Edit tour

Windows Analysis Report
https://wechatunsuscribe.secure.force.com/

Overview

General Information

Sample URL:	https://wechatunsuscribe.secure.force.com/
Analysis ID:	1428207
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Phishing site detected (based on favicon image match)

HTTP GET or POST without a user agent

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 5920 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://wechatunsuscribe.secure.force.com/ MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 4472 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1920,i,4531950953507525100,6941954018789879291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.28.20
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.28.20
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.28.20
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.28.20
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.28.20
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.28.20
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.28.20
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.28.20
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.28.20
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.28.20
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.28.20
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.5.88
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.5.88
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.5.88
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: wechatunsuscribe.secure.force.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: goldengoose.my.salesforce-sites.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GGDBchat/ HTTP/1.1Host: goldengoose.my.salesforce-sites.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1
Source: global traffic	HTTP traffic detected: GET /GGDBchat/sCSS/60.0/sprites/1705602481000/Theme3/default/gc/zen-componentsCompatible.css HTTP/1.1Host: goldengoose.my.salesforce-sites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://goldengoose.my.salesforce-sites.com/GGDBchat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
Source: global traffic	HTTP traffic detected: GET /GGDBchat/sCSS/60.0/sprites/1705602481000/Theme3/default/gc/elements.css HTTP/1.1Host: goldengoose.my.salesforce-sites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://goldengoose.my.salesforce-sites.com/GGDBchat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
Source: global traffic	HTTP traffic detected: GET /GGDBchat/sCSS/60.0/sprites/1705602481000/Theme3/default/gc/common.css HTTP/1.1Host: goldengoose.my.salesforce-sites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://goldengoose.my.salesforce-sites.com/GGDBchat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1710411415000/Theme3/gc/dStandard.css HTTP/1.1Host: goldengoose.my.salesforce-sites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://goldengoose.my.salesforce-sites.com/GGDBchat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1710411415000/Theme3/00D3X0000047cTS/0057U000001A9O2/gc/dCustom0.css HTTP/1.1Host: goldengoose.my.salesforce-sites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://goldengoose.my.salesforce-sites.com/GGDBchat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
Source: global traffic	HTTP traffic detected: GET /sCSS/60.0/sprites/1710411415000/Theme3/00D3X0000047cTS/0057U000001A9O2/gc/dCustom1.css HTTP/1.1Host: goldengoose.my.salesforce-sites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://goldengoose.my.salesforce-sites.com/GGDBchat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
Source: global traffic	HTTP traffic detected: GET /GGDBchat/sCSS/60.0/sprites/1705602481000/Theme3/default/gc/extended.css HTTP/1.1Host: goldengoose.my.salesforce-sites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://goldengoose.my.salesforce-sites.com/GGDBchat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
Source: global traffic	HTTP traffic detected: GET /GGDBchat/sCSS/60.0/sprites/1705602481000/Theme3/default/gc/setup.css HTTP/1.1Host: goldengoose.my.salesforce-sites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://goldengoose.my.salesforce-sites.com/GGDBchat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
Source: global traffic	HTTP traffic detected: GET /GGDBchat/resource/1588174741000/SiteSamples/SiteStyles.css HTTP/1.1Host: goldengoose.my.salesforce-sites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://goldengoose.my.salesforce-sites.com/GGDBchat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
Source: global traffic	HTTP traffic detected: GET /GGDBchat/static/111213/js/perf/stub.js HTTP/1.1Host: goldengoose.my.salesforce-sites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://goldengoose.my.salesforce-sites.com/GGDBchat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
Source: global traffic	HTTP traffic detected: GET /GGDBchat/jslibrary/1699262264248/sfdc/main.js HTTP/1.1Host: goldengoose.my.salesforce-sites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://goldengoose.my.salesforce-sites.com/GGDBchat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
Source: global traffic	HTTP traffic detected: GET /GGDBchat/jslibrary/jslabels/1713387778000/en_US.js HTTP/1.1Host: goldengoose.my.salesforce-sites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://goldengoose.my.salesforce-sites.com/GGDBchat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
Source: global traffic	HTTP traffic detected: GET /GGDBchat/resource/1588174741000/SiteSamples/img/clock.png HTTP/1.1Host: goldengoose.my.salesforce-sites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://goldengoose.my.salesforce-sites.com/GGDBchat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
Source: global traffic	HTTP traffic detected: GET /GGDBchat/resource/1588174741000/SiteSamples/img/warning.png HTTP/1.1Host: goldengoose.my.salesforce-sites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://goldengoose.my.salesforce-sites.com/GGDBchat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
Source: global traffic	HTTP traffic detected: GET /GGDBchat/resource/1588174741000/SiteSamples/img/poweredby.png HTTP/1.1Host: goldengoose.my.salesforce-sites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://goldengoose.my.salesforce-sites.com/GGDBchat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
Source: global traffic	HTTP traffic detected: GET /GGDBchat/resource/1588174741000/SiteSamples/img/clock.png HTTP/1.1Host: goldengoose.my.salesforce-sites.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
Source: global traffic	HTTP traffic detected: GET /GGDBchat/resource/1588174741000/SiteSamples/img/warning.png HTTP/1.1Host: goldengoose.my.salesforce-sites.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: goldengoose.my.salesforce-sites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://goldengoose.my.salesforce-sites.com/GGDBchat/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
Source: global traffic	HTTP traffic detected: GET /GGDBchat/resource/1588174741000/SiteSamples/img/poweredby.png HTTP/1.1Host: goldengoose.my.salesforce-sites.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: goldengoose.my.salesforce-sites.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=aXX2RwtUOhHvEVP&MD=7cN+z9CO HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /client/config?cc=CH&setlang=en-CH HTTP/1.1X-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateAccept-Encoding: gzip, deflateX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-UserAgeClass: UnknownX-BM-Market: CHX-BM-DateFormat: dd/MM/yyyyX-Device-OSSKU: 48X-BM-DTZ: 120X-DeviceID: 01000A41090080B6X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-BM-Theme: 000000;0078d7X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAWCCFmfa5H6wO9yRWL1Wc0TD6s6PeguNgO3OtsjuaZ3AEFh8JTzg3Di1VWKBLWn2kyjvq5hsKPbTODeH2wR9FXZ352ZJzkkGeqrTpCR1jXwWHTnZhxutDXXe9vYKrEnM68ONZdsKJXvPLWnAqxo3Oqn1EETAeWEpi9Aabyy4Mu01TKUn%2B8ZRIjjcl2p0D55apRsAJEaHb41rbZO8WotR4SMqp7FtVqwgSZ0sr9PO5HHfwF9gNR8IHFbUiiPdna0iCExh82VhYhIEud2kBPWocNu11y%2BJ2T%2BkIi4ugPgx6I2ks2PxcrH/xJo%2BOuGNlZ3x4Liuj47WI5%2BfJVlqaMXwfBADZgAACF%2B85OUTdex%2BqAHvIKauG55SGIp%2BRAaIgKIAHPMwqiVSMamawEkYVIKzQkyuNbbyHcrnlObiREeaINCfZP0L4cnKhAIVzCKYeNQjMSCsftopq0Rz8vtQMKIwXY0wqIDnKNe3wMALJQMwviAzVLvhnlehQsXhfbs46PoNQc/ePsA4dTh6EeBLgZPt/qD0fVQojMuDKK49kZRZuQAljZ21QE%2BZ5SfPj0XfbWZ27V7E/stlCKzzZAP0c9aj6qbkc2TA%2Bb05EPeUmVoIPSUEZ%2BXluM3qZfz%2BBi6d52rLuGtHwij12iGlfQ76lTaxpPVQws6DcXCoVHNU5yRNKiqHhXrZOxvTD2AArVxMlYFv%2BuhWDJdvn8iUyBc8mgL/q0Iq/FCIxjMzVL07ziCntU7DEzVwvfKNVgxeifoqk4LM2DR8PdZvQSIsnLkNhoM1Yao8angA3LRb1tq6jLK%2BjRhKc4L6PUu1bCK1uupICDFcYdFrK/2p/4xbrFKFGKyldD8V2rbyO8BEtPQXLAEHng2fWrU/%2BvQpeSSrhSpHONPxgFEYevSANTJezufJFWLfpHO/9L67Lvn72AE%3D%26p%3DX-Agent-DeviceId: 01000A41090080B6X-BM-CBT: 1713451450User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045X-Device-isOptin: falseAccept-language: en-GB, en, en-USX-Device-Touch: falseX-Device-ClientSession: C568510DC3EC428CAE19040D3B125093X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIHost: www.bing.comConnection: Keep-AliveCookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
Source: global traffic	HTTP traffic detected: GET /ab HTTP/1.1Host: evoke-windowsservices-tas.msedge.netCache-Control: no-store, no-cacheX-PHOTOS-CALLERID: 9NMPJ99VJBWVX-EVOKE-RING: X-WINNEXT-RING: PublicX-WINNEXT-TELEMETRYLEVEL: BasicX-WINNEXT-OSVERSION: 10.0.19045.0X-WINNEXT-APPVERSION: 1.23082.131.0X-WINNEXT-PLATFORM: DesktopX-WINNEXT-CANTAILOR: FalseX-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd}X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI=If-None-Match: 2056388360_-1434155563Accept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=aXX2RwtUOhHvEVP&MD=7cN+z9CO HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: unknown

DNS traffic detected: queries for: wechatunsuscribe.secure.force.com

Source: unknown

HTTP traffic detected: POST /RST2.srf HTTP/1.0Connection: Keep-AliveContent-Type: application/soap+xmlAccept: */*User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68})Content-Length: 4788Host: login.live.com

Source: chromecache_85.1.dr, chromecache_71.1.dr	String found in binary or memory: http://www.mysite.com/myimage.jpg
Source: chromecache_85.1.dr	String found in binary or memory: http://www.recaptcha.net
Source: chromecache_85.1.dr	String found in binary or memory: http://www.salesforce.com/ui/accent/
Source: chromecache_85.1.dr	String found in binary or memory: https://help.salesforce.com/setSFXCookie?value

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.17:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.126.28.20:443 -> 192.168.2.17:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.200:443 -> 192.168.2.17:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.5.88:443 -> 192.168.2.17:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.63.206.91:443 -> 192.168.2.17:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.63.206.91:443 -> 192.168.2.17:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.17:49743 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@15/40@8/4

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: chromecache_85.1.dr	Binary or memory string: SelectFilterElement.prototype.filter=function(){var a=document.getElementById(this.controllerName),b=document.getElementById(this.targetName),d=document.getElementById(this.getSearchElementId());this.useJsSearch&&(d&&0!=d.value.length)&&(d.value="");b.options.length=0;SelectFilterElement.prototype.NONE_LABEL&&(b.options[0]=new Option(SelectFilterElement.prototype.NONE_LABEL,"000000000000000"));var c=0,f=0,e=this.allOptions[a.value];if(e){var g=this.existingName;g&&this.initSelectedOptionsFromUi();
Source: chromecache_85.1.dr	Binary or memory string: SelectFilterElement.prototype.init=function(){this.filter();if(this.existingName){var a=document.getElementById(this.existingName);a&&(a.selectFilterEl=this,a.onchange=function(){this.selectFilterEl.initSelectedOptionsFromUi()})}if(this.controllerOption&&this.controllerName){var b=document.getElementById(this.controllerName);if(null!=b.options&&void 0!=b.options)for(a=0;a<b.options.length;a++)b.options[a].value==this.controllerOption&&(b.options[a].selected=!0)}if(this.targetOption){b=document.getElementById(this.targetName);
Source: chromecache_85.1.dr	Binary or memory string: SelectFilterElement.prototype.initSelectedOptionsFromUi=function(){if(this.existingName){this.selectedOptions=[];var a=document.getElementById(this.existingName);if(a)for(var b=0;b<a.options.length;b++)0<a.options[b].value.length&&(this.selectedOptions[a.options[b].value]=!0)}};

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://wechatunsuscribe.secure.force.com/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1920,i,4531950953507525100,6941954018789879291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1920,i,4531950953507525100,6941954018789879291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://www.recaptcha.net	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
ita16.sfdc-3d0u2f.salesforce.com	15.161.0.134	true	false	high
www.google.com	74.125.138.103	true	false	high
goldengoose.my.salesforce-sites.com	unknown	unknown	false	unknown
wechatunsuscribe.secure.force.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://goldengoose.my.salesforce-sites.com/sCSS/60.0/sprites/1710411415000/Theme3/00D3X0000047cTS/0057U000001A9O2/gc/dCustom1.css	false	unknown
https://goldengoose.my.salesforce-sites.com/GGDBchat/sCSS/60.0/sprites/1705602481000/Theme3/default/gc/setup.css	false	unknown
https://goldengoose.my.salesforce-sites.com/GGDBchat/sCSS/60.0/sprites/1705602481000/Theme3/default/gc/zen-componentsCompatible.css	false	unknown
https://goldengoose.my.salesforce-sites.com/GGDBchat/jslibrary/1699262264248/sfdc/main.js	false	unknown
https://goldengoose.my.salesforce-sites.com/sCSS/60.0/sprites/1710411415000/Theme3/gc/dStandard.css	false	unknown
https://goldengoose.my.salesforce-sites.com/GGDBchat/sCSS/60.0/sprites/1705602481000/Theme3/default/gc/common.css	false	unknown
https://goldengoose.my.salesforce-sites.com/sCSS/60.0/sprites/1710411415000/Theme3/00D3X0000047cTS/0057U000001A9O2/gc/dCustom0.css	false	unknown
https://goldengoose.my.salesforce-sites.com/favicon.ico	false	unknown
https://wechatunsuscribe.secure.force.com/	false	high
https://goldengoose.my.salesforce-sites.com/	false	unknown
https://goldengoose.my.salesforce-sites.com/GGDBchat/resource/1588174741000/SiteSamples/SiteStyles.css	false	unknown
https://goldengoose.my.salesforce-sites.com/GGDBchat/sCSS/60.0/sprites/1705602481000/Theme3/default/gc/elements.css	false	unknown
https://goldengoose.my.salesforce-sites.com/GGDBchat/sCSS/60.0/sprites/1705602481000/Theme3/default/gc/extended.css	false	unknown
https://goldengoose.my.salesforce-sites.com/GGDBchat/jslibrary/jslabels/1713387778000/en_US.js	false	unknown
https://goldengoose.my.salesforce-sites.com/GGDBchat/resource/1588174741000/SiteSamples/img/clock.png	false	unknown
https://goldengoose.my.salesforce-sites.com/GGDBchat/resource/1588174741000/SiteSamples/img/warning.png	false	unknown
https://goldengoose.my.salesforce-sites.com/GGDBchat/static/111213/js/perf/stub.js	false	unknown
https://goldengoose.my.salesforce-sites.com/GGDBchat/resource/1588174741000/SiteSamples/img/poweredby.png	false	unknown
https://goldengoose.my.salesforce-sites.com/GGDBchat/	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.salesforce.com/ui/accent/	chromecache_85.1.dr	false		high
https://help.salesforce.com/setSFXCookie?value	chromecache_85.1.dr	false		high
http://www.mysite.com/myimage.jpg	chromecache_85.1.dr, chromecache_71.1.dr	false		high
http://www.recaptcha.net	chromecache_85.1.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
74.125.138.103	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
15.161.0.134	ita16.sfdc-3d0u2f.salesforce.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.17

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1428207
Start date and time:	2024-04-18 16:43:28 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 34s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://wechatunsuscribe.secure.force.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@15/40@8/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, backgroundTaskHost.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.253.124.94, 74.125.138.138, 74.125.138.100, 74.125.138.113, 74.125.138.101, 74.125.138.139, 74.125.138.102, 64.233.185.84, 34.104.35.123, 23.209.36.48, 192.229.211.108, 142.251.15.139, 142.251.15.101, 142.251.15.113, 142.251.15.100, 142.251.15.102, 142.251.15.138
Excluded domains from analysis (whitelisted): www.bing.com, clients1.google.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, evoke-windowsservices-tas.msedge.net, update.googleapis.com, clients.l.google.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
VT rate limit hit for: https://wechatunsuscribe.secure.force.com/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 13:43:59 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9927327232399117
Encrypted:	false
SSDEEP:	48:8Aged/TY7dNSHyidAKZdA1JehwiZUklqehNy+3:8/iwNjqy
MD5:	0106B30EBC0D11E009151DD2882A44BC
SHA1:	59FB238FB7C063C7EF6699E84F5C0C346F6600B4
SHA-256:	920D469CCEBE2C5664E9457C1184C6BA949C0CD70740C1DB9A761774BF214DF1
SHA-512:	67A5556D5985A4A820304AC5D3ED82B7822A125F437CFD07DBDEBD4CFC26D1784BFB19B5FFA91ABED2A3BE1310B477D9AC9D9559D3AB91841C5CCCA244BA205F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....X........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Xuu....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X}u....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.X}u....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.X}u...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X.u...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............8......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 13:43:59 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.008824495822441
Encrypted:	false
SSDEEP:	48:8Qged/TY7dNSHyidAKZdA10eh/iZUkAQkqehay+2:8PiwNh9QDy
MD5:	632BE498BE715F95BD011B75E34B5AFB
SHA1:	CD29B247DB48EE3468A4B6D6EC6D2EAFBD841A8A
SHA-256:	4F3025331787E1D017F3468F49A5BA6EAFF95A444D583BE83A4809CFA2E25079
SHA-512:	3D07095A5A2C19ED0508FB3D68890B2B5261F018A5F4ACFC708637B2AB35BFA56B968315526855EB9EEF7C2FB6BC76A12DA0938796427BC0062E7EC31BEF2F15
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....7.M........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Xuu....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X}u....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.X}u....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.X}u...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X.u...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............8......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.017526875109522
Encrypted:	false
SSDEEP:	48:8eed/TY7djHyidAKZdA14tIeh7sFiZUkmgqeh7sQy+BX:8eiwinuy
MD5:	3E2E686A92D937280A6F46852BBF712D
SHA1:	C4E3CBE7ADC4D31B9F5149D2C72BBD16128E3D6A
SHA-256:	BD28F13DAC014F4FEE03A413C60FE193B35D72E7CE50C7E8D5F24029DF7B7D6C
SHA-512:	9FA287B784B3FD9670C4E0DD9AB5258FF6D2EB45FD1245528755279E12D162E042D46EBB2446A877F25DB3B9649EF9A6CE1E2AA3167B94F3C1DDE1C2CBE43F2E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....v. ;.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Xuu....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X}u....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.X}u....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.X}u...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.N...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............8......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 13:43:59 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.008168821482137
Encrypted:	false
SSDEEP:	48:8pDged/TY7dNSHyidAKZdA1behDiZUkwqehWy+R:8psiwNSYy
MD5:	87320F8DA176AE52D0C8D9BD4EB47A87
SHA1:	4A01F4D024B80C51E0D1B9DF69DDC541200D2FB9
SHA-256:	79433F8C86D6843106256B7066346962CF9B11F2AF5191EA281C6545C4BDE123
SHA-512:	4E4431DD289988607BEF31941E67696D56DD28829874D3EF685C28CBB4EE579A9CCEAF9F966082156D69FDB93F988936DE8D583CFCB55FAAEBFC0BCCD1668C63
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......G........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Xuu....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X}u....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.X}u....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.X}u...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X.u...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............8......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 13:43:59 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9977686541838824
Encrypted:	false
SSDEEP:	48:8Hged/TY7dNSHyidAKZdA1VehBiZUk1W1qehky+C:8AiwNC9Ey
MD5:	7B92AD2D419C37B5E9C346BA12AD4ACE
SHA1:	899FF65565E66B6DBDE0205AFD03F6EC0FECD191
SHA-256:	D80B6E40106967AF3DB8F7CE2FD3936C4F0CDEA2C360B49B8572EA3CBD0C8CFF
SHA-512:	07C381383F88DC4A9548CBFC1D1465BF6D8B30405858FBBD75D568A0AE8C2A36622EEE5587C5363E1A9A6C1FC3241A5BB7B2FE945ACFC569261CE956038B0527
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......R........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Xuu....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X}u....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.X}u....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.X}u...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X.u...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............8......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 18 13:43:59 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.007634056565338
Encrypted:	false
SSDEEP:	48:8Xged/TY7dNSHyidAKZdA1duT6ehOuTbbiZUk5OjqehOuTbuy+yT+:8QiwNATTTbxWOvTbuy7T
MD5:	0A753EAA648EBDACA9D58BAC5CEEB2A7
SHA1:	AD9B2B2E1E407F553CCB63EA248050BE5F4F42F0
SHA-256:	1ACCEB3F46C3211E4FE81FB365AA0D0635ED30BE97C4F4DB1275EB52EA6E5279
SHA-512:	6D14B138421D5886B7866A4322E959F567CDD183221073C61FBBAF6DE22DF12D38E62B033D5509270111EF670E676D7F85DC75DC100CC86EFCD954984BF33BA0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....'.=........y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FWoN..PROGRA~1..t......O.I.Xuu....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X}u....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.N..Chrome..>......CW.V.X}u....M......................W..C.h.r.o.m.e.....`.1.....FW.N..APPLIC~1..H......CW.V.X}u...........................W..A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X.u...........................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............8......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65504), with no line terminators
Category:	downloaded
Size (bytes):	230223
Entropy (8bit):	4.954328633694006
Encrypted:	false
SSDEEP:	3072:MGhwolmFKJvdcZ8vdm7lizSHc8ZttR88GtsjEsW8NQ:MG+EmwJFC8s7lizSTTtpGtsj/WZ
MD5:	B431B86F512519378436A15F24726422
SHA1:	A5DA9BB647DF8E57C17575F0F34ABF48ADA2951F
SHA-256:	017012AB5BF59DF8D239B1BB82DBF89213F09B47EDE50F1D99C1ED4290458A84
SHA-512:	A1438452ED7436957DA0F9AFA09C5E8304851199AA7D2EA277D143628C0D5517207B9668C11EB7CDCF03377CBA35F0847FB597116B1179C7CA5E16BEDE1CFD19
Malicious:	false
Reputation:	low
URL:	https://goldengoose.my.salesforce-sites.com/GGDBchat/jslibrary/jslabels/1713387778000/en_US.js
Preview:	LC.labels={'ActionBarButtons':{'ActionBarHelpChatterDisabled':'Actions in this section appear in Lightning Experience and in the mobile app action bar, and may appear in third party apps that use this page layout.','ActionBarHelpChatterEnabledMDPDisabled':'Actions in this section appear in Lightning Experience and in the mobile app action bar, and may appear in third party apps that use this page layout.','ActionBarHelpChatterEnabledMDPEnabledFeedTrackingDisabled':'Feed tracking is disabled for this object, but you can still customize actions for Lightning Experience and the mobile app action bar. Actions in this section appear only in Lightning Experience and the mobile app, and may appear in third party apps that use this page layout.','ActionBarHelpChatterEnabledMDPEnabledFeedTrackingEnabled':'Actions in this section appear in Lightning Experience and in the mobile app action bar, and may appear in third party apps that use this page layout.','ActionBarSectionTitle':'Salesforce Mobi

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	402
Entropy (8bit):	4.697918156217261
Encrypted:	false
SSDEEP:	6:e1EY0XfMdsyRs88hRD/FoaIRxOAABVwAw5eHA8AK3mt2ZHK3v2mH/7C9pygaK7A:3XfcdJ8LdI7OAOVwxAHHnZQbDC9oKM
MD5:	C3D544CA51C9EF29CF2CAAB64E661C40
SHA1:	ACBB17C79C96E91D9C04AE4C847B7241CCDE01DE
SHA-256:	B677FA5F3B2B7D5C3C44F3E767766DBCBDA5BE25678AE0E746880770094D19D8
SHA-512:	C68751161FE9DB27EBD6962D0B48D9454D6941C468A1186B8EAE9FCA6B067CAC00E23993DE529113280C67D94F0D35436DDE6C0CF0EB7F227A1C854FD81173EC
Malicious:	false
Reputation:	low
URL:	https://goldengoose.my.salesforce-sites.com/GGDBchat/resource/1588174741000/SiteSamples/SiteStyles.css
Preview:	.topPanelContainer {..text-align:left;..border:1px solid #ccc;.}...topPanel {. background-color: white;. border: 1px solid #ccc;. padding: 0px;. margin-top: 10px;. margin-bottom: 0px;. margin-left: 10px;. margin-right: 10px;.}...title {. font-size: larger;. font-weight: bold;.}...poweredByImage {..vertical-align: middle;..margin:12px 8px 8px 0;.}..img {. border: none;.}

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1767
Entropy (8bit):	7.761651108458816
Encrypted:	false
SSDEEP:	24:SQW3bIiXRBtedxI2caFGJ6hrIDLIcLvqhMisw8tyGq6s6fX9dzBZPRpc/c:Sh3TTsLJG4hhKqaisYGnfXrzBZZpc/c
MD5:	95AB333D95A0AE896383F72C499E60DC
SHA1:	90EF2806B042926CA428C19654B9306555B53429
SHA-256:	92B74CA2998A53CDFBB37181DEF237EF34D6D847F91997347B3CD95CAAB71C76
SHA-512:	9C88C7EDF93AA9A7470F7CFFCE8E0E9C4B86C0FD3D1A95FEAB7C5A31FDE4857D9D0F5723688F13B707E3F5DDE3062BC016057B8D87C752BFB9958C8645E3BBC1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....`.......PLTE..P..........1...................>....K.......K.......E....a(.....N........#.$._'........L..L..K..K..L..........#.K.K.......................................u;.......E....... ..pD.w4.2.......\|....O...{.........#. ....L.L.q..K......K......L.......2+(..l.F.C......J..l..@.H.0..l...<...1..i....e6..K....L.L..v..K..K...\|}...lgh.F.....#..v.....y5....bsoo.Rzuv..b............S.:.b......Z...f.v4.#....m..S.....y....}.h.G......P.....O..}..x.4....w......K....J.......K....z..J.F..a..Q......\|....Q..b......f..N...T.#...WB+....#...9.$.n3..........x>...e+..........\|....z..h.........s.;.}8.X...k.c....G......q...E...........A.U..~.....1..z.i...K.i....'.g,...1......tRNS.@..f....IDATx^..S.#Q.....[.m..m.1.m..t../2......wQn...Z....Z!.H.^.....Q.v+.=.+x.....-`...s0x.+..'.QWj.pM....@.....R....z.]............<....T...-Q....}"U....y%.az.&hL.T....

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (941)
Category:	downloaded
Size (bytes):	1385
Entropy (8bit):	5.317481285246997
Encrypted:	false
SSDEEP:	24:U0paG7Zu4x+C0mFa2CWctfHP7CKzVbKTNS77OJsXI5PIoQUI2IkINAITIBISIPIz:U0paMDxcmFa2CxtfvucVbKT07csXOPFB
MD5:	CCD2F285B62CB74170797BE357B5669F
SHA1:	68E668F6B43B9A87B87017A5A8DB45671D550490
SHA-256:	5830F6B53E1EA91ABD5DE97EF219269702F413575CFE0DD6149712D68D7D61EB
SHA-512:	583069C4E0BCC29DAEF3D246E3B86474C84EBFEAD84B62CBB86963EE73748AD33D610309C2AAE7769B165C9003F965316FC8C27581FA23BFBFCE6B29F7A5E408
Malicious:	false
Reputation:	low
URL:	https://goldengoose.my.salesforce-sites.com/GGDBchat/static/111213/js/perf/stub.js
Preview:	this["Perf"]&&void 0!==this["Perf"].enabled\|\|(function(window){'use strict';var a={DEBUG:{name:"DEBUG",value:1},INTERNAL:{name:"INTERNAL",value:2},PRODUCTION:{name:"PRODUCTION",value:3},DISABLED:{name:"DISABLED",value:4}};.window.PerfConstants={PAGE_START_MARK:"PageStart",PERF_PAYLOAD_PARAM:"bulkPerf",MARK_NAME:"mark",MEASURE_NAME:"measure",MARK_START_TIME:"st",MARK_LAST_TIME:"lt",PAGE_NAME:"pn",ELAPSED_TIME:"et",REFERENCE_TIME:"rt",Perf_LOAD_DONE:"loadDone",STATS:{NAME:"stat",SERVER_ELAPSED:"internal_serverelapsed",DB_TOTAL_TIME:"internal_serverdbtotaltime",DB_CALLS:"internal_serverdbcalls",DB_FETCHES:"internal_serverdbfetches"}};window.PerfLogLevel=a;var b=window.Perf={currentLogLevel:a.DISABLED,mark:function(){return b},endMark:function(){return b},updateMarkName:function(){return b},measureToJson:function(){return""},toJson:function(){return""},setTimer:function(){return b},setServerTime:function(){return b},toPostVar:function(){return""},getMeasures:function(){return[]},getBeaconD

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26453)
Category:	downloaded
Size (bytes):	26609
Entropy (8bit):	5.1798915041849485
Encrypted:	false
SSDEEP:	384:lg1ZyFtqNJSXEfecErpGdWxTZfqqqVbjlEpM0cORO:lgotqkEfzErpGdWxTZfqqqVbj2tO
MD5:	9574EF2F28A3322D64DD229EDF857D3E
SHA1:	F2C09A00D582D2A03D6D1320AA5688EB087387FA
SHA-256:	BBB4B32C2A0C64792CA923928138453F21FD235EC20E0532BAB61E64A34B1503
SHA-512:	18EEBBAE0E650B468FF02F20A7F677E66F9BFEA063A315370EA5EBA65202A8E1C45CBEA2189EE262EE423B0E3F0FC8844D206469E4739C77EAB4F88CC1401AF6
Malicious:	false
Reputation:	low
URL:	https://goldengoose.my.salesforce-sites.com/GGDBchat/sCSS/60.0/sprites/1705602481000/Theme3/default/gc/setup.css
Preview:	/. This code is for Internal Salesforce use only, and subject to change without notice.. * Customers shouldn't reference this file in any web pages.. */..sysAdminTab .outer td.oLeft,.setupTab .outer td.oLeft{width:230px}.setupTab .outer .oRight,.sysAdminTab .outer .oRight{padding-left:10px}.setupTab .bPageTitle .ptBody .content,.sysAdminTab .bPageTitle .ptBody .content{padding-left:10px}.setupTab .bPageTitle .pageTitleIcon,.sysAdminTab .bPageTitle .pageTitleIcon{display:none}.bTask .bPageBlock .pbBody{padding:5px 20px 0 20px}.setupTab .bResource .primaryPalette,.setupTab .bResource .secondaryPalette{border-color:#930;background-color:#930}.setupTab .bResource .bPageBlock .pbBody{padding:5px 20px 0 20px}.bPageBlock .setupOverview td,.bPageBlock .setupOverview th,.bPageBlock .setupResource td,.bPageBlock .setupResource th{padding:3px 2px 3px 5px;color:#333;width:50%}.bPageBlock .setupOverview,.bPageBlock .setupResource{width:100%}.bPageBlock .setupOverview a,.bPageBlock .setupResource

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 136 x 37, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	984
Entropy (8bit):	7.685462625569696
Encrypted:	false
SSDEEP:	24:2Y7uGG4facAs4fNxXd0XxYgAsegT187Y625T:2ouGGMarVNd0Bb7eg587cT
MD5:	41FE0320DAB08BAD56FAA8D2CB12899D
SHA1:	A29FA078DF1FC18309A8FA02D5941312E4E41344
SHA-256:	619248C13D2DD5B905AD4148F538F6EDDF1CD5C909146AEA88176A63FCDA4005
SHA-512:	787A0453180920E5C7ACA0852FBD5E90097CE2750890FBDF8CA75779A6A7227F407DFA3198E11EE623D56144FA81061B0FCA551DA1B2615DC549588CC6047734
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......%.......QP...cPLTE......@@@...000... ...PPP............```...ppp......p....@t..............F.0i....`..P...R. ].B......0IDATx....!.E.}1..........e.U.R...L.`A...Q.1..+....(;0.x3...F..t..&+~....GD.&...6.......z.0.js$.g.v.\..T'.Z._.i...t..$..T+e.AE.r..i...'.....1+K).Rw,%."..e..,b.hl.A.)]......h...\(.5a....`...g.}:^&8...`..a...H.U.m..z...../..y[."......<....`...U.....3/6.N......W.,.."-.U.x.!.g..6.J.Sd?E......%.Av.0;.....NyM..`e(.o.......>#.w..F.3.V.nvr\e.}....(w...#:\|......\.7...AI.J.).\...D...7...0'...1.]..}..=F..3l`3.l....,.l.hE5.T..j...d .Ot....._...j.0...IKz.!.....H..?e...h..C(9...a/3........S.~..R..D.>../........=.?.S.3L.i.s&....T.g.F....D.(...z......d.....g...=.."c.<4.:..\..>.6..nM...bC...w.~...lJwIK.,....#a.D...;.k.%.s.X.{.P..M&Ng._.<./A.pP...-bH.m....1....&+.L..kwa.v...].U.#.....i..8....".3........k._...b.j.i..../O?~..G.%.Lz..D....."...l.v.Z.P.,..........}z....(..L......D.7*........IEND.B`.

