Windows Analysis Report
https://docs.google.com/drawings/d/1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE/edit?usp=drive_web

Phishing

Source: about:blank	HTTP Parser: No favicon
Source: https://docs.google.com/drawings/d/1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE/edit?usp=drive_web	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fdrivesharing%2Fclientmodel%3Fid%3D1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE%26foreignService%3Ddrawings%26authuser%3D0%26origin%3Dhttps%3A%2F%2Fdocs.google.com&followup=https%3A%2F%2Fdocs.google.com%2Fdrivesharing%2Fclientmodel%3Fid%3D1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE%26foreignService%3Ddrawings%26authuser%3D0%26origin%3Dhttps%3A%2F%2Fdocs.google.com&ifkv=ARZ0qKKJuhY8HzREbxk0Ne9UgbM_KSZ6CVOsmAUdxp-G4y4k5NO0VBrCnNUP4230C60PGk2SroxN5A&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-317854723%3A1713275006299108&theme=mn&ddm=0	HTTP Parser: No favicon
Source: https://contacts.google.com/widget/hovercard/v/2?origin=https%3A%2F%2Fdocs.google.com&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.gapi.en.dCBC8e6ENbg.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo8oB7UmguRctpg6togRivSNxNKjzQ%2Fm%3D__features__#id=__HC_94253229&_gfid=__HC_94253229&parent=https%3A%2F%2Fdocs.google.com&pfname=&rpctoken=90446534	HTTP Parser: No favicon
Source: https://contacts.google.com/widget/hovercard/v/2?origin=https%3A%2F%2Fdocs.google.com&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.gapi.en.dCBC8e6ENbg.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo8oB7UmguRctpg6togRivSNxNKjzQ%2Fm%3D__features__#id=__HC_94253229&_gfid=__HC_94253229&parent=https%3A%2F%2Fdocs.google.com&pfname=&rpctoken=90446534	HTTP Parser: No favicon

Compliance

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49851 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.5:49747 version: TLS 1.2

Source:	Binary string: v.Pdb();a.F.listen(v,"createItems",a.jWb);a.F.listen(v,"beforeExecute",a.iWb);a.F.listen(v,exe,a.mWb);a.F.listen(v,"loadError",a.kWb);a.F.listen(v,xze,a.nWb);a.F.listen(v,"makeAnEncryptedCopyClicked",a.lWb);S(a.O,a.C.Ib,function(w){w.C&&a.D.Qn(rGa)});S(a.O,a.C.va,function(w){w.C&&w.F!=w.D&&a.D.Qn(rGa)});S(a.O,a.C.mf,function(w){w.C&&a.D.Qn(rGa)});S(a.O,a.C.Va,function(w){w.C&&w.D!=w.mimeType&&a.D.Qn(rGa)});a.D=v;a.ea&&(a.W=new Tqh(v),TU(a.ea,a.W));cx(a.C.D)?Ruh(a):S(a.O,a.C.D.F,function(){Ruh(a)}); source: chromecache_192.2.dr
Source:	Binary string: function Mwf(a){var c=a.W1b,d=a.pDb,e=a.F0a,f="";f=YU(c)?f+(""+c):YU(e)?f+"Try it":f+jb;c="";c=YU(d)?c+(""+d):YU(e)?c+"No thanks":c+Ada;var g=UU({X1b:f,qDb:c},a);g=g||{};a=g.iconUrl;a=X+W(Gae)+k+(YU(a)?'<img class="docs-promo-icon-container" alt="" src="'+W(fV(a))+tGd:"")+'<div class="docs-promo-text-container '+(YU(a)?" docs-promo-text-container-ltr":"")+k;d=g.title;e=g.RDb;var h=g.X1b;f=g.qDb;c=g.F0a;var l=g.gcc,m=g.url,n=g.x9b;g=g.z9b;h=YU(m)?VJd+W(eV(m))+'" class="docs-promo-action-container docs-more-element docs-promo-action-button-right" tabIndex="0" role="button" aria-label="'+ source: chromecache_192.2.dr
Source:	Binary string: "I\u2019ve recovered this item from the trash. Please use this version from now on.")})});Udf(c,"showcura")&&Uz(a.C.D,function(){a.D.Qn(V1d)});var e=Zw(a.C.F,19,1)||Zw(a.C.F,4,1);Udf(c,"disco")&&!e&&(a.J=new cqh,a.ua(a.J),a.V&&vX(a.V,a.J),a.F.listen(a.J,"Oc",a.nVb),a.J.render(),a.J.Ca(!0))}}}A.Ra=r("F");A.La=function(){this.W&&(this.W.tb(),delete this.W);this.D&&this.D.tb();delete this.D;this.F.tb();delete this.F;this.J&&this.V&&lWf(this.V,this.J);L.prototype.La.call(this)};function Uuh(a){Ay.call(this);this.J=new ps(this);this.ua(this.J);this.D=a;this.J.listen(this.D,"Uc",this.L);Cy(this,Vuh(this))}D(Uuh,Ay);Uuh.prototype.L=function(){Dy(this,Vuh(this))};function Vuh(a){var c=new Ey;c.put(sze,a.D.C);c.put(tze,a.D.D);c.put(uze,a.D.F);c.put(vze,a.D.canShare);return c};function Wuh(a){rs.call(this);this.F=a;this.D=this.C=null}D(Wuh,rs);A=Wuh.prototype;A.mta=function(a){this.C&&((this.D||(this.D=new ps(this))).jd(this.C,Ub,this.zTa),this.C.tb(),this.C=null);if(a){var c=new vW("",void 0);c.xb(a.childNodes[0]);c.vg("Share.");(this.D||(this.D=new ps(this))).listen(c,Ub,this.zTa);c.hb(!0);this.C=c}};A.zTa=function(){this.Qn(LP,{impressionType:3})};A.Pdb=function(){throw Error(BN);};A.Fcb=function(){throw Error(BN);};A.hBa=function(){throw Error(BN);}; source: chromecache_192.2.dr
Source:	Binary string: A.nta=function(a){this.H&&this.H.setMinimized(a)};A.Pdb=function(){this.yf=!0}; source: chromecache_192.2.dr
Source:	Binary string: hM+W("peoplekitComponentsHideconfirmationdialogImplHeadline")+k;g=(0===e?g+"Hide Suggestion?":g+"Show Suggestion?")+(FM+W("peoplekitComponentsHideconfirmationdialogImplDescription")+k);e=V((0===e?g+"This person won't be suggested again unless you search for them in Photos.":g+"Suggest this person when showing people results.")+CM);e=dR(gIj,{content:e,header:l});a.appendChild(e);l=g4(e,n$i);a=dIj(g4(e,"IbE0S"),{label:Ha});g=g={PDb:f};g=g.PDb;h="";switch(Fk(g)?g.toString():g){case "Confirm":h+="Confirm"; source: chromecache_137.2.dr

