=UTF-8Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-teamCross-Origin-R
2023-11-22 16:22:32 UTC	434	IN	Data Raw: 74 68 69 73 2e 5f 73 3d 74 68 69 73 2e 5f 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 Data Ascii: this._s=this._s\|\|{};(function(_){var window=this;try{/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// SPDX-License-Identifier: Apache-2.0// SPDX-License-Identifier: Apache-2.0 // Copyright The Closure Lib
2023-11-22 16:22:32 UTC	1252	IN	Data Raw: 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 62 61 61 2c 63 61 61 2c 6d 61 61 2c 6e 61 61 2c 6f 61 61 2c 70 61 61 2c 71 61 61 2c 72 61 61 2c 73 61 61 2c 74 61 61 2c 75 61 61 2c 79 61 61 2c 77 61 61 2c 76 61 61 2c 7a 61 61 2c 78 61 61 2c 41 61 61 2c 43 61 61 2c 42 61 61 2c 44 61 61 2c 45 61 61 2c 46 61 61 2c 48 61 61 2c 49 61 61 2c 4e 61 61 2c 5a 61 61 2c 64 62 61 2c 6d 62 61 2c 6f 62 61 2c 73 62 61 2c 74 62 61 2c 7a 62 61 2c 43 62 61 2c 47 62 61 2c 49 62 61 2c 4c 62 61 2c 4f 62 61 2c 4e 62 61 2c 51 62 61 2c 44 62 61 2c 53 61 2c 52 62 61 2c 58 61 2c 54 62 61 2c 58 62 61 2c 59 62 61 2c 24 62 61 2c 62 63 61 2c 64 63 61 2c 67 63 61 2c 68 63 61 2c 6a 63 61 2c 6c 63 61 2c 6f 63 61 2c 71 63 61 2c 72 63 61 2c 78 63 61 2c 41 63 61 2c 43 63 Data Ascii: ier: Apache-2.0*/var baa,caa,maa,naa,oaa,paa,qaa,raa,saa,taa,uaa,yaa,waa,vaa,zaa,xaa,Aaa,Caa,Baa,Daa,Eaa,Faa,Haa,Iaa,Naa,Zaa,dba,mba,oba,sba,tba,zba,Cba,Gba,Iba,Lba,Oba,Nba,Qba,Dba,Sa,Rba,Xa,Tba,Xba,Yba,$ba,bca,dca,gca,hca,jca,lca,oca,qca,rca,xca,Aca,Cc
2023-11-22 16:22:32 UTC	1252	IN	Data Raw: 6b 71 61 2c 67 67 2c 6d 71 61 2c 6f 71 61 2c 72 71 61 2c 73 71 61 2c 78 71 61 2c 41 71 61 2c 44 71 61 2c 45 71 61 2c 46 71 61 2c 48 71 61 2c 4a 71 61 2c 4d 71 61 2c 4b 71 61 2c 57 71 61 2c 62 72 61 2c 63 72 61 2c 64 72 61 2c 71 67 2c 65 72 61 2c 66 72 61 2c 67 72 61 2c 68 72 61 2c 69 72 61 2c 6b 72 61 2c 71 72 61 2c 72 72 61 2c 77 72 61 2c 75 72 61 2c 76 72 61 2c 79 72 61 2c 7a 72 61 3b 0a 5f 2e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d Data Ascii: kqa,gg,mqa,oqa,rqa,sqa,xqa,Aqa,Dqa,Eqa,Fqa,Hqa,Jqa,Mqa,Kqa,Wqa,bra,cra,dra,qg,era,fra,gra,hra,ira,kra,qra,rra,wra,ura,vra,yra,zra;_.aa=function(a,b){if(Error.captureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}
2023-11-22 16:22:32 UTC	1252	IN	Data Raw: 74 44 65 63 6f 64 65 72 28 22 75 74 66 2d 38 22 2c 7b 66 61 74 61 6c 3a 21 30 7d 29 29 3a 28 65 3d 66 61 61 29 7c 7c 28 65 3d 66 61 61 3d 6e 65 77 20 54 65 78 74 44 65 63 6f 64 65 72 28 22 75 74 66 2d 38 22 2c 7b 66 61 74 61 6c 3a 21 31 7d 29 29 3b 63 3d 62 2b 63 3b 61 3d 30 3d 3d 3d 62 26 26 63 3d 3d 3d 61 2e 6c 65 6e 67 74 68 3f 61 3a 61 2e 73 75 62 61 72 72 61 79 28 62 2c 63 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 2e 64 65 63 6f 64 65 28 61 29 7d 63 61 74 63 68 28 66 29 7b 69 66 28 61 3d 64 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 67 61 61 29 7b 74 72 79 7b 65 2e 64 65 63 6f 64 65 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 5b 31 32 38 5d 29 29 7d 63 61 74 63 68 28 67 29 7b 7d 74 72 79 7b 65 2e 64 65 63 6f 64 65 28 6e 65 77 20 55 69 6e 74 38 41 Data Ascii: tDecoder("utf-8",{fatal:!0})):(e=faa)\|\|(e=faa=new TextDecoder("utf-8",{fatal:!1}));c=b+c;a=0===b&&c===a.length?a:a.subarray(b,c);try{return e.decode(a)}catch(f){if(a=d){if(void 0===gaa){try{e.decode(new Uint8Array([128]))}catch(g){}try{e.decode(new Uint8A
2023-11-22 16:22:32 UTC	1252	IN	Data Raw: 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 66 61 28 5f 2e 64 61 28 29 2c 61 29 7d 3b 0a 6e 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 52 65 67 45 78 70 28 22 28 5b 41 2d 5a 5d 5b 5c 5c 77 20 5d 2b 29 2f 28 5b 5e 5c 5c 73 5d 2b 29 5c 5c 73 2a 28 3f 3a 5c 5c 28 28 2e 2a 3f 29 5c 5c 29 29 3f 22 2c 22 67 22 29 2c 63 3d 5b 5d 2c 64 3b 64 3d 62 2e 65 78 65 63 28 61 29 3b 29 63 2e 70 75 73 68 28 5b 64 5b 31 5d 2c 64 5b 32 5d 2c 64 5b 33 5d 7c 7c 76 6f 69 64 20 30 5d 29 3b 72 65 74 75 72 6e 20 63 7d 3b 6f 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 61 26 26 61 7c 7c 5f 2e 6c 61 61 3f 21 21 5f 2e 65 61 26 26 30 3c 5f 2e 65 61 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 3b 70 61 Data Ascii: (a){return _.fa(_.da(),a)};naa=function(a){for(var b=RegExp("([A-Z][\\w ]+)/([^\\s]+)\\s(?:\$(.?)\$)?","g"),c=[],d;d=b.exec(a);)c.push([d[1],d[2],d[3]\|\|void 0]);return c};oaa=function(a){return void 0!==a&&a\|\|_.laa?!!_.ea&&0<_.ea.brands.length:!1};pa
2023-11-22 16:22:32 UTC	1252	IN	Data Raw: 72 69 4f 53 22 2c 22 48 65 61 64 6c 65 73 73 43 68 72 6f 6d 65 22 5d 29 3a 28 61 3d 61 5b 32 5d 29 26 26 61 5b 31 5d 7c 7c 22 22 7d 3b 0a 42 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 2f 72 76 3a 20 2a 28 5b 5c 64 5c 2e 5d 2a 29 2f 2e 65 78 65 63 28 61 29 3b 69 66 28 62 26 26 62 5b 31 5d 29 72 65 74 75 72 6e 20 62 5b 31 5d 3b 62 3d 22 22 3b 76 61 72 20 63 3d 2f 4d 53 49 45 20 2b 28 5b 5c 64 5c 2e 5d 2b 29 2f 2e 65 78 65 63 28 61 29 3b 69 66 28 63 26 26 63 5b 31 5d 29 69 66 28 61 3d 2f 54 72 69 64 65 6e 74 5c 2f 28 5c 64 2e 5c 64 29 2f 2e 65 78 65 63 28 61 29 2c 22 37 2e 30 22 3d 3d 63 5b 31 5d 29 69 66 28 61 26 26 61 5b 31 5d 29 73 77 69 74 63 68 28 61 5b 31 5d 29 7b 63 61 73 65 20 22 34 2e 30 22 3a 62 3d 22 38 2e 30 22 3b 62 72 65 61 Data Ascii: riOS","HeadlessChrome"]):(a=a[2])&&a[1]\|\|""};Baa=function(a){var b=/rv: ([\d\.])/.exec(a);if(b&&b[1])return b[1];b="";var c=/MSIE +([\d\.]+)/.exec(a);if(c&&c[1])if(a=/Trident\/(\d.\d)/.exec(a),"7.0"==c[1])if(a&&a[1])switch(a[1]){case "4.0":b="8.0";brea
2023-11-22 16:22:32 UTC	1252	IN	Data Raw: 6e 7d 65 6c 73 65 20 69 66 28 22 22 3d 3d 3d 62 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 6e 65 77 20 47 61 61 28 61 2c 63 2c 62 29 7d 3b 0a 49 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 6c 61 61 3f 21 21 5f 2e 65 61 26 26 21 21 5f 2e 65 61 2e 70 6c 61 74 66 6f 72 6d 3a 21 31 7d 3b 5f 2e 6a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 61 28 29 3f 22 41 6e 64 72 6f 69 64 22 3d 3d 3d 5f 2e 65 61 2e 70 6c 61 74 66 6f 72 6d 3a 5f 2e 69 61 28 22 41 6e 64 72 6f 69 64 22 29 7d 3b 5f 2e 4a 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 69 61 28 22 69 50 68 6f 6e 65 22 29 26 26 21 5f 2e 69 61 28 22 69 50 6f 64 22 29 26 26 21 5f 2e 69 61 28 22 69 50 61 64 22 29 7d 3b 5f 2e 6c 61 3d 66 75 6e 63 Data Ascii: n}else if(""===b)return;return new Gaa(a,c,b)};Iaa=function(){return _.laa?!!_.ea&&!!_.ea.platform:!1};_.ja=function(){return Iaa()?"Android"===_.ea.platform:_.ia("Android")};_.Jaa=function(){return _.ia("iPhone")&&!_.ia("iPod")&&!_.ia("iPad")};_.la=func
2023-11-22 16:22:32 UTC	1252	IN	Data Raw: 3b 2d 2d 65 29 65 20 69 6e 20 64 26 26 62 2e 63 61 6c 6c 28 63 2c 64 5b 65 5d 2c 65 2c 61 29 7d 3b 5f 2e 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 62 3d 5f 2e 72 61 28 61 2c 62 2c 63 29 3b 72 65 74 75 72 6e 20 30 3e 62 3f 6e 75 6c 6c 3a 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 61 2e 63 68 61 72 41 74 28 62 29 3a 61 5b 62 5d 7d 3b 5f 2e 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 61 2e 6c 65 6e 67 74 68 2c 65 3d 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 69 66 28 66 20 69 6e 20 65 26 26 62 2e 63 61 6c 6c 28 63 2c 65 5b 66 5d 2c 66 2c 61 29 29 72 65 74 75 72 6e 20 66 3b 72 65 74 75 72 6e Data Ascii: ;--e)e in d&&b.call(c,d[e],e,a)};_.sa=function(a,b,c){b=_.ra(a,b,c);return 0>b?null:"string"===typeof a?a.charAt(b):a[b]};_.ra=function(a,b,c){for(var d=a.length,e="string"===typeof a?a.split(""):a,f=0;f<d;f++)if(f in e&&b.call(c,e[f],f,a))return f;return
2023-11-22 16:22:32 UTC	1252	IN	Data Raw: 2b 2b 29 7b 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 5f 2e 45 61 28 64 29 29 7b 76 61 72 20 65 3d 61 2e 6c 65 6e 67 74 68 7c 7c 30 2c 66 3d 64 2e 6c 65 6e 67 74 68 7c 7c 30 3b 61 2e 6c 65 6e 67 74 68 3d 65 2b 66 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 61 5b 65 2b 67 5d 3d 64 5b 67 5d 7d 65 6c 73 65 20 61 2e 70 75 73 68 28 64 29 7d 7d 3b 5f 2e 58 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 70 6c 69 63 65 2e 61 70 70 6c 79 28 61 2c 5f 2e 57 61 61 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 7d 3b 5f 2e 57 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 32 3e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c Data Ascii: ++){var d=arguments[c];if(_.Ea(d)){var e=a.length\|\|0,f=d.length\|\|0;a.length=e+f;for(var g=0;g<f;g++)a[e+g]=d[g]}else a.push(d)}};_.Xaa=function(a,b,c,d){return Array.prototype.splice.apply(a,_.Waa(arguments,1))};_.Waa=function(a,b,c){return 2>=arguments.l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49828	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:32 UTC	1481	OUT	POST /gen_204?s=web&t=cap&atyp=csi&ei=xSpeZdzvEPyy5NoPhfSymAc&rt=wsrt.1575,cbs.196,cbt.426,hst.196&wh=907&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:32 UTC	1227	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 33 74 47 4b 46 69 39 67 5a 38 52 65 54 42 44 61 6c 38 36 57 59 41 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 20 68 74 74 70 3a 3b 72 65 70 6f 72 74 2d 75 72 69 20 68 74 Data Ascii: HTTP/1.1 204 No ContentContent-Type: text/html; charset=UTF-8Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-3tGKFi9gZ8ReTBDal86WYA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49829	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:32 UTC	1605	OUT	POST /gen_204?s=web&t=aft&atyp=csi&ei=xSpeZdzvEPyy5NoPhfSymAc&rt=wsrt.1575,aft.2391,afti.2391,afts.862,cbs.196,cbt.426,frts.794,frvt.2391,hst.196,prt.1327,sct.579&wh=907&frtp=594&imn=104&ima=26&imad=17&imac=0&imf=0&aft=1&aftp=907&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:32 UTC	1227	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 54 56 5a 66 55 79 54 37 65 76 4d 57 34 5a 52 6d 51 55 51 73 64 67 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 20 68 74 74 70 3a 3b 72 65 70 6f 72 74 2d 75 72 69 20 68 74 Data Ascii: HTTP/1.1 204 No ContentContent-Type: text/html; charset=UTF-8Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-TVZfUyT7evMW4ZRmQUQsdg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49833	142.251.16.105	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:32 UTC	806	OUT	GET /images/shopping/deals/travel_and_luggage.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:32 UTC	671	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/pngCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"en
2023-11-22 16:22:32 UTC	581	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 d2 49 44 41 54 58 c3 ed 97 3d 8c 54 55 14 c7 7f f7 bd f9 7a ce f0 31 0b e2 e0 52 6c 96 98 98 e0 07 44 4d 94 c2 9a 04 13 12 2a 83 85 09 56 5b d8 10 3b 3a 13 13 2d 8c 95 8d b1 b5 40 13 51 41 1b 13 8b 0d 01 41 44 56 8d 11 66 09 41 32 10 76 d8 65 77 76 76 e6 7d dc 73 8e c5 9b 21 5a 3a 3c 69 f4 24 37 f7 dc bc 77 ef fd 9f ff fd 9f 93 7b e1 bf 6e 6e 92 49 73 73 73 af 8b c8 33 b5 5a ad 57 ab d5 16 5a ad d6 e9 63 c7 8e f9 49 d6 0a 26 99 74 f8 f0 e1 7a 14 45 ef 2d 2c 2c 7c 59 2e 97 9f 6d b7 db 8f 3d 54 da ba dd ee 91 b1 df e9 74 5e 5b 5c 5c dc 3a e9 5a 13 31 90 a6 69 3c f6 cd ac ea 9c e3 61 03 88 c6 be f7 be ee 9c b3 49 01 94 26 99 14 c7 f1 7d e0 83 c1 a0 e7 Data Ascii: PNGIHDR szzIDATX=TUz1RlDM*V[;:-@QAADVfA2vewvv}s!Z:<i$7w{nnIsss3ZWZcI&tzE-,,\|Y.m=Tt^[\\:Z1i<aI&}
2023-11-22 16:22:32 UTC	454	IN	Data Raw: 30 f0 96 79 74 38 b8 bf 99 20 08 e0 31 c4 0c 31 25 30 43 4d f1 38 54 15 51 d5 62 18 58 59 75 96 08 ba be 9e 33 80 c3 93 47 e9 dd a8 37 70 96 83 f1 66 b9 30 55 ac 18 06 ba ab 2e 4d 52 b4 5c 41 47 00 74 44 b3 57 c5 30 94 51 f4 a6 64 6a 48 e0 c8 4c 8b 01 40 2f 96 6c 63 1d 2b 55 51 33 64 4c 3b 8a 18 08 e4 59 61 0e 31 25 c5 10 02 34 70 71 31 0c f4 e2 41 9a c4 d8 ea c6 28 52 10 46 62 73 b9 af ce e5 d4 43 ae 81 5c a8 49 21 00 34 4b 7d 9c 66 58 6f 30 a2 3b 4f 77 25 df 3c 6f 2e ff 66 90 61 28 0e 09 c3 b8 90 3a f0 ee ca ed 6a 66 86 4b 93 91 e2 c7 c7 a0 f7 c7 99 29 de 72 2d a4 a6 64 66 7f bb b8 3c 10 03 ed 24 a9 d5 82 90 9f 4a 4a 38 56 3f 90 99 51 1e a5 a2 c7 21 18 1e 25 35 25 20 60 c9 c7 dd 42 18 f8 78 ea f1 4e 50 ae 70 a3 bf 96 8b cc 04 c1 48 31 0c f0 06 9e 51 33 Data Ascii: 0yt8 11%0CM8TQbXYu3G7pf0U.MR\AGtDW0QdjHL@/lc+UQ3dL;Ya1%4pq1A(RFbsC\I!4K}fXo0;Ow%<o.fa(:jfK)r-df<$JJ8V?Q!%5% `BxNPpH1Q3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49834	142.251.16.105	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:32 UTC	801	OUT	GET /images/shopping/deals/baby_and_kids.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:32 UTC	670	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/pngCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"en
2023-11-22 16:22:32 UTC	582	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 36 49 44 41 54 78 01 ed d6 03 ac 6c 57 14 87 f1 ef bf f6 3e 33 57 b5 6d db 6e 9c 32 6c ac 86 0d 6a 5b 41 dd b0 0e 6a 04 b5 cd a0 76 a3 da 7e 7e 6f 66 ce de 6b 35 99 5b f3 61 c2 de df 61 b8 bf e3 c3 ff de 8c 19 99 c5 34 eb a3 59 99 1f e7 6e 98 88 43 d3 82 c1 61 91 ed 61 c6 9a 07 4a f5 59 1d b4 43 f4 fa 47 d5 b1 ee 87 a5 f8 13 c5 6b 9f 6e f3 fa ea bb 6e f8 25 ff 41 fc 87 d9 6f 7d 92 b3 db d1 26 4e 34 67 ed e2 2e f5 5a 7c ce 3c 9a d5 57 a6 5f 2b 1d 0f bc 14 18 ef e2 83 96 41 12 83 b6 46 09 6e b0 9c 4f 5c 67 af 4d 66 2d 55 c0 0f 6f 7e b4 b2 b9 6e f5 36 0e 1c 43 74 c6 1b 6a a9 78 c0 c2 cf bf c3 12 58 b7 4b ce 19 9b 1c 07 03 af 95 45 a5 a5 2d 85 04 e4 d0 Data Ascii: PNGIHDR szz6IDATxlW>3Wmn2lj[Ajv~~ofk5[aa4YnCaaJYCGknn%Ao}&N4g.Z\|<W_+AFnO\gMf-Uo~n6CtjxXKE-
2023-11-22 16:22:32 UTC	297	IN	Data Raw: a5 df 4a c1 90 97 8a 35 89 dc 64 6a a9 98 19 ee 0e c5 41 90 25 02 d3 48 ef 01 4b e6 d5 9d 52 2a 34 69 18 10 04 10 84 18 06 54 af 94 ea b8 43 84 4f 8d 34 80 88 8d cc 04 8d 11 c6 30 a4 fa 74 42 2d 95 5a 2b 61 c2 24 a8 4e 29 be d9 48 03 12 7e 7f 53 2b 1d 19 ee 01 02 af 95 b6 2d b8 02 4c 34 18 ea f5 b0 fe e0 eb dc 0e 9e 19 69 40 2e eb 9f 53 07 fd 27 e8 2d a2 63 06 12 ee 8e 35 09 49 64 8c 76 e1 42 72 d3 a9 2c 37 71 f8 d4 be 5b 7e c0 62 48 2c a6 f3 af 3b 9f b3 8f 3e e5 3d fa ed 11 04 43 72 07 c0 bd a2 e2 34 4d 03 29 dd 35 be eb 06 17 b1 98 8c c5 47 67 c7 f5 5f b3 a9 a9 57 cb bc f9 98 07 d9 12 c9 83 c6 45 bb a0 87 50 b8 e9 32 a6 8d 3e 40 52 78 5b ee e8 ac b4 12 d6 69 00 91 42 91 72 66 7c f9 49 6a 5b 3f 1a ef ae ff d2 e8 7f 4a 7f 27 72 ba 52 49 af 48 fa 81 89 f4 Data Ascii: J5djA%HKR*4iTCO40tB-Z+a$N)H~S+-L4i@.S'-c5IdvBr,7q[~bH,;>=Cr4M)5Gg_WEP2>@Rx[iBrf\|Ij[?J'rRIH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49835	142.251.16.105	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:32 UTC	800	OUT	GET /images/shopping/deals/pet_supplies.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:32 UTC	670	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 73 74 61 74 69 63 2d 6f 6e 2d 62 69 67 74 61 62 6c 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesContent-Type: image/pngCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"Report-To: {"group":"static-on-bigtable","max_age":2592000,"en
2023-11-22 16:22:32 UTC	582	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 03 47 49 44 41 54 78 01 ed d3 43 a0 2c 47 14 80 e1 bf aa 7b 7c 27 b6 6d db b6 93 4d 6c db b6 6d 6b 15 db 76 36 b1 ed e4 19 d7 73 a7 67 ba 70 4e 6c 6f c2 f9 b6 c5 23 fe 6e 1d 1d 1d 1d 1d 86 9f 70 83 3d 66 d8 a3 57 ef 44 68 1d 22 ca 94 c1 87 3b 25 f7 7b cf b7 e3 69 03 fc 49 af 5f 76 d0 26 85 5a e9 00 11 33 79 54 7b 5f 79 c2 a9 8e 9c 63 e3 3d 5a fc 40 ca 4f 7c fc c0 65 bb 48 ab ff d2 c1 e1 c3 4c 6c 7b 92 09 27 de ba 3e dd b4 b3 0d 7b e2 b2 27 34 d2 c4 d8 60 8d 01 d4 a8 a2 20 62 8c 0d 2a 3e 57 35 7d 46 e3 84 2a 01 d7 33 7a 01 31 85 dd 1a a3 c6 58 97 65 98 a4 30 47 36 94 2f ee b2 fe 15 8a d5 89 f4 17 33 30 e2 b9 47 d3 ee 57 ee 1b 95 8d f9 64 f2 90 b7 11 5b Data Ascii: PNGIHDR szzGIDATxC,G{\|'mMlmkv6sgpNlo#np=fWDh";%{iI_v&Z3yT{_yc=Z@O\|eHLl{'>{'4` b>W5}F3z1Xe0G6/30GWd[
2023-11-22 16:22:32 UTC	314	IN	Data Raw: 9f 9c 7a b9 88 28 b4 ec c4 61 30 67 ae 0d 8e bd e2 a3 5f 2c c1 b0 67 ef 2d b7 7a bb e7 f4 3e 27 2a 98 b4 44 a5 5e a5 af b7 41 a0 8c cb 3d 79 ee 89 5a 44 b0 44 ca 78 49 70 ce 63 12 30 c5 0a 5e 53 62 34 0c f6 34 98 6c e2 0a 95 4a 95 68 0a 84 e0 89 cd fe d4 9a 64 8e 5f 2d c1 64 b3 2f 94 8f 79 e9 b1 e1 60 66 c2 18 42 cb d3 68 04 0a 13 54 70 3d 6d 82 80 31 02 a2 88 2a 18 8b a2 a4 49 82 aa 23 ea d7 0d 69 55 69 0c 09 93 d7 ab 58 20 cb 1d b8 48 5f 23 0b 95 19 66 78 fb 37 4b f0 c4 b9 07 6f e6 7b 3e bb c1 4a 0b c4 31 26 2b d3 37 94 9f 3c e3 1c 73 de 6c d5 2b 49 2a 1a 9d f7 6d 8f 8f 41 53 9b e0 83 27 b5 96 dc 79 ac b5 68 08 de e5 7e 86 09 6b e9 bd 5d 3a 54 47 03 03 6d 43 bf d4 ce d9 e9 a2 db 0e fc cd 0f 00 dc 77 ea de ab bb 6c 68 6b ef 63 bd d1 18 b8 7d f3 e3 2f be Data Ascii: z(a0g_,g-z>'D^A=yZDDxIpc0^Sb44lJhd_-d/y`fBhTp=m1I#iUiX H_#fx7Ko{>J1&+7<sl+I*mAS'yh~k]:TGmCwlhkc}/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49827	142.250.219.195	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:34 UTC	1165	OUT	GET /verify/ANsg4T4vl-KHXQW9-SjI6_C6JcNeQ_UWaBUCq0EAVt5LXbFkmK9EZOm5aErfLuF-wr54JPYS1yIpVGujBrT_cg_tyQ_CnW-qVzchUxGo5qgmK_AsvbO2 HTTP/1.1 Host: id.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
2023-11-22 16:22:34 UTC	829	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 33 34 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 46 72 69 2c 20 30 31 20 4a 61 6e 20 31 39 39 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e Data Ascii: HTTP/1.1 204 No ContentContent-Type: text/plain; charset=UTF-8Date: Wed, 22 Nov 2023 16:22:34 GMTPragma: no-cacheExpires: Fri, 01 Jan 1990 00:00:00 GMTCache-Control: no-cache, no-store, must-revalidateCross-Origin-Resource-Policy: cross-origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49836	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:35 UTC	1975	OUT	POST /gen_204?atyp=csi&ei=xSpeZdzvEPyy5NoPhfSymAc&s=web&t=all&wh=907&frtp=594&imn=104&ima=26&imad=17&imac=0&imf=0&aft=1&aftp=907&adh=tv.6&ime=8&imex=11&imeh=13&imea=0&imeb=32&imel=0&imed=0&scp=0&fld=1431&mem=ujhs.9,tjhs.12,jhsl.2173,dm.8&nv=ne.1,feid.080e36ac-210a-4412-a61d-63cb8f2dea90&net=dl.1350,ect.3g,rtt.400&hp=&p=bs.false&sys=hc.4&rt=hst.196,cbs.196,cbt.426,sct.579,aft.2391,afti.2391,frvt.2391,frts.794,afts.862,prt.1327,xjsls.1536,dcl.1543,aftqf.2393,xjses.5814,xjsee.5853,xjs.5853,lcp.942,fcp.399,wsrt.1575,cst.321,dnst.0,rdxt.876,rqst.1875,rspt.1509,sslt.320,rqstt.1209,unt.879,cstt.887,dit.3118&zx=1700670154732&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw
2023-11-22 16:22:35 UTC	1227	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 31 36 78 64 4e 71 44 7a 53 6e 51 4b 65 65 6b 56 47 63 4b 56 38 51 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 20 68 74 74 70 3a 3b 72 65 70 6f 72 74 2d 75 72 69 20 68 74 Data Ascii: HTTP/1.1 204 No ContentContent-Type: text/html; charset=UTF-8Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-16xdNqDzSnQKeekVGcKV8Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49839	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:35 UTC	1489	OUT	GET /compressiontest/gzip.html HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0
2023-11-22 16:22:36 UTC	1734	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 33 36 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 46 72 69 2c 20 30 31 20 4a 61 6e 20 31 39 39 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 73 63 Data Ascii: HTTP/1.1 200 OKContent-Type: text/html; charset=UTF-8Date: Wed, 22 Nov 2023 16:22:36 GMTPragma: no-cacheExpires: Fri, 01 Jan 1990 00:00:00 GMTCache-Control: no-cache, must-revalidateContent-Security-Policy: object-src 'none';base-uri 'self';sc
2023-11-22 16:22:36 UTC	186	IN	Data Raw: 30 30 30 30 30 30 30 31 0d 0a 1f 0d 0a 30 30 30 30 30 30 30 31 0d 0a 8b 0d 0a 30 30 30 30 30 30 30 31 0d 0a 08 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 00 0d 0a 30 30 30 30 30 30 30 31 0d 0a 02 0d 0a 30 30 30 30 30 30 30 31 0d 0a ff 0d 0a 30 30 30 30 30 30 30 31 0d 0a b3 0d 0a 30 30 30 30 30 30 30 31 0d 0a 51 0d 0a 30 31 37 0d 0a 4c c9 4f 2e a9 2c 48 55 c8 28 c9 cd b1 03 00 48 ec b9 87 0f 00 00 00 0d 0a Data Ascii: 000000010000000100000001000000010000000100000001000000010000000100000001000000010000000100000001Q017LO.,HU(H
2023-11-22 16:22:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49838	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:35 UTC	1513	OUT	GET /complete/search?q&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=2&hl=en&authuser=0&pq=shop%20deals&psi=xSpeZdzvEPyy5NoPhfSymAc.1700670154779&dpr=1&ofp=GNili-aT8dTX-AEYq6v4uKT5pbUGGJy7yeSa--vGyQEYhNjxudn_8qk4GLPEg_rl1d7Ocw&nolsbt=1 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw
2023-11-22 16:22:36 UTC	1737	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 33 36 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 43 6f 6e Data Ascii: HTTP/1.1 200 OKX-Content-Type-Options: nosniffDate: Wed, 22 Nov 2023 16:22:36 GMTPragma: no-cacheExpires: -1Cache-Control: no-cache, must-revalidateContent-Type: application/json; charset=UTF-8Strict-Transport-Security: max-age=31536000Con
2023-11-22 16:22:36 UTC	1737	IN	Data Raw: 38 65 34 0d 0a 29 5d 7d 27 0a 5b 5b 5b 22 76 65 74 65 72 61 6e 73 20 64 61 79 22 2c 30 2c 5b 35 31 32 2c 36 35 30 2c 33 36 32 2c 33 30 38 2c 36 37 5d 2c 7b 22 7a 6c 22 3a 39 30 30 30 30 7d 5d 2c 5b 22 61 71 69 22 2c 30 2c 5b 35 31 32 2c 36 35 30 2c 33 36 32 2c 33 30 38 2c 36 37 5d 2c 7b 22 7a 6c 22 3a 39 30 30 30 30 7d 5d 2c 5b 22 73 68 6f 70 20 73 6e 65 61 6b 65 72 73 20 64 65 61 6c 73 22 2c 30 2c 5b 35 31 32 2c 36 35 30 2c 33 36 32 2c 33 30 38 2c 36 37 5d 2c 7b 22 7a 6c 22 3a 39 30 30 30 30 7d 5d 2c 5b 22 73 68 6f 70 20 64 65 61 6c 73 20 6f 6e 20 74 6f 79 73 20 5c 75 30 30 32 36 61 6d 70 3b 20 67 61 6d 65 73 22 2c 30 2c 5b 35 31 32 2c 36 35 30 2c 33 36 32 2c 33 30 38 2c 36 37 5d 2c 7b 22 7a 6c 22 3a 39 30 30 30 30 7d 5d 2c 5b 22 73 68 6f 70 20 74 76 73 Data Ascii: 8e4)]}'[[["veterans day",0,[512,650,362,308,67],{"zl":90000}],["aqi",0,[512,650,362,308,67],{"zl":90000}],["shop sneakers deals",0,[512,650,362,308,67],{"zl":90000}],["shop deals on toys \u0026amp; games",0,[512,650,362,308,67],{"zl":90000}],["shop tvs
2023-11-22 16:22:36 UTC	546	IN	Data Raw: 69 69 71 61 73 4c 47 6d 7a 38 51 68 4f 38 59 4d 48 56 31 2b 6c 48 55 54 53 49 6e 62 6e 59 51 39 48 53 37 4d 58 41 52 6d 2f 74 61 4a 4a 4d 62 4a 65 30 69 4b 6d 5a 31 38 64 4c 6b 63 31 38 39 4f 78 70 46 43 61 54 4d 47 4c 35 54 65 6f 32 78 71 32 77 33 47 6d 59 34 4c 6f 72 6f 6c 6f 77 55 68 31 4c 55 4a 66 7a 63 57 2b 52 78 4d 72 64 48 59 6c 31 6c 4e 76 4d 38 71 62 4c 45 66 67 44 6d 68 4b 48 6f 67 6a 66 37 42 70 7a 6b 51 45 5a 47 45 50 77 6f 42 64 41 47 54 42 51 6d 32 78 2f 68 42 71 6c 44 59 67 71 50 75 58 36 47 46 50 59 73 70 4d 78 37 62 6f 66 6f 49 66 39 78 42 2b 4a 37 44 58 47 79 77 6f 6f 6c 2b 44 57 7a 74 52 6e 31 79 64 58 67 55 38 66 71 34 42 73 33 30 43 71 44 70 44 33 6d 54 4b 72 67 70 54 75 61 78 48 59 5a 59 70 36 7a 53 79 57 69 4f 43 70 43 51 68 45 45 Data Ascii: iiqasLGmz8QhO8YMHV1+lHUTSInbnYQ9HS7MXARm/taJJMbJe0iKmZ18dLkc189OxpFCaTMGL5Teo2xq2w3GmY4LorolowUh1LUJfzcW+RxMrdHYl1lNvM8qbLEfgDmhKHogjf7BpzkQEZGEPwoBdAGTBQm2x/hBqlDYgqPuX6GFPYspMx7bofoIf9xB+J7DXGywool+DWztRn1ydXgU8fq4Bs30CqDpD3mTKrgpTuaxHYZYp6zSyWiOCpCQhEE
2023-11-22 16:22:36 UTC	1252	IN	Data Raw: 35 35 33 36 0d 0a 34 4d 33 41 2f 48 43 42 5a 32 78 42 52 41 66 35 48 4c 57 71 64 66 2b 4a 79 6f 6c 41 47 78 73 44 4c 79 4a 67 7a 73 6f 71 72 76 54 57 59 68 66 63 75 6d 44 7a 66 65 45 54 54 49 6c 4c 34 75 6d 48 4e 4b 47 44 52 6e 69 58 32 49 4f 78 65 58 6d 43 68 73 57 78 65 61 33 69 74 45 53 30 73 4b 54 54 49 78 41 5a 61 77 4c 53 75 50 4e 4a 4d 68 39 72 68 6f 36 51 74 38 67 46 76 54 72 67 6e 54 49 41 72 47 7a 6f 67 78 61 36 5a 55 52 58 75 58 46 55 6a 55 44 5a 66 65 6a 64 72 73 47 4d 2b 79 65 6e 57 73 71 6b 64 56 30 34 66 56 41 72 69 37 53 69 68 54 6a 4b 72 55 4f 5a 69 70 73 55 46 38 70 2b 6f 50 6b 64 4e 34 4a 74 6a 43 69 6d 66 76 43 6d 50 51 71 2b 70 33 53 41 73 73 77 63 51 48 6b 49 79 45 72 53 38 73 73 71 4f 6c 4b 49 69 30 6e 64 6a 34 6e 73 76 50 62 64 38 Data Ascii: 55364M3A/HCBZ2xBRAf5HLWqdf+JyolAGxsDLyJgzsoqrvTWYhfcumDzfeETTIlL4umHNKGDRniX2IOxeXmChsWxea3itES0sKTTIxAZawLSuPNJMh9rho6Qt8gFvTrgnTIArGzogxa6ZURXuXFUjUDZfejdrsGM+yenWsqkdV04fVAri7SihTjKrUOZipsUF8p+oPkdN4JtjCimfvCmPQq+p3SAsswcQHkIyErS8ssqOlKIi0ndj4nsvPbd8
2023-11-22 16:22:36 UTC	1252	IN	Data Raw: 53 2b 64 43 79 6c 75 5a 49 6e 6d 62 57 56 35 73 34 62 69 45 73 55 43 56 68 36 6b 4b 4e 51 66 45 46 65 56 33 46 4d 4d 32 55 36 65 45 6d 52 6f 6e 68 4e 42 6d 41 48 6a 4c 75 43 44 56 4a 74 38 4e 77 38 63 36 78 4a 41 6d 67 30 4c 4d 58 48 59 55 42 45 6d 45 49 51 33 5a 56 62 76 75 79 47 38 56 32 4a 39 65 33 6d 53 30 63 6d 72 66 35 4c 55 79 51 75 45 71 65 37 48 39 53 35 74 5a 55 38 4d 32 58 56 43 6f 59 55 42 54 56 53 44 51 54 49 4c 69 47 4a 48 53 6d 50 5a 41 63 31 6a 42 52 50 37 68 53 4d 46 72 39 6f 68 6e 72 62 63 55 53 77 50 79 42 57 4f 78 62 68 34 44 36 74 74 4f 4a 64 50 54 78 6c 51 46 49 78 57 36 76 4c 32 63 73 2b 7a 49 36 5a 52 6d 73 6c 72 79 35 77 67 68 55 63 72 54 61 2b 76 79 70 7a 58 2b 65 73 57 64 65 33 31 50 4d 4a 63 6b 57 6a 67 69 30 62 42 51 66 4f 2f Data Ascii: S+dCyluZInmbWV5s4biEsUCVh6kKNQfEFeV3FMM2U6eEmRonhNBmAHjLuCDVJt8Nw8c6xJAmg0LMXHYUBEmEIQ3ZVbvuyG8V2J9e3mS0cmrf5LUyQuEqe7H9S5tZU8M2XVCoYUBTVSDQTILiGJHSmPZAc1jBRP7hSMFr9ohnrbcUSwPyBWOxbh4D6ttOJdPTxlQFIxW6vL2cs+zI6ZRmslry5wghUcrTa+vypzX+esWde31PMJckWjgi0bBQfO/
2023-11-22 16:22:36 UTC	1252	IN	Data Raw: 20 77 68 69 74 65 20 73 6f 78 22 2c 34 36 2c 5b 33 2c 31 34 33 2c 33 35 37 2c 33 36 32 2c 33 30 38 2c 33 39 36 5d 2c 7b 22 6c 6d 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 65 6e 63 72 79 70 74 65 64 2d 74 62 6e 30 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 64 2d 69 6d 61 67 65 3f 71 5c 75 30 30 33 64 74 62 6e 3a 41 4e 64 39 47 63 51 4a 59 55 48 78 69 56 6c 53 4f 33 6e 32 59 6b 71 54 78 72 55 45 6c 32 33 4e 61 5a 2d 79 4c 4d 4d 66 77 73 59 5a 44 6b 33 63 35 5a 6d 39 72 65 53 47 45 47 4d 36 49 43 62 54 70 63 6e 74 31 4e 62 56 69 6c 51 52 51 52 55 7a 43 4a 42 4f 2d 35 75 55 41 30 52 5f 36 6c 39 61 55 65 7a 46 5c 75 30 30 32 36 73 5c 75 30 30 33 64 31 39 22 2c 22 68 74 74 70 73 3a 2f 2f 65 6e 63 72 79 70 74 65 64 2d 74 62 6e 30 2e 67 73 74 61 74 69 Data Ascii: white sox",46,[3,143,357,362,308,396],{"lm":["https://encrypted-tbn0.gstatic.com/licensed-image?q\u003dtbn:ANd9GcQJYUHxiVlSO3n2YkqTxrUEl23NaZ-yLMMfwsYZDk3c5Zm9reSGEGM6ICbTpcnt1NbVilQRQRUzCJBO-5uUA0R_6l9aUezF\u0026s\u003d19","https://encrypted-tbn0.gstati
2023-11-22 16:22:36 UTC	1252	IN	Data Raw: 77 44 75 4b 49 69 41 69 49 67 49 69 49 43 49 69 41 69 49 67 49 69 49 43 49 69 41 69 49 67 49 69 49 43 49 69 41 69 49 67 49 69 49 43 49 69 41 69 49 67 49 69 49 43 49 69 41 69 49 67 49 68 30 58 4d 2b 30 58 74 54 70 73 42 33 6d 47 34 43 59 71 76 45 2f 44 4a 49 54 6d 69 70 76 57 33 69 64 2b 48 6c 7a 36 45 4a 72 74 46 74 4e 67 2b 7a 56 4d 79 66 47 71 36 4f 6d 62 49 53 49 32 6b 46 7a 33 6b 63 63 72 51 43 54 39 46 7a 62 46 65 32 68 39 52 4d 61 62 5a 62 42 5a 4b 6c 35 76 6c 6c 71 64 4c 2b 59 59 33 57 33 71 51 75 50 34 6a 69 46 64 69 31 59 2b 73 78 4f 72 6c 71 71 6c 2f 69 6b 6c 64 63 2b 67 35 41 65 51 30 57 35 77 53 4f 53 58 5a 37 45 34 71 54 4b 2b 70 64 4c 47 54 45 30 32 63 36 4d 45 58 39 6a 77 57 65 57 38 30 72 75 48 52 30 32 47 4d 75 54 6a 4b 53 79 62 63 39 6f Data Ascii: wDuKIiAiIgIiICIiAiIgIiICIiAiIgIiICIiAiIgIiICIiAiIgIiICIiAiIgIh0XM+0XtTpsB3mG4CYqvE/DJITmipvW3id+Hlz6EJrtFtNg+zVMyfGq6OmbISI2kFz3kccrQCT9FzbFe2h9RMabZbBZKl5vllqdL+YY3W3qQuP4jiFdi1Y+sxOrlqql/ikldc+g5AeQ0W5wSOSXZ7E4qTK+pdLGTE02c6MEX9jwWeW80ruHR02GMuTjKSybc9o
2023-11-22 16:22:36 UTC	1252	IN	Data Raw: 47 50 76 41 61 6a 31 43 74 46 6f 6c 6c 66 44 61 76 64 34 72 63 69 76 71 6e 73 38 71 6e 56 75 77 2b 42 7a 50 4f 5a 2f 77 63 62 48 45 38 79 30 5a 54 2b 59 58 79 78 6d 7a 41 58 58 30 70 32 4f 31 45 55 33 5a 39 68 72 59 6e 35 6a 43 36 61 4e 34 35 67 69 52 78 31 48 4c 51 67 2b 68 43 75 78 54 56 45 52 41 52 45 51 45 52 45 42 45 52 41 52 45 51 45 52 45 42 45 52 41 58 4d 4f 33 7a 44 4b 71 73 32 61 6f 71 75 6c 69 66 4b 32 69 71 53 36 59 4d 46 38 72 48 4e 49 7a 48 79 42 74 36 58 58 54 31 48 39 74 63 52 71 4d 4e 77 63 50 6f 70 42 48 50 4c 4d 32 4e 72 39 4e 4c 33 4a 34 2b 51 4b 54 32 57 72 57 62 57 69 49 66 4c 75 47 55 6e 78 31 5a 48 43 37 77 4f 4f 74 6c 4e 52 52 4f 69 62 48 44 54 4d 61 44 70 77 48 41 4c 78 77 30 70 5a 74 5a 4f 34 73 59 33 4e 6d 6c 73 78 67 61 30 5a Data Ascii: GPvAaj1CtFollfDavd4rcivqns8qnVuw+BzPOZ/wcbHE8y0ZT+YXyxmzAXX0p2O1EU3Z9hrYn5jC6aN45giRx1HLQg+hCuxTVERAREQEREBERAREQEREBERAXMO3zDKqs2aoqulifK2iqS6YMF8rHNIzHyBt6XXT1H9tcRqMNwcPopBHPLM2Nr9NL3J4+QKT2WrWbWiIfLuGUnx1ZHC7wOOtlNRROibHDTMaDpwHALxw0pZtZO4sY3Nmlsxga0Z
2023-11-22 16:22:36 UTC	1252	IN	Data Raw: 4f 53 5a 38 70 72 69 47 4b 4e 6f 61 59 79 35 43 35 31 75 36 4c 32 75 56 45 71 74 6d 4a 59 30 39 32 39 65 49 6f 69 65 41 34 57 36 4c 62 62 36 6e 78 4b 41 4f 6b 76 47 34 45 67 61 63 76 4e 5a 48 59 57 77 45 75 45 72 38 6e 45 74 4a 30 4a 57 66 69 58 5a 57 49 73 30 44 4d 45 72 59 51 34 51 31 55 59 59 57 33 63 4d 7a 68 59 2f 52 57 75 77 69 71 70 35 52 55 55 4d 34 63 35 76 48 4b 50 72 6f 74 33 4c 4e 68 45 4c 6d 73 63 49 37 38 78 5a 57 50 70 4b 4f 70 37 39 47 4e 32 33 6d 49 67 57 4b 30 36 30 76 2f 48 6a 39 50 52 67 32 4f 53 54 6a 63 56 6a 41 32 56 67 30 63 4f 44 31 6e 78 4b 74 6a 68 68 63 38 76 48 44 69 76 41 31 74 50 54 53 6c 70 61 51 53 32 7a 44 66 6d 6f 33 56 56 55 74 64 56 4d 70 49 48 66 78 33 74 69 6a 75 66 76 4f 64 6c 46 2f 63 70 57 4e 73 4d 6c 75 44 70 6d Data Ascii: OSZ8priGKNoaYy5C51u6L2uVEqtmJY0929eIoieA4W6Lbb6nxKAOkvG4EgacvNZHYWwEuEr8nEtJ0JWfiXZWIs0DMErYQ4Q1UYYW3cMzhY/RWuwiqp5RUUM4c5vHKProt3LNhELmscI78xZWPpKOp79GN23mIgWK060v/Hj9PRg2OSTjcVjA2Vg0cOD1nxKtjhhc8vHDivA1tPTSlpaQS2zDfmo3VVUtdVMpIHfx3tijufvOdlF/cpWNsMluDpm
2023-11-22 16:22:36 UTC	1252	IN	Data Raw: 4b 54 67 43 66 49 38 44 2f 38 41 46 72 63 48 32 67 72 39 6e 35 54 53 56 63 47 2b 67 59 36 78 6a 4a 73 35 76 38 70 36 66 36 30 58 50 57 65 58 62 33 44 30 62 32 6a 48 62 6c 36 6e 37 2b 66 50 34 39 4f 6c 77 39 30 42 5a 58 52 74 65 33 55 42 52 32 6a 32 73 77 65 72 61 30 69 70 33 44 37 65 43 63 5a 62 65 2f 44 38 31 76 36 65 72 70 36 69 4d 4f 68 6e 69 6b 42 2b 52 34 50 36 4b 2b 70 52 79 72 62 76 45 71 4e 70 6e 44 54 4d 53 33 6b 4f 69 71 49 67 33 75 67 63 46 6b 33 6d 56 70 63 34 32 48 6e 79 43 78 53 56 56 50 41 77 76 71 4a 34 34 6d 6a 6e 49 38 4e 48 35 71 56 64 51 74 71 47 67 43 31 2b 4f 6d 71 31 64 63 2b 47 6b 70 70 4a 36 6c 2b 37 69 59 32 35 63 37 2f 58 46 65 4c 46 74 72 38 4d 67 4a 46 4f 38 31 63 6c 74 42 46 6f 33 33 63 66 32 75 6f 6a 56 31 39 52 6a 74 51 36 Data Ascii: KTgCfI8D/8AFrcH2gr9n5TSVcG+gY6xjJs5v8p6f60XPWeXb3D0b2jHbl6n7+fP49Olw90BZXRte3UBR2j2swera0ip3D7eCcZbe/D81v6erp6iMOhnikB+R4P6K+pRyrbvEqNpnDTMS3kOiqIg3ugcFk3mVpc42HnyCxSVVPAwvqJ44mjnI8NH5qVdQtqGgC1+Omq1dc+GkppJ6l+7iY25c7/XFeLFtr8MgJFO81cltBFo33cf2uojV19RjtQ6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49840	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:35 UTC	1936	OUT	GET /complete/search?q=shop%20deals&cp=0&client=desktop-gws-wiz-on-focus-serp&xssi=t&gs_pcrt=3&hl=en&authuser=0&pq=shop%20deals&psi=xSpeZdzvEPyy5NoPhfSymAc.1700670154779&dpr=1&ofp=EAEY2KWL5pPx1Nf4ARirq_i4pPmltQYYnLvJ5Jr768bJARiE2PG52f_yqTgYs8SD-uXV3s5zMrIBChsKGXNob3AgZGVhbHMgb24gZWxlY3Ryb25pY3MKEwoRc2hvcCBkZWFscyBvbmxpbmUKFAoSc2hvcCBkZWFscyBsYXB0b3BzChkKF3Nob3AgZGVhbHMgcmVmcmlnZXJhdG9yChEKD3Nob3AgZGVhbHMgbGVnbwoSChBzaG9wIGRlYWxzIHRpcmVzChMKEXNob3AgZGVhbHMgbmVhcmJ5Cg8KDXNob3AgZGVhbHMgdHYQRzJ1CigKJldoYXQgZGF5IGlzIEJsYWNrIEZyaWRheSAyMDIzIFdhbG1hcnQ_CiYKJFdoYXQgZGF5IGlzIEJsYWNrIEZyaWRheSBzYWxlcyAyMDIzPwoeChxXaWxsIEFtYXpvbiBkbyBCbGFjayBGcmlkYXk_EOQC HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw
2023-11-22 16:22:36 UTC	1737	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 33 36 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 43 6f 6e Data Ascii: HTTP/1.1 200 OKX-Content-Type-Options: nosniffDate: Wed, 22 Nov 2023 16:22:36 GMTPragma: no-cacheExpires: -1Cache-Control: no-cache, must-revalidateContent-Type: application/json; charset=UTF-8Strict-Transport-Security: max-age=31536000Con
2023-11-22 16:22:36 UTC	766	IN	Data Raw: 32 66 37 0d 0a 29 5d 7d 27 0a 5b 5b 5b 22 73 68 6f 70 20 64 65 61 6c 73 5c 75 30 30 33 63 62 5c 75 30 30 33 65 20 6f 6e 20 65 6c 65 63 74 72 6f 6e 69 63 73 5c 75 30 30 33 63 5c 2f 62 5c 75 30 30 33 65 22 2c 30 2c 5b 37 31 2c 35 39 38 2c 34 33 32 5d 5d 2c 5b 22 73 68 6f 70 20 64 65 61 6c 73 5c 75 30 30 33 63 62 5c 75 30 30 33 65 20 6f 6e 6c 69 6e 65 5c 75 30 30 33 63 5c 2f 62 5c 75 30 30 33 65 22 2c 30 2c 5b 37 31 2c 35 39 38 2c 34 33 32 5d 5d 2c 5b 22 73 68 6f 70 20 64 65 61 6c 73 5c 75 30 30 33 63 62 5c 75 30 30 33 65 20 6c 61 70 74 6f 70 73 5c 75 30 30 33 63 5c 2f 62 5c 75 30 30 33 65 22 2c 30 2c 5b 37 31 2c 35 39 38 2c 34 33 32 5d 5d 2c 5b 22 73 68 6f 70 20 64 65 61 6c 73 5c 75 30 30 33 63 62 5c 75 30 30 33 65 20 72 65 66 72 69 67 65 72 61 74 6f 72 5c Data Ascii: 2f7)]}'[[["shop deals\u003cb\u003e on electronics\u003c\/b\u003e",0,[71,598,432]],["shop deals\u003cb\u003e online\u003c\/b\u003e",0,[71,598,432]],["shop deals\u003cb\u003e laptops\u003c\/b\u003e",0,[71,598,432]],["shop deals\u003cb\u003e refrigerator\
2023-11-22 16:22:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49837	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:35 UTC	1599	OUT	GET /xjs/_/js/md=1/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw
2023-11-22 16:22:36 UTC	818	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 4f 72 69 67 69 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 74 72 75 73 74 65 64 2d 74 79 70 65 73 2d 66 6f 72 20 27 73 63 72 69 70 74 27 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 67 77 73 2d 74 65 61 6d 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesVary: Accept-Encoding, OriginContent-Type: text/javascript; charset=UTF-8Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-teamCross-Origin-R
2023-11-22 16:22:36 UTC	434	IN	Data Raw: 7b 22 6d 6f 64 75 6c 65 47 72 61 70 68 22 3a 22 71 75 61 6e 74 75 6d 2f 74 37 78 67 49 65 2f 77 73 39 54 6c 63 2f 63 45 74 39 30 62 2f 71 64 64 67 4b 65 2f 79 78 54 63 68 66 2f 73 79 36 78 2f 73 79 36 79 2f 73 79 36 7a 3a 36 2c 37 2f 73 79 37 30 2f 78 51 74 5a 62 3a 35 2c 38 2c 39 2f 73 79 37 31 2f 52 39 59 48 4a 63 3a 38 2c 62 2f 4b 55 4d 37 5a 2f 77 72 7a 45 58 62 2f 54 78 43 4a 66 64 2f 57 56 44 79 4b 65 2f 73 79 37 32 2f 56 6a 39 68 70 64 3a 67 2c 68 2f 74 61 66 50 72 66 2f 64 74 6c 30 68 64 2f 6c 4c 51 57 46 65 2f 49 6c 31 4d 34 62 2f 65 48 44 66 6c 2f 46 4f 4e 45 64 66 3a 6b 2f 4a 69 56 4c 6a 64 3a 6b 2f 46 41 55 64 57 3a 6b 2f 64 4d 5a 6b 33 65 3a 6e 2f 6f 66 6a 56 6b 62 2f 71 61 53 33 67 64 2f 54 39 79 35 44 64 2f 79 69 4c 67 36 65 2f 51 37 42 61 Data Ascii: {"moduleGraph":"quantum/t7xgIe/ws9Tlc/cEt90b/qddgKe/yxTchf/sy6x/sy6y/sy6z:6,7/sy70/xQtZb:5,8,9/sy71/R9YHJc:8,b/KUM7Z/wrzEXb/TxCJfd/WVDyKe/sy72/Vj9hpd:g,h/tafPrf/dtl0hd/lLQWFe/Il1M4b/eHDfl/FONEdf:k/JiVLjd:k/FAUdW:k/dMZk3e:n/ofjVkb/qaS3gd/T9y5Dd/yiLg6e/Q7Ba
2023-11-22 16:22:36 UTC	1252	IN	Data Raw: 69 70 66 3a 31 6a 2f 73 79 37 67 2f 73 79 37 68 3a 31 6c 2f 73 79 37 66 3a 31 6a 2c 31 6d 2f 73 79 37 6a 2f 73 79 37 69 3a 31 6e 2c 31 6f 2f 73 79 37 6b 2f 4e 77 48 30 48 3a 31 6b 2c 31 70 2f 73 79 37 6c 3a 31 68 2f 73 79 37 6d 2f 67 79 63 68 67 3a 31 69 2c 31 72 2c 31 73 2c 31 74 2f 55 6c 6d 6d 72 64 3a 31 75 2f 72 4a 6d 4a 72 63 3a 31 61 2c 31 66 2f 47 48 41 65 41 63 2f 57 74 36 76 6a 66 3a 31 66 2f 6c 73 6a 56 6d 63 3a 31 65 2f 49 5a 54 36 33 2f 56 67 64 36 68 62 2f 73 79 37 6f 2f 73 79 37 70 2f 73 79 37 71 3a 32 32 2c 32 33 2f 59 4e 6a 47 44 64 3a 32 34 2f 69 46 51 79 4b 66 2f 73 79 37 73 2f 73 79 37 74 3a 32 37 2f 73 79 37 72 3a 32 30 2c 32 34 2c 32 38 2f 50 72 50 59 52 64 3a 32 35 2c 32 39 2f 73 79 37 75 2f 76 66 75 4e 4a 66 3a 32 62 2f 73 79 37 76 Data Ascii: ipf:1j/sy7g/sy7h:1l/sy7f:1j,1m/sy7j/sy7i:1n,1o/sy7k/NwH0H:1k,1p/sy7l:1h/sy7m/gychg:1i,1r,1s,1t/Ulmmrd:1u/rJmJrc:1a,1f/GHAeAc/Wt6vjf:1f/lsjVmc:1e/IZT63/Vgd6hb/sy7o/sy7p/sy7q:22,23/YNjGDd:24/iFQyKf/sy7s/sy7t:27/sy7r:20,24,28/PrPYRd:25,29/sy7u/vfuNJf:2b/sy7v
2023-11-22 16:22:36 UTC	1252	IN	Data Raw: 33 2c 35 34 2f 73 69 4b 6e 51 64 3a 35 30 2c 35 35 2f 70 58 64 52 59 62 2f 73 79 39 36 2f 65 35 71 46 4c 63 3a 35 35 2c 35 38 2f 64 49 6f 53 42 62 2f 73 79 39 37 2f 53 70 73 66 53 62 3a 32 65 2c 35 62 2f 5a 67 47 67 39 62 2f 73 79 39 62 2f 73 79 39 69 2f 73 79 39 6a 2f 73 79 39 64 2f 73 79 39 38 3a 35 65 2c 35 66 2c 35 67 2c 35 68 2f 73 79 39 63 2f 73 79 39 67 2f 73 79 39 39 3a 35 66 2c 35 67 2c 35 6a 2c 35 6b 2f 73 79 39 68 2f 73 79 39 65 2f 73 79 39 6b 2f 73 79 39 6c 2f 73 79 39 6d 2f 73 79 39 61 3a 35 69 2c 35 6c 2c 35 6d 2c 35 6e 2c 35 6f 2c 35 70 2c 35 71 2f 73 79 39 66 3a 35 68 2c 35 6b 2c 35 6e 2f 73 79 39 6e 3a 35 68 2c 35 6f 2f 73 79 39 6f 3a 35 6b 2c 35 71 2f 73 79 39 70 2f 73 79 39 72 2f 73 79 39 73 2f 73 79 39 74 3a 35 78 2f 73 79 39 75 3a 35 Data Ascii: 3,54/siKnQd:50,55/pXdRYb/sy96/e5qFLc:55,58/dIoSBb/sy97/SpsfSb:2e,5b/ZgGg9b/sy9b/sy9i/sy9j/sy9d/sy98:5e,5f,5g,5h/sy9c/sy9g/sy99:5f,5g,5j,5k/sy9h/sy9e/sy9k/sy9l/sy9m/sy9a:5i,5l,5m,5n,5o,5p,5q/sy9f:5h,5k,5n/sy9n:5h,5o/sy9o:5k,5q/sy9p/sy9r/sy9s/sy9t:5x/sy9u:5