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1767
Entropy (8bit):	7.761651108458816
Encrypted:	false
SSDEEP:	24:SQW3bIiXRBtedxI2caFGJ6hrIDLIcLvqhMisw8tyGq6s6fX9dzBZPRpc/c:Sh3TTsLJG4hhKqaisYGnfXrzBZZpc/c
MD5:	95AB333D95A0AE896383F72C499E60DC
SHA1:	90EF2806B042926CA428C19654B9306555B53429
SHA-256:	92B74CA2998A53CDFBB37181DEF237EF34D6D847F91997347B3CD95CAAB71C76
SHA-512:	9C88C7EDF93AA9A7470F7CFFCE8E0E9C4B86C0FD3D1A95FEAB7C5A31FDE4857D9D0F5723688F13B707E3F5DDE3062BC016057B8D87C752BFB9958C8645E3BBC1
Malicious:	false
Reputation:	low
URL:	https://goldengoose.my.salesforce-sites.com/GGDBchat/resource/1588174741000/SiteSamples/img/warning.png
Preview:	.PNG........IHDR...0...0.....`.......PLTE..P..........1...................>....K.......K.......E....a(.....N........#.$._'........L..L..K..K..L..........#.K.K.......................................u;.......E....... ..pD.w4.2.......\|....O...{.........#. ....L.L.q..K......K......L.......2+(..l.F.C......J..l..@.H.0..l...<...1..i....e6..K....L.L..v..K..K...\|}...lgh.F.....#..v.....y5....bsoo.Rzuv..b............S.:.b......Z...f.v4.#....m..S.....y....}.h.G......P.....O..}..x.4....w......K....J.......K....z..J.F..a..Q......\|....Q..b......f..N...T.#...WB+....#...9.$.n3..........x>...e+..........\|....z..h.........s.;.}8.X...k.c....G......q...E...........A.U..~.....1..z.i...K.i....'.g,...1......tRNS.@..f....IDATx^..S.#Q.....[.m..m.1.m..t../2......wQn...Z....Z!.H.^.....Q.v+.=.+x.....-`...s0x.+..'.QWj.pM....@.....R....z.]............<....T...-Q....}"U....y%.az.&hL.T....

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65380)
Category:	downloaded
Size (bytes):	92476
Entropy (8bit):	5.1535955526844015
Encrypted:	false
SSDEEP:	1536:1GLNl4mJTfYN2hZRzC7mMeBn8cBIiNWp/WKpL5LJZJdNzSdexSmhHLobxVR4T/tO:XP3o
MD5:	EA301F0D513F78419DEAAE202168F4DE
SHA1:	AB4B9721A2AFC4FFDAAFA0A2C92BA5C53221CD3E
SHA-256:	96BABBDCBE86BC969E21CE6CF7F7CEF0D45D7887934B01684155EEEF57939D85
SHA-512:	050E53129AE9A6C0BD2431A6AEF630E78D7287CFF92D121FD48191869BA658BA607FAAED8BB3C94A2FC1DE540FBEE6E568F91624264A24A47874BE2A33FD1B0D
Malicious:	false
Reputation:	low
URL:	https://goldengoose.my.salesforce-sites.com/GGDBchat/sCSS/60.0/sprites/1705602481000/Theme3/default/gc/extended.css
Preview:	/. This code is for Internal Salesforce use only, and subject to change without notice.. * Customers shouldn't reference this file in any web pages.. */.a{color:#333435}a.navSkipLink{color:#fff}a.navSkipLink:focus{text-decoration:underline;color:#015ba7}body .bPageTitle .ptBody a,body .secondaryPalette .lbHeader a,body .pbSubheader a{color:#015ba7}body a:hover{text-decoration:underline;color:#015ba7}body,td{font-family:Arial,Helvetica,sans-serif;color:#222}body.sfdcBody{background:#1797c0 url(/img/alohaSkin/gradient_body.png) repeat-x}.hasMotif{margin:0 10px}.errorStyle,.errorMsg,.importantWarning,.pbBody .errorStyle a,.pbBody .errorMsg a{color:#d74c3b}h1,h2,h3,h4,h5,h6{font-weight:bold}body .x-btn button,body .btn,body .btnImportant,body .btnDisabled,body .btnCancel,body .menuButton .menuButtonButton,body .menuButton .menuButtonMenu a,body .menuButton .menuButtonMenu input.theOption,h1,h2,h3,h4,h5,h6{font-family:Arial,Helvetica,sans-serif}body button,body .x-btn,body .btn,body .btn

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	2.6916960685487825
Encrypted:	false
SSDEEP:	48:uZY/S81C1A58ZrvB0Ze/kPm3Cn8GaxOcBXmD:lSRu8ZrvBj/kuXG9
MD5:	CCDA8DF05E9A37B3131AFD4D451B44EC
SHA1:	ED9D0F9C4224FBD4C768BE237B4B59F27F1B718C
SHA-256:	92842FC6C2F66B46F69458C14621FC2ECA5D6C02D7937F9124FE8A3A9A55BC91
SHA-512:	A91F53C07B327C35864FE903ACFE30AFE2DE3C26FDCE1BDBF65842598B3A7B2FB19E54DE27495519BF1E2A2BF7358561DA16E931324E5B1112DA4FE7EFE4BC7E
Malicious:	false
Reputation:	low
URL:	https://goldengoose.my.salesforce-sites.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... .....@........................................................................................................................................................................_..i..'............................................%..............I................................A.............................I................1.........................................3......}............................................'..u...............................................!...................................................s..........................................................................................'......I......................................1.....................................U..............................'..I..#..............................................................

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65380)
Category:	downloaded
Size (bytes):	1624530
Entropy (8bit):	5.045613208886389
Encrypted:	false
SSDEEP:	49152:TQDET0qTteHRwKadG22ULK9AKJjDC3aBTSj6O0VtuuRLLo05GVL9JO2UEng/S0X3:+
MD5:	783F1553CBB5C32B953D062BEF3AC030
SHA1:	FD0C925EFD12D5E37A402CE8049824D01FCAEBBC
SHA-256:	6A447451993DF13A4D5718474A5F67EBA3D2F462ECA67238CCE76C749F922C43
SHA-512:	68B9A7105F092025E85F7FA822E21AE92B9A2B05092F9C8F5DB55A8539F3ACD6D878F478236CC30F26EE7E8273B1C77E3FB1BB161F913A3E3015C47CD02872B2
Malicious:	false
Reputation:	low
URL:	https://goldengoose.my.salesforce-sites.com/sCSS/60.0/sprites/1710411415000/Theme3/gc/dStandard.css
Preview:	/. This code is for Internal Salesforce use only, and subject to change without notice.. * Customers shouldn't reference this file in any web pages.. */..ExpressionSetObjectAliasTab .primaryPalette,.individualPalette .ExpressionSetObjectAliasBlock .primaryPalette{background-color:#7e2600;border-color:#7e2600}.ExpressionSetObjectAliasTab .secondaryPalette,.individualPalette .ExpressionSetObjectAliasBlock .secondaryPalette{background-color:#7e2600;border-color:#7e2600}.ExpressionSetObjectAliasTab .tertiaryPalette,.individualPalette .ExpressionSetObjectAliasBlock .tertiaryPalette,.layoutEdit .individualPalette .ExpressionSetObjectAliasBlock .tertiaryPalette{background-color:#995905;border-color:#995905}.ExpressionSetObjectAliasTab .bgdPalette{background-color:#7e2600}.ExpressionSetObjectAliasTab .brdPalette{border-top-color:#7e2600}.ExpressionSetObjectAliasTab .listViewport .subNav .linkBar,.ExpressionSetObjectAliasTab .mComponent .cHeader,.ExpressionSetObjectAliasTab .genericTable,.Ex

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	2.6916960685487825
Encrypted:	false
SSDEEP:	48:uZY/S81C1A58ZrvB0Ze/kPm3Cn8GaxOcBXmD:lSRu8ZrvBj/kuXG9
MD5:	CCDA8DF05E9A37B3131AFD4D451B44EC
SHA1:	ED9D0F9C4224FBD4C768BE237B4B59F27F1B718C
SHA-256:	92842FC6C2F66B46F69458C14621FC2ECA5D6C02D7937F9124FE8A3A9A55BC91
SHA-512:	A91F53C07B327C35864FE903ACFE30AFE2DE3C26FDCE1BDBF65842598B3A7B2FB19E54DE27495519BF1E2A2BF7358561DA16E931324E5B1112DA4FE7EFE4BC7E
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... .....@........................................................................................................................................................................_..i..'............................................%..............I................................A.............................I................1.........................................3......}............................................'..u...............................................!...................................................s..........................................................................................'......I......................................1.....................................U..............................'..I..#..............................................................

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51955)
Category:	downloaded
Size (bytes):	52111
Entropy (8bit):	5.164621313912518
Encrypted:	false
SSDEEP:	192:43UeREcMnaLAa8LDZkEU3Q1hHvDxCRtrbcvL5W38F54htLlrmLJRKp1tw8RBGx/k:edT3LDxzHo+blaD77+eFsmE1
MD5:	46B4D0FB41DC2CC1AEC6415BEFCA0AEE
SHA1:	2BC36B150AE6365428017123F2FD0AA53590C2F3
SHA-256:	D856F5B2C976FE7B525776B757209BFB7E23A9C5EA0BBF60002C21301A7452C5
SHA-512:	1AE5E0B01E68DC4BEBF4D14FCE61FFAB073B7ED8E9FB033A44D40A2E444DCB46164B72822F4E7F4D13CCF7021E9C9AA1A9D417AFABFC9690AD980C821EE8125B
Malicious:	false
Reputation:	low
URL:	https://goldengoose.my.salesforce-sites.com/sCSS/60.0/sprites/1710411415000/Theme3/00D3X0000047cTS/0057U000001A9O2/gc/dCustom0.css
Preview:	/. This code is for Internal Salesforce use only, and subject to change without notice.. * Customers shouldn't reference this file in any web pages.. */..Custom11Tab .primaryPalette,.individualPalette .Custom11Block .primaryPalette{background-color:#9c9cc6;border-color:#9c9cc6}.Custom11Tab .secondaryPalette,.individualPalette .Custom11Block .secondaryPalette{background-color:#9c9cc6;border-color:#9c9cc6}.Custom11Tab .tertiaryPalette,.individualPalette .Custom11Block .tertiaryPalette,.layoutEdit .individualPalette .Custom11Block .tertiaryPalette{background-color:#b3b3cb;border-color:#b3b3cb}.Custom11Tab .bgdPalette{background-color:#9c9cc6}.Custom11Tab .brdPalette{border-top-color:#9c9cc6}.Custom11Tab .listViewport .subNav .linkBar,.Custom11Tab .mComponent .cHeader,.Custom11Tab .genericTable,.Custom11Tab .bSubBlock,.Custom11Tab .bPageBlock{border-top:3px solid #9c9cc6}.bodyDiv .mruList.individualPalette .Custom11Block .secondaryPalette .pbHeader,.bodyDiv .hoverDetail .Custom11Block .

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 138 x 125, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	4681
Entropy (8bit):	7.9197947311511365
Encrypted:	false
SSDEEP:	96:8SB9grFcWoX7cbP2/MaYelKajQfY3AVczsoqaBW7X0JTcHp6VTZv4IYxiql:8SBv/X7cz2/MaZlKm93AVNYgr0yHQwIC
MD5:	4AEEC1B4ACEA7AE2E1FC7CCC9859969B
SHA1:	6F2F8D42808B3C04C1A2E7D9B6BA37EA7F862BA7
SHA-256:	28F4EF9216951073E8A7CC0DDE5CE0945A5C6A8D8D090E0B36436564AFE7539C
SHA-512:	F26F6D60838F090B7764BA0B69EC1C7DF228FCEC26A8019D14D7089DD668B3091077F40EFCF9D49D705EC2725C2E3D456F77D312D75EFD4F5DEC2F63931158E2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......}......rl.....IDATx...n.<........h.-.1.%%..9....{..B.6..%.[.M.1V.......7...x.p<......d...8...(.P.A.s..Q..Su`....$LiAY..F..v.p<Ll..P..dA...%KJ~P...'..d.#..Bb..RG.r.in.....H..\|%.F....l.`d.yD..O...xX1...rBr.M.e..._D.I1.O.K..4)Y..l.K.lPl......+..1..6(...KG2.'..l.....X..n..jmv..O...#..&O..\`&E.I...G..l.(...g-o.%....;.....2bl...........)...mC...b}..fx^..0..6...K0.4m...m+\|...<.>..:KN(Yp..I.6. <..X_0]5.]_./....7ec..k..#..P...g..lPl.`.$-.O.No0...............l....(..O...N......3l...N.7.g...m..`r<-.....y6...g,((.1.......oq....1...i....T.)....`.x.F..ac.a.)u<-.>.....M..VA.y......$.lPx.....A..u.....\|U.....mR.8..:6U..B....)...a1.d.<.S.C..... .=.P...6..U<.C..Mo...Q`.>N..:.~..R.+.....1.}.a...B.?.bX..'i...K%\|...<..{.A.>...k...B..=....h.'.g.@y.--.:._.4D!.~..\.]}..T.....*.M..B....R.....T..-U.iXB^...2{?.:@....o.^.6..w7............Z.... /..y.....2.(jj....?{f<`....t...........x.y..7.w.Q..Bi..w..G..y.q...o ........t....".qD.\|$.B.>.+x..

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 138 x 125, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	4681
Entropy (8bit):	7.9197947311511365
Encrypted:	false
SSDEEP:	96:8SB9grFcWoX7cbP2/MaYelKajQfY3AVczsoqaBW7X0JTcHp6VTZv4IYxiql:8SBv/X7cz2/MaZlKm93AVNYgr0yHQwIC
MD5:	4AEEC1B4ACEA7AE2E1FC7CCC9859969B
SHA1:	6F2F8D42808B3C04C1A2E7D9B6BA37EA7F862BA7
SHA-256:	28F4EF9216951073E8A7CC0DDE5CE0945A5C6A8D8D090E0B36436564AFE7539C
SHA-512:	F26F6D60838F090B7764BA0B69EC1C7DF228FCEC26A8019D14D7089DD668B3091077F40EFCF9D49D705EC2725C2E3D456F77D312D75EFD4F5DEC2F63931158E2
Malicious:	false
Reputation:	low
URL:	https://goldengoose.my.salesforce-sites.com/GGDBchat/resource/1588174741000/SiteSamples/img/clock.png
Preview:	.PNG........IHDR.......}......rl.....IDATx...n.<........h.-.1.%%..9....{..B.6..%.[.M.1V.......7...x.p<......d...8...(.P.A.s..Q..Su`....$LiAY..F..v.p<Ll..P..dA...%KJ~P...'..d.#..Bb..RG.r.in.....H..\|%.F....l.`d.yD..O...xX1...rBr.M.e..._D.I1.O.K..4)Y..l.K.lPl......+..1..6(...KG2.'..l.....X..n..jmv..O...#..&O..\`&E.I...G..l.(...g-o.%....;.....2bl...........)...mC...b}..fx^..0..6...K0.4m...m+\|...<.>..:KN(Yp..I.6. <..X_0]5.]_./....7ec..k..#..P...g..lPl.`.$-.O.No0...............l....(..O...N......3l...N.7.g...m..`r<-.....y6...g,((.1.......oq....1...i....T.)....`.x.F..ac.a.)u<-.>.....M..VA.y......$.lPx.....A..u.....\|U.....mR.8..:6U..B....)...a1.d.<.S.C..... .=.P...6..U<.C..Mo...Q`.>N..:.~..R.+.....1.}.a...B.?.bX..'i...K%\|...<..{.A.>...k...B..=....h.'.g.@y.--.:._.4D!.~..\.]}..T.....*.M..B....R.....T..-U.iXB^...2{?.:@....o.^.6..w7............Z.... /..y.....2.(jj....?{f<`....t...........x.y..7.w.Q..Bi..w..G..y.q...o ........t....".qD.\|$.B.>.+x..

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21627)
Category:	downloaded
Size (bytes):	879027
Entropy (8bit):	5.514688564381049
Encrypted:	false
SSDEEP:	24576:JaUTHmCBX/mcdyuGiGFCiR5N+zcIi0k7hv:JaUTzBX/mcdyFiGFCiR5N+zcIi0k7hv
MD5:	5D2B721BCE29CD59B081F69AECE62527
SHA1:	F609400E6120EC73E854F18961CD4AB052589A7F
SHA-256:	83B8A261D09270141632CF77FBCC2B777F78A60BCA1EA7B0CBF5F76E43BD7971
SHA-512:	F43C398AB985C104093CA4E6BF8B523022C4E7CF15B2B129991C104E535711ABC68D372323FC93570583DC0F958C1D1807395B2AAA9902A50EB9530C0C97D27E
Malicious:	false
Reputation:	low
URL:	https://goldengoose.my.salesforce-sites.com/GGDBchat/jslibrary/1699262264248/sfdc/main.js
Preview:	var InlineEditState = {"EDIT":{"cssClass":"inlineEditWrite","display":true},"NONE":{"cssClass":"","display":false},"POSTONLY":{"cssClass":"","display":false},"READONLY":{"cssClass":"inlineEditLock","display":true}};.var ColumnType = {"NAMESPACE":{"inlineEditable":false,"isCompond":true,"comparableDatatypes":["n"],"isNumber":false,"datatypeLetter":"n","needsLookup":false,"isDate":false},"HTMLMULTILINETEXT":{"inlineEditExtraData":["maxLength","isHtml"],"consoleSidebarInlineEditFieldConstructor":function(){return ConsoleSidebarHtmlMultiLineTextField;},"inlineEditFieldObject":"HtmlMultiLineTextField","inlineEditable":true,"isCompond":false,"comparableDatatypes":["5"],"isNumber":false,"datatypeLetter":"5","needsLookup":false,"isDate":false,"inlineEditFieldConstructor":function(){return HtmlMultiLineTextField;},"filterQueryOperators":["e","n","c","k","s"],"queryOperators":["e","n","l","g","m","h","c","k","s","i"]},"AUTONUMBER":{"consoleSidebarInlineEditFieldConstructor":function(){return Con

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33778)
Category:	downloaded
Size (bytes):	33934
Entropy (8bit):	5.168189179091688
Encrypted:	false
SSDEEP:	768:ittRUWYGfm71NCVwHLFp+h1/9HOdt58nSZNT9Xwmb:LNCVw3Amb
MD5:	F2249233963C4BC60854B97F5059B14F
SHA1:	D746DC255417B7B0A382CC18BBD4EFF89889B22C
SHA-256:	724B779F5A6B56F9CBB1762CB5C55662117C3E58FF44A51B4F96288415D6A699
SHA-512:	55457B5A8BB83F74C4BF33578DB06D25C4A992FFD3BEDFFAFA232F7760CE0DA7322315EEF17F9649506590F68EDE4C77CF3FA2DCADE86E3D2C03C0AE62E71C21
Malicious:	false
Reputation:	low
URL:	https://goldengoose.my.salesforce-sites.com/GGDBchat/sCSS/60.0/sprites/1705602481000/Theme3/default/gc/elements.css
Preview:	/. This code is for Internal Salesforce use only, and subject to change without notice.. * Customers shouldn't reference this file in any web pages.. */..userDefinedMRU img.userDefinedImage{background-image:none}.userDefinedMotif img.userDefinedImage,.userDefinedMotif img.relatedListIcon.userDefinedImage{background-image:none}.userDefinedRL img.userDefinedImage{background-image:none}.userDefinedRL .pbHeader .pbTitle h3{margin-left:4px}.motifElement{border:1px solid black;width:150px;margin-right:.3em;text-decoration:none;padding:0;overflow:hidden;height:1.5em;display:block;text-decoration:none;cursor:default;background-color:#fff}a.motifElement:hover{text-decoration:none}.motifElement .iconChoice,.motifElement .iconChoice img{width:19px;height:100%;background-color:#fff;float:left}.motifElement .colorChoice{margin:0;width:128px;height:100%;float:right;text-align:center;overflow:hidden}.motifColorElement,.motifColorElement .colorChoice{width:48px}.motifColorElement .iconChoice{displa

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65380)
Category:	downloaded
Size (bytes):	211329
Entropy (8bit):	5.171973921790016
Encrypted:	false
SSDEEP:	1536:+2JhOCFey47gOuyrv9BMMTvdJKHe+bpgY5IVD6TbN1eAeQ+fOi7ZAboPrQxkpT/F:JJhv5NDst/
MD5:	36A297A1094741D1D36D9C31F33EA062
SHA1:	C6B6FD48065E4FE97A2998F1CC77748BF9FAFF56
SHA-256:	9260359FB2B9E2B4E8FB96C8F54A415F9E91C6755EC36C850DBAD445F97C3110
SHA-512:	1E8FDEC99FA888402D3F27F82F3E3D8B7FD5CB04DEED80EFF6CB3A295CD881AED7F7ED1CCC44E7FB4EAD0326F1450E813825327E27308751CB8123D1FD45F150
Malicious:	false
Reputation:	low
URL:	https://goldengoose.my.salesforce-sites.com/GGDBchat/sCSS/60.0/sprites/1705602481000/Theme3/default/gc/common.css
Preview:	/. This code is for Internal Salesforce use only, and subject to change without notice.. * Customers shouldn't reference this file in any web pages.. */.pre.exception{font-size:145%}body,td{margin:0;color:#333}body{background-repeat:repeat-x;background-position:left top;font-size:75%;font-family:'Arial','Helvetica',sans-serif;background-color:#fff}a{color:#333}a:hover{text-decoration:underline}th{text-align:left;font-weight:bold;white-space:nowrap}form{margin:0;padding:0}h1,h2,h3,h4,h5,h6{font-family:'Verdana','Geneva',sans-serif;font-size:100%;margin:0;display:inline}textarea{font-family:'Arial','Helvetica',sans-serif;font-size:100%}select{color:#000}select:disabled{color:#aaa}select option,select optgroup{font-size:100%}img{border:0}dl{margin-left:1em}dt{font-weight:bold}fieldset legend{font-weight:bold;color:black}fieldset ul{padding:0}ul li,ol li{margin-left:1.5em;padding-left:0}input{padding-top:0}.fileFieldInputElement div{padding-bottom:3px}.accessibleHiddenText{position:abso

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47916)
Category:	downloaded
Size (bytes):	48072
Entropy (8bit):	5.125359556406337
Encrypted:	false
SSDEEP:	384:q9WfwXwo1BJo6+HC0kKtEUnDcb7v97v6VfaEFnakhuVZQS1FF8w3lQIlWzn27vLF:q9z+lEjSbaQuVZQuFF84FyZ8o/w
MD5:	2BF0D0F71A3E905CAD779DD9E585DB25
SHA1:	530AEB93F927531C9BAFBD64415EE9E5EF580FC8
SHA-256:	289E7B81FEDB81DC4F639D186183E024E0B6A2F307CE6DC895E1207E96887519
SHA-512:	667F12D68E96D2E570F9C6D997EDAEF8B3129BC00A6591A4FE67BBBC779FCA4A1721E7D7B6BD4C28E6A987AAAD47D22697B92700EEAA01A6266F3674E8A05059
Malicious:	false
Reputation:	low
URL:	https://goldengoose.my.salesforce-sites.com/GGDBchat/sCSS/60.0/sprites/1705602481000/Theme3/default/gc/zen-componentsCompatible.css
Preview:	/. This code is for Internal Salesforce use only, and subject to change without notice.. * Customers shouldn't reference this file in any web pages.. */..zen ul,.zen ol,.zen li,.zen h1,.zen h2,.zen h3,.zen h4,.zen h6,.zen form,.zen fieldset,.zen legend,.zen input,.zen textarea,.zen p,.zen blockquote{margin:0;padding:0}.zen h1,.zen h2,.zen h3,.zen h4,.zen h5,.zen h6{display:block}.zen li{list-style:none}.zen table{border-collapse:collapse;border-spacing:0}.zen th{text-align:inherit}.zen fieldset,.zen img{border:0}.zen input,.zen textarea,.zen select{font-family:inherit;font-size:inherit;font-weight:inherit}.zen legend{color:#222}.zen a{color:#015ba7;text-decoration:none}.zen-headerTop a{color:#015ba7;text-decoration:none}.zen-headerTop a:hover,.zen-headerTop a:focus{text-decoration:underline}.zen .zen-line:after{clear:both;display:block;visibility:hidden;overflow:hidden;height:0 !important;line-height:0;content:"."}.zen .zen-unit,.zen .zen-start{float:left}.zen .zen-unitExt,.zen .zen