Networking

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49851 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /drawings/d/1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE/edit?usp=drive_web HTTP/1.1Host: docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/drawings/client/css/3249440579-editor_css_ltr.css HTTP/1.1Host: docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://docs.google.com/drawings/d/1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE/edit?usp=drive_webAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=KeZLnBg7w7xtQYKWsucJqBQGd-jI_eWo-1dacq4JpS1ste8_MEI7THQU7EGaSC9TvQ2HyFvz598FZ2E88A-lEbRLhWdM4aRGX9LjxlItXR2kHIkDspIQW2YF_GAU6X1aqDrYIBcn09PEMY5Y_UabPMU1Q4QesCK7ZETjcTqb-U4; GFE_RTT=112
Source: global traffic	HTTP traffic detected: GET /static/drawings/client/js/1986118873-editor_core.js HTTP/1.1Host: docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docs.google.com/drawings/d/1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE/edit?usp=drive_webAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=KeZLnBg7w7xtQYKWsucJqBQGd-jI_eWo-1dacq4JpS1ste8_MEI7THQU7EGaSC9TvQ2HyFvz598FZ2E88A-lEbRLhWdM4aRGX9LjxlItXR2kHIkDspIQW2YF_GAU6X1aqDrYIBcn09PEMY5Y_UabPMU1Q4QesCK7ZETjcTqb-U4; GFE_RTT=112
Source: global traffic	HTTP traffic detected: GET /drawings/AFUiIQ86c1TNhN5KbqdPGiyzBJbJ6YJATiEsN6F-tUwfal51OxqWPVtlstnBwDC4hwWdV0kWuhQQ7lLHzdRNxJ-57TwVocKxxnYfkUkVeBpJYpv4uVaC_Vw_G0qk6nX_YR0cGsf_KMXlctTZm4_ahi5-9Kd7k9A-xlEm7TMFCSgaP-A HTTP/1.1Host: lh7-us.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /drawings/AFUiIQ_yjj2aiK5c2Tsupjf_3Hc2ZnwdYR5ZW5h5b-Hq_FvXl5D_JLiXnxulhcPvkMFi9ggu7q6BtsTybBoo_46lLZEtpf-yfFuOlvY9fP2o_TgKyJ_AX8QeUWDeDhm9SUsD_t74y47eTWTvnuD_ssyS0DDynOx_FVP1WMAIPsAY HTTP/1.1Host: lh7-us.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/drawings/client/js/2873708214-editor_app.js HTTP/1.1Host: docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docs.google.com/drawings/d/1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE/edit?usp=drive_webAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=KeZLnBg7w7xtQYKWsucJqBQGd-jI_eWo-1dacq4JpS1ste8_MEI7THQU7EGaSC9TvQ2HyFvz598FZ2E88A-lEbRLhWdM4aRGX9LjxlItXR2kHIkDspIQW2YF_GAU6X1aqDrYIBcn09PEMY5Y_UabPMU1Q4QesCK7ZETjcTqb-U4; GFE_RTT=112
Source: global traffic	HTTP traffic detected: GET /drawings/AFUiIQ86c1TNhN5KbqdPGiyzBJbJ6YJATiEsN6F-tUwfal51OxqWPVtlstnBwDC4hwWdV0kWuhQQ7lLHzdRNxJ-57TwVocKxxnYfkUkVeBpJYpv4uVaC_Vw_G0qk6nX_YR0cGsf_KMXlctTZm4_ahi5-9Kd7k9A-xlEm7TMFCSgaP-A HTTP/1.1Host: lh7-us.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://docs.google.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docs.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "v0"
Source: global traffic	HTTP traffic detected: GET /drawings/AFUiIQ_yjj2aiK5c2Tsupjf_3Hc2ZnwdYR5ZW5h5b-Hq_FvXl5D_JLiXnxulhcPvkMFi9ggu7q6BtsTybBoo_46lLZEtpf-yfFuOlvY9fP2o_TgKyJ_AX8QeUWDeDhm9SUsD_t74y47eTWTvnuD_ssyS0DDynOx_FVP1WMAIPsAY HTTP/1.1Host: lh7-us.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://docs.google.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docs.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "v0"
Source: global traffic	HTTP traffic detected: GET /static/drawings/client/js/2795010636-editor_docos.js HTTP/1.1Host: docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docs.google.com/drawings/d/1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE/editAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=KeZLnBg7w7xtQYKWsucJqBQGd-jI_eWo-1dacq4JpS1ste8_MEI7THQU7EGaSC9TvQ2HyFvz598FZ2E88A-lEbRLhWdM4aRGX9LjxlItXR2kHIkDspIQW2YF_GAU6X1aqDrYIBcn09PEMY5Y_UabPMU1Q4QesCK7ZETjcTqb-U4; GFE_RTT=112; lbcs=0
Source: global traffic	HTTP traffic detected: GET /static/drawings/client/js/3050245168-editor_tertiary.js HTTP/1.1Host: docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docs.google.com/drawings/d/1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE/editAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=KeZLnBg7w7xtQYKWsucJqBQGd-jI_eWo-1dacq4JpS1ste8_MEI7THQU7EGaSC9TvQ2HyFvz598FZ2E88A-lEbRLhWdM4aRGX9LjxlItXR2kHIkDspIQW2YF_GAU6X1aqDrYIBcn09PEMY5Y_UabPMU1Q4QesCK7ZETjcTqb-U4; GFE_RTT=112; lbcs=0
Source: global traffic	HTTP traffic detected: GET /drivesharing/clientmodel?id=1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE&foreignService=drawings&authuser=0&origin=https%3A%2F%2Fdocs.google.com HTTP/1.1Host: docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://docs.google.com/drawings/d/1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE/editAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=KeZLnBg7w7xtQYKWsucJqBQGd-jI_eWo-1dacq4JpS1ste8_MEI7THQU7EGaSC9TvQ2HyFvz598FZ2E88A-lEbRLhWdM4aRGX9LjxlItXR2kHIkDspIQW2YF_GAU6X1aqDrYIBcn09PEMY5Y_UabPMU1Q4QesCK7ZETjcTqb-U4; lbcs=0
Source: global traffic	HTTP traffic detected: GET /drawings/d/1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE/test?id=1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE&sid=1b295fff611fbd35&includes_info_params=1&usp=drive_web&cros_files=false&VER=8&lsq=-1&u=ANONYMOUS_14143950788561711331&flr=0&gsi&ssfi=0&smv=9&smb=%5B9%2C%20%5D&cimpl=0&MODE=init&zx=auoqwbi465r0&t=1 HTTP/1.1Host: docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Same-Domain: 1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docs.google.com/drawings/d/1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE/editAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: COMPASS=drawings=CmEACWuJV-9KQzYGbqN5Ck7cCYhK0x7EoNMU9CSky4F0WRWKkEKrMsV3uKg-mzpc9PF8CV1D3gv1ZUTLBwnLo8YiBSOiwzCeHnejnW8G3jZdqMyYdX7lpTb4zL786-hZRv67EIed-rAGGnIACWuJV-ZlTIkQDTmqSU5HgVdxndpdVNXGSLvf_gMVFoFQFDIq_SXO-dthE6a91DaEhTzWGVCrQPBujiIYSgBgDzSJlgsNnW9ttC_DjKz1kzVXvMmcNxTRpKIDPBhCBCcVoLUEPtaCxBf9LvBCIqLlSwY=; NID=513=KeZLnBg7w7xtQYKWsucJqBQGd-jI_eWo-1dacq4JpS1ste8_MEI7THQU7EGaSC9TvQ2HyFvz598FZ2E88A-lEbRLhWdM4aRGX9LjxlItXR2kHIkDspIQW2YF_GAU6X1aqDrYIBcn09PEMY5Y_UabPMU1Q4QesCK7ZETjcTqb-U4; lbcs=0
Source: global traffic	HTTP traffic detected: GET /drawings/d/1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE/trash/read?id=1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE&includes_info_params=1&usp=drive_web&cros_files=false HTTP/1.1Host: docs.google.comConnection: keep-aliveX-Build: editors.drawings-frontend_20240402.02_p2sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Same-Domain: 1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"X-Rel-Id: 22d.67c52daa.ssec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docs.google.com/drawings/d/1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE/editAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: COMPASS=drawings=CmEACWuJV-9KQzYGbqN5Ck7cCYhK0x7EoNMU9CSky4F0WRWKkEKrMsV3uKg-mzpc9PF8CV1D3gv1ZUTLBwnLo8YiBSOiwzCeHnejnW8G3jZdqMyYdX7lpTb4zL786-hZRv67EIed-rAGGnIACWuJV-ZlTIkQDTmqSU5HgVdxndpdVNXGSLvf_gMVFoFQFDIq_SXO-dthE6a91DaEhTzWGVCrQPBujiIYSgBgDzSJlgsNnW9ttC_DjKz1kzVXvMmcNxTRpKIDPBhCBCcVoLUEPtaCxBf9LvBCIqLlSwY=; NID=513=KeZLnBg7w7xtQYKWsucJqBQGd-jI_eWo-1dacq4JpS1ste8_MEI7THQU7EGaSC9TvQ2HyFvz598FZ2E88A-lEbRLhWdM4aRGX9LjxlItXR2kHIkDspIQW2YF_GAU6X1aqDrYIBcn09PEMY5Y_UabPMU1Q4QesCK7ZETjcTqb-U4; lbcs=0