2023-11-22 16:22:36 UTC	1252	IN	Data Raw: 38 72 2c 38 74 2f 73 79 63 70 3a 38 62 2f 73 79 63 71 2f 73 79 64 35 3a 38 6a 2f 73 79 63 77 3a 32 32 2c 37 79 2c 38 38 2c 38 6c 2c 38 70 2c 38 72 2c 38 76 2c 38 77 2c 38 78 2f 73 79 64 36 3a 38 6a 2f 73 79 64 37 3a 38 39 2c 38 61 2f 73 79 63 78 3a 32 32 2c 37 79 2c 38 6c 2c 38 72 2c 38 76 2c 38 77 2c 38 7a 2c 39 30 2f 73 79 64 38 3a 38 6a 2f 73 79 63 79 3a 32 32 2c 37 79 2c 38 6c 2c 38 72 2c 38 76 2c 38 77 2c 39 32 2f 73 79 64 39 3a 38 6a 2f 73 79 63 7a 3a 37 6c 2c 38 6c 2c 39 34 2f 73 79 63 6c 3a 37 76 2c 38 37 2f 73 79 64 61 3a 38 6a 2f 73 79 64 30 3a 32 32 2c 38 38 2c 38 6c 2c 38 72 2c 39 36 2c 39 37 2f 73 79 64 62 3a 38 6a 2f 73 79 64 31 3a 32 32 2c 38 38 2c 38 6c 2c 38 72 2c 39 36 2c 39 39 2f 73 79 64 63 3a 38 6a 2f 73 79 64 64 3a 35 76 2c 36 33 2f Data Ascii: 8r,8t/sycp:8b/sycq/syd5:8j/sycw:22,7y,88,8l,8p,8r,8v,8w,8x/syd6:8j/syd7:89,8a/sycx:22,7y,8l,8r,8v,8w,8z,90/syd8:8j/sycy:22,7y,8l,8r,8v,8w,92/syd9:8j/sycz:7l,8l,94/sycl:7v,87/syda:8j/syd0:22,88,8l,8r,96,97/sydb:8j/syd1:22,88,8l,8r,96,99/sydc:8j/sydd:5v,63/
2023-11-22 16:22:36 UTC	1252	IN	Data Raw: 61 2c 32 62 2c 62 73 2c 62 74 2f 6d 39 6f 56 2f 73 79 65 75 2f 76 37 68 48 30 62 3a 62 77 2f 73 79 65 76 2f 73 79 65 77 3a 62 79 2f 71 58 45 6f 50 3a 62 78 2c 62 7a 2f 77 58 38 4c 6a 62 3a 62 78 2c 62 7a 2f 73 34 42 64 48 65 3a 62 78 2c 62 7a 2f 48 38 63 4f 66 64 3a 62 78 2c 62 7a 2f 67 61 37 58 70 64 3a 63 33 2f 6b 48 56 53 55 62 3a 62 7a 2f 50 58 47 75 53 64 3a 62 78 2c 62 7a 2f 78 6b 6a 47 76 65 3a 62 78 2c 62 7a 2f 73 54 73 44 4d 63 2f 76 31 64 61 4d 2f 4c 4b 34 50 79 65 2f 73 79 65 78 2f 73 79 65 79 3a 63 62 2f 61 4c 55 66 50 3a 63 63 2f 77 51 6c 59 76 65 2f 61 52 6a 75 78 62 2f 73 79 66 31 3a 38 64 2f 73 79 66 32 2f 73 79 66 30 3a 63 67 2c 63 68 2f 75 78 4d 70 55 3a 31 74 2c 63 69 2f 43 6f 67 46 37 64 2f 73 79 66 33 3a 35 69 2c 35 6d 2c 35 74 2c 36 Data Ascii: a,2b,bs,bt/m9oV/syeu/v7hH0b:bw/syev/syew:by/qXEoP:bx,bz/wX8Ljb:bx,bz/s4BdHe:bx,bz/H8cOfd:bx,bz/ga7Xpd:c3/kHVSUb:bz/PXGuSd:bx,bz/xkjGve:bx,bz/sTsDMc/v1daM/LK4Pye/syex/syey:cb/aLUfP:cc/wQlYve/aRjuxb/syf1:8d/syf2/syf0:cg,ch/uxMpU:1t,ci/CogF7d/syf3:5i,5m,5t,6
2023-11-22 16:22:36 UTC	1252	IN	Data Raw: 68 61 3a 65 65 2c 65 66 2f 51 36 63 76 67 66 3a 66 69 2f 73 79 68 62 3a 65 65 2c 65 66 2f 77 6b 4c 37 68 3a 66 6b 2f 73 79 68 63 3a 65 66 2f 52 37 35 38 68 65 3a 66 6d 2f 73 79 68 64 3a 65 66 2f 4a 6a 52 34 4d 64 3a 66 6f 2f 73 79 68 65 3a 65 65 2c 65 66 2f 4b 42 75 46 63 66 3a 66 71 2f 73 79 68 66 3a 65 65 2f 73 70 62 37 55 62 3a 66 73 2f 73 79 68 67 3a 65 65 2f 55 55 6c 45 52 62 3a 66 75 2f 73 79 68 68 3a 65 6e 2f 44 55 6c 4d 42 64 3a 66 77 2f 73 79 68 69 2f 58 4b 54 4a 39 62 3a 66 79 2f 73 79 68 6a 3a 65 33 2f 73 79 68 6b 3a 65 33 2f 73 79 68 6c 2f 73 79 68 6d 3a 65 36 2c 67 30 2c 67 31 2c 67 32 2f 66 31 59 67 42 64 3a 67 33 2f 73 79 68 6e 2f 42 56 6c 68 6d 64 3a 67 35 2f 74 45 36 52 7a 64 2f 67 4f 35 46 71 65 3a 67 37 2f 70 68 65 63 62 63 2f 58 6b 30 Data Ascii: ha:ee,ef/Q6cvgf:fi/syhb:ee,ef/wkL7h:fk/syhc:ef/R758he:fm/syhd:ef/JjR4Md:fo/syhe:ee,ef/KBuFcf:fq/syhf:ee/spb7Ub:fs/syhg:ee/UUlERb:fu/syhh:en/DUlMBd:fw/syhi/XKTJ9b:fy/syhj:e3/syhk:e3/syhl/syhm:e6,g0,g1,g2/f1YgBd:g3/syhn/BVlhmd:g5/tE6Rzd/gO5Fqe:g7/phecbc/Xk0
2023-11-22 16:22:36 UTC	1252	IN	Data Raw: 54 45 66 3a 6a 33 2f 73 79 6a 67 3a 65 33 2f 77 37 79 73 67 3a 6a 35 2f 73 79 6a 68 3a 65 33 2f 54 33 71 38 57 64 3a 6a 37 2f 66 70 6c 51 78 63 3a 67 71 2f 76 50 69 37 39 63 3a 67 72 2f 46 58 55 64 77 3a 68 36 2f 73 79 6a 69 3a 65 33 2f 45 52 77 56 62 3a 6a 63 2f 73 79 6a 6a 3a 65 33 2f 65 54 76 35 39 65 3a 6a 65 2f 73 79 6a 6b 3a 65 33 2f 67 70 4e 33 34 63 3a 6a 67 2f 73 79 6a 6c 3a 65 33 2f 67 69 79 75 65 63 3a 6a 69 2f 73 79 6a 6d 3a 65 33 2f 41 33 65 57 44 62 3a 6a 6b 2f 73 79 6a 6e 3a 65 33 2f 61 67 76 55 59 64 3a 6a 6d 2f 73 79 6a 6f 3a 65 33 2f 6a 56 71 44 37 3a 6a 6f 2f 73 79 6a 70 3a 65 33 2f 4e 6d 52 39 6a 64 3a 6a 71 2f 73 79 6a 71 3a 65 33 2f 47 52 4a 33 32 63 3a 6a 73 2f 73 79 6a 72 3a 65 33 2f 71 6e 67 4a 42 66 3a 6a 75 2f 73 79 6a 73 3a 65 Data Ascii: TEf:j3/syjg:e3/w7ysg:j5/syjh:e3/T3q8Wd:j7/fplQxc:gq/vPi79c:gr/FXUdw:h6/syji:e3/ERwVb:jc/syjj:e3/eTv59e:je/syjk:e3/gpN34c:jg/syjl:e3/giyuec:ji/syjm:e3/A3eWDb:jk/syjn:e3/agvUYd:jm/syjo:e3/jVqD7:jo/syjp:e3/NmR9jd:jq/syjq:e3/GRJ32c:js/syjr:e3/qngJBf:ju/syjs:e
2023-11-22 16:22:36 UTC	1252	IN	Data Raw: 2f 78 6b 77 69 30 3a 6d 7a 2f 73 79 6c 62 3a 65 36 2f 46 6d 6e 45 36 62 3a 6e 31 2f 73 79 6c 63 3a 65 36 2f 57 75 49 50 6e 62 3a 6e 33 2f 73 79 6c 64 3a 65 30 2f 62 58 4b 50 7a 64 3a 6e 35 2f 73 79 6c 65 3a 65 30 2f 64 79 55 45 6d 64 3a 6e 37 2f 73 79 6c 66 3a 65 34 2f 6f 4d 43 6f 72 62 3a 6e 39 2f 73 79 6c 67 3a 65 34 2f 69 35 77 30 59 63 3a 6e 62 2f 73 79 6c 68 3a 65 34 2f 4d 76 74 73 66 3a 6e 64 2f 74 7a 54 42 35 3a 67 6c 2f 6a 6b 52 50 6a 65 3a 65 67 2f 6f 47 30 71 65 65 2f 79 36 49 68 61 62 3a 6e 68 2f 48 66 78 4b 39 64 3a 65 62 2f 73 79 6c 6a 3a 65 30 2f 72 61 6a 63 43 63 3a 6e 6b 2f 73 79 6c 6b 3a 65 36 2f 41 44 36 41 49 62 3a 6e 6d 2f 73 79 6c 6c 2f 73 79 6c 6d 3a 65 36 2c 68 79 2c 6a 37 2c 6b 66 2c 6b 6a 2c 6b 6e 2c 6c 35 2c 6c 37 2c 6e 6f 2f 73 Data Ascii: /xkwi0:mz/sylb:e6/FmnE6b:n1/sylc:e6/WuIPnb:n3/syld:e0/bXKPzd:n5/syle:e0/dyUEmd:n7/sylf:e4/oMCorb:n9/sylg:e4/i5w0Yc:nb/sylh:e4/Mvtsf:nd/tzTB5:gl/jkRPje:eg/oG0qee/y6Ihab:nh/HfxK9d:eb/sylj:e0/rajcCc:nk/sylk:e6/AD6AIb:nm/syll/sylm:e6,hy,j7,kf,kj,kn,l5,l7,no/s
2023-11-22 16:22:36 UTC	1252	IN	Data Raw: 4b 62 57 6f 66 2f 6b 43 6b 66 55 62 3a 71 38 2f 46 6a 6a 54 6f 64 2f 61 64 6e 37 4e 3a 71 61 2f 73 79 6e 61 3a 65 64 2c 65 67 2c 67 32 2c 67 69 2c 69 32 2c 69 6a 2c 6a 71 2c 6e 64 2c 6e 68 2c 6e 77 2f 5a 72 58 52 38 62 3a 71 63 2f 73 79 6e 62 3a 65 36 2c 67 32 2c 69 71 2f 56 5a 4c 79 42 65 3a 71 65 2f 4b 7a 5a 55 6f 62 3a 71 65 2f 73 79 6e 63 3a 65 33 2f 52 6f 69 46 63 3a 71 68 2f 73 79 6e 64 3a 65 33 2f 5a 51 4e 66 78 66 3a 71 6a 2f 73 79 6e 65 3a 65 36 2c 65 64 2f 73 79 6e 66 3a 71 6c 2f 6b 78 53 74 70 63 3a 71 6d 2f 73 79 6e 67 3a 65 36 2f 51 44 4d 62 38 65 3a 71 6f 2f 73 79 6e 68 3a 65 36 2f 65 6c 35 46 4f 62 3a 71 71 2f 73 79 6e 69 3a 65 33 2f 6d 34 62 54 41 64 3a 71 73 2f 73 79 6e 6a 2f 68 49 64 32 6e 64 3a 71 75 2f 73 79 6e 6b 3a 71 6c 2f 61 41 73 Data Ascii: KbWof/kCkfUb:q8/FjjTod/adn7N:qa/syna:ed,eg,g2,gi,i2,ij,jq,nd,nh,nw/ZrXR8b:qc/synb:e6,g2,iq/VZLyBe:qe/KzZUob:qe/sync:e3/RoiFc:qh/synd:e3/ZQNfxf:qj/syne:e6,ed/synf:ql/kxStpc:qm/syng:e6/QDMb8e:qo/synh:e6/el5FOb:qq/syni:e3/m4bTAd:qs/synj/hId2nd:qu/synk:ql/aAs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49841	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:35 UTC	4420	OUT	GET /xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=1/exm=SNUn3,attn,cEt90b,cdos,csi,d,dtl0hd,eHDfl,gwc,hsm,jsa,mb4ZUb,qddgKe,sTsDMc/excm=A9AtR,ABxRVc,AD6AIb,Adehte,B0xr7b,BH66lf,BVlhmd,CX5LId,D1J6He,DwnPgd,FljZ5,FmnE6b,FuQWyc,G4tpde,GLGZs,Ghqpae,H5Kvfd,JxE93,KbVV9d,KzZUob,M4w02c,MRb7nf,Mvtsf,Mxvwsd,Nly0kd,NsEUGe,ONYJsd,Oa7Qpb,Ok4XMd,Ollhtb,P4P2Yd,PX0cP,PoJj8d,PvSBGf,Q6cvgf,SJv1S,SLDaee,SMP3Ge,SfrWY,SiRWre,TO0csb,Trirbc,TurKxc,Tzd4Yc,U3Ovcc,UQpTU,UiPhkb,VZLyBe,WH3Khc,Wx0Z2d,WxJ6g,X6KoRc,XHo6qe,XbupY,Xk0c,XkocRe,Y2uByd,Yltq7c,YuNOCb,ZgKcee,ZrXR8b,Zudxcb,ZyUK2d,adn7N,ak946,bXyZdf,cKV22c,dI5Ii,eTv59e,erGeSe,f1YgBd,fNMhz,hU1IHe,hfJ9hb,hj5Zu,i5w0Yc,iAQA6,j0qO9b,jkRPje,kCkfUb,kOSi0d,oXRDzc,pPanAd,pTgt2d,pbYjsd,pqUxUc,qngJBf,rL2AR,ra3uhb,sU6eaf,tlA71,tzTB5,uUhTh,vJPFse,vbjdXc,vhpQNc,vymBNb,wKa2Bd,xB2dQd,y0l7mc,y25qZb,yChgtb,yuQBec,zjNhL,zoFt6e,zs9f9d/ed=1/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/ee=AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DULqB:RKfG5c;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;IBADCc:RYquRb;IoGlCf:b5lhvb;JXS8fb:Qj0suc;JsbNhc:Xd8iUd;KOxcK:bFOvTc;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe;Pjplud:EEDORb,PoEs9b;PqHfGe:im2cZe;Q1Ow7b:x5CSu;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;SLtqO:Kh1xYe;SMDL4c:fTfGO,pnvXVc;SNUn3:ZwDk9d,x8cHvb;ShpF6e:N0pvGc;TxfV6d:YORN0b;U96pRd:FsR04;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YV5bee:IvPZ6d;ZWEUA:afR4Cf;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bFZ6gf:RsDQqe;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:audvde;eHDfl:ofjVkb;eO3lse:nFClrf;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;io8t5d:sgY6Zb;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kY7VAf:d91TEb;kbAm9d:MkHyGd;lkq0A:JyBE3e;lzgfYb:PI40bd;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO,pnvXVc;oUlnpc:RagDlc;okUaUd:wItadb;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qGV2uc:HHi04c;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:mYbt1d,zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;uknmt:GkPrzb;uuQkY:u2V3ud;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:O1Gjze,TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;xbe2wc:uRMPBc;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=Eox39d,GElbSc,HYSCof,TSZEqd,fcDBE,l17Pib,pHXghd,pgCXqb,s0j7C,tIj4fb?xjs=s1 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw
2023-11-22 16:22:36 UTC	818	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 4f 72 69 67 69 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 74 72 75 73 74 65 64 2d 74 79 70 65 73 2d 66 6f 72 20 27 73 63 72 69 70 74 27 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 67 77 73 2d 74 65 61 6d 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesVary: Accept-Encoding, OriginContent-Type: text/javascript; charset=UTF-8Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-teamCross-Origin-R
2023-11-22 16:22:36 UTC	434	IN	Data Raw: 74 68 69 73 2e 5f 73 3d 74 68 69 73 2e 5f 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 78 28 22 46 6d 41 72 30 63 22 29 3b 0a 76 61 72 20 49 6f 69 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 4b 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 4b 61 29 7d 3b 5f 2e 45 28 49 6f 69 2c 5f 2e 4b 6e 29 3b 49 6f 69 2e 71 62 3d 5f 2e 4b 6e 2e 71 62 3b 49 6f 69 2e 46 61 3d 5f 2e 4b 6e 2e 46 61 3b 49 6f 69 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 45 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 5f 2e 4d 6e 28 5f 2e 47 53 61 2c 49 6f 69 29 3b 0a 5f 2e 79 28 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 78 28 22 79 47 78 Data Ascii: this._s=this._s\|\|{};(function(_){var window=this;try{_.x("FmAr0c");var Ioi=function(a){_.Kn.call(this,a.Ka)};_.E(Ioi,_.Kn);Ioi.qb=_.Kn.qb;Ioi.Fa=_.Kn.Fa;Ioi.prototype.kEd=function(){};_.Mn(_.GSa,Ioi);_.y();}catch(e){_._DumpException(e)}try{_.x("yGx
2023-11-22 16:22:36 UTC	1252	IN	Data Raw: 6c 6c 28 74 68 69 73 2c 61 2e 4b 61 29 3b 74 68 69 73 2e 7a 5f 61 3d 61 2e 73 65 72 76 69 63 65 2e 75 5f 66 3b 74 68 69 73 2e 7a 5f 61 2e 6b 45 64 28 74 68 69 73 2e 67 65 74 52 6f 6f 74 28 29 2e 65 6c 28 29 29 7d 3b 5f 2e 45 28 4c 6f 69 2c 5f 2e 44 29 3b 4c 6f 69 2e 46 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 73 65 72 76 69 63 65 3a 7b 75 5f 66 3a 5f 2e 4a 6f 69 7d 7d 7d 3b 4c 6f 69 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 6e 75 6c 6c 3d 3d 5f 2e 4d 6f 69 7c 7c 5f 2e 4d 6f 69 2e 42 48 66 28 61 2e 64 61 74 61 2c 74 68 69 73 29 7d 3b 4c 6f 69 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 75 6c 6c 3d 3d 5f 2e 4d 6f 69 7c 7c 5f 2e 4d 6f 69 2e 4a 4b 65 28 74 68 69 73 29 7d Data Ascii: ll(this,a.Ka);this.z_a=a.service.u_f;this.z_a.kEd(this.getRoot().el())};_.E(Loi,_.D);Loi.Fa=function(){return{service:{u_f:_.Joi}}};Loi.prototype.oa=function(a){null==_.Moi\|\|_.Moi.BHf(a.data,this)};Loi.prototype.ka=function(){null==_.Moi\|\|_.Moi.JKe(this)}
2023-11-22 16:22:36 UTC	1252	IN	Data Raw: 75 72 6e 20 31 3d 3d 65 2e 6b 61 3f 5f 2e 59 65 28 65 2c 64 2e 6f 61 2c 32 29 3a 65 2e 72 65 74 75 72 6e 28 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 64 2e 6d 4f 61 2e 45 34 61 28 7b 6d 59 3a 62 2c 64 61 74 61 3a 63 7d 29 29 29 7d 29 7d 3b 0a 5f 2e 6b 2e 79 63 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 5f 2e 58 65 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 31 3d 3d 62 2e 6b 61 3f 5f 2e 59 65 28 62 2c 61 2e 6f 61 2c 32 29 3a 62 2e 72 65 74 75 72 6e 28 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 61 2e 6d 4f 61 2e 79 63 63 28 29 29 29 7d 29 7d 3b 5f 2e 6b 2e 74 35 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 6d 59 2c 63 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 5f 2e Data Ascii: urn 1==e.ka?_.Ye(e,d.oa,2):e.return(Promise.resolve(d.mOa.E4a({mY:b,data:c})))})};_.k.ycc=function(){var a=this;return _.Xe(function(b){return 1==b.ka?_.Ye(b,a.oa,2):b.return(Promise.resolve(a.mOa.ycc()))})};_.k.t5=function(a){var b=a.mY,c=this;return _.
2023-11-22 16:22:36 UTC	1252	IN	Data Raw: 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 6e 4f 68 3d 5f 2e 7a 28 22 69 4c 32 43 76 66 22 2c 5b 5f 2e 63 71 2c 5f 2e 6d 4f 68 5d 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 41 41 75 3d 5f 2e 48 28 22 73 49 4d 78 30 22 29 3b 5f 2e 42 41 75 3d 5f 2e 48 28 22 67 6d 72 77 4b 66 22 29 3b 5f 2e 43 41 75 3d 5f 2e 48 28 22 42 49 54 31 59 65 22 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 78 28 22 69 4c 32 43 76 66 22 29 3b 0a 76 61 72 20 54 30 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 79 41 75 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 4b 61 29 3b 74 68 69 73 2e 6f 61 3d 5b 5d Data Ascii: DumpException(e)}try{_.nOh=_.z("iL2Cvf",[_.cq,_.mOh]);}catch(e){_._DumpException(e)}try{_.AAu=_.H("sIMx0");_.BAu=_.H("gmrwKf");_.CAu=_.H("BIT1Ye");}catch(e){_._DumpException(e)}try{_.x("iL2Cvf");var T0=function(a){_.yAu.call(this,a.Ka);this.oa=[]
2023-11-22 16:22:36 UTC	1252	IN	Data Raw: 66 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2c 63 2c 64 2c 65 3b 72 65 74 75 72 6e 20 5f 2e 58 65 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 31 3d 3d 66 2e 6b 61 29 72 65 74 75 72 6e 20 5f 2e 59 65 28 66 2c 44 41 75 28 62 29 2c 32 29 3b 62 2e 6f 76 65 72 6c 61 79 2e 6f 70 65 6e 28 29 3b 63 3d 5f 2e 52 61 28 62 2e 6f 61 29 3b 66 6f 72 28 64 3d 63 2e 6e 65 78 74 28 29 3b 21 64 2e 64 6f 6e 65 3b 64 3d 63 2e 6e 65 78 74 28 29 29 65 3d 64 2e 76 61 6c 75 65 2c 65 2e 6a 4f 28 61 2e 64 61 74 61 29 3b 5f 2e 5a 65 28 66 29 7d 29 7d 3b 5f 2e 6b 2e 47 24 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 5f 2e 52 61 28 74 68 69 73 2e 6f 61 29 2c 62 3d 61 2e 6e 65 78 74 28 29 3b 21 62 2e 64 6f 6e 65 3b 62 3d 61 2e 6e Data Ascii: f=function(a){var b=this,c,d,e;return _.Xe(function(f){if(1==f.ka)return _.Ye(f,DAu(b),2);b.overlay.open();c=_.Ra(b.oa);for(d=c.next();!d.done;d=c.next())e=d.value,e.jO(a.data);_.Ze(f)})};_.k.G$d=function(){for(var a=_.Ra(this.oa),b=a.next();!b.done;b=a.n
2023-11-22 16:22:36 UTC	1252	IN	Data Raw: 6e 28 63 29 7d 29 7d 3b 76 61 72 20 44 41 75 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 72 65 74 75 72 6e 20 5f 2e 58 65 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 31 3d 3d 63 2e 6b 61 29 72 65 74 75 72 6e 28 62 3d 22 74 72 75 65 22 3d 3d 3d 61 2e 6b 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d 65 78 70 61 6e 64 65 64 22 29 29 3f 63 2e 72 65 74 75 72 6e 28 29 3a 5f 2e 59 65 28 63 2c 61 2e 65 61 64 28 29 2c 32 29 3b 61 2e 6f 61 3d 63 2e 6f 61 3b 5f 2e 5a 65 28 63 29 7d 29 7d 3b 0a 54 30 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 76 69 67 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 2e 75 72 6c 2c 64 3d 62 2e 6c 61 62 65 6c 2c 65 3d 62 2e 4e 54 62 2c 66 3d 62 2e 54 70 66 3b 62 3d 62 2e 55 79 64 Data Ascii: n(c)})};var DAu=function(a){var b;return _.Xe(function(c){if(1==c.ka)return(b="true"===a.ka.getAttribute("aria-expanded"))?c.return():_.Ye(c,a.ead(),2);a.oa=c.oa;_.Ze(c)})};T0.prototype.navigate=function(a,b){var c=b.url,d=b.label,e=b.NTb,f=b.Tpf;b=b.Uyd
2023-11-22 16:22:36 UTC	1252	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 49 66 7d 29 3b 5f 2e 4a 28 54 30 2e 70 72 6f 74 6f 74 79 70 65 2c 22 64 50 36 61 42 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 46 24 64 7d 29 3b 5f 2e 4a 28 54 30 2e 70 72 6f 74 6f 74 79 70 65 2c 22 56 63 67 68 7a 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 48 24 64 7d 29 3b 5f 2e 6f 72 28 5f 2e 6e 4f 68 2c 54 30 29 3b 0a 5f 2e 79 28 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 75 4f 68 3d 5f 2e 7a 28 22 49 52 4a 43 65 66 22 2c 5b 5f 2e 6d 4f 68 5d 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d Data Ascii: unction(){return this.cIf});_.J(T0.prototype,"dP6aBd",function(){return this.F$d});_.J(T0.prototype,"Vcghz",function(){return this.H$d});_.or(_.nOh,T0);_.y();}catch(e){_._DumpException(e)}try{_.uOh=_.z("IRJCef",[_.mOh]);}catch(e){_._DumpException(e)}
2023-11-22 16:22:36 UTC	1252	IN	Data Raw: 22 29 3b 0a 5f 2e 59 39 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 4b 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 4b 61 29 3b 74 68 69 73 2e 6b 61 3d 7b 7d 3b 74 68 69 73 2e 6f 61 3d 7b 7d 3b 74 68 69 73 2e 77 61 3d 7b 7d 3b 74 68 69 73 2e 41 61 3d 30 7d 3b 5f 2e 45 28 5f 2e 59 39 61 2c 5f 2e 4b 6e 29 3b 5f 2e 59 39 61 2e 71 62 3d 5f 2e 4b 6e 2e 71 62 3b 5f 2e 59 39 61 2e 46 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 7d 7d 3b 5f 2e 59 39 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 3b 5f 2e 24 62 28 61 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 69 66 28 5f 2e 5a 70 28 64 2c 5f 2e 49 50 61 29 7c 7c 5f 2e 5a 70 28 64 2c 5f 2e 4a 50 61 29 29 74 68 72 6f 77 20 45 72 Data Ascii: ");_.Y9a=function(a){_.Kn.call(this,a.Ka);this.ka={};this.oa={};this.wa={};this.Aa=0};_.E(_.Y9a,_.Kn);_.Y9a.qb=_.Kn.qb;_.Y9a.Fa=function(){return{}};_.Y9a.prototype.create=function(a){var b=this;_.$b(a,function(d){if(_.Zp(d,_.IPa)\|\|_.Zp(d,_.JPa))throw Er
2023-11-22 16:22:36 UTC	1252	IN	Data Raw: 6b 61 5b 62 5d 2e 70 65 65 6b 28 29 29 7b 61 2e 6f 61 5b 62 5d 3d 21 30 3b 76 61 72 20 63 3d 61 2e 6b 61 5b 62 5d 2e 64 65 71 75 65 75 65 28 29 3b 61 2e 6b 61 5b 62 5d 2e 69 73 45 6d 70 74 79 28 29 26 26 64 65 6c 65 74 65 20 61 2e 6b 61 5b 62 5d 3b 63 2e 71 4b 3f 45 37 61 28 61 2c 62 29 3a 63 2e 79 6a 2e 72 65 73 6f 6c 76 65 28 5f 2e 51 64 28 63 2e 6f 70 65 72 61 74 69 6f 6e 28 29 2c 28 30 2c 5f 2e 47 67 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 45 37 61 28 74 68 69 73 2c 62 29 7d 2c 61 29 29 29 7d 65 6c 73 65 20 64 65 6c 65 74 65 20 61 2e 6f 61 5b 62 5d 7d 3b 5f 2e 44 37 61 2e 43 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 41 66 28 5f 2e 44 37 61 29 7d 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e Data Ascii: ka[b].peek()){a.oa[b]=!0;var c=a.ka[b].dequeue();a.ka[b].isEmpty()&&delete a.ka[b];c.qK?E7a(a,b):c.yj.resolve(_.Qd(c.operation(),(0,_.Gg)(function(){E7a(this,b)},a)))}else delete a.oa[b]};_.D7a.Cc=function(){return _.Af(_.D7a)};}catch(e){_._DumpException

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49843	142.251.16.105	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:36 UTC	1432	OUT	GET /complete/search?q=shop%20deals&cp=0&client=desktop-gws-wiz-on-focus-serp&xssi=t&gs_pcrt=3&hl=en&authuser=0&pq=shop%20deals&psi=xSpeZdzvEPyy5NoPhfSymAc.1700670154779&dpr=1&ofp=EAEY2KWL5pPx1Nf4ARirq_i4pPmltQYYnLvJ5Jr768bJARiE2PG52f_yqTgYs8SD-uXV3s5zMrIBChsKGXNob3AgZGVhbHMgb24gZWxlY3Ryb25pY3MKEwoRc2hvcCBkZWFscyBvbmxpbmUKFAoSc2hvcCBkZWFscyBsYXB0b3BzChkKF3Nob3AgZGVhbHMgcmVmcmlnZXJhdG9yChEKD3Nob3AgZGVhbHMgbGVnbwoSChBzaG9wIGRlYWxzIHRpcmVzChMKEXNob3AgZGVhbHMgbmVhcmJ5Cg8KDXNob3AgZGVhbHMgdHYQRzJ1CigKJldoYXQgZGF5IGlzIEJsYWNrIEZyaWRheSAyMDIzIFdhbG1hcnQ_CiYKJFdoYXQgZGF5IGlzIEJsYWNrIEZyaWRheSBzYWxlcyAyMDIzPwoeChxXaWxsIEFtYXpvbiBkbyBCbGFjayBGcmlkYXk_EOQC HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0
2023-11-22 16:22:36 UTC	1737	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 33 36 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 43 6f 6e Data Ascii: HTTP/1.1 200 OKX-Content-Type-Options: nosniffDate: Wed, 22 Nov 2023 16:22:36 GMTPragma: no-cacheExpires: -1Cache-Control: no-cache, must-revalidateContent-Type: application/json; charset=UTF-8Strict-Transport-Security: max-age=31536000Con
2023-11-22 16:22:36 UTC	766	IN	Data Raw: 32 66 37 0d 0a 29 5d 7d 27 0a 5b 5b 5b 22 73 68 6f 70 20 64 65 61 6c 73 5c 75 30 30 33 63 62 5c 75 30 30 33 65 20 6f 6e 20 65 6c 65 63 74 72 6f 6e 69 63 73 5c 75 30 30 33 63 5c 2f 62 5c 75 30 30 33 65 22 2c 30 2c 5b 37 31 2c 35 39 38 2c 34 33 32 5d 5d 2c 5b 22 73 68 6f 70 20 64 65 61 6c 73 5c 75 30 30 33 63 62 5c 75 30 30 33 65 20 6f 6e 6c 69 6e 65 5c 75 30 30 33 63 5c 2f 62 5c 75 30 30 33 65 22 2c 30 2c 5b 37 31 2c 35 39 38 2c 34 33 32 5d 5d 2c 5b 22 73 68 6f 70 20 64 65 61 6c 73 5c 75 30 30 33 63 62 5c 75 30 30 33 65 20 6c 61 70 74 6f 70 73 5c 75 30 30 33 63 5c 2f 62 5c 75 30 30 33 65 22 2c 30 2c 5b 37 31 2c 35 39 38 2c 34 33 32 5d 5d 2c 5b 22 73 68 6f 70 20 64 65 61 6c 73 5c 75 30 30 33 63 62 5c 75 30 30 33 65 20 72 65 66 72 69 67 65 72 61 74 6f 72 5c Data Ascii: 2f7)]}'[[["shop deals\u003cb\u003e on electronics\u003c\/b\u003e",0,[71,598,432]],["shop deals\u003cb\u003e online\u003c\/b\u003e",0,[71,598,432]],["shop deals\u003cb\u003e laptops\u003c\/b\u003e",0,[71,598,432]],["shop deals\u003cb\u003e refrigerator\
2023-11-22 16:22:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49844	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:37 UTC	1441	OUT	GET /client_204?atyp=i&biw=1280&bih=907&dpr=1&ei=xSpeZdzvEPyy5NoPhfSymAc&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0
2023-11-22 16:22:37 UTC	1394	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 35 31 2d 47 44 6f 47 64 4f 30 63 6e 42 54 49 51 4c 6e 48 54 73 77 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 Data Ascii: HTTP/1.1 204 No ContentContent-Type: text/html; charset=UTF-8Strict-Transport-Security: max-age=31536000Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-51-GDoGdO0cnBTIQLnHTsw' 'strict-dynamic' 'report-sample' 'unsafe-eva

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49849	142.251.16.105	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:37 UTC	1009	OUT	GET /complete/search?q&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=2&hl=en&authuser=0&pq=shop%20deals&psi=xSpeZdzvEPyy5NoPhfSymAc.1700670154779&dpr=1&ofp=GNili-aT8dTX-AEYq6v4uKT5pbUGGJy7yeSa--vGyQEYhNjxudn_8qk4GLPEg_rl1d7Ocw&nolsbt=1 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0
2023-11-22 16:22:37 UTC	1737	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 33 37 20 47 4d 54 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 43 6f 6e Data Ascii: HTTP/1.1 200 OKX-Content-Type-Options: nosniffDate: Wed, 22 Nov 2023 16:22:37 GMTPragma: no-cacheExpires: -1Cache-Control: no-cache, must-revalidateContent-Type: application/json; charset=UTF-8Strict-Transport-Security: max-age=31536000Con
2023-11-22 16:22:37 UTC	1737	IN	Data Raw: 39 32 37 0d 0a 29 5d 7d 27 0a 5b 5b 5b 22 76 65 74 65 72 61 6e 73 20 64 61 79 22 2c 30 2c 5b 35 31 32 2c 36 35 30 2c 33 36 32 2c 33 30 38 2c 36 37 5d 2c 7b 22 7a 6c 22 3a 39 30 30 30 30 7d 5d 2c 5b 22 61 71 69 22 2c 30 2c 5b 35 31 32 2c 36 35 30 2c 33 36 32 2c 33 30 38 2c 36 37 5d 2c 7b 22 7a 6c 22 3a 39 30 30 30 30 7d 5d 2c 5b 22 73 68 6f 70 20 73 6e 65 61 6b 65 72 73 20 64 65 61 6c 73 22 2c 30 2c 5b 35 31 32 2c 36 35 30 2c 33 36 32 2c 33 30 38 2c 36 37 5d 2c 7b 22 7a 6c 22 3a 39 30 30 30 30 7d 5d 2c 5b 22 73 68 6f 70 20 64 65 61 6c 73 20 6f 6e 20 74 6f 79 73 20 5c 75 30 30 32 36 61 6d 70 3b 20 67 61 6d 65 73 22 2c 30 2c 5b 35 31 32 2c 36 35 30 2c 33 36 32 2c 33 30 38 2c 36 37 5d 2c 7b 22 7a 6c 22 3a 39 30 30 30 30 7d 5d 2c 5b 22 73 68 6f 70 20 74 76 73 Data Ascii: 927)]}'[[["veterans day",0,[512,650,362,308,67],{"zl":90000}],["aqi",0,[512,650,362,308,67],{"zl":90000}],["shop sneakers deals",0,[512,650,362,308,67],{"zl":90000}],["shop deals on toys \u0026amp; games",0,[512,650,362,308,67],{"zl":90000}],["shop tvs
2023-11-22 16:22:37 UTC	613	IN	Data Raw: 69 69 71 61 73 4c 47 6d 7a 38 51 68 4f 38 59 4d 48 56 31 2b 6c 48 55 54 53 49 6e 62 6e 59 51 39 48 53 37 4d 58 41 52 6d 2f 74 61 4a 4a 4d 62 4a 65 30 69 4b 6d 5a 31 38 64 4c 6b 63 31 38 39 4f 78 70 46 43 61 54 4d 47 4c 35 54 65 6f 32 78 71 32 77 33 47 6d 59 34 4c 6f 72 6f 6c 6f 77 55 68 31 4c 55 4a 66 7a 63 57 2b 52 78 4d 72 64 48 59 6c 31 6c 4e 76 4d 38 71 62 4c 45 66 67 44 6d 68 4b 48 6f 67 6a 66 37 42 70 7a 6b 51 45 5a 47 45 50 77 6f 42 64 41 47 54 42 51 6d 32 78 2f 68 42 71 6c 44 59 67 71 50 75 58 36 47 46 50 59 73 70 4d 78 37 62 6f 66 6f 49 66 39 78 42 2b 4a 37 44 58 47 79 77 6f 6f 6c 2b 44 57 7a 74 52 6e 31 79 64 58 67 55 38 66 71 34 42 73 33 30 43 71 44 70 44 33 6d 54 4b 72 67 70 54 75 61 78 48 59 5a 59 70 36 7a 53 79 57 69 4f 43 70 43 51 68 45 45 Data Ascii: iiqasLGmz8QhO8YMHV1+lHUTSInbnYQ9HS7MXARm/taJJMbJe0iKmZ18dLkc189OxpFCaTMGL5Teo2xq2w3GmY4LorolowUh1LUJfzcW+RxMrdHYl1lNvM8qbLEfgDmhKHogjf7BpzkQEZGEPwoBdAGTBQm2x/hBqlDYgqPuX6GFPYspMx7bofoIf9xB+J7DXGywool+DWztRn1ydXgU8fq4Bs30CqDpD3mTKrgpTuaxHYZYp6zSyWiOCpCQhEE
2023-11-22 16:22:37 UTC	89	IN	Data Raw: 35 33 0d 0a 44 52 6e 69 58 32 49 4f 78 65 58 6d 43 68 73 57 78 65 61 33 69 74 45 53 30 73 4b 54 54 49 78 41 5a 61 77 4c 53 75 50 4e 4a 4d 68 39 72 68 6f 36 51 74 38 67 46 76 54 72 67 6e 54 49 41 72 47 7a 6f 67 78 61 36 5a 55 52 58 75 58 46 55 6a 55 44 5a 66 65 0d 0a Data Ascii: 53DRniX2IOxeXmChsWxea3itES0sKTTIxAZawLSuPNJMh9rho6Qt8gFvTrgnTIArGzogxa6ZURXuXFUjUDZfe
2023-11-22 16:22:37 UTC	1252	IN	Data Raw: 64 38 32 0d 0a 6a 64 72 73 47 4d 2b 79 65 6e 57 73 71 6b 64 56 30 34 66 56 41 72 69 37 53 69 68 54 6a 4b 72 55 4f 5a 69 70 73 55 46 38 70 2b 6f 50 6b 64 4e 34 4a 74 6a 43 69 6d 66 76 43 6d 50 51 71 2b 70 33 53 41 73 73 77 63 51 48 6b 49 79 45 72 53 38 73 73 71 4f 6c 4b 49 69 30 6e 64 6a 34 6e 73 76 50 62 64 38 59 75 53 72 4a 79 75 74 74 4d 53 35 51 2f 31 30 78 79 35 72 79 47 73 6a 38 63 4c 47 56 46 30 47 30 58 46 41 68 50 6f 47 41 70 34 6b 4e 67 56 6a 67 42 76 57 4a 48 31 6a 35 43 63 6a 49 73 61 49 69 49 4c 51 46 4a 5a 41 34 57 4c 43 51 43 52 61 31 5a 45 73 33 58 6e 4c 71 6b 51 56 52 47 42 76 32 6b 4c 78 34 78 67 79 6f 6c 4a 59 68 55 63 6f 61 73 70 32 78 36 5a 41 72 78 44 35 58 54 39 64 31 45 74 75 35 68 47 6d 68 36 78 4f 51 2f 6c 41 63 65 65 6a 6c 69 45 Data Ascii: d82jdrsGM+yenWsqkdV04fVAri7SihTjKrUOZipsUF8p+oPkdN4JtjCimfvCmPQq+p3SAsswcQHkIyErS8ssqOlKIi0ndj4nsvPbd8YuSrJyuttMS5Q/10xy5ryGsj8cLGVF0G0XFAhPoGAp4kNgVjgBvWJH1j5CcjIsaIiILQFJZA4WLCQCRa1ZEs3XnLqkQVRGBv2kLx4xgyolJYhUcoasp2x6ZArxD5XT9d1Etu5hGmh6xOQ/lAceejliE
2023-11-22 16:22:37 UTC	1252	IN	Data Raw: 41 63 31 6a 42 52 50 37 68 53 4d 46 72 39 6f 68 6e 72 62 63 55 53 77 50 79 42 57 4f 78 62 68 34 44 36 74 74 4f 4a 64 50 54 78 6c 51 46 49 78 57 36 76 4c 32 63 73 2b 7a 49 36 5a 52 6d 73 6c 72 79 35 77 67 68 55 63 72 54 61 2b 76 79 70 7a 58 2b 65 73 57 64 65 33 31 50 4d 4a 63 6b 57 6a 67 69 30 62 42 51 66 4f 2f 49 67 63 71 64 59 4b 61 69 69 74 70 43 36 65 68 69 7a 50 7a 6b 4e 5a 49 44 69 59 75 79 50 6f 34 6f 65 51 70 31 4d 2b 4b 79 41 52 67 32 63 51 69 53 55 74 42 70 76 56 75 58 6d 62 62 4a 61 7a 50 35 44 6c 71 76 72 48 79 31 50 70 39 61 41 58 46 43 4c 41 49 2b 54 64 44 6d 73 6f 63 48 54 34 48 66 59 77 78 32 61 53 6f 64 68 6c 34 77 37 74 48 34 73 30 70 36 59 32 67 75 76 44 34 56 30 4c 35 75 39 48 79 66 57 6a 35 59 69 73 4d 79 54 4d 76 4a 41 6a 35 71 68 6f Data Ascii: Ac1jBRP7hSMFr9ohnrbcUSwPyBWOxbh4D6ttOJdPTxlQFIxW6vL2cs+zI6ZRmslry5wghUcrTa+vypzX+esWde31PMJckWjgi0bBQfO/IgcqdYKaiitpC6ehizPzkNZIDiYuyPo4oeQp1M+KyARg2cQiSUtBpvVuXmbbJazP5DlqvrHy1Pp9aAXFCLAI+TdDmsocHT4HfYwx2aSodhl4w7tH4s0p6Y2guvD4V0L5u9HyfWj5YisMyTMvJAj5qho
2023-11-22 16:22:37 UTC	961	IN	Data Raw: 30 30 31 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 70 6c 61 6e 65 20 63 72 61 73 68 65 73 20 70 6c 61 6e 6f 20 74 78 22 2c 30 2c 5b 33 2c 31 34 33 2c 33 35 37 2c 33 36 32 2c 33 30 38 2c 33 39 36 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 39 30 30 30 31 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 65 61 72 74 68 20 6c 61 73 65 72 20 62 65 61 6d 65 64 20 6d 65 73 73 61 67 65 22 2c 30 2c 5b 33 2c 31 34 33 2c 33 35 37 2c 33 36 32 2c 33 30 38 2c 33 39 36 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 39 30 30 30 31 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 6d 61 72 79 6c 61 6e 64 20 67 75 6e 20 6c 61 77 73 22 2c 30 2c 5b 33 2c 31 34 33 2c 33 35 37 2c 33 36 32 2c 33 30 Data Ascii: 001,"zp":{"gs_ss":"1"}}],["plane crashes plano tx",0,[3,143,357,362,308,396],{"zf":33,"zl":90001,"zp":{"gs_ss":"1"}}],["earth laser beamed message",0,[3,143,357,362,308,396],{"zf":33,"zl":90001,"zp":{"gs_ss":"1"}}],["maryland gun laws",0,[3,143,357,362,30
2023-11-22 16:22:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49847	142.251.16.105	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:37 UTC	1095	OUT	GET /xjs/_/js/md=1/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0
2023-11-22 16:22:37 UTC	818	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 4f 72 69 67 69 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 74 72 75 73 74 65 64 2d 74 79 70 65 73 2d 66 6f 72 20 27 73 63 72 69 70 74 27 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 67 77 73 2d 74 65 61 6d 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesVary: Accept-Encoding, OriginContent-Type: text/javascript; charset=UTF-8Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-teamCross-Origin-R
2023-11-22 16:22:37 UTC	434	IN	Data Raw: 7b 22 6d 6f 64 75 6c 65 47 72 61 70 68 22 3a 22 71 75 61 6e 74 75 6d 2f 74 37 78 67 49 65 2f 77 73 39 54 6c 63 2f 63 45 74 39 30 62 2f 71 64 64 67 4b 65 2f 79 78 54 63 68 66 2f 73 79 36 78 2f 73 79 36 79 2f 73 79 36 7a 3a 36 2c 37 2f 73 79 37 30 2f 78 51 74 5a 62 3a 35 2c 38 2c 39 2f 73 79 37 31 2f 52 39 59 48 4a 63 3a 38 2c 62 2f 4b 55 4d 37 5a 2f 77 72 7a 45 58 62 2f 54 78 43 4a 66 64 2f 57 56 44 79 4b 65 2f 73 79 37 32 2f 56 6a 39 68 70 64 3a 67 2c 68 2f 74 61 66 50 72 66 2f 64 74 6c 30 68 64 2f 6c 4c 51 57 46 65 2f 49 6c 31 4d 34 62 2f 65 48 44 66 6c 2f 46 4f 4e 45 64 66 3a 6b 2f 4a 69 56 4c 6a 64 3a 6b 2f 46 41 55 64 57 3a 6b 2f 64 4d 5a 6b 33 65 3a 6e 2f 6f 66 6a 56 6b 62 2f 71 61 53 33 67 64 2f 54 39 79 35 44 64 2f 79 69 4c 67 36 65 2f 51 37 42 61 Data Ascii: {"moduleGraph":"quantum/t7xgIe/ws9Tlc/cEt90b/qddgKe/yxTchf/sy6x/sy6y/sy6z:6,7/sy70/xQtZb:5,8,9/sy71/R9YHJc:8,b/KUM7Z/wrzEXb/TxCJfd/WVDyKe/sy72/Vj9hpd:g,h/tafPrf/dtl0hd/lLQWFe/Il1M4b/eHDfl/FONEdf:k/JiVLjd:k/FAUdW:k/dMZk3e:n/ofjVkb/qaS3gd/T9y5Dd/yiLg6e/Q7Ba
2023-11-22 16:22:37 UTC	1252	IN	Data Raw: 69 70 66 3a 31 6a 2f 73 79 37 67 2f 73 79 37 68 3a 31 6c 2f 73 79 37 66 3a 31 6a 2c 31 6d 2f 73 79 37 6a 2f 73 79 37 69 3a 31 6e 2c 31 6f 2f 73 79 37 6b 2f 4e 77 48 30 48 3a 31 6b 2c 31 70 2f 73 79 37 6c 3a 31 68 2f 73 79 37 6d 2f 67 79 63 68 67 3a 31 69 2c 31 72 2c 31 73 2c 31 74 2f 55 6c 6d 6d 72 64 3a 31 75 2f 72 4a 6d 4a 72 63 3a 31 61 2c 31 66 2f 47 48 41 65 41 63 2f 57 74 36 76 6a 66 3a 31 66 2f 6c 73 6a 56 6d 63 3a 31 65 2f 49 5a 54 36 33 2f 56 67 64 36 68 62 2f 73 79 37 6f 2f 73 79 37 70 2f 73 79 37 71 3a 32 32 2c 32 33 2f 59 4e 6a 47 44 64 3a 32 34 2f 69 46 51 79 4b 66 2f 73 79 37 73 2f 73 79 37 74 3a 32 37 2f 73 79 37 72 3a 32 30 2c 32 34 2c 32 38 2f 50 72 50 59 52 64 3a 32 35 2c 32 39 2f 73 79 37 75 2f 76 66 75 4e 4a 66 3a 32 62 2f 73 79 37 76 Data Ascii: ipf:1j/sy7g/sy7h:1l/sy7f:1j,1m/sy7j/sy7i:1n,1o/sy7k/NwH0H:1k,1p/sy7l:1h/sy7m/gychg:1i,1r,1s,1t/Ulmmrd:1u/rJmJrc:1a,1f/GHAeAc/Wt6vjf:1f/lsjVmc:1e/IZT63/Vgd6hb/sy7o/sy7p/sy7q:22,23/YNjGDd:24/iFQyKf/sy7s/sy7t:27/sy7r:20,24,28/PrPYRd:25,29/sy7u/vfuNJf:2b/sy7v
2023-11-22 16:22:37 UTC	1252	IN	Data Raw: 33 2c 35 34 2f 73 69 4b 6e 51 64 3a 35 30 2c 35 35 2f 70 58 64 52 59 62 2f 73 79 39 36 2f 65 35 71 46 4c 63 3a 35 35 2c 35 38 2f 64 49 6f 53 42 62 2f 73 79 39 37 2f 53 70 73 66 53 62 3a 32 65 2c 35 62 2f 5a 67 47 67 39 62 2f 73 79 39 62 2f 73 79 39 69 2f 73 79 39 6a 2f 73 79 39 64 2f 73 79 39 38 3a 35 65 2c 35 66 2c 35 67 2c 35 68 2f 73 79 39 63 2f 73 79 39 67 2f 73 79 39 39 3a 35 66 2c 35 67 2c 35 6a 2c 35 6b 2f 73 79 39 68 2f 73 79 39 65 2f 73 79 39 6b 2f 73 79 39 6c 2f 73 79 39 6d 2f 73 79 39 61 3a 35 69 2c 35 6c 2c 35 6d 2c 35 6e 2c 35 6f 2c 35 70 2c 35 71 2f 73 79 39 66 3a 35 68 2c 35 6b 2c 35 6e 2f 73 79 39 6e 3a 35 68 2c 35 6f 2f 73 79 39 6f 3a 35 6b 2c 35 71 2f 73 79 39 70 2f 73 79 39 72 2f 73 79 39 73 2f 73 79 39 74 3a 35 78 2f 73 79 39 75 3a 35 Data Ascii: 3,54/siKnQd:50,55/pXdRYb/sy96/e5qFLc:55,58/dIoSBb/sy97/SpsfSb:2e,5b/ZgGg9b/sy9b/sy9i/sy9j/sy9d/sy98:5e,5f,5g,5h/sy9c/sy9g/sy99:5f,5g,5j,5k/sy9h/sy9e/sy9k/sy9l/sy9m/sy9a:5i,5l,5m,5n,5o,5p,5q/sy9f:5h,5k,5n/sy9n:5h,5o/sy9o:5k,5q/sy9p/sy9r/sy9s/sy9t:5x/sy9u:5
2023-11-22 16:22:37 UTC	1252	IN	Data Raw: 38 72 2c 38 74 2f 73 79 63 70 3a 38 62 2f 73 79 63 71 2f 73 79 64 35 3a 38 6a 2f 73 79 63 77 3a 32 32 2c 37 79 2c 38 38 2c 38 6c 2c 38 70 2c 38 72 2c 38 76 2c 38 77 2c 38 78 2f 73 79 64 36 3a 38 6a 2f 73 79 64 37 3a 38 39 2c 38 61 2f 73 79 63 78 3a 32 32 2c 37 79 2c 38 6c 2c 38 72 2c 38 76 2c 38 77 2c 38 7a 2c 39 30 2f 73 79 64 38 3a 38 6a 2f 73 79 63 79 3a 32 32 2c 37 79 2c 38 6c 2c 38 72 2c 38 76 2c 38 77 2c 39 32 2f 73 79 64 39 3a 38 6a 2f 73 79 63 7a 3a 37 6c 2c 38 6c 2c 39 34 2f 73 79 63 6c 3a 37 76 2c 38 37 2f 73 79 64 61 3a 38 6a 2f 73 79 64 30 3a 32 32 2c 38 38 2c 38 6c 2c 38 72 2c 39 36 2c 39 37 2f 73 79 64 62 3a 38 6a 2f 73 79 64 31 3a 32 32 2c 38 38 2c 38 6c 2c 38 72 2c 39 36 2c 39 39 2f 73 79 64 63 3a 38 6a 2f 73 79 64 64 3a 35 76 2c 36 33 2f Data Ascii: 8r,8t/sycp:8b/sycq/syd5:8j/sycw:22,7y,88,8l,8p,8r,8v,8w,8x/syd6:8j/syd7:89,8a/sycx:22,7y,8l,8r,8v,8w,8z,90/syd8:8j/sycy:22,7y,8l,8r,8v,8w,92/syd9:8j/sycz:7l,8l,94/sycl:7v,87/syda:8j/syd0:22,88,8l,8r,96,97/sydb:8j/syd1:22,88,8l,8r,96,99/sydc:8j/sydd:5v,63/
2023-11-22 16:22:37 UTC	1252	IN	Data Raw: 61 2c 32 62 2c 62 73 2c 62 74 2f 6d 39 6f 56 2f 73 79 65 75 2f 76 37 68 48 30 62 3a 62 77 2f 73 79 65 76 2f 73 79 65 77 3a 62 79 2f 71 58 45 6f 50 3a 62 78 2c 62 7a 2f 77 58 38 4c 6a 62 3a 62 78 2c 62 7a 2f 73 34 42 64 48 65 3a 62 78 2c 62 7a 2f 48 38 63 4f 66 64 3a 62 78 2c 62 7a 2f 67 61 37 58 70 64 3a 63 33 2f 6b 48 56 53 55 62 3a 62 7a 2f 50 58 47 75 53 64 3a 62 78 2c 62 7a 2f 78 6b 6a 47 76 65 3a 62 78 2c 62 7a 2f 73 54 73 44 4d 63 2f 76 31 64 61 4d 2f 4c 4b 34 50 79 65 2f 73 79 65 78 2f 73 79 65 79 3a 63 62 2f 61 4c 55 66 50 3a 63 63 2f 77 51 6c 59 76 65 2f 61 52 6a 75 78 62 2f 73 79 66 31 3a 38 64 2f 73 79 66 32 2f 73 79 66 30 3a 63 67 2c 63 68 2f 75 78 4d 70 55 3a 31 74 2c 63 69 2f 43 6f 67 46 37 64 2f 73 79 66 33 3a 35 69 2c 35 6d 2c 35 74 2c 36 Data Ascii: a,2b,bs,bt/m9oV/syeu/v7hH0b:bw/syev/syew:by/qXEoP:bx,bz/wX8Ljb:bx,bz/s4BdHe:bx,bz/H8cOfd:bx,bz/ga7Xpd:c3/kHVSUb:bz/PXGuSd:bx,bz/xkjGve:bx,bz/sTsDMc/v1daM/LK4Pye/syex/syey:cb/aLUfP:cc/wQlYve/aRjuxb/syf1:8d/syf2/syf0:cg,ch/uxMpU:1t,ci/CogF7d/syf3:5i,5m,5t,6
2023-11-22 16:22:37 UTC	1252	IN	Data Raw: 68 61 3a 65 65 2c 65 66 2f 51 36 63 76 67 66 3a 66 69 2f 73 79 68 62 3a 65 65 2c 65 66 2f 77 6b 4c 37 68 3a 66 6b 2f 73 79 68 63 3a 65 66 2f 52 37 35 38 68 65 3a 66 6d 2f 73 79 68 64 3a 65 66 2f 4a 6a 52 34 4d 64 3a 66 6f 2f 73 79 68 65 3a 65 65 2c 65 66 2f 4b 42 75 46 63 66 3a 66 71 2f 73 79 68 66 3a 65 65 2f 73 70 62 37 55 62 3a 66 73 2f 73 79 68 67 3a 65 65 2f 55 55 6c 45 52 62 3a 66 75 2f 73 79 68 68 3a 65 6e 2f 44 55 6c 4d 42 64 3a 66 77 2f 73 79 68 69 2f 58 4b 54 4a 39 62 3a 66 79 2f 73 79 68 6a 3a 65 33 2f 73 79 68 6b 3a 65 33 2f 73 79 68 6c 2f 73 79 68 6d 3a 65 36 2c 67 30 2c 67 31 2c 67 32 2f 66 31 59 67 42 64 3a 67 33 2f 73 79 68 6e 2f 42 56 6c 68 6d 64 3a 67 35 2f 74 45 36 52 7a 64 2f 67 4f 35 46 71 65 3a 67 37 2f 70 68 65 63 62 63 2f 58 6b 30 Data Ascii: ha:ee,ef/Q6cvgf:fi/syhb:ee,ef/wkL7h:fk/syhc:ef/R758he:fm/syhd:ef/JjR4Md:fo/syhe:ee,ef/KBuFcf:fq/syhf:ee/spb7Ub:fs/syhg:ee/UUlERb:fu/syhh:en/DUlMBd:fw/syhi/XKTJ9b:fy/syhj:e3/syhk:e3/syhl/syhm:e6,g0,g1,g2/f1YgBd:g3/syhn/BVlhmd:g5/tE6Rzd/gO5Fqe:g7/phecbc/Xk0
2023-11-22 16:22:37 UTC	1252	IN	Data Raw: 54 45 66 3a 6a 33 2f 73 79 6a 67 3a 65 33 2f 77 37 79 73 67 3a 6a 35 2f 73 79 6a 68 3a 65 33 2f 54 33 71 38 57 64 3a 6a 37 2f 66 70 6c 51 78 63 3a 67 71 2f 76 50 69 37 39 63 3a 67 72 2f 46 58 55 64 77 3a 68 36 2f 73 79 6a 69 3a 65 33 2f 45 52 77 56 62 3a 6a 63 2f 73 79 6a 6a 3a 65 33 2f 65 54 76 35 39 65 3a 6a 65 2f 73 79 6a 6b 3a 65 33 2f 67 70 4e 33 34 63 3a 6a 67 2f 73 79 6a 6c 3a 65 33 2f 67 69 79 75 65 63 3a 6a 69 2f 73 79 6a 6d 3a 65 33 2f 41 33 65 57 44 62 3a 6a 6b 2f 73 79 6a 6e 3a 65 33 2f 61 67 76 55 59 64 3a 6a 6d 2f 73 79 6a 6f 3a 65 33 2f 6a 56 71 44 37 3a 6a 6f 2f 73 79 6a 70 3a 65 33 2f 4e 6d 52 39 6a 64 3a 6a 71 2f 73 79 6a 71 3a 65 33 2f 47 52 4a 33 32 63 3a 6a 73 2f 73 79 6a 72 3a 65 33 2f 71 6e 67 4a 42 66 3a 6a 75 2f 73 79 6a 73 3a 65 Data Ascii: TEf:j3/syjg:e3/w7ysg:j5/syjh:e3/T3q8Wd:j7/fplQxc:gq/vPi79c:gr/FXUdw:h6/syji:e3/ERwVb:jc/syjj:e3/eTv59e:je/syjk:e3/gpN34c:jg/syjl:e3/giyuec:ji/syjm:e3/A3eWDb:jk/syjn:e3/agvUYd:jm/syjo:e3/jVqD7:jo/syjp:e3/NmR9jd:jq/syjq:e3/GRJ32c:js/syjr:e3/qngJBf:ju/syjs:e
2023-11-22 16:22:37 UTC	1252	IN	Data Raw: 2f 78 6b 77 69 30 3a 6d 7a 2f 73 79 6c 62 3a 65 36 2f 46 6d 6e 45 36 62 3a 6e 31 2f 73 79 6c 63 3a 65 36 2f 57 75 49 50 6e 62 3a 6e 33 2f 73 79 6c 64 3a 65 30 2f 62 58 4b 50 7a 64 3a 6e 35 2f 73 79 6c 65 3a 65 30 2f 64 79 55 45 6d 64 3a 6e 37 2f 73 79 6c 66 3a 65 34 2f 6f 4d 43 6f 72 62 3a 6e 39 2f 73 79 6c 67 3a 65 34 2f 69 35 77 30 59 63 3a 6e 62 2f 73 79 6c 68 3a 65 34 2f 4d 76 74 73 66 3a 6e 64 2f 74 7a 54 42 35 3a 67 6c 2f 6a 6b 52 50 6a 65 3a 65 67 2f 6f 47 30 71 65 65 2f 79 36 49 68 61 62 3a 6e 68 2f 48 66 78 4b 39 64 3a 65 62 2f 73 79 6c 6a 3a 65 30 2f 72 61 6a 63 43 63 3a 6e 6b 2f 73 79 6c 6b 3a 65 36 2f 41 44 36 41 49 62 3a 6e 6d 2f 73 79 6c 6c 2f 73 79 6c 6d 3a 65 36 2c 68 79 2c 6a 37 2c 6b 66 2c 6b 6a 2c 6b 6e 2c 6c 35 2c 6c 37 2c 6e 6f 2f 73 Data Ascii: /xkwi0:mz/sylb:e6/FmnE6b:n1/sylc:e6/WuIPnb:n3/syld:e0/bXKPzd:n5/syle:e0/dyUEmd:n7/sylf:e4/oMCorb:n9/sylg:e4/i5w0Yc:nb/sylh:e4/Mvtsf:nd/tzTB5:gl/jkRPje:eg/oG0qee/y6Ihab:nh/HfxK9d:eb/sylj:e0/rajcCc:nk/sylk:e6/AD6AIb:nm/syll/sylm:e6,hy,j7,kf,kj,kn,l5,l7,no/s