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 136 x 37, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	984
Entropy (8bit):	7.685462625569696
Encrypted:	false
SSDEEP:	24:2Y7uGG4facAs4fNxXd0XxYgAsegT187Y625T:2ouGGMarVNd0Bb7eg587cT
MD5:	41FE0320DAB08BAD56FAA8D2CB12899D
SHA1:	A29FA078DF1FC18309A8FA02D5941312E4E41344
SHA-256:	619248C13D2DD5B905AD4148F538F6EDDF1CD5C909146AEA88176A63FCDA4005
SHA-512:	787A0453180920E5C7ACA0852FBD5E90097CE2750890FBDF8CA75779A6A7227F407DFA3198E11EE623D56144FA81061B0FCA551DA1B2615DC549588CC6047734
Malicious:	false
Reputation:	low
URL:	https://goldengoose.my.salesforce-sites.com/GGDBchat/resource/1588174741000/SiteSamples/img/poweredby.png
Preview:	.PNG........IHDR.......%.......QP...cPLTE......@@@...000... ...PPP............```...ppp......p....@t..............F.0i....`..P...R. ].B......0IDATx....!.E.}1..........e.U.R...L.`A...Q.1..+....(;0.x3...F..t..&+~....GD.&...6.......z.0.js$.g.v.\..T'.Z._.i...t..$..T+e.AE.r..i...'.....1+K).Rw,%."..e..,b.hl.A.)]......h...\(.5a....`...g.}:^&8...`..a...H.U.m..z...../..y[."......<....`...U.....3/6.N......W.,.."-.U.x.!.g..6.J.Sd?E......%.Av.0;.....NyM..`e(.o.......>#.w..F.3.V.nvr\e.}....(w...#:\|......\.7...AI.J.).\...D...7...0'...1.]..}..=F..3l`3.l....,.l.hE5.T..j...d .Ot....._...j.0...IKz.!.....H..?e...h..C(9...a/3........S.~..R..D.>../........=.?.S.3L.i.s&....T.g.F....D.(...z......d.....g...=.."c.<4.:..\..>.6..nM...bC...w.~...lJwIK.,....#a.D...;.k.%.s.X.{.P..M&Ng._.<./A.pP...-bH.m....1....&+.L..kwa.v...].U.#.....i..8....".3........k._...b.j.i..../O?~..G.%.Lz..D....."...l.v.Z.P.,..........}z....(..L......D.7*........IEND.B`.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 16:43:58.825916052 CEST	49705	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:43:58.825956106 CEST	443	49705	15.161.0.134	192.168.2.17
Apr 18, 2024 16:43:58.826030016 CEST	49705	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:43:58.826280117 CEST	49705	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:43:58.826297045 CEST	443	49705	15.161.0.134	192.168.2.17
Apr 18, 2024 16:43:59.272700071 CEST	443	49705	15.161.0.134	192.168.2.17
Apr 18, 2024 16:43:59.273231030 CEST	49705	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:43:59.273258924 CEST	443	49705	15.161.0.134	192.168.2.17
Apr 18, 2024 16:43:59.274753094 CEST	443	49705	15.161.0.134	192.168.2.17
Apr 18, 2024 16:43:59.274936914 CEST	49705	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:43:59.276180983 CEST	49705	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:43:59.276303053 CEST	443	49705	15.161.0.134	192.168.2.17
Apr 18, 2024 16:43:59.276365042 CEST	49705	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:43:59.319931984 CEST	49705	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:43:59.319962978 CEST	443	49705	15.161.0.134	192.168.2.17
Apr 18, 2024 16:43:59.367894888 CEST	49705	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:43:59.447937012 CEST	49677	443	192.168.2.17	204.79.197.200
Apr 18, 2024 16:43:59.447942972 CEST	49678	443	192.168.2.17	204.79.197.200
Apr 18, 2024 16:43:59.447962046 CEST	49676	443	192.168.2.17	204.79.197.200
Apr 18, 2024 16:43:59.759790897 CEST	443	49705	15.161.0.134	192.168.2.17
Apr 18, 2024 16:43:59.759882927 CEST	443	49705	15.161.0.134	192.168.2.17
Apr 18, 2024 16:43:59.760003090 CEST	49705	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:43:59.761964083 CEST	49705	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:43:59.761997938 CEST	443	49705	15.161.0.134	192.168.2.17
Apr 18, 2024 16:43:59.905869007 CEST	49708	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:43:59.905936003 CEST	443	49708	15.161.0.134	192.168.2.17
Apr 18, 2024 16:43:59.906038046 CEST	49708	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:43:59.906244993 CEST	49708	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:43:59.906260014 CEST	443	49708	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:00.347423077 CEST	443	49708	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:00.347774029 CEST	49708	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:00.347796917 CEST	443	49708	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:00.348907948 CEST	443	49708	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:00.348980904 CEST	49708	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:00.350219965 CEST	49708	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:00.350295067 CEST	443	49708	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:00.350408077 CEST	49708	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:00.350414991 CEST	443	49708	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:00.394953012 CEST	49708	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:00.831171036 CEST	443	49708	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:00.831464052 CEST	443	49708	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:00.831525087 CEST	49708	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:00.832926035 CEST	49708	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:00.832948923 CEST	443	49708	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:00.832959890 CEST	49708	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:00.833000898 CEST	49708	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:00.833992004 CEST	49709	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:00.834043026 CEST	443	49709	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:00.834121943 CEST	49709	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:00.834361076 CEST	49709	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:00.834376097 CEST	443	49709	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:01.273046017 CEST	443	49709	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:01.273462057 CEST	49709	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:01.273477077 CEST	443	49709	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:01.273830891 CEST	443	49709	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:01.274142027 CEST	49709	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:01.274209023 CEST	443	49709	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:01.274287939 CEST	49709	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:01.320118904 CEST	443	49709	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:01.885232925 CEST	443	49709	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:01.885253906 CEST	443	49709	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:01.885313034 CEST	443	49709	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:01.885358095 CEST	49709	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:01.885401964 CEST	49709	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:01.887177944 CEST	49709	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:01.887197018 CEST	443	49709	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:01.912921906 CEST	49711	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:01.912959099 CEST	443	49711	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:01.913048983 CEST	49711	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:01.913302898 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:01.913341045 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:01.913388968 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:01.913536072 CEST	49711	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:01.913548946 CEST	443	49711	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:01.913788080 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:01.913795948 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:01.915345907 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:01.915379047 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:01.915447950 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:01.915790081 CEST	49714	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:01.915819883 CEST	443	49714	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:01.915891886 CEST	49714	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:01.916152954 CEST	49715	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:01.916172981 CEST	443	49715	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:01.916230917 CEST	49715	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:01.916538954 CEST	49716	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:01.916565895 CEST	443	49716	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:01.916631937 CEST	49716	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:01.917104959 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:01.917117119 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:01.917341948 CEST	49714	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:01.917352915 CEST	443	49714	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:01.917473078 CEST	49715	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:01.917485952 CEST	443	49715	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:01.917634964 CEST	49716	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:01.917653084 CEST	443	49716	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.353482008 CEST	443	49711	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.353888035 CEST	49711	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.353919983 CEST	443	49711	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.354434013 CEST	443	49711	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.354552984 CEST	443	49715	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.354758024 CEST	49711	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.354827881 CEST	443	49711	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.354902029 CEST	49715	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.354911089 CEST	443	49715	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.355057001 CEST	49711	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.356093884 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.356153965 CEST	443	49715	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.356245041 CEST	49715	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.356295109 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.356309891 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.356565952 CEST	49715	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.356645107 CEST	443	49715	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.356652975 CEST	49715	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.356698036 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.356966972 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.357038021 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.357042074 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.357268095 CEST	443	49716	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.357305050 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.357458115 CEST	49716	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.357465982 CEST	443	49716	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.357552052 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.357566118 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.358745098 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.358805895 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.358872890 CEST	443	49716	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.358928919 CEST	49716	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.359106064 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.359174967 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.359339952 CEST	49716	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.359438896 CEST	443	49716	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.359457016 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.359466076 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.359499931 CEST	49716	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.359507084 CEST	443	49716	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.363300085 CEST	443	49714	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.363574028 CEST	49714	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.363589048 CEST	443	49714	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.367145061 CEST	443	49714	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.367249966 CEST	49714	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.367610931 CEST	49714	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.367768049 CEST	49714	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.367772102 CEST	443	49714	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.367788076 CEST	443	49714	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.396123886 CEST	443	49711	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.400126934 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.404119015 CEST	443	49715	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.405885935 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.405893087 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.405893087 CEST	49715	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.405905008 CEST	443	49715	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.405925035 CEST	49716	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.421941042 CEST	49714	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.421948910 CEST	443	49714	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.454135895 CEST	49715	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.469899893 CEST	49714	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.868580103 CEST	443	49714	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.868649006 CEST	443	49714	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.868716955 CEST	49714	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.869998932 CEST	49714	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.870007992 CEST	443	49714	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.870548964 CEST	49717	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.870572090 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:02.870654106 CEST	49717	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.872185946 CEST	49717	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:02.872200012 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.066272020 CEST	443	49715	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.066296101 CEST	443	49715	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.066303015 CEST	443	49715	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.066329956 CEST	443	49715	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.066340923 CEST	443	49715	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.066353083 CEST	443	49715	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.066510916 CEST	49715	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.066523075 CEST	443	49715	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.066541910 CEST	443	49715	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.066549063 CEST	443	49715	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.066562891 CEST	443	49715	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.066570044 CEST	443	49715	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.066606998 CEST	443	49715	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.066703081 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.066732883 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.066741943 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.066744089 CEST	49715	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.066754103 CEST	443	49715	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.066790104 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.066833973 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.066932917 CEST	49715	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.066987991 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.066987991 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.067001104 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.067022085 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.067044020 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.067054987 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.067069054 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.067109108 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.068013906 CEST	49718	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.068047047 CEST	49715	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.068048000 CEST	443	49718	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.068058014 CEST	443	49715	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.068147898 CEST	49718	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.068664074 CEST	49718	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.068675995 CEST	443	49718	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.071779966 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.071805000 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.071813107 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.071844101 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.071867943 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.071888924 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.071901083 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.071908951 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.071928024 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.071932077 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.071938038 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.071959972 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.072000980 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.072329044 CEST	443	49716	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.072345972 CEST	443	49716	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.072351933 CEST	443	49716	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.072371960 CEST	443	49716	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.072391033 CEST	443	49716	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.072407961 CEST	49716	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.072438002 CEST	443	49716	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.072452068 CEST	443	49716	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.072458982 CEST	49716	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.072484016 CEST	443	49716	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.072519064 CEST	49716	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.072546959 CEST	49716	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.074039936 CEST	443	49711	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.074065924 CEST	443	49711	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.074094057 CEST	443	49711	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.074132919 CEST	49711	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.074140072 CEST	443	49711	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.074168921 CEST	49711	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.074196100 CEST	49711	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.074826002 CEST	443	49711	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.074846983 CEST	443	49711	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.074909925 CEST	443	49711	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.074914932 CEST	49711	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.074919939 CEST	443	49711	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.074949026 CEST	49711	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.122973919 CEST	49711	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.283126116 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.283143997 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.283274889 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.283301115 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.283318043 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.283416033 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.283422947 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.283431053 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.283451080 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.283473015 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.283478022 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.283510923 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.287448883 CEST	443	49716	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.287471056 CEST	443	49716	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.287506104 CEST	443	49716	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.287571907 CEST	443	49716	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.287604094 CEST	49716	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.287674904 CEST	49716	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.288172007 CEST	49716	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.288187027 CEST	443	49716	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.288619995 CEST	49719	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.288674116 CEST	443	49719	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.288764000 CEST	49719	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.289459944 CEST	49719	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.289489985 CEST	443	49719	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.289551020 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.289575100 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.289635897 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.289648056 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.289661884 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.289686918 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.289730072 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.289807081 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.289823055 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.289900064 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.289906025 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.291239977 CEST	443	49711	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.291289091 CEST	443	49711	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.291309118 CEST	49711	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.291315079 CEST	443	49711	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.291325092 CEST	443	49711	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.291351080 CEST	49711	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.291373014 CEST	49711	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.291764021 CEST	49711	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.291774988 CEST	443	49711	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.292146921 CEST	49720	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.292181969 CEST	443	49720	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.292247057 CEST	49720	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.292557001 CEST	49720	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.292568922 CEST	443	49720	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.311944962 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.312290907 CEST	49717	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.312309027 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.313420057 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.313811064 CEST	49717	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.313961983 CEST	49717	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.313966990 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.313985109 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.327927113 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.342936993 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.358954906 CEST	49717	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.499479055 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.499502897 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.499603987 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.499618053 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.499680996 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.500324011 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.500339031 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.500384092 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.500406027 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.500416040 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.500443935 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.500454903 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.500471115 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.500499964 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.500518084 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.500528097 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.500535011 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.500571012 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.500617981 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.507253885 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.507277012 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.507369041 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.507380962 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.507435083 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.507580996 CEST	443	49718	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.507687092 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.507708073 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.507752895 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.507760048 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.507771015 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.507791996 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.507829905 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.507874966 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.507879019 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.507921934 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.507936001 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.507951021 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.507975101 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.507985115 CEST	49718	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.508007050 CEST	443	49718	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.508012056 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.508033037 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.508037090 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.508065939 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.508070946 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.508106947 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.508138895 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.508250952 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.508265972 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.508318901 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.508326054 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.508362055 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.508579969 CEST	443	49718	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.509308100 CEST	49718	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.509394884 CEST	443	49718	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.509632111 CEST	49718	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.556118965 CEST	443	49718	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.606972933 CEST	49721	443	192.168.2.17	74.125.138.103
Apr 18, 2024 16:44:03.607026100 CEST	443	49721	74.125.138.103	192.168.2.17
Apr 18, 2024 16:44:03.607119083 CEST	49721	443	192.168.2.17	74.125.138.103
Apr 18, 2024 16:44:03.607352972 CEST	49721	443	192.168.2.17	74.125.138.103
Apr 18, 2024 16:44:03.607384920 CEST	443	49721	74.125.138.103	192.168.2.17
Apr 18, 2024 16:44:03.715943098 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.715970039 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.716044903 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.716053963 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.716103077 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.716187954 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.716203928 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.716255903 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.716259956 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.716298103 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.716300964 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.716310978 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.716329098 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.716358900 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.716362953 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.716392040 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.716409922 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.716453075 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.716468096 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.716519117 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.716522932 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.716578007 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.716612101 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.716628075 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.716695070 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.716698885 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.716748953 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.716777086 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.716793060 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.716840982 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.716845036 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.716876984 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.716891050 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.716893911 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.716903925 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.716919899 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.716953993 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.717076063 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.717091084 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.717140913 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.717144966 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.717179060 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.717235088 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.717250109 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.717293978 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.717298031 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.717331886 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.717400074 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.717416048 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.717457056 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.717461109 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.717495918 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.717526913 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.717546940 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.717581034 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.717586040 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.717607975 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.717637062 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.723447084 CEST	443	49719	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.723700047 CEST	49719	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.723756075 CEST	443	49719	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.724783897 CEST	443	49719	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.724817038 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.724845886 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.724878073 CEST	49719	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.724899054 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.724939108 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.724944115 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.724973917 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.724992990 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.724993944 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.724993944 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.725044012 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.726216078 CEST	49719	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.726291895 CEST	443	49719	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.726639032 CEST	49719	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.726650953 CEST	49712	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.726655960 CEST	443	49719	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.726671934 CEST	443	49712	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.727171898 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.727190018 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.727271080 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.727916956 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.727927923 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.730686903 CEST	443	49720	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.730907917 CEST	49720	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.730921984 CEST	443	49720	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.732542038 CEST	443	49720	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.732604027 CEST	49720	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.732884884 CEST	49720	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.732980967 CEST	443	49720	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.733009100 CEST	49720	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.771946907 CEST	49719	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.776129007 CEST	443	49720	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.787920952 CEST	49720	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.787945032 CEST	443	49720	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.826661110 CEST	443	49721	74.125.138.103	192.168.2.17
Apr 18, 2024 16:44:03.826970100 CEST	49721	443	192.168.2.17	74.125.138.103
Apr 18, 2024 16:44:03.827023983 CEST	443	49721	74.125.138.103	192.168.2.17
Apr 18, 2024 16:44:03.828185081 CEST	443	49721	74.125.138.103	192.168.2.17
Apr 18, 2024 16:44:03.828265905 CEST	49721	443	192.168.2.17	74.125.138.103
Apr 18, 2024 16:44:03.829322100 CEST	49721	443	192.168.2.17	74.125.138.103
Apr 18, 2024 16:44:03.829433918 CEST	443	49721	74.125.138.103	192.168.2.17
Apr 18, 2024 16:44:03.835916996 CEST	49720	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.883953094 CEST	49721	443	192.168.2.17	74.125.138.103
Apr 18, 2024 16:44:03.883965015 CEST	443	49721	74.125.138.103	192.168.2.17
Apr 18, 2024 16:44:03.931999922 CEST	49721	443	192.168.2.17	74.125.138.103
Apr 18, 2024 16:44:03.932543039 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.932574034 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.932678938 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.932706118 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.932748079 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.932781935 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.932787895 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.932841063 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.933583975 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.933604956 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.933674097 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.933702946 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.933707952 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.933768034 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.933968067 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.933986902 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.934026957 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.934031963 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.934051991 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.934073925 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.934077024 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.934092999 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.934103966 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.934142113 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.934180021 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.934196949 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.934247971 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.934254885 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.934293032 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.934381962 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.934400082 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.934431076 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.934437037 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.934462070 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.934487104 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.934540033 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.934561968 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.934633970 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.934638023 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.934659958 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.934681892 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.934684038 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.934695005 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.934716940 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.934768915 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.934775114 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.934799910 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.934848070 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.934854984 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.934899092 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.934972048 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.934989929 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.935043097 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.935046911 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.935087919 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.935096025 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.935100079 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.935116053 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.935139894 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.935144901 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.935168982 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.935189009 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.935194969 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.935199022 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.935220003 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.935246944 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.935250044 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.935312986 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.935455084 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.935477972 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.935528994 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.935533047 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.935573101 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.935575008 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.935587883 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.935610056 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.935631990 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.935667038 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.935669899 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.935709953 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.935841084 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.935858965 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.935911894 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.935916901 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.935935974 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.935961008 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.935966015 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.935977936 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.936007023 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.936045885 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.936122894 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.936141014 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.936197996 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.936203003 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.936235905 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.936248064 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.936265945 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.936296940 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.936301947 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.936320066 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.936352968 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.977539062 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.977569103 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.977654934 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.977667093 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.977715969 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.977783918 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.977803946 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.977883101 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:03.977895021 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:03.977932930 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.031234980 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.031300068 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.031321049 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.031362057 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.031382084 CEST	49717	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.031398058 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.031407118 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.031443119 CEST	49717	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.031471014 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.031481981 CEST	49717	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.031500101 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.031517982 CEST	49717	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.031548023 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.031548977 CEST	49717	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.031572104 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.031614065 CEST	49717	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.031641006 CEST	49717	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.148924112 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.148957968 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.149122953 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.149141073 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.149185896 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.149235010 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.149260998 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.149331093 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.149332047 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.149344921 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.149367094 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.149395943 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.149400949 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.149440050 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.149471045 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.149543047 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.149570942 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.149617910 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.149622917 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.149636030 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.149657011 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.149678946 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.149682999 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.149734020 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.149772882 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.149791956 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.149842978 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.149848938 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.149941921 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.150085926 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.150105000 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.150154114 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.150158882 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.150166988 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.150187969 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.150223017 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.150228977 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.150268078 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.150389910 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.150407076 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.150465012 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.150469065 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.150501013 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.150509119 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.150512934 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.150548935 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.150556087 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.150568962 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.150573015 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.150618076 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.150649071 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.150666952 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.150716066 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.150719881 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.150758028 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.150819063 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.150836945 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.150902033 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.150907040 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.150943041 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.150948048 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.150959969 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.150979042 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.151000023 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.151029110 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.151032925 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.151073933 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.151129007 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.151148081 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.151182890 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.151189089 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.151232004 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.151289940 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.151307106 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.151348114 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.151351929 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.151369095 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.151396990 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.151418924 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.151437044 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.151467085 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.151472092 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.151520014 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.151591063 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.151611090 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.151647091 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.151652098 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.151676893 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.151698112 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.151699066 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.151707888 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.151734114 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.151758909 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.151808023 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.151812077 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.151849031 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.151868105 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.151887894 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.151926041 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.151931047 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.151972055 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.152057886 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.152076006 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.152116060 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.152121067 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.152138948 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.152163982 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.152225018 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.152244091 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.152291059 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.152296066 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.152322054 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.152329922 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.152334929 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.152348042 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.152371883 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.152379036 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.152393103 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.152420998 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.152471066 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.152492046 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.152528048 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.152533054 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.152575970 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.152614117 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.152633905 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.152667999 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.152672052 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.152699947 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.152724981 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.152745008 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.152762890 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.152803898 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.152810097 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.152844906 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.152934074 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.152952909 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.152988911 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.152992964 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.153009892 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.153038025 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.153038979 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.153048992 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.153069019 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.153089046 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.153126001 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.153130054 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.153165102 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.153177023 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.153196096 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.153223038 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.153228045 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.153273106 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.153337955 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.153356075 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.153388023 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.153393030 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.153407097 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.153431892 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.153465986 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.153485060 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.153512001 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.153516054 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.153554916 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.153611898 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.153630018 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.153665066 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.153670073 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.153691053 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.153712034 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.153755903 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.153775930 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.153915882 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.153920889 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.153959036 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.153981924 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.154047966 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.154052973 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.154064894 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.154081106 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.154151917 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.154158115 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.154225111 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.154247999 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.154267073 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.154272079 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.154365063 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.154390097 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.154408932 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.154438019 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.154444933 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.154462099 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.154508114 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.154530048 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.154553890 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.154558897 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.154603958 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.154679060 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.154699087 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.154735088 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.154740095 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.154786110 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.154805899 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.154828072 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.154876947 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.154881001 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.154923916 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.154927015 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.154938936 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.154956102 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.154978991 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.154983997 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.155018091 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.155194044 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.155220032 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.155249119 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.155253887 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.155292988 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.155298948 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.155303955 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.155316114 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.155339956 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.155371904 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.155375957 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.155966997 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.163952112 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.164290905 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.164326906 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.164664030 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.164978027 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.165038109 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.165117979 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.194120884 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.194152117 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.194262028 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.194272995 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.194344044 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.194370985 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.194396973 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.194402933 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.194463015 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.194487095 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.194504023 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.194540977 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.194545984 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.194578886 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.208128929 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.221656084 CEST	443	49719	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.221716881 CEST	443	49719	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.221983910 CEST	49719	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.224096060 CEST	49719	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.224133968 CEST	443	49719	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.224674940 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.224730968 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.224822998 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.226274014 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.226294994 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.230768919 CEST	443	49718	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.230798006 CEST	443	49718	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.230813980 CEST	443	49718	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.230956078 CEST	49718	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.230997086 CEST	443	49718	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.231092930 CEST	49718	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.231937885 CEST	49718	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.231959105 CEST	443	49718	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.237580061 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.240833044 CEST	443	49720	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.240914106 CEST	443	49720	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.240991116 CEST	49720	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.247062922 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.247097015 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.247142076 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.247183084 CEST	49717	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.247198105 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.247262001 CEST	49717	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.247350931 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.247394085 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.247471094 CEST	49717	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.247478008 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.247498035 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.247530937 CEST	49717	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.247544050 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.247576952 CEST	49717	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.247576952 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.247620106 CEST	49717	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.247656107 CEST	49717	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.247656107 CEST	49720	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.247682095 CEST	443	49720	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.365358114 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.365396976 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.365523100 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.365552902 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.365573883 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.365588903 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.365597010 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.365616083 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.365632057 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.365639925 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.365670919 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.365807056 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.365830898 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.365865946 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.365869999 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.365891933 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.365948915 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.365967035 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.366012096 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.366017103 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.366096020 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.366118908 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.366154909 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.366159916 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.366183996 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.366238117 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.366255045 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.366278887 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.366282940 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.366307974 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.366381884 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.366405010 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.366430044 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.366435051 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.366455078 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.366525888 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.366544962 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.366569042 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.366574049 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.366612911 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.366658926 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.366682053 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.366702080 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.366705894 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.366724968 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.366728067 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.366777897 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.366782904 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.366803885 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.366822958 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.366830111 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.366880894 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.367485046 CEST	49713	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.367501974 CEST	443	49713	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.462434053 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.462518930 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.462532043 CEST	49717	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.462584019 CEST	49717	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.463534117 CEST	49717	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.463541031 CEST	443	49717	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.467005014 CEST	49724	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.467037916 CEST	443	49724	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.467113018 CEST	49724	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.467262030 CEST	49725	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.467294931 CEST	443	49725	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.467355013 CEST	49725	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.467461109 CEST	49724	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.467468977 CEST	443	49724	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.467593908 CEST	49725	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.467611074 CEST	443	49725	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.665708065 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.666229963 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.666258097 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.666559935 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.666873932 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.666933060 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.667026997 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.712116003 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.891385078 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.891411066 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.891464949 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.891525984 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.891556978 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.891585112 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.891591072 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.891625881 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.891678095 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.906614065 CEST	443	49724	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.908236027 CEST	443	49725	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.908535957 CEST	49724	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.908551931 CEST	443	49724	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.908798933 CEST	49725	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.908864975 CEST	443	49725	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.908955097 CEST	443	49724	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.910387993 CEST	443	49725	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.910471916 CEST	49725	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.910815001 CEST	49724	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.910876036 CEST	443	49724	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.911113977 CEST	49725	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.911199093 CEST	443	49725	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.911262989 CEST	49724	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.911312103 CEST	49725	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.911322117 CEST	443	49725	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:04.951308966 CEST	49725	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:04.952126026 CEST	443	49724	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.108988047 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.109011889 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.109071016 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.109127045 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.109144926 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.109179974 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.109213114 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.109275103 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.109289885 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.109353065 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.109359980 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.160936117 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.326697111 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.326720953 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.326894999 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.326930046 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.326982975 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.327153921 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.327176094 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.327229977 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.327236891 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.327256918 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.327277899 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.327457905 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.327474117 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.327527046 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.327533007 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.327578068 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.327578068 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.327749014 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.327764034 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.327800035 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.327806950 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.327832937 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.327853918 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.328073025 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.328088999 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.328133106 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.328140020 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.328166962 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.328180075 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.371613979 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.371633053 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.371764898 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.371784925 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.371963978 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.409435987 CEST	443	49724	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.409461021 CEST	443	49724	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.409528017 CEST	443	49724	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.409554958 CEST	49724	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.409612894 CEST	49724	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.410729885 CEST	49724	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.410744905 CEST	443	49724	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.412811995 CEST	49726	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.412848949 CEST	443	49726	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.412960052 CEST	49726	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.413178921 CEST	49726	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.413192987 CEST	443	49726	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.426351070 CEST	443	49725	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.426386118 CEST	443	49725	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.426466942 CEST	443	49725	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.426470041 CEST	49725	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.426513910 CEST	49725	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.427145004 CEST	49725	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.427161932 CEST	443	49725	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.428601027 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.428618908 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.428632021 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.428709984 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.428728104 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.428776026 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.428838968 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.428854942 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.428894997 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.428903103 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.428920031 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.428939104 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.543071985 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.543095112 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.543252945 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.543286085 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.543334007 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.543620110 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.543637991 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.543677092 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.543677092 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.543689013 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.543706894 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.543724060 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.543761969 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.543766975 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.543812037 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.543833971 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.543853045 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.543920994 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.543931961 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.543986082 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.544874907 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.544893026 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.544930935 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.544970989 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.544972897 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.544989109 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.545023918 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.545133114 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.545140028 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.545185089 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.545192957 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.546387911 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.546412945 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.546463966 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.546472073 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.546483994 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.546497107 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.546506882 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.546538115 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.546545982 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.546555042 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.546574116 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.546574116 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.546606064 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.546612024 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.546637058 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.546638966 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.546658993 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.546688080 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.546694040 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.546710014 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.587934017 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.587956905 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.588038921 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.588082075 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.588109016 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.588612080 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.588628054 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.588677883 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.588686943 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.588713884 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.589353085 CEST	49727	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.589370012 CEST	443	49727	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.589446068 CEST	49727	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.589509010 CEST	49728	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.589555979 CEST	443	49728	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.589612961 CEST	49728	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.589801073 CEST	49727	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.589814901 CEST	443	49727	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.589936018 CEST	49728	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.589947939 CEST	443	49728	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.639996052 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.646349907 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.646370888 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.646513939 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.646539927 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.646585941 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.646641970 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.646663904 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.646699905 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.646708012 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.646734953 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.646749020 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.646909952 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.646927118 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.646961927 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.646970987 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.646994114 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.647010088 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.762902975 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.762967110 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.763094902 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.763137102 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.763154984 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.763158083 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.763190031 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.763200045 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.763226032 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.763228893 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.763261080 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.763267994 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.763293028 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.763319016 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.763387918 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.763442039 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.763470888 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.763478994 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.763508081 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.763524055 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.763580084 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.763619900 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.763663054 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.763672113 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.763700008 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.763712883 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.763787031 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.763828039 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.763850927 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.763859034 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.763894081 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.763958931 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.763998985 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.764034986 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.764043093 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.764056921 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.764079094 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.764225960 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.764273882 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.764298916 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.764306068 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.764331102 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.764352083 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.764406919 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.764450073 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.764476061 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.764482975 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.764506102 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.764518023 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.764624119 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.764672041 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.764694929 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.764703035 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.764725924 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.764739037 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.764832973 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.764877081 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.764893055 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.764902115 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.764931917 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.764952898 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.764983892 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.765038967 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.765072107 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.765080929 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.765108109 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.765125036 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.765249014 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.765300035 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.765316963 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.765326977 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.765364885 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.765434980 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.765491009 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.765505075 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.765516043 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.765542984 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.765566111 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.765656948 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.765708923 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.765731096 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.765739918 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.765763998 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.765779018 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.765870094 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.765913010 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.765933037 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.765940905 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.765964031 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.765979052 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.766139030 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.766187906 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.766205072 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.766213894 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.766241074 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.766268015 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.766341925 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.766387939 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.766400099 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.766415119 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.766448975 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.766465902 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.766552925 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.766602039 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.766617060 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.766629934 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.766657114 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.766669989 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.766768932 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.766819000 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.766843081 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.766850948 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.766891956 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.767046928 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.767095089 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.767127991 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.767137051 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.767151117 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.767172098 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.767258883 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.767302990 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.767326117 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.767334938 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.767360926 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.767374992 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.804399014 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.804472923 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.804539919 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.804564953 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.804586887 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.804609060 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.804616928 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.804646969 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.804678917 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.804698944 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.804707050 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.804724932 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.804755926 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.804781914 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.805102110 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.805143118 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.805166960 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.805175066 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.805200100 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.805218935 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.805244923 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.805294037 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.805315971 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.805325985 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.805366039 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.851337910 CEST	443	49726	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.851807117 CEST	49726	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.851828098 CEST	443	49726	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.852353096 CEST	443	49726	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.852750063 CEST	49726	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.852844954 CEST	443	49726	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.852973938 CEST	49726	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.862699032 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.862720966 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.862808943 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.862826109 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.862895012 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.863123894 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.863141060 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.863198996 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.863205910 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.863250017 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.863343954 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.863359928 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.863396883 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.863403082 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.863441944 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.863467932 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.863482952 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.863531113 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.863537073 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.863579035 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.863606930 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.863625050 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.863686085 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.863693953 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.863732100 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.900114059 CEST	443	49726	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.981827974 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.981868029 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.981915951 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.981985092 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.982187986 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.982227087 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.983279943 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.983328104 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.983382940 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.983397961 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.983453989 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.983685017 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.983736992 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.983768940 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.983777046 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.983805895 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.983851910 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.983901978 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.983922958 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.983932018 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.983963013 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.984080076 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:05.984139919 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.985249996 CEST	49722	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:05.985270977 CEST	443	49722	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.025064945 CEST	443	49727	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.025346041 CEST	49727	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.025357962 CEST	443	49727	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.026576996 CEST	443	49727	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.026652098 CEST	49727	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.026947975 CEST	49727	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.027019024 CEST	443	49727	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.027087927 CEST	49727	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.027095079 CEST	443	49727	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.027631044 CEST	443	49728	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.027825117 CEST	49728	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.027858973 CEST	443	49728	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.031162024 CEST	443	49728	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.031245947 CEST	49728	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.031521082 CEST	49728	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.031584024 CEST	443	49728	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.031601906 CEST	49728	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.072124958 CEST	443	49728	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.078023911 CEST	49728	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.078036070 CEST	49727	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.078052998 CEST	443	49728	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.079751968 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.079761028 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.079782963 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.079848051 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.079862118 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.079936028 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.079942942 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.079953909 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.079972029 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.079998016 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.080005884 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.080048084 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.080059052 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.080094099 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.080115080 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.080178022 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.080185890 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.080204010 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.080221891 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.080223083 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.080234051 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.080270052 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.080271959 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.080318928 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.080324888 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.080337048 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.080362082 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.080396891 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.080708027 CEST	49723	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.080724955 CEST	443	49723	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.126055956 CEST	49728	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.371249914 CEST	443	49726	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.371326923 CEST	443	49726	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.371408939 CEST	49726	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.372083902 CEST	49726	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.372095108 CEST	443	49726	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.375411987 CEST	49729	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.375454903 CEST	443	49729	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.375560045 CEST	49729	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.375808954 CEST	49729	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.375830889 CEST	443	49729	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.387288094 CEST	49730	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.387303114 CEST	443	49730	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.387383938 CEST	49730	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.387775898 CEST	49730	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.387787104 CEST	443	49730	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.528665066 CEST	443	49727	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.528712988 CEST	443	49727	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.528827906 CEST	49727	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.528852940 CEST	443	49727	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.528877020 CEST	443	49727	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.528943062 CEST	49727	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.529834986 CEST	49727	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.529850960 CEST	443	49727	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.536011934 CEST	443	49728	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.536072016 CEST	443	49728	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.536137104 CEST	49728	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.536156893 CEST	443	49728	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.536247969 CEST	443	49728	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.536303997 CEST	49728	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.536786079 CEST	49728	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.536803007 CEST	443	49728	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.827786922 CEST	443	49730	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.828233957 CEST	49730	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.828243971 CEST	443	49730	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.828567028 CEST	443	49730	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.828886032 CEST	49730	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.828932047 CEST	443	49730	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:06.829040051 CEST	49730	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:06.876136065 CEST	443	49730	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:07.092742920 CEST	443	49729	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:07.093157053 CEST	49729	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:07.093183041 CEST	443	49729	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:07.093996048 CEST	443	49729	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:07.094324112 CEST	49729	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:07.094400883 CEST	443	49729	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:07.094471931 CEST	49729	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:07.140113115 CEST	443	49729	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:07.319509029 CEST	443	49730	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:07.319575071 CEST	443	49730	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:07.319674969 CEST	49730	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:07.319688082 CEST	443	49730	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:07.319816113 CEST	443	49730	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:07.319905043 CEST	49730	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:07.320677996 CEST	49730	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:07.320688963 CEST	443	49730	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:07.324409008 CEST	49732	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:07.324436903 CEST	443	49732	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:07.324522972 CEST	49732	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:07.324795961 CEST	49732	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:07.324809074 CEST	443	49732	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:07.600883007 CEST	443	49729	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:07.600951910 CEST	443	49729	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:07.601023912 CEST	49729	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:07.602063894 CEST	49729	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:07.602096081 CEST	443	49729	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:07.768819094 CEST	443	49732	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:07.769224882 CEST	49732	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:07.769247055 CEST	443	49732	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:07.770437956 CEST	443	49732	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:07.770761013 CEST	49732	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:07.770876884 CEST	443	49732	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:07.770919085 CEST	49732	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:07.812134981 CEST	443	49732	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:07.822942019 CEST	49732	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:08.260792971 CEST	443	49732	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:08.260853052 CEST	443	49732	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:08.260874987 CEST	443	49732	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:08.261024952 CEST	49732	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:08.261042118 CEST	443	49732	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:08.261128902 CEST	443	49732	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:08.261183977 CEST	49732	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:08.261986017 CEST	49732	443	192.168.2.17	15.161.0.134
Apr 18, 2024 16:44:08.262006044 CEST	443	49732	15.161.0.134	192.168.2.17
Apr 18, 2024 16:44:10.022933960 CEST	49733	443	192.168.2.17	40.68.123.157
Apr 18, 2024 16:44:10.022981882 CEST	443	49733	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:10.023104906 CEST	49733	443	192.168.2.17	40.68.123.157
Apr 18, 2024 16:44:10.033749104 CEST	49733	443	192.168.2.17	40.68.123.157
Apr 18, 2024 16:44:10.033787012 CEST	443	49733	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:10.659703016 CEST	443	49733	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:10.659786940 CEST	49733	443	192.168.2.17	40.68.123.157
Apr 18, 2024 16:44:10.662492990 CEST	49733	443	192.168.2.17	40.68.123.157
Apr 18, 2024 16:44:10.662514925 CEST	443	49733	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:10.662843943 CEST	443	49733	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:10.708936930 CEST	49733	443	192.168.2.17	40.68.123.157
Apr 18, 2024 16:44:10.731823921 CEST	49733	443	192.168.2.17	40.68.123.157
Apr 18, 2024 16:44:10.772120953 CEST	443	49733	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:10.865345001 CEST	49691	443	192.168.2.17	204.79.197.200
Apr 18, 2024 16:44:10.969088078 CEST	443	49691	204.79.197.200	192.168.2.17
Apr 18, 2024 16:44:10.970261097 CEST	443	49691	204.79.197.200	192.168.2.17
Apr 18, 2024 16:44:10.970293045 CEST	443	49691	204.79.197.200	192.168.2.17
Apr 18, 2024 16:44:10.970339060 CEST	49691	443	192.168.2.17	204.79.197.200
Apr 18, 2024 16:44:10.970380068 CEST	49691	443	192.168.2.17	204.79.197.200
Apr 18, 2024 16:44:10.977756977 CEST	49691	443	192.168.2.17	204.79.197.200
Apr 18, 2024 16:44:10.977864027 CEST	49691	443	192.168.2.17	204.79.197.200
Apr 18, 2024 16:44:10.990921974 CEST	49691	443	192.168.2.17	204.79.197.200
Apr 18, 2024 16:44:10.990945101 CEST	49691	443	192.168.2.17	204.79.197.200
Apr 18, 2024 16:44:10.991017103 CEST	49691	443	192.168.2.17	204.79.197.200
Apr 18, 2024 16:44:11.081341028 CEST	443	49691	204.79.197.200	192.168.2.17
Apr 18, 2024 16:44:11.081500053 CEST	443	49691	204.79.197.200	192.168.2.17
Apr 18, 2024 16:44:11.081510067 CEST	443	49691	204.79.197.200	192.168.2.17
Apr 18, 2024 16:44:11.081521034 CEST	443	49691	204.79.197.200	192.168.2.17
Apr 18, 2024 16:44:11.081569910 CEST	49691	443	192.168.2.17	204.79.197.200
Apr 18, 2024 16:44:11.094552040 CEST	443	49691	204.79.197.200	192.168.2.17
Apr 18, 2024 16:44:11.094583035 CEST	443	49691	204.79.197.200	192.168.2.17
Apr 18, 2024 16:44:11.185163975 CEST	443	49691	204.79.197.200	192.168.2.17
Apr 18, 2024 16:44:11.185296059 CEST	49691	443	192.168.2.17	204.79.197.200
Apr 18, 2024 16:44:11.262381077 CEST	443	49733	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:11.262408018 CEST	443	49733	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:11.262414932 CEST	443	49733	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:11.262423992 CEST	443	49733	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:11.262449980 CEST	443	49733	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:11.262495995 CEST	49733	443	192.168.2.17	40.68.123.157
Apr 18, 2024 16:44:11.262531042 CEST	443	49733	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:11.262548923 CEST	49733	443	192.168.2.17	40.68.123.157
Apr 18, 2024 16:44:11.262559891 CEST	443	49733	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:11.262590885 CEST	49733	443	192.168.2.17	40.68.123.157
Apr 18, 2024 16:44:11.262623072 CEST	49733	443	192.168.2.17	40.68.123.157
Apr 18, 2024 16:44:11.281516075 CEST	49733	443	192.168.2.17	40.68.123.157
Apr 18, 2024 16:44:11.281538963 CEST	443	49733	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:11.281553984 CEST	49733	443	192.168.2.17	40.68.123.157
Apr 18, 2024 16:44:11.281560898 CEST	443	49733	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:11.858213902 CEST	49735	443	192.168.2.17	40.126.28.20
Apr 18, 2024 16:44:11.858257055 CEST	443	49735	40.126.28.20	192.168.2.17
Apr 18, 2024 16:44:11.858442068 CEST	49735	443	192.168.2.17	40.126.28.20
Apr 18, 2024 16:44:11.858664036 CEST	49735	443	192.168.2.17	40.126.28.20
Apr 18, 2024 16:44:11.858678102 CEST	443	49735	40.126.28.20	192.168.2.17
Apr 18, 2024 16:44:12.237957001 CEST	443	49735	40.126.28.20	192.168.2.17
Apr 18, 2024 16:44:12.238035917 CEST	49735	443	192.168.2.17	40.126.28.20
Apr 18, 2024 16:44:12.255908966 CEST	49735	443	192.168.2.17	40.126.28.20
Apr 18, 2024 16:44:12.255933046 CEST	443	49735	40.126.28.20	192.168.2.17
Apr 18, 2024 16:44:12.256278992 CEST	443	49735	40.126.28.20	192.168.2.17
Apr 18, 2024 16:44:12.256813049 CEST	49735	443	192.168.2.17	40.126.28.20
Apr 18, 2024 16:44:12.256896973 CEST	49735	443	192.168.2.17	40.126.28.20
Apr 18, 2024 16:44:12.256917953 CEST	443	49735	40.126.28.20	192.168.2.17
Apr 18, 2024 16:44:12.551016092 CEST	443	49735	40.126.28.20	192.168.2.17
Apr 18, 2024 16:44:12.551044941 CEST	443	49735	40.126.28.20	192.168.2.17
Apr 18, 2024 16:44:12.551067114 CEST	443	49735	40.126.28.20	192.168.2.17
Apr 18, 2024 16:44:12.551136017 CEST	49735	443	192.168.2.17	40.126.28.20
Apr 18, 2024 16:44:12.551136971 CEST	443	49735	40.126.28.20	192.168.2.17
Apr 18, 2024 16:44:12.551172972 CEST	49735	443	192.168.2.17	40.126.28.20
Apr 18, 2024 16:44:12.551534891 CEST	49735	443	192.168.2.17	40.126.28.20
Apr 18, 2024 16:44:12.551556110 CEST	443	49735	40.126.28.20	192.168.2.17
Apr 18, 2024 16:44:12.551570892 CEST	49735	443	192.168.2.17	40.126.28.20
Apr 18, 2024 16:44:12.551577091 CEST	443	49735	40.126.28.20	192.168.2.17
Apr 18, 2024 16:44:12.699850082 CEST	49736	443	192.168.2.17	204.79.197.200
Apr 18, 2024 16:44:12.699897051 CEST	443	49736	204.79.197.200	192.168.2.17
Apr 18, 2024 16:44:12.700030088 CEST	49736	443	192.168.2.17	204.79.197.200
Apr 18, 2024 16:44:12.702256918 CEST	49736	443	192.168.2.17	204.79.197.200
Apr 18, 2024 16:44:12.702267885 CEST	443	49736	204.79.197.200	192.168.2.17
Apr 18, 2024 16:44:13.029227972 CEST	443	49736	204.79.197.200	192.168.2.17
Apr 18, 2024 16:44:13.029366016 CEST	49736	443	192.168.2.17	204.79.197.200
Apr 18, 2024 16:44:13.030072927 CEST	443	49736	204.79.197.200	192.168.2.17
Apr 18, 2024 16:44:13.030131102 CEST	49736	443	192.168.2.17	204.79.197.200
Apr 18, 2024 16:44:13.092138052 CEST	49736	443	192.168.2.17	204.79.197.200
Apr 18, 2024 16:44:13.092156887 CEST	443	49736	204.79.197.200	192.168.2.17
Apr 18, 2024 16:44:13.092525959 CEST	443	49736	204.79.197.200	192.168.2.17
Apr 18, 2024 16:44:13.092586040 CEST	49736	443	192.168.2.17	204.79.197.200
Apr 18, 2024 16:44:13.094595909 CEST	49736	443	192.168.2.17	204.79.197.200
Apr 18, 2024 16:44:13.094619036 CEST	443	49736	204.79.197.200	192.168.2.17
Apr 18, 2024 16:44:13.182245016 CEST	49737	443	192.168.2.17	13.107.5.88
Apr 18, 2024 16:44:13.182274103 CEST	443	49737	13.107.5.88	192.168.2.17
Apr 18, 2024 16:44:13.182360888 CEST	49737	443	192.168.2.17	13.107.5.88
Apr 18, 2024 16:44:13.214369059 CEST	49737	443	192.168.2.17	13.107.5.88
Apr 18, 2024 16:44:13.214401960 CEST	443	49737	13.107.5.88	192.168.2.17
Apr 18, 2024 16:44:13.352322102 CEST	443	49736	204.79.197.200	192.168.2.17
Apr 18, 2024 16:44:13.352353096 CEST	443	49736	204.79.197.200	192.168.2.17
Apr 18, 2024 16:44:13.352466106 CEST	49736	443	192.168.2.17	204.79.197.200
Apr 18, 2024 16:44:13.352488041 CEST	443	49736	204.79.197.200	192.168.2.17
Apr 18, 2024 16:44:13.352602959 CEST	49736	443	192.168.2.17	204.79.197.200
Apr 18, 2024 16:44:13.352689028 CEST	443	49736	204.79.197.200	192.168.2.17
Apr 18, 2024 16:44:13.352758884 CEST	49736	443	192.168.2.17	204.79.197.200
Apr 18, 2024 16:44:13.352809906 CEST	443	49736	204.79.197.200	192.168.2.17
Apr 18, 2024 16:44:13.352886915 CEST	49736	443	192.168.2.17	204.79.197.200
Apr 18, 2024 16:44:13.355184078 CEST	49736	443	192.168.2.17	204.79.197.200
Apr 18, 2024 16:44:13.355211020 CEST	443	49736	204.79.197.200	192.168.2.17
Apr 18, 2024 16:44:13.538682938 CEST	443	49737	13.107.5.88	192.168.2.17
Apr 18, 2024 16:44:13.538779974 CEST	49737	443	192.168.2.17	13.107.5.88
Apr 18, 2024 16:44:13.542259932 CEST	49737	443	192.168.2.17	13.107.5.88
Apr 18, 2024 16:44:13.542272091 CEST	443	49737	13.107.5.88	192.168.2.17
Apr 18, 2024 16:44:13.542506933 CEST	443	49737	13.107.5.88	192.168.2.17
Apr 18, 2024 16:44:13.583895922 CEST	49737	443	192.168.2.17	13.107.5.88
Apr 18, 2024 16:44:13.624115944 CEST	443	49737	13.107.5.88	192.168.2.17
Apr 18, 2024 16:44:13.729760885 CEST	443	49737	13.107.5.88	192.168.2.17
Apr 18, 2024 16:44:13.729825974 CEST	443	49737	13.107.5.88	192.168.2.17
Apr 18, 2024 16:44:13.729856014 CEST	443	49737	13.107.5.88	192.168.2.17
Apr 18, 2024 16:44:13.729907036 CEST	443	49737	13.107.5.88	192.168.2.17
Apr 18, 2024 16:44:13.729940891 CEST	443	49737	13.107.5.88	192.168.2.17
Apr 18, 2024 16:44:13.729969978 CEST	443	49737	13.107.5.88	192.168.2.17
Apr 18, 2024 16:44:13.729979992 CEST	49737	443	192.168.2.17	13.107.5.88
Apr 18, 2024 16:44:13.729995012 CEST	443	49737	13.107.5.88	192.168.2.17
Apr 18, 2024 16:44:13.730051994 CEST	49737	443	192.168.2.17	13.107.5.88
Apr 18, 2024 16:44:13.730076075 CEST	443	49737	13.107.5.88	192.168.2.17
Apr 18, 2024 16:44:13.730087042 CEST	443	49737	13.107.5.88	192.168.2.17
Apr 18, 2024 16:44:13.730143070 CEST	49737	443	192.168.2.17	13.107.5.88
Apr 18, 2024 16:44:13.737423897 CEST	49737	443	192.168.2.17	13.107.5.88
Apr 18, 2024 16:44:13.737433910 CEST	443	49737	13.107.5.88	192.168.2.17
Apr 18, 2024 16:44:13.845293045 CEST	443	49721	74.125.138.103	192.168.2.17
Apr 18, 2024 16:44:13.845350027 CEST	443	49721	74.125.138.103	192.168.2.17
Apr 18, 2024 16:44:13.845422029 CEST	49721	443	192.168.2.17	74.125.138.103
Apr 18, 2024 16:44:14.984802961 CEST	49721	443	192.168.2.17	74.125.138.103
Apr 18, 2024 16:44:14.984823942 CEST	443	49721	74.125.138.103	192.168.2.17
Apr 18, 2024 16:44:17.828569889 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 18, 2024 16:44:18.131002903 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 18, 2024 16:44:18.737457991 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 18, 2024 16:44:19.951980114 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 18, 2024 16:44:20.137309074 CEST	49741	443	192.168.2.17	23.63.206.91
Apr 18, 2024 16:44:20.137360096 CEST	443	49741	23.63.206.91	192.168.2.17
Apr 18, 2024 16:44:20.137465954 CEST	49741	443	192.168.2.17	23.63.206.91
Apr 18, 2024 16:44:20.138724089 CEST	49741	443	192.168.2.17	23.63.206.91
Apr 18, 2024 16:44:20.138736010 CEST	443	49741	23.63.206.91	192.168.2.17
Apr 18, 2024 16:44:20.357422113 CEST	443	49741	23.63.206.91	192.168.2.17
Apr 18, 2024 16:44:20.357675076 CEST	49741	443	192.168.2.17	23.63.206.91
Apr 18, 2024 16:44:20.359301090 CEST	49741	443	192.168.2.17	23.63.206.91
Apr 18, 2024 16:44:20.359307051 CEST	443	49741	23.63.206.91	192.168.2.17
Apr 18, 2024 16:44:20.359535933 CEST	443	49741	23.63.206.91	192.168.2.17
Apr 18, 2024 16:44:20.398910046 CEST	49741	443	192.168.2.17	23.63.206.91
Apr 18, 2024 16:44:20.440116882 CEST	443	49741	23.63.206.91	192.168.2.17
Apr 18, 2024 16:44:20.560568094 CEST	443	49741	23.63.206.91	192.168.2.17
Apr 18, 2024 16:44:20.560631037 CEST	443	49741	23.63.206.91	192.168.2.17
Apr 18, 2024 16:44:20.560709953 CEST	49741	443	192.168.2.17	23.63.206.91
Apr 18, 2024 16:44:20.560866117 CEST	49741	443	192.168.2.17	23.63.206.91
Apr 18, 2024 16:44:20.560889006 CEST	443	49741	23.63.206.91	192.168.2.17
Apr 18, 2024 16:44:20.560898066 CEST	49741	443	192.168.2.17	23.63.206.91
Apr 18, 2024 16:44:20.560904026 CEST	443	49741	23.63.206.91	192.168.2.17
Apr 18, 2024 16:44:20.596173048 CEST	49742	443	192.168.2.17	23.63.206.91
Apr 18, 2024 16:44:20.596204042 CEST	443	49742	23.63.206.91	192.168.2.17
Apr 18, 2024 16:44:20.596343994 CEST	49742	443	192.168.2.17	23.63.206.91
Apr 18, 2024 16:44:20.596616983 CEST	49742	443	192.168.2.17	23.63.206.91
Apr 18, 2024 16:44:20.596637011 CEST	443	49742	23.63.206.91	192.168.2.17
Apr 18, 2024 16:44:20.808700085 CEST	443	49742	23.63.206.91	192.168.2.17
Apr 18, 2024 16:44:20.808811903 CEST	49742	443	192.168.2.17	23.63.206.91
Apr 18, 2024 16:44:20.810188055 CEST	49742	443	192.168.2.17	23.63.206.91
Apr 18, 2024 16:44:20.810199022 CEST	443	49742	23.63.206.91	192.168.2.17
Apr 18, 2024 16:44:20.810570955 CEST	443	49742	23.63.206.91	192.168.2.17
Apr 18, 2024 16:44:20.811758995 CEST	49742	443	192.168.2.17	23.63.206.91
Apr 18, 2024 16:44:20.852116108 CEST	443	49742	23.63.206.91	192.168.2.17
Apr 18, 2024 16:44:21.015079975 CEST	443	49742	23.63.206.91	192.168.2.17
Apr 18, 2024 16:44:21.015156031 CEST	443	49742	23.63.206.91	192.168.2.17
Apr 18, 2024 16:44:21.015213966 CEST	49742	443	192.168.2.17	23.63.206.91
Apr 18, 2024 16:44:21.016007900 CEST	49742	443	192.168.2.17	23.63.206.91
Apr 18, 2024 16:44:21.016027927 CEST	443	49742	23.63.206.91	192.168.2.17
Apr 18, 2024 16:44:21.016038895 CEST	49742	443	192.168.2.17	23.63.206.91
Apr 18, 2024 16:44:21.016045094 CEST	443	49742	23.63.206.91	192.168.2.17
Apr 18, 2024 16:44:21.992455959 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 18, 2024 16:44:22.295069933 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 18, 2024 16:44:22.359040976 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 18, 2024 16:44:22.898731947 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 18, 2024 16:44:24.109015942 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 18, 2024 16:44:26.518150091 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 18, 2024 16:44:27.174046993 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 18, 2024 16:44:31.318126917 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 18, 2024 16:44:36.779124975 CEST	49675	443	192.168.2.17	204.79.197.203
Apr 18, 2024 16:44:40.931123018 CEST	49680	443	192.168.2.17	20.189.173.13
Apr 18, 2024 16:44:47.750678062 CEST	49743	443	192.168.2.17	40.68.123.157
Apr 18, 2024 16:44:47.750727892 CEST	443	49743	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:47.750829935 CEST	49743	443	192.168.2.17	40.68.123.157
Apr 18, 2024 16:44:47.751277924 CEST	49743	443	192.168.2.17	40.68.123.157
Apr 18, 2024 16:44:47.751293898 CEST	443	49743	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:48.369925976 CEST	443	49743	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:48.370075941 CEST	49743	443	192.168.2.17	40.68.123.157
Apr 18, 2024 16:44:48.372076035 CEST	49743	443	192.168.2.17	40.68.123.157
Apr 18, 2024 16:44:48.372090101 CEST	443	49743	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:48.372530937 CEST	443	49743	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:48.374382973 CEST	49743	443	192.168.2.17	40.68.123.157
Apr 18, 2024 16:44:48.416135073 CEST	443	49743	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:48.978693962 CEST	443	49743	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:48.978728056 CEST	443	49743	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:48.978743076 CEST	443	49743	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:48.978835106 CEST	49743	443	192.168.2.17	40.68.123.157
Apr 18, 2024 16:44:48.978862047 CEST	443	49743	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:48.978878021 CEST	443	49743	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:48.978916883 CEST	49743	443	192.168.2.17	40.68.123.157
Apr 18, 2024 16:44:48.978914022 CEST	443	49743	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:48.978935957 CEST	443	49743	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:48.978984118 CEST	49743	443	192.168.2.17	40.68.123.157
Apr 18, 2024 16:44:48.978996038 CEST	443	49743	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:48.979047060 CEST	49743	443	192.168.2.17	40.68.123.157
Apr 18, 2024 16:44:48.981792927 CEST	49743	443	192.168.2.17	40.68.123.157
Apr 18, 2024 16:44:48.981806993 CEST	443	49743	40.68.123.157	192.168.2.17
Apr 18, 2024 16:44:48.981827021 CEST	49743	443	192.168.2.17	40.68.123.157
Apr 18, 2024 16:44:48.981832981 CEST	443	49743	40.68.123.157	192.168.2.17
Apr 18, 2024 16:45:03.555614948 CEST	49745	443	192.168.2.17	74.125.138.103
Apr 18, 2024 16:45:03.555700064 CEST	443	49745	74.125.138.103	192.168.2.17
Apr 18, 2024 16:45:03.556114912 CEST	49745	443	192.168.2.17	74.125.138.103
Apr 18, 2024 16:45:03.556432009 CEST	49745	443	192.168.2.17	74.125.138.103
Apr 18, 2024 16:45:03.556474924 CEST	443	49745	74.125.138.103	192.168.2.17
Apr 18, 2024 16:45:03.769205093 CEST	443	49745	74.125.138.103	192.168.2.17
Apr 18, 2024 16:45:03.769536018 CEST	49745	443	192.168.2.17	74.125.138.103
Apr 18, 2024 16:45:03.769601107 CEST	443	49745	74.125.138.103	192.168.2.17
Apr 18, 2024 16:45:03.769949913 CEST	443	49745	74.125.138.103	192.168.2.17
Apr 18, 2024 16:45:03.770256996 CEST	49745	443	192.168.2.17	74.125.138.103
Apr 18, 2024 16:45:03.770339012 CEST	443	49745	74.125.138.103	192.168.2.17
Apr 18, 2024 16:45:03.810429096 CEST	49745	443	192.168.2.17	74.125.138.103
Apr 18, 2024 16:45:13.781843901 CEST	443	49745	74.125.138.103	192.168.2.17
Apr 18, 2024 16:45:13.781953096 CEST	443	49745	74.125.138.103	192.168.2.17
Apr 18, 2024 16:45:13.782068968 CEST	49745	443	192.168.2.17	74.125.138.103
Apr 18, 2024 16:45:14.988267899 CEST	49745	443	192.168.2.17	74.125.138.103
Apr 18, 2024 16:45:14.988343000 CEST	443	49745	74.125.138.103	192.168.2.17

