Edit tour

Windows Analysis Report
https://docs.google.com/drawings/d/1sMWWZmFHgySuJJW6Q_-d9pVeMYwF7es8Tx2U_3zAnHw/preview#i5f40opaj3i2signp2

Overview

General Information

Sample URL:	https://docs.google.com/drawings/d/1sMWWZmFHgySuJJW6Q_-d9pVeMYwF7es8Tx2U_3zAnHw/preview#i5f40opaj3i2signp2
Analysis ID:	1417418
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2180 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5100 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2036,i,9241410819684013873,1329734644504095488,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6536 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://docs.google.com/drawings/d/1sMWWZmFHgySuJJW6Q_-d9pVeMYwF7es8Tx2U_3zAnHw/preview#i5f40opaj3i2signp2" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown

HTTPS traffic detected: 142.251.16.132:443 -> 192.168.2.4:49751 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.33.180.114:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.33.180.114:443 -> 192.168.2.4:49747 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 142.251.16.132:443 -> 192.168.2.4:49751 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.180.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.180.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.180.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.180.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.180.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.180.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.180.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.180.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.180.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.180.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.180.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.180.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.180.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.180.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.180.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.180.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.180.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.180.114
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.180.114
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /drawings/d/1sMWWZmFHgySuJJW6Q_-d9pVeMYwF7es8Tx2U_3zAnHw/preview HTTP/1.1Host: docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /static/drawings/client/css/1958739512-preview_css_ltr.css HTTP/1.1Host: docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://docs.google.com/drawings/d/1sMWWZmFHgySuJJW6Q_-d9pVeMYwF7es8Tx2U_3zAnHw/previewAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /static/drawings/client/js/804093606-preview_core.js HTTP/1.1Host: docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docs.google.com/drawings/d/1sMWWZmFHgySuJJW6Q_-d9pVeMYwF7es8Tx2U_3zAnHw/previewAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
Source: global traffic	HTTP traffic detected: GET /drawings/AFUiIQ9uANxeJaQ2I0gnvE5wHND7JtbDanhfMkHZMnQLVLZ4bFoWd70eaVhXN8Oha2bJlhtPVKS3Zvw3bYD64OLH38dpN218LNgKmoE8decMxr8Gw3ddtDN3HQDd8qLN3NGsf1hnAwDY9qfqjaGWCQZh3aMWuUa0WGQHr4hPHA HTTP/1.1Host: lh7-us.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /drawings/AFUiIQ9uANxeJaQ2I0gnvE5wHND7JtbDanhfMkHZMnQLVLZ4bFoWd70eaVhXN8Oha2bJlhtPVKS3Zvw3bYD64OLH38dpN218LNgKmoE8decMxr8Gw3ddtDN3HQDd8qLN3NGsf1hnAwDY9qfqjaGWCQZh3aMWuUa0WGQHr4hPHA HTTP/1.1Host: lh7-us.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /drawings/AFUiIQ9uANxeJaQ2I0gnvE5wHND7JtbDanhfMkHZMnQLVLZ4bFoWd70eaVhXN8Oha2bJlhtPVKS3Zvw3bYD64OLH38dpN218LNgKmoE8decMxr8Gw3ddtDN3HQDd8qLN3NGsf1hnAwDY9qfqjaGWCQZh3aMWuUa0WGQHr4hPHA HTTP/1.1Accept: /User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35 Safari/537.36Host: lh7-us.googleusercontent.comConnection: Keep-Alive

Source: unknown

DNS traffic detected: queries for: docs.google.com

Source: chromecache_49.2.dr	String found in binary or memory: http://csi.gstatic.com/csi
Source: chromecache_49.2.dr	String found in binary or memory: https://csi.gstatic.com/csi
Source: chromecache_49.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.33.180.114:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.33.180.114:443 -> 192.168.2.4:49747 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@16/12@9/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2036,i,9241410819684013873,1329734644504095488,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://docs.google.com/drawings/d/1sMWWZmFHgySuJJW6Q_-d9pVeMYwF7es8Tx2U_3zAnHw/preview#i5f40opaj3i2signp2"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2036,i,9241410819684013873,1329734644504095488,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://docs.google.com/drawings/d/1sMWWZmFHgySuJJW6Q_-d9pVeMYwF7es8Tx2U_3zAnHw/preview#i5f40opaj3i2signp2	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
docs.google.com	142.251.111.139	true	false	high
www.google.com	172.253.122.105	true	false	high
googlehosted.l.googleusercontent.com	142.251.167.132	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
lh7-us.googleusercontent.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://docs.google.com/static/drawings/client/js/804093606-preview_core.js	false	high
https://docs.google.com/drawings/d/1sMWWZmFHgySuJJW6Q_-d9pVeMYwF7es8Tx2U_3zAnHw/preview	false	high
https://docs.google.com/static/drawings/client/css/1958739512-preview_css_ltr.css	false	high
https://docs.google.com/drawings/d/1sMWWZmFHgySuJJW6Q_-d9pVeMYwF7es8Tx2U_3zAnHw/preview#i5f40opaj3i2signp2	false	high
https://lh7-us.googleusercontent.com/drawings/AFUiIQ9uANxeJaQ2I0gnvE5wHND7JtbDanhfMkHZMnQLVLZ4bFoWd70eaVhXN8Oha2bJlhtPVKS3Zvw3bYD64OLH38dpN218LNgKmoE8decMxr8Gw3ddtDN3HQDd8qLN3NGsf1hnAwDY9qfqjaGWCQZh3aMWuUa0WGQHr4hPHA	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	chromecache_49.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.253.122.105	www.google.com	United States	15169	GOOGLEUS	false
142.251.167.132	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.251.111.139	docs.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.251.179.132	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1417418
Start date and time:	2024-03-29 08:43:26 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://docs.google.com/drawings/d/1sMWWZmFHgySuJJW6Q_-d9pVeMYwF7es8Tx2U_3zAnHw/preview#i5f40opaj3i2signp2
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@16/12@9/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.16.94, 142.251.179.102, 142.251.179.113, 142.251.179.138, 142.251.179.139, 142.251.179.100, 142.251.179.101, 172.253.62.84, 34.104.35.123, 142.251.163.94, 172.253.115.94, 142.250.31.94, 40.127.169.103, 72.21.81.240, 13.95.31.18, 192.229.211.108, 52.165.164.15, 172.253.62.94
Excluded domains from analysis (whitelisted): ssl.gstatic.com, fs.microsoft.com, accounts.google.com, fonts.gstatic.com, slscr.update.microsoft.com, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 47

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 753x1006, components 3
Category:	dropped
Size (bytes):	98252
Entropy (8bit):	7.824027631509416
Encrypted:	false
SSDEEP:	1536:L8lb2YzTc1eRSIjGxu7Zkz4FTE4I/oBXuf5Q8O1C2cpTaFITrWgOZnnziWUz7H2H:QgoRHGUNq4FT0oG3uLVOGnnziZHHhWX
MD5:	B517B596E0AD70F52F97282A3D0FAFE2
SHA1:	29169299322C731E6EC0ECA0B997BE9D829F4410
SHA-256:	D1F5C1953D7FD7AA42632A82568491985C2F27F6241D278824B4BB392BFA0CDC
SHA-512:	AF8065D2F654E6818B4F0AD07EF62D3EC55B45F1CA2AA3B8AE899A9889A9196C1979F17F0D40CEBE3F299AACF699A988B5969FF01E3849127B0B5B44D2777F82
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....h..\....?......A.C.Q.......m?...^p..U.@.......C......k?...O_.....x.......U.U"....e..>'...A./..f...D...'....%......Uy.....C........%......U=.h....P<I...I.....9...z.....?...'..&...U.../o...#...AI.....W.....)..._...#......U=~>\|J.......3.....>..H...+...N........g7...R....7...<E...9........}.@...x....C...g7...R............e7...\....../.O...g......o.*....M..<.....S

Chrome Cache Entry: 48

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 753x1006, components 3
Category:	downloaded
Size (bytes):	98252
Entropy (8bit):	7.824027631509416
Encrypted:	false
SSDEEP:	1536:L8lb2YzTc1eRSIjGxu7Zkz4FTE4I/oBXuf5Q8O1C2cpTaFITrWgOZnnziWUz7H2H:QgoRHGUNq4FT0oG3uLVOGnnziZHHhWX
MD5:	B517B596E0AD70F52F97282A3D0FAFE2
SHA1:	29169299322C731E6EC0ECA0B997BE9D829F4410
SHA-256:	D1F5C1953D7FD7AA42632A82568491985C2F27F6241D278824B4BB392BFA0CDC
SHA-512:	AF8065D2F654E6818B4F0AD07EF62D3EC55B45F1CA2AA3B8AE899A9889A9196C1979F17F0D40CEBE3F299AACF699A988B5969FF01E3849127B0B5B44D2777F82
Malicious:	false
Reputation:	low
URL:	https://lh7-us.googleusercontent.com/drawings/AFUiIQ9uANxeJaQ2I0gnvE5wHND7JtbDanhfMkHZMnQLVLZ4bFoWd70eaVhXN8Oha2bJlhtPVKS3Zvw3bYD64OLH38dpN218LNgKmoE8decMxr8Gw3ddtDN3HQDd8qLN3NGsf1hnAwDY9qfqjaGWCQZh3aMWuUa0WGQHr4hPHA
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....h..\....?......A.C.Q.......m?...^p..U.@.......C......k?...O_.....x.......U.U"....e..>'...A./..f...D...'....%......Uy.....C........%......U=.h....P<I...I.....9...z.....?...'..&...U.../o...#...AI.....W.....)..._...#......U=~>\|J.......3.....>..H...+...N........g7...R....7...<E...9........}.@...x....C...g7...R............e7...\....../.O...g......o.*....M..<.....S

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3071)
Category:	downloaded
Size (bytes):	94062
Entropy (8bit):	5.466217650704254
Encrypted:	false
SSDEEP:	1536:CJ4/S5T/ABOTaGQ9ttYklXSjLTyCUgk0+g2kpCI545GEu63wVVSIzvo:CfT/AOZ562SCHjpT4Z6o
MD5:	5AABDC361CC7A0F0E862FBD16D8D1AA7
SHA1:	4AE58425411E84D69A4124D803CC4D9CDFA3CF7D
SHA-256:	92B8E33B33A185685C7E9EBC96C4132887199E930457E519FA96D678BCD0E73B
SHA-512:	EAB70A65F6914B01E75CD85FD71A6F4074DBA54FE28DE49432FF65F50763AA176E6748E079EBF7B5A39CC01FC384B21D14B70DC507604E6EB79B8C2E0CAED52D
Malicious:	false
Reputation:	low
URL:	https://docs.google.com/static/drawings/client/js/804093606-preview_core.js
Preview:	function _F_toggles_initialize(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]}_F_toggles_initialize([]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0./.var aa="Edge",ba="Error in protected function: ",ca="Missing error cause.",da="Not available",ea="SCRIPT",fa="_/wa/",ha="boolean",ia="buildLabel",ja="complete",ka="error",la="fatal",p="function",ma="gssmodulesetproto",na="incident",oa="nonce",q="number",r="object",pa="prerender",qa="severity-unprefixed",u="string",ra="success";function v(){return function(){}}function sa(a){return function(){return this[a]}}function ta(a){return function(){return a}}var w,ua=[];.function va(a){return function(){return ua[a].apply(this,arguments)}}function wa(a){var c=0;return function(){return c<a.length?{done:!1,value:a[c++]}:{done:!0}}}var xa=typeof Object.defineProperties==p?Object.defineProperty:function(a,c,d){if(a=

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	299522
Entropy (8bit):	4.955678729193026
Encrypted:	false
SSDEEP:	1536:s+VTEphqla5+AAQppzKEhbPTMHYlQ/Hc40hwYHa8hfh5ZzB6aKo07VHgT+N9Jvkz:n6Vez++zPBVegyz
MD5:	A55B332F4E9AB69E9707D1B6D78C26DF
SHA1:	321081F31B3276946439366CBE6DD8160DFC4DF0
SHA-256:	584C92AA4A0DD717DC97504AD05B42B41117B390D6BE95FCF75D0CB13A59AF40
SHA-512:	A9283D1E529F07BEBB7B0C51CC1A22205E20376BB5AC3212264887479F1CD50371B2180E9E20C3BBFF70F7D095FE1A6EAF618EA47D7996760428CA570C6F913C
Malicious:	false
Reputation:	low
URL:	https://docs.google.com/static/drawings/client/css/1958739512-preview_css_ltr.css
Preview:	.jfk-butterBar{border-radius:2px;box-shadow:0 2px 4px rgba(0,0,0,.2);transition:all 0s linear 1s,opacity 1s;border-style:solid;border-width:0;font-size:11px;height:0;opacity:0;visibility:hidden;overflow:hidden;padding:0;text-align:center}.jfk-butterBar-info{background-color:#f9edbe;border-color:#f0c36d;color:#333}.jfk-butterBar-error{background-color:#484848;border-color:#202020;color:#fff}.jfk-butterBar-promo{background-color:#d6e9f8;border-color:#4d90f0;color:#333}.jfk-butterBar-warning{background-color:#dd4b39;border-color:#602019;color:#fff}.jfk-butterBar-shown{transition:opacity .218s;border-width:1px;min-height:14px;height:auto;opacity:1;visibility:visible;padding:6px 16px}.jfk-butterBar-mini.jfk-butterBar-shown{padding:2px 16px}.docs-butterbar-container{font-weight:500;height:0;position:absolute;text-align:center;top:32px;width:100%;z-index:1004}.docs-hub-butterbar{top:57px}.docs-gm .docs-butterbar-container{font-weight:400}.docs-butterbar-container.docs-butterbar-container-comp