Source: global traffic	HTTP traffic detected: GET /drawings/AFUiIQ86c1TNhN5KbqdPGiyzBJbJ6YJATiEsN6F-tUwfal51OxqWPVtlstnBwDC4hwWdV0kWuhQQ7lLHzdRNxJ-57TwVocKxxnYfkUkVeBpJYpv4uVaC_Vw_G0qk6nX_YR0cGsf_KMXlctTZm4_ahi5-9Kd7k9A-xlEm7TMFCSgaP-A HTTP/1.1Host: lh7-us.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /drawings/AFUiIQ_yjj2aiK5c2Tsupjf_3Hc2ZnwdYR5ZW5h5b-Hq_FvXl5D_JLiXnxulhcPvkMFi9ggu7q6BtsTybBoo_46lLZEtpf-yfFuOlvY9fP2o_TgKyJ_AX8QeUWDeDhm9SUsD_t74y47eTWTvnuD_ssyS0DDynOx_FVP1WMAIPsAY HTTP/1.1Host: lh7-us.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /drawings/d/1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE/peruserchrome?id=1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE&includes_info_params=1&usp=drive_web&cros_files=false HTTP/1.1Host: docs.google.comConnection: keep-aliveX-Build: editors.drawings-frontend_20240402.02_p2sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Same-Domain: 1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"X-Rel-Id: 22d.67c52daa.ssec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docs.google.com/drawings/d/1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE/editAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: COMPASS=drawings=CmEACWuJV-9KQzYGbqN5Ck7cCYhK0x7EoNMU9CSky4F0WRWKkEKrMsV3uKg-mzpc9PF8CV1D3gv1ZUTLBwnLo8YiBSOiwzCeHnejnW8G3jZdqMyYdX7lpTb4zL786-hZRv67EIed-rAGGnIACWuJV-ZlTIkQDTmqSU5HgVdxndpdVNXGSLvf_gMVFoFQFDIq_SXO-dthE6a91DaEhTzWGVCrQPBujiIYSgBgDzSJlgsNnW9ttC_DjKz1kzVXvMmcNxTRpKIDPBhCBCcVoLUEPtaCxBf9LvBCIqLlSwY=; NID=513=KeZLnBg7w7xtQYKWsucJqBQGd-jI_eWo-1dacq4JpS1ste8_MEI7THQU7EGaSC9TvQ2HyFvz598FZ2E88A-lEbRLhWdM4aRGX9LjxlItXR2kHIkDspIQW2YF_GAU6X1aqDrYIBcn09PEMY5Y_UabPMU1Q4QesCK7ZETjcTqb-U4; lbcs=0
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.dCBC8e6ENbg.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo8oB7UmguRctpg6togRivSNxNKjzQ/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docs.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=KeZLnBg7w7xtQYKWsucJqBQGd-jI_eWo-1dacq4JpS1ste8_MEI7THQU7EGaSC9TvQ2HyFvz598FZ2E88A-lEbRLhWdM4aRGX9LjxlItXR2kHIkDspIQW2YF_GAU6X1aqDrYIBcn09PEMY5Y_UabPMU1Q4QesCK7ZETjcTqb-U4
Source: global traffic	HTTP traffic detected: GET /static/drawings/client/js/379622454-editor_peoplehovercard.js HTTP/1.1Host: docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docs.google.com/drawings/d/1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE/editAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=KeZLnBg7w7xtQYKWsucJqBQGd-jI_eWo-1dacq4JpS1ste8_MEI7THQU7EGaSC9TvQ2HyFvz598FZ2E88A-lEbRLhWdM4aRGX9LjxlItXR2kHIkDspIQW2YF_GAU6X1aqDrYIBcn09PEMY5Y_UabPMU1Q4QesCK7ZETjcTqb-U4; lbcs=0
Source: global traffic	HTTP traffic detected: GET /drawings/d/1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE/test?id=1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE&sid=1b295fff611fbd35&includes_info_params=1&usp=drive_web&cros_files=false&VER=8&lsq=-1&u=ANONYMOUS_14143950788561711331&flr=0&gsi&ssfi=1&smv=9&smb=%5B9%2C%20%5D&cimpl=0&TYPE=xmlhttp&zx=itwkudjwjcwa&t=1 HTTP/1.1Host: 0.docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Same-Domain: 1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://docs.google.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docs.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: COMPASS=drawings=CmEACWuJV-9KQzYGbqN5Ck7cCYhK0x7EoNMU9CSky4F0WRWKkEKrMsV3uKg-mzpc9PF8CV1D3gv1ZUTLBwnLo8YiBSOiwzCeHnejnW8G3jZdqMyYdX7lpTb4zL786-hZRv67EIed-rAGGnIACWuJV-ZlTIkQDTmqSU5HgVdxndpdVNXGSLvf_gMVFoFQFDIq_SXO-dthE6a91DaEhTzWGVCrQPBujiIYSgBgDzSJlgsNnW9ttC_DjKz1kzVXvMmcNxTRpKIDPBhCBCcVoLUEPtaCxBf9LvBCIqLlSwY=; NID=513=KAqSl-lJsTgbtwiEaujP6o5s-2nhhQcxqXLP60a9slYtWSZXNHHZqTIpGTiWya8bVgKNmWluNrkt8gb2bCkXWt-diC3s82uS3P50ndnrpXGNcFSo0LTqg7swGeDzR4YwETMFOyp1D4JPQ8ePwq9915nxSXCtKkocFpJwYrqEdoU
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.dCBC8e6ENbg.O/m=card/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo8oB7UmguRctpg6togRivSNxNKjzQ/cb=gapi.loaded_1 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docs.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=KAqSl-lJsTgbtwiEaujP6o5s-2nhhQcxqXLP60a9slYtWSZXNHHZqTIpGTiWya8bVgKNmWluNrkt8gb2bCkXWt-diC3s82uS3P50ndnrpXGNcFSo0LTqg7swGeDzR4YwETMFOyp1D4JPQ8ePwq9915nxSXCtKkocFpJwYrqEdoU
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.dCBC8e6ENbg.O/m=config/exm=card,gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo8oB7UmguRctpg6togRivSNxNKjzQ/cb=gapi.loaded_2 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docs.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=KAqSl-lJsTgbtwiEaujP6o5s-2nhhQcxqXLP60a9slYtWSZXNHHZqTIpGTiWya8bVgKNmWluNrkt8gb2bCkXWt-diC3s82uS3P50ndnrpXGNcFSo0LTqg7swGeDzR4YwETMFOyp1D4JPQ8ePwq9915nxSXCtKkocFpJwYrqEdoU
Source: global traffic	HTTP traffic detected: GET /drawings/d/1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE/trash/read?id=1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE&includes_info_params=1&usp=drive_web&cros_files=false HTTP/1.1Host: docs.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: COMPASS=drawings=CmEACWuJV-9KQzYGbqN5Ck7cCYhK0x7EoNMU9CSky4F0WRWKkEKrMsV3uKg-mzpc9PF8CV1D3gv1ZUTLBwnLo8YiBSOiwzCeHnejnW8G3jZdqMyYdX7lpTb4zL786-hZRv67EIed-rAGGnIACWuJV-ZlTIkQDTmqSU5HgVdxndpdVNXGSLvf_gMVFoFQFDIq_SXO-dthE6a91DaEhTzWGVCrQPBujiIYSgBgDzSJlgsNnW9ttC_DjKz1kzVXvMmcNxTRpKIDPBhCBCcVoLUEPtaCxBf9LvBCIqLlSwY=; lbcs=0; NID=513=KAqSl-lJsTgbtwiEaujP6o5s-2nhhQcxqXLP60a9slYtWSZXNHHZqTIpGTiWya8bVgKNmWluNrkt8gb2bCkXWt-diC3s82uS3P50ndnrpXGNcFSo0LTqg7swGeDzR4YwETMFOyp1D4JPQ8ePwq9915nxSXCtKkocFpJwYrqEdoU
Source: global traffic	HTTP traffic detected: GET /drawings/d/1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE/test?id=1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE&sid=1b295fff611fbd35&includes_info_params=1&usp=drive_web&cros_files=false&VER=8&lsq=-1&u=ANONYMOUS_14143950788561711331&flr=0&gsi&ssfi=0&smv=9&smb=%5B9%2C%20%5D&cimpl=0&MODE=init&zx=auoqwbi465r0&t=1 HTTP/1.1Host: docs.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: COMPASS=drawings=CmEACWuJV-9KQzYGbqN5Ck7cCYhK0x7EoNMU9CSky4F0WRWKkEKrMsV3uKg-mzpc9PF8CV1D3gv1ZUTLBwnLo8YiBSOiwzCeHnejnW8G3jZdqMyYdX7lpTb4zL786-hZRv67EIed-rAGGnIACWuJV-ZlTIkQDTmqSU5HgVdxndpdVNXGSLvf_gMVFoFQFDIq_SXO-dthE6a91DaEhTzWGVCrQPBujiIYSgBgDzSJlgsNnW9ttC_DjKz1kzVXvMmcNxTRpKIDPBhCBCcVoLUEPtaCxBf9LvBCIqLlSwY=; lbcs=0; NID=513=KAqSl-lJsTgbtwiEaujP6o5s-2nhhQcxqXLP60a9slYtWSZXNHHZqTIpGTiWya8bVgKNmWluNrkt8gb2bCkXWt-diC3s82uS3P50ndnrpXGNcFSo0LTqg7swGeDzR4YwETMFOyp1D4JPQ8ePwq9915nxSXCtKkocFpJwYrqEdoU
Source: global traffic	HTTP traffic detected: GET /drawings/d/1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE/peruserchrome?id=1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE&includes_info_params=1&usp=drive_web&cros_files=false HTTP/1.1Host: docs.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: COMPASS=drawings=CmEACWuJV-9KQzYGbqN5Ck7cCYhK0x7EoNMU9CSky4F0WRWKkEKrMsV3uKg-mzpc9PF8CV1D3gv1ZUTLBwnLo8YiBSOiwzCeHnejnW8G3jZdqMyYdX7lpTb4zL786-hZRv67EIed-rAGGnIACWuJV-ZlTIkQDTmqSU5HgVdxndpdVNXGSLvf_gMVFoFQFDIq_SXO-dthE6a91DaEhTzWGVCrQPBujiIYSgBgDzSJlgsNnW9ttC_DjKz1kzVXvMmcNxTRpKIDPBhCBCcVoLUEPtaCxBf9LvBCIqLlSwY=; lbcs=0; NID=513=KAqSl-lJsTgbtwiEaujP6o5s-2nhhQcxqXLP60a9slYtWSZXNHHZqTIpGTiWya8bVgKNmWluNrkt8gb2bCkXWt-diC3s82uS3P50ndnrpXGNcFSo0LTqg7swGeDzR4YwETMFOyp1D4JPQ8ePwq9915nxSXCtKkocFpJwYrqEdoU
Source: global traffic	HTTP traffic detected: GET /drawings/font/getmetadata?includes_info_params=1&usp=drive_web&cros_files=false HTTP/1.1Host: docs.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lbcs=0; NID=513=KAqSl-lJsTgbtwiEaujP6o5s-2nhhQcxqXLP60a9slYtWSZXNHHZqTIpGTiWya8bVgKNmWluNrkt8gb2bCkXWt-diC3s82uS3P50ndnrpXGNcFSo0LTqg7swGeDzR4YwETMFOyp1D4JPQ8ePwq9915nxSXCtKkocFpJwYrqEdoU
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=KAqSl-lJsTgbtwiEaujP6o5s-2nhhQcxqXLP60a9slYtWSZXNHHZqTIpGTiWya8bVgKNmWluNrkt8gb2bCkXWt-diC3s82uS3P50ndnrpXGNcFSo0LTqg7swGeDzR4YwETMFOyp1D4JPQ8ePwq9915nxSXCtKkocFpJwYrqEdoU
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=QNjmm9-aXCJjLHiRUwmIUtV3eDQFtCi5FBtjckO9i4C-1HGXbsQF2QZh4wKaDASfjFayFLhOw5FKrPBeMMyzqjRN2DzpGUloN3OynxcmhKb7AJgQOHoiM7rDyPz083crhMb7XMY5Y6YTwgycOPgz7cbH5DhX9MX-ijqLZ172tW4
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=QNjmm9-aXCJjLHiRUwmIUtV3eDQFtCi5FBtjckO9i4C-1HGXbsQF2QZh4wKaDASfjFayFLhOw5FKrPBeMMyzqjRN2DzpGUloN3OynxcmhKb7AJgQOHoiM7rDyPz083crhMb7XMY5Y6YTwgycOPgz7cbH5DhX9MX-ijqLZ172tW4