2023-11-22 16:22:37 UTC	1252	IN	Data Raw: 4b 62 57 6f 66 2f 6b 43 6b 66 55 62 3a 71 38 2f 46 6a 6a 54 6f 64 2f 61 64 6e 37 4e 3a 71 61 2f 73 79 6e 61 3a 65 64 2c 65 67 2c 67 32 2c 67 69 2c 69 32 2c 69 6a 2c 6a 71 2c 6e 64 2c 6e 68 2c 6e 77 2f 5a 72 58 52 38 62 3a 71 63 2f 73 79 6e 62 3a 65 36 2c 67 32 2c 69 71 2f 56 5a 4c 79 42 65 3a 71 65 2f 4b 7a 5a 55 6f 62 3a 71 65 2f 73 79 6e 63 3a 65 33 2f 52 6f 69 46 63 3a 71 68 2f 73 79 6e 64 3a 65 33 2f 5a 51 4e 66 78 66 3a 71 6a 2f 73 79 6e 65 3a 65 36 2c 65 64 2f 73 79 6e 66 3a 71 6c 2f 6b 78 53 74 70 63 3a 71 6d 2f 73 79 6e 67 3a 65 36 2f 51 44 4d 62 38 65 3a 71 6f 2f 73 79 6e 68 3a 65 36 2f 65 6c 35 46 4f 62 3a 71 71 2f 73 79 6e 69 3a 65 33 2f 6d 34 62 54 41 64 3a 71 73 2f 73 79 6e 6a 2f 68 49 64 32 6e 64 3a 71 75 2f 73 79 6e 6b 3a 71 6c 2f 61 41 73 Data Ascii: KbWof/kCkfUb:q8/FjjTod/adn7N:qa/syna:ed,eg,g2,gi,i2,ij,jq,nd,nh,nw/ZrXR8b:qc/synb:e6,g2,iq/VZLyBe:qe/KzZUob:qe/sync:e3/RoiFc:qh/synd:e3/ZQNfxf:qj/syne:e6,ed/synf:ql/kxStpc:qm/syng:e6/QDMb8e:qo/synh:e6/el5FOb:qq/syni:e3/m4bTAd:qs/synj/hId2nd:qu/synk:ql/aAs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49850	142.250.31.119	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:37 UTC	800	OUT	GET /vi/WyL-v--M_BI/mqdefault.jpg?sqp=-oaymwEFCJQBEFM&rs=AMzJL3kxxj4wLr4MUw1312xJqtgxGYib6A HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:22:37 UTC	656	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 79 6f 75 74 75 62 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 79 6f 75 74 75 62 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/cs
2023-11-22 16:22:37 UTC	596	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 09 06 07 08 07 06 09 08 07 08 0a 0a 09 0b 0d 16 0f 0d 0c 0c 0d 1b 14 15 10 16 20 1d 22 22 20 1d 1f 1f 24 28 34 2c 24 26 31 27 1f 1f 2d 3d 2d 31 35 37 3a 3a 3a 23 2b 3f 44 3f 38 43 34 39 3a 37 01 0a 0a 0a 0d 0c 0d 1a 0f 0f 1a 37 25 1f 25 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 ff c0 00 11 08 00 53 00 94 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 05 06 00 04 07 03 02 01 08 ff c4 00 3f 10 00 02 02 01 03 02 04 04 03 05 05 06 07 00 00 00 01 02 03 04 11 00 05 21 12 31 06 13 41 51 14 22 61 71 32 81 91 07 15 23 a1 b1 42 62 c1 d1 f0 Data Ascii: JFIF "" $(4,$&1'-=-157:::#+?D?8C49:77%%77777777777777777777777777777777777777777777777777S"?!1AQ"aq2#Bb
2023-11-22 16:22:37 UTC	1252	IN	Data Raw: 07 05 64 b1 d2 dc 7d b3 a6 86 46 57 10 c2 b9 57 78 ad 34 47 c9 8e 85 49 51 0b 62 dc a4 06 c7 a2 e5 b8 27 ed f9 ea de f1 be 5d b3 b1 ae e0 4c 44 47 18 05 21 95 4a 0e 92 07 1c f4 e3 a4 83 db 3c 68 2f 83 76 38 37 0b f0 d2 9d 9e 30 f1 12 70 81 4f 03 3e df 4d 3e ff 00 b2 15 16 93 6d 8f 6e c1 8a 44 39 71 d2 18 67 8f 6c 7a 6b 40 aa 4b db 55 b9 9e c7 88 98 79 61 52 ad ac 15 51 dc 36 07 20 7f 74 fb e9 4f 7a de f7 18 37 7b 68 b3 4c cc 6c 48 90 a4 52 38 cf ce 7d 06 3d b5 ae d0 f0 a5 38 5a f0 49 2c 3f c4 c5 22 38 67 1d 99 89 38 c0 fe f1 d2 d5 ad 8d 36 bf da 0d 63 14 26 48 5e 9b 4f fc 5e 70 e5 db a8 ff 00 31 fa eb 2e 75 a0 95 ba 6d b9 c0 24 27 da 7c 65 61 45 bf 84 bc a8 79 0d d7 ce 3e b8 3d b4 6b c3 3e 26 df 36 7b 70 ed db f0 92 3a d3 48 02 4b 62 22 ec bf 4c fb 63 f4 Data Ascii: d}FWWx4GIQb']LDG!J<h/v870pO>M>mnD9qglzk@KUyaRQ6 tOz7{hLlHR8}=8ZI,?"8g86c&H^O^p1.um$'\|eaEy>=k>&6{p:HKb"Lc
2023-11-22 16:22:37 UTC	1252	IN	Data Raw: f1 16 2b c7 5f 76 ae 25 86 30 12 24 54 72 ac 07 27 1d 5d f1 eb ed a0 96 2b c5 6e db de 92 39 5a 69 1b 2c eb 0b 05 6e 78 f9 49 cf bf a6 8a cf 66 4d be 61 ba 47 03 4d 1f 4a ab 46 1f 18 3d 38 ea 24 f6 18 fa 7f d9 b2 d0 cc 42 e7 92 f2 51 9b 94 64 77 a3 d2 3a a2 8d 3a 24 f9 c8 3d b0 b8 c1 f7 d7 d8 a8 74 33 b3 d7 c2 ab e1 87 5b f1 ec 3b fd b5 9f 53 f1 8d db 9e 2c dd 61 32 2c 34 9a 88 68 e3 63 83 1b 2f 4e 08 38 f5 2c 7d b8 fb 6a cd 6d fe c3 6d ab 5a 6b c4 c2 ce 19 bc b9 4b b8 0b f8 d7 27 b0 6c 80 08 e4 60 9f 5e 61 18 d9 5d d5 1a 08 26 21 39 cf 5e 48 6d 54 7a c9 1a 40 25 25 cb 39 ea 19 53 f8 72 79 39 c7 7f ae b9 2e de 8b 24 b3 b8 8c 09 17 12 e3 d7 19 c6 7f 5d 50 b3 b8 6c bb ed 0e b9 22 5f 88 b1 e5 c4 d1 b5 80 a4 af e2 e9 c7 38 f5 e7 83 ec 74 2a bd 08 62 7b 46 9d Data Ascii: +_v%0$Tr']+n9Zi,nxIfMaGMJF=8$BQdw::$=t3[;S,a2,4hc/N8,}jmmZkK'l`^a]&!9^HmTz@%%9Sry9.$]Pl"_8t*b{F
2023-11-22 16:22:37 UTC	1252	IN	Data Raw: 67 16 67 9a 5a ef 6c 2b 37 22 27 8c a8 20 01 c7 1c 76 d7 cd 72 4b 4d 1d 8b 42 28 67 9f 32 e5 99 26 95 00 3d 2b c7 04 03 c6 39 d4 d2 e7 52 7b b8 fe 7c 94 e9 d3 1d d6 8f 26 4c 6c 07 7c 1d 66 50 78 7e d6 ea 05 6d ef f6 88 f2 ba 10 af 5a 94 91 c4 51 87 a1 c1 ee 3e da d2 12 c4 16 15 96 09 e3 7e 08 ca 38 38 fd 35 97 d8 f0 dd 44 a1 24 fb a7 80 57 fd cd bc 87 8a 84 d9 6b 0a 40 c4 c9 d3 83 c1 1f 87 bf cd 9f 4d 32 e5 ba 06 27 b7 d3 fd 5a 46 cf 4b e0 28 a5 6f 8f b3 74 27 69 6c c8 1d ff 00 32 00 cf e7 ac 4b f6 e5 1c a9 e2 a5 2b 27 44 0d 51 0e 3a 8a 0e b0 58 e7 83 c9 38 1d fd 86 b4 ff 00 d9 cd 2a 74 f6 8b 27 6d da 6f ed 75 26 b4 64 4a f7 b8 93 f0 22 93 82 49 03 2b c6 79 e3 ed a0 be 32 5a 31 78 b4 d9 9e 8c 76 66 35 a2 42 c0 a9 70 3a 9b 1c 1c fb 9e c3 3d f9 d5 39 e1 ad Data Ascii: ggZl+7"' vrKMB(g2&=+9R{\|&Ll\|fPx~mZQ>~885D$Wk@M2'ZFK(ot'il2K+'DQ:X8*t'mou&dJ"I+y2Z1xvf5Bp:=9
2023-11-22 16:22:37 UTC	1082	IN	Data Raw: d0 8d 42 ef 51 18 51 6d 3f dd 3f 20 be 6d 55 de 1d bd 6c 5e ad 0d 7a 75 eb b1 91 cc 7f 34 98 53 ce 3d 7b 64 0d 0a 3e 25 dd f7 11 2b 6d a9 52 8d 25 6e 9e bb 04 1e a3 8e c4 9e 09 c7 b0 c0 e3 27 b6 8d d1 bd 0e ff 00 b7 c8 93 44 63 82 cd 25 6c ab e7 82 99 24 7b e3 d3 8f 43 a5 fa db 0e e1 49 da 2a 5b d5 25 ae ec 18 99 20 90 b0 fa f4 98 d8 06 fb 1f cf 58 e9 97 1f 44 4a e9 e9 2b 69 c5 37 1a 85 a1 dd 83 a6 23 ee bc ef c1 2e ad 7d b8 b6 e5 fb c4 46 1a cc 3b 43 1c 86 c6 48 c8 24 7a fa 02 3e da e1 5a dd 58 20 79 2a ee 16 a9 18 53 cb 96 39 46 66 6c f1 f2 e3 86 3c 72 0f 4e 3b ea dd cd 89 9e e5 c9 aa 4f 4e 5a d6 c9 f3 60 dc 12 46 3f 8c 30 cf 4a 90 dc 80 7b fd c6 ba a6 d0 2b c5 3b bd ed a2 ed e9 e5 66 b5 f1 bd 5d 0c 03 05 22 3e 91 d5 9f 31 b0 49 0a 73 80 07 7d 6f a5 50 Data Ascii: BQQm?? mUl^zu4S={d>%+mR%n'Dc%l${CI[% XDJ+i7#.}F;CH$z>ZX yS9Ffl<rN;ONZ`F?0J{+;f]">1Is}oP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49851	142.250.31.119	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:37 UTC	800	OUT	GET /vi/BGgisoPG7vw/mqdefault.jpg?sqp=-oaymwEFCJQBEFM&rs=AMzJL3ltyvOaBQdGhLfjXMZ6rOVXlWEjag HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:22:37 UTC	655	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 79 6f 75 74 75 62 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 79 6f 75 74 75 62 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/cs
2023-11-22 16:22:37 UTC	597	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 09 06 07 08 07 06 09 08 07 08 0a 0a 09 0b 0d 16 0f 0d 0c 0c 0d 1b 14 15 10 16 20 1d 22 22 20 1d 1f 1f 24 28 34 2c 24 26 31 27 1f 1f 2d 3d 2d 31 35 37 3a 3a 3a 23 2b 3f 44 3f 38 43 34 39 3a 37 01 0a 0a 0a 0d 0c 0d 1a 0f 0f 1a 37 25 1f 25 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 ff c0 00 11 08 00 53 00 94 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 05 06 00 04 01 02 03 07 ff c4 00 42 10 00 02 01 03 03 02 01 08 06 07 07 04 03 00 00 00 01 02 03 00 04 11 05 12 21 06 31 13 14 22 41 51 61 71 91 d1 15 16 23 32 81 b1 07 42 52 72 a2 c1 Data Ascii: JFIF "" $(4,$&1'-=-157:::#+?D?8C49:77%%77777777777777777777777777777777777777777777777777S"B!1"AQaq#2BRr
2023-11-22 16:22:37 UTC	1252	IN	Data Raw: fa bd 3e 8c 52 a4 50 c6 ba 6c d3 a8 22 68 6e 84 45 49 ce 43 2b 10 7e 2a 45 73 e1 2b 45 f9 3c 8d 26 16 58 9a 0d 05 43 8f 38 1c 7c 73 43 a5 b8 79 33 b9 b1 df 20 1c 0e f9 ec 3d bc e2 88 5e 33 cf d3 32 30 e0 8d a4 e3 d8 45 2d 94 7b 7d 92 4a 24 5d c3 20 1f d6 15 9f 1c 76 b6 fb 34 c9 eb c1 75 dc e0 92 47 c2 b1 66 4b dc a0 c1 ef de b3 62 9e 5b 31 11 8e 14 64 83 4c 7a 67 4f de 5c 28 9e 1b 59 19 41 fb c1 7b fb a9 4e 4a 3f d7 e4 a4 af 90 0e b2 26 8a fd 23 27 86 89 58 71 ef aa a7 3b 58 e4 65 46 4d 31 f5 85 a8 89 ad 5e 55 2a ea b8 20 8e 7d 34 06 3d 87 78 da 4e 56 8c 72 4e 09 8a 4b 91 db a1 9c cd 6d 24 43 96 f0 41 fc 73 9a 54 d7 9e 4b fd 6e f6 78 62 90 a4 93 36 c6 d8 70 40 e3 f9 53 9f 42 42 89 11 6e cd b4 fe 23 8f 95 2f 75 3e a7 a8 43 d4 b7 d6 96 b6 e9 24 31 3a be c5 Data Ascii: >RPl"hnEIC+~Es+E<&XC8\|sCy3 =^320E-{}J$] v4uGfKb[1dLzgO\(YA{NJ?&#'Xq;XeFM1^U }4=xNVrNKm$CAsTKnxb6p@SBBn#/u>C$1:
2023-11-22 16:22:37 UTC	1252	IN	Data Raw: ac 2d 1b 48 8d ac 5c 07 45 ee 47 a4 0c fa 7d 55 d6 3a c6 3c 1e 6e 69 cf 2c d3 99 7b 42 ea ad 36 e7 a6 1d ba 85 55 ae 13 52 89 23 4b 57 48 e5 2b b7 ef 1d d9 f3 01 ef 8f 65 17 97 58 b3 b9 bb d6 93 44 bd d0 62 bd 8f 53 c9 96 ff 00 61 89 ed 08 1f fd 6c 72 b8 dd 9c e3 9f f4 ad 35 1e 89 d1 47 55 68 50 8d 2e 38 2c 2e e5 ba 8e 48 59 ee 23 99 b6 44 cc b9 0c c7 20 10 3c e5 38 63 5c f4 9e 89 d1 a2 5d 0c 46 ed 7c 2e e3 ba 33 cd e7 c0 6e 99 70 63 4c 12 76 77 c6 46 09 f7 d3 6d 25 67 18 e3 4e 46 97 13 e9 7a 96 91 af 43 a3 dd 58 45 17 d2 32 1b 61 3c ab 11 30 0b 7c 7d 9e 79 2b bf b0 f5 7b ab 96 95 79 a7 ab 03 63 7b a4 41 7d f5 62 d1 22 96 e4 c5 b5 6e 43 79 e1 b7 02 37 e3 be 79 a2 76 9d 25 a7 4d a8 68 bf 48 e9 42 c7 c5 8e e7 ca 74 ef 1a 52 80 2a 9d 8f c9 de a0 f3 c6 79 c7 Data Ascii: -H\EG}U:<ni,{B6UR#KWH+eXDbSalr5GUhP.8,.HY#D <8c\]F\|.3npcLvwFm%gNFzCXE2a<0\|}y+{yc{A}b"nCy7yv%MhHBtR*y
2023-11-22 16:22:37 UTC	619	IN	Data Raw: e1 19 4f be 3d f4 e7 a4 4d 1c 7a 74 0a 5c 76 3c 0e 7d 26 94 2e a3 58 67 31 a1 24 00 32 4f a4 e2 8f e8 b7 d6 f1 58 81 39 cc 8a c4 16 76 c8 c7 b8 d1 9b 98 d8 62 74 e8 37 24 f1 49 0c 89 e0 b3 86 42 31 80 33 c7 6a 50 d1 5b c0 bc da e8 de 28 f3 4e 1b 05 7d 78 f5 d3 2c 9d 43 a6 22 f9 d1 78 87 1c 05 c5 0e d0 2c 96 7d 45 ae a6 96 18 55 98 be 5b 25 57 27 38 1e b3 51 8e 4a 09 d9 59 16 ed 50 5b a8 de 29 34 3b a5 0f d8 2f 7e 39 dc 28 47 48 df 08 66 f2 59 c6 d1 27 11 49 8e 33 df 6e 7d be 8a 39 a9 e9 b6 f7 76 93 44 97 b1 f9 c3 cd c9 18 c8 e4 73 41 7a 64 b1 87 84 e7 3b 79 38 23 fa 3e 8a a8 35 a3 44 ce f7 4c 70 0d 22 fd dc 9f 79 ad 84 b2 77 6c 7c 01 aa 26 3b b8 8f 9c 24 18 f5 73 f9 56 05 c4 88 70 cd 93 ea 61 5c 68 ea e4 12 f2 97 cf 0a 4f e1 59 f1 cf 66 0a 6a 80 bb 7f d6 Data Ascii: O=Mzt\v<}&.Xg1$2OX9vbt7$IB13jP[(N}x,C"x,}EU[%W'8QJYP[)4;/~9(GHfY'I3n}9vDsAzd;y8#>5DLp"ywl\|&;$sVpa\hOYfj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49859	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:37 UTC	6501	OUT	GET /xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=0/excm=A9AtR,ABxRVc,AD6AIb,Adehte,B0xr7b,BH66lf,BVlhmd,CX5LId,D1J6He,DwnPgd,FljZ5,FmnE6b,FuQWyc,G4tpde,GLGZs,Ghqpae,H5Kvfd,JxE93,KbVV9d,KzZUob,M4w02c,MRb7nf,Mvtsf,Mxvwsd,Nly0kd,NsEUGe,ONYJsd,Oa7Qpb,Ok4XMd,Ollhtb,P4P2Yd,PX0cP,PoJj8d,PvSBGf,Q6cvgf,SJv1S,SLDaee,SMP3Ge,SfrWY,SiRWre,TO0csb,Trirbc,TurKxc,Tzd4Yc,U3Ovcc,UQpTU,UiPhkb,VZLyBe,WH3Khc,Wx0Z2d,WxJ6g,X6KoRc,XHo6qe,XbupY,Xk0c,XkocRe,Y2uByd,Yltq7c,YuNOCb,ZgKcee,ZrXR8b,Zudxcb,ZyUK2d,adn7N,ak946,bXyZdf,cKV22c,dI5Ii,eTv59e,erGeSe,f1YgBd,fNMhz,hU1IHe,hfJ9hb,hj5Zu,i5w0Yc,iAQA6,j0qO9b,jkRPje,kCkfUb,kOSi0d,oXRDzc,pPanAd,pTgt2d,pbYjsd,pqUxUc,qngJBf,rL2AR,ra3uhb,sU6eaf,tlA71,tzTB5,uUhTh,vJPFse,vbjdXc,vhpQNc,vymBNb,wKa2Bd,xB2dQd,y0l7mc,y25qZb,yChgtb,yuQBec,zjNhL,zoFt6e,zs9f9d/ed=1/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/m=sb_wiz,aa,abd,sywb,sywe,sywf,sywd,sywi,sy281,async,sy1gy,bgd,sy2jv,sy2jw,foot,sy2av,sy5j7,kyn,sy2il,lli,mu,sf,sy231,sy232,sy5l0,sonic,sytg,syti,sytj,syth,sy26n,sy1c4,sy634,spch,tl,syzm,sy3v1,syqj,sy11l,sy11m,sy11n,sy6cd,sy6ce,EkevXb,syqd,L1AAkb,syqe,fiAufb,sy11x,SZXsif,syxr,syxv,syxu,sy239,sy2nj,sy2nk,sy2ni,sy35k,sy64n,sYEX8b,sy4x1,qtz6lf,sy4x5,k8v0pe,syr1,sy13q,sy196,sy192,sy193,sy194,sy195,sy191,sy13r,sy198,sy197,sy199,sy19a,sy19f,sy19i,sy19j,sy19k,sy19l,sy19e,sy19d,sy19m,sy19n,NO84gd,E9M6Uc,Zilivc,sy1a7,sy1hf,sy1he,sy1hd,sy1k9,sy1ke,sy1kr,sy1kw,b5lhvb,IoGlCf,sy18l,sy18m,C8HsP,sy19o,sy19p,gOTY1,g0Ekse,rKbWof,ARtdse,tE6Rzd,AjRVIe,kpAr,phecbc,q28gvc,eTVOC,MafjZe,SQAZFd,OjtwQe,XTmxwe,YlMcGe,bIMMof,FjjTod,TnJGKb,SnmExf,ESo8je,Pq506,O19q8,nMfLA,bplExb,UMk45c,tDA9G,UX8qee,tW711b,R6UkWb,xMHx5e,QzraZb,I9JIjc,nzu4Ud,gGYzg,jtFQAf,FjvQsb,RcBNJ,uDw4Nb,rEAvrc,z2eFcc,GQxACe,vjBnvc,g1fOXc,syta,sy254,sy1ad,sy1ae,sy255,sy259,sy13p,syzc,sy1ep,sy152,sy15m,sy1mj,sy1mi,sy1ms,sy1m9,sy1mt,sy1mu,sy27e,sy27b,sy27c,sy27a,sy283,sy27g,sy28m,sy28n,sy28o,sy28r,sy28p,sy27f,syb0,syb4,syb5,syas,syat,sy13l,sy155,sy14g,sy14a,sy14r,sy14s,sy15b,sy15c,sy15d,sy1mk,sy1n2,sy1xa,sy1xd,sy1xp,sy27j,sy27k,sy27w,sy27i,sy27l,sy27m,sy27q,sy27p,sy27o,sy14c,sy13g,sy27s,sy27r,sy27t,sy27v,syax,syaw,sy27u,sy27x,sy286,sy288,sy287,sy1n8,sy28e,sy28f,sy28h,sy28g,sy1gr,sy1gs,sy289,sy28a,sy28c,sy28d,sy28b,sy27n,sy1h5,sy298,sy27z,sy280,sy13h,syzb,syze,sy13i,sy13k,sy13m,sy13f,sy13n,sy13j,sy13o,sy1ac,sy28z,sy290,sy291,sy28y,sy296,sy297,sy28j,sy28i,sy28t,sy28x,sy28w,sy1kc,sy1kb,sy28k,sy28l,sy28q,sy29a,sy29b,sy1ag,sy1a5,sy1bh,sy285,sy284,sy28u,sy28s,sy28v,sy292,sy293,sy295,sy299,sy294,sy29c,sy282,sy29d,sy29e,sy29f,sy5kw,sy5yc,USgF8d,sy22r,sy257,sy29g,sy5ng,A4Uref,sy5v6,Mf3zEb,sy5lf,sy5ne,sy5t3,sy5t4,sy60p,KH32Sd,sy13s,sy256,sy258,sy32x,sy5n4,sy5nh,sy5ni,uQjlvd,syj7,syje,syjf,syl1,syl2,syne,synk,synt,syoh,syp2,syp5,syzj,sy1d9,sy1da,sy1db,sy1dc,sy1dd,sy1di,sy1dj,syzf,sy10o,sy1cw,sy1ga,sy1g9,sy1eo,sy1ey,syja,syn3,sytr,sy1cs,syhj,syid,syie,syif,syig,syih,syii,syik,syil,syim,syin,syio,syip,sy1dm,sy1dn,sy1ei,sy1ej,syi4,syi9,syib,syhr,sy1ec,sy1ed,sy1ek,sy1el,sy1em,sy1en,sy1ge,sy1gf,sy1gg,sy1gh,sy1h4,sy235,sym2,sy1cq,sy26e,sykg,sy1dp,sy1dt,sy1e7,sy1eg,sy1e8,sy1ee,sy1ef,sy1du,sy1eh,sy1er,sy26b,sy26f,syk0,sy26i,sykf,sy26j,sy26k,sy26g,sy5a4,sy5in,sy10p,sy10q,sy5jb,sy5m9,sy5ma,sy5nk,sy5nl,sy5nj,sy5nm,sy5nn,sy5no,sy5np,sy5nq,sy5nr,sy5ns,sy5nt,sy5nu,sy5nv,sy5nw,sy5nx,sy5ny,sy5nz,sy5o0,sy5o1,sy5o2,sy5o3,sy5o4,sy5o5,sy5o6,sy5o7,sy5o8,sy5o9,sy5oa,sy5ob,sy5oc,sy5od,sy5oe,sy5oi,sy5oj,sy5ok,sy5om,sytq,sytp,syu1,syu0,syts,sytt,sytu,syty,sytx,sytv,sy5te,sy5td,sy5to,sy5tn,sy1e4,sy5tz,sy5u3,sy5vo,sy5vp,sy5wf,sy19c,sy1d5,sy1de,sym9,syji,sylz,syma,sy11t,sym8,sy1cn,sy1cp,syj2,syjj,syju,syjy,sykh,syl5,syl6,sylj,sym7,sy1d6,sy1dl,sy1do,syls,sylu,sylo,sylw,syly,syuj,syul,sy1cy,sy1cx,sy1cz,sy1d0,sy1dq,sy1f4,sy1f2,sy1f1,sy1f3,sym5,sy1fq,sy1fr,sy1fp,sy1fs,sy1ft,sy1fu,sy1fv,sy1fw,sy1fx,sy1fy,sy1fz,sy1g1,sy1g0,sy1g3,sy1g2,sy5vc,sy5v9,sy5va,sy5vb,sy5xx,sy5v8,sy1d3,sy1d4,sy1et,sy1eu,sykl,sykw,syle,syn6,syhx,syn7,sy1eq,sy1es,sy1ev,sy1ew,sy1ex,sy1ez,syml,symm,syx8,syxm,syxn,sy1f5,symj,symk,syx7,sy1f7,sy1f8,sy1f6,symo,symp,symq,symr,syx0,syx1,sy1fa,sywy,sy1fc,sy1fd,sy1fb,sy5t0,sy5ue,sy5ui,sy5uf,sy5um,sy5jc,sy5ua,sy5ut,sy5uq,sy5v2,sy5v4,sy5vd,sy5wd,sy5oh,sy5wg,sym3,sy1cr,sy1e5,sy1e6,sy137,sy2dt,sy2du,sy5av,sy5aw,sy5ay,sy5ta,sy5hd,sy5uo,sy1fh,sy5of,sy5og,sy1dy,sy5uc,sy5ud,sy5ub,sy5vw,sy5w4,sy5w5,sy5w3,sy5w6,sy5w2,sy5vx,sy5wm,sy5wn,sy5wo,sy5wp,sy5wq,sy5hc,sy5wr,sy5ws,sy5wt,sy5wu,sy5wv,sy5ww,sy5wy,sy5wx,sy5xk,sy5xl,sy5xn,sy5wj,sy5wl,sy5x1,sy5x2,sy5x0,sygq,sy5x6,sy5x5,sy5x7,sy5xa,sy5xb,sy5xc,sy1d7,sy2l0,sy2l1,sy2l2,sy2l3,sy2l6,sy5x8,sy5x9,sy5x4,sy5xd,sy5x3,sy5xi,sy5xm,sy5xj,sy5xh,syi6,syi0,syi2,syjb,syjc,syjh,sym0,sym1,syhk,syhm,syhn,syyv,sy1e1,sy1e9,sy1e2,syhw,sygp,syhy,syht,syhz,syi1,syi3,syi5,sy1ea,sy1eb,sy5hg,sy1dv,sy5xf,sy5xg,sy5xe,sy5wz,sy5xp,sy5xo,sy5xq,sy5xr,sy5xs,sy5xt,sy5xv,sy5xw,sy5xu,sy5wk,sy5wi,sy5wh,sy5y2,sy5y1,syiw,syk1,syk3,syk5,syke,syll,sylm,syln,sy1dr,sy5hb,sy5y6,sy5y8,sy5y7,syzg,sygk,sygm,sygr,sygs,sygt,sygu,sygv,sygw,sygx,sygy,sygz,syh0,syh1,syh2?xjs=s3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0
2023-11-22 16:22:38 UTC	819	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 4f 72 69 67 69 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 74 72 75 73 74 65 64 2d 74 79 70 65 73 2d 66 6f 72 20 27 73 63 72 69 70 74 27 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 67 77 73 2d 74 65 61 6d 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesVary: Accept-Encoding, OriginContent-Type: text/javascript; charset=UTF-8Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-teamCross-Origin-R
2023-11-22 16:22:38 UTC	433	IN	Data Raw: 5f 46 5f 69 6e 73 74 61 6c 6c 43 73 73 28 22 2e 6b 30 4a 6a 67 2c 2e 62 72 4b 6d 78 62 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 7b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 6b 30 4a 6a 67 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 20 2e 6e 69 4f 34 75 2c 2e 62 72 4b 6d 78 62 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 20 2e 6e 69 4f 34 75 7b 6f 75 74 6c 69 6e 65 3a 32 70 78 20 73 6f 6c 69 64 20 23 34 32 38 35 66 34 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 31 70 78 7d 2e 6e 69 4f 34 75 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 Data Ascii: _F_installCss(".k0Jjg,.brKmxb:focus-visible{outline:0}.k0Jjg:focus-visible .niO4u,.brKmxb:focus-visible .niO4u{outline:2px solid #4285f4;outline-offset:1px}.niO4u{-webkit-box-align:center;-webkit-align-items:center;align-items:center;box-sizing:border-box
2023-11-22 16:22:38 UTC	1252	IN	Data Raw: 7d 2e 67 7a 56 31 74 20 2e 6e 69 4f 34 75 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 72 65 74 63 68 3b 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 73 74 72 65 74 63 68 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 6e 69 4f 34 75 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 5c 22 5c 22 3b 68 65 69 67 68 74 3a 34 38 70 78 3b 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 34 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f Data Ascii: }.gzV1t .niO4u{-webkit-box-align:stretch;-webkit-align-items:stretch;align-items:stretch;display:-webkit-box;display:-webkit-flex;display:flex}.niO4u::before{content:\"\";height:48px;left:0;margin-top:-24px;margin-left:-1px;margin-right:-1px;position:abso
2023-11-22 16:22:38 UTC	1252	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 61 33 63 35 66 66 3b 63 6f 6c 6f 72 3a 23 30 30 31 64 33 35 7d 2e 69 41 79 50 77 64 2e 6b 30 4a 6a 67 5b 73 65 6c 65 63 74 65 64 5d 20 2e 64 33 6f 33 41 64 2c 2e 69 41 79 50 77 64 2e 6b 30 4a 6a 67 5b 73 65 6c 65 63 74 65 64 5d 20 2e 63 6c 4f 78 31 65 2c 2e 69 41 79 50 77 64 2e 6b 30 4a 6a 67 5b 73 65 6c 65 63 74 65 64 5d 20 2e 51 75 55 33 57 62 7b 63 6f 6c 6f 72 3a 23 30 30 31 64 33 35 7d 2e 73 4c 6c 37 64 65 2e 6b 30 4a 6a 67 5b 73 65 6c 65 63 74 65 64 5d 20 2e 6e 69 4f 34 75 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 38 66 30 66 65 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 23 31 39 36 37 64 32 7d 2e 73 4c 6c 37 64 65 2e 6b 30 4a 6a Data Ascii: ackground-color:#a3c5ff;color:#001d35}.iAyPwd.k0Jjg[selected] .d3o3Ad,.iAyPwd.k0Jjg[selected] .clOx1e,.iAyPwd.k0Jjg[selected] .QuU3Wb{color:#001d35}.sLl7de.k0Jjg[selected] .niO4u{background-color:#e8f0fe;border-color:transparent;color:#1967d2}.sLl7de.k0Jj
2023-11-22 16:22:38 UTC	1252	IN	Data Raw: 30 4a 6a 67 5b 73 65 6c 65 63 74 65 64 5d 20 2e 51 75 55 33 57 62 7b 63 6f 6c 6f 72 3a 23 31 61 37 33 65 38 7d 2e 64 32 44 35 68 2e 72 6c 74 37 55 62 2e 6b 30 4a 6a 67 5b 73 65 6c 65 63 74 65 64 5d 20 2e 64 33 6f 33 41 64 3a 6e 6f 74 28 2e 55 58 77 68 76 62 29 2c 2e 64 32 44 35 68 2e 65 46 53 57 78 64 2e 6b 30 4a 6a 67 5b 73 65 6c 65 63 74 65 64 5d 20 2e 64 33 6f 33 41 64 3a 6e 6f 74 28 2e 55 58 77 68 76 62 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 64 32 44 35 68 2e 6b 30 4a 6a 67 5b 73 65 6c 65 63 74 65 64 5d 20 2e 52 30 34 54 4f 64 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 64 32 44 35 68 2e 4c 77 64 56 30 65 2e 6b 30 4a 6a Data Ascii: 0Jjg[selected] .QuU3Wb{color:#1a73e8}.d2D5h.rlt7Ub.k0Jjg[selected] .d3o3Ad:not(.UXwhvb),.d2D5h.eFSWxd.k0Jjg[selected] .d3o3Ad:not(.UXwhvb){display:none}.d2D5h.k0Jjg[selected] .R04TOd{display:-webkit-box;display:-webkit-flex;display:flex}.d2D5h.LwdV0e.k0Jj
2023-11-22 16:22:38 UTC	1252	IN	Data Raw: 36 38 41 30 2e 6b 30 4a 6a 67 5b 73 65 6c 65 63 74 65 64 5d 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 20 2e 51 75 55 33 57 62 7b 63 6f 6c 6f 72 3a 23 31 38 35 61 62 63 7d 2e 57 36 38 41 30 2e 6b 30 4a 6a 67 5b 73 65 6c 65 63 74 65 64 5d 3a 68 6f 76 65 72 20 2e 64 33 6f 33 41 64 2c 2e 57 36 38 41 30 2e 6b 30 4a 6a 67 5b 73 65 6c 65 63 74 65 64 5d 3a 68 6f 76 65 72 20 2e 63 6c 4f 78 31 65 2c 2e 57 36 38 41 30 2e 6b 30 4a 6a 67 5b 73 65 6c 65 63 74 65 64 5d 3a 68 6f 76 65 72 20 2e 51 75 55 33 57 62 7b 63 6f 6c 6f 72 3a 23 31 38 35 61 62 63 7d 2e 57 36 38 41 30 2e 6b 30 4a 6a 67 5b 73 65 6c 65 63 74 65 64 5d 3a 68 6f 76 65 72 20 2e 6b 48 74 63 73 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 32 65 33 66 63 7d 2e 70 39 70 64 63 2e 6b 30 4a 6a Data Ascii: 68A0.k0Jjg[selected]:focus-visible .QuU3Wb{color:#185abc}.W68A0.k0Jjg[selected]:hover .d3o3Ad,.W68A0.k0Jjg[selected]:hover .clOx1e,.W68A0.k0Jjg[selected]:hover .QuU3Wb{color:#185abc}.W68A0.k0Jjg[selected]:hover .kHtcsd{background-color:#d2e3fc}.p9pdc.k0Jj
2023-11-22 16:22:38 UTC	1252	IN	Data Raw: 32 34 2c 30 2e 33 38 29 3b 63 6f 6c 6f 72 3a 72 67 62 61 28 36 30 2c 36 34 2c 36 37 2c 30 2e 33 38 29 7d 2e 54 42 43 39 75 62 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 70 78 7d 2e 47 30 76 51 72 62 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 70 78 7d 67 2d 65 78 70 61 6e 64 61 62 6c 65 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 65 6a 61 55 6a 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 68 65 69 67 68 74 3a 31 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 30 20 30 3b 77 69 64 74 68 3a 31 70 78 3b 7a 2d 69 6e 64 65 78 3a 2d 31 7d 2e 71 79 49 34 78 7b 64 69 73 70 6c Data Ascii: 24,0.38);color:rgba(60,64,67,0.38)}.TBC9ub{margin-left:0px;margin-right:0px}.G0vQrb{padding-bottom:2px}g-expandable-container{display:block}.ejaUje{background:#fff;height:1px;position:absolute;-webkit-transform-origin:0 0;width:1px;z-index:-1}.qyI4x{displ
2023-11-22 16:22:38 UTC	1252	IN	Data Raw: 32 2c 30 2c 31 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 35 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 35 73 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 68 61 70 65 2d 74 77 65 65 6e 2d 72 69 67 68 74 7b 35 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 2e 39 29 20 74 72 61 6e 73 6c 61 74 65 58 28 38 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 2e 39 29 20 74 72 61 6e 73 6c 61 74 65 58 28 38 25 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 68 61 70 65 2d 74 77 65 65 6e 2d 72 69 67 68 74 7b Data Ascii: 2,0,1);-webkit-animation-duration:.5s;animation-duration:.5s}@-webkit-keyframes shape-tween-right{50%{-webkit-transform:scaleY(.9) translateX(8%);transform:scaleY(.9) translateX(8%)}100%{-webkit-transform:none;transform:none}}@keyframes shape-tween-right{
2023-11-22 16:22:38 UTC	1252	IN	Data Raw: 73 70 61 6e 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 73 68 61 70 65 2d 74 77 65 65 6e 2d 75 70 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 73 68 61 70 65 2d 74 77 65 65 6e 2d 75 70 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 68 61 70 65 2d 74 77 65 65 6e 2d 64 6f 77 6e 7b 35 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 2e 39 29 20 74 72 61 6e 73 6c 61 74 65 59 28 38 25 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 2e 39 29 20 74 72 61 6e 73 6c 61 74 65 59 28 38 25 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 68 61 70 65 2d 74 Data Ascii: span{-webkit-animation-name:shape-tween-up;animation-name:shape-tween-up}@-webkit-keyframes shape-tween-down{50%{-webkit-transform:scaleX(.9) translateY(8%);transform:scaleX(.9) translateY(8%)}100%{-webkit-transform:none;transform:none}}@keyframes shape-t
2023-11-22 16:22:38 UTC	1252	IN	Data Raw: 6e 65 7d 67 2d 6d 6f 72 65 2d 6c 69 6e 6b 2e 52 42 32 71 35 65 20 61 2e 70 59 6f 75 7a 62 7b 63 6f 6c 6f 72 3a 23 32 30 32 31 32 34 7d 67 2d 6d 6f 72 65 2d 6c 69 6e 6b 2e 52 42 32 71 35 65 20 61 2e 70 59 6f 75 7a 62 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 67 2d 6d 6f 72 65 2d 6c 69 6e 6b 2e 6c 51 69 38 46 63 7b 68 65 69 67 68 74 3a 33 30 70 78 3b 74 6f 70 3a 31 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 72 68 48 49 47 64 2e 4c 34 6f 5a 66 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 48 62 58 35 39 65 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 70 78 7d 2e 55 35 36 4f 47 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 38 70 78 7d 2e 78 54 57 6c 74 66 7b 6d 61 72 67 Data Ascii: ne}g-more-link.RB2q5e a.pYouzb{color:#202124}g-more-link.RB2q5e a.pYouzb{display:inline-block}g-more-link.lQi8Fc{height:30px;top:12px;position:relative}.rhHIGd.L4oZf{background-color:transparent}.HbX59e{margin-left:0px}.U56OG{margin-right:8px}.xTWltf{marg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49852	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:38 UTC	6591	OUT	GET /xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=0/excm=A9AtR,ABxRVc,AD6AIb,Adehte,B0xr7b,BH66lf,BVlhmd,CX5LId,D1J6He,DwnPgd,FljZ5,FmnE6b,FuQWyc,G4tpde,GLGZs,Ghqpae,H5Kvfd,JxE93,KbVV9d,KzZUob,M4w02c,MRb7nf,Mvtsf,Mxvwsd,Nly0kd,NsEUGe,ONYJsd,Oa7Qpb,Ok4XMd,Ollhtb,P4P2Yd,PX0cP,PoJj8d,PvSBGf,Q6cvgf,SJv1S,SLDaee,SMP3Ge,SfrWY,SiRWre,TO0csb,Trirbc,TurKxc,Tzd4Yc,U3Ovcc,UQpTU,UiPhkb,VZLyBe,WH3Khc,Wx0Z2d,WxJ6g,X6KoRc,XHo6qe,XbupY,Xk0c,XkocRe,Y2uByd,Yltq7c,YuNOCb,ZgKcee,ZrXR8b,Zudxcb,ZyUK2d,adn7N,ak946,bXyZdf,cKV22c,dI5Ii,eTv59e,erGeSe,f1YgBd,fNMhz,hU1IHe,hfJ9hb,hj5Zu,i5w0Yc,iAQA6,j0qO9b,jkRPje,kCkfUb,kOSi0d,oXRDzc,pPanAd,pTgt2d,pbYjsd,pqUxUc,qngJBf,rL2AR,ra3uhb,sU6eaf,tlA71,tzTB5,uUhTh,vJPFse,vbjdXc,vhpQNc,vymBNb,wKa2Bd,xB2dQd,y0l7mc,y25qZb,yChgtb,yuQBec,zjNhL,zoFt6e,zs9f9d/ed=1/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/m=syh3,syh4,syh5,syh6,syh7,syh8,syh9,syha,syhb,syhc,syhd,syhe,syhf,syhg,syhh,sy1d8,sy1d2,sy1d1,sy1ds,syi7,syz6,sy1e3,sy1fi,sy1kd,sy1kh,sy1ks,sy1kt,sy1ns,sy1ww,sy25b,sy26o,sy26q,sy2m0,syom,syoo,syop,syoq,sy5ao,sy5as,sy1np,sy5aq,sy5at,sy5pm,sy5pn,sy5po,sy5pp,sy5pq,sy5pr,sy2fn,sy5ps,sy5pt,sy5pu,sy5pv,sy5pw,sy2fl,sy5px,sy5py,sy5pz,sy5q0,sy5q1,sy2fr,sy5q2,sy5q3,sy5q4,sy5q5,sy5qc,sy5qd,sy5qe,sy5qf,sy5qg,sy5qh,sy5qi,sy5qj,sy5qk,sy5sw,sy5sz,sy5tc,sy5t9,sy5ti,sy5tj,sy5tf,sy5th,sy5tg,sy5tk,sy5tl,sy5tq,sy5uj,sy5s5,sy5s6,sy5s7,sy2m6,sy2m7,sy2mo,sy2mq,sy594,sy5u6,sy5uv,sy5uu,sy5ve,sy5vs,sy5vu,sy5vv,sy5xy,sy5xz,sy5y0,sy5ya,sy5yd,syo5,syod,syp1,sy5au,sy5lm,sy5lo,sy5lp,sy5lq,sy5lr,sy5ls,sy5lt,sy5lu,sy5lv,sy5lw,sy5lx,sy5ly,sy5lz,sy5m0,sy5m1,sy5m2,sy5m3,sy5m4,sy5m5,sy5m6,sy5m7,sy5m8,sy5mp,sy5mq,sy5mt,sy5mv,sy5mw,sy5mx,sy5my,sy5mz,sy5n0,sy5n1,sy5n2,sy5n3,sy5n7,sy5nc,sy5on,sy5oo,sy5op,sy5oq,sy5os,sy5ot,sy5ou,sy5ov,sy5ow,sy5p1,sy5p2,sy5p3,sy5p4,sy5p8,sy5p9,sy5tp,sy5tw,sy5tx,sy5ms,sy5ts,sy5uh,sy5mr,sy5up,sy5uw,sy5ln,sy5ur,sy5ul,sy5yf,sy5yg,sy5ye,sy2dl,sy5ty,sy5yh,sy5yi,sy5yk,sy5yj,sy5yl,sy5yn,sy5ym,sy5yo,sy5yq,sy5yr,sy5ys,sy5yt,sy5yw,sy5yu,sy5yv,sy5yx,sy5yp,sy5z1,sy5z2,sylb,sylf,sy5z0,sy5z3,sy5z5,sy5z6,sy5z7,sy5z4,sy5z9,sy5z8,sy5za,sy5yz,sy5zc,sy5zb,sy5yy,sy5ze,sy5yb,syjr,syk9,sy1df,syl4,symc,syme,symg,sy1dg,sy1dh,syjw,sykk,sy1dk,syk8,sy1g7,syj3,sy1fk,sy26m,sy1cg,sy5u9,sy5u8,syjs,syk2,sy5zl,sy5zk,sy5zh,sy5zn,sy5zm,sy60a,sy60b,sy60o,syka,sykd,syj9,synb,sy13c,sy13t,sy13u,sy1cm,syjq,sykb,sy1ct,sy1f0,sy223,syiq,syis,sy26l,sy2me,sy5ax,sy5io,sy5mb,sy5mc,sy5md,sy5me,sy5mf,sy5mg,sy5mh,sy5mi,sy5mj,sy5mk,sy5ml,sy5mm,sy5mn,sy5mo,sy5mu,sy5oy,sy5p0,sy5p5,sy5p6,sy5p7,sy5pa,sy5pb,sy5pc,sy5pd,sy5pe,sy5pf,sy5pg,sy5ph,sy5pi,sy5pj,sy5pk,sy5pl,sy5or,sy5oz,sy5us,sy60r,sy60s,sy60t,sy60q,sy5ol,sy5st,sy5sv,sy5u1,sy5u2,syld,syk6,symx,sy1cu,sy26p,sy5ox,sy5q6,sy5q7,sy5q8,sy5q9,sy5qa,sy5qb,sy5r3,sy5r4,sy5r7,sy5r8,sy5r9,sy5ra,sy5rc,sy5re,sy5rq,sy5rr,sy5rs,sy5rt,sy5ru,sy5rv,sy5rw,sy5rx,sy5ry,sy5rz,sy5s2,sy5s3,sy5s4,sy5s8,sy5s9,sy5sa,sy5sb,sy5sd,sy5se,sy5sf,sy5sg,sy5sh,sy5si,sy5sj,sy5sk,sy5sl,sy5sm,sy5sn,sy5so,sy5sp,sy5sq,sy5sr,sy5ss,sy5su,sy5un,syhi,sy26s,sy58m,sy5an,sy5r5,sy5r6,sy5rb,sy5rd,sy5rf,sy5rh,sy5ri,sy5rj,sy5rp,sy5s0,sy5s1,sy5sc,sy5ug,sy5u7,sy5uk,sy5ql,sy5qm,sy5ux,sy5u4,sy5uy,sy5qu,sy5r0,sy5r2,symb,sy1dw,sy1dx,sy5qt,sy5qv,sy5qw,sy5qx,sy5qy,sy5qz,sy5r1,sy5zf,sy5zg,sy5zq,sy60h,sy60u,sy60v,sy60x,sy60y,sy61c,sy61s,sy60w,sy60z,sy610,sy611,sy612,sy613,sy614,sy615,sy616,sy617,sy618,sy619,sy61a,sy61b,sy61d,sy61e,sy61f,sy61g,sy61h,sy61i,sy61j,sy2fp,sy61k,sy61l,sy61m,sy61n,sy61o,sy61p,sy61q,sy61r,sy61t,sy61u,sy61v,sy61w,sy61x,sy61y,sy61z,sy5zs,sy5zu,sy5zt,sy5zr,syp8,sy60m,sy620,sy622,sy623,sy621,IPPcAe,sy32w,sy624,bTGkSd,sy5zi,QzG4od,FCJvZd,sy32v,UagZge,sy626,RagDlc,oUlnpc,ALJqWb,R2kc8b,sy27h,sy5l8,sy5lj,syxc,syxe,syxd,syxf,syxi,syxj,syz2,syxg,sy11q,syv0,sy1c9,sy1io,sy1ip,sy5a0,sy5t6,sy5t5,sy5t7,sy5t2,sy5t1,sy62d,XTUZWc,sy2n5,sy32y,sy5tu,sy5tv,sy62e,sy62g,XT8Clf,sy339,dhnGve,syvj,sy33a,sy5a8,rQR4vd,sy32z,yezgIc,syyt,syyx,syyq,syys,syz3,syz4,Ah7cLd,syyy,syz5,WOJjZ,syz1,sy10f,sy46v,sy5a9,sy63f,sy63g,sy627,sy6e1,sy6hd,Da4hkd,sy25d,fVaWL,sy46s,xfmZMb,sy10e,sy26u,sy26v,sy26y,sy26z,sy26w,sy270,sy271,sy36g,sy5a7,aD8OEe,SMquOb,sy10k,sy10l,sy10m,sy10n,d5EhJe,sy10r,zx30Y,syzh,syzi,sy10t,sy10v,sy10w,sy10x,sy10z,sy110,sy111,sy10y,syr0,sy113,sy114,sy112,T1HOxc,sy115,Wo3n8,sy3yw,sy6e3,UzbKLd,sy11o,sy1h7,C8ffD,sy1h8,sy1ha,ZUBru,sy1h9,sy1hb,sy1hc,rTuANe,sy25s,yfZcPd,syzo,Dpem5c,syy0,sy1h2,sy1h3,sy1h6,Fy1Pv,sy36a,msmzHf,sy1hv,NEW1Qc,xBbsrc,sy1hx,IX53Tb,sy2kv,ROaKxe,sy2kw,sy2kx,pj8IAe,sy34h,vRe0ve,sy26c,sy34f,oWVrne,syuy,syut,syuw,syux,sywl,sywk,syy3,sy1iv,sy1ir,sy250,sy251,sy26d,sy2lb,sy34i,sy5al,sy635,ogmBcd,sy1is,sy34e,Gg40M,sy3ps,GU4Gab,sy4qf,sy3o8,sy16o,sy170,sy172,sy1lv,sy646,sy644,sy645,sy643,sy647,tboZfc,sy3p6,T5VV,sy3nc,aDVF7,sy3pu,rhYw1b,sy1hh,sy1ka,sy1kg,sy1kl,sy1kp,sy1kq,Hlw0zd,M6QgBb,sy1ku,sy1l6,EO13pd,MpJwZc,UUJqVe,sy75,sOXFj,sy74,s39S4,NTMZac,nAFL3,oGtAuc,sy7x,sy7y,q0xTif,y05UD,sy1sc,sy2br,sy1av,sy1aw,sy1ax,sy1se,sy2ii,sy1ay,sy1az,sy1n9,sy1na,sy1nb,sy1b6,sy1nf,sy1ng,sy1ne,sy1nh,syem,sy1nj,sy1ni,sy1nk,sy1nl,sy1nm,sy1nq,sy1nu,sy1nz,sy2nc,sy2nd,sy64f,sy1nt,sy1nx,sy1ny,sy1o3,sy1o6,sy1o8,sy1zd,sy64g,sy64i,epYOx?xjs=s3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0
2023-11-22 16:22:38 UTC	819	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 4f 72 69 67 69 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 74 72 75 73 74 65 64 2d 74 79 70 65 73 2d 66 6f 72 20 27 73 63 72 69 70 74 27 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 67 77 73 2d 74 65 61 6d 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesVary: Accept-Encoding, OriginContent-Type: text/javascript; charset=UTF-8Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-teamCross-Origin-R
2023-11-22 16:22:38 UTC	433	IN	Data Raw: 5f 46 5f 69 6e 73 74 61 6c 6c 43 73 73 28 22 2e 67 55 41 63 66 66 20 2e 6e 69 4f 34 75 7b 68 65 69 67 68 74 3a 33 32 70 78 7d 2e 55 5a 58 41 4e 63 2e 67 55 41 63 66 66 20 2e 6e 69 4f 34 75 7b 74 6f 70 3a 33 70 78 3b 68 65 69 67 68 74 3a 30 7d 2e 6d 4b 6a 45 41 64 2e 67 55 41 63 66 66 20 2e 6e 69 4f 34 75 7b 68 65 69 67 68 74 3a 30 7d 2e 67 55 41 63 66 66 2e 72 6c 74 37 55 62 20 2e 63 6c 4f 78 31 65 7b 6d 61 72 67 69 6e 3a 35 70 78 20 31 36 70 78 7d 2e 67 55 41 63 66 66 20 2e 63 6c 4f 78 31 65 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 7d 2e 67 55 41 63 66 66 20 2e 52 30 34 54 4f 64 2c 2e 67 55 41 63 66 66 20 2e 64 33 6f 33 41 64 7b 68 65 69 67 68 74 3a 31 36 70 78 7d 2e 62 61 63 48 6f 64 2e 67 55 41 63 66 66 20 2e 52 30 34 54 4f 64 2c 2e 62 61 63 Data Ascii: _F_installCss(".gUAcff .niO4u{height:32px}.UZXANc.gUAcff .niO4u{top:3px;height:0}.mKjEAd.gUAcff .niO4u{height:0}.gUAcff.rlt7Ub .clOx1e{margin:5px 16px}.gUAcff .clOx1e{line-height:12px}.gUAcff .R04TOd,.gUAcff .d3o3Ad{height:16px}.bacHod.gUAcff .R04TOd,.bac
2023-11-22 16:22:38 UTC	1252	IN	Data Raw: 64 69 75 73 3a 34 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 4e 51 59 4a 76 63 2e 72 6c 74 37 55 62 20 2e 63 6c 4f 78 31 65 7b 6d 61 72 67 69 6e 3a 35 70 78 20 31 36 70 78 7d 2e 4e 51 59 4a 76 63 20 2e 57 6f 41 39 5a 64 7b 68 65 69 67 68 74 3a 32 30 70 78 7d 2e 4e 51 59 4a 76 63 2e 67 7a 56 31 74 20 2e 6e 69 4f 34 75 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 34 30 70 78 7d 2e 4e 51 59 4a 76 63 2e 50 72 6a 4c 38 63 20 2e 6e 69 4f 34 75 7b 68 65 69 67 68 74 3a 34 30 70 78 7d 2e 7a 71 72 4f 30 20 2e 6e 69 4f 34 75 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 61 64 63 65 30 3b 63 6f 6c 6f 72 3a 23 34 64 35 31 35 36 7d 2e 7a 71 72 4f Data Ascii: dius:4px;height:20px;overflow:hidden}.NQYJvc.rlt7Ub .clOx1e{margin:5px 16px}.NQYJvc .WoA9Zd{height:20px}.NQYJvc.gzV1t .niO4u{min-height:40px}.NQYJvc.PrjL8c .niO4u{height:40px}.zqrO0 .niO4u{background-color:#fff;border:1px solid #dadce0;color:#4d5156}.zqrO
2023-11-22 16:22:38 UTC	1252	IN	Data Raw: 7d 2e 4e 74 61 4d 70 62 20 2e 51 75 55 33 57 62 7b 63 6f 6c 6f 72 3a 23 34 64 35 31 35 36 7d 2e 4e 74 61 4d 70 62 2e 6b 30 4a 6a 67 3a 68 6f 76 65 72 20 2e 6e 69 4f 34 75 2c 2e 4e 74 61 4d 70 62 2e 6b 30 4a 6a 67 3a 68 6f 76 65 72 20 2e 51 75 55 33 57 62 7b 63 6f 6c 6f 72 3a 23 34 64 35 31 35 36 7d 2e 4e 74 61 4d 70 62 2e 6b 30 4a 6a 67 3a 68 6f 76 65 72 20 2e 6b 48 74 63 73 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 36 30 2c 36 34 2c 36 37 2c 30 2e 30 38 29 7d 2e 62 72 4b 6d 78 62 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 20 2e 4e 74 61 4d 70 62 2e 6b 30 4a 6a 67 20 2e 6b 48 74 63 73 64 2c 2e 4e 74 61 4d 70 62 2e 6b 30 4a 6a 67 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 20 2e 6b 48 74 63 73 64 7b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: }.NtaMpb .QuU3Wb{color:#4d5156}.NtaMpb.k0Jjg:hover .niO4u,.NtaMpb.k0Jjg:hover .QuU3Wb{color:#4d5156}.NtaMpb.k0Jjg:hover .kHtcsd{background-color:rgba(60,64,67,0.08)}.brKmxb:focus-visible .NtaMpb.k0Jjg .kHtcsd,.NtaMpb.k0Jjg:focus-visible .kHtcsd{background
2023-11-22 16:22:38 UTC	1252	IN	Data Raw: 6f 63 75 73 2d 76 69 73 69 62 6c 65 20 2e 6e 69 4f 34 75 2c 2e 46 52 37 5a 53 63 2e 6b 30 4a 6a 67 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 20 2e 51 75 55 33 57 62 7b 63 6f 6c 6f 72 3a 23 31 39 36 37 64 32 7d 2e 46 52 37 5a 53 63 2e 6b 30 4a 6a 67 3a 68 6f 76 65 72 20 2e 6b 48 74 63 73 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 36 2c 31 31 35 2c 32 33 32 2c 30 2e 30 38 29 7d 2e 62 72 4b 6d 78 62 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 20 2e 46 52 37 5a 53 63 2e 6b 30 4a 6a 67 20 2e 6b 48 74 63 73 64 2c 2e 46 52 37 5a 53 63 2e 6b 30 4a 6a 67 3a 66 6f 63 75 73 2d 76 69 73 69 62 6c 65 20 2e 6b 48 74 63 73 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 36 2c 31 31 35 2c 32 33 32 2c 30 2e 30 38 29 Data Ascii: ocus-visible .niO4u,.FR7ZSc.k0Jjg:focus-visible .QuU3Wb{color:#1967d2}.FR7ZSc.k0Jjg:hover .kHtcsd{background-color:rgba(26,115,232,0.08)}.brKmxb:focus-visible .FR7ZSc.k0Jjg .kHtcsd,.FR7ZSc.k0Jjg:focus-visible .kHtcsd{background-color:rgba(26,115,232,0.08)
2023-11-22 16:22:38 UTC	1252	IN	Data Raw: 72 3a 23 31 61 30 64 61 62 7d 2e 6f 67 42 78 46 20 2e 51 75 55 33 57 62 7b 63 6f 6c 6f 72 3a 23 31 61 30 64 61 62 7d 2e 6a 64 4f 72 5a 63 20 2e 6e 69 4f 34 75 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 31 61 37 33 65 38 7d 2e 6a 64 4f 72 5a 63 20 2e 51 75 55 33 57 62 7b 63 6f 6c 6f 72 3a 23 31 61 37 33 65 38 7d 2e 6a 64 4f 72 5a 63 2e 6b 30 4a 6a 67 3a 68 6f 76 65 72 20 2e 6e 69 4f 34 75 2c 2e 6a 64 4f 72 5a 63 2e 6b 30 4a 6a 67 3a 68 6f 76 65 72 20 2e 51 75 55 33 57 62 7b 63 6f 6c 6f 72 3a 23 31 39 36 37 64 32 7d 2e 6a 64 4f 72 5a 63 2e 6b 30 4a 6a 67 3a 68 6f 76 65 72 20 2e 6b 48 74 63 73 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 36 2c 31 31 35 2c 32 33 32 2c 30 2e 30 38 29 Data Ascii: r:#1a0dab}.ogBxF .QuU3Wb{color:#1a0dab}.jdOrZc .niO4u{background-color:#fff;color:#1a73e8}.jdOrZc .QuU3Wb{color:#1a73e8}.jdOrZc.k0Jjg:hover .niO4u,.jdOrZc.k0Jjg:hover .QuU3Wb{color:#1967d2}.jdOrZc.k0Jjg:hover .kHtcsd{background-color:rgba(26,115,232,0.08)
2023-11-22 16:22:38 UTC	1252	IN	Data Raw: 76 69 73 69 62 6c 65 20 2e 6b 48 74 63 73 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 30 32 31 32 34 33 33 7d 2e 62 72 4b 6d 78 62 20 2e 66 58 56 61 72 66 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 2e 6b 30 4a 6a 67 3a 68 6f 76 65 72 20 2e 6b 48 74 63 73 64 2c 2e 66 58 56 61 72 66 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 2e 6b 30 4a 6a 67 3a 68 6f 76 65 72 20 2e 6b 48 74 63 73 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 30 32 31 32 34 33 33 7d 2e 62 72 4b 6d 78 62 3a 61 63 74 69 76 65 20 2e 66 58 56 61 72 66 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 2e 6b 30 4a 6a 67 20 2e 6b 48 74 63 73 64 2c 2e 66 58 56 61 72 66 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 2e 6b 30 4a 6a 67 3a 61 63 74 69 76 65 Data Ascii: visible .kHtcsd{background-color:#20212433}.brKmxb .fXVarf:not([disabled]).k0Jjg:hover .kHtcsd,.fXVarf:not([disabled]).k0Jjg:hover .kHtcsd{background-color:#20212433}.brKmxb:active .fXVarf:not([disabled]).k0Jjg .kHtcsd,.fXVarf:not([disabled]).k0Jjg:active
2023-11-22 16:22:38 UTC	1252	IN	Data Raw: 78 7d 2e 47 55 48 61 7a 64 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 7d 2e 42 62 31 4a 4b 65 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 38 70 78 7d 2e 72 4e 53 78 42 65 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 30 70 78 7d 2e 57 74 35 54 66 65 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 70 78 7d 2e 75 59 5a 70 73 66 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 70 78 7d 2e 7a 73 59 4d 4d 65 7b 70 61 64 64 69 6e 67 3a 30 70 78 7d 2e 63 42 34 4e 46 63 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 36 70 78 7d 2e 4d 38 43 45 65 64 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 32 70 78 7d 2e 68 57 49 4d 64 64 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 70 78 7d 2e 4f 64 42 68 4d 7b 70 Data Ascii: x}.GUHazd{padding-bottom:12px}.Bb1JKe{padding-bottom:8px}.rNSxBe{padding-bottom:20px}.Wt5Tfe{padding-left:0px;padding-right:0px}.uYZpsf{padding-left:0px}.zsYMMe{padding:0px}.cB4NFc{padding-top:16px}.M8CEed{padding-top:12px}.hWIMdd{padding-top:0px}.OdBhM{p