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	2.6405445103388026
Encrypted:	false
SSDEEP:	6:a6nvQhIhIhIhIhIhIhIhIhIhIhIhIh6NQhIhIhIhIhIhIhIhIhIhIhIhIhIhIhIL:XvPN5ZNZX5hV
MD5:	45E6383ED6764BCF66BB7CDA685BDEF8
SHA1:	321AE49DC907E998D30E89BFE19B611CFEF2B222
SHA-256:	9FEA566760E23830FB440B59122AFE4636A63E1997DBEAFC60A701BBE213B165
SHA-512:	D1F29A7F13C231AFFD42DACA34E142AE225A50E97D173033F38E977F255B83C78B4AF30969474E59E269310D045DEB2712AA307D4E3301F04496BDD0CAD12B7A
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/drawings/images/favicon5.ico
Preview:	............ .h.......(....... ..... .....@...................7D.7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D.7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D......................7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D......................7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D......................7D..7D..7D..7D..7D..7D..7D..P[..........7D......................7D..7D..7D..7D..7D..7D..v...............7D......................7D..7D..7D..7D..7D..7D..................7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..............................7D..7D..7D..7D..7D..7D..7D..7D..7D..............................7D..7D..7D..7D..7D..7D..7D..7D..7D..........................P[..7D..7D..7D..7D..7D..7D..7D..7D..7D..DP..................v...7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	2.6405445103388026
Encrypted:	false
SSDEEP:	6:a6nvQhIhIhIhIhIhIhIhIhIhIhIhIh6NQhIhIhIhIhIhIhIhIhIhIhIhIhIhIhIL:XvPN5ZNZX5hV
MD5:	45E6383ED6764BCF66BB7CDA685BDEF8
SHA1:	321AE49DC907E998D30E89BFE19B611CFEF2B222
SHA-256:	9FEA566760E23830FB440B59122AFE4636A63E1997DBEAFC60A701BBE213B165
SHA-512:	D1F29A7F13C231AFFD42DACA34E142AE225A50E97D173033F38E977F255B83C78B4AF30969474E59E269310D045DEB2712AA307D4E3301F04496BDD0CAD12B7A
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .....@...................7D.7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D.7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D......................7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D......................7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D......................7D..7D..7D..7D..7D..7D..7D..P[..........7D......................7D..7D..7D..7D..7D..7D..v...............7D......................7D..7D..7D..7D..7D..7D..................7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..............................7D..7D..7D..7D..7D..7D..7D..7D..7D..............................7D..7D..7D..7D..7D..7D..7D..7D..7D..........................P[..7D..7D..7D..7D..7D..7D..7D..7D..7D..DP..................v...7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 29, 2024 08:44:12.409379005 CET	49675	443	192.168.2.4	173.222.162.32
Mar 29, 2024 08:44:21.953890085 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:21.953927994 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:21.953985929 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:21.954420090 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:21.954466105 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:21.954550982 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:21.954684019 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:21.954700947 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:21.955179930 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:21.955199003 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.019479990 CET	49675	443	192.168.2.4	173.222.162.32
Mar 29, 2024 08:44:22.242819071 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.243206978 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:22.243221998 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.243653059 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.243740082 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:22.244385958 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.244451046 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:22.245485067 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:22.245538950 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.245804071 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.245835066 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:22.245841026 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.246005058 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:22.246032953 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.246468067 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.246531963 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:22.247483015 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.247531891 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:22.247663021 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:22.247893095 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.424207926 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:22.455374002 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:22.455414057 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.501668930 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:22.877841949 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.877861977 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.877983093 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:22.877993107 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.886926889 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.886996984 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:22.887002945 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.887048960 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:22.896265030 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.896342039 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:22.896351099 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.909049988 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.909135103 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:22.909141064 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.909188986 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:22.918158054 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.924154043 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.924185038 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.924238920 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:22.924243927 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.924294949 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:22.933383942 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:22.976800919 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.014030933 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.017098904 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.017127991 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.017213106 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.017219067 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.017266035 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.024240017 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.033531904 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.033561945 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.033612013 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.033617973 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.033664942 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.037030935 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.042860985 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.052274942 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.052304983 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.052472115 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.052478075 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.052525997 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.061495066 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.070770979 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.070800066 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.070835114 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.070838928 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.070887089 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.080049992 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.080245018 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.088448048 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.088479042 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.088522911 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.088527918 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.088728905 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.096803904 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.105163097 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.105202913 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.105240107 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.105252981 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.105302095 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.113532066 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.121855974 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.121893883 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.121931076 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.121941090 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.121984005 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.130239010 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.138619900 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.138674974 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.138684988 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.138695955 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.138735056 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.138773918 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.138849020 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.138854980 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.138892889 CET	443	49735	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.138936996 CET	49735	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.140969992 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.140986919 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.141071081 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.141431093 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.141443968 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.362531900 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.362587929 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.362616062 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.362634897 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.362663031 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.362704039 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.371643066 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.380925894 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.380965948 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.380989075 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.380996943 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.381148100 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.390250921 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.399558067 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.399585962 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.399715900 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.399724960 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.399765015 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.408911943 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.413743019 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.418206930 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.418265104 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.418275118 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.423516035 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.423528910 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.424022913 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.424637079 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.424710989 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.425018072 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.468226910 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.470401049 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.490216970 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.494739056 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.494776964 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.494781971 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.494791031 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.494827986 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.504084110 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.513415098 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.513447046 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.513457060 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.513477087 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.513513088 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.522763014 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.532146931 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.532183886 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.532207012 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.532215118 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.532254934 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.541429043 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.550808907 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.550848961 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.550857067 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.559648991 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.559689999 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.559696913 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.559705973 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.559736967 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.567920923 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.576105118 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.576136112 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.576158047 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.576165915 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.576215029 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.584451914 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.584517002 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.584562063 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.584569931 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.592160940 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.592200041 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.592207909 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.600321054 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.600364923 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.600372076 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.608383894 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.608428001 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.608433962 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.616589069 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.616636992 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.616647005 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.624710083 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.624761105 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.624769926 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.632205009 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.632252932 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.632260084 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.639151096 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.639209032 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.639215946 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.645193100 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.645241022 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.645248890 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.651104927 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.651161909 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.651169062 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.656883955 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.656944990 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.656951904 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.665213108 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.665256977 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.665260077 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.665283918 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.665321112 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.670717001 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.676333904 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.676374912 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.676383018 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.681956053 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.681994915 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.682002068 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.687506914 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.687552929 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.687560081 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.693145037 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.693183899 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.693197012 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.693203926 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.693245888 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.698681116 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.704226971 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.704267025 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.704276085 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.704293966 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.704329967 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.709692955 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.714992046 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.715024948 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.715033054 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.715044975 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.715087891 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.715095043 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.720108986 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.720151901 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.720161915 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.725192070 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.725239992 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.725253105 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.732439995 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.732474089 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.732506990 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.732516050 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.732553959 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.737188101 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.739974976 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.740022898 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.740053892 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.740080118 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.740088940 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.740134954 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.741971016 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.742007017 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.742012024 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.742022991 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.742070913 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.746567965 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.748953104 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.751054049 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.751081944 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.751107931 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.751118898 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.751154900 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.755451918 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.758213997 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.758254051 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.758256912 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.758270025 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.758304119 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.759908915 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.759939909 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.759953976 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.759964943 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.760000944 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.764112949 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.766969919 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.767018080 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.767019987 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.767029047 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.767071962 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.767488003 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.769792080 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.772670031 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.772706032 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.772716999 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.772722960 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.772763968 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.772770882 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.775583029 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.775624990 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.775631905 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.776833057 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.776865005 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.776894093 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.776901960 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.776940107 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.779788017 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.779820919 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.779829025 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.779836893 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.779869080 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.782672882 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.785492897 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.785523891 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.785536051 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.785542965 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.785581112 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.786189079 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.788356066 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.791234016 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.791282892 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.791299105 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.794013023 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.794045925 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.794064045 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.794071913 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.794109106 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.795454979 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.795496941 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.795506954 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.796911001 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.799865961 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.799902916 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.799907923 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.802510977 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.802550077 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.802555084 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.805035114 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.805066109 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.805073977 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.805079937 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.805200100 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.807735920 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.810437918 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.810471058 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.810481071 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.810489893 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.810529947 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.812937021 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.814284086 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.814336061 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.814342976 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.816922903 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.816975117 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.816982985 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.819376945 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.819423914 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.819432974 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.821865082 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.821907043 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.821913958 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.824395895 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.824441910 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.824450970 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.826874018 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.826925039 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.826934099 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.829322100 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.829370022 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.829377890 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.831801891 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.831849098 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.831859112 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.834127903 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.834172964 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.834181070 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.836592913 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.836642027 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.836654902 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.838865042 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.838910103 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.838917971 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.841209888 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.841253996 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.841264009 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.844702005 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.844729900 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.844763041 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.844774961 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.844816923 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.846976995 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.847677946 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.849319935 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.849348068 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.849371910 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.849383116 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.849419117 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.851603985 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.853810072 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.853852987 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.853863001 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.856098890 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.856143951 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.856148005 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.856157064 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.856199980 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.858356953 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.860517979 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.860542059 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.860558033 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.860574961 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.860609055 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.862749100 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.864893913 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.864938974 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.864948988 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.867110014 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.867151976 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.867161989 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.869211912 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.869265079 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.869277000 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.872395992 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.872427940 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.872438908 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.872451067 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.872490883 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.872524023 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.874509096 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.876693964 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.876718998 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.876734972 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.876745939 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.876785994 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.877008915 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.877047062 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.877058029 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.877072096 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.877111912 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.878695011 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.880733013 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.880759001 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.880776882 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.880786896 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.880821943 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.882775068 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.884815931 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.884839058 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.884862900 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.884871006 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.884907007 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.886313915 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.886816025 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.888834953 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.888868093 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.888870955 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.888880968 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.888917923 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.890775919 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.892740011 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.892767906 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.892797947 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.892805099 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.892844915 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.894691944 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.895909071 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.895941973 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.895953894 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.895963907 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.895999908 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.896619081 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.896667957 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.896675110 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.897651911 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.897690058 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.897696018 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.899602890 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.899653912 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.899662018 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.901475906 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.901518106 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.901525021 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.903367996 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.903433084 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.903439045 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.904936075 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.905128956 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.905194044 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.905200958 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.906892061 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.906941891 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.906949997 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.908778906 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.908821106 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.908827066 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.910319090 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.910392046 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.910398960 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.912055969 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.912097931 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.912103891 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.913825989 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.913872957 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.913881063 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.914222002 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.914269924 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.914282084 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.914290905 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.914326906 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.915435076 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.915474892 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.915482998 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.917068005 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.917130947 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.917139053 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.919426918 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.919456005 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.919469118 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.919476032 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.919523001 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.921037912 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.922589064 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.922636986 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.922643900 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.922728062 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.922799110 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.923613071 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.924192905 CET	49736	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.924206972 CET	443	49736	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.932905912 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.932940960 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.932949066 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.932960987 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.933007002 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.942075014 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.950381041 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.950422049 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.950439930 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.950449944 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.950489044 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.958878040 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.967114925 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.967160940 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.967163086 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.967175007 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.967214108 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.967226028 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.975461960 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.975507975 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.975522995 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.983846903 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.983892918 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.983907938 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.992197037 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:23.992244005 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:23.992258072 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.000607014 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.000649929 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:24.000662088 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.008944035 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.009032011 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:24.009047031 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.015151024 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.015204906 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:24.015218019 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.021498919 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.021544933 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:24.021558046 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.027774096 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.027823925 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:24.027842999 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.036061049 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.036092997 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.036114931 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:24.036142111 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.036175966 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:24.041810989 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.048357964 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.048412085 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:24.048437119 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.053109884 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.053145885 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.053155899 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:24.053165913 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.053211927 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:24.058808088 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.064516068 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.064555883 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.064573050 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:24.064585924 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.064625025 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:24.070230007 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.075864077 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.075908899 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.075917959 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:24.075925112 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.075970888 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:24.081610918 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.087246895 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.087276936 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.087311029 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:24.087327957 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.087369919 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:24.087377071 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.087440014 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.087477922 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:24.089134932 CET	49738	443	192.168.2.4	142.251.111.139