Source: global traffic	HTTP traffic detected: GET /widget/hovercard/v/2?origin=https%3A%2F%2Fdocs.google.com&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.gapi.en.dCBC8e6ENbg.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo8oB7UmguRctpg6togRivSNxNKjzQ%2Fm%3D__features__ HTTP/1.1Host: contacts.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://docs.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=QNjmm9-aXCJjLHiRUwmIUtV3eDQFtCi5FBtjckO9i4C-1HGXbsQF2QZh4wKaDASfjFayFLhOw5FKrPBeMMyzqjRN2DzpGUloN3OynxcmhKb7AJgQOHoiM7rDyPz083crhMb7XMY5Y6YTwgycOPgz7cbH5DhX9MX-ijqLZ172tW4
Source: global traffic	HTTP traffic detected: GET /drawings/d/1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE/bind?id=1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE&sid=1b295fff611fbd35&includes_info_params=1&usp=drive_web&cros_files=false&VER=8&lsq=-1&u=ANONYMOUS_14143950788561711331&flr=0&gsi&ssfi=2&smv=9&smb=%5B9%2C%20%5D&cimpl=0&RID=66433&CVER=1&zx=7cd8g6j83z1k&t=1 HTTP/1.1Host: docs.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: COMPASS=drawings=CmEACWuJV-9KQzYGbqN5Ck7cCYhK0x7EoNMU9CSky4F0WRWKkEKrMsV3uKg-mzpc9PF8CV1D3gv1ZUTLBwnLo8YiBSOiwzCeHnejnW8G3jZdqMyYdX7lpTb4zL786-hZRv67EIed-rAGGnIACWuJV-ZlTIkQDTmqSU5HgVdxndpdVNXGSLvf_gMVFoFQFDIq_SXO-dthE6a91DaEhTzWGVCrQPBujiIYSgBgDzSJlgsNnW9ttC_DjKz1kzVXvMmcNxTRpKIDPBhCBCcVoLUEPtaCxBf9LvBCIqLlSwY=; lbcs=0; NID=513=QNjmm9-aXCJjLHiRUwmIUtV3eDQFtCi5FBtjckO9i4C-1HGXbsQF2QZh4wKaDASfjFayFLhOw5FKrPBeMMyzqjRN2DzpGUloN3OynxcmhKb7AJgQOHoiM7rDyPz083crhMb7XMY5Y6YTwgycOPgz7cbH5DhX9MX-ijqLZ172tW4
Source: global traffic	HTTP traffic detected: GET /drawings/d/1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE/bind?id=1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE&sid=1b295fff611fbd35&includes_info_params=1&usp=drive_web&cros_files=false&VER=8&lsq=1713274425980&u=ANONYMOUS_14143950788561711331&flr=0&gsi&ssfi=3&smv=9&smb=%5B9%2C%20%5D&cimpl=0&RID=rpc&SID=6DB49C7BC146118B&CI=0&AID=3&TYPE=xmlhttp&zx=z7vca99ux3ke&t=1 HTTP/1.1Host: 0.docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Same-Domain: 1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://docs.google.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docs.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: COMPASS=drawings=CmEACWuJV-9KQzYGbqN5Ck7cCYhK0x7EoNMU9CSky4F0WRWKkEKrMsV3uKg-mzpc9PF8CV1D3gv1ZUTLBwnLo8YiBSOiwzCeHnejnW8G3jZdqMyYdX7lpTb4zL786-hZRv67EIed-rAGGnIACWuJV-ZlTIkQDTmqSU5HgVdxndpdVNXGSLvf_gMVFoFQFDIq_SXO-dthE6a91DaEhTzWGVCrQPBujiIYSgBgDzSJlgsNnW9ttC_DjKz1kzVXvMmcNxTRpKIDPBhCBCcVoLUEPtaCxBf9LvBCIqLlSwY=; NID=513=QNjmm9-aXCJjLHiRUwmIUtV3eDQFtCi5FBtjckO9i4C-1HGXbsQF2QZh4wKaDASfjFayFLhOw5FKrPBeMMyzqjRN2DzpGUloN3OynxcmhKb7AJgQOHoiM7rDyPz083crhMb7XMY5Y6YTwgycOPgz7cbH5DhX9MX-ijqLZ172tW4
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=QNjmm9-aXCJjLHiRUwmIUtV3eDQFtCi5FBtjckO9i4C-1HGXbsQF2QZh4wKaDASfjFayFLhOw5FKrPBeMMyzqjRN2DzpGUloN3OynxcmhKb7AJgQOHoiM7rDyPz083crhMb7XMY5Y6YTwgycOPgz7cbH5DhX9MX-ijqLZ172tW4
Source: global traffic	HTTP traffic detected: GET /_/scs/social-static/_/js/k=boq.SocialPeopleHovercardUi.en_US.Mj6jj1hrTuE.es5.O/am=gImuAQ/d=1/excm=_b,_tp,hovercardwidget/ed=1/dg=0/wt=2/ujg=1/rs=AGLTcCNiAqj6O0JAzAcAu-x9i-UlMgn2rQ/m=_b,_tp HTTP/1.1Host: contacts.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://contacts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=QNjmm9-aXCJjLHiRUwmIUtV3eDQFtCi5FBtjckO9i4C-1HGXbsQF2QZh4wKaDASfjFayFLhOw5FKrPBeMMyzqjRN2DzpGUloN3OynxcmhKb7AJgQOHoiM7rDyPz083crhMb7XMY5Y6YTwgycOPgz7cbH5DhX9MX-ijqLZ172tW4
Source: global traffic	HTTP traffic detected: GET /_/scs/social-static/_/js/k=boq.SocialPeopleHovercardUi.en_US.Mj6jj1hrTuE.es5.O/ck=boq.SocialPeopleHovercardUi.3op5Ju_H1XA.L.B1.O/am=gImuAQ/d=1/exm=_b,_tp/excm=_b,_tp,hovercardwidget/ed=1/wt=2/ujg=1/rs=AGLTcCO8nnHC7efsXrx3vINF5CWJEqmf4Q/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=ws9Tlc,n73qwf,GkRiKb,e5qFLc,IZT63,UUJqVe,O1Gjze,byfTOb,lsjVmc,xUdipf,OTA3Ae,COQbmf,fKUV3e,aurFic,U0aPgd,ZwDk9d,V3dDOb,WO9ee,mI3LFb,Xg7Hl,O6y8ed,PrPYRd,MpJwZc,LEikZe,NwH0H,OmgaI,lazG7b,XVMNvd,L1AAkb,KUM7Z,Mlhmy,s39S4,lwddkf,gychg,w9hDv,EEDORb,RMhBfe,SdcwHb,aW3pY,pw70Gc,EFQ78c,Ulmmrd,ZfAoz,mdR7q,wmnU7d,xQtZb,JNoxi,kWgXee,MI6k7c,kjKdXe,BVgquf,QIhFr,ovKuLd,hKSk3e,yDVVkb,hc6Ubd,SpsfSb,KG2eXe,Z5uLle,MdUzUe,VwDzFe,zbML3c,A7fCU,zr1jrb,Uas9Hd,pjICDe HTTP/1.1Host: contacts.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://contacts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=QNjmm9-aXCJjLHiRUwmIUtV3eDQFtCi5FBtjckO9i4C-1HGXbsQF2QZh4wKaDASfjFayFLhOw5FKrPBeMMyzqjRN2DzpGUloN3OynxcmhKb7AJgQOHoiM7rDyPz083crhMb7XMY5Y6YTwgycOPgz7cbH5DhX9MX-ijqLZ172tW4
Source: global traffic	HTTP traffic detected: GET /_/scs/social-static/_/js/k=boq.SocialPeopleHovercardUi.en_US.Mj6jj1hrTuE.es5.O/ck=boq.SocialPeopleHovercardUi.3op5Ju_H1XA.L.B1.O/am=gImuAQ/d=1/exm=A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Xg7Hl,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fKUV3e,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pw70Gc,s39S4,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_tp,hovercardwidget/ed=1/wt=2/ujg=1/rs=AGLTcCO8nnHC7efsXrx3vINF5CWJEqmf4Q/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=bm51tf HTTP/1.1Host: contacts.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://contacts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=QNjmm9-aXCJjLHiRUwmIUtV3eDQFtCi5FBtjckO9i4C-1HGXbsQF2QZh4wKaDASfjFayFLhOw5FKrPBeMMyzqjRN2DzpGUloN3OynxcmhKb7AJgQOHoiM7rDyPz083crhMb7XMY5Y6YTwgycOPgz7cbH5DhX9MX-ijqLZ172tW4
Source: global traffic	HTTP traffic detected: GET /js/api.js HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://contacts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=QNjmm9-aXCJjLHiRUwmIUtV3eDQFtCi5FBtjckO9i4C-1HGXbsQF2QZh4wKaDASfjFayFLhOw5FKrPBeMMyzqjRN2DzpGUloN3OynxcmhKb7AJgQOHoiM7rDyPz083crhMb7XMY5Y6YTwgycOPgz7cbH5DhX9MX-ijqLZ172tW4
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.dCBC8e6ENbg.O/m=gapi_iframes/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo8oB7UmguRctpg6togRivSNxNKjzQ/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://contacts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=QNjmm9-aXCJjLHiRUwmIUtV3eDQFtCi5FBtjckO9i4C-1HGXbsQF2QZh4wKaDASfjFayFLhOw5FKrPBeMMyzqjRN2DzpGUloN3OynxcmhKb7AJgQOHoiM7rDyPz083crhMb7XMY5Y6YTwgycOPgz7cbH5DhX9MX-ijqLZ172tW4
Source: global traffic	HTTP traffic detected: GET /_/scs/social-static/_/js/k=boq.SocialPeopleHovercardUi.en_US.Mj6jj1hrTuE.es5.O/ck=boq.SocialPeopleHovercardUi.3op5Ju_H1XA.L.B1.O/am=gImuAQ/d=1/exm=A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Xg7Hl,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,e5qFLc,fKUV3e,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pw70Gc,s39S4,w9hDv,wmnU7d,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_tp,hovercardwidget/ed=1/wt=2/ujg=1/rs=AGLTcCO8nnHC7efsXrx3vINF5CWJEqmf4Q/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:wmnU7d;yxTchf:KUM7Z;zxnPse:GkRiKb/m=Wt6vjf,hhhU8,FCpbqb,WhJNk HTTP/1.1Host: contacts.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://contacts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=QNjmm9-aXCJjLHiRUwmIUtV3eDQFtCi5FBtjckO9i4C-1HGXbsQF2QZh4wKaDASfjFayFLhOw5FKrPBeMMyzqjRN2DzpGUloN3OynxcmhKb7AJgQOHoiM7rDyPz083crhMb7XMY5Y6YTwgycOPgz7cbH5DhX9MX-ijqLZ172tW4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=QNjmm9-aXCJjLHiRUwmIUtV3eDQFtCi5FBtjckO9i4C-1HGXbsQF2QZh4wKaDASfjFayFLhOw5FKrPBeMMyzqjRN2DzpGUloN3OynxcmhKb7AJgQOHoiM7rDyPz083crhMb7XMY5Y6YTwgycOPgz7cbH5DhX9MX-ijqLZ172tW4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=QNjmm9-aXCJjLHiRUwmIUtV3eDQFtCi5FBtjckO9i4C-1HGXbsQF2QZh4wKaDASfjFayFLhOw5FKrPBeMMyzqjRN2DzpGUloN3OynxcmhKb7AJgQOHoiM7rDyPz083crhMb7XMY5Y6YTwgycOPgz7cbH5DhX9MX-ijqLZ172tW4
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=QNjmm9-aXCJjLHiRUwmIUtV3eDQFtCi5FBtjckO9i4C-1HGXbsQF2QZh4wKaDASfjFayFLhOw5FKrPBeMMyzqjRN2DzpGUloN3OynxcmhKb7AJgQOHoiM7rDyPz083crhMb7XMY5Y6YTwgycOPgz7cbH5DhX9MX-ijqLZ172tW4