2023-11-22 16:22:38 UTC	1252	IN	Data Raw: 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 39 61 61 30 61 36 3b 63 6f 6c 6f 72 3a 23 65 38 65 61 65 64 7d 2e 78 61 4e 73 66 63 3a 66 6f 63 75 73 20 2e 5a 6b 6b 4b 31 65 3a 68 6f 76 65 72 3a 6e 6f 74 28 3a 61 63 74 69 76 65 29 2c 61 3a 66 6f 63 75 73 20 2e 5a 6b 6b 4b 31 65 3a 68 6f 76 65 72 3a 6e 6f 74 28 3a 61 63 74 69 76 65 29 2c 2e 5a 6b 6b 4b 31 65 3a 68 6f 76 65 72 3a 66 6f 63 75 73 3a 6e 6f 74 28 3a 61 63 74 69 76 65 29 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 64 61 64 63 65 30 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 39 61 61 30 61 36 7d 2e 78 61 4e 73 66 63 3a 61 63 74 69 76 65 20 2e 5a 6b 6b 4b 31 65 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 2c 61 3a 61 63 74 69 76 65 20 2e 5a 6b 6b 4b 31 65 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 Data Ascii: border-color:#9aa0a6;color:#e8eaed}.xaNsfc:focus .ZkkK1e:hover:not(:active),a:focus .ZkkK1e:hover:not(:active),.ZkkK1e:hover:focus:not(:active){background:#dadce0;border-color:#9aa0a6}.xaNsfc:active .ZkkK1e:not([disabled]),a:active .ZkkK1e:not([disabled])
2023-11-22 16:22:38 UTC	1252	IN	Data Raw: 73 66 63 3a 61 63 74 69 76 65 20 2e 5a 6b 6b 4b 31 65 5b 73 65 6c 65 63 74 65 64 5d 2c 61 3a 61 63 74 69 76 65 20 2e 5a 6b 6b 4b 31 65 5b 73 65 6c 65 63 74 65 64 5d 2c 2e 5a 6b 6b 4b 31 65 5b 73 65 6c 65 63 74 65 64 5d 3a 61 63 74 69 76 65 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 32 70 78 20 72 67 62 61 28 36 36 2c 31 33 33 2c 32 34 34 2c 30 2e 33 29 2c 30 20 31 70 78 20 33 70 78 20 31 70 78 20 72 67 62 61 28 36 36 2c 31 33 33 2c 32 34 34 2c 30 2e 31 35 29 7d 2e 78 61 4e 73 66 63 3a 61 63 74 69 76 65 20 2e 5a 6b 6b 4b 31 65 5b 73 65 6c 65 63 74 65 64 5d 2c 61 3a 61 63 74 69 76 65 20 2e 5a 6b 6b 4b 31 65 5b 73 65 6c 65 63 74 65 64 5d 2c 2e 5a 6b 6b 4b 31 65 5b 73 65 6c 65 63 74 65 64 5d 3a 61 63 74 69 76 65 7b 63 6f 6c 6f 72 3a 23 31 37 34 65 Data Ascii: sfc:active .ZkkK1e[selected],a:active .ZkkK1e[selected],.ZkkK1e[selected]:active{box-shadow:0 1px 2px rgba(66,133,244,0.3),0 1px 3px 1px rgba(66,133,244,0.15)}.xaNsfc:active .ZkkK1e[selected],a:active .ZkkK1e[selected],.ZkkK1e[selected]:active{color:#174e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49862	172.253.63.119	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:38 UTC	518	OUT	GET /vi/BGgisoPG7vw/mqdefault.jpg?sqp=-oaymwEFCJQBEFM&rs=AMzJL3ltyvOaBQdGhLfjXMZ6rOVXlWEjag HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:22:38 UTC	654	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 79 6f 75 74 75 62 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 79 6f 75 74 75 62 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/cs
2023-11-22 16:22:38 UTC	598	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 09 06 07 08 07 06 09 08 07 08 0a 0a 09 0b 0d 16 0f 0d 0c 0c 0d 1b 14 15 10 16 20 1d 22 22 20 1d 1f 1f 24 28 34 2c 24 26 31 27 1f 1f 2d 3d 2d 31 35 37 3a 3a 3a 23 2b 3f 44 3f 38 43 34 39 3a 37 01 0a 0a 0a 0d 0c 0d 1a 0f 0f 1a 37 25 1f 25 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 ff c0 00 11 08 00 53 00 94 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 05 06 00 04 01 02 03 07 ff c4 00 42 10 00 02 01 03 03 02 01 08 06 07 07 04 03 00 00 00 01 02 03 00 04 11 05 12 21 06 31 13 14 22 41 51 61 71 91 d1 15 16 23 32 81 b1 07 42 52 72 a2 c1 Data Ascii: JFIF "" $(4,$&1'-=-157:::#+?D?8C49:77%%77777777777777777777777777777777777777777777777777S"B!1"AQaq#2BRr
2023-11-22 16:22:38 UTC	1252	IN	Data Raw: bd 3e 8c 52 a4 50 c6 ba 6c d3 a8 22 68 6e 84 45 49 ce 43 2b 10 7e 2a 45 73 e1 2b 45 f9 3c 8d 26 16 58 9a 0d 05 43 8f 38 1c 7c 73 43 a5 b8 79 33 b9 b1 df 20 1c 0e f9 ec 3d bc e2 88 5e 33 cf d3 32 30 e0 8d a4 e3 d8 45 2d 94 7b 7d 92 4a 24 5d c3 20 1f d6 15 9f 1c 76 b6 fb 34 c9 eb c1 75 dc e0 92 47 c2 b1 66 4b dc a0 c1 ef de b3 62 9e 5b 31 11 8e 14 64 83 4c 7a 67 4f de 5c 28 9e 1b 59 19 41 fb c1 7b fb a9 4e 4a 3f d7 e4 a4 af 90 0e b2 26 8a fd 23 27 86 89 58 71 ef aa a7 3b 58 e4 65 46 4d 31 f5 85 a8 89 ad 5e 55 2a ea b8 20 8e 7d 34 06 3d 87 78 da 4e 56 8c 72 4e 09 8a 4b 91 db a1 9c cd 6d 24 43 96 f0 41 fc 73 9a 54 d7 9e 4b fd 6e f6 78 62 90 a4 93 36 c6 d8 70 40 e3 f9 53 9f 42 42 89 11 6e cd b4 fe 23 8f 95 2f 75 3e a7 a8 43 d4 b7 d6 96 b6 e9 24 31 3a be c5 43 Data Ascii: >RPl"hnEIC+~Es+E<&XC8\|sCy3 =^320E-{}J$] v4uGfKb[1dLzgO\(YA{NJ?&#'Xq;XeFM1^U }4=xNVrNKm$CAsTKnxb6p@SBBn#/u>C$1:C
2023-11-22 16:22:38 UTC	1252	IN	Data Raw: 2d 1b 48 8d ac 5c 07 45 ee 47 a4 0c fa 7d 55 d6 3a c6 3c 1e 6e 69 cf 2c d3 99 7b 42 ea ad 36 e7 a6 1d ba 85 55 ae 13 52 89 23 4b 57 48 e5 2b b7 ef 1d d9 f3 01 ef 8f 65 17 97 58 b3 b9 bb d6 93 44 bd d0 62 bd 8f 53 c9 96 ff 00 61 89 ed 08 1f fd 6c 72 b8 dd 9c e3 9f f4 ad 35 1e 89 d1 47 55 68 50 8d 2e 38 2c 2e e5 ba 8e 48 59 ee 23 99 b6 44 cc b9 0c c7 20 10 3c e5 38 63 5c f4 9e 89 d1 a2 5d 0c 46 ed 7c 2e e3 ba 33 cd e7 c0 6e 99 70 63 4c 12 76 77 c6 46 09 f7 d3 6d 25 67 18 e3 4e 46 97 13 e9 7a 96 91 af 43 a3 dd 58 45 17 d2 32 1b 61 3c ab 11 30 0b 7c 7d 9e 79 2b bf b0 f5 7b ab 96 95 79 a7 ab 03 63 7b a4 41 7d f5 62 d1 22 96 e4 c5 b5 6e 43 79 e1 b7 02 37 e3 be 79 a2 76 9d 25 a7 4d a8 68 bf 48 e9 42 c7 c5 8e e7 ca 74 ef 1a 52 80 2a 9d 8f c9 de a0 f3 c6 79 c7 1e Data Ascii: -H\EG}U:<ni,{B6UR#KWH+eXDbSalr5GUhP.8,.HY#D <8c\]F\|.3npcLvwFm%gNFzCXE2a<0\|}y+{yc{A}b"nCy7yv%MhHBtR*y
2023-11-22 16:22:38 UTC	618	IN	Data Raw: 19 4f be 3d f4 e7 a4 4d 1c 7a 74 0a 5c 76 3c 0e 7d 26 94 2e a3 58 67 31 a1 24 00 32 4f a4 e2 8f e8 b7 d6 f1 58 81 39 cc 8a c4 16 76 c8 c7 b8 d1 9b 98 d8 62 74 e8 37 24 f1 49 0c 89 e0 b3 86 42 31 80 33 c7 6a 50 d1 5b c0 bc da e8 de 28 f3 4e 1b 05 7d 78 f5 d3 2c 9d 43 a6 22 f9 d1 78 87 1c 05 c5 0e d0 2c 96 7d 45 ae a6 96 18 55 98 be 5b 25 57 27 38 1e b3 51 8e 4a 09 d9 59 16 ed 50 5b a8 de 29 34 3b a5 0f d8 2f 7e 39 dc 28 47 48 df 08 66 f2 59 c6 d1 27 11 49 8e 33 df 6e 7d be 8a 39 a9 e9 b6 f7 76 93 44 97 b1 f9 c3 cd c9 18 c8 e4 73 41 7a 64 b1 87 84 e7 3b 79 38 23 fa 3e 8a a8 35 a3 44 ce f7 4c 70 0d 22 fd dc 9f 79 ad 84 b2 77 6c 7c 01 aa 26 3b b8 8f 9c 24 18 f5 73 f9 56 05 c4 88 70 cd 93 ea 61 5c 68 ea e4 12 f2 97 cf 0a 4f e1 59 f1 cf 66 0a 6a 80 bb 7f d6 0a Data Ascii: O=Mzt\v<}&.Xg1$2OX9vbt7$IB13jP[(N}x,C"x,}EU[%W'8QJYP[)4;/~9(GHfY'I3n}9vDsAzd;y8#>5DLp"ywl\|&;$sVpa\hOYfj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49863	172.253.63.119	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:38 UTC	518	OUT	GET /vi/WyL-v--M_BI/mqdefault.jpg?sqp=-oaymwEFCJQBEFM&rs=AMzJL3kxxj4wLr4MUw1312xJqtgxGYib6A HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:22:38 UTC	656	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 79 6f 75 74 75 62 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 79 6f 75 74 75 62 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/cs
2023-11-22 16:22:38 UTC	596	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 09 06 07 08 07 06 09 08 07 08 0a 0a 09 0b 0d 16 0f 0d 0c 0c 0d 1b 14 15 10 16 20 1d 22 22 20 1d 1f 1f 24 28 34 2c 24 26 31 27 1f 1f 2d 3d 2d 31 35 37 3a 3a 3a 23 2b 3f 44 3f 38 43 34 39 3a 37 01 0a 0a 0a 0d 0c 0d 1a 0f 0f 1a 37 25 1f 25 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 37 ff c0 00 11 08 00 53 00 94 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 05 06 00 04 07 03 02 01 08 ff c4 00 3f 10 00 02 02 01 03 02 04 04 03 05 05 06 07 00 00 00 01 02 03 04 11 00 05 21 12 31 06 13 41 51 14 22 61 71 32 81 91 07 15 23 a1 b1 42 62 c1 d1 f0 Data Ascii: JFIF "" $(4,$&1'-=-157:::#+?D?8C49:77%%77777777777777777777777777777777777777777777777777S"?!1AQ"aq2#Bb
2023-11-22 16:22:38 UTC	1252	IN	Data Raw: 07 05 64 b1 d2 dc 7d b3 a6 86 46 57 10 c2 b9 57 78 ad 34 47 c9 8e 85 49 51 0b 62 dc a4 06 c7 a2 e5 b8 27 ed f9 ea de f1 be 5d b3 b1 ae e0 4c 44 47 18 05 21 95 4a 0e 92 07 1c f4 e3 a4 83 db 3c 68 2f 83 76 38 37 0b f0 d2 9d 9e 30 f1 12 70 81 4f 03 3e df 4d 3e ff 00 b2 15 16 93 6d 8f 6e c1 8a 44 39 71 d2 18 67 8f 6c 7a 6b 40 aa 4b db 55 b9 9e c7 88 98 79 61 52 ad ac 15 51 dc 36 07 20 7f 74 fb e9 4f 7a de f7 18 37 7b 68 b3 4c cc 6c 48 90 a4 52 38 cf ce 7d 06 3d b5 ae d0 f0 a5 38 5a f0 49 2c 3f c4 c5 22 38 67 1d 99 89 38 c0 fe f1 d2 d5 ad 8d 36 bf da 0d 63 14 26 48 5e 9b 4f fc 5e 70 e5 db a8 ff 00 31 fa eb 2e 75 a0 95 ba 6d b9 c0 24 27 da 7c 65 61 45 bf 84 bc a8 79 0d d7 ce 3e b8 3d b4 6b c3 3e 26 df 36 7b 70 ed db f0 92 3a d3 48 02 4b 62 22 ec bf 4c fb 63 f4 Data Ascii: d}FWWx4GIQb']LDG!J<h/v870pO>M>mnD9qglzk@KUyaRQ6 tOz7{hLlHR8}=8ZI,?"8g86c&H^O^p1.um$'\|eaEy>=k>&6{p:HKb"Lc
2023-11-22 16:22:38 UTC	1252	IN	Data Raw: f1 16 2b c7 5f 76 ae 25 86 30 12 24 54 72 ac 07 27 1d 5d f1 eb ed a0 96 2b c5 6e db de 92 39 5a 69 1b 2c eb 0b 05 6e 78 f9 49 cf bf a6 8a cf 66 4d be 61 ba 47 03 4d 1f 4a ab 46 1f 18 3d 38 ea 24 f6 18 fa 7f d9 b2 d0 cc 42 e7 92 f2 51 9b 94 64 77 a3 d2 3a a2 8d 3a 24 f9 c8 3d b0 b8 c1 f7 d7 d8 a8 74 33 b3 d7 c2 ab e1 87 5b f1 ec 3b fd b5 9f 53 f1 8d db 9e 2c dd 61 32 2c 34 9a 88 68 e3 63 83 1b 2f 4e 08 38 f5 2c 7d b8 fb 6a cd 6d fe c3 6d ab 5a 6b c4 c2 ce 19 bc b9 4b b8 0b f8 d7 27 b0 6c 80 08 e4 60 9f 5e 61 18 d9 5d d5 1a 08 26 21 39 cf 5e 48 6d 54 7a c9 1a 40 25 25 cb 39 ea 19 53 f8 72 79 39 c7 7f ae b9 2e de 8b 24 b3 b8 8c 09 17 12 e3 d7 19 c6 7f 5d 50 b3 b8 6c bb ed 0e b9 22 5f 88 b1 e5 c4 d1 b5 80 a4 af e2 e9 c7 38 f5 e7 83 ec 74 2a bd 08 62 7b 46 9d Data Ascii: +_v%0$Tr']+n9Zi,nxIfMaGMJF=8$BQdw::$=t3[;S,a2,4hc/N8,}jmmZkK'l`^a]&!9^HmTz@%%9Sry9.$]Pl"_8t*b{F
2023-11-22 16:22:38 UTC	1252	IN	Data Raw: 67 16 67 9a 5a ef 6c 2b 37 22 27 8c a8 20 01 c7 1c 76 d7 cd 72 4b 4d 1d 8b 42 28 67 9f 32 e5 99 26 95 00 3d 2b c7 04 03 c6 39 d4 d2 e7 52 7b b8 fe 7c 94 e9 d3 1d d6 8f 26 4c 6c 07 7c 1d 66 50 78 7e d6 ea 05 6d ef f6 88 f2 ba 10 af 5a 94 91 c4 51 87 a1 c1 ee 3e da d2 12 c4 16 15 96 09 e3 7e 08 ca 38 38 fd 35 97 d8 f0 dd 44 a1 24 fb a7 80 57 fd cd bc 87 8a 84 d9 6b 0a 40 c4 c9 d3 83 c1 1f 87 bf cd 9f 4d 32 e5 ba 06 27 b7 d3 fd 5a 46 cf 4b e0 28 a5 6f 8f b3 74 27 69 6c c8 1d ff 00 32 00 cf e7 ac 4b f6 e5 1c a9 e2 a5 2b 27 44 0d 51 0e 3a 8a 0e b0 58 e7 83 c9 38 1d fd 86 b4 ff 00 d9 cd 2a 74 f6 8b 27 6d da 6f ed 75 26 b4 64 4a f7 b8 93 f0 22 93 82 49 03 2b c6 79 e3 ed a0 be 32 5a 31 78 b4 d9 9e 8c 76 66 35 a2 42 c0 a9 70 3a 9b 1c 1c fb 9e c3 3d f9 d5 39 e1 ad Data Ascii: ggZl+7"' vrKMB(g2&=+9R{\|&Ll\|fPx~mZQ>~885D$Wk@M2'ZFK(ot'il2K+'DQ:X8*t'mou&dJ"I+y2Z1xvf5Bp:=9
2023-11-22 16:22:38 UTC	1082	IN	Data Raw: d0 8d 42 ef 51 18 51 6d 3f dd 3f 20 be 6d 55 de 1d bd 6c 5e ad 0d 7a 75 eb b1 91 cc 7f 34 98 53 ce 3d 7b 64 0d 0a 3e 25 dd f7 11 2b 6d a9 52 8d 25 6e 9e bb 04 1e a3 8e c4 9e 09 c7 b0 c0 e3 27 b6 8d d1 bd 0e ff 00 b7 c8 93 44 63 82 cd 25 6c ab e7 82 99 24 7b e3 d3 8f 43 a5 fa db 0e e1 49 da 2a 5b d5 25 ae ec 18 99 20 90 b0 fa f4 98 d8 06 fb 1f cf 58 e9 97 1f 44 4a e9 e9 2b 69 c5 37 1a 85 a1 dd 83 a6 23 ee bc ef c1 2e ad 7d b8 b6 e5 fb c4 46 1a cc 3b 43 1c 86 c6 48 c8 24 7a fa 02 3e da e1 5a dd 58 20 79 2a ee 16 a9 18 53 cb 96 39 46 66 6c f1 f2 e3 86 3c 72 0f 4e 3b ea dd cd 89 9e e5 c9 aa 4f 4e 5a d6 c9 f3 60 dc 12 46 3f 8c 30 cf 4a 90 dc 80 7b fd c6 ba a6 d0 2b c5 3b bd ed a2 ed e9 e5 66 b5 f1 bd 5d 0c 03 05 22 3e 91 d5 9f 31 b0 49 0a 73 80 07 7d 6f a5 50 Data Ascii: BQQm?? mUl^zu4S={d>%+mR%n'Dc%l${CI[% XDJ+i7#.}F;CH$z>ZX yS9Ffl<rN;ONZ`F?0J{+;f]">1Is}oP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49860	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:38 UTC	3073	OUT	POST /gen_204?atyp=i&ei=xSpeZdzvEPyy5NoPhfSymAc&ct=slh&v=t1&m=HV&pv=0.3437515802423883&me=1:1700670149735,V,0,0,1280,907:0,B,6838:0,N,1,xSpeZdzvEPyy5NoPhfSymAc:0,R,1,9,102,36,92,33:0,R,1,CAoQAA,102,88,1120,40:0,R,1,CA4QAQ,102,88,89,40:0,R,1,CAwQAQ,197,88,63,40:0,R,1,CAsQAQ,266,88,65,40:0,R,1,CA0QAQ,337,88,76,40:0,R,1,CAMQAg,106,205,1082,40:0,R,1,CAIQGQ,106,294,652,6173:0,R,1,CAkQAA,106,294,652,288:0,R,1,CAkQAw,106,332,652,234:0,R,1,CA8QAA,106,626,652,761:0,R,1,CBcQAA,106,654,652,511:0,R,1,CBEQAA,106,695,326,308:0,R,1,CBQQAA,433,695,326,148:0,R,1,CBYQAA,433,844,326,159:5027,x:41,T:0,R,1,9,102,36,92,33:0,R,1,CAoQAA,102,88,851,40:0,R,1,CA4QAQ,102,88,89,40:0,R,1,CAwQAQ,197,88,63,40:0,R,1,CAsQAQ,266,88,65,40:0,R,1,CA0QAQ,337,88,76,40:0,R,1,CIkBEAE,419,88,73,40:0,R,1,CJwBEAE,497,88,64,40:0,R,1,CJsBEAE,568,88,69,40:0,R,1,CJoBEAE,643,88,71,40:0,R,1,CJkBEAE,720,88,80,40:0,R,1,CAMQAg,106,205,1082,40:0,R,1,CAIQGQ,106,294,652,6173:0,R,1,CAkQAA,106,294,652,288:0,R,1,CAkQAw,106,332,652,234:0,R,1,CA8QAA,106,626,652,761:0,R,1,CBcQAA,106,654,652,511:0,R,1,CBEQAA,106,695,326,308:0,R,1,CBQQAA,433,695,326,148:0,R,1,CBYQAA,433,844,326,159:32,T:0,R,1,9,102,36,92,33:0,R,1,CAoQAA,102,88,851,40:0,R,1,CA4QAQ,102,88,89,40:0,R,1,CAwQAQ,197,88,63,40:0,R,1,CAsQAQ,266,88,65,40:0,R,1,CA0QAQ,337,88,76,40:0,R,1,CIkBEAE,419,88,73,40:0,R,1,CJwBEAE,497,88,64,40:0,R,1,CJsBEAE,568,88,69,40:0,R,1,CJoBEAE,643,88,71,40:0,R,1,CJkBEAE,720,88,80,40:0,R,1,CAMQAg,106,205,1082,40:0,R,1,CAIQGQ,106,294,652,6173:0,R,1,CAkQAA,106,294,652,288:0,R,1,CAkQAw,106,332,652,234:0,R,1,CA8QAA,106,626,652,761:0,R,1,CBcQAA,106,654,652,511:0,R,1,CBEQAA,106,695,326,308:0,R,1,CBQQAA,433,695,326,148:0,R,1,CBYQAA,433,844,326,159:341,e,B&zx=1700670155176&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0
2023-11-22 16:22:38 UTC	1227	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 42 7a 4a 5f 76 45 61 38 55 69 6e 64 63 44 54 69 37 50 5f 57 7a 51 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 20 68 74 74 70 3a 3b 72 65 70 6f 72 74 2d 75 72 69 20 68 74 Data Ascii: HTTP/1.1 204 No ContentContent-Type: text/html; charset=UTF-8Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-BzJ_vEa8UindcDTi7P_WzQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49869	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:40 UTC	1374	OUT	GET /async/bgasy?ei=xSpeZdzvEPyy5NoPhfSymAc&opi=89978449&yv=3&cs=0&async=_fmt:jspb HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0
2023-11-22 16:22:40 UTC	1479	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 56 65 72 73 69 6f 6e 3a 20 35 38 33 31 33 31 32 38 32 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 2d 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 67 77 73 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 67 Data Ascii: HTTP/1.1 200 OKVersion: 583131282Content-Type: application/json; charset=UTF-8X-Content-Type-Options: nosniffStrict-Transport-Security: max-age=31536000Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws"Report-To: {"group":"g
2023-11-22 16:22:40 UTC	1479	IN	Data Raw: 39 38 64 0d 0a 29 5d 7d 27 0a 7b 22 62 67 61 73 79 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 6a 73 2f 62 67 2f 62 58 67 43 51 4d 5a 70 53 30 7a 41 46 66 51 68 57 34 61 4c 51 58 46 75 38 76 41 74 4d 36 48 74 49 52 64 68 70 35 51 72 53 55 49 2e 6a 73 22 2c 22 49 59 58 6e 31 70 37 50 77 69 75 4e 48 75 6a 55 6d 39 58 68 58 50 77 55 63 65 62 74 33 6f 54 31 67 66 68 57 35 73 45 45 33 56 79 4f 4b 61 73 73 44 57 42 65 71 64 55 4b 32 46 4b 4f 46 75 50 45 51 72 61 72 4c 53 45 79 6a 70 44 57 55 42 4b 56 78 35 45 76 6b 61 38 66 74 6c 72 30 69 50 58 76 48 44 78 63 4f 53 77 75 7a 64 33 4c 48 67 67 71 2f 6a 6d 54 54 57 35 4f 38 4e 32 79 61 61 46 49 50 65 31 74 50 71 57 58 37 64 49 63 74 71 4a 69 78 36 51 79 43 4b 69 54 5a 33 43 6c Data Ascii: 98d)]}'{"bgasy":["https://www.google.com/js/bg/bXgCQMZpS0zAFfQhW4aLQXFu8vAtM6HtIRdhp5QrSUI.js","IYXn1p7PwiuNHujUm9XhXPwUcebt3oT1gfhW5sEE3VyOKassDWBeqdUK2FKOFuPEQrarLSEyjpDWUBKVx5Evka8ftlr0iPXvHDxcOSwuzd3LHggq/jmTTW5O8N2yaaFIPe1tPqWX7dIctqJix6QyCKiTZ3Cl
2023-11-22 16:22:40 UTC	973	IN	Data Raw: 65 4b 53 66 44 37 6d 57 62 4e 31 73 69 39 70 63 77 54 55 38 48 68 56 67 2b 63 59 41 5a 6b 4b 2b 53 6f 30 4c 77 52 65 4f 34 52 48 48 76 78 69 79 49 30 48 53 4e 2b 69 41 69 74 44 78 55 54 50 67 6b 6f 6a 75 58 58 34 41 4f 2b 56 68 75 49 35 41 33 65 44 44 41 33 6e 79 4a 73 47 79 76 59 4b 7a 78 4c 71 44 34 51 34 53 75 34 69 4e 6f 52 4e 6b 33 6f 67 71 55 5a 7a 58 52 76 53 4d 30 44 43 35 67 78 39 55 65 4b 4f 31 49 39 63 2f 32 4c 75 4f 33 36 67 32 4d 77 6c 56 59 4b 4a 2b 58 77 38 6d 6f 4b 42 71 4e 62 64 64 35 56 31 78 38 36 32 71 41 7a 44 4e 56 66 59 4c 42 45 61 41 71 45 39 56 62 6b 56 76 72 6a 50 73 6f 75 74 39 65 4c 34 48 2f 35 30 58 36 4b 70 47 79 2b 30 53 6a 5a 45 43 57 6d 56 61 79 5a 6b 55 59 78 42 57 43 67 4f 57 41 4d 33 2f 78 54 74 58 6f 35 51 73 6f 46 45 Data Ascii: eKSfD7mWbN1si9pcwTU8HhVg+cYAZkK+So0LwReO4RHHvxiyI0HSN+iAitDxUTPgkojuXX4AO+VhuI5A3eDDA3nyJsGyvYKzxLqD4Q4Su4iNoRNk3ogqUZzXRvSM0DC5gx9UeKO1I9c/2LuO36g2MwlVYKJ+Xw8moKBqNbdd5V1x862qAzDNVfYLBEaAqE9VbkVvrjPsout9eL4H/50X6KpGy+0SjZECWmVayZkUYxBWCgOWAM3/xTtXo5QsoFE
2023-11-22 16:22:40 UTC	1252	IN	Data Raw: 31 34 36 35 0d 0a 52 69 41 74 67 78 48 61 31 42 4f 48 74 65 53 35 32 59 34 72 34 58 68 6a 70 7a 45 52 38 76 66 73 4c 44 41 61 61 75 2f 67 55 58 65 78 36 61 54 34 4b 6e 78 78 68 36 46 6c 4e 7a 2b 36 36 68 38 38 35 49 58 76 51 37 55 50 50 34 39 32 37 36 72 50 61 67 44 64 61 62 6e 6a 78 38 6c 43 42 63 78 54 5a 46 44 78 44 4e 51 4a 43 56 39 75 57 31 67 6d 35 39 62 75 36 4d 5a 54 64 79 79 33 38 6e 63 4e 76 71 68 6b 61 70 34 4a 58 42 31 4c 76 47 50 4c 33 41 4f 50 47 37 61 61 63 74 66 79 73 77 5a 54 64 70 4b 55 59 42 77 43 78 2f 56 6f 6e 77 61 6f 61 74 2f 5a 6b 33 4e 62 64 41 57 49 76 4d 6c 65 7a 6a 36 58 62 2b 70 4c 46 4e 46 63 77 62 35 42 44 38 38 4a 39 44 33 42 32 6f 38 43 44 56 48 57 2b 46 70 51 68 36 43 77 47 61 65 6a 4a 37 50 71 54 7a 65 38 56 67 34 35 44 Data Ascii: 1465RiAtgxHa1BOHteS52Y4r4XhjpzER8vfsLDAaau/gUXex6aT4Knxxh6FlNz+66h885IXvQ7UPP49276rPagDdabnjx8lCBcxTZFDxDNQJCV9uW1gm59bu6MZTdyy38ncNvqhkap4JXB1LvGPL3AOPG7aactfyswZTdpKUYBwCx/Vonwaoat/Zk3NbdAWIvMlezj6Xb+pLFNFcwb5BD88J9D3B2o8CDVHW+FpQh6CwGaejJ7PqTze8Vg45D
2023-11-22 16:22:40 UTC	1252	IN	Data Raw: 68 5a 7a 41 68 33 5a 42 5a 44 49 70 67 79 74 51 48 49 63 48 4e 43 77 54 64 4d 79 37 6e 4b 51 5a 62 6c 65 30 53 2b 79 5a 57 39 79 32 48 54 55 70 31 52 31 44 4f 67 39 6e 7a 73 33 47 56 75 35 42 6c 45 33 55 43 4c 52 36 30 6d 2f 69 46 63 50 56 38 34 5a 57 42 38 53 69 47 51 68 59 53 68 55 32 52 36 2b 34 42 35 44 54 5a 58 75 75 68 69 69 67 44 36 4d 35 4b 69 76 75 46 4b 2b 4d 30 62 5a 67 2b 53 51 6c 34 71 55 74 69 31 4e 68 79 51 37 72 7a 62 79 74 65 68 45 48 34 49 69 42 33 51 62 79 38 43 56 4d 36 6b 52 6a 6b 32 42 78 64 31 5a 54 62 47 70 64 43 30 7a 56 2f 56 7a 36 4f 45 43 70 7a 67 57 51 61 30 49 79 53 56 78 72 59 38 30 51 75 33 39 48 51 30 46 34 51 4a 7a 4f 30 69 61 63 35 4d 73 6c 72 58 30 55 33 70 4f 64 79 64 68 77 39 63 7a 31 36 62 4d 4b 34 75 47 37 39 76 52 Data Ascii: hZzAh3ZBZDIpgytQHIcHNCwTdMy7nKQZble0S+yZW9y2HTUp1R1DOg9nzs3GVu5BlE3UCLR60m/iFcPV84ZWB8SiGQhYShU2R6+4B5DTZXuuhiigD6M5KivuFK+M0bZg+SQl4qUti1NhyQ7rzbytehEH4IiB3Qby8CVM6kRjk2Bxd1ZTbGpdC0zV/Vz6OECpzgWQa0IySVxrY80Qu39HQ0F4QJzO0iac5MslrX0U3pOdydhw9cz16bMK4uG79vR
2023-11-22 16:22:40 UTC	1252	IN	Data Raw: 58 64 68 70 50 6d 56 4e 4e 54 6f 33 58 73 7a 63 47 4e 6a 57 6e 6d 64 66 54 4a 52 57 53 73 79 42 57 63 47 6b 38 55 45 4d 41 72 78 59 64 4d 75 6b 43 46 37 4a 4a 50 75 33 78 4a 55 36 79 46 6e 74 35 6b 61 79 56 53 59 53 74 55 6d 30 49 75 71 7a 2f 61 36 6a 59 2b 50 53 2b 37 63 4d 75 4b 55 5a 5a 63 35 51 41 79 33 7a 65 4f 39 52 6d 56 33 39 70 71 67 35 5a 68 58 56 46 31 59 39 6d 4f 7a 52 58 52 55 4f 53 55 33 53 76 59 6e 4d 37 67 36 74 64 6f 35 33 76 56 4c 6c 61 68 41 34 65 6a 36 30 36 46 76 50 36 33 63 69 6f 76 57 43 46 33 39 42 73 2f 56 54 48 2b 43 70 67 79 6b 58 67 71 50 61 58 78 4d 59 30 47 61 43 37 30 41 7a 2f 36 6b 65 6a 73 73 51 45 2b 62 76 42 55 36 4b 50 67 4f 43 5a 70 78 52 46 44 78 59 72 74 32 7a 69 68 4d 70 59 4c 6d 62 64 64 57 77 45 7a 35 4f 50 46 57 Data Ascii: XdhpPmVNNTo3XszcGNjWnmdfTJRWSsyBWcGk8UEMArxYdMukCF7JJPu3xJU6yFnt5kayVSYStUm0Iuqz/a6jY+PS+7cMuKUZZc5QAy3zeO9RmV39pqg5ZhXVF1Y9mOzRXRUOSU3SvYnM7g6tdo53vVLlahA4ej606FvP63ciovWCF39Bs/VTH+CpgykXgqPaXxMY0GaC70Az/6kejssQE+bvBU6KPgOCZpxRFDxYrt2zihMpYLmbddWwEz5OPFW
2023-11-22 16:22:40 UTC	1252	IN	Data Raw: 77 59 39 45 43 37 68 4c 52 38 53 4d 66 6d 6b 57 6c 55 79 38 47 42 34 61 58 56 49 71 32 4a 30 6b 45 30 45 34 2b 35 6a 69 77 55 7a 6c 4b 61 59 36 34 6a 48 68 62 7a 57 4b 77 7a 6e 58 57 2b 4c 66 63 39 76 6b 6a 65 56 61 33 54 66 6e 42 69 6c 4f 59 57 34 73 69 6d 73 73 75 58 70 30 41 66 57 78 76 72 34 47 4f 4c 61 32 42 37 37 58 41 51 55 4b 54 77 2f 78 72 42 47 59 5a 34 51 47 56 63 4e 2b 32 33 7a 52 2b 6d 6c 30 46 58 43 46 4d 38 73 6f 36 65 2b 67 6c 48 2f 34 44 79 49 73 6c 57 68 42 52 48 57 44 61 68 64 59 5a 77 58 2f 33 6b 6a 2f 44 51 45 73 4d 64 37 77 44 7a 4e 67 6a 48 67 4d 6d 50 31 74 4d 59 5a 64 62 49 53 30 77 69 2b 64 2f 4a 48 69 58 4c 58 70 41 4e 43 53 4c 55 63 63 4d 43 76 73 42 2b 33 57 5a 6a 64 77 61 70 71 4d 55 72 6f 78 30 32 6a 66 65 65 30 61 6a 6d 58 Data Ascii: wY9EC7hLR8SMfmkWlUy8GB4aXVIq2J0kE0E4+5jiwUzlKaY64jHhbzWKwznXW+Lfc9vkjeVa3TfnBilOYW4simssuXp0AfWxvr4GOLa2B77XAQUKTw/xrBGYZ4QGVcN+23zR+ml0FXCFM8so6e+glH/4DyIslWhBRHWDahdYZwX/3kj/DQEsMd7wDzNgjHgMmP1tMYZdbIS0wi+d/JHiXLXpANCSLUccMCvsB+3WZjdwapqMUrox02jfee0ajmX
2023-11-22 16:22:40 UTC	221	IN	Data Raw: 4f 4e 43 53 6b 52 4a 32 54 49 62 65 4c 55 65 38 54 4c 56 42 37 49 44 34 32 39 4a 32 74 39 6b 71 75 64 58 65 55 49 67 51 6e 63 7a 6b 68 35 51 73 71 38 54 74 52 38 78 44 75 4c 66 7a 58 53 32 53 43 31 4e 2f 68 30 4c 30 4a 64 66 7a 30 54 35 49 6e 42 38 36 66 45 53 4e 69 7a 47 49 38 2f 55 7a 37 7a 75 4f 2b 51 79 33 6c 66 68 6e 48 31 4b 36 77 41 31 59 68 65 41 4b 32 38 46 37 68 45 67 6a 33 68 55 58 6d 64 4c 58 47 70 31 33 79 59 33 44 63 41 59 76 6f 38 70 79 42 43 68 79 67 64 59 58 4d 37 6e 62 42 41 38 4c 68 70 63 4b 53 5a 54 58 36 37 5a 39 56 6d 6e 6b 68 53 46 65 66 79 54 73 55 77 7a 36 45 50 53 6f 58 58 5a 77 5c 75 30 30 33 64 5c 75 30 30 33 64 22 5d 7d 0d 0a Data Ascii: ONCSkRJ2TIbeLUe8TLVB7ID429J2t9kqudXeUIgQnczkh5Qsq8TtR8xDuLfzXS2SC1N/h0L0Jdfz0T5InB86fESNizGI8/Uz7zuO+Qy3lfhnH1K6wA1YheAK28F7hEgj3hUXmdLXGp13yY3DcAYvo8pyBChygdYXM7nbBA8LhpcKSZTX67Z9VmnkhSFefyTsUwz6EPSoXXZw\u003d\u003d"]}
2023-11-22 16:22:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49870	35.190.80.1	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:40 UTC	537	OUT	OPTIONS /report/v3?s=U492qfCyr0iGK9QxGnJUYAROpwi7Mh%2FUmf3C63N7YdmY%2BgM7GPOXMZ2dxxsEbt0mH8sME4jgKH8e00KTe7LssQGsTgqxY%2Fnj1iJ5YPBATZNaP9J5iZVp7NVuVrg93gWDTw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://report-doc.org Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:22:40 UTC	336	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 30 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 6d 61 78 2d 61 67 65 3a 20 38 36 34 30 30 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 4f 50 54 49 4f 4e 53 2c 20 50 4f 53 54 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2c 20 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 0d 0a 64 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 34 30 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c Data Ascii: HTTP/1.1 200 OKcontent-length: 0access-control-max-age: 86400access-control-allow-methods: OPTIONS, POSTaccess-control-allow-origin: *access-control-allow-headers: content-type, content-lengthdate: Wed, 22 Nov 2023 16:22:40 GMTVia: 1.1 googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49871	35.190.80.1	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:40 UTC	481	OUT	POST /report/v3?s=U492qfCyr0iGK9QxGnJUYAROpwi7Mh%2FUmf3C63N7YdmY%2BgM7GPOXMZ2dxxsEbt0mH8sME4jgKH8e00KTe7LssQGsTgqxY%2Fnj1iJ5YPBATZNaP9J5iZVp7NVuVrg93gWDTw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 1049 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:22:40 UTC	1049	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 35 37 32 33 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 39 32 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 38 30 2e 31 38 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 65 70 6f 72 74 2d 64 6f 63 2e 6f 72 Data Ascii: [{"age":55723,"body":{"elapsed_time":928,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.80.18","status_code":400,"type":"http.error"},"type":"network-error","url":"https://report-doc.or
2023-11-22 16:22:41 UTC	168	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 64 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 34 30 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 32 35 39 32 30 30 30 2c 68 33 2d 32 39 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 32 35 39 32 30 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKContent-Length: 0date: Wed, 22 Nov 2023 16:22:40 GMTVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49872	142.251.16.105	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:40 UTC	914	OUT	GET /async/bgasy?ei=xSpeZdzvEPyy5NoPhfSymAc&opi=89978449&yv=3&cs=0&async=_fmt:jspb HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0; DV=Q3FLCIqvnZAgYHfm0PDGnWUnTnF9v5jkqNWfmvg5CwUAAAA
2023-11-22 16:22:41 UTC	1479	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 56 65 72 73 69 6f 6e 3a 20 35 38 33 31 33 31 32 38 32 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 2d 61 6c 6c 6f 77 2d 70 6f 70 75 70 73 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 67 77 73 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 67 Data Ascii: HTTP/1.1 200 OKVersion: 583131282Content-Type: application/json; charset=UTF-8X-Content-Type-Options: nosniffStrict-Transport-Security: max-age=31536000Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws"Report-To: {"group":"g
2023-11-22 16:22:41 UTC	1479	IN	Data Raw: 39 63 31 0d 0a 29 5d 7d 27 0a 7b 22 62 67 61 73 79 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 6a 73 2f 62 67 2f 62 58 67 43 51 4d 5a 70 53 30 7a 41 46 66 51 68 57 34 61 4c 51 58 46 75 38 76 41 74 4d 36 48 74 49 52 64 68 70 35 51 72 53 55 49 2e 6a 73 22 2c 22 49 59 58 2f 62 43 2f 2f 78 66 70 48 7a 55 72 32 67 67 45 59 36 44 76 77 6d 33 72 35 62 39 67 42 63 50 74 73 34 62 55 54 64 43 4d 4b 45 42 6b 49 76 72 4a 4a 51 45 37 30 47 34 34 54 41 78 54 4d 69 51 45 73 4e 5a 52 36 6c 35 6c 73 49 45 2b 36 72 55 61 2b 4d 6c 2b 4b 31 5a 44 34 79 39 50 33 50 41 6d 6e 64 65 6a 4e 6d 58 51 74 4c 55 33 4b 4e 54 30 7a 69 4f 68 46 38 6c 54 32 32 5a 53 6b 54 7a 45 71 46 61 6b 52 32 4b 43 2f 41 49 53 31 56 31 41 6c 71 70 7a 6d 33 2f 71 56 Data Ascii: 9c1)]}'{"bgasy":["https://www.google.com/js/bg/bXgCQMZpS0zAFfQhW4aLQXFu8vAtM6HtIRdhp5QrSUI.js","IYX/bC//xfpHzUr2ggEY6Dvwm3r5b9gBcPts4bUTdCMKEBkIvrJJQE70G44TAxTMiQEsNZR6l5lsIE+6rUa+Ml+K1ZD4y9P3PAmndejNmXQtLU3KNT0ziOhF8lT22ZSkTzEqFakR2KC/AIS1V1Alqpzm3/qV
2023-11-22 16:22:41 UTC	1025	IN	Data Raw: 73 38 75 37 6b 55 50 69 62 4b 76 59 56 6f 61 77 74 65 58 44 48 70 6f 56 73 66 70 6c 4a 65 5a 47 45 52 77 2b 77 4d 32 75 73 45 37 50 69 45 75 33 7a 6c 52 75 49 52 53 58 34 4a 31 51 33 76 74 54 50 4a 58 70 61 33 4d 49 4e 56 2f 69 55 65 37 4e 75 45 7a 2f 57 74 4b 4e 78 46 45 44 2b 6b 76 2f 67 53 78 30 51 74 53 33 51 47 2b 4e 6f 62 6a 70 41 41 4d 78 36 64 76 56 4d 79 36 72 51 64 55 68 42 54 74 51 4b 63 7a 75 78 45 49 78 65 33 74 72 57 58 4d 42 6c 47 50 47 52 30 42 35 36 41 76 39 32 36 4e 30 4c 31 63 68 76 68 67 74 72 63 52 6c 56 4a 6d 4f 67 79 78 65 4c 39 2b 56 42 79 74 48 31 6a 75 78 2b 62 37 33 74 7a 48 6d 64 4d 62 43 2f 61 34 66 32 72 73 35 34 34 2f 55 6f 36 69 50 74 6e 4a 65 32 34 51 72 5a 47 70 42 59 69 4b 31 4a 47 78 33 6e 30 56 67 32 79 5a 4b 6b 6c 72 Data Ascii: s8u7kUPibKvYVoawteXDHpoVsfplJeZGERw+wM2usE7PiEu3zlRuIRSX4J1Q3vtTPJXpa3MINV/iUe7NuEz/WtKNxFED+kv/gSx0QtS3QG+NobjpAAMx6dvVMy6rQdUhBTtQKczuxEIxe3trWXMBlGPGR0B56Av926N0L1chvhgtrcRlVJmOgyxeL9+VBytH1jux+b73tzHmdMbC/a4f2rs544/Uo6iPtnJe24QrZGpBYiK1JGx3n0Vg2yZKklr
2023-11-22 16:22:41 UTC	1252	IN	Data Raw: 31 34 39 66 0d 0a 54 6e 67 67 71 30 32 37 63 58 74 4f 48 69 46 30 52 78 47 4b 2b 43 51 6d 77 59 34 38 50 66 4c 65 48 39 4c 35 78 78 55 57 56 6f 2b 75 43 64 53 6b 43 64 52 48 63 5a 33 42 61 4c 38 44 48 51 78 6b 79 77 59 50 4d 42 44 4e 63 64 73 55 67 47 51 57 61 54 59 49 46 6f 35 6b 6c 35 70 4f 56 4e 4a 64 66 71 4c 76 6e 6d 64 72 44 76 51 6a 6f 48 78 79 64 6f 55 56 78 6e 37 73 34 42 30 63 62 35 65 37 4f 58 34 68 58 47 44 51 53 36 4c 5a 4d 30 65 78 6d 38 47 32 4e 69 4d 4e 6c 6a 2b 55 4e 6e 65 59 63 4e 75 61 4d 58 54 65 72 42 31 4f 38 48 4e 50 41 6a 79 4b 46 4d 6e 51 55 75 77 36 47 6e 4b 4b 78 67 51 62 72 44 7a 59 7a 74 6a 78 6d 41 50 32 52 36 36 56 6e 32 42 5a 50 38 49 73 7a 31 74 50 49 39 48 77 4e 61 63 49 73 37 6b 42 76 37 6f 52 42 47 67 64 4c 45 75 67 61 Data Ascii: 149fTnggq027cXtOHiF0RxGK+CQmwY48PfLeH9L5xxUWVo+uCdSkCdRHcZ3BaL8DHQxkywYPMBDNcdsUgGQWaTYIFo5kl5pOVNJdfqLvnmdrDvQjoHxydoUVxn7s4B0cb5e7OX4hXGDQS6LZM0exm8G2NiMNlj+UNneYcNuaMXTerB1O8HNPAjyKFMnQUuw6GnKKxgQbrDzYztjxmAP2R66Vn2BZP8Isz1tPI9HwNacIs7kBv7oRBGgdLEuga
2023-11-22 16:22:41 UTC	1252	IN	Data Raw: 35 4b 6b 6c 6f 52 75 75 6b 6a 70 6c 2b 4c 72 2b 37 35 55 44 42 4f 53 74 42 61 6c 50 59 75 48 66 53 66 61 45 2b 52 39 61 64 47 72 6c 35 41 68 68 70 4d 69 7a 68 4f 32 46 49 45 75 53 30 6c 56 54 72 69 70 45 32 4d 4f 66 65 34 57 58 33 35 54 72 6d 44 67 56 34 56 43 68 63 68 48 42 34 63 36 6b 34 4f 74 4f 73 64 52 78 7a 38 32 58 53 2f 6b 4e 36 48 66 71 61 75 4c 4f 68 61 4c 54 61 6b 2f 2b 68 65 41 73 43 6b 64 44 36 71 42 2b 30 37 31 69 61 2b 50 56 53 79 42 5a 51 51 64 55 72 52 67 74 4f 64 45 5a 6f 62 4d 70 34 32 6f 6a 69 54 7a 2b 73 7a 2b 6a 47 70 64 46 46 4a 32 67 77 6e 54 39 30 78 73 44 72 4d 67 59 45 62 37 73 73 6d 43 35 4b 4a 59 75 54 54 5a 6a 46 43 4d 53 61 66 6b 55 59 6b 4d 55 4c 38 41 45 74 78 47 41 6c 67 47 6c 41 77 47 39 6e 6e 45 67 4d 54 38 42 30 68 34 Data Ascii: 5KkloRuukjpl+Lr+75UDBOStBalPYuHfSfaE+R9adGrl5AhhpMizhO2FIEuS0lVTripE2MOfe4WX35TrmDgV4VChchHB4c6k4OtOsdRxz82XS/kN6HfqauLOhaLTak/+heAsCkdD6qB+071ia+PVSyBZQQdUrRgtOdEZobMp42ojiTz+sz+jGpdFFJ2gwnT90xsDrMgYEb7ssmC5KJYuTTZjFCMSafkUYkMUL8AEtxGAlgGlAwG9nnEgMT8B0h4
2023-11-22 16:22:41 UTC	1252	IN	Data Raw: 2f 36 62 65 48 70 33 33 43 55 6f 7a 45 4e 4f 75 34 2f 4e 53 39 4a 6e 71 7a 34 41 2f 36 75 62 57 4d 49 5a 47 6a 47 6b 52 57 76 64 4a 2f 70 53 4a 73 73 74 38 75 61 73 63 74 63 76 74 54 55 49 51 41 39 54 2f 59 2b 62 65 4c 69 45 70 52 7a 38 52 43 41 72 6e 78 2b 42 4e 4b 4b 77 32 4a 58 30 31 4f 64 52 79 79 36 58 67 61 6b 37 65 4c 4f 6c 7a 4d 38 79 5a 36 74 5a 36 59 52 54 7a 59 69 4f 33 74 59 72 68 66 47 63 45 4b 4f 38 50 37 49 56 7a 34 68 45 62 71 74 4f 6f 6b 68 59 6a 6f 39 31 4e 74 6b 79 48 70 69 62 43 5a 79 2b 4a 71 54 79 78 48 56 47 46 56 2f 39 6b 4a 71 6e 49 61 35 5a 4f 43 52 68 32 59 79 55 66 37 46 31 53 44 58 2f 49 34 54 54 66 32 62 31 6b 6a 74 4a 73 45 57 65 61 44 57 46 36 35 75 4c 69 55 78 57 57 66 56 32 48 71 39 64 77 59 2f 2b 76 2f 57 67 30 35 6b 54 Data Ascii: /6beHp33CUozENOu4/NS9Jnqz4A/6ubWMIZGjGkRWvdJ/pSJsst8uasctcvtTUIQA9T/Y+beLiEpRz8RCArnx+BNKKw2JX01OdRyy6Xgak7eLOlzM8yZ6tZ6YRTzYiO3tYrhfGcEKO8P7IVz4hEbqtOokhYjo91NtkyHpibCZy+JqTyxHVGFV/9kJqnIa5ZOCRh2YyUf7F1SDX/I4TTf2b1kjtJsEWeaDWF65uLiUxWWfV2Hq9dwY/+v/Wg05kT
2023-11-22 16:22:41 UTC	1252	IN	Data Raw: 59 34 79 44 64 6d 77 64 72 6e 32 62 4c 7a 50 74 74 2f 33 6c 5a 48 67 56 30 77 4a 42 35 76 68 30 44 4a 70 54 69 54 4b 36 2b 58 69 42 39 48 73 64 37 61 69 2f 45 74 52 56 7a 49 2f 39 4d 31 62 5a 41 47 4e 33 76 35 47 72 75 32 44 72 55 58 2b 76 61 48 2f 6c 75 2b 41 4d 74 42 50 77 59 53 32 4b 6e 2f 4a 61 49 65 76 6d 4d 6e 4d 65 75 37 79 35 4a 56 4c 4a 50 6c 33 48 48 59 78 78 6a 5a 67 43 6c 69 6c 2b 55 72 35 37 30 49 48 72 62 2f 55 64 77 31 4c 38 73 6c 72 61 62 74 65 35 57 46 68 4c 55 66 64 5a 74 70 6a 4f 43 36 30 49 31 4b 37 42 30 74 58 69 54 51 6b 52 4e 71 47 41 67 6b 68 54 79 55 59 49 69 2b 31 72 31 36 61 38 53 6c 4a 6a 44 47 31 55 63 54 63 55 42 43 6d 43 6e 45 4c 55 52 62 2b 4b 70 69 49 4c 57 78 5a 45 4d 76 71 32 31 77 69 55 71 75 4b 42 44 34 49 4e 30 4b 32 Data Ascii: Y4yDdmwdrn2bLzPtt/3lZHgV0wJB5vh0DJpTiTK6+XiB9Hsd7ai/EtRVzI/9M1bZAGN3v5Gru2DrUX+vaH/lu+AMtBPwYS2Kn/JaIevmMnMeu7y5JVLJPl3HHYxxjZgClil+Ur570IHrb/Udw1L8slrabte5WFhLUfdZtpjOC60I1K7B0tXiTQkRNqGAgkhTyUYIi+1r16a8SlJjDG1UcTcUBCmCnELURb+KpiILWxZEMvq21wiUquKBD4IN0K2
2023-11-22 16:22:41 UTC	279	IN	Data Raw: 5a 38 76 65 50 59 44 55 7a 5a 47 2b 79 73 45 31 4b 62 37 48 76 7a 4c 58 41 66 68 43 69 5a 33 69 6b 4d 58 62 74 42 74 63 76 56 51 6a 6e 45 32 46 4c 58 4d 59 32 58 31 7a 44 34 59 6c 76 54 5a 4f 56 49 78 72 34 52 38 4a 72 50 78 73 64 56 62 33 48 2f 65 73 62 35 46 4b 2b 6a 34 6a 45 47 33 36 39 6b 41 68 43 6f 39 52 79 69 39 61 54 64 38 6c 70 4f 58 6d 62 4c 66 58 4f 35 33 2f 50 53 48 46 68 50 2f 75 77 53 69 44 7a 63 55 6c 78 38 4d 75 67 4d 4e 71 64 49 58 65 6c 53 56 42 32 71 36 57 43 66 4c 58 48 59 34 6c 4f 65 48 77 39 52 71 39 54 32 68 54 47 6f 44 74 32 50 70 61 4b 2f 66 53 58 50 73 4a 4d 61 44 41 2f 39 73 76 65 48 32 49 37 58 48 4d 72 6f 48 5a 6d 69 66 68 70 66 2f 47 6f 50 44 70 6c 31 34 79 65 76 4e 5a 55 32 66 6f 45 47 32 48 6e 45 4a 65 4c 54 6a 7a 5a 48 51 Data Ascii: Z8vePYDUzZG+ysE1Kb7HvzLXAfhCiZ3ikMXbtBtcvVQjnE2FLXMY2X1zD4YlvTZOVIxr4R8JrPxsdVb3H/esb5FK+j4jEG369kAhCo9Ryi9aTd8lpOXmbLfXO53/PSHFhP/uwSiDzcUlx8MugMNqdIXelSVB2q6WCfLXHY4lOeHw9Rq9T2hTGoDt2PpaK/fSXPsJMaDA/9sveH2I7XHMroHZmifhpf/GoPDpl14yevNZU2foEG2HnEJeLTjzZHQ
2023-11-22 16:22:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49873	142.250.31.101	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:42 UTC	1131	OUT	POST /log?hasfast=true&authuser=0&format=json HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 895 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://ogs.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://ogs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw
2023-11-22 16:22:42 UTC	895	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 6f 6e 65 67 6f 6f 67 6c 65 68 74 74 70 73 65 72 76 65 72 5f 32 30 32 33 31 31 31 39 2e 30 33 5f 70 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 33 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 38 34 2c 5b 5b 22 31 37 30 30 36 37 30 31 36 31 33 34 38 22 2c 6e 75 6c 6c 2c 5b 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5c 22 32 31 37 32 36 34 39 34 37 32 5c 22 2c 5c 22 32 35 32 38 35 31 34 33 5c 22 2c 5c 22 31 38 31 30 31 39 34 37 5c 22 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"boq_onegooglehttpserver_20231119.03_p0",null,null,[3,0,0,0,0]]],1884,[["1700670161348",null,[],null,null,null,null,"[[\"2172649472\",\"25285143\",\"18101947\"],null,null,null
2023-11-22 16:22:42 UTC	518	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 6f 67 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 48 65 61 64 65 72 73 3a 20 58 2d 50 6c 61 79 6c 6f 67 2d 57 65 62 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e Data Ascii: HTTP/1.1 200 OKAccess-Control-Allow-Origin: https://ogs.google.comCross-Origin-Resource-Policy: cross-originAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Headers: X-Playlog-WebContent-Type: text/plain; charset=UTF-8Date: Wed, 22 N
2023-11-22 16:22:42 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2023-11-22 16:22:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49874	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:42 UTC	2376	OUT	GET /xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=0/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/m=uKlGbf,sy17q,sy2kj,DpX64d,sy2kk,EufiNb,sy4qw,vTw9Fc,sy1ca,sy1cb,p2I2Je,syum,sy136,Mbif2,syjt,syk7,sykn,sy10i,sy17c,sy17t,sy186,sy187,sy185,sy18i,sy18j,sy1ah,sy1as,sy1at,sy1ba,sy1c1,sy1cc,sy1cd,sy1ce,sy1cf,sy1ch,sy1cj,sy1ci,sy1ck,sy1cl,sy1dz,sy1e0,sy1f9,sy1fe,sy1ff,syj4,syjk,symy,symz,syn0,sy176,sy175,sy178,sy1fm,sy1fn,sy1fo,sy1fg,sy1fj,sy1fl,sy1be,sy1g4,sy1g5,sy1g6,sy1g8,sy1gb,sy1gc,sy1gd,exgaYe,sy33b,wuEeed,sy331,j6kZje,sy25r,sy4tu,sy5lk,sy5ll,BkkW1b,sy330,wRnMub,syyr,syyu,syyw,QE1bwd,sy10j,gSZvdb,sy4wt,sy5a2,SC7lYd,syte,syx2,WlNQGd,sy2ko,sy35l,nabPbb,syx6,syx9,syxa,DPreE,sy1il,sy34g,bpec7b,syeu,BYwJlf,syqk,syui,syuk,VEbNoe,sy2ky,sy2kz,b8OZff,sy2l9,sy2la,qcH9Lc,sypm,sy2lc,YFicMc?xjs=s3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0; DV=Q3FLCIqvnZAgYHfm0PDGnWUnTnF9v5jkqNWfmvg5CwUAAAA
2023-11-22 16:22:42 UTC	818	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 4f 72 69 67 69 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 74 72 75 73 74 65 64 2d 74 79 70 65 73 2d 66 6f 72 20 27 73 63 72 69 70 74 27 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 67 77 73 2d 74 65 61 6d 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesVary: Accept-Encoding, OriginContent-Type: text/javascript; charset=UTF-8Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-teamCross-Origin-R
2023-11-22 16:22:42 UTC	434	IN	Data Raw: 5f 46 5f 69 6e 73 74 61 6c 6c 43 73 73 28 22 2e 51 6c 62 33 37 63 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 70 78 7d 2e 74 7a 4d 34 74 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 7d 2e 7a 55 64 70 70 63 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 34 70 78 7d 2e 62 76 53 54 4b 63 7b 70 61 64 64 69 6e 67 3a 38 70 78 7d 2e 77 6f 6b 35 76 66 7b 70 61 64 64 69 6e 67 3a 32 34 70 78 7d 2e 59 37 4e 70 31 2e 6b 45 55 6e 66 62 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 59 37 4e 70 31 2e 6b 45 55 6e 66 62 20 2e 65 55 34 71 4a 63 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 64 61 64 63 65 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 70 78 20 31 70 78 20 33 70 78 20 72 Data Ascii: _F_installCss(".Qlb37c{margin-left:2px;margin-right:2px}.tzM4td{margin-bottom:8px;margin-top:8px}.zUdppc{padding-bottom:4px}.bvSTKc{padding:8px}.wok5vf{padding:24px}.Y7Np1.kEUnfb{color:#fff}.Y7Np1.kEUnfb .eU4qJc{background:#dadce0;box-shadow:0px 1px 3px r