Mar 29, 2024 08:44:24.089152098 CET	443	49738	142.251.111.139	192.168.2.4
Mar 29, 2024 08:44:24.273068905 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:24.273118973 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.273179054 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:24.273686886 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:24.273709059 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.549897909 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.551253080 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:24.551280975 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.551702023 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.551758051 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:24.552489042 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.552536964 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:24.552544117 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.552587032 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:24.554409981 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:24.554474115 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.554790974 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:24.554796934 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.595273972 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:24.829606056 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.832650900 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.832711935 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:24.832737923 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.837496042 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.837543011 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:24.837551117 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.846551895 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.846609116 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:24.846616983 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.855860949 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.855909109 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:24.855932951 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.865087986 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.865140915 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:24.865169048 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.874403000 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.874459982 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:24.874484062 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.883714914 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.883764982 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:24.883786917 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.892927885 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.892980099 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:24.893003941 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.933366060 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:24.933393002 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.957434893 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.957494974 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:24.957515955 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.961903095 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.961950064 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:24.961957932 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.971184969 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.971241951 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:24.971250057 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.980544090 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.980607986 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:24.980617046 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.989891052 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.989940882 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:24.989949942 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.999030113 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:24.999087095 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:24.999094009 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.008301973 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.008359909 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.008369923 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.017566919 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.017637968 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.017647982 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.026839972 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.027050018 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.027057886 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.036161900 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.036237001 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.036245108 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.046019077 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.046097040 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.046106100 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.061372995 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.061399937 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.061429977 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.061439991 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.061492920 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.069230080 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.076945066 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.076976061 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.077030897 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.077039957 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.077073097 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.084836006 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.092679977 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.092706919 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.093013048 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.093024015 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.093066931 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.100496054 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.108242035 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.108270884 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.108341932 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.108351946 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.108588934 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.112917900 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.117547989 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.119869947 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.119900942 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.119936943 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.119946957 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.119956970 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.124567986 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.124732971 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.124739885 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.129092932 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.129333973 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.129340887 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.133840084 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.133888960 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.133897066 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.138231993 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.139143944 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.139149904 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.142656088 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.142704010 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.142709017 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.147211075 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.147259951 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.147269011 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.151622057 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.151770115 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.151774883 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.156044960 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.156091928 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.156097889 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.160520077 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.160718918 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.160723925 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.165031910 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.165103912 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.165110111 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.165152073 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.165203094 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.174731970 CET	49742	443	192.168.2.4	172.253.122.105
Mar 29, 2024 08:44:25.174776077 CET	443	49742	172.253.122.105	192.168.2.4
Mar 29, 2024 08:44:25.174855947 CET	49742	443	192.168.2.4	172.253.122.105
Mar 29, 2024 08:44:25.185523987 CET	49742	443	192.168.2.4	172.253.122.105
Mar 29, 2024 08:44:25.185542107 CET	443	49742	172.253.122.105	192.168.2.4
Mar 29, 2024 08:44:25.207726002 CET	49740	443	192.168.2.4	142.251.167.132
Mar 29, 2024 08:44:25.207743883 CET	443	49740	142.251.167.132	192.168.2.4
Mar 29, 2024 08:44:25.382983923 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:25.383030891 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.383145094 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:25.383712053 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:25.383732080 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.407912970 CET	443	49742	172.253.122.105	192.168.2.4
Mar 29, 2024 08:44:25.408339024 CET	49742	443	192.168.2.4	172.253.122.105
Mar 29, 2024 08:44:25.408365011 CET	443	49742	172.253.122.105	192.168.2.4
Mar 29, 2024 08:44:25.409528971 CET	443	49742	172.253.122.105	192.168.2.4
Mar 29, 2024 08:44:25.409593105 CET	49742	443	192.168.2.4	172.253.122.105
Mar 29, 2024 08:44:25.414165974 CET	49742	443	192.168.2.4	172.253.122.105
Mar 29, 2024 08:44:25.414288998 CET	443	49742	172.253.122.105	192.168.2.4
Mar 29, 2024 08:44:25.463048935 CET	49742	443	192.168.2.4	172.253.122.105
Mar 29, 2024 08:44:25.463071108 CET	443	49742	172.253.122.105	192.168.2.4
Mar 29, 2024 08:44:25.508733034 CET	49742	443	192.168.2.4	172.253.122.105
Mar 29, 2024 08:44:25.610137939 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.610496998 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:25.610507011 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.610884905 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.610943079 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:25.611582994 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.611650944 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:25.611659050 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.612030983 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:25.612087965 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.612548113 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:25.612554073 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.657771111 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:25.717392921 CET	49745	443	192.168.2.4	23.33.180.114
Mar 29, 2024 08:44:25.717434883 CET	443	49745	23.33.180.114	192.168.2.4
Mar 29, 2024 08:44:25.717588902 CET	49745	443	192.168.2.4	23.33.180.114
Mar 29, 2024 08:44:25.720482111 CET	49745	443	192.168.2.4	23.33.180.114
Mar 29, 2024 08:44:25.720500946 CET	443	49745	23.33.180.114	192.168.2.4
Mar 29, 2024 08:44:25.838777065 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.841130018 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.841183901 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:25.841207981 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.844876051 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.845021963 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:25.845029116 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.852339029 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.852399111 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:25.852405071 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.859707117 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.859761953 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:25.859770060 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.867095947 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.867233038 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:25.867240906 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.874481916 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.874537945 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:25.874545097 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.881917953 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.881994009 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:25.882003069 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.889300108 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.889348030 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:25.889357090 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.919475079 CET	443	49745	23.33.180.114	192.168.2.4
Mar 29, 2024 08:44:25.919612885 CET	49745	443	192.168.2.4	23.33.180.114
Mar 29, 2024 08:44:25.926498890 CET	49745	443	192.168.2.4	23.33.180.114
Mar 29, 2024 08:44:25.926506042 CET	443	49745	23.33.180.114	192.168.2.4
Mar 29, 2024 08:44:25.926811934 CET	443	49745	23.33.180.114	192.168.2.4
Mar 29, 2024 08:44:25.939397097 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.939440966 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.939559937 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:25.939569950 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.939657927 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:25.942842960 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.950380087 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.950412989 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.950444937 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:25.950453997 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.950495958 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:25.957664967 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.965063095 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.965131044 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.965188980 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:25.965197086 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.965492010 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:25.971448898 CET	49745	443	192.168.2.4	23.33.180.114
Mar 29, 2024 08:44:25.972538948 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.979882002 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.979923964 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.979933023 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:25.979958057 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.980005026 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:25.987268925 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.994673014 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.994718075 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.994769096 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:25.994787931 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:25.994834900 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:26.004345894 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.009268999 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.009300947 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.009320974 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:26.009332895 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.009377003 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:26.015966892 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.022062063 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.022094965 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.022116899 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:26.022125006 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.022299051 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:26.028018951 CET	49745	443	192.168.2.4	23.33.180.114
Mar 29, 2024 08:44:26.028209925 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.034459114 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.034497023 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.034526110 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:26.034537077 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.034614086 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:26.040582895 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.047036886 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.047105074 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:26.047115088 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.053081989 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.053123951 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.053179026 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:26.053188086 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.053257942 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:26.058068037 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.060568094 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.060625076 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.060627937 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:26.060641050 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.060682058 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:26.064229965 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.066106081 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.066150904 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:26.066164017 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.069729090 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.069777966 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:26.069787979 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.072238922 CET	443	49745	23.33.180.114	192.168.2.4
Mar 29, 2024 08:44:26.073221922 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.073287010 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:26.073296070 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.076777935 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.076822042 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:26.076833010 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.080415010 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.080472946 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:26.080482960 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.083864927 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.083952904 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:26.083961964 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.087414026 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.087563038 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:26.087572098 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.090907097 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.091001987 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:26.091012001 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.094410896 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.094454050 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:26.094463110 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.097918034 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.097965956 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:26.097976923 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.101551056 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.101596117 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:26.101604939 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.101639032 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.101703882 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:26.102128029 CET	49744	443	192.168.2.4	142.251.179.132
Mar 29, 2024 08:44:26.102147102 CET	443	49744	142.251.179.132	192.168.2.4
Mar 29, 2024 08:44:26.124875069 CET	443	49745	23.33.180.114	192.168.2.4
Mar 29, 2024 08:44:26.124950886 CET	443	49745	23.33.180.114	192.168.2.4
Mar 29, 2024 08:44:26.125025988 CET	49745	443	192.168.2.4	23.33.180.114
Mar 29, 2024 08:44:26.176434994 CET	49745	443	192.168.2.4	23.33.180.114
Mar 29, 2024 08:44:26.176467896 CET	443	49745	23.33.180.114	192.168.2.4
Mar 29, 2024 08:44:26.176481009 CET	49745	443	192.168.2.4	23.33.180.114
Mar 29, 2024 08:44:26.176487923 CET	443	49745	23.33.180.114	192.168.2.4
Mar 29, 2024 08:44:26.306169033 CET	49747	443	192.168.2.4	23.33.180.114
Mar 29, 2024 08:44:26.306197882 CET	443	49747	23.33.180.114	192.168.2.4
Mar 29, 2024 08:44:26.306335926 CET	49747	443	192.168.2.4	23.33.180.114
Mar 29, 2024 08:44:26.307292938 CET	49747	443	192.168.2.4	23.33.180.114
Mar 29, 2024 08:44:26.307311058 CET	443	49747	23.33.180.114	192.168.2.4
Mar 29, 2024 08:44:26.502374887 CET	443	49747	23.33.180.114	192.168.2.4
Mar 29, 2024 08:44:26.502453089 CET	49747	443	192.168.2.4	23.33.180.114
Mar 29, 2024 08:44:26.505129099 CET	49747	443	192.168.2.4	23.33.180.114
Mar 29, 2024 08:44:26.505146027 CET	443	49747	23.33.180.114	192.168.2.4
Mar 29, 2024 08:44:26.505382061 CET	443	49747	23.33.180.114	192.168.2.4
Mar 29, 2024 08:44:26.507297039 CET	49747	443	192.168.2.4	23.33.180.114
Mar 29, 2024 08:44:26.552248001 CET	443	49747	23.33.180.114	192.168.2.4
Mar 29, 2024 08:44:26.696904898 CET	443	49747	23.33.180.114	192.168.2.4
Mar 29, 2024 08:44:26.696988106 CET	443	49747	23.33.180.114	192.168.2.4
Mar 29, 2024 08:44:26.697158098 CET	49747	443	192.168.2.4	23.33.180.114
Mar 29, 2024 08:44:26.698309898 CET	49747	443	192.168.2.4	23.33.180.114
Mar 29, 2024 08:44:26.698324919 CET	443	49747	23.33.180.114	192.168.2.4
Mar 29, 2024 08:44:26.698338032 CET	49747	443	192.168.2.4	23.33.180.114
Mar 29, 2024 08:44:26.698344946 CET	443	49747	23.33.180.114	192.168.2.4
Mar 29, 2024 08:44:30.430105925 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:30.430143118 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.430205107 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:30.436749935 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:30.436774015 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.657252073 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.657361984 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:30.658041954 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.658119917 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:30.658133030 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.662528038 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:30.662539005 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.662858009 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.712671041 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:30.756242990 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.892510891 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.904357910 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.904397011 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.904418945 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.904418945 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:30.904438019 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.904476881 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:30.912339926 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.912411928 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:30.912425041 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.912914038 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.912950993 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:30.912955999 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.920800924 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.920854092 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:30.920866966 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.928438902 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.928489923 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:30.928502083 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.936080933 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.936135054 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:30.936152935 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.943638086 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.943695068 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:30.943716049 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.997665882 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.997705936 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.997733116 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:30.997760057 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:30.997813940 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.001337051 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.009556055 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.009597063 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.009603977 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.009628057 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.009665012 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.016757011 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.024360895 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.024415970 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.024435043 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.024457932 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.024503946 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.032126904 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.039738894 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.039783955 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.039839029 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.039865971 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.039906979 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.047401905 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.055011034 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.055053949 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.055062056 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.055078030 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.055116892 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.062689066 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.069701910 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.069744110 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.069757938 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.069763899 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.069775105 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.069809914 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.076215029 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.076275110 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.076291084 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.082667112 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.082717896 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.082742929 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.089221001 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.089271069 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.089294910 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.095716000 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.095766068 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.095791101 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.102190018 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.102245092 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.102268934 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.108843088 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.108900070 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.108917952 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.121771097 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.121815920 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.121825933 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.121850014 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.121892929 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.125741005 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.129328966 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.129378080 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.129396915 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.131330013 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.131396055 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.131406069 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.135210037 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.135265112 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.135277987 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.139074087 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.139127970 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.139138937 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.142909050 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.142963886 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.142976046 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.146825075 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.146879911 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.146891117 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.150625944 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.150681973 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.150692940 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.154562950 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.154608965 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.154619932 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.158379078 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.158426046 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.158436060 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.162251949 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.162307978 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.162318945 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.166070938 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.166122913 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.166135073 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.169919014 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.169975042 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.169986963 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.170087099 CET	443	49751	142.251.16.132	192.168.2.4
Mar 29, 2024 08:44:31.170130014 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:31.173304081 CET	49751	443	192.168.2.4	142.251.16.132
Mar 29, 2024 08:44:35.409117937 CET	443	49742	172.253.122.105	192.168.2.4
Mar 29, 2024 08:44:35.409183979 CET	443	49742	172.253.122.105	192.168.2.4
Mar 29, 2024 08:44:35.409235001 CET	49742	443	192.168.2.4	172.253.122.105
Mar 29, 2024 08:44:36.957392931 CET	49742	443	192.168.2.4	172.253.122.105
Mar 29, 2024 08:44:36.957420111 CET	443	49742	172.253.122.105	192.168.2.4
Mar 29, 2024 08:45:25.097018957 CET	49759	443	192.168.2.4	172.253.122.105
Mar 29, 2024 08:45:25.097069979 CET	443	49759	172.253.122.105	192.168.2.4
Mar 29, 2024 08:45:25.097368956 CET	49759	443	192.168.2.4	172.253.122.105
Mar 29, 2024 08:45:25.097414017 CET	49759	443	192.168.2.4	172.253.122.105
Mar 29, 2024 08:45:25.097419024 CET	443	49759	172.253.122.105	192.168.2.4
Mar 29, 2024 08:45:25.304707050 CET	443	49759	172.253.122.105	192.168.2.4
Mar 29, 2024 08:45:25.305021048 CET	49759	443	192.168.2.4	172.253.122.105
Mar 29, 2024 08:45:25.305051088 CET	443	49759	172.253.122.105	192.168.2.4
Mar 29, 2024 08:45:25.305408001 CET	443	49759	172.253.122.105	192.168.2.4
Mar 29, 2024 08:45:25.305788040 CET	49759	443	192.168.2.4	172.253.122.105
Mar 29, 2024 08:45:25.305865049 CET	443	49759	172.253.122.105	192.168.2.4
Mar 29, 2024 08:45:25.345818043 CET	49759	443	192.168.2.4	172.253.122.105
Mar 29, 2024 08:45:35.310287952 CET	443	49759	172.253.122.105	192.168.2.4
Mar 29, 2024 08:45:35.310373068 CET	443	49759	172.253.122.105	192.168.2.4
Mar 29, 2024 08:45:35.310425997 CET	49759	443	192.168.2.4	172.253.122.105
Mar 29, 2024 08:45:37.004671097 CET	49759	443	192.168.2.4	172.253.122.105
Mar 29, 2024 08:45:37.004698038 CET	443	49759	172.253.122.105	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 29, 2024 08:44:20.791902065 CET	53	63115	1.1.1.1	192.168.2.4
Mar 29, 2024 08:44:20.833885908 CET	53	62636	1.1.1.1	192.168.2.4
Mar 29, 2024 08:44:21.446497917 CET	53	59992	1.1.1.1	192.168.2.4
Mar 29, 2024 08:44:21.856301069 CET	50425	53	192.168.2.4	1.1.1.1
Mar 29, 2024 08:44:21.856473923 CET	62988	53	192.168.2.4	1.1.1.1
Mar 29, 2024 08:44:21.952213049 CET	53	62988	1.1.1.1	192.168.2.4
Mar 29, 2024 08:44:21.952929020 CET	53	50425	1.1.1.1	192.168.2.4
Mar 29, 2024 08:44:24.176065922 CET	60443	53	192.168.2.4	1.1.1.1
Mar 29, 2024 08:44:24.176341057 CET	63083	53	192.168.2.4	1.1.1.1
Mar 29, 2024 08:44:24.271394014 CET	53	60443	1.1.1.1	192.168.2.4
Mar 29, 2024 08:44:24.271888971 CET	53	63083	1.1.1.1	192.168.2.4
Mar 29, 2024 08:44:24.287945986 CET	53	63903	1.1.1.1	192.168.2.4
Mar 29, 2024 08:44:25.055310011 CET	64736	53	192.168.2.4	1.1.1.1
Mar 29, 2024 08:44:25.055660009 CET	51904	53	192.168.2.4	1.1.1.1
Mar 29, 2024 08:44:25.150191069 CET	53	64736	1.1.1.1	192.168.2.4
Mar 29, 2024 08:44:25.150274992 CET	53	51904	1.1.1.1	192.168.2.4
Mar 29, 2024 08:44:25.271979094 CET	57445	53	192.168.2.4	1.1.1.1
Mar 29, 2024 08:44:25.272650003 CET	51456	53	192.168.2.4	1.1.1.1
Mar 29, 2024 08:44:25.337959051 CET	53	55027	1.1.1.1	192.168.2.4
Mar 29, 2024 08:44:25.369472027 CET	53	57445	1.1.1.1	192.168.2.4
Mar 29, 2024 08:44:25.378993988 CET	53	51456	1.1.1.1	192.168.2.4
Mar 29, 2024 08:44:26.146572113 CET	53	61347	1.1.1.1	192.168.2.4
Mar 29, 2024 08:44:30.327452898 CET	57369	53	192.168.2.4	1.1.1.1
Mar 29, 2024 08:44:30.423779964 CET	53	57369	1.1.1.1	192.168.2.4
Mar 29, 2024 08:44:38.396526098 CET	53	53023	1.1.1.1	192.168.2.4
Mar 29, 2024 08:44:39.822423935 CET	138	138	192.168.2.4	192.168.2.255
Mar 29, 2024 08:44:57.350250006 CET	53	52345	1.1.1.1	192.168.2.4
Mar 29, 2024 08:45:20.362941027 CET	53	59790	1.1.1.1	192.168.2.4
Mar 29, 2024 08:45:20.384551048 CET	53	63131	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 29, 2024 08:44:21.856301069 CET	192.168.2.4	1.1.1.1	0xf3ce	Standard query (0)	docs.google.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 08:44:21.856473923 CET	192.168.2.4	1.1.1.1	0x815b	Standard query (0)	docs.google.com	65	IN (0x0001)	false
Mar 29, 2024 08:44:24.176065922 CET	192.168.2.4	1.1.1.1	0x7e70	Standard query (0)	lh7-us.googleusercontent.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 08:44:24.176341057 CET	192.168.2.4	1.1.1.1	0x37a7	Standard query (0)	lh7-us.googleusercontent.com	65	IN (0x0001)	false
Mar 29, 2024 08:44:25.055310011 CET	192.168.2.4	1.1.1.1	0xb3db	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 08:44:25.055660009 CET	192.168.2.4	1.1.1.1	0xbd50	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 29, 2024 08:44:25.271979094 CET	192.168.2.4	1.1.1.1	0xd897	Standard query (0)	lh7-us.googleusercontent.com	A (IP address)	IN (0x0001)	false
Mar 29, 2024 08:44:25.272650003 CET	192.168.2.4	1.1.1.1	0xf220	Standard query (0)	lh7-us.googleusercontent.com	65	IN (0x0001)	false
Mar 29, 2024 08:44:30.327452898 CET	192.168.2.4	1.1.1.1	0x6146	Standard query (0)	lh7-us.googleusercontent.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 29, 2024 08:44:21.952929020 CET	1.1.1.1	192.168.2.4	0xf3ce	No error (0)	docs.google.com		142.251.111.139	A (IP address)	IN (0x0001)	false
Mar 29, 2024 08:44:21.952929020 CET	1.1.1.1	192.168.2.4	0xf3ce	No error (0)	docs.google.com		142.251.111.102	A (IP address)	IN (0x0001)	false
Mar 29, 2024 08:44:21.952929020 CET	1.1.1.1	192.168.2.4	0xf3ce	No error (0)	docs.google.com		142.251.111.113	A (IP address)	IN (0x0001)	false
Mar 29, 2024 08:44:21.952929020 CET	1.1.1.1	192.168.2.4	0xf3ce	No error (0)	docs.google.com		142.251.111.138	A (IP address)	IN (0x0001)	false
Mar 29, 2024 08:44:21.952929020 CET	1.1.1.1	192.168.2.4	0xf3ce	No error (0)	docs.google.com		142.251.111.100	A (IP address)	IN (0x0001)	false
Mar 29, 2024 08:44:21.952929020 CET	1.1.1.1	192.168.2.4	0xf3ce	No error (0)	docs.google.com		142.251.111.101	A (IP address)	IN (0x0001)	false
Mar 29, 2024 08:44:24.271394014 CET	1.1.1.1	192.168.2.4	0x7e70	No error (0)	lh7-us.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 08:44:24.271394014 CET	1.1.1.1	192.168.2.4	0x7e70	No error (0)	googlehosted.l.googleusercontent.com		142.251.167.132	A (IP address)	IN (0x0001)	false
Mar 29, 2024 08:44:24.271888971 CET	1.1.1.1	192.168.2.4	0x37a7	No error (0)	lh7-us.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 08:44:25.150191069 CET	1.1.1.1	192.168.2.4	0xb3db	No error (0)	www.google.com		172.253.122.105	A (IP address)	IN (0x0001)	false
Mar 29, 2024 08:44:25.150191069 CET	1.1.1.1	192.168.2.4	0xb3db	No error (0)	www.google.com		172.253.122.147	A (IP address)	IN (0x0001)	false
Mar 29, 2024 08:44:25.150191069 CET	1.1.1.1	192.168.2.4	0xb3db	No error (0)	www.google.com		172.253.122.104	A (IP address)	IN (0x0001)	false
Mar 29, 2024 08:44:25.150191069 CET	1.1.1.1	192.168.2.4	0xb3db	No error (0)	www.google.com		172.253.122.99	A (IP address)	IN (0x0001)	false
Mar 29, 2024 08:44:25.150191069 CET	1.1.1.1	192.168.2.4	0xb3db	No error (0)	www.google.com		172.253.122.103	A (IP address)	IN (0x0001)	false
Mar 29, 2024 08:44:25.150191069 CET	1.1.1.1	192.168.2.4	0xb3db	No error (0)	www.google.com		172.253.122.106	A (IP address)	IN (0x0001)	false
Mar 29, 2024 08:44:25.150274992 CET	1.1.1.1	192.168.2.4	0xbd50	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 29, 2024 08:44:25.369472027 CET	1.1.1.1	192.168.2.4	0xd897	No error (0)	lh7-us.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 08:44:25.369472027 CET	1.1.1.1	192.168.2.4	0xd897	No error (0)	googlehosted.l.googleusercontent.com		142.251.179.132	A (IP address)	IN (0x0001)	false
Mar 29, 2024 08:44:25.378993988 CET	1.1.1.1	192.168.2.4	0xf220	No error (0)	lh7-us.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 08:44:30.423779964 CET	1.1.1.1	192.168.2.4	0x6146	No error (0)	lh7-us.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 08:44:30.423779964 CET	1.1.1.1	192.168.2.4	0x6146	No error (0)	googlehosted.l.googleusercontent.com		142.251.16.132	A (IP address)	IN (0x0001)	false
Mar 29, 2024 08:44:36.065726995 CET	1.1.1.1	192.168.2.4	0x6e3c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 08:44:36.065726995 CET	1.1.1.1	192.168.2.4	0x6e3c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 29, 2024 08:44:53.502765894 CET	1.1.1.1	192.168.2.4	0x410b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 08:44:53.502765894 CET	1.1.1.1	192.168.2.4	0x410b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 29, 2024 08:45:12.578258991 CET	1.1.1.1	192.168.2.4	0x7d62	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 08:45:12.578258991 CET	1.1.1.1	192.168.2.4	0x7d62	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Mar 29, 2024 08:45:33.130641937 CET	1.1.1.1	192.168.2.4	0x5cee	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Mar 29, 2024 08:45:33.130641937 CET	1.1.1.1	192.168.2.4	0x5cee	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