Source: chromecache_192.2.dr	String found in binary or memory: A.Na=function(){this.hb(this.txa,this.xAa);for(var a=this.Aa(),c=this.Ra(),d=0,e;e=this.D[d];d++){var f=a.ma(this.m1.BNa+"-"+e.C);c.Bf(f,sJ,Hk(this.I7b,this,e))}};A.La=function(){qJ.prototype.La.call(this);delete this.F;delete this.D;this.C=null};A.txa=!0;A.xAa=!1;A.m1=null;A.h0a=!1;function RTh(a,c){hs.call(this,"oe",c);this.context=a}D(RTh,hs);function STh(){}D(STh,LTh);STh.prototype.checkVisibility=function(a){return"un"==a||"pub"==a};function TTh(){MTh.call(this,"fb","Facebook","Share via Facebook","ess-facebook-icon")}Mk(TTh,MTh);TTh.prototype.getUrl=function(a){var c=Yo(a,function(d){return d.kc()});a=Yo(a,function(d){return d.getUrl()});return"http://www.facebook.com/share.php?u="+Vq(a.join(","))+"&t="+Vq(c.join(","))};function UTh(){MTh.call(this,"gm","Gmail","Share via Gmail","ess-gmail-icon")}D(UTh,MTh);UTh.prototype.getUrl=function(a){a=Yo(a,function(c){return c.kc()+FL+c.getUrl()});return"https://mail.google.com/mail/?view=cm&ui=2&cmid=0&fs=1&tf=1&body="+Vq(a.join("\n"))};function VTh(){MTh.call(this,"tw","Twitter","Share via Twitter","ess-twitter-icon")}D(VTh,MTh);VTh.prototype.getUrl=function(a){for(var c=[],d=0,e=0;e<a.length;e++){var f=a[e].getUrl(),g=d+f.length+(d?1:0);if(140<g)break;else c.push(f),d=g}for(e=0;e<a.length;e++){f=a[e].kc();g=c[e]?FL:"";var h=140-d-g.length;if(h<f.length)if(4<=h)f=f.substring(0,h-3)+"\u2026";else break;d+=f.length+g.length;c[e]=f+g+(c[e]?c[e]:"")}a=c.join(" ");return"https://twitter.com/intent/tweet?text="+Vq(a)};function Z0(a,c,d){c0.call(this,a,c,S_.lb(),d);this.D=new WTh(1E3);this.ua(this.D)}Mk(Z0,c0);Z0.prototype.Fa=function(){Z0.Kb.Fa.call(this);WI(this.ma(),"jfk-select")}; equals www.facebook.com (Facebook)
Source: chromecache_192.2.dr	String found in binary or memory: A.Na=function(){this.hb(this.txa,this.xAa);for(var a=this.Aa(),c=this.Ra(),d=0,e;e=this.D[d];d++){var f=a.ma(this.m1.BNa+"-"+e.C);c.Bf(f,sJ,Hk(this.I7b,this,e))}};A.La=function(){qJ.prototype.La.call(this);delete this.F;delete this.D;this.C=null};A.txa=!0;A.xAa=!1;A.m1=null;A.h0a=!1;function RTh(a,c){hs.call(this,"oe",c);this.context=a}D(RTh,hs);function STh(){}D(STh,LTh);STh.prototype.checkVisibility=function(a){return"un"==a||"pub"==a};function TTh(){MTh.call(this,"fb","Facebook","Share via Facebook","ess-facebook-icon")}Mk(TTh,MTh);TTh.prototype.getUrl=function(a){var c=Yo(a,function(d){return d.kc()});a=Yo(a,function(d){return d.getUrl()});return"http://www.facebook.com/share.php?u="+Vq(a.join(","))+"&t="+Vq(c.join(","))};function UTh(){MTh.call(this,"gm","Gmail","Share via Gmail","ess-gmail-icon")}D(UTh,MTh);UTh.prototype.getUrl=function(a){a=Yo(a,function(c){return c.kc()+FL+c.getUrl()});return"https://mail.google.com/mail/?view=cm&ui=2&cmid=0&fs=1&tf=1&body="+Vq(a.join("\n"))};function VTh(){MTh.call(this,"tw","Twitter","Share via Twitter","ess-twitter-icon")}D(VTh,MTh);VTh.prototype.getUrl=function(a){for(var c=[],d=0,e=0;e<a.length;e++){var f=a[e].getUrl(),g=d+f.length+(d?1:0);if(140<g)break;else c.push(f),d=g}for(e=0;e<a.length;e++){f=a[e].kc();g=c[e]?FL:"";var h=140-d-g.length;if(h<f.length)if(4<=h)f=f.substring(0,h-3)+"\u2026";else break;d+=f.length+g.length;c[e]=f+g+(c[e]?c[e]:"")}a=c.join(" ");return"https://twitter.com/intent/tweet?text="+Vq(a)};function Z0(a,c,d){c0.call(this,a,c,S_.lb(),d);this.D=new WTh(1E3);this.ua(this.D)}Mk(Z0,c0);Z0.prototype.Fa=function(){Z0.Kb.Fa.call(this);WI(this.ma(),"jfk-select")}; equals www.twitter.com (Twitter)
Source: chromecache_130.2.dr	String found in binary or memory: disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"},plus_share:{params:{url:""}, equals www.youtube.com (Youtube)
Source: chromecache_192.2.dr	String found in binary or memory: function J0f(a,c){K0f(a);var d=new F0f(c,a.D);5==c?a.Vt.callback(d):(a.C.onload=p(),a.C.onerror=p(),lr(a.C),3<=a.D?a.Vt.callback(d):I0f(a))}function K0f(a){clearTimeout(a.F);a.F=null;clearTimeout(a.H);a.H=null}G0f.prototype.getStatus=function(){return this.Vt&&Pu(this.Vt)?this.Vt.Ja():new F0f(1,this.D)};function r0f(a,c,d,e,f,g,h){this.L=a;this.H=c;this.F=d;this.V=e;this.O=f;this.R=g;this.J=h;this.C=this.D=null};function L0f(a,c,d,e,f,g,h){this.O=a;this.D=c;this.C=d;this.L=e;this.F=f;this.H=g;this.J=h};var M0f=vk(["https://www.youtube.com/iframe_api"]),N0f=vk(["https://youtube.googleapis.com/iframe_api"]);function O0f(a){this.J=a=void 0===a?this.L:a;this.H=P0f;this.D=this.J(this.H);this.C=0;this.F=[]}function Q0f(a){for(var c=0;c<a.F.length;c++)a.F[c].callback(a.D.getStatus());a.F=[]}function R0f(a,c){2===a.C&&c.callback(a.D.getStatus());a.F.push(c);1!==a.C&&(a.D=a.J(a.H),a.C=1,H0f(a.D).addCallback(function(d){2!==d.zx()&&(a.C=3,Q0f(a))}))}O0f.prototype.L=function(a){return new G0f(a)}; equals www.youtube.com (Youtube)
Source: chromecache_174.2.dr	String found in binary or memory: hf=u(["https://sandbox.google.com/tools/feedback/"]),jf=u(["https://www.google.cn/tools/feedback/"]),kf=u(["https://help.youtube.com/tools/feedback/"]),lf=u(["https://asx-frontend-staging.corp.google.com/inapp/"]),mf=u(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),nf=u(["https://localhost.corp.google.com/inapp/"]),of=u(["https://localhost.proxy.googlers.com/inapp/"]),pf=S(Re),qf=[S(Se),S(Te)],rf=[S(Ue),S(Ve),S(We),S(Xe),S(Ye),S(Ze),S($e),S(af),S(bf),S(cf)],sf=[S(df),S(ef)],tf= equals www.youtube.com (Youtube)
Source: chromecache_192.2.dr	String found in binary or memory: zt(d,2):null,e=Ut(d,3)?zt(d,3):null,d=vt(d,4),a.H=new fng(!0,g,c,e,d)):a.H=new fng(!1,null,null,null,!1)}}else Tng.prototype.cKa.call(this,a,c,d,e,f)};Rng.prototype.K8a=function(a){Z9f();return"https://www.youtube.com/watch?v="+I($9f(a))};function pog(a){return(new zW("{SECONDS, plural, =1 {{SECONDS} second} other {{SECONDS} seconds}}")).format({SECONDS:a})};function qog(){this.H=this.F=this.D=this.C=0}D(qog,F);function nog(a,c){var d=oog(a);a=[];if(0<d.C){var e=d.C;e=(new zW("{HOURS, plural, =1 {{HOURS} hour} other {{HOURS} hours}}")).format({HOURS:e});a.push(e)}0<d.D&&(e=d.D,e=(new zW("{MINUTES, plural, =1 {{MINUTES} minute} other {{MINUTES} minutes}}")).format({MINUTES:e}),a.push(e));0<d.F&&(e=pog(d.F),a.push(e));!0===c&&0<d.H&&(c=d.H,c=(new zW("{MILLISECONDS, plural, =1 {{MILLISECONDS} millisecond} other {{MILLISECONDS} milliseconds}}")).format({MILLISECONDS:c}),a.push(c));on(a)&&(c=pog(0),a.push(c)); equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: docs.google.com