2023-11-22 16:22:42 UTC	1252	IN	Data Raw: 75 72 72 65 6e 74 43 6f 6c 6f 72 7d 2e 4e 6e 67 78 70 65 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 2e 35 73 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 20 2e 35 73 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 4e 6e 67 78 70 65 20 67 2d 72 69 67 68 74 2d 62 75 74 74 6f 6e 2c 2e 4e 6e 67 78 70 65 20 Data Ascii: urrentColor}.Nngxpe{border-left:1px solid transparent;border-right:1px solid transparent;height:100%;left:0;right:0;position:absolute;top:0;-webkit-transition:border-color .5s;transition:border-color .5s;pointer-events:none}.Nngxpe g-right-button,.Nngxpe
2023-11-22 16:22:42 UTC	1252	IN	Data Raw: 7a 41 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 3d 6e 65 77 20 5f 2e 4c 74 2c 67 3d 6e 65 77 20 5f 2e 4a 74 2c 68 3d 6e 65 77 20 5f 2e 49 74 3b 62 3d 68 2e 44 64 28 62 29 3b 5f 2e 4d 62 28 62 2c 5f 2e 68 72 62 2c 33 2c 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 47 33 67 29 3b 68 2e 73 65 74 56 61 6c 75 65 28 63 29 3b 5f 2e 4b 74 28 67 2c 68 29 2e 44 71 28 64 29 3b 5f 2e 4d 74 28 66 2c 67 29 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 4b 24 62 29 26 26 5f 2e 6a 72 62 28 66 2c 6e 75 6c 6c 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 4b 24 62 29 3b 72 65 74 75 72 6e 20 5f 2e 6a 78 63 28 61 2c 66 29 7d 3b 5f 2e 6b 78 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 Data Ascii: zA=function(a,b,c,d,e){var f=new _.Lt,g=new _.Jt,h=new _.It;b=h.Dd(b);_.Mb(b,_.hrb,3,null==e?void 0:e.G3g);h.setValue(c);_.Kt(g,h).Dq(d);_.Mt(f,g);void 0!==(null==e?void 0:e.K$b)&&_.jrb(f,null==e?void 0:e.K$b);return _.jxc(a,f)};_.kxc=function(a,b,c){var
2023-11-22 16:22:42 UTC	1252	IN	Data Raw: 75 6c 6c 21 3d 61 26 26 28 22 41 22 3d 3d 3d 61 2e 74 61 67 4e 61 6d 65 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 72 6f 6c 65 22 29 29 7d 2c 65 4a 67 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5f 2e 52 61 28 61 2e 45 71 61 28 21 31 29 29 2c 63 3d 62 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 62 3d 62 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 5f 2e 7a 41 28 6e 65 77 20 5f 2e 79 41 28 61 2e 75 64 29 2c 63 2c 62 2c 38 39 2c 7b 4b 24 62 3a 21 30 7d 29 7d 2c 66 4a 67 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 44 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 4b 61 29 3b 74 68 69 73 2e 6b 61 3d 21 31 3b 74 68 69 73 2e 55 63 3d 6e 75 6c 6c 3b 74 68 69 73 2e 76 52 62 3d 61 2e 73 65 72 76 69 Data Ascii: ull!=a&&("A"===a.tagName\|\|"button"===a.getAttribute("role"))},eJg=function(a){var b=_.Ra(a.Eqa(!1)),c=b.next().value;b=b.next().value;return _.zA(new _.yA(a.ud),c,b,89,{K$b:!0})},fJg=function(a){_.D.call(this,a.Ka);this.ka=!1;this.Uc=null;this.vRb=a.servi
2023-11-22 16:22:42 UTC	1252	IN	Data Raw: 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 61 7d 29 3b 5f 2e 4a 28 66 4a 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 78 6f 69 7a 73 63 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 77 61 7d 29 3b 5f 2e 4a 28 66 4a 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 33 76 69 6f 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 41 61 7d 29 3b 0a 5f 2e 6f 72 28 5f 2e 62 4a 67 2c 66 4a 67 29 3b 0a 5f 2e 79 28 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 50 36 68 3d 5f 2e 7a 28 22 76 54 77 39 46 63 22 2c 5b 5d 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 78 28 Data Ascii: (){return this.oa});_.J(fJg.prototype,"xoizsc",function(){return this.wa});_.J(fJg.prototype,"i3viod",function(){return this.Aa});_.or(_.bJg,fJg);_.y();}catch(e){_._DumpException(e)}try{_.P6h=_.z("vTw9Fc",[]);}catch(e){_._DumpException(e)}try{_.x(
2023-11-22 16:22:42 UTC	1252	IN	Data Raw: 74 28 29 2e 74 6f 70 29 29 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 63 2d 38 30 2c 38 30 29 3b 64 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 2d 32 30 3b 62 3d 28 62 3f 62 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2e 74 6f 70 3a 28 64 2d 63 29 2f 33 29 2d 61 2e 6f 66 66 73 65 74 48 65 69 67 68 74 2f 32 3b 62 3c 63 3f 28 28 30 2c 5f 2e 76 2e 73 65 74 53 74 79 6c 65 29 28 61 2c 7b 74 6f 70 3a 63 2b 22 70 78 22 7d 29 2c 28 30 2c 5f 2e 76 2e 73 65 74 53 74 79 6c 65 29 28 61 2c 7b 62 6f 74 74 6f 6d 3a 22 61 75 74 6f 22 7d 29 29 3a 62 2b 61 2e 6f 66 66 73 65 74 48 65 69 67 68 74 3e 64 3f 28 28 30 2c 5f 2e 76 2e 73 65 74 53 74 79 6c 65 29 28 61 2c 7b 74 6f 70 3a 22 61 75 74 6f 22 7d 29 2c 28 30 2c 5f 2e 76 2e 73 65 74 53 74 Data Ascii: t().top));c=Math.max(c-80,80);d=window.innerHeight-20;b=(b?b.getBoundingClientRect().top:(d-c)/3)-a.offsetHeight/2;b<c?((0,_.v.setStyle)(a,{top:c+"px"}),(0,_.v.setStyle)(a,{bottom:"auto"})):b+a.offsetHeight>d?((0,_.v.setStyle)(a,{top:"auto"}),(0,_.v.setSt
2023-11-22 16:22:43 UTC	1252	IN	Data Raw: 44 37 57 6f 62 22 29 3b 76 61 72 20 48 69 63 2c 4e 69 63 2c 4d 69 63 3b 48 69 63 3d 5b 31 2c 32 2c 33 5d 3b 5f 2e 4a 69 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 4b 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 4b 61 29 3b 76 61 72 20 62 3d 74 68 69 73 3b 74 68 69 73 2e 77 61 3d 74 68 69 73 2e 63 6f 6e 74 72 6f 6c 6c 65 72 3d 6e 75 6c 6c 3b 74 68 69 73 2e 45 61 3d 30 3b 74 68 69 73 2e 6f 61 3d 21 31 3b 74 68 69 73 2e 42 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 41 61 3d 30 3b 74 68 69 73 2e 6b 61 3d 6e 65 77 20 4d 61 70 3b 74 68 69 73 2e 54 62 3d 61 2e 73 65 72 76 69 63 65 2e 4d 63 3b 74 68 69 73 2e 64 69 73 6d 69 73 73 3d 61 2e 73 65 72 76 69 63 65 2e 64 69 73 6d 69 73 73 3b 74 68 69 73 2e 77 69 6e 64 6f 77 3d 61 2e 73 65 72 76 69 63 65 2e 77 69 6e 64 6f 77 Data Ascii: D7Wob");var Hic,Nic,Mic;Hic=[1,2,3];_.Jic=function(a){_.Kn.call(this,a.Ka);var b=this;this.wa=this.controller=null;this.Ea=0;this.oa=!1;this.Ba=null;this.Aa=0;this.ka=new Map;this.Tb=a.service.Mc;this.dismiss=a.service.dismiss;this.window=a.service.window
2023-11-22 16:22:43 UTC	1252	IN	Data Raw: 7c 28 61 2e 63 6f 6e 74 65 6e 74 2e 66 6f 63 75 73 28 29 2c 5f 2e 61 4f 62 28 61 2e 73 4d 29 2c 74 68 69 73 2e 64 69 73 6d 69 73 73 2e 6c 69 73 74 65 6e 28 61 2e 63 6f 6e 74 61 69 6e 65 72 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 72 65 74 75 72 6e 20 62 2e 6f 6e 44 69 73 6d 69 73 73 28 64 2c 65 29 7d 29 29 3b 5f 2e 76 2e 73 65 74 53 74 79 6c 65 28 61 2e 6a 6a 61 2c 7b 64 69 73 70 6c 61 79 3a 22 62 6c 6f 63 6b 22 7d 29 3b 74 68 69 73 2e 6f 61 26 26 28 28 30 2c 5f 2e 79 6e 29 28 74 68 69 73 2e 42 61 29 2c 4d 69 63 28 61 2c 21 30 29 29 7d 3b 0a 5f 2e 4c 69 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 63 6f 6e 74 72 6f 6c 6c 65 72 29 7b 5f 2e 48 66 28 61 2e 63 6f 6e 74 72 6f 6c 6c 65 72 2e 4d 37 28 29 2c 22 73 65 6e 64 44 69 73 6d 69 73 73 45 Data Ascii: \|(a.content.focus(),_.aOb(a.sM),this.dismiss.listen(a.container,function(d,e){return b.onDismiss(d,e)}));_.v.setStyle(a.jja,{display:"block"});this.oa&&((0,_.yn)(this.Ba),Mic(a,!0))};_.Lic=function(a){if(a.controller){_.Hf(a.controller.M7(),"sendDismissE
2023-11-22 16:22:43 UTC	1252	IN	Data Raw: 3d 6e 65 77 20 5f 2e 64 6c 28 6c 2e 6f 66 66 73 65 74 57 69 64 74 68 2c 6c 2e 6f 66 66 73 65 74 48 65 69 67 68 74 29 3b 65 6c 73 65 7b 6c 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 3d 22 68 69 64 64 65 6e 22 3b 6c 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 3b 6c 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 62 6c 6f 63 6b 22 3b 76 61 72 20 77 3d 6e 65 77 20 5f 2e 64 6c 28 6c 2e 6f 66 66 73 65 74 57 69 64 74 68 2c 6c 2e 6f 66 66 73 65 74 48 65 69 67 68 74 29 3b 6c 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 0a 6d 3b 6c 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 71 3b 6c 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 3d 74 3b 6c 3d 77 7d 74 3d 6c 2e 77 69 64 74 68 3b 6d 3d 6c 2e 68 65 69 67 68 74 3b 71 Data Ascii: =new _.dl(l.offsetWidth,l.offsetHeight);else{l.style.visibility="hidden";l.style.position="absolute";l.style.display="block";var w=new _.dl(l.offsetWidth,l.offsetHeight);l.style.display=m;l.style.position=q;l.style.visibility=t;l=w}t=l.width;m=l.height;q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49878	142.250.31.101	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:42 UTC	539	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://www.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:22:43 UTC	756	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4d 65 74 68 6f 64 73 3a 20 47 45 54 2c 20 50 4f 53 54 2c 20 4f 50 54 49 4f 4e 53 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 4d 61 78 2d 41 67 65 3a 20 38 36 34 30 30 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 48 65 61 64 65 72 73 3a 20 58 2d 50 6c 61 79 6c 6f 67 2d 57 65 62 2c 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 2c 6f 72 69 67 69 6e Data Ascii: HTTP/1.1 200 OKAccess-Control-Allow-Origin: https://www.google.comAccess-Control-Allow-Methods: GET, POST, OPTIONSAccess-Control-Max-Age: 86400Access-Control-Allow-Credentials: trueAccess-Control-Allow-Headers: X-Playlog-Web,authorization,origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49882	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:42 UTC	1482	OUT	POST /gen_204?atyp=i&ei=xSpeZdzvEPyy5NoPhfSymAc&dt19=2&zx=1700670161851&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0; DV=Q3FLCIqvnZAgYHfm0PDGnWUnTnF9v5jkqNWfmvg5CwUAAAA
2023-11-22 16:22:43 UTC	1227	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 32 45 41 5a 37 75 38 78 36 2d 50 78 34 56 33 4b 59 57 37 49 66 77 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 20 68 74 74 70 3a 3b 72 65 70 6f 72 74 2d 75 72 69 20 68 74 Data Ascii: HTTP/1.1 204 No ContentContent-Type: text/html; charset=UTF-8Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-2EAZ7u8x6-Px4V3KYW7Ifw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49885	142.250.31.101	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:43 UTC	1171	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 430 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw
2023-11-22 16:22:43 UTC	430	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 36 35 35 2c 5b 5b 22 31 37 30 30 36 37 30 31 36 31 39 31 30 22 2c 6e 75 6c 6c 2c 5b 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 5c 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 6c 6f 63 61 74 69 6f 6e 2f 6c 6f 63 61 74 69 6f 6e 5f 70 72 6f 6d 70 74 2f 70 72 6f 6d 70 74 5f 64 65 63 69 73 69 6f 6e 73 5f 63 6f 75 6e 74 5c 22 2c 6e 75 6c 6c 2c 5b 5c 22 64 65 63 69 73 69 6f 6e 5c 22 2c 5c 22 62 72 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,null,[1,0,0,0,0]]],1655,[["1700670161910",null,[],null,null,null,null,"[[[\"/client_streamz/location/location_prompt/prompt_decisions_count\",null,[\"decision\",\"br
2023-11-22 16:22:43 UTC	518	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 48 65 61 64 65 72 73 3a 20 58 2d 50 6c 61 79 6c 6f 67 2d 57 65 62 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e Data Ascii: HTTP/1.1 200 OKAccess-Control-Allow-Origin: https://www.google.comCross-Origin-Resource-Policy: cross-originAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Headers: X-Playlog-WebContent-Type: text/plain; charset=UTF-8Date: Wed, 22 N
2023-11-22 16:22:43 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2023-11-22 16:22:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49894	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:43 UTC	1535	OUT	POST /gen_204?atyp=i&ct=&cad=udla=3&ei=xSpeZdzvEPyy5NoPhfSymAc&e=12&zx=1700670161917&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0; DV=Q3FLCIqvnZAgYHfm0PDGnWUnTnF9v5jkqNWfmvg5CwUAAAA
2023-11-22 16:22:44 UTC	1227	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 2d 76 69 51 52 71 4f 58 56 6a 51 55 30 6a 5a 65 4a 37 61 57 54 51 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 20 68 74 74 70 3a 3b 72 65 70 6f 72 74 2d 75 72 69 20 68 74 Data Ascii: HTTP/1.1 204 No ContentContent-Type: text/html; charset=UTF-8Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce--viQRqOXVjQU0jZeJ7aWTQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49899	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:44 UTC	1754	OUT	GET /xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=0/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/m=sy2kt,sy35j,w4UyN,sywv,syww,EbPKJf,sy3pg,sy68o,J9Q59e,sy3ph,a6Sgfb?xjs=s3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0; DV=Q3FLCIqvnZAgYHfm0PDGnWUnTnF9v5jkqNWfmvg5CwUAAAA
2023-11-22 16:22:44 UTC	816	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 4f 72 69 67 69 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 74 72 75 73 74 65 64 2d 74 79 70 65 73 2d 66 6f 72 20 27 73 63 72 69 70 74 27 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 67 77 73 2d 74 65 61 6d 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesVary: Accept-Encoding, OriginContent-Type: text/javascript; charset=UTF-8Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-teamCross-Origin-R
2023-11-22 16:22:44 UTC	436	IN	Data Raw: 74 68 69 73 2e 5f 73 3d 74 68 69 73 2e 5f 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 47 4a 67 3d 5f 2e 48 28 22 4c 68 78 38 65 66 22 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 6c 76 68 3d 5f 2e 7a 28 22 77 34 55 79 4e 22 2c 5b 5d 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 78 28 22 77 34 55 79 4e 22 29 3b 0a 76 61 72 20 4b 4c 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 44 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 4b 61 29 3b 74 68 69 73 2e 6b 61 3d 21 31 3b 74 68 69 73 2e 6f 61 3d 5f 2e 65 64 28 22 65 6c 50 64 64 Data Ascii: this._s=this._s\|\|{};(function(_){var window=this;try{_.GJg=_.H("Lhx8ef");}catch(e){_._DumpException(e)}try{_.lvh=_.z("w4UyN",[]);}catch(e){_._DumpException(e)}try{_.x("w4UyN");var KLr=function(a){_.D.call(this,a.Ka);this.ka=!1;this.oa=_.ed("elPdd
2023-11-22 16:22:44 UTC	1252	IN	Data Raw: 2e 47 4a 67 29 2c 21 74 68 69 73 2e 6b 61 29 7b 76 61 72 20 61 3d 5f 2e 42 78 28 6e 65 77 20 5f 2e 7a 78 2c 5f 2e 41 78 28 6e 65 77 20 5f 2e 43 78 2c 31 33 34 36 33 34 29 29 3b 5f 2e 6c 66 28 64 6f 63 75 6d 65 6e 74 2c 5f 2e 44 78 2c 7b 49 46 3a 61 7d 29 3b 74 68 69 73 2e 6b 61 3d 21 30 7d 7d 65 6c 73 65 20 5f 2e 76 2e 73 65 74 53 74 79 6c 65 28 74 68 69 73 2e 6f 61 2c 22 74 72 61 6e 73 66 6f 72 6d 22 2c 22 22 29 3b 74 68 69 73 2e 6e 62 28 22 73 75 45 4f 64 63 22 29 2e 73 65 74 53 74 79 6c 65 28 22 76 69 73 69 62 69 6c 69 74 79 22 2c 22 68 69 64 64 65 6e 22 29 7d 3b 0a 4b 4c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 73 68 6f 77 54 6f 6f 6c 74 69 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 62 28 22 73 75 45 4f 64 63 22 29 2e 73 65 74 53 74 79 6c 65 Data Ascii: .GJg),!this.ka){var a=_.Bx(new _.zx,_.Ax(new _.Cx,134634));_.lf(document,_.Dx,{IF:a});this.ka=!0}}else _.v.setStyle(this.oa,"transform","");this.nb("suEOdc").setStyle("visibility","hidden")};KLr.prototype.showTooltip=function(){this.nb("suEOdc").setStyle
2023-11-22 16:22:44 UTC	1252	IN	Data Raw: 7d 3b 5f 2e 6b 2e 44 4a 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 4f 66 28 74 68 69 73 2c 31 29 7d 3b 5f 2e 6b 2e 54 6b 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 56 65 28 74 68 69 73 2c 31 29 7d 3b 5f 2e 6b 2e 4b 24 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 43 28 74 68 69 73 2c 32 29 7d 3b 5f 2e 6b 2e 63 43 64 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 48 65 28 74 68 69 73 2c 32 2c 61 29 7d 3b 5f 2e 6b 2e 63 48 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 4f 66 28 74 68 69 73 2c 32 29 7d 3b 5f 2e 6b 2e 69 69 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 56 65 28 74 68 69 73 2c 32 29 7d 3b 5f 2e 6b 2e 43 69 63 3d 66 75 6e Data Ascii: };_.k.DJe=function(){return _.Of(this,1)};_.k.Tkf=function(){return _.Ve(this,1)};_.k.K$c=function(){return _.C(this,2)};_.k.cCd=function(a){return _.He(this,2,a)};_.k.cHe=function(){return _.Of(this,2)};_.k.iif=function(){return _.Ve(this,2)};_.k.Cic=fun
2023-11-22 16:22:44 UTC	1156	IN	Data Raw: 35 39 65 22 29 3b 0a 5f 2e 4a 7a 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 6b 67 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 4b 61 29 3b 74 68 69 73 2e 68 67 3d 61 2e 4c 64 2e 59 61 63 7d 3b 5f 2e 45 28 5f 2e 4a 7a 73 2c 5f 2e 6b 67 29 3b 5f 2e 4a 7a 73 2e 46 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 4c 64 3a 7b 59 61 63 3a 5f 2e 49 7a 73 7d 7d 7d 3b 5f 2e 4f 71 28 5f 2e 75 49 68 2c 5f 2e 4a 7a 73 29 3b 0a 5f 2e 79 28 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 76 49 68 3d 5f 2e 7a 28 22 61 36 53 67 66 62 22 2c 5b 5f 2e 75 49 68 5d 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 78 28 Data Ascii: 59e");_.Jzs=function(a){_.kg.call(this,a.Ka);this.hg=a.Ld.Yac};_.E(_.Jzs,_.kg);_.Jzs.Fa=function(){return{Ld:{Yac:_.Izs}}};_.Oq(_.uIh,_.Jzs);_.y();}catch(e){_._DumpException(e)}try{_.vIh=_.z("a6Sgfb",[_.uIh]);}catch(e){_._DumpException(e)}try{_.x(
2023-11-22 16:22:44 UTC	704	IN	Data Raw: 69 73 29 2e 6c 69 73 74 65 6e 4f 6e 63 65 28 5f 2e 53 65 28 29 2c 22 6c 6f 61 64 22 2c 74 68 69 73 2e 45 61 29 2c 50 7a 73 28 74 68 69 73 29 29 7d 7d 3b 5f 2e 45 28 51 7a 73 2c 5f 2e 44 29 3b 51 7a 73 2e 46 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 6d 6f 64 65 6c 3a 7b 6d 6f 64 65 6c 3a 5f 2e 4a 7a 73 7d 2c 6a 73 64 61 74 61 3a 7b 64 61 74 61 3a 4d 7a 73 7d 7d 7d 3b 51 7a 73 2e 70 72 6f 74 6f 74 79 70 65 2e 45 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4b 7a 73 28 74 68 69 73 2e 6d 6f 64 65 6c 2c 52 7a 73 28 74 68 69 73 29 29 7d 3b 0a 76 61 72 20 50 7a 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 6a 72 28 61 29 2e 6c 69 73 74 65 6e 28 5f 2e 53 65 28 29 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: is).listenOnce(_.Se(),"load",this.Ea),Pzs(this))}};_.E(Qzs,_.D);Qzs.Fa=function(){return{model:{model:_.Jzs},jsdata:{data:Mzs}}};Qzs.prototype.Ea=function(){Kzs(this.model,Rzs(this))};var Pzs=function(a){_.jr(a).listen(_.Se(),"visibilitychange",function(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49900	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:44 UTC	1739	OUT	GET /async/vpkg?ei=xSpeZdzvEPyy5NoPhfSymAc&opi=89978449&yv=3&cs=0&async=_ck:xjs.s.qnyE1sBG7t8.L.W.O,_k:xjs.s.en_US.r7Ut2Mhd2yU.O,_am:ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA,_csss:ACT90oGxb2yBgv3mHTYRZ1xum4XELOUH9A,_fmt:prog,_id:QPwIld HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0; DV=Q3FLCIqvnZAgYHfm0PDGnWUnTnF9v5jkqNWfmvg5CwUAAAA
2023-11-22 16:22:44 UTC	1649	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 56 65 72 73 69 6f 6e 3a 20 35 38 33 31 33 31 32 38 32 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 6d 61 78 2d 61 67 65 3d 33 30 30 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 61 74 74 61 63 68 6d 65 6e 74 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 66 2e 74 78 74 22 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e Data Ascii: HTTP/1.1 200 OKVersion: 583131282Cache-Control: private,max-age=300X-Content-Type-Options: nosniffContent-Type: text/plain; charset=UTF-8Content-Disposition: attachment; filename="f.txt"Strict-Transport-Security: max-age=31536000Cross-Origin
2023-11-22 16:22:44 UTC	48	IN	Data Raw: 32 61 0d 0a 29 5d 7d 27 0a 32 32 3b 5b 22 31 43 70 65 5a 63 57 6c 47 6f 65 67 69 4c 4d 50 36 73 6d 38 79 41 30 22 2c 22 31 39 30 36 22 5d 0d 0a Data Ascii: 2a)]}'22;["1CpeZcWlGoegiLMP6sm8yA0","1906"]
2023-11-22 16:22:44 UTC	1252	IN	Data Raw: 38 30 30 30 0d 0a 33 3b 5b 32 5d 31 34 35 39 38 3b 3c 64 69 76 20 6a 73 6e 61 6d 65 3d 22 54 59 70 63 33 22 20 6a 73 63 6f 6e 74 72 6f 6c 6c 65 72 3d 22 4d 36 51 67 42 62 22 20 64 61 74 61 2d 67 6d 63 3d 22 43 70 55 44 49 70 49 44 61 48 52 30 63 48 4d 36 4c 79 39 33 64 33 63 75 5a 33 4e 30 59 58 52 70 59 79 35 6a 62 32 30 76 58 79 39 74 63 33 4d 76 59 6d 39 78 4c 58 4e 6c 59 58 4a 6a 61 43 39 66 4c 32 70 7a 4c 32 73 39 59 6d 39 78 4c 58 4e 6c 59 58 4a 6a 61 43 35 57 61 57 56 33 55 47 46 6a 61 32 46 6e 5a 56 4e 6c 63 6e 5a 70 59 32 55 75 5a 57 34 75 4e 58 5a 47 62 30 6c 71 4e 6e 4a 34 4e 6d 63 75 5a 58 4d 31 4c 6b 38 76 59 57 30 39 52 45 46 4a 51 56 46 4a 51 55 46 42 51 55 46 42 5a 30 46 42 51 55 46 43 51 55 46 42 51 55 46 42 51 55 46 42 51 57 46 35 54 6d Data Ascii: 80003;[2]14598;<div jsname="TYpc3" jscontroller="M6QgBb" data-gmc="CpUDIpIDaHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20vXy9tc3MvYm9xLXNlYXJjaC9fL2pzL2s9Ym9xLXNlYXJjaC5WaWV3UGFja2FnZVNlcnZpY2UuZW4uNXZGb0lqNnJ4NmcuZXM1Lk8vYW09REFJQVFJQUFBQUFBZ0FBQUFCQUFBQUFBQUFBQWF5Tm
2023-11-22 16:22:44 UTC	1252	IN	Data Raw: 73 49 69 35 6e 62 32 39 6e 62 47 55 75 59 6d 63 69 4c 43 49 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 35 69 61 43 49 73 49 69 35 6e 62 32 39 6e 62 47 55 75 59 6d 6b 69 4c 43 49 75 5a 32 39 76 5a 32 78 6c 4c 6d 4a 71 49 69 77 69 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 75 59 6d 34 69 4c 43 49 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 35 69 62 79 49 73 49 69 35 6e 62 32 39 6e 62 47 55 75 59 32 39 74 4c 6d 4a 79 49 69 77 69 4c 6d 64 76 62 32 64 73 5a 53 35 69 63 79 49 73 49 69 35 6e 62 32 39 6e 62 47 55 75 59 6e 51 69 4c 43 49 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 4c 6d 4a 33 49 69 77 69 4c 6d 64 76 62 32 64 73 5a 53 35 69 65 53 49 73 49 69 35 6e 62 32 39 6e 62 47 55 75 59 32 39 74 4c 6d 4a 36 49 69 77 69 4c 6d 64 76 62 32 64 73 5a 53 35 6a 59 53 Data Ascii: sIi5nb29nbGUuYmciLCIuZ29vZ2xlLmNvbS5iaCIsIi5nb29nbGUuYmkiLCIuZ29vZ2xlLmJqIiwiLmdvb2dsZS5jb20uYm4iLCIuZ29vZ2xlLmNvbS5ibyIsIi5nb29nbGUuY29tLmJyIiwiLmdvb2dsZS5icyIsIi5nb29nbGUuYnQiLCIuZ29vZ2xlLmNvLmJ3IiwiLmdvb2dsZS5ieSIsIi5nb29nbGUuY29tLmJ6IiwiLmdvb2dsZS5jYS
2023-11-22 16:22:44 UTC	1252	IN	Data Raw: 6c 4c 6d 6c 30 49 69 77 69 4c 6d 64 76 62 32 64 73 5a 53 35 71 5a 53 49 73 49 69 35 6e 62 32 39 6e 62 47 55 75 59 32 39 74 4c 6d 70 74 49 69 77 69 4c 6d 64 76 62 32 64 73 5a 53 35 71 62 79 49 73 49 69 35 6e 62 32 39 6e 62 47 55 75 59 32 38 75 61 6e 41 69 4c 43 49 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 4c 6d 74 6c 49 69 77 69 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 75 61 32 67 69 4c 43 49 75 5a 32 39 76 5a 32 78 6c 4c 6d 74 70 49 69 77 69 4c 6d 64 76 62 32 64 73 5a 53 35 72 5a 79 49 73 49 69 35 6e 62 32 39 6e 62 47 55 75 59 32 38 75 61 33 49 69 4c 43 49 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 35 72 64 79 49 73 49 69 35 6e 62 32 39 6e 62 47 55 75 61 33 6f 69 4c 43 49 75 5a 32 39 76 5a 32 78 6c 4c 6d 78 68 49 69 77 69 4c 6d 64 76 62 32 64 73 5a 53 Data Ascii: lLml0IiwiLmdvb2dsZS5qZSIsIi5nb29nbGUuY29tLmptIiwiLmdvb2dsZS5qbyIsIi5nb29nbGUuY28uanAiLCIuZ29vZ2xlLmNvLmtlIiwiLmdvb2dsZS5jb20ua2giLCIuZ29vZ2xlLmtpIiwiLmdvb2dsZS5rZyIsIi5nb29nbGUuY28ua3IiLCIuZ29vZ2xlLmNvbS5rdyIsIi5nb29nbGUua3oiLCIuZ29vZ2xlLmxhIiwiLmdvb2dsZS
2023-11-22 16:22:44 UTC	1252	IN	Data Raw: 69 49 69 77 69 4c 6d 64 76 62 32 64 73 5a 53 35 7a 59 79 49 73 49 69 35 6e 62 32 39 6e 62 47 55 75 63 32 55 69 4c 43 49 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 35 7a 5a 79 49 73 49 69 35 6e 62 32 39 6e 62 47 55 75 63 32 67 69 4c 43 49 75 5a 32 39 76 5a 32 78 6c 4c 6e 4e 70 49 69 77 69 4c 6d 64 76 62 32 64 73 5a 53 35 7a 61 79 49 73 49 69 35 6e 62 32 39 6e 62 47 55 75 59 32 39 74 4c 6e 4e 73 49 69 77 69 4c 6d 64 76 62 32 64 73 5a 53 35 7a 62 69 49 73 49 69 35 6e 62 32 39 6e 62 47 55 75 63 32 38 69 4c 43 49 75 5a 32 39 76 5a 32 78 6c 4c 6e 4e 74 49 69 77 69 4c 6d 64 76 62 32 64 73 5a 53 35 7a 63 69 49 73 49 69 35 6e 62 32 39 6e 62 47 55 75 63 33 51 69 4c 43 49 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 35 7a 64 69 49 73 49 69 35 6e 62 32 39 6e 62 47 Data Ascii: iIiwiLmdvb2dsZS5zYyIsIi5nb29nbGUuc2UiLCIuZ29vZ2xlLmNvbS5zZyIsIi5nb29nbGUuc2giLCIuZ29vZ2xlLnNpIiwiLmdvb2dsZS5zayIsIi5nb29nbGUuY29tLnNsIiwiLmdvb2dsZS5zbiIsIi5nb29nbGUuc28iLCIuZ29vZ2xlLnNtIiwiLmdvb2dsZS5zciIsIi5nb29nbGUuc3QiLCIuZ29vZ2xlLmNvbS5zdiIsIi5nb29nbG
2023-11-22 16:22:44 UTC	1252	IN	Data Raw: 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 48 52 79 64 57 55 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 46 77 69 5a 57 35 63 49 69 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 64 48 4a 31 5a 53 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 30 63 6e 56 6c 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 Data Ascii: 1bGwsbnVsbCxudWxsLHRydWUsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLFwiZW5cIixudWxsLG51bGwsdHJ1ZSxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCx0cnVlLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG
2023-11-22 16:22:44 UTC	1252	IN	Data Raw: 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 44 55 77 4c 48 52 79 64 57 55 73 62 6e 56 73 62 43 78 63 49 6d 31 78 4d 7a 4d 78 51 56 46 42 58 43 49 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 48 52 79 64 57 55 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 44 45 79 4c 47 35 31 62 47 77 73 64 48 4a 31 5a 53 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 6d 59 57 78 7a 5a 53 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 48 52 79 64 57 55 73 62 6e 56 73 62 43 78 6d 59 57 78 7a 5a 53 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 Data Ascii: sLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLDUwLHRydWUsbnVsbCxcIm1xMzMxQVFBXCIsbnVsbCxudWxsLHRydWUsbnVsbCxudWxsLDEyLG51bGwsdHJ1ZSxudWxsLG51bGwsbnVsbCxmYWxzZSxudWxsLG51bGwsbnVsbCxudWxsLHRydWUsbnVsbCxmYWxzZSxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bG
2023-11-22 16:22:44 UTC	1252	IN	Data Raw: 48 64 31 52 69 49 6a 6f 69 4d 54 41 77 49 69 77 69 61 32 46 33 62 58 4a 69 49 6a 6f 69 5a 6d 46 73 63 32 55 69 4c 43 4a 4e 4d 30 70 73 59 57 59 69 4f 69 4a 6d 59 57 78 7a 5a 53 49 73 49 6d 78 30 54 30 45 30 5a 43 49 36 49 6a 59 77 49 69 77 69 63 57 51 30 52 7a 5a 69 49 6a 6f 69 4f 43 49 73 49 6b 45 34 4e 55 78 69 49 6a 6f 69 64 48 4a 31 5a 53 49 73 49 6e 46 68 59 6b 56 32 5a 69 49 36 49 6a 4d 79 49 69 77 69 57 6b 64 51 4e 47 39 6b 49 6a 6f 69 64 48 4a 31 5a 53 49 73 49 6c 4a 42 64 55 74 48 59 79 49 36 49 6e 52 79 64 57 55 69 4c 43 4a 4a 5a 6d 68 45 53 6d 55 69 4f 69 4a 6d 59 57 78 7a 5a 53 49 73 49 6d 4a 33 51 56 4a 48 5a 53 49 36 49 6e 52 79 64 57 55 69 4c 43 4a 42 62 30 5a 77 56 32 4d 69 4f 69 4a 6d 59 57 78 7a 5a 53 49 73 49 6e 5a 6e 61 31 64 75 5a 69 Data Ascii: Hd1RiIjoiMTAwIiwia2F3bXJiIjoiZmFsc2UiLCJNM0psYWYiOiJmYWxzZSIsImx0T0E0ZCI6IjYwIiwicWQ0RzZiIjoiOCIsIkE4NUxiIjoidHJ1ZSIsInFhYkV2ZiI6IjMyIiwiWkdQNG9kIjoidHJ1ZSIsIlJBdUtHYyI6InRydWUiLCJJZmhESmUiOiJmYWxzZSIsImJ3QVJHZSI6InRydWUiLCJBb0ZwV2MiOiJmYWxzZSIsInZna1duZi
2023-11-22 16:22:44 UTC	1252	IN	Data Raw: 69 4d 6a 55 77 4d 43 49 73 49 6e 64 6e 65 55 78 30 5a 69 49 36 49 6d 5a 68 62 48 4e 6c 49 69 77 69 5a 56 6c 6f 4d 54 6c 6a 49 6a 6f 69 5a 6d 46 73 63 32 55 69 4c 43 4a 6a 57 57 4a 32 5a 32 4d 69 4f 69 49 78 49 69 77 69 57 46 64 50 52 6c 4a 6b 49 6a 6f 69 5a 6d 46 73 63 32 55 69 4c 43 4a 51 59 32 4e 53 52 32 59 69 4f 69 4a 30 63 6e 56 6c 49 69 77 69 64 48 4a 51 61 6d 4a 6a 49 6a 6f 69 64 48 4a 31 5a 53 49 73 49 6e 52 42 64 44 4e 76 5a 69 49 36 49 6a 4d 69 4c 43 4a 43 5a 31 70 55 5a 6d 51 69 4f 69 49 78 4e 54 41 69 4c 43 4a 73 63 6b 64 73 61 57 51 69 4f 69 4a 45 52 56 4e 4c 56 45 39 51 58 30 46 56 56 45 39 51 54 45 46 5a 49 69 77 69 54 6b 77 32 56 6b 39 6a 49 6a 6f 69 5a 6d 46 73 63 32 55 69 4c 43 4a 70 59 32 31 4e 4f 47 51 69 4f 69 4a 6d 59 57 78 7a 5a 53 Data Ascii: iMjUwMCIsIndneUx0ZiI6ImZhbHNlIiwiZVloMTljIjoiZmFsc2UiLCJjWWJ2Z2MiOiIxIiwiWFdPRlJkIjoiZmFsc2UiLCJQY2NSR2YiOiJ0cnVlIiwidHJQamJjIjoidHJ1ZSIsInRBdDNvZiI6IjMiLCJCZ1pUZmQiOiIxNTAiLCJsckdsaWQiOiJERVNLVE9QX0FVVE9QTEFZIiwiTkw2Vk9jIjoiZmFsc2UiLCJpY21NOGQiOiJmYWxzZS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49898	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:44 UTC	1540	OUT	POST /gen_204?atyp=i&ct=&cad=udla=3&ei=xSpeZdzvEPyy5NoPhfSymAc&pd=25&e=1&zx=1700670161934&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0; DV=Q3FLCIqvnZAgYHfm0PDGnWUnTnF9v5jkqNWfmvg5CwUAAAA
2023-11-22 16:22:44 UTC	1227	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 37 58 39 4b 66 79 55 76 52 58 32 59 66 43 4c 31 7a 64 2d 30 75 67 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 20 68 74 74 70 3a 3b 72 65 70 6f 72 74 2d 75 72 69 20 68 74 Data Ascii: HTTP/1.1 204 No ContentContent-Type: text/html; charset=UTF-8Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-7X9KfyUvRX2YfCL1zd-0ug' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49903	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:44 UTC	1541	OUT	POST /gen_204?atyp=i&ct=&cad=udla=1&ei=xSpeZdzvEPyy5NoPhfSymAc&act=p&ps=1&zx=1700670161935&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0; DV=Q3FLCIqvnZAgYHfm0PDGnWUnTnF9v5jkqNWfmvg5CwUAAAA
2023-11-22 16:22:44 UTC	1227	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 57 50 6b 76 49 41 58 50 46 58 59 6d 6c 7a 43 78 52 56 6a 68 66 77 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 20 68 74 74 70 3a 3b 72 65 70 6f 72 74 2d 75 72 69 20 68 74 Data Ascii: HTTP/1.1 204 No ContentContent-Type: text/html; charset=UTF-8Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-WPkvIAXPFXYmlzCxRVjhfw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49904	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:44 UTC	1905	OUT	GET /xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=0/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/m=sywz,CnSW2d,sy12i,sy12j,sy12k,sy12l,sy12n,sy12o,sy34r,sy632,VD4Qme,sy1hj,sy1hl,sy1hm,sy1hn,NVlnE,sy1hk,Dq2Yjb,sy1gz,sy1h0,qmdEUe,sy1ho,sy1hp,UqGwg,sy46w,ND0kmf,pjDTFb,sy3ob,sy648,sy68h,KgxeNb,sy3o7,khkNpe,sy2ks,EfPGub?xjs=s3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0; DV=Q3FLCIqvnZAgYHfm0PDGnWUnTnF9v5jkqNWfmvg5CwUAAAA
2023-11-22 16:22:45 UTC	817	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 4f 72 69 67 69 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 74 72 75 73 74 65 64 2d 74 79 70 65 73 2d 66 6f 72 20 27 73 63 72 69 70 74 27 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 67 77 73 2d 74 65 61 6d 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesVary: Accept-Encoding, OriginContent-Type: text/javascript; charset=UTF-8Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-teamCross-Origin-R
2023-11-22 16:22:45 UTC	435	IN	Data Raw: 74 68 69 73 2e 5f 73 3d 74 68 69 73 2e 5f 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 53 58 62 3d 5f 2e 7a 28 22 43 6e 53 57 32 64 22 2c 5b 5d 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 78 28 22 43 6e 53 57 32 64 22 29 3b 0a 76 61 72 20 66 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 44 2e 63 61 6c 6c 28 74 68 69 73 2c 61 2e 4b 61 29 3b 74 68 69 73 2e 64 61 74 61 3d 61 2e 6a 73 64 61 74 61 2e 4b 55 65 3b 74 68 69 73 2e 72 6f 6f 74 3d 74 68 69 73 2e 67 65 74 52 6f 6f 74 28 29 2e 65 6c 28 29 3b 74 68 69 73 2e 72 6f 6f 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 Data Ascii: this._s=this._s\|\|{};(function(_){var window=this;try{_.SXb=_.z("CnSW2d",[]);}catch(e){_._DumpException(e)}try{_.x("CnSW2d");var fx=function(a){_.D.call(this,a.Ka);this.data=a.jsdata.KUe;this.root=this.getRoot().el();this.root.getAttribute("disabled"
2023-11-22 16:22:45 UTC	1252	IN	Data Raw: 70 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 64 61 74 61 2e 67 65 74 54 79 70 65 28 29 7d 3b 5f 2e 6b 2e 4d 48 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 64 61 74 61 2e 67 65 74 54 79 70 65 28 29 3b 72 65 74 75 72 6e 20 56 58 62 2e 69 6e 63 6c 75 64 65 73 28 61 29 7d 3b 5f 2e 6b 2e 69 73 45 6e 61 62 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 74 68 69 73 2e 72 6f 6f 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7d 3b 0a 5f 2e 6b 2e 49 6d 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 46 28 74 68 69 73 2e 64 61 74 61 2c 33 29 7d 3b 5f 2e 6b 2e 44 73 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 34 3d 3d 3d 74 Data Ascii: pe=function(){return this.data.getType()};_.k.MHd=function(){var a=this.data.getType();return VXb.includes(a)};_.k.isEnabled=function(){return!this.root.getAttribute("disabled")};_.k.Imd=function(){return _.F(this.data,3)};_.k.Dsb=function(){return 4===t
2023-11-22 16:22:45 UTC	1252	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 53 65 6c 65 63 74 65 64 7d 29 3b 5f 2e 4a 28 66 78 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 7a 78 38 31 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 5a 62 7d 29 3b 5f 2e 4a 28 66 78 2e 70 72 6f 74 6f 74 79 70 65 2c 22 42 6e 4b 64 51 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 44 73 62 7d 29 3b 5f 2e 4a 28 66 78 2e 70 72 6f 74 6f 74 79 70 65 2c 22 49 39 46 4e 6b 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 49 6d 64 7d 29 3b 5f 2e 4a 28 66 78 2e 70 72 6f 74 6f 74 79 70 65 2c 22 79 58 67 6d 52 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 69 73 45 6e 61 62 6c 65 Data Ascii: nction(){return this.isSelected});_.J(fx.prototype,"ezx81e",function(){return this.pZb});_.J(fx.prototype,"BnKdQ",function(){return this.Dsb});_.J(fx.prototype,"I9FNke",function(){return this.Imd});_.J(fx.prototype,"yXgmRe",function(){return this.isEnable
2023-11-22 16:22:45 UTC	1252	IN	Data Raw: 74 53 65 63 6f 6e 64 73 3d 5f 2e 56 79 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 55 54 43 53 65 63 6f 6e 64 73 3b 5f 2e 6b 2e 67 65 74 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 3d 5f 2e 56 79 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 55 54 43 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 3b 5f 2e 6b 2e 67 65 74 44 61 79 3d 5f 2e 56 79 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 55 54 43 44 61 79 3b 5f 2e 6b 2e 73 65 74 46 75 6c 6c 59 65 61 72 3d 5f 2e 56 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 55 54 43 46 75 6c 6c 59 65 61 72 3b 5f 2e 6b 2e 73 65 74 4d 6f 6e 74 68 3d 5f 2e 56 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 55 54 43 4d 6f 6e 74 68 3b 5f 2e 6b 2e 73 65 74 44 61 74 65 3d 5f 2e 56 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 55 54 43 44 61 74 65 3b 5f 2e 6b Data Ascii: tSeconds=_.Vy.prototype.getUTCSeconds;_.k.getMilliseconds=_.Vy.prototype.getUTCMilliseconds;_.k.getDay=_.Vy.prototype.getUTCDay;_.k.setFullYear=_.Vy.prototype.setUTCFullYear;_.k.setMonth=_.Vy.prototype.setUTCMonth;_.k.setDate=_.Vy.prototype.setUTCDate;_.k
2023-11-22 16:22:45 UTC	1252	IN	Data Raw: 62 2e 6b 61 3d 61 2e 6e 61 6d 65 73 5f 65 78 74 3b 62 2e 6f 61 3d 61 2e 74 72 61 6e 73 69 74 69 6f 6e 73 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 43 67 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 5b 22 47 4d 54 22 5d 3b 62 2e 70 75 73 68 28 30 3e 3d 61 3f 22 2b 22 3a 22 2d 22 29 3b 61 3d 4d 61 74 68 2e 61 62 73 28 61 29 3b 62 2e 70 75 73 68 28 5f 2e 68 6c 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 61 2f 36 30 29 25 31 30 30 2c 32 29 2c 22 3a 22 2c 5f 2e 68 6c 28 61 25 36 30 2c 32 29 29 3b 72 65 74 75 72 6e 20 62 2e 6a 6f 69 6e 28 22 22 29 7d 3b 45 67 63 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 44 61 74 65 2e 55 54 43 28 62 2e 67 65 74 55 54 43 46 75 6c 6c 59 65 61 72 28 29 2c 62 2e 67 65 74 55 54 43 4d 6f 6e 74 68 28 29 2c 62 2e 67 65 74 55 Data Ascii: b.ka=a.names_ext;b.oa=a.transitions;return b};Cgc=function(a){var b=["GMT"];b.push(0>=a?"+":"-");a=Math.abs(a);b.push(_.hl(Math.floor(a/60)%100,2),":",_.hl(a%60,2));return b.join("")};Egc=function(a,b){b=Date.UTC(b.getUTCFullYear(),b.getUTCMonth(),b.getU
2023-11-22 16:22:45 UTC	1252	IN	Data Raw: 62 26 26 64 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 21 3d 61 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 26 26 28 65 3d 36 45 34 2a 28 64 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 2d 61 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 29 2c 64 3d 6e 65 77 20 44 61 74 65 28 64 2e 67 65 74 54 69 6d 65 28 29 2b 65 29 2c 63 2b 3d 30 3c 63 3f 2d 38 36 34 45 35 3a 38 36 34 45 35 2c 65 3d 6e 65 77 20 44 61 74 65 28 61 2e 67 65 74 54 69 6d 65 28 29 2b 63 29 29 3b 63 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 66 3d 30 3b 66 3c 74 68 69 73 2e 6f 61 2e 6c 65 6e 67 74 68 3b 2b 2b 66 29 7b 76 61 72 20 67 3d 74 68 69 73 2e 6f 61 5b 66 5d 2e 74 65 78 74 3b 31 3d 3d 74 68 69 73 2e 6f 61 5b 66 5d 2e 74 79 70 65 3f Data Ascii: b&&d.getTimezoneOffset()!=a.getTimezoneOffset()&&(e=6E4*(d.getTimezoneOffset()-a.getTimezoneOffset()),d=new Date(d.getTime()+e),c+=0<c?-864E5:864E5,e=new Date(a.getTime()+c));c=[];for(var f=0;f<this.oa.length;++f){var g=this.oa[f].text;1==this.oa[f].type?
2023-11-22 16:22:45 UTC	1252	IN	Data Raw: 2c 63 3d 7a 67 63 28 64 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2c 63 2c 65 2c 61 2e 6b 61 2e 78 69 2c 61 2e 6b 61 2e 6d 69 29 2c 63 3d 28 6e 65 77 20 44 61 74 65 28 63 29 29 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2c 0a 30 3e 63 26 26 28 63 3d 2d 63 29 2c 32 3d 3d 67 26 26 28 63 25 3d 31 30 30 29 2c 68 7a 28 61 2c 5f 2e 68 6c 28 63 2c 67 29 29 3b 63 61 73 65 20 22 4d 22 3a 61 3a 73 77 69 74 63 68 28 63 3d 64 2e 67 65 74 4d 6f 6e 74 68 28 29 2c 67 29 7b 63 61 73 65 20 35 3a 67 3d 61 2e 6b 61 2e 55 69 5b 63 5d 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 34 3a 67 3d 61 2e 6b 61 2e 43 69 5b 63 5d 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 33 3a 67 3d 61 2e 6b 61 2e 44 69 5b 63 5d 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 67 3d 68 7a 28 61 2c 5f 2e Data Ascii: ,c=zgc(d.getFullYear(),c,e,a.ka.xi,a.ka.mi),c=(new Date(c)).getFullYear(),0>c&&(c=-c),2==g&&(c%=100),hz(a,_.hl(c,g));case "M":a:switch(c=d.getMonth(),g){case 5:g=a.ka.Ui[c];break a;case 4:g=a.ka.Ci[c];break a;case 3:g=a.ka.Di[c];break a;default:g=hz(a,_.