docs.google.com

https:

lh7-us.googleusercontent.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	142.251.111.139	443	5100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 07:44:22 UTC	1047	OUT	GET /drawings/d/1sMWWZmFHgySuJJW6Q_-d9pVeMYwF7es8Tx2U_3zAnHw/preview HTTP/1.1 Host: docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-29 07:44:22 UTC	3083	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Robots-Tag: noindex, nofollow, nosnippet Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 29 Mar 2024 07:44:22 GMT Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Reduced Origin-Trial: Arlbm3aYP4F8jryBe5TXZ49CJDmGTgEpjkLwYKtvJpvg65pxTRq/0LtrY3S/FMwogUWu6GvOhoCX1WWtJ8wVXQkAAABpeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IlVzZXJBZ2VudFJlZHVjdGlvbiIsImV4cGlyeSI6MTY1MDQxMjc5OSwiaXNTdWJkb21haW4iOnRydWV9 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: base-uri 'self';object-src 'self' blob:;report-uri https://docs.google.com/drawings/cspreport;script-src 'report-sample' 'nonce-VHxP--eP4Nnl9WGZhcDoXA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval' Reporting-Endpoints: default="/drawings/d/1sMWWZmFHgySuJJW6Q_-d9pVeMYwF7es8Tx2U_3zAnHw/web-reports?context=eJwNz31M1WUcBfAvz_P9ISgmoqCggGwlTYWR6CLuhcu9l8ubqxDEh8iZOAWhpYabLAQxBrMwM0hDnIooI0wltBdG00hhkJDFmCCIli-QiIq87AYCXjp_fP462zk7My_PcplYT46kaKm9ogNQ5qCoYaaizFmKsuEC_OCk6IyzorH5inxdFTXC9wsU1cOKhYqK4W0PRZ6eiiq8FKV5K1rtq2juCkXL_ZD7KyoxKKqCMxGKfoxDB_gmKnoT5HuK5kFbkqJ7cCtZ0SNw3KLIHUZSFIlURdfTFXVD1z5F_bC9QNFeuFio6Cq4HcAPCDqoKApsRxW9Uqpofo2iV-HuFUXPwKdJ0RvQ9hf2ILRN0Ttwoh2_YLhDkV2nIj8IgZJeRd_CpT5F16AJOqFvSJEVEmyKtoJlRyIlQMfiJ2Ic8pY9EYVwa8Ow-Afctg0LL4jJHRZxYLd0RDhCYPGI0EFyyYhIgwUPRoQ3lPuPirPQlTAq7kF07qhYC_0OVjEEDf5W0QqlAVbhl2MVq6HnU6t4COm_WEUGHPxwTByBu_px0QdVIeOiBj4wjotUWJkyLoJhrHBcTENwywthgkyXCZELlacmRDXwqinhBIZjUyISwsqmRBSMZb8U0-BS_VJ4wFScTXC8Teg22IQZsm_bRD4k0bTYDFWLp0UNpGRNi-1ww5lkB_h_RLJ_O8kh2JZBcicU3yR5DCa7SMpukrvvkdwLdr0kHeHFaTu5qsJO6iFul5BJMNgo5OgfQk6C830hF0GPlPIheMdL6Qv166RshrZ8Kbsgdb-UGUCtUjrAoZksLy5hWQf658EcDhlzdJwFr-3TsR9k1es4D9Y91vEGuDGg4w5IHtRxGrQP6_g25Fp1vB-uvqvn_sN6HoLBEj3_Bznn9VwA8R4h_D5cNoVwI9DREJ4F5y-FcC0cdw_lCigMDOVi-GZLKJ-Eas3AP8Myo4FXQkuigdvhwpcG_gkGfjfwCNxvM_BjiNWHcSIcSQ_jExBwLoyDYG5HGLuDMdLI0dAcZeR2cF9jZB_QSow8GyaqjCzOGnm9ycQbIfRrE0fAV-dMfBRqr5m4HmyxZrZfa-acHWYugL6dZn4GPbvN_BBm7zGzKzw5ZOZR-LXIzE3gVmNmLwjoMHMQfOcTzpegoS6cWyHwt3DWwZzr4bwA3MEHjBANu2APOD0N5_kwaWdhKSx8UrNwJTzytPBzuLjcwnXw1scWNkJlmYWrofeKhZ9CU7OF_4TOBxb-G27-a-E7EJQSwWEwWRTBsjiCZxyK5DlwZyCSe6HANYob2qO4FQLnRbMOzFnRvAYStRjeBF_MiOHD8HlemVYEm2rLtG2wua5MS4cl909pr8PCReXaEli9sVxz7S7XPKEF2kH75LTmCi5ODp0PSmvsnT87XpMvPWbEZmzdnbY1839nNwzs" Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-03-29 07:44:22 UTC	3083	IN	Data Raw: 32 36 65 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 56 48 78 50 2d 2d 65 50 34 4e 6e 6c 39 57 47 5a 68 63 44 6f 58 41 22 3e 76 61 72 20 44 4f 43 53 5f 74 69 6d 69 6e 67 3d 7b 7d 3b 20 44 4f 43 53 5f 74 69 6d 69 6e 67 5b 27 70 6c 73 27 5d 3d 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 2d 2d 2d 47 6f 20 62 74 63 2d 2d 20 2b 31 36 35 37 2e 35 37 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 61 72 74 69 63 6c 65 22 3e 3c 6d 65 74 Data Ascii: 26e0<!DOCTYPE html><html lang="en"><head><script nonce="VHxP--eP4Nnl9WGZhcDoXA">var DOCS_timing={}; DOCS_timing['pls']=new Date().getTime();</script><meta property="og:title" content="---Go btc-- +1657.57"><meta property="og:type" content="article"><met
2024-03-29 07:44:22 UTC	3083	IN	Data Raw: 77 63 6d 63 64 22 3a 33 30 30 30 30 2c 22 64 6f 63 73 2d 6f 66 66 6c 69 6e 65 2d 73 77 63 6d 63 75 6c 22 3a 31 30 2c 22 64 6f 63 73 2d 6f 66 66 6c 69 6e 65 2d 6e 6e 6f 64 69 22 3a 31 30 30 2c 22 64 6f 63 73 2d 6c 6f 63 61 6c 73 74 6f 72 65 2d 69 6f 72 74 22 3a 31 30 30 30 30 2c 22 64 6f 63 73 2d 6f 66 66 6c 69 6e 65 2d 64 63 6b 22 3a 22 41 49 7a 61 53 79 44 72 52 5a 50 62 5f 6f 4e 41 4a 4c 70 4e 6d 31 36 37 61 78 57 4b 35 69 38 35 63 75 59 47 5f 48 51 22 2c 22 64 6f 63 73 2d 6f 66 66 6c 69 6e 65 2d 6d 6f 62 69 6c 65 2d 6d 6d 73 22 3a 31 35 30 30 30 30 30 30 2c 22 64 6f 63 73 2d 65 78 74 65 6e 73 69 6f 6e 2d 69 64 22 3a 22 67 68 62 6d 6e 6e 6a 6f 6f 65 6b 70 6d 6f 65 63 6e 6e 6e 69 6c 6e 6e 62 64 6c 6f 6c 68 6b 68 69 22 2c 22 64 6f 63 73 2d 65 77 74 61 6f Data Ascii: wcmcd":30000,"docs-offline-swcmcul":10,"docs-offline-nnodi":100,"docs-localstore-iort":10000,"docs-offline-dck":"AIzaSyDrRZPb_oNAJLpNm167axWK5i85cuYG_HQ","docs-offline-mobile-mms":15000000,"docs-extension-id":"ghbmnnjooekpmoecnnnilnnbdlolhkhi","docs-ewtao
2024-03-29 07:44:22 UTC	3083	IN	Data Raw: 37 35 32 36 32 2c 34 39 33 38 31 32 30 32 2c 34 39 34 32 33 38 38 31 2c 34 39 34 35 31 35 37 39 2c 34 39 34 35 32 39 30 35 2c 34 39 34 37 32 30 33 31 2c 34 39 34 39 31 36 32 35 2c 34 39 35 30 31 36 36 34 2c 34 39 35 31 32 32 37 33 2c 34 39 36 31 33 30 34 30 2c 34 39 36 32 32 37 33 31 2c 34 39 36 34 32 38 30 35 2c 34 39 36 34 34 30 30 33 2c 34 39 36 35 38 34 38 32 2c 34 39 37 36 39 33 36 35 2c 34 39 38 32 32 39 34 39 2c 34 39 38 32 33 31 35 32 2c 34 39 38 32 34 31 30 33 2c 34 39 38 33 33 35 33 30 2c 34 39 38 34 32 39 34 33 2c 34 39 39 32 34 36 37 34 2c 34 39 39 34 33 31 36 37 2c 34 39 39 37 39 35 36 36 2c 35 30 30 38 32 38 32 38 2c 35 30 31 30 38 39 39 39 2c 35 30 31 31 30 32 38 30 2c 35 30 31 36 37 30 33 39 2c 35 30 31 37 39 36 31 30 2c 35 30 32 32 31 38 Data Ascii: 75262,49381202,49423881,49451579,49452905,49472031,49491625,49501664,49512273,49613040,49622731,49642805,49644003,49658482,49769365,49822949,49823152,49824103,49833530,49842943,49924674,49943167,49979566,50082828,50108999,50110280,50167039,50179610,502218
2024-03-29 07:44:22 UTC	711	IN	Data Raw: 38 2c 35 37 30 37 39 32 32 2c 34 39 33 38 31 32 30 32 2c 37 31 34 37 31 39 34 32 2c 34 39 36 32 32 37 33 31 2c 37 31 36 31 36 38 34 31 2c 35 37 30 35 38 39 31 2c 37 31 36 31 36 37 39 31 2c 37 31 37 32 32 35 36 30 2c 35 37 31 39 37 31 35 2c 37 31 36 37 31 37 32 36 2c 37 31 32 37 34 31 36 35 2c 37 31 36 32 35 37 34 38 2c 35 30 33 38 37 32 30 33 5d 2c 22 63 66 22 3a 7b 7d 7d 2c 22 64 6f 63 73 2d 6c 69 22 3a 22 37 31 35 37 34 38 22 2c 22 64 6f 63 73 2d 74 72 67 74 68 6e 74 22 3a 22 65 76 4c 36 44 6e 56 6e 55 30 65 7a 46 63 67 71 78 33 31 30 53 36 44 70 5a 6d 69 61 22 2c 22 64 6f 63 73 2d 65 74 6d 68 6e 22 3a 30 2c 22 64 6f 63 73 2d 74 68 6e 74 22 3a 22 22 2c 22 64 6f 63 73 2d 68 62 74 22 3a 5b 5d 2c 22 64 6f 63 73 2d 68 64 65 74 22 3a 5b 22 6e 4d 58 31 37 4d Data Ascii: 8,5707922,49381202,71471942,49622731,71616841,5705891,71616791,71722560,5719715,71671726,71274165,71625748,50387203],"cf":{}},"docs-li":"715748","docs-trgthnt":"evL6DnVnU0ezFcgqx310S6DpZmia","docs-etmhn":0,"docs-thnt":"","docs-hbt":[],"docs-hdet":["nMX17M
2024-03-29 07:44:22 UTC	1252	IN	Data Raw: 34 39 32 36 0d 0a 76 68 22 2c 22 4c 63 54 61 36 45 6a 65 43 30 6b 4c 55 6b 70 73 50 31 39 30 52 4b 67 76 57 35 71 69 22 2c 22 73 33 55 46 63 6a 47 6a 74 30 6b 4c 55 6b 70 73 50 31 39 30 5a 34 35 66 74 57 52 72 22 2c 22 6f 39 39 65 77 42 51 58 79 30 6b 4c 55 6b 70 73 50 31 39 30 4e 71 32 71 72 36 74 66 22 2c 22 50 48 56 79 79 35 75 53 53 30 6b 4c 55 6b 70 73 50 31 39 30 53 55 73 59 6f 38 67 51 22 2c 22 79 5a 6e 32 31 61 6b 69 64 30 69 53 46 54 43 62 69 45 42 30 57 50 69 47 45 53 54 33 22 2c 22 68 32 54 74 71 7a 6d 51 46 30 6b 4c 55 6b 70 73 50 31 39 30 59 50 4a 69 51 74 37 70 22 2c 22 4d 5a 69 39 76 62 35 55 43 30 6b 4c 55 6b 70 73 50 31 39 30 52 65 55 68 76 56 6a 79 22 2c 22 64 53 52 36 53 50 6a 42 38 30 6b 4c 55 6b 70 73 50 31 39 30 59 33 78 48 61 39 71 Data Ascii: 4926vh","LcTa6EjeC0kLUkpsP190RKgvW5qi","s3UFcjGjt0kLUkpsP190Z45ftWRr","o99ewBQXy0kLUkpsP190Nq2qr6tf","PHVyy5uSS0kLUkpsP190SUsYo8gQ","yZn21akid0iSFTCbiEB0WPiGEST3","h2TtqzmQF0kLUkpsP190YPJiQt7p","MZi9vb5UC0kLUkpsP190ReUhvVjy","dSR6SPjB80kLUkpsP190Y3xHa9q
2024-03-29 07:44:22 UTC	1252	IN	Data Raw: 76 55 59 75 4e 43 53 38 30 6d 45 52 71 53 47 6b 47 66 30 50 73 69 38 6a 33 44 77 22 2c 22 73 6f 57 6e 63 52 56 37 43 30 6d 45 52 71 53 47 6b 47 66 30 50 5a 68 65 58 72 57 41 22 2c 22 54 76 6a 6f 69 43 61 61 72 30 6d 45 52 71 53 47 6b 47 66 30 53 39 71 53 35 61 64 6a 22 2c 22 66 66 5a 6d 4d 47 74 59 54 30 73 75 4b 31 4e 5a 72 32 4b 30 51 55 78 53 7a 45 4d 4e 22 2c 22 4e 61 67 62 63 5a 57 79 42 30 73 75 4b 31 4e 5a 72 32 4b 30 53 4a 6d 66 6d 4a 33 6e 22 2c 22 4b 4d 63 4c 4b 76 75 62 76 30 73 75 4b 31 4e 5a 72 32 4b 30 50 4c 4d 55 4a 37 7a 72 22 2c 22 70 77 4c 44 75 63 4a 5a 55 30 65 7a 46 63 67 71 78 33 31 30 4e 67 74 6d 59 70 62 56 22 5d 2c 22 64 6f 63 73 2d 68 75 6e 64 73 22 3a 30 2c 22 64 6f 63 73 2d 68 61 65 22 3a 22 50 52 4f 44 22 2c 22 64 6f 63 73 2d Data Ascii: vUYuNCS80mERqSGkGf0Psi8j3Dw","soWncRV7C0mERqSGkGf0PZheXrWA","TvjoiCaar0mERqSGkGf0S9qS5adj","ffZmMGtYT0suK1NZr2K0QUxSzEMN","NagbcZWyB0suK1NZr2K0SJmfmJ3n","KMcLKvubv0suK1NZr2K0PLMUJ7zr","pwLDucJZU0ezFcgqx310NgtmYpbV"],"docs-hunds":0,"docs-hae":"PROD","docs-
2024-03-29 07:44:22 UTC	1252	IN	Data Raw: 22 3a 22 2f 64 72 61 77 69 6e 67 73 22 2c 22 64 6f 63 73 2d 73 65 75 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 72 61 77 69 6e 67 73 2f 64 2f 31 73 4d 57 57 5a 6d 46 48 67 79 53 75 4a 4a 57 36 51 5f 2d 64 39 70 56 65 4d 59 77 46 37 65 73 38 54 78 32 55 5f 33 7a 41 6e 48 77 2f 65 64 69 74 22 2c 22 64 6f 63 73 2d 63 72 70 22 3a 22 2f 64 72 61 77 69 6e 67 73 2f 64 2f 31 73 4d 57 57 5a 6d 46 48 67 79 53 75 4a 4a 57 36 51 5f 2d 64 39 70 56 65 4d 59 77 46 37 65 73 38 54 78 32 55 5f 33 7a 41 6e 48 77 2f 70 72 65 76 69 65 77 22 2c 22 64 6f 63 73 2d 75 63 64 22 3a 22 64 6f 63 73 2e 75 73 65 72 63 6f 6e 74 65 6e 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 22 64 6f 63 73 2d 75 70 74 63 22 3a 5b 22 6f 66 69 70 22 2c 22 72 72 22 Data Ascii: ":"/drawings","docs-seu":"https://docs.google.com/drawings/d/1sMWWZmFHgySuJJW6Q_-d9pVeMYwF7es8Tx2U_3zAnHw/edit","docs-crp":"/drawings/d/1sMWWZmFHgySuJJW6Q_-d9pVeMYwF7es8Tx2U_3zAnHw/preview","docs-ucd":"docs.usercontent.google.com","docs-uptc":["ofip","rr"
2024-03-29 07:44:22 UTC	1252	IN	Data Raw: 75 72 69 74 79 2e 61 63 63 65 73 73 5f 63 61 70 61 62 69 6c 69 74 69 65 73 22 2c 31 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 31 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 31 5d 2c 22 64 6f 63 73 2d 63 69 22 3a 22 31 73 4d 57 57 5a 6d 46 48 67 79 53 75 4a 4a 57 36 51 5f 2d 64 39 70 56 65 4d 59 77 46 37 65 73 38 54 78 32 55 5f 33 7a 41 6e 48 77 22 2c 22 64 6f 63 73 2d 65 63 63 66 73 22 3a 30 2c 22 64 6f 63 73 2d 65 65 66 75 66 64 22 3a 30 2c 22 64 6f 63 73 2d 65 63 6f 22 3a 30 2c 22 64 6f 63 73 2d 6e 64 74 22 3a 22 55 6e 74 69 74 6c 65 64 20 64 72 61 77 69 6e 67 22 2c 22 64 6f 63 73 2d 70 6c 75 22 3a 22 2f 2f 73 73 6c 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 64 6f 63 73 2f 63 6f 6d 6d 6f 6e 2f 70 72 6f 64 Data Ascii: urity.access_capabilities",1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,1],"docs-ci":"1sMWWZmFHgySuJJW6Q_-d9pVeMYwF7es8Tx2U_3zAnHw","docs-eccfs":0,"docs-eefufd":0,"docs-eco":0,"docs-ndt":"Untitled drawing","docs-plu":"//ssl.gstatic.com/docs/common/prod
2024-03-29 07:44:22 UTC	1252	IN	Data Raw: 6f 63 73 2d 65 64 6d 69 74 6d 22 3a 30 2c 22 64 6f 63 73 2d 65 6e 6a 65 63 22 3a 31 2c 22 73 65 72 76 65 72 5f 74 69 6d 65 5f 6d 73 22 3a 31 37 31 31 36 39 38 32 36 32 37 39 39 2c 22 67 61 69 61 5f 73 65 73 73 69 6f 6e 5f 69 64 22 3a 22 22 2c 22 64 6f 63 73 2d 75 73 70 22 3a 22 64 72 61 77 69 6e 67 73 5f 77 65 62 22 2c 22 64 6f 63 73 2d 69 73 62 22 3a 31 2c 22 64 6f 63 73 2d 61 67 64 63 22 3a 30 2c 22 64 6f 63 73 2d 61 6e 64 64 63 22 3a 31 2c 22 64 6f 63 73 2d 61 64 6e 64 6c 64 63 22 3a 30 2c 22 64 6f 63 73 2d 64 68 6e 61 70 22 3a 22 64 6f 63 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 22 64 6f 63 73 2d 64 73 22 3a 22 68 74 74 70 73 22 2c 22 64 6f 63 73 2d 65 6d 6d 64 61 22 3a 30 2c 22 64 6f 63 73 2d 63 70 65 68 74 22 3a 22 22 2c 22 64 6f 63 73 2d 63 69 64 Data Ascii: ocs-edmitm":0,"docs-enjec":1,"server_time_ms":1711698262799,"gaia_session_id":"","docs-usp":"drawings_web","docs-isb":1,"docs-agdc":0,"docs-anddc":1,"docs-adndldc":0,"docs-dhnap":"docs.google.com","docs-ds":"https","docs-emmda":0,"docs-cpeht":"","docs-cid