Source: unknown

HTTP traffic detected: POST /drawings/d/1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE/docos/p/sync?sid=1b295fff611fbd35&vc=0&c=0&w=0&flr=0&smv=9&smb=%5B9%2C%20%5D&includes_info_params=1 HTTP/1.1Host: docs.google.comConnection: keep-aliveContent-Length: 14X-Build: editors.drawings-frontend_20240402.02_p2sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Same-Domain: 1sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"Content-Type: application/x-www-form-urlencoded;charset=UTF-8sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"X-Rel-Id: 22d.67c52daa.ssec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://docs.google.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCJDKzQEIucrNAQi/0c0BCIrTzQEI0NbNAQio2M0BCPnA1BUYj87NARi60s0BGMLYzQEY642lFw==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://docs.google.com/drawings/d/1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE/edit?usp=drive_webAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: COMPASS=drawings=CmEACWuJV-9KQzYGbqN5Ck7cCYhK0x7EoNMU9CSky4F0WRWKkEKrMsV3uKg-mzpc9PF8CV1D3gv1ZUTLBwnLo8YiBSOiwzCeHnejnW8G3jZdqMyYdX7lpTb4zL786-hZRv67EIed-rAGGnIACWuJV-ZlTIkQDTmqSU5HgVdxndpdVNXGSLvf_gMVFoFQFDIq_SXO-dthE6a91DaEhTzWGVCrQPBujiIYSgBgDzSJlgsNnW9ttC_DjKz1kzVXvMmcNxTRpKIDPBhCBCcVoLUEPtaCxBf9LvBCIqLlSwY=; NID=513=KeZLnBg7w7xtQYKWsucJqBQGd-jI_eWo-1dacq4JpS1ste8_MEI7THQU7EGaSC9TvQ2HyFvz598FZ2E88A-lEbRLhWdM4aRGX9LjxlItXR2kHIkDspIQW2YF_GAU6X1aqDrYIBcn09PEMY5Y_UabPMU1Q4QesCK7ZETjcTqb-U4; GFE_RTT=112