2023-11-22 16:22:45 UTC	1252	IN	Data Raw: 2c 67 29 29 3b 63 61 73 65 20 22 76 22 3a 72 65 74 75 72 6e 28 66 7c 7c 5f 2e 44 67 63 28 63 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 29 29 2e 77 61 3b 63 61 73 65 20 22 56 22 3a 72 65 74 75 72 6e 20 61 3d 66 7c 7c 5f 2e 44 67 63 28 63 2e 67 65 74 54 69 6d 65 7a 6f 6e 65 4f 66 66 73 65 74 28 29 29 2c 32 3e 3d 67 3f 61 2e 77 61 3a 30 3c 45 67 63 28 61 2c 63 29 3f 76 6f 69 64 20 30 21 3d 3d 61 2e 6b 61 2e 70 50 64 3f 61 2e 6b 61 2e 70 50 64 3a 61 2e 6b 61 2e 44 53 54 5f 47 45 4e 45 52 49 43 5f 4c 4f 43 41 54 49 4f 4e 3a 76 6f 69 64 20 30 21 3d 3d 61 2e 6b 61 2e 70 59 63 3f 61 2e 6b 61 2e 70 59 63 3a 61 2e 6b 61 2e 53 54 44 5f 47 45 4e 45 52 49 43 5f 4c 4f 43 41 54 49 4f 4e 3b 63 61 73 65 20 22 77 22 3a 72 65 74 75 72 6e 20 63 3d 65 2e 67 Data Ascii: ,g));case "v":return(f\|\|_.Dgc(c.getTimezoneOffset())).wa;case "V":return a=f\|\|_.Dgc(c.getTimezoneOffset()),2>=g?a.wa:0<Egc(a,c)?void 0!==a.ka.pPd?a.ka.pPd:a.ka.DST_GENERIC_LOCATION:void 0!==a.ka.pYc?a.ka.pYc:a.ka.STD_GENERIC_LOCATION;case "w":return c=e.g
2023-11-22 16:22:45 UTC	1252	IN	Data Raw: 61 2e 6b 61 2e 70 75 73 68 28 7b 74 65 78 74 3a 64 2c 63 6f 75 6e 74 3a 30 2c 68 51 61 3a 21 31 2c 6e 75 6d 65 72 69 63 3a 21 31 7d 29 2c 64 3d 22 22 29 2c 61 2e 6b 61 2e 70 75 73 68 28 7b 74 65 78 74 3a 22 20 22 2c 63 6f 75 6e 74 3a 30 2c 68 51 61 3a 21 31 2c 6e 75 6d 65 72 69 63 3a 21 31 7d 29 3b 65 3c 62 2e 6c 65 6e 67 74 68 2d 31 26 26 22 20 22 3d 3d 62 2e 63 68 61 72 41 74 28 65 2b 31 29 3b 29 65 2b 2b 3b 65 6c 73 65 20 69 66 28 63 29 22 27 22 3d 3d 66 3f 65 2b 31 3c 62 2e 6c 65 6e 67 74 68 26 26 22 27 22 3d 3d 62 2e 63 68 61 72 41 74 28 65 2b 31 29 3f 28 64 2b 3d 22 27 22 2c 65 2b 2b 29 3a 63 3d 21 31 3a 64 2b 3d 66 3b 65 6c 73 65 20 69 66 28 30 3c 3d 22 47 79 4d 64 6b 48 6d 73 53 45 44 61 62 42 68 4b 7a 5a 76 51 4c 22 2e 69 6e 64 65 78 4f 66 28 66 Data Ascii: a.ka.push({text:d,count:0,hQa:!1,numeric:!1}),d=""),a.ka.push({text:" ",count:0,hQa:!1,numeric:!1});e<b.length-1&&" "==b.charAt(e+1);)e++;else if(c)"'"==f?e+1<b.length&&"'"==b.charAt(e+1)?(d+="'",e++):c=!1:d+=f;else if(0<="GyMdkHmsSEDabBhKzZvQL".indexOf(f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49905	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:45 UTC	1654	OUT	POST /gen_204?atyp=csi&ei=1CpeZcWlGoegiLMP6sm8yA0&s=async&astyp=vpkg&ima=0&imn=0&mem=ujhs.9,tjhs.12,jhsl.2173,dm.8&nv=ne.1,feid.014b0ae0-94e1-4a32-a6a5-e74fe35dadc3&hp=&rt=ttfb.689,st.1047,bs.83352,aaft.1050,acrt.1050,art.1050&zx=1700670164425&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0; DV=Q3FLCIqvnZAgYHfm0PDGnWUnTnF9v5jkqNWfmvg5CwUAAAA
2023-11-22 16:22:45 UTC	1227	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 55 71 7a 71 79 56 54 76 42 43 63 75 53 34 53 33 72 67 5f 35 4c 67 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 20 68 74 74 70 3a 3b 72 65 70 6f 72 74 2d 75 72 69 20 68 74 Data Ascii: HTTP/1.1 204 No ContentContent-Type: text/html; charset=UTF-8Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-UqzqyVTvBCcuS4S3rg_5Lg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49906	142.251.16.105	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:45 UTC	1227	OUT	GET /async/vpkg?ei=xSpeZdzvEPyy5NoPhfSymAc&opi=89978449&yv=3&cs=0&async=_ck:xjs.s.qnyE1sBG7t8.L.W.O,_k:xjs.s.en_US.r7Ut2Mhd2yU.O,_am:ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA,_csss:ACT90oGxb2yBgv3mHTYRZ1xum4XELOUH9A,_fmt:prog,_id:QPwIld HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0; DV=Q3FLCIqvnZAgYHfm0PDGnWUnTnF9v5jkqNWfmvg5CwUAAAA
2023-11-22 16:22:45 UTC	1649	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 56 65 72 73 69 6f 6e 3a 20 35 38 33 31 33 31 32 38 32 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 6d 61 78 2d 61 67 65 3d 33 30 30 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 61 74 74 61 63 68 6d 65 6e 74 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 66 2e 74 78 74 22 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e Data Ascii: HTTP/1.1 200 OKVersion: 583131282Cache-Control: private,max-age=300X-Content-Type-Options: nosniffContent-Type: text/plain; charset=UTF-8Content-Disposition: attachment; filename="f.txt"Strict-Transport-Security: max-age=31536000Cross-Origin
2023-11-22 16:22:45 UTC	48	IN	Data Raw: 32 61 0d 0a 29 5d 7d 27 0a 32 32 3b 5b 22 31 53 70 65 5a 66 43 56 48 35 36 6a 35 4e 6f 50 35 4f 61 65 2d 41 38 22 2c 22 31 39 30 36 22 5d 0d 0a Data Ascii: 2a)]}'22;["1SpeZfCVH56j5NoP5Oae-A8","1906"]
2023-11-22 16:22:45 UTC	1252	IN	Data Raw: 38 30 30 30 0d 0a 33 3b 5b 32 5d 31 34 35 39 38 3b 3c 64 69 76 20 6a 73 6e 61 6d 65 3d 22 54 59 70 63 33 22 20 6a 73 63 6f 6e 74 72 6f 6c 6c 65 72 3d 22 4d 36 51 67 42 62 22 20 64 61 74 61 2d 67 6d 63 3d 22 43 70 55 44 49 70 49 44 61 48 52 30 63 48 4d 36 4c 79 39 33 64 33 63 75 5a 33 4e 30 59 58 52 70 59 79 35 6a 62 32 30 76 58 79 39 74 63 33 4d 76 59 6d 39 78 4c 58 4e 6c 59 58 4a 6a 61 43 39 66 4c 32 70 7a 4c 32 73 39 59 6d 39 78 4c 58 4e 6c 59 58 4a 6a 61 43 35 57 61 57 56 33 55 47 46 6a 61 32 46 6e 5a 56 4e 6c 63 6e 5a 70 59 32 55 75 5a 57 34 75 4e 58 5a 47 62 30 6c 71 4e 6e 4a 34 4e 6d 63 75 5a 58 4d 31 4c 6b 38 76 59 57 30 39 52 45 46 4a 51 56 46 4a 51 55 46 42 51 55 46 42 5a 30 46 42 51 55 46 43 51 55 46 42 51 55 46 42 51 55 46 42 51 57 46 35 54 6d Data Ascii: 80003;[2]14598;<div jsname="TYpc3" jscontroller="M6QgBb" data-gmc="CpUDIpIDaHR0cHM6Ly93d3cuZ3N0YXRpYy5jb20vXy9tc3MvYm9xLXNlYXJjaC9fL2pzL2s9Ym9xLXNlYXJjaC5WaWV3UGFja2FnZVNlcnZpY2UuZW4uNXZGb0lqNnJ4NmcuZXM1Lk8vYW09REFJQVFJQUFBQUFBZ0FBQUFCQUFBQUFBQUFBQWF5Tm
2023-11-22 16:22:45 UTC	1252	IN	Data Raw: 73 49 69 35 6e 62 32 39 6e 62 47 55 75 59 6d 63 69 4c 43 49 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 35 69 61 43 49 73 49 69 35 6e 62 32 39 6e 62 47 55 75 59 6d 6b 69 4c 43 49 75 5a 32 39 76 5a 32 78 6c 4c 6d 4a 71 49 69 77 69 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 75 59 6d 34 69 4c 43 49 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 35 69 62 79 49 73 49 69 35 6e 62 32 39 6e 62 47 55 75 59 32 39 74 4c 6d 4a 79 49 69 77 69 4c 6d 64 76 62 32 64 73 5a 53 35 69 63 79 49 73 49 69 35 6e 62 32 39 6e 62 47 55 75 59 6e 51 69 4c 43 49 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 4c 6d 4a 33 49 69 77 69 4c 6d 64 76 62 32 64 73 5a 53 35 69 65 53 49 73 49 69 35 6e 62 32 39 6e 62 47 55 75 59 32 39 74 4c 6d 4a 36 49 69 77 69 4c 6d 64 76 62 32 64 73 5a 53 35 6a 59 53 Data Ascii: sIi5nb29nbGUuYmciLCIuZ29vZ2xlLmNvbS5iaCIsIi5nb29nbGUuYmkiLCIuZ29vZ2xlLmJqIiwiLmdvb2dsZS5jb20uYm4iLCIuZ29vZ2xlLmNvbS5ibyIsIi5nb29nbGUuY29tLmJyIiwiLmdvb2dsZS5icyIsIi5nb29nbGUuYnQiLCIuZ29vZ2xlLmNvLmJ3IiwiLmdvb2dsZS5ieSIsIi5nb29nbGUuY29tLmJ6IiwiLmdvb2dsZS5jYS
2023-11-22 16:22:45 UTC	1252	IN	Data Raw: 6c 4c 6d 6c 30 49 69 77 69 4c 6d 64 76 62 32 64 73 5a 53 35 71 5a 53 49 73 49 69 35 6e 62 32 39 6e 62 47 55 75 59 32 39 74 4c 6d 70 74 49 69 77 69 4c 6d 64 76 62 32 64 73 5a 53 35 71 62 79 49 73 49 69 35 6e 62 32 39 6e 62 47 55 75 59 32 38 75 61 6e 41 69 4c 43 49 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 4c 6d 74 6c 49 69 77 69 4c 6d 64 76 62 32 64 73 5a 53 35 6a 62 32 30 75 61 32 67 69 4c 43 49 75 5a 32 39 76 5a 32 78 6c 4c 6d 74 70 49 69 77 69 4c 6d 64 76 62 32 64 73 5a 53 35 72 5a 79 49 73 49 69 35 6e 62 32 39 6e 62 47 55 75 59 32 38 75 61 33 49 69 4c 43 49 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 35 72 64 79 49 73 49 69 35 6e 62 32 39 6e 62 47 55 75 61 33 6f 69 4c 43 49 75 5a 32 39 76 5a 32 78 6c 4c 6d 78 68 49 69 77 69 4c 6d 64 76 62 32 64 73 5a 53 Data Ascii: lLml0IiwiLmdvb2dsZS5qZSIsIi5nb29nbGUuY29tLmptIiwiLmdvb2dsZS5qbyIsIi5nb29nbGUuY28uanAiLCIuZ29vZ2xlLmNvLmtlIiwiLmdvb2dsZS5jb20ua2giLCIuZ29vZ2xlLmtpIiwiLmdvb2dsZS5rZyIsIi5nb29nbGUuY28ua3IiLCIuZ29vZ2xlLmNvbS5rdyIsIi5nb29nbGUua3oiLCIuZ29vZ2xlLmxhIiwiLmdvb2dsZS
2023-11-22 16:22:45 UTC	1252	IN	Data Raw: 69 49 69 77 69 4c 6d 64 76 62 32 64 73 5a 53 35 7a 59 79 49 73 49 69 35 6e 62 32 39 6e 62 47 55 75 63 32 55 69 4c 43 49 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 35 7a 5a 79 49 73 49 69 35 6e 62 32 39 6e 62 47 55 75 63 32 67 69 4c 43 49 75 5a 32 39 76 5a 32 78 6c 4c 6e 4e 70 49 69 77 69 4c 6d 64 76 62 32 64 73 5a 53 35 7a 61 79 49 73 49 69 35 6e 62 32 39 6e 62 47 55 75 59 32 39 74 4c 6e 4e 73 49 69 77 69 4c 6d 64 76 62 32 64 73 5a 53 35 7a 62 69 49 73 49 69 35 6e 62 32 39 6e 62 47 55 75 63 32 38 69 4c 43 49 75 5a 32 39 76 5a 32 78 6c 4c 6e 4e 74 49 69 77 69 4c 6d 64 76 62 32 64 73 5a 53 35 7a 63 69 49 73 49 69 35 6e 62 32 39 6e 62 47 55 75 63 33 51 69 4c 43 49 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 35 7a 64 69 49 73 49 69 35 6e 62 32 39 6e 62 47 Data Ascii: iIiwiLmdvb2dsZS5zYyIsIi5nb29nbGUuc2UiLCIuZ29vZ2xlLmNvbS5zZyIsIi5nb29nbGUuc2giLCIuZ29vZ2xlLnNpIiwiLmdvb2dsZS5zayIsIi5nb29nbGUuY29tLnNsIiwiLmdvb2dsZS5zbiIsIi5nb29nbGUuc28iLCIuZ29vZ2xlLnNtIiwiLmdvb2dsZS5zciIsIi5nb29nbGUuc3QiLCIuZ29vZ2xlLmNvbS5zdiIsIi5nb29nbG
2023-11-22 16:22:45 UTC	1252	IN	Data Raw: 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 64 48 4a 31 5a 53 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 58 43 4a 6c 62 6c 77 69 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 30 63 6e 56 6c 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 48 52 79 64 57 55 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e Data Ascii: sbCxudWxsLG51bGwsdHJ1ZSxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsXCJlblwiLG51bGwsbnVsbCx0cnVlLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLHRydWUsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbn
2023-11-22 16:22:45 UTC	1252	IN	Data Raw: 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 4e 54 41 73 64 48 4a 31 5a 53 78 75 64 57 78 73 4c 46 77 69 62 58 45 7a 4d 7a 46 42 55 55 46 63 49 69 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 64 48 4a 31 5a 53 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 4d 54 49 73 62 6e 56 73 62 43 78 30 63 6e 56 6c 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 5a 68 62 48 4e 6c 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 64 48 4a 31 5a 53 78 75 64 57 78 73 4c 47 5a 68 62 48 4e 6c 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 78 75 64 57 78 73 4c 47 35 31 62 47 77 73 62 6e 56 73 62 43 Data Ascii: sbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsNTAsdHJ1ZSxudWxsLFwibXEzMzFBUUFcIixudWxsLG51bGwsdHJ1ZSxudWxsLG51bGwsMTIsbnVsbCx0cnVlLG51bGwsbnVsbCxudWxsLGZhbHNlLG51bGwsbnVsbCxudWxsLG51bGwsdHJ1ZSxudWxsLGZhbHNlLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbCxudWxsLG51bGwsbnVsbC
2023-11-22 16:22:45 UTC	1252	IN	Data Raw: 33 56 47 49 69 4f 69 49 78 4d 44 41 69 4c 43 4a 72 59 58 64 74 63 6d 49 69 4f 69 4a 6d 59 57 78 7a 5a 53 49 73 49 6b 30 7a 53 6d 78 68 5a 69 49 36 49 6d 5a 68 62 48 4e 6c 49 69 77 69 62 48 52 50 51 54 52 6b 49 6a 6f 69 4e 6a 41 69 4c 43 4a 78 5a 44 52 48 4e 6d 49 69 4f 69 49 34 49 69 77 69 51 54 67 31 54 47 49 69 4f 69 4a 30 63 6e 56 6c 49 69 77 69 63 57 46 69 52 58 5a 6d 49 6a 6f 69 4d 7a 49 69 4c 43 4a 61 52 31 41 30 62 32 51 69 4f 69 4a 30 63 6e 56 6c 49 69 77 69 55 6b 46 31 53 30 64 6a 49 6a 6f 69 64 48 4a 31 5a 53 49 73 49 6b 6c 6d 61 45 52 4b 5a 53 49 36 49 6d 5a 68 62 48 4e 6c 49 69 77 69 59 6e 64 42 55 6b 64 6c 49 6a 6f 69 64 48 4a 31 5a 53 49 73 49 6b 46 76 52 6e 42 58 59 79 49 36 49 6d 5a 68 62 48 4e 6c 49 69 77 69 64 6d 64 72 56 32 35 6d 49 6a Data Ascii: 3VGIiOiIxMDAiLCJrYXdtcmIiOiJmYWxzZSIsIk0zSmxhZiI6ImZhbHNlIiwibHRPQTRkIjoiNjAiLCJxZDRHNmIiOiI4IiwiQTg1TGIiOiJ0cnVlIiwicWFiRXZmIjoiMzIiLCJaR1A0b2QiOiJ0cnVlIiwiUkF1S0djIjoidHJ1ZSIsIklmaERKZSI6ImZhbHNlIiwiYndBUkdlIjoidHJ1ZSIsIkFvRnBXYyI6ImZhbHNlIiwidmdrV25mIj
2023-11-22 16:22:45 UTC	1252	IN	Data Raw: 79 4e 54 41 77 49 69 77 69 64 32 64 35 54 48 52 6d 49 6a 6f 69 5a 6d 46 73 63 32 55 69 4c 43 4a 6c 57 57 67 78 4f 57 4d 69 4f 69 4a 6d 59 57 78 7a 5a 53 49 73 49 6d 4e 5a 59 6e 5a 6e 59 79 49 36 49 6a 45 69 4c 43 4a 59 56 30 39 47 55 6d 51 69 4f 69 4a 6d 59 57 78 7a 5a 53 49 73 49 6c 42 6a 59 31 4a 48 5a 69 49 36 49 6e 52 79 64 57 55 69 4c 43 4a 30 63 6c 42 71 59 6d 4d 69 4f 69 4a 30 63 6e 56 6c 49 69 77 69 64 45 46 30 4d 32 39 6d 49 6a 6f 69 4d 79 49 73 49 6b 4a 6e 57 6c 52 6d 5a 43 49 36 49 6a 45 31 4d 43 49 73 49 6d 78 79 52 32 78 70 5a 43 49 36 49 6b 52 46 55 30 74 55 54 31 42 66 51 56 56 55 54 31 42 4d 51 56 6b 69 4c 43 4a 4f 54 44 5a 57 54 32 4d 69 4f 69 4a 6d 59 57 78 7a 5a 53 49 73 49 6d 6c 6a 62 55 30 34 5a 43 49 36 49 6d 5a 68 62 48 4e 6c 49 69 Data Ascii: yNTAwIiwid2d5THRmIjoiZmFsc2UiLCJlWWgxOWMiOiJmYWxzZSIsImNZYnZnYyI6IjEiLCJYV09GUmQiOiJmYWxzZSIsIlBjY1JHZiI6InRydWUiLCJ0clBqYmMiOiJ0cnVlIiwidEF0M29mIjoiMyIsIkJnWlRmZCI6IjE1MCIsImxyR2xpZCI6IkRFU0tUT1BfQVVUT1BMQVkiLCJOTDZWT2MiOiJmYWxzZSIsImljbU04ZCI6ImZhbHNlIi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49908	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:46 UTC	1706	OUT	GET /xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=0/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/m=kMFpHd,sy8c,bm51tf?xjs=s3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0; DV=Q3FLCIqvnZAgYHfm0PDGnWUnTnF9v5jkqNWfmvg5CwUAAAA
2023-11-22 16:22:46 UTC	816	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 4f 72 69 67 69 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 74 72 75 73 74 65 64 2d 74 79 70 65 73 2d 66 6f 72 20 27 73 63 72 69 70 74 27 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 67 77 73 2d 74 65 61 6d 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesVary: Accept-Encoding, OriginContent-Type: text/javascript; charset=UTF-8Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-teamCross-Origin-R
2023-11-22 16:22:46 UTC	436	IN	Data Raw: 74 68 69 73 2e 5f 73 3d 74 68 69 73 2e 5f 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 78 28 22 6b 4d 46 70 48 64 22 29 3b 0a 5f 2e 42 24 61 3d 6e 65 77 20 5f 2e 48 6e 28 5f 2e 6f 4b 61 29 3b 0a 5f 2e 79 28 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 76 61 72 20 4b 24 61 3b 5f 2e 4c 24 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 74 68 69 73 2e 69 61 62 3d 61 3b 74 68 69 73 2e 58 6f 66 3d 62 3b 74 68 69 73 2e 75 61 63 3d 63 3b 74 68 69 73 2e 46 77 66 3d 64 3b 74 68 69 73 2e 63 51 66 3d 65 3b 74 68 69 73 2e 54 58 62 3d 30 3b 74 68 69 73 2e 74 61 63 3d 4b 24 61 28 74 68 69 73 29 7d Data Ascii: this._s=this._s\|\|{};(function(_){var window=this;try{_.x("kMFpHd");_.B$a=new _.Hn(_.oKa);_.y();}catch(e){_._DumpException(e)}try{var K$a;_.L$a=function(a,b,c,d,e){this.iab=a;this.Xof=b;this.uac=c;this.Fwf=d;this.cQf=e;this.TXb=0;this.tac=K$a(this)}
2023-11-22 16:22:46 UTC	588	IN	Data Raw: 68 69 73 2e 69 61 62 3f 21 31 3a 6e 75 6c 6c 21 3d 61 3f 21 21 74 68 69 73 2e 63 51 66 5b 61 5d 3a 21 30 7d 3b 5f 2e 4d 24 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 73 57 61 28 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 64 60 22 2b 61 2e 69 61 62 29 3b 2b 2b 61 2e 54 58 62 3b 61 2e 74 61 63 3d 4b 24 61 28 61 29 7d 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 78 28 22 62 6d 35 31 74 66 22 29 3b 0a 76 61 72 20 4e 24 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 7b 7d 3b 5f 2e 4a 61 28 61 2e 4f 6c 63 28 29 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 62 5b 65 5d 3d 21 30 7d 29 3b 76 61 72 20 63 3d 61 2e 67 6b 63 28 29 2c 64 3d 61 2e 4b 6b 63 28 29 3b 72 Data Ascii: his.iab?!1:null!=a?!!this.cQf[a]:!0};_.M$a=function(a){if(!a.sWa())throw Error("Ud`"+a.iab);++a.TXb;a.tac=K$a(a)};}catch(e){_._DumpException(e)}try{_.x("bm51tf");var N$a=function(a){var b={};_.Ja(a.Olc(),function(e){b[e]=!0});var c=a.gkc(),d=a.Kkc();r
2023-11-22 16:22:46 UTC	477	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 31 21 3d 74 68 69 73 2e 41 61 2e 67 65 74 54 79 70 65 28 61 2e 4b 71 28 29 29 29 72 65 74 75 72 6e 20 5f 2e 66 24 61 28 61 29 3b 76 61 72 20 63 3d 74 68 69 73 2e 77 61 2e 6b 61 3b 28 63 3d 63 3f 4e 24 61 28 63 29 3a 6e 75 6c 6c 29 26 26 63 2e 73 57 61 28 29 3f 28 62 3d 50 24 61 28 74 68 69 73 2c 61 2c 62 2c 63 29 2c 61 3d 6e 65 77 20 5f 2e 62 24 61 28 61 2c 62 2c 32 29 29 3a 61 3d 5f 2e 66 24 61 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 50 24 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 63 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 73 74 61 74 75 73 7c 7c 21 64 2e Data Ascii: function(a,b){if(1!=this.Aa.getType(a.Kq()))return _.f$a(a);var c=this.wa.ka;(c=c?N$a(c):null)&&c.sWa()?(b=P$a(this,a,b,c),a=new _.b$a(a,b,2)):a=_.f$a(a);return a};var P$a=function(a,b,c,d){return c.then(function(e){return e},function(e){if(!e.status\|\|!d.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49912	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:46 UTC	1706	OUT	GET /xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=0/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/m=sy134,sy135,dt4g2b?xjs=s3 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0; DV=Q3FLCIqvnZAgYHfm0PDGnWUnTnF9v5jkqNWfmvg5CwUAAAA
2023-11-22 16:22:47 UTC	815	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 56 61 72 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 6e 67 2c 20 4f 72 69 67 69 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 72 65 71 75 69 72 65 2d 74 72 75 73 74 65 64 2d 74 79 70 65 73 2d 66 6f 72 20 27 73 63 72 69 70 74 27 3b 20 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 67 77 73 2d 74 65 61 6d 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesVary: Accept-Encoding, OriginContent-Type: text/javascript; charset=UTF-8Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-teamCross-Origin-R
2023-11-22 16:22:47 UTC	437	IN	Data Raw: 74 68 69 73 2e 5f 73 3d 74 68 69 73 2e 5f 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 64 66 28 5f 2e 6c 71 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 76 69 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 69 73 41 76 61 69 6c 61 62 6c 65 28 29 26 26 28 5f 2e 62 61 2e 73 69 6c 6b 3d 5f 2e 62 61 2e 73 69 6c 6b 7c 7c 7b 7d 2c 5f 2e 62 61 2e 73 69 6c 6b 2e 73 3d 5f 2e 62 61 2e 73 69 6c 6b 2e 73 7c 7c 7b 7d 2c 5f 2e 62 61 2e 73 69 6c 6b 2e 73 2e 73 69 73 3d 7b 7d 2c 5f 2e 62 61 2e 73 69 6c 6b 2e 73 2e 73 69 73 2e 63 61 3d 61 2e 5a 44 2e 62 69 6e 64 28 61 29 29 7d 3b 0a 7d 63 61 74 63 68 28 65 29 7b Data Ascii: this._s=this._s\|\|{};(function(_){var window=this;try{_.df(_.lq);}catch(e){_._DumpException(e)}try{_.vic=function(a){a.isAvailable()&&(_.ba.silk=_.ba.silk\|\|{},_.ba.silk.s=_.ba.silk.s\|\|{},_.ba.silk.s.sis={},_.ba.silk.s.sis.ca=a.ZD.bind(a))};}catch(e){
2023-11-22 16:22:47 UTC	445	IN	Data Raw: 6f 74 79 70 65 2e 5a 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 76 6f 69 64 20 30 3d 3d 3d 61 3f 7b 7d 3a 61 2c 63 3d 62 2e 74 66 61 3b 61 3d 62 2e 6c 69 61 3b 62 3d 62 2e 45 72 61 3b 76 6f 69 64 20 30 21 3d 3d 63 3f 5f 2e 68 67 28 7b 73 65 72 76 69 63 65 4e 61 6d 65 3a 22 73 69 73 22 2c 6d 65 74 68 6f 64 4e 61 6d 65 3a 22 63 61 22 7d 29 3a 5f 2e 68 67 28 7b 73 65 72 76 69 63 65 4e 61 6d 65 3a 22 73 69 73 22 2c 6d 65 74 68 6f 64 4e 61 6d 65 3a 22 63 61 61 72 22 7d 29 3b 61 3a 73 77 69 74 63 68 28 62 29 7b 63 61 73 65 20 30 3a 62 3d 22 68 74 74 70 73 3a 2f 2f 61 63 63 6f 75 6e 74 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 53 65 72 76 69 63 65 4c 6f 67 69 6e 22 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 62 3d 22 68 74 74 70 73 3a 2f 2f Data Ascii: otype.ZD=function(a){var b=void 0===a?{}:a,c=b.tfa;a=b.lia;b=b.Era;void 0!==c?_.hg({serviceName:"sis",methodName:"ca"}):_.hg({serviceName:"sis",methodName:"caar"});a:switch(b){case 0:b="https://accounts.google.com/ServiceLogin";break a;default:b="https://

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	49913	172.253.63.136	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:46 UTC	678	OUT	GET /iframe_api?version=3 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:22:47 UTC	2190	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 45 78 70 69 72 65 73 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 34 37 20 47 4d 54 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 34 37 20 47 4d 54 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 58 2d Data Ascii: HTTP/1.1 200 OKContent-Type: text/javascript; charset=utf-8X-Content-Type-Options: nosniffExpires: Wed, 22 Nov 2023 16:22:47 GMTDate: Wed, 22 Nov 2023 16:22:47 GMTCache-Control: private, max-age=0Strict-Transport-Security: max-age=31536000X-
2023-11-22 16:22:47 UTC	1000	IN	Data Raw: 33 65 31 0d 0a 76 61 72 20 73 63 72 69 70 74 55 72 6c 20 3d 20 27 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 5c 2f 73 5c 2f 70 6c 61 79 65 72 5c 2f 36 33 65 39 30 63 33 30 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 76 66 6c 73 65 74 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 6a 73 27 3b 74 72 79 7b 76 61 72 20 74 74 50 6f 6c 69 63 79 3d 77 69 6e 64 6f 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 79 6f 75 74 75 62 65 2d 77 69 64 67 65 74 2d 61 70 69 22 2c 7b 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 78 29 7b 72 65 74 75 72 6e 20 78 7d 7d 29 3b 73 63 72 69 70 74 55 72 6c 3d 74 74 50 6f 6c 69 63 79 2e 63 72 65 61 74 65 53 63 72 69 70 74 55 52 Data Ascii: 3e1var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/63e90c30\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptUR
2023-11-22 16:22:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	49914	172.253.63.136	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:47 UTC	770	OUT	GET /s/player/63e90c30/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=kNxmXK_kfSM; VISITOR_INFO1_LIVE=Izz4m-7iy8k
2023-11-22 16:22:47 UTC	687	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 79 6f 75 74 75 62 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 79 6f 75 74 75 62 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/cs
2023-11-22 16:22:47 UTC	565	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 72 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 62 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function(){'use strict';var r;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype
2023-11-22 16:22:47 UTC	1252	IN	Data Raw: 73 29 3b 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 64 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 76 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 Data Ascii: s);function v(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}v("Symbol",function(a){function b(f){if(th
2023-11-22 16:22:47 UTC	1252	IN	Data Raw: 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 78 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 77 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 6a 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 0a 76 61 72 20 6b 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3a 66 75 Data Ascii: le or ArrayLike");}function x(a){if(!(a instanceof Array)){a=w(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function ja(a,b){return Object.prototype.hasOwnProperty.call(a,b)}var ka="function"==typeof Object.assign?Object.assign:fu
2023-11-22 16:22:47 UTC	1252	IN	Data Raw: 6f 74 6f 74 79 70 65 2e 4b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 68 3d 61 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 76 61 28 61 2c 62 29 7b 61 2e 69 3d 7b 6d 63 3a 62 2c 78 63 3a 21 30 7d 3b 61 2e 67 3d 61 2e 6f 7c 7c 61 2e 75 7d 0a 74 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 69 3d 7b 72 65 74 75 72 6e 3a 61 7d 3b 74 68 69 73 2e 67 3d 74 68 69 73 2e 75 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 41 28 61 2c 62 2c 63 29 7b 61 2e 67 3d 63 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 7d 7d 0a 74 61 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 67 3d 61 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 77 61 28 61 2c 62 2c 63 29 7b 61 2e 6f 3d 62 3b 76 6f 69 64 Data Ascii: ototype.K=function(a){this.h=a};function va(a,b){a.i={mc:b,xc:!0};a.g=a.o\|\|a.u}ta.prototype.return=function(a){this.i={return:a};this.g=this.u};function A(a,b,c){a.g=c;return{value:b}}ta.prototype.B=function(a){this.g=a};function wa(a,b,c){a.o=b;void
2023-11-22 16:22:48 UTC	1252	IN	Data Raw: 20 62 7d 3b 0a 74 68 69 73 2e 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 75 61 28 61 2e 67 29 3b 61 2e 67 2e 6c 3f 62 3d 42 61 28 61 2c 61 2e 67 2e 6c 5b 22 74 68 72 6f 77 22 5d 2c 62 2c 61 2e 67 2e 4b 29 3a 28 76 61 28 61 2e 67 2c 62 29 2c 62 3d 43 61 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 74 68 69 73 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 41 61 28 61 2c 62 29 7d 3b 0a 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 45 61 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 64 29 7b 72 65 74 75 72 6e 20 61 2e 6e 65 78 74 28 64 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 64 29 7b 72 65 Data Ascii: b};this.throw=function(b){ua(a.g);a.g.l?b=Ba(a,a.g.l["throw"],b,a.g.K):(va(a.g,b),b=Ca(a));return b};this.return=function(b){return Aa(a,b)};this[Symbol.iterator]=function(){return this}}function Ea(a){function b(d){return a.next(d)}function c(d){re
2023-11-22 16:22:48 UTC	1252	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 67 3b 7d 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6b 7c 7c 28 6b 3d 21 30 2c 6c 2e 63 61 6c 6c 28 68 2c 6d 29 29 7d 7d 0a 76 61 72 20 68 3d 74 68 69 73 2c 6b 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 67 28 74 68 69 73 2e 65 62 29 2c 72 65 6a 65 63 74 3a 67 28 74 68 69 73 2e 6f 29 7d 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 65 62 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 6f 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 Data Ascii: function(g){this.i(function(){throw g;})};b.prototype.l=function(){function g(l){return function(m){k\|\|(k=!0,l.call(h,m))}}var h=this,k=!1;return{resolve:g(this.eb),reject:g(this.o)}};b.prototype.eb=function(g){if(g===this)this.o(new TypeError("A Promi
2023-11-22 16:22:48 UTC	1252	IN	Data Raw: 45 76 65 6e 74 22 29 2c 67 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 67 29 29 3b 67 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 3b 67 2e 72 65 61 73 6f 6e 3d 74 68 69 73 2e 69 3b 72 65 74 75 72 6e 20 6b 28 67 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 68 69 73 2e 68 29 7b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 74 68 69 73 2e 68 2e 6c 65 6e 67 74 68 3b 2b 2b 67 29 66 2e 68 28 74 68 69 73 2e 68 5b 67 5d 29 3b 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 7d 3b 0a 76 61 72 20 66 3d 6e 65 77 20 63 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 67 62 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 74 68 69 73 Data Ascii: Event"),g.initCustomEvent("unhandledrejection",!1,!0,g));g.promise=this;g.reason=this.i;return k(g)};b.prototype.O=function(){if(null!=this.h){for(var g=0;g<this.h.length;++g)f.h(this.h[g]);this.h=null}};var f=new c;b.prototype.gb=function(g){var h=this
2023-11-22 16:22:48 UTC	1252	IN	Data Raw: 29 7d 3b 0a 72 65 74 75 72 6e 20 62 7d 29 3b 0a 76 28 22 57 65 61 6b 4d 61 70 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 6b 29 7b 74 68 69 73 2e 67 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6b 29 7b 6b 3d 77 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 3d 6c 26 26 6e 75 6c 6c 21 3d 3d 6b 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d Data Ascii: )};return b});v("WeakMap",function(a){function b(k){this.g=(h+=Math.random()+1).toString();if(k){k=w(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}}function c(){}function d(k){var l=typeof k;return"object"===l&&null!==k\|\|"function"===
2023-11-22 16:22:48 UTC	1252	IN	Data Raw: 20 63 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 68 5b 31 5d 3b 72 65 74 75 72 6e 20 65 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 29 7b 66 6f 72 28 3b 6c 2e 68 65 61 64 21 3d 68 5b 31 5d 3b 29 6c 3d 6c 2e 70 72 65 76 69 6f 75 73 3b 66 6f 72 28 3b 6c 2e 6e 65 78 74 21 3d 6c 2e 68 65 61 64 3b 29 72 65 74 75 72 6e 20 6c 3d 6c 2e 6e 65 78 74 2c 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 6b 28 6c 29 7d 3b 6c 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 6b 26 26 74 79 70 65 6f 66 20 6b 3b 22 6f 62 6a 65 63 74 22 3d 3d 6c 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 6c 3f 66 2e 68 61 73 28 6b 29 3f 6c 3d 66 2e 67 65 74 28 6b 29 Data Ascii: c(h,k){var l=h[1];return ea(function(){if(l){for(;l.head!=h[1];)l=l.previous;for(;l.next!=l.head;)return l=l.next,{done:!1,value:k(l)};l=null}return{done:!0,value:void 0}})}function d(h,k){var l=k&&typeof k;"object"==l\|\|"function"==l?f.has(k)?l=f.get(k)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49918	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:48 UTC	1527	OUT	POST /gen_204?atyp=csi&ei=xSpeZdzvEPyy5NoPhfSymAc&s=uvpgws&rt=ns.-16076,uvpbet.0,uvpbs.0,uvpbe.4018&zx=1700670167392&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0; DV=Q3FLCIqvnZAgYHfm0PDGnWUnTnF9v5jkqNWfmvg5CwUAAAA
2023-11-22 16:22:48 UTC	1227	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 70 6f 58 55 70 77 6a 4d 71 54 73 44 62 47 47 75 64 7a 71 38 42 77 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 20 68 74 74 70 3a 3b 72 65 70 6f 72 74 2d 75 72 69 20 68 74 Data Ascii: HTTP/1.1 204 No ContentContent-Type: text/html; charset=UTF-8Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-poXUpwjMqTsDbGGudzq8Bw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49920	142.251.111.93	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:49 UTC	1070	OUT	GET /embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.google.com/search?q=shop+deals&source=smp.23q4SDealsHPP.22&stick=H4sIAAAAAAAA_7t17sBZTiYOBgBZcuXYCAAAAA Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=kNxmXK_kfSM; VISITOR_INFO1_LIVE=Izz4m-7iy8k
2023-11-22 16:22:49 UTC	1965	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 4d 6f 6e 2c 20 30 31 20 4a 61 6e 20 31 39 39 30 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 34 39 20 47 4d 54 0d 0a 53 74 72 69 63 74 2d Data Ascii: HTTP/1.1 200 OKContent-Type: text/html; charset=utf-8X-Content-Type-Options: nosniffCache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Wed, 22 Nov 2023 16:22:49 GMTStrict-
2023-11-22 16:22:49 UTC	1965	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 78 33 52 39 41 79 2d 44 31 4c 4e 45 6e 39 43 6a 52 62 2d 78 44 51 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><meta name="robots" content="noindex"><script nonce="x3R9Ay-D1LNEn9CjRb-xDQ">if ('undefined' == typeof Sy
2023-11-22 16:22:49 UTC	1965	IN	Data Raw: 65 2d 72 61 6e 67 65 3a 55 2b 30 30 30 30 2d 30 30 46 46 2c 55 2b 30 31 33 31 2c 55 2b 30 31 35 32 2d 30 31 35 33 2c 55 2b 30 32 42 42 2d 30 32 42 43 2c 55 2b 30 32 43 36 2c 55 2b 30 32 44 41 2c 55 2b 30 32 44 43 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 32 30 30 30 2d 32 30 36 46 2c 55 2b 32 30 37 34 2c 55 2b 32 30 41 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 32 31 32 2c 55 2b 32 32 31 35 2c 55 2b 46 45 46 46 2c 55 2b 46 46 46 44 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 Data Ascii: e-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gsta
2023-11-22 16:22:49 UTC	1965	IN	Data Raw: 6e 6f 6e 63 65 3d 22 78 33 52 39 41 79 2d 44 31 4c 4e 45 6e 39 43 6a 52 62 2d 78 44 51 22 3e 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 66 6f 6e 74 73 20 26 26 20 64 6f 63 75 6d 65 6e 74 2e 66 6f 6e 74 73 2e 6c 6f 61 64 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 66 6f 6e 74 73 2e 6c 6f 61 64 28 22 34 30 30 20 31 30 70 74 20 52 6f 62 6f 74 6f 22 2c 20 22 45 22 29 3b 20 64 6f 63 75 6d 65 6e 74 2e 66 6f 6e 74 73 2e 6c 6f 61 64 28 22 35 30 30 20 31 30 70 74 20 52 6f 62 6f 74 6f 22 2c 20 22 45 22 29 3b 7d 3c 2f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 73 2f 70 6c 61 79 65 72 2f 36 33 65 39 30 63 33 30 2f 77 77 77 2d 70 6c 61 79 65 72 2e 63 73 73 22 20 6e 61 6d 65 3d 22 77 77 77 2d 70 6c 61 79 65 72 22 Data Ascii: nonce="x3R9Ay-D1LNEn9CjRb-xDQ">if (document.fonts && document.fonts.load) {document.fonts.load("400 10pt Roboto", "E"); document.fonts.load("500 10pt Roboto", "E");}</script><link rel="stylesheet" href="/s/player/63e90c30/www-player.css" name="www-player"
2023-11-22 16:22:49 UTC	1965	IN	Data Raw: 3c 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 69 66 28 62 72 61 6e 64 73 5b 69 5d 26 26 62 72 61 6e 64 73 5b 69 5d 2e 62 72 61 6e 64 3d 3d 3d 22 46 69 72 65 66 6f 78 22 29 72 65 74 75 72 6e 20 74 72 75 65 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 7d 63 61 74 63 68 28 65 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 65 3b 7d 29 7d 69 66 28 21 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 76 61 72 20 75 61 3d 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 3b 72 65 74 75 72 6e 20 75 61 2e 69 6e 64 65 78 4f 66 28 22 47 65 63 6b 6f 22 29 3e 30 26 26 75 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 Data Ascii: <brands.length;i++)if(brands[i]&&brands[i].brand==="Firefox")return true;return false}}catch(e){setTimeout(function(){throw e;})}if(!w.navigator.userAgent)return false;var ua=w.navigator.userAgent;return ua.indexOf("Gecko")>0&&ua.toLowerCase().indexOf("we
2023-11-22 16:22:49 UTC	1965	IN	Data Raw: 61 73 5f 69 6e 66 6f 22 3a 74 72 75 65 2c 22 64 65 70 72 65 63 61 74 65 5f 70 61 69 72 5f 73 65 72 76 6c 65 74 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 63 6c 69 65 6e 74 5f 72 65 6c 65 61 73 65 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 69 6d 61 67 65 5f 63 74 61 5f 6e 6f 5f 62 61 63 6b 67 72 6f 75 6e 64 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 6c 6f 67 5f 69 6d 67 5f 63 6c 69 63 6b 5f 6c 6f 63 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 68 69 67 68 5f 70 72 69 6f 72 69 74 79 5f 69 67 6e 6f 72 65 5f 70 75 73 68 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 5f 73 65 74 5f 74 69 74 6c 65 5f 62 61 72 22 3a 74 72 75 65 2c Data Ascii: as_info":true,"deprecate_pair_servlet_enabled":true,"desktop_client_release":true,"desktop_image_cta_no_background":true,"desktop_log_img_click_location":true,"desktop_notification_high_priority_ignore_push":true,"desktop_notification_set_title_bar":true,
2023-11-22 16:22:49 UTC	1965	IN	Data Raw: 5f 79 74 5f 61 74 61 5f 69 66 72 61 6d 65 5f 61 75 74 68 75 73 65 72 22 3a 74 72 75 65 2c 22 65 72 72 5f 6f 6e 5f 70 6c 5f 72 5f 63 22 3a 74 72 75 65 2c 22 65 78 70 6f 72 74 5f 6e 65 74 77 6f 72 6b 6c 65 73 73 5f 6f 70 74 69 6f 6e 73 22 3a 74 72 75 65 2c 22 66 65 74 63 68 5f 62 69 64 5f 66 6f 72 5f 64 63 6c 6b 5f 73 74 61 74 75 73 22 3a 74 72 75 65 2c 22 66 69 6c 6c 5f 73 69 6e 67 6c 65 5f 76 69 64 65 6f 5f 77 69 74 68 5f 6e 6f 74 69 66 79 5f 74 6f 5f 6c 61 73 72 22 3a 74 72 75 65 2c 22 67 63 66 5f 6d 75 73 69 63 5f 69 6e 6e 65 72 74 75 62 65 22 3a 74 72 75 65 2c 22 67 70 61 5f 73 70 61 72 6b 6c 65 73 5f 74 65 6e 5f 70 65 72 63 65 6e 74 5f 6c 61 79 65 72 22 3a 74 72 75 65 2c 22 68 35 5f 63 6f 6d 70 61 6e 69 6f 6e 5f 65 6e 61 62 6c 65 5f 61 64 63 70 6e 5f Data Ascii: _yt_ata_iframe_authuser":true,"err_on_pl_r_c":true,"export_networkless_options":true,"fetch_bid_for_dclk_status":true,"fill_single_video_with_notify_to_lasr":true,"gcf_music_innertube":true,"gpa_sparkles_ten_percent_layer":true,"h5_companion_enable_adcpn_
2023-11-22 16:22:49 UTC	1965	IN	Data Raw: 67 5f 70 61 72 61 6d 73 22 3a 74 72 75 65 2c 22 73 75 70 70 72 65 73 73 5f 65 72 72 6f 72 5f 32 30 34 5f 6c 6f 67 67 69 6e 67 22 3a 74 72 75 65 2c 22 74 72 61 6e 73 70 6f 72 74 5f 75 73 65 5f 73 63 68 65 64 75 6c 65 72 22 3a 74 72 75 65 2c 22 74 72 69 67 67 65 72 5f 69 6d 70 72 65 73 73 69 6f 6e 5f 70 69 6e 67 73 5f 6f 6e 5f 76 69 65 77 5f 73 65 61 72 63 68 5f 64 65 73 6b 74 6f 70 22 3a 74 72 75 65 2c 22 75 73 65 5f 63 6f 72 65 5f 73 6d 22 3a 74 72 75 65 2c 22 75 73 65 5f 63 73 69 5f 73 74 70 5f 68 61 6e 64 6c 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 6e 65 77 5f 63 6d 6c 22 3a 74 72 75 65 2c 22 75 73 65 5f 6e 65 77 5f 69 6e 5f 6d 65 6d 6f 72 79 5f 73 74 6f 72 61 67 65 22 3a 74 72 75 65 2c 22 75 73 65 5f 6e 65 77 5f 6e 77 6c 5f 69 6e 69 74 69 61 6c 69 7a Data Ascii: g_params":true,"suppress_error_204_logging":true,"transport_use_scheduler":true,"trigger_impression_pings_on_view_search_desktop":true,"use_core_sm":true,"use_csi_stp_handler":true,"use_new_cml":true,"use_new_in_memory_storage":true,"use_new_nwl_initializ
2023-11-22 16:22:49 UTC	1965	IN	Data Raw: 61 74 69 6f 6e 22 3a 31 30 2c 22 6d 69 6e 5f 70 72 65 66 65 74 63 68 5f 6f 66 66 73 65 74 5f 73 65 63 5f 66 6f 72 5f 6c 69 76 65 73 74 72 65 61 6d 5f 6f 70 74 69 6d 69 7a 61 74 69 6f 6e 22 3a 32 30 2c 22 6e 65 74 77 6f 72 6b 5f 70 6f 6c 6c 69 6e 67 5f 69 6e 74 65 72 76 61 6c 22 3a 33 30 30 30 30 2c 22 70 61 63 66 5f 6c 6f 67 67 69 6e 67 5f 64 65 6c 61 79 5f 6d 69 6c 6c 69 73 65 63 6f 6e 64 73 5f 74 68 72 6f 75 67 68 5f 79 62 66 65 5f 74 76 22 3a 33 30 30 30 30 2c 22 70 72 65 66 65 74 63 68 5f 63 6f 6d 6d 65 6e 74 73 5f 6d 73 5f 61 66 74 65 72 5f 76 69 64 65 6f 22 3a 30 2c 22 73 65 6e 64 5f 63 6f 6e 66 69 67 5f 68 61 73 68 5f 74 69 6d 65 72 22 3a 30 2c 22 73 65 72 76 69 63 65 5f 77 6f 72 6b 65 72 5f 70 75 73 68 5f 6c 6f 67 67 65 64 5f 6f 75 74 5f 70 72 6f Data Ascii: ation":10,"min_prefetch_offset_sec_for_livestream_optimization":20,"network_polling_interval":30000,"pacf_logging_delay_milliseconds_through_ybfe_tv":30000,"prefetch_comments_ms_after_video":0,"send_config_hash_timer":0,"service_worker_push_logged_out_pro
2023-11-22 16:22:49 UTC	1965	IN	Data Raw: 6f 75 74 75 62 65 2e 63 6f 6d 2f 65 6d 62 65 64 3f 65 6e 61 62 6c 65 6a 73 61 70 69 5c 75 30 30 33 64 31 5c 75 30 30 32 36 72 65 6c 5c 75 30 30 33 64 30 5c 75 30 30 32 36 61 75 74 6f 70 6c 61 79 5c 75 30 30 33 64 30 5c 75 30 30 32 36 70 6c 61 79 73 69 6e 6c 69 6e 65 5c 75 30 30 33 64 31 5c 75 30 30 32 36 65 78 70 66 6c 61 67 5c 75 30 30 33 64 65 6d 62 65 64 73 5f 65 6e 61 62 6c 65 5f 6d 75 74 65 64 5f 61 75 74 6f 70 6c 61 79 25 33 41 74 72 75 65 5c 75 30 30 32 36 66 73 5c 75 30 30 33 64 31 22 2c 22 70 6c 61 74 66 6f 72 6d 22 3a 22 44 45 53 4b 54 4f 50 22 2c 22 63 6c 69 65 6e 74 46 6f 72 6d 46 61 63 74 6f 72 22 3a 22 55 4e 4b 4e 4f 57 4e 5f 46 4f 52 4d 5f 46 41 43 54 4f 52 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 Data Ascii: outube.com/embed?enablejsapi\u003d1\u0026rel\u003d0\u0026autoplay\u003d0\u0026playsinline\u003d1\u0026expflag\u003dembeds_enable_muted_autoplay%3Atrue\u0026fs\u003d1","platform":"DESKTOP","clientFormFactor":"UNKNOWN_FORM_FACTOR","configInfo":{"appInstallD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49924	142.251.111.93	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:50 UTC	863	OUT	GET /s/player/63e90c30/www-player.css HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=kNxmXK_kfSM; VISITOR_INFO1_LIVE=Izz4m-7iy8k
2023-11-22 16:22:50 UTC	679	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 79 6f 75 74 75 62 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 79 6f 75 74 75 62 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/cs
2023-11-22 16:22:50 UTC	573	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 6f 75 54 75 62 65 20 4e 6f 74 6f 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 65 65 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 2d 77 65 62 6b 69 74 2d Data Ascii: @charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 67 2d 6d 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 37 70 78 7d 2e 79 74 70 2d 61 75 74 6f 68 69 64 65 7b 63 75 72 73 6f 72 3a 6e 6f 6e 65 7d 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 20 61 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 2c 31 29 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 2c 31 29 3b 6f 75 74 6c 69 6e 65 Data Ascii: g-mode{font-size:17px}.ytp-autohide{cursor:none}.html5-video-player a{color:inherit;text-decoration:none;-webkit-transition:color .1s cubic-bezier(0,0,.2,1);-o-transition:color .1s cubic-bezier(0,0,.2,1);transition:color .1s cubic-bezier(0,0,.2,1);outline
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 79 74 70 2d 66 69 74 2d 63 6f 76 65 72 2d 76 69 64 65 6f 20 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 7b 2d 6f 2d 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 3b 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 7d 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 5b 64 61 74 61 2d 6e 6f 2d 66 75 6c 6c 73 63 72 65 65 6e 3d 74 72 75 65 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6d 65 64 69 61 2d 63 6f 6e 74 72 6f 6c 73 2d 66 75 6c 6c 73 63 72 65 65 6e 2d 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 Data Ascii: .html5-main-video{position:absolute;top:0;left:0;width:100%;height:100%;outline:0}.ytp-fit-cover-video .html5-main-video{-o-object-fit:cover;object-fit:cover}.html5-main-video[data-no-fullscreen=true]::-webkit-media-controls-fullscreen-button{display:none
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 70 2d 65 6d 62 65 64 3a 6e 6f 74 28 2e 61 64 2d 73 68 6f 77 69 6e 67 29 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 79 74 70 2d 75 70 6e 65 78 74 29 7b 74 6f 70 3a 36 30 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 74 6f 70 3a 36 39 70 78 3b 62 6f 74 74 6f 6d 3a 37 30 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 2e 79 74 70 2d 65 6d 62 65 64 3a 6e 6f 74 28 2e 61 64 2d 73 68 6f 77 69 6e 67 29 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 79 74 70 2d 75 70 6e 65 78 74 29 7b 74 6f 70 3a 38 39 70 78 7d 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b Data Ascii: p-embed:not(.ad-showing) .ytp-player-content:not(.ytp-upnext){top:60px}.ytp-big-mode .ytp-player-content{top:69px;bottom:70px}.ytp-big-mode.ytp-embed:not(.ad-showing) .ytp-player-content:not(.ytp-upnext){top:89px}.ytp-player-content.ytp-iv-player-content{
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 32 34 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 2e 79 74 70 2d 61 64 2d 6f 76 65 72 6c 61 79 2d 6f 70 65 6e 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 31 36 30 70 78 7d 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 70 61 64 64 69 6e 67 3a 30 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 Data Ascii: ayer-content{bottom:24px}.ytp-big-mode.ytp-ad-overlay-open .ytp-player-content{bottom:160px}.ytp-button{border:none;background-color:transparent;padding:0;color:inherit;text-align:inherit;font-size:100%;font-family:inherit;cursor:default;line-height:inher
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 7b 74 6f 70 3a 32 30 70 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 62 6f 74 74 6f 6d 7b 62 6f 74 74 6f 6d 3a 30 3b 68 65 69 67 68 74 3a 34 38 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 35 39 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 7d 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 62 6f 74 74 6f 6d 7b 68 65 69 67 68 74 3a 33 36 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 62 6f 74 74 6f 6d 7b 68 65 69 67 68 74 3a 34 30 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 2e 79 74 70 2d 65 6d 62 65 64 2d 6d 6f 62 69 6c 65 20 2e 79 74 70 Data Ascii: .ytp-chrome-top{top:20px}.ytp-chrome-bottom{bottom:0;height:48px;width:100%;z-index:59;padding-top:3px;text-align:left;direction:ltr}.ytp-small-mode .ytp-chrome-bottom{height:36px}.ytp-embed .ytp-chrome-bottom{height:40px}.ytp-embed.ytp-embed-mobile .ytp
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 6d 69 6e 69 70 6c 61 79 65 72 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 72 65 6d 6f 74 65 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 30 20 34 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 72 65 70 6c 61 79 2d 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 63 68 72 6f 6d 65 Data Ascii: -button{padding:0}.ytp-chrome-controls .ytp-button.ytp-miniplayer-button,.ytp-chrome-controls .ytp-button.ytp-remote-button{padding:0 4px}.ytp-embed .ytp-chrome-controls .ytp-button,.ytp-embed .ytp-replay-button{width:40px;padding:0}.ytp-embed .ytp-chrome
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 64 74 68 3a 31 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 70 78 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 2d 31 32 70 78 7d 2e 79 74 70 2d 66 75 6c 6c 73 63 72 65 65 6e 2d 62 75 74 74 6f 6e 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 70 78 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 31 30 30 25 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 72 65 76 2d 62 75 74 74 6f 6e 3a 3a 62 65 66 6f 72 65 2c 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 79 74 70 2d 70 6c 61 79 2d 62 75 74 74 6f Data Ascii: dth:12px;position:absolute;top:5px;bottom:0;left:-12px}.ytp-fullscreen-button::after{content:"";display:block;width:12px;position:absolute;top:5px;bottom:0;left:100%}.ytp-big-mode .ytp-prev-button::before,.ytp-big-mode .ytp-play-button:not(.ytp-play-butto
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 29 2c 77 69 64 74 68 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6c 65 66 74 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 29 2c 77 69 64 74 68 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 29 7d 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 6c 65 66 74 3a 31 38 70 78 3b 62 6f 74 74 6f 6d 3a 36 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 Data Ascii: ezier(.4,0,1,1),width .1s cubic-bezier(.4,0,1,1);transition:left .1s cubic-bezier(.4,0,1,1),width .1s cubic-bezier(.4,0,1,1)}.ytp-small-mode .ytp-chrome-controls .ytp-button[aria-pressed]:after{left:18px;bottom:6px}.ytp-embed .ytp-chrome-controls .ytp-but

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	49923	142.251.111.93	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:50 UTC	867	OUT	GET /s/player/63e90c30/player_ias.vflset/en_US/embed.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=kNxmXK_kfSM; VISITOR_INFO1_LIVE=Izz4m-7iy8k
2023-11-22 16:22:50 UTC	685	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 79 6f 75 74 75 62 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 79 6f 75 74 75 62 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/cs
2023-11-22 16:22:50 UTC	567	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 0a 20 55 73 65 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 61 6e 20 4d 49 54 2d 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 20 74 68 61 74 20 63 61 6e 20 62 65 0a 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 20 61 74 20 68 74 74 70 73 3a 2f 2f 61 6e 67 75 6c 61 72 2e 69 6f 2f 6c 69 63 65 6e 73 65 0a 2a 2f 0a 2f 2a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 0a 2f 2a Data Ascii: (function(g){var window=this;/* Copyright Google LLC All Rights Reserved. Use of this source code is governed by an MIT-style license that can be found in the LICENSE file at https://angular.io/license// SPDX-License-Identifier: Apache-2.0 //
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 76 67 2d 66 69 6c 6c 22 2c 58 3a 7b 64 3a 22 4d 20 31 36 2e 36 38 2c 2e 39 39 20 43 20 31 33 2e 35 35 2c 31 2e 30 33 20 37 2e 30 32 2c 31 2e 31 36 20 34 2e 39 39 2c 31 2e 36 38 20 63 20 2d 31 2e 34 39 2c 2e 34 20 2d 32 2e 35 39 2c 31 2e 36 20 2d 32 2e 39 39 2c 33 20 2d 30 2e 36 39 2c 32 2e 37 20 2d 30 2e 36 38 2c 38 2e 33 31 20 2d 30 2e 36 38 2c 38 2e 33 31 20 30 2c 30 20 2d 30 2e 30 31 2c 35 2e 36 31 20 2e 36 38 2c 38 2e 33 31 20 2e 33 39 2c 31 2e 35 20 31 2e 35 39 2c 32 2e 36 20 32 2e 39 39 2c 33 20 32 2e 36 39 2c 2e 37 20 31 33 2e 34 30 2c 2e 36 38 20 31 33 2e 34 30 2c 2e 36 38 20 30 2c 30 20 31 30 2e 37 30 2c 2e 30 31 20 31 33 2e 34 30 2c 2d 30 2e 36 38 20 31 2e 35 2c 2d 30 2e 34 20 32 2e 35 39 2c 2d 31 2e 36 20 32 2e 39 39 2c 2d 33 20 2e 36 39 2c 2d Data Ascii: vg-fill",X:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 2e 39 30 2c 2d 30 2e 32 31 20 63 20 30 2c 31 20 2d 30 2e 30 38 2c 31 2e 36 20 2d 30 2e 32 38 2c 32 20 2d 30 2e 31 2c 2e 34 20 2d 30 2e 35 2c 2e 36 32 20 2d 31 2c 2e 36 32 20 2d 30 2e 33 2c 30 20 2d 30 2e 36 31 2c 2d 30 2e 31 31 20 2d 30 2e 38 31 2c 2d 30 2e 33 31 20 2d 30 2e 32 2c 2d 30 2e 33 20 2d 30 2e 33 30 2c 2d 30 2e 35 39 20 2d 30 2e 34 30 2c 2d 31 2e 30 39 20 2d 30 2e 31 2c 2d 30 2e 35 20 2d 30 2e 30 39 2c 2d 31 2e 32 31 20 2d 30 2e 30 39 2c 2d 32 2e 32 31 20 6c 20 30 2c 2d 30 2e 37 38 20 35 2e 37 31 2c 2d 30 2e 30 39 20 30 2c 2d 32 2e 36 32 20 63 20 30 2c 2d 31 2e 36 20 2d 30 2e 31 30 2c 2d 32 2e 37 38 20 2d 30 2e 34 30 2c 2d 33 2e 36 38 20 2d 30 2e 32 2c 2d 30 2e 38 39 20 2d 30 2e 37 31 2c 2d 31 2e 35 39 20 2d 31 2e 33 31 2c 2d 31 2e 39 39 20 2d Data Ascii: .90,-0.21 c 0,1 -0.08,1.6 -0.28,2 -0.1,.4 -0.5,.62 -1,.62 -0.3,0 -0.61,-0.11 -0.81,-0.31 -0.2,-0.3 -0.30,-0.59 -0.40,-1.09 -0.1,-0.5 -0.09,-1.21 -0.09,-2.21 l 0,-0.78 5.71,-0.09 0,-2.62 c 0,-1.6 -0.10,-2.78 -0.40,-3.68 -0.2,-0.89 -0.71,-1.59 -1.31,-1.99 -
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 34 2e 39 39 20 63 20 30 2c 30 20 2d 33 2e 34 30 2c 2e 30 30 20 2d 33 2e 34 30 2c 2d 30 2e 30 39 20 7a 20 6d 20 32 30 2e 39 30 2c 32 2e 30 39 20 63 20 2e 34 2c 30 20 2e 35 38 2c 2e 31 31 20 2e 37 38 2c 2e 33 31 20 2e 32 2c 2e 33 20 2e 33 30 2c 2e 35 39 20 2e 34 30 2c 31 2e 30 39 20 2e 31 2c 2e 35 20 2e 30 39 2c 31 2e 32 31 20 2e 30 39 2c 32 2e 32 31 20 6c 20 30 2c 31 2e 30 39 20 2d 32 2e 35 2c 30 20 30 2c 2d 31 2e 30 39 20 63 20 30 2c 2d 31 20 2d 30 2e 30 30 2c 2d 31 2e 37 31 20 2e 30 39 2c 2d 32 2e 32 31 20 30 2c 2d 30 2e 34 20 2e 31 31 2c 2d 30 2e 38 20 2e 33 31 2c 2d 31 20 2e 32 2c 2d 30 2e 33 20 2e 35 31 2c 2d 30 2e 34 30 20 2e 38 31 2c 2d 30 2e 34 30 20 7a 20 6d 20 2d 35 30 2e 34 39 2c 2e 31 32 20 63 20 2e 35 2c 30 20 2e 38 2c 2e 31 38 20 31 2c 2e 36 Data Ascii: 4.99 c 0,0 -3.40,.00 -3.40,-0.09 z m 20.90,2.09 c .4,0 .58,.11 .78,.31 .2,.3 .30,.59 .40,1.09 .1,.5 .09,1.21 .09,2.21 l 0,1.09 -2.5,0 0,-1.09 c 0,-1 -0.00,-1.71 .09,-2.21 0,-0.4 .11,-0.8 .31,-1 .2,-0.3 .51,-0.40 .81,-0.40 z m -50.49,.12 c .5,0 .8,.18 1,.6
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 29 29 7d 7d 28 62 29 7d 2c 6e 35 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 7a 6e 62 28 63 29 7d 0a 76 61 72 20 63 3d 41 6e 62 28 29 3b 42 6e 62 28 63 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 61 28 62 2c 63 29 7d 29 7d 2c 43 6e 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 6f 35 29 7b 76 61 72 20 62 3b 0a 28 62 3d 6f 35 29 2e 50 43 7c 7c 28 62 2e 50 43 3d 5b 5d 29 3b 6f 35 2e 50 43 2e 70 75 73 68 28 61 29 7d 7d 2c 42 6e 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 6f 35 3b 0a 6f 35 3d 61 3b 74 72 79 7b 72 65 74 75 72 6e 20 62 28 29 7d 66 69 6e 61 6c 6c 79 7b 6f 35 3d 63 7d 7d 2c 41 6e 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 Data Ascii: ))}}(b)},n5=function(a){function b(){return void znb(c)}var c=Anb();Bnb(c,function(){return void a(b,c)})},Cnb=function(a){if(o5){var b;(b=o5).PC\|\|(b.PC=[]);o5.PC.push(a)}},Bnb=function(a,b){var c=o5;o5=a;try{return b()}finally{o5=c}},Anb=function(){va
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 6e 62 28 63 29 29 26 26 63 2e 4c 5a 28 63 29 2c 63 2e 66 6d 3d 21 31 2c 63 2e 4a 58 3d 31 3b 69 66 28 64 21 3d 3d 63 2e 76 65 72 73 69 6f 6e 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 2c 4b 6e 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6e 75 6c 6c 21 3d 61 2e 65 6b 7c 7c 28 61 2e 65 6b 3d 5b 5d 29 3b 0a 6e 75 6c 6c 21 3d 61 2e 71 77 7c 7c 28 61 2e 71 77 3d 5b 5d 29 3b 72 35 28 61 29 3b 69 66 28 31 3d 3d 3d 61 2e 65 6b 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 61 2e 76 6b 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 4b 6e 62 28 61 2e 76 6b 5b 63 5d 2c 61 2e 46 72 5b 63 5d 29 3b 63 3d 61 2e 65 6b 2e 6c 65 6e 67 74 68 2d 31 3b 61 2e 65 6b 5b 62 5d 3d 61 2e 65 6b 5b 63 5d 3b 61 2e 71 77 5b 62 5d 3d 61 2e 71 77 5b 63 5d 3b 61 Data Ascii: nb(c))&&c.LZ(c),c.fm=!1,c.JX=1;if(d!==c.version)return!0}return!1},Knb=function(a,b){null!=a.ek\|\|(a.ek=[]);null!=a.qw\|\|(a.qw=[]);r5(a);if(1===a.ek.length)for(var c=0;c<a.vk.length;c++)Knb(a.vk[c],a.Fr[c]);c=a.ek.length-1;a.ek[b]=a.ek[c];a.qw[b]=a.qw[c];a