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 18, 2024 16:43:58.682080030 CEST	60578	53	192.168.2.17	1.1.1.1
Apr 18, 2024 16:43:58.682343006 CEST	61591	53	192.168.2.17	1.1.1.1
Apr 18, 2024 16:43:58.796147108 CEST	53	60684	1.1.1.1	192.168.2.17
Apr 18, 2024 16:43:58.807048082 CEST	53	61591	1.1.1.1	192.168.2.17
Apr 18, 2024 16:43:58.823293924 CEST	53	60578	1.1.1.1	192.168.2.17
Apr 18, 2024 16:43:58.929646015 CEST	53	54978	1.1.1.1	192.168.2.17
Apr 18, 2024 16:43:59.531267881 CEST	53	59368	1.1.1.1	192.168.2.17
Apr 18, 2024 16:43:59.763144970 CEST	56393	53	192.168.2.17	1.1.1.1
Apr 18, 2024 16:43:59.763289928 CEST	58039	53	192.168.2.17	1.1.1.1
Apr 18, 2024 16:43:59.874927998 CEST	53	56393	1.1.1.1	192.168.2.17
Apr 18, 2024 16:43:59.905049086 CEST	53	58039	1.1.1.1	192.168.2.17
Apr 18, 2024 16:44:03.501346111 CEST	63097	53	192.168.2.17	1.1.1.1
Apr 18, 2024 16:44:03.501494884 CEST	50746	53	192.168.2.17	1.1.1.1
Apr 18, 2024 16:44:03.605642080 CEST	53	63097	1.1.1.1	192.168.2.17
Apr 18, 2024 16:44:03.606023073 CEST	53	50746	1.1.1.1	192.168.2.17
Apr 18, 2024 16:44:05.413866043 CEST	53035	53	192.168.2.17	1.1.1.1
Apr 18, 2024 16:44:05.414098024 CEST	61629	53	192.168.2.17	1.1.1.1
Apr 18, 2024 16:44:05.556317091 CEST	53	61629	1.1.1.1	192.168.2.17
Apr 18, 2024 16:44:05.588690996 CEST	53	53035	1.1.1.1	192.168.2.17
Apr 18, 2024 16:44:16.457433939 CEST	53	54559	1.1.1.1	192.168.2.17
Apr 18, 2024 16:44:35.369494915 CEST	53	62812	1.1.1.1	192.168.2.17
Apr 18, 2024 16:44:58.407188892 CEST	53	56126	1.1.1.1	192.168.2.17
Apr 18, 2024 16:44:58.741025925 CEST	53	58628	1.1.1.1	192.168.2.17
Apr 18, 2024 16:45:19.220377922 CEST	138	138	192.168.2.17	192.168.2.255
Apr 18, 2024 16:45:27.214059114 CEST	53	57268	1.1.1.1	192.168.2.17

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 18, 2024 16:43:58.682080030 CEST	192.168.2.17	1.1.1.1	0x888f	Standard query (0)	wechatunsuscribe.secure.force.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 16:43:58.682343006 CEST	192.168.2.17	1.1.1.1	0x72c2	Standard query (0)	wechatunsuscribe.secure.force.com	65	IN (0x0001)	false
Apr 18, 2024 16:43:59.763144970 CEST	192.168.2.17	1.1.1.1	0xd49e	Standard query (0)	goldengoose.my.salesforce-sites.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 16:43:59.763289928 CEST	192.168.2.17	1.1.1.1	0xd5ef	Standard query (0)	goldengoose.my.salesforce-sites.com	65	IN (0x0001)	false
Apr 18, 2024 16:44:03.501346111 CEST	192.168.2.17	1.1.1.1	0x64a4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 16:44:03.501494884 CEST	192.168.2.17	1.1.1.1	0xb122	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 16:44:05.413866043 CEST	192.168.2.17	1.1.1.1	0x9a1d	Standard query (0)	goldengoose.my.salesforce-sites.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 16:44:05.414098024 CEST	192.168.2.17	1.1.1.1	0x9ed1	Standard query (0)	goldengoose.my.salesforce-sites.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 18, 2024 16:43:58.807048082 CEST	1.1.1.1	192.168.2.17	0x72c2	No error (0)	wechatunsuscribe.secure.force.com	ita16.sfdc-3d0u2f.force.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 16:43:58.807048082 CEST	1.1.1.1	192.168.2.17	0x72c2	No error (0)	ita16.sfdc-3d0u2f.force.com	ita16.sfdc-3d0u2f.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 16:43:58.823293924 CEST	1.1.1.1	192.168.2.17	0x888f	No error (0)	wechatunsuscribe.secure.force.com	ita16.sfdc-3d0u2f.force.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 16:43:58.823293924 CEST	1.1.1.1	192.168.2.17	0x888f	No error (0)	ita16.sfdc-3d0u2f.force.com	ita16.sfdc-3d0u2f.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 16:43:58.823293924 CEST	1.1.1.1	192.168.2.17	0x888f	No error (0)	ita16.sfdc-3d0u2f.salesforce.com		15.161.0.134	A (IP address)	IN (0x0001)	false
Apr 18, 2024 16:43:58.823293924 CEST	1.1.1.1	192.168.2.17	0x888f	No error (0)	ita16.sfdc-3d0u2f.salesforce.com		15.161.15.125	A (IP address)	IN (0x0001)	false
Apr 18, 2024 16:43:58.823293924 CEST	1.1.1.1	192.168.2.17	0x888f	No error (0)	ita16.sfdc-3d0u2f.salesforce.com		18.102.42.58	A (IP address)	IN (0x0001)	false
Apr 18, 2024 16:43:59.874927998 CEST	1.1.1.1	192.168.2.17	0xd49e	No error (0)	goldengoose.my.salesforce-sites.com	ita16.sfdc-3d0u2f.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 16:43:59.874927998 CEST	1.1.1.1	192.168.2.17	0xd49e	No error (0)	ita16.sfdc-3d0u2f.salesforce.com		15.161.0.134	A (IP address)	IN (0x0001)	false
Apr 18, 2024 16:43:59.874927998 CEST	1.1.1.1	192.168.2.17	0xd49e	No error (0)	ita16.sfdc-3d0u2f.salesforce.com		15.161.15.125	A (IP address)	IN (0x0001)	false
Apr 18, 2024 16:43:59.874927998 CEST	1.1.1.1	192.168.2.17	0xd49e	No error (0)	ita16.sfdc-3d0u2f.salesforce.com		18.102.42.58	A (IP address)	IN (0x0001)	false
Apr 18, 2024 16:43:59.905049086 CEST	1.1.1.1	192.168.2.17	0xd5ef	No error (0)	goldengoose.my.salesforce-sites.com	ita16.sfdc-3d0u2f.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 16:44:03.605642080 CEST	1.1.1.1	192.168.2.17	0x64a4	No error (0)	www.google.com		74.125.138.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 16:44:03.605642080 CEST	1.1.1.1	192.168.2.17	0x64a4	No error (0)	www.google.com		74.125.138.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 16:44:03.605642080 CEST	1.1.1.1	192.168.2.17	0x64a4	No error (0)	www.google.com		74.125.138.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 16:44:03.605642080 CEST	1.1.1.1	192.168.2.17	0x64a4	No error (0)	www.google.com		74.125.138.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 16:44:03.605642080 CEST	1.1.1.1	192.168.2.17	0x64a4	No error (0)	www.google.com		74.125.138.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 16:44:03.605642080 CEST	1.1.1.1	192.168.2.17	0x64a4	No error (0)	www.google.com		74.125.138.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 16:44:03.606023073 CEST	1.1.1.1	192.168.2.17	0xb122	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 16:44:05.556317091 CEST	1.1.1.1	192.168.2.17	0x9ed1	No error (0)	goldengoose.my.salesforce-sites.com	ita16.sfdc-3d0u2f.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 16:44:05.588690996 CEST	1.1.1.1	192.168.2.17	0x9a1d	No error (0)	goldengoose.my.salesforce-sites.com	ita16.sfdc-3d0u2f.salesforce.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 16:44:05.588690996 CEST	1.1.1.1	192.168.2.17	0x9a1d	No error (0)	ita16.sfdc-3d0u2f.salesforce.com		15.161.0.134	A (IP address)	IN (0x0001)	false
Apr 18, 2024 16:44:05.588690996 CEST	1.1.1.1	192.168.2.17	0x9a1d	No error (0)	ita16.sfdc-3d0u2f.salesforce.com		15.161.15.125	A (IP address)	IN (0x0001)	false
Apr 18, 2024 16:44:05.588690996 CEST	1.1.1.1	192.168.2.17	0x9a1d	No error (0)	ita16.sfdc-3d0u2f.salesforce.com		18.102.42.58	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

wechatunsuscribe.secure.force.com

goldengoose.my.salesforce-sites.com

https:

slscr.update.microsoft.com

www.bing.com

evoke-windowsservices-tas.msedge.net

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.17	49705	15.161.0.134	443	4472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:43:59 UTC	676	OUT	GET / HTTP/1.1 Host: wechatunsuscribe.secure.force.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 14:43:59 UTC	823	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 18 Apr 2024 14:43:59 GMT Set-Cookie: CookieConsentPolicy=0:1; path=/; expires=Fri, 18-Apr-2025 14:43:59 GMT; Max-Age=31536000; secure; SameSite=None Set-Cookie: LSKey-c$CookieConsentPolicy=0:1; path=/; expires=Fri, 18-Apr-2025 14:43:59 GMT; Max-Age=31536000; secure; SameSite=None Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Origin-Trial: AkBgNlDiY3u6JLOlyCHNo+uI//ZsQNGdALGkaqj2TaJPsaytJKhRW2ej+qKdkIs3auzeCWPCYX2AE/jVxzJS0AwAAABaeyJvcmlnaW4iOiJodHRwczovL2ZvcmNlLmNvbTo0NDMiLCJmZWF0dXJlIjoiVHBjZCIsImV4cGlyeSI6MTczNTM0Mzk5OSwiaXNTdWJkb21haW4iOnRydWV9 Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: https://goldengoose.my.salesforce-sites.com/ Content-Length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.17	49708	15.161.0.134	443	4472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:00 UTC	678	OUT	GET / HTTP/1.1 Host: goldengoose.my.salesforce-sites.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 14:44:00 UTC	857	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 18 Apr 2024 14:44:00 GMT Set-Cookie: CookieConsentPolicy=0:1; path=/; expires=Fri, 18-Apr-2025 14:44:00 GMT; Max-Age=31536000; secure; SameSite=None Set-Cookie: LSKey-c$CookieConsentPolicy=0:1; path=/; expires=Fri, 18-Apr-2025 14:44:00 GMT; Max-Age=31536000; secure; SameSite=None Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Location: https://goldengoose.my.salesforce-sites.com/GGDBchat/ Expires: Thu, 01 Jan 1970 00:00:00 GMT connection: close Transfer-Encoding: chunked
2024-04-18 14:44:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.17	49709	15.161.0.134	443	4472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:01 UTC	753	OUT	GET /GGDBchat/ HTTP/1.1 Host: goldengoose.my.salesforce-sites.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1
2024-04-18 14:44:01 UTC	883	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 14:44:01 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Content-Security-Policy: upgrade-insecure-requests Referrer-Policy: origin-when-cross-origin Cache-Control: no-cache,must-revalidate,max-age=0,no-store,private Set-Cookie: BrowserId=GLHrwf2SEe64p4lFiqtuow; path=/; expires=Fri, 18-Apr-2025 14:44:01 GMT; Max-Age=31536000 Set-Cookie: BrowserId_sec=GLHrwf2SEe64p4lFiqtuow; path=/; expires=Fri, 18-Apr-2025 14:44:01 GMT; Max-Age=31536000; secure; SameSite=None P3P: CP="CUR OTR STA" Expires: Thu, 01 Jan 1970 00:00:00 GMT Content-Security-Policy: frame-ancestors 'self' https://www.goldengoose.com X-FRAME-OPTIONS: ALLOW-FROM 'self' Content-Type: text/html;charset=UTF-8 Vary: Accept-Encoding connection: close Transfer-Encoding: chunked
2024-04-18 14:44:01 UTC	4256	IN	Data Raw: 31 30 39 33 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 77 6e 20 46 6f 72 20 4d 61 69 6e 74 65 6e 61 6e 63 65 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 47 47 44 42 63 68 61 74 2f 73 74 61 74 69 63 2f 31 31 31 32 31 33 2f 6a 73 2f 70 65 72 66 2f 73 74 75 62 2e 6a 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 Data Ascii: 1093<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html><head><title>Down For Maintenance</title><script src="/GGDBchat/static/111213/js/perf/stub.js" type="text/javascript"></script><script src

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.17	49711	15.161.0.134	443	4472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:02 UTC	803	OUT	GET /GGDBchat/sCSS/60.0/sprites/1705602481000/Theme3/default/gc/zen-componentsCompatible.css HTTP/1.1 Host: goldengoose.my.salesforce-sites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://goldengoose.my.salesforce-sites.com/GGDBchat/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
2024-04-18 14:44:03 UTC	716	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 14:44:02 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: origin-when-cross-origin Cache-Control: private,max-age=3888000 Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Type: text/css P3P: CP="CUR OTR STA" Expires: Sun, 02 Jun 2024 14:44:02 GMT Last-Modified: Thu, 18 Jan 2024 18:28:01 GMT Vary: Accept-Encoding connection: close Transfer-Encoding: chunked
2024-04-18 14:44:03 UTC	15668	IN	Data Raw: 33 64 31 65 0d 0a 2f 2a 0a 20 2a 20 54 68 69 73 20 63 6f 64 65 20 69 73 20 66 6f 72 20 49 6e 74 65 72 6e 61 6c 20 53 61 6c 65 73 66 6f 72 63 65 20 75 73 65 20 6f 6e 6c 79 2c 20 61 6e 64 20 73 75 62 6a 65 63 74 20 74 6f 20 63 68 61 6e 67 65 20 77 69 74 68 6f 75 74 20 6e 6f 74 69 63 65 2e 0a 20 2a 20 43 75 73 74 6f 6d 65 72 73 20 73 68 6f 75 6c 64 6e 27 74 20 72 65 66 65 72 65 6e 63 65 20 74 68 69 73 20 66 69 6c 65 20 69 6e 20 61 6e 79 20 77 65 62 20 70 61 67 65 73 2e 0a 20 2a 2f 0a 2e 7a 65 6e 20 75 6c 2c 2e 7a 65 6e 20 6f 6c 2c 2e 7a 65 6e 20 6c 69 2c 2e 7a 65 6e 20 68 31 2c 2e 7a 65 6e 20 68 32 2c 2e 7a 65 6e 20 68 33 2c 2e 7a 65 6e 20 68 34 2c 2e 7a 65 6e 20 68 36 2c 2e 7a 65 6e 20 66 6f 72 6d 2c 2e 7a 65 6e 20 66 69 65 6c 64 73 65 74 2c 2e 7a 65 6e 20 Data Ascii: 3d1e/* * This code is for Internal Salesforce use only, and subject to change without notice. * Customers shouldn't reference this file in any web pages. */.zen ul,.zen ol,.zen li,.zen h1,.zen h2,.zen h3,.zen h4,.zen h6,.zen form,.zen fieldset,.zen
2024-04-18 14:44:03 UTC	16384	IN	Data Raw: 65 6e 20 2e 7a 65 6e 2d 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 65 6d 7d 2e 7a 65 6e 20 68 34 2c 2e 7a 65 6e 20 2e 7a 65 6e 2d 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 33 33 33 65 6d 7d 2e 7a 65 6e 20 68 35 2c 2e 7a 65 6e 20 2e 7a 65 6e 2d 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 36 37 65 6d 7d 2e 7a 65 6e 20 68 36 2c 2e 7a 65 6e 20 2e 7a 65 6e 2d 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 2e 7a 65 6e 20 68 31 2c 2e 7a 65 6e 20 68 32 2c 2e 7a 65 6e 20 68 33 2c 2e 7a 65 6e 20 68 34 2c 2e 7a 65 6e 20 68 35 2c 2e 7a 65 6e 20 68 36 2c 2e 7a 65 6e 20 64 6c 2c 2e 7a 65 6e 20 70 2c 2e 7a 65 6e 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 2e 7a 65 6e 20 2e 7a 65 6e 2d 62 6f 78 2c 2e 7a 65 6e 20 70 72 65 7b 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 Data Ascii: en .zen-h3{font-size:1.5em}.zen h4,.zen .zen-h4{font-size:1.333em}.zen h5,.zen .zen-h5{font-size:1.167em}.zen h6,.zen .zen-h6{font-size:1em}.zen h1,.zen h2,.zen h3,.zen h4,.zen h5,.zen h6,.zen dl,.zen p,.zen blockquote,.zen .zen-box,.zen pre{margin:10px 0
2024-04-18 14:44:03 UTC	732	IN	Data Raw: 66 66 66 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 37 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 37 70 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 33 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 35 29 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 33 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 33 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 35 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 36 62 63 37 65 34 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 23 36 62 63 37 65 34 2c 23 30 35 39 39 63 63 20 36 35 25 29 3b 62 61 Data Ascii: fff;-moz-border-radius:7px;border-radius:7px;-moz-box-shadow:0 1px 3px 1px rgba(0,0,0,.15);-webkit-box-shadow:0 1px 3px 1px rgba(0,0,0,.15);box-shadow:0 1px 3px 1px rgba(0,0,0,.15);background:#6bc7e4;background:-moz-linear-gradient(#6bc7e4,#0599cc 65%);ba
2024-04-18 14:44:03 UTC	15317	IN	Data Raw: 33 62 63 38 0d 0a 3a 69 6e 73 65 74 20 30 20 31 70 78 20 30 20 30 20 23 65 34 65 34 65 34 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 31 70 78 20 30 20 30 20 23 65 34 65 34 65 34 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 31 70 78 20 30 20 30 20 23 65 34 65 34 65 34 7d 2e 7a 65 6e 20 2e 7a 65 6e 2d 68 69 67 68 6c 69 67 68 74 42 74 6e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 30 38 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 38 61 62 35 32 39 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 36 63 38 30 34 39 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6d 73 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 Data Ascii: 3bc8:inset 0 1px 0 0 #e4e4e4;-webkit-box-shadow:inset 0 1px 0 0 #e4e4e4;box-shadow:inset 0 1px 0 0 #e4e4e4}.zen .zen-highlightBtn{font-family:Arial;font-size:1.08em;background-color:#8ab529;border:1px solid #6c8049;background-image:-ms-linear-gradient(t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.17	49715	15.161.0.134	443	4472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:02 UTC	787	OUT	GET /GGDBchat/sCSS/60.0/sprites/1705602481000/Theme3/default/gc/elements.css HTTP/1.1 Host: goldengoose.my.salesforce-sites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://goldengoose.my.salesforce-sites.com/GGDBchat/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
2024-04-18 14:44:03 UTC	716	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 14:44:02 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: origin-when-cross-origin Cache-Control: private,max-age=3888000 Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Type: text/css P3P: CP="CUR OTR STA" Expires: Sun, 02 Jun 2024 14:44:02 GMT Last-Modified: Thu, 18 Jan 2024 18:28:01 GMT Vary: Accept-Encoding connection: close Transfer-Encoding: chunked
2024-04-18 14:44:03 UTC	15668	IN	Data Raw: 38 34 38 65 0d 0a 2f 2a 0a 20 2a 20 54 68 69 73 20 63 6f 64 65 20 69 73 20 66 6f 72 20 49 6e 74 65 72 6e 61 6c 20 53 61 6c 65 73 66 6f 72 63 65 20 75 73 65 20 6f 6e 6c 79 2c 20 61 6e 64 20 73 75 62 6a 65 63 74 20 74 6f 20 63 68 61 6e 67 65 20 77 69 74 68 6f 75 74 20 6e 6f 74 69 63 65 2e 0a 20 2a 20 43 75 73 74 6f 6d 65 72 73 20 73 68 6f 75 6c 64 6e 27 74 20 72 65 66 65 72 65 6e 63 65 20 74 68 69 73 20 66 69 6c 65 20 69 6e 20 61 6e 79 20 77 65 62 20 70 61 67 65 73 2e 0a 20 2a 2f 0a 2e 75 73 65 72 44 65 66 69 6e 65 64 4d 52 55 20 69 6d 67 2e 75 73 65 72 44 65 66 69 6e 65 64 49 6d 61 67 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 75 73 65 72 44 65 66 69 6e 65 64 4d 6f 74 69 66 20 69 6d 67 2e 75 73 65 72 44 65 66 69 6e 65 64 49 Data Ascii: 848e/* * This code is for Internal Salesforce use only, and subject to change without notice. * Customers shouldn't reference this file in any web pages. */.userDefinedMRU img.userDefinedImage{background-image:none}.userDefinedMotif img.userDefinedI
2024-04-18 14:44:03 UTC	16384	IN	Data Raw: 6c 6f 72 3a 23 30 30 30 7d 2e 64 61 74 65 50 69 63 6b 65 72 20 2e 62 75 74 74 6f 6e 42 61 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 63 65 63 65 63 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 31 65 32 65 39 3b 70 61 64 64 69 6e 67 3a 32 70 78 20 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 64 61 74 65 50 69 63 6b 65 72 20 2e 62 75 74 74 6f 6e 42 61 72 20 2e 63 61 6c 54 6f 64 61 79 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 39 31 25 7d 2e 64 61 74 65 50 69 63 6b 65 72 20 2e 64 61 74 65 42 61 72 20 2e 63 61 6c 4c 65 66 74 2c 2e 64 61 74 65 50 Data Ascii: lor:#000}.datePicker .buttonBar{background-color:#ececec;border-top:1px solid #e1e2e9;padding:2px 0;text-align:center;clear:both}.datePicker .buttonBar .calToday{font-weight:bold;text-decoration:underline;font-size:91%}.datePicker .dateBar .calLeft,.dateP
2024-04-18 14:44:03 UTC	1895	IN	Data Raw: 20 2e 63 61 6c 4c 65 66 74 2c 2e 64 61 74 65 50 69 63 6b 65 72 20 2e 64 61 74 65 42 61 72 20 2e 63 61 6c 4c 65 66 74 4f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 27 2f 69 6d 67 2f 61 6c 6f 68 61 53 6b 69 6e 2f 63 61 6c 5f 73 70 72 69 74 65 2e 70 6e 67 27 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 36 31 70 78 3b 77 69 64 74 68 3a 31 38 70 78 3b 68 65 69 67 68 74 3a 31 36 70 78 7d 2e 64 61 74 65 50 69 63 6b 65 72 20 2e 64 61 74 65 42 61 72 20 2e 63 61 6c 4c 65 66 74 4f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 38 70 78 20 2d 36 31 70 78 7d 2e 64 61 74 65 50 69 63 6b 65 72 20 2e 64 61 74 65 42 61 72 20 2e 63 61 6c 52 69 67 68 74 2c 2e 64 61 74 65 50 69 63 6b 65 72 20 2e Data Ascii: .calLeft,.datePicker .dateBar .calLeftOn{background-image:url('/img/alohaSkin/cal_sprite.png');background-position:0 -61px;width:18px;height:16px}.datePicker .dateBar .calLeftOn{background-position:-18px -61px}.datePicker .dateBar .calRight,.datePicker .