2024-03-29 07:44:23 UTC	1252	IN	Data Raw: 68 6d 67 22 3a 30 2c 22 64 6f 63 73 2d 69 70 6d 6d 70 22 3a 31 2c 22 64 6f 63 73 2d 69 70 75 76 22 3a 31 2c 22 64 6f 63 73 2d 70 6d 63 6e 22 3a 30 2c 22 64 6f 63 73 2d 70 6c 69 6d 69 66 22 3a 32 30 2e 30 2c 22 64 6f 63 73 2d 73 63 6d 64 6f 69 22 3a 31 2c 22 64 6f 63 73 2d 73 70 74 6d 22 3a 31 2c 22 64 6f 63 73 2d 73 73 69 22 3a 30 2c 22 64 6f 63 73 2d 65 73 6c 69 6e 22 3a 31 2c 22 64 6f 63 73 2d 75 6f 63 69 22 3a 22 22 2c 22 64 6f 63 73 2d 66 73 75 22 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 74 6f 6f 6c 73 2f 66 65 65 64 62 61 63 6b 22 2c 22 64 6f 63 73 2d 67 74 68 22 3a 22 22 2c 22 64 6f 63 73 2d 6e 64 73 6f 6d 22 3a 5b 5d 2c 22 64 6f 63 73 2d 64 6d 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 67 6f 6f 67 6c 65 2d 61 70 70 73 2e 64 Data Ascii: hmg":0,"docs-ipmmp":1,"docs-ipuv":1,"docs-pmcn":0,"docs-plimif":20.0,"docs-scmdoi":1,"docs-sptm":1,"docs-ssi":0,"docs-eslin":1,"docs-uoci":"","docs-fsu":"www.google.com/tools/feedback","docs-gth":"","docs-ndsom":[],"docs-dm":"application/vnd.google-apps.d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	142.251.111.139	443	5100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 07:44:23 UTC	1268	OUT	GET /static/drawings/client/css/1958739512-preview_css_ltr.css HTTP/1.1 Host: docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://docs.google.com/drawings/d/1sMWWZmFHgySuJJW6Q_-d9pVeMYwF7es8Tx2U_3zAnHw/preview Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-29 07:44:23 UTC	781	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/css Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 299522 Date: Fri, 29 Mar 2024 07:44:23 GMT Expires: Sat, 29 Mar 2025 07:44:23 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 20 Mar 2024 17:52:50 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 07:44:23 UTC	471	IN	Data Raw: 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 73 20 6c 69 6e 65 61 72 20 31 73 2c 6f 70 61 63 69 74 79 20 31 73 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 68 65 69 67 68 74 3a 30 3b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 69 6e Data Ascii: .jfk-butterBar{border-radius:2px;box-shadow:0 2px 4px rgba(0,0,0,.2);transition:all 0s linear 1s,opacity 1s;border-style:solid;border-width:0;font-size:11px;height:0;opacity:0;visibility:hidden;overflow:hidden;padding:0;text-align:center}.jfk-butterBar-in
2024-03-29 07:44:23 UTC	1252	IN	Data Raw: 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 77 61 72 6e 69 6e 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 64 34 62 33 39 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 36 30 32 30 31 39 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 73 68 6f 77 6e 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 32 31 38 73 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 31 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 34 70 78 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6f 70 61 63 69 74 79 3a 31 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 31 36 70 78 7d 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 6d 69 6e 69 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 73 68 6f 77 Data Ascii: .jfk-butterBar-warning{background-color:#dd4b39;border-color:#602019;color:#fff}.jfk-butterBar-shown{transition:opacity .218s;border-width:1px;min-height:14px;height:auto;opacity:1;visibility:visible;padding:6px 16px}.jfk-butterBar-mini.jfk-butterBar-show
2024-03-29 07:44:23 UTC	1252	IN	Data Raw: 2d 70 61 64 3a 76 69 73 69 74 65 64 2c 61 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 61 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 36 36 36 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 62 75 74 74 65 72 2d 61 63 74 69 6f 6e 2c 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 64 69 73 6d 69 73 73 2c 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 2c 61 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 61 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 70 Data Ascii: -pad:visited,a.docs-butterbar-link:link,a.docs-butterbar-link:visited{color:#666;cursor:pointer;text-decoration:underline}.docs-butterbar-butter-action,.docs-butterbar-dismiss,.docs-butterbar-link,a.docs-butterbar-link:link,a.docs-butterbar-link:visited{p
2024-03-29 07:44:23 UTC	1252	IN	Data Raw: 62 61 72 2d 6c 69 6e 6b 2d 6e 6f 2d 70 61 64 3a 6c 69 6e 6b 2c 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 65 72 72 6f 72 20 61 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 2d 6e 6f 2d 70 61 64 3a 76 69 73 69 74 65 64 2c 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 65 72 72 6f 72 20 61 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 65 72 72 6f 72 20 61 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 61 64 64 38 65 36 7d 2e 64 6f 63 73 2d 67 6d 20 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 69 6e 66 6f 20 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 62 75 74 74 65 72 2d 61 63 74 69 6f 6e 2c 2e 64 6f 63 Data Ascii: bar-link-no-pad:link,.jfk-butterBar-error a.docs-butterbar-link-no-pad:visited,.jfk-butterBar-error a.docs-butterbar-link:link,.jfk-butterBar-error a.docs-butterbar-link:visited{color:#add8e6}.docs-gm .jfk-butterBar-info .docs-butterbar-butter-action,.doc
2024-03-29 07:44:23 UTC	1252	IN	Data Raw: 72 72 6f 72 20 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 64 69 73 6d 69 73 73 2c 2e 64 6f 63 73 2d 67 6d 20 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 65 72 72 6f 72 20 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 2c 2e 64 6f 63 73 2d 67 6d 20 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 65 72 72 6f 72 20 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 2d 6e 6f 2d 70 61 64 2c 2e 64 6f 63 73 2d 67 6d 20 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 65 72 72 6f 72 20 61 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 2d 6e 6f 2d 70 61 64 3a 6c 69 6e 6b 2c 2e 64 6f 63 73 2d 67 6d 20 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 65 72 72 6f 72 20 61 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 2d 6e Data Ascii: rror .docs-butterbar-dismiss,.docs-gm .jfk-butterBar-error .docs-butterbar-link,.docs-gm .jfk-butterBar-error .docs-butterbar-link-no-pad,.docs-gm .jfk-butterBar-error a.docs-butterbar-link-no-pad:link,.docs-gm .jfk-butterBar-error a.docs-butterbar-link-n
2024-03-29 07:44:23 UTC	1252	IN	Data Raw: 62 75 74 74 6f 6e 2d 64 69 73 61 62 6c 65 64 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 62 75 74 74 65 72 2d 61 63 74 69 6f 6e 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 63 63 63 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 2e 64 6f 63 73 2d 67 72 69 6c 6c 65 2d 67 6d 33 20 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2c 2e 64 6f 63 73 2d 67 72 69 6c 6c 65 2d 67 6d 33 20 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 65 72 72 6f 72 2c 2e 64 6f 63 73 2d 67 72 69 6c 6c 65 2d 67 6d 33 20 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 69 6e 66 6f 2c 2e 64 6f 63 73 2d 67 72 69 6c 6c 65 2d 67 6d 33 20 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 77 61 72 6e 69 6e 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 30 33 30 33 30 3b 63 6f 6c 6f 72 3a Data Ascii: button-disabled.docs-butterbar-butter-action:hover{color:#ccc;cursor:default}.docs-grille-gm3 .jfk-butterBar,.docs-grille-gm3 .jfk-butterBar-error,.docs-grille-gm3 .jfk-butterBar-info,.docs-grille-gm3 .jfk-butterBar-warning{background-color:#303030;color:
2024-03-29 07:44:23 UTC	1252	IN	Data Raw: 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 63 6f 6c 6f 72 3a 23 61 38 63 37 66 61 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 64 6f 63 73 2d 67 72 69 6c 6c 65 2d 67 6d 33 2e 64 6f 63 73 2d 67 72 69 6c 6c 65 2d 67 6d 33 2e 64 6f 63 73 2d 67 6d 20 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 77 72 61 70 20 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 62 75 74 74 65 72 2d 61 63 74 69 6f 6e 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 30 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 75 72 73 Data Ascii: :500;line-height:20px;white-space:nowrap;color:#a8c7fa;height:auto;text-decoration:none}.docs-grille-gm3.docs-grille-gm3.docs-gm .docs-butterbar-wrap .docs-butterbar-butter-action{border:1px solid transparent;border-radius:100px;box-sizing:border-box;curs
2024-03-29 07:44:23 UTC	1252	IN	Data Raw: 67 72 69 6c 6c 65 2d 67 6d 33 20 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 64 69 73 6d 69 73 73 3a 66 6f 63 75 73 2c 2e 64 6f 63 73 2d 67 72 69 6c 6c 65 2d 67 6d 33 20 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 2d 6e 6f 2d 70 61 64 3a 61 63 74 69 76 65 2c 2e 64 6f 63 73 2d 67 72 69 6c 6c 65 2d 67 6d 33 20 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 2d 6e 6f 2d 70 61 64 3a 66 6f 63 75 73 2c 2e 64 6f 63 73 2d 67 72 69 6c 6c 65 2d 67 6d 33 20 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 64 6f 63 73 2d 67 72 69 6c 6c 65 2d 67 6d 33 20 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 31 36 38 2c 31 39 Data Ascii: grille-gm3 .docs-butterbar-dismiss:focus,.docs-grille-gm3 .docs-butterbar-link-no-pad:active,.docs-grille-gm3 .docs-butterbar-link-no-pad:focus,.docs-grille-gm3 .docs-butterbar-link:active,.docs-grille-gm3 .docs-butterbar-link:focus{background:rgba(168,19
2024-03-29 07:44:23 UTC	1252	IN	Data Raw: 63 73 2f 63 6f 6d 6d 6f 6e 2f 6d 61 74 65 72 69 61 6c 5f 63 6f 6d 6d 6f 6e 5f 73 70 72 69 74 65 36 35 37 5f 67 72 65 79 5f 6d 65 64 69 75 6d 2e 73 76 67 29 7d 2e 64 6f 63 73 2d 67 72 69 6c 6c 65 2d 67 6d 33 20 2e 64 6f 63 73 2d 6d 61 74 65 72 69 61 6c 20 2e 64 6f 63 73 2d 69 63 6f 6e 2d 69 6d 67 2c 2e 64 6f 63 73 2d 69 63 6f 6e 73 2d 63 6c 65 61 6e 75 70 20 2e 64 6f 63 73 2d 6d 61 74 65 72 69 61 6c 20 2e 64 6f 63 73 2d 69 63 6f 6e 2d 69 6d 67 7b 63 6f 6e 74 65 6e 74 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 73 6c 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 64 6f 63 73 2f 63 6f 6d 6d 6f 6e 2f 6d 61 74 65 72 69 61 6c 5f 63 6f 6d 6d 6f 6e 5f 73 70 72 69 74 65 36 35 37 5f 67 6d 33 5f 67 72 65 79 5f 6d 65 64 69 75 6d 2e 73 76 67 29 7d 2e 64 6f 63 73 2d 6d 61 74 65 Data Ascii: cs/common/material_common_sprite657_grey_medium.svg)}.docs-grille-gm3 .docs-material .docs-icon-img,.docs-icons-cleanup .docs-material .docs-icon-img{content:url(https://ssl.gstatic.com/docs/common/material_common_sprite657_gm3_grey_medium.svg)}.docs-mate
2024-03-29 07:44:23 UTC	1252	IN	Data Raw: 6e 2d 69 6d 67 3a 62 65 66 6f 72 65 2c 2e 64 6f 63 73 2d 67 6d 20 2e 64 6f 63 73 2d 6d 61 74 65 72 69 61 6c 20 2e 64 6f 63 73 2d 61 6e 61 6c 79 74 69 63 73 2d 73 69 64 65 62 61 72 2d 74 61 62 2d 73 65 6c 65 63 74 65 64 20 2e 64 6f 63 73 2d 69 63 6f 6e 2d 69 6d 67 3a 62 65 66 6f 72 65 2c 2e 64 6f 63 73 2d 67 6d 20 2e 64 6f 63 73 2d 6d 61 74 65 72 69 61 6c 20 2e 64 6f 63 73 2d 73 6d 61 72 74 2d 73 75 6d 6d 61 72 79 2d 74 69 6e 74 65 64 2e 64 6f 63 73 2d 69 63 6f 6e 2d 69 6d 67 3a 62 65 66 6f 72 65 2c 2e 64 6f 63 73 2d 67 6d 20 2e 64 6f 63 73 2d 6d 61 74 65 72 69 61 6c 20 2e 6b 69 78 2d 63 61 6c 65 6e 64 61 72 2d 74 65 6d 70 6c 61 74 65 2d 64 61 74 65 2d 72 61 6e 67 65 2d 70 69 63 6b 65 72 2d 62 6c 75 65 2d 69 63 6f 6e 20 2e 64 6f 63 73 2d 69 63 6f 6e 2d 69 Data Ascii: n-img:before,.docs-gm .docs-material .docs-analytics-sidebar-tab-selected .docs-icon-img:before,.docs-gm .docs-material .docs-smart-summary-tinted.docs-icon-img:before,.docs-gm .docs-material .kix-calendar-template-date-range-picker-blue-icon .docs-icon-i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49738	142.251.111.139	443	5100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 07:44:23 UTC	1248	OUT	GET /static/drawings/client/js/804093606-preview_core.js HTTP/1.1 Host: docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.google.com/drawings/d/1sMWWZmFHgySuJJW6Q_-d9pVeMYwF7es8Tx2U_3zAnHw/preview Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=j8SQUTltnVU5cOAeyzqSxW-qHOakRuBHDQGLTGeceC9Z5rRzk5trMKb4CuZC_CFmc7KFwQcRJL-qGz8MvkkzMZmElvXAFWLO-TPZ9PMqBYA78ZAuaepnXIRHe-TAolVoW6Z7dQnqpgyX0m-TmS72bebAgoqZv5GkpRFUcZIw1Kk
2024-03-29 07:44:23 UTC	787	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 94062 Date: Fri, 29 Mar 2024 07:44:23 GMT Expires: Sat, 29 Mar 2025 07:44:23 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 20 Mar 2024 19:31:07 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 07:44:23 UTC	465	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 28 61 29 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 28 5b 5d 29 3b 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 53 50 44 58 2d 4c 69 Data Ascii: function _F_toggles_initialize(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]}_F_toggles_initialize([]);/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// SPDX-Li