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 7d 2c 55 6e 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 69 73 44 69 73 70 6f 73 65 64 7c 7c 54 6e 62 2e 61 64 64 28 61 29 7d 2c 56 6e 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 69 73 44 69 73 70 6f 73 65 64 7c 7c 28 73 35 2e 61 64 64 28 61 29 2c 31 3d 3d 3d 73 35 2e 73 69 7a 65 26 26 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 62 3d 67 2e 76 28 73 35 29 2c 63 3d 62 2e 6e 65 78 74 28 29 3b 21 63 2e 64 6f 6e 65 3b 63 3d 62 2e 6e 65 78 74 28 29 29 63 3d 63 2e 76 61 6c 75 65 2c 73 35 2e 64 65 6c 65 74 65 28 63 29 2c 63 2e 6e 42 28 29 7d 29 29 7d 2c 74 35 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 51 6e 62 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 69 Data Ascii: },Unb=function(a){a.isDisposed\|\|Tnb.add(a)},Vnb=function(a){a.isDisposed\|\|(s5.add(a),1===s5.size&&Promise.resolve().then(function(){for(var b=g.v(s5),c=b.next();!c.done;c=b.next())c=c.value,s5.delete(c),c.nB()}))},t5=function(a,b){var c=Qnb(function(){c.i
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 0a 74 68 69 73 2e 42 3d 61 3b 74 68 69 73 2e 6b 65 79 3d 62 3b 74 68 69 73 2e 74 65 78 74 3d 76 6f 69 64 20 30 7d 2c 67 6f 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 62 3d 6e 65 77 20 66 6f 62 28 62 2c 63 29 3b 0a 72 65 74 75 72 6e 20 61 2e 5f 5f 69 6e 63 72 65 6d 65 6e 74 61 6c 44 4f 4d 44 61 74 61 3d 62 7d 2c 77 35 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 2e 5f 5f 69 6e 63 72 65 6d 65 6e 74 61 6c 44 4f 4d 44 61 74 61 29 72 65 74 75 72 6e 20 61 2e 5f 5f 69 6e 63 72 65 6d 65 6e 74 61 6c 44 4f 4d 44 61 74 61 3b 0a 76 61 72 20 63 3d 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 3f 61 2e 6c 6f 63 61 6c 4e 61 6d 65 3a 61 2e 6e 6f 64 65 4e 61 6d 65 2c 64 3d 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 3f 61 2e 67 65 74 41 74 74 72 69 62 75 Data Ascii: this.B=a;this.key=b;this.text=void 0},gob=function(a,b,c){b=new fob(b,c);return a.__incrementalDOMData=b},w5=function(a,b){if(a.__incrementalDOMData)return a.__incrementalDOMData;var c=1===a.nodeType?a.localName:a.nodeName,d=1===a.nodeType?a.getAttribu
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 3b 65 6c 73 65 20 78 35 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 61 2c 42 35 29 3b 42 35 3d 61 7d 7d 2c 6a 6f 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 6f 62 28 61 2c 62 29 3b 0a 78 35 3d 42 35 3b 42 35 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 78 35 7d 2c 6c 6f 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 76 6f 69 64 20 30 3d 3d 3d 62 3f 7b 7d 3a 62 3b 0a 76 61 72 20 63 3d 76 6f 69 64 20 30 3d 3d 3d 62 2e 6d 61 74 63 68 65 73 3f 68 6f 62 3a 62 2e 6d 61 74 63 68 65 73 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 76 61 72 20 68 3d 7a 35 2c 6c 3d 44 35 2c 6d 3d 45 35 2c 6e 3d 46 35 2c 70 3d 42 35 2c 71 3d 78 35 2c 72 3d 43 35 3b 44 35 3d 64 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 7a 35 3d 6e 65 77 20 65 6f 62 Data Ascii: ;else x5.insertBefore(a,B5);B5=a}},job=function(a,b){iob(a,b);x5=B5;B5=null;return x5},lob=function(a,b){b=void 0===b?{}:b;var c=void 0===b.matches?hob:b.matches;return function(d,e,f){var h=z5,l=D5,m=E5,n=F5,p=B5,q=x5,r=C5;D5=d.ownerDocument;z5=new eob

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49921	142.251.111.93	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:50 UTC	878	OUT	GET /s/player/63e90c30/www-embed-player.vflset/www-embed-player.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=kNxmXK_kfSM; VISITOR_INFO1_LIVE=Izz4m-7iy8k
2023-11-22 16:22:50 UTC	686	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 79 6f 75 74 75 62 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 79 6f 75 74 75 62 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/cs
2023-11-22 16:22:50 UTC	566	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 6d 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 65 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function(){'use strict';var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ea="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 29 3b 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 69 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 65 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 76 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 Data Ascii: );function v(a,b){if(b)a:{var c=ia;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ea(c,a,{configurable:!0,writable:!0,value:b})}}v("Symbol",function(a){function b(f){if(thi
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 61 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 6d 61 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 77 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 Data Ascii: ength)return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}function ma(a){if(!(a instanceof Array)){a=w(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function na(a,b){return Object.prototype.hasOwnProperty.c
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 76 61 3d 72 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 78 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 70 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 76 61 29 76 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 22 70 72 6f 74 6f 74 79 70 65 22 21 3d 63 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f Data Ascii: peError(a+" is not extensible");return a}:null}var va=ra;function x(a,b){a.prototype=pa(b.prototype);a.prototype.constructor=a;if(va)va(a,b);else for(var c in b)if("prototype"!=c)if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&O
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c 74 20 22 2b 65 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 69 66 28 21 65 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 61 2e 68 2e 75 3d 21 31 2c 65 3b 76 61 72 20 66 3d 65 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 20 61 2e 68 2e 6d 3d 6e 75 6c 6c 2c 79 61 28 61 2e 68 2c 67 29 2c 46 61 28 61 29 7d 61 2e 68 2e 6d 3d 6e 75 6c 6c 3b 64 2e 63 61 6c 6c 28 61 2e 68 2c 66 29 3b 72 65 74 75 72 6e 20 46 61 28 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 46 61 28 61 29 7b 66 6f 72 28 3b 61 2e 68 2e 68 3b 29 74 72 79 7b 76 61 72 20 62 3d 61 2e 69 28 61 2e 68 29 3b 69 66 28 62 29 72 65 74 75 72 6e 20 61 2e 68 2e 75 3d 21 31 2c 7b Data Ascii: throw new TypeError("Iterator result "+e+" is not an object");if(!e.done)return a.h.u=!1,e;var f=e.value}catch(g){return a.h.m=null,ya(a.h,g),Fa(a)}a.h.m=null;d.call(a.h,f);return Fa(a)}function Fa(a){for(;a.h.h;)try{var b=a.i(a.h);if(b)return a.h.u=!1,{
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 21 30 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 29 3b 0a 76 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 67 29 7b 74 68 69 73 2e 68 3d 30 3b 74 68 69 73 2e 6a 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 69 3d 5b 5d 3b 74 68 69 73 2e 75 3d 21 31 3b 76 61 72 20 68 3d 74 68 69 73 2e 6c 28 29 3b 74 72 79 7b 67 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6b 29 7b 68 2e 72 65 6a 65 63 74 28 6b 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 67 29 7b 72 65 74 75 72 6e 20 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 3f 67 3a 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: !0}catch(d){return!1}}:null});v("Promise",function(a){function b(g){this.h=0;this.j=void 0;this.i=[];this.u=!1;var h=this.l();try{g(h.resolve,h.reject)}catch(k){h.reject(k)}}function c(){this.h=null}function d(g){return g instanceof b?g:new b(function(
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 42 28 31 2c 67 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 73 65 74 74 6c 65 28 22 2b 67 2b 22 2c 20 22 2b 68 2b 22 29 3a 20 50 72 6f 6d 69 73 65 20 61 6c 72 65 61 64 79 20 73 65 74 74 6c 65 64 20 69 6e 20 73 74 61 74 65 22 2b 74 68 69 73 2e 68 29 3b 74 68 69 73 2e 68 3d 67 3b 74 68 69 73 2e 6a 3d 68 3b 32 3d 3d 3d 74 68 69 73 2e 68 26 26 74 68 69 73 2e 65 61 28 29 3b 74 68 69 73 2e 4b 28 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 65 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 74 68 69 73 3b 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 67 2e 54 28 Data Ascii: tion(g){this.B(1,g)};b.prototype.B=function(g,h){if(0!=this.h)throw Error("Cannot settle("+g+", "+h+"): Promise already settled in state"+this.h);this.h=g;this.j=h;2===this.h&&this.ea();this.K()};b.prototype.ea=function(){var g=this;e(function(){if(g.T(
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 2c 67 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 59 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 68 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 6a 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b 6c 2e 68 29 3b 7d 7d 0a 76 61 72 20 6c 3d 74 68 69 73 3b 6e 75 6c 6c 3d 3d 74 68 69 73 2e 69 3f 66 2e 69 28 6b 29 3a 74 68 69 73 2e 69 2e 70 75 73 68 28 6b 29 3b 74 68 69 73 2e 75 3d 21 30 7d 3b 0a 62 2e 72 65 73 6f 6c 76 65 3d 64 3b 62 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 66 75 Data Ascii: ,g)};b.prototype.Yb=function(g,h){function k(){switch(l.h){case 1:g(l.j);break;case 2:h(l.j);break;default:throw Error("Unexpected state: "+l.h);}}var l=this;null==this.i?f.i(k):this.i.push(k);this.u=!0};b.resolve=d;b.reject=function(g){return new b(fu
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 3d 6e 2e 67 65 74 28 6c 29 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 67 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 66 28 22 66 72 65 65 7a 65 22 29 3b 66 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 66 28 22 73 65 61 6c 22 29 3b 76 61 72 20 68 3d 30 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 69 66 28 21 64 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 65 28 6b 29 3b 69 66 28 21 6e 61 28 6b 2c 67 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 57 65 61 6b 4d 61 70 20 6b 65 79 20 66 61 69 6c 3a 20 Data Ascii: =n.get(l)}catch(p){return!1}}())return a;var g="$jscomp_hidden_"+Math.random();f("freeze");f("preventExtensions");f("seal");var h=0;b.prototype.set=function(k,l){if(!d(k))throw Error("Invalid WeakMap key");e(k);if(!na(k,g))throw Error("WeakMap key fail:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49922	142.251.111.93	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:50 UTC	866	OUT	GET /s/player/63e90c30/player_ias.vflset/en_US/base.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=kNxmXK_kfSM; VISITOR_INFO1_LIVE=Izz4m-7iy8k
2023-11-22 16:22:50 UTC	687	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 79 6f 75 74 75 62 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 79 6f 75 74 75 62 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/cs
2023-11-22 16:22:50 UTC	565	IN	Data Raw: 76 61 72 20 5f 79 74 5f 70 6c 61 79 65 72 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 28 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 34 20 62 79 20 56 69 74 61 6c 79 20 50 75 7a 72 69 6e 0a 0a 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 Data Ascii: var _yt_player={};(function(g){var window=this;/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// SPDX-License-Identifier: Apache-2.0// (The MIT License) Copyright (C) 2014 by Vitaly Puzrin Permission is her
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 20 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 69 73 0a 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 0a 20 61 6c 6c 20 63 6f 70 69 65 73 20 6f 72 20 73 75 62 73 74 61 6e 74 69 61 6c 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2e 0a 0a 20 54 48 45 20 53 4f 46 54 57 41 52 45 Data Ascii: tware, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 67 72 61 6e 74 65 64 20 74 6f 20 61 6e 79 6f 6e 65 20 74 6f 20 75 73 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 66 6f 72 20 61 6e 79 20 70 75 72 70 6f 73 65 2c 0a 20 20 20 69 6e 63 6c 75 64 69 6e 67 20 63 6f 6d 6d 65 72 63 69 61 6c 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2c 20 61 6e 64 20 74 6f 20 61 6c 74 65 72 20 69 74 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 20 69 74 0a 20 20 20 66 72 65 65 6c 79 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 72 65 73 74 72 69 63 74 69 6f 6e 73 3a 0a 20 20 20 31 2e 20 54 68 65 20 6f 72 69 67 69 6e 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6d 69 73 72 65 70 72 65 73 65 6e 74 65 64 3b 20 Data Ascii: ermission is granted to anyone to use this software for any purpose, including commercial applications, and to alter it and redistribute it freely, subject to the following restrictions: 1. The origin of this software must not be misrepresented;
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 75 64 69 6e 67 20 77 69 74 68 6f 75 74 20 6c 69 6d 69 74 61 74 69 6f 6e 20 74 68 65 20 72 69 67 68 74 73 0a 20 74 6f 20 75 73 65 2c 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 6d 65 72 67 65 2c 20 70 75 62 6c 69 73 68 2c 20 64 69 73 74 72 69 62 75 74 65 2c 20 73 75 62 6c 69 63 65 6e 73 65 2c 20 61 6e 64 2f 6f 72 20 73 65 6c 6c 0a 20 63 6f 70 69 65 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 20 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 69 73 0a 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 Data Ascii: uding without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above cop
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 62 61 2c 77 62 61 2c 58 64 2c 42 62 61 2c 63 65 2c 49 62 61 2c 47 62 61 2c 48 62 61 2c 4a 62 61 2c 4c 62 61 2c 4d 62 61 2c 4f 62 61 2c 52 62 61 2c 6b 65 2c 54 62 61 2c 6e 65 2c 73 65 2c 77 65 2c 7a 65 2c 41 65 2c 55 62 61 2c 56 62 61 2c 57 62 61 2c 58 62 61 2c 4d 65 2c 4e 65 2c 0a 5a 65 2c 24 62 61 2c 62 63 61 2c 61 63 61 2c 61 66 2c 6b 66 2c 63 63 61 2c 6a 66 2c 4c 65 2c 41 66 2c 65 63 61 2c 43 66 2c 42 66 2c 4b 65 2c 45 66 2c 66 63 61 2c 46 66 2c 47 66 2c 48 66 2c 67 63 61 2c 69 63 61 2c 6b 63 61 2c 57 66 2c 58 66 2c 59 66 2c 6f 63 61 2c 71 63 61 2c 24 66 2c 72 63 61 2c 5a 66 2c 76 63 61 2c 55 66 2c 6d 63 61 2c 78 63 61 2c 75 63 61 2c 73 63 61 2c 74 63 61 2c 79 63 61 2c 77 63 61 2c 61 67 2c 70 63 61 2c 6e 67 2c 41 63 61 2c 42 63 61 2c 43 63 61 2c 44 63 Data Ascii: ba,wba,Xd,Bba,ce,Iba,Gba,Hba,Jba,Lba,Mba,Oba,Rba,ke,Tba,ne,se,we,ze,Ae,Uba,Vba,Wba,Xba,Me,Ne,Ze,$ba,bca,aca,af,kf,cca,jf,Le,Af,eca,Cf,Bf,Ke,Ef,fca,Ff,Gf,Hf,gca,ica,kca,Wf,Xf,Yf,oca,qca,$f,rca,Zf,vca,Uf,mca,xca,uca,sca,tca,yca,wca,ag,pca,ng,Aca,Bca,Cca,Dc
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 59 6d 2c 5a 6d 2c 4a 66 61 2c 24 6d 2c 74 6e 2c 75 6e 2c 4b 66 61 2c 4c 66 61 2c 4d 66 61 2c 76 6e 2c 4f 66 61 2c 77 6e 2c 50 66 61 2c 51 66 61 2c 54 66 61 2c 53 66 61 2c 52 66 61 2c 55 66 61 2c 56 66 61 2c 79 6e 2c 57 66 61 2c 58 66 61 2c 59 66 61 2c 61 67 61 2c 5a 66 61 2c 7a 6e 2c 63 67 61 2c 41 6e 2c 64 67 61 2c 65 67 61 2c 42 6e 2c 44 6e 2c 66 67 61 2c 45 6e 2c 46 6e 2c 47 6e 2c 68 67 61 2c 49 6e 2c 6a 67 61 2c 6b 67 61 2c 6c 67 61 2c 6d 67 61 2c 4c 6e 2c 4d 6e 2c 50 6e 2c 6e 67 61 2c 70 67 61 2c 6f 67 61 2c 71 67 61 2c 72 67 61 2c 75 67 61 2c 51 6e 2c 52 6e 2c 53 6e 2c 54 6e 2c 55 6e 2c 56 6e 2c 57 6e 2c 58 6e 2c 76 67 61 2c 59 6e 2c 5a 6e 2c 24 6e 2c 61 6f 2c 62 6f 2c 7a 67 61 2c 77 67 61 2c 66 6f 2c 79 67 61 2c 67 6f 2c 78 67 61 2c 65 6f 2c 63 6f Data Ascii: Ym,Zm,Jfa,$m,tn,un,Kfa,Lfa,Mfa,vn,Ofa,wn,Pfa,Qfa,Tfa,Sfa,Rfa,Ufa,Vfa,yn,Wfa,Xfa,Yfa,aga,Zfa,zn,cga,An,dga,ega,Bn,Dn,fga,En,Fn,Gn,hga,In,jga,kga,lga,mga,Ln,Mn,Pn,nga,pga,oga,qga,rga,uga,Qn,Rn,Sn,Tn,Un,Vn,Wn,Xn,vga,Yn,Zn,$n,ao,bo,zga,wga,fo,yga,go,xga,eo,co
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 6a 61 2c 4b 6a 61 2c 78 74 2c 4c 6a 61 2c 4d 6a 61 2c 4e 6a 61 2c 4f 6a 61 2c 7a 74 2c 50 6a 61 2c 41 74 2c 51 6a 61 2c 42 74 2c 43 74 2c 53 6a 61 2c 44 74 2c 54 6a 61 2c 45 74 2c 46 74 2c 55 6a 61 2c 56 6a 61 2c 47 74 2c 49 74 2c 58 6a 61 2c 4a 74 2c 57 6a 61 2c 59 6a 61 2c 5a 6a 61 2c 24 6a 61 2c 62 6b 61 2c 4b 74 2c 0a 63 6b 61 2c 4e 74 2c 4f 74 2c 65 6b 61 2c 66 6b 61 2c 69 6b 61 2c 6a 6b 61 2c 50 74 2c 51 74 2c 52 74 2c 53 74 2c 54 74 2c 55 74 2c 56 74 2c 57 74 2c 58 74 2c 59 74 2c 5a 74 2c 24 74 2c 61 75 2c 6e 6b 61 2c 6d 6b 61 2c 6f 6b 61 2c 71 6b 61 2c 70 6b 61 2c 73 6b 61 2c 6c 6b 61 2c 72 6b 61 2c 6b 6b 61 2c 62 75 2c 63 75 2c 75 6b 61 2c 76 6b 61 2c 77 6b 61 2c 67 75 2c 68 75 2c 69 75 2c 64 75 2c 79 6b 61 2c 6a 75 2c 74 6b 61 2c 41 6b 61 2c 42 Data Ascii: ja,Kja,xt,Lja,Mja,Nja,Oja,zt,Pja,At,Qja,Bt,Ct,Sja,Dt,Tja,Et,Ft,Uja,Vja,Gt,It,Xja,Jt,Wja,Yja,Zja,$ja,bka,Kt,cka,Nt,Ot,eka,fka,ika,jka,Pt,Qt,Rt,St,Tt,Ut,Vt,Wt,Xt,Yt,Zt,$t,au,nka,mka,oka,qka,pka,ska,lka,rka,kka,bu,cu,uka,vka,wka,gu,hu,iu,du,yka,ju,tka,Aka,B
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 2c 52 7a 2c 53 7a 2c 54 7a 2c 55 7a 2c 56 7a 2c 57 7a 2c 58 7a 2c 59 7a 2c 5a 7a 2c 24 7a 2c 61 41 2c 62 41 2c 63 41 2c 64 41 2c 65 41 2c 66 41 2c 67 41 2c 68 41 2c 69 41 2c 6a 41 2c 6b 41 2c 6c 41 2c 6b 6d 61 2c 6d 41 2c 6e 41 2c 6c 6d 61 2c 6f 41 2c 6d 6d 61 2c 6e 6d 61 2c 70 41 2c 6f 6d 61 2c 70 6d 61 2c 71 6d 61 2c 72 6d 61 2c 71 41 2c 72 41 2c 73 41 2c 74 41 2c 73 6d 61 2c 74 6d 61 2c 75 41 2c 75 6d 61 2c 76 6d 61 2c 77 6d 61 2c 76 41 2c 78 6d 61 2c 79 6d 61 2c 7a 6d 61 2c 41 6d 61 2c 42 6d 61 2c 43 6d 61 2c 44 6d 61 2c 45 6d 61 2c 46 6d 61 2c 47 6d 61 2c 77 41 2c 48 6d 61 2c 78 41 2c 43 41 2c 49 6d 61 2c 4a 6d 61 2c 44 41 2c 4b 6d 61 2c 4c 6d 61 2c 4d 6d 61 2c 4e 6d 61 2c 4f 6d 61 2c 50 6d 61 2c 51 6d 61 2c 52 6d 61 2c 45 41 2c 53 6d 61 2c 54 6d 61 Data Ascii: ,Rz,Sz,Tz,Uz,Vz,Wz,Xz,Yz,Zz,$z,aA,bA,cA,dA,eA,fA,gA,hA,iA,jA,kA,lA,kma,mA,nA,lma,oA,mma,nma,pA,oma,pma,qma,rma,qA,rA,sA,tA,sma,tma,uA,uma,vma,wma,vA,xma,yma,zma,Ama,Bma,Cma,Dma,Ema,Fma,Gma,wA,Hma,xA,CA,Ima,Jma,DA,Kma,Lma,Mma,Nma,Oma,Pma,Qma,Rma,EA,Sma,Tma
2023-11-22 16:22:50 UTC	1252	IN	Data Raw: 63 72 61 2c 56 71 61 2c 57 71 61 2c 4e 44 2c 53 71 61 2c 51 44 2c 5a 71 61 2c 50 44 2c 4f 44 2c 64 72 61 2c 65 72 61 2c 66 72 61 2c 67 72 61 2c 68 72 61 2c 69 72 61 2c 6f 72 61 2c 6a 72 61 2c 56 44 2c 57 44 2c 58 44 2c 72 72 61 2c 74 72 61 2c 73 72 61 2c 70 72 61 2c 75 72 61 2c 77 72 61 2c 24 44 2c 79 72 61 2c 42 72 61 2c 63 45 2c 41 72 61 2c 4c 72 61 2c 0a 43 72 61 2c 4b 72 61 2c 67 45 2c 4d 72 61 2c 50 72 61 2c 68 45 2c 66 45 2c 4e 72 61 2c 4f 72 61 2c 51 72 61 2c 6a 45 2c 53 72 61 2c 54 72 61 2c 55 72 61 2c 56 72 61 2c 57 72 61 2c 58 72 61 2c 59 72 61 2c 52 72 61 2c 24 72 61 2c 61 73 61 2c 62 73 61 2c 63 73 61 2c 64 73 61 2c 67 73 61 2c 6c 45 2c 6d 45 2c 6e 45 2c 69 73 61 2c 6f 45 2c 6a 73 61 2c 6b 73 61 2c 71 45 2c 72 45 2c 6e 73 61 2c 6d 73 61 2c 6f Data Ascii: cra,Vqa,Wqa,ND,Sqa,QD,Zqa,PD,OD,dra,era,fra,gra,hra,ira,ora,jra,VD,WD,XD,rra,tra,sra,pra,ura,wra,$D,yra,Bra,cE,Ara,Lra,Cra,Kra,gE,Mra,Pra,hE,fE,Nra,Ora,Qra,jE,Sra,Tra,Ura,Vra,Wra,Xra,Yra,Rra,$ra,asa,bsa,csa,dsa,gsa,lE,mE,nE,isa,oE,jsa,ksa,qE,rE,nsa,msa,o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49928	142.251.111.93	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:53 UTC	868	OUT	GET /s/player/63e90c30/player_ias.vflset/en_US/remote.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=kNxmXK_kfSM; VISITOR_INFO1_LIVE=Izz4m-7iy8k
2023-11-22 16:22:53 UTC	687	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 79 6f 75 74 75 62 65 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 79 6f 75 74 75 62 65 22 2c 22 6d 61 78 5f 61 67 65 22 3a 32 35 39 32 30 30 30 2c 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesCross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/cs
2023-11-22 16:22:53 UTC	565	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 24 37 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 2e 75 6f 28 61 2c 22 7a 78 22 2c 4d 61 74 68 2e 66 6c 6f 6f 72 28 32 31 34 37 34 38 33 36 34 38 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2b 4d 61 74 68 2e 61 62 73 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 32 31 34 37 34 38 33 36 34 38 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 5e 67 2e 6b 62 28 29 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 61 38 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 63 29 7c 7c 28 63 3d 5b 53 74 72 69 6e 67 28 63 29 5d 29 3b 0a Data Ascii: (function(g){var window=this;'use strict';var $7=function(a){g.uo(a,"zx",Math.floor(2147483648Math.random()).toString(36)+Math.abs(Math.floor(2147483648Math.random())^g.kb()).toString(36));return a},a8=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);
2023-11-22 16:22:53 UTC	1252	IN	Data Raw: 29 3b 0a 65 6c 73 65 20 66 6f 72 28 61 3d 6f 78 62 28 61 29 3b 3b 29 7b 76 61 72 20 64 3d 61 2e 6e 65 78 74 28 29 3b 69 66 28 64 2e 64 6f 6e 65 29 62 72 65 61 6b 3b 62 2e 63 61 6c 6c 28 63 2c 64 2e 76 61 6c 75 65 2c 76 6f 69 64 20 30 2c 61 29 7d 7d 2c 71 78 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 5b 5d 3b 0a 70 78 62 28 62 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 74 72 79 7b 76 61 72 20 65 3d 67 2e 6a 76 2e 70 72 6f 74 6f 74 79 70 65 2e 42 2e 63 61 6c 6c 28 74 68 69 73 2c 64 2c 21 30 29 7d 63 61 74 63 68 28 66 29 7b 69 66 28 22 53 74 6f 72 61 67 65 3a 20 49 6e 76 61 6c 69 64 20 76 61 6c 75 65 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 22 3d 3d 66 29 72 65 74 75 72 6e 3b 74 68 72 6f 77 20 66 3b 7d 76 6f 69 64 20 30 3d 3d 3d 65 Data Ascii: );else for(a=oxb(a);;){var d=a.next();if(d.done)break;b.call(c,d.value,void 0,a)}},qxb=function(a,b){var c=[];pxb(b,function(d){try{var e=g.jv.prototype.B.call(this,d,!0)}catch(f){if("Storage: Invalid value was encountered"==f)return;throw f;}void 0===e
2023-11-22 16:22:53 UTC	1252	IN	Data Raw: 72 65 74 75 72 6e 20 77 78 62 28 61 29 7d 2c 78 78 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 6e 65 77 20 67 2e 6d 6f 28 6e 75 6c 6c 29 3b 0a 61 26 26 67 2e 6e 6f 28 65 2c 61 29 3b 62 26 26 67 2e 6f 6f 28 65 2c 62 29 3b 63 26 26 67 2e 70 6f 28 65 2c 63 29 3b 64 26 26 28 65 2e 43 3d 64 29 3b 72 65 74 75 72 6e 20 65 7d 2c 79 78 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6a 3d 63 38 28 29 3b 0a 74 68 69 73 2e 6a 2e 48 6b 28 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 65 2f 6c 69 76 69 6e 67 5f 72 6f 6f 6d 2f 6d 64 78 2f 63 68 61 6e 6e 65 6c 2f 6f 70 65 6e 65 64 22 2c 7b 55 65 3a 33 2c 54 65 3a 22 63 68 61 6e 6e 65 6c 5f 74 79 70 65 22 7d 29 7d 2c 7a 78 62 3d 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: return wxb(a)},xxb=function(a,b,c,d){var e=new g.mo(null);a&&g.no(e,a);b&&g.oo(e,b);c&&g.po(e,c);d&&(e.C=d);return e},yxb=function(){this.j=c8();this.j.Hk("/client_streamz/youtube/living_room/mdx/channel/opened",{Ue:3,Te:"channel_type"})},zxb=function(a
2023-11-22 16:22:53 UTC	1252	IN	Data Raw: 4e 4f 57 4e 5f 49 4e 54 45 52 46 41 43 45 22 3b 74 68 69 73 2e 61 70 70 3d 22 22 3b 74 68 69 73 2e 74 79 70 65 3d 22 52 45 4d 4f 54 45 5f 43 4f 4e 54 52 4f 4c 22 3b 74 68 69 73 2e 6f 62 66 75 73 63 61 74 65 64 47 61 69 61 49 64 3d 74 68 69 73 2e 61 76 61 74 61 72 3d 74 68 69 73 2e 75 73 65 72 6e 61 6d 65 3d 22 22 3b 74 68 69 73 2e 63 61 70 61 62 69 6c 69 74 69 65 73 3d 6e 65 77 20 53 65 74 3b 74 68 69 73 2e 63 6f 6d 70 61 74 69 62 6c 65 53 65 6e 64 65 72 54 68 65 6d 65 73 3d 6e 65 77 20 53 65 74 3b 74 68 69 73 2e 65 78 70 65 72 69 6d 65 6e 74 73 3d 6e 65 77 20 53 65 74 3b 74 68 69 73 2e 74 68 65 6d 65 3d 22 75 22 3b 6e 65 77 20 67 2e 53 75 3b 74 68 69 73 2e 6d 6f 64 65 6c 3d 74 68 69 73 2e 62 72 61 6e 64 3d 22 22 3b 74 68 69 73 2e 79 65 61 72 3d 30 3b 74 Data Ascii: NOWN_INTERFACE";this.app="";this.type="REMOTE_CONTROL";this.obfuscatedGaiaId=this.avatar=this.username="";this.capabilities=new Set;this.compatibleSenderThemes=new Set;this.experiments=new Set;this.theme="u";new g.Su;this.model=this.brand="";this.year=0;t
2023-11-22 16:22:53 UTC	1252	IN	Data Raw: 44 58 5f 44 49 41 4c 5f 53 45 52 56 45 52 5f 54 59 50 45 5f 55 4e 4b 4e 4f 57 4e 22 29 7d 2c 49 78 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 63 61 70 61 62 69 6c 69 74 69 65 73 2e 63 6c 65 61 72 28 29 3b 0a 67 2e 5a 73 28 62 2e 73 70 6c 69 74 28 22 2c 22 29 2c 67 2e 67 62 28 76 78 62 2c 4c 78 62 29 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 61 2e 63 61 70 61 62 69 6c 69 74 69 65 73 2e 61 64 64 28 63 29 7d 29 7d 2c 4a 78 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 63 6f 6d 70 61 74 69 62 6c 65 53 65 6e 64 65 72 54 68 65 6d 65 73 2e 63 6c 65 61 72 28 29 3b 0a 67 2e 5a 73 28 62 2e 73 70 6c 69 74 28 22 2c 22 29 2c 67 2e 67 62 28 76 78 62 2c 4d 78 62 29 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 Data Ascii: DX_DIAL_SERVER_TYPE_UNKNOWN")},Ixb=function(a,b){a.capabilities.clear();g.Zs(b.split(","),g.gb(vxb,Lxb)).forEach(function(c){a.capabilities.add(c)})},Jxb=function(a,b){a.compatibleSenderThemes.clear();g.Zs(b.split(","),g.gb(vxb,Mxb)).forEach(function(c)
2023-11-22 16:22:53 UTC	1252	IN	Data Raw: 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 67 2e 6c 72 28 61 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 7b 6b 65 79 3a 62 2e 69 64 2c 0a 6e 61 6d 65 3a 62 2e 6e 61 6d 65 7d 7d 29 7d 2c 54 78 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 67 2e 7a 62 28 61 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 7c 7c 62 3f 21 63 21 3d 21 62 3f 21 31 3a 63 2e 69 64 3d 3d 62 2e 69 64 3a 21 30 7d 29 7d 2c 68 38 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 67 2e 7a 62 28 61 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 66 38 28 63 2c 62 29 7d 29 7d 2c 55 78 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 28 30 2c 67 2e 49 43 29 28 29 3b 0a 61 26 26 72 78 62 28 61 2c 61 2e 6a 2e Data Ascii: on(a){return g.lr(a,function(b){return{key:b.id,name:b.name}})},Txb=function(a,b){return g.zb(a,function(c){return c\|\|b?!c!=!b?!1:c.id==b.id:!0})},h8=function(a,b){return g.zb(a,function(c){return f8(c,b)})},Uxb=function(){var a=(0,g.IC)();a&&rxb(a,a.j.
2023-11-22 16:22:53 UTC	1252	IN	Data Raw: 29 3b 0a 67 2e 6d 72 28 63 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 21 67 2e 43 62 28 62 2c 64 29 7d 29 26 26 61 79 62 28 29 3b 0a 67 2e 4a 43 28 22 79 74 2d 72 65 6d 6f 74 65 2d 6c 6f 63 61 6c 2d 73 63 72 65 65 6e 73 22 2c 61 2c 33 31 35 33 36 45 33 29 7d 2c 6b 38 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 7c 7c 28 67 2e 4c 43 28 22 79 74 2d 72 65 6d 6f 74 65 2d 73 65 73 73 69 6f 6e 2d 73 63 72 65 65 6e 2d 69 64 22 29 2c 67 2e 4c 43 28 22 79 74 2d 72 65 6d 6f 74 65 2d 73 65 73 73 69 6f 6e 2d 76 69 64 65 6f 2d 69 64 22 29 29 3b 0a 59 78 62 28 29 3b 61 3d 69 38 28 29 3b 67 2e 46 62 28 61 2c 6a 38 28 29 29 3b 57 78 62 28 61 29 7d 2c 63 79 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 6c 38 29 7b 76 61 72 20 61 3d 67 2e 74 76 28 29 3b 0a Data Ascii: );g.mr(c,function(d){return!g.Cb(b,d)})&&ayb();g.JC("yt-remote-local-screens",a,31536E3)},k8=function(a){a\|\|(g.LC("yt-remote-session-screen-id"),g.LC("yt-remote-session-video-id"));Yxb();a=i8();g.Fb(a,j8());Wxb(a)},cyb=function(){if(!l8){var a=g.tv();
2023-11-22 16:22:53 UTC	1252	IN	Data Raw: 3b 0a 69 66 28 31 3c 61 29 7b 76 61 72 20 63 3d 61 2d 31 3b 62 2e 70 75 73 68 28 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 65 75 72 65 6b 61 2f 63 6c 61 6e 6b 2f 22 2b 61 2b 22 2f 63 61 73 74 5f 73 65 6e 64 65 72 2e 6a 73 22 29 3b 62 2e 70 75 73 68 28 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 65 75 72 65 6b 61 2f 63 6c 61 6e 6b 2f 22 2b 63 2b 22 2f 63 61 73 74 5f 73 65 6e 64 65 72 2e 6a 73 22 29 7d 72 65 74 75 72 6e 20 62 7d 2c 6a 79 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 68 79 62 28 29 3b 0a 61 26 26 61 28 21 31 2c 22 4e 6f 20 63 61 73 74 20 65 78 74 65 6e 73 69 6f 6e 20 66 6f 75 6e 64 22 29 7d 2c 6e 79 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6d 79 62 29 7b 76 61 72 20 61 3d 32 2c 62 3d 68 79 62 28 Data Ascii: ;if(1<a){var c=a-1;b.push("//www.gstatic.com/eureka/clank/"+a+"/cast_sender.js");b.push("//www.gstatic.com/eureka/clank/"+c+"/cast_sender.js")}return b},jyb=function(){var a=hyb();a&&a(!1,"No cast extension found")},nyb=function(){if(myb){var a=2,b=hyb(
2023-11-22 16:22:53 UTC	1252	IN	Data Raw: 65 77 20 77 79 62 28 62 2c 61 29 29 7d 2c 78 79 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 2e 77 62 2e 63 61 6c 6c 28 74 68 69 73 2c 22 73 74 61 74 65 76 65 6e 74 22 2c 61 29 7d 2c 74 38 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 76 79 62 28 29 3b 0a 62 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 78 79 62 28 62 2c 61 29 29 7d 2c 79 79 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 67 2e 77 62 2e 63 61 6c 6c 28 74 68 69 73 2c 22 74 69 6d 69 6e 67 65 76 65 6e 74 22 2c 61 29 3b 0a 74 68 69 73 2e 73 69 7a 65 3d 62 3b 74 68 69 73 2e 6c 42 3d 64 7d 2c 75 38 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 46 6e Data Ascii: ew wyb(b,a))},xyb=function(a){g.wb.call(this,"statevent",a)},t8=function(a){var b=vyb();b.dispatchEvent(new xyb(b,a))},yyb=function(a,b,c,d){g.wb.call(this,"timingevent",a);this.size=b;this.lB=d},u8=function(a,b){if("function"!==typeof a)throw Error("Fn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49930	142.251.163.149	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:53 UTC	687	OUT	GET /instream/ad_status.js HTTP/1.1 Host: static.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:22:53 UTC	744	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 2d 52 65 70 6f 72 74 2d 4f 6e 6c 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 3b 20 72 65 70 6f 72 74 2d 74 6f 3d 22 61 64 73 2d 64 6f 75 62 6c 65 63 6c 69 63 6b 2d 6d 65 64 69 61 22 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 67 72 6f 75 70 22 3a 22 61 64 73 2d 64 6f 75 62 6c 65 63 6c 69 63 6b 2d 6d 65 64 69 61 22 2c 22 6d 61 78 5f 61 67 65 Data Ascii: HTTP/1.1 200 OKAccept-Ranges: bytesAccess-Control-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originCross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media"Report-To: {"group":"ads-doubleclick-media","max_age
2023-11-22 16:22:53 UTC	29	IN	Data Raw: 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 5f 61 64 5f 73 74 61 74 75 73 20 3d 20 31 3b 0a Data Ascii: window.google_ad_status = 1;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49932	172.253.62.157	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:54 UTC	709	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:22:54 UTC	766	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 33 30 32 20 46 6f 75 6e 64 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 4c Data Ascii: HTTP/1.1 302 FoundP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49934	172.253.62.157	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:54 UTC	718	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:22:55 UTC	808	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 41 63 63 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originAcce
2023-11-22 16:22:55 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 70 4f 4f 48 37 39 6e 45 4f 4a 68 5f 46 54 38 4a 30 63 32 72 6d 4b 44 5a 31 79 4b 4c 65 33 46 5a 4d 56 62 5f 69 6a 6b 31 78 49 63 34 52 6d 75 6e 44 5a 33 4d 6b 46 6b 51 69 5a 57 46 32 56 73 31 6f 56 69 78 37 4c 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKpOOH79nEOJh_FT8J0c2rmKDZ1yKLe3FZMVb_ijk1xIc4RmunDZ3MkFkQiZWF2Vs1oVix7L","type":4}
2023-11-22 16:22:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49937	142.251.16.157	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:55 UTC	466	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:22:56 UTC	754	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 50 33 50 3a 20 70 6f 6c 69 63 79 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 67 6c 65 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 61 67 65 61 64 2f 67 63 6e 5f 70 33 70 5f 2e 78 6d 6c 22 2c 20 43 50 3d 22 43 55 52 61 20 41 44 4d 61 20 44 45 56 61 20 54 41 49 6f 20 50 53 41 6f 20 50 53 44 6f 20 4f 55 52 20 49 4e 44 20 55 4e 49 20 50 55 52 20 49 4e 54 20 44 45 4d 20 53 54 41 20 50 52 45 20 43 4f 4d 20 4e 41 56 20 4f 54 43 20 4e 4f 49 20 44 53 50 20 43 4f 52 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 41 63 63 65 Data Ascii: HTTP/1.1 200 OKP3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originAcce
2023-11-22 16:22:56 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 6f 71 4e 76 45 41 38 57 67 6f 6b 61 4d 49 70 6e 35 53 62 61 31 72 69 62 37 50 6c 62 69 41 6f 74 59 2d 50 73 76 41 61 32 65 43 77 4d 4c 4d 66 6e 33 7a 79 4e 5f 73 65 4d 31 31 58 74 5a 55 53 37 50 50 33 55 65 4e 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKoqNvEA8WgokaMIpn5Sba1rib7PlbiAotY-PsvAa2eCwMLMfn3zyN_seM11XtZUS7PP3UeN","type":4}
2023-11-22 16:22:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49940	142.251.111.93	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:56 UTC	1438	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 14782 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Ad-Signals: dt=1700670171034&flash=0&frm=2&u_tz=60&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C0%2C0&vis=1&wgl=true&ca_type=image sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Request-Time: 1700670175351 Content-Type: application/json X-YouTube-Utc-Offset: 60 X-YouTube-Client-Name: 56 X-YouTube-Client-Version: 1.20231119.00.00 X-YouTube-Time-Zone: Europe/Zurich X-Goog-Visitor-Id: CgtJeno0bS03aXk4ayjZ1fiqBjIICgJHQhICGgA%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=kNxmXK_kfSM; VISITOR_INFO1_LIVE=Izz4m-7iy8k
2023-11-22 16:22:56 UTC	14782	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 63 6c 69 65 6e 74 4e 61 6d 65 22 3a 35 36 2c 22 63 6c 69 65 6e 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 32 30 32 33 31 31 31 39 2e 30 30 2e 30 30 22 2c 22 63 6f 6e 66 69 67 49 6e 66 6f 22 3a 7b 22 61 70 70 49 6e 73 74 61 6c 6c 44 61 74 61 22 3a 22 43 4e 6e 56 2d 4b 6f 47 45 4e 33 6f 5f 68 49 51 78 34 4f 77 42 52 44 72 6b 36 34 46 45 4c 5f 33 72 77 55 51 31 4a 4b 77 42 52 44 71 77 36 38 46 45 4c 69 4c 72 67 55 51 69 4f 4f 76 42 52 43 75 31 50 34 53 45 4d 79 75 5f 68 49 51 35 37 71 76 42 52 44 72 36 50 34 53 45 4b 69 42 73 41 55 51 6f 70 4b 77 42 52 43 56 6c 62 41 46 45 4d 7a 66 72 67 55 51 74 2d 2d 76 42 52 44 6b 73 5f 34 53 45 4f Data Ascii: {"context":{"client":{"hl":"en","gl":"US","clientName":56,"clientVersion":"1.20231119.00.00","configInfo":{"appInstallData":"CNnV-KoGEN3o_hIQx4OwBRDrk64FEL_3rwUQ1JKwBRDqw68FELiLrgUQiOOvBRCu1P4SEMyu_hIQ57qvBRDr6P4SEKiBsAUQopKwBRCVlbAFEMzfrgUQt--vBRDks_4SEO
2023-11-22 16:22:56 UTC	650	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 56 61 72 79 3a 20 58 2d 4f 72 69 67 69 6e 0d 0a 56 61 72 79 3a 20 52 65 66 65 72 65 72 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 35 36 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 73 63 61 66 66 6f 6c 64 69 6e 67 20 6f 6e 20 48 54 54 50 53 65 72 76 65 72 32 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 0d 0a 58 2d 58 53 53 2d 50 72 6f 74 65 63 74 69 6f 6e 3a 20 30 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 53 41 4d 45 4f 52 49 47 49 4e 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 Data Ascii: HTTP/1.1 200 OKContent-Type: application/json; charset=UTF-8Vary: X-OriginVary: RefererDate: Wed, 22 Nov 2023 16:22:56 GMTServer: scaffolding on HTTPServer2Cache-Control: privateX-XSS-Protection: 0X-Frame-Options: SAMEORIGINX-Content-Typ
2023-11-22 16:22:56 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2023-11-22 16:22:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49942	142.251.167.156	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:56 UTC	1079	OUT	GET /adsid/google/ui HTTP/1.1 Host: adservice.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw
2023-11-22 16:22:57 UTC	476	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 50 33 50 3a 20 43 50 3d 22 54 68 69 73 20 69 73 20 6e 6f 74 20 61 20 50 33 50 20 70 6f 6c 69 63 79 21 20 53 65 65 20 68 74 74 70 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 73 2f 61 6e 73 77 65 72 2f 31 35 31 36 35 37 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 2e 22 0d 0a 54 69 6d 69 6e 67 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 3a 20 63 72 6f 73 73 2d 6f 72 69 67 69 6e 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 31 35 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 Data Ascii: HTTP/1.1 204 No ContentP3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."Timing-Allow-Origin: *Cross-Origin-Resource-Policy: cross-originCache-Control: private, max-age=15Content-Type: text/ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49943	172.253.115.106	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:56 UTC	1509	OUT	GET /gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=xSpeZdzvEPyy5NoPhfSymAc&zx=1700670175855&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0; DV=Q3FLCIqvnZAgYHfm0PDGnWUnTnF9v5jkqNWfmvg5CwUAAAA
2023-11-22 16:22:56 UTC	1351	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 34 20 4e 6f 20 43 6f 6e 74 65 6e 74 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 73 63 72 69 70 74 2d 73 72 63 20 27 6e 6f 6e 63 65 2d 67 68 57 35 51 47 68 50 68 4d 6e 33 49 31 46 63 39 35 30 48 36 41 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 68 74 74 70 73 3a 20 68 74 74 70 3a 3b 72 65 70 6f 72 74 2d 75 72 69 20 68 74 Data Ascii: HTTP/1.1 204 No ContentContent-Type: text/html; charset=UTF-8Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-ghW5QGhPhMn3I1Fc950H6A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri ht

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.5	49944	172.253.63.91	443	1396	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:57 UTC	567	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=kNxmXK_kfSM; VISITOR_INFO1_LIVE=Izz4m-7iy8k
2023-11-22 16:22:57 UTC	240	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 52 65 66 65 72 72 65 72 2d 50 6f 6c 69 63 79 3a 20 6e 6f 2d 72 65 66 65 72 72 65 72 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 36 30 39 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 35 37 20 47 4d 54 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 32 35 39 32 30 30 30 2c 68 33 2d 32 39 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 32 35 39 32 30 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 405 Method Not AllowedContent-Type: text/html; charset=UTF-8Referrer-Policy: no-referrerContent-Length: 1609Date: Wed, 22 Nov 2023 16:22:57 GMTAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
2023-11-22 16:22:57 UTC	1012	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2023-11-22 16:22:57 UTC	597	IN	Data Raw: 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 Data Ascii: gle.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-backgrou

Target ID:	0
Start time:	17:21:33
Start date:	22/11/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	17:21:36
Start date:	22/11/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2032,i,3473682876261523238,13484657790905124998,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	17:21:38
Start date:	22/11/2023
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	C:\Program Files\Google\Chrome\Application\chrome.exe" "https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js	HTTP Parser: No favicon
Source: https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normal	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://ogs.google.com/widget/callout?prid=19039542&pgid=19039541&puid=f8d7e651c1b87f2c&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en	HTTP Parser: No favicon
Source: https://ogs.google.com/widget/callout?prid=19039542&pgid=19039541&puid=f8d7e651c1b87f2c&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en	HTTP Parser: No favicon
Source: https://www.google.com/search?q=shop+deals&source=smp.23q4SDealsHPP.22&stick=H4sIAAAAAAAA_7t17sBZTiYOBgBZcuXYCAAAAA	HTTP Parser: No favicon
Source: https://www.google.com/search?q=shop+deals&source=smp.23q4SDealsHPP.22&stick=H4sIAAAAAAAA_7t17sBZTiYOBgBZcuXYCAAAAA	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1	HTTP Parser: No favicon

Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.132Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/files/doc_order_11.22.2023_0368201058.js HTTP/1.1Host: report-doc.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/styles/challenges.css HTTP/1.1Host: report-doc.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=82a281bac8890808 HTTP/1.1Host: report-doc.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js?__cf_chl_rt_tk=XuxhaDrbm05aROwP4yp3oEYzeKDRZb4cDxLYnrPY9lU-1700670099-0-gaNycGzNDJAAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/9914b343/api.js?onload=FAIg1&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://report-doc.orgsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: report-doc.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_chl_2=b991f7e9b718311
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1016394738:1700666829:-yVJKTyB4G9hzKxVgcHjtvuTc6QxdkOn-XEeN9njovw/82a281bac8890808/b991f7e9b718311 HTTP/1.1Host: report-doc.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_chl_2=b991f7e9b718311
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normal HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=82a281d8ed3d062f HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: report-doc.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_chl_2=b991f7e9b718311
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: report-doc.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_chl_2=b991f7e9b718311
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1659967187:1700666959:s-xfDmFBeCQJ3zR5aQxdS7p1hXAcQJ8HD8Iovqf91qk/82a281d8ed3d062f/39b36f2cbd2d955 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/82a281d8ed3d062f/1700670106968/086cd84cc905b337cfeb5813071be2a30c5d7fededdd7fc625302b6261d08b8e/mpyr05rD6k1SCe6 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/82a281d8ed3d062f/1700670106977/KqjhGQJRJoD_bVM HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normalAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/82a281d8ed3d062f/1700670106977/KqjhGQJRJoD_bVM HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1659967187:1700666959:s-xfDmFBeCQJ3zR5aQxdS7p1hXAcQJ8HD8Iovqf91qk/82a281d8ed3d062f/39b36f2cbd2d955 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=HspY2CHUf5tsTg5&MD=XHz6fdxt HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: report-doc.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js?__cf_chl_tk=XuxhaDrbm05aROwP4yp3oEYzeKDRZb4cDxLYnrPY9lU-1700670099-0-gaNycGzNDJAAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_chl_2=b991f7e9b718311
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1016394738:1700666829:-yVJKTyB4G9hzKxVgcHjtvuTc6QxdkOn-XEeN9njovw/82a281bac8890808/b991f7e9b718311 HTTP/1.1Host: report-doc.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_chl_2=b991f7e9b718311
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1659967187:1700666959:s-xfDmFBeCQJ3zR5aQxdS7p1hXAcQJ8HD8Iovqf91qk/82a281d8ed3d062f/39b36f2cbd2d955 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://report-doc.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: report-doc.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_chl_2=b991f7e9b718311; cf_clearance=jpifFkb84m._ay8OoY_U8xI0a36omFiLDGWUAaQrI3E-1700670099-0-1-48230311.31d7c504.1f225cf1-250.0.0
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.hd.en.j7vH50XSWl8.O/am=BAAAAAAAAAAAAAAAAAAAAAQAAAAAEPUTDgFsgACBABBggAAgAICAFKQQBAMAEPBQJgAAACZAYAhYCogKvOcBAJBAFQAAAAAAEAwiAAAACAAAoAMAACCgEdAAhIBKQAAAAADyACA4ABhEEAAAAAAAAAAAAAABTBAMLkgAFAQQAAAAAAAAAAAAAKSkycVAAg/d=1/ed=1/dg=2/br=1/rs=ACT90oFcDAHDhb4_oZd5Xts_Yb9yG3qqLA/ee=cEt90b:ws9Tlc;qddgKe:x4FYXe,d7YSfd;yxTchf:KUM7Z;dtl0hd:lLQWFe;eHDfl:ofjVkb;qaS3gd:yiLg6e;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;iFQyKf:vfuNJf,QIhFr;SNUn3:ZwDk9d,x8cHvb;io8t5d:sgY6Zb;Oj465e:KG2eXe,KG2eXe;Erl4fe:FloWmf,FloWmf;JsbNhc:Xd8iUd;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;uY49fb:COQbmf;Pjplud:PoEs9b,EEDORb;QGR0gd:Mlhmy;a56pNe:JEfCwb;Me32dd:MEeYgc;wR5FRb:TtcOte,O1Gjze;pXdRYb:JKoKVe;dIoSBb:ZgGg9b;EmZ2Bf:zr1jrb;NSEoX:lazG7b;eBAeSb:Ck63tb;WCEKNd:I46Hvd;wV5Pjc:L8KGxe;EVNhjf:pw70Gc;sTsDMc:kHVSUb;wQlYve:aLUfP;zOsCQe:Ko78Df;KcokUb:KiuZBf;kbAm9d:MkHyGd;g8nkx:U4MzKc;YV5bee:IvPZ6d;pNsl2d:j9Yuyc;BjwMce:cXX2Wb;KpRAue:Tia57b;jY0zg:Q6tNgc;aZ61od:arTwJ;vfVwPd:lcrkwe;NPKaK:SdcwHb;LBgRLc:XVMNvd,SdcwHb;UyG7Kb:wQd0G;LsNahb:ucGLNb;w9w86d:dt4g2b;coJ8e:KvoW8;oSUNyd:fTfGO,fTfGO,pnvXVc;SMDL4c:fTfGO,pnvXVc;lzgfYb:PI40bd;qZx2Fc:j0xrE;IoGlCf:b5lhvb;w4rSdf:XKiZ9;h3MYod:cEt90b;eO3lse:nFClrf;zaIgPb:Qtpxbd;HMDDWe:G8QUdb;ShpF6e:N0pvGc;k2Qxcb:XY51pe;IBADCc:RYquRb;pKJiXd:VCenhc;rQSrae:C6D5Fc;kCQyJ:ueyPK;EABSZ:MXZt9d;qavrXe:zQzcXe;TxfV6d:YORN0b;UDrY1c:eps46d;F9mqte:UoRcbe;GleZL:J1A7Od;Nyt6ic:jn2sGd;JXS8fb:Qj0suc;w3bZCb:ZPGaIb;VGRfx:VFqbr;G0KhTb:LIaoZ;XUezZ:sa7lqb;aAJE9c:WHW6Ef;V2HTTe:RolTY;Wfmdue:g3MJlb;imqimf:jKGL2e;BgS6mb:fidj5d;gtVSi:ekUOYd;KQzWid:ZMKkN;UVmjEd:EesRsb;z97YGf:oug9te;AfeaP:TkrAjf;eBZ5Nd:audvde;CxXAWb:YyRLvc;VN6jIc:ddQyuf;OgagBe:cNTe0;SLtqO:Kh1xYe;tosKvd:ZCqP3;VOcgDe:YquhTb;uuQkY:u2V3ud;WDGyFe:jcVOxd;trZL0b:qY8PFe;VxQ32b:k0XsBb;DULqB:RKfG5c;Np8Qkd:Dpx6qc;bcPXSc:gSZLJb;cFTWae:gT8qnd;gaub4:TN6bMe;xBbsrc:NEW1Qc;DpcR3d:zL72xf;hjRo6e:F62sG;yGxLoc:FmAr0c;pj82le:mg5CW;dLlj2:Qqt3Gf;oUlnpc:RagDlc;Q1Ow7b:x5CSu;bFZ6gf:RsDQqe;ESrPQc:mNTJvc;R9Ulx:CR7Ufe;KOxcK:bFOvTc;G6wU6e:hezEbd;okUaUd:wItadb;ZWEUA:afR4Cf;U96pRd:FsR04;heHB1:sFczq;Fmv9Nc:O1Tzwc;hK67qb:QWEO5b;BMxAGc:E5bFse;R4IIIb:QWfeKf;whEZac:F4AmNb;tH4IIe:Ymry6;lkq0A:JyBE3e;daB6be:lMxGPd;LEikZe:byfTOb,lsjVmc/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSe
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/1x/googlelogo_color_272x92dp.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914
Source: global traffic	HTTP traffic detected: GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/1x/googlelogo_color_272x92dp.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914
Source: global traffic	HTTP traffic detected: GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914
Source: global traffic	HTTP traffic detected: GET /images/hpp/green-tag-42px.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ogs.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914
Source: global traffic	HTTP traffic detected: GET /gen_204?use_corp=on&atyp=i&zx=1700670127241&ogsr=1&ei=rCpeZbT_G-6t5NoP8f-zuAQ&ct=7&cad=i&id=19039542&loc=webhp&prid=538&ogd=com&ogprm=up&ap=1&vis=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914; OGPC=19039541-1:
Source: global traffic	HTTP traffic detected: GET /images/hpp/green-tag-42px.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914; OGPC=19039541-1:
Source: global traffic	HTTP traffic detected: GET /complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=rCpeZdXlGruf5NoPj9ax6A4.1700670128242&dpr=1&nolsbt=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/md=1/k=xjs.hd.en.j7vH50XSWl8.O/ck=xjs.hd.3mhtCf28lXo.L.W.O/am=BAAAAAAAAAAAAAAAAAAAAAQAAAAAEPUTDgFsgACBABBggAAgAICAFKQQBAMAEPBQJgAAACZAYAhYCogKvOcBAJBAFQAAAAAAEAwiAAAACAAAoAMAACCgEdAAhIBKQAAAAADyACA4ABhEEAAAAAAAAAAAAAABTBAMLkgAFAQQAAAAAAAAAAAAAKSkycVAAg/rs=ACT90oEQOKoPcm_mXy_VnoCFj9ts7y2bDw HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.hd.en.j7vH50XSWl8.O/ck=xjs.hd.3mhtCf28lXo.L.W.O/am=BAAAAAAAAAAAAAAAAAAAAAQAAAAAEPUTDgFsgACBABBggAAgAICAFKQQBAMAEPBQJgAAACZAYAhYCogKvOcBAJBAFQAAAAAAEAwiAAAACAAAoAMAACCgEdAAhIBKQAAAAADyACA4ABhEEAAAAAAAAAAAAAABTBAMLkgAFAQQAAAAAAAAAAAAAKSkycVAAg/d=1/exm=SNUn3,cEt90b,cdos,csi,d,dtl0hd,eHDfl,hsm,jsa,mb4ZUb,qddgKe,sTsDMc/ed=1/dg=2/br=1/ujg=1/rs=ACT90oEQOKoPcm_mXy_VnoCFj9ts7y2bDw/ee=AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DULqB:RKfG5c;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;IBADCc:RYquRb;IoGlCf:b5lhvb;JXS8fb:Qj0suc;JsbNhc:Xd8iUd;KOxcK:bFOvTc;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe;Pjplud:EEDORb,PoEs9b;Q1Ow7b:x5CSu;QGR0gd:Mlhmy;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;SLtqO:Kh1xYe;SMDL4c:fTfGO,pnvXVc;SNUn3:ZwDk9d,x8cHvb;ShpF6e:N0pvGc;TxfV6d:YORN0b;U96pRd:FsR04;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YV5bee:IvPZ6d;ZWEUA:afR4Cf;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bFZ6gf:RsDQqe;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:audvde;eHDfl:ofjVkb;eO3lse:nFClrf;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;io8t5d:sgY6Zb;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;lkq0A:JyBE3e;lzgfYb:PI40bd;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO,pnvXVc;oUlnpc:RagDlc;okUaUd:wItadb;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;uuQkY:u2V3ud;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:O1Gjze,TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=B2qlPe,DhPYme,EkevXb,GU4Gab,MpJwZc,NzU6V,UUJqVe,aa,abd,async,epYOx,ifl,ms4mZb,mu,pHXghd,q0xTif,s39S4,sOXFj,sb_wiz,sf,sonic,spch?xjs=s1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEI
Source: global traffic	HTTP traffic detected: GET /complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=rCpeZdXlGruf5NoPj9ax6A4.1700670128242&dpr=1&nolsbt=1 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16
Source: global traffic	HTTP traffic detected: GET /client_204?atyp=i&biw=1280&bih=907&dpr=1&ei=rCpeZdXlGruf5NoPj9ax6A4&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/md=1/k=xjs.hd.en.j7vH50XSWl8.O/ck=xjs.hd.3mhtCf28lXo.L.W.O/am=BAAAAAAAAAAAAAAAAAAAAAQAAAAAEPUTDgFsgACBABBggAAgAICAFKQQBAMAEPBQJgAAACZAYAhYCogKvOcBAJBAFQAAAAAAEAwiAAAACAAAoAMAACCgEdAAhIBKQAAAAADyACA4ABhEEAAAAAAAAAAAAAABTBAMLkgAFAQQAAAAAAAAAAAAAKSkycVAAg/rs=ACT90oEQOKoPcm_mXy_VnoCFj9ts7y2bDw HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16
Source: global traffic	HTTP traffic detected: GET /client_204?cs=1&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16