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.17	49712	15.161.0.134	443	4472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:02 UTC	785	OUT	GET /GGDBchat/sCSS/60.0/sprites/1705602481000/Theme3/default/gc/common.css HTTP/1.1 Host: goldengoose.my.salesforce-sites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://goldengoose.my.salesforce-sites.com/GGDBchat/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
2024-04-18 14:44:03 UTC	716	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 14:44:02 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: origin-when-cross-origin Cache-Control: private,max-age=3888000 Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Type: text/css P3P: CP="CUR OTR STA" Expires: Sun, 02 Jun 2024 14:44:02 GMT Last-Modified: Thu, 18 Jan 2024 18:28:01 GMT Vary: Accept-Encoding connection: close Transfer-Encoding: chunked
2024-04-18 14:44:03 UTC	15668	IN	Data Raw: 31 33 64 31 37 0d 0a 2f 2a 0a 20 2a 20 54 68 69 73 20 63 6f 64 65 20 69 73 20 66 6f 72 20 49 6e 74 65 72 6e 61 6c 20 53 61 6c 65 73 66 6f 72 63 65 20 75 73 65 20 6f 6e 6c 79 2c 20 61 6e 64 20 73 75 62 6a 65 63 74 20 74 6f 20 63 68 61 6e 67 65 20 77 69 74 68 6f 75 74 20 6e 6f 74 69 63 65 2e 0a 20 2a 20 43 75 73 74 6f 6d 65 72 73 20 73 68 6f 75 6c 64 6e 27 74 20 72 65 66 65 72 65 6e 63 65 20 74 68 69 73 20 66 69 6c 65 20 69 6e 20 61 6e 79 20 77 65 62 20 70 61 67 65 73 2e 0a 20 2a 2f 0a 70 72 65 2e 65 78 63 65 70 74 69 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 35 25 7d 62 6f 64 79 2c 74 64 7b 6d 61 72 67 69 6e 3a 30 3b 63 6f 6c 6f 72 3a 23 33 33 33 7d 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b 62 61 63 Data Ascii: 13d17/* * This code is for Internal Salesforce use only, and subject to change without notice. * Customers shouldn't reference this file in any web pages. */pre.exception{font-size:145%}body,td{margin:0;color:#333}body{background-repeat:repeat-x;bac
2024-04-18 14:44:03 UTC	16384	IN	Data Raw: 61 6c 27 2c 27 48 65 6c 76 65 74 69 63 61 27 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 30 25 7d 23 63 72 65 61 74 65 4e 65 77 20 2e 6d 65 6e 75 42 75 74 74 6f 6e 4d 65 6e 75 20 61 20 2e 6d 72 75 49 63 6f 6e 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 70 78 7d 23 63 72 65 61 74 65 4e 65 77 20 2e 6d 65 6e 75 42 75 74 74 6f 6e 4d 65 6e 75 20 61 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 33 64 65 62 38 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 6d 65 6e 75 42 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 Data Ascii: al','Helvetica',sans-serif;font-weight:normal;font-size:100%}#createNew .menuButtonMenu a .mruIcon{margin-right:2px}#createNew .menuButtonMenu a:hover{background-color:#fff;border-color:#e3deb8;text-decoration:none}.menuButton{display:inline;cursor:pointe
2024-04-18 14:44:03 UTC	16384	IN	Data Raw: 6f 77 6e 43 6f 6e 74 65 6e 74 20 2e 74 61 67 42 75 74 74 6f 6e 73 7b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 62 50 61 67 65 54 69 74 6c 65 20 2e 74 61 67 44 72 6f 70 44 6f 77 6e 20 2e 74 61 67 44 72 6f 70 44 6f 77 6e 43 6f 6e 74 65 6e 74 20 2e 6d 79 5f 74 61 67 73 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 77 69 64 74 68 3a 34 35 25 7d 2e 62 50 61 67 65 54 69 74 6c 65 20 2e 74 61 67 44 72 6f 70 44 6f 77 6e 20 2e 74 61 67 44 72 6f 70 44 6f 77 6e 43 6f 6e 74 65 6e 74 20 2e 73 6f 6c 6f 7b 77 69 64 74 68 3a 39 30 25 7d 2e 62 50 61 67 65 54 69 74 6c 65 20 2e 74 61 67 44 72 Data Ascii: ownContent .tagButtons{width:100%;text-align:center}.bPageTitle .tagDropDown .tagDropDownContent .my_tags{font-weight:bold;padding:0;margin-right:1em;text-align:left;width:45%}.bPageTitle .tagDropDown .tagDropDownContent .solo{width:90%}.bPageTitle .tagDr
2024-04-18 14:44:03 UTC	16384	IN	Data Raw: 72 2c 2e 74 6f 67 67 6c 65 43 61 6c 46 6f 6f 74 65 72 4c 65 66 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 67 2f 63 61 6c 2f 66 6f 6f 74 65 72 2f 62 67 2e 67 69 66 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 6c 65 66 74 20 74 6f 70 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 61 34 61 32 39 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 68 65 69 67 68 74 3a 32 35 70 78 7d 2e 69 6e 6c 69 6e 65 53 63 68 65 64 75 6c 65 72 46 6f 6f 74 65 72 20 2e 74 6f 67 67 6c 65 43 61 6c 46 6f 6f 74 65 72 52 69 67 68 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 67 2f 63 61 6c 2f 66 Data Ascii: r,.toggleCalFooterLeft{background-image:url(/img/cal/footer/bg.gif);background-position:left top;background-repeat:repeat;border-bottom:1px solid #a4a29e;margin-top:0;height:25px}.inlineSchedulerFooter .toggleCalFooterRight{background-image:url(/img/cal/f
2024-04-18 14:44:03 UTC	16384	IN	Data Raw: 64 61 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 64 63 36 38 64 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 2e 62 43 61 6c 65 6e 64 61 72 20 2e 63 61 6c 65 6e 64 61 72 4d 6f 6e 74 68 56 69 65 77 20 74 64 20 2e 65 76 65 6e 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 2e 62 43 61 6c 65 6e 64 61 72 20 74 64 20 2e 65 76 65 6e 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 34 65 6d 7d 2e 62 43 61 6c 65 6e 64 61 72 20 2e 63 61 6c 65 6e 64 61 72 4d 6f 6e 74 68 56 69 65 77 20 2e 64 61 74 65 20 2e 6e 65 77 4c 69 6e 6b 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 2e 62 43 61 6c Data Ascii: date{background-color:#cdc68d;font-weight:bold}.bCalendar .calendarMonthView td .event{display:block;font-weight:bold}.bCalendar td .event{font-weight:bold;margin-right:.4em}.bCalendar .calendarMonthView .date .newLink{float:right;font-weight:normal}.bCal
2024-04-18 14:44:03 UTC	16384	IN	Data Raw: 2e 67 69 66 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 77 69 64 74 68 3a 31 32 70 78 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 70 78 7d 2e 69 6e 66 6f 49 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 67 2f 73 70 72 69 74 65 73 2f 6d 61 73 74 65 72 2e 70 6e 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 31 36 32 70 78 3b 77 69 64 74 68 3a 31 36 70 78 3b 68 65 69 67 68 74 3a 31 36 70 78 7d 2e 69 6d 67 4e 65 77 44 61 74 61 53 6d 61 6c 6c 2c 2e 69 6d 67 4e 65 77 44 61 74 61 7b 76 65 72 74 69 63 61 6c 2d 61 6c Data Ascii: .gif);background-position:0 0;width:12px;height:12px;vertical-align:middle;margin-left:3px;margin-top:-2px}.infoIcon{background-image:url(/img/sprites/master.png);background-position:0 -162px;width:16px;height:16px}.imgNewDataSmall,.imgNewData{vertical-al
2024-04-18 14:44:03 UTC	16384	IN	Data Raw: 65 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 39 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 7d 2e 6c 6f 6f 6b 75 70 48 6f 76 65 72 44 65 74 61 69 6c 4f 76 65 72 72 69 64 61 62 6c 65 20 2e 62 6f 74 74 6f 6d 4c 65 66 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 69 6d 67 2f 62 6f 74 74 6f 6d 4c 65 66 74 42 75 62 62 6c 65 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 34 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 37 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 7d 2e 6c 6f 6f 6b 75 70 48 6f 76 65 72 44 65 74 61 69 6c 4f 76 65 72 72 69 64 61 62 6c 65 20 2e 74 6f 70 52 69 67 68 74 7b 62 61 Data Ascii: e.png) no-repeat center;padding-top:19px;padding-bottom:12px}.lookupHoverDetailOverridable .bottomLeft{background:url(/img/bottomLeftBubble.png) no-repeat center;padding-top:4px;padding-bottom:27px;margin-top:8px}.lookupHoverDetailOverridable .topRight{ba
2024-04-18 14:44:03 UTC	16384	IN	Data Raw: 42 6c 6f 63 6b 20 2e 74 79 70 65 53 74 65 70 20 2e 72 65 70 6f 72 74 54 79 70 65 4c 69 73 74 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 65 70 6f 72 74 54 61 62 20 2e 62 57 69 7a 61 72 64 42 6c 6f 63 6b 20 2e 74 79 70 65 53 74 65 70 20 2e 72 65 70 6f 72 74 54 79 70 65 4c 69 73 74 20 74 68 2c 2e 72 65 70 6f 72 74 54 61 62 20 2e 62 57 69 7a 61 72 64 42 6c 6f 63 6b 20 2e 74 79 70 65 53 74 65 70 20 2e 72 65 70 6f 72 74 54 79 70 65 4c 69 73 74 20 74 64 7b 70 61 64 64 69 6e 67 3a 34 70 78 20 32 70 78 20 34 70 78 20 35 70 78 3b 63 6f 6c 6f 72 3a 23 33 33 33 7d 2e 72 65 70 6f 72 74 54 61 62 20 2e 62 57 69 7a 61 72 64 42 6c 6f 63 6b 20 2e 61 67 67 72 65 67 61 74 65 73 53 74 65 70 20 23 6d 61 78 45 72 72 6f Data Ascii: Block .typeStep .reportTypeList{padding-bottom:15px;width:100%}.reportTab .bWizardBlock .typeStep .reportTypeList th,.reportTab .bWizardBlock .typeStep .reportTypeList td{padding:4px 2px 4px 5px;color:#333}.reportTab .bWizardBlock .aggregatesStep #maxErro
2024-04-18 14:44:03 UTC	16384	IN	Data Raw: 64 64 69 6e 67 2d 74 6f 70 3a 34 70 78 7d 2e 70 62 42 6f 64 79 20 2e 74 64 53 65 63 74 69 6f 6e 52 6f 77 48 65 61 64 65 72 20 64 69 76 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 2e 74 64 54 61 62 6c 65 43 6f 6c 75 6d 6e 48 65 61 64 65 72 7b 77 69 64 74 68 3a 32 30 25 7d 2e 62 50 61 67 65 42 6c 6f 63 6b 20 2e 64 65 74 61 69 6c 4c 69 73 74 20 2e 74 64 53 65 63 74 69 6f 6e 52 6f 77 20 74 64 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 70 78 7d 2e 70 53 65 61 72 63 68 53 68 6f 77 4d 6f 72 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 35 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 33 65 6d Data Ascii: dding-top:4px}.pbBody .tdSectionRowHeader div{font-weight:bold}.tdTableColumnHeader{width:20%}.bPageBlock .detailList .tdSectionRow td{padding-top:3px;padding-bottom:2px}.pSearchShowMore{font-size:.95em;text-align:center;white-space:nowrap;margin-top:.3em
2024-04-18 14:44:03 UTC	16384	IN	Data Raw: 72 61 70 7d 2e 61 63 74 69 76 65 46 6f 72 35 30 38 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 35 65 6d 7d 23 61 6c 6f 68 61 57 61 72 6e 69 6e 67 44 69 61 6c 6f 67 20 2e 74 68 65 6d 65 53 68 6f 74 73 2c 23 62 72 6f 77 73 65 72 57 61 72 6e 69 6e 67 44 69 61 6c 6f 67 20 2e 74 68 65 6d 65 53 68 6f 74 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 35 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 23 61 6c 6f 68 61 57 61 72 6e 69 6e 67 44 69 61 6c 6f 67 20 2e 74 68 65 6d 65 57 72 61 70 70 65 72 2c 23 62 72 6f 77 73 65 72 57 61 72 6e 69 6e 67 44 69 61 6c 6f 67 20 2e 74 68 65 6d 65 57 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 61 6c 6f 68 61 57 61 72 6e Data Ascii: rap}.activeFor508{font-weight:normal;font-size:.85em}#alohaWarningDialog .themeShots,#browserWarningDialog .themeShots{margin-top:15px;margin-bottom:10px}#alohaWarningDialog .themeWrapper,#browserWarningDialog .themeWrapper{display:inline-block}#alohaWarn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.17	49713	15.161.0.134	443	4472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:02 UTC	771	OUT	GET /sCSS/60.0/sprites/1710411415000/Theme3/gc/dStandard.css HTTP/1.1 Host: goldengoose.my.salesforce-sites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://goldengoose.my.salesforce-sites.com/GGDBchat/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
2024-04-18 14:44:03 UTC	607	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 14:44:02 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Type: text/css P3P: CP="CUR OTR STA" Expires: Sun, 02 Jun 2024 14:44:02 GMT Last-Modified: Thu, 14 Mar 2024 10:16:55 GMT Vary: Accept-Encoding connection: close Transfer-Encoding: chunked
2024-04-18 14:44:03 UTC	15777	IN	Data Raw: 33 64 38 62 0d 0a 2f 2a 0a 20 2a 20 54 68 69 73 20 63 6f 64 65 20 69 73 20 66 6f 72 20 49 6e 74 65 72 6e 61 6c 20 53 61 6c 65 73 66 6f 72 63 65 20 75 73 65 20 6f 6e 6c 79 2c 20 61 6e 64 20 73 75 62 6a 65 63 74 20 74 6f 20 63 68 61 6e 67 65 20 77 69 74 68 6f 75 74 20 6e 6f 74 69 63 65 2e 0a 20 2a 20 43 75 73 74 6f 6d 65 72 73 20 73 68 6f 75 6c 64 6e 27 74 20 72 65 66 65 72 65 6e 63 65 20 74 68 69 73 20 66 69 6c 65 20 69 6e 20 61 6e 79 20 77 65 62 20 70 61 67 65 73 2e 0a 20 2a 2f 0a 2e 45 78 70 72 65 73 73 69 6f 6e 53 65 74 4f 62 6a 65 63 74 41 6c 69 61 73 54 61 62 20 2e 70 72 69 6d 61 72 79 50 61 6c 65 74 74 65 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 45 78 70 72 65 73 73 69 6f 6e 53 65 74 4f 62 6a 65 63 74 41 6c 69 61 73 42 6c 6f 63 Data Ascii: 3d8b/* * This code is for Internal Salesforce use only, and subject to change without notice. * Customers shouldn't reference this file in any web pages. */.ExpressionSetObjectAliasTab .primaryPalette,.individualPalette .ExpressionSetObjectAliasBloc
2024-04-18 14:44:03 UTC	16384	IN	Data Raw: 2d 63 6f 6c 6f 72 3a 23 34 61 39 30 65 32 7d 2e 61 63 74 69 6f 6e 50 6c 61 6e 54 65 6d 70 6c 61 74 65 56 65 72 73 69 6f 6e 54 61 62 20 2e 6c 69 73 74 56 69 65 77 70 6f 72 74 20 2e 73 75 62 4e 61 76 20 2e 6c 69 6e 6b 42 61 72 2c 2e 61 63 74 69 6f 6e 50 6c 61 6e 54 65 6d 70 6c 61 74 65 56 65 72 73 69 6f 6e 54 61 62 20 2e 6d 43 6f 6d 70 6f 6e 65 6e 74 20 2e 63 48 65 61 64 65 72 2c 2e 61 63 74 69 6f 6e 50 6c 61 6e 54 65 6d 70 6c 61 74 65 56 65 72 73 69 6f 6e 54 61 62 20 2e 67 65 6e 65 72 69 63 54 61 62 6c 65 2c 2e 61 63 74 69 6f 6e 50 6c 61 6e 54 65 6d 70 6c 61 74 65 56 65 72 73 69 6f 6e 54 61 62 20 2e 62 53 75 62 42 6c 6f 63 6b 2c 2e 61 63 74 69 6f 6e 50 6c 61 6e 54 65 6d 70 6c 61 74 65 56 65 72 73 69 6f 6e 54 61 62 20 2e 62 50 61 67 65 42 6c 6f 63 6b 7b 62 Data Ascii: -color:#4a90e2}.actionPlanTemplateVersionTab .listViewport .subNav .linkBar,.actionPlanTemplateVersionTab .mComponent .cHeader,.actionPlanTemplateVersionTab .genericTable,.actionPlanTemplateVersionTab .bSubBlock,.actionPlanTemplateVersionTab .bPageBlock{b
2024-04-18 14:44:03 UTC	16384	IN	Data Raw: 72 74 69 61 72 79 50 61 6c 65 74 74 65 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 73 77 61 72 6d 42 6c 6f 63 6b 20 2e 74 65 72 74 69 61 72 79 50 61 6c 65 74 74 65 2c 2e 6c 61 79 6f 75 74 45 64 69 74 20 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 73 77 61 72 6d 42 6c 6f 63 6b 20 2e 74 65 72 74 69 61 72 79 50 61 6c 65 74 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 35 36 37 35 62 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 35 36 37 35 62 7d 2e 73 77 61 72 6d 54 61 62 20 2e 62 67 64 50 61 6c 65 74 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 35 33 38 61 7d 2e 73 77 61 72 6d 54 61 62 20 2e 62 72 64 50 61 6c 65 74 74 65 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 Data Ascii: rtiaryPalette,.individualPalette .swarmBlock .tertiaryPalette,.layoutEdit .individualPalette .swarmBlock .tertiaryPalette{background-color:#f5675b;border-color:#f5675b}.swarmTab .bgdPalette{background-color:#ff538a}.swarmTab .brdPalette{border-top-color:#
2024-04-18 14:44:03 UTC	16384	IN	Data Raw: 62 20 2e 62 50 61 67 65 42 6c 6f 63 6b 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 33 70 78 20 73 6f 6c 69 64 20 23 31 30 37 63 61 64 7d 2e 62 6f 64 79 44 69 76 20 2e 6d 72 75 4c 69 73 74 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 64 65 6c 65 74 65 45 76 65 6e 74 42 6c 6f 63 6b 20 2e 73 65 63 6f 6e 64 61 72 79 50 61 6c 65 74 74 65 20 2e 70 62 48 65 61 64 65 72 2c 2e 62 6f 64 79 44 69 76 20 2e 68 6f 76 65 72 44 65 74 61 69 6c 20 2e 64 65 6c 65 74 65 45 76 65 6e 74 42 6c 6f 63 6b 20 2e 73 65 63 6f 6e 64 61 72 79 50 61 6c 65 74 74 65 20 2e 70 62 48 65 61 64 65 72 2c 2e 6c 6f 6f 6b 75 70 48 6f 76 65 72 44 65 74 61 69 6c 20 2e 64 65 6c 65 74 65 45 76 65 6e 74 42 6c 6f 63 6b 20 2e 73 65 63 6f 6e 64 61 72 79 50 61 6c 65 74 74 65 20 2e 70 62 48 65 61 64 Data Ascii: b .bPageBlock{border-top:3px solid #107cad}.bodyDiv .mruList.individualPalette .deleteEventBlock .secondaryPalette .pbHeader,.bodyDiv .hoverDetail .deleteEventBlock .secondaryPalette .pbHeader,.lookupHoverDetail .deleteEventBlock .secondaryPalette .pbHead
2024-04-18 14:44:03 UTC	16384	IN	Data Raw: 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d 2e 62 52 65 6c 61 74 65 64 4c 69 73 74 20 2e 66 6f 72 65 63 61 73 74 42 6c 6f 63 6b 20 2e 70 62 54 69 74 6c 65 20 68 33 7b 6d 61 72 67 69 6e 3a 33 70 78 20 30 20 30 20 32 37 70 78 7d 2e 68 6f 6d 65 54 61 62 20 2e 70 72 69 6d 61 72 79 50 61 6c 65 74 74 65 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 68 6f 6d 65 42 6c 6f 63 6b 20 2e 70 72 69 6d 61 72 79 50 61 6c 65 74 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 37 39 37 63 30 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 31 37 39 37 63 30 7d 2e 68 6f 6d 65 54 61 62 20 2e 73 65 63 6f 6e 64 61 72 79 50 61 6c 65 74 74 65 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 Data Ascii: x;margin-left:5px;display:inline}.bRelatedList .forecastBlock .pbTitle h3{margin:3px 0 0 27px}.homeTab .primaryPalette,.individualPalette .homeBlock .primaryPalette{background-color:#1797c0;border-color:#1797c0}.homeTab .secondaryPalette,.individualPalett
2024-04-18 14:44:03 UTC	16384	IN	Data Raw: 30 3b 77 69 64 74 68 3a 32 34 70 78 3b 68 65 69 67 68 74 3a 32 34 70 78 7d 2e 62 52 65 6c 61 74 65 64 4c 69 73 74 20 2e 6f 72 64 65 72 44 65 6c 69 76 65 72 79 4d 65 74 68 6f 64 42 6c 6f 63 6b 20 2e 72 65 6c 61 74 65 64 4c 69 73 74 49 63 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 34 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d 2e 62 52 65 6c 61 74 65 64 4c 69 73 74 20 2e 6f 72 64 65 72 44 65 6c 69 76 65 72 79 4d 65 74 68 6f 64 42 6c 6f 63 6b 20 2e 70 62 54 69 74 6c 65 20 68 33 7b 6d 61 72 67 69 6e 3a 33 70 78 20 30 20 30 20 32 37 70 78 7d 2e 6f 72 64 65 72 53 75 6d 6d 61 72 79 54 61 62 20 2e 70 72 69 6d 61 72 79 50 61 6c 65 74 74 65 2c 2e 69 6e Data Ascii: 0;width:24px;height:24px}.bRelatedList .orderDeliveryMethodBlock .relatedListIcon{position:relative;margin-top:-4px;margin-left:5px;display:inline}.bRelatedList .orderDeliveryMethodBlock .pbTitle h3{margin:3px 0 0 27px}.orderSummaryTab .primaryPalette,.in
2024-04-18 14:44:03 UTC	16384	IN	Data Raw: 74 65 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 70 65 72 73 6f 6e 61 63 63 6f 75 6e 74 42 6c 6f 63 6b 20 2e 73 65 63 6f 6e 64 61 72 79 50 61 6c 65 74 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 33 36 66 62 64 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 33 36 66 62 64 7d 2e 70 65 72 73 6f 6e 61 63 63 6f 75 6e 74 54 61 62 20 2e 74 65 72 74 69 61 72 79 50 61 6c 65 74 74 65 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 70 65 72 73 6f 6e 61 63 63 6f 75 6e 74 42 6c 6f 63 6b 20 2e 74 65 72 74 69 61 72 79 50 61 6c 65 74 74 65 2c 2e 6c 61 79 6f 75 74 45 64 69 74 20 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 70 65 72 73 6f 6e 61 63 63 6f 75 6e 74 42 6c 6f 63 6b 20 2e 74 65 72 74 69 61 Data Ascii: te,.individualPalette .personaccountBlock .secondaryPalette{background-color:#236fbd;border-color:#236fbd}.personaccountTab .tertiaryPalette,.individualPalette .personaccountBlock .tertiaryPalette,.layoutEdit .individualPalette .personaccountBlock .tertia
2024-04-18 14:44:03 UTC	16384	IN	Data Raw: 73 65 63 6f 6e 64 61 72 79 50 61 6c 65 74 74 65 20 2e 70 62 48 65 61 64 65 72 2c 2e 6c 6f 6f 6b 75 70 48 6f 76 65 72 44 65 74 61 69 6c 20 2e 74 61 73 6b 42 6c 6f 63 6b 20 2e 73 65 63 6f 6e 64 61 72 79 50 61 6c 65 74 74 65 20 2e 70 62 48 65 61 64 65 72 2c 2e 63 68 61 74 74 65 72 48 6f 76 65 72 20 2e 74 61 73 6b 42 6c 6f 63 6b 20 2e 73 65 63 6f 6e 64 61 72 79 50 61 6c 65 74 74 65 20 2e 70 62 48 65 61 64 65 72 2c 2e 63 68 61 74 74 65 72 48 6f 76 65 72 20 2e 74 61 73 6b 42 6c 6f 63 6b 20 2e 73 65 63 6f 6e 64 61 72 79 50 61 6c 65 74 74 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 63 66 65 65 66 38 7d 2e 74 61 73 6b 54 61 62 20 2e 70 61 67 65 54 69 74 6c 65 49 63 6f 6e 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 74 61 73 6b 42 6c 6f 63 6b Data Ascii: secondaryPalette .pbHeader,.lookupHoverDetail .taskBlock .secondaryPalette .pbHeader,.chatterHover .taskBlock .secondaryPalette .pbHeader,.chatterHover .taskBlock .secondaryPalette{border-color:#cfeef8}.taskTab .pageTitleIcon,.individualPalette .taskBlock
2024-04-18 14:44:03 UTC	16384	IN	Data Raw: 6e 2f 66 69 6c 65 73 33 32 2e 70 6e 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 77 69 64 74 68 3a 33 32 70 78 3b 68 65 69 67 68 74 3a 33 32 70 78 7d 2e 63 68 61 74 74 65 72 46 69 6c 65 4c 69 73 74 4d 72 75 20 2e 6d 72 75 49 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 67 2f 69 63 6f 6e 2f 66 69 6c 65 73 31 36 2e 70 6e 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 77 69 64 74 68 3a 31 36 70 78 3b 68 65 69 67 68 74 3a 31 36 70 78 7d 2e 62 52 65 6c 61 74 65 64 4c 69 73 74 20 2e 63 68 61 74 74 65 72 46 69 6c 65 4c 69 73 74 42 6c 6f 63 6b 20 2e 72 65 6c 61 74 65 64 4c 69 73 74 49 63 6f 6e 2c 2e 61 6c 6c 54 61 62 54 61 62 20 2e 63 68 61 74 74 65 72 46 Data Ascii: n/files32.png);background-position:0 0;width:32px;height:32px}.chatterFileListMru .mruIcon{background-image:url(/img/icon/files16.png);background-position:0 0;width:16px;height:16px}.bRelatedList .chatterFileListBlock .relatedListIcon,.allTabTab .chatterF
2024-04-18 14:44:03 UTC	16384	IN	Data Raw: 72 73 54 61 62 20 2e 70 61 67 65 54 69 74 6c 65 49 63 6f 6e 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 63 68 61 74 74 65 72 41 6e 73 77 65 72 73 42 6c 6f 63 6b 20 2e 70 61 67 65 54 69 74 6c 65 49 63 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 69 6d 67 2f 69 63 6f 6e 2f 63 68 61 74 74 65 72 61 6e 73 77 65 72 73 32 34 2e 70 6e 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 77 69 64 74 68 3a 32 34 70 78 3b 68 65 69 67 68 74 3a 32 34 70 78 7d 2e 63 68 61 74 74 65 72 41 6e 73 77 65 72 73 4d 72 75 20 2e 6d 72 75 49 63 6f 6e 7b 7d 2e 62 52 65 6c 61 74 65 64 4c 69 73 74 20 2e 63 68 61 74 74 65 72 41 6e 73 77 65 72 73 42 6c 6f 63 6b 20 2e 72 65 6c 61 74 65 64 4c 69 73 74 49 63 6f Data Ascii: rsTab .pageTitleIcon,.individualPalette .chatterAnswersBlock .pageTitleIcon{background-image:url(/img/icon/chatteranswers24.png);background-position:0 0;width:24px;height:24px}.chatterAnswersMru .mruIcon{}.bRelatedList .chatterAnswersBlock .relatedListIco