Source: chromecache_186.2.dr	String found in binary or memory: http://csi.gstatic.com/csi
Source: chromecache_174.2.dr	String found in binary or memory: http://localhost.corp.google.com/inapp/
Source: chromecache_174.2.dr	String found in binary or memory: http://localhost.proxy.googlers.com/inapp/
Source: chromecache_192.2.dr	String found in binary or memory: http://support.google.com/docs?p=labs-help
Source: chromecache_190.2.dr	String found in binary or memory: http://support.google.com/docs?p=labs-privacy
Source: chromecache_192.2.dr	String found in binary or memory: http://support.google.com/drive/?hl=en&p=anonymous_users
Source: chromecache_192.2.dr	String found in binary or memory: http://support.google.com/drive/?p=restore_trash_collab
Source: chromecache_137.2.dr, chromecache_113.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_171.2.dr, chromecache_134.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_134.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch/ns
Source: chromecache_159.2.dr, chromecache_192.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_192.2.dr	String found in binary or memory: https://accounts.google.com/ServiceLogin
Source: chromecache_200.2.dr, chromecache_130.2.dr, chromecache_129.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_130.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_200.2.dr, chromecache_130.2.dr, chromecache_129.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_192.2.dr	String found in binary or memory: https://angular.io/license
Source: chromecache_130.2.dr, chromecache_129.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_130.2.dr, chromecache_192.2.dr, chromecache_163.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_174.2.dr, chromecache_192.2.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_192.2.dr	String found in binary or memory: https://apps-drive-picker-dev.corp.google.com/picker/minpick/main
Source: chromecache_174.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/inapp/
Source: chromecache_174.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/
Source: chromecache_174.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/inapp/
Source: chromecache_174.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/tools/feedback/
Source: chromecache_174.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/inapp/
Source: chromecache_174.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/tools/feedback/
Source: chromecache_174.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_174.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_174.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/inapp/
Source: chromecache_174.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/tools/feedback/
Source: chromecache_174.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_174.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_113.2.dr	String found in binary or memory: https://calendar.google.com/calendar/embed
Source: chromecache_192.2.dr	String found in binary or memory: https://calendar.google.com/calendar/r?eid=
Source: chromecache_113.2.dr	String found in binary or memory: https://calendar.google.com/event
Source: chromecache_113.2.dr	String found in binary or memory: https://chat.google.com/
Source: chromecache_186.2.dr	String found in binary or memory: https://chrome.google.com/webstore/detail/
Source: chromecache_130.2.dr	String found in binary or memory: https://classroom.google.com/sharewidget?usegapi=1
Source: chromecache_130.2.dr	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1
Source: chromecache_200.2.dr, chromecache_130.2.dr, chromecache_192.2.dr, chromecache_129.2.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_113.2.dr	String found in binary or memory: https://contacts.google.com
Source: chromecache_113.2.dr	String found in binary or memory: https://contacts.google.com/contact/
Source: chromecache_179.2.dr	String found in binary or memory: https://contacts.google.com/widget/companion
Source: chromecache_113.2.dr	String found in binary or memory: https://contacts.google.com/widget/companion?edit=true&contactId=
Source: chromecache_192.2.dr	String found in binary or memory: https://content-googleapis-staging.sandbox.google.com
Source: chromecache_192.2.dr	String found in binary or memory: https://content-googleapis-test.sandbox.google.com
Source: chromecache_200.2.dr, chromecache_130.2.dr, chromecache_129.2.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_186.2.dr	String found in binary or memory: https://csi.gstatic.com/csi
Source: chromecache_200.2.dr, chromecache_129.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_130.2.dr	String found in binary or memory: https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1
Source: chromecache_192.2.dr	String found in binary or memory: https://docs.google.com/picker
Source: chromecache_190.2.dr	String found in binary or memory: https://docs.google.com/requestreview?id=
Source: chromecache_192.2.dr	String found in binary or memory: https://docs.google.com/support/bin/answer.py?hl=
Source: chromecache_200.2.dr, chromecache_129.2.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_192.2.dr	String found in binary or memory: https://drive-thirdparty.googleusercontent.com/
Source: chromecache_192.2.dr	String found in binary or memory: https://drive.google.com/open?id=
Source: chromecache_192.2.dr	String found in binary or memory: https://drive.google.com/picker/minpick/main
Source: chromecache_130.2.dr	String found in binary or memory: https://drive.google.com/savetodrivebutton?usegapi=1
Source: chromecache_130.2.dr	String found in binary or memory: https://families.google.com/webcreation?usegapi=1&usegapi=1
Source: chromecache_174.2.dr	String found in binary or memory: https://feedback-pa.clients6.google.com
Source: chromecache_174.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/annotator.css
Source: chromecache_174.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/render_frame2.html
Source: chromecache_174.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/inapp/%
Source: chromecache_174.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/tools/feedback/%
Source: chromecache_174.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/inapp/%
Source: chromecache_174.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/tools/feedback/%
Source: chromecache_172.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_137.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/e/notoemoji/
Source: chromecache_113.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/e/notoemoji/latest/1f382/emoji.svg
Source: chromecache_172.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmZjtiu7.woff2)
Source: chromecache_172.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmdjtiu7.woff2)
Source: chromecache_172.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmhjtg.woff2)
Source: chromecache_172.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmtjtiu7.woff2)
Source: chromecache_172.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmxjtiu7.woff2)
Source: chromecache_172.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmZjtiu7.woff2)
Source: chromecache_172.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmdjtiu7.woff2)
Source: chromecache_172.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmhjtg.woff2)
Source: chromecache_172.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmtjtiu7.woff2)
Source: chromecache_172.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmxjtiu7.woff2)
Source: chromecache_172.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qE52i1dC.woff2)
Source: chromecache_172.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qER2i1dC.woff2)
Source: chromecache_172.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEV2i1dC.woff2)
Source: chromecache_172.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEl2i1dC.woff2)
Source: chromecache_172.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEp2iw.woff2)
Source: chromecache_190.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/add_to_drive/v16/white-24dp/1x/gm_add_to_drive_whi
Source: chromecache_159.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_159.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_159.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_159.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_190.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/file_download/v9/white-24dp/1x/gm_file_download_wh
Source: chromecache_192.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/maps/v7/web-64dp/logo_maps_color_2x_web_64dp.png
Source: chromecache_192.2.dr	String found in binary or memory: https://forms.gle/UPhmo8AHDibn457p8
Source: chromecache_190.2.dr	String found in binary or memory: https://github.com/deanm/omggif
Source: chromecache_174.2.dr	String found in binary or memory: https://gstatic.com/uservoice/surveys/resources/
Source: chromecache_113.2.dr	String found in binary or memory: https://hangouts.google.com/
Source: chromecache_113.2.dr	String found in binary or memory: https://hangouts.google.com/hangouts/_/
Source: chromecache_174.2.dr	String found in binary or memory: https://help.youtube.com/tools/feedback/
Source: chromecache_192.2.dr	String found in binary or memory: https://inputtools.google.com
Source: chromecache_190.2.dr	String found in binary or memory: https://jmt17.google.com/log
Source: chromecache_113.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/a/default-user
Source: chromecache_174.2.dr	String found in binary or memory: https://localhost.corp.google.com/inapp/
Source: chromecache_174.2.dr	String found in binary or memory: https://localhost.proxy.googlers.com/inapp/
Source: chromecache_113.2.dr	String found in binary or memory: https://mail.google.com/mail/u/
Source: chromecache_113.2.dr	String found in binary or memory: https://myaccount.google.com/birthday
Source: chromecache_113.2.dr	String found in binary or memory: https://myaccount.google.com/profile/name/edit?hl=
Source: chromecache_113.2.dr	String found in binary or memory: https://myaccount.google.com/profile?hl=
Source: chromecache_190.2.dr	String found in binary or memory: https://mygoogle.corp.google.com/help/answer/9011840
Source: chromecache_190.2.dr	String found in binary or memory: https://one.google.com/plans
Source: chromecache_190.2.dr	String found in binary or memory: https://one.google.com/storage
Source: chromecache_190.2.dr	String found in binary or memory: https://one.google.com/storage/management
Source: chromecache_192.2.dr	String found in binary or memory: https://onepick-autopush.sandbox.google.com/picker/minpick/main
Source: chromecache_192.2.dr	String found in binary or memory: https://onepick-preprod.sandbox.google.com/picker/minpick/main
Source: chromecache_192.2.dr	String found in binary or memory: https://onepick-staging-drivequal.sandbox.google.com/picker/minpick/main
Source: chromecache_192.2.dr	String found in binary or memory: https://onepick-staging.sandbox.google.com/picker/minpick/main
Source: chromecache_130.2.dr	String found in binary or memory: https://pay.google.com/gp/v/widget/save
Source: chromecache_167.2.dr, chromecache_192.2.dr	String found in binary or memory: https://play.google.com
Source: chromecache_113.2.dr, chromecache_192.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_130.2.dr	String found in binary or memory: https://play.google.com/work/embedded/search?usegapi=1&usegapi=1
Source: chromecache_129.2.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_200.2.dr, chromecache_130.2.dr, chromecache_129.2.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_190.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_192.2.dr	String found in binary or memory: https://policies.google.com/privacy?hl=en
Source: chromecache_190.2.dr	String found in binary or memory: https://policies.google.com/privacy?hl=en-US
Source: chromecache_190.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_190.2.dr	String found in binary or memory: https://policies.google.com/terms/generative-ai
Source: chromecache_192.2.dr	String found in binary or memory: https://policies.google.com/terms?hl=en
Source: chromecache_190.2.dr	String found in binary or memory: https://policies.google.com/terms?hl=en-US
Source: chromecache_190.2.dr	String found in binary or memory: https://punctual-dev.corp.google.com
Source: chromecache_174.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/
Source: chromecache_174.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/%
Source: chromecache_174.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/
Source: chromecache_174.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/%
Source: chromecache_174.2.dr	String found in binary or memory: https://scone-pa.clients6.google.com
Source: chromecache_190.2.dr	String found in binary or memory: https://signaler-pa.clients6.google.com
Source: chromecache_190.2.dr	String found in binary or memory: https://signaler-pa.googleapis.com
Source: chromecache_190.2.dr	String found in binary or memory: https://signaler-pa.youtube.com
Source: chromecache_190.2.dr	String found in binary or memory: https://signaler-staging.sandbox.google.com
Source: chromecache_192.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/doclist/images/icon_10_generic_list.png
Source: chromecache_192.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/drawings/images/audio.png
Source: chromecache_192.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/drawings/images/grippy.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/no_style.svg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/palm_tree_10.svg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/palm_tree_11.svg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/palm_tree_12.svg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/palm_tree_13.svg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/palm_tree_14.svg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/palm_tree_15.svg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/palm_tree_2.svg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/palm_tree_5.svg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/palm_tree_6.svg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/palm_tree_8.svg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/palm_tree_9.svg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/promo-blue-image-eibr-ej.png
Source: chromecache_192.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/promo-blue-paid-image-jasmine.svg
Source: chromecache_192.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/sketchysmith/vids_gemini_ai.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-abstract-triangle.
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-boat-sea.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-bouquet-flowers.jp
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-butterfly-dress.jp
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-cactus-concrete.jp
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-cat-astronaut.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-cherry-blossoms.jp
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-cherry-pie.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-coffee-and-vase.jp
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-colorful-lightbulb
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-cosmic-galaxy.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-cotton-candy-candl
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-crocheted-corgi.jp
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-cube-sundae.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-duck-boots.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-einstein-water.jpe
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-empire-state.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-factory-smoke.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-fantasy-castle.jpe
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-fjord-landscape.jp
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-gnomes.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-island.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-ivy-archway.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-jellyfish-painting
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-kitchen-design.jpe
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-light-on-tree.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-light-window.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-lily-plasma.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-marketplace-fruit.
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-motorbike.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-oraganized-closet.
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-orange-flower-hear
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-phoenix.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-pink-arches.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-poodle.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-popsicle.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-rainforest-waterfa
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-red-truck.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-rusted-robot.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-sailboat-fantasy.j
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-scottish-cat.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-sloth-latte.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-smoke-manga.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-snow-mountain.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-spaceship-red-plan
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-tacos.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-tahoe.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-teddy-warrior.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-treehouse-city.jpe
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-unicorn-lamp.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-watermelon-chair.j
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-whale.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-white-sneakers.jpe
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/202307-zen-stones.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/abstract-triangle.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/boat-sea.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/bouquet-flowers.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/butterfly-dress.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/cactus-concrete.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/cat-astronaut.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/cherry-blossoms.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/cherry-pie.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/coffee-and-vase.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/colorful-lightbulb.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/cosmic-galaxy.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/cotton-candy-candle.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/crocheted-corgi.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/cube-sundae.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/duck-boots.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/einstein-water.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/empire-state.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/factory-smoke.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/fantasy-castle.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/fjord-landscape.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/gnomes.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/island.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/ivy-archway.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/jellyfish-painting.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/kitchen-design.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/light-on-tree.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/light-window.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/lily-plasma.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/marketplace-fruit.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/moterbike.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/orange-flower-heart.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/organized-closet.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/phoenix.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/pink-arches.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/poodle.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/popsicle.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/rainforest-waterfall.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/red-truck.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/rusted-robot.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/sailboat-fantasy.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/scottish-cat.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/sloth-latte.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/smoke-manga.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/snow-mountain.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/spaceship-red-planet.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/tacos.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/tahoe.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/teddy-warrior.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/treehouse-city.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/unicorn-lamp.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/watermelon-chair.jpeg
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/whale.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/white-sneakers.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/slides-image-gen-gallery/zen-stones.png
Source: chromecache_190.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/presentations/images/surprise_me.svg
Source: chromecache_167.2.dr	String found in binary or memory: https://ssl.gstatic.com/gb/js/
Source: chromecache_130.2.dr	String found in binary or memory: https://ssl.gstatic.com/microscope/embed/
Source: chromecache_113.2.dr	String found in binary or memory: https://ssl.gstatic.com/social/contactsui/images/moments/contacts_profile_20px_grey_700.svg
Source: chromecache_113.2.dr	String found in binary or memory: https://ssl.gstatic.com/social/contactsui/images/moments/person_20px_grey_700.svg
Source: chromecache_174.2.dr	String found in binary or memory: https://stagingqual-feedback-pa-googleapis.sandbox.google.com
Source: chromecache_167.2.dr, chromecache_192.2.dr	String found in binary or memory: https://support.google.com
Source: chromecache_174.2.dr, chromecache_113.2.dr, chromecache_192.2.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/a/?p=disable_docs#topic=4388346
Source: chromecache_190.2.dr	String found in binary or memory: https://support.google.com/a/answer/10411339
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/a?p=advanced-settings-data-regions
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/chrome/answer/187443
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/cloud/answer/9110914
Source: chromecache_113.2.dr	String found in binary or memory: https://support.google.com/contacts/?p=birthday
Source: chromecache_137.2.dr	String found in binary or memory: https://support.google.com/contacts/answer/7345608
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/docs/?p=
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/docs/?p=disable_download
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/docs/?p=editors_encryption
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/docs/?p=labs-opt-out
Source: chromecache_186.2.dr	String found in binary or memory: https://support.google.com/docs/?p=prevent_download
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/docs/?p=third-party-chips
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/docs/answer/
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/docs/answer/10519333
Source: chromecache_190.2.dr	String found in binary or memory: https://support.google.com/docs/answer/13447609
Source: chromecache_190.2.dr	String found in binary or memory: https://support.google.com/docs/answer/148505
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/docs/answer/183965
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/docs/answer/190843
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/docs/answer/2494822#share_with_many_people
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/docs/answer/62754#regular_expressions
Source: chromecache_137.2.dr	String found in binary or memory: https://support.google.com/docs/answer/65129
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/docs/answer/7505592
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/docs?p=Labs-help-me-create-Vids
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/docs?p=add_encryption
Source: chromecache_190.2.dr	String found in binary or memory: https://support.google.com/docs?p=duet-help-me-visualize
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/docs?p=embedded_tables&hl=
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/docs?p=follow_a_collaborator
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/docs?p=gemini-help-me-create-Vids
Source: chromecache_190.2.dr, chromecache_192.2.dr	String found in binary or memory: https://support.google.com/docs?p=gemini-help-me-visualize
Source: chromecache_190.2.dr	String found in binary or memory: https://support.google.com/docs?p=help-me-visualize
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/docs?p=labs-privacy
Source: chromecache_190.2.dr	String found in binary or memory: https://support.google.com/docs?p=slides-image-background-removal
Source: chromecache_190.2.dr	String found in binary or memory: https://support.google.com/docs?p=slides-image-background-removal-gemini
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/drive/?hl=en
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/drive/?p=drive_only
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/drive/answer/179622?p=docs_image_search
Source: chromecache_190.2.dr	String found in binary or memory: https://support.google.com/drive/answer/37603
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/drive/answer/9387535
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/drive?p=comment_troubleshoot
Source: chromecache_192.2.dr	String found in binary or memory: https://support.google.com/drive?p=saving_errors
Source: chromecache_174.2.dr	String found in binary or memory: https://support.google.com/inapp/
Source: chromecache_174.2.dr	String found in binary or memory: https://support.google.com/inapp/%
Source: chromecache_190.2.dr	String found in binary or memory: https://support.google.com/legal/answer/3110420
Source: chromecache_190.2.dr	String found in binary or memory: https://support.google.com/legal/answer/3110420?visit_id=638352431792354522-2351635853&rd=1
Source: chromecache_192.2.dr	String found in binary or memory: https://support.mozilla.org/en-US/kb/disable-or-remove-add-ons
Source: chromecache_130.2.dr	String found in binary or memory: https://talkgadget.google.com/:session_prefix:talkgadget/_/widget
Source: chromecache_174.2.dr	String found in binary or memory: https://test-scone-pa-googleapis.sandbox.google.com
Source: chromecache_163.2.dr, chromecache_186.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_113.2.dr	String found in binary or memory: https://voice.google.com/
Source: chromecache_200.2.dr, chromecache_130.2.dr, chromecache_129.2.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_190.2.dr	String found in binary or memory: https://workspace.google.com/upgrade/plus/welcome
Source: chromecache_190.2.dr	String found in binary or memory: https://workspace.google.com/upgrade/plus/welcome?eci=upsell
Source: chromecache_190.2.dr	String found in binary or memory: https://workspace.google.com/upgrade/standard/welcome
Source: chromecache_190.2.dr	String found in binary or memory: https://workspace.google.com/upgrade/standard/welcome?eci=upsell
Source: chromecache_174.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/
Source: chromecache_174.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/%
Source: chromecache_167.2.dr, chromecache_192.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_192.2.dr	String found in binary or memory: https://www.google.com/intl/en/policies/privacy/
Source: chromecache_192.2.dr	String found in binary or memory: https://www.google.com/intl/en/policies/terms/
Source: chromecache_163.2.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_192.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true&render=
Source: chromecache_130.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/badge?usegapi=1
Source: chromecache_130.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/optin?usegapi=1
Source: chromecache_174.2.dr, chromecache_113.2.dr, chromecache_192.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_174.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/
Source: chromecache_174.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/%
Source: chromecache_174.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/help_panel_binary.js
Source: chromecache_129.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_129.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_192.2.dr	String found in binary or memory: https://www.gstatic.com/docs/documents/images/checklist-checked.png
Source: chromecache_192.2.dr	String found in binary or memory: https://www.gstatic.com/docs/documents/images/checklist-unchecked.png
Source: chromecache_167.2.dr, chromecache_192.2.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_159.2.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_113.2.dr	String found in binary or memory: https://www.gstatic.com/groups/images/group_avatar_placeholder.svg
Source: chromecache_159.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_159.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_159.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/broken_image_grey600_18dp.png
Source: chromecache_159.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/broken_image_grey600_18dp.png
Source: chromecache_130.2.dr	String found in binary or memory: https://www.gstatic.com/partners/badge/templates/badge.html?usegapi=1
Source: chromecache_137.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/
Source: chromecache_137.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/change_email_address_grey300.svg
Source: chromecache_137.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/change_name_grey300.svg
Source: chromecache_137.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/content_copy_grey300.svg
Source: chromecache_137.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/content_cut_grey300.svg
Source: chromecache_137.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/email_copy_grey300.svg
Source: chromecache_137.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/info_outline_grey300.svg
Source: chromecache_137.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/phone_copy_grey300.svg
Source: chromecache_137.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/visibility_grey300.svg
Source: chromecache_137.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/visibility_off_grey200.svg
Source: chromecache_137.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/change_email_address_grey700.svg
Source: chromecache_137.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/change_name_grey700.svg
Source: chromecache_137.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/content_copy_grey700.svg
Source: chromecache_137.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/content_cut_grey700.svg
Source: chromecache_137.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/domain_disabled_grey900.svg
Source: chromecache_137.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/email_copy_grey700.svg
Source: chromecache_137.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/info_outline_grey700.svg
Source: chromecache_137.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/phone_copy_grey700.svg
Source: chromecache_137.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/visibility_grey700.svg
Source: chromecache_137.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/visibility_off_grey700.svg
Source: chromecache_113.2.dr, chromecache_192.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_174.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/surveys/resources/
Source: chromecache_192.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_130.2.dr	String found in binary or memory: https://www.youtube.com/subscribe_embed?usegapi=1
Source: chromecache_192.2.dr	String found in binary or memory: https://www.youtube.com/watch?v=
Source: chromecache_192.2.dr	String found in binary or memory: https://youtube.googleapis.com
Source: chromecache_192.2.dr	String found in binary or memory: https://youtube.googleapis.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.5:49747 version: TLS 1.2