2024-03-29 07:44:23 UTC	1252	IN	Data Raw: 61 6c 22 2c 70 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 6d 61 3d 22 67 73 73 6d 6f 64 75 6c 65 73 65 74 70 72 6f 74 6f 22 2c 6e 61 3d 22 69 6e 63 69 64 65 6e 74 22 2c 6f 61 3d 22 6e 6f 6e 63 65 22 2c 71 3d 22 6e 75 6d 62 65 72 22 2c 72 3d 22 6f 62 6a 65 63 74 22 2c 70 61 3d 22 70 72 65 72 65 6e 64 65 72 22 2c 71 61 3d 22 73 65 76 65 72 69 74 79 2d 75 6e 70 72 65 66 69 78 65 64 22 2c 75 3d 22 73 74 72 69 6e 67 22 2c 72 61 3d 22 73 75 63 63 65 73 73 22 3b 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 61 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 61 28 61 29 7b 72 65 74 75 72 6e 20 Data Ascii: al",p="function",ma="gssmodulesetproto",na="incident",oa="nonce",q="number",r="object",pa="prerender",qa="severity-unprefixed",u="string",ra="success";function v(){return function(){}}function sa(a){return function(){return this[a]}}function ta(a){return
2024-03-29 07:44:23 UTC	1252	IN	Data Raw: 74 75 72 6e 20 61 3b 64 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 73 61 28 22 67 22 29 3b 76 61 72 20 65 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 31 45 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 2b 22 5f 22 2c 66 3d 30 3b 72 65 74 75 72 6e 20 63 7d 29 3b 0a 78 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 63 22 29 3b 66 6f 72 28 76 61 72 20 63 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 Data Ascii: turn a;d.prototype.toString=sa("g");var e="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",f=0;return c});x("Symbol.iterator",function(a){if(a)return a;a=Symbol("c");for(var c="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Ui
2024-03-29 07:44:23 UTC	1252	IN	Data Raw: 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 48 61 29 48 61 28 61 2c 63 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 69 66 28 22 70 72 6f 74 6f 74 79 70 65 22 21 3d 64 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 63 2c 64 29 3b 65 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 64 2c 65 29 7d 65 6c 73 65 20 61 5b 64 5d 3d 63 5b 64 5d 3b 61 2e 52 3d 63 2e 70 72 6f 74 6f 74 79 70 65 7d 66 75 6e 63 74 69 6f 6e 20 49 61 28 61 2c 63 2c 64 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 66 Data Ascii: pe.constructor=a;if(Ha)Ha(a,c);else for(var d in c)if("prototype"!=d)if(Object.defineProperties){var e=Object.getOwnPropertyDescriptor(c,d);e&&Object.defineProperty(a,d,e)}else a[d]=c[d];a.R=c.prototype}function Ia(a,c,d){if(null==a)throw new TypeError("f
2024-03-29 07:44:23 UTC	1252	IN	Data Raw: 3d 70 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6c 29 7b 69 66 28 21 41 28 6c 2c 68 29 29 7b 76 61 72 20 6d 3d 6e 65 77 20 64 3b 78 61 28 6c 2c 68 2c 7b 76 61 6c 75 65 3a 6d 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 6c 29 7b 76 61 72 20 6d 3d 4f 62 6a 65 63 74 5b 6c 5d 3b 6d 26 26 28 4f 62 6a 65 63 74 5b 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 64 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 66 28 6e 29 3b 72 65 74 75 72 6e 20 6d 28 6e 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c Data Ascii: =p}function f(l){if(!A(l,h)){var m=new d;xa(l,h,{value:m})}}function g(l){var m=Object[l];m&&(Object[l]=function(n){if(n instanceof d)return n;Object.isExtensible(n)&&f(n);return m(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var l=Object.seal({}),
2024-03-29 07:44:23 UTC	1252	IN	Data Raw: 67 74 68 3b 6b 2b 2b 29 7b 76 61 72 20 43 3d 6e 5b 6b 5d 3b 69 66 28 6c 21 3d 3d 6c 26 26 43 2e 6b 65 79 21 3d 3d 43 2e 6b 65 79 7c 7c 6c 3d 3d 3d 43 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 74 3a 6e 2c 69 6e 64 65 78 3a 6b 2c 4b 3a 43 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 74 3a 6e 2c 69 6e 64 65 78 3a 2d 31 2c 0a 4b 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 63 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 6b 29 7b 6b 3d 79 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 69 66 28 66 75 6e Data Ascii: gth;k++){var C=n[k];if(l!==l&&C.key!==C.key\|\|l===C.key)return{id:m,list:n,index:k,K:C}}return{id:m,list:n,index:-1,K:void 0}}function f(k){this[0]={};this[1]=c();this.size=0;if(k){k=y(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}}if(fun
2024-03-29 07:44:23 UTC	1252	IN	Data Raw: 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 28 6b 3d 65 28 74 68 69 73 2c 6b 29 2e 4b 29 26 26 6b 2e 76 61 6c 75 65 7d 3b 66 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 5b 6b 2e 6b 65 79 2c 6b 2e 76 61 6c 75 65 5d 7d 29 7d 3b 66 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 2e 6b 65 79 7d 29 7d 3b 66 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 74 68 69 73 2c 66 75 6e 63 74 69 6f Data Ascii: ype.get=function(k){return(k=e(this,k).K)&&k.value};f.prototype.entries=function(){return d(this,function(k){return[k.key,k.value]})};f.prototype.keys=function(){return d(this,function(k){return k.key})};f.prototype.values=function(){return d(this,functio
2024-03-29 07:44:23 UTC	1252	IN	Data Raw: 7b 76 61 6c 75 65 3a 63 28 67 2c 61 5b 67 5d 29 2c 64 6f 6e 65 3a 21 31 7d 7d 65 3d 21 30 3b 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 7d 3b 66 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 3b 72 65 74 75 72 6e 20 66 7d 78 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 7d 29 7d 7d 29 3b 78 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 Data Ascii: {value:c(g,a[g]),done:!1}}e=!0;return{done:!0,value:void 0}}};f[Symbol.iterator]=function(){return f};return f}x("Array.prototype.keys",function(a){return a?a:function(){return Ka(this,function(c){return c})}});x("Array.prototype.values",function(a){retur
2024-03-29 07:44:23 UTC	1252	IN	Data Raw: 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 3d 74 68 69 73 2e 67 2e 64 65 6c 65 74 65 28 64 29 3b 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 3b 72 65 74 75 72 6e 20 64 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 67 2e 63 6c 65 61 72 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2e 68 61 73 28 64 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: this.size=this.g.size;return this};c.prototype.delete=function(d){d=this.g.delete(d);this.size=this.g.size;return d};c.prototype.clear=function(){this.g.clear();this.size=0};c.prototype.has=function(d){return this.g.has(d)};c.prototype.entries=function(){
2024-03-29 07:44:23 UTC	1252	IN	Data Raw: 5b 2d 2d 64 5d 21 3d 63 5b 2d 2d 66 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 30 3e 3d 66 7d 7d 29 3b 76 61 72 20 4c 61 3d 4c 61 7c 7c 7b 7d 2c 42 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 4d 61 28 61 2c 63 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 76 61 72 20 64 3d 42 3b 61 5b 30 5d 69 6e 20 64 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 64 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 64 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 61 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 65 3b 61 2e 6c 65 6e 67 74 68 26 26 28 65 3d 61 2e 73 68 69 66 74 28 29 29 3b 29 61 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 63 3f 64 5b 65 5d 26 26 64 5b 65 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 Data Ascii: [--d]!=c[--f])return!1;return 0>=f}});var La=La\|\|{},B=this\|\|self;function Ma(a,c){a=a.split(".");var d=B;a[0]in d\|\|"undefined"==typeof d.execScript\|\|d.execScript("var "+a[0]);for(var e;a.length&&(e=a.shift());)a.length\|\|void 0===c?d[e]&&d[e]!==Object.prot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	142.251.167.132	443	5100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 07:44:24 UTC	1196	OUT	GET /drawings/AFUiIQ9uANxeJaQ2I0gnvE5wHND7JtbDanhfMkHZMnQLVLZ4bFoWd70eaVhXN8Oha2bJlhtPVKS3Zvw3bYD64OLH38dpN218LNgKmoE8decMxr8Gw3ddtDN3HQDd8qLN3NGsf1hnAwDY9qfqjaGWCQZh3aMWuUa0WGQHr4hPHA HTTP/1.1 Host: lh7-us.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 07:44:24 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v0" Expires: Sat, 30 Mar 2024 07:44:24 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Date: Fri, 29 Mar 2024 07:44:24 GMT Server: fife Content-Length: 98252 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 07:44:24 UTC	730	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 03 ee 02 f1 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2
2024-03-29 07:44:24 UTC	1252	IN	Data Raw: a0 fe 27 1f f9 a8 1e 25 ff 00 c1 a4 df fc 55 79 d2 d4 b1 f7 a0 0f 43 1f b4 17 c4 dc 9f f8 b8 1e 25 ff 00 c1 ac df fc 55 3d 7f 68 0f 89 bf f4 50 3c 49 ff 00 83 49 bf f8 aa f3 e0 39 a7 ad 00 7a 12 fe d0 1f 13 3f e8 7f f1 27 fe 0d 26 ff 00 e2 aa 55 f8 fd f1 2f 6f fc 8f de 23 e9 ff 00 41 49 bf f8 aa f3 c5 a9 57 ee fe 14 01 e8 29 f1 f7 e2 5f fd 0f de 23 ff 00 c1 9c df fc 55 3d 7e 3e 7c 4a ff 00 a1 f7 c4 7f f8 33 9b ff 00 8a af 3e 8f bd 48 b4 01 e8 2b f1 eb e2 4e e1 ff 00 15 e7 88 ff 00 f0 67 37 ff 00 15 52 0f 8f 1f 12 37 0f f8 af 3c 45 ff 00 83 39 bf f8 aa e0 17 ef 0a 90 7d e1 40 1d fa fc 78 f8 8f ff 00 43 df 88 bf f0 67 37 ff 00 15 52 7f c2 f7 f8 8f 81 ff 00 15 d7 88 7f f0 65 37 ff 00 15 5c 02 d4 a3 a2 d0 07 a0 2f c7 4f 88 a7 fe 67 9f 10 ff 00 e0 ca 6f fe 2a Data Ascii: '%UyC%U=hP<II9z?'&U/o#AIW)_#U=~>\|J3>H+Ng7R7<E9}@xCg7Re7\/Ogo*
2024-03-29 07:44:24 UTC	1252	IN	Data Raw: ff 00 c1 84 bf fc 55 31 be 33 f8 f3 fe 87 2d 73 ff 00 06 12 ff 00 f1 55 c7 16 a6 31 a0 0e c1 be 34 78 f7 3f f2 39 eb bf f8 30 97 ff 00 8a a6 7f c2 e9 f1 f7 fd 0e 7a ef fe 0c 25 ff 00 e2 ab 8e 26 98 d4 01 d9 37 c6 af 1f 7f d0 e9 ae ff 00 e0 c2 5f fe 2a 98 df 1a fc 7f ff 00 43 a6 bd ff 00 83 09 7f f8 aa e3 1a a2 66 eb 40 1d 9b 7c 6b f8 81 ff 00 43 ae bd ff 00 83 19 7f f8 aa 8d be 36 7c 41 ff 00 a1 db 5e ff 00 c1 8c bf fc 55 71 ac dc 54 6c 68 03 b2 6f 8d ff 00 10 87 fc ce da ff 00 fe 0c 65 ff 00 e2 aa 16 f8 e5 f1 0b fe 87 7d 7f ff 00 06 32 ff 00 f1 55 c6 3b 13 50 bf 5a 00 ed 1f e3 9f c4 3f fa 1e 3c 41 ff 00 83 29 7f f8 aa 81 be 3a 7c 45 ff 00 a1 e7 c4 3f f8 32 9b ff 00 8a ae 32 4a 81 9a 80 3b 56 f8 ed f1 1b 3f f2 3d 78 87 ff 00 06 53 7f f1 54 d3 f1 df e2 3f Data Ascii: U13-sU14x?90z%&7_*Cf@\|kC6\|A^UqTlhoe}2U;PZ?<A):\|E?22J;V?=xST?
2024-03-29 07:44:24 UTC	1252	IN	Data Raw: a0 08 5a 98 d4 f6 a8 9b bd 00 35 ea 19 2a 46 a8 9a 80 18 d5 13 53 da 98 d4 01 1b d4 4f d2 a6 6a 85 e8 02 26 a6 b5 39 ea 36 a0 06 d3 5b ad 3a 9a dd e8 02 3a 46 eb 4e a6 b7 5a 00 86 4a 8d aa 49 2a 36 a0 06 d1 45 14 01 49 7b 54 ab da a2 5e d5 2a f6 a0 09 56 a4 a8 96 a4 1d 68 02 45 a9 63 ef 51 2d 4b 1f 7a 00 95 7a d3 d7 ad 31 7a d3 d7 ad 00 48 b5 2a fd df c2 a2 5a 95 7e ef e1 40 0f 8f bd 48 b5 1c 7d ea 45 a0 09 97 ef 0a 90 7d e1 51 af de 15 20 fb c2 80 24 5a 94 74 5a 89 6a 51 d0 50 04 bd 85 4a bd aa 2e c2 a5 5e d4 01 32 54 8a d5 1a d3 d6 80 24 53 52 03 51 af 6a 7d 00 48 1a 9e a6 a3 5e b5 22 f4 a0 07 ab 53 d5 aa 35 34 f5 a0 09 41 a9 15 aa 21 da 9e b4 01 30 34 f5 6a 8d 4f 34 f5 a0 09 01 a5 dd 4d 5a 75 00 3d 6a 40 6a 2a 7a 9a 00 93 75 38 76 a8 f3 4f 1d a8 01 f4 Data Ascii: Z5FSOj&96[::FNZJI6EI{T^VhEcQ-Kzz1zHZ~@H}E}Q $ZtZjQPJ.^2T$SRQj}H^"S54A!04jO4MZu=j@j*zu8vO
2024-03-29 07:44:24 UTC	1252	IN	Data Raw: 16 9f fc 35 d3 af c2 df 15 ff 00 d0 16 6f fb e9 3f c6 9c 3e 16 f8 ab a7 f6 2c df f7 d2 7f 8d 2e 78 f7 0e 49 76 67 30 bd a9 ea 4d 74 c3 e1 6f 8a 87 fc c1 a6 ff 00 be 93 ff 00 8a a7 8f 85 fe 29 1f f3 06 9b fe fa 4f fe 2a 8e 78 f7 0e 49 76 67 32 a4 d4 a8 6b a3 5f 85 fe 29 ff 00 a0 34 df f7 d2 7f f1 54 f5 f8 63 e2 8e fa 34 ff 00 f7 d2 7f f1 54 7b 48 77 0e 49 76 67 3a 0d 3d 49 c5 74 4b f0 cf c4 f9 ff 00 90 3c ff 00 f7 d2 7f f1 55 27 fc 2b 3f 13 ff 00 d0 1e 6f fb e9 7f c6 8f 69 0e e1 c9 2e cc e6 94 d4 8b 5d 18 f8 65 e2 7f fa 03 cd ff 00 7d 2f f8 d3 bf e1 59 f8 9f fe 81 13 7f df 4b fe 34 73 c3 b8 72 4b b3 39 bc d3 b3 5d 22 fc 32 f1 3f fd 02 26 ff 00 be 97 fc 69 ff 00 f0 ac fc 4f ff 00 40 89 bf ef a5 ff 00 1a 3d a4 3b 87 24 bb 33 9a 52 69 78 ae 90 7c 34 f1 3f fd Data Ascii: 5o?>,.xIvg0Mto)O*xIvg2k_)4Tc4T{HwIvg:=ItK<U'+?oi.]e}/YK4srK9]"2?&iO@=;$3Rix\|4?
2024-03-29 07:44:24 UTC	1252	IN	Data Raw: ff 00 40 39 ff 00 ef b4 ff 00 e2 aa 3f f8 53 fe 30 eb fd 87 3e 3f df 4f fe 2a 8e 68 f7 0e 49 76 67 17 51 b5 75 b7 9f 0b 7c 57 63 1b 49 3e 89 70 88 06 73 95 3f c8 d7 2d 3d bc b6 f2 18 e6 8d e1 90 75 57 18 c5 3b a7 b1 3c ad 6e 86 52 37 4a 5e 5b 38 fd 69 ac d4 c4 35 aa 16 a9 59 aa 16 e6 80 18 c4 d4 4c 4d 4a c3 de a1 6a 00 4c 9a 28 a2 80 2a 2f 6a 95 7b 54 4b da a5 5e d4 00 fa 91 7e f5 47 52 2f de a0 09 56 ad d8 da c9 7b 79 0d bc 4a 5a 69 58 28 db cf 5a a8 3a 1e f5 e9 3f 01 74 98 f5 4f 88 56 a1 d4 32 db c6 f3 ed 3d f0 40 fe b5 32 7c b1 6c a8 ae 66 91 eb 9e 14 f0 5e 8b f0 9f 41 86 f7 52 87 ed da b4 e5 51 55 63 f3 24 69 0f 48 e3 50 39 3e e2 bd a7 c3 3f 09 fe 25 78 aa d1 2f 3e c1 a4 e8 10 48 32 90 ea 0e d2 4b 8e d9 f2 cf 1c 76 eb 59 7f 05 f4 48 7c 61 f1 cb 50 9e Data Ascii: @9?S0>?OhIvgQu\|WcI>ps?-=uW;<nR7J^[8i5YLMJjL(/j{TK^~GR/V{yJZiX(Z:?tOV2=@2\|lf^ARQUc$iHP9>?%x/>H2KvYH\|aP