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.17	49716	15.161.0.134	443	4472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:02 UTC	802	OUT	GET /sCSS/60.0/sprites/1710411415000/Theme3/00D3X0000047cTS/0057U000001A9O2/gc/dCustom0.css HTTP/1.1 Host: goldengoose.my.salesforce-sites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://goldengoose.my.salesforce-sites.com/GGDBchat/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
2024-04-18 14:44:03 UTC	607	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 14:44:02 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Type: text/css P3P: CP="CUR OTR STA" Expires: Sun, 02 Jun 2024 14:44:02 GMT Last-Modified: Thu, 14 Mar 2024 10:16:55 GMT Vary: Accept-Encoding connection: close Transfer-Encoding: chunked
2024-04-18 14:44:03 UTC	15777	IN	Data Raw: 33 64 38 62 0d 0a 2f 2a 0a 20 2a 20 54 68 69 73 20 63 6f 64 65 20 69 73 20 66 6f 72 20 49 6e 74 65 72 6e 61 6c 20 53 61 6c 65 73 66 6f 72 63 65 20 75 73 65 20 6f 6e 6c 79 2c 20 61 6e 64 20 73 75 62 6a 65 63 74 20 74 6f 20 63 68 61 6e 67 65 20 77 69 74 68 6f 75 74 20 6e 6f 74 69 63 65 2e 0a 20 2a 20 43 75 73 74 6f 6d 65 72 73 20 73 68 6f 75 6c 64 6e 27 74 20 72 65 66 65 72 65 6e 63 65 20 74 68 69 73 20 66 69 6c 65 20 69 6e 20 61 6e 79 20 77 65 62 20 70 61 67 65 73 2e 0a 20 2a 2f 0a 2e 43 75 73 74 6f 6d 31 31 54 61 62 20 2e 70 72 69 6d 61 72 79 50 61 6c 65 74 74 65 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 43 75 73 74 6f 6d 31 31 42 6c 6f 63 6b 20 2e 70 72 69 6d 61 72 79 50 61 6c 65 74 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c Data Ascii: 3d8b/* * This code is for Internal Salesforce use only, and subject to change without notice. * Customers shouldn't reference this file in any web pages. */.Custom11Tab .primaryPalette,.individualPalette .Custom11Block .primaryPalette{background-col
2024-04-18 14:44:03 UTC	16384	IN	Data Raw: 62 65 63 31 7d 2e 43 75 73 74 6f 6d 32 30 54 61 62 20 2e 62 67 64 50 61 6c 65 74 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 61 61 62 61 62 7d 2e 43 75 73 74 6f 6d 32 30 54 61 62 20 2e 62 72 64 50 61 6c 65 74 74 65 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 32 61 61 62 61 62 7d 2e 43 75 73 74 6f 6d 32 30 54 61 62 20 2e 6c 69 73 74 56 69 65 77 70 6f 72 74 20 2e 73 75 62 4e 61 76 20 2e 6c 69 6e 6b 42 61 72 2c 2e 43 75 73 74 6f 6d 32 30 54 61 62 20 2e 6d 43 6f 6d 70 6f 6e 65 6e 74 20 2e 63 48 65 61 64 65 72 2c 2e 43 75 73 74 6f 6d 32 30 54 61 62 20 2e 67 65 6e 65 72 69 63 54 61 62 6c 65 2c 2e 43 75 73 74 6f 6d 32 30 54 61 62 20 2e 62 53 75 62 42 6c 6f 63 6b 2c 2e 43 75 73 74 6f 6d 32 30 54 61 62 20 2e 62 50 61 67 65 42 6c Data Ascii: bec1}.Custom20Tab .bgdPalette{background-color:#2aabab}.Custom20Tab .brdPalette{border-top-color:#2aabab}.Custom20Tab .listViewport .subNav .linkBar,.Custom20Tab .mComponent .cHeader,.Custom20Tab .genericTable,.Custom20Tab .bSubBlock,.Custom20Tab .bPageBl
2024-04-18 14:44:03 UTC	16384	IN	Data Raw: 35 42 6c 6f 63 6b 20 2e 73 65 63 6f 6e 64 61 72 79 50 61 6c 65 74 74 65 20 2e 70 62 48 65 61 64 65 72 2c 2e 62 6f 64 79 44 69 76 20 2e 68 6f 76 65 72 44 65 74 61 69 6c 20 2e 43 75 73 74 6f 6d 34 35 42 6c 6f 63 6b 20 2e 73 65 63 6f 6e 64 61 72 79 50 61 6c 65 74 74 65 20 2e 70 62 48 65 61 64 65 72 2c 2e 6c 6f 6f 6b 75 70 48 6f 76 65 72 44 65 74 61 69 6c 20 2e 43 75 73 74 6f 6d 34 35 42 6c 6f 63 6b 20 2e 73 65 63 6f 6e 64 61 72 79 50 61 6c 65 74 74 65 20 2e 70 62 48 65 61 64 65 72 2c 2e 63 68 61 74 74 65 72 48 6f 76 65 72 20 2e 43 75 73 74 6f 6d 34 35 42 6c 6f 63 6b 20 2e 73 65 63 6f 6e 64 61 72 79 50 61 6c 65 74 74 65 20 2e 70 62 48 65 61 64 65 72 2c 2e 63 68 61 74 74 65 72 48 6f 76 65 72 20 2e 43 75 73 74 6f 6d 34 35 42 6c 6f 63 6b 20 2e 73 65 63 6f 6e 64 Data Ascii: 5Block .secondaryPalette .pbHeader,.bodyDiv .hoverDetail .Custom45Block .secondaryPalette .pbHeader,.lookupHoverDetail .Custom45Block .secondaryPalette .pbHeader,.chatterHover .Custom45Block .secondaryPalette .pbHeader,.chatterHover .Custom45Block .second
2024-04-18 14:44:03 UTC	3587	IN	Data Raw: 2d 34 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 7d 2e 62 52 65 6c 61 74 65 64 4c 69 73 74 20 2e 43 75 73 74 6f 6d 39 42 6c 6f 63 6b 20 2e 70 62 54 69 74 6c 65 20 68 33 7b 6d 61 72 67 69 6e 3a 33 70 78 20 30 20 30 20 32 37 70 78 7d 2e 43 75 73 74 6f 6d 39 31 54 61 62 20 2e 70 72 69 6d 61 72 79 50 61 6c 65 74 74 65 2c 2e 69 6e 64 69 76 69 64 75 61 6c 50 61 6c 65 74 74 65 20 2e 43 75 73 74 6f 6d 39 31 42 6c 6f 63 6b 20 2e 70 72 69 6d 61 72 79 50 61 6c 65 74 74 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 38 32 37 35 36 36 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 38 32 37 35 36 36 7d 2e 43 75 73 74 6f 6d 39 31 54 61 62 20 2e 73 65 63 6f 6e 64 61 72 79 50 61 6c 65 74 74 65 2c 2e 69 6e Data Ascii: -4px;margin-left:5px;display:inline}.bRelatedList .Custom9Block .pbTitle h3{margin:3px 0 0 27px}.Custom91Tab .primaryPalette,.individualPalette .Custom91Block .primaryPalette{background-color:#827566;border-color:#827566}.Custom91Tab .secondaryPalette,.in

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.17	49714	15.161.0.134	443	4472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:02 UTC	802	OUT	GET /sCSS/60.0/sprites/1710411415000/Theme3/00D3X0000047cTS/0057U000001A9O2/gc/dCustom1.css HTTP/1.1 Host: goldengoose.my.salesforce-sites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://goldengoose.my.salesforce-sites.com/GGDBchat/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
2024-04-18 14:44:02 UTC	598	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 14:44:02 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: private,max-age=3888000 Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Type: text/css P3P: CP="CUR OTR STA" Expires: Sun, 02 Jun 2024 14:44:02 GMT Last-Modified: Thu, 14 Mar 2024 10:16:55 GMT Vary: Accept-Encoding Content-Length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.17	49717	15.161.0.134	443	4472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:03 UTC	787	OUT	GET /GGDBchat/sCSS/60.0/sprites/1705602481000/Theme3/default/gc/extended.css HTTP/1.1 Host: goldengoose.my.salesforce-sites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://goldengoose.my.salesforce-sites.com/GGDBchat/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
2024-04-18 14:44:04 UTC	716	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 14:44:03 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: origin-when-cross-origin Cache-Control: private,max-age=3888000 Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Type: text/css P3P: CP="CUR OTR STA" Expires: Sun, 02 Jun 2024 14:44:03 GMT Last-Modified: Thu, 18 Jan 2024 18:28:01 GMT Vary: Accept-Encoding connection: close Transfer-Encoding: chunked
2024-04-18 14:44:04 UTC	15668	IN	Data Raw: 31 33 64 31 37 0d 0a 2f 2a 0a 20 2a 20 54 68 69 73 20 63 6f 64 65 20 69 73 20 66 6f 72 20 49 6e 74 65 72 6e 61 6c 20 53 61 6c 65 73 66 6f 72 63 65 20 75 73 65 20 6f 6e 6c 79 2c 20 61 6e 64 20 73 75 62 6a 65 63 74 20 74 6f 20 63 68 61 6e 67 65 20 77 69 74 68 6f 75 74 20 6e 6f 74 69 63 65 2e 0a 20 2a 20 43 75 73 74 6f 6d 65 72 73 20 73 68 6f 75 6c 64 6e 27 74 20 72 65 66 65 72 65 6e 63 65 20 74 68 69 73 20 66 69 6c 65 20 69 6e 20 61 6e 79 20 77 65 62 20 70 61 67 65 73 2e 0a 20 2a 2f 0a 61 7b 63 6f 6c 6f 72 3a 23 33 33 33 34 33 35 7d 61 2e 6e 61 76 53 6b 69 70 4c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 61 2e 6e 61 76 53 6b 69 70 4c 69 6e 6b 3a 66 6f 63 75 73 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 3b 63 6f 6c 6f 72 Data Ascii: 13d17/* * This code is for Internal Salesforce use only, and subject to change without notice. * Customers shouldn't reference this file in any web pages. */a{color:#333435}a.navSkipLink{color:#fff}a.navSkipLink:focus{text-decoration:underline;color
2024-04-18 14:44:04 UTC	16384	IN	Data Raw: 67 65 73 20 2e 6d 73 67 43 6f 6e 74 65 6e 74 20 2e 68 69 67 68 49 6d 70 6f 72 74 61 6e 63 65 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 6d 65 73 73 61 67 65 73 20 2e 68 61 73 42 75 74 74 6f 6e 73 20 2e 61 63 74 69 6f 6e 4c 69 6e 6b 2c 2e 6d 65 73 73 61 67 65 73 20 2e 6d 73 67 43 6f 6e 74 65 6e 74 20 2e 74 65 78 74 4f 6e 6c 79 2e 6c 6f 77 49 6d 70 6f 72 74 61 6e 63 65 7b 63 6f 6c 6f 72 3a 23 64 30 66 34 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 39 35 65 6d 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 70 68 48 65 61 64 65 72 43 75 73 74 6f 6d 4c 6f 67 6f 20 2e 68 61 73 42 75 74 74 6f 6e 73 20 Data Ascii: ges .msgContent .highImportance{font-weight:bold;text-decoration:none}.messages .hasButtons .actionLink,.messages .msgContent .textOnly.lowImportance{color:#d0f4ff;font-size:.95em;text-decoration:none;vertical-align:middle}.phHeaderCustomLogo .hasButtons
2024-04-18 14:44:04 UTC	16384	IN	Data Raw: 6c 69 6e 6b 73 20 61 2c 62 6f 64 79 20 2e 62 50 61 67 65 54 69 74 6c 65 20 2e 70 74 42 6f 64 79 20 2e 6c 69 6e 6b 73 20 2e 63 6f 6e 66 69 67 4c 69 6e 6b 73 2c 62 6f 64 79 20 2e 62 50 61 67 65 54 69 74 6c 65 20 2e 70 74 42 6f 64 79 20 2e 6c 69 6e 6b 73 20 2e 68 65 6c 70 4c 69 6e 6b 2c 62 6f 64 79 20 2e 62 50 61 67 65 54 69 74 6c 65 20 2e 70 74 42 6f 64 79 20 2e 6c 69 6e 6b 73 20 73 70 61 6e 7b 63 6f 6c 6f 72 3a 23 30 31 35 62 61 37 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 62 6f 64 79 20 2e 62 50 61 67 65 54 69 74 6c 65 20 2e 70 74 42 6f 64 79 20 2e 6c 69 6e 6b 73 20 61 5b 63 6c 61 73 73 5d 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 62 6f 64 79 2e 64 65 74 61 69 6c 50 61 67 65 Data Ascii: links a,body .bPageTitle .ptBody .links .configLinks,body .bPageTitle .ptBody .links .helpLink,body .bPageTitle .ptBody .links span{color:#015ba7;text-decoration:none}body .bPageTitle .ptBody .links a[class]:hover{text-decoration:underline}body.detailPage
2024-04-18 14:44:04 UTC	16384	IN	Data Raw: 63 6b 2e 62 50 61 67 65 42 6c 6f 63 6b 20 2e 70 62 42 6f 64 79 20 2e 70 62 53 75 62 68 65 61 64 65 72 2c 62 6f 64 79 2e 46 69 6e 64 53 69 6d 69 6c 61 72 4f 70 70 73 53 65 61 72 63 68 55 69 20 2e 62 50 61 67 65 42 6c 6f 63 6b 20 2e 70 62 42 6f 64 79 20 2e 70 62 53 75 62 68 65 61 64 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 62 6f 64 79 20 2e 62 44 65 74 61 69 6c 42 6c 6f 63 6b 2e 62 50 61 67 65 42 6c 6f 63 6b 20 2e 70 62 42 6f 64 79 20 2e 6c 61 62 65 6c 43 6f 6c 2c 62 6f 64 79 20 2e 62 44 65 74 61 69 6c 42 6c 6f 63 6b 2e 62 50 61 67 65 42 6c 6f 63 6b 20 2e 70 62 42 6f 64 79 20 2e 64 61 74 61 43 6f 6c 2c 62 6f 64 79 20 2e 62 44 65 74 61 69 6c 42 6c 6f 63 6b 2e 62 50 61 67 65 42 6c 6f 63 6b 20 2e 70 62 42 Data Ascii: ck.bPageBlock .pbBody .pbSubheader,body.FindSimilarOppsSearchUi .bPageBlock .pbBody .pbSubheader{background-color:transparent}body .bDetailBlock.bPageBlock .pbBody .labelCol,body .bDetailBlock.bPageBlock .pbBody .dataCol,body .bDetailBlock.bPageBlock .pbB
2024-04-18 14:44:04 UTC	16384	IN	Data Raw: 43 61 6c 65 6e 64 61 72 20 2e 63 61 6c 65 6e 64 61 72 54 61 62 6c 65 2c 2e 62 43 61 6c 65 6e 64 61 72 20 2e 63 61 6c 65 6e 64 61 72 42 6c 6f 63 6b 20 2e 63 61 6c 65 6e 64 61 72 44 61 79 57 65 65 6b 56 69 65 77 2c 2e 62 43 61 6c 65 6e 64 61 72 20 2e 63 61 6c 65 6e 64 61 72 4d 6f 6e 74 68 56 69 65 77 7b 62 6f 72 64 65 72 3a 30 7d 2e 6d 75 6c 74 69 75 73 65 72 43 61 6c 65 6e 64 61 72 20 2e 63 61 6c 65 6e 64 61 72 54 61 62 6c 65 2c 2e 62 4d 75 6c 74 69 75 73 65 72 43 61 6c 65 6e 64 61 72 20 2e 63 61 6c 65 6e 64 61 72 54 61 62 6c 65 2c 2e 62 43 61 6c 65 6e 64 61 72 20 2e 63 61 6c 65 6e 64 61 72 42 6c 6f 63 6b 20 2e 63 61 6c 65 6e 64 61 72 44 61 79 57 65 65 6b 56 69 65 77 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 30 64 30 64 Data Ascii: Calendar .calendarTable,.bCalendar .calendarBlock .calendarDayWeekView,.bCalendar .calendarMonthView{border:0}.multiuserCalendar .calendarTable,.bMultiuserCalendar .calendarTable,.bCalendar .calendarBlock .calendarDayWeekView{border-right:1px solid #d0d0d
2024-04-18 14:44:04 UTC	11294	IN	Data Raw: 65 33 65 35 3b 6d 61 72 67 69 6e 3a 31 38 70 78 20 30 20 37 70 78 3b 70 61 64 64 69 6e 67 3a 34 70 78 20 39 70 78 7d 62 6f 64 79 2e 63 61 6d 70 61 69 67 6e 54 61 62 20 23 66 69 6c 74 65 72 54 79 70 65 6c 2c 62 6f 64 79 2e 63 61 6d 70 61 69 67 6e 54 61 62 20 23 6d 6d 5f 66 69 6c 74 65 72 73 5f 6c 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 7d 62 6f 64 79 2e 63 61 6d 70 61 69 67 6e 54 61 62 20 23 66 69 6c 74 65 72 54 79 70 65 6c 2c 62 6f 64 79 2e 63 61 6d 70 61 69 67 6e 54 61 62 20 23 66 69 6c 74 65 72 54 79 70 65 63 7b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 62 6f 64 79 2e 63 61 6d 70 61 69 67 6e 54 61 62 20 23 66 69 6c 74 65 72 54 79 70 65 63 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 62 6f 64 79 2e 43 61 6d 70 61 Data Ascii: e3e5;margin:18px 0 7px;padding:4px 9px}body.campaignTab #filterTypel,body.campaignTab #mm_filters_l{margin-left:10px}body.campaignTab #filterTypel,body.campaignTab #filterTypec{vertical-align:middle}body.campaignTab #filterTypec{margin-left:5px}body.Campa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.17	49718	15.161.0.134	443	4472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:03 UTC	784	OUT	GET /GGDBchat/sCSS/60.0/sprites/1705602481000/Theme3/default/gc/setup.css HTTP/1.1 Host: goldengoose.my.salesforce-sites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://goldengoose.my.salesforce-sites.com/GGDBchat/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
2024-04-18 14:44:04 UTC	711	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 14:44:03 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: origin-when-cross-origin Cache-Control: private,max-age=3888000 Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Type: text/css P3P: CP="CUR OTR STA" Expires: Sun, 02 Jun 2024 14:44:03 GMT Last-Modified: Thu, 18 Jan 2024 18:28:01 GMT Vary: Accept-Encoding Content-Length: 26609 connection: close
2024-04-18 14:44:04 UTC	15673	IN	Data Raw: 2f 2a 0a 20 2a 20 54 68 69 73 20 63 6f 64 65 20 69 73 20 66 6f 72 20 49 6e 74 65 72 6e 61 6c 20 53 61 6c 65 73 66 6f 72 63 65 20 75 73 65 20 6f 6e 6c 79 2c 20 61 6e 64 20 73 75 62 6a 65 63 74 20 74 6f 20 63 68 61 6e 67 65 20 77 69 74 68 6f 75 74 20 6e 6f 74 69 63 65 2e 0a 20 2a 20 43 75 73 74 6f 6d 65 72 73 20 73 68 6f 75 6c 64 6e 27 74 20 72 65 66 65 72 65 6e 63 65 20 74 68 69 73 20 66 69 6c 65 20 69 6e 20 61 6e 79 20 77 65 62 20 70 61 67 65 73 2e 0a 20 2a 2f 0a 2e 73 79 73 41 64 6d 69 6e 54 61 62 20 2e 6f 75 74 65 72 20 74 64 2e 6f 4c 65 66 74 2c 2e 73 65 74 75 70 54 61 62 20 2e 6f 75 74 65 72 20 74 64 2e 6f 4c 65 66 74 7b 77 69 64 74 68 3a 32 33 30 70 78 7d 2e 73 65 74 75 70 54 61 62 20 2e 6f 75 74 65 72 20 2e 6f 52 69 67 68 74 2c 2e 73 79 73 41 64 6d Data Ascii: /* * This code is for Internal Salesforce use only, and subject to change without notice. * Customers shouldn't reference this file in any web pages. */.sysAdminTab .outer td.oLeft,.setupTab .outer td.oLeft{width:230px}.setupTab .outer .oRight,.sysAdm
2024-04-18 14:44:04 UTC	10936	IN	Data Raw: 62 20 2e 6f 4c 65 66 74 20 2e 6d 54 72 65 65 53 65 6c 65 63 74 69 6f 6e 20 23 41 75 74 6f 4e 75 6d 62 65 72 35 3e 2e 73 65 74 75 70 4e 61 76 74 72 65 65 20 68 32 2e 68 69 67 68 6c 69 67 68 74 2c 2e 73 65 74 75 70 54 61 62 20 2e 6f 4c 65 66 74 20 2e 6d 54 72 65 65 53 65 6c 65 63 74 69 6f 6e 20 23 41 75 74 6f 4e 75 6d 62 65 72 35 3e 69 6d 67 3a 66 69 72 73 74 2d 63 68 69 6c 64 2b 2e 73 65 74 75 70 4e 61 76 74 72 65 65 20 68 32 2e 68 69 67 68 6c 69 67 68 74 2c 2e 73 65 74 75 70 54 61 62 20 2e 6f 4c 65 66 74 20 2e 6d 54 72 65 65 53 65 6c 65 63 74 69 6f 6e 20 23 41 75 74 6f 4e 75 6d 62 65 72 35 3e 69 6d 67 3a 66 69 72 73 74 2d 63 68 69 6c 64 2b 2e 73 65 74 75 70 4e 61 76 74 72 65 65 20 68 32 2e 68 69 67 68 6c 69 67 68 74 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 Data Ascii: b .oLeft .mTreeSelection #AutoNumber5>.setupNavtree h2.highlight,.setupTab .oLeft .mTreeSelection #AutoNumber5>img:first-child+.setupNavtree h2.highlight,.setupTab .oLeft .mTreeSelection #AutoNumber5>img:first-child+.setupNavtree h2.highlight{border:1px s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.17	49719	15.161.0.134	443	4472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:03 UTC	774	OUT	GET /GGDBchat/resource/1588174741000/SiteSamples/SiteStyles.css HTTP/1.1 Host: goldengoose.my.salesforce-sites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://goldengoose.my.salesforce-sites.com/GGDBchat/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
2024-04-18 14:44:04 UTC	754	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 14:44:04 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: origin-when-cross-origin Cache-Control: public,max-age=3888000,immutable Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Expires: Sun, 02 Jun 2024 14:44:04 GMT Content-Type: text/css P3P: CP="CUR OTR STA" X-FRAME-OPTIONS: ALLOW-FROM 'self' Last-Modified: Wed, 29 Apr 2020 15:39:01 GMT Vary: Accept-Encoding Content-Length: 402 connection: close
2024-04-18 14:44:04 UTC	402	IN	Data Raw: 2e 74 6f 70 50 61 6e 65 6c 43 6f 6e 74 61 69 6e 65 72 20 7b 0a 09 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 0a 09 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0a 7d 0a 0a 2e 74 6f 70 50 61 6e 65 6c 20 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 31 30 70 78 3b 0a 7d 0a 0a 2e 74 69 74 6c 65 Data Ascii: .topPanelContainer {text-align:left;border:1px solid #ccc;}.topPanel { background-color: white; border: 1px solid #ccc; padding: 0px; margin-top: 10px; margin-bottom: 0px; margin-left: 10px; margin-right: 10px;}.title

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.17	49720	15.161.0.134	443	4472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:03 UTC	740	OUT	GET /GGDBchat/static/111213/js/perf/stub.js HTTP/1.1 Host: goldengoose.my.salesforce-sites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://goldengoose.my.salesforce-sites.com/GGDBchat/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
2024-04-18 14:44:04 UTC	731	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 14:44:04 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: origin-when-cross-origin Cache-Control: public,max-age=10368000 Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Expires: Fri, 16 Aug 2024 14:44:04 GMT Last-Modified: Thu, 18 Dec 2014 19:28:43 GMT Content-Type: application/x-javascript Accept-Ranges: bytes Vary: Accept-Encoding connection: close Transfer-Encoding: chunked
2024-04-18 14:44:04 UTC	1397	IN	Data Raw: 35 36 39 0d 0a 74 68 69 73 5b 22 50 65 72 66 22 5d 26 26 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 5b 22 50 65 72 66 22 5d 2e 65 6e 61 62 6c 65 64 7c 7c 28 66 75 6e 63 74 69 6f 6e 28 77 69 6e 64 6f 77 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 61 3d 7b 44 45 42 55 47 3a 7b 6e 61 6d 65 3a 22 44 45 42 55 47 22 2c 76 61 6c 75 65 3a 31 7d 2c 49 4e 54 45 52 4e 41 4c 3a 7b 6e 61 6d 65 3a 22 49 4e 54 45 52 4e 41 4c 22 2c 76 61 6c 75 65 3a 32 7d 2c 50 52 4f 44 55 43 54 49 4f 4e 3a 7b 6e 61 6d 65 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 76 61 6c 75 65 3a 33 7d 2c 44 49 53 41 42 4c 45 44 3a 7b 6e 61 6d 65 3a 22 44 49 53 41 42 4c 45 44 22 2c 76 61 6c 75 65 3a 34 7d 7d 3b 0a 77 69 6e 64 6f 77 2e 50 65 72 66 43 6f 6e 73 74 61 6e 74 73 3d 7b 50 41 47 45 5f Data Ascii: 569this["Perf"]&&void 0!==this["Perf"].enabled\|\|(function(window){'use strict';var a={DEBUG:{name:"DEBUG",value:1},INTERNAL:{name:"INTERNAL",value:2},PRODUCTION:{name:"PRODUCTION",value:3},DISABLED:{name:"DISABLED",value:4}};window.PerfConstants={PAGE_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.17	49722	15.161.0.134	443	4472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:04 UTC	747	OUT	GET /GGDBchat/jslibrary/1699262264248/sfdc/main.js HTTP/1.1 Host: goldengoose.my.salesforce-sites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://goldengoose.my.salesforce-sites.com/GGDBchat/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
2024-04-18 14:44:04 UTC	731	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 14:44:04 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: origin-when-cross-origin Cache-Control: public,max-age=10368000 Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Expires: Fri, 16 Aug 2024 14:44:04 GMT Last-Modified: Wed, 10 Apr 2024 05:45:28 GMT Content-Type: application/x-javascript Accept-Ranges: bytes Vary: Accept-Encoding connection: close Transfer-Encoding: chunked
2024-04-18 14:44:04 UTC	15653	IN	Data Raw: 31 33 64 30 36 0d 0a 76 61 72 20 49 6e 6c 69 6e 65 45 64 69 74 53 74 61 74 65 20 3d 20 7b 22 45 44 49 54 22 3a 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 69 6e 6c 69 6e 65 45 64 69 74 57 72 69 74 65 22 2c 22 64 69 73 70 6c 61 79 22 3a 74 72 75 65 7d 2c 22 4e 4f 4e 45 22 3a 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 22 2c 22 64 69 73 70 6c 61 79 22 3a 66 61 6c 73 65 7d 2c 22 50 4f 53 54 4f 4e 4c 59 22 3a 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 22 2c 22 64 69 73 70 6c 61 79 22 3a 66 61 6c 73 65 7d 2c 22 52 45 41 44 4f 4e 4c 59 22 3a 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 69 6e 6c 69 6e 65 45 64 69 74 4c 6f 63 6b 22 2c 22 64 69 73 70 6c 61 79 22 3a 74 72 75 65 7d 7d 3b 0a 76 61 72 20 43 6f 6c 75 6d 6e 54 79 70 65 20 3d 20 7b 22 4e 41 4d 45 53 50 41 43 45 22 3a 7b 22 Data Ascii: 13d06var InlineEditState = {"EDIT":{"cssClass":"inlineEditWrite","display":true},"NONE":{"cssClass":"","display":false},"POSTONLY":{"cssClass":"","display":false},"READONLY":{"cssClass":"inlineEditLock","display":true}};var ColumnType = {"NAMESPACE":{"
2024-04-18 14:44:04 UTC	16384	IN	Data Raw: 6e 20 43 6f 6e 73 6f 6c 65 53 69 64 65 62 61 72 4e 75 6d 62 65 72 46 69 65 6c 64 3b 7d 2c 22 69 6e 6c 69 6e 65 45 64 69 74 46 69 65 6c 64 4f 62 6a 65 63 74 22 3a 22 4e 75 6d 62 65 72 46 69 65 6c 64 22 2c 22 69 6e 6c 69 6e 65 45 64 69 74 61 62 6c 65 22 3a 74 72 75 65 2c 22 69 73 43 6f 6d 70 6f 6e 64 22 3a 66 61 6c 73 65 2c 22 63 6f 6d 70 61 72 61 62 6c 65 44 61 74 61 74 79 70 65 73 22 3a 5b 22 50 22 2c 22 4e 22 5d 2c 22 69 73 4e 75 6d 62 65 72 22 3a 74 72 75 65 2c 22 64 61 74 61 74 79 70 65 4c 65 74 74 65 72 22 3a 22 4e 22 2c 22 6e 65 65 64 73 4c 6f 6f 6b 75 70 22 3a 66 61 6c 73 65 2c 22 69 73 44 61 74 65 22 3a 66 61 6c 73 65 2c 22 69 6e 6c 69 6e 65 45 64 69 74 46 69 65 6c 64 43 6f 6e 73 74 72 75 63 74 6f 72 22 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: n ConsoleSidebarNumberField;},"inlineEditFieldObject":"NumberField","inlineEditable":true,"isCompond":false,"comparableDatatypes":["P","N"],"isNumber":true,"datatypeLetter":"N","needsLookup":false,"isDate":false,"inlineEditFieldConstructor":function(){ret
2024-04-18 14:44:05 UTC	16384	IN	Data Raw: 65 6e 67 74 68 3b 66 6f 72 28 62 3d 30 3b 62 3c 61 3b 62 2b 2b 29 64 5b 62 5d 2e 6e 6f 64 65 4e 61 6d 65 3d 3d 73 74 72 54 61 67 4e 61 6d 65 55 70 70 65 72 26 26 63 2e 70 75 73 68 28 64 5b 62 5d 29 3b 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 20 64 7d 63 7c 7c 28 63 3d 22 2a 22 29 3b 64 3d 22 2a 22 3d 3d 63 26 26 62 3d 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 26 26 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 3f 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 3a 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 63 29 3b 63 3d 5b 5d 3b 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 5c 2d 2f 67 2c 22 5c 5c 2d 22 29 3b 76 61 72 20 65 3d 52 65 67 45 78 70 28 22 5c 5c 62 22 2b 61 2b 22 5c 5c 62 22 29 3b 61 3d 64 2e 6c 65 6e 67 74 68 3b 0a 66 6f 72 28 62 3d 30 3b 62 Data Ascii: ength;for(b=0;b<a;b++)d[b].nodeName==strTagNameUpper&&c.push(d[b]);return c}return d}c\|\|(c="");d=""==c&&b==document.body&&document.all?document.all:b.getElementsByTagName(c);c=[];a=a.replace(/\-/g,"\\-");var e=RegExp("\\b"+a+"\\b");a=d.length;for(b=0;b
2024-04-18 14:44:05 UTC	16384	IN	Data Raw: 69 3d 30 3b 69 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 69 29 7b 76 61 72 20 66 3d 61 2e 6f 70 74 69 6f 6e 73 5b 69 5d 3b 69 66 28 66 2e 73 65 6c 65 63 74 65 64 29 69 66 28 66 2e 74 65 78 74 21 3d 63 29 7b 76 61 72 20 67 3d 6e 65 77 20 4f 70 74 69 6f 6e 28 66 2e 74 65 78 74 2c 66 2e 76 61 6c 75 65 29 3b 67 2e 74 69 74 6c 65 3d 66 2e 74 69 74 6c 65 3b 30 3c 62 2e 6f 70 74 69 6f 6e 73 2e 6c 65 6e 67 74 68 26 26 62 2e 6f 70 74 69 6f 6e 73 5b 30 5d 2e 74 65 78 74 3d 3d 64 3f 28 62 2e 6f 70 74 69 6f 6e 73 5b 30 5d 3d 67 2c 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 3d 30 29 3a 28 62 2e 6f 70 74 69 6f 6e 73 5b 62 2e 6f 70 74 69 6f 6e 73 2e 6c 65 6e 67 74 68 5d 3d 67 2c 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 3d 62 2e 6f 70 74 69 6f 6e 73 2e 6c 65 6e 67 74 68 Data Ascii: i=0;i<a.length;++i){var f=a.options[i];if(f.selected)if(f.text!=c){var g=new Option(f.text,f.value);g.title=f.title;0<b.options.length&&b.options[0].text==d?(b.options[0]=g,b.selectedIndex=0):(b.options[b.options.length]=g,b.selectedIndex=b.options.length
2024-04-18 14:44:05 UTC	16384	IN	Data Raw: 73 65 74 56 69 73 28 63 2c 62 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 67 67 6c 65 44 69 73 70 6c 61 79 28 61 2c 62 29 7b 6e 75 6c 6c 21 3d 61 26 26 28 61 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 69 73 49 45 26 26 21 69 73 4f 70 65 72 61 3f 62 3f 22 62 6c 6f 63 6b 22 3a 22 6e 6f 6e 65 22 3a 62 3f 22 74 61 62 6c 65 2d 72 6f 77 22 3a 22 6e 6f 6e 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 74 6f 67 67 6c 65 44 69 73 70 6c 61 79 57 69 74 68 44 69 73 70 6c 61 79 54 79 70 65 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 64 26 26 28 62 7c 7c 28 62 3d 22 62 6c 6f 63 6b 22 29 2c 63 3f 22 6e 6f 6e 65 22 3d 3d 64 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3f 53 66 64 63 2e 45 66 66 65 63 Data Ascii: setVis(c,b)}}function toggleDisplay(a,b){null!=a&&(a.style.display=isIE&&!isOpera?b?"block":"none":b?"table-row":"none")}function toggleDisplayWithDisplayType(a,b,c){var d=document.getElementById(a);d&&(b\|\|(b="block"),c?"none"==d.style.display?Sfdc.Effec
2024-04-18 14:44:05 UTC	16384	IN	Data Raw: 4c 4f 4f 4b 55 50 22 2c 70 4f 50 3a 22 63 72 69 74 6f 70 22 2c 70 56 41 4c 3a 22 70 56 41 4c 22 2c 70 56 61 6c 3a 22 70 42 4c 41 4e 4b 22 7d 2c 43 72 74 43 6f 6e 73 74 61 6e 74 73 3d 7b 4d 41 58 5f 4f 42 4a 45 43 54 53 3a 34 2c 4f 42 4a 45 43 54 5f 50 52 45 46 49 58 3a 22 6f 22 2c 0a 50 49 43 4b 4c 49 53 54 5f 56 41 4c 55 45 5f 49 44 5f 53 45 50 41 52 41 54 4f 52 3a 22 7c 22 2c 50 49 43 4b 4c 49 53 54 5f 56 41 4c 55 45 5f 54 41 42 4c 45 5f 46 49 45 4c 44 5f 53 45 50 41 52 41 54 4f 52 3a 22 2e 22 7d 2c 43 72 74 4c 61 79 6f 75 74 45 6c 65 6d 65 6e 74 3d 7b 41 43 54 49 4f 4e 52 45 46 3a 22 61 63 74 69 6f 6e 52 65 66 22 2c 41 43 54 49 4f 4e 52 45 46 5f 4e 41 4d 45 3a 22 6e 61 6d 65 22 2c 41 43 54 49 4f 4e 52 45 46 5f 4f 52 44 45 52 3a 22 6f 72 64 65 72 22 2c Data Ascii: LOOKUP",pOP:"critop",pVAL:"pVAL",pVal:"pBLANK"},CrtConstants={MAX_OBJECTS:4,OBJECT_PREFIX:"o",PICKLIST_VALUE_ID_SEPARATOR:"\|",PICKLIST_VALUE_TABLE_FIELD_SEPARATOR:"."},CrtLayoutElement={ACTIONREF:"actionRef",ACTIONREF_NAME:"name",ACTIONREF_ORDER:"order",
2024-04-18 14:44:05 UTC	16384	IN	Data Raw: 22 2c 53 55 43 43 45 53 53 3a 22 73 75 63 63 65 73 73 22 2c 56 41 4c 49 44 41 54 49 4f 4e 5f 45 52 52 4f 52 53 3a 22 76 61 6c 69 64 61 74 69 6f 6e 45 72 72 6f 72 73 22 2c 56 46 5f 45 4e 41 42 4c 45 44 3a 22 76 69 73 75 61 6c 66 6f 72 63 65 22 7d 2c 49 6e 6c 69 6e 65 48 65 6c 70 3d 7b 43 4c 41 53 53 5f 4e 41 4d 45 3a 22 68 65 6c 70 42 75 74 74 6f 6e 22 2c 43 4c 41 53 53 5f 4e 41 4d 45 5f 48 4f 56 45 52 3a 22 68 65 6c 70 42 75 74 74 6f 6e 4f 6e 22 2c 44 49 53 50 4c 41 59 5f 44 49 56 5f 43 4c 41 53 53 3a 22 68 65 6c 70 54 65 78 74 22 2c 49 44 5f 53 55 46 46 49 58 3a 22 2d 5f 68 65 6c 70 22 2c 4f 52 42 3a 22 68 65 6c 70 4f 72 62 22 2c 53 55 46 46 49 58 5f 44 45 4c 49 4d 49 54 45 52 3a 22 2d 5f 22 7d 2c 49 6e 6c 69 6e 65 53 63 6f 6e 74 72 6f 6c 45 6c 65 6d 65 Data Ascii: ",SUCCESS:"success",VALIDATION_ERRORS:"validationErrors",VF_ENABLED:"visualforce"},InlineHelp={CLASS_NAME:"helpButton",CLASS_NAME_HOVER:"helpButtonOn",DISPLAY_DIV_CLASS:"helpText",ID_SUFFIX:"-_help",ORB:"helpOrb",SUFFIX_DELIMITER:"-_"},InlineScontrolEleme
2024-04-18 14:44:05 UTC	16384	IN	Data Raw: 72 63 68 45 6c 65 6d 65 6e 74 3d 7b 41 54 54 5f 53 45 41 52 43 48 5f 54 45 58 54 3a 22 73 65 61 72 63 68 54 65 78 74 22 2c 53 45 54 55 50 5f 53 45 41 52 43 48 5f 50 41 52 41 4d 3a 22 73 65 74 75 70 53 65 61 72 63 68 22 7d 2c 53 65 74 75 70 54 72 65 65 4e 6f 64 65 43 6f 6e 73 74 61 6e 74 73 3d 7b 43 4f 4f 4b 49 45 5f 4b 45 59 3a 22 73 65 74 75 70 6f 70 65 6e 22 7d 2c 53 69 64 65 54 61 62 50 72 65 66 65 72 65 6e 63 65 53 65 72 76 6c 65 74 3d 7b 70 43 4f 4e 46 49 47 5f 4b 45 59 3a 22 63 6f 6e 66 69 67 4b 65 79 22 2c 70 43 4f 4e 46 49 47 5f 4c 49 53 54 3a 22 63 6f 6e 66 69 67 4c 69 73 74 22 2c 70 49 53 5f 43 4f 4c 4c 41 50 53 45 44 5f 50 41 52 41 4d 3a 22 69 73 43 6f 6c 6c 61 70 73 65 64 22 2c 70 51 55 45 52 59 5f 4f 52 44 45 52 5f 50 41 52 41 4d 3a 22 74 61 Data Ascii: rchElement={ATT_SEARCH_TEXT:"searchText",SETUP_SEARCH_PARAM:"setupSearch"},SetupTreeNodeConstants={COOKIE_KEY:"setupopen"},SideTabPreferenceServlet={pCONFIG_KEY:"configKey",pCONFIG_LIST:"configList",pIS_COLLAPSED_PARAM:"isCollapsed",pQUERY_ORDER_PARAM:"ta
2024-04-18 14:44:05 UTC	16384	IN	Data Raw: 2e 73 65 74 49 74 65 6d 28 22 65 70 74 56 69 73 69 62 6c 65 22 2c 66 29 7d 65 6c 73 65 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 65 70 74 53 74 61 6d 70 22 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 2c 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 22 65 70 74 56 69 73 69 62 6c 65 22 29 7d 63 61 74 63 68 28 6c 29 7b 7d 74 68 69 73 2e 64 65 6c 65 74 65 43 6f 6f 6b 69 65 28 47 65 6e 65 72 69 63 53 66 64 63 50 61 67 65 2e 45 50 54 5f 43 4f 4f 4b 49 45 29 7d 7d 3b 0a 47 65 6e 65 72 69 63 53 66 64 63 50 61 67 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 78 65 63 75 74 65 4f 6e 42 65 66 6f 72 65 55 6e 6c 6f 61 64 51 75 65 75 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 Data Ascii: .setItem("eptVisible",f)}else document.getElementById("eptStamp").innerHTML="",window.sessionStorage.removeItem("eptVisible")}catch(l){}this.deleteCookie(GenericSfdcPage.EPT_COOKIE)}};GenericSfdcPage.prototype.executeOnBeforeUnloadQueue=function(){for(va
2024-04-18 14:44:05 UTC	16384	IN	Data Raw: 61 63 68 65 5b 63 5d 3d 21 30 29 3a 65 76 61 6c 28 61 5b 62 5d 29 7d 7d 2c 65 76 61 6c 53 63 72 69 70 74 73 55 6e 64 65 72 45 6c 65 6d 65 6e 74 57 69 74 68 53 72 63 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 62 3d 0a 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 63 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 2c 65 3d 30 3b 65 3c 62 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 66 2e 74 79 70 65 3d 62 5b 65 5d 2e 74 79 70 65 3b 69 66 Data Ascii: ache[c]=!0):eval(a[b])}},evalScriptsUnderElementWithSrc:function(a){setTimeout(function(){for(var b=a.getElementsByTagName("script"),c=document.getElementsByTagName("head")[0],e=0;e<b.length;e++){var f=document.createElement("script");f.type=b[e].type;if