System Summary

Source: classification engine

Classification label: clean1.win@17/191@26/16

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2332 --field-trial-handle=2204,i,12912129332964351736,4633805721641026136,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://docs.google.com/drawings/d/1QGabMMfvpW-_XDDZi_686sw-7S89-HoKwOnS6UukgfE/edit?usp=drive_web"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2332 --field-trial-handle=2204,i,12912129332964351736,4633805721641026136,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: v.Pdb();a.F.listen(v,"createItems",a.jWb);a.F.listen(v,"beforeExecute",a.iWb);a.F.listen(v,exe,a.mWb);a.F.listen(v,"loadError",a.kWb);a.F.listen(v,xze,a.nWb);a.F.listen(v,"makeAnEncryptedCopyClicked",a.lWb);S(a.O,a.C.Ib,function(w){w.C&&a.D.Qn(rGa)});S(a.O,a.C.va,function(w){w.C&&w.F!=w.D&&a.D.Qn(rGa)});S(a.O,a.C.mf,function(w){w.C&&a.D.Qn(rGa)});S(a.O,a.C.Va,function(w){w.C&&w.D!=w.mimeType&&a.D.Qn(rGa)});a.D=v;a.ea&&(a.W=new Tqh(v),TU(a.ea,a.W));cx(a.C.D)?Ruh(a):S(a.O,a.C.D.F,function(){Ruh(a)}); source: chromecache_192.2.dr
Source:	Binary string: function Mwf(a){var c=a.W1b,d=a.pDb,e=a.F0a,f="";f=YU(c)?f+(""+c):YU(e)?f+"Try it":f+jb;c="";c=YU(d)?c+(""+d):YU(e)?c+"No thanks":c+Ada;var g=UU({X1b:f,qDb:c},a);g=g||{};a=g.iconUrl;a=X+W(Gae)+k+(YU(a)?'<img class="docs-promo-icon-container" alt="" src="'+W(fV(a))+tGd:"")+'<div class="docs-promo-text-container '+(YU(a)?" docs-promo-text-container-ltr":"")+k;d=g.title;e=g.RDb;var h=g.X1b;f=g.qDb;c=g.F0a;var l=g.gcc,m=g.url,n=g.x9b;g=g.z9b;h=YU(m)?VJd+W(eV(m))+'" class="docs-promo-action-container docs-more-element docs-promo-action-button-right" tabIndex="0" role="button" aria-label="'+ source: chromecache_192.2.dr
Source:	Binary string: "I\u2019ve recovered this item from the trash. Please use this version from now on.")})});Udf(c,"showcura")&&Uz(a.C.D,function(){a.D.Qn(V1d)});var e=Zw(a.C.F,19,1)||Zw(a.C.F,4,1);Udf(c,"disco")&&!e&&(a.J=new cqh,a.ua(a.J),a.V&&vX(a.V,a.J),a.F.listen(a.J,"Oc",a.nVb),a.J.render(),a.J.Ca(!0))}}}A.Ra=r("F");A.La=function(){this.W&&(this.W.tb(),delete this.W);this.D&&this.D.tb();delete this.D;this.F.tb();delete this.F;this.J&&this.V&&lWf(this.V,this.J);L.prototype.La.call(this)};function Uuh(a){Ay.call(this);this.J=new ps(this);this.ua(this.J);this.D=a;this.J.listen(this.D,"Uc",this.L);Cy(this,Vuh(this))}D(Uuh,Ay);Uuh.prototype.L=function(){Dy(this,Vuh(this))};function Vuh(a){var c=new Ey;c.put(sze,a.D.C);c.put(tze,a.D.D);c.put(uze,a.D.F);c.put(vze,a.D.canShare);return c};function Wuh(a){rs.call(this);this.F=a;this.D=this.C=null}D(Wuh,rs);A=Wuh.prototype;A.mta=function(a){this.C&&((this.D||(this.D=new ps(this))).jd(this.C,Ub,this.zTa),this.C.tb(),this.C=null);if(a){var c=new vW("",void 0);c.xb(a.childNodes[0]);c.vg("Share.");(this.D||(this.D=new ps(this))).listen(c,Ub,this.zTa);c.hb(!0);this.C=c}};A.zTa=function(){this.Qn(LP,{impressionType:3})};A.Pdb=function(){throw Error(BN);};A.Fcb=function(){throw Error(BN);};A.hBa=function(){throw Error(BN);}; source: chromecache_192.2.dr
Source:	Binary string: A.nta=function(a){this.H&&this.H.setMinimized(a)};A.Pdb=function(){this.yf=!0}; source: chromecache_192.2.dr
Source:	Binary string: hM+W("peoplekitComponentsHideconfirmationdialogImplHeadline")+k;g=(0===e?g+"Hide Suggestion?":g+"Show Suggestion?")+(FM+W("peoplekitComponentsHideconfirmationdialogImplDescription")+k);e=V((0===e?g+"This person won't be suggested again unless you search for them in Photos.":g+"Suggest this person when showing people results.")+CM);e=dR(gIj,{content:e,header:l});a.appendChild(e);l=g4(e,n$i);a=dIj(g4(e,"IbE0S"),{label:Ha});g=g={PDb:f};g=g.PDb;h="";switch(Fk(g)?g.toString():g){case "Confirm":h+="Confirm"; source: chromecache_137.2.dr

Boot Survival

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk			Jump to behavior