2024-03-29 07:44:24 UTC	1252	IN	Data Raw: af 3e 20 f7 bb f0 d9 ff 00 80 5c 7f 8d 35 be 1e fc 41 ff 00 9f bf 0d ff 00 df 37 1f e3 5e cb f6 81 cd 31 ae 05 3f ed 9c 57 97 dc 2f aa d3 3c 6f fe 15 ff 00 c4 1f f9 fa f0 df fd f3 71 fe 34 bf f0 80 fc 41 ff 00 9f af 0d ff 00 df 37 1f e3 5e c0 d7 02 91 ae 05 1f db 58 be eb ee 0f aa d3 3c 7b fe 10 3f 88 3f f3 f5 e1 bf fb e6 e3 fc 69 3f e1 04 f8 81 ff 00 3f 5e 1b ff 00 be 6e 3f c6 bd 7c ce 29 9e 78 a3 fb 6b 15 e5 f7 07 d5 69 9e 46 7c 0b f1 03 fe 7e bc 37 ff 00 7c 5c 7f 8d 37 fe 10 7f 88 1f f3 f5 e1 bf fb e2 e3 fc 6b d7 1a 71 da a3 6b 83 e9 4f fb 67 15 e5 f7 07 d5 69 9e 4b ff 00 08 3f c4 0f f9 f9 f0 d7 fd fb 9e 97 fe 10 9f 1f 77 ba f0 df fd fb 9e bd 63 ed 07 d2 98 d7 1e d4 7f 6c 62 7c be e0 fa ad 33 ca 5b c1 7e 3e ff 00 9f af 0e 1f fb 67 3f f8 d3 7f e1 0b f1 Data Ascii: > \5A7^1?W/<oq4A7^X<{??i??^n?\|)xkiF\|~7\|\7kqkOgiK?wclb\|3[~>g?
2024-03-29 07:44:24 UTC	1252	IN	Data Raw: 6c f7 a4 37 be f5 85 f6 cf 7a 46 bb f7 a7 c8 3e 63 71 6f 7d e9 4d e6 7a 9a c0 17 87 d6 9a 6f 09 ef 47 20 73 1b ff 00 6b 1e b4 cf b6 1f 5a c2 fb 61 f5 a6 fd b0 fa d1 c8 1c c6 f3 5e 1f 5a 6f db 0f ad 61 7d b8 f4 cd 34 de 9a 39 03 98 de fb 67 3f 7a 91 af 3f da ac 1f b6 1a 63 5e 1a 39 05 cc 6f b5 e1 f5 a6 1b c3 eb 58 6d 78 69 bf 6c a7 c8 2e 66 6e 7d b0 fa d3 1a f0 fa d6 27 db 29 bf 6c e7 ad 1c 83 37 3e d8 7d 69 3e d6 7f bd 58 6d 79 ef 4d fb 69 f5 a3 90 57 37 0d e1 cf de a4 6b b3 fd ea c3 37 be f4 8d 79 ba 8e 40 b9 b3 f6 ae 7a d2 35 e0 f5 ac 33 75 4c 6b ca 7c a2 e6 46 e9 bc 38 eb 4d fb 67 cb d6 b0 da f3 8a 4f b6 53 e5 0e 64 6d 35 e7 bd 34 de 7b d6 27 db 29 1a eb 83 47 20 73 1b 7f 6c 3f de a8 fe d8 7d 6b 17 ed 5e f4 df b6 7d 69 a8 87 31 b7 f6 c3 eb 4d fb 61 f5 Data Ascii: l7zF>cqo}MzoG skZa^Zoa}49g?z?c^9oXmxil.fn}')l7>}i>XmyMiW7k7y@z53uLk\|F8MgOSdm54{')G sl?}k^}i1Ma
2024-03-29 07:44:24 UTC	1252	IN	Data Raw: ca a0 9b 54 8a df 67 9d 3c 70 96 04 80 ec 06 71 d7 af e1 59 da 65 fb 6a 5a 65 ad d3 01 1b cf 12 ca 55 49 20 6e 50 70 2b e5 ef db 7e 42 c7 c2 20 9e 71 72 3e bf ea fa d7 81 83 c2 7d 66 ba a2 dd ae 77 d6 ab ec e0 e6 91 f5 6f f6 e5 a7 fc fe c1 ff 00 7f 57 fc 69 a7 5c b4 ff 00 9f c8 3f ef ea ff 00 8d 7e 58 67 fc e6 9b d5 b1 5f 4d fe ae 47 a5 5f c3 fe 09 e6 7f 68 bf e5 fc 4f d4 ff 00 ed cb 41 ff 00 2f 90 7f df d5 ff 00 1a 6f f6 e5 a7 fc fe 41 f8 48 bf e3 5f 96 6b fe 79 a0 8c 83 f7 47 d6 8f f5 76 3f f3 f7 f0 0f ed 17 fc a7 ea 62 eb 56 b2 3a aa 5d c2 e5 8e 00 57 04 93 e8 39 a2 6d 5a de dd b6 cb 73 14 6f 8c ed 67 00 e0 f7 af cd af 85 99 1f 11 fc 36 01 21 7e dd 08 c7 6e 58 75 ae fb f6 b4 3b be 2d 3f 42 3e c3 07 18 e3 9c d7 24 b2 44 b1 11 a0 aa 6e 9b d8 d7 eb cf d9 Data Ascii: Tg<pqYejZeUI nPp+~B qr>}fwoWi\?~Xg_MG_hOA/oAH_kyGv?bV:]W9mZsog6!~nXu;-?B>$Dn
2024-03-29 07:44:24 UTC	1252	IN	Data Raw: 7b a4 4f e7 59 5c cb 69 3f fc f4 89 c8 3f 98 af a0 be 04 fc 51 d6 fc 4d ac 3e 93 aa 4a b7 71 a4 5b 96 62 3e 6f c4 f7 af 33 17 93 4b 0f 07 52 12 ba 5f 79 d7 4b 18 aa 3e 59 2b 33 df fe d0 77 10 4e 29 8d 31 e7 e6 e9 54 cc 87 d4 8f a5 79 9f c5 6f 8c d6 be 06 8f ec 76 48 2e f5 46 19 0a 0e 44 7e e6 bc 4a 34 27 88 92 85 35 a9 d9 52 ac 69 ab c8 f5 2b 9d 42 3b 58 f7 cd 22 c6 be ac 40 15 ce 5f fc 4f f0 be 99 21 8a e7 5d b3 8a 41 c9 56 93 9a f8 ef c4 be 37 d6 7c 5d 71 e6 ea 77 d3 4e 84 f1 16 e2 10 7f c0 7a 56 1f b7 24 0e d5 f4 f4 b2 28 ff 00 cb d9 eb e4 79 92 cc 1d fd c4 7d af 1f c5 cf 08 4d 22 46 9e 21 b3 67 63 80 37 f5 ae 82 cb 5c b3 d4 97 36 b7 71 5c 7f d7 36 04 d7 c1 45 8e e5 c7 4f 4a b3 a6 ea d7 9a 2c eb 35 8d cc b6 b2 e7 70 68 98 83 5a 4f 21 85 bd ca 8e fe 62 Data Ascii: {OY\i??QM>Jq[b>o3KR_yK>Y+3wN)1TyovH.FD~J4'5Ri+B;X"@_O!]AV7\|]qwNzV$(y}M"F!gc7\6q\6EOJ,5phZO!b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49744	142.251.179.132	443	5100	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-03-29 07:44:25 UTC	628	OUT	GET /drawings/AFUiIQ9uANxeJaQ2I0gnvE5wHND7JtbDanhfMkHZMnQLVLZ4bFoWd70eaVhXN8Oha2bJlhtPVKS3Zvw3bYD64OLH38dpN218LNgKmoE8decMxr8Gw3ddtDN3HQDd8qLN3NGsf1hnAwDY9qfqjaGWCQZh3aMWuUa0WGQHr4hPHA HTTP/1.1 Host: lh7-us.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiSocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-03-29 07:44:25 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v0" Expires: Sat, 30 Mar 2024 07:44:25 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Date: Fri, 29 Mar 2024 07:44:25 GMT Server: fife Content-Length: 98252 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 07:44:25 UTC	730	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 03 ee 02 f1 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2
2024-03-29 07:44:25 UTC	1252	IN	Data Raw: a0 fe 27 1f f9 a8 1e 25 ff 00 c1 a4 df fc 55 79 d2 d4 b1 f7 a0 0f 43 1f b4 17 c4 dc 9f f8 b8 1e 25 ff 00 c1 ac df fc 55 3d 7f 68 0f 89 bf f4 50 3c 49 ff 00 83 49 bf f8 aa f3 e0 39 a7 ad 00 7a 12 fe d0 1f 13 3f e8 7f f1 27 fe 0d 26 ff 00 e2 aa 55 f8 fd f1 2f 6f fc 8f de 23 e9 ff 00 41 49 bf f8 aa f3 c5 a9 57 ee fe 14 01 e8 29 f1 f7 e2 5f fd 0f de 23 ff 00 c1 9c df fc 55 3d 7e 3e 7c 4a ff 00 a1 f7 c4 7f f8 33 9b ff 00 8a af 3e 8f bd 48 b4 01 e8 2b f1 eb e2 4e e1 ff 00 15 e7 88 ff 00 f0 67 37 ff 00 15 52 0f 8f 1f 12 37 0f f8 af 3c 45 ff 00 83 39 bf f8 aa e0 17 ef 0a 90 7d e1 40 1d fa fc 78 f8 8f ff 00 43 df 88 bf f0 67 37 ff 00 15 52 7f c2 f7 f8 8f 81 ff 00 15 d7 88 7f f0 65 37 ff 00 15 5c 02 d4 a3 a2 d0 07 a0 2f c7 4f 88 a7 fe 67 9f 10 ff 00 e0 ca 6f fe 2a Data Ascii: '%UyC%U=hP<II9z?'&U/o#AIW)_#U=~>\|J3>H+Ng7R7<E9}@xCg7Re7\/Ogo*
2024-03-29 07:44:25 UTC	1252	IN	Data Raw: ff 00 c1 84 bf fc 55 31 be 33 f8 f3 fe 87 2d 73 ff 00 06 12 ff 00 f1 55 c7 16 a6 31 a0 0e c1 be 34 78 f7 3f f2 39 eb bf f8 30 97 ff 00 8a a6 7f c2 e9 f1 f7 fd 0e 7a ef fe 0c 25 ff 00 e2 ab 8e 26 98 d4 01 d9 37 c6 af 1f 7f d0 e9 ae ff 00 e0 c2 5f fe 2a 98 df 1a fc 7f ff 00 43 a6 bd ff 00 83 09 7f f8 aa e3 1a a2 66 eb 40 1d 9b 7c 6b f8 81 ff 00 43 ae bd ff 00 83 19 7f f8 aa 8d be 36 7c 41 ff 00 a1 db 5e ff 00 c1 8c bf fc 55 71 ac dc 54 6c 68 03 b2 6f 8d ff 00 10 87 fc ce da ff 00 fe 0c 65 ff 00 e2 aa 16 f8 e5 f1 0b fe 87 7d 7f ff 00 06 32 ff 00 f1 55 c6 3b 13 50 bf 5a 00 ed 1f e3 9f c4 3f fa 1e 3c 41 ff 00 83 29 7f f8 aa 81 be 3a 7c 45 ff 00 a1 e7 c4 3f f8 32 9b ff 00 8a ae 32 4a 81 9a 80 3b 56 f8 ed f1 1b 3f f2 3d 78 87 ff 00 06 53 7f f1 54 d3 f1 df e2 3f Data Ascii: U13-sU14x?90z%&7_*Cf@\|kC6\|A^UqTlhoe}2U;PZ?<A):\|E?22J;V?=xST?
2024-03-29 07:44:25 UTC	1252	IN	Data Raw: a0 08 5a 98 d4 f6 a8 9b bd 00 35 ea 19 2a 46 a8 9a 80 18 d5 13 53 da 98 d4 01 1b d4 4f d2 a6 6a 85 e8 02 26 a6 b5 39 ea 36 a0 06 d3 5b ad 3a 9a dd e8 02 3a 46 eb 4e a6 b7 5a 00 86 4a 8d aa 49 2a 36 a0 06 d1 45 14 01 49 7b 54 ab da a2 5e d5 2a f6 a0 09 56 a4 a8 96 a4 1d 68 02 45 a9 63 ef 51 2d 4b 1f 7a 00 95 7a d3 d7 ad 31 7a d3 d7 ad 00 48 b5 2a fd df c2 a2 5a 95 7e ef e1 40 0f 8f bd 48 b5 1c 7d ea 45 a0 09 97 ef 0a 90 7d e1 51 af de 15 20 fb c2 80 24 5a 94 74 5a 89 6a 51 d0 50 04 bd 85 4a bd aa 2e c2 a5 5e d4 01 32 54 8a d5 1a d3 d6 80 24 53 52 03 51 af 6a 7d 00 48 1a 9e a6 a3 5e b5 22 f4 a0 07 ab 53 d5 aa 35 34 f5 a0 09 41 a9 15 aa 21 da 9e b4 01 30 34 f5 6a 8d 4f 34 f5 a0 09 01 a5 dd 4d 5a 75 00 3d 6a 40 6a 2a 7a 9a 00 93 75 38 76 a8 f3 4f 1d a8 01 f4 Data Ascii: Z5FSOj&96[::FNZJI6EI{T^VhEcQ-Kzz1zHZ~@H}E}Q $ZtZjQPJ.^2T$SRQj}H^"S54A!04jO4MZu=j@j*zu8vO
2024-03-29 07:44:25 UTC	1252	IN	Data Raw: 16 9f fc 35 d3 af c2 df 15 ff 00 d0 16 6f fb e9 3f c6 9c 3e 16 f8 ab a7 f6 2c df f7 d2 7f 8d 2e 78 f7 0e 49 76 67 30 bd a9 ea 4d 74 c3 e1 6f 8a 87 fc c1 a6 ff 00 be 93 ff 00 8a a7 8f 85 fe 29 1f f3 06 9b fe fa 4f fe 2a 8e 78 f7 0e 49 76 67 32 a4 d4 a8 6b a3 5f 85 fe 29 ff 00 a0 34 df f7 d2 7f f1 54 f5 f8 63 e2 8e fa 34 ff 00 f7 d2 7f f1 54 7b 48 77 0e 49 76 67 3a 0d 3d 49 c5 74 4b f0 cf c4 f9 ff 00 90 3c ff 00 f7 d2 7f f1 55 27 fc 2b 3f 13 ff 00 d0 1e 6f fb e9 7f c6 8f 69 0e e1 c9 2e cc e6 94 d4 8b 5d 18 f8 65 e2 7f fa 03 cd ff 00 7d 2f f8 d3 bf e1 59 f8 9f fe 81 13 7f df 4b fe 34 73 c3 b8 72 4b b3 39 bc d3 b3 5d 22 fc 32 f1 3f fd 02 26 ff 00 be 97 fc 69 ff 00 f0 ac fc 4f ff 00 40 89 bf ef a5 ff 00 1a 3d a4 3b 87 24 bb 33 9a 52 69 78 ae 90 7c 34 f1 3f fd Data Ascii: 5o?>,.xIvg0Mto)O*xIvg2k_)4Tc4T{HwIvg:=ItK<U'+?oi.]e}/YK4srK9]"2?&iO@=;$3Rix\|4?
2024-03-29 07:44:25 UTC	1252	IN	Data Raw: ff 00 40 39 ff 00 ef b4 ff 00 e2 aa 3f f8 53 fe 30 eb fd 87 3e 3f df 4f fe 2a 8e 68 f7 0e 49 76 67 17 51 b5 75 b7 9f 0b 7c 57 63 1b 49 3e 89 70 88 06 73 95 3f c8 d7 2d 3d bc b6 f2 18 e6 8d e1 90 75 57 18 c5 3b a7 b1 3c ad 6e 86 52 37 4a 5e 5b 38 fd 69 ac d4 c4 35 aa 16 a9 59 aa 16 e6 80 18 c4 d4 4c 4d 4a c3 de a1 6a 00 4c 9a 28 a2 80 2a 2f 6a 95 7b 54 4b da a5 5e d4 00 fa 91 7e f5 47 52 2f de a0 09 56 ad d8 da c9 7b 79 0d bc 4a 5a 69 58 28 db cf 5a a8 3a 1e f5 e9 3f 01 74 98 f5 4f 88 56 a1 d4 32 db c6 f3 ed 3d f0 40 fe b5 32 7c b1 6c a8 ae 66 91 eb 9e 14 f0 5e 8b f0 9f 41 86 f7 52 87 ed da b4 e5 51 55 63 f3 24 69 0f 48 e3 50 39 3e e2 bd a7 c3 3f 09 fe 25 78 aa d1 2f 3e c1 a4 e8 10 48 32 90 ea 0e d2 4b 8e d9 f2 cf 1c 76 eb 59 7f 05 f4 48 7c 61 f1 cb 50 9e Data Ascii: @9?S0>?OhIvgQu\|WcI>ps?-=uW;<nR7J^[8i5YLMJjL(/j{TK^~GR/V{yJZiX(Z:?tOV2=@2\|lf^ARQUc$iHP9>?%x/>H2KvYH\|aP
2024-03-29 07:44:25 UTC	1252	IN	Data Raw: af 3e 20 f7 bb f0 d9 ff 00 80 5c 7f 8d 35 be 1e fc 41 ff 00 9f bf 0d ff 00 df 37 1f e3 5e cb f6 81 cd 31 ae 05 3f ed 9c 57 97 dc 2f aa d3 3c 6f fe 15 ff 00 c4 1f f9 fa f0 df fd f3 71 fe 34 bf f0 80 fc 41 ff 00 9f af 0d ff 00 df 37 1f e3 5e c0 d7 02 91 ae 05 1f db 58 be eb ee 0f aa d3 3c 7b fe 10 3f 88 3f f3 f5 e1 bf fb e6 e3 fc 69 3f e1 04 f8 81 ff 00 3f 5e 1b ff 00 be 6e 3f c6 bd 7c ce 29 9e 78 a3 fb 6b 15 e5 f7 07 d5 69 9e 46 7c 0b f1 03 fe 7e bc 37 ff 00 7c 5c 7f 8d 37 fe 10 7f 88 1f f3 f5 e1 bf fb e2 e3 fc 6b d7 1a 71 da a3 6b 83 e9 4f fb 67 15 e5 f7 07 d5 69 9e 4b ff 00 08 3f c4 0f f9 f9 f0 d7 fd fb 9e 97 fe 10 9f 1f 77 ba f0 df fd fb 9e bd 63 ed 07 d2 98 d7 1e d4 7f 6c 62 7c be e0 fa ad 33 ca 5b c1 7e 3e ff 00 9f af 0e 1f fb 67 3f f8 d3 7f e1 0b f1 Data Ascii: > \5A7^1?W/<oq4A7^X<{??i??^n?\|)xkiF\|~7\|\7kqkOgiK?wclb\|3[~>g?
2024-03-29 07:44:25 UTC	1252	IN	Data Raw: 6c f7 a4 37 be f5 85 f6 cf 7a 46 bb f7 a7 c8 3e 63 71 6f 7d e9 4d e6 7a 9a c0 17 87 d6 9a 6f 09 ef 47 20 73 1b ff 00 6b 1e b4 cf b6 1f 5a c2 fb 61 f5 a6 fd b0 fa d1 c8 1c c6 f3 5e 1f 5a 6f db 0f ad 61 7d b8 f4 cd 34 de 9a 39 03 98 de fb 67 3f 7a 91 af 3f da ac 1f b6 1a 63 5e 1a 39 05 cc 6f b5 e1 f5 a6 1b c3 eb 58 6d 78 69 bf 6c a7 c8 2e 66 6e 7d b0 fa d3 1a f0 fa d6 27 db 29 bf 6c e7 ad 1c 83 37 3e d8 7d 69 3e d6 7f bd 58 6d 79 ef 4d fb 69 f5 a3 90 57 37 0d e1 cf de a4 6b b3 fd ea c3 37 be f4 8d 79 ba 8e 40 b9 b3 f6 ae 7a d2 35 e0 f5 ac 33 75 4c 6b ca 7c a2 e6 46 e9 bc 38 eb 4d fb 67 cb d6 b0 da f3 8a 4f b6 53 e5 0e 64 6d 35 e7 bd 34 de 7b d6 27 db 29 1a eb 83 47 20 73 1b 7f 6c 3f de a8 fe d8 7d 6b 17 ed 5e f4 df b6 7d 69 a8 87 31 b7 f6 c3 eb 4d fb 61 f5 Data Ascii: l7zF>cqo}MzoG skZa^Zoa}49g?z?c^9oXmxil.fn}')l7>}i>XmyMiW7k7y@z53uLk\|F8MgOSdm54{')G sl?}k^}i1Ma
2024-03-29 07:44:25 UTC	1252	IN	Data Raw: ca a0 9b 54 8a df 67 9d 3c 70 96 04 80 ec 06 71 d7 af e1 59 da 65 fb 6a 5a 65 ad d3 01 1b cf 12 ca 55 49 20 6e 50 70 2b e5 ef db 7e 42 c7 c2 20 9e 71 72 3e bf ea fa d7 81 83 c2 7d 66 ba a2 dd ae 77 d6 ab ec e0 e6 91 f5 6f f6 e5 a7 fc fe c1 ff 00 7f 57 fc 69 a7 5c b4 ff 00 9f c8 3f ef ea ff 00 8d 7e 58 67 fc e6 9b d5 b1 5f 4d fe ae 47 a5 5f c3 fe 09 e6 7f 68 bf e5 fc 4f d4 ff 00 ed cb 41 ff 00 2f 90 7f df d5 ff 00 1a 6f f6 e5 a7 fc fe 41 f8 48 bf e3 5f 96 6b fe 79 a0 8c 83 f7 47 d6 8f f5 76 3f f3 f7 f0 0f ed 17 fc a7 ea 62 eb 56 b2 3a aa 5d c2 e5 8e 00 57 04 93 e8 39 a2 6d 5a de dd b6 cb 73 14 6f 8c ed 67 00 e0 f7 af cd af 85 99 1f 11 fc 36 01 21 7e dd 08 c7 6e 58 75 ae fb f6 b4 3b be 2d 3f 42 3e c3 07 18 e3 9c d7 24 b2 44 b1 11 a0 aa 6e 9b d8 d7 eb cf d9 Data Ascii: Tg<pqYejZeUI nPp+~B qr>}fwoWi\?~Xg_MG_hOA/oAH_kyGv?bV:]W9mZsog6!~nXu;-?B>$Dn
2024-03-29 07:44:25 UTC	1252	IN	Data Raw: 7b a4 4f e7 59 5c cb 69 3f fc f4 89 c8 3f 98 af a0 be 04 fc 51 d6 fc 4d ac 3e 93 aa 4a b7 71 a4 5b 96 62 3e 6f c4 f7 af 33 17 93 4b 0f 07 52 12 ba 5f 79 d7 4b 18 aa 3e 59 2b 33 df fe d0 77 10 4e 29 8d 31 e7 e6 e9 54 cc 87 d4 8f a5 79 9f c5 6f 8c d6 be 06 8f ec 76 48 2e f5 46 19 0a 0e 44 7e e6 bc 4a 34 27 88 92 85 35 a9 d9 52 ac 69 ab c8 f5 2b 9d 42 3b 58 f7 cd 22 c6 be ac 40 15 ce 5f fc 4f f0 be 99 21 8a e7 5d b3 8a 41 c9 56 93 9a f8 ef c4 be 37 d6 7c 5d 71 e6 ea 77 d3 4e 84 f1 16 e2 10 7f c0 7a 56 1f b7 24 0e d5 f4 f4 b2 28 ff 00 cb d9 eb e4 79 92 cc 1d fd c4 7d af 1f c5 cf 08 4d 22 46 9e 21 b3 67 63 80 37 f5 ae 82 cb 5c b3 d4 97 36 b7 71 5c 7f d7 36 04 d7 c1 45 8e e5 c7 4f 4a b3 a6 ea d7 9a 2c eb 35 8d cc b6 b2 e7 70 68 98 83 5a 4f 21 85 bd ca 8e fe 62 Data Ascii: {OY\i??QM>Jq[b>o3KR_yK>Y+3wN)1TyovH.FD~J4'5Ri+B;X"@_O!]AV7\|]qwNzV$(y}M"F!gc7\6q\6EOJ,5phZO!b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49745	23.33.180.114	443