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.17	49723	15.161.0.134	443	4472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:04 UTC	752	OUT	GET /GGDBchat/jslibrary/jslabels/1713387778000/en_US.js HTTP/1.1 Host: goldengoose.my.salesforce-sites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://goldengoose.my.salesforce-sites.com/GGDBchat/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
2024-04-18 14:44:05 UTC	736	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 14:44:05 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: origin-when-cross-origin Cache-Control: public,max-age=3888000 Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Type: text/javascript;charset=UTF-8 P3P: CP="CUR OTR STA" Expires: Sun, 02 Jun 2024 14:44:05 GMT Last-Modified: Wed, 17 Apr 2024 21:02:58 GMT Vary: Accept-Encoding connection: close Transfer-Encoding: chunked
2024-04-18 14:44:05 UTC	15648	IN	Data Raw: 37 64 30 61 0d 0a 4c 43 2e 6c 61 62 65 6c 73 3d 7b 27 41 63 74 69 6f 6e 42 61 72 42 75 74 74 6f 6e 73 27 3a 7b 27 41 63 74 69 6f 6e 42 61 72 48 65 6c 70 43 68 61 74 74 65 72 44 69 73 61 62 6c 65 64 27 3a 27 41 63 74 69 6f 6e 73 20 69 6e 20 74 68 69 73 20 73 65 63 74 69 6f 6e 20 61 70 70 65 61 72 20 69 6e 20 4c 69 67 68 74 6e 69 6e 67 20 45 78 70 65 72 69 65 6e 63 65 20 61 6e 64 20 69 6e 20 74 68 65 20 6d 6f 62 69 6c 65 20 61 70 70 20 61 63 74 69 6f 6e 20 62 61 72 2c 20 61 6e 64 20 6d 61 79 20 61 70 70 65 61 72 20 69 6e 20 74 68 69 72 64 20 70 61 72 74 79 20 61 70 70 73 20 74 68 61 74 20 75 73 65 20 74 68 69 73 20 70 61 67 65 20 6c 61 79 6f 75 74 2e 27 2c 27 41 63 74 69 6f 6e 42 61 72 48 65 6c 70 43 68 61 74 74 65 72 45 6e 61 62 6c 65 64 4d 44 50 44 69 73 Data Ascii: 7d0aLC.labels={'ActionBarButtons':{'ActionBarHelpChatterDisabled':'Actions in this section appear in Lightning Experience and in the mobile app action bar, and may appear in third party apps that use this page layout.','ActionBarHelpChatterEnabledMDPDis
2024-04-18 14:44:05 UTC	16384	IN	Data Raw: 65 50 75 62 6c 69 63 41 6c 65 72 74 4d 65 73 73 61 67 65 27 3a 27 4d 61 6b 69 6e 67 20 74 68 69 73 20 70 6f 73 74 20 70 75 62 6c 69 63 20 6d 61 6b 65 73 20 69 74 20 76 69 73 69 62 6c 65 20 74 6f 20 65 78 74 65 72 6e 61 6c 20 75 73 65 72 73 20 77 69 74 68 20 61 63 63 65 73 73 20 74 6f 20 74 68 65 20 63 61 73 65 2c 20 61 6e 64 20 6d 61 79 20 6e 6f 74 69 66 79 20 74 68 65 20 63 61 73 65 20 63 6f 6e 74 61 63 74 20 62 79 20 65 6d 61 69 6c 2e 27 2c 27 4d 69 73 73 69 6e 67 53 75 62 6a 65 63 74 27 3a 27 4d 69 73 73 69 6e 67 20 53 75 62 6a 65 63 74 27 2c 27 4d 69 73 73 69 6e 67 54 6f 27 3a 27 4d 69 73 73 69 6e 67 20 54 6f 20 66 69 65 6c 64 27 2c 27 65 6d 61 69 6c 53 77 69 74 63 68 4f 70 74 69 6f 6e 73 4d 69 6e 75 73 41 6c 74 27 3a 27 53 68 6f 77 20 66 65 77 65 72 Data Ascii: ePublicAlertMessage':'Making this post public makes it visible to external users with access to the case, and may notify the case contact by email.','MissingSubject':'Missing Subject','MissingTo':'Missing To field','emailSwitchOptionsMinusAlt':'Show fewer
2024-04-18 14:44:05 UTC	16384	IN	Data Raw: 65 73 73 69 6f 6e 45 78 70 69 72 65 64 46 6f 72 52 65 70 6c 79 27 3a 27 28 59 6f 75 20 6d 61 79 20 77 61 6e 74 20 74 6f 20 63 6f 70 79 20 61 6e 79 20 75 6e 73 68 61 72 65 64 20 72 65 70 6c 69 65 73 20 74 6f 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 5c 27 73 20 63 6c 69 70 62 6f 61 72 64 20 66 69 72 73 74 2e 29 27 2c 27 54 6f 74 61 6c 50 6f 73 74 73 27 3a 27 54 6f 74 61 6c 20 50 6f 73 74 73 27 2c 27 55 6e 66 6f 6c 6c 6f 77 27 3a 27 55 6e 66 6f 6c 6c 6f 77 27 2c 27 55 6e 66 6f 6c 6c 6f 77 54 69 74 6c 65 27 3a 27 55 6e 66 6f 6c 6c 6f 77 20 74 68 69 73 20 71 75 65 73 74 69 6f 6e 20 74 6f 20 73 74 6f 70 20 72 65 63 65 69 76 69 6e 67 20 65 6d 61 69 6c 20 75 70 64 61 74 65 73 27 2c 27 65 72 72 6f 72 45 6d 70 74 79 51 75 65 73 74 69 6f 6e 27 3a 27 59 6f 75 20 68 Data Ascii: essionExpiredForReply':'(You may want to copy any unshared replies to your computer\'s clipboard first.)','TotalPosts':'Total Posts','Unfollow':'Unfollow','UnfollowTitle':'Unfollow this question to stop receiving email updates','errorEmptyQuestion':'You h
2024-04-18 14:44:05 UTC	16384	IN	Data Raw: 33 43 62 5c 75 30 30 33 45 47 72 6f 75 70 69 6e 67 20 31 5c 75 30 30 33 43 2f 62 5c 75 30 30 33 45 3a 27 2c 27 67 72 6f 75 70 69 6e 67 53 75 6d 6d 61 72 79 4c 65 76 65 6c 32 27 3a 27 5c 75 30 30 33 43 62 5c 75 30 30 33 45 47 72 6f 75 70 69 6e 67 20 32 5c 75 30 30 33 43 2f 62 5c 75 30 30 33 45 3a 27 2c 27 67 72 6f 75 70 69 6e 67 53 75 6d 6d 61 72 79 4c 65 76 65 6c 33 27 3a 27 5c 75 30 30 33 43 62 5c 75 30 30 33 45 47 72 6f 75 70 69 6e 67 20 33 5c 75 30 30 33 43 2f 62 5c 75 30 30 33 45 3a 27 2c 27 69 6e 73 65 72 74 46 75 6e 63 74 69 6f 6e 27 3a 27 5c 75 30 30 33 43 20 49 6e 73 65 72 74 27 2c 27 69 6e 76 61 6c 69 64 42 6c 6f 63 6b 54 69 74 6c 65 27 3a 27 54 68 65 72 65 20 69 73 20 6e 6f 20 62 6c 6f 63 6b 20 77 69 74 68 20 74 68 69 73 20 74 69 74 6c 65 3a 20 Data Ascii: 3Cb\u003EGrouping 1\u003C/b\u003E:','groupingSummaryLevel2':'\u003Cb\u003EGrouping 2\u003C/b\u003E:','groupingSummaryLevel3':'\u003Cb\u003EGrouping 3\u003C/b\u003E:','insertFunction':'\u003C Insert','invalidBlockTitle':'There is no block with this title:
2024-04-18 14:44:05 UTC	16384	IN	Data Raw: 61 6e 63 65 6c 53 61 76 65 27 3a 27 43 61 6e 63 65 6c 20 53 61 76 65 20 28 43 61 6e 63 65 6c 73 20 61 6c 6c 20 64 65 70 6c 6f 79 6d 65 6e 74 73 29 27 2c 27 43 68 61 6e 67 65 4c 6f 67 4c 65 76 65 6c 73 27 3a 27 43 68 61 6e 67 65 20 4c 6f 67 20 4c 65 76 65 6c 73 2e 2e 2e 27 2c 27 43 68 65 63 6b 70 6f 69 6e 74 4c 6f 63 61 74 69 6f 6e 73 27 3a 27 43 68 65 63 6b 70 6f 69 6e 74 20 4c 6f 63 61 74 69 6f 6e 73 27 2c 27 43 68 65 63 6b 70 6f 69 6e 74 50 61 6e 65 6c 27 3a 27 43 68 65 63 6b 70 6f 69 6e 74 20 52 65 73 75 6c 74 73 20 50 61 6e 65 6c 27 2c 27 43 6f 6d 70 6f 6e 65 6e 74 4c 69 62 72 61 72 79 27 3a 27 4c 69 67 68 74 6e 69 6e 67 20 43 6f 6d 70 6f 6e 65 6e 74 20 4c 69 62 72 61 72 79 27 2c 27 44 65 62 75 67 27 3a 27 44 65 62 75 67 27 2c 27 44 69 73 61 62 6c 65 Data Ascii: ancelSave':'Cancel Save (Cancels all deployments)','ChangeLogLevels':'Change Log Levels...','CheckpointLocations':'Checkpoint Locations','CheckpointPanel':'Checkpoint Results Panel','ComponentLibrary':'Lightning Component Library','Debug':'Debug','Disable
2024-04-18 14:44:05 UTC	16384	IN	Data Raw: 72 6f 75 70 2e 27 2c 27 45 64 69 74 43 6f 6d 6d 65 6e 74 54 69 74 6c 65 27 3a 27 45 64 69 74 20 43 6f 6d 6d 65 6e 74 27 2c 27 46 65 65 64 43 6f 6e 76 65 72 73 61 74 69 6f 6e 44 65 6c 65 74 65 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 27 3a 27 41 72 65 20 79 6f 75 20 73 75 72 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 64 65 6c 65 74 65 20 74 68 69 73 20 70 6f 73 74 20 61 6e 64 20 69 74 73 20 63 6f 6d 6d 65 6e 74 73 3f 27 2c 27 46 65 65 64 46 61 76 6f 72 69 74 65 44 65 6c 65 74 65 41 6c 65 72 74 27 3a 27 41 72 65 20 79 6f 75 20 73 75 72 65 20 79 6f 75 20 77 61 6e 74 20 74 6f 20 72 65 6d 6f 76 65 20 7b 30 7d 20 66 72 6f 6d 20 79 6f 75 72 20 43 68 61 74 74 65 72 20 66 61 76 6f 72 69 74 65 73 3f 27 2c 27 46 65 65 64 50 6f 73 74 42 6f 6f 6b 6d 61 72 6b 54 6f 6f 6c 74 Data Ascii: roup.','EditCommentTitle':'Edit Comment','FeedConversationDeleteConfirmation':'Are you sure you want to delete this post and its comments?','FeedFavoriteDeleteAlert':'Are you sure you want to remove {0} from your Chatter favorites?','FeedPostBookmarkToolt
2024-04-18 14:44:05 UTC	16384	IN	Data Raw: 69 6d 69 74 27 3a 27 45 78 63 65 65 64 65 64 20 74 68 65 20 6d 61 78 69 6d 75 6d 20 6e 75 6d 62 65 72 20 6f 66 20 70 75 62 6c 69 73 68 65 72 20 6c 61 79 6f 75 74 20 61 73 73 69 67 6e 6d 65 6e 74 20 63 68 61 6e 67 65 73 3a 20 7b 30 7d 2e 20 54 6f 20 63 6f 6e 74 69 6e 75 65 2c 20 73 61 76 65 20 79 6f 75 72 20 63 68 61 6e 67 65 73 20 62 65 66 6f 72 65 20 6d 61 6b 69 6e 67 20 61 64 64 69 74 69 6f 6e 61 6c 20 63 68 61 6e 67 65 73 20 74 6f 20 70 75 62 6c 69 73 68 65 72 20 6c 61 79 6f 75 74 20 61 73 73 69 67 6e 6d 65 6e 74 73 2e 27 2c 27 50 72 6f 66 69 6c 65 73 27 3a 27 50 72 6f 66 69 6c 65 73 27 2c 27 52 65 63 6f 72 64 54 79 70 65 73 27 3a 27 52 65 63 6f 72 64 20 54 79 70 65 73 27 2c 27 53 65 6c 65 63 74 4f 6e 65 27 3a 27 2d 2d 20 53 65 6c 65 63 74 20 50 75 62 Data Ascii: imit':'Exceeded the maximum number of publisher layout assignment changes: {0}. To continue, save your changes before making additional changes to publisher layout assignments.','Profiles':'Profiles','RecordTypes':'Record Types','SelectOne':'-- Select Pub
2024-04-18 14:44:05 UTC	16384	IN	Data Raw: 6d 20 6c 65 6e 67 74 68 20 6f 66 20 74 72 61 6e 73 6c 61 74 69 6f 6e 73 20 66 6f 72 20 74 68 69 73 20 73 65 74 75 70 20 63 6f 6d 70 6f 6e 65 6e 74 20 69 73 20 7b 30 7d 27 2c 27 6e 6f 4e 6f 64 65 53 65 6c 65 63 74 65 64 27 3a 27 4e 6f 20 69 74 65 6d 20 73 65 6c 65 63 74 65 64 27 2c 27 6f 66 27 3a 27 6f 66 27 2c 27 6f 75 74 4f 66 44 61 74 65 27 3a 27 4f 75 74 20 6f 66 20 44 61 74 65 27 2c 27 72 65 71 75 65 73 74 54 6f 6f 42 69 67 27 3a 27 59 6f 75 72 20 72 65 71 75 65 73 74 20 63 61 6e 6e 6f 74 20 62 65 20 63 6f 6d 70 6c 65 74 65 64 20 66 6f 72 20 74 68 69 73 20 73 65 74 75 70 20 63 6f 6d 70 6f 6e 65 6e 74 2e 20 57 65 20 61 72 65 20 64 69 73 70 6c 61 79 69 6e 67 20 6f 6e 6c 79 20 79 6f 75 72 20 73 61 6c 65 73 66 6f 72 63 65 2e 63 6f 6d 20 73 74 61 6e 64 61 Data Ascii: m length of translations for this setup component is {0}','noNodeSelected':'No item selected','of':'of','outOfDate':'Out of Date','requestTooBig':'Your request cannot be completed for this setup component. We are displaying only your salesforce.com standa
2024-04-18 14:44:05 UTC	16384	IN	Data Raw: 2c 27 56 69 73 69 74 6f 72 4e 6f 4e 61 6d 65 27 3a 27 56 69 73 69 74 6f 72 27 7d 2c 27 4c 69 76 65 43 68 61 74 41 64 64 54 6f 54 72 61 6e 73 63 72 69 70 74 27 3a 7b 27 43 72 65 61 74 65 4e 65 77 45 6e 74 69 74 79 27 3a 27 43 72 65 61 74 65 20 61 20 6e 65 77 20 7b 30 7d 20 74 6f 20 61 74 74 61 63 68 20 74 6f 20 74 68 65 20 74 72 61 6e 73 63 72 69 70 74 20 66 6f 72 20 74 68 69 73 20 63 68 61 74 27 2c 27 4e 6f 54 61 62 4f 70 65 6e 65 64 27 3a 27 4e 6f 20 6f 70 65 6e 20 7b 30 7d 27 2c 27 53 65 61 72 63 68 45 6e 74 69 74 79 27 3a 27 46 69 6e 64 20 7b 30 7d 20 74 6f 20 61 74 74 61 63 68 20 74 6f 20 74 68 65 20 74 72 61 6e 73 63 72 69 70 74 20 66 6f 72 20 74 68 69 73 20 63 68 61 74 27 2c 27 53 65 61 72 63 68 49 6e 70 75 74 27 3a 27 53 65 61 72 63 68 20 7b 30 7d Data Ascii: ,'VisitorNoName':'Visitor'},'LiveChatAddToTranscript':{'CreateNewEntity':'Create a new {0} to attach to the transcript for this chat','NoTabOpened':'No open {0}','SearchEntity':'Find {0} to attach to the transcript for this chat','SearchInput':'Search {0}
2024-04-18 14:44:05 UTC	16384	IN	Data Raw: 65 73 27 3a 27 54 65 73 74 20 43 6c 61 73 73 65 73 27 2c 27 54 65 73 74 43 6c 61 73 73 65 73 52 75 6e 50 6c 75 72 61 6c 27 3a 27 74 65 73 74 20 63 6c 61 73 73 65 73 20 72 75 6e 27 2c 27 54 65 73 74 43 6c 61 73 73 65 73 52 75 6e 53 69 6e 67 75 6c 61 72 27 3a 27 74 65 73 74 20 63 6c 61 73 73 20 72 75 6e 27 2c 27 54 69 6d 65 27 3a 27 54 69 6d 65 20 53 74 61 72 74 65 64 27 2c 27 64 69 73 61 62 6c 65 50 61 72 61 6c 6c 65 6c 41 70 65 78 54 65 73 74 69 6e 67 27 3a 27 44 69 73 61 62 6c 65 20 50 61 72 61 6c 6c 65 6c 20 41 70 65 78 20 54 65 73 74 69 6e 67 27 2c 27 64 69 73 61 62 6c 65 50 61 72 61 6c 6c 65 6c 41 70 65 78 54 65 73 74 69 6e 67 5f 64 65 73 63 27 3a 27 45 78 65 63 75 74 65 73 20 74 65 73 74 20 6d 65 74 68 6f 64 73 20 6f 6e 65 20 61 74 20 61 20 74 69 6d Data Ascii: es':'Test Classes','TestClassesRunPlural':'test classes run','TestClassesRunSingular':'test class run','Time':'Time Started','disableParallelApexTesting':'Disable Parallel Apex Testing','disableParallelApexTesting_desc':'Executes test methods one at a tim