Source: global traffic	HTTP traffic detected: GET /async/hpba?vet=10ahUKEwjV65b1gdiCAxW7D1kFHQ9rDO0Qj-0KCBs..i&ei=rCpeZdXlGruf5NoPj9ax6A4&opi=89978449&yv=3&cs=0&async=_ck:xjs.hd.3mhtCf28lXo.L.W.O,_k:xjs.hd.en.j7vH50XSWl8.O,_am:BAAAAAAAAAAAAAAAAAAAAAQAAAAAEPUTDgFsgACBABBggAAgAICAFKQQBAMAEPBQJgAAACZAYAhYCogKvOcBAJBAFQAAAAAAEAwiAAAACAAAoAMAACCgEdAAhIBKQAAAAADyACA4ABhEEAAAAAAAAAAAAAABTBAMLkgAFAQQAAAAAAAAAAAAAKSkycVAAg,_csss:ACT90oHg5mCcQv8sNOOYCaMvtyVFpx_jxw,_fmt:prog,_id:a3JU5b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.hd.en.j7vH50XSWl8.O/ck=xjs.hd.3mhtCf28lXo.L.W.O/am=BAAAAAAAAAAAAAAAAAAAAAQAAAAAEPUTDgFsgACBABBggAAgAICAFKQQBAMAEPBQJgAAACZAYAhYCogKvOcBAJBAFQAAAAAAEAwiAAAACAAAoAMAACCgEdAAhIBKQAAAAADyACA4ABhEEAAAAAAAAAAAAAABTBAMLkgAFAQQAAAAAAAAAAAAAKSkycVAAg/d=0/dg=2/br=1/ujg=1/rs=ACT90oEQOKoPcm_mXy_VnoCFj9ts7y2bDw/m=sy7c,syre,syrg,syrh,WlNQGd,syxa,syxc,nabPbb,symw,symx,symy,symz,syn0,syn2,DPreE,syl0,syrd,syrf,CnSW2d,syxb,fXO0xe?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; NID=511=B5KYN-i8eFr4tqiFYPVhppXExP9rsD10RuZk8cItRdJDgYcibeYNY8CM29TrcJ1ycnd_EtlM3PtknN75FPRZjMTfHHtd-De-oytFooD3sxcw38Hv87hTwqijPdX7AK9geRrY4JZ-vx_zw6xVi3eRwQS-30mWzN8-E5ckpAmI3yc; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.hd.en.j7vH50XSWl8.O/ck=xjs.hd.3mhtCf28lXo.L.W.O/am=BAAAAAAAAAAAAAAAAAAAAAQAAAAAEPUTDgFsgACBABBggAAgAICAFKQQBAMAEPBQJgAAACZAYAhYCogKvOcBAJBAFQAAAAAAEAwiAAAACAAAoAMAACCgEdAAhIBKQAAAAADyACA4ABhEEAAAAAAAAAAAAAABTBAMLkgAFAQQAAAAAAAAAAAAAKSkycVAAg/d=0/dg=2/br=1/ujg=1/rs=ACT90oEQOKoPcm_mXy_VnoCFj9ts7y2bDw/m=syed,aLUfP?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /async/hpba?vet=10ahUKEwjV65b1gdiCAxW7D1kFHQ9rDO0Qj-0KCBs..i&ei=rCpeZdXlGruf5NoPj9ax6A4&opi=89978449&yv=3&cs=0&async=_ck:xjs.hd.3mhtCf28lXo.L.W.O,_k:xjs.hd.en.j7vH50XSWl8.O,_am:BAAAAAAAAAAAAAAAAAAAAAQAAAAAEPUTDgFsgACBABBggAAgAICAFKQQBAMAEPBQJgAAACZAYAhYCogKvOcBAJBAFQAAAAAAEAwiAAAACAAAoAMAACCgEdAAhIBKQAAAAADyACA4ABhEEAAAAAAAAAAAAAABTBAMLkgAFAQQAAAAAAAAAAAAAKSkycVAAg,_csss:ACT90oHg5mCcQv8sNOOYCaMvtyVFpx_jxw,_fmt:prog,_id:a3JU5b HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=rCpeZdXlGruf5NoPj9ax6A4&zx=1700670132568&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /adsid/google/ui HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /url?q=https://www.google.com/search%3Fq%3Dshop%2Bdeals%26source%3Dsmp.23q4SDealsHPP.22%26stick%3DH4sIAAAAAAAA_7t17sBZTiYOBgBZcuXYCAAAAA&source=hpp&id=19039542&ct=7&usg=AOvVaw2tqojU1GkQ0_4pk5RspTmS HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /search?q=shop+deals&source=smp.23q4SDealsHPP.22&stick=H4sIAAAAAAAA_7t17sBZTiYOBgBZcuXYCAAAAA HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/2x/googlelogo_color_92x30dp.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /images/shopping/deals/electronics.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /images/shopping/deals/womens_apparel.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /images/shopping/deals/mens_apparel.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /images/shopping/deals/home_and_garden.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /images/shopping/deals/toys_and_games.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /images/shopping/deals/sports_and_outdoors.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /images/shopping/deals/health_and_beauty.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/2x/googlelogo_color_92x30dp.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /images/shopping/deals/electronics.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /images/shopping/deals/travel_and_luggage.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /images/shopping/deals/baby_and_kids.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /images/shopping/deals/mens_apparel.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /images/shopping/deals/womens_apparel.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /images/shopping/deals/home_and_garden.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /images/shopping/deals/toys_and_games.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /images/shopping/deals/sports_and_outdoors.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /images/shopping/deals/health_and_beauty.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=HspY2CHUf5tsTg5&MD=XHz6fdxt HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /images/shopping/deals/pet_supplies.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=1/ed=1/dg=2/br=1/rs=ACT90oFaYErXXA3hRaO-qDqG-y2SopXzQg/ee=cEt90b:ws9Tlc;qddgKe:x4FYXe,d7YSfd;yxTchf:KUM7Z;dtl0hd:lLQWFe;eHDfl:ofjVkb;qaS3gd:yiLg6e;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;iFQyKf:vfuNJf,QIhFr;SNUn3:ZwDk9d,x8cHvb;io8t5d:sgY6Zb;Oj465e:KG2eXe,KG2eXe;Erl4fe:FloWmf,FloWmf;JsbNhc:Xd8iUd;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;uY49fb:COQbmf;Pjplud:PoEs9b,EEDORb;QGR0gd:Mlhmy;a56pNe:JEfCwb;Me32dd:MEeYgc;wR5FRb:TtcOte,O1Gjze;pXdRYb:JKoKVe;dIoSBb:ZgGg9b;EmZ2Bf:zr1jrb;NSEoX:lazG7b;eBAeSb:Ck63tb;WCEKNd:I46Hvd;wV5Pjc:L8KGxe;EVNhjf:pw70Gc;sTsDMc:kHVSUb;wQlYve:aLUfP;zOsCQe:Ko78Df;KcokUb:KiuZBf;YV5bee:IvPZ6d;kbAm9d:MkHyGd;ZWEUA:afR4Cf;g8nkx:U4MzKc;qZx2Fc:j0xrE;lzgfYb:PI40bd;w9w86d:dt4g2b;GleZL:J1A7Od;bcPXSc:gSZLJb;JXS8fb:Qj0suc;IoGlCf:b5lhvb;VN6jIc:ddQyuf;vfVwPd:lcrkwe;xBbsrc:NEW1Qc;pNsl2d:j9Yuyc;VGRfx:VFqbr;BjwMce:cXX2Wb;ESrPQc:mNTJvc;R9Ulx:CR7Ufe;kY7VAf:d91TEb;NPKaK:SdcwHb;LBgRLc:XVMNvd,SdcwHb;UyG7Kb:wQd0G;LsNahb:ucGLNb;KpRAue:Tia57b;jY0zg:Q6tNgc;coJ8e:KvoW8;oSUNyd:fTfGO,fTfGO,pnvXVc;SMDL4c:fTfGO,pnvXVc;aZ61od:arTwJ;w4rSdf:XKiZ9;h3MYod:cEt90b;eO3lse:nFClrf;zaIgPb:Qtpxbd;HMDDWe:G8QUdb;ShpF6e:N0pvGc;k2Qxcb:XY51pe;IBADCc:RYquRb;pKJiXd:VCenhc;rQSrae:C6D5Fc;kCQyJ:ueyPK;EABSZ:MXZt9d;qavrXe:zQzcXe,mYbt1d;TxfV6d:YORN0b;UDrY1c:eps46d;F9mqte:UoRcbe;Nyt6ic:jn2sGd;w3bZCb:ZPGaIb;G0KhTb:LIaoZ;XUezZ:sa7lqb;aAJE9c:WHW6Ef;V2HTTe:RolTY;Wfmdue:g3MJlb;imqimf:jKGL2e;BgS6mb:fidj5d;gtVSi:ekUOYd;KQzWid:ZMKkN;UVmjEd:EesRsb;z97YGf:oug9te;AfeaP:TkrAjf;eBZ5Nd:audvde;CxXAWb:YyRLvc;OgagBe:cNTe0;SLtqO:Kh1xYe;tosKvd:ZCqP3;VOcgDe:YquhTb;uuQkY:u2V3ud;WDGyFe:jcVOxd;trZL0b:qY8PFe;VxQ32b:k0XsBb;DULqB:RKfG5c;Np8Qkd:Dpx6qc;cFTWae:gT8qnd;gaub4:TN6bMe;DpcR3d:zL72xf;hjRo6e:F62sG;yGxLoc:FmAr0c;pj82le:mg5CW;dLlj2:Qqt3Gf;qGV2uc:HHi04c;oUlnpc:RagDlc;R2kc8b:ALJqWb;Q1Ow7b:x5CSu;bFZ6gf:RsDQqe;okUaUd:wItadb;xbe2wc:uRMPBc;KOxcK:bFOvTc;G6wU6e:hezEbd;uknmt:GkPrzb;U96pRd:FsR04;PqHfGe:im2cZe;heHB1:sFczq;Fmv9Nc:O1Tzwc;hK67qb:QWEO5b;BMxAGc:E5bFse;R4IIIb:QWfeKf;whEZac:F4AmNb;tH4IIe:Ymry6;lkq0A:JyBE3e;daB6be:lMxGPd;LEikZe:byfTOb,lsjVmc/m=attn,cdos,gwc,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2s
Source: global traffic	HTTP traffic detected: GET /images/shopping/deals/travel_and_luggage.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /images/shopping/deals/baby_and_kids.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /images/shopping/deals/pet_supplies.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /verify/ANsg4T4vl-KHXQW9-SjI6_C6JcNeQ_UWaBUCq0EAVt5LXbFkmK9EZOm5aErfLuF-wr54JPYS1yIpVGujBrT_cg_tyQ_CnW-qVzchUxGo5qgmK_AsvbO2 HTTP/1.1Host: id.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=rBAVcrpZxOElrOkaRV6lXfoJN1of3tlGgsWyRnIPZDDrPkW4C3CcMrjvBrYCfmLGMcdoDNx4BnlJdBqVVPkCp0qySLLW4niKaQDpsj3gxd4XxwYmYL3RCkV-tv5hC5-nKRjyEJR3JtnRQwG6y6Af8DpZ9mGNy_S1YFDkQB6Z4YuK4AB8ERVvOlc
Source: global traffic	HTTP traffic detected: GET /compressiontest/gzip.html HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /complete/search?q&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=2&hl=en&authuser=0&pq=shop%20deals&psi=xSpeZdzvEPyy5NoPhfSymAc.1700670154779&dpr=1&ofp=GNili-aT8dTX-AEYq6v4uKT5pbUGGJy7yeSa--vGyQEYhNjxudn_8qk4GLPEg_rl1d7Ocw&nolsbt=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw
Source: global traffic	HTTP traffic detected: GET /complete/search?q=shop%20deals&cp=0&client=desktop-gws-wiz-on-focus-serp&xssi=t&gs_pcrt=3&hl=en&authuser=0&pq=shop%20deals&psi=xSpeZdzvEPyy5NoPhfSymAc.1700670154779&dpr=1&ofp=EAEY2KWL5pPx1Nf4ARirq_i4pPmltQYYnLvJ5Jr768bJARiE2PG52f_yqTgYs8SD-uXV3s5zMrIBChsKGXNob3AgZGVhbHMgb24gZWxlY3Ryb25pY3MKEwoRc2hvcCBkZWFscyBvbmxpbmUKFAoSc2hvcCBkZWFscyBsYXB0b3BzChkKF3Nob3AgZGVhbHMgcmVmcmlnZXJhdG9yChEKD3Nob3AgZGVhbHMgbGVnbwoSChBzaG9wIGRlYWxzIHRpcmVzChMKEXNob3AgZGVhbHMgbmVhcmJ5Cg8KDXNob3AgZGVhbHMgdHYQRzJ1CigKJldoYXQgZGF5IGlzIEJsYWNrIEZyaWRheSAyMDIzIFdhbG1hcnQ_CiYKJFdoYXQgZGF5IGlzIEJsYWNrIEZyaWRheSBzYWxlcyAyMDIzPwoeChxXaWxsIEFtYXpvbiBkbyBCbGFjayBGcmlkYXk_EOQC HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/md=1/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=1/exm=SNUn3,attn,cEt90b,cdos,csi,d,dtl0hd,eHDfl,gwc,hsm,jsa,mb4ZUb,qddgKe,sTsDMc/excm=A9AtR,ABxRVc,AD6AIb,Adehte,B0xr7b,BH66lf,BVlhmd,CX5LId,D1J6He,DwnPgd,FljZ5,FmnE6b,FuQWyc,G4tpde,GLGZs,Ghqpae,H5Kvfd,JxE93,KbVV9d,KzZUob,M4w02c,MRb7nf,Mvtsf,Mxvwsd,Nly0kd,NsEUGe,ONYJsd,Oa7Qpb,Ok4XMd,Ollhtb,P4P2Yd,PX0cP,PoJj8d,PvSBGf,Q6cvgf,SJv1S,SLDaee,SMP3Ge,SfrWY,SiRWre,TO0csb,Trirbc,TurKxc,Tzd4Yc,U3Ovcc,UQpTU,UiPhkb,VZLyBe,WH3Khc,Wx0Z2d,WxJ6g,X6KoRc,XHo6qe,XbupY,Xk0c,XkocRe,Y2uByd,Yltq7c,YuNOCb,ZgKcee,ZrXR8b,Zudxcb,ZyUK2d,adn7N,ak946,bXyZdf,cKV22c,dI5Ii,eTv59e,erGeSe,f1YgBd,fNMhz,hU1IHe,hfJ9hb,hj5Zu,i5w0Yc,iAQA6,j0qO9b,jkRPje,kCkfUb,kOSi0d,oXRDzc,pPanAd,pTgt2d,pbYjsd,pqUxUc,qngJBf,rL2AR,ra3uhb,sU6eaf,tlA71,tzTB5,uUhTh,vJPFse,vbjdXc,vhpQNc,vymBNb,wKa2Bd,xB2dQd,y0l7mc,y25qZb,yChgtb,yuQBec,zjNhL,zoFt6e,zs9f9d/ed=1/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/ee=AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DULqB:RKfG5c;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;IBADCc:RYquRb;IoGlCf:b5lhvb;JXS8fb:Qj0suc;JsbNhc:Xd8iUd;KOxcK:bFOvTc;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe;Pjplud:EEDORb,PoEs9b;PqHfGe:im2cZe;Q1Ow7b:x5CSu;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;SLtqO:Kh1xYe;SMDL4c:fTfGO,pnvXVc;SNUn3:ZwDk9d,x8cHvb;ShpF6e:N0pvGc;TxfV6d:YORN0b;U96pRd:FsR04;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YV5bee:IvPZ6d;ZWEUA:afR4Cf;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bFZ6gf:RsDQqe;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:audvde;eHDfl:ofjVkb;eO3lse:nFClrf;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;io8t5d:sgY6Zb;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kY7VAf:d91TEb;kbAm9d:MkHyGd;lkq0A:JyBE3e;lzgfYb:PI40bd;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO,pnvXVc;oUlnpc:RagDlc;okUaUd:wItadb;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qGV2uc:HHi04c;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:mYbt1d,zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;uknmt:GkPrzb;uuQkY:u2V3ud;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:O1Gjze,TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;xbe2wc:uRMPBc;yGxLoc:FmAr0c
Source: global traffic	HTTP traffic detected: GET /complete/search?q=shop%20deals&cp=0&client=desktop-gws-wiz-on-focus-serp&xssi=t&gs_pcrt=3&hl=en&authuser=0&pq=shop%20deals&psi=xSpeZdzvEPyy5NoPhfSymAc.1700670154779&dpr=1&ofp=EAEY2KWL5pPx1Nf4ARirq_i4pPmltQYYnLvJ5Jr768bJARiE2PG52f_yqTgYs8SD-uXV3s5zMrIBChsKGXNob3AgZGVhbHMgb24gZWxlY3Ryb25pY3MKEwoRc2hvcCBkZWFscyBvbmxpbmUKFAoSc2hvcCBkZWFscyBsYXB0b3BzChkKF3Nob3AgZGVhbHMgcmVmcmlnZXJhdG9yChEKD3Nob3AgZGVhbHMgbGVnbwoSChBzaG9wIGRlYWxzIHRpcmVzChMKEXNob3AgZGVhbHMgbmVhcmJ5Cg8KDXNob3AgZGVhbHMgdHYQRzJ1CigKJldoYXQgZGF5IGlzIEJsYWNrIEZyaWRheSAyMDIzIFdhbG1hcnQ_CiYKJFdoYXQgZGF5IGlzIEJsYWNrIEZyaWRheSBzYWxlcyAyMDIzPwoeChxXaWxsIEFtYXpvbiBkbyBCbGFjayBGcmlkYXk_EOQC HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /client_204?atyp=i&biw=1280&bih=907&dpr=1&ei=xSpeZdzvEPyy5NoPhfSymAc&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /complete/search?q&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=2&hl=en&authuser=0&pq=shop%20deals&psi=xSpeZdzvEPyy5NoPhfSymAc.1700670154779&dpr=1&ofp=GNili-aT8dTX-AEYq6v4uKT5pbUGGJy7yeSa--vGyQEYhNjxudn_8qk4GLPEg_rl1d7Ocw&nolsbt=1 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/md=1/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /vi/WyL-v--M_BI/mqdefault.jpg?sqp=-oaymwEFCJQBEFM&rs=AMzJL3kxxj4wLr4MUw1312xJqtgxGYib6A HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/BGgisoPG7vw/mqdefault.jpg?sqp=-oaymwEFCJQBEFM&rs=AMzJL3ltyvOaBQdGhLfjXMZ6rOVXlWEjag HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=0/excm=A9AtR,ABxRVc,AD6AIb,Adehte,B0xr7b,BH66lf,BVlhmd,CX5LId,D1J6He,DwnPgd,FljZ5,FmnE6b,FuQWyc,G4tpde,GLGZs,Ghqpae,H5Kvfd,JxE93,KbVV9d,KzZUob,M4w02c,MRb7nf,Mvtsf,Mxvwsd,Nly0kd,NsEUGe,ONYJsd,Oa7Qpb,Ok4XMd,Ollhtb,P4P2Yd,PX0cP,PoJj8d,PvSBGf,Q6cvgf,SJv1S,SLDaee,SMP3Ge,SfrWY,SiRWre,TO0csb,Trirbc,TurKxc,Tzd4Yc,U3Ovcc,UQpTU,UiPhkb,VZLyBe,WH3Khc,Wx0Z2d,WxJ6g,X6KoRc,XHo6qe,XbupY,Xk0c,XkocRe,Y2uByd,Yltq7c,YuNOCb,ZgKcee,ZrXR8b,Zudxcb,ZyUK2d,adn7N,ak946,bXyZdf,cKV22c,dI5Ii,eTv59e,erGeSe,f1YgBd,fNMhz,hU1IHe,hfJ9hb,hj5Zu,i5w0Yc,iAQA6,j0qO9b,jkRPje,kCkfUb,kOSi0d,oXRDzc,pPanAd,pTgt2d,pbYjsd,pqUxUc,qngJBf,rL2AR,ra3uhb,sU6eaf,tlA71,tzTB5,uUhTh,vJPFse,vbjdXc,vhpQNc,vymBNb,wKa2Bd,xB2dQd,y0l7mc,y25qZb,yChgtb,yuQBec,zjNhL,zoFt6e,zs9f9d/ed=1/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/m=sb_wiz,aa,abd,sywb,sywe,sywf,sywd,sywi,sy281,async,sy1gy,bgd,sy2jv,sy2jw,foot,sy2av,sy5j7,kyn,sy2il,lli,mu,sf,sy231,sy232,sy5l0,sonic,sytg,syti,sytj,syth,sy26n,sy1c4,sy634,spch,tl,syzm,sy3v1,syqj,sy11l,sy11m,sy11n,sy6cd,sy6ce,EkevXb,syqd,L1AAkb,syqe,fiAufb,sy11x,SZXsif,syxr,syxv,syxu,sy239,sy2nj,sy2nk,sy2ni,sy35k,sy64n,sYEX8b,sy4x1,qtz6lf,sy4x5,k8v0pe,syr1,sy13q,sy196,sy192,sy193,sy194,sy195,sy191,sy13r,sy198,sy197,sy199,sy19a,sy19f,sy19i,sy19j,sy19k,sy19l,sy19e,sy19d,sy19m,sy19n,NO84gd,E9M6Uc,Zilivc,sy1a7,sy1hf,sy1he,sy1hd,sy1k9,sy1ke,sy1kr,sy1kw,b5lhvb,IoGlCf,sy18l,sy18m,C8HsP,sy19o,sy19p,gOTY1,g0Ekse,rKbWof,ARtdse,tE6Rzd,AjRVIe,kpAr,phecbc,q28gvc,eTVOC,MafjZe,SQAZFd,OjtwQe,XTmxwe,YlMcGe,bIMMof,FjjTod,TnJGKb,SnmExf,ESo8je,Pq506,O19q8,nMfLA,bplExb,UMk45c,tDA9G,UX8qee,tW711b,R6UkWb,xMHx5e,QzraZb,I9JIjc,nzu4Ud,gGYzg,jtFQAf,FjvQsb,RcBNJ,uDw4Nb,rEAvrc,z2eFcc,GQxACe,vjBnvc,g1fOXc,syta,sy254,sy1ad,sy1ae,sy255,sy259,sy13p,syzc,sy1ep,sy152,sy15m,sy1mj,sy1mi,sy1ms,sy1m9,sy1mt,sy1mu,sy27e,sy27b,sy27c,sy27a,sy283,sy27g,sy28m,sy28n,sy28o,sy28r,sy28p,sy27f,syb0,syb4,syb5,syas,syat,sy13l,sy155,sy14g,sy14a,sy14r,sy14s,sy15b,sy15c,sy15d,sy1mk,sy1n2,sy1xa,sy1xd,sy1xp,sy27j,sy27k,sy27w,sy27i,sy27l,sy27m,sy27q,sy27p,sy27o,sy14c,sy13g,sy27s,sy27r,sy27t,sy27v,syax,syaw,sy27u,sy27x,sy286,sy288,sy287,sy1n8,sy28e,sy28f,sy28h,sy28g,sy1gr,sy1gs,sy289,sy28a,sy28c,sy28d,sy28b,sy27n,sy1h5,sy298,sy27z,sy280,sy13h,syzb,syze,sy13i,sy13k,sy13m,sy13f,sy13n,sy13j,sy13o,sy1ac,sy28z,sy290,sy291,sy28y,sy296,sy297,sy28j,sy28i,sy28t,sy28x,sy28w,sy1kc,sy1kb,sy28k,sy28l,sy28q,sy29a,sy29b,sy1ag,sy1a5,sy1bh,sy285,sy284,sy28u,sy28s,sy28v,sy292,sy293,sy295,sy299,sy294,sy29c,sy282,sy29d,sy29e,sy29f,sy5kw,sy5yc,USgF8d,sy22r,sy257,sy29g,sy5ng,A4Uref,sy5v6,Mf3zEb,sy5lf,sy5ne,sy5t3,sy5t4,sy60p,KH32Sd,sy13s,sy256,sy258,sy32x,sy5n4,sy5nh,sy5ni,uQjlvd,syj7,syje,syjf,syl1,syl2,syne,synk,synt,syoh,syp2,syp5,syzj,sy1d9,sy1da,sy1db,sy1dc,sy1dd,sy1di,sy1dj,syzf,s
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=0/excm=A9AtR,ABxRVc,AD6AIb,Adehte,B0xr7b,BH66lf,BVlhmd,CX5LId,D1J6He,DwnPgd,FljZ5,FmnE6b,FuQWyc,G4tpde,GLGZs,Ghqpae,H5Kvfd,JxE93,KbVV9d,KzZUob,M4w02c,MRb7nf,Mvtsf,Mxvwsd,Nly0kd,NsEUGe,ONYJsd,Oa7Qpb,Ok4XMd,Ollhtb,P4P2Yd,PX0cP,PoJj8d,PvSBGf,Q6cvgf,SJv1S,SLDaee,SMP3Ge,SfrWY,SiRWre,TO0csb,Trirbc,TurKxc,Tzd4Yc,U3Ovcc,UQpTU,UiPhkb,VZLyBe,WH3Khc,Wx0Z2d,WxJ6g,X6KoRc,XHo6qe,XbupY,Xk0c,XkocRe,Y2uByd,Yltq7c,YuNOCb,ZgKcee,ZrXR8b,Zudxcb,ZyUK2d,adn7N,ak946,bXyZdf,cKV22c,dI5Ii,eTv59e,erGeSe,f1YgBd,fNMhz,hU1IHe,hfJ9hb,hj5Zu,i5w0Yc,iAQA6,j0qO9b,jkRPje,kCkfUb,kOSi0d,oXRDzc,pPanAd,pTgt2d,pbYjsd,pqUxUc,qngJBf,rL2AR,ra3uhb,sU6eaf,tlA71,tzTB5,uUhTh,vJPFse,vbjdXc,vhpQNc,vymBNb,wKa2Bd,xB2dQd,y0l7mc,y25qZb,yChgtb,yuQBec,zjNhL,zoFt6e,zs9f9d/ed=1/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/m=syh3,syh4,syh5,syh6,syh7,syh8,syh9,syha,syhb,syhc,syhd,syhe,syhf,syhg,syhh,sy1d8,sy1d2,sy1d1,sy1ds,syi7,syz6,sy1e3,sy1fi,sy1kd,sy1kh,sy1ks,sy1kt,sy1ns,sy1ww,sy25b,sy26o,sy26q,sy2m0,syom,syoo,syop,syoq,sy5ao,sy5as,sy1np,sy5aq,sy5at,sy5pm,sy5pn,sy5po,sy5pp,sy5pq,sy5pr,sy2fn,sy5ps,sy5pt,sy5pu,sy5pv,sy5pw,sy2fl,sy5px,sy5py,sy5pz,sy5q0,sy5q1,sy2fr,sy5q2,sy5q3,sy5q4,sy5q5,sy5qc,sy5qd,sy5qe,sy5qf,sy5qg,sy5qh,sy5qi,sy5qj,sy5qk,sy5sw,sy5sz,sy5tc,sy5t9,sy5ti,sy5tj,sy5tf,sy5th,sy5tg,sy5tk,sy5tl,sy5tq,sy5uj,sy5s5,sy5s6,sy5s7,sy2m6,sy2m7,sy2mo,sy2mq,sy594,sy5u6,sy5uv,sy5uu,sy5ve,sy5vs,sy5vu,sy5vv,sy5xy,sy5xz,sy5y0,sy5ya,sy5yd,syo5,syod,syp1,sy5au,sy5lm,sy5lo,sy5lp,sy5lq,sy5lr,sy5ls,sy5lt,sy5lu,sy5lv,sy5lw,sy5lx,sy5ly,sy5lz,sy5m0,sy5m1,sy5m2,sy5m3,sy5m4,sy5m5,sy5m6,sy5m7,sy5m8,sy5mp,sy5mq,sy5mt,sy5mv,sy5mw,sy5mx,sy5my,sy5mz,sy5n0,sy5n1,sy5n2,sy5n3,sy5n7,sy5nc,sy5on,sy5oo,sy5op,sy5oq,sy5os,sy5ot,sy5ou,sy5ov,sy5ow,sy5p1,sy5p2,sy5p3,sy5p4,sy5p8,sy5p9,sy5tp,sy5tw,sy5tx,sy5ms,sy5ts,sy5uh,sy5mr,sy5up,sy5uw,sy5ln,sy5ur,sy5ul,sy5yf,sy5yg,sy5ye,sy2dl,sy5ty,sy5yh,sy5yi,sy5yk,sy5yj,sy5yl,sy5yn,sy5ym,sy5yo,sy5yq,sy5yr,sy5ys,sy5yt,sy5yw,sy5yu,sy5yv,sy5yx,sy5yp,sy5z1,sy5z2,sylb,sylf,sy5z0,sy5z3,sy5z5,sy5z6,sy5z7,sy5z4,sy5z9,sy5z8,sy5za,sy5yz,sy5zc,sy5zb,sy5yy,sy5ze,sy5yb,syjr,syk9,sy1df,syl4,symc,syme,symg,sy1dg,sy1dh,syjw,sykk,sy1dk,syk8,sy1g7,syj3,sy1fk,sy26m,sy1cg,sy5u9,sy5u8,syjs,syk2,sy5zl,sy5zk,sy5zh,sy5zn,sy5zm,sy60a,sy60b,sy60o,syka,sykd,syj9,synb,sy13c,sy13t,sy13u,sy1cm,syjq,sykb,sy1ct,sy1f0,sy223,syiq,syis,sy26l,sy2me,sy5ax,sy5io,sy5mb,sy5mc,sy5md,sy5me,sy5mf,sy5mg,sy5mh,sy5mi,sy5mj,sy5mk,sy5ml,sy5mm,sy5mn,sy5mo,sy5mu,sy5oy,sy5p0,sy5p5,sy5p6,sy5p7,sy5pa,sy5pb,sy5pc,sy5pd,sy5pe,sy5pf,sy5pg,sy5ph,sy5pi,sy5pj,sy5pk,sy5pl,sy5or,sy5oz,sy5us,sy60r,sy60s,sy60t,sy60q,sy5ol,sy5st,sy5sv,sy5u1,sy5u2,syld,syk6,symx,sy1cu,sy26p,sy5ox,sy5q6,sy5q7,sy5q8,sy5q9,sy5qa,sy5qb,sy5r3,sy5r4,sy5r7,sy5r8,sy5r9,sy5ra,sy5rc,sy5re,sy5rq,sy5rr,sy5rs,sy
Source: global traffic	HTTP traffic detected: GET /vi/BGgisoPG7vw/mqdefault.jpg?sqp=-oaymwEFCJQBEFM&rs=AMzJL3ltyvOaBQdGhLfjXMZ6rOVXlWEjag HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/WyL-v--M_BI/mqdefault.jpg?sqp=-oaymwEFCJQBEFM&rs=AMzJL3kxxj4wLr4MUw1312xJqtgxGYib6A HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/bgasy?ei=xSpeZdzvEPyy5NoPhfSymAc&opi=89978449&yv=3&cs=0&async=_fmt:jspb HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /async/bgasy?ei=xSpeZdzvEPyy5NoPhfSymAc&opi=89978449&yv=3&cs=0&async=_fmt:jspb HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0; DV=Q3FLCIqvnZAgYHfm0PDGnWUnTnF9v5jkqNWfmvg5CwUAAAA
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=0/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/m=uKlGbf,sy17q,sy2kj,DpX64d,sy2kk,EufiNb,sy4qw,vTw9Fc,sy1ca,sy1cb,p2I2Je,syum,sy136,Mbif2,syjt,syk7,sykn,sy10i,sy17c,sy17t,sy186,sy187,sy185,sy18i,sy18j,sy1ah,sy1as,sy1at,sy1ba,sy1c1,sy1cc,sy1cd,sy1ce,sy1cf,sy1ch,sy1cj,sy1ci,sy1ck,sy1cl,sy1dz,sy1e0,sy1f9,sy1fe,sy1ff,syj4,syjk,symy,symz,syn0,sy176,sy175,sy178,sy1fm,sy1fn,sy1fo,sy1fg,sy1fj,sy1fl,sy1be,sy1g4,sy1g5,sy1g6,sy1g8,sy1gb,sy1gc,sy1gd,exgaYe,sy33b,wuEeed,sy331,j6kZje,sy25r,sy4tu,sy5lk,sy5ll,BkkW1b,sy330,wRnMub,syyr,syyu,syyw,QE1bwd,sy10j,gSZvdb,sy4wt,sy5a2,SC7lYd,syte,syx2,WlNQGd,sy2ko,sy35l,nabPbb,syx6,syx9,syxa,DPreE,sy1il,sy34g,bpec7b,syeu,BYwJlf,syqk,syui,syuk,VEbNoe,sy2ky,sy2kz,b8OZff,sy2l9,sy2la,qcH9Lc,sypm,sy2lc,YFicMc?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0; DV=Q3FLCIqvnZAgYHfm0PDGnWUnTnF9v5jkqNWfmvg5CwUAAAA
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=0/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/m=sy2kt,sy35j,w4UyN,sywv,syww,EbPKJf,sy3pg,sy68o,J9Q59e,sy3ph,a6Sgfb?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0; DV=Q3FLCIqvnZAgYHfm0PDGnWUnTnF9v5jkqNWfmvg5CwUAAAA
Source: global traffic	HTTP traffic detected: GET /async/vpkg?ei=xSpeZdzvEPyy5NoPhfSymAc&opi=89978449&yv=3&cs=0&async=_ck:xjs.s.qnyE1sBG7t8.L.W.O,_k:xjs.s.en_US.r7Ut2Mhd2yU.O,_am:ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA,_csss:ACT90oGxb2yBgv3mHTYRZ1xum4XELOUH9A,_fmt:prog,_id:QPwIld HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0; DV=Q3FLCIqvnZAgYHfm0PDGnWUnTnF9v5jkqNWfmvg5CwUAAAA
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=0/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/m=sywz,CnSW2d,sy12i,sy12j,sy12k,sy12l,sy12n,sy12o,sy34r,sy632,VD4Qme,sy1hj,sy1hl,sy1hm,sy1hn,NVlnE,sy1hk,Dq2Yjb,sy1gz,sy1h0,qmdEUe,sy1ho,sy1hp,UqGwg,sy46w,ND0kmf,pjDTFb,sy3ob,sy648,sy68h,KgxeNb,sy3o7,khkNpe,sy2ks,EfPGub?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0; DV=Q3FLCIqvnZAgYHfm0PDGnWUnTnF9v5jkqNWfmvg5CwUAAAA
Source: global traffic	HTTP traffic detected: GET /async/vpkg?ei=xSpeZdzvEPyy5NoPhfSymAc&opi=89978449&yv=3&cs=0&async=_ck:xjs.s.qnyE1sBG7t8.L.W.O,_k:xjs.s.en_US.r7Ut2Mhd2yU.O,_am:ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA,_csss:ACT90oGxb2yBgv3mHTYRZ1xum4XELOUH9A,_fmt:prog,_id:QPwIld HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0; DV=Q3FLCIqvnZAgYHfm0PDGnWUnTnF9v5jkqNWfmvg5CwUAAAA
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=0/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/m=kMFpHd,sy8c,bm51tf?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0; DV=Q3FLCIqvnZAgYHfm0PDGnWUnTnF9v5jkqNWfmvg5CwUAAAA
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=0/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/m=sy134,sy135,dt4g2b?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0; DV=Q3FLCIqvnZAgYHfm0PDGnWUnTnF9v5jkqNWfmvg5CwUAAAA
Source: global traffic	HTTP traffic detected: GET /iframe_api?version=3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/63e90c30/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=kNxmXK_kfSM; VISITOR_INFO1_LIVE=Izz4m-7iy8k
Source: global traffic	HTTP traffic detected: GET /embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/search?q=shop+deals&source=smp.23q4SDealsHPP.22&stick=H4sIAAAAAAAA_7t17sBZTiYOBgBZcuXYCAAAAAAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=kNxmXK_kfSM; VISITOR_INFO1_LIVE=Izz4m-7iy8k
Source: global traffic	HTTP traffic detected: GET /s/player/63e90c30/www-player.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=kNxmXK_kfSM; VISITOR_INFO1_LIVE=Izz4m-7iy8k
Source: global traffic	HTTP traffic detected: GET /s/player/63e90c30/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=kNxmXK_kfSM; VISITOR_INFO1_LIVE=Izz4m-7iy8k
Source: global traffic	HTTP traffic detected: GET /s/player/63e90c30/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=kNxmXK_kfSM; VISITOR_INFO1_LIVE=Izz4m-7iy8k
Source: global traffic	HTTP traffic detected: GET /s/player/63e90c30/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=kNxmXK_kfSM; VISITOR_INFO1_LIVE=Izz4m-7iy8k
Source: global traffic	HTTP traffic detected: GET /s/player/63e90c30/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=kNxmXK_kfSM; VISITOR_INFO1_LIVE=Izz4m-7iy8k
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsid/google/ui HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw
Source: global traffic	HTTP traffic detected: GET /gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=xSpeZdzvEPyy5NoPhfSymAc&zx=1700670175855&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=Ackid1ROWSOVV-95JTzaV-sr2_3o6I7YwPnC3w5wfNaVNMt-MV7uWE9qbgA; CONSENT=PENDING+914; OGPC=19039541-1:; 1P_JAR=2023-11-22-16; NID=511=RB55oeWm4fvLZwJBtV-bdgATALIrdUHRg1VUc_i2bOiHXuIP_jxK8ZVq8mLyTxfWSu2VwhG_wXMPT_bUv1fuHm3tLL_Y4zRfHDXGHC7C3FKaqfhOzsf44NQ2VlMjdlDoxN0TFWnIAQT_iy8m-8h_FuDcN_JVaoyvDbnAYajoeRaKlo1f18b-SrX20E-FVJlkKirUzw; GZ=Z=0; DV=Q3FLCIqvnZAgYHfm0PDGnWUnTnF9v5jkqNWfmvg5CwUAAAA
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=kNxmXK_kfSM; VISITOR_INFO1_LIVE=Izz4m-7iy8k

Source: chromecache_189.2.dr	String found in binary or memory: !1:h;this.To=PJ(QJ(d,pPa),d,h,"Trusted Ad Domain URL");this.hd=mC(!1,a.privembed);this.protocol=0===this.Ef.indexOf("http:")?"http":"https";this.Ka=Mza((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)\|\|"")\|\|Mza(this.Ef)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";"adunit"===h?d=this.D?"embedded":"detailpage":"embedded"===h\|\|this.K?d=nC(d,h,qPa):h&&(d="embedded");this.Va=d;Jsa();h=null;d=b?b.playerStyle:a.ps;f=g.Cb(rPa,d);!d\|\|f&&!this.K\|\|(h=d);this.playerStyle=h;this.Aa=(this.N= equals www.youtube.com (Youtube)
Source: chromecache_189.2.dr	String found in binary or memory: (g.oo(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.oo(c,"www.youtube.com"),d=c.toString()):(c=Vza(d),RJ(c)&&(d=c));c=new g.OP(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_237.2.dr	String found in binary or memory: </span> TODAY.com</span></span><div class="OwbDmd"><span>1 hour ago</span></div></div></div></div></a></div></div></div></div><div jsname="TFTr6" class="RzdJxc"><div><div jsname="pKB8Bc" class="X4T0U" data-hveid="CB4QAA"><div><div jscontroller="rTuANe" data-ar="1.7778" data-cid="38eb3b02" data-eiv="1" data-esrvl="1" data-preloadapi="1" data-surl="https://www.youtube.com/watch?v=BGgisoPG7vw" data-tpvid="" data-vid="BGgisoPG7vw" data-vurl="" jsaction="h5M12e;rcuQ6b:npT2md;"><div><div jscontroller="yfZcPd" jsshadow="" jsaction="rcuQ6b:npT2md"><div jsname="tX7jT" class="KYaZsb"><a class="xMqpbd NFjGBc" aria-label="How to save big on holiday shopping deals by News 19 WLTX on YouTube. Play on Google. 4 minutes, 44 seconds. 1 day ago" href="#" data-vll="" role="button" tabindex="0" data-ved="2ahUKEwic5oKBgtiCAxV8GVkFHQW6DHMQ-JQHegQIHhAB"><div class="AZJdrc t7VAxe zGXzeb"><div jsname="zccVWc" class="uhHOwf BYbUcd" style="height:83px;width:148px"><img alt="" id="dimg_49" src="data:image/gif;base64,R0lGODlhAQABAIAAAP///////yH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" data-deferred="1"></div><div jsname="DwcXhb" class="LIna9b" aria-hidden="true"><div class="VYkpsb" jscontroller="Fy1Pv" data-stfc="1" data-url="https://encrypted-vtbn0.gstatic.com/video?q=tbn:ANd9GcQbbRl65HiK_TDOAnbWfFiovB0ho0hWqcjdIA" id="_xSpeZdzvEPyy5NoPhfSymAc_30" jsaction="rtcVre:NziyQe;hAjFqb:QKiGd;rcuQ6b:npT2md"></div></div><div class="kSFuOd rkqHyd" aria-hidden="true"><div class="Ylm8Fc YmeD8e"><span class="hDVnsf z1asCe" aria-hidden="true" style="height:35px;line-height:35px;width:35px"><svg focusable="false" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm-2 14.5v-9l6 4.5-6 4.5z"></path></svg></span></div><div class="c8rnLc flgn0c zCaigb" aria-label="4 minutes, 44 seconds" role="presentation"><span class="JIv15d">4:44</span></div><div class="Vtx8Xc jrwKTb ovklQ"><span style="height:14px;line-height:14px;width:14px" class="z1asCe"><svg focusable="false" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 5.83L15.17 9l1.41-1.41L12 3 7.41 7.59 8.83 9 12 5.83zm0 12.34L8.83 15l-1.41 1.41L12 21l4.59-4.59L15.17 15 12 18.17z"></path></svg></span></div></div></div></a><a class="xMqpbd" aria-label="How to save big on holiday shopping deals by News 19 WLTX. Play on YouTube. 4 minutes, 44 seconds. 1 day ago" href="https://www.youtube.com/watch?v=BGgisoPG7vw" data-ved="2ahUKEwic5oKBgtiCAxV8GVkFHQW6DHMQwqsBegQIHhAG" ping="/url?sa=t&source=web&rct=j&opi=89978449&url=https://www.youtube.com/watch%3Fv%3DBGgisoPG7vw&ved=2ahUKEwic5oKBgtiCAxV8GVkFHQW6DHMQwqsBegQIHhAG"><div class="V5XKdd" aria-level="3" role="heading"><div class="ZxS7Db"><div class="y05Tsc tNxQIb ynAwRc OSrXXb"><span class="cHaqb">How to save big on holiday shopping deals</span></div></div><div class="ZtihLe"><span class="Sg4azc"><cite>YouTube</cite><span><span aria-hidden="true"> equals www.youtube.com (Youtube)
Source: chromecache_224.2.dr	String found in binary or memory: H7d=function(a,b){var c=_.Dl("IFRAME");c.setAttribute("allowfullscreen",a?"1":"0");c.setAttribute("allow",a?"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope":"autoplay; clipboard-write; encrypted-media");c.setAttribute("frameborder","0");c.setAttribute("width","100%");c.setAttribute("height","100%");c.setAttribute("referrerpolicy","unsafe-url");c.setAttribute("style",b);try{var d=_.rwa(_.Sk("https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=%{enable_full_screen}"), equals www.youtube.com (Youtube)
Source: chromecache_161.2.dr	String found in binary or memory: _.k.RZ=function(a,b){this.trigger(_.yx,{button:""});_.qq(a,{target:b?"_blank":"_self"});c_d(this,"fwibVc")};_.k.mEc=function(){var a={url:this.url};this.oa&&this.oa.length&&(a.text=this.oa);a=_.d_d("https://www.twitter.com/share",a);this.RZ(a,!0)};_.k.vEc=function(){var a=_.d_d("https://api.whatsapp.com/send",{text:(this.oa&&this.oa.length?this.oa+" ":"")+this.url});this.RZ(a,!0)};_.k.ACc=function(){var a=_.d_d("https://www.facebook.com/sharer/sharer.php",{u:this.url});this.RZ(a,!0)}; equals www.facebook.com (Facebook)
Source: chromecache_161.2.dr	String found in binary or memory: _.k.RZ=function(a,b){this.trigger(_.yx,{button:""});_.qq(a,{target:b?"_blank":"_self"});c_d(this,"fwibVc")};_.k.mEc=function(){var a={url:this.url};this.oa&&this.oa.length&&(a.text=this.oa);a=_.d_d("https://www.twitter.com/share",a);this.RZ(a,!0)};_.k.vEc=function(){var a=_.d_d("https://api.whatsapp.com/send",{text:(this.oa&&this.oa.length?this.oa+" ":"")+this.url});this.RZ(a,!0)};_.k.ACc=function(){var a=_.d_d("https://www.facebook.com/sharer/sharer.php",{u:this.url});this.RZ(a,!0)}; equals www.twitter.com (Twitter)
Source: chromecache_189.2.dr	String found in binary or memory: a))):this.Yd(g.RV(a.errorMessage)):this.Yd(TV(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Ml(c,{hl:a})),this.Yd(TV(this,"GENERIC_WITH_LINK_AND_CPN",c,!0)),d.Fc&&!d.D&&$Va(this,function(e){if(g.EU(e,b.api,!kS(b.api.U()))){e={as3:!1,html5:!0,player:!0,cpn:b.api.getVideoData().clientPlaybackNonce};var f=b.api;f.Qa("onFeedbackArticleRequest",{articleId:3037019,helpContext:"player_error", equals www.youtube.com (Youtube)
Source: chromecache_189.2.dr	String found in binary or memory: a.severity,e,CK(a.details),f)}else this.qa.ra("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.oe(a.errorCode,a.details),d&&"manifest.net.connect"===a.errorCode&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.rD)(),rU(a,"manifest",function(h){b.G=!0;b.va("pathprobe",h)},function(h){b.oe(h.errorCode,h.details)}))}}; equals www.youtube.com (Youtube)
Source: chromecache_160.2.dr	String found in binary or memory: function Gr(a,b,c){this.o=this.g=this.h=null;this.i=0;this.G=!1;this.u=[];this.l=null;this.O={};if(!a)throw Error("YouTube player element ID required.");this.id=Oa(this);this.K=c;c=document;if(a="string"===typeof a?c.getElementById(a):a)if(c="iframe"===a.tagName.toLowerCase(),b.host\|\|(b.host=c?bc(a.src):"https://www.youtube.com"),this.h=new Ar(b),c\|\|(b=Hr(this,a),this.o=a,(c=a.parentNode)&&c.replaceChild(b,a),a=b),this.g=a,this.g.id\|\|(this.g.id="widget"+Oa(this.g)),ur[this.g.id]=this,window.postMessage){this.l= equals www.youtube.com (Youtube)
Source: chromecache_189.2.dr	String found in binary or memory: g.Sa("Goog_AdSense_Lidar_getUrlSignalsList",Tfb);var HKa={Q0a:0,N0a:1,K0a:2,L0a:3,M0a:4,P0a:5,O0a:6};var joa=(new Date).getTime();var Qka="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Rka=/\bocr\b/;var Tka=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;"undefined"!==typeof TextDecoder&&new TextDecoder;var Ufb="undefined"!==typeof TextEncoder?new TextEncoder:null,Hra=Ufb?function(a){return Ufb.encode(a)}:function(a){a=g.qg(a); equals www.youtube.com (Youtube)
Source: chromecache_189.2.dr	String found in binary or memory: g.hS=function(a){a=vPa(a.Ka);return"www.youtube-nocookie.com"===a?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_189.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=g.iS(this);e="www.youtube.com"===c;!f&&d&&e?f="https://youtu.be/"+a:g.bS(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),GD&&(a=Nna())&&(b.ebc=a));return g.Ml(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_189.2.dr	String found in binary or memory: g.tS=function(a){var b=g.iS(a);HPa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_189.2.dr	String found in binary or memory: rOa=function(a,b){if(!a.j["0"]){var c=new MK("0","fakesb",{video:new JK(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new SQ(new g.OP("http://www.youtube.com/videoplayback"),c,"fake"):new cR(new g.OP("http://www.youtube.com/videoplayback"),c,new BQ(0,0),new BQ(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_189.2.dr	String found in binary or memory: this.Lo=!this.hd&&Math.random()<g.pJ(this.experiments,"web_player_api_logging_fraction");this.gb=!this.hd;this.enabledEngageTypes=new Set;this.deviceIsAudioOnly=!(null==b\|\|!b.deviceIsAudioOnly);this.fd=oC(this.fd,a.ismb);this.So?(r=a.vss_host\|\|"s.youtube.com","s.youtube.com"===r&&(r=vPa(this.Ka)\|\|"www.youtube.com")):r="video.google.com";this.Rm=r;wPa(this,a,!0);this.Na=new DR;g.L(this,this.Na);q=b?b.innertubeApiKey:pC("",a.innertube_api_key);p=b?b.innertubeApiVersion:pC("",a.innertube_api_version); equals www.youtube.com (Youtube)
Source: chromecache_189.2.dr	String found in binary or memory: this.W.oa&&(a.authuser=this.W.oa);this.W.pageId&&(a.pageid=this.W.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.oc()))?e[1]:"";"ATV"===e&&(a.cdt=e);this.G=a;this.G.session_id=d;this.ma=!0;"widevine"===this.B.flavor&&(this.G.hdr="1");"playready"===this.B.flavor&&(b=Number(BR(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&0<=b&&(this.G.mfpe=""+b),this.ma=!1);b="";g.uR(this.B)?tR(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_224.2.dr	String found in binary or memory: var C7d,D7d,B7d;_.E7d=function(){B7d\|\|(B7d=new _.$l(function(a,b){_.Rra(_.ba,"onYouTubeIframeAPIReady",function(){C7d();a(!0)});_.AE(D7d,{timeout:0}).then(null,function(c){C7d();b(c);B7d=null})}));return new _.$l(function(a,b){B7d.then(a,b)})};C7d=function(){delete _.ba.onYouTubeIframeAPIReady};D7d=_.Uk(_.Sk("//www.youtube.com/iframe_api?version=3"));B7d=null; equals www.youtube.com (Youtube)
Source: chromecache_189.2.dr	String found in binary or memory: var O3={};var Xbb=/[&\?]action_proxy=1/,Wbb=/[&\?]token=([\w-])/,Ybb=/[&\?]video_id=([\w-])/,Zbb=/[&\?]index=([\d-])/,$bb=/[&\?]m_pos_ms=([\d-])/,ccb=/[&\?]vvt=([\w-]*)/,Qbb="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),acb="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),Tbb={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_198.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/63e90c30\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)
Source: chromecache_224.2.dr	String found in binary or memory: {enable_full_screen:a?"1":"0"});_.Dd(c,d)}catch(e){a=_.Gc(J7d),_.Dd(c,a)}return c};J7d=_.rg(["https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=0"]);_.K7d=function(a){_.Kn.call(this,a.Ka);this.ka=new Map};_.E(_.K7d,_.Kn);_.K7d.qb=_.Kn.qb;_.K7d.Fa=_.Kn.Fa;_.L7d=function(a,b,c,d,e,f,g){c=I7d(b,c,d,void 0===e?!0:e,void 0===f?!1:f,g);a.ka.set(b,c);return c}; equals www.youtube.com (Youtube)

Source: chromecache_237.2.dr	String found in binary or memory: http://schema.org/SearchResultsPage
Source: chromecache_182.2.dr	String found in binary or memory: http://schema.org/WebPage
Source: chromecache_237.2.dr	String found in binary or memory: http://t0.gstatic.com/images?q
Source: chromecache_234.2.dr, chromecache_160.2.dr, chromecache_189.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_252.2.dr, chromecache_257.2.dr, chromecache_261.2.dr, chromecache_233.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_189.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_189.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_189.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_189.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_189.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_166.2.dr	String found in binary or memory: https://accounts.google.com/AccountChooser
Source: chromecache_166.2.dr	String found in binary or memory: https://accounts.google.com/ServiceLogin
Source: chromecache_266.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_266.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_189.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_253.2.dr	String found in binary or memory: https://angular.io/license
Source: chromecache_161.2.dr	String found in binary or memory: https://api.whatsapp.com/send
Source: chromecache_252.2.dr, chromecache_257.2.dr, chromecache_182.2.dr, chromecache_266.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_130.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_266.2.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_144.2.dr	String found in binary or memory: https://content-push.googleapis.com/upload/
Source: chromecache_266.2.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_266.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_160.2.dr	String found in binary or memory: https://developers.google.com/youtube/iframe_api_reference#Events
Source: chromecache_189.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_266.2.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_137.2.dr, chromecache_261.2.dr	String found in binary or memory: https://embeddedassistant-webchannel.googleapis.com/google.assistant.embedded.v1.EmbeddedAssistant/A
Source: chromecache_161.2.dr	String found in binary or memory: https://encrypted-tbn2.gstatic.com/faviconV2?url=https://
Source: chromecache_237.2.dr	String found in binary or memory: https://encrypted-vtbn0.gstatic.com/video?q=tbn:ANd9GcQbbRl65HiK_TDOAnbWfFiovB0ho0hWqcjdIA
Source: chromecache_252.2.dr, chromecache_257.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_252.2.dr, chromecache_257.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_252.2.dr, chromecache_257.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_252.2.dr, chromecache_257.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_144.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/swipe/v12/gm_grey-36dp/2x/gm_swipe_gm_grey_36dp.pn
Source: chromecache_144.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/personalized_recommendations/v1/192px.svg
Source: chromecache_144.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/short-term/release/googlesymbols/
Source: chromecache_234.2.dr, chromecache_160.2.dr, chromecache_189.2.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_144.2.dr	String found in binary or memory: https://goto.google.com/oshop_gws_buffer_size
Source: chromecache_189.2.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_189.2.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_221.2.dr, chromecache_193.2.dr	String found in binary or memory: https://lens.google.com
Source: chromecache_144.2.dr, chromecache_137.2.dr	String found in binary or memory: https://lens.google.com/gen204
Source: chromecache_158.2.dr	String found in binary or memory: https://myactivity.google.com/privacyadvisor/search
Source: chromecache_128.2.dr	String found in binary or memory: https://ogs.google.com/
Source: chromecache_182.2.dr	String found in binary or memory: https://ogs.google.com/widget/app/so?awwd=1
Source: chromecache_128.2.dr	String found in binary or memory: https://ogs.google.com/widget/callout
Source: chromecache_182.2.dr	String found in binary or memory: https://ogs.google.com/widget/callout?prid=19039542
Source: chromecache_231.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_266.2.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_266.2.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_189.2.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_189.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_189.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_189.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_237.2.dr	String found in binary or memory: https://slickdeals.net/computer-deals/
Source: chromecache_237.2.dr	String found in binary or memory: https://slickdeals.net/computer-deals/&ved=2ahUKEwic5oKBgtiCAxV8GVkFHQW6DHMQ0gIoAXoECCcQAg
Source: chromecache_237.2.dr	String found in binary or memory: https://slickdeals.net/deals/tech/
Source: chromecache_237.2.dr	String found in binary or memory: https://slickdeals.net/deals/tech/&ved=2ahUKEwic5oKBgtiCAxV8GVkFHQW6DHMQ0gIoA3oECCcQBA
Source: chromecache_237.2.dr	String found in binary or memory: https://slickdeals.net/forums/forumdisplay.php%3Ff%3D9&ved=2ahUKEwic5oKBgtiCAxV8GVkFHQW6DHMQ0gIo
Source: chromecache_237.2.dr	String found in binary or memory: https://slickdeals.net/forums/forumdisplay.php?f=9
Source: chromecache_237.2.dr	String found in binary or memory: https://slickdeals.net/video-game-deals/
Source: chromecache_237.2.dr	String found in binary or memory: https://slickdeals.net/video-game-deals/&ved=2ahUKEwic5oKBgtiCAxV8GVkFHQW6DHMQ0gIoAnoECCcQAw
Source: chromecache_128.2.dr	String found in binary or memory: https://ssl.gstatic.com
Source: chromecache_158.2.dr	String found in binary or memory: https://ssl.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_180x72dp.png
Source: chromecache_158.2.dr	String found in binary or memory: https://ssl.gstatic.com/images/branding/googlelogo/1x/googlelogo_light_color_212x72dp.png
Source: chromecache_271.2.dr	String found in binary or memory: https://ssl.gstatic.com/images/icons/material/system/1x/done_black_16dp.png)
Source: chromecache_158.2.dr	String found in binary or memory: https://ssl.gstatic.com/privacyplus/hero_dark_opt.png
Source: chromecache_158.2.dr	String found in binary or memory: https://ssl.gstatic.com/privacyplus/hero_light_opt.png
Source: chromecache_158.2.dr	String found in binary or memory: https://ssl.gstatic.com/privacyplus/spot01_dark_opt.png
Source: chromecache_158.2.dr	String found in binary or memory: https://ssl.gstatic.com/privacyplus/spot01_light_opt.png
Source: chromecache_158.2.dr	String found in binary or memory: https://ssl.gstatic.com/privacyplus/spot02_dark_opt.png
Source: chromecache_158.2.dr	String found in binary or memory: https://ssl.gstatic.com/privacyplus/spot02_light_opt.png
Source: chromecache_158.2.dr	String found in binary or memory: https://ssl.gstatic.com/privacyplus/spot03_dark_opt.png
Source: chromecache_158.2.dr	String found in binary or memory: https://ssl.gstatic.com/privacyplus/spot03_light_opt.png
Source: chromecache_158.2.dr	String found in binary or memory: https://ssl.gstatic.com/privacyplus/spot04_dark_opt.png
Source: chromecache_158.2.dr	String found in binary or memory: https://ssl.gstatic.com/privacyplus/spot04_light_opt.png
Source: chromecache_271.2.dr	String found in binary or memory: https://ssl.gstatic.com/ui/v1/menu/checkmark2.png)
Source: chromecache_144.2.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_144.2.dr	String found in binary or memory: https://support.google.com/ads/answer/1634057#info
Source: chromecache_144.2.dr	String found in binary or memory: https://support.google.com/google-ads/troubleshooter/4578507
Source: chromecache_144.2.dr	String found in binary or memory: https://support.google.com/legal/answer/3463239
Source: chromecache_161.2.dr	String found in binary or memory: https://support.google.com/legal/answer/3463239?hl=
Source: chromecache_161.2.dr	String found in binary or memory: https://support.google.com/websearch/?p=image_info
Source: chromecache_158.2.dr	String found in binary or memory: https://support.google.com/websearch/?p=language_search_results
Source: chromecache_161.2.dr	String found in binary or memory: https://support.google.com/websearch/?p=m_ws_serp_gethelp
Source: chromecache_158.2.dr	String found in binary or memory: https://support.google.com/websearch/?p=remove_personal_contact_info
Source: chromecache_221.2.dr, chromecache_193.2.dr	String found in binary or memory: https://support.google.com/websearch/answer/106230
Source: chromecache_158.2.dr	String found in binary or memory: https://support.google.com/websearch/answer/11080680
Source: chromecache_158.2.dr	String found in binary or memory: https://support.google.com/websearch/answer/9673730
Source: chromecache_158.2.dr	String found in binary or memory: https://support.google.com/websearch/troubleshooter/9685456#ts=2889054%2C2889099%2C9166584%2C9171202
Source: chromecache_161.2.dr	String found in binary or memory: https://support.google.com/websearch?p=sge_image_gen
Source: chromecache_189.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_189.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_189.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_189.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_205.2.dr	String found in binary or memory: https://translate.google.com/translate?u=
Source: chromecache_130.2.dr, chromecache_233.2.dr, chromecache_221.2.dr, chromecache_193.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_189.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_266.2.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_237.2.dr	String found in binary or memory: https://www.bestbuy.com
Source: chromecache_237.2.dr	String found in binary or memory: https://www.bestbuy.com/site/misc/deal-of-the-day/pcmcat248000050016.c%3Fid%3Dpcmcat248000050016&amp
Source: chromecache_237.2.dr	String found in binary or memory: https://www.bestbuy.com/site/misc/deal-of-the-day/pcmcat248000050016.c?id=pcmcat248000050016
Source: chromecache_237.2.dr	String found in binary or memory: https://www.coachoutlet.com/shop/deals/view-all
Source: chromecache_237.2.dr	String found in binary or memory: https://www.coachoutlet.com/shop/deals/view-all&ved=2ahUKEwic5oKBgtiCAxV8GVkFHQW6DHMQ-bAJegQIHBA
Source: chromecache_237.2.dr	String found in binary or memory: https://www.dealnews.com
Source: chromecache_237.2.dr	String found in binary or memory: https://www.dealnews.com/
Source: chromecache_237.2.dr	String found in binary or memory: https://www.dealnews.com/&ved=2ahUKEwic5oKBgtiCAxV8GVkFHQW6DHMQFnoECCIQAQ
Source: chromecache_237.2.dr	String found in binary or memory: https://www.forever21.com/
Source: chromecache_237.2.dr	String found in binary or memory: https://www.forever21.com/&ved=2ahUKEwic5oKBgtiCAxV8GVkFHQW6DHMQ-bAJegQIHRAB
Source: chromecache_237.2.dr	String found in binary or memory: https://www.goodmorningamerica.com
Source: chromecache_237.2.dr	String found in binary or memory: https://www.goodmorningamerica.com/shop/story/black-friday-2023-tech-deals-105072502
Source: chromecache_237.2.dr	String found in binary or memory: https://www.goodmorningamerica.com/shop/story/black-friday-2023-tech-deals-105072502&ved=2ahUKEw
Source: chromecache_261.2.dr	String found in binary or memory: https://www.google.
Source: chromecache_161.2.dr, chromecache_182.2.dr, chromecache_128.2.dr, chromecache_237.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_128.2.dr	String found in binary or memory: https://www.google.com"
Source: chromecache_182.2.dr	String found in binary or memory: https://www.google.com/_/og/promos/
Source: chromecache_128.2.dr	String found in binary or memory: https://www.google.com/images/hpp/green-tag-42px.png
Source: chromecache_182.2.dr	String found in binary or memory: https://www.google.com/intl/en/about/products
Source: chromecache_158.2.dr	String found in binary or memory: https://www.google.com/intl/en_US/googlefinance/disclaimer/
Source: chromecache_193.2.dr, chromecache_189.2.dr, chromecache_231.2.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_128.2.dr	String found in binary or memory: https://www.google.com/search%3Fq%3Dshop%2Bdeals%26source%3Dsmp.23q4SDealsHPP.22%26stick%3DH4sIAAAAA
Source: chromecache_158.2.dr	String found in binary or memory: https://www.google.com/search/howsearchworks/
Source: chromecache_237.2.dr	String found in binary or memory: https://www.google.com/shopping/ratings/merchant/immersivedetails%3Fq%3Dcoachoutlet.com%26c%3DUS%26v
Source: chromecache_237.2.dr	String found in binary or memory: https://www.google.com/shopping/ratings/merchant/immersivedetails?q=coachoutlet.com&c=US&v=1
Source: chromecache_144.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_128.2.dr	String found in binary or memory: https://www.google.com/url?q
Source: chromecache_182.2.dr, chromecache_128.2.dr	String found in binary or memory: https://www.google.com/url?q=https://www.google.com/search%3Fq%3Dshop%2Bdeals%26source%3Dsmp.23q4SDe
Source: chromecache_266.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_266.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_189.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_261.2.dr	String found in binary or memory: https://www.googleapis.com/language/translate/v2
Source: chromecache_128.2.dr	String found in binary or memory: https://www.gstatic.com
Source: chromecache_128.2.dr	String found in binary or memory: https://www.gstatic.com/_/mss/boq-one-google/_/js/k=boq-one-google.OneGoogleWidgetUi.en.0ABcWAGioow.
Source: chromecache_269.2.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: chromecache_252.2.dr, chromecache_257.2.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_144.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/gleaf_dual_tone/v1/192px.svg
Source: chromecache_252.2.dr, chromecache_257.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_252.2.dr, chromecache_257.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_257.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/broken_image_grey600_18dp.png
Source: chromecache_144.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/keyboard_arrow_right_grey600_24dp.png
Source: chromecache_252.2.dr, chromecache_257.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/search_black_24dp.png
Source: chromecache_252.2.dr, chromecache_257.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/broken_image_grey600_18dp.png
Source: chromecache_158.2.dr	String found in binary or memory: https://www.gstatic.com/kpui/social/fb_32x32.png
Source: chromecache_158.2.dr	String found in binary or memory: https://www.gstatic.com/kpui/social/whatsapp_solid_bg_36x36.png
Source: chromecache_158.2.dr	String found in binary or memory: https://www.gstatic.com/kpui/social/x_32x32.png
Source: chromecache_161.2.dr	String found in binary or memory: https://www.gstatic.com/lens/cards/assets/multimodal_failure.png
Source: chromecache_182.2.dr	String found in binary or memory: https://www.gstatic.com/og/_/js/k=og.qtm.en_US._Y_GrwNhTr8.2019.O/rt=j/m=qabr
Source: chromecache_182.2.dr	String found in binary or memory: https://www.gstatic.com/og/_/ss/k=og.qtm.4eRGyM6nNYU.L.W.O/m=qcwid/excm=qaaw
Source: chromecache_161.2.dr	String found in binary or memory: https://www.gstatic.com/save/icons/light/empty_collection_24px.svg
Source: chromecache_161.2.dr	String found in binary or memory: https://www.gstatic.com/save/icons/save_drop_shadow.svg
Source: chromecache_161.2.dr	String found in binary or memory: https://www.gstatic.com/save/icons/saved_drop_shadow.svg
Source: chromecache_144.2.dr	String found in binary or memory: https://www.gstatic.com/shopping-organic/shopping_no_results_search
Source: chromecache_144.2.dr	String found in binary or memory: https://www.gstatic.com/shopping_loyalty/icon_blue.svg
Source: chromecache_144.2.dr	String found in binary or memory: https://www.gstatic.com/shopping_loyalty/icon_darkmode_gray.svg
Source: chromecache_144.2.dr	String found in binary or memory: https://www.gstatic.com/shopping_loyalty/icon_gray.svg
Source: chromecache_144.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_161.2.dr	String found in binary or memory: https://www.iptc.org/
Source: chromecache_237.2.dr	String found in binary or memory: https://www.pegai.com/pages/bfcm-super-deals
Source: chromecache_237.2.dr	String found in binary or memory: https://www.pegai.com/pages/bfcm-super-deals&ved=2ahUKEwic5oKBgtiCAxV8GVkFHQW6DHMQ-bAJegQIGxAB
Source: chromecache_237.2.dr	String found in binary or memory: https://www.self.com
Source: chromecache_237.2.dr	String found in binary or memory: https://www.today.com/video/shop-deals-on-remote-control-cars-children-s-books-more-198492229506
Source: chromecache_237.2.dr	String found in binary or memory: https://www.today.com/video/shop-deals-on-remote-control-cars-children-s-books-more-198492229506&amp
Source: chromecache_161.2.dr	String found in binary or memory: https://www.twitter.com/share
Source: chromecache_237.2.dr	String found in binary or memory: https://www.usatoday.com/story/money/shopping/2023/11/19/black-friday-holiday-shopping-deals-hours/7
Source: chromecache_198.2.dr, chromecache_160.2.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_189.2.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_224.2.dr	String found in binary or memory: https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_mu
Source: chromecache_189.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_237.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=BGgisoPG7vw
Source: chromecache_189.2.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_189.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_189.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_189.2.dr	String found in binary or memory: https://yurt.corp.google.com

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Windows Analysis Report
https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js