Timestamp	Bytes transferred	Direction	Data
2024-03-29 07:44:26 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-29 07:44:26 UTC	511	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=170323 Date: Fri, 29 Mar 2024 07:44:26 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49747	23.33.180.114	443

Timestamp	Bytes transferred	Direction	Data
2024-03-29 07:44:26 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-03-29 07:44:26 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=170323 Date: Fri, 29 Mar 2024 07:44:26 GMT Content-Length: 55 Connection: close X-CID: 2
2024-03-29 07:44:26 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.4	49751	142.251.16.132	443

Timestamp	Bytes transferred	Direction	Data
2024-03-29 07:44:30 UTC	382	OUT	GET /drawings/AFUiIQ9uANxeJaQ2I0gnvE5wHND7JtbDanhfMkHZMnQLVLZ4bFoWd70eaVhXN8Oha2bJlhtPVKS3Zvw3bYD64OLH38dpN218LNgKmoE8decMxr8Gw3ddtDN3HQDd8qLN3NGsf1hnAwDY9qfqjaGWCQZh3aMWuUa0WGQHr4hPHA HTTP/1.1 Accept: / User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35 Safari/537.36 Host: lh7-us.googleusercontent.com Connection: Keep-Alive
2024-03-29 07:44:30 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v0" Expires: Sat, 30 Mar 2024 07:44:30 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Date: Fri, 29 Mar 2024 07:44:30 GMT Server: fife Content-Length: 98252 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-03-29 07:44:30 UTC	730	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 03 ee 02 f1 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2
2024-03-29 07:44:30 UTC	1252	IN	Data Raw: a0 fe 27 1f f9 a8 1e 25 ff 00 c1 a4 df fc 55 79 d2 d4 b1 f7 a0 0f 43 1f b4 17 c4 dc 9f f8 b8 1e 25 ff 00 c1 ac df fc 55 3d 7f 68 0f 89 bf f4 50 3c 49 ff 00 83 49 bf f8 aa f3 e0 39 a7 ad 00 7a 12 fe d0 1f 13 3f e8 7f f1 27 fe 0d 26 ff 00 e2 aa 55 f8 fd f1 2f 6f fc 8f de 23 e9 ff 00 41 49 bf f8 aa f3 c5 a9 57 ee fe 14 01 e8 29 f1 f7 e2 5f fd 0f de 23 ff 00 c1 9c df fc 55 3d 7e 3e 7c 4a ff 00 a1 f7 c4 7f f8 33 9b ff 00 8a af 3e 8f bd 48 b4 01 e8 2b f1 eb e2 4e e1 ff 00 15 e7 88 ff 00 f0 67 37 ff 00 15 52 0f 8f 1f 12 37 0f f8 af 3c 45 ff 00 83 39 bf f8 aa e0 17 ef 0a 90 7d e1 40 1d fa fc 78 f8 8f ff 00 43 df 88 bf f0 67 37 ff 00 15 52 7f c2 f7 f8 8f 81 ff 00 15 d7 88 7f f0 65 37 ff 00 15 5c 02 d4 a3 a2 d0 07 a0 2f c7 4f 88 a7 fe 67 9f 10 ff 00 e0 ca 6f fe 2a Data Ascii: '%UyC%U=hP<II9z?'&U/o#AIW)_#U=~>\|J3>H+Ng7R7<E9}@xCg7Re7\/Ogo*
2024-03-29 07:44:30 UTC	1252	IN	Data Raw: ff 00 c1 84 bf fc 55 31 be 33 f8 f3 fe 87 2d 73 ff 00 06 12 ff 00 f1 55 c7 16 a6 31 a0 0e c1 be 34 78 f7 3f f2 39 eb bf f8 30 97 ff 00 8a a6 7f c2 e9 f1 f7 fd 0e 7a ef fe 0c 25 ff 00 e2 ab 8e 26 98 d4 01 d9 37 c6 af 1f 7f d0 e9 ae ff 00 e0 c2 5f fe 2a 98 df 1a fc 7f ff 00 43 a6 bd ff 00 83 09 7f f8 aa e3 1a a2 66 eb 40 1d 9b 7c 6b f8 81 ff 00 43 ae bd ff 00 83 19 7f f8 aa 8d be 36 7c 41 ff 00 a1 db 5e ff 00 c1 8c bf fc 55 71 ac dc 54 6c 68 03 b2 6f 8d ff 00 10 87 fc ce da ff 00 fe 0c 65 ff 00 e2 aa 16 f8 e5 f1 0b fe 87 7d 7f ff 00 06 32 ff 00 f1 55 c6 3b 13 50 bf 5a 00 ed 1f e3 9f c4 3f fa 1e 3c 41 ff 00 83 29 7f f8 aa 81 be 3a 7c 45 ff 00 a1 e7 c4 3f f8 32 9b ff 00 8a ae 32 4a 81 9a 80 3b 56 f8 ed f1 1b 3f f2 3d 78 87 ff 00 06 53 7f f1 54 d3 f1 df e2 3f Data Ascii: U13-sU14x?90z%&7_*Cf@\|kC6\|A^UqTlhoe}2U;PZ?<A):\|E?22J;V?=xST?
2024-03-29 07:44:30 UTC	1252	IN	Data Raw: a0 08 5a 98 d4 f6 a8 9b bd 00 35 ea 19 2a 46 a8 9a 80 18 d5 13 53 da 98 d4 01 1b d4 4f d2 a6 6a 85 e8 02 26 a6 b5 39 ea 36 a0 06 d3 5b ad 3a 9a dd e8 02 3a 46 eb 4e a6 b7 5a 00 86 4a 8d aa 49 2a 36 a0 06 d1 45 14 01 49 7b 54 ab da a2 5e d5 2a f6 a0 09 56 a4 a8 96 a4 1d 68 02 45 a9 63 ef 51 2d 4b 1f 7a 00 95 7a d3 d7 ad 31 7a d3 d7 ad 00 48 b5 2a fd df c2 a2 5a 95 7e ef e1 40 0f 8f bd 48 b5 1c 7d ea 45 a0 09 97 ef 0a 90 7d e1 51 af de 15 20 fb c2 80 24 5a 94 74 5a 89 6a 51 d0 50 04 bd 85 4a bd aa 2e c2 a5 5e d4 01 32 54 8a d5 1a d3 d6 80 24 53 52 03 51 af 6a 7d 00 48 1a 9e a6 a3 5e b5 22 f4 a0 07 ab 53 d5 aa 35 34 f5 a0 09 41 a9 15 aa 21 da 9e b4 01 30 34 f5 6a 8d 4f 34 f5 a0 09 01 a5 dd 4d 5a 75 00 3d 6a 40 6a 2a 7a 9a 00 93 75 38 76 a8 f3 4f 1d a8 01 f4 Data Ascii: Z5FSOj&96[::FNZJI6EI{T^VhEcQ-Kzz1zHZ~@H}E}Q $ZtZjQPJ.^2T$SRQj}H^"S54A!04jO4MZu=j@j*zu8vO
2024-03-29 07:44:30 UTC	1252	IN	Data Raw: 16 9f fc 35 d3 af c2 df 15 ff 00 d0 16 6f fb e9 3f c6 9c 3e 16 f8 ab a7 f6 2c df f7 d2 7f 8d 2e 78 f7 0e 49 76 67 30 bd a9 ea 4d 74 c3 e1 6f 8a 87 fc c1 a6 ff 00 be 93 ff 00 8a a7 8f 85 fe 29 1f f3 06 9b fe fa 4f fe 2a 8e 78 f7 0e 49 76 67 32 a4 d4 a8 6b a3 5f 85 fe 29 ff 00 a0 34 df f7 d2 7f f1 54 f5 f8 63 e2 8e fa 34 ff 00 f7 d2 7f f1 54 7b 48 77 0e 49 76 67 3a 0d 3d 49 c5 74 4b f0 cf c4 f9 ff 00 90 3c ff 00 f7 d2 7f f1 55 27 fc 2b 3f 13 ff 00 d0 1e 6f fb e9 7f c6 8f 69 0e e1 c9 2e cc e6 94 d4 8b 5d 18 f8 65 e2 7f fa 03 cd ff 00 7d 2f f8 d3 bf e1 59 f8 9f fe 81 13 7f df 4b fe 34 73 c3 b8 72 4b b3 39 bc d3 b3 5d 22 fc 32 f1 3f fd 02 26 ff 00 be 97 fc 69 ff 00 f0 ac fc 4f ff 00 40 89 bf ef a5 ff 00 1a 3d a4 3b 87 24 bb 33 9a 52 69 78 ae 90 7c 34 f1 3f fd Data Ascii: 5o?>,.xIvg0Mto)O*xIvg2k_)4Tc4T{HwIvg:=ItK<U'+?oi.]e}/YK4srK9]"2?&iO@=;$3Rix\|4?
2024-03-29 07:44:30 UTC	1252	IN	Data Raw: ff 00 40 39 ff 00 ef b4 ff 00 e2 aa 3f f8 53 fe 30 eb fd 87 3e 3f df 4f fe 2a 8e 68 f7 0e 49 76 67 17 51 b5 75 b7 9f 0b 7c 57 63 1b 49 3e 89 70 88 06 73 95 3f c8 d7 2d 3d bc b6 f2 18 e6 8d e1 90 75 57 18 c5 3b a7 b1 3c ad 6e 86 52 37 4a 5e 5b 38 fd 69 ac d4 c4 35 aa 16 a9 59 aa 16 e6 80 18 c4 d4 4c 4d 4a c3 de a1 6a 00 4c 9a 28 a2 80 2a 2f 6a 95 7b 54 4b da a5 5e d4 00 fa 91 7e f5 47 52 2f de a0 09 56 ad d8 da c9 7b 79 0d bc 4a 5a 69 58 28 db cf 5a a8 3a 1e f5 e9 3f 01 74 98 f5 4f 88 56 a1 d4 32 db c6 f3 ed 3d f0 40 fe b5 32 7c b1 6c a8 ae 66 91 eb 9e 14 f0 5e 8b f0 9f 41 86 f7 52 87 ed da b4 e5 51 55 63 f3 24 69 0f 48 e3 50 39 3e e2 bd a7 c3 3f 09 fe 25 78 aa d1 2f 3e c1 a4 e8 10 48 32 90 ea 0e d2 4b 8e d9 f2 cf 1c 76 eb 59 7f 05 f4 48 7c 61 f1 cb 50 9e Data Ascii: @9?S0>?OhIvgQu\|WcI>ps?-=uW;<nR7J^[8i5YLMJjL(/j{TK^~GR/V{yJZiX(Z:?tOV2=@2\|lf^ARQUc$iHP9>?%x/>H2KvYH\|aP
2024-03-29 07:44:30 UTC	1252	IN	Data Raw: af 3e 20 f7 bb f0 d9 ff 00 80 5c 7f 8d 35 be 1e fc 41 ff 00 9f bf 0d ff 00 df 37 1f e3 5e cb f6 81 cd 31 ae 05 3f ed 9c 57 97 dc 2f aa d3 3c 6f fe 15 ff 00 c4 1f f9 fa f0 df fd f3 71 fe 34 bf f0 80 fc 41 ff 00 9f af 0d ff 00 df 37 1f e3 5e c0 d7 02 91 ae 05 1f db 58 be eb ee 0f aa d3 3c 7b fe 10 3f 88 3f f3 f5 e1 bf fb e6 e3 fc 69 3f e1 04 f8 81 ff 00 3f 5e 1b ff 00 be 6e 3f c6 bd 7c ce 29 9e 78 a3 fb 6b 15 e5 f7 07 d5 69 9e 46 7c 0b f1 03 fe 7e bc 37 ff 00 7c 5c 7f 8d 37 fe 10 7f 88 1f f3 f5 e1 bf fb e2 e3 fc 6b d7 1a 71 da a3 6b 83 e9 4f fb 67 15 e5 f7 07 d5 69 9e 4b ff 00 08 3f c4 0f f9 f9 f0 d7 fd fb 9e 97 fe 10 9f 1f 77 ba f0 df fd fb 9e bd 63 ed 07 d2 98 d7 1e d4 7f 6c 62 7c be e0 fa ad 33 ca 5b c1 7e 3e ff 00 9f af 0e 1f fb 67 3f f8 d3 7f e1 0b f1 Data Ascii: > \5A7^1?W/<oq4A7^X<{??i??^n?\|)xkiF\|~7\|\7kqkOgiK?wclb\|3[~>g?
2024-03-29 07:44:30 UTC	1252	IN	Data Raw: 6c f7 a4 37 be f5 85 f6 cf 7a 46 bb f7 a7 c8 3e 63 71 6f 7d e9 4d e6 7a 9a c0 17 87 d6 9a 6f 09 ef 47 20 73 1b ff 00 6b 1e b4 cf b6 1f 5a c2 fb 61 f5 a6 fd b0 fa d1 c8 1c c6 f3 5e 1f 5a 6f db 0f ad 61 7d b8 f4 cd 34 de 9a 39 03 98 de fb 67 3f 7a 91 af 3f da ac 1f b6 1a 63 5e 1a 39 05 cc 6f b5 e1 f5 a6 1b c3 eb 58 6d 78 69 bf 6c a7 c8 2e 66 6e 7d b0 fa d3 1a f0 fa d6 27 db 29 bf 6c e7 ad 1c 83 37 3e d8 7d 69 3e d6 7f bd 58 6d 79 ef 4d fb 69 f5 a3 90 57 37 0d e1 cf de a4 6b b3 fd ea c3 37 be f4 8d 79 ba 8e 40 b9 b3 f6 ae 7a d2 35 e0 f5 ac 33 75 4c 6b ca 7c a2 e6 46 e9 bc 38 eb 4d fb 67 cb d6 b0 da f3 8a 4f b6 53 e5 0e 64 6d 35 e7 bd 34 de 7b d6 27 db 29 1a eb 83 47 20 73 1b 7f 6c 3f de a8 fe d8 7d 6b 17 ed 5e f4 df b6 7d 69 a8 87 31 b7 f6 c3 eb 4d fb 61 f5 Data Ascii: l7zF>cqo}MzoG skZa^Zoa}49g?z?c^9oXmxil.fn}')l7>}i>XmyMiW7k7y@z53uLk\|F8MgOSdm54{')G sl?}k^}i1Ma
2024-03-29 07:44:30 UTC	1252	IN	Data Raw: ca a0 9b 54 8a df 67 9d 3c 70 96 04 80 ec 06 71 d7 af e1 59 da 65 fb 6a 5a 65 ad d3 01 1b cf 12 ca 55 49 20 6e 50 70 2b e5 ef db 7e 42 c7 c2 20 9e 71 72 3e bf ea fa d7 81 83 c2 7d 66 ba a2 dd ae 77 d6 ab ec e0 e6 91 f5 6f f6 e5 a7 fc fe c1 ff 00 7f 57 fc 69 a7 5c b4 ff 00 9f c8 3f ef ea ff 00 8d 7e 58 67 fc e6 9b d5 b1 5f 4d fe ae 47 a5 5f c3 fe 09 e6 7f 68 bf e5 fc 4f d4 ff 00 ed cb 41 ff 00 2f 90 7f df d5 ff 00 1a 6f f6 e5 a7 fc fe 41 f8 48 bf e3 5f 96 6b fe 79 a0 8c 83 f7 47 d6 8f f5 76 3f f3 f7 f0 0f ed 17 fc a7 ea 62 eb 56 b2 3a aa 5d c2 e5 8e 00 57 04 93 e8 39 a2 6d 5a de dd b6 cb 73 14 6f 8c ed 67 00 e0 f7 af cd af 85 99 1f 11 fc 36 01 21 7e dd 08 c7 6e 58 75 ae fb f6 b4 3b be 2d 3f 42 3e c3 07 18 e3 9c d7 24 b2 44 b1 11 a0 aa 6e 9b d8 d7 eb cf d9 Data Ascii: Tg<pqYejZeUI nPp+~B qr>}fwoWi\?~Xg_MG_hOA/oAH_kyGv?bV:]W9mZsog6!~nXu;-?B>$Dn
2024-03-29 07:44:30 UTC	1252	IN	Data Raw: 7b a4 4f e7 59 5c cb 69 3f fc f4 89 c8 3f 98 af a0 be 04 fc 51 d6 fc 4d ac 3e 93 aa 4a b7 71 a4 5b 96 62 3e 6f c4 f7 af 33 17 93 4b 0f 07 52 12 ba 5f 79 d7 4b 18 aa 3e 59 2b 33 df fe d0 77 10 4e 29 8d 31 e7 e6 e9 54 cc 87 d4 8f a5 79 9f c5 6f 8c d6 be 06 8f ec 76 48 2e f5 46 19 0a 0e 44 7e e6 bc 4a 34 27 88 92 85 35 a9 d9 52 ac 69 ab c8 f5 2b 9d 42 3b 58 f7 cd 22 c6 be ac 40 15 ce 5f fc 4f f0 be 99 21 8a e7 5d b3 8a 41 c9 56 93 9a f8 ef c4 be 37 d6 7c 5d 71 e6 ea 77 d3 4e 84 f1 16 e2 10 7f c0 7a 56 1f b7 24 0e d5 f4 f4 b2 28 ff 00 cb d9 eb e4 79 92 cc 1d fd c4 7d af 1f c5 cf 08 4d 22 46 9e 21 b3 67 63 80 37 f5 ae 82 cb 5c b3 d4 97 36 b7 71 5c 7f d7 36 04 d7 c1 45 8e e5 c7 4f 4a b3 a6 ea d7 9a 2c eb 35 8d cc b6 b2 e7 70 68 98 83 5a 4f 21 85 bd ca 8e fe 62 Data Ascii: {OY\i??QM>Jq[b>o3KR_yK>Y+3wN)1TyovH.FD~J4'5Ri+B;X"@_O!]AV7\|]qwNzV$(y}M"F!gc7\6q\6EOJ,5phZO!b

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2180, Parent PID: 3584

General

Target ID:	0
Start time:	08:44:14
Start date:	29/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5100, Parent PID: 2180

General

Target ID:	2
Start time:	08:44:18
Start date:	29/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2036,i,9241410819684013873,1329734644504095488,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6536, Parent PID: 3584

General

Target ID:	3
Start time:	08:44:20
Start date:	29/03/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://docs.google.com/drawings/d/1sMWWZmFHgySuJJW6Q_-d9pVeMYwF7es8Tx2U_3zAnHw/preview#i5f40opaj3i2signp2"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://docs.google.com/drawings/d/1sMWWZmFHgySuJJW6Q_-d9pVeMYwF7es8Tx2U_3zAnHw/preview#i5f40opaj3i2signp2

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 47

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 2180, Parent PID: 3584

General

Chronological Activities

Analysis Process: chrome.exePID: 5100, Parent PID: 2180

General

Chronological Activities

Analysis Process: chrome.exePID: 6536, Parent PID: 3584

General

Chronological Activities

Windows Analysis Report
https://docs.google.com/drawings/d/1sMWWZmFHgySuJJW6Q_-d9pVeMYwF7es8Tx2U_3zAnHw/preview#i5f40opaj3i2signp2