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.17	49724	15.161.0.134	443	4472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:04 UTC	819	OUT	GET /GGDBchat/resource/1588174741000/SiteSamples/img/clock.png HTTP/1.1 Host: goldengoose.my.salesforce-sites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://goldengoose.my.salesforce-sites.com/GGDBchat/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
2024-04-18 14:44:05 UTC	733	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 14:44:05 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: origin-when-cross-origin Cache-Control: public,max-age=3888000,immutable Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Expires: Sun, 02 Jun 2024 14:44:05 GMT Content-Type: image/png P3P: CP="CUR OTR STA" X-FRAME-OPTIONS: ALLOW-FROM 'self' Last-Modified: Wed, 29 Apr 2020 15:39:01 GMT Content-Length: 4681 connection: close
2024-04-18 14:44:05 UTC	4681	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8a 00 00 00 7d 08 02 00 00 00 f2 72 6c 92 00 00 12 10 49 44 41 54 78 01 ec d8 8b 6e da 3c 18 c6 f1 dc ff d5 f5 c0 68 0b 2d 85 31 06 25 25 90 d8 39 c4 f6 fb e6 7b e2 2e 42 e8 9b 36 05 92 25 10 5b 7f 4d 91 31 56 e7 9f 12 a5 f5 8a 1e 0f 37 86 cd e3 78 dc 70 3c 8e 87 a9 a0 94 b5 64 15 b2 0a 38 ff b4 ed 28 db 50 f6 41 d9 96 73 bf 9c 51 bb f2 53 75 60 1d b2 89 d9 24 4c 69 41 59 c1 da 46 d8 c8 76 e1 70 3c 4c 6c 80 11 50 ba a6 64 41 f1 9c e2 05 25 4b 4a 7e 50 b2 a2 f4 27 e6 ff 64 a3 23 d6 a2 dc a1 42 62 ca 0b 52 47 a4 72 f0 69 6e fc 95 87 b2 f2 9e 48 be 93 7c 25 f9 46 f1 8c e2 f7 d6 6c a8 60 64 ca 79 44 aa 8c 4f 96 d9 e1 78 58 31 ce 1a 18 72 42 72 da 91 4d ce 65 19 9b 14 5f 44 85 49 31 89 4f 07 4b e5 e1 34 Data Ascii: PNGIHDR}rlIDATxn<h-1%%9{.B6%[M1V7xp<d8(PAsQSu`$LiAYFvp<LlPdA%KJ~P'd#BbRGrinH\|%Fl`dyDOxX1rBrMe_DI1OK4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.17	49725	15.161.0.134	443	4472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:04 UTC	821	OUT	GET /GGDBchat/resource/1588174741000/SiteSamples/img/warning.png HTTP/1.1 Host: goldengoose.my.salesforce-sites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://goldengoose.my.salesforce-sites.com/GGDBchat/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
2024-04-18 14:44:05 UTC	733	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 14:44:05 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: origin-when-cross-origin Cache-Control: public,max-age=3888000,immutable Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Expires: Sun, 02 Jun 2024 14:44:05 GMT Content-Type: image/png P3P: CP="CUR OTR STA" X-FRAME-OPTIONS: ALLOW-FROM 'self' Last-Modified: Wed, 29 Apr 2020 15:39:01 GMT Content-Length: 1767 connection: close
2024-04-18 14:44:05 UTC	1767	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 03 00 00 00 60 dc 09 b5 00 00 02 fd 50 4c 54 45 f4 a5 50 f1 f1 f1 d5 d5 d5 fa fa fa ee 91 31 b4 b5 b5 f0 f0 f0 c1 c2 c2 f4 f4 f4 ba a6 91 e6 e6 e6 f1 9c 3e d5 b0 8b f4 a1 4b e2 e2 e2 d2 d2 d2 f3 a3 4b ca ca cb ed ed ee f2 9b 45 de de de e6 61 28 dc dc dc f4 a3 4e e0 e0 e0 ba bb bb cd cd ce ec 8d 23 ec 8b 24 e6 5f 27 fc fc fc f7 f7 f7 f4 9f 4c f4 a5 4c f4 a6 4b f4 a7 4b f4 a4 4c da da da e7 e8 e8 c6 c7 c7 eb 89 23 f3 a9 4b f3 a8 4b b3 b3 b3 fd fd fd f8 f8 f8 f9 f9 f9 e8 e9 e9 e9 ea ea ef ef f0 f6 f6 f6 ea eb eb db db db d9 d9 d9 c7 c8 c8 b7 b8 b8 a5 75 3b cf cf d0 eb ec ec f1 92 45 bc 99 8c b4 af aa ea 87 20 ec 8d 2a df 70 44 eb 77 34 ef 93 32 bd a9 94 cb cb cc d0 a6 7c c9 a7 9a f4 Data Ascii: PNGIHDR00`PLTEP1>KKEa(N#$_'LLKKL#KKu;E *pDw42\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.17	49726	15.161.0.134	443	4472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:05 UTC	823	OUT	GET /GGDBchat/resource/1588174741000/SiteSamples/img/poweredby.png HTTP/1.1 Host: goldengoose.my.salesforce-sites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://goldengoose.my.salesforce-sites.com/GGDBchat/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
2024-04-18 14:44:06 UTC	732	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 14:44:06 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: origin-when-cross-origin Cache-Control: public,max-age=3888000,immutable Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Expires: Sun, 02 Jun 2024 14:44:06 GMT Content-Type: image/png P3P: CP="CUR OTR STA" X-FRAME-OPTIONS: ALLOW-FROM 'self' Last-Modified: Wed, 29 Apr 2020 15:39:01 GMT Content-Length: 984 connection: close
2024-04-18 14:44:06 UTC	984	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 88 00 00 00 25 08 03 00 00 00 ae e6 51 50 00 00 00 63 50 4c 54 45 ff ff ff 7f 7f 7f 40 40 40 00 00 00 30 30 30 ef ef ef 20 20 20 bf bf bf 50 50 50 cf cf cf df df df 10 10 10 9f 9f 9f 60 60 60 8f 8f 8f 70 70 70 af af af cf dc f0 70 97 d1 af c5 e5 40 74 c2 9f b9 e0 ef f3 fa bf d1 ea 8f ae db df e8 f5 00 46 ad 30 69 bc 7f a2 d6 60 8c cc 50 80 c7 10 52 b2 20 5d b7 42 ad 8a 03 00 00 03 30 49 44 41 54 78 01 ec 94 d1 8e 1b 21 0c 45 af 7d 31 06 0c c3 fc ff d7 b6 93 b1 a2 ee be 65 b5 55 b6 52 cf d3 1d 4c e0 60 41 f0 9f 7f 08 51 16 31 bc 1b 2b d5 ad b0 e1 dd 28 3b 30 82 78 33 93 0b 00 46 c7 9b a9 74 fc 04 26 2b 7e 04 8d 0b ef 47 44 c8 26 d3 0e d5 36 01 c0 f6 1c 8d 02 cc a6 7a 18 30 b6 6a 73 24 cf af 67 1d 76 Data Ascii: PNGIHDR%QPcPLTE@@@000 PPP```pppp@tF0i`PR ]B0IDATx!E}1eURL`AQ1+(;0x3Ft&+~GD&6z0js$gv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.17	49727	15.161.0.134	443	4472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:06 UTC	554	OUT	GET /GGDBchat/resource/1588174741000/SiteSamples/img/clock.png HTTP/1.1 Host: goldengoose.my.salesforce-sites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
2024-04-18 14:44:06 UTC	733	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 14:44:06 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: origin-when-cross-origin Cache-Control: public,max-age=3888000,immutable Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Expires: Sun, 02 Jun 2024 14:44:06 GMT Content-Type: image/png P3P: CP="CUR OTR STA" X-FRAME-OPTIONS: ALLOW-FROM 'self' Last-Modified: Wed, 29 Apr 2020 15:39:01 GMT Content-Length: 4681 connection: close
2024-04-18 14:44:06 UTC	4681	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8a 00 00 00 7d 08 02 00 00 00 f2 72 6c 92 00 00 12 10 49 44 41 54 78 01 ec d8 8b 6e da 3c 18 c6 f1 dc ff d5 f5 c0 68 0b 2d 85 31 06 25 25 90 d8 39 c4 f6 fb e6 7b e2 2e 42 e8 9b 36 05 92 25 10 5b 7f 4d 91 31 56 e7 9f 12 a5 f5 8a 1e 0f 37 86 cd e3 78 dc 70 3c 8e 87 a9 a0 94 b5 64 15 b2 0a 38 ff b4 ed 28 db 50 f6 41 d9 96 73 bf 9c 51 bb f2 53 75 60 1d b2 89 d9 24 4c 69 41 59 c1 da 46 d8 c8 76 e1 70 3c 4c 6c 80 11 50 ba a6 64 41 f1 9c e2 05 25 4b 4a 7e 50 b2 a2 f4 27 e6 ff 64 a3 23 d6 a2 dc a1 42 62 ca 0b 52 47 a4 72 f0 69 6e fc 95 87 b2 f2 9e 48 be 93 7c 25 f9 46 f1 8c e2 f7 d6 6c a8 60 64 ca 79 44 aa 8c 4f 96 d9 e1 78 58 31 ce 1a 18 72 42 72 da 91 4d ce 65 19 9b 14 5f 44 85 49 31 89 4f 07 4b e5 e1 34 Data Ascii: PNGIHDR}rlIDATxn<h-1%%9{.B6%[M1V7xp<d8(PAsQSu`$LiAYFvp<LlPdA%KJ~P'd#BbRGrinH\|%Fl`dyDOxX1rBrMe_DI1OK4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.17	49728	15.161.0.134	443	4472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:06 UTC	556	OUT	GET /GGDBchat/resource/1588174741000/SiteSamples/img/warning.png HTTP/1.1 Host: goldengoose.my.salesforce-sites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
2024-04-18 14:44:06 UTC	733	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 14:44:06 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: origin-when-cross-origin Cache-Control: public,max-age=3888000,immutable Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Expires: Sun, 02 Jun 2024 14:44:06 GMT Content-Type: image/png P3P: CP="CUR OTR STA" X-FRAME-OPTIONS: ALLOW-FROM 'self' Last-Modified: Wed, 29 Apr 2020 15:39:01 GMT Content-Length: 1767 connection: close
2024-04-18 14:44:06 UTC	1767	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 30 00 00 00 30 08 03 00 00 00 60 dc 09 b5 00 00 02 fd 50 4c 54 45 f4 a5 50 f1 f1 f1 d5 d5 d5 fa fa fa ee 91 31 b4 b5 b5 f0 f0 f0 c1 c2 c2 f4 f4 f4 ba a6 91 e6 e6 e6 f1 9c 3e d5 b0 8b f4 a1 4b e2 e2 e2 d2 d2 d2 f3 a3 4b ca ca cb ed ed ee f2 9b 45 de de de e6 61 28 dc dc dc f4 a3 4e e0 e0 e0 ba bb bb cd cd ce ec 8d 23 ec 8b 24 e6 5f 27 fc fc fc f7 f7 f7 f4 9f 4c f4 a5 4c f4 a6 4b f4 a7 4b f4 a4 4c da da da e7 e8 e8 c6 c7 c7 eb 89 23 f3 a9 4b f3 a8 4b b3 b3 b3 fd fd fd f8 f8 f8 f9 f9 f9 e8 e9 e9 e9 ea ea ef ef f0 f6 f6 f6 ea eb eb db db db d9 d9 d9 c7 c8 c8 b7 b8 b8 a5 75 3b cf cf d0 eb ec ec f1 92 45 bc 99 8c b4 af aa ea 87 20 ec 8d 2a df 70 44 eb 77 34 ef 93 32 bd a9 94 cb cb cc d0 a6 7c c9 a7 9a f4 Data Ascii: PNGIHDR00`PLTEP1>KKEa(N#$_'LLKKL#KKu;E *pDw42\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.17	49730	15.161.0.134	443	4472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:06 UTC	773	OUT	GET /favicon.ico HTTP/1.1 Host: goldengoose.my.salesforce-sites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://goldengoose.my.salesforce-sites.com/GGDBchat/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
2024-04-18 14:44:07 UTC	518	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 14:44:07 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=3888000 Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Expires: Sun, 02 Jun 2024 14:44:07 GMT Content-Type: image/x-icon connection: close Transfer-Encoding: chunked
2024-04-18 14:44:07 UTC	5438	IN	Data Raw: 31 35 33 36 0d 0a 00 00 01 00 02 00 10 10 00 00 00 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 00 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 dc 9d 00 17 dc 9d 00 5f dc 9d 00 69 dc 9d 00 27 dc 9d 00 03 ff ff ff 01 ff ff ff Data Ascii: 1536 h& ( @_i'
2024-04-18 14:44:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.17	49729	15.161.0.134	443	4472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:07 UTC	558	OUT	GET /GGDBchat/resource/1588174741000/SiteSamples/img/poweredby.png HTTP/1.1 Host: goldengoose.my.salesforce-sites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
2024-04-18 14:44:07 UTC	732	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 14:44:07 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: origin-when-cross-origin Cache-Control: public,max-age=3888000,immutable Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Expires: Sun, 02 Jun 2024 14:44:07 GMT Content-Type: image/png P3P: CP="CUR OTR STA" X-FRAME-OPTIONS: ALLOW-FROM 'self' Last-Modified: Wed, 29 Apr 2020 15:39:01 GMT Content-Length: 984 connection: close
2024-04-18 14:44:07 UTC	984	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 88 00 00 00 25 08 03 00 00 00 ae e6 51 50 00 00 00 63 50 4c 54 45 ff ff ff 7f 7f 7f 40 40 40 00 00 00 30 30 30 ef ef ef 20 20 20 bf bf bf 50 50 50 cf cf cf df df df 10 10 10 9f 9f 9f 60 60 60 8f 8f 8f 70 70 70 af af af cf dc f0 70 97 d1 af c5 e5 40 74 c2 9f b9 e0 ef f3 fa bf d1 ea 8f ae db df e8 f5 00 46 ad 30 69 bc 7f a2 d6 60 8c cc 50 80 c7 10 52 b2 20 5d b7 42 ad 8a 03 00 00 03 30 49 44 41 54 78 01 ec 94 d1 8e 1b 21 0c 45 af 7d 31 06 0c c3 fc ff d7 b6 93 b1 a2 ee be 65 b5 55 b6 52 cf d3 1d 4c e0 60 41 f0 9f 7f 08 51 16 31 bc 1b 2b d5 ad b0 e1 dd 28 3b 30 82 78 33 93 0b 00 46 c7 9b a9 74 fc 04 26 2b 7e 04 8d 0b ef 47 44 c8 26 d3 0e d5 36 01 c0 f6 1c 8d 02 cc a6 7a 18 30 b6 6a 73 24 cf af 67 1d 76 Data Ascii: PNGIHDR%QPcPLTE@@@000 PPP```pppp@tF0i`PR ]B0IDATx!E}1eURL`AQ1+(;0x3Ft&+~GD&6z0js$gv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.17	49732	15.161.0.134	443	4472	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:07 UTC	508	OUT	GET /favicon.ico HTTP/1.1 Host: goldengoose.my.salesforce-sites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CookieConsentPolicy=0:1; LSKey-c$CookieConsentPolicy=0:1; BrowserId=GLHrwf2SEe64p4lFiqtuow; BrowserId_sec=GLHrwf2SEe64p4lFiqtuow
2024-04-18 14:44:08 UTC	518	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 14:44:08 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains Cache-Control: public,max-age=3888000 Origin-Trial: AoeiQ3Ow/BnNjoZ1k2kL0ix9SXzlnjm47YFisfuVAskKVTny0NGo4CEkVQNe1OCi48F77X4EZc6G69wDDJtAlggAAABleyJvcmlnaW4iOiJodHRwczovL3NhbGVzZm9yY2Utc2l0ZXMuY29tOjQ0MyIsImZlYXR1cmUiOiJUcGNkIiwiZXhwaXJ5IjoxNzM1MzQzOTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Expires: Sun, 02 Jun 2024 14:44:08 GMT Content-Type: image/x-icon connection: close Transfer-Encoding: chunked
2024-04-18 14:44:08 UTC	5438	IN	Data Raw: 31 35 33 36 0d 0a 00 00 01 00 02 00 10 10 00 00 00 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 00 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 40 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 ff ff ff 01 dc 9d 00 17 dc 9d 00 5f dc 9d 00 69 dc 9d 00 27 dc 9d 00 03 ff ff ff 01 ff ff ff Data Ascii: 1536 h& ( @_i'
2024-04-18 14:44:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.17	49733	40.68.123.157	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:10 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=aXX2RwtUOhHvEVP&MD=7cN+z9CO HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-18 14:44:11 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 40764a4d-60d7-4e39-b842-de7b21060d38 MS-RequestId: de805f67-7492-4fb8-87b9-b7ea14ab954b MS-CV: TJV5pbHdO0ekR99P.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 18 Apr 2024 14:44:10 GMT Connection: close Content-Length: 24490
2024-04-18 14:44:11 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-18 14:44:11 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.17	49735	40.126.28.20	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:12 UTC	422	OUT	POST /RST2.srf HTTP/1.0 Connection: Keep-Alive Content-Type: application/soap+xml Accept: / User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 10.0; Win64; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729; IDCRL 24.10.0.19045.0.0; IDCRL-cfg 16.000.29743.00; App svchost.exe, 10.0.19041.1806, {DF60E2DF-88AD-4526-AE21-83D130EF0F68}) Content-Length: 4788 Host: login.live.com
2024-04-18 14:44:12 UTC	4788	OUT	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 70 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 50 61 73 73 70 6f 72 74 2f 53 6f 61 70 53 65 72 76 69 63 65 73 2f 50 50 43 52 4c 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><s:Envelope xmlns:s="http://www.w3.org/2003/05/soap-envelope" xmlns:ps="http://schemas.microsoft.com/Passport/SoapServices/PPCRL" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1
2024-04-18 14:44:12 UTC	569	IN	HTTP/1.1 200 OK Cache-Control: no-store, no-cache Pragma: no-cache Content-Type: application/soap+xml; charset=utf-8 Expires: Thu, 18 Apr 2024 14:43:12 GMT P3P: CP="DSP CUR OTPi IND OTRi ONL FIN" Referrer-Policy: strict-origin-when-cross-origin x-ms-route-info: C529_SN1 x-ms-request-id: 9c3d8a52-c5f7-4b5f-843d-029abd912a1f PPServer: PPV: 30 H: SN1PEPF0002F1AE V: 0 X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block Date: Thu, 18 Apr 2024 14:44:12 GMT Connection: close Content-Length: 11153
2024-04-18 14:44:12 UTC	11153	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 20 3f 3e 3c 53 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 53 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 33 2f 30 35 2f 73 6f 61 70 2d 65 6e 76 65 6c 6f 70 65 22 20 78 6d 6c 6e 73 3a 77 73 73 65 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 34 30 31 2d 77 73 73 2d 77 73 73 65 63 75 72 69 74 79 2d 73 65 63 65 78 74 2d 31 2e 30 2e 78 73 64 22 20 78 6d 6c 6e 73 3a 77 73 75 3d 22 68 74 74 70 3a 2f 2f 64 6f 63 73 2e 6f 61 73 69 73 2d 6f 70 65 6e 2e 6f 72 67 2f 77 73 73 2f 32 30 30 34 2f 30 31 2f 6f 61 73 69 73 2d 32 30 30 Data Ascii: <?xml version="1.0" encoding="utf-8" ?><S:Envelope xmlns:S="http://www.w3.org/2003/05/soap-envelope" xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd" xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.17	49736	204.79.197.200	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:13 UTC	2570	OUT	GET /client/config?cc=CH&setlang=en-CH HTTP/1.1 X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate Accept-Encoding: gzip, deflate X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-UserAgeClass: Unknown X-BM-Market: CH X-BM-DateFormat: dd/MM/yyyy X-Device-OSSKU: 48 X-BM-DTZ: 120 X-DeviceID: 01000A41090080B6 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-BM-Theme: 000000;0078d7 X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAWCCFmfa5H6wO9yRWL1Wc0TD6s6PeguNgO3OtsjuaZ3AEFh8JTzg3Di1VWKBLWn2kyjvq5hsKPbTODeH2wR9FXZ352ZJzkkGeqrTpCR1jXwWHTnZhxutDXXe9vYKrEnM68ONZdsKJXvPLWnAqxo3Oqn1EETAeWEpi9Aabyy4Mu01TKUn%2B8ZRIjjcl2p0D55apRsAJEaHb41rbZO8WotR4SMqp7FtVqwgSZ0sr9PO5HHfwF9gNR8IHFbUiiPdna0iCExh82VhYhIEud2kBPWocNu11y%2BJ2T%2BkIi4ugPgx6I2ks2PxcrH/xJo%2BOuGNlZ3x4Liuj47WI5%2BfJVlqaMXwfBADZgAACF%2B85OUTdex%2BqAHvIKauG55SGIp%2BRAaIgKIAHPMwqiVSMamawEkYVIKzQkyuNbbyHcrnlObiREeaINCfZP0L4cnKhAIVzCKYeNQjMSCsftopq0Rz8vtQMKIwXY0wqIDnKNe3wMALJQMwviAzVLvhnlehQsXhfbs46PoNQc/ePsA4dTh6EeBLgZPt/qD0fVQojMuDKK49kZRZuQAljZ21QE%2BZ5SfPj0XfbWZ27V7E/stlCKzzZAP0c9aj6qbkc2TA%2Bb05EPeUmVoIPSUEZ%2BXluM3qZfz%2BBi6d52rLuGtHwij12iGlfQ76lTaxpPVQws6DcXCoVHNU5yRNKiqHhXrZOxvTD2AArVxMlYFv%2BuhWDJdvn8iUyBc8mgL/q0Iq/FCIxjMzVL07ziCntU7DEzVwvfKNVgxeifoqk4LM2DR8PdZvQSIsnLkNhoM1Yao8angA3LRb1tq6jLK%2BjRhKc4L6PUu1bCK1uupICDFcYdFrK/2p/4xbrFKFGKyldD8V2rbyO8BEtPQXLAEHng2fWrU/%2BvQpeSSrhSpHONPxgFEYevSANTJezufJFWLfpHO/9L67Lvn72AE%3D%26p%3D X-Agent-DeviceId: 01000A41090080B6 X-BM-CBT: 1713451450 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 X-Device-isOptin: false Accept-language: en-GB, en, en-US X-Device-Touch: false X-Device-ClientSession: C568510DC3EC428CAE19040D3B125093 X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI Host: www.bing.com Connection: Keep-Alive Cookie: SRCHUID=V=2&GUID=C4EAB6C130004333A34B5668AE4E4D10&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=en; MUID=4590362BB5CF472B95BBEDB3112D4B7B; MUIDB=4590362BB5CF472B95BBEDB3112D4B7B
2024-04-18 14:44:13 UTC	1463	IN	HTTP/1.1 200 OK Cache-Control: private Content-Length: 2215 Content-Type: application/json; charset=utf-8 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Set-Cookie: _EDGE_S=SID=17185F8EB72064AF0A034BEBB637657F&mkt=de-ch; domain=.bing.com; path=/; HttpOnly Set-Cookie: MUIDB=4590362BB5CF472B95BBEDB3112D4B7B; expires=Tue, 13-May-2025 14:44:13 GMT; path=/; HttpOnly Set-Cookie: ANON=A=84BEA1DAAAB85FA790252CDAFFFFFFFF; domain=.bing.com; expires=Tue, 13-May-2025 14:44:13 GMT; path=/; secure; SameSite=None Set-Cookie: WLS=C=0000000000000000&N=; domain=.bing.com; path=/; secure; SameSite=None Set-Cookie: _SS=SID=17185F8EB72064AF0A034BEBB637657F; domain=.bing.com; path=/; secure; SameSite=None X-EventID: 662131bd6f964bc6aa76c971c09de054 UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 X-Cache: CONFIG_NOCACHE Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: AF2229058F8F40DB9D70CDF527B0FA9E Ref B: ATL331000103025 Ref C: 2024-04-18T14:44:13Z Date: Thu, 18 Apr 2024 14:44:12 GMT Connection: close
2024-04-18 14:44:13 UTC	2215	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 46 65 61 74 75 72 65 43 6f 6e 66 69 67 22 3a 7b 22 53 65 61 72 63 68 42 6f 78 49 62 65 61 6d 50 6f 69 6e 74 65 72 4f 6e 48 6f 76 65 72 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 68 6f 77 53 65 61 72 63 68 47 6c 79 70 68 4c 65 66 74 4f 66 53 65 61 72 63 68 42 6f 78 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 6f 78 55 73 65 53 65 61 72 63 68 49 63 6f 6e 41 74 52 65 73 74 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 75 74 74 6f 6e 55 73 65 53 65 61 72 63 68 49 63 6f 6e 22 3a 7b 22 76 61 6c 75 65 Data Ascii: {"version":1,"config":{"FeatureConfig":{"SearchBoxIbeamPointerOnHover":{"value":true,"feature":""},"ShowSearchGlyphLeftOfSearchBox":{"value":true,"feature":""},"SearchBoxUseSearchIconAtRest":{"value":false,"feature":""},"SearchButtonUseSearchIcon":{"value

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.17	49737	13.107.5.88	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:13 UTC	537	OUT	GET /ab HTTP/1.1 Host: evoke-windowsservices-tas.msedge.net Cache-Control: no-store, no-cache X-PHOTOS-CALLERID: 9NMPJ99VJBWV X-EVOKE-RING: X-WINNEXT-RING: Public X-WINNEXT-TELEMETRYLEVEL: Basic X-WINNEXT-OSVERSION: 10.0.19045.0 X-WINNEXT-APPVERSION: 1.23082.131.0 X-WINNEXT-PLATFORM: Desktop X-WINNEXT-CANTAILOR: False X-MSEDGE-CLIENTID: {c1afbad7-f7da-40f2-92f9-8846a91d69bd} X-WINNEXT-PUBDEVICEID: dbfen2nYS7HW6ON4OdOknKxxv2CCI5LJBTojzDztjwI= If-None-Match: 2056388360_-1434155563 Accept-Encoding: gzip, deflate, br
2024-04-18 14:44:13 UTC	438	IN	HTTP/1.1 200 OK Content-Length: 7285 Content-Type: application/json; charset=utf-8 ETag: -836089468_-1227991615 Strict-Transport-Security: max-age=2592000 X-Content-Type-Options: nosniff X-ExP-TrackingId: ebff2bb0-703e-43c7-86a8-3b9103682606 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: E7A53746221044579137C86A73C251E6 Ref B: ATL331000104045 Ref C: 2024-04-18T14:44:13Z Date: Thu, 18 Apr 2024 14:44:13 GMT Connection: close
2024-04-18 14:44:13 UTC	1024	IN	Data Raw: 7b 22 46 65 61 74 75 72 65 73 22 3a 5b 22 68 69 67 68 71 75 61 6c 69 74 79 63 61 70 74 75 72 65 63 22 2c 22 79 6f 61 6c 77 39 38 30 31 63 66 22 2c 22 79 6f 63 33 37 32 31 22 2c 22 61 61 74 65 73 31 32 31 22 2c 22 79 6f 63 61 6c 38 33 30 22 2c 22 65 6d 70 72 6f 37 30 32 22 2c 22 79 6f 6e 6f 6e 32 34 38 22 2c 22 63 6f 6e 74 61 63 74 73 76 32 73 79 6e 63 6f 6e 6c 79 22 2c 22 79 6f 79 70 70 31 31 37 22 2c 22 79 6f 79 70 70 35 36 31 22 2c 22 79 6f 70 68 6f 31 35 36 22 2c 22 79 70 72 6f 6d 65 6c 65 73 73 22 2c 22 79 6f 72 65 6d 37 38 32 22 2c 22 79 6f 72 65 6d 33 32 35 22 2c 22 79 6f 72 6f 6d 39 33 39 22 2c 22 79 6f 79 70 70 36 33 38 22 2c 22 79 6f 61 61 6f 77 63 34 36 63 66 22 2c 22 79 6f 35 35 36 22 2c 22 79 6f 61 61 6f 32 36 37 22 2c 22 79 6f 70 72 69 32 35 Data Ascii: {"Features":["highqualitycapturec","yoalw9801cf","yoc3721","aates121","yocal830","empro702","yonon248","contactsv2synconly","yoypp117","yoypp561","yopho156","ypromeless","yorem782","yorem325","yorom939","yoypp638","yoaaowc46cf","yo556","yoaao267","yopri25
2024-04-18 14:44:13 UTC	1024	IN	Data Raw: 2c 22 31 34 67 36 22 3a 22 61 61 74 65 73 31 32 31 22 2c 22 31 38 66 7a 22 3a 22 79 6f 63 61 6c 38 33 30 22 2c 22 31 68 6a 65 22 3a 22 65 6d 70 72 6f 37 30 32 22 2c 22 31 71 61 38 22 3a 22 79 6f 6e 6f 6e 32 34 38 22 2c 22 31 77 6d 74 22 3a 22 63 6f 6e 74 61 63 74 73 76 32 73 79 6e 63 6f 6e 6c 79 22 2c 22 32 69 77 6a 22 3a 22 79 6f 79 70 70 31 31 37 22 2c 22 32 6a 36 61 22 3a 22 79 6f 79 70 70 35 36 31 22 2c 22 32 6b 71 32 22 3a 22 79 6f 70 68 6f 31 35 36 22 2c 22 32 6c 61 64 22 3a 22 79 70 72 6f 6d 65 6c 65 73 73 22 2c 22 32 6f 63 64 22 3a 22 79 6f 72 65 6d 37 38 32 22 2c 22 32 72 65 6b 22 3a 22 79 6f 72 65 6d 33 32 35 22 2c 22 32 73 63 78 22 3a 22 79 6f 72 6f 6d 39 33 39 22 2c 22 32 74 70 33 22 3a 22 79 6f 79 70 70 36 33 38 22 2c 22 33 30 62 38 22 3a 22 Data Ascii: ,"14g6":"aates121","18fz":"yocal830","1hje":"empro702","1qa8":"yonon248","1wmt":"contactsv2synconly","2iwj":"yoypp117","2j6a":"yoypp561","2kq2":"yopho156","2lad":"ypromeless","2ocd":"yorem782","2rek":"yorem325","2scx":"yorom939","2tp3":"yoypp638","30b8":"
2024-04-18 14:44:13 UTC	1024	IN	Data Raw: 32 36 34 22 2c 22 35 39 30 71 22 3a 22 34 61 33 30 64 34 35 35 22 2c 22 35 39 67 67 22 3a 22 32 69 32 68 65 31 31 38 22 2c 22 35 39 67 6a 22 3a 22 34 64 65 35 67 35 34 32 22 2c 22 35 39 76 7a 22 3a 22 62 65 63 34 34 37 35 37 22 2c 22 35 61 39 73 22 3a 22 39 38 34 65 39 37 37 34 22 2c 22 35 61 74 6b 22 3a 22 35 35 35 64 37 39 37 38 22 2c 22 35 62 61 74 22 3a 22 65 6a 66 34 36 37 39 35 22 2c 22 35 63 70 66 22 3a 22 34 39 62 34 67 31 33 33 22 2c 22 35 63 72 73 22 3a 22 33 62 66 39 67 38 35 35 22 2c 22 35 64 77 37 22 3a 22 69 34 37 62 65 31 37 38 22 2c 22 35 65 74 36 22 3a 22 32 34 38 66 61 31 38 36 22 2c 22 35 66 6c 32 22 3a 22 68 35 31 66 30 33 34 32 22 2c 22 35 66 79 6f 22 3a 22 68 64 65 31 67 32 36 37 22 2c 22 35 66 79 71 22 3a 22 34 6a 6a 66 62 37 36 38 Data Ascii: 264","590q":"4a30d455","59gg":"2i2he118","59gj":"4de5g542","59vz":"bec44757","5a9s":"984e9774","5atk":"555d7978","5bat":"ejf46795","5cpf":"49b4g133","5crs":"3bf9g855","5dw7":"i47be178","5et6":"248fa186","5fl2":"h51f0342","5fyo":"hde1g267","5fyq":"4jjfb768
2024-04-18 14:44:13 UTC	1024	IN	Data Raw: 7d 7d 2c 7b 22 49 64 22 3a 22 59 6f 75 72 50 68 6f 6e 65 22 2c 22 50 61 72 61 6d 65 74 65 72 73 22 3a 7b 22 41 41 4f 57 43 34 36 22 3a 36 34 30 30 2c 22 41 41 4f 57 43 34 37 22 3a 37 34 30 30 2c 22 41 41 4f 57 43 36 31 22 3a 31 36 30 30 2c 22 41 41 4f 57 43 36 32 22 3a 32 36 30 30 2c 22 41 41 4f 57 43 36 33 22 3a 33 36 30 30 2c 22 41 69 72 70 6c 61 6e 65 4d 6f 64 65 53 74 61 74 75 73 22 3a 74 72 75 65 2c 22 41 75 74 6f 48 79 64 72 61 74 65 64 49 6d 61 67 65 73 43 6f 75 6e 74 22 3a 30 2c 22 43 61 6c 6c 69 6e 67 41 6c 74 42 6c 75 65 74 6f 6f 74 68 50 61 69 72 69 6e 67 45 76 65 6e 74 22 3a 74 72 75 65 2c 22 43 61 6c 6c 69 6e 67 45 78 69 74 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 43 61 6c 6c 69 6e 67 4f 53 53 65 72 76 69 63 69 6e 67 46 69 Data Ascii: }},{"Id":"YourPhone","Parameters":{"AAOWC46":6400,"AAOWC47":7400,"AAOWC61":1600,"AAOWC62":2600,"AAOWC63":3600,"AirplaneModeStatus":true,"AutoHydratedImagesCount":0,"CallingAltBluetoothPairingEvent":true,"CallingExitConfirmation":true,"CallingOSServicingFi
2024-04-18 14:44:13 UTC	1024	IN	Data Raw: 3a 74 72 75 65 2c 22 49 73 41 75 74 68 56 32 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 4d 65 64 69 61 50 61 63 6b 43 68 65 63 6b 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 43 68 61 74 46 69 6c 74 65 72 54 6f 67 67 6c 65 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 43 6f 6e 73 65 6e 74 56 32 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 43 6f 6e 76 65 72 73 61 74 69 6f 6e 56 69 65 77 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 45 6e 61 62 6c 65 48 69 64 69 6e 67 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 45 6e 61 62 6c 65 4d 75 74 69 6e 67 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 45 6e 61 62 6c 65 50 69 6e 6e 69 6e 67 22 3a 74 72 75 65 2c 22 4d 65 73 73 61 67 69 6e 67 53 65 61 72 63 68 22 3a 74 72 75 65 2c 22 Data Ascii: :true,"IsAuthV2Enabled":true,"MediaPackCheck":true,"MessagingChatFilterToggle":true,"MessagingConsentV2":true,"MessagingConversationView":true,"MessagingEnableHiding":true,"MessagingEnableMuting":true,"MessagingEnablePinning":true,"MessagingSearch":true,"
2024-04-18 14:44:13 UTC	1024	IN	Data Raw: 69 6e 67 54 6f 70 30 31 31 22 3a 74 72 75 65 2c 22 52 65 6d 6f 74 69 6e 67 54 6f 70 30 31 32 22 3a 74 72 75 65 2c 22 52 65 6d 6f 74 69 6e 67 54 6f 70 30 31 35 22 3a 74 72 75 65 2c 22 52 6f 6d 65 44 69 73 61 62 6c 65 64 22 3a 34 34 31 35 30 33 2c 22 53 65 63 75 72 65 43 6f 6e 74 65 6e 74 22 3a 74 72 75 65 2c 22 53 68 65 6c 6c 45 78 74 65 6e 64 65 64 4c 65 66 74 50 61 6e 65 22 3a 74 72 75 65 2c 22 54 65 73 74 46 65 61 74 75 72 65 32 22 3a 66 61 6c 73 65 2c 22 55 6e 69 76 65 72 73 61 6c 42 6c 75 65 74 6f 6f 74 68 50 61 69 72 69 6e 67 22 3a 74 72 75 65 2c 22 57 68 61 74 73 4e 65 77 43 4e 22 3a 74 72 75 65 2c 22 59 50 50 43 61 74 61 73 74 72 6f 70 68 69 63 45 72 72 6f 72 41 75 74 6f 52 65 73 65 74 22 3a 74 72 75 65 2c 22 59 50 50 43 6f 6e 73 65 63 75 74 69 76 Data Ascii: ingTop011":true,"RemotingTop012":true,"RemotingTop015":true,"RomeDisabled":441503,"SecureContent":true,"ShellExtendedLeftPane":true,"TestFeature2":false,"UniversalBluetoothPairing":true,"WhatsNewCN":true,"YPPCatastrophicErrorAutoReset":true,"YPPConsecutiv
2024-04-18 14:44:13 UTC	1024	IN	Data Raw: 79 6f 35 35 36 3a 33 30 39 38 36 35 35 36 3b 79 6f 61 61 6f 32 36 37 3a 33 30 34 33 34 36 37 32 3b 79 6f 70 72 69 32 35 37 3a 33 30 34 36 34 34 33 33 3b 79 6f 31 37 39 3a 33 30 34 34 35 33 31 30 3b 79 6f 69 73 61 38 36 31 3a 33 30 35 32 35 38 36 38 3b 79 6f 72 65 6d 31 34 31 3a 33 30 34 38 36 33 35 33 3b 79 6f 79 70 70 36 35 32 3a 33 30 35 31 35 34 38 33 3b 79 6f 35 32 35 3a 33 30 35 35 33 39 38 35 3b 79 6f 36 30 36 3a 33 30 35 32 37 38 35 30 3b 79 6f 6e 6f 74 36 33 33 3a 33 30 36 32 36 30 37 38 3b 79 6f 79 70 70 38 35 39 3a 33 30 36 38 37 38 35 39 3b 79 6f 69 6e 64 36 36 35 3a 33 30 35 39 35 31 36 33 3b 79 6f 64 63 67 38 33 30 3a 33 30 37 31 32 39 34 39 3b 6f 6e 6c 79 5f 74 6f 61 73 74 63 6f 6e 74 65 78 74 6d 65 6e 75 3a 33 30 36 34 38 30 38 31 3b 61 6a Data Ascii: yo556:30986556;yoaao267:30434672;yopri257:30464433;yo179:30445310;yoisa861:30525868;yorem141:30486353;yoypp652:30515483;yo525:30553985;yo606:30527850;yonot633:30626078;yoypp859:30687859;yoind665:30595163;yodcg830:30712949;only_toastcontextmenu:30648081;aj
2024-04-18 14:44:13 UTC	117	IN	Data Raw: 38 33 38 35 30 33 3b 35 30 63 37 39 31 30 36 3a 33 30 38 33 38 36 31 39 3b 6a 61 35 63 34 32 34 39 3a 33 31 30 30 36 32 34 34 3b 68 33 65 64 34 31 36 31 3a 33 30 38 39 31 37 38 34 3b 61 62 69 30 67 38 31 37 3a 33 30 39 35 32 38 37 35 3b 61 35 34 66 61 35 37 34 3a 33 30 39 39 33 33 34 39 3b 64 69 66 32 32 32 31 39 3a 33 30 39 36 30 34 30 32 3b 22 7d Data Ascii: 838503;50c79106:30838619;ja5c4249:31006244;h3ed4161:30891784;abi0g817:30952875;a54fa574:30993349;dif22219:30960402;"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.17	49741	23.63.206.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:20 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-18 14:44:20 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=231568 Date: Thu, 18 Apr 2024 14:44:20 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.17	49742	23.63.206.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:20 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-18 14:44:21 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=231553 Date: Thu, 18 Apr 2024 14:44:20 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-18 14:44:21 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.17	49743	40.68.123.157	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 14:44:48 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=aXX2RwtUOhHvEVP&MD=7cN+z9CO HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-18 14:44:48 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 30b17adb-e1f9-4089-881d-2bc625bc7210 MS-RequestId: e7e66cda-df4b-48d8-b25b-fb3ed1064b42 MS-CV: YKmaROMKYkGhYcLo.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 18 Apr 2024 14:44:47 GMT Connection: close Content-Length: 25457
2024-04-18 14:44:48 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-18 14:44:48 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Target ID:	0
Start time:	16:43:56
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://wechatunsuscribe.secure.force.com/
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	16:43:57
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2172 --field-trial-handle=1920,i,4531950953507525100,6941954018789879291,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff7d6f10000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://wechatunsuscribe.secure.force.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Static File Info

Network Behavior

Network Port Distribution

Windows Analysis Report
https://wechatunsuscribe.secure.force